28610fc021b704a88948c6be057068ff2fc7f304d55a8f2c6db00747ae6280dc7e6c221750e43312927dfe351540d7564ba518631c968e7c44d0c064eebdfac7f7d4354f5dd6f"}, {0xdd, 0xc6, "6f5aca8e68b9a69d11c9ecd2ba636db05cd55d180f7d313df50a28ca2b59c974f6658a1f88535fac649e4c08d60119f381638067fef368f848426c973fe3f4915ad8bc23719c1f35b3c06ee8558da0dc219b51d8e5ba800d1f1613c7e0561806b1a05a0318020ff1e2b043c568e8a63068bc411461817bdd21a558317960aa9833f0544c874a43847214ddf4ead39e2b8a9a8a9dc387ac8632e1b58647dcb18fe44a35565a988c5ae3239c7baa977bce75e485669d9b9c533b63d0b55bf1f6b0580df7dc97f9"}, {0xdd, 0x5c, "d0eac95731343976606bfea7631237f5b7f269461535e7bb6eda988eede9487e4477bbcbd0f61d6609c38ac42862bb5fd1d7fb90259b6279dbbc1c44f09b824f520792a802d52cea6e693a397fedb52d87a5fb6ce9db7ce257a7d632"}, {0xdd, 0x52, "2e5460fe63ce743365565306c51794cca5233ce7471fce3edb9775f9d8022648d6f6e0b97b6720646149c00c40f31c41a4327ffca6f7d086493ed1acbce932ef6c3203720e9a2376f545fc1287e8c2d37283"}, {0xdd, 0xad, "a7b05a9d725857ffd19d694bc3ae702fc21a06dd74cac05a48d8f8538aec3c99c0a49ba6916240468cdca4bb37938f913449608b2d4e1c9fc42f03ab76dbd9445d3f3b44ce724a611ab2355e198a2a8e8b5defd395ba5751d337bfc3d08f780d3a3e39b8680154688dabcc751149fbaed6603ca09e27d0d88af1fc143698edc83638360cce775119a1776054d0678a2b98d9447e665d22cfe676ab7e516d78dc31976297cac570ca2b7b6de67b"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x2}, @broadcast, @broadcast}}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4000044}, 0x84880) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008890}, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r3, 0x2f, 0x3, 0x9, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x20, 0x20, 0x8, 0x4}}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x19, r7, 0x1, 0x5a, 0x6, @broadcast}, 0x14) 04:14:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x400) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x44) 04:14:06 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) close_range(0xffffffffffffffff, r2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 872.922290] hugetlbfs: Bad value 'm' for mount option 'size' [ 872.922290] [ 872.941414] hugetlbfs: Bad value 'm' for mount option 'size' [ 872.941414] 04:14:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50032, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) 04:14:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xb, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x400) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x44) [ 873.166538] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.166538] 04:14:06 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) epoll_create(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) [ 873.207669] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.207669] 04:14:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x10, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 873.395412] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.395412] [ 873.401046] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.401046] 04:14:06 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES64=r2]) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000003a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001700)="6c5d5d16ec4cb90f10964650f11fed5ce4deda21700ba1e6632d890cf9f37bcf8a635e93368053d70c91ae36dd4a2979bba00569695e3430f582cc72353c821dc62bd4331f9dc45506a71c3a6f63b2e8abb2efb5a67c594e642311dfca7f1c28596470a11f284290ac1390d881a6b1fec6db8acb38b15da000d65497567f6088a6622f5b5185c0bf1f2fd336aabd608a13e5525f20fe6cd655c820ef3de46914875026be94204820c15bc290b3c465006c8da7", 0xb3}, {&(0x7f00000017c0)="6bf3cbb38d6e531d9265c8ee44e233a65992d5d1b35f71ed409ca812c637b197aaece441ec3e43de20429b0e4815c177e8faa86d794b00", 0x60}, {&(0x7f0000001680)}], 0x3, 0x0, 0x0, 0x20000000}}], 0x1, 0x4800) r4 = openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) readv(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)=""/30, 0x2b}], 0x24) r6 = socket$inet_tcp(0x2, 0x1, 0x0) close(r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x60050, r4, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000001640)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="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", 0x1016, 0x8010, 0x1}, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x80000001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r8, &(0x7f0000000080)="01", 0x292e9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058094a000000000000000c00580048000000000000000c00580050000000000000000c00580013000000000000000c003ef5de3093f13ea333a6ce896d58001c000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x48880}, 0x4) 04:14:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x300, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 873.559856] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.559856] [ 873.567295] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.567295] 04:14:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x500, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 873.700149] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.700149] [ 873.711554] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.711554] 04:14:07 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000000c0)=@keyring={'key_or_keyring:', 0x0, 0x2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/30, 0x1e) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_setup(0x8d8, &(0x7f00000001c0)={0x0, 0x404e, 0x0, 0x3, 0x25c}, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000380)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0xf871a000) 04:14:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x512, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:07 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 873.919368] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.919368] [ 873.941845] hugetlbfs: Bad value 'm' for mount option 'size' [ 873.941845] 04:14:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) close_range(0xffffffffffffffff, r2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xc02, 0x10) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') openat(r2, &(0x7f0000000080)='\x00', 0x81, 0x127) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:14:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x600, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:07 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syncfs(r0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x6, 0xd4}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000540)=""/138) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0xb, 0x0, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r3, 0x27000000) 04:14:07 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 874.158277] hugetlbfs: Bad value 'm' for mount option 'size' [ 874.158277] [ 874.186265] hugetlbfs: Bad value 'm' for mount option 'size' [ 874.186265] 04:14:07 executing program 4: sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000045c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004580)={&(0x7f00000001c0)={0x43b4, 0x0, 0x201, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4d}, @NL80211_ATTR_CSA_IES={0x4398, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x5, 0x1f, 0xfc01, 0xe8, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x1]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x10e, 0x80, [@link_id={0x65, 0x12, {@from_mac, @device_b}}, @peer_mgmt={0x75, 0x16, {0x1, 0x4, @void, @val=0x18, @val="6ed493f9c35fbb1d719bcd57afca57ab"}}, @challenge={0x10, 0x1, 0x75}, @peer_mgmt={0x75, 0x8, {0x0, 0x9, @val=0x8a14, @val=0x22, @void}}, @random={0x1, 0x3a, "e6c3d46183e9c99bfadffdc4edf394222a1a9103556ddf0511385274de7492fd9f4c88bd0bdadc4d6cb0dc1e2b650446e296c86dc0c0a7c5b3c3"}, @random_vendor={0xdd, 0x93, "c81d8d5beace145955b09c2bed0ee51c24fcb0a5815da0e309f3e721acbc1485a50348f5a729496e4ff1faf2787b9e1a1b1e9c9ee645b50806476ba801a698d8b67d04c47f7d13ebb574a015b4a0d2001bc0d6a43b1242fcaa1c7e863f4de12e6c76cf5d61a8732772c6091651d94d736af144a94f702a1efd985cef862dd465b01f667b8834450f5d570118ffabf35f08e692"}]}, @NL80211_ATTR_FTM_RESPONDER={0x22f0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xc, 0x3, "5d51d16c68587747"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb8, 0x3, "035e88e12f205fd601639108401ba4166ac13df0c64c19f6a91c8c306b0e9e94465c1eb4609dc067614cdb90922fc65e3ffa5a0d70eb9751f2fc6b891ce13a9e952ee3b51dde4c5c49ffe613ceffe6aa99f3cb2d2ea3ac5f016e48a771215d7f5c753f35965abf6b4d210ae4dc66c8afd20a308ceb4ff191942c37d01d57531d54a18df3b473ccfb6e375fa8009bfa0e2b7d6ac9cdef27d0d9bd447715be712ac57f2ac33b4159bebb86a9ebb1aac9f3e433e222"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xcb, 0x3, "d442252e1d1df22361a38559156d61b4d1ce8b8bd38cd8c022ed077006f3aef9e3c1d8c440138ae419c75204ab6da478fe3aebaf3c9d6ef8f8b80989656d49a714c19803b14bfb617ea06cafdb3a951ea1a2bcd8baf3af551bfebaec5a2d80b9f8729470ce5759900b47cddaee95924d9cf7b7f1b20f10abc7a00a068e27308b5d0453e16379385f4a3470122fc43a8aa759f61c7c370fd7c50ad959acbb27c4195a399c11e54df3c3db9bc10e8242f864269a404f7ff85312b7afd1d2dbd187ca00bc3b650817"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x62, 0x3, "70264a48f64b58b28fdd338e0ed1544263c7537b86de3e25d7fef0a6edb98812da818573bf621412f7b6f498639ce6309750bf20eb236ab95680ef84dcdd7ecd5eddce66edf70ef1815462e4823269088069a633555f5d1acc4318d1662e"}, @NL80211_FTM_RESP_ATTR_LCI={0x52, 0x2, "22404397887d040e1f6fd9f0a8007c90e4483de7710d0100a341b0f979bf5abc6426aa7d3324de93853041a6b3bcb615ba4bf8a1f1c727e6a6757111b4f434469e758eca85608d6cb4b262cfb6f3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x91, 0x3, "4a5db72896499ba3f301ca7fc713404c3827aea31797dbd1298b92269fd12db408c48aae869de0ee282502a64e72d62e30e19c05e0d150fa6ee1821b0e2d5c765a2b769d359f92987007a6716291e9eca4720dbf2aabbdbbb43a207c73e7dca826c301fb43124d9a698270942945efda6cad61828c3a9d5c9014f78cd884f865107c4425eea47c9b66b7ae27ce"}]}, @NL80211_ATTR_FTM_RESPONDER={0x198, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3d, 0x2, "5fcb2f21c68911b29ec2eceb70e72e059274d0d79c2f89e216a80ae677dc3b7af6e82e31e86e2300ad0bf563bc78d6a5b13680aba031477ae5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x97, 0x3, "43c77056858219df46af08688e85a0451f857ab1e915ed177c64c0add7f51e62b6a155697a55beb95ed0732ef2b9529e23ebfe03b1a79f508ffb9405cce92f4d4defee62481f34c31c86ce455045d47096c5d8e0ad245abd88e1887e83201b0eae4581b50eee1b4dc5c3c32f38fd98c3030a7f8d49bc1833eb9e8ab6d3a28981f612a966f1a6d2a319b1dffdb41920c739f2c4"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xad, 0x2, "277becdc88670a448755ca41e1040f25aae0e2a37eb251581114a96b6e77a1bebbcea2c93dfebe2f98dd5315651567724e2554dc916576c555b79cbc982e7da5daf14e72adddc79484545497fecb164fe0e38ffc322604877eb014d8c3d4a78295f085c41cd23b08b482e7c619ae9be3e4fe60ebc892824f43468297cb50fcfa3561f93e1f59789ac498aa07d1f0bfd602908594f8000454e9504a08bbefc1300fd9ca8013cdf6ce4f"}]}, @NL80211_ATTR_FTM_RESPONDER={0x314, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x8b, 0x3, "8c00c7549accce3cd5bcc42195aad934a60f21c2a07e1d7bb7429627e4e6530ec26e2310e6a67e4856b34d1c3d2c75f8dc282d04e61edb406082144bf4f2f1c585eab2b7b500494ceffc0eb9356bd685825ec3a646f337dff9b48697f922e9ce5ea37637a0feb0f6b77f39aeb84351e94aef14e242feb91b792ea24c7b7683ddeaba71a60b4004"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc4, 0x3, "e88fd64c258ebcb52f23491e1abbb8433781626939b54b8dea65d0dc23b9bbcc7b4a47aa5af478d279f741318b441d72ce4f50f43d99c5196620aab2051f8312e991d4bba02eb1d9265d2aa1b1c8d935b058e26d5042e6bdc445b5fd34ad37ada841bc14a4a0369b633550494f8ca3c353a13ad7994f0fad95267138d109fc50b0518c397615b46b16308eeaadb1e3834b4b2e9e2065e07cff4f91aaa9fce9c607d251117416c26075a1134e229d7d698a1c635a254862c702a5aa86b1c7e9bc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xce, 0x2, "721c29c8e4b0583a904cdef40bb7fa0f32b11f5bfc2c685ba85f8f6b8c9d3bad8b21c330af55fb503b95e7855baf98192d47c214b56947efd041bee893a5529e32b6d5282068474b809453c2b38cd2efe4c4e2332f1409ca737e3da1582b47d5eb49649cae1fc8fafcb2068c7be566b9d34affec14978d4eb26c31a26c7c86bf1a776da966c6223a3266836876e3f5581e57a3ca842205bf34e4c63b115c448014848d1b3da474e2192b1ee6b03cf924f0d122934817be0d12a10491955b3f20d4b4eefbb09b1a1fbcc6"}, @NL80211_FTM_RESP_ATTR_LCI={0xe3, 0x2, "e7a7e7447d8a6b8816bb2979260720816980ff794c9cca5116c80013aa7e5d020f53ad57340b2f3150f398d831d2e82ee2bb59b5ce1243ca6d86a9d8447ab78e8f94b2d3a11856685c53ed5c11876f3da5599605ae0aefd77fb84635e9d4f3eefba85fefa5a731247e407c06619c101a2d793cb4057bee31a188f7bf31e0944eacecec40ffa5eaa50f27da47fa938687767cbd051dfe72ac40aa1e3b514fe3c60e9a01a7ee986ab70fdef50445975f945b1fc5766ff18147c0597872a78393e718943856393d1247c8ee1bb38cc0021013d79adb4ce68b3f758072b1a0e238"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x2, 0xffff, 0x8000, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x32, 0x7f]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x33f, 0x91, "bb08b06ff24c646349fbc7ac8fb21600f96fe2c9815fa12dfea20aba38de0c09075a4bbae021f1c009d36464407217fe1fcfb677cd3dcfedaba231193a8f209ed7001c63ed4119bbd7fd23168b7911e90c0902566ce0087fab0b22c1e21635c66ccf212041adfd34a103ab076bd5b4d0f158e07af1ed1be5fff4a2b93995d7ba3186591b0ccf16abd98cfc6ee8d1cab1fce9e8a54df76450b4ddb08cdc1e347bdfb6e151887f410c17f922c69eeebd58bf808993db1cb1cf405eafe6d4f60acaef55b0ffbdb221cadce7b723b19e6cff292d7f4b81dd1e797e44ab41ce69fa598770e8bf68d87a27e638ff29bcad002e9eaebf8921d1d616634d706e044c8b61baa2202da090388a4a035c18dabcbc6b4b2febca9a113214a0421fb87eb1455f18b77df46b85f136893dc2de6f26dabca522790780391cde6e05b34b0c27b795888a57cc32f7b6f5f4cc239a9939086c3aa252322ced55c43a35ff326939d046f53b3b534a05b83951943a057c3bcc03d9b0998ea6ea8642ae58923a9b1da956e948c03ccddf4a2c6c6e324812cf9a86c5215dd8d35305ff7fcd7bf81747c170582d0d67e6c9fdc5ecc4f8de0518d33af6cee882da803e73ecac47ceb28a2fbcfda92698bab664ab62c7e5266392fb28c86202f1aadcee7319c0aec6bdb2465a9893e58f2a76e16310ddd9076094df694b09b7a818e14a21ab791f18bef504396bb0f588773c8563d6655d84459e27d84746e195ad1242d96c836b96e82ac622f09afec25b98a911060ec689c6c3a128f824b324cc26f0a3769882023636fe6642fcddc77520ba74f6bdb25b0ce9bf54f5814521c9abe575d1f821533cc8e0c475eb11447f90519ebf01e28ee48039c9b5d705bcb3eb32b7dc5c4f73e48945d45e256a7ab098aa901513bdd2adb31bc8269fc08e7a9dccf6ce9e876dd7336d7286e1854b1aed0fddfca2e306712931ce795a847a47ee48a9d10f85daf53bdf3f0a18ee2930d8b4df7797b4b2a3675b2014de231886d59c639f05801ebb3b4c2dae217d0fc1c087c8ff162f969888634343813932868ec79541c06ab6269510bf202c5b402859ed621acd40bd067b4dc3baf543d1a5280bc5c1864c327a4f68162df8469e48cedd1ec123a61c35542aef4f70e67f9f79112856b24f"}, @NL80211_ATTR_PROBE_RESP={0x108, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x3a, 0x80, [@peer_mgmt={0x75, 0x16, {0x1, 0x401, @val=0x6, @void, @val="1daf0d8320ea7055d07092c1d7ab5bf9"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7f, 0xb8, 0x1}}, @peer_mgmt={0x75, 0x16, {0x0, 0x1, @void, @val=0x21, @val="b93e25989f359e6ba664b8e44575e987"}}]}, @NL80211_ATTR_BEACON_HEAD={0x1ef, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @random="de5a1e572ebe", {0x1, 0xff}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x80000001, @default, 0xc020, @void, @void, @val={0x3, 0x1, 0xb0}, @void, @val={0x6, 0x2}, @val={0x5, 0xcb, {0x3, 0x99, 0x7, "869ebd161fe270e6e0453a924a938e90b155eaaa83c790b894fb82762ac691db2f2647e37193d05264c0bee69e8a0776f32ad7139cc55900fa4e51c66a94ad72c48a5627195e4f3c5b41400becb95a5054dfe409230e16b650a85a3539896ed338ef428c04d30100cd04fd33af53d37f5238d49b1f92cae0556e1db4987648d27345e87bee510455cae5accc8c58c97fb405db6faca2334b19b7d0468c750b45d225a4d7dcf8d5bfd6e54b8f6761501de9c5218489c3e07ae6056603dd2208848f85f0bab6b97fc5"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0xa1, 0x7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x8, 0x1}}, @val={0x76, 0x6, {0x81, 0x3f, 0x40, 0x1}}, [{0xdd, 0x9e, "94be684568782d4917ff672e6ba73e3c43574d9c47dd591e9c96eb04192b8343136c0f569f4f1025bd71569d758ff587fe2f784713764e0356c3062b89427b8b9b59177308947b95ba8479ac388543c0b06216e64d74c42444a541b2db582e6115ae51406711ad251d41728f9f89b5000186bc556b853d6d0856646daa7b9504409bc719936205ab4439923bce04334199257dffe738d7f8b1d16b85eb88"}, {0xdd, 0x2b, "1e4005dc574e732ac516d0a1fccbea86d911b3aaa6d59885e7671087f716c589628513152db20d3d9ec3f3"}]}}, @NL80211_ATTR_PROBE_RESP={0x778, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x364, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf8, 0x2, "58f85cf8480daa676dc32cbc88917fd384bbf860e8e835013bf3bd9f1b71585a80bfc2f090b563706e7af71d7e222b9bd8f447d808d6fecaa668663d0f51e7fecb7bfbb9647c89bd1281e0d67135de976525284fbfeea3aef72283479647334ff47e3749fa9ea01290172b6143f75354fdd3ed5e863520d6b1d8e0ae6768435f579adc200c94e71034f3c045e9fdd6c8d4e247a9fca07945b7e95f7d0e98e0f31c879ecc177671d16973454d734129bfe7de644f35a97ddf2e312db5372fa3b8115235ae30ed7171ee5f9bdd64b822e7ec1c1a0d58801a3fe305ee62c13301cac3a52cc2ade75bd9998960e61f10a42c2d87533c"}, @NL80211_FTM_RESP_ATTR_LCI={0x28, 0x2, "e2c4143e90a979c03501896217ea176041899cb34fb24dbc90ca978e44f769d06a06a262"}, @NL80211_FTM_RESP_ATTR_LCI={0x88, 0x2, "56b61456864bff4cd87d7f04a3c09242fc0a0b86b5b537cf5e747389745d8278ca5662b01e26d9e55a5f6ef1769c69f2af8a413a009ad8b012d251d049106e34cbc206a49434e3952739ee641b51d33baeef4df49d4d28d9bbbb7765d95cfdb80749c00191a604b5def33c64bac557eb7a6585292c3ea830b41dea0fdbcedd668f207999"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xcb, 0x3, "b70dfe1387fa0b962ee1db185075a1e17261e05ef32bf5963597d0571e1d81604e4dbd02124e7c934ba4e7aac3c2147b52fc637daf2f70117ee2a2ebe4a4a50facf9723a9637c655ca535c580f22b2bd62aece720c2d855ebf0a0da7f3a4d9f344cf32ef5ab0f7bf4347c18bc4e6a0f3fefa047d430aeab7896b94a7b6ed082a93a932bd4b7da65bd49eb38b49e8d5856e7f717f3bedb41cc714a9c66a27d9ad684309eb60364c996373f1d4b8ecb9c354c6ead394b20059f1affd2d56614191a6d68c4270561d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xe1, 0x2, "4264f0125fbb6f946aa7fce65650592034068f06146669f7e31307c5f207dfb57fbb68032398ab0d141a6693b55034041e9c5532cf71bbd2113d05e416ac8b365d8299aca9bff8067a946cf4367034cebc7960156ce770b0068585c4bfa6e89a221ee264a37f98a7f0acc0ea4426deab27abcfea5636cb0269f33c8603c8801006aead382734c7a2a58363db7d498c33c242d7033dee3c3b5c2ad47cac5622689d8a9d683031a65d69289ec2daeb171e8a9b8b05f76c71820978200af5564e5e80f96401346d27147268f97ab29c06c5bba5f1fad19b398b8b7e656a57"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x14, 0x80, [@mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x0, 0x7, 0x1f, 0x4}}]}, @NL80211_ATTR_FTM_RESPONDER={0xb8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xaf, 0x2, "7c8584362fb5203e6efc991571a664c81b6f70cbaddb99ff5cf1b6328d42dd3d7275b768a349a82e45a93d243284bd26edb764ff60a239ea5e5bd764a59f673977f44832fd5f710c71e6a1470c20e0354fe35a0fcc3287c4c32117fd8d7466e579c2287a6b3f859d84688ed0bd41d7a4caaaf91ff5bc11b6cc4984a60072c019baf49301dc080b1245dc19024d17174764d63d5da7805eb8d80d9a0e465a58de8b22ca695935b6191ee80d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x866, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x30, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x28, 0x3, "54558ef39a414feebe42c928525f34dfe59bf3982964dfed3e6919c4e2153898471b556c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}]}, 0x43b4}, 0x1, 0x0, 0x0, 0x801}, 0x40010) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="dad0bca55e7c528481f9fd286610a8b39cbeb5af8c71233b908a85037d89f298b4567c599360fd400b747030872a9bf9b33a4bada5d207b6b875c93317b35972b0a0", 0x42) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./cgroup/cgroup.procs\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:14:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x700, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 874.368101] hugetlbfs: Bad value 'm' for mount option 'size' [ 874.368101] [ 874.397408] hugetlbfs: Bad value 'm' for mount option 'size' [ 874.397408] 04:14:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x900, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:23 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000000c0)=@keyring={'key_or_keyring:', 0x0, 0x2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/30, 0x1e) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_setup(0x8d8, &(0x7f00000001c0)={0x0, 0x404e, 0x0, 0x3, 0x25c}, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000380)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0xf871a000) 04:14:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xfffffffe, 0x3}}, './cgroup/cgroup.procs\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = gettid() rt_sigqueueinfo(r5, 0xa, &(0x7f0000000140)={0x7fffffff, 0x9, 0xfffffffe}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x280001, 0x0) dup(r2) r7 = gettid() rt_sigqueueinfo(r7, 0x0, &(0x7f0000000000)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) dup3(r6, 0xffffffffffffffff, 0x80000) write$cgroup_pid(r6, &(0x7f00000000c0)=r5, 0xffffffffffffff7e) 04:14:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) close_range(0xffffffffffffffff, r2, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:23 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:23 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syncfs(r0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x6, 0xd4}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000540)=""/138) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0xb, 0x0, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r3, 0x27000000) 04:14:23 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:14:23 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) epoll_create(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) [ 890.630192] hugetlbfs: Bad value 'm' for mount option 'size' [ 890.630192] [ 890.692133] hugetlbfs: Bad value 'm' for mount option 'size' [ 890.692133] 04:14:24 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:14:40 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syncfs(r0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x6, 0xd4}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000540)=""/138) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0xb, 0x0, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r3, 0x27000000) 04:14:40 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:14:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xa00, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:40 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:14:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) close_range(0xffffffffffffffff, r2, 0x2) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x248100, 0xe5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x230) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) r3 = epoll_create1(0x0) signalfd4(r3, &(0x7f0000000080)={[0x100000001]}, 0x8, 0x80000) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x40, 0x80000001}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './cgroup/cgroup.procs\x00'}) utimensat(r4, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0xfffffffffffffe56, 0x0, 0x8, 0x401, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xe27}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4000000}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8000000}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000050) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 907.487498] hugetlbfs: Bad value 'm' for mount option 'size' [ 907.487498] [ 907.491144] hugetlbfs: Bad value 'm' for mount option 'size' [ 907.491144] 04:14:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xb00, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 907.674350] hugetlbfs: Bad value 'm' for mount option 'size' [ 907.674350] [ 907.716402] hugetlbfs: Bad value 'm' for mount option 'size' [ 907.716402] 04:14:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x1205, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 908.185448] hugetlbfs: Bad value 'm' for mount option 'size' [ 908.185448] [ 908.199614] hugetlbfs: Bad value 'm' for mount option 'size' [ 908.199614] 04:14:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:41 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:14:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) close_range(0xffffffffffffffff, r1, 0x2) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 908.547110] hugetlbfs: Bad value 'm' for mount option 'size' [ 908.547110] [ 908.578361] hugetlbfs: Bad value 'm' for mount option 'size' [ 908.578361] 04:14:41 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syncfs(r0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x6, 0xd4}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000540)=""/138) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0xb, 0x0, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r3, 0x27000000) 04:14:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:42 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:14:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xe0ffff, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:42 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 908.863446] hugetlbfs: Bad value 'm' for mount option 'size' [ 908.863446] [ 908.881697] hugetlbfs: Bad value 'm' for mount option 'size' [ 908.881697] 04:14:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs/../file0\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x40010, r1, 0x7d6a6000) 04:14:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:56 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:14:56 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:14:56 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:14:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close_range(0xffffffffffffffff, r1, 0x2) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 923.480964] hugetlbfs: Bad value 'm' for mount option 'size' [ 923.480964] [ 923.492053] hugetlbfs: Bad value 'm' for mount option 'size' [ 923.492053] 04:14:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x2000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x8000, 0x5a) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 923.615408] hugetlbfs: Bad value 'm' for mount option 'size' [ 923.615408] [ 923.623449] hugetlbfs: Bad value 'm' for mount option 'size' [ 923.623449] 04:14:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:14:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r4, &(0x7f0000000080)={r0, r0, 0x6fdaffbb}) 04:14:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x3000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:14:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 923.809899] hugetlbfs: Bad value 'm' for mount option 'size' [ 923.809899] [ 923.866423] hugetlbfs: Bad value 'm' for mount option 'size' [ 923.866423] 04:15:11 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:15:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_io_uring_setup(0x6a0, &(0x7f0000000100)={0x0, 0x132c, 0x4, 0x2, 0x2c9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:15:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:15:11 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6}]}) clock_gettime(0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), 0x10) 04:15:11 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) 04:15:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:11 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 938.506337] audit: type=1326 audit(1670213711.904:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6847 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cb44bdb19 code=0x0 04:15:11 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:11 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 938.636545] hugetlbfs: Bad value 'm' for mount option 'size' [ 938.636545] 04:15:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:12 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:12 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 938.661701] hugetlbfs: Bad value 'm' for mount option 'size' [ 938.661701] 04:15:12 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:15:12 executing program 4: write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r0 = open$dir(&(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x4e8203, 0x10) openat(r0, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x2, 0x1) 04:15:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x5000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:15:12 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 938.929760] hugetlbfs: Bad value 'm' for mount option 'size' [ 938.929760] [ 938.953612] hugetlbfs: Bad value 'm' for mount option 'size' [ 938.953612] 04:15:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x6000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 939.226316] hugetlbfs: Bad value 'm' for mount option 'size' [ 939.226316] [ 939.229005] hugetlbfs: Bad value 'm' for mount option 'size' [ 939.229005] [ 939.336619] audit: type=1326 audit(1670213712.734:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6847 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cb44bdb19 code=0x0 04:15:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(r1, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2002, 0x98) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 04:15:32 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:32 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:15:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:32 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:32 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) 04:15:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x7000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:15:32 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 959.445305] hugetlbfs: Bad value 'm' for mount option 'size' [ 959.445305] [ 959.469321] hugetlbfs: Bad value 'm' for mount option 'size' [ 959.469321] 04:15:32 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:32 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:32 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:15:33 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) 04:15:33 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:33 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:33 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 959.883736] hugetlbfs: Bad value 'm' for mount option 'size' [ 959.883736] [ 959.932881] hugetlbfs: Bad value 'm' for mount option 'size' [ 959.932881] 04:15:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) 04:15:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = fsmount(r0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './cgroup/cgroup.procs\x00'}) write$cgroup_pid(r2, &(0x7f00000000c0), 0xffffffad) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x39) 04:15:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x9000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:15:48 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:15:48 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:15:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) pwrite64(r2, &(0x7f0000000140)="2d8c23ce17ea16fa1bf273216e114c1e32a3b32794ea2c57d6ec0eb1d5898f9117c14c2e3499d4a9427082f35baee8456a56aebaaf3b5a34364e853612de3b6e391881067dfc69d5fad379102a6d0567caff65fc72a677c88cbe6e6d2c8a2ca881fbe6eb0088934eb11e", 0x6a, 0x7) r3 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 04:15:48 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:15:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) [ 975.621423] hugetlbfs: Bad value 'm' for mount option 'size' [ 975.621423] [ 975.637286] hugetlbfs: Bad value 'm' for mount option 'size' [ 975.637286] 04:16:05 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:16:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) 04:16:05 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:16:05 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) 04:16:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs/file0\x00', 0x2, 0x71) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:16:05 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:16:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xa000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:16:05 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:16:05 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) 04:16:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xc464de144f5d6227, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 991.845254] hugetlbfs: Bad value 'm' for mount option 'size' [ 991.845254] 04:16:05 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 991.862431] hugetlbfs: Bad value 'm' for mount option 'size' [ 991.862431] 04:16:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xb000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 992.012334] hugetlbfs: Bad value 'm' for mount option 'size' [ 992.012334] [ 992.021616] hugetlbfs: Bad value 'm' for mount option 'size' [ 992.021616] 04:16:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) 04:16:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) 04:16:19 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:16:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x10000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:16:19 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:16:19 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:16:19 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:16:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) finit_module(r1, &(0x7f0000000180)='/dev/bsg\x00', 0x2) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x650000, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './cgroup/cgroup.procs/file0', [{0x20, '#! '}, {0x20, ',,/,\\'}], 0xa, "9461e3c5fa03d3cc05f4971e153a13611ea5ef522d6241d54e8bd858d093ac8051899e2eda1b31d5a52b0282057d365a6ea2c23e8a860f639b93281e65df64062bfc9eb79d78160f7ac44b705de3bd5850b52a92d5e5eb0a2062dac44e4d4476e30ff4483018632074877a5f79f205fd80b3cf6998f13e9c9e9bb84da5fc901b98fdcdcf6966b644522c7460f01a34d1817b377acf5b7da60c5d759a9eabae12b6dd87442762d8a150097161a65253579310451d39b45224af7467590bfa87424af9d6cd28038f7466d91b1a3e2b34a8512a5e946e1efe1294e753152ea354772fcb4969eef383d4"}, 0x111) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './cgroup/cgroup.procs', [{0x20, '\''}, {0x20, '/dev/bsg\x00'}], 0xa, "f500f94726ce861a249397f0cfd5fce02ebb34100076601e93b7124012a762ccf92a823a1975"}, 0x4b) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x2) [ 1005.857985] hugetlbfs: Bad value 'm' for mount option 'size' [ 1005.857985] 04:16:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) 04:16:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) [ 1005.878499] hugetlbfs: Bad value 'm' for mount option 'size' [ 1005.878499] 04:16:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r1, 0x75, 0x7, 0x7) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x20, 0xfff, 0x9, {{0x33, 0x4, 0x2, 0x3, 0xcc, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x4a, 0x2, [{0x2, 0x4, "4b13"}, {0x2, 0x11, "b889142f1d16cc7f965bf9b221c063"}, {0x0, 0x5, "1a4c32"}, {0x0, 0xc, "364dad01d4522f491e82"}, {0x1, 0xa, "d9575d52485b37d5"}, {0x0, 0xa, "d6ecbb7303f2888e"}, {0x0, 0x6, "bd165337"}, {0x5, 0x4, "9cf7"}]}, @rr={0x7, 0x1f, 0x64, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @multicast2, @local, @private=0xa010101]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0x9, [{@private=0xa010101, 0x400}, {@broadcast}, {@multicast2, 0xb3}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x5}]}, @timestamp_addr={0x44, 0x24, 0x6c, 0x1, 0x1, [{@loopback, 0x135}, {@remote, 0x5}, {@loopback, 0x305}, {@multicast1, 0xa33}]}]}}}}}) sendmmsg(r1, &(0x7f0000001480)=[{{&(0x7f0000000280)=@xdp={0x2c, 0x706f0def7158b28e, r2, 0x22}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000300)="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", 0x1000}], 0x1, &(0x7f0000001340)=[{0x110, 0x102, 0x3, "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"}], 0x110}}], 0x1, 0x8800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='#:%*:{(\x00', &(0x7f0000000080)='./cgroup/cgroup.procs\x00', r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) 04:16:19 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) 04:16:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) 04:16:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x12050000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:16:19 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:16:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) 04:16:19 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) 04:16:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 1006.201393] hugetlbfs: Bad value 'm' for mount option 'size' [ 1006.201393] [ 1006.238310] hugetlbfs: Bad value 'm' for mount option 'size' [ 1006.238310] 04:16:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) 04:16:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:16:34 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:16:34 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:16:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x88d4) 04:16:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) openat(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x60) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 04:16:34 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:16:34 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = openat(r0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x250001, 0x42) inotify_add_watch(r1, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x80000100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x220) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x7, 0x40000) openat(r3, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x361c82, 0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0xfffffdef) openat(r2, &(0x7f0000000100)='.\x00', 0x0, 0x31) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:16:34 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 1020.865077] hugetlbfs: Bad value 'm' for mount option 'size' [ 1020.865077] 04:16:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 1020.891118] hugetlbfs: Bad value 'm' for mount option 'size' [ 1020.891118] 04:16:34 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:16:34 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './cgroup/cgroup.procs\x00'}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(r1, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0xa1) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) 04:16:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) 04:16:34 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:16:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:16:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:16:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:16:34 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) 04:16:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) 04:16:34 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1021.253673] hugetlbfs: Bad value 'm' for mount option 'size' [ 1021.253673] [ 1021.270666] hugetlbfs: Bad value 'm' for mount option 'size' [ 1021.270666] 04:16:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x88d4) 04:16:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xffffe000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:16:48 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:16:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x480, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 04:16:48 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:16:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) 04:16:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:16:48 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:16:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) [ 1035.444473] hugetlbfs: Bad value 'm' for mount option 'size' [ 1035.444473] [ 1035.455216] hugetlbfs: Bad value 'm' for mount option 'size' [ 1035.455216] 04:16:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) 04:16:48 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:17:02 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:17:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xffffff7f, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:17:02 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x4c4502, 0x14c) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145842, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r2], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r6, 0xffffffffffffffff, 0x0, 0xfffffdef) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r8, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r8, r7, 0x0, 0xfffffdef) poll(&(0x7f0000000100)=[{r0, 0x180}, {r1, 0xa}, {r4, 0x18}, {r5, 0x340}, {r0, 0x401}, {r0, 0x1}, {r0, 0x400}, {r6, 0x80}, {r0}, {r7, 0x8000}], 0xa, 0x80000001) 04:17:02 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:17:02 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:17:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) 04:17:02 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:17:02 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) [ 1049.613226] hugetlbfs: Bad value 'm' for mount option 'size' [ 1049.613226] [ 1049.635271] hugetlbfs: Bad value 'm' for mount option 'size' [ 1049.635271] 04:17:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) 04:17:03 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:17:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) 04:17:03 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:17:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:17:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) [ 1050.008370] hugetlbfs: Bad value 'm' for mount option 'size' [ 1050.008370] 04:17:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) [ 1050.041321] hugetlbfs: Bad value 'm' for mount option 'size' [ 1050.041321] 04:17:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) 04:17:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x88d4) 04:17:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:17:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) syz_io_uring_setup(0x7b36, &(0x7f0000000100)={0x0, 0x7346, 0x0, 0x2, 0x2ca, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) 04:17:22 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:17:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) 04:17:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) 04:17:22 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:17:22 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1068.735657] hugetlbfs: Bad value 'm' for mount option 'size' [ 1068.735657] [ 1068.761976] hugetlbfs: Bad value 'm' for mount option 'size' [ 1068.761976] 04:17:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x400, 0x2) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:17:22 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:17:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) 04:17:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) 04:17:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) 04:17:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:17:22 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1068.979817] hugetlbfs: Bad value 'm' for mount option 'size' [ 1068.979817] [ 1068.989042] hugetlbfs: Bad value 'm' for mount option 'size' [ 1068.989042] 04:17:40 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 04:17:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) 04:17:40 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:17:40 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:17:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) 04:17:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) 04:17:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r4}, "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"}) 04:17:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xe0ffff00000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:17:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) [ 1086.802964] hugetlbfs: Bad value 'm' for mount option 'size' [ 1086.802964] [ 1086.828039] hugetlbfs: Bad value 'm' for mount option 'size' [ 1086.828039] 04:17:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x88d4) 04:17:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:17:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) 04:17:40 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:17:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:17:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) [ 1087.079438] hugetlbfs: Bad value 'm' for mount option 'size' [ 1087.079438] [ 1087.097205] hugetlbfs: Bad value 'm' for mount option 'size' [ 1087.097205] 04:17:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:17:40 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 04:17:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:17:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:17:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) 04:17:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:17:40 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) [ 1087.454349] hugetlbfs: Bad value 'm' for mount option 'size' [ 1087.454349] [ 1087.482857] hugetlbfs: Bad value 'm' for mount option 'size' [ 1087.482857] 04:17:58 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:17:58 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:17:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) 04:17:58 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 04:17:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:17:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x88d4) 04:17:58 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:17:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:17:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) [ 1105.313461] hugetlbfs: Bad value 'm' for mount option 'size' [ 1105.313461] [ 1105.347031] hugetlbfs: Bad value 'm' for mount option 'size' [ 1105.347031] 04:17:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) 04:17:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8, 0x3ff}}, './cgroup/cgroup.procs\x00'}) r4 = openat(r3, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xe63d4c6e11b6d8c8, 0x18d) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r0, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000100)={0x899, 0xcbb, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) 04:18:15 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:18:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:18:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) 04:18:15 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semget$private(0x0, 0x0, 0x0) 04:18:15 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1121.788806] hugetlbfs: Bad value 'm' for mount option 'size' [ 1121.788806] [ 1121.799208] hugetlbfs: Bad value 'm' for mount option 'size' [ 1121.799208] 04:18:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x88d4) 04:18:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) 04:18:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:18:15 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:18:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1121.964052] hugetlbfs: Bad value 'm' for mount option 'size' [ 1121.964052] 04:18:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) 04:18:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) [ 1122.042082] hugetlbfs: Bad value 'm' for mount option 'size' [ 1122.042082] 04:18:15 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:18:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:33 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:18:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) openat(r0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x100, 0x60) ioctl$VT_DISALLOCATE(r0, 0x5608) 04:18:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:18:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) 04:18:33 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:18:33 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:33 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semget$private(0x0, 0x0, 0x0) [ 1140.452292] hugetlbfs: Bad value 'm' for mount option 'size' [ 1140.452292] 04:18:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) [ 1140.485180] hugetlbfs: Bad value 'm' for mount option 'size' [ 1140.485180] 04:18:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) 04:18:33 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:18:33 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:18:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)=ANY=[@ANYBLOB="5b07bbedf038fe0d33867ba27bdb03fa6d0c1f23869c279380d8f31f96f4eb6b822299a597a42f0560c2ea72f79c6030cf23b4e842572519d3747a0eee1289f6f8474c53e54840629c7a0224a72f378aebbd28b6f1d916c6484b61ccbc10c865d52665bc27f1c36e889a276c691fda8f", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f6367726f75702f6367726f75702e70726f63730028589a3f8e63505b6d471afe56b81b5596667cb03c117b2061b40bc5b2205c4d717437a1a4f7086d9974810c0f20100d74fa9f345865c570bfc88f431c4b488d935edec9d572daea1f093e1a07faf5726ad58d79d6335a0bb35f9ba6"]) read$hiddev(r2, &(0x7f0000000180)=""/37, 0x25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x8, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r7, r6, 0x0, 0xfffffdef) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYRES16=r7, @ANYRES64=r8], 0x220) sendfile(r3, r1, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000000)={0x0, 0x10000, [0x2, 0x31, 0xffffffff, 0x7, 0x2, 0x9]}) 04:18:33 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) 04:18:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 1140.746638] hugetlbfs: Bad value 'm' for mount option 'size' [ 1140.746638] [ 1140.754771] hugetlbfs: Bad value 'm' for mount option 'size' [ 1140.754771] [ 1157.208034] hugetlbfs: Bad value 'm' for mount option 'size' [ 1157.208034] [ 1157.210823] hugetlbfs: Bad value 'm' for mount option 'size' [ 1157.210823] 04:18:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) 04:18:50 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:18:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:18:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:18:50 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) 04:18:50 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semget$private(0x0, 0x0, 0x0) 04:18:50 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:18:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x63, 0x5, &(0x7f0000001680)=[{&(0x7f00000002c0)="12a151818e96ae868e3e0d04d8ae9f0a344dcedd93e518dfbd70ae986a2df06811fba5be70ec7d2883dddb94904c1d81aa45b9a604f96f0547eaa6a646574b8b76f4ddde7949698987f0f0984e7dd08af52ac8ed6eabda693fd6475776d3b3333dab1a282e570b2b7cd8beae1b8ccfc1f2201cc3605260535b9e0f9680122d5a57eda5a1cd06ef33f4bfb168158dd1936c82a02a60c2ce0800dd8950513210aefe92c823f46cb8a8a7953b166560a7f046a11db629928b7bfbee02a2cd", 0xbd, 0x7fff}, {&(0x7f0000000380)="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", 0x1000, 0x3}, {&(0x7f0000001380)="f1b120cc502cc698a1e53a1625db4b576d2523962444a790c4afbd68e2534a0e1472b6b8600dda763151e5d9bcc4ccec866f5ed8a650e98f77fe9f248fcdb96de079bd49d6f8e0e75a2ab33fbc7511778c5a03f3be2e56aece689ee63fd8b2a46f095cb1a5ed104cad8474f44481843f8bc5cbb58e070792b084d3e86a8bb7f540ca5fa0111c3df4ab877a7c649fd296ade6d24ade70b1fe939ee53d600b0994ea2f80181be6e70be2b323c3aa91b28abf3ce1eea4abe1c9b4ea1bcb9493f0d612ee68b8a8d41c5b0360246f94bb687ba62c97e9195c", 0xd6, 0x9}, {&(0x7f0000001480)="1b566f7092a65972da4c5228269829932282e36dd5b5744d852274ccd9c1370083ee8c8f67b03604f1f87fca8bb0e664fd54c44b07a77f1d6a588f0bc4b33549becde6c045b304efb6950facf2fa9ac7918e4095287864fd8e8ac3802ac79baee2a5de7651514659c9ffb3924165b904542d8f706585f0b0c1cc7cab41541c6aadec57d6273c3d192cdee774009cd34a89b0f66b82fb8e525931aa9ddcdf934e534bd95c2a3170384d1c6ffe6d32fe6c3c66a90d1f06fd07664206a0d3eca9e9849d9f4b5d63e9ebdf99b05a1b1b1cea2024d6a805555a84f1a34666998c6a845b7a7dac24fd5b4cac3e50be7bc0100305017f15dbeafe8c", 0xf8, 0x1}, {&(0x7f0000001580)="7f53cefe9992f9033ace75f51d5fbd594e125b65be489f2f4d9abc1961c77d6efbbdd2c0a997aef9200ea2bfac0ad196aa8dda619e64883324bbde7490c4edb8395f3ebe864cbd9ec0dab05cb3d4791b429e8d0f505b623a3c39d8c8c9f03db4805ad2f4f8a97c8cf837c2359d5f494e8cf69496c5bb635493a7fed0a2b56f4374572a1f409031d61d77596e62e6577af7b6045a7cf9bd6181c1bca39731697f269497c468223a5b9b2cd063fb82b59c581b3fd149ba02d7c121dc946e9d91c1cc26aa4623ca69dcf5e84d9c315312a91ffa", 0xd2, 0x7}], 0x1000400, &(0x7f0000001700)=ANY=[@ANYBLOB='hash\x00,hash\x00,\x00,^[,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',obj_role=\x00,fsmagic=0x0000000000000007,euid>', @ANYRESDEC, @ANYBLOB="2c6d6561658169643c0000000000", @ANYRESDEC, @ANYBLOB=',euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c646f6e745f61707072616973652c7375626a5f726f6c653d232eff267d2c6d61736b3d5e4d41595f415050454e442c00"]) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(r4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-arm\x00'}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="7924458114c2373d5c040d2cdbe795b0b6811fd4ea4be130ddf9385227f91c09b409863956540dad389e3b019db590d74d2438ba802cc442269f49bd2c88bbf1334227b57b2f7791e99739fede55956018c4a38b3890e3779868cf50897981fefa6cb8794276b5f816fc184b", 0x6c}], 0x1}, 0x0, 0x100, 0x1}, 0x20) 04:18:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x900000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 1157.324170] hugetlbfs: Bad value 'm' for mount option 'size' [ 1157.324170] [ 1157.334841] hugetlbfs: Bad value 'm' for mount option 'size' [ 1157.334841] 04:18:50 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semget$private(0x0, 0x0, 0x0) 04:18:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:18:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:18:50 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) 04:18:50 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1157.460420] hugetlbfs: Bad value 'm' for mount option 'size' [ 1157.460420] [ 1157.479060] hugetlbfs: Bad value 'm' for mount option 'size' [ 1157.479060] 04:19:04 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semget$private(0x0, 0x0, 0x0) 04:19:04 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:04 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) 04:19:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:19:04 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./cgroup/cgroup.procs\x00', 0x104c0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRESOCT, @ANYRESOCT=r1], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) execveat(r1, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[&(0x7f0000000080)='%\'#^%:^{^\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='%\xf3\x00', &(0x7f0000000180)='%%\x00'], &(0x7f00000002c0)=[&(0x7f0000000200)=',\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)=':\'%$+\x00'], 0xeadda58c2aec6302) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) symlinkat(&(0x7f0000000300)='./cgroup/cgroup.procs\x00', r1, &(0x7f0000000340)='./cgroup/cgroup.procs\x00') 04:19:04 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:19:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xb00000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:19:04 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:04 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) [ 1171.055595] hugetlbfs: Bad value 'm' for mount option 'size' [ 1171.055595] [ 1171.059943] hugetlbfs: Bad value 'm' for mount option 'size' [ 1171.059943] 04:19:04 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semget$private(0x0, 0x0, 0x0) 04:19:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{}], 0x1}}], 0x1, 0x88d4) 04:19:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:19:04 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1171.249925] hugetlbfs: Bad value 'm' for mount option 'size' [ 1171.249925] [ 1171.253215] hugetlbfs: Bad value 'm' for mount option 'size' [ 1171.253215] 04:19:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) 04:19:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x1205000000000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:19:23 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) 04:19:23 executing program 4: r0 = syz_io_uring_setup(0x75c8, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0xb14b712a17e83d00) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_io_uring_setup(0x896, &(0x7f0000000100)={0x0, 0x5c6f, 0x0, 0x0, 0xa5, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)) 04:19:23 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:19:23 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:19:23 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:23 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1189.751928] hugetlbfs: Bad value 'm' for mount option 'size' [ 1189.751928] [ 1189.765703] hugetlbfs: Bad value 'm' for mount option 'size' [ 1189.765703] 04:19:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) 04:19:23 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:19:23 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:19:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x400000, 0xba) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 1189.923593] hugetlbfs: Bad value 'm' for mount option 'size' [ 1189.923593] [ 1189.929643] hugetlbfs: Bad value 'm' for mount option 'size' [ 1189.929643] 04:19:23 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:19:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:19:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x88d4) 04:19:23 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) [ 1190.042261] hugetlbfs: Bad value 'm' for mount option 'size' [ 1190.042261] [ 1190.054703] hugetlbfs: Bad value 'm' for mount option 'size' [ 1190.054703] 04:19:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x5, r2}], {0x4, 0x2}, [], {0x10, 0x1}, {0x20, 0x3}}, 0x34, 0x2) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:19:38 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xffffff7f00000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:19:38 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:38 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:38 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:38 executing program 4: write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x2, [@broadcast, @multicast]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$int_out(r3, 0x52a89d06361a6be0, &(0x7f0000000380)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0xfff, 0x3, 0x0, 0x0, 0x9, [{0x7, 0x101, 0x4, '\x00', 0x304}, {0x8, 0x7f, 0x52ca, '\x00', 0x480}, {0xafab, 0xa7, 0x6}, {0xffffffffffffffff, 0x100, 0x3, '\x00', 0x201}, {0x1f, 0xffffffffffff0001, 0x92, '\x00', 0x401}, {0x8, 0x8, 0x0, '\x00', 0x4}, {0x782e, 0x6, 0x54, '\x00', 0x1100}, {0xf33, 0x1000, 0x1b57, '\x00', 0x2084}, {0x100000000, 0x3f, 0xbd, '\x00', 0x8}]}) 04:19:38 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:19:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) [ 1204.785708] hugetlbfs: Bad value 'm' for mount option 'size' [ 1204.785708] [ 1204.792843] hugetlbfs: Bad value 'm' for mount option 'size' [ 1204.792843] 04:19:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 1204.954500] hugetlbfs: Bad value 'm' for mount option 'size' [ 1204.954500] [ 1205.004285] hugetlbfs: Bad value 'm' for mount option 'size' [ 1205.004285] 04:19:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) 04:19:38 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:38 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x9, [0x6d]}}]}) 04:19:38 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1205.158376] hugetlbfs: Unknown parameter 'size m' [ 1205.163060] hugetlbfs: Unknown parameter 'size m' 04:19:38 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:19:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) 04:19:57 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:57 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x22, [0x6d]}}]}) 04:19:57 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:57 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x183c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_PMSR_ATTR_PEERS={0x714, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}]}]}, {0x494, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x2f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1a8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x91}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4769891938ae2af0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0x224, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xde}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xedc, 0x5, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x14faa6bc17bced1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x36}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3c3d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14a}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x628, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x224, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x512}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffe0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7e}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x28c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbf1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdc7}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9b88}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}]}]}]}]}, {0x474, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x26c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x17c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xae}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x583d06f242a0d3e3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x74c3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb6d1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x41}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x24d503bafe1a5d79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}]}]}]}]}, 0x183c}}, 0x45) 04:19:57 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:19:57 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1224.571524] hugetlbfs: Unknown parameter 'size"m' [ 1224.594500] hugetlbfs: Unknown parameter 'size"m' 04:19:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x2c, [0x6d]}}]}) 04:19:58 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:19:58 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) close(r1) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 1224.868291] hugetlbfs: Bad value for 'size' [ 1224.900035] hugetlbfs: Bad value for 'size' 04:19:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(r2, &(0x7f0000000340)='./file1\x00', 0x10080, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './cgroup/cgroup.procs\x00'}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="72b0a01ae558021479642889e98958fdd492ee77d29808edbbab0d13d7de9eb2ee3668a70a14c2d8a592054a568ff9f732a77364f26e44a16770c72eada93df43521c1ad88072bb1d44d66056b48e40a3f489ef0acab2c865d95c94296d5f2e83d59580f744e8f7f00059e9ce0750205e205", 0x72}, {&(0x7f0000000180)="5cc3d2ba47c7963862d778c6d05f983cca776c0900d8abeddb73c49f2748761c4a36106f9f85c3c29758926123eb7e9b7cc66121bfd236cf228ca4d906181d7dd1cb680eb298e2a707cbba11eaa6cf870d520b58f21dfa10ab520fed4a7161c665e72a83fbb2dde5396b006c13e8297ab1f54e42bda799329c5a699eeda4af0b223f9cdf15da2950b9b3ae0dd24a1935db5c1c86bc52c45eb3ca5549bb26d85b", 0xa0}, {&(0x7f0000000240)="567ba2231f9be4ae9e6b7d016f9fa8a59423a86a5bb40f7ea8773a961b5eb4342562165d8b4f51a13e5bd2d4212ae8db503d31d71754fed1835e514352b5ea344f482f2a39dcedcd9811ae0351999396da6b164fac7e340927a089feca36ddc0d671e01021cd9a16c7bbf4964bc04d28e1d9d4611b5675f54ea56f73717a6ab96cf942d988ccea0e9d74b8b1dd07b7975c0e180c5810d7130c57a627c37520a363892eb10705ea3310d9416a5245888cbc0e346a", 0xb4}], 0x3, 0x9, 0x0) 04:19:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0xa]}}]}) 04:19:58 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:19:58 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1225.156194] hugetlbfs: Bad value ' [ 1225.156194] ' for mount option 'size' [ 1225.156194] [ 1225.163101] hugetlbfs: Bad value ' [ 1225.163101] ' for mount option 'size' [ 1225.163101] 04:19:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x22]}}]}) [ 1225.554067] hugetlbfs: Bad value '"' for mount option 'size' [ 1225.554067] [ 1225.566358] hugetlbfs: Bad value '"' for mount option 'size' [ 1225.566358] 04:19:59 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:59 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:59 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:19:59 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x25]}}]}) [ 1225.858981] hugetlbfs: Bad value '%' for mount option 'size' [ 1225.858981] 04:19:59 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1225.892805] hugetlbfs: Bad value '%' for mount option 'size' [ 1225.892805] 04:19:59 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:59 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:19:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x2c]}}]}) 04:19:59 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1226.201492] hugetlbfs: Bad value for 'size' 04:19:59 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1226.234853] hugetlbfs: Bad value for 'size' 04:20:12 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = pidfd_getfd(r0, r0, 0x0) readlinkat(r1, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000180)=""/100, 0x64) 04:20:12 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:20:12 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:20:12 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:20:12 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}, 0x9}]}) 04:20:12 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1239.515448] hugetlbfs: Bad value 'm ' for mount option 'size' [ 1239.515448] 04:20:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendfile(r0, r2, 0x0, 0xffff) [ 1239.545706] hugetlbfs: Bad value 'm ' for mount option 'size' [ 1239.545706] 04:20:12 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:20:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}, 0x22}]}) [ 1239.662845] hugetlbfs: Bad value 'm"' for mount option 'size' [ 1239.662845] [ 1239.667962] hugetlbfs: Bad value 'm"' for mount option 'size' [ 1239.667962] 04:20:13 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:20:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}, 0x63}]}) 04:20:13 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1239.819873] hugetlbfs: Bad value 'mc' for mount option 'size' [ 1239.819873] [ 1239.850511] hugetlbfs: Bad value 'mc' for mount option 'size' [ 1239.850511] 04:20:27 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:20:27 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:27 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:20:27 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 04:20:27 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:20:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x63e7a2, 0x188) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:20:27 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:20:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 1254.217047] hugetlbfs: Bad value 'm' for mount option 'size' [ 1254.217047] [ 1254.222736] hugetlbfs: Bad value 'm' for mount option 'size' [ 1254.222736] 04:20:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x2}) 04:20:27 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:20:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x7fd, [0x5, 0x1, 0x9, 0x2a6a, 0x9, 0x8000]}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 1254.360707] hugetlbfs: Bad value 'm' for mount option 'size' [ 1254.360707] [ 1254.371313] hugetlbfs: Bad value 'm' for mount option 'size' [ 1254.371313] 04:20:27 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:20:27 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:20:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x3}) [ 1254.512396] hugetlbfs: Bad value 'm' for mount option 'size' [ 1254.512396] [ 1254.526354] hugetlbfs: Bad value 'm' for mount option 'size' [ 1254.526354] 04:20:27 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:20:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x89) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x62, 0x7d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x855}, 0x20044801) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x44, 0x24}}}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "80d41804c299d33054461b530b00"}, @NL80211_ATTR_KEY_DEFAULT={0xffffffffffffffa8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "dacfffd9"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000014}, 0x4881) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r5, r3, 0x0, 0xfffffdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r7, r6, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './cgroup/cgroup.procs/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x100}}, './cgroup/cgroup.procs\x00'}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 04:20:27 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:42 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:42 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x4}) 04:20:42 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 04:20:42 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1269.135346] hugetlbfs: Bad value 'm' for mount option 'size' [ 1269.135346] [ 1269.141723] hugetlbfs: Bad value 'm' for mount option 'size' [ 1269.141723] 04:20:42 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:20:42 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r4) fchownat(r0, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, r4, 0x1000) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0x220) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000080)={0xd20, {0x1, 0xf25c, 0x100, 0x8, 0x62e1}}) sendfile(r3, r2, 0x0, 0xfffffdef) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 04:20:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x5}) 04:20:42 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1269.309110] hugetlbfs: Bad value 'm' for mount option 'size' [ 1269.309110] [ 1269.313981] hugetlbfs: Bad value 'm' for mount option 'size' [ 1269.313981] 04:20:42 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 04:20:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x6}) 04:20:42 executing program 2: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:20:42 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1269.508968] hugetlbfs: Bad value 'm' for mount option 'size' [ 1269.508968] [ 1269.523504] hugetlbfs: Bad value 'm' for mount option 'size' [ 1269.523504] 04:20:42 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:20:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x7}) 04:20:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 1) [ 1269.707090] hugetlbfs: Bad value 'm' for mount option 'size' [ 1269.707090] [ 1269.773228] hugetlbfs: Bad value 'm' for mount option 'size' [ 1269.773228] 04:20:59 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:20:59 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:20:59 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:20:59 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:20:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x8}) 04:20:59 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:20:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 1286.507887] hugetlbfs: Bad value 'm' for mount option 'size' [ 1286.507887] [ 1286.513596] hugetlbfs: Bad value 'm' for mount option 'size' [ 1286.513596] 04:20:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xc1, 0x42e, 0xd527}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="350000000000000007000000ffffffffb8ac1e010100ba8e0585000000000000000000000000000000000000000000cb88b611000000000000000000000000000000003e495ce1fde63eae000000ac1e0800e00000024e244e20080000000000000000000000000000000000000b00000000000000000000000000000000000000000000eb09424f5afe53c300000200000300a00000000000010000007f00000000000000ffffffff000000000002000000aab070d557f69252c4422b594339102c02b1f05727d44f89aa1cd0204d45e7824b97697e05c6625714eae5c6011d87bfd4a7c9bb440da8c2bee5fcdc0e93"]}) 04:20:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x9}) 04:20:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1286.629267] hugetlbfs: Bad value 'm' for mount option 'size' [ 1286.629267] [ 1286.642871] hugetlbfs: Bad value 'm' for mount option 'size' [ 1286.642871] 04:21:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 04:21:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x2, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:21:00 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:21:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0xa}) 04:21:00 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1286.809895] hugetlbfs: Bad value 'm' for mount option 'size' [ 1286.809895] [ 1286.828330] hugetlbfs: Bad value 'm' for mount option 'size' [ 1286.828330] 04:21:15 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:21:15 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:21:15 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:21:15 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:21:15 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:21:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x3, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:21:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0xb}) 04:21:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x20042, 0x20) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x63) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './cgroup/cgroup.procs\x00'}) 04:21:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x4, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1302.224521] hugetlbfs: Bad value 'm' for mount option 'size' [ 1302.224521] [ 1302.251143] hugetlbfs: Bad value 'm' for mount option 'size' [ 1302.251143] 04:21:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x90, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x8001}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x91}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) 04:21:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x5, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:21:15 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:21:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}], [], 0x10}) 04:21:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x6, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1302.538316] hugetlbfs: Bad value 'm' for mount option 'size' [ 1302.538316] [ 1302.552123] hugetlbfs: Bad value 'm' for mount option 'size' [ 1302.552123] 04:21:41 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:21:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x5, 0xee01}, {0x2, 0x3, 0xee01}, {0x2, 0x4, 0xee00}, {0x2, 0x0, r0}, {0x2, 0x2, r1}, {0x2, 0x2, r2}], {}, [{0x8, 0x0, r3}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x3}}, 0x64, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:21:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) syz_io_uring_setup(0x12da, &(0x7f0000000100)={0x0, 0x1c7, 0x10, 0x3, 0x219, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) 04:21:41 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:21:41 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:21:41 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:21:41 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:21:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x7, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:21:41 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) fcntl$setlease(r3, 0x400, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r8, &(0x7f00000006c0)=ANY=[], 0x220) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r7, @ANYRESOCT=r5, @ANYRES16=r1]) [ 1328.286266] rpc_pipefs: Unknown parameter '0xffffffffffffffff' 04:21:56 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:21:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x8, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:21:56 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x8, 0x20, 0x95}) 04:21:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 1) 04:21:56 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:21:56 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:21:56 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:21:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="0400e4ff00000000"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) utimensat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 04:21:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x102) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 1343.066023] FAULT_INJECTION: forcing a failure. [ 1343.066023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.067794] CPU: 0 PID: 7973 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1343.068950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1343.070100] Call Trace: [ 1343.070497] [ 1343.070849] dump_stack_lvl+0x8f/0xb7 [ 1343.071459] should_fail_ex.cold+0x5/0xa [ 1343.072095] _copy_from_user+0x30/0x1f0 [ 1343.072726] copy_msghdr_from_user+0x89/0x150 [ 1343.073411] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1343.074163] ? __pfx___lock_acquire+0x10/0x10 [ 1343.074857] ? __lock_acquire+0xbad/0x5e70 [ 1343.075497] ___sys_sendmsg+0xdd/0x1b0 [ 1343.076079] ? __pfx____sys_sendmsg+0x10/0x10 [ 1343.076755] ? lock_release+0x3b6/0x750 [ 1343.077375] ? __fget_files+0x24e/0x450 [ 1343.077976] ? __pfx_lock_release+0x10/0x10 [ 1343.078658] ? lock_is_held_type+0xdb/0x130 [ 1343.079333] ? __fget_files+0x270/0x450 [ 1343.079967] ? __fget_light+0xe5/0x280 [ 1343.080584] __sys_sendmmsg+0x1b7/0x550 [ 1343.081225] ? lock_is_held_type+0xdb/0x130 [ 1343.081879] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1343.082596] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1343.083357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1343.084167] ? syscall_enter_from_user_mode+0x1c/0x50 [ 1343.084944] ? perf_trace_preemptirq_template+0xa6/0x410 [ 1343.085775] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1343.086691] ? syscall_enter_from_user_mode+0x21/0x50 [ 1343.087480] __x64_sys_sendmmsg+0x9d/0x110 [ 1343.088125] ? syscall_enter_from_user_mode+0x21/0x50 [ 1343.088900] do_syscall_64+0x3f/0x90 [ 1343.089500] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1343.090263] RIP: 0033:0x7fe25b1e4b19 [ 1343.090829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1343.093450] RSP: 002b:00007fe25875a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1343.094574] RAX: ffffffffffffffda RBX: 00007fe25b2f7f60 RCX: 00007fe25b1e4b19 [ 1343.095603] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1343.096649] RBP: 00007fe25875a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1343.097684] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1343.098743] R13: 00007ffe70c753ef R14: 00007fe25875a300 R15: 0000000000022000 [ 1343.099812] 04:21:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x10, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1343.124038] hugetlbfs: Unknown parameter '' 04:21:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0xd, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000100)="f3a9996d619a10e1b775a1a610175737c04162780c938aed953ceea70f05a6186da4e211716817eac4e167f21d55ceea145dc1742d3a4b4e0a0d0316de8085728b72857d3162a1b944c8e0acee0f63430ab79852d30000d3f529a6db0e4aec31ca0f91d85a4018f8d1b989b192a14f9e66ec4f55115984c9f77f5c", 0x7b, 0x7}, {&(0x7f0000000180)="8127accf3b3b0e7e5060e7f3f62bb8b5b7835e72f98f506dacdd6b4341e9b00e0394f707899a40c5e6cfca868477e57e85d4df18cdb56712d389e5df", 0x3c, 0x2}, {&(0x7f00000001c0)="9bd214c3ca0f642358c31ec287b6e1e3e71fbb53bb7b88774b05966ba6a157ea81e29ef090165829619c163934f8287dd43c4365cf8250d877704f54441601eb0d103a24b77f0924ebe070728865569bc31b27c8755a2996b0124eb312310848efb7e6a3b2f21d4c87959682b4688a58ccb893a3cc99", 0x76, 0x9}, {&(0x7f0000000240)="3f1e3f20263506cf9039c958b1958cd0b579b545ca34ab96ee4e363739df186ee21d8633f6468be02fb03aecd92946e0288c4baeb3f520bcb52b8aed49c11f124fa73f66e30e219dc1d965f12f70f8903b3b22ea856ddbe684f4e6dd4f12553fc8725f66f4b645b03cf01ff412325cb4a143303dc02637d4a87891f6fb2cc036ec58f45439bf5347b8a935e7d0680dd87f47fa3d8b0b4f1c3f96156117f04d6e1133ac133b4b333fc827cf09c7736d682f965b4d86e7a4", 0xb7, 0x101}, {&(0x7f0000000300)="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", 0xfb, 0xbd4}, {&(0x7f0000000400)="ad8b831417263f3b8f6bd05c95b3432ea2fc8308ca2931fe8a4db20323b59b0f3ae9f29f0d03d3d54eeec18f3c25d744dc4ebc91b049eb75c647d35f642205a1cbd0f9d288e1462f760be19715eb33cb38b82f1df674bbda26296b7ca27871ac5c96e48f8b2e39472ca47cd8da2feeeff80475d3af78dc220c52822fdd68f7c43e7596d3c64c7787fb36b34b66aef53d4470b396de00a61b155effc69d08c0bbbeab5e7df80b80f08b98f7c3b269f84f60230ac9aa3d2939c8ac0b17cf68a6c6cb0f9cc63715", 0xc6, 0x2}, {&(0x7f0000000500)="373e564e95ec0f2763a2b47468b8ca6496873fce0089a336a56311d3e0ca21169ca353810e956304d91ee30e6e7751d69a5de73cf6d03c297c434f2c23b32d645f0b1f9b5503140a135300717bc4c5b0ce7296755aa6b9f09b923ed60994ad40afc1eb2b7a7f080124f320445f226ea277710b83a4758c9b77bc59ddf5de2fadeb0aa95516619b9adef22d2af388c625dd7c5dc65ca496b397f7dc13b3b14e03eee84b3ad84a23449d", 0xa9, 0x5}], 0x10, &(0x7f0000000680)={[{@dots}, {@nodots}, {@nodots}, {}, {@dots}, {@fat=@errors_remount}, {@nodots}, {@dots}, {@fat=@dmask}], [{@appraise}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_gt}, {@context={'context', 0x3d, 'root'}}]}) 04:21:56 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:21:56 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:21:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 2) [ 1343.600442] FAULT_INJECTION: forcing a failure. [ 1343.600442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.602070] CPU: 1 PID: 7993 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1343.603144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1343.604208] Call Trace: [ 1343.604556] [ 1343.604876] dump_stack_lvl+0x8f/0xb7 [ 1343.605421] should_fail_ex.cold+0x5/0xa [ 1343.605989] _copy_from_user+0x30/0x1f0 [ 1343.606584] move_addr_to_kernel.part.0+0x31/0x110 [ 1343.607291] __copy_msghdr+0x3cd/0x4b0 [ 1343.607838] copy_msghdr_from_user+0xb4/0x150 [ 1343.608467] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1343.609190] ___sys_sendmsg+0xdd/0x1b0 [ 1343.609743] ? __pfx____sys_sendmsg+0x10/0x10 [ 1343.610392] ? lock_release+0x3b6/0x750 [ 1343.610960] ? __fget_files+0x24e/0x450 [ 1343.611542] ? __pfx_lock_release+0x10/0x10 [ 1343.612170] ? lock_is_held_type+0xdb/0x130 [ 1343.612800] ? __fget_files+0x270/0x450 [ 1343.613362] ? __fget_light+0xe5/0x280 [ 1343.613915] __sys_sendmmsg+0x1b7/0x550 [ 1343.614504] ? lock_is_held_type+0xdb/0x130 [ 1343.615134] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1343.615809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1343.616550] ? syscall_enter_from_user_mode+0x1c/0x50 [ 1343.617241] ? perf_trace_preemptirq_template+0xa6/0x410 [ 1343.617974] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1343.618841] ? syscall_enter_from_user_mode+0x21/0x50 [ 1343.619531] __x64_sys_sendmmsg+0x9d/0x110 [ 1343.620074] ? syscall_enter_from_user_mode+0x21/0x50 [ 1343.620737] do_syscall_64+0x3f/0x90 [ 1343.621238] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1343.621914] RIP: 0033:0x7fe25b1e4b19 [ 1343.622401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1343.624610] RSP: 002b:00007fe25875a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1343.625564] RAX: ffffffffffffffda RBX: 00007fe25b2f7f60 RCX: 00007fe25b1e4b19 [ 1343.626477] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1343.627345] RBP: 00007fe25875a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1343.628237] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1343.629134] R13: 00007ffe70c753ef R14: 00007fe25875a300 R15: 0000000000022000 [ 1343.630047] [ 1343.943186] hugetlbfs: Unknown parameter '' 04:22:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x300, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:12 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:22:12 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:22:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 3) 04:22:12 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:22:12 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:22:12 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:22:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x202200, 0x28) [ 1359.463668] FAULT_INJECTION: forcing a failure. [ 1359.463668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.465171] CPU: 1 PID: 8012 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1359.466179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1359.467155] Call Trace: [ 1359.467483] [ 1359.467779] dump_stack_lvl+0x8f/0xb7 [ 1359.468305] should_fail_ex.cold+0x5/0xa [ 1359.468840] _copy_from_user+0x30/0x1f0 [ 1359.469359] iovec_from_user+0x2b3/0x450 [ 1359.469916] __import_iovec+0x6b/0x690 [ 1359.470455] ? _copy_from_user+0x169/0x1f0 [ 1359.471017] import_iovec+0x87/0xb0 [ 1359.471502] copy_msghdr_from_user+0xed/0x150 [ 1359.472082] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1359.472754] ___sys_sendmsg+0xdd/0x1b0 [ 1359.473277] ? __pfx____sys_sendmsg+0x10/0x10 [ 1359.473876] ? lock_release+0x3b6/0x750 [ 1359.474430] ? __fget_files+0x24e/0x450 [ 1359.474956] ? __pfx_lock_release+0x10/0x10 [ 1359.475520] ? lock_is_held_type+0xdb/0x130 [ 1359.476100] ? __fget_files+0x270/0x450 [ 1359.476634] ? __fget_light+0xe5/0x280 [ 1359.477145] __sys_sendmmsg+0x1b7/0x550 [ 1359.477662] ? lock_is_held_type+0xdb/0x130 [ 1359.478227] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1359.478847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1359.479519] ? syscall_enter_from_user_mode+0x1c/0x50 [ 1359.480160] ? perf_trace_preemptirq_template+0xa6/0x410 [ 1359.480870] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1359.481640] ? syscall_enter_from_user_mode+0x21/0x50 [ 1359.482292] __x64_sys_sendmmsg+0x9d/0x110 [ 1359.482865] ? syscall_enter_from_user_mode+0x21/0x50 [ 1359.483540] do_syscall_64+0x3f/0x90 [ 1359.484031] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1359.484688] RIP: 0033:0x7fe25b1e4b19 [ 1359.485162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.487312] RSP: 002b:00007fe25875a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1359.488229] RAX: ffffffffffffffda RBX: 00007fe25b2f7f60 RCX: 00007fe25b1e4b19 [ 1359.489073] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1359.489919] RBP: 00007fe25875a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.490774] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1359.491611] R13: 00007ffe70c753ef R14: 00007fe25875a300 R15: 0000000000022000 [ 1359.492487] 04:22:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x500, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:12 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:22:13 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:22:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0x59, 0x6, 0x101}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000002580)='./file1\x00', &(0x7f00000025c0), &(0x7f0000002600)={'L-', 0x364}, 0x16, 0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="dae3000002000400"]) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="f3952ff2719fe1eb427264"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hostfs\x00', 0x120041, &(0x7f0000000240)='.@,.!(\x00') stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000002840)='./file1\x00', 0x10) setresuid(0x0, r2, 0x0) statx(0xffffffffffffffff, &(0x7f0000002880)='./file1\x00', 0x6000, 0x8, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r3) mount_setattr(0xffffffffffffff9c, &(0x7f00000027c0)='\x00', 0x0, &(0x7f0000002800)={0x100082, 0x8, 0x160000, {r0}}, 0x20) chown(&(0x7f0000002780)='./file0\x00', r2, r3) pwritev(r1, &(0x7f0000002500)=[{&(0x7f00000002c0)="e536a994de2fd003bb9ee6bd377d5f2eaad79a4c04e13d39ef5f0b7f7c81e01084f0ed8cd77291fb7d4601b1d1e2b34ad6352271a6aa942c293f839c", 0x3c}, {&(0x7f0000000300)="6a455dfcdb93898f123a60eb698ddc96e7a65d735dad729381159f9e6f88d9f3b76efe9b2c53675abee76de2eb8c72d52c87f920204abf81fbc293db38aac372206d9a43a28f7508258de49be5ea0f6b1a8e643f12f5c88e77ed98c619e65423a3ea12", 0x63}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="b13dc599f9bb82406d5522e1e58b69833b95cb280119c14700958f26b311fc9d679dd6ac97d368613dc5d7727598f78a32d8038610ae09a06062f2dfaca92b666ba76cc11c2f317a080b7d6c8da81e303e52baf89466df761b8b298e6e92ac5cf4bf839b1e043af5a2214ae1a0f904b966cf31c98be6d37487e7a043432fa5b37e84c0bb9645c9e95ed27996bd800d3013d3be724aa616986a23c0fc6c208185858da31bcc3ec6e74778", 0xaa}, {&(0x7f0000001440)="67b8628099ab70979db1b5d5f40722b004d427e9ef9a187f03c430c640a05290580fda66ac36b51cc65e0728990a44ce9cc2b98e8d6dd3d222fb21492ee22a7677c7e7cea57c8a483e0d29522b69fd1d8d16286c9a303fef61dd293330ac6b3c9573be58532599b28322988152886c58c109b56f0720abb2b02ea23bded38f21bcf812ea875051170b0d10773993550e3ae655c0705d1e9625", 0x99}, {&(0x7f0000001500)="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", 0x1000}], 0x6, 0x80000001, 0x1) mount$tmpfs(0x0, &(0x7f0000002640)='\x00', &(0x7f0000002680), 0x23412, &(0x7f00000026c0)={[{@huge_within_size}, {@gid={'gid', 0x3d, 0xee00}}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {}, {@size={'size', 0x3d, [0x39, 0x70, 0x67, 0x65, 0x71, 0x2d, 0x25, 0x33, 0x37]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x34, 0x25, 0x67, 0x35, 0x34, 0x6b, 0x6d, 0x2d]}}, {@huge_within_size}], [{@fsname={'fsname', 0x3d, '.@,.!(\x00'}}]}) 04:22:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 4) 04:22:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x600, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1359.898489] hugetlbfs: Unknown parameter 'Úã' [ 1359.944611] FAULT_INJECTION: forcing a failure. [ 1359.944611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.946131] CPU: 1 PID: 8031 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1359.947134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1359.948120] Call Trace: [ 1359.948444] [ 1359.948739] dump_stack_lvl+0x8f/0xb7 [ 1359.949262] should_fail_ex.cold+0x5/0xa [ 1359.949788] _copy_from_iter+0x480/0x1130 [ 1359.950346] ? __pfx__copy_from_iter+0x10/0x10 [ 1359.950965] ? rawv6_sendmsg+0x937/0x3b30 [ 1359.951511] ? __pfx_lock_release+0x10/0x10 [ 1359.952058] ? __lock_acquire+0x164d/0x5e70 [ 1359.952628] rawv6_sendmsg+0x2151/0x3b30 [ 1359.953178] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1359.953760] ? lock_is_held_type+0xdb/0x130 [ 1359.954313] ? lock_release+0x3b6/0x750 [ 1359.954837] ? __might_fault+0xd9/0x180 [ 1359.955377] ? __pfx_lock_release+0x10/0x10 [ 1359.955965] ? selinux_socket_sendmsg+0x201/0x2c0 [ 1359.956616] ? __pfx_selinux_socket_sendmsg+0x10/0x10 [ 1359.957298] ? _copy_from_user+0x169/0x1f0 [ 1359.957887] ? __import_iovec+0x26c/0x690 [ 1359.958453] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1359.959031] inet_sendmsg+0x121/0x150 [ 1359.959541] ? __pfx_inet_sendmsg+0x10/0x10 [ 1359.960103] sock_sendmsg+0x140/0x190 [ 1359.960610] ____sys_sendmsg+0x337/0x930 [ 1359.961161] ? copy_msghdr_from_user+0xfc/0x150 [ 1359.961776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1359.962392] ___sys_sendmsg+0x110/0x1b0 [ 1359.962930] ? __pfx____sys_sendmsg+0x10/0x10 [ 1359.963527] ? __fget_files+0x24e/0x450 [ 1359.964055] ? __pfx_lock_release+0x10/0x10 [ 1359.964625] ? lock_is_held_type+0xdb/0x130 [ 1359.965197] ? __fget_files+0x270/0x450 [ 1359.965735] ? __fget_light+0xe5/0x280 [ 1359.966246] __sys_sendmmsg+0x1b7/0x550 [ 1359.966779] ? lock_is_held_type+0xdb/0x130 [ 1359.967328] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1359.967943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1359.968624] ? syscall_enter_from_user_mode+0x1c/0x50 [ 1359.969264] ? perf_trace_preemptirq_template+0xa6/0x410 [ 1359.969956] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1359.970756] ? syscall_enter_from_user_mode+0x21/0x50 [ 1359.971440] __x64_sys_sendmmsg+0x9d/0x110 [ 1359.971987] ? syscall_enter_from_user_mode+0x21/0x50 [ 1359.972634] do_syscall_64+0x3f/0x90 [ 1359.973126] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1359.973800] RIP: 0033:0x7fe25b1e4b19 [ 1359.974313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.976486] RSP: 002b:00007fe25875a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1359.977415] RAX: ffffffffffffffda RBX: 00007fe25b2f7f60 RCX: 00007fe25b1e4b19 [ 1359.978294] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1359.979183] RBP: 00007fe25875a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.980070] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1359.980957] R13: 00007ffe70c753ef R14: 00007fe25875a300 R15: 0000000000022000 [ 1359.981872] 04:22:32 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:22:32 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:22:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 5) 04:22:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x700, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:32 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:22:32 executing program 4: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:22:32 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1378.693417] FAULT_INJECTION: forcing a failure. [ 1378.693417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.694337] CPU: 1 PID: 8042 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1378.694934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.695535] Call Trace: [ 1378.695738] [ 1378.695925] dump_stack_lvl+0x8f/0xb7 [ 1378.696241] should_fail_ex.cold+0x5/0xa [ 1378.696572] _copy_to_user+0x30/0x1c0 [ 1378.696886] simple_read_from_buffer+0xd0/0x170 [ 1378.697262] proc_fail_nth_read+0x19c/0x230 [ 1378.697601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1378.697970] ? security_file_permission+0xb5/0xe0 [ 1378.698354] vfs_read+0x2e1/0x9f0 [ 1378.698628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1378.699024] ? __pfx_vfs_read+0x10/0x10 [ 1378.699348] ? __fget_files+0x270/0x450 [ 1378.699680] ksys_read+0x12b/0x260 [ 1378.699975] ? __pfx_ksys_read+0x10/0x10 [ 1378.700299] ? syscall_enter_from_user_mode+0x21/0x50 [ 1378.700708] ? syscall_enter_from_user_mode+0x21/0x50 [ 1378.701118] do_syscall_64+0x3f/0x90 [ 1378.701414] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1378.701822] RIP: 0033:0x7fe25b19769c [ 1378.702106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1378.703424] RSP: 002b:00007fe25875a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1378.703998] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe25b19769c [ 1378.704521] RDX: 000000000000000f RSI: 00007fe25875a1e0 RDI: 0000000000000004 [ 1378.705041] RBP: 00007fe25875a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.705557] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1378.706078] R13: 00007ffe70c753ef R14: 00007fe25875a300 R15: 0000000000022000 [ 1378.706616] 04:22:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0xc8) truncate(&(0x7f0000000000)='./file0\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) sendmsg$sock(r3, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @empty}, 0x4, 0x4, 0x3}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="b7f88b5f0b2f734353f16eabb8ac9f045039179d327488b85fa80c69156ae5a934ffee4214b1a40d2230288e6282315672a74af6bb59d81bcf4c28c6fe72aeb38a092982065cc70192c3c2c2ab7152f42b5e9f98e2eee5d9cc65d4b943126dc3f0383a75296a5668ee67bedf5376be821293ff192092f18d22a45a7740dc98a76f6948a9238f4068542f7e9aa19b77bfd4d942cf9cfb7f09fc29ddee229110", 0x9f}], 0x1, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xfffffff9}}, @timestamping={{0x14, 0x1, 0x25, 0x9b72}}, @timestamping={{0x14, 0x1, 0x25, 0xaf}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x90}, 0x40094) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f00000001c0)=ANY=[@ANYBLOB="73697a653d6d2c00754790b469205e0e3a46fd1ce0fd8f10b669915a5736c3d6bb962ffdd57f2123ddcfc19a31feed0d29612abf6623733520319cf3364c5f0569d02281a34c970dddfc254d2c54931545bea3"]) 04:22:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x3f00, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1379.013115] hugetlbfs: Bad value 'm' for mount option 'size' [ 1379.013115] 04:22:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x4000, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:33 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x2, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x80fe, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:33 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:22:33 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:22:33 executing program 4: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:22:33 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:22:33 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:22:33 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x3, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1399.026091] hugetlbfs: Unknown parameter 's' 04:22:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0xfe80, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:52 executing program 4: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:22:52 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:22:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x4, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB='s,\x00']) 04:22:52 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:22:52 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:22:52 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1399.053963] hugetlbfs: Unknown parameter 's' 04:22:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x5, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:22:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000180)=ANY=[@ANYBLOB="73697a653d6d2c687567653d6e657665722c687567653d77697468696e5f73697a652c6e725f626c6f6338f7d4dadc5beef0"]) 04:22:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1399.356727] hugetlbfs: Bad value 'm' for mount option 'size' [ 1399.356727] [ 1399.388352] hugetlbfs: Bad value 'm' for mount option 'size' [ 1399.388352] 04:23:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x6, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:12 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:23:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:12 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:23:12 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:23:12 executing program 4: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:23:12 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:23:12 executing program 5: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @local}, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x8, 0x176}) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0xf38356aaf7636f1f, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[], 0x220) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="175b1cff0100000000000000000008000300", @ANYRES32, @ANYBLOB="10005a800c0062"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40040000) sendfile(r5, r4, 0x0, 0xfffffdef) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRES32=r3], 0x220) fallocate(r0, 0x14, 0xc41, 0x10001) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000200)=ANY=[@ANYBLOB="736972653d6d2c0030aba493225e9ee0a754260f09d5679b6ae5f084e594f5855afd42714d5b7153b57284b90d0fd48dcfdc954110d76421b0fb4dbc5d6b77a2dd09a9829be013414c13c7223022603296def324c85a449d07505f4741276bd7e043d720e22a43d2bccd7a02347e9240e876a49003a10e33e7"]) 04:23:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1418.894991] hugetlbfs: Unknown parameter 'sire' 04:23:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x7, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x5, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:12 executing program 4: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:23:12 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:23:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x8, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x6, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x7, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1419.681860] hugetlbfs: Unknown parameter 'sire' 04:23:29 executing program 4: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:23:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x10, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x8, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:29 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:23:29 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:23:29 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:23:29 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:23:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x6e, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000041, &(0x7f0000000380)={'trans=unix,', {[{@access_user}, {@msize}, {@nodevmap}, {@fscache}, {@loose}, {@access_client}, {@cache_fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, '%?]'}}, {@uid_lt={'uid<', r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}]}}) bind(0xffffffffffffffff, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) [ 1436.012447] hugetlbfs: Bad value 'm' for mount option 'size' [ 1436.012447] [ 1436.053164] hugetlbfs: Bad value 'm' for mount option 'size' [ 1436.053164] 04:23:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x10, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x18b, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000000000"]) r0 = syz_mount_image$tmpfs(&(0x7f0000002480), &(0x7f00000024c0)='./file0\x00', 0x14, 0x4, &(0x7f0000002780)=[{&(0x7f0000002500)="130223fdada1f6af35e701cc04be456bfaf854f31a581eb8aebd13c24656341dd93e19b986ec9d1ca93351a246a1212a33864ceab427e51484b797c38c99094c9d11570378e22b608013da9961c37cc6ab8d9e585ae933f77694d24abaac7fb473e268346d3a3c79298bf1aae7fec93ac87c5c276fe097a2cb56cca0a76f937e356cf4393adc020556f5b3b256bb6975140596e4701da3d81392488591a483247a085f60b08b", 0xa6, 0x8}, {&(0x7f00000025c0)="169e05c313cbb80fb19a4d3060316ee2b0e04cc4c7f2bc56fe2769c23aab7e3430ea19f748160a7302c56890ddf022e5f507b67d99fcfcf83245413108af13f416f9ccac07d5f242ed73153514a8ee25f77d8ec4a2677e31b27a55557ab8fdbb7c48dead0eed9b6204a3333505df10d0ecce0fc204d4a15e5e1a708a18432d32201f66f1cf36f02b9d6dcd1a6aa7cc2789d97e859953185d75c7f30eb4206abef44b808504f16a2de615e24d533a60468c540b8fe7547be89b7a98636c189964d56a968e8b42d01c6deafde549c2afc91dcc503c6a", 0xd5, 0x2}, {&(0x7f00000026c0)="e8c7940d06877c1e2898367532e8d974af92e8f2fa923731cf80ddc23578997af7385422be02ee6d946d60e737f0ab90b8fb8b4ccb052018c94462c9c045e8bc29", 0x41, 0x80}, {&(0x7f0000002740)="6ed75229b1934956e27388fcac7d71b173974b31cc728398e6eccb", 0x1b}], 0x80449a, &(0x7f0000002800)={[{@uid={'uid', 0x3d, 0xee00}}, {@huge_advise}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x31, 0x74, 0x31, 0x38, 0x38]}}, {@mode={'mode', 0x3d, 0xffffffffffffffff}}, {@huge_always}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_eq}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x22}}]}) mknodat$loop(r0, &(0x7f0000002900)='./file0\x00', 0x4, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x9, 0x3, &(0x7f0000002280)=[{&(0x7f0000000240)="e15b359320a339c11171688ea215136215861bbd618f28d966c57ea4b2a19bcd95d4dd49f0783797fe62ea23f5c0dbb4b686b184729a44765f4e", 0x3a, 0xffffffffffffff56}, {&(0x7f0000000280)="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", 0x1000, 0x8}, {&(0x7f0000001280)="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", 0x1000, 0x1}], 0x2008000, &(0x7f00000023c0)={[{@huge_never}, {@huge_never}, {@size={'size', 0x3d, [0x36, 0x0, 0x6d, 0x6, 0x35]}}, {@gid={'gid', 0x3d, r2}}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x78]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@huge_within_size}, {@huge_within_size}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/+'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}]}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)={0x30000018}) 04:23:29 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:23:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 1) [ 1436.309452] hugetlbfs: Unknown parameter '' 04:23:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x300, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x1d7, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1436.358975] hugetlbfs: Unknown parameter '' [ 1436.419876] FAULT_INJECTION: forcing a failure. [ 1436.419876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.421437] CPU: 1 PID: 8226 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1436.422453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1436.423488] Call Trace: [ 1436.423825] [ 1436.424119] dump_stack_lvl+0x8f/0xb7 [ 1436.424642] should_fail_ex.cold+0x5/0xa [ 1436.425180] _copy_from_user+0x30/0x1f0 [ 1436.425706] copy_msghdr_from_user+0x89/0x150 [ 1436.426286] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1436.426934] ? __pfx___lock_acquire+0x10/0x10 [ 1436.427540] ? __lock_acquire+0xbad/0x5e70 [ 1436.428106] ___sys_sendmsg+0xdd/0x1b0 [ 1436.428620] ? __pfx____sys_sendmsg+0x10/0x10 [ 1436.429197] ? lock_release+0x3b6/0x750 [ 1436.429708] ? __fget_files+0x24e/0x450 [ 1436.430218] ? __pfx_lock_release+0x10/0x10 [ 1436.430801] ? lock_is_held_type+0xdb/0x130 [ 1436.431362] ? __fget_files+0x270/0x450 [ 1436.431915] ? __fget_light+0xe5/0x280 [ 1436.432434] __sys_sendmmsg+0x1b7/0x550 [ 1436.432990] ? lock_is_held_type+0xdb/0x130 [ 1436.433585] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1436.434192] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1436.434856] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1436.435547] ? syscall_enter_from_user_mode+0x1c/0x50 [ 1436.436255] ? perf_trace_preemptirq_template+0xa6/0x410 [ 1436.436975] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1436.437754] ? syscall_enter_from_user_mode+0x21/0x50 [ 1436.438428] __x64_sys_sendmmsg+0x9d/0x110 [ 1436.438985] ? syscall_enter_from_user_mode+0x21/0x50 [ 1436.439652] do_syscall_64+0x3f/0x90 [ 1436.440168] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1436.440833] RIP: 0033:0x7fa3c5ab9b19 [ 1436.441304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1436.443480] RSP: 002b:00007fa3c302f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1436.444450] RAX: ffffffffffffffda RBX: 00007fa3c5bccf60 RCX: 00007fa3c5ab9b19 [ 1436.445326] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1436.446197] RBP: 00007fa3c302f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1436.447069] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1436.447982] R13: 00007ffcea1cb4ef R14: 00007fa3c302f300 R15: 0000000000022000 [ 1436.448921] 04:23:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="73697ad26fd30753"]) 04:23:29 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:23:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x300, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:48 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:23:48 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:23:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x500, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:48 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '][[-&*%'}}, {@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}, {@subj_user}, {@fowner_gt={'fowner>', r1}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'hugetlbfs\x00'}}]}}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="7315cb653d6d2c00"]) 04:23:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 2) 04:23:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x500, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:48 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xc1, 0xf9, 0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x40104, 0x100000000, 0x7, 0x8, 0x6b35, 0x3, 0x62, 0x0, 0x9, 0x0, 0xb80}, 0x0, 0x10, r0, 0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)={0xa0002000}) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) io_submit(0x0, 0x30, &(0x7f0000001340)) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d06d6", 0x23, 0x7}, {&(0x7f0000000340)="71b945737c159b720c7729a2c23adef6c897404ffaee5b26bea234a42f51f573d1ff8507e2b8e0db893c8057c047dafaa1385c52f5a806dcf5ea0ab8e8afafd3ab0fb53fe5f43c5b0f75034e91256cbc7d34ffd25b5f62a4f25b9611ad649a3e912ffa32e63aab2b1ca57e8bd412eb929a92df35222751affdcdabfb8a13ad590f8ceb653a627a54b56cec51bcb3e2464f6d4bf142e5f59a8bac035af8f71422", 0xa0, 0x3}, {&(0x7f0000000400)="bf01f5da2731c824195749e81d849a718ee6c678e94889d331a51f011b5a9713308e508aa8432f22078bb56941c49c246e267919ee34f7176779edfd23ff535421aa14d11674a8a2164a6bbc", 0x4c, 0x57c}], 0x808c0, &(0x7f0000000580)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b2c636f6e746578743d726f6f742c7569643d", @ANYRESDEC=0xee00, @ANYBLOB="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"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='ufs\x00', 0x0) 04:23:48 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1454.887128] FAULT_INJECTION: forcing a failure. [ 1454.887128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.888771] CPU: 1 PID: 8257 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1454.889861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.890971] Call Trace: [ 1454.891356] [ 1454.891718] dump_stack_lvl+0x8f/0xb7 [ 1454.892305] should_fail_ex.cold+0x5/0xa [ 1454.892901] _copy_from_user+0x30/0x1f0 [ 1454.893500] move_addr_to_kernel.part.0+0x31/0x110 [ 1454.894209] __copy_msghdr+0x3cd/0x4b0 [ 1454.894773] copy_msghdr_from_user+0xb4/0x150 [ 1454.895433] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1454.896202] ___sys_sendmsg+0xdd/0x1b0 [ 1454.896771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1454.897388] ? lock_release+0x3b6/0x750 [ 1454.897960] ? __fget_files+0x24e/0x450 [ 1454.898524] ? __pfx_lock_release+0x10/0x10 [ 1454.899141] ? lock_is_held_type+0xdb/0x130 [ 1454.899763] ? find_held_lock+0x2c/0x110 [ 1454.900341] ? __fget_files+0x270/0x450 [ 1454.900918] ? __fget_light+0xe5/0x280 [ 1454.901499] __sys_sendmmsg+0x1b7/0x550 [ 1454.902104] ? __pfx___sys_sendmmsg+0x10/0x10 04:23:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x600, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1454.902749] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 1454.903682] ? lockdep_hardirqs_on+0x7d/0x100 [ 1454.904324] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 1454.905077] ? __switch_to+0x5c3/0xee0 [ 1454.905691] ? __schedule+0x92e/0x25d0 [ 1454.906294] ? syscall_enter_from_user_mode+0x1c/0x50 [ 1454.907076] ? perf_trace_preemptirq_template+0xa6/0x410 [ 1454.907927] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1454.908814] ? syscall_enter_from_user_mode+0x21/0x50 [ 1454.909613] __x64_sys_sendmmsg+0x9d/0x110 [ 1454.910210] ? syscall_enter_from_user_mode+0x21/0x50 [ 1454.910942] do_syscall_64+0x3f/0x90 [ 1454.911474] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1454.912220] RIP: 0033:0x7fa3c5ab9b19 [ 1454.912740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.915147] RSP: 002b:00007fa3c302f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1454.916238] RAX: ffffffffffffffda RBX: 00007fa3c5bccf60 RCX: 00007fa3c5ab9b19 [ 1454.917231] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1454.918220] RBP: 00007fa3c302f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1454.919209] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1454.920215] R13: 00007ffcea1cb4ef R14: 00007fa3c302f300 R15: 0000000000022000 [ 1454.921235] [ 1454.939970] hugetlbfs: Unknown parameter 'sËe' 04:23:48 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:23:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x600, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x700, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:23:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'size'}, {0x20, 'tmpfs\x00'}], 0xa, "793f50cb092535020303aacfd7722a1e1cd46cd9b3dfb0d163466ec62e11b2a55f6f55bd84b6da9e2271e9ec13fdacd9d8eee69b4092291a185a108e9e3ed38cc70960620448164d9cdabec566875e0863ffa47d63d65068717bd65ebd3b37ce388e62f6fb26878e60"}, 0x80) 04:23:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 3) [ 1455.190056] hugetlbfs: Bad value 'm' for mount option 'size' [ 1455.190056] [ 1455.245339] FAULT_INJECTION: forcing a failure. [ 1455.245339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.246276] CPU: 0 PID: 8279 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1455.246822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.247366] Call Trace: [ 1455.247547] [ 1455.247739] dump_stack_lvl+0x8f/0xb7 [ 1455.248024] should_fail_ex.cold+0x5/0xa [ 1455.248315] _copy_from_user+0x30/0x1f0 [ 1455.248605] iovec_from_user+0x2b3/0x450 [ 1455.248901] __import_iovec+0x6b/0x690 [ 1455.249189] ? _copy_from_user+0x169/0x1f0 [ 1455.249489] import_iovec+0x87/0xb0 [ 1455.249764] copy_msghdr_from_user+0xed/0x150 [ 1455.250080] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1455.250447] ___sys_sendmsg+0xdd/0x1b0 [ 1455.250726] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.251048] ? lock_release+0x3b6/0x750 [ 1455.251330] ? __fget_files+0x24e/0x450 [ 1455.251611] ? __pfx_lock_release+0x10/0x10 [ 1455.251923] ? lock_is_held_type+0xdb/0x130 [ 1455.252234] ? __fget_files+0x270/0x450 [ 1455.252521] ? __fget_light+0xe5/0x280 [ 1455.252806] __sys_sendmmsg+0x1b7/0x550 [ 1455.253097] ? lock_is_held_type+0xdb/0x130 [ 1455.253417] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1455.253767] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1455.254154] ? syscall_enter_from_user_mode+0x21/0x50 [ 1455.254534] ? lock_is_held_type+0xdb/0x130 [ 1455.254856] ? rcu_read_lock_sched_held+0x42/0x80 [ 1455.255225] ? trace_rcu_dyntick+0x1a7/0x250 [ 1455.255561] ? syscall_enter_from_user_mode+0x21/0x50 [ 1455.255948] __x64_sys_sendmmsg+0x9d/0x110 [ 1455.256267] ? syscall_enter_from_user_mode+0x21/0x50 [ 1455.256650] do_syscall_64+0x3f/0x90 [ 1455.256941] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1455.257323] RIP: 0033:0x7fa3c5ab9b19 [ 1455.257592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.258848] RSP: 002b:00007fa3c302f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1455.259385] RAX: ffffffffffffffda RBX: 00007fa3c5bccf60 RCX: 00007fa3c5ab9b19 [ 1455.259905] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1455.260403] RBP: 00007fa3c302f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.260905] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1455.261404] R13: 00007ffcea1cb4ef R14: 00007fa3c302f300 R15: 0000000000022000 [ 1455.261917] [ 1456.011003] hugetlbfs: Bad value 'm' for mount option 'size' [ 1456.011003] 04:24:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x3f00, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:07 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:24:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 4) 04:24:07 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:24:07 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) inotify_add_watch(r1, &(0x7f0000000500)='./file2\x00', 0x21000280) setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000003c0), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='$\n\x00\x00\x00\x00\x00\x00./f\x00le0\x00']) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000001c0)=0x1) r2 = fsopen(&(0x7f0000000400)='debugfs\x00', 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r2, 0x5, 0x4, 0xb}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000002030004000000000000000003000000080003400000000708ec0545e1020000000000000096225440000000110800054000000026080001000000000209000200fffffffaec00100018efbb18a82dd8d56ada3b020040000200000be4a091751db8ee9c74b01bde85f569cfa4ed7e"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) stat(&(0x7f0000000540)='\x00', &(0x7f0000000580)) sendfile(r4, r3, 0x0, 0xfffffdef) getsockname$inet(r3, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:24:07 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:24:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x700, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:07 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xc1, 0xf9, 0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x40104, 0x100000000, 0x7, 0x8, 0x6b35, 0x3, 0x62, 0x0, 0x9, 0x0, 0xb80}, 0x0, 0x10, r0, 0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)={0xa0002000}) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) io_submit(0x0, 0x30, &(0x7f0000001340)) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d06d6", 0x23, 0x7}, {&(0x7f0000000340)="71b945737c159b720c7729a2c23adef6c897404ffaee5b26bea234a42f51f573d1ff8507e2b8e0db893c8057c047dafaa1385c52f5a806dcf5ea0ab8e8afafd3ab0fb53fe5f43c5b0f75034e91256cbc7d34ffd25b5f62a4f25b9611ad649a3e912ffa32e63aab2b1ca57e8bd412eb929a92df35222751affdcdabfb8a13ad590f8ceb653a627a54b56cec51bcb3e2464f6d4bf142e5f59a8bac035af8f71422", 0xa0, 0x3}, {&(0x7f0000000400)="bf01f5da2731c824195749e81d849a718ee6c678e94889d331a51f011b5a9713308e508aa8432f22078bb56941c49c246e267919ee34f7176779edfd23ff535421aa14d11674a8a2164a6bbc", 0x4c, 0x57c}], 0x808c0, &(0x7f0000000580)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b2c636f6e746578743d726f6f742c7569643d", @ANYRESDEC=0xee00, @ANYBLOB="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"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='ufs\x00', 0x0) 04:24:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x4000, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1474.530604] FAULT_INJECTION: forcing a failure. [ 1474.530604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1474.531470] CPU: 1 PID: 8305 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1474.532016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1474.532549] Call Trace: [ 1474.532728] [ 1474.532890] dump_stack_lvl+0x8f/0xb7 [ 1474.533174] should_fail_ex.cold+0x5/0xa [ 1474.533463] _copy_from_iter+0x480/0x1130 [ 1474.533770] ? __pfx__copy_from_iter+0x10/0x10 [ 1474.534093] ? rawv6_sendmsg+0x937/0x3b30 [ 1474.534425] ? __pfx_lock_release+0x10/0x10 [ 1474.534736] ? __lock_acquire+0x164d/0x5e70 [ 1474.535085] rawv6_sendmsg+0x2151/0x3b30 [ 1474.535387] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1474.535741] ? lock_is_held_type+0xdb/0x130 [ 1474.536067] ? lock_release+0x3b6/0x750 [ 1474.536385] ? __might_fault+0xd9/0x180 [ 1474.536703] ? __pfx_lock_release+0x10/0x10 [ 1474.537041] ? selinux_socket_sendmsg+0x201/0x2c0 [ 1474.537415] ? __pfx_selinux_socket_sendmsg+0x10/0x10 [ 1474.537813] ? _copy_from_user+0x169/0x1f0 [ 1474.538157] ? __import_iovec+0x26c/0x690 [ 1474.538484] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1474.538831] inet_sendmsg+0x121/0x150 [ 1474.539133] ? __pfx_inet_sendmsg+0x10/0x10 [ 1474.539472] sock_sendmsg+0x140/0x190 [ 1474.539779] ____sys_sendmsg+0x337/0x930 [ 1474.540076] ? copy_msghdr_from_user+0xfc/0x150 [ 1474.540440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1474.540816] ___sys_sendmsg+0x110/0x1b0 [ 1474.541122] ? __pfx____sys_sendmsg+0x10/0x10 [ 1474.541471] ? __fget_files+0x24e/0x450 [ 1474.541778] ? __pfx_lock_release+0x10/0x10 [ 1474.542113] ? lock_is_held_type+0xdb/0x130 [ 1474.542451] ? __fget_files+0x270/0x450 [ 1474.542765] ? __fget_light+0xe5/0x280 [ 1474.543081] __sys_sendmmsg+0x1b7/0x550 [ 1474.543365] ? lock_is_held_type+0xdb/0x130 [ 1474.543693] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1474.544036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1474.544400] ? syscall_enter_from_user_mode+0x1c/0x50 [ 1474.544749] ? perf_trace_preemptirq_template+0xa6/0x410 [ 1474.545121] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1474.545526] ? syscall_enter_from_user_mode+0x21/0x50 [ 1474.545882] __x64_sys_sendmmsg+0x9d/0x110 [ 1474.546173] ? syscall_enter_from_user_mode+0x21/0x50 [ 1474.546525] do_syscall_64+0x3f/0x90 [ 1474.546823] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1474.547176] RIP: 0033:0x7fa3c5ab9b19 [ 1474.547465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.548630] RSP: 002b:00007fa3c302f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1474.549127] RAX: ffffffffffffffda RBX: 00007fa3c5bccf60 RCX: 00007fa3c5ab9b19 [ 1474.549592] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1474.550064] RBP: 00007fa3c302f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.550527] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1474.550990] R13: 00007ffcea1cb4ef R14: 00007fa3c302f300 R15: 0000000000022000 [ 1474.551470] 04:24:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x80fe, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:08 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:24:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 5) [ 1474.731063] hugetlbfs: Bad value 'm' for mount option 'size' [ 1474.731063] 04:24:08 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:24:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3f00, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:08 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1474.928678] hugetlbfs: Bad value 'm' for mount option 'size' [ 1474.928678] 04:24:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000240)={'trans=virtio,', {[{@nodevmap}, {@mmap}, {@nodevmap}, {@access_user}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'hugetlbfs\x00'}}]}}) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f00000002c0)) [ 1474.987931] FAULT_INJECTION: forcing a failure. [ 1474.987931] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.988924] CPU: 1 PID: 8324 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1474.989516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1474.990109] Call Trace: [ 1474.990304] [ 1474.990485] dump_stack_lvl+0x8f/0xb7 [ 1474.990792] should_fail_ex.cold+0x5/0xa [ 1474.991104] ? dst_alloc+0xa2/0x610 [ 1474.991393] should_failslab+0x9/0x20 [ 1474.991693] kmem_cache_alloc+0x5a/0x410 [ 1474.992010] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1474.992336] dst_alloc+0xa2/0x610 [ 1474.992617] ip6_dst_alloc+0x32/0xa0 [ 1474.992907] ip6_pol_route+0x904/0x1110 [ 1474.993214] ? __pfx_ip6_pol_route+0x10/0x10 [ 1474.993522] ? lock_acquire+0x1b6/0x530 [ 1474.993839] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1474.994220] fib6_rule_lookup+0x70/0x340 [ 1474.994541] ip6_route_output_flags+0x76/0x330 [ 1474.994896] ip6_dst_lookup_tail+0x304/0xe30 [ 1474.995238] ip6_dst_lookup_flow+0x90/0x1d0 [ 1474.995560] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1474.995939] ? selinux_sk_getsecid+0x72/0xc0 [ 1474.996281] rawv6_sendmsg+0xc81/0x3b30 [ 1474.996603] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1474.996949] ? lock_is_held_type+0xdb/0x130 [ 1474.997283] ? lock_release+0x3b6/0x750 [ 1474.997592] ? __might_fault+0xd9/0x180 [ 1474.997910] ? __pfx_lock_release+0x10/0x10 [ 1474.998248] ? selinux_socket_sendmsg+0x201/0x2c0 [ 1474.998609] ? __pfx_selinux_socket_sendmsg+0x10/0x10 [ 1474.998993] ? _copy_from_user+0x169/0x1f0 [ 1474.999333] ? __import_iovec+0x26c/0x690 [ 1474.999662] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1474.999994] inet_sendmsg+0x121/0x150 [ 1475.000306] ? __pfx_inet_sendmsg+0x10/0x10 [ 1475.000650] sock_sendmsg+0x140/0x190 [ 1475.000966] ____sys_sendmsg+0x337/0x930 [ 1475.001297] ? copy_msghdr_from_user+0xfc/0x150 [ 1475.001657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1475.002037] ___sys_sendmsg+0x110/0x1b0 [ 1475.002352] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.002709] ? __fget_files+0x24e/0x450 [ 1475.002992] ? __pfx_lock_release+0x10/0x10 [ 1475.003332] ? lock_is_held_type+0xdb/0x130 [ 1475.003639] ? __fget_files+0x270/0x450 [ 1475.003954] ? __fget_light+0xe5/0x280 [ 1475.004258] __sys_sendmmsg+0x1b7/0x550 [ 1475.004565] ? lock_is_held_type+0xdb/0x130 [ 1475.004889] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1475.005241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1475.005636] ? syscall_enter_from_user_mode+0x21/0x50 [ 1475.006023] ? lock_is_held_type+0xdb/0x130 [ 1475.006355] ? rcu_read_lock_sched_held+0x42/0x80 [ 1475.006725] ? trace_rcu_dyntick+0x1a7/0x250 [ 1475.007066] ? syscall_enter_from_user_mode+0x21/0x50 [ 1475.007457] __x64_sys_sendmmsg+0x9d/0x110 [ 1475.007746] ? syscall_enter_from_user_mode+0x21/0x50 [ 1475.008139] do_syscall_64+0x3f/0x90 [ 1475.008432] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1475.008819] RIP: 0033:0x7fa3c5ab9b19 [ 1475.009095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1475.010414] RSP: 002b:00007fa3c302f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1475.010977] RAX: ffffffffffffffda RBX: 00007fa3c5bccf60 RCX: 00007fa3c5ab9b19 [ 1475.011512] RDX: 0000000000000001 RSI: 0000000020002580 RDI: 0000000000000003 [ 1475.012031] RBP: 00007fa3c302f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.012542] R10: 00000000000088d4 R11: 0000000000000246 R12: 0000000000000001 [ 1475.013060] R13: 00007ffcea1cb4ef R14: 00007fa3c302f300 R15: 0000000000022000 [ 1475.013611] 04:24:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x8b01, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1475.041101] 9pnet_virtio: no channels available for device syz [ 1475.052389] 9pnet_virtio: no channels available for device syz 04:24:08 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/277, @ANYRES32=r0, @ANYBLOB="ff7f0000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file0\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r7, r6, 0x0, 0xfffffdef) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) r9 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1, 0x0, 0x0, 0x2a0822, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x74]}}, {@huge_never}]}) move_mount(r9, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x2) [ 1475.342126] hugetlbfs: Bad value 't' for mount option 'size' [ 1475.342126] [ 1476.088965] hugetlbfs: Bad value 't' for mount option 'size' [ 1476.088965] 04:24:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:24 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0xd701, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000001c0)) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 04:24:24 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:24:24 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:24:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 6) 04:24:24 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:24:24 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1491.171860] hugetlbfs: Bad value 'm' for mount option 'size' [ 1491.171860] 04:24:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) (fail_nth: 7) 04:24:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x80fe, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:24 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:24:24 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0xfe80, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfe80, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1491.979474] hugetlbfs: Bad value 'm' for mount option 'size' [ 1491.979474] 04:24:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x100000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"]) 04:24:41 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:24:41 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:24:41 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:24:41 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:24:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1507.860889] hugetlbfs: Unknown parameter '' [ 1507.873166] hugetlbfs: Unknown parameter '' 04:24:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x2, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x1000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 5: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1f, 0x45, "2ddded5fac82ac236074ec6c4d1401878778005cd9695f3a7d9c32"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='aufs\x00', 0x105001, 0x0) bind(0xffffffffffffffff, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x1, 0x3}, 0x80) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="eb4550f82304b94d"]) 04:24:41 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:24:41 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:24:41 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:24:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:24:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x3, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000ffe30000e6075ac5d85a5a2eae766bf3b4b7a68eacf6d47ef171bf5c077b641372a81800"/49]) 04:24:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x4, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1508.360009] hugetlbfs: Unknown parameter ' ' 04:24:57 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:24:57 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:24:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x6, 0x4, &(0x7f0000001400)=[{&(0x7f0000000240)="9808967409546f43b674620697fb52bfca02242086f2b77b8b39a1aef1ad6619ef8aaaf5454d4bf6c8f5c9b828d961d06fcb550151e8eb3994edd0ec3874572b7a93", 0x42, 0x1ff}, {&(0x7f00000002c0)="73d32f711fc319db0fe99b5b3024ad692d0c5445a81ba5759c54f9dc9c8e9dfcc3e58ea1620236f2ad6ba8e21fdb51b14af6dcdbecdf6ff0b5408b3282ddd8d1c9e654cd3e1910b7043f195081d59d37ae0c3da3dfb1380a525dcb514d", 0x5d, 0x7}, {&(0x7f0000000340)="8405aaff33fb6a9d6dfb8fdfb4b03fb50e85640c23fa04008a9b7df1bfd2a4dcececd57c2d0e2343c59db213badd2a8623fda04766387b134c41abac072efe0b2576ac584cbc09ba08a904e36d2d7d299fc0a3492c4c4b740f8951e5f5568e49333ce3449311c7eb703f162822a3ad52c6d59afb098e52b5b9946c911e8d6749220dd3d3fccbfcafa0326797aca365d94c15c0c479050a35d067b65bd19736b79ef746264e4ebc24d16fa7", 0xab}, {&(0x7f0000000400)="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", 0x1000, 0x3}], 0x100000, &(0x7f0000001480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x65, 0x35, 0x37]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x2d, 0x30, 0x35, 0x36]}}, {@size={'size', 0x3d, [0x37, 0x25, 0x34, 0x67, 0x38, 0x0, 0x37]}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@euid_gt={'euid>', 0xee01}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%\'\')]%,$'}}, {@measure}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000004) 04:24:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x5, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x5, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:57 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:24:57 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:24:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x6, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1524.283468] hugetlbfs: Bad value 'm' for mount option 'size' [ 1524.283468] 04:24:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x6, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1524.300960] hugetlbfs: Bad value 'm' for mount option 'size' [ 1524.300960] 04:24:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:57 executing program 5: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x20, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:24:57 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:24:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x7, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x7, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:24:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x5000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80080, 0x28) 04:25:15 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:25:15 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:25:15 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:25:15 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x8, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x6000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:15 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:25:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x8, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:15 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x10, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1541.758922] hugetlbfs: Bad value 'm' for mount option 'size' [ 1541.758922] [ 1541.782383] hugetlbfs: Bad value 'm' for mount option 'size' [ 1541.782383] 04:25:30 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x10, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000280)=ANY=[@ANYBLOB="5398f6676ca00100000036a86d6c3fc3b27b1bdfe140bbfd6d6c24e825a31ece65ada58d50401810e476faf4e6d9592deb0756f3ca85ac6567149e5e341f58e6cf8aa9005c5dbdaf88b313384ac3d82613b70341677836fa9821629c4d812b71d238b32bce9ae7bef31f6a1f0d98d83e60941b3d"]) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 04:25:30 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:25:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x300, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:30 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:25:30 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:25:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x7000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:30 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1557.120383] hugetlbfs: Unknown parameter 'S˜ögl ' [ 1557.148295] hugetlbfs: Unknown parameter 'S˜ögl ' 04:25:30 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x18b, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x500, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x8000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=unix,', {[{@cache_mmap}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '!\xed#^K!]^!'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, 'size'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '*^-!+'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'tmpfs\x00'}}]}}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:25:30 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:25:30 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:25:30 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1557.460914] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 04:25:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x600, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:30 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x1d7, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1557.498687] hugetlbfs: Bad value 'm' for mount option 'size' [ 1557.498687] [ 1557.513104] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 04:25:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x10000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4800, 0x126) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0x2}, 0x40, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000006c0)="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", 0x1a4, 0x0, &(0x7f0000000380)={0x2, 0xb6, {0x1, 0xc, 0x51, "b6c3712eefa891deb06400e9578ee3cfc6aae62331de84fc2f9134cc51db26e56e2061a87aae5c08dbd248ec9785a962b90ee14b68fccc03cc3e585a5d0bf46bcff7c9f0cc50df60b396d91fe7d18b2590", 0x58, "6fdceac484f1b3fbdc0ef17afed502b238103e44d4db4777e10c5f2f1d8a15ded630e5c150508d047aa156d5579bcdc3ad9708cffff6c7d609429804834054c46a408474583f8b4883a836f78cbcebcf66d5203513fa7f4b"}, 0x30, "0f931699fac8f0cc2ab716fd75f4d1cbd34c2064d28386a320b53dfb88fb94ce2edf81b52337062952bf6f1f5a2b4f38"}, 0xf2}) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) getdents(r1, &(0x7f00000002c0)=""/25, 0x19) quotactl(0x1f, &(0x7f0000000000)='./file0\x00', 0xee01, &(0x7f0000000280)="53041731cad78749a0fde01d7117418b729d396bab9df8bd4192395f") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) inotify_add_watch(r2, &(0x7f0000000480)='./file1\x00', 0x1) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000180)=ANY=[@ANYBLOB="73697a653d6d2c0024433c1a167c64031fa780dbb2655f5bde02dae867baff12dce75534ac028f4993118c2a4e282e69a99cf6834f806dcf3391cfe7a1b28a51ea4cefe0d911d15923795c51089e60ae99d3985b9660e69d14bf1bdca60b5e29b9f7117667a1cedb3bf18a39aace1c019c2ea1a6b61d89aba466913f11f14919a0453e0d5fbcc3e279600f5ac5e8a0d4200f69370c271a17a996e6752b15cae2554fe33d9fc5f7597cc53648bac78ebadcc52dea07260ac7042d0b7dec75bda84a0000000000000000000000000000000054"]) 04:25:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x700, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x300, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:31 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:25:31 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:25:31 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:25:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3f000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x500, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1558.064748] hugetlbfs: Bad value 'm' for mount option 'size' [ 1558.064748] [ 1558.069170] perf: interrupt took too long (3173 > 3135), lowering kernel.perf_event_max_sample_rate to 63000 04:25:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x40000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x3f00, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xf5ffffff, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x600, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1558.892591] hugetlbfs: Bad value 'm' for mount option 'size' [ 1558.892591] 04:25:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x4000, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x38, 0xfe613e0ae18ed825, 0x70, 0x0]}}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) 04:25:47 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:25:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfe800000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:47 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:25:47 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x700, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:25:47 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:25:47 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1574.380288] hugetlbfs: Unknown parameter 'nr_blocks' [ 1574.400929] hugetlbfs: Unknown parameter 'nr_blocks' [ 1574.462284] perf: interrupt took too long (3967 > 3966), lowering kernel.perf_event_max_sample_rate to 50000 04:26:01 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x80fe, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:01 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:26:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="0896e66c604f0779e7a4e5ebe6fbc2bd7a257285ab4ed804972c3e4562ae263870dacf34c57d75a60c4192c94aff95f38178d7af9d6fadad5149a03caf54036118e33ea415", 0x45, 0x1ff}], 0x40820, &(0x7f00000004c0)={[{@minixdf}, {@journal_path={'journal_path', 0x3d, './file0'}}], [{@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}, {@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}, {@appraise_type}]}) 04:26:01 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:26:01 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3f00, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xffffff7f, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:01 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:26:01 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1588.640853] hugetlbfs: Bad value for 'size' 04:26:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfffffff5, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1588.667199] hugetlbfs: Bad value for 'size' 04:26:02 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:02 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0xfe80, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) 04:26:02 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:26:02 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1588.962076] hugetlbfs: Unknown parameter '' [ 1588.974845] hugetlbfs: Unknown parameter '' 04:26:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:20 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:26:20 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r2 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 04:26:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86800) getdents64(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) symlinkat(&(0x7f00000011c0)='./file0\x00', r2, &(0x7f0000001200)='./file0\x00') 04:26:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:20 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x80fe, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:20 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:26:20 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1607.094956] hugetlbfs: Bad value 'm' for mount option 'size' [ 1607.094956] 04:26:20 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x8b01, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:20 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:26:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:20 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:26:20 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:26:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:20 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xd701, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1607.567783] perf: interrupt took too long (4985 > 4958), lowering kernel.perf_event_max_sample_rate to 40000 [ 1607.897049] hugetlbfs: Bad value 'm' for mount option 'size' [ 1607.897049] [ 1624.315119] hugetlbfs: Bad value 'm' for mount option 'size' [ 1624.315119] [ 1624.320501] hugetlbfs: Bad value 'm' for mount option 'size' [ 1624.320501] 04:26:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 04:26:37 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:26:37 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:26:37 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:26:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:37 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfe80, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:37 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:26:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x36, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="73697a653d6d2de898f2ca5396b8bf4124b32c00"]) openat(r0, &(0x7f0000000180)='./file0\x00', 0x200000, 0x185) 04:26:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x5, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:37 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x100000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1624.571394] hugetlbfs: Bad value 'm-è˜òÊS–¸¿A$³' for mount option 'size' [ 1624.571394] [ 1624.593267] hugetlbfs: Bad value 'm-è˜òÊS–¸¿A$³' for mount option 'size' [ 1624.593267] 04:26:52 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='anon_inodefs\x00', 0x1042888, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {r0}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x81}}, './file1\x00'}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='./file0\x00') syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x1, 0x0, 0x0, 0x31822, &(0x7f0000000140)=ANY=[@ANYBLOB='\b']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) openat(r2, &(0x7f0000000400)='./file0/file0\x00', 0x480200, 0x41) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x12000, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x880, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@posixacl}, {@access_uid={'access', 0x3d, 0xee01}}, {@cache_mmap}, {@fscache}, {@privport}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fowner_gt={'fowner>', 0xee01}}]}}) write$binfmt_misc(r0, &(0x7f0000000440)={'syz1', "062ae7c07c3c1c3f876622296f140ffe5f9ed2c1e041edddf47ec1914aaae7b0a3ce5a938e70f623785e"}, 0x2e) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x2) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x150) 04:26:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x6, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:52 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:26:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x1000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:52 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:26:52 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:26:52 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:26:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1638.819010] 9pnet_fd: Insufficient options for proto=fd [ 1638.825768] 9pnet_fd: Insufficient options for proto=fd 04:26:52 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:26:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 04:26:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x7, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:26:52 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1638.981657] hugetlbfs: Unknown parameter 'mpol' [ 1639.005930] hugetlbfs: Unknown parameter 'mpol' 04:26:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x10}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x8, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:07 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x300}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:07 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:27:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='binder\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB='siz\a\x00m,\x00']) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) 04:27:07 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:27:07 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:27:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x6, 0x9, 0xc1, 0x4, 0x2, 0x3e, 0x8, 0x1d, 0x38, 0x3d5, 0x1ff, 0x831, 0x20, 0x1, 0x2, 0xaaa}, [{0x3, 0x800, 0x8001, 0x2, 0x9, 0x8000, 0x5251, 0x10}], "218bb6bb95e5fa5ac8d60e28c574d705551d8981fd4a60435002f118f535a85afd8b37ccdd899696070a8b61c53a5ac09bd5d8d0bdddeaec7b386f7791ee305ef6925b6422fa0d348f97a983f2d87fbd429e8b6c104790fa70c0c0f5f8a39476169f768a75dec3d5bac2ba08ad7b057aad56145e019267eb836dc1be9e621de3c141d09164ef8225451d43bcdda0c6c8dffaac95b2b3fb093bb6b108a9f4e40141a7b9cef569efdf130f802e54b700c677317abc965940da283bfc464856053dbb4264b563ae6122f7f275235430f926126eb870c3d74351c7de8dd00d853b9bc75197b985d1f418"}, 0x140) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) 04:27:07 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, 0x0, 0x2a0822, &(0x7f0000000480)={[], [{@obj_type={'obj_type', 0x3d, 'hugetlbfs\x00'}}]}) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='dax\x00', 0x883088, &(0x7f0000000280)='&\x00') mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f5f6cfc91cd1d"], &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='logfs\x00', 0x240000, &(0x7f00000003c0)='\x00') mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x20) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') chmod(&(0x7f00000002c0)='./file0\x00', 0x20) 04:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x500}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1653.998213] hugetlbfs: Unknown parameter 'obj_type' [ 1654.013356] hugetlbfs: Unknown parameter 'obj_type' 04:27:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x10, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:07 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7f}}, './file1\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000100)='/proc/vmallocinfo\x00', &(0x7f0000000140)='./file1\x00', r3) sendfile(r0, r1, 0x0, 0x10000027f) 04:27:07 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:27:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x5000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7800, 0x1, 0x6, 0x20, {{0x26, 0x4, 0x0, 0x3e, 0x98, 0x67, 0x0, 0x20, 0x29, 0x0, @multicast1, @broadcast, {[@generic={0x83, 0x6, "fea08810"}, @timestamp_addr={0x44, 0x54, 0xaf, 0x1, 0x6, [{@rand_addr=0x64010101, 0x20}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0x48d}, {@broadcast}, {@empty}, {@rand_addr=0x64010100, 0x1}, {@multicast2, 0xe7}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9b}]}, @ssrr={0x89, 0x13, 0x99, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @multicast1, @loopback]}, @ssrr={0x89, 0x17, 0x89, [@broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000740)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x8, 0x3) setresuid(0x0, r3, 0x0) setresuid(r2, r3, r1) setresuid(0x0, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0) getresuid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)=@allocspi={0x194, 0x16, 0x100, 0x70bd25, 0x25dfdbfd, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x4e22, 0x1, 0x4e22, 0xb5, 0x0, 0x100, 0x0, 0x88, r5, r6}, {@in=@empty, 0x4d2, 0xff}, @in=@private=0xa010101, {0x1, 0x3, 0x80000001, 0x401, 0x6, 0x1f8, 0xfffffffffffffc00}, {0xfff, 0x2, 0x10001, 0x1}, {0x2, 0x6, 0xffff}, 0x70bd27, 0x3502, 0xa, 0x1, 0x5, 0xa0}, 0x80, 0x1}, [@replay_thresh={0x8, 0xb, 0xfff}, @algo_crypt={0x91, 0x2, {{'xts-aes-neonbs\x00'}, 0x248, "0188e1eaf036cac7fb152ced7e036e705e585d11ebec450cd50f305820839a82f337446555eebf07057ebf185e1e8248bff8e7919788a15ec3c3514e6e08edf9b92dd1adc327555db9"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000180)={[{@size={'size', 0x3d, [0x6d]}}], [{@dont_hash}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x64, 0x30, 0x35, 0x38, 0x65, 0x38], 0x2d, [0x34, 0x36, 0x33, 0x62], 0x2d, [0x62, 0x64, 0x63, 0x38], 0x2d, [0x30, 0x37, 0x33, 0x35], 0x2d, [0x62, 0x0, 0x33, 0x36, 0x38, 0x66, 0x32, 0x32]}}}, {@uid_lt={'uid<', r0}}]}) 04:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x700}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x6000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:22 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:27:22 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:27:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9b) r2 = dup(r0) openat(r2, 0x0, 0x0, 0x19) syncfs(r2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 04:27:22 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:27:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fchmodat(r0, &(0x7f0000000200)='./file0\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm', 0x8042, 0xc) sendfile(r3, r2, 0x0, 0x0) fchmodat(r2, &(0x7f0000000180)='./file0/file0\x00', 0x42) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:27:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x300, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3f00}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x500, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1669.098582] hugetlbfs: Bad value 'm' for mount option 'size' [ 1669.098582] 04:27:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x7000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x600, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1669.860549] hugetlbfs: Bad value 'm' for mount option 'size' [ 1669.860549] 04:27:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x80fe}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:38 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) lchown(&(0x7f0000000180)='./file0\x00', r1, 0xee01) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:27:38 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x8000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:38 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x22, 0x4f1, 0x1000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0) pread64(r1, &(0x7f0000000440)=""/236, 0xec, 0x61ba) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=unix,cache=fscache,access=client,access=any,access=', @ANYRESDEC=0xee01, @ANYBLOB=',privport,dflthid=', @ANYRESHEX=r2, @ANYBLOB=',fscontext=system_u,obj_user=environ\x00,subj_role=environ\x00,euid=', @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00']) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140) ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) mount_setattr(r4, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={0xf0, 0x4, 0xa0000, {r5}}, 0x20) write$binfmt_aout(r4, &(0x7f0000000a40)={{0xcc, 0x0, 0x6, 0x2f6, 0x9a, 0xf8d2, 0x2c3, 0x2}, "b49ad8ab32551f715f3b66714ae0cc6421322eec99ef97ca95fde6988d97d0eb0eeaff23b22a891adedc7b43c33a4eb30efd202cf65f3c49a5b1b5773811", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x95e) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBTYPE(r6, 0x4b4c, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:27:38 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:27:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x700, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:38 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:27:38 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:27:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3f00, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:38 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1685.551854] hugetlbfs: Bad value 'm' for mount option 'size' [ 1685.551854] [ 1685.571048] hugetlbfs: Bad value 'm' for mount option 'size' [ 1685.571048] 04:27:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0xfe80}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:39 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x10000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:39 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:27:39 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xef, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x78]}}]}) 04:27:39 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3f000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x100000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1685.819702] hugetlbfs: Bad value 'x' for mount option 'size' [ 1685.819702] [ 1685.831444] hugetlbfs: Bad value 'x' for mount option 'size' [ 1685.831444] [ 1703.722957] hugetlbfs: Bad value 'm' for mount option 'size' [ 1703.722957] [ 1703.725358] hugetlbfs: Bad value 'm' for mount option 'size' [ 1703.725358] 04:27:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x80fe, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:57 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x410880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'veth0_macvtap\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x73, 0x45, 0xb, 0x54, 0x0, 0x1, 0x0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x2}, 0x1080, 0x8, 0x2, 0x7, 0x2, 0x200, 0x8000, 0x0, 0xfffffff8, 0x0, 0x40000100}, 0x0, 0xb, 0xffffffffffffffff, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd_index=0x1, 0x20, 0x0, 0x0, 0x18, 0x0, {0x1}}, 0x1) r2 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x80081270, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x62, 0x7d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x855}, 0x20044801) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 04:27:57 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) statx(r0, &(0x7f0000000180)='./file0/file0\x00', 0x100, 0x20, &(0x7f00000001c0)) 04:27:57 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:27:57 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:27:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x40000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:57 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:27:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x1000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000200)=ANY=[@ANYBLOB="73697a971cf6653dabe38a8bacb13fb8372c00000000"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) mknodat$null(r1, &(0x7f00000001c0)='./file0\x00', 0x20, 0x103) 04:27:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x8b010000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:57 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x143000, 0xa) r2 = gettid() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x4f62, 0x105001) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7, 0x3, 0xff, 0x81, 0x0, 0x5, 0x60066, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000280)}, 0x3, 0x6, 0x7fff, 0x8, 0xffffffff00000001, 0x0, 0xbe77, 0x0, 0x1, 0x0, 0x6}, r2, 0x8, r5, 0x3) accept4$unix(r1, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x80400) 04:27:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfe80, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:27:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x2000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1703.995334] hugetlbfs: Bad value 'm' for mount option 'size' [ 1703.995334] 04:27:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x100000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1704.820368] hugetlbfs: Bad value 'm' for mount option 'size' [ 1704.820368] 04:28:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2804086, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000140)={[{@huge_always}]}) 04:28:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x210100, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) sendfile(r1, r2, &(0x7f0000000000)=0x3, 0x1) pwritev(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)="65e65479399ce903d93f61010ae7a327cd2bb2c044e15ee8d9aaeb37b674016e076b33a3e88ee0a9c9ed4c722acd07afaa9b81e969d3b8fe0249aa94a523ccdfa1254421c7e1cf091f2471dca98446a9ed11", 0x52}, {&(0x7f0000000400)="7b9dd686c490b146b596338991e2c8597797d8d8e038c49a8da9723f303cad01c5e857a192dd01bcd8b43f9148ace049c551cf1bebf4c76d7fb41c53d4d5014aab3e8b1f550c8819c6", 0x49}, {&(0x7f0000000480)="1ad2ecd523302c0f70fa4e6f9361a2c1b6c8012bf74b9556cd19c8689344cf6e2e41fba2407ebd0d315aabc5cfbd141c25eb6d64c8cb2202c16775c494a4924eea49db8d3d19900d18f618922a98c86d7877ab67ccffb97e79d62a84c6098940e5a1fc3711635aff3e3541abd41297ec3dab6a2527722396d80c3a69b6da324d9574480a1f5d20561f1d6a9e071e280c1b25cf0ee59dfcc85aded59007a3f7596b8be44bb08fc2481ad995c31fc5950152cd8feca7b80c9d4247595e89c6290196211a31e22ae0a2b72f06e405d1bb88fe14", 0xd2}, {&(0x7f0000000580)="4fd35d00d185549b8e53e67f76250c59e26a61316f712159c83d23e218e37b1662792e3e711612c278b9b2aaf37817339c9c1ae38e6f6534e4ce96435ded85234b4c97957d6491e400cbdb71999feaac060b47320f8dd382ff80bb74fe0f4c535ee4e6399849a2c99e1ae8c930a9906a69bfbd1674932db37d4fdcee2ae155b7b1", 0x81}, {&(0x7f0000000640)="f71034c9bc33e2ffd0b72058f781500c1d5f14d75e67c6207a93e9c8afef65d26d31341c381a2df35ebf6f15012b787a95715d9ec9ee0b9beec89fcba1eb7b4be1eafd7b6a956668461d914ccca6fea7a2640d8a7e1b5c1ed89337b5f93c0c2eb86b609f712b7b55cc062cd5aa924cff43514101b09455b45765fc8fcb048b8deee67ae674d827bca1fdb84f2a19c0a973fc535b4a38ee6768e0f9c558e5b40bc51595ed3969", 0xa6}, {&(0x7f0000000040)="e0c44b", 0x3}, {&(0x7f0000000700)="a01b1a9b586c66ca85953cf3b4092361ab94d525fb676d5f790cb6641cfc242dcf5a18f13a5640fb171e9b65d203a89e2434cb6588c191c9675448d49e2379cfda0006c856e5f1efbdcb7a55cff58915c99e8e5992624f6aafdbff0486e3c1f51df566a4956b7eeaab00fcae6bee4e4f6ad486f259a6cc96071c1dd36886bc21c07e3301f230553f1861c3883b3703eddff05906013118d854767c06b8", 0x9d}], 0x7, 0xfffffffd, 0xad63) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x800, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r3, 0xee01) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x8, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb, 0x81}, 0x101, 0x8, 0x0, 0x0, 0x0, 0x3d720000, 0x0, 0x0, 0x1}, r4, 0xffffffeffffffffd, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:28:11 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:28:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xd7010000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:11 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:28:11 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:28:11 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x1000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1718.528859] hugetlbfs: Unknown parameter 'huge' [ 1718.551656] hugetlbfs: Unknown parameter 'huge' 04:28:12 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xf5ffffff, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:12 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:28:12 executing program 5: setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x1000000, [{0xffffffff, 0x8}]}, 0xc, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfffc, 0x0, 0x0, 0x7fff0000}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4, 0x0, 0x0, 0x1022822, &(0x7f0000000380)={[{@size={'size', 0x3d, [0xf9, 0x67, 0x6b, 0x6a, 0x36, 0x31]}}]}) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)='\x00') 04:28:12 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:28:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x200000000000}, 0x4082, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0xfef6, @broadcast}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc4000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) 04:28:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x5000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1718.720245] hugetlbfs: Bad value 'ùgkj61' for mount option 'size' [ 1718.720245] 04:28:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfe800000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:12 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:12 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:28:12 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1718.844932] hugetlbfs: Bad value 'ùgkj61' for mount option 'size' [ 1718.844932] 04:28:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xffffff7f, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x6000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:29 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:28:29 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:28:29 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:28:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfffffff5, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x4000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:29 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81000000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x1, 0x0, 0x0, 0x12a0822, &(0x7f0000000180)=ANY=[@ANYRES32=r0]) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setxattr$security_capability(&(0x7f0000000380)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x4, 0xefffffff}, {0x3, 0x200000}], r4}, 0x18, 0x2) r5 = getuid() setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0x0, 0x2}, {0x80000000, 0x10000}], r5}, 0x18, 0x1) lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x0) 04:28:29 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:28:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x7000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1736.691697] hugetlbfs: Unknown parameter 'ÿÿÿÿ' 04:28:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x5000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:30 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x8000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:30 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:28:30 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:28:30 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:28:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x10000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:49 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:28:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x6000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:49 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x66, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000380)="ac2f40301b797979883926c0cbd11d4184098db083cf567c1d5d06c6660cf3ac9a0f9729aec7a809fe6ebb6c236b2f15e2efadf807", 0x35, 0x7fffffff}], 0x2158019, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@sb={'sb', 0x3d, 0x6b3}}], [{@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@euid_gt={'euid>', r2}}, {@pcr={'pcr', 0x3d, 0x31}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'tmpfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}, {@measure}, {@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}]}) accept4$unix(r1, &(0x7f0000000180), &(0x7f0000000280)=0x6e, 0x800) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000500)=ANY=[@ANYBLOB="7b32e108a53c839600d22845304b1c14d8f3cd248ba8496969f05ca0c8dba47a8e0b12003c9ba86ce0cb7276435386"]) r4 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r4, &(0x7f0000000200)=@abs, &(0x7f0000000000)=0x6e, 0x800) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x80001, 0x8) 04:28:49 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:49 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:28:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3f000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:49 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:28:49 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055d40)={0xf74, [], 0x0, "0d87d5a6d3dd0a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050740)={0x1ff, [{r3}, {}, {r3}, {}, {0x0, r4}, {r3}, {r3}, {r3}, {}, {r3, r4}, {r2, r4}, {}, {}, {r2, r4}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {r3, r4}, {r2, r4}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r3}, {r3, r4}, {r2}, {r3, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {r3}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r2}, {r3}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2, r4}, {r2}, {r3}, {}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3}, {r2}, {r3, r4}, {}, {0x0, r4}, {r3}, {r3}, {}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {r3}, {}, {r3}, {0x0, r4}, {r3}, {r3}, {r2}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {r3}, {r3}, {r3}, {r3, r4}, {r3}, {}, {r2}, {r3}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r3}, {r3, r4}, {}, {r3}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {0x0, r4}, {r3}, {r2}, {}, {}, {r2}, {}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3}, {}, {r3}, {r2, r4}, {}, {r3, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {r3}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {r2, r4}, {0x0, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2}, {r3}, {0x0, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {}, {r2}, {r3}, {0x0, r5}], 0x7, "1483e1ce9ddab1"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f00000004c0)) epoll_create(0x101) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, r8, 0x8) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r9, 0x80045438, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(r6, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:28:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x40000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x7000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:49 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:28:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x31, &(0x7f0000000180)="60b1f1828fe381502a415d8dbdf789cbfdf59bfa5ac8aec33f1fd32a209c3383f7ad76a1531174f05a9c51f8f5dd32d612", 0x3c, 0x0, &(0x7f00000001c0)="3753232f84c91228b38526307300374595890186fd0211f5aafd3a5a6c2692e6a989a7117b0ee848acd308d5fce4a4a89676f019724406ba741d5755"}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:28:50 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:28:50 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:28:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0xf5ffffff}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1756.813101] hugetlbfs: Bad value 'm' for mount option 'size' [ 1756.813101] [ 1757.253909] Bluetooth: hci0: Opcode 0x c03 failed: -4 [ 1757.260167] Bluetooth: hci0: Opcode 0x c03 failed: -4 04:29:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x8000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:08 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:29:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0xfe800000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:08 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:29:08 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:29:08 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055d40)={0xf74, [], 0x0, "0d87d5a6d3dd0a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050740)={0x1ff, [{r3}, {}, {r3}, {}, {0x0, r4}, {r3}, {r3}, {r3}, {}, {r3, r4}, {r2, r4}, {}, {}, {r2, r4}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {r3, r4}, {r2, r4}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r3}, {r3, r4}, {r2}, {r3, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {r3}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r2}, {r3}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2, r4}, {r2}, {r3}, {}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3}, {r2}, {r3, r4}, {}, {0x0, r4}, {r3}, {r3}, {}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {r3}, {}, {r3}, {0x0, r4}, {r3}, {r3}, {r2}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {r3}, {r3}, {r3}, {r3, r4}, {r3}, {}, {r2}, {r3}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r3}, {r3, r4}, {}, {r3}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {0x0, r4}, {r3}, {r2}, {}, {}, {r2}, {}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3}, {}, {r3}, {r2, r4}, {}, {r3, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {r3}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {r2, r4}, {0x0, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2}, {r3}, {0x0, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {}, {r2}, {r3}, {0x0, r5}], 0x7, "1483e1ce9ddab1"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f00000004c0)) epoll_create(0x101) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, r8, 0x8) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r9, 0x80045438, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(r6, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:29:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001500)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000001600)=0xe8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xa8, 0x4, &(0x7f0000001480)=[{&(0x7f0000000240)="be7cdb1de2bee8e681d99767a948240d8753cc937119ad19fb733d6783a89bfbc6a39cfb8ed0e1c2bc916513238f1c503d8c54ac1d28955ad92e011007ab2554561b90ef0ea2e691a6b29bf2d053b5ac31a7342ce154ae7f636f3c33122a73cdd1d1a72f5bbb826e3cb30f9ef2db054ef555835cdcada599d2297e48c0f2d75eb4cc01041347528c383a1760cf1bc26514576df4568a954e747d7a4a3caf31175549d1eba8a411b82c900b974742b98c1ce40212a8d9d3697c867a9df8d8da4641a689051ee326eb7e7a52a15f68d10bdadcbe34d216eaeef7ecd92ea95ef6087c", 0xe1, 0x2}, {&(0x7f0000000340)="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", 0x1000, 0x4}, {&(0x7f0000001340)="0ce73ff5d30ca1a712036829b3c93c2ecb8dfac6252c872fc352a93c68f7c1bc5e73e88810f1285265ddf08766b0f3a97935f563b913e697c553fa8bd6207637c9554630d86c86bc4664a7d1151554fc6222ebee9dd4781d09f64f7809c9e37cb7748d6b38b3654e1a86cbfc89ccaf515a4e3fb5c5833804dec68e76eda301b5a317376a2230670fb2916b7a537432ad07ba7da4d7321895e3ae7c6dccf168e783be09da972ee090ad764c6cce421d9c2f8f4925ef1a36c8dc9cf8a7a381e42ebbc4da6514fca5157da00de65ea8465d38507ceb06b6b71585b9", 0xda, 0x40}, {&(0x7f0000001440)="a1e4ccccfc9ad3e77784bd57dffe727f3d8cda786eab312fc452bf0f5de88c564c064f", 0x23, 0x6}], 0x924000, &(0x7f0000001640)={[{@resuid={'resuid', 0x3d, r0}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfff}}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7ff}}], [{@subj_user={'subj_user', 0x3d, '*\x99,:@-\\#,-'}}, {@uid_lt}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@permit_directio}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x78]}}]}) unlink(&(0x7f0000000180)='./file0\x00') r1 = accept$inet(0xffffffffffffffff, &(0x7f0000001700), &(0x7f0000001740)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001780)={@multicast1, @rand_addr=0x64010101, r2}, 0xc) [ 1775.331985] perf: interrupt took too long (6261 > 6231), lowering kernel.perf_event_max_sample_rate to 31000 [ 1775.347007] hugetlbfs: Bad value 'x' for mount option 'size' [ 1775.347007] [ 1775.367042] hugetlbfs: Bad value 'x' for mount option 'size' [ 1775.367042] 04:29:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0xffffff7f}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x10000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:08 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:29:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r3], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x1) [ 1775.620325] hugetlbfs: Bad value 'm' for mount option 'size' [ 1775.620325] 04:29:09 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0xfffffff5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:09 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:29:09 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:29:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x3f000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1776.130306] Bluetooth: hci0: Opcode 0x c03 failed: -4 [ 1776.438390] hugetlbfs: Bad value 'm' for mount option 'size' [ 1776.438390] 04:29:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x40000000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:26 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:26 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:29:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x17, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:26 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:29:26 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:29:26 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x20000010000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) chown(&(0x7f00000003c0)='./file1/file0\x00', r2, 0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r3, r1, 0x0, 0xfffffdef) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) close(r4) fcntl$getflags(0xffffffffffffffff, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_io_uring_setup(0x5a77, &(0x7f0000000300)={0x0, 0x4721, 0x10, 0x0, 0x328}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) statx(r0, &(0x7f0000000880)='./file0\x00', 0x2000, 0x800, 0x0) syz_io_uring_setup(0x3faf, &(0x7f0000000100)={0x0, 0xd75b, 0x10, 0x1, 0x22d, 0x0, r5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 04:29:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='cpuset\x00', 0x0, &(0x7f0000000280)='tmpfs\x00') syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000180)=ANY=[@ANYBLOB="652b822c007a21eeb4903836d56a895f264151cd8cbf60228d92babeb54e9cce6763f18fa7bcdd075f6bcfc1c1504836f97b2542dd52805b9bd04124253fcad94a1b8b07e67799b67fe64923420190e09c68a4e8a3a9c84423cca371f307a996dcb2a8015d37de5f53425bdacae2fd2de92601e9eef4f9b7469b82814afdb823"]) [ 1793.473199] loop0: detected capacity change from 0 to 264192 [ 1793.489026] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 04:29:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xf5ffffff, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1793.554348] hugetlbfs: Unknown parameter 'e+‚' 04:29:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1b, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:27 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:29:27 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:27 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:29:27 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:29:27 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0407260c09d22c976c1c4cc7f9bcbbb13a1738534e7c212d4c6999e5ba2a87b866d25d7e5d4493477e861c072453dd65d57f9e1d2d13dffe7d25f4452e799d0ceca01cf84a6726792e2dfe411bec4f574dcd6f3852ff1af93cf058958d8d11c5546eebeee82822da3100ce23e1a9e1e8ad95000000007aaf362710265137ddfb3ede0f97909bfc366a73a201fe5be333842a30789ebe27c41a72fb53dfe7281a8c2348e093e4d20066709f8cfa9470ec00b69cd3d7d7cbf8b70275632c059956502e4a7c7ac2092b44cc68cf57a6bc46febbb37a2bedc04685e5e8d9b928424ca5bb6c08000000000000000000"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "318911a5d532190b1af506cd4747b4e143e4ce170344b92c6c256788511f8e85d9298caacc09b47c0b00ed1225f4652d39ecc9dd2fd2654d8705cac3feaf6ecad26b4e9b5b56afff5786760dc9692cdd4c7c29a442c26bb01d8b1e4f41379d6ac785e3e3497c2761fd814cc26350e660e39f178d5fdbfb39c211dca10dc6d8a93f0f9bb987a05bfee1312b102f"}, 0x91) [ 1793.786641] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1793.790069] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1793.791950] Bluetooth: hci0: unexpected event for opcode 0x0c26 04:29:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="0200", 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:42 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:29:42 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xa}, 0x58420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0xb58a, 0x100000001, 0x2}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r2, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000080)={0x200017e, 0x0, 0x0, 0xfffffffe, 0x9}) fallocate(r3, 0x0, 0x0, 0x87ffffc) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) ioctl$CDROMREADALL(r3, 0x5318, &(0x7f0000000340)) 04:29:42 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:42 executing program 5: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x8000, 0x2) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000001c0)='hugetlbfs\x00', &(0x7f0000000200)='!,@$-}[\x00', &(0x7f0000000240)='size', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='size', &(0x7f0000000340)='\x00', &(0x7f0000000380)='size', &(0x7f00000003c0)='tmpfs\x00'], &(0x7f0000000580)=[&(0x7f0000000480)='hugetlbfs\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='size', &(0x7f0000000540)='$/\x00'], 0x400) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:29:42 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfe800000, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:42 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:29:42 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:29:42 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x10}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x101, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@huge_within_size}]}) 04:29:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="0300", 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:42 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:29:42 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xffffff7f, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:42 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1809.560086] hugetlbfs: Unknown parameter 'huge' [ 1809.580064] hugetlbfs: Unknown parameter 'huge' 04:29:43 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00') perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40020, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x40, 0x5, 0x3, 0x0, 0x849, 0x5, 0x8001, 0x0, 0x9, 0x0, 0xd7}, r1, 0x9, r0, 0x3) syz_io_uring_setup(0x623c, &(0x7f00000001c0)={0x0, 0xfc32, 0x2, 0x0, 0x1109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0x1f, 0x20, 0x4, 0x0, 0x2, 0xc10, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x6}, 0x10020, 0x7, 0x9, 0x2, 0xfffffffffffffffd, 0x3d, 0x80, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, r1, 0x2a, 0xffffffffffffffff, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cachetag=net/ip_mr_Lache\x00,version=9p2000.u,version=9p2000.u,defcontext=uoconfined_u,\x00']) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8001}, 0x51000, 0x0, 0x100000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0) 04:29:43 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x18b}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:59 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0xfffffff5, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:59 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:29:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="0400", 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:59 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:29:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x3, &(0x7f0000000480)=[{&(0x7f0000000200)="45f3382fa932dcf27b432fb06fa1ca6c76c5dba20674bd779d6dcf4c64289cd4a9483894ddcb2f5f0e6815cd4e4e803ce100b4d06d619bb15b78ecc539c9a662bffceabc3a5c605fad27", 0x4a, 0xba}, {&(0x7f0000000280)="ba373eb4d68d4a02082edd45cb1fd2d2116d3d557fe799a6930f8c2741c89f7c62566595837b50672d5ed30b68348dfddf71ea61056498adf6b60fb37b4c1a1e0da1552726faf67e594200c15e5d147f06f099492315789122d5433a973a8ef8c1901e6666828c9b27a1d4d4bea27a67d4c2cde46986444386fea711e49c0524610a9e50d8aab19c5452c19555b1ea9347b2ebb50fb429bcacc36e63642b1ed16eae754acbba9c573d6e55823f8f2f86b3e695da63000159a4c46261076b33a7c967df08467cdb6a70013d2d8acc98526d5cc42a0b146bd4333df3cf59b2b1a7a3639f8c80a8", 0xe6, 0x4}, {&(0x7f0000000380)="bc3c9b85129287db7c35c3075041b01dfb767bd0055d9e62f08ec347f6af40b2768d24b25ea931bc7f2427b5b0303a7daa7e26156c4707377c1582cd95f97a1c3a80e517e5d8af933c9f35e94ec93257c8c4386158a8d9d1bb006d826902187592d39e126083854423185fc4a5e845e4ad58ca4dcd9729e5c29d31577a70149cee856dde1e58ec5e768cfc5066cea0e852cd2e68c7e74c191016cf4835165f66db9784a2b83084262f2cf156957a061aed2224c24e7c21bd9d0dd076d7febc02cf945918e788b5475a7c88040312de1058e701", 0xd3, 0xe}], 0x2a0000, &(0x7f0000000500)={[{@errors_continue}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noinit_itable}], [{@smackfshat={'smackfshat', 0x3d, 'hugetlbfs\x00'}}, {@appraise_type}, {@appraise}, {@subj_role={'subj_role', 0x3d, '-\xb8)'}}, {@seclabel}, {@audit}, {@pcr={'pcr', 0x3d, 0x1a}}, {@dont_appraise}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x121001, 0x110) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:29:59 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:29:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x1d7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:59 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0xf}) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = getegid() r5 = gettid() rt_sigqueueinfo(r5, 0x0, &(0x7f0000000000)) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a900)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="df1562ebe13c15887a32b40ecd2bc4e99b45a9da2abb8712dab1df522bca9ac7493d164035a00c54", 0x28}], 0x1, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x78, 0x10}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)="e9425c438b0e67f226fdb6cb2cad548809188615ff9bead4de84f3c1822c73990b6eae73622b9b506eacf72407db46ab7ec02e05af51616cc826c09a3d01f4677c4613a52d7c60f2fec14700429c8abdc178378507029f2ab4ff8e7ae7fc90", 0x5f}], 0x1, 0x0, 0x0, 0x20}}, {{&(0x7f00000021c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000002240)="3ba66c6cc333d6ae31670a96ceb5e9c75050069fb9bef0f6c4929ba97c7fe80eb3f76e282e3353cbae7d6131ad09f7de", 0x30}], 0x1, &(0x7f0000008300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r3, r0, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x80, 0x4000080}}, {{&(0x7f0000008380)=@abs={0xb7589bf037f76986, 0x0, 0x4e23}, 0x6e, &(0x7f00000084c0)=[{&(0x7f0000008400)="a529b5a1a3c05fcdf5dbda4da931ebbdd0", 0x11}, {&(0x7f0000008440)="2ba9eda600e162f45a0b6dfc696e123aba374eee29af5660ac2ff6c5362e479d771290ad277a70", 0x27}, {&(0x7f0000008480)="cedee0deb65d891642f7ca444dcebecc93d4fa7f64f72e36f7eb34abfe3d2df02566a945c90b4657c29faa8472fff30d2b", 0x31}], 0x3, &(0x7f000000a880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee00}}}], 0x60, 0x5}}], 0x4, 0x4000800) io_submit(0x0, 0x4, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc3057", 0x17, 0x0, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c19988716", 0x1e, 0xffff, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0xffffffffffffffff, 0x0, 0x1, r1}]) write$binfmt_aout(r3, &(0x7f0000001fc0)=ANY=[@ANYRESOCT, @ANYRES64], 0x220) r7 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0x0, 0x0, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000500)={{}, r8, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000f40)={{r1}, 0x0, 0x0, @unused=[0x200, 0x7, 0xa5e3, 0x6], @name="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"}) 04:29:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="0500", 0x2}], 0x1}}], 0x1, 0x88d4) 04:29:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x300}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1826.221411] hugetlbfs: Bad value 'm' for mount option 'size' [ 1826.221411] 04:29:59 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1826.905067] hugetlbfs: Bad value 'm' for mount option 'size' [ 1826.905067] 04:30:15 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) renameat(r0, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') 04:30:15 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:30:15 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:30:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x500}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="0600", 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:15 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pread64(r0, &(0x7f0000000300)=""/134, 0x86, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x86387d85ff3e0573, 0x0, 0x10}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x21, @private=0xa010101, 0x4e20, 0x1, 'dh\x00', 0x0, 0x1, 0x60}, 0x2c) pwritev(r1, &(0x7f0000001440)=[{&(0x7f0000000200)='T', 0x1}], 0x1, 0xffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/firmware/dmi', 0x400, 0xb2) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x0, &(0x7f0000000000)) getpid() perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x80, 0x2, 0x80, 0x4e, 0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x4610c, 0x0, 0xe27b, 0x7, 0x1, 0x7be2, 0x800, 0x0, 0x3, 0x0, 0x7}, r4, 0x1, r3, 0x9) sendfile(r2, r2, 0x0, 0x100000) 04:30:15 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 1842.212010] hugetlbfs: Bad value 'm' for mount option 'size' [ 1842.212010] 04:30:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\a\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:15 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:15 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:30:15 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:30:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\b\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x700}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:15 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) [ 1843.039776] hugetlbfs: Bad value 'm' for mount option 'size' [ 1843.039776] 04:30:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:32 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:30:32 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:30:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/consoles\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file1\x00', 0x181a03, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) sendfile(r2, r3, &(0x7f0000000040)=0x1f, 0x80000001) sendfile(r0, r1, &(0x7f0000000080)=0x6, 0x400000008) 04:30:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="1000", 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3f00}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:32 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:30:32 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='incremental-fs\x00', 0x10002, &(0x7f0000000240)='size') lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) inotify_add_watch(r3, &(0x7f0000000340)='./file0\x00', 0x3000080) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x5, 0x5, &(0x7f00000028c0)=[{&(0x7f00000007c0)="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", 0x1000, 0x7}, {&(0x7f0000000440), 0x0, 0x1c}, {&(0x7f00000017c0)="978df31fab2fd03c775fb6afebb923fd0a330b8c06d20be7d28a7664577b85a497b326e912529a43e81b1528fd4fa2c45d42f995165c7f1d87dc921586ac6efd8a278de5a0a25fee04f340d1a15f8c90f01e9f2c1c228fcbcbc9ac2e3ae50f08423796f5a19dbf33d8b3c09b0f74fb29d75867ef5324956e32433c101f06963479675d40d81cd660383a84eec41466fe00f075c13b645a72da75b2d206bcbd1095c2c73fb3e607487b825c2a488376572ff4ad6ca4020b1cd47ac26973ed25ec22615e2072d0e357c6041fdef10dfb9e46625898a5fde6ab19a476ad4202aef1576696216f82a5571d", 0xe9, 0x1}, {&(0x7f0000000480)="ab1bfe89bfb92fd7dc88f9c2baa001bd8111e2", 0x13, 0x3}, {&(0x7f00000018c0)="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", 0x1000}], 0x0, &(0x7f0000002940)={[], [{@fsname={'fsname', 0x3d, 'size'}}, {@subj_type={'subj_type', 0x3d, 'incremental-fs\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'tmpfs\x00'}}, {@dont_measure}]}) setresuid(0x0, r2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000700)=ANY=[@ANYBLOB='size=m,fowner<', @ANYRESDEC, @ANYBLOB="2c050000008cee", @ANYRESDEC=r1, @ANYBLOB=',mask=^MAY_READ,obj_user=]+-%#^$,$,uid>', @ANYRESDEC=r2, @ANYBLOB=',obj_type=hash,hash,obj_type=,\x00']) 04:30:32 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:30:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="0003", 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:32 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:30:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1859.469440] hugetlbfs: Bad value 'm' for mount option 'size' [ 1859.469440] 04:30:32 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:30:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:33 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x80fe}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="0005", 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:33 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:30:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:46 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x8b01}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:46 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) openat(r0, &(0x7f0000000180)='./file0\x00', 0x2, 0x189) 04:30:46 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:30:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:46 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:30:46 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:30:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="0006", 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:46 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:30:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\a', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1873.576392] hugetlbfs: Bad value 'm' for mount option 'size' [ 1873.576392] [ 1873.611284] hugetlbfs: Bad value 'm' for mount option 'size' [ 1873.611284] 04:30:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x10}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:47 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0xd701}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:47 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:30:47 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:30:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00?', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:47 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:30:47 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0xfe80}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 04:30:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00@', 0x2}], 0x1}}], 0x1, 0x88d4) 04:30:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x300}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:02 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:31:02 executing program 0: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:31:02 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x500}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:02 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:31:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="fe80", 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:02 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:31:02 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x100000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:02 executing program 5: mount(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='mqueue\x00', 0x120002, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)=ANY=[@ANYBLOB="04697c61bac7996a"]) 04:31:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4020, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0/file0\x00'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x60c81, 0x88) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(r2, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='./file2\x00', 0x400) 04:31:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="80fe", 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:02 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:31:02 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1889.043121] hugetlbfs: Bad value 'm' for mount option 'size' [ 1889.043121] 04:31:02 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) [ 1889.087808] hugetlbfs: Bad value 'm' for mount option 'size' [ 1889.087808] 04:31:18 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:31:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:18 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:31:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x12c) faccessat2(r0, &(0x7f0000000300)='./file0\x00', 0xe, 0x1000) getsockname$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000000)=0x6e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f00000001c0)=ANY=[@ANYBLOB="73697a653d6d2c0019d9a074615fb040df6445cfebb0dd597aab7b3f7dda6a814ec7206f57e53be80c9f6c821f50e23118365f78ab415fd3bc50bd1a0221cb6a57bc97beff34ac86c71bfff13225358228dfe2ec5ee174f9185f4b409916da19d201a6099cc92c00585cba6f4e5a8439e2069f76566acf24367b0e1c32517b0d09d4cfab6bbac776f4142217232a47dba5033cae39bc50381da54e237cff61d6869dae90d6c3c339fc968fbf48cae200328cd08873569458a842188c83727c1d"]) 04:31:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x1000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:18 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:31:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x700}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1197c3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) [ 1904.822400] hugetlbfs: Bad value 'm' for mount option 'size' [ 1904.822400] [ 1904.908452] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 1904.908452] program syz-executor.0 not setting count and/or reply_len properly 04:31:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x2000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:18 executing program 5: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0x9, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000200)={0x5, 0x8, '\x00', 0x0, &(0x7f00000001c0)=[0x0]}) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0822, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x6d]}}]}) 04:31:18 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:31:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3f00}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1904.945495] ------------[ cut here ]------------ [ 1904.947349] WARNING: CPU: 0 PID: 9545 at lib/iov_iter.c:629 _copy_from_iter+0x2f1/0x1130 [ 1904.948563] Modules linked in: [ 1904.950160] CPU: 0 PID: 9545 Comm: syz-executor.0 Not tainted 6.1.0-rc7-next-20221202 #1 [ 1904.952057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1904.954001] RIP: 0010:_copy_from_iter+0x2f1/0x1130 [ 1904.955363] Code: 37 ff 44 89 f3 e9 2f ff ff ff e8 5a 16 37 ff be 79 02 00 00 48 c7 c7 40 bd 9e 84 e8 b9 94 5a ff e9 13 fe ff ff e8 3f 16 37 ff <0f> 0b 45 31 f6 e9 77 ff ff ff e8 30 16 37 ff 31 ff 89 ee e8 f7 11 [ 1904.959011] RSP: 0018:ffff888047ddf5e8 EFLAGS: 00010212 [ 1904.960428] RAX: 0000000000001346 RBX: 0000000000000000 RCX: ffffc900007eb000 [ 1904.962209] RDX: 0000000000040000 RSI: ffffffff8211fe11 RDI: 0000000000000001 [ 1904.963979] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1904.965978] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000390 [ 1904.968326] R13: ffffea00011f8000 R14: 0000000000000390 R15: ffff888047ddf818 [ 1904.970969] FS: 00007ff6e52c9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1904.972497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1904.974264] CR2: 000055555592bc58 CR3: 0000000049a66000 CR4: 0000000000350ef0 [ 1904.976001] Call Trace: [ 1904.976350] [ 1904.977166] ? rcu_read_lock_sched_held+0x42/0x80 [ 1904.978314] ? trace_rcu_dyntick+0x1a7/0x250 [ 1904.979429] ? __pfx__copy_from_iter+0x10/0x10 [ 1904.981038] ? bio_add_pc_page+0xbc/0x100 [ 1904.982102] ? page_copy_sane+0xd3/0x390 [ 1904.983149] copy_page_from_iter+0xe3/0x180 [ 1904.984227] blk_rq_map_user_iov+0xb0c/0x1650 [ 1904.985307] ? lock_is_held_type+0xdb/0x130 [ 1904.986394] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 1904.987973] ? __pfx_lock_release+0x10/0x10 [ 1904.989025] ? rcu_read_lock_sched_held+0x42/0x80 [ 1904.990159] ? trace_contention_end+0xdc/0x140 [ 1904.991256] ? import_single_range+0x333/0x400 [ 1904.992339] blk_rq_map_user_io+0x1ee/0x220 [ 1904.993408] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 1904.995005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1904.996185] ? __irq_work_queue_local+0xd2/0x180 [ 1904.997295] ? memset+0x24/0x50 [ 1904.998258] sg_common_write.constprop.0+0xd84/0x15e0 [ 1904.999447] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 1905.001115] ? _raw_spin_unlock_irqrestore+0x37/0x60 [ 1905.002281] sg_write.part.0+0x706/0xb20 [ 1905.003314] ? __pfx_sg_write.part.0+0x10/0x10 [ 1905.004378] ? perf_tp_event+0x634/0xc90 [ 1905.005474] ? __lock_acquire+0xbad/0x5e70 [ 1905.007013] ? lock_is_held_type+0xdb/0x130 [ 1905.008080] ? inode_security+0x105/0x140 [ 1905.009096] ? avc_policy_seqno+0xd/0x70 [ 1905.010139] ? selinux_file_permission+0x3a/0x510 [ 1905.011256] sg_write+0x88/0xe0 [ 1905.012228] vfs_write+0x358/0xe40 [ 1905.013185] ? __pfx_sg_write+0x10/0x10 [ 1905.014214] ? __pfx_vfs_write+0x10/0x10 [ 1905.015275] ? __fget_files+0x270/0x450 [ 1905.016287] ? __fget_light+0xe5/0x280 [ 1905.017285] ksys_write+0x12b/0x260 [ 1905.018272] ? __pfx_ksys_write+0x10/0x10 [ 1905.019329] ? syscall_enter_from_user_mode+0x21/0x50 [ 1905.020952] ? syscall_enter_from_user_mode+0x21/0x50 [ 1905.022181] do_syscall_64+0x3f/0x90 [ 1905.023195] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1905.024398] RIP: 0033:0x7ff6e7d53b19 [ 1905.025361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.028168] RSP: 002b:00007ff6e52c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1905.029968] RAX: ffffffffffffffda RBX: 00007ff6e7e66f60 RCX: 00007ff6e7d53b19 [ 1905.031355] RDX: 000000000000002b RSI: 0000000020000380 RDI: 0000000000000006 [ 1905.032975] RBP: 00007ff6e7dadf6d R08: 0000000000000000 R09: 0000000000000000 [ 1905.034371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1905.035958] R13: 00007fffabeebf8f R14: 00007ff6e52c9300 R15: 0000000000022000 [ 1905.037376] [ 1905.038194] irq event stamp: 6953 [ 1905.039139] hardirqs last enabled at (7013): [] __up_console_sem+0x78/0x80 [ 1905.040960] hardirqs last disabled at (7092): [] __up_console_sem+0x5d/0x80 [ 1905.042955] softirqs last enabled at (2860): [] __irq_exit_rcu+0x11b/0x180 [ 1905.044981] softirqs last disabled at (2773): [] __irq_exit_rcu+0x11b/0x180 [ 1905.046987] ---[ end trace 0000000000000000 ]--- 04:31:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:18 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:31:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x3000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1905.067412] hugetlbfs: Bad value 'm' for mount option 'size' [ 1905.067412] [ 1905.087647] hugetlbfs: Bad value 'm' for mount option 'size' [ 1905.087647] 04:31:18 executing program 6: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) semget$private(0x0, 0x0, 0x0) 04:31:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:18 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) dup(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000180)={0x7, 0x4}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x22b082a, &(0x7f00000001c0)) 04:31:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x4000000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) 04:31:18 executing program 1: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000004, 0x10, r0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r3 = semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 04:31:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x80fe}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x88d4) [ 1905.358882] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 1905.358882] program syz-executor.0 not setting count and/or reply_len properly VM DIAGNOSIS: 04:31:18 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82485195 RDI=ffffffff87fb2b60 RBP=ffffffff87fb2b20 RSP=ffff888047ddef20 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff87fb2b20 R14=0000000000000010 R15=ffffffff82485180 RIP=ffffffff824851ed RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff6e52c9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe1b09a25000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe1b09a23000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555592bc58 CR3=0000000049a66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff816d0620 RDX=ffff8880101f1ac0 RSI=0000000000000000 RDI=0000000000000005 RBP=dffffc0000000000 RSP=ffff88804744f6f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff8880185be2e8 R13=ffffea0000e03f00 R14=0000000000000000 R15=ffff88804744fad8 RIP=ffffffff8149145b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe5a8d803000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe5a8d801000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe258739718 CR3=00000000404f4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000