(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x5111, 0x0) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$KDENABIO(r3, 0x4b36) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:08 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='\x00\b\x00', 0x0, &(0x7f00000001c0)={'=fd,\xa6R\xac\xca\x00', {'rfdno', 0x3d, r2}, 0x2c, {'\xd3\x9e\xbd\xcc\xff'}}) 17:59:08 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='met%copy=on'}]}) 17:59:08 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000209010000000000000018505e6b0000"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000200)=0x1, 0x4) r4 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000580), 0x0, r4) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)='md5sumvboxnet1trusted\x00') ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071") r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) r6 = dup(r2) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000100)=0x1, 0x4) [ 1581.176450][T17797] overlayfs: unrecognized mount option "met%copy=on" or missing value 17:59:08 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:59:08 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='met,copy=on'}]}) 17:59:08 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 17:59:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x4e21, 0x3, 0x4e21, 0xcf, 0x2, 0x20, 0x80, 0x88, 0x0, r2}, {0x8, 0x7, 0x1f, 0x8000000000000000, 0x2, 0xffffffffffffffc0, 0xde6a, 0x1}, {0x2bb, 0x1000, 0x649c, 0x400}, 0x22, 0x6e6bb6, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d4, 0x99}, 0xa, @in=@multicast2, 0x3503, 0x0, 0x0, 0x3, 0x80000000, 0x1}}, 0xe8) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB='0\x00'/17]) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0xff, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8000}, 0x20044, 0x0, 0x9, 0x9, 0x6, 0x7, 0x8000}, 0x0, 0x9, r2, 0x8) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @dev, 0x200}}, {{0xa, 0x0, 0x7fffffff, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40002, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x4, 0x3, 0x4, 0x1020, {0x0, 0x2710}, {0x5, 0x8, 0xff, 0xb6, 0x3f, 0xfa, "99829638"}, 0x80000001, 0x7, @planes=&(0x7f0000000040)={0xf889, 0x6bfd, @userptr=0x7fffffff, 0x9}, 0x4}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1581.492750][T17916] overlayfs: unrecognized mount option "met" or missing value 17:59:09 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='met\\copy=on'}]}) 17:59:09 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x800, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x80000001, 0x5, &(0x7f0000000040)=0xffffffffffff5dd9}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000001c0)={r3}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 1581.657979][T18006] overlayfs: unrecognized mount option "0" or missing value 17:59:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x301080) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x200, 0x70bd2c, 0x8, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xd165, 0x0, 0x3, 0x3}}}, ["", ""]}, 0x30}}, 0x280480c0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:09 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r4, r3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r6, @in={{0x2, 0x4e24, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)={r6, 0x1f, 0xe1, "14698700ec4391ff3b54a1d97c9c8a72dbd0c5253cd31d54904deb72234809d232e4763e3db5505c30080505845ef614865dc60e7315d55ac6294ea8c6c36a5232abceb61fce468c05668f02b97fcb9078fe957b17fec05bd8f1c0619cea901f2c89efa3020422cc198b16cc573687ef6d8a20abe0ef923755e92c53dd23acad6eac2c88ddf425f269b845bf77fd267fbd6ed91f587945de7dae97216b99a6bc76bcaf6c72839c7ffd9926fb1a6abbf335c306c17860b284849caf55dc87dea3e926ddda6a69b475000f51dd7bb592ff0ce8c66791291ecdc815c9839a728a498a"}, 0xe9) close(r0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000400)=0x8) r8 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r0, r8, 0x0, 0x800000000024) 17:59:09 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta#opy=on'}]}) [ 1581.803366][T18032] overlayfs: unrecognized mount option "met\copy=on" or missing value [ 1581.965111][T18142] overlayfs: unrecognized mount option "meta#opy=on" or missing value 17:59:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x20008000}, 0x44) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff7, 0xed43, 0x7}, 0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x22, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:09 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta%opy=on'}]}) 17:59:09 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x7, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000600)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = getpid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r10) sendmsg$netlink(r8, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}], 0x20}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)=0x0) lstat(&(0x7f0000000680)='./bus\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000740)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r15 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r15, 0x5111, 0x0) ioctl$sock_proto_private(r15, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r16 = ioctl$TIOCGPTPEER(r15, 0x5441, 0x9) r17 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r17, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r17, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r18 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r18, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r18, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r19 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r19, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r19, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007800000ac1414bb00fcff00"], 0x18}, 0x44) r20 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r20, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r20, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r21 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r21, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r21, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000003200)=ANY=[@ANYBLOB="180000352bca2f1d3270f8ebe3f761881c00000000008400000007000000ac1414bb000000000000"], 0x18}, 0x44) r22 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r22, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r22, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r23 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$inet_sctp(r23, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r24 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r24, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r24, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r25 = inotify_init1(0x0) r26 = gettid() fcntl$setown(r25, 0x8, r26) r27 = gettid() waitid(0x83b895581628fca4, r27, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r28 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r29 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r30 = dup2(r29, r28) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r31, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r31, &(0x7f0000000080), 0x1c) r32 = fcntl$dupfd(r31, 0x0, r31) setsockopt$inet_msfilter(r32, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r29, 0xc08c5332, &(0x7f0000003240)={0x2, 0xfffffffc, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r30, 0xc08c5334, &(0x7f0000000200)) r33 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r33, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r34}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r27, r30, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r34}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r34}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r34}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r26, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r34}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r34}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r34}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003080)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000003040)='proc&\\md5sumbdev\x00', r34}, 0x30) r36 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r36, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r37) sendmmsg$unix(r6, &(0x7f0000003140)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="945b86ad0cb88c7c4cc740feb10474ddb74fe3c1f0db492876c5674b8e67af7ac00b234135aec863aea6f514ac373395d59ffc0e359c6ffe6b82dfd0f1f0db7f69848d11dc683d3bbdcaeea4f9e29b3049bbc7d6da9d9609db91b5e7ac143f87de86d83ff448f92b0795c62c928ba97a0c99992502ee977fdbf0ca7652962f3b1ed3e394df92e07fc56a2eb9c946d6de5bc79f6fe29c8b599940ab0974d47e1daff4c151fe24b25378de866737332f5b7b7173ecc9a1bc40ed04d96d626d6aeafffca934e138739c943f2b792b6d043b6c9497f918e25489f255fe2af45b50ba2c66c390ed43f83e410658", 0xeb}, {&(0x7f0000000040)="21a63e5f96447c37dd04e197ea927d940f2cde7a51dcc989465a4123bbf99062e05213952d865c41e371c23f160250c512", 0x31}, {&(0x7f0000000100)="677ca7215948ea8ae0", 0x9}, {&(0x7f0000000300)="51925ad02a1674b635fa1ff7d38d78c0359e6984c2003e18d81cba5079d0bdc339ff49fb5c329a6a0d7f1bf7c0c552b243904e8b9f8982eb53a06e7b3a57a5eea3c2883a593a49d1b0b749253ebed6521d1ed2dc770bab76a43725f9e554bb2b3104a47062d83feac2ca37629a21f74df42d40963c73de", 0x77}, {&(0x7f0000000380)="c5660e95444ee87fbc068bdc9adc7dd1b078857ec7c2554cbcdb03dfa34800c35d5f4f11379b2a4d255a8953d803e5dd13f652f983d97b83f2b4b0ea5079f0182ee1809d71f0d5a98a7bcf110c4167a5aeba5511e1dd1ad752013e86902fe53b2c3f8f7044fd8bc7a715e336c422335928e48c72c3c738b932d4d07d0d36f0037ef7aa53eb75196689524a69e01272f814b320e89a69e6e8c078d7e8e6a4e3351b8ce00d344b4c76dfb68052f5484f98ac0945024dd4afce5bd0a868ea27e659465cf672ca", 0xc5}, {&(0x7f0000000480)="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", 0xfa}], 0x6, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x30, 0x1, 0x1, [r3, r14, r16, r17, r18, 0xffffffffffffffff, r0, r19]}}], 0x70, 0x60000000}, {&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="8e710e87208ab44aae85aac10a91feb45a6a754d5de602dd19b6468a00c7ee4af3762292cc7a97b220339076168b3b6c5881995f8f810083af9f7914a7279d4a2ae2b3ea29028bba89e56b7dc90558af23ae09fd43863be5e6f00fa211d019b0672d97c77fa867ca4bf3ee1abebcc09b1e169b6f59269ae2852e8536dfa5667b6be62d0cb3c2d7affb754430b4ac736180e932fbceafbcd087af53c8de", 0x9d}, {&(0x7f00000019c0)="7d2cb40fa96bf13ed4aa8cbb440a1647527ad41f68114ebc906c00d529f74612dd8f84fa074ffda455660ad3594d36498b9d098ab2a491672b4eed12f30e26816724779a08afcf82ce7a764beb57f8fd8f431817067a10f6da730f2a477273c451cfcd4a91758a0d4fdd7f1cb9790d", 0x6f}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="79c6d07565f0554452662f854e283b8c215d8802270292347ffcbcc1db1e846fced5b19de80637f15d845b5f50cce88c686f4f0b18f0ddc78ebe08899728c257e44383c0bd2ca43fd7fd8c680cf3e9456ebb5b6f243555f8725252ca2ad3faf115a9e2b77bcff5646226433944b9a2ee6507200fc1aeac58f0d60ca87739e6", 0x7f}, {&(0x7f0000002ac0)="b05766ab550a906a19347ab40bf1c40e8fbebe7e841b2fa32702db95997a40a35d24292816e321a7485d37cc47fae250bc8b5fd7688ca2615c67223169816c99630464727cee3503689d466e8acff82943a4d4e904bd9a2594ed84500abe6d6293d2a4c85e596cc00100cdd6e08848a6bcedd48749b165be2664243324199958feae36f1c3e3466de0410dfe89b80842d7e4eb5857ac4af58a2c4f5cf3b999a2d0db15cf9567117fbeefea107bb8328abf32a0932cd006c4ff7c54f3e319421e64df9c64f73fa11abfcaefd3b05923feef67908e586c3a1f3a8f80c3a77e5b29eec07c9e9adbae6c68e83e9b", 0xec}, {&(0x7f0000002bc0)="39b1b159cfdffbe95390c160cc05be3c412d9493e0241bf3ae70ce401c56940fe1e601777d8c4899efb91039d9c846c7141bca577e853cd1196698c1deb6c68ca2bfbcfe2e6a0b0c9c24572153aa82d814fe9b82acbb04ae591347c13ee401364f695378e51135c6e890012f9cecacfbe3adc64d2e669016c4ebaab0b7b3adcdce886dd1ead5e6f34699e2b04ce65e3872198ff7c676cee2086f962da4a4126e069c7d473aa42361ae101cf0a1f58aefff3ae82ec6e4aa9e8bd42e5fbdc41daf70e8", 0xc2}, {&(0x7f0000002cc0)="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", 0xfc}], 0x8, 0x0, 0x0, 0x24000000}, {&(0x7f0000002e40)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002ec0)="b7c591f41c37ebfd1ab9d93b900c3cc78257868012129775823159ef40725c6cf7d75facaf921d9f5e96f5e5ab76e96bacc041e65776e499965a1853827b3c401ea6762de461c60280c207d471629b8d926be9aa7bb049cd98c727dca75d9738c7fa323286", 0x65}, {&(0x7f0000002f40)="80b5d989aba17a60f1e400dd9a872463f70d222c534492052121b3096cf07d21c311363616827e51b88db7a16d49f85a4b8842a8d73c060dd4e81d4d8b16899259f057e57e8156c6d654f9e9ca0d1ab099d588a5f610be9610e7f2e000f3db93b293c424597a1fdcad90812521640071438631d0ab975c60152582e601f8f0c2b6ca7c", 0x83}], 0x2, &(0x7f00000030c0)=[@rights={{0x24, 0x1, 0x1, [r20, r21, r22, r23, r24]}}, @cred={{0x1c, 0x1, 0x2, {r35, r37}}}], 0x48, 0x8040}], 0x3, 0x0) r38 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r38, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 1582.151364][T18149] overlayfs: unrecognized mount option "meta%opy=on" or missing value 17:59:09 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta*opy=on'}]}) 17:59:09 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000040)={0x100, 0x9, 0x3, 0x3fdc}, 0x10) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0xa0601, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000380)=0x1) r8 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80100000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000180)={0xc4, 0x42, 0x8, 0x70bd29, 0x25dfdbff, "", [@generic="5b88c29fcc0fa9124d3cff28d9e681ca41c07f28247bf1055775cc848bcfafd3a30f00173653538e8e2752198942912089b492", @typed={0x8, 0x0, @u32=0x54}, @typed={0x8, 0x7f, @fd=r8}, @generic="c01e19128315bc6d8da0a50ae4c68d7c299b417c47bc8c466884c6948ede360e6b618df5f7d42efe91838f850c155ce57b888e26c9cb45c2ebe07364589c95c4de96a739c631687d47f9c1b5a95be9d051568c5c9ca440fac661c40dcda51206c9ad8ce1e6e60c3798ed3a883e19"]}, 0xc4}], 0x1, 0x0, 0x0, 0x40}, 0x4005000) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 1582.350390][T18153] overlayfs: overlapping lowerdir path [ 1582.371926][T18249] overlayfs: unrecognized mount option "meta*opy=on" or missing value 17:59:09 executing program 3: pipe2(&(0x7f00000004c0), 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x50}, @in={0x2, 0x4e27, @rand_addr=0x7}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0xd8d2, @empty, 0x8}], 0xfffffdf9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r1 = accept(r0, 0x0, &(0x7f00000005c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000680)={{0x3aed, 0x4}, 0xa}, 0x10) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000600)={0x5, 0x5}, 0x2) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x882003) fcntl$setlease(r3, 0x400, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, 0x0, &(0x7f00000000c0)=0xfffffea0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)=[&(0x7f0000000200)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='{\x00', &(0x7f00000003c0)='/dev/vcs#\x00', &(0x7f0000000400)=':@\x00', &(0x7f0000000440)='g!}$vboxnet1.\x00']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f7765726469723d000200006c6530"]) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000640)) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1582.552993][ T27] audit: type=1800 audit(1574186350.034:59): pid=18152 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17825 res=0 17:59:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="aa00001e00"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @rand_addr="fab46e85498ad4fb8db8970a511a5d9d"}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:10 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta+opy=on'}]}) 17:59:10 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) fcntl$dupfd(r1, 0x406, r3) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:10 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x8, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="344900000000000084000000070000008c1414bb00000000"], 0x18}, 0x44) dup2(r1, r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 1582.763669][T18466] overlayfs: unrecognized mount option "meta+opy=on" or missing value [ 1582.822376][T18463] overlayfs: unrecognized mount option "lowerdir=" or missing value 17:59:10 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta,opy=on'}]}) [ 1583.042725][T18588] overlayfs: unrecognized mount option "meta" or missing value 17:59:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$netrom(r0, &(0x7f00000003c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x2080, 0x0) close(r2) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000200)='./file0/file0\x00') lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:10 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta-opy=on'}]}) 17:59:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1788, 0x4, &(0x7f0000000380)={0x2}, 0xffffffffffffff85) socketpair(0x8, 0x6, 0x9, &(0x7f00000001c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000440)=""/196) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:10 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) syncfs(r6) connect$inet6(r5, &(0x7f0000000080), 0x1c) r7 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x200, 0x70bd28, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x5, 0x0, 0x3, 0xc8, 0x2, 0xdbacc6c507950405}, [@RTA_NEWDST={0x84, 0x13, [{0x3, 0x0, 0x1}, {0xfffe0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x3fa}, {0xa4, 0x0, 0x1}, {0xab, 0x0, 0x1}, {0xbef}, {0x100, 0x0, 0x1}, {0x4}, {0x4}, {0x3}, {0x5, 0x0, 0x1}, {0x400}, {0x2, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7}, {0x400}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x2}, {0x3}, {0xffff}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x81}, {0x4}, {0x4}, {0x101}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x808) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 1583.359948][T18706] overlayfs: unrecognized mount option "meta-opy=on" or missing value [ 1583.434223][ T27] audit: type=1800 audit(1574186350.924:60): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17796 res=0 17:59:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x3) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:11 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta.opy=on'}]}) 17:59:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="2c6c6f906510649230f70d2ced74086dc3230a4d69723ddd593330eb3816487bfaca55ca2b853e"]) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1583.618177][T18920] overlayfs: unrecognized mount option "meta.opy=on" or missing value 17:59:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)={0x1, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000007000000ac1414eab251a12558773e88bb0000ac8800000000003d53cf908b5cc07a46399ba427cd6ec4e3880a300dfcfabbd7ae7915f8c6e9bf642f8f7f01361b99807e92f2512aa7ab81baf8180961e46b15f9d5c5afc0e996998084daaeb7c7b25a5b1ae3976843be38c4f0227338"], 0x18}, 0x44) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r2, r3, &(0x7f0000000040)=0x800, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x800000000024) 17:59:11 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta0opy=on'}]}) [ 1583.788328][T18927] overlayfs: unrecognized mount option "loed’0÷ " or missing value 17:59:11 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metaXopy=on'}]}) [ 1583.831254][T18932] overlayfs: unrecognized mount option "meta0opy=on" or missing value [ 1583.838906][T18927] overlayfs: unrecognized mount option "loed’0÷ " or missing value [ 1583.943734][T18936] overlayfs: unrecognized mount option "metaXopy=on" or missing value 17:59:11 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='meta\\opy=on'}]}) 17:59:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e3a66696c6530dd1921c8b14ce609cfd689c7348f143b24f9766cdee740fe0b94829517a3626a22fb0d610c324fbe31e2ce625daa5c1b237f8f095f773f4c25da657849153d00967bb7680f1c440ac99f2b6e77c7ad155f210ebaf00eba61c16eb996ec0e19927923f46028ce6dc7a871a8b8a5c882d548f4be78656404d16e2f50624159c527e4b6d953867fd4ba88db"]) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000200)=""/123) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x1, 0x1}}, 0x14) [ 1584.090807][T18941] overlayfs: unrecognized mount option "meta\opy=on" or missing value 17:59:11 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metadopy=on'}]}) 17:59:11 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x200000, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r9, 0x5111, 0x0) ioctl$sock_proto_private(r9, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getpeername$packet(r9, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x14) r11 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r11, &(0x7f0000000080)={0x2, 0x2, @local}, 0xfffffffffffffd15) sendmsg$inet_sctp(r11, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r13, &(0x7f0000000080), 0x1c) r14 = fcntl$dupfd(r13, 0x0, r13) setsockopt$inet_msfilter(r14, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000800)={&(0x7f00000002c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x7c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r12}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c86) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000200)={{0x1f, 0x44, 0xff, 0x5, 0x0, 0x2}, 0x5, 0xffff, 0x0, 0x7, 0x4, "85701d838f0bee1ce1f66f096b03e715d8b129b5d0bbc36619592b63da789f9fba93d141c1560431384d043f2674f5add71bbb77c56c61605055a7d7c0803c311323870d7fdc0657bf5a1aabec81cd6f99bf1236264970b32000c098689c8e95311308b001b65f34e171f79eeca9acf5b977c107b05fa4e6d0f124477afd06a9"}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000002090100000000a60000000000"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) r16 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r16, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r16, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$inet_dccp_buf(r16, 0x21, 0x2, &(0x7f0000000040)=""/64, &(0x7f0000000100)=0x40) ioctl(r15, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r17 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r17, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 1584.270911][T18944] overlayfs: failed to resolve 'file0Ý!ȱLæ ÏÖ‰Ç4;$ùvlÞç@þ ”‚•£bj"û a 2O¾1âÎb]ª# _w?L%ÚexI=': -2 [ 1584.289881][ T27] audit: type=1800 audit(1574186351.774:61): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17158 res=0 17:59:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)={0x14, r5, 0x125}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3ff, 0x8000, 0x2, 0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="9c4aef6bc1eb096d1107c7791ae90ce8"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x8004) [ 1584.347753][T18949] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1584.357886][T18948] overlayfs: unrecognized mount option "metadopy=on" or missing value [ 1584.385110][T18944] overlayfs: unrecognized mount option "" or missing value 17:59:12 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metaiopy=on'}]}) 17:59:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f5614f9, 0x101842) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 17:59:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4}}]}, 0x34}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080), 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) accept4$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x800) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r10, 0x5111, 0x0) ioctl$sock_proto_private(r10, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") accept$packet(r10, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001940)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r15}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r15}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4}}]}, 0x34}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001cc0)={{{@in=@multicast1, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000001dc0)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000003680)={@local, @multicast2, 0x0}, &(0x7f00000036c0)=0xc) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r21}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r21}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4}}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003700)={0x384, r2, 0x801, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xc8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x20000000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r16}, {0x90, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1e7c}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0xc20}, 0x20000080) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0xe) [ 1584.666069][T19164] overlayfs: unrecognized mount option "metaiopy=on" or missing value 17:59:12 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metalopy=on'}]}) [ 1584.777014][T19170] overlayfs: unrecognized mount option "ÛÀuƒÒÙ|#âõ4ë¼R¨DÀD‘7U [ 1584.777014][T19170] †•¤"]…÷„Êþ}†BÃØçi[Lâ­–(’̉dó°u¹ eeY˵H`jS8˜ìÓOÉ Ü\SµtÅÍUBÀù¢6{°¶ÑQ;L‚cCÆ;¹„YPÙ¼" or missing value 17:59:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xa0000, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x7, 0x7b, 0x1}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000540)={@caif, {&(0x7f00000003c0)=""/244, 0xf4}, &(0x7f0000000000), 0x57}, 0xa0) [ 1584.858916][T19214] overlayfs: unrecognized mount option "metalopy=on" or missing value 17:59:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_open_pts(r0, 0x24440) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 17:59:12 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metaoopy=on'}]}) [ 1585.076559][ T27] audit: type=1800 audit(1574186352.564:62): pid=19155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17052 res=0 17:59:12 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000400)=0x8) r4 = open(&(0x7f0000000340)='./bus\x00', 0x705902, 0x16c) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x800000000024) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10001, 0x28c2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) open_by_handle_at(r4, &(0x7f0000000140)={0x68, 0x8000, "c633400c55da712777e60624d53b2b0d1e382996147b86829568302c662c382fa5fdde0ced8ae613143cea5eb5481f907a6869cb06dcaaf673a6a53a8b509c9ba0b5fe586146d26b86a66feff3346cae905898767944ed8df063a46705a4be36"}, 0x1) setreuid(0x0, r8) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r8}) [ 1585.148447][T19413] overlayfs: unrecognized mount option "metaoopy=on" or missing value 17:59:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) 17:59:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x0, 0x2, 0x8000, 0x8, 'syz0\x00', 0x81}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='overlay\x00', 0x0, r0) 17:59:12 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metapopy=on'}]}) 17:59:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1585.471893][T19518] overlayfs: unrecognized mount option "metapopy=on" or missing value 17:59:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000100)={0x0, 0x100, 0x7, &(0x7f0000000040)=0x9}) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0xf3, @remote, 0x7fffffff}, {0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, [], 0x13}, 0x101}, 0x0, [0x7fff, 0x7f, 0x8001, 0x4cc, 0xc5fb, 0x3ff, 0x7, 0x1]}, 0x5c) 17:59:13 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metasopy=on'}]}) 17:59:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x242080) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) r6 = getgid() write$FUSE_ENTRY(r3, &(0x7f0000000040)={0x90, 0x0, 0x2, {0x1, 0x1, 0xfffffffffffffffc, 0x8, 0x0, 0xfffffffe, {0x1, 0x1, 0x8, 0x9, 0x8, 0x9ead, 0x8001, 0x1, 0x5, 0x0, 0x75565fb9, r5, r6, 0x40, 0xfffffffe}}}, 0x90) 17:59:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x10) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)) [ 1585.815757][T19630] overlayfs: unrecognized mount option "metasopy=on" or missing value 17:59:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c4f605765726469723d2e3a666905a38b6c6530704414e1a5b03ec8418f730eb6db000036978c2b5ae683f4819b70ed85822598c0a9e58f7e86f5623578df288adc78b55128f0d94fa874f1a2839c1b088de1148b99b692d7ae42f7df5a84b264e38dfc95d4fe6ce11d51de677e5b928aeaf4afb32470a26b076413d514e27bd8bfb600000000000000"]) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:13 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metauopy=on'}]}) 17:59:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="0700000000010000004461f98efa2c135516404d"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x7ff, 0x109842) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000040)={0x3, "112c85cbf39372e8b34e4e635a88f8369bb2cb8eabdbb524a6b2dde5e7de3434"}) 17:59:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1586.070011][T19845] overlayfs: unrecognized mount option "metauopy=on" or missing value 17:59:13 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metaxopy=on'}]}) 17:59:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000300)={0xcd, ""/205}) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) accept(r3, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000200)=0x80) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x16}, 0x7fffffff}, 0x1c) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x0, 0x4, 0x4, 0x1, "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"}, 0x10f) r5 = open(&(0x7f0000000000)='./bus\x00', 0x80a20, 0xae) ftruncate(r5, 0x2007fff) sendfile(r0, r5, 0x0, 0x800000000024) 17:59:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000002ff10000000"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 1586.288083][T19955] overlayfs: unrecognized mount option "metaxopy=on" or missing value 17:59:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)) 17:59:14 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metac\npy=on'}]}) 17:59:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1586.661484][T20070] overlayfs: unrecognized mount option "metac [ 1586.661484][T20070] py=on" or missing value 17:59:14 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000100)=0x0) io_cancel(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x52bc, 0xffffffffffffffff, &(0x7f0000000440)="13e984ecba1153f54ac67bd71a49cd2a335e16aecd5a446eab15d94decda15ad64dc2ace4fabb779d2c60394c909e3364e8f05a8a87be17d9cbb18965289412913efc833da3e7df86bddefd8cc2ee81b9aa991cd025ee172c0ad6950", 0x5c, 0x3ff, 0x0, 0x2, r1}, &(0x7f0000000500)) r7 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setpriority(0x1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000020901000000000000000000000000dba8635700"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r10 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r10, 0x0) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x490101, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000000180)={0xb112, {{0x2, 0x4e21, @multicast2}}, 0x0, 0x4, [{{0x2, 0x4e20, @empty}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}, {{0x2, 0x4e20, @local}}]}, 0x290) mmap$IORING_OFF_CQ_RING(&(0x7f000011a000/0x3000)=nil, 0x3000, 0xa, 0x8010, r10, 0x8000000) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 17:59:14 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metac%py=on'}]}) 17:59:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:14 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) fcntl$setlease(r2, 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r3 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) [ 1586.989570][T20286] overlayfs: unrecognized mount option "metac%py=on" or missing value 17:59:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x0, 0x2, 0x8000, 0x8, 'syz0\x00', 0x81}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='overlay\x00', 0x0, r0) 17:59:14 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metac,py=on'}]}) 17:59:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9a0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x9}, &(0x7f0000000240)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$nfc_llcp(r3, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x5, 0x1, 0x9, "bbfcf874af6dbb6546638dc1076a59f8310cdd1211c4426cbad4ab0f5b66ca942c4b3109b9a5ad352aea9dd8a57735485227e2c1eabfba388a2a2cf8cf263e", 0x38}, 0x60) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) sendto$x25(r3, &(0x7f00000003c0)="0e1a26d9c76a045b0f33fb91571229b1e36cc1e84d4657f0a03c261c3f6faaa96c3136389552867dbae49aa90214494ac1e4d25f5b56f29346070bed143f8e647e42f43cd0c80ceefb176220e91a53c08f7f55858927cd8a821b9071b3862ec7935022864a311953cf149d13c2e8d39a0de002d40a7d713bcb92aafcfa5808fc59848df246a79534b514686567a5c8996f659f7f7e0cc61382b95a264d19edbf1d0c8f13f8ad73794b16c05a8b926e513ae027081f4e867f63dbc0c397d99117c8df0ea77fda94fcda6ebfa057a13253f1de812d38692065", 0xd8, 0x62040886, &(0x7f00000002c0)={0x9, @null=' \x00'}, 0x12) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x1b8fe) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18035529"]) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000004c0)={0x10001, 0xab0}, 0xc) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1587.297353][T20299] overlayfs: unrecognized mount option "metac" or missing value 17:59:14 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metac\\py=on'}]}) 17:59:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x41) write$P9_RWSTAT(r0, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x0, 0x2, 0x8000, 0x8, 'syz0\x00', 0x81}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='overlay\x00', 0x0, r0) 17:59:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40001, 0x0) write$apparmor_exec(r1, &(0x7f00000002c0)={'exec ', ')\x00'}, 0x7) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r3, r2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r5, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000005c0)={r5, @in6={{0xa, 0x4e23, 0x3, @rand_addr="a21f38ba4075fe6266e52a1732a0b8ab", 0xfffffffb}}, 0x8, 0x7fff}, 0x90) r6 = semget(0x0, 0x0, 0x20) semctl$SEM_INFO(r6, 0x4, 0x13, &(0x7f00000001c0)=""/108) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000300)={0x9, {{0x2, 0x4e22, @rand_addr=0xfffffffd}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x1, @loopback, 0xffff}, {0xa, 0x4e21, 0xe3e, @empty, 0x3ff}, 0x0, [0x6, 0x6, 0x7, 0x0, 0x2, 0x0, 0x7, 0x3]}, 0x5c) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000440)={0x9, 0x0, [{0x2adcbb4600ab2188, 0x932e, 0x8, 0x10001, 0x9, 0x10001, 0x7}, {0x2, 0x1ff, 0x1, 0x7, 0x4, 0xef, 0x4}, {0x80000008, 0x74c2, 0x3b741453a14488e6, 0x1, 0x3, 0x1, 0x3}, {0x40000004, 0x3f, 0x4, 0xffff6b7e, 0x0, 0x4}, {0x4ed0a4849bdcee4a, 0x2, 0x1, 0x8, 0x86, 0xad9e, 0x9}, {0x4, 0x9396, 0x5, 0x6, 0x1, 0xff, 0x8}, {0xc0000000, 0x7f, 0x5, 0x9, 0x1000, 0x84e, 0x2}, {0x80000000, 0x7, 0x2, 0x577, 0x7, 0x8000, 0x387f}, {0xa, 0x3, 0x3, 0x3, 0x91, 0x8000, 0x6}]}) [ 1587.636007][T20409] overlayfs: unrecognized mount option "metac\py=on" or missing value [ 1587.733570][T20409] overlayfs: unrecognized mount option "metac\py=on" or missing value [ 1587.745084][ T27] audit: type=1800 audit(1574186355.234:63): pid=20404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17837 res=0 17:59:15 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metaco,y=on'}]}) 17:59:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ftruncate(r3, 0x5d91) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) socket$inet6(0xa, 0x2, 0x1) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000200)={0x5, &(0x7f00000000c0)=[{0x0, 0x1ff}, {0x1, 0x42}, {0x8000, 0x82}, {0x1, 0x1}, {0x270, 0x101}]}) [ 1588.108104][T20578] overlayfs: unrecognized mount option "metaco" or missing value 17:59:15 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacoHy=on'}]}) 17:59:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x0, 0x2, 0x8000, 0x8, 'syz0\x00', 0x81}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='overlay\x00', 0x0, r0) [ 1588.351106][T20639] overlayfs: unrecognized mount option "metacoHy=on" or missing value 17:59:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x0, 0x2, 0x8000, 0x8, 'syz0\x00', 0x81}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='overlay\x00', 0x0, r0) 17:59:15 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metaco\\y=on'}]}) 17:59:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x4d493f48ae1434a8) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) close(r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x5, 0x5, 0x15000, 0xc32}) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xa0000, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x7, 0x7b, 0x1}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000540)={@caif, {&(0x7f00000003c0)=""/244, 0xf4}, &(0x7f0000000000), 0x57}, 0xa0) [ 1588.718726][T20754] overlayfs: unrecognized mount option "metaco\y=on" or missing value 17:59:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x0, 0x2, 0x8000, 0x8, 'syz0\x00', 0x81}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='overlay\x00', 0x0, r0) 17:59:16 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacop\n=on'}]}) 17:59:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xa0000, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x7, 0x7b, 0x1}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000540)={@caif, {&(0x7f00000003c0)=""/244, 0xf4}, &(0x7f0000000000), 0x57}, 0xa0) [ 1589.058431][T20928] overlayfs: unrecognized mount option "metacop [ 1589.058431][T20928] =on" or missing value [ 1589.151918][T20928] overlayfs: unrecognized mount option "metacop [ 1589.151918][T20928] =on" or missing value 17:59:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x0, 0x2, 0x8000, 0x8, 'syz0\x00', 0x81}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='overlay\x00', 0x0, r0) 17:59:16 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacop%=on'}]}) 17:59:16 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacop,=on'}]}) [ 1589.422413][T21006] overlayfs: unrecognized mount option "metacop%=on" or missing value 17:59:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x2, 0x1}, 0x10) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x92c1, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket$can_raw(0x1d, 0x3, 0x1) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x2, 0x4) 17:59:17 executing program 3 (fault-call:14 fault-nth:0): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1589.604069][T21085] overlayfs: unrecognized mount option "metacop" or missing value 17:59:17 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacop/=on'}]}) 17:59:17 executing program 1 (fault-call:16 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:17 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x3ff, 0x0, 0x10000, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, &(0x7f0000000080)={0x9, r6, 0x1, 0xff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1589.866492][T21102] overlayfs: unrecognized mount option "metacop/=on" or missing value 17:59:17 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacop\\=on'}]}) 17:59:17 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1590.033491][T21144] FAULT_INJECTION: forcing a failure. [ 1590.033491][T21144] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.072626][T21144] CPU: 1 PID: 21144 Comm: syz-executor.1 Not tainted 5.4.0-rc7-next-20191115 #0 [ 1590.081694][T21144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.091756][T21144] Call Trace: [ 1590.095060][T21144] dump_stack+0x197/0x210 [ 1590.099409][T21144] should_fail.cold+0xa/0x15 [ 1590.104019][T21144] ? fault_create_debugfs_attr+0x180/0x180 [ 1590.109141][T21213] overlayfs: unrecognized mount option "metacop\=on" or missing value [ 1590.109835][T21144] __should_failslab+0x121/0x190 [ 1590.109860][T21144] should_failslab+0x9/0x14 [ 1590.127414][T21144] kmem_cache_alloc+0x2aa/0x710 [ 1590.132273][T21144] ? finish_task_switch+0x147/0x750 [ 1590.137480][T21144] getname_flags+0xd6/0x5b0 [ 1590.141988][T21144] user_path_at_empty+0x2f/0x50 [ 1590.146839][T21144] vfs_statx+0x129/0x200 [ 1590.151116][T21144] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1590.156403][T21144] ? vfs_statx_fd+0xc0/0xc0 [ 1590.160917][T21144] ? _raw_spin_unlock_irq+0x59/0x80 [ 1590.166117][T21144] __do_sys_newlstat+0xa4/0x130 [ 1590.171235][T21144] ? __do_sys_newstat+0x130/0x130 [ 1590.176277][T21144] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1590.181834][T21144] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1590.187822][T21144] ? __sched_text_start+0x8/0x8 [ 1590.192678][T21144] ? ksys_write+0x1cf/0x290 [ 1590.197177][T21144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.197191][T21144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.197203][T21144] ? do_syscall_64+0x26/0x790 [ 1590.197217][T21144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1590.197228][T21144] ? do_syscall_64+0x26/0x790 [ 1590.197244][T21144] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1590.197265][T21144] __x64_sys_newlstat+0x54/0x80 [ 1590.233624][T21144] do_syscall_64+0xfa/0x790 [ 1590.238139][T21144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1590.244037][T21144] RIP: 0033:0x45a639 [ 1590.247929][T21144] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1590.267536][T21144] RSP: 002b:00007f8a0fcfec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1590.275960][T21144] RAX: ffffffffffffffda RBX: 00007f8a0fcfec90 RCX: 000000000045a639 17:59:17 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x02on'}]}) [ 1590.283942][T21144] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000140 [ 1590.291922][T21144] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1590.299893][T21144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a0fcff6d4 [ 1590.307865][T21144] R13: 00000000004c6fc0 R14: 00000000004dc660 R15: 0000000000000005 17:59:17 executing program 1 (fault-call:16 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1590.341214][T21218] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000000)=0x3) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:17 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x03on'}]}) [ 1590.515251][T21221] FAULT_INJECTION: forcing a failure. [ 1590.515251][T21221] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.534292][T21221] CPU: 1 PID: 21221 Comm: syz-executor.1 Not tainted 5.4.0-rc7-next-20191115 #0 [ 1590.543334][T21221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.543340][T21221] Call Trace: [ 1590.543364][T21221] dump_stack+0x197/0x210 [ 1590.543386][T21221] should_fail.cold+0xa/0x15 [ 1590.543404][T21221] ? fault_create_debugfs_attr+0x180/0x180 [ 1590.543428][T21221] ? ___might_sleep+0x163/0x2c0 [ 1590.543447][T21221] __should_failslab+0x121/0x190 [ 1590.543464][T21221] should_failslab+0x9/0x14 [ 1590.543479][T21221] kmem_cache_alloc+0x2aa/0x710 [ 1590.543495][T21221] ? retint_kernel+0x2b/0x2b [ 1590.543518][T21221] __d_alloc+0x2e/0x8c0 [ 1590.543531][T21221] ? d_alloc+0x1c/0x280 [ 1590.543549][T21221] d_alloc+0x4d/0x280 [ 1590.543564][T21221] ? find_held_lock+0x35/0x130 [ 1590.543580][T21221] d_alloc_parallel+0xf4/0x1c00 [ 1590.543598][T21221] ? __lock_acquire+0x16f2/0x4a00 [ 1590.556938][T21221] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1590.556966][T21221] ? lockref_get_not_dead+0x70/0x90 [ 1590.565848][T21221] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1590.565864][T21221] ? __lock_acquire+0x16f2/0x4a00 [ 1590.565879][T21221] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.565895][T21221] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1590.565910][T21221] ? retint_kernel+0x2b/0x2b [ 1590.565932][T21221] ? lockdep_init_map+0x1be/0x6d0 [ 1590.576574][T21221] ? lockdep_init_map+0x1be/0x6d0 [ 1590.576600][T21221] __lookup_slow+0x1ab/0x500 [ 1590.576619][T21221] ? vfs_unlink+0x620/0x620 [ 1590.595534][T21221] ? lookup_open+0x1a90/0x1a90 [ 1590.595552][T21221] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1590.595570][T21221] lookup_slow+0x58/0x80 [ 1590.595585][T21221] walk_component+0x747/0x1ff0 [ 1590.595603][T21221] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.595620][T21221] ? path_init+0x18e0/0x18e0 [ 1590.595635][T21221] ? retint_kernel+0x2b/0x2b 17:59:18 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x04on'}]}) [ 1590.595655][T21221] ? link_path_walk.part.0+0xc46/0x1340 [ 1590.595671][T21221] path_lookupat.isra.0+0x1f5/0x8d0 [ 1590.595691][T21221] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.603972][T21221] ? path_parentat.isra.0+0x160/0x160 [ 1590.603995][T21221] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.604013][T21221] ? __this_cpu_preempt_check+0x35/0x190 [ 1590.604031][T21221] filename_lookup+0x1b0/0x3f0 [ 1590.622575][T21221] ? nd_jump_link+0x1d0/0x1d0 [ 1590.622596][T21221] ? __virt_addr_valid+0x17e/0x2c0 [ 1590.622615][T21221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1590.622634][T21221] ? __phys_addr_symbol+0x30/0x70 [ 1590.641749][T21229] overlayfs: unrecognized mount option "metacopyon" or missing value [ 1590.643370][T21221] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1590.643388][T21221] ? __check_object_size+0x3d/0x437 [ 1590.643408][T21221] ? strncpy_from_user+0x2b4/0x400 [ 1590.643426][T21221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1590.643438][T21221] ? getname_flags+0x277/0x5b0 [ 1590.643454][T21221] user_path_at_empty+0x43/0x50 [ 1590.643471][T21221] vfs_statx+0x129/0x200 [ 1590.643496][T21221] ? vfs_statx_fd+0xc0/0xc0 [ 1590.654210][T21221] ? __kasan_check_write+0x14/0x20 [ 1590.654229][T21221] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1590.654247][T21221] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1590.654264][T21221] __do_sys_newlstat+0xa4/0x130 [ 1590.654278][T21221] ? __do_sys_newstat+0x130/0x130 [ 1590.654293][T21221] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1590.654313][T21221] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.654333][T21221] ? __this_cpu_preempt_check+0x35/0x190 [ 1590.654347][T21221] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.654361][T21221] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1590.654380][T21221] ? do_syscall_64+0x26/0x790 [ 1590.668969][T21221] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1590.668986][T21221] ? do_syscall_64+0x26/0x790 [ 1590.669005][T21221] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1590.669024][T21221] __x64_sys_newlstat+0x54/0x80 [ 1590.693278][T21221] do_syscall_64+0xfa/0x790 [ 1590.693301][T21221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1590.693312][T21221] RIP: 0033:0x45a639 17:59:18 executing program 1 (fault-call:16 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1590.693328][T21221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1590.693335][T21221] RSP: 002b:00007f8a0fcfec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1590.693348][T21221] RAX: ffffffffffffffda RBX: 00007f8a0fcfec90 RCX: 000000000045a639 [ 1590.693356][T21221] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000140 [ 1590.693365][T21221] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:59:18 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x05on'}]}) 17:59:18 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x2) [ 1590.693374][T21221] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a0fcff6d4 [ 1590.693382][T21221] R13: 00000000004c6fc0 R14: 00000000004dc660 R15: 0000000000000005 [ 1590.902717][T21339] overlayfs: unrecognized mount option "metacopyon" or missing value [ 1591.128451][T21346] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f00000001c0)) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @multicast1}, 0x254, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000000)='veth1_to_bond\x00', 0x100000001, 0xd7c0, 0x4}) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:18 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x06on'}]}) 17:59:18 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) fadvise64(r0, 0x4, 0x7f, 0x1) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:59:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = semget$private(0x0, 0x0, 0x24) semctl$IPC_INFO(r1, 0x358f9aa95dec2d12, 0x3, &(0x7f00000001c0)=""/51) clone(0x2000000008060100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x2, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x8000) sendfile(r0, r2, &(0x7f0000000200)=0xd4, 0x1) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000000)="39447cd475f2f14cae279e88aefec9e49b97b5d3ea042cef3290b93f41a306f210ed08e10001f57106335911fd129ecca6aa33fb3be4f600ac127ac235e811c723a980f98dd4", 0x46) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1591.341796][T21433] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:18 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\aon'}]}) [ 1591.520704][T21469] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:19 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\bon'}]}) [ 1591.675785][T21576] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:19 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\ton'}]}) 17:59:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1591.860079][T21580] overlayfs: unrecognized mount option "metacopy on" or missing value 17:59:19 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\non'}]}) 17:59:19 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) [ 1591.949363][ T27] audit: type=1800 audit(1574186359.434:64): pid=21460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16625 res=0 17:59:19 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000001000000008400000007000000ac1414bb00000000"], 0x18}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000040)={{0x3c, @local, 0x4e23, 0x3, 'dh\x00', 0x26, 0x0, 0x7b}, {@loopback, 0x4e21, 0x0, 0x8, 0x101, 0x10001}}, 0x44) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000000)=0x2) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x880027, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:19 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@fowner_gt={'fowner>', r4}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@hash='hash'}, {@uid_gt={'uid>', r6}}, {@dont_measure='dont_measure'}, {@permit_directio='permit_directio'}, {@euid_gt={'euid>', r6}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) socket$can_raw(0x1d, 0x3, 0x1) [ 1592.187120][T21693] overlayfs: unrecognized mount option "metacopy [ 1592.187120][T21693] on" or missing value 17:59:19 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\von'}]}) [ 1592.271702][T21698] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 17:59:19 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) [ 1592.399040][T21707] overlayfs: unrecognized mount option "metacopy on" or missing value [ 1592.407470][T21699] overlayfs: overlapping lowerdir path 17:59:20 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\fon'}]}) [ 1592.501591][T21779] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 17:59:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @rand_addr=0x6}, {0x2, 0x4e23, @rand_addr=0x101}, 0xc0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth0_to_team\x00', 0x9, 0x400, 0x8}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x0, r4}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c6c6f776572640626c8d8088d69723d2e3a6669686530"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1592.640589][T21818] overlayfs: unrecognized mount option "metacopy on" or missing value 17:59:20 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\ron'}]}) [ 1592.794450][ T27] audit: type=1800 audit(1574186360.284:65): pid=21698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16563 res=0 [ 1592.795572][T21820] overlayfs: unrecognized mount option "lowerd&ÈØir=.:fihe0" or missing value 17:59:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendfile(r0, r2, 0x0, 0x800000000024) [ 1592.866203][T21825] overlayfs: unrecognized mount option "metacopy on" or missing value 17:59:20 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6) 17:59:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x400, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:20 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x0eon'}]}) [ 1593.146856][T21946] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20001, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r3, 0x0, 0x4cc0, 0x5, 0x4}) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c6c3a4c69910d30eabf25cd7478081cc45305b87725694c7df954a0fab29310ec42f9de5c89eef07cd70084688bc2cccce78e0009e4d422d47f2d8f9e674869c6820781a340f10e3703ce12c39ed8cde4f3bb88c5f888c7e51046b55b6301846774920ba454a8206d3c306fd564c33b52ae95fd6ab40502d4065e08ec4ed083079512734fe51c2d8e5c64d82c86ec2f9da5ba8585fcdbf1833bddf32d308459fe46a5bed7d7fe6eadbd424842"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:20 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x0fon'}]}) 17:59:20 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="3d60cd575be2f37a66607dc03c3cfdf62c0be05b5f918c8d6f2219b6dc6fd08e238a194306a6aee4e46ba64e6fa32b66aa359d296b4f41f8f10259390a82d43411f3296f547de76fae4eac309deca9ea7dd5dadcfaf21774ef4dbb56db5796377e04094145be48", @ANYRESHEX=r3, @ANYBLOB="1618c97dd31703fb2c00"]) [ 1593.464552][T22048] overlayfs: unrecognized mount option "metacopyon" or missing value [ 1593.512097][T22050] 9pnet: Insufficient options for proto=fd [ 1593.519304][T22042] overlayfs: unrecognized mount option "l:Li‘ 0ê¿%ÍtxÄS¸w%iL}ùT ú²“ìBùÞ\‰îð|×" or missing value 17:59:21 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x10on'}]}) 17:59:21 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:59:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdar=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000), 0x4) [ 1593.677224][ T27] audit: type=1800 audit(1574186361.164:66): pid=21934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16785 res=0 [ 1593.724779][T22156] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:21 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xa) 17:59:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/de[\b\x85\x93\xdb\xaft!t\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'lap\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x1}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x6101, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0763834030a1fc907328fc1c1e5604400100f9c8da8ff700000f6363104001000000000000000000000000000000000000141bdbecc6f696caed541e6d693fcda079a306447988ffd4060056"], 0xa3, 0x0, &(0x7f0000000500)="590320e8692d7afeb7b9986e5ae701e12dc5c922ee7b6dbb965cbb18fc1fdc42202cb17d91f3e97f1c146f2d76efbf2fbd79e0f7aff3ac293faa492c2f801d5dc8161d6e73823de510df6f13a14da9048bdf2066d9ef482096cdea45b0feea4040716b2f779844c8abc6afd8edb6ddab0605f5e15b83fbc76e0c3614e4b6a11b9b188f566bef0653971d015add2046f8f65e759b89915e7d2d49cf69b406f230680de2"}) connect$inet6(r3, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="7e000000302e00dd49636fe1a67589423ccac17df54e08a4389c0ddd131f9bd0adbf5b13700f4dbf94f0d9a81491da1f4c2198f553834d9a10d25b229bf84c1ea4a4731c8070b24a636588bc894d8bcf6bb26b2fdd83b3eff552d5b9f2425b4cbfcd1411218898cb8fcdcacf3e9a4398a26738af151b3e3b559bcb077342ec8d76d2"], &(0x7f00000000c0)=0x86) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e21, 0x1, @remote}}}, 0x84) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:21 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x11on'}]}) [ 1594.029681][T22163] overlayfs: unrecognized mount option "lowerdar=.:file0" or missing value [ 1594.041967][T22172] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:21 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x12on'}]}) 17:59:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1594.245735][T22276] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:21 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x13on'}]}) [ 1594.517887][T22283] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:22 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x14on'}]}) 17:59:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x113) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e3a66696c6530d9cb0260f495361ed82f84c4e3e062d95b2c8ba675cbde605f8cc85eadc2d73a776581a24c7e926df0d671fff8422f1f6c4f8c3c08518825a84ded4d37"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:22 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) open(&(0x7f0000000040)='./file1\x00', 0x282000, 0x100) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1594.720217][T22390] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:22 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc) 17:59:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") accept4$x25(r2, 0x0, &(0x7f0000000000), 0x100000) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r3 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000000024) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 17:59:22 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x15on'}]}) [ 1594.947667][T22393] overlayfs: unrecognized mount option "‹¦uËÞ`_ŒÈ^­Â×:we¢L~’mðÖqÿøB/lOŒ<Qˆ%¨MíM7" or missing value 17:59:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='maps\x00') r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x5000)=nil, 0x1000000, 0x2, 0xbad3fc0971f6927f, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000003c0)={r3, &(0x7f0000000340)=""/108}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x1400, &(0x7f0000000000)="069b87169622366f0ff09c4c1d45cda41b44d01aa8c66821b88f12d7a6e509588c6ed4a971f60f86767374065ac29a3517e9876702098e8395f2c9ec131c4d0999bcd48677d583df47dad01833ba81329320f2ddafc974125a5f", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)="eeb37ba05d45ec59a21ffa1963c6b46b141acd1f1251b9df6da3db7dfbdeae31bb42acd5d066f96e8aadd2a7500bbd490036e14aa4ca79171650116dc08ba3f78fdaca240c66839946447c173bfacc2ba7201e5965f5d1ba6e1a12ee7a716e98d834883cedd52016484066f733fc82c4a2") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x4, @mcast2, 0x3}, 0x1c) [ 1595.028998][T22443] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x3f}, 0x200, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='Clowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:22 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x16on'}]}) [ 1595.258688][T22556] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:22 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x17on'}]}) [ 1595.357705][T22515] overlayfs: unrecognized mount option "Clowerdir=.:file0" or missing value [ 1595.441346][T22699] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, 0x0, &(0x7f00000002c0)=0xffffffffffffff73) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:23 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x18on'}]}) 17:59:23 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x19on'}]}) [ 1595.615573][T22729] overlayfs: unrecognized mount option "metacopyon" or missing value [ 1595.623124][ T27] audit: type=1800 audit(1574186363.104:67): pid=22479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16993 res=0 17:59:23 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'\xc3\xf3\x00', './bus', [], 0xa, "45e8183794d69f953dfc3cc2f6bb3e3154a8823997721562dbe1f65eb3606be1ba64df4c208163dcf3dab85bc66e"}, 0x37) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x800000000024) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x7, 0x4) 17:59:23 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r5, r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r7, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r7, 0x7}, &(0x7f0000000080)=0x8) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r8}}) 17:59:23 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xd) 17:59:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1595.765596][T22737] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:23 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x1aon'}]}) 17:59:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x7fff, 0xb, 0x4, 0x2000000, {0x0, 0x2710}, {0xb1eb90785e93b3aa, 0x0, 0x40, 0x81, 0x1f, 0xa6, "0d4556c1"}, 0x9, 0x3, @offset=0x4a2, 0x4}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1596.016773][T22855] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:23 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x1bon'}]}) [ 1596.155560][T22962] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:23 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x1con'}]}) 17:59:23 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x19, 0xc0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000000, 0x0, 0x0, 0x69}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x100000000, r2, 0x8001}) close(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xa942, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000400)=0x8) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x800000000024) [ 1596.347109][T22999] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:23 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) io_setup(0xce08, &(0x7f0000000240)=0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) io_cancel(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f00000002c0), 0x0, 0x401}, &(0x7f0000000400)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000200)={r5}) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f7765726469030000000000000070"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:23 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x1don'}]}) 17:59:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '(eth0vboxnet1wlan1ð0trusted{nodevsystemtrusted\\wlan0:vmnet0'}, {}, {}, {0x20, ']selinux'}, {0x20, '$&'}, {0x20, ','}, {}], 0xa, "ba6b68aa1f8d5ba8ab7019eb9d20901b25b27309ed196600953338738e69627a9e906481a4b09b4d1d9f2e483ebdd9867883f85f4675ad37e0d5d3cffcd7e62fae05d40f57087c6a046d1ebfa27b1a5a9305d29f02e4ef29b12f8e9a1099f971b087cceda1ef2001df25e96756cac635d6dc21c5be44d43b3ed877b8adb953adf0fa8f6ca3fb3156bc3b8b6cec0600447e333134867d06d8697c059a1e"}, 0xf8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1596.592458][T23076] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:24 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\x1eon'}]}) 17:59:24 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2, 0x1, 0xfffffffffffffc00, 0x8d}) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:59:24 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xe) [ 1596.809718][T23212] overlayfs: unrecognized mount option "metacopyon" or missing value 17:59:24 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy!on'}]}) [ 1596.952977][ T27] audit: type=1800 audit(1574186364.434:68): pid=23069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17018 res=0 17:59:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'bcsf0\x00', 0x6000}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200002, 0x0) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) fstat(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r3, 0x400454cc, r6) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa9, &(0x7f0000000040)=0x4, 0x4) [ 1597.004199][T23299] overlayfs: unrecognized mount option "metacopy!on" or missing value 17:59:24 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\"on'}]}) 17:59:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000200)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:24 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy#on'}]}) [ 1597.295935][T23310] overlayfs: unrecognized mount option "metacopy"on" or missing value [ 1597.314307][ T27] audit: type=1800 audit(1574186364.804:69): pid=23303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16961 res=0 17:59:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000000c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x5111, 0x0) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000040)={0x5, 0xbd193189f1141dc6, 0x4, 0x1, {0x0, 0x7530}, {0xb, 0x8, 0x4, 0x7, 0x1, 0x2, "fdd1d794"}, 0x4, 0x4, @planes=&(0x7f0000000000)={0xfffffffb, 0x401, @userptr=0x800, 0x40}, 0x4}) socket$inet6(0xa, 0x4, 0x5) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18dd00000100000084000500"/24], 0x18}, 0x44) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=0x0) fcntl$setown(r4, 0x8, r6) 17:59:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) pipe2(&(0x7f0000002b40)={0xffffffffffffffff}, 0xa7fee7ec1ed8a0bc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002b80)={0x8000, 0xffff, 0x3, 0x9, 0x2}, 0x14) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1597.476739][T23417] overlayfs: unrecognized mount option "metacopy#on" or missing value 17:59:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dfv/dqp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowe\x00\x00\x00\x00=.:file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x40, 0x30400) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000003c0)={{0x20, 0x7, 0x20, 0x5, 0x3f, 0x70}, 0xffffffff, 0x9, 0x2, 0x5, 0x2000, "92ce3f5d0f3706b4095e227e9a1f2872601366319f3d3df7c398b3ad157518a0783426e3f41cd17d4c7495e793ea18c824313b4a7d85374331f5683dcbd784554ae3af93e9da589340763275778137c199afcb8e35df9311db3cfd9fe1979611a7fca1d15d67118ab580ac70963a0946387ba96d410cb10c25c800a7be0cd219"}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200)={0x4, 0x8, 0x8001, 0x10000, 0x2}, 0x14) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xb800) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:25 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy$on'}]}) 17:59:25 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf) 17:59:25 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) dup2(r1, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x404c02, 0x0) ioctl$KDGKBLED(r5, 0x5111, 0x0) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f0000000040)=0x401, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 1597.709140][T23450] overlayfs: unrecognized mount option "metacopy$on" or missing value 17:59:25 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy%on'}]}) 17:59:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x8cb7f879c80a501f, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000003c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) futex(&(0x7f0000000040)=0x1, 0x81, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) chdir(&(0x7f0000000000)='./file0\x00') [ 1597.890840][T23644] overlayfs: unrecognized mount option "metacopy%on" or missing value 17:59:25 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy&on'}]}) [ 1598.111048][T23653] overlayfs: unrecognized mount option "Ó?¡; KÏ{éwe=ók¥)4²+" or missing value 17:59:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x420800, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r6}) r7 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r0, r7, 0x0, 0x800000000024) [ 1598.153795][T23656] overlayfs: unrecognized mount option "metacopy&on" or missing value [ 1598.176078][ T27] audit: type=1800 audit(1574186365.664:70): pid=23419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16849 res=0 17:59:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:25 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\'on'}]}) 17:59:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() socket$inet6(0xa, 0x80000, 0x1f) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000440)={0x4, {{0xa, 0x4e21, 0x9, @remote}}, {{0xa, 0x0, 0x1, @rand_addr="fffffff5000b0000002600", 0x3}}}, 0x108) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x18, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x20000041) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1598.459599][T23768] overlayfs: unrecognized mount option "metacopy'on" or missing value [ 1598.509742][T23768] overlayfs: unrecognized mount option "metacopy'on" or missing value 17:59:26 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy(on'}]}) 17:59:26 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x10) 17:59:26 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 17:59:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007000040ac1414bbfd000000"], 0x18}, 0x44) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000000)={{0x2, @addr=0xdee4}, 0x8, 0x4, 0xfff}) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000200)=0x800, 0x4) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r6, 0x5111, 0x0) ioctl$sock_proto_private(r6, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$RTC_PIE_ON(r6, 0x7005) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1598.705569][T23921] overlayfs: unrecognized mount option "metacopy(on" or missing value 17:59:26 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy)on'}]}) [ 1598.800586][T23988] 9pnet: Insufficient options for proto=fd 17:59:26 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1598.931271][T23995] overlayfs: unrecognized mount option "metacopy)on" or missing value [ 1598.952449][ T27] audit: type=1800 audit(1574186366.434:71): pid=23764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16739 res=0 17:59:26 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy*on'}]}) 17:59:26 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0x5111, 0x0) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{}, {}, {}]}) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000240), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x40, 0x8, 0x0, 0x2, 0x6}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r6, 0x8c6a5d4, 0x7fff, 0x7fff}, 0x10) r7 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r7, 0x2007fff) r8 = socket$inet(0x2, 0x2000080001, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r9 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r9, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) sendfile(r8, r7, 0x0, 0x7fffffff) 17:59:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x4, @local, 'hwsim0\x00'}}) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=>:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)) [ 1599.208647][T24104] overlayfs: unrecognized mount option "metacopy*on" or missing value 17:59:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x1, 0x0, @rand_addr="000000000000000000000000008000", 0x400}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) fcntl$dupfd(r1, 0x0, r1) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x0, 0x180) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x143) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:26 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy+on'}]}) [ 1599.431770][T24114] overlayfs: unrecognized mount option "metacopy+on" or missing value [ 1599.448776][T24109] overlayfs: failed to resolve '>': -2 17:59:26 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy,on'}]}) 17:59:27 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x30) 17:59:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c6c6f774e726469553d2e3a66696c6530f180d66cac8005e66ecd611fd71bf403f99f7541"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0xfd8a852, {{0x2, 0x4e20, @empty}}}, 0x88) [ 1599.559229][T24242] overlayfs: unrecognized mount option "metacopy" or missing value 17:59:27 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x4, 0x147000) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0x8) r3 = open(&(0x7f0000000340)='./bus\x00', 0x1612c3, 0x68) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) openat(r4, &(0x7f0000000040)='./bus\x00', 0x20000, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000380)) ioctl$KDGKBLED(r5, 0x5111, 0x0) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000240)={0x3, 0x8, 0xe}) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000080), 0x4) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000007000000ac1414bb007f00ec00000000000025703a1a42d03e10b8115f0a02dc968773251fd96763d7c05bfcf145fa4a1c0a4634132d41f2682b2d2624"], 0x18}, 0x44) setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f00000000c0)={@loopback, @local, @multicast2}, 0xc) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) 17:59:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x6, {{0xa, 0x3, 0x0, @dev}}, {{0xa, 0x4e24, 0x3, @empty, 0x4}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:27 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy-on'}]}) [ 1599.808066][T24337] overlayfs: unrecognized mount option "metacopy-on" or missing value 17:59:27 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) statx(r0, &(0x7f0000000040)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000280)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:59:27 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy.on'}]}) [ 1599.925191][T24334] overlayfs: unrecognized mount option "lowNrdiU=.:file0ñ€Öl¬€ænÍa×ôùŸuA" or missing value [ 1600.046524][T24525] overlayfs: unrecognized mount option "metacopy.on" or missing value [ 1600.111515][T24525] overlayfs: unrecognized mount option "metacopy.on" or missing value 17:59:27 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy/on'}]}) 17:59:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f77657264690200000066696c6530"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x40) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0xc30, 0x5, r1, 0x0, r3, 0x0, 0x401, 0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000", 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000340)=""/24) gettid() setsockopt$inet6_group_source_req(r4, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="186e0bb1540000008400000007000007000000bb00000000"], 0x18}, 0x44) fsetxattr$security_smack_transmute(r0, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x5) fcntl$setstatus(r5, 0x4, 0x2000) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1600.277563][T24552] overlayfs: unrecognized mount option "metacopy/on" or missing value 17:59:27 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffb) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4}}]}, 0x34}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @dev={[], 0x1b}}, 0x10) r6 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r0, r6, 0x0, 0x800000000024) 17:59:27 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy0on'}]}) 17:59:28 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x60) [ 1600.499926][T24557] overlayfs: unrecognized mount option "lowerdi" or missing value [ 1600.521408][T24568] overlayfs: unrecognized mount option "metacopy0on" or missing value 17:59:28 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy1on'}]}) 17:59:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r2 = request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f00000003c0)='/dev/dsp\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:28 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy2on'}]}) 17:59:28 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) splice(r0, &(0x7f0000000200)=0x7fffffff, r2, &(0x7f0000000240)=0x1ff, 0x7, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0/file0', [{}, {0x20, ',[-'}], 0xa, "34952dffe18ea7c613ff350e49362ad094aebb1a775182f9a4c2a3d47d2e91d1cb7181756426880554899e5b2c374eafca67e72c7d292fff1dba292cbd96e34521c0a1211e373d96922212439bbc605e7285adb563251541f7fcb61ee1b00fec7987151f575cb1288b70e01710afcb51a5f06a1aeed41adc6871563148ec0fb34d8fc1715f2ea7be558f4e338e"}, 0xa3) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1600.729869][T24681] overlayfs: unrecognized mount option "metacopy1on" or missing value [ 1600.854877][T24787] overlayfs: unrecognized mount option "metacopy2on" or missing value 17:59:28 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy3on'}]}) 17:59:28 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0xfffffe1f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x3}, 0x1c) r7 = fcntl$dupfd(r4, 0x0, r4) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r8, 0x5111, 0x0) ioctl$sock_proto_private(r8, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") write$P9_RREADLINK(r8, &(0x7f00000001c0)={0x16, 0x17, 0x1, {0xd, './file1/file0'}}, 0x16) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1601.022058][T24794] overlayfs: unrecognized mount option "metacopy3on" or missing value 17:59:28 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy4on'}]}) 17:59:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000200)='./file0\x00', 0x4, 0x4, &(0x7f0000000700)=[{&(0x7f00000003c0)="cca4df9ae8706fa2069579b3322d9bd291b38bdcba857a5bdbd45015f971e4121b7e0deaef72b0bf749110548dfc2bc55b76469192953c14b9b5948d1cd5e5b9a3c80e69220ec69cf780e84e29c4720cf4adf983d18484e6459378ae4040e22d0909d52a7752f33f936eae26b0a42f4f5457ae58ea97424777818f389b269523673ef92046b7667fa60bc119d06a55acda5cef5a71402b8db139ac28ed6532383bb92287", 0xa4, 0x100000000}, {&(0x7f0000000540)="30bed2bac27058f962be3ac228c72de30cdd6e291e1bf1f3b9597a0cb1bd5551e8aa1d2d2d9a69d68da2a121f430be869f30386ac1b356823bb501bfa3da5b82484f92bbb04c150d6bf19253650ede3c45ac2074203af12fb417577acaa01a6fd88a27e58976845c70c4733b0e3b9e07ac60477c59848b16a21a9e83cb87100d7611a6797a66652a784f8eb61e7adc722756c1913a0aa3820777ecc83c5c22bfa73c19ad4b40c376e847935b7628147e392a820bad4187a0ed0102e79816c5d25db7d2301fcbd0723fa2e0", 0xcb, 0x4c19fb33}, {&(0x7f0000000640)="4485e979d1ee3d948f6da970cc4d37d3a8dc602fb7019fb084bca4e7833eac2761dbe7a55116b68e35c649926a86ea848a6fb767c6ba90e009cdf7ed54b6ffe331fa1b80f67758bbe93f26a89ace8891a19ea81d7e8f4ea9ba0c70c95b2c19a6217ff6e5ff524a7fa19f9db0df04bb66a3c19c29891c9b0c4bb1b3903ba16efddcd77fca203911bb9e2d70", 0x8b, 0x8000}, {&(0x7f0000000480)="b5d8a5e2b5a9d78e660be8db44eb52320b4c3a367f9c278f740aaa98d7d45f7292e9a631b0bdd74cecac202fd3a6b3b8bccf0636e77a4586bb7c09962c051f663c5b6dba8dd4024b09be8de52933e68b4e29d52a", 0x54, 0x3}], 0x240f4, 0x0) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1601.255932][ T27] audit: type=1800 audit(1574186368.744:72): pid=24673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17179 res=0 [ 1601.261610][T24803] overlayfs: unrecognized mount option "metacopy4on" or missing value [ 1601.310674][T24803] overlayfs: unrecognized mount option "metacopy4on" or missing value 17:59:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000001c0)=0x44) gettid() r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) recvmsg(r3, &(0x7f0000000600)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/218, 0xda}], 0x1, &(0x7f0000000540)=""/181, 0xb5}, 0x2003) sendmsg$nl_generic(r4, &(0x7f00000019c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001980)={&(0x7f0000000680)={0x12e0, 0x39, 0x2, 0x70bd26, 0x25dfdbfd, {0x4}, [@typed={0x14, 0x69, @ipv6=@rand_addr="1247abb8cc594f232a67707c31d83f84"}, @generic="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", @typed={0xb4, 0x54, @binary="ec2b3dc8159a12e54fe0c7c964e5221df314cb27a09df6675fa73292099f8332072f8db9448d7d1666391f73f8089b9a6270a5f3a43bf4b8c5270505aab64b30af1f757f8f8c55f1078a5c410b2e41d491ce7c80118dec3756c0d37d85ca14a203ac2209fbac6095f1db98742a09cf38e5a589ae75a9f579b186150de8f0ad138f26f2405cd6ba1f957e98d093fba7eaf80a5aa8bd5e3f4f0994ef46be08c935644e521ef43c8b5d64b7322e32a47404"}, @nested={0x204, 0x53, [@generic="f3454c88995f76295907d408ef2dc4bd2a3b86d7f9df5c0cb3eec56b24edfa188cd3516b46ed55d37d38d790c2fcfdd84356ce661e2f9019a4288b932b0fcb8b3b0b8766fa36b16d77116741ca626f36d9b73030cc766a418f7b62e2f7c9de6e250d5001976271", @generic="8a77", @generic="9faced4f882c8a3aafb9cbd04a6d191bef7c41e3946deff7b31e01bdae9c92a4be25a731d86ca76dc06da8510f90941156110b66b4864a7e46bd5e6bc102d7b7a3e3df082ee8dc16bfc10526f8cc013fa44f55dde57d0485897d0d684287fa44d6588e75306b803b6cb425d54d23e9b2eb803897765f7f87", @generic="23bb35f0e23e9118a6cce8be9aee22130872cc7baed86bdb44c41e88e7cf17dd94c3a77b690769e0bdd50ca78614d4dd782a0308f66ec1b038823f93d34fbf820c09a3242541739d2b3c6eaa8adcc0e25369dd2a15121867b5c3a1624e6972aef6b81098e7ae85eb36f966b49847feea40e7d5cbc0f122b1f124be47551b738c2c2ffd00187151dbc2f9560d15f4f40051c8301f6239cfe98f6d01cf626085c4a083f1c40998cd780de2aadd77786cf168fb840db0ced793ace1c597e535d607ba37", @generic="dabbf72e84a79b16a6e75a55d220a90a4aac83623b351769d0044f823c5e0620b39c58f07748eea9792db8012108aeff49810fdaa6e08bf6bbfc407ac755ad45f3f6ae796b072dfc08dc75af5a12f6c35fc35c2d49cf95e1a3eacf"]}]}, 0x12e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8002) open_by_handle_at(r2, &(0x7f00000002c0)={0xce, 0x7, "eab435b6aba36930f1aaf8756829721e32867ecbc174faeaee7eb460f289066c27ae747997f45bb5b24186eb4d73401a06295612b2520a945e58e3c6adfc33b6252000167de6b02c9a73231c100529153319eb21c08ef575e3f25f4aab22f888ba4b4a8df1ac88e3d9c8db417cfff9068ecf0699afd50e0b47b04fd208f1592b5bd18a0dabd15546ce0a73a0fb7a094a4079280027746a3f03720623780985380dc981791dc55281ed5d74497e913779ffb759bce2235708774445f61d318f120f7d32bd5511"}, 0x280) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:28 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="27000000f2ffff0700000000"]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x181000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x24060, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0x5111, 0x0) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000000)=""/190) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000400)=0x8) r6 = open(&(0x7f0000000340)='./bus\x00', 0x16b0c2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r0, r6, 0x0, 0x800000000024) 17:59:28 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf0) 17:59:28 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy5on'}]}) 17:59:29 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy6on'}]}) [ 1601.532122][T24953] overlayfs: unrecognized mount option "metacopy5on" or missing value 17:59:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)) [ 1601.692286][T25023] overlayfs: unrecognized mount option "metacopy6on" or missing value 17:59:29 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy7on'}]}) 17:59:29 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:29 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c01000100003d", @ANYRESHEX=r3, @ANYBLOB="decf20effb3d1bec63bf6250b8dc2c00708dcbebc8f87de169b871d12dd6c40be06bd8b66941cd5666bc9c55fe5aeed9ab1fbe510417f0d9af5e"]) 17:59:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) syz_mount_image$hfsplus(&(0x7f00000002c0)='hfsplus\x00', &(0x7f00000003c0)='./file1\x00', 0xc80, 0x2, &(0x7f0000000540)=[{&(0x7f0000000400)="cf2813b47bdf1fc0cc4021ac44574a6622fe2b3bec50e9bf358fdb6faeec73cd2e6859f17f77168f", 0x28, 0x7f}, {&(0x7f0000000440)="cda0083f56f74dce7772b323aa77010c6c8108d662572f23f0f627a47a33f8ef4d734302dda53ad1281bc2e4f37f65cfc75505e76c67b6b225a5588ebd4678c79009f6d95e8e9aa0db50593975c8bd74e3ac518ec95c971efa337ce3a9096e576433a603f3e25a0ac478eb0f81e4ddb679de928a3524945ff0b2fa49dcecfe234c9673a0eb016c7fc8f30796b4bdd2d9ba9dae4d2419cdcca66473ae21e174504b615b34477333753aeb046b4e22b0e9cf8c951fb2617845c9", 0xb9, 0x7}], 0x1, &(0x7f0000000580)={[{@barrier='barrier'}, {@type={'type', 0x3d, "1e9b39ee"}}, {@force='force'}, {@barrier='barrier'}, {@session={'session', 0x3d, 0xe75}}, {@creator={'creator', 0x3d, "8133e434"}}], [{@dont_hash='dont_hash'}, {@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}, {@uid_lt={'uid<', r4}}]}) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) pidfd_send_signal(r5, 0xc, &(0x7f0000000200)={0x1f, 0x1000, 0x5}, 0x0) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x0, 0x24000000}, 0x80) fadvise64(r6, 0xff, 0xe13, 0x3) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)) [ 1601.969448][T25235] overlayfs: unrecognized mount option "metacopy7on" or missing value 17:59:29 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy8on'}]}) [ 1602.169774][T25244] 9pnet: Insufficient options for proto=fd [ 1602.182222][T25245] overlayfs: unrecognized mount option "metacopy8on" or missing value 17:59:29 executing program 5: timerfd_create(0x3, 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x200000000000002e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4}}]}, 0x34}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000040)={&(0x7f00000001c0)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "7c74dabb3c96b886836c3f4f026724c8869c5ca360a16cef57b137cd06882c35bd35286fc38d9c7528312cb320ee6124cd933a02312271109620ca97b8035734"}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:29 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000040)=0xe8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\b', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@mmap='mmap'}, {@nodevmap='nodevmap'}, {@posixacl='posixacl'}, {@loose='loose'}], [{@euid_eq={'euid', 0x3d, r7}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')'}}]}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080), 0x1c) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @rand_addr="b1b8524620b7b4e14adb851070254dd6", 0x1}, 0x1c) 17:59:29 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy9on'}]}) 17:59:29 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x600) 17:59:29 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r6, 0x5111, 0x0) ioctl$sock_proto_private(r6, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") mmap$binder(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1, 0x11, r6, 0x0) dup2(r5, r4) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="d2636364fad4107b95774f1bc101", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x359) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r8, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r8, @in={{0x2, 0x4e22, @local}}, 0x6000, 0x5bae, 0xeaed, 0x3, 0x10}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r9, 0x7, 0x1, [0x1]}, &(0x7f0000000140)=0xa) get_thread_area(&(0x7f0000000180)={0x4d8, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}) close(r0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r10, 0x400454d4, &(0x7f0000000400)=0x8) r11 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r0, r11, 0x0, 0x800000000024) 17:59:30 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1602.496938][T25334] overlayfs: unrecognized mount option "metacopy9on" or missing value 17:59:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x1, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:30 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy:on'}]}) 17:59:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lremovexattr(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)=@random={'osx.', '/dev/dsp\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000200)={0x9, 0x0, 0x0, 0xb5, 0x0, {0x4, 0xfffffffc}}) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1602.793356][T25478] overlayfs: unrecognized mount option "metacopy:on" or missing value 17:59:30 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy;on'}]}) [ 1602.974975][T25561] overlayfs: unrecognized mount option "metacopy;on" or missing value 17:59:30 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r5, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r5, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={r6, 0x4, 0x330d, 0xf801, 0x8, 0x7f, 0x4e9, 0x1, {r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x1, 0x6, 0x6, 0x4}}, &(0x7f0000000540)=0xb0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:30 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy\\on'}]}) [ 1603.168631][T25691] overlayfs: unrecognized mount option "metacopy0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xa00) [ 1603.363412][T25697] overlayfs: unrecognized mount option "metacopy\on" or missing value [ 1603.391946][T25694] overlayfs: unrecognized mount option "lywe [ 1603.391946][T25694] 8¥rdirV.:file0" or missing value 17:59:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)) 17:59:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000380)='trans=fd,') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x140001, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000400)=0x1) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x6c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x22}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200a00a0}, 0x20000000) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) 17:59:31 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=\nn'}]}) [ 1603.698497][T25921] overlayfs: unrecognized mount option "metacopy= [ 1603.698497][T25921] n" or missing value 17:59:31 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=%n'}]}) [ 1603.888486][T26027] overlayfs: unrecognized mount option "metacopy=%n" or missing value 17:59:31 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=,n'}]}) 17:59:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="08ffffff", @ANYRES16=r4, @ANYBLOB="0002290c0008000408000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r6}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000000)=0x109014, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r8, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1603.998412][ T27] audit: type=1800 audit(1574186371.484:74): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17187 res=0 17:59:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x280000, 0x80) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x18}}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=0xfffffffffffffff8, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0xc, 0x1, 0xfc3}, &(0x7f0000000200)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x209}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r1, 0x10, &(0x7f00000003c0)={&(0x7f0000000440)=""/4096, 0x1000, r2}}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000001480)) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x40, 0x0, @ipv4={[], [], @loopback}, 0x3}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1604.124345][T26034] overlayfs: unrecognized mount option "metacopy=" or missing value 17:59:31 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=\\n'}]}) 17:59:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x80000001, @local}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:31 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=o\n'}]}) [ 1604.342631][T26085] overlayfs: unrecognized mount option "metacopy=\n" or missing value 17:59:31 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc00) 17:59:32 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3f, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000280)={{0x8, 0x0, 0x8, 0x10000, 'syz0\x00', 0x3}, 0x0, [0x889, 0x97, 0xc9b, 0x5, 0x3, 0x7e3331de, 0xea, 0x80000001, 0xffff, 0x2, 0x101, 0x1, 0x4, 0x20, 0x3, 0xfffffffffffffff8, 0x6, 0xc0e, 0x8, 0x7, 0x1, 0xc1f, 0x316, 0x8, 0x4, 0x81, 0x200, 0x80000001, 0x5, 0x4, 0x5a, 0x7f, 0x100000001, 0x2, 0x100000001, 0x400, 0x4a6b, 0x9, 0x8001, 0x9, 0x5, 0x80, 0x2, 0x7fff, 0x3e6, 0x8, 0x7, 0x6, 0x10000, 0x0, 0xd61, 0x3, 0xfffffffffffffff8, 0x6, 0x4, 0x8, 0x8, 0x2, 0x5233, 0xffffffffffffff7f, 0x200, 0x400, 0x1, 0x1, 0x8, 0x1, 0x70e182f6, 0x0, 0xfff, 0xf0c, 0x5d88, 0x8, 0x6, 0x20, 0x7fffffff, 0x1000, 0x4, 0x4, 0x401, 0x4, 0xc548, 0x1ff, 0x6, 0x7ff, 0x6393, 0x4, 0xffffffff, 0x401, 0x4, 0x5, 0x0, 0x5, 0x1, 0x0, 0x81, 0x38ecfe26, 0x1000, 0xde, 0x4, 0x8001, 0x1, 0x3, 0xff, 0xb9, 0x3f, 0x2, 0xfff, 0x8, 0xfffffffffffffffc, 0x4, 0x100000001, 0x1, 0xea5, 0x80000001, 0x8, 0x3, 0x80000000, 0xfffffffffffffbff, 0x7, 0x6, 0x5, 0x1, 0x7, 0x937, 0x7263, 0x3ff, 0x2, 0x401], {0x77359400}}) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x3, 0x800) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 17:59:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c82bc5277dfb6e7358d2e3a66696c65303404cc181ad2e95cc8ad9680"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1604.535662][T26159] overlayfs: unrecognized mount option "metacopy=o [ 1604.535662][T26159] " or missing value 17:59:32 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=o%'}]}) 17:59:32 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$unix(0x1, 0x6, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000400)=0x8) r3 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) [ 1604.782614][T26272] overlayfs: unrecognized mount option "metacopy=o%" or missing value 17:59:32 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=o,'}]}) 17:59:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) [ 1604.984344][T26379] overlayfs: unrecognized mount option "metacopy=o" or missing value 17:59:32 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=o\\'}]}) 17:59:32 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000002c0)={0x0, 0x7, 0x8000, 0x6, [], [], [], 0xffff, 0x0, 0x1, 0x3, "f4a45ac8c69ee456741b36b7a153f392"}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1605.213271][T26391] overlayfs: unrecognized mount option "metacopy=o\," or missing value 17:59:32 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on', 0x35}]}) 17:59:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20001, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000002c0)={0x25, 0x59, &(0x7f0000000200)="1d71d18e606f5af45c0aa5ba95199d5ad253d576761a23951d3f96f43b9bb8fc06fcef1de887ba0633406212f73b456a2568ee0555f8978c9d851843f1c935fba93a579cef85a6de0abb17f819a0bc23d79b57d7ea6062cd13"}) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:32 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xcdc) [ 1605.354881][T26585] overlayfs: unrecognized mount option "metacopy=on5" or missing value 17:59:32 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on', 0x3d}]}) 17:59:32 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x10000, 0x144) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776608c93442446ce08adacf6886adebbb8ad71e3c483a25af3de25b0c47c3bc49d44777e27da464a33d89d78f53d97adc0e1d6d9a1afea46001445698ee338b6e8a7bee30fbfbe0b7259466275a9d63ad28e63b6c5a335706c37bf4a883da7306b2d44a10b2a31ec89e76da0dda193b79d1800811cc1522ccd93c546ec95784a63ee0cd0fde43b14ea8f14292c19070f91e17d7f23319968bf344378bfb4550aa9486caf408e3c358e0ee4504ae3c0ca72a9e6924df7be422cc9bea19e5f3914ce99021fb48f712a3da7ab6e0afe641d6c039ef751a90c7d6b1fa3a387eeb146c", @ANYRESHEX=r3, @ANYBLOB=',\x00']) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000007002000000000000f8000000f800000000000000f8000000d8010000d8010000d8010000d8010000d801000003000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/48], @ANYBLOB="ac1414bbe0000001808000ffffffff006e6c6d6f6e300000000000000000000076657468300000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000010000000000000000000000000000003300012000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ac141410000000000000000000000000ffffff000000000000000000ffffff004e244e234e234e24900000000000000004000000ffffffffec8500000000000000000000000000000000000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e00000000000000000c5b00000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000010000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2d0) [ 1605.483231][ T27] audit: type=1800 audit(1574186372.964:75): pid=26388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17182 res=0 17:59:33 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0x800000000024) [ 1605.599399][T26648] overlayfs: unrecognized mount option "metacopy=on=" or missing value 17:59:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000200)={0x1, 0x400}) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f0000000340)) [ 1605.657630][T26711] 9pnet: Insufficient options for proto=fd 17:59:33 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on', 0x5c}]}) [ 1605.740530][T26711] 9pnet: Insufficient options for proto=fd 17:59:33 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x8, 0x4040) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1d0, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x80, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20000000}]}, @TIPC_NLA_BEARER={0x118, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @remote, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xf9e, 0x2000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000280)=""/134, &(0x7f0000000080)=0x86) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) [ 1605.866422][T26723] overlayfs: unrecognized mount option "metacopy=on\" or missing value 17:59:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @rand_addr="e942682f9db09bacf47c88841c2c164b"}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:33 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000003106fb00f3ff0000292b0792af5df7359e63b300"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1606.096678][T26834] overlayfs: missing 'lowerdir' 17:59:33 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x2}) [ 1606.233956][ T27] audit: type=1800 audit(1574186373.724:76): pid=26717 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17191 res=0 [ 1606.299982][T26942] overlayfs: unrecognized mount option "" or missing value 17:59:33 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xd00) 17:59:33 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x5111, 0x0) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x7ff}, 0x1c) r4 = fcntl$dupfd(r2, 0x0, r2) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000200008400000007000000ac1414bb00000000"], 0x18}, 0x44) fcntl$addseals(r5, 0x409, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000000)=0x8) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080), 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x1}}, 0x1, 0xefa1, 0x602b, 0x8, 0x1}, &(0x7f0000000440)=0x98) sendmsg$inet_sctp(r6, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000480)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x8002, 0x8000, 0x40, r9}}], 0x20}, 0x44) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r11, r10) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r13, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={r13, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r13, 0x9, 0x0, 0x83d2, 0x4}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r14, 0x2}, &(0x7f0000000240)=0x8) r15 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r15, 0x2007fff) sendfile(r0, r15, 0x0, 0x800000000024) 17:59:33 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x3}) 17:59:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)) [ 1606.571004][T27051] overlayfs: unrecognized mount option "" or missing value 17:59:34 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x4}) 17:59:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x77, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e3a66696c6530f4180e1e353234a6db19b96367cb829e3d5a6207745f03cef8bee9e2c363e5085710e882832ef9aef34e2537e9577abd6da55ca43736aa4fe84a9b5951e1dea5e9d4cf92e2bdde3845a1205418921a335ca6a90e73416eb6d4d880a618bf76f58dba859351"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:34 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2cd8a0bcf71261d7da762d9a42e97766646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/54, &(0x7f0000000080)=0x36) [ 1606.785370][T27161] overlayfs: unrecognized mount option "" or missing value 17:59:34 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x5}) [ 1606.988058][T27204] 9pnet: Insufficient options for proto=fd [ 1607.034343][T27204] 9pnet: Insufficient options for proto=fd [ 1607.066015][T27316] overlayfs: unrecognized mount option "" or missing value 17:59:34 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvfrom$llc(r0, &(0x7f0000000580)=""/116, 0x74, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getsockname$netlink(r2, &(0x7f0000000200), &(0x7f0000000280)=0xc) r3 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./file1\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0xc) accept4(r2, &(0x7f00000002c0)=@l2, &(0x7f0000000340)=0x80, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e73db0b0000000000006f3d6e95236228c3e63ca851fe9ce9bb3c866510be5d07fc41808d686fd1ab656f238488b910d36d9eeb7c8e3bdc97fb7311bd9bedbfdbdaddae3d73a692029c84f917f33688", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) 17:59:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @loopback, 0x4e23, 0x2, 'lblcr\x00', 0xc, 0x0, 0x32}, {@multicast1, 0x4e23, 0x7, 0x9, 0xfffffffc, 0x1}}, 0x44) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e3a66696c6530ae824a2a6704469c1abcc3b837531e88d1d38e6f144bfa7582783bfadd2539a82d3f63135fea38923a624e2b49e93e9cb50cfe631e5f05"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:34 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x6}) [ 1607.229030][ T27] audit: type=1800 audit(1574186374.714:77): pid=27164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17218 res=0 17:59:34 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) sendfile(0xffffffffffffffff, r3, 0x0, 0x804000000024) 17:59:34 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xe00) 17:59:34 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x824000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user='access=user'}, {@debug={'debug', 0x3d, 0x6}}, {@uname={'uname', 0x3d, '9p\x00'}}, {@loose='loose'}]}}) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) [ 1607.317513][T27388] overlayfs: unrecognized mount option "" or missing value [ 1607.417841][T27387] overlayfs: failed to resolve 'file0®‚J*gFœ¼Ã¸7SˆÑÓŽoKúu‚x;úÝ%9¨-?c_ê8’': -2 17:59:34 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x7}) 17:59:35 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x2, 0x20000) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r6, r5) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={r8, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000004c0)={r8, 0x28}, 0x8) r9 = socket$inet(0x2, 0x2000080001, 0x84) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x101, 0x0) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x10010000000035) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000340)={{0x7, 0x1, 0x40, 0x0, 'syz0\x00', 0xb497}, 0x5, 0x40, 0x1, r11, 0x1, 0x0, 'syz0\x00', &(0x7f0000000300)=['%nodev*\x00'], 0x8, [], [0x72f, 0x5, 0xeaf, 0xffff]}) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r9, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r12 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r12, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="66646e6f3d0000000000000000000038bdd4f9bfa768dd80a665a20438ffcdb366cc67bd2b7ea6e23923d24da4b4232ed675965d58958664bd941341d93cf1a96e0e4f32d59c63eea63f8581b459bf8c38ba3924a8bedef86cc117c5caf0281d3f8dce8eb5feaf2b3fba570dab0a44e2acba3d35e6d59fc7c9720c5defe7a66ac3b18f3dcb436a97fba324b113fee8b6d031692c3bf0cb5d66cf8e06aa90e60c9ddb21d471357bc234c7d254d49906b6767cb4422d433b8cd3ce6de98b4e", @ANYRES64=r1, @ANYRES32=r12, @ANYRESHEX=r3, @ANYBLOB=',\x00']) 17:59:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r3 = getpid() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000001c0)={[0x6000, 0x10000, 0xd000, 0xf000], 0xffff, 0x10, 0x8}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r3) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) clone(0x41fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) ptrace$getregs(0x3, r2, 0x0, &(0x7f0000001140)=""/4096) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1607.657868][T27503] overlayfs: unrecognized mount option "" or missing value 17:59:35 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x8) 17:59:35 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x8}) [ 1608.009848][T27720] overlayfs: unrecognized mount option "" or missing value 17:59:35 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0xa}) [ 1608.150619][ T27] audit: type=1800 audit(1574186375.634:78): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17222 res=0 17:59:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0xffff, &(0x7f0000000200)=[r2, r3]}, 0x2) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000000)={0x1d, @rand_addr=0x800, 0x4e22, 0x0, 'sed\x00', 0x1, 0xffff, 0x42}, 0x2c) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:35 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000300)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0), 0x1000031b, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000008400000001006f00910af8ff050000000000000000010000000000080100000003000000", @ANYRES32=r5], 0x30}, 0x8044) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x128000030}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000400)=0x8) r7 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r0, r7, 0x0, 0x800000000024) write(0xffffffffffffffff, &(0x7f0000000040)="ee4a246de56bde23b5383cb8f946b3abb50950821c", 0x15) [ 1608.207221][T27724] overlayfs: unrecognized mount option " [ 1608.207221][T27724] " or missing value 17:59:35 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xec0) 17:59:35 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x10}) 17:59:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r3, r2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r5, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r5, 0xac21}, 0x8) r6 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x40000, 0x44) r7 = getpid() write$P9_RGETLOCK(r6, &(0x7f0000000040)={0x20, 0x37, 0x1, {0x1, 0x8, 0x7fffffff, r7, 0x2, '&['}}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r8 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) fcntl$getown(r8, 0x9) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x1, @loopback}}, {{0xa, 0x0, 0x6936, @local}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1608.463849][T27735] overlayfs: unrecognized mount option "" or missing value 17:59:36 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x48}) 17:59:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3a870000000) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100000, 0x0) write$uinput_user_dev(r3, &(0x7f0000000540)={'syz0\x00', {0x6, 0x81f9, 0x100, 0xfff7}, 0x4f, [0x5, 0x7, 0x5, 0xd22, 0x0, 0x1000, 0x0, 0x6, 0x7, 0x8, 0x3, 0x0, 0x16cc, 0x5, 0x100, 0x3, 0x2, 0x8, 0x8, 0x9, 0x0, 0x3f, 0x0, 0x4d7c, 0x4, 0xffffffff, 0x7, 0x6, 0x7, 0x3, 0x0, 0x5, 0x7, 0x1, 0x8, 0x0, 0x9, 0xfffffffd, 0x200, 0x4, 0x75b, 0x200, 0x0, 0x10000, 0x400, 0x3, 0x4, 0x2, 0x5, 0x2, 0x8, 0x7fff, 0xd65, 0x1, 0x0, 0x7, 0x80, 0x7fffffff, 0x8, 0xfff, 0x99e4, 0x0, 0x1, 0x3], [0x1000, 0xfffffffe, 0x800, 0x9, 0x20, 0x0, 0x401, 0x100, 0x4, 0x0, 0x1, 0x9, 0x80000000, 0x9, 0x4, 0x3, 0x5, 0xf41, 0xffff, 0x3, 0x6, 0x5, 0x1f, 0x128f6d42, 0x1, 0x400, 0x10000, 0x3eb, 0x5, 0x8001, 0x5, 0x1000, 0x9, 0xffffc000, 0x1, 0x7ff, 0x85, 0x7, 0x6, 0x0, 0xfffffb43, 0x6, 0x0, 0x3, 0x1b, 0x5, 0x6, 0x8001, 0x47fb, 0xb47, 0x10000, 0x2, 0x3, 0x5, 0x1, 0x6, 0x0, 0x1f, 0x9, 0x3, 0x6, 0x8, 0x80000001, 0x6], [0x0, 0x1, 0x6, 0xd3be, 0x80000001, 0x6, 0x200, 0x4, 0x132, 0xfffffff9, 0x3ff, 0x7, 0x4, 0x2, 0xffff, 0x8, 0x2, 0x9, 0x4, 0x2, 0x8, 0x10000, 0x6, 0x2, 0x24e, 0x8, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x4, 0x8001, 0x4, 0x60, 0x7, 0x1000, 0x4, 0x5, 0x3, 0x7, 0x5, 0xe7, 0x0, 0x5, 0x1, 0x4, 0x9, 0x5, 0x1f, 0x8, 0x5, 0x401, 0x7, 0xddb, 0x20, 0x0, 0xc374, 0x60fb0f69, 0x8, 0x5, 0x5, 0x0, 0x200], [0x7, 0x8, 0x5, 0xffff, 0x0, 0x4, 0x4, 0xfffffff8, 0x3, 0x800, 0xffffffe0, 0x3ff, 0x1, 0x4, 0x1, 0x7fffffff, 0xc7d, 0xa47, 0x80000000, 0xd8, 0x0, 0xffffffff, 0x5, 0x80, 0x51, 0x7fff, 0x3, 0x1f, 0x638, 0x4, 0x0, 0xfe, 0x9, 0x7fffffff, 0xd85, 0x1, 0xa0d, 0x2, 0xc5, 0x7fff, 0x1, 0x6, 0x6, 0x4, 0x7fffffff, 0x7f, 0x1000, 0x44d7, 0x4, 0x9, 0x1000, 0xffff, 0x5a, 0x2, 0x3f, 0x1, 0x7, 0xfff, 0x0, 0xe, 0x81, 0x1ff, 0xffffffe0, 0x7]}, 0x472) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f00000003c0)={0x8}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='i\t\x000\x00\x00\x00\x00\x00\x00\x00\x00\x00bK\f6']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:36 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x4c}) [ 1608.641849][T27888] overlayfs: unrecognized mount option "H" or missing value 17:59:36 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000100)={0x3ff, 0x1, 0x5, 0x400, 0x943c, 0x2, 0x4}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x6e481c2bb122448e, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x800080, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) [ 1608.793612][T27957] overlayfs: unrecognized mount option "L" or missing value 17:59:36 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x60}) [ 1608.929825][T27962] 9pnet: Insufficient options for proto=fd [ 1608.960050][T27954] overlayfs: unrecognized mount option "i " or missing value 17:59:36 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="749b1eba6348677e1e0fb28e0072616e823d66642c7066646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="ddcb"]) [ 1609.014495][T27966] overlayfs: unrecognized mount option "`" or missing value 17:59:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000240)='\x00', 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x28479000) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dspR', 0x80, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setattr(r2, &(0x7f0000000200)={0x30, 0x0, 0x1, 0x197f, 0x40, 0x1000, 0x81, 0xa80a}, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0/file0', [{0x20, 'userð1]ppp1$vmnet0vboxnet0*cgroupposix_acl_access-'}, {0x20, 'configfs\x00'}, {0x20, '/dev/dsp\x00'}, {0x20, '\x00'}, {0x20, '/dev/dsp\x00'}, {0x20, '/dev/dsp\x00'}], 0xa, "1e047cf3b501541a7f083e14a9fad48f9002013fec7e6ee0fdbc2e1f49387de94c8db4b42d1aedf3980b8062abf823b1"}, 0xa1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c917766693f65300000000000"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 17:59:36 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x68}) [ 1609.268205][T28075] overlayfs: unrecognized mount option "l‘wfi?e0" or missing value [ 1609.301630][T28079] overlayfs: unrecognized mount option "h" or missing value 17:59:37 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf00) 17:59:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x29, &(0x7f0000000080)={0x0, {{0xa, 0x4e23, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) ptrace$setopts(0x4200, r1, 0xfff, 0x10001e) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) fcntl$setstatus(r0, 0x4, 0x4000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084f9000001000000a61414bb000000"], 0x18}, 0x44) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000040)=0xe8) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000200)={0x80fd, 0x9124aedd206cd488}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@remote, 0x66, r5}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:37 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x81, 0x20000) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0xfff, 0x1, 0x51, &(0x7f0000fff000/0x1000)=nil, 0x8}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000200)=0x68) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="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"]) fchmodat(r5, &(0x7f0000000400)='./file0\x00', 0x40) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000280)=""/252) 17:59:37 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x6c}) 17:59:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0xb8e}, 0x0, 0x0, 0x3, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r3}}, 0x18) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r6 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x81, 0x400) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f00000004c0)=0x2, 0x4) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000440)=0x10000) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r7, 0x5111, 0x0) ioctl$sock_proto_private(r7, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$SG_GET_SG_TABLESIZE(r7, 0x227f, &(0x7f0000000400)) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:37 executing program 4: r0 = socket$inet6(0xa, 0xa, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800008400000007000000ac1414bb0000000032d473ce6c0000000000"], 0x1d}, 0x44) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) symlink(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./bus/../file0\x00') sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, [], 0x1d}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="e6", 0x27a}], 0x1, &(0x7f0000000100)}, 0x20000000) fadvise64(r3, 0xfffffffffffffffa, 0xf27, 0x5) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x7ff, 0x4) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0x5111, 0x0) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") accept$ax25(r5, &(0x7f00000000c0)={{0x3, @netrom}, [@bcast, @null, @default, @bcast, @null, @remote, @default]}, &(0x7f00000002c0)=0x48) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x800000000024) [ 1609.818713][T28196] overlayfs: unrecognized mount option "l" or missing value 17:59:37 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x74}) 17:59:37 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x208000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='ran=\x00', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) [ 1610.070335][T28313] overlayfs: unrecognized mount option "t" or missing value 17:59:37 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}], [], 0x7a}) 17:59:37 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'\x0e\xdb\x95\x84\xc9', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@fowner_eq={'f\xe1\xc3\x00er', 0x3d, r4}}]}}) 17:59:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/16) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x28a820, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$TCSBRK(r1, 0x5409, 0x7e) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x490402, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001c00)={0x1, [0x3]}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x57, "9f4f8d3cdcc85223d61e84239b70454e6a7b71dd48f7e8640c9d64ab3d41e31d9174ddef429f8011371dd0ca30076f623e2907cde00448f93212f67140ab240fae67d01d6dec1da205e418376a55dafb5f8430ee8b8702"}, &(0x7f0000000040)=0x5f) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e20, @multicast1}}, 0x6, 0xb3, 0x4, 0x2, 0x40}, &(0x7f00000004c0)=0x98) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r6, 0x5111, 0x0) ioctl$sock_proto_private(r6, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") connect$ax25(r6, &(0x7f0000000200)={{0x3, @bcast, 0x4}, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/274]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1610.266086][T28421] overlayfs: unrecognized mount option "z" or missing value 17:59:37 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000000)) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1610.387179][T28430] 9pnet: Insufficient options for proto=fd [ 1610.467116][T28432] 9pnet: Insufficient options for proto=fd [ 1610.550549][T28462] overlayfs: missing 'lowerdir' [ 1610.574058][ T27] audit: type=1800 audit(1574186378.064:79): pid=28422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17215 res=0 17:59:38 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3000) 17:59:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x903, 0x4001}, @window={0x3, 0x8, 0xf001}, @window={0x3, 0xa, 0xeaf}], 0x187) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000300)={{0x0, @addr=0xb4c}, 0x8, 0x6}) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8], 0x1, 0x85, 0xffffffff, 0x5, 0x66d578e5, 0x3f, {0x8, 0x7ff, 0xf7, 0x4, 0x8e, 0x1ff, 0x8c, 0x3, 0x3, 0x7f, 0x8001, 0x9, 0x4, 0x1000, "f983ef1cfb91f8721373cd1a6adc98aa8df8a2818aa6ecc561d883561d87e235"}}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r4 = creat(&(0x7f0000000040)='./file0\x00', 0x40) setsockopt$inet6_group_source_req(r4, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:38 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1e1200, 0x0) symlinkat(&(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file1\x00') r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x34f8d16ddc9881d6, 0x84, 0x7, @remote}], 0x18, 0xc044020}, 0x44) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r3 = fcntl$dupfd(0xffffffffffffffff, 0xbf6f84cdb927d9e2, r0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:59:38 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x8000000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='\xafdev/sequencer2\x00', 0x301800, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000200)={&(0x7f0000000000)=[0x4, 0x75], 0x2, 0x8, 0x7, 0x8c, 0x8, 0x9f, {0x4, 0x1, 0x9, 0x0, 0x8, 0x1f, 0x9, 0x1, 0x9, 0x4, 0x3, 0x0, 0xad0, 0xffffff81, "54a8691ead9a58a30fa086f50c5a8332fda2d32c01ba61ab2f5104b7dbe87988"}}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x5111, 0x0) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x400000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x3c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204c044}, 0x4000) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x4, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:38 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr="f4ffff041499f077001000", 0x4}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x434) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) prctl$PR_GET_TIMERSLACK(0x1e) [ 1610.704556][T28542] 9pnet: Insufficient options for proto=fd 17:59:38 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="1f00"]) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) prctl$PR_SET_DUMPABLE(0x4, 0x0) r5 = dup2(r3, r4) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x10, r5, 0x4) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x600000, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r8, r7) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r10, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={r10, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r12, r11) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r14, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={r14, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) r15 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r16 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r16, r15) r17 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r18, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f00000000c0)={r18, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) r19 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r20 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r20, r19) r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r21, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r22, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r20, 0x84, 0x6f, &(0x7f00000000c0)={r22, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000001980)=[{&(0x7f00000001c0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, &(0x7f0000001280)=[@init={0x18, 0x84, 0x0, {0x1, 0x7fff, 0x7fff, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x0, 0x2, 0xde000000, 0x57d0, 0xda73, 0xfffffff7, 0x5, r10}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x1, 0x3, 0xfffffff7, r14}}], 0x68, 0x2000000}, {&(0x7f0000001300)=@in6={0xa, 0x4e20, 0xca7, @local, 0x4}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001340)="a334fb4124fff41633e64e", 0xb}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="7f54f9a6c033babf7c2681f409180d8ae8689fd8d2f959b614b5133c6b4594d4763d00e4f5dbeafb21ef3d612c327fb3a528c025b143677d3c375ba75137b16bc119e5c664ee7891153ea44aef39cf6dbf718f897b1f3d2cb5613b29aa046146de278b0deace3ea97b8eef08ea7cd3d02bcd23f190ddfd1ba7205f5e06310ca1635adeb6c587fea77103e565296a99efcb6afc2647fac2e2ddc05ff44e91e6edfbabdeb62e896dd4f4f46b4d", 0xac}, {&(0x7f0000001480)="8d3b44009ab7fa6a6571fd5540c9791c0a5a83a2917bd4303037b4c88a506c895b3ab309f21499fe6fa32c4e338dec3e0ee3a164cbc744fb29efccde7b8ff6251670", 0x42}, {&(0x7f0000001500)="d914f1a984a00ad113bfe35ce3b9e116cbdc7a9730c065", 0x17}, {&(0x7f0000001540)="967c0c58234501c192e046bb60e0ec13a69f395ae39ccb866842bfce914d7a0e3788dfa55827bf7da12d63a970d326d0c06cf009669ea491c1f57bc68f83f0efe86161172476a32eb4d1805f67", 0x4d}, {&(0x7f00000015c0)="0cecf814dd31d2252ad22ea06f1655be73a949d343290d99f5959f09682dc63a5061faf0a23bb35dfad07bb78aaaec4a670ecb", 0x33}], 0x7, &(0x7f0000001680), 0x0, 0x804}, {&(0x7f00000016c0)=@in={0x2, 0x8000, @remote}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001700)="06e9e6c35ce9819e474d9dba95860b56101000b37bb850de8440d2afa6408e1a20181b3f8b8fc715842c821a6c7f4d28520710ef6b14bda8691f6322e69edda6b0ed18fa9345467c961b2964f8243b80c5404554f3a90542e340e27551791f989aaf0c2a12b9e40177b05c581e49f3270c9c0e5196486eff4662143446641fea8c5e13a205249bb4b27f537569d49842ee5c48f43274f567322e6693bac5a7431d0823d4269c68b55abee4a95dee31f8015371095fbdf45498edaf2a2cdc3f8841dcdb5be993e9e649b83804f7951684dd6a955f45eef58aba16537f1adb3607d75fdce29db62928b01bb5b6262cda4e52da9d420d9b5f8fe1ac", 0xfa}, {&(0x7f0000001800)="27a9a7ab1b44a7ca5d7ea1fc9eef45edb88879ea0ed362972d154fc238dd7bb7b12d2bb66e1731c01c1b", 0x2a}, {&(0x7f0000001840)="065aae4db19100854286d97a5a3111ab737cdc4f5c0d874655a2d5590f68871f4dec8fbb93d112fde29d3d20808b7c30d223ce5e9538d60609bf", 0x3a}], 0x3, &(0x7f00000018c0)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x8, 0x4, 0x3ff, r18}}, @sndrcv={0x30, 0x84, 0x1, {0x1000, 0x1ff, 0x0, 0x400, 0x2d8d1df0, 0x4, 0x1ff, 0x1cc000}}, @sndinfo={0x20, 0x84, 0x2, {0xffff, 0x0, 0x1, 0x9, r22}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x88, 0x20000000}], 0x3, 0x40000000) [ 1610.938268][T28637] overlayfs: missing 'lowerdir' 17:59:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x2, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_open_pts(r2, 0x0) fdatasync(r3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1610.990951][T28637] overlayfs: missing 'lowerdir' 17:59:38 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1db160a6b1cc9ff105986d6574"]) [ 1611.019133][T28724] 9pnet: Insufficient options for proto=fd 17:59:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dst\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x2, "7f31"}, 0x3) socketpair(0x2, 0xb, 0x80, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000001540)=0x4) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1611.151868][T28724] 9pnet: Insufficient options for proto=fd [ 1611.197080][T28797] overlayfs: unrecognized mount option "±`¦±ÌŸñ˜met" or missing value 17:59:38 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) fanotify_init(0x12, 0x400) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000200)={0x10000, 0x4fb, 0x52, 0x4}) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x1000000, &(0x7f0000000000)=ANY=[]) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1800ac0d14bb001e00e4"], 0x18}, 0x44) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x24) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x7ff, 0x4, 0x0, 0xfffffffd, 0x8001, 0x6, 0x7f, 0x8, r3}, 0x20) 17:59:38 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x1, 0x9, 0x7, 0x7, 0x7a5, 0x38a7, 0x0, 0x7, 0x9e7}}, 0x43) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1000, 0x10000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="74720100000066802c7266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) [ 1611.472124][T28974] overlayfs: missing 'lowerdir' [ 1611.480756][ T27] audit: type=1800 audit(1574186378.964:80): pid=28808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17345 res=0 [ 1611.521369][T28974] overlayfs: unrecognized mount option "" or missing value 17:59:39 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3f00) 17:59:39 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@known='system.advise\x00') r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:59:39 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c13d6b20", @ANYRES16=r1, @ANYBLOB="200029bd7000ffdbdf250100000008000400dc0f00000800040094760000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000400)=0x8) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r2, r4, 0x0, 0x800000000024) 17:59:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000540)={@llc={0x1a, 0x335, 0x0, 0x9, 0x81, 0xf8, @broadcast}, {&(0x7f00000003c0)=""/138, 0x8a}, &(0x7f0000000000), 0x20}, 0xa0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:39 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:39 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000180)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd741342d1ec6ef5a099dbc71b049dc33742233b7dacb559bcc5bcdb3ddab9d68876e0d7b00000000966dfefe21d29c88e52906dffcf9727f5b6dd5c650") fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='metacopy=on', &(0x7f0000000080)="b2c29def9fe3ed4f29b4765e47a0890a7eecf5d7db9f635c6054e2f277e9dc815bc7b254f7a4eb106cce8b01882e2da0c4b53ba2ee9345aa0955aa2cee2ee3cb083400a7ebfcb7e9cbf86d77e2941e35c0d411e29a0c5b27efc2b63c294b38d01e55d40871a3a8554be6c564ccb81213cbcdb41893ddf217d7fbbef04031e06d2a26b6af4d62540d971945c497a6141cc5f63d3befca105c2580d0833a10d27274dd879dcc6336e01553fdb2afe8d9f68738dc5e3fb4c48eb9098665d49104e2a7fbebc0f005c40fb6a61680723a", 0xce) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) syz_mount_image$bfs(&(0x7f0000000240)='bfs\x00', &(0x7f0000000280)='./file0\x00', 0x9, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xfa, 0x1}], 0x3b290b2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffffffff, 0x80) [ 1611.898301][T29000] overlayfs: missing 'lowerdir' 17:59:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) ptrace$peekuser(0x3, r1, 0x1) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000)={0x7f, 0xff, [0x1, 0xaf, 0x1, 0x8000, 0x7], 0x9}) 17:59:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) epoll_create(0xfffff024) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) execve(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000004c0)=[&(0x7f0000000200)='+}(/\x00', &(0x7f0000000240)='configfs\x00', &(0x7f00000002c0)='wlan0posix_acl_accessposix_acl_access)em0\x00', &(0x7f00000003c0)='overlay\x00', &(0x7f0000000400)='!&\xa2wlan0J{+em0(.\x00', &(0x7f0000000440)='configfs\x00', &(0x7f0000000480)='cpuset\x00'], &(0x7f0000000700)=[&(0x7f0000000540)='#posix_acl_access-\x00', &(0x7f0000000580)='.ppp1:md5sumem0}\'\x00', &(0x7f00000005c0)='configfs\x00', &(0x7f0000000600)='overlay\x00', &(0x7f0000000640)='/dev/dsp\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='configfs\x00']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm_plock\x00', 0x102, 0x0) 17:59:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x8, 0x3}, {0x4, 0x3, 0x2e, 0xe96}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1612.064045][T29109] overlayfs: missing 'lowerdir' [ 1612.138491][T29114] overlayfs: missing 'lowerdir' 17:59:39 executing program 2: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x4b, 0xfffff626}, 0xc) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 17:59:39 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000400)=0x8) r1 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r1, 0x2007fff) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x202000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x6) sendfile(r0, r1, 0x0, 0x800000000024) [ 1612.388362][ T27] audit: type=1800 audit(1574186379.874:81): pid=29108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17377 res=0 [ 1612.408971][T29221] overlayfs: missing 'lowerdir' [ 1612.465714][T29221] overlayfs: missing 'lowerdir' 17:59:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f77650000008000000000b6000000"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:40 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4000) 17:59:40 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@int=0x8000, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:59:40 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0x4, 0x1, &(0x7f0000000040)="fed4316579147f7c2e06fd42dfb59fd2c152f9db8ac0da1081d6fb6cf2d20581c4bf6679a126b866", {0xee, 0x20, 0xb5315258, 0x8, 0x0, 0x7, 0x8, 0x1ff}}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1612.700154][T29338] overlayfs: unrecognized mount option "lowe" or missing value [ 1612.706511][T29340] Unknown ioctl -2144315894 [ 1612.742132][T29340] overlayfs: missing 'lowerdir' [ 1612.760447][T29394] Unknown ioctl -2144315894 17:59:40 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lseek(r0, 0xaa4, 0x3) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x2, 0x70, 0x1, 0x67, 0x3, 0x40, 0x0, 0x8001, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x8, @perf_config_ext={0x1000, 0x7}, 0xe182, 0x8, 0x2, 0x7, 0x3, 0x2076, 0x6}) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) syz_open_pts(r4, 0x100) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) fcntl$dupfd(r5, 0x0, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) fcntl$dupfd(r6, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000780)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000008c0)={@ipv4={[], [], @empty}, r7}, 0x14) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1612.943647][T29448] overlayfs: missing 'lowerdir' 17:59:40 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000088400000007000000ac1414bb000000009fc2f0714cd3257c1063da741f145d49688f6d59c65658e5e0c6fe9d6429dc2a181281b733b7cc2fc9759fd15dd0461b7da8e19c316cb55242331136d7cd1c35131462638ecd7512980468886695"], 0x18}, 0x44) poll(&(0x7f0000000040)=[{r0, 0x1000}, {r1, 0x6700}, {0xffffffffffffffff, 0x81}], 0x3, 0x80) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6d65746163835baaf36f6e2c00"]) 17:59:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x20, 0x428200) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000200)={0x0, 0x3}) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_thread_area(&(0x7f00000002c0)={0x400, 0x20001000, 0x400, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockname$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @remote}, &(0x7f0000000400)=0x10) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000440)={0x5, 0x3, 0x1000}, 0x4) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x15, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)) [ 1613.281175][T29657] overlayfs: unrecognized mount option "metacƒ[ªóon" or missing value [ 1613.358776][T29658] overlayfs: unrecognized mount option "metacƒ[ªóon" or missing value 17:59:40 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000001c0)={{0x9}, 0x9, 0x3, 0xd1, 0x6, &(0x7f00000000c0)="530d594733c270bcb663ae6f6e088682f776e37a108d2a554c96906e06f374256bdcc7cae51710ed87da783f35ebcb3890b36dbcddab3db62161b666502f0a218e62e7333cebe5df253fbc5fff26f235bb16fea86883ab02f1c82d2c90f00ed29854b1c6bc9f158a083d325dd0b4cd5b2d252b5ba33f76eeec171237f66ab45ce0854ca38a4a895655055d828dd9153c35982e06a30dab1240c7cbc57a42c05acd45f1ab088c0305af99de88c3d2e4a70637d60e3533b62a4532cc1aacc844330056257f5d779441df4f77bd698fc5c9bc"}) bind(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x80) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d65746f6e2c00000000125ae30f000300"]) 17:59:41 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x4, 0x0, 0xa, &(0x7f0000ff9000/0x4000)=nil, 0xc}) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfe}\x81', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 17:59:41 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) read(r2, &(0x7f0000000040)=""/52, 0x34) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, 0x8) r3 = open(&(0x7f0000000340)='./bus\x00', 0x604c2, 0x2e) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) 17:59:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockopt$inet6_dccp_buf(r1, 0x21, 0xcf, &(0x7f00000002c0)=""/97, &(0x7f0000000340)=0x61) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000380)='ns/pid\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x12000) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000001c0)=0xfffffeff) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x18}, 0x44) fcntl$setstatus(r4, 0x4, 0xb489bb03a693d39b) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000200)={0xcc, 0x3, 0x0, 0x9, 0x80000000, 0xaa, 0x6, 0x20, 0x7, 0xf, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000440)=""/4096, 0x5134, 0x5, 0x7}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:41 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x5865) [ 1613.649020][T29680] overlayfs: unrecognized mount option "meton" or missing value [ 1613.660972][T29699] overlayfs: unrecognized mount option "meton" or missing value 17:59:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x52, 0xc6802) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) msgget(0x2, 0x420) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1613.717798][T29700] 9pnet: Insufficient options for proto=fd 17:59:41 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000840000002a8cec383a5a0c8390bbd48743074a5800ac1414bb00000000"], 0x18}, 0x44) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x40) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:41 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r5) sendmsg$netlink(r3, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}], 0x20}, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='fuse\x00', 0x1000004, &(0x7f00000001c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}], [{@appraise='appraise'}]}}) r6 = fcntl$dupfd(r1, 0x0, r1) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x43f8edee1c9ab40f, 0x0) recvfrom$unix(r7, &(0x7f0000000480)=""/112, 0x70, 0x0, 0x0, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="531bc82b0f9a4361f1bc25ddc88965132a09afb5252ddbe2c42bb5254778cadfce27e407f0fa52002ee70f3ee4281ea7dc8e596c58dad90a1daa15ca752d5a1631226c705e3abe2cf1e21ae80513a6bccbcdca7344ded1e2277b81c8f32439bb2b7efe253370a765d3a360bf6e00000000a854a19d794722b4e3ff5b86c416a66764090bfd85796b53233f2a25235c1a4a40b0b8f1eb5f877492f422fe189b390b70de96ddb7aec35ae15d2e8a98bf42117600"/190]) [ 1613.936031][T29867] overlayfs: missing 'lowerdir' [ 1613.976826][T29891] overlayfs: missing 'lowerdir' 17:59:41 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '!locgroup/vmnet1*mime_type\x00'}) [ 1614.015966][T29892] fuse: blksize only supported for fuseblk [ 1614.044586][T29892] 9pnet: Insufficient options for proto=fd [ 1614.095627][T29892] fuse: blksize only supported for fuseblk [ 1614.116887][T29957] overlayfs: missing 'lowerdir' [ 1614.129024][T29972] 9pnet: Insufficient options for proto=fd 17:59:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000340)) [ 1614.151854][T29957] overlayfs: missing 'lowerdir' 17:59:41 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r6, r5) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={r8, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r8, 0x10000}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776664cf6f3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) 17:59:41 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x83, 0x83, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x96}}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @fwd={0x7}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xb, 0x3}, {0xd}, {0x7, 0x2}, {0xa, 0x1}]}, @datasec={0xa, 0x0, 0x0, 0xf, 0x3, [], "e163e9"}]}}, &(0x7f00000000c0)=""/9, 0x9e, 0x9, 0x1}, 0x20) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) 17:59:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xd702) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1614.343734][T30007] overlayfs: missing 'lowerdir' [ 1614.359083][T30008] 9pnet: Insufficient options for proto=fd [ 1614.370329][T30009] overlayfs: missing 'lowerdir' 17:59:41 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1614.570945][T30084] 9pnet: Insufficient options for proto=fd 17:59:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/n%t/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:42 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x642, 0x200) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/143, 0x8f, 0x2, 0x401, 0x5, 0xfffffff7, 0x8}, 0x120) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d657433d145cf7c000000dfff521c1e0d9d95c81799f9d3d8bbd8a6dad7c7e99e4492da1e858444018a68178fb84b240ff2f7a06322d05f81e9ba8fb5cdbce3efc04d5d4209b7e5155bd912933ca2d5bced8a0739123424c1a7a39cd073d07eef5faef21ebcbe2bbb22323111d19be4cd586bec2d2656f649adbecdf7bce4506a3cd4318aeb848f6cdf45bf76af7ed99f43ba5950e64b4420bff21dc178cda1f520e6fc7be971857419f880dde36de36560e3c40486b775d2"]) 17:59:42 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6000) 17:59:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0xfffffffffffffffc) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:42 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733de6642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d6c8b04027db167c80a5a840ce09b924853d2113972424fc08032d99e2d18691526fd75b4d4042d00e94f14eadac2f8d80766a9e083c866e46ff35df961929f589f4ee933af9819319c2b18c1d3db1631e72a624943ed100a3be498ffe9bddb", @ANYRESHEX=r3, @ANYBLOB="5a1ad2d69b1da0d49c0c750d372500a27ed23a181d2c2ccc923370a45bd53df4819d15c25fbcffe4b99ef86ec7fcd5ac6fde4b48dc843611a0e4eac2c4352878b10a26e573c96beb8cbd521893c0a76dc238e5922ffd8f0cdaad9815b25b400c48b13bcdbdd1efc6d54fe917545e4fa304e6194bee7bd229afe7160a29a6e968bf8d4b368b57c9c7940eaf86f7f3a4c54c505c1da686fecd91ac27c169b7a349855a4ad1c21db98fdcd5117ceec5e5a362c8ee6f7bff101615698de584ed72a1888edda0df7d4acd0069b6a9d1b9832278bdb395da98b7"]) 17:59:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000014000100000000000000ad6d662fa1a5", @ANYRES32=r6, @ANYBLOB="08000200e000000114000600ffffff7f0400"/28], 0x34}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r7, 0x5111, 0x0) ioctl$sock_proto_private(r7, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockname$packet(r7, &(0x7f0000006a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006a80)=0x14) getsockname$packet(r2, &(0x7f0000006b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006bc0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r13}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r13}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4}}]}, 0x34}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000070c0)={@local, 0x0}, &(0x7f0000007100)=0x14) r15 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r15, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r15, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000007b00)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000007f00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xeeead7dac430eb6}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007b40)={0x36c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xc8, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x665c, 0x3f, 0x9, 0x5}, {0x7, 0x40, 0x2, 0x8001}]}}}]}}, {{0x8}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x236}}, {0x8, 0x6, r16}}}]}}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4084}, 0x497faeb698f82668) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x60051, r2, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1615.318366][T30235] overlayfs: unrecognized mount option "met3ÑEÏ|" or missing value [ 1615.335192][T30236] 9pnet: Could not find request transport: æd 17:59:42 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffffd, 0x40080) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x204000) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x590, 0x0, 0x108, 0x3a8, 0x108, 0x3a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9, 0xbf}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="c08519920474c804c1120edb96117690", [0xff, 0x67f54991abad0a2, 0xffffff00, 0xffffffff], [0x8000007f, 0xffffffff], 'team_slave_1\x00', 'veth0_to_bridge\x00', {0x7f}, {}, 0x2e, 0xb6, 0x1, 0x4c}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@remote, @port=0x4e20, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1, {0x80000001, 0x2}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x1, 0x9}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@loopback, @ipv4=@remote, @gre_key=0xd72, @port=0x4e22}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x6, 0x2, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x7, 0x5}, {0x3, 0x40, 0x80}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1615.377852][T30279] 9pnet: Could not find request transport: æd 17:59:42 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0041feb6dd027d287edceb813a8a24eed99dedac69b7ef7eb5d73ef10ee83912ac63d630c54dc4b3a9e6be456ddee3def020cca50c3fd8499f015865cd5ab1dd018f275334dee185f842e87fc0defa855f4aa46c8578486c7fd759bbc1b6c79d24e598ad46a1c5f55e6298a773394774f319124bd02425eada06044b55bcda6210974f8e7d4fa273851f129a8048c50d6f13b8f8fcb3251756d546cd59b788fd0662"]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={r6}) 17:59:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x1000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r3, 0x0, 0x1, 0x4}}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000480)={'syz_tun\x00', @link_local}) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r3}}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2c6c6f776532646966696c65304d3eb475f5b946c4b6890f571589b0d0d4341ce512643d45a12100e7fa32bd7a7fbc1b4637321aac38e0e49665ea1b"]) sendto$inet6(r1, &(0x7f00000003c0)="658b6740a87421f06b34c5c5d48711aaa8ade0e3b595b999bc347ef12772a2734d8b4a2031803e877f4083487b979a6e178b2132f05f8152954f897fd93d15f8385fa298ca6c7f1329317d658ea0926332fd4b78416bdde070580a5ab61e4f247a7de2a5cff01da9a04c7a6a3379ad2cdab859e9eb254abfb98b3731bd63e8a7dc26d2", 0x83, 0x59c50a0c3b078533, &(0x7f00000002c0)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x21}, 0xfffffff7}, 0x1c) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1615.609624][T30454] overlayfs: missing 'lowerdir' [ 1615.637376][T30457] overlayfs: missing 'lowerdir' 17:59:43 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x80000, 0x80) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r2, r1) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180007000000020000104c0000"], 0x18}, 0x44) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)={0x3, [0x0, 0x0]}, &(0x7f0000000140)=0xfffffffffffffdb6) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x20, 0x9, 0x2}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x60281, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x1000, @local, 0x7ff}, {0xa, 0x4e23, 0x10000, @mcast2, 0x7fff}, 0x4, [0x7b859aca, 0x1ff, 0x3, 0x7, 0x9, 0x4, 0x400, 0x20]}, 0x5c) [ 1615.760699][T30460] overlayfs: unrecognized mount option "lowe2difile0M>´uõ¹FĶ‰W‰°ÐÔ4åd=E¡!" or missing value [ 1615.861418][T30517] overlayfs: missing 'lowerdir' 17:59:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, 0x0, &(0x7f0000000000)=0x1a7) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1615.899615][T30464] overlayfs: missing 'lowerdir' 17:59:43 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x94, 0x0, &(0x7f0000000240)=[@clear_death, @increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/94, 0x5e, 0x0, 0x2a}, @fda={0x66646185, 0x9, 0x1, 0x3b}, @fda={0x66646185, 0x7, 0x0, 0x39}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}}, @request_death={0x400c630e, 0x2}, @increfs={0x40046304, 0x1}], 0x5a, 0x0, &(0x7f0000000300)="2c56fdd42c8bb529ab8c4b6f5be0b3f15ec02d3cf993014474f13a56367ebf3aa2fc5e1a239efffddbf9e1f4808183e5a9eee250817c0086eba62697396ff4d4e4189b4562322af9fac50d8583ca142aac04553e8772e753e795"}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x2, @loopback, 0x4e23, 0x4, 'sed\x00', 0x20, 0x100, 0x64}, 0x2c) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='metacbpy=on,\x00']) 17:59:43 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @default, @netrom={'nr', 0x0}, 0x6, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x8000) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x20) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x800000000024) 17:59:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = semget$private(0x0, 0x3, 0x4) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0xb59dcdbbfe933713) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r1, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000040)="b82e42804bf58c82bc7b2c6a6b3a5870bb62eb822db592c2e2256d6de53d7d9dc8f3525639746914f3ebe494a6e4de56a627c8cede8c0ef544", 0x39}, {&(0x7f0000000380)="dcfd4bc07a2648b79130799b5471db3b564632f28a036ea848980ca1cd3f5c5139f24270b68f45352d2c25da1abf76fdc203", 0x32}, {&(0x7f0000000440)="04c0975002d4fe1efdd54c02b8b0e495095c8943c2c474fcfd3c31d5a225731162c7d8d150caa54d34e081db27f38641c504fe05506b748b1b7e0fa580ad610502f4494d7e5e05ff621f8da02683c02cd5fa940d82fe9c9ac1f0fc5d4cef95870980fc8e7f032ce9280bb79c715cb025668ad027db11f0229e70cb29e18930889d1ede394554ad8b2f41c874668d64096a8f54933427809a88775f1e1f3e866bd86492ccd6711bab6d1b7d4a266d15570abe377051ed6776eed0da8ea5f34f17fd9701353c467566665fecfd311737ec43d7e08fd39bdc913efa22de697545", 0xdf}, {&(0x7f0000000540)="ea1edc0901d4b9a2335ade2e8de2214be8dca9364a9a821364904bbde50ead0d984298b198976598b938be87a1b46b4e844d0ee9121f3fc5e4a68045f14facafbc4d2e46c11ac3268e8ae2618d3f1dbf0662a695065b921951c8b1dc528f54288b2b9a62a68388c5dda3cf3270583a88dd58b66eda142f8bfaffa5b1e473d74d51a9980cd6c24b9f7f1f43d0042461c58e4ad1b2685b76c80c", 0x99}, {&(0x7f00000003c0)="2309bf97bc1165c67c5403f9396e91b9", 0x10}], 0x5) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000001c0)=""/130) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x6, 0x2433, 0x7fff, 0x8}, 0x8) 17:59:43 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6558) 17:59:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0xffffffffffffff7a) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f00000003c0)={0x1ff, 0x0, [], {0x0, @bt={0x5, 0x8, 0xdc83e041f5a41b99, 0x1, 0x2, 0x80000001, 0x0, 0x6, 0x2, 0x9, 0xffff338b, 0x0, 0x1, 0x5, 0x24, 0x39}}}) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:43 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000160a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/53, &(0x7f0000000040)=0x35) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) recvfrom$packet(r2, &(0x7f0000000280)=""/45, 0x2d, 0x40000000, &(0x7f0000000340)={0x11, 0x9, r3, 0x1, 0x3f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0)=0x1, 0x4) [ 1616.377100][T30687] IPVS: length: 53 != 216 [ 1616.415329][T30687] overlayfs: missing 'lowerdir' [ 1616.436986][T30759] QAT: Invalid ioctl 17:59:43 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x10c2c0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) chdir(&(0x7f0000000100)='./file1\x00') ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") bind$ax25(r4, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r5 = dup3(r1, 0xffffffffffffffff, 0x80000) utimensat(r5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{0x0, 0x7530}}, 0x100) [ 1616.503276][T30692] IPVS: length: 53 != 216 17:59:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x140000, @rand_addr="0000008000"}, 0xaec4f33cc956c666) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1616.547355][T30687] overlayfs: missing 'lowerdir' [ 1616.566657][T30806] 9pnet: Insufficient options for proto=fd 17:59:44 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@initdev, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0)='overlay\x00', 0x80000, &(0x7f0000000140)={[{@metacopy_on='metacopy=on'}], [{@fowner_lt={'fowner<', r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}]}) [ 1616.625158][T30806] 9pnet: Insufficient options for proto=fd 17:59:44 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x28840, 0x4) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xa) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) 17:59:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x13645290212ed785, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x2) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdi:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1616.775478][T30759] QAT: Invalid ioctl 17:59:44 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") accept4$alg(r0, 0x0, 0x0, 0x140000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") accept$alg(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) pause() bind(r2, 0x0, 0xc452) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x1360000, 0x9, 0x1ff, [], &(0x7f0000000140)={0x990903, 0x400, [], @p_u16=&(0x7f0000000000)=0x82b}}) 17:59:44 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x240d00) write$rfkill(r0, &(0x7f0000000080)={0x68b61f01, 0x3, 0x2, 0x1}, 0x8) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r8) sendmsg$netlink(r5, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}], 0x20}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any='access=any'}, {@version_L='version=9p2000.L'}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@access_uid={'access', 0x3d, r7}}]}}) [ 1617.018032][T31028] overlayfs: unrecognized mount option "lowerdi:file0" or missing value [ 1617.088541][ T27] audit: type=1800 audit(1574186384.574:82): pid=30759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17633 res=0 17:59:44 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x2000008) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x20102007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpid() ptrace$setopts(0x4206, r0, 0x2, 0x22) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0xfffffc01, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r1, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x8000, 0x0, @loopback, 0x3}, 0xfffffffffffffc91) 17:59:44 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x8100) 17:59:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c6c6f776572648b6703040de308008c47ff201aa89db169723d2e3a66696c6530"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1617.206573][T31140] overlayfs: missing 'lowerdir' 17:59:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getpeername$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.*file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1c, &(0x7f0000000280)=0xffffffff, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() clock_gettime(0x1, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xd}, 0x6}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x5b, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) fcntl$setstatus(r0, 0x4, 0x47400) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:45 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000840000000700dfffac8063a5f57ef3ea4e1414bb00000000"], 0x18}, 0x44) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000001}) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r0, 0x202017fff) sendfile(r0, r4, 0x0, 0x800000000024) 17:59:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") sendto$inet6(r1, &(0x7f0000000000)="c3d52b1afa8d7e1e", 0x8, 0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1617.950313][T31561] overlayfs: missing 'lowerdir' 17:59:45 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000580), 0x0, r1) r2 = add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="1efa9654a74e754545dfc5d75b084a2d8831e24df65ab340423cba2d5ed8af1374c22231b2734f25001efa2f6f41e8", 0x2f, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000200)={r2, 0x83, 0x19}, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d6f61657020686173683d736861312d6e69000000000000000000000000000000000000010000000000000000000000598a74e5a469a6afffecc90400"/78], &(0x7f0000000300)="d25fbade1c5ea70c5b28df1ee5f01eda52f3cc2ac9283235fccc88f18ef2cf31506e3ac9382ab5d3c06dc12e43a13e57c486a994d6b797cdaa8ec05323066a92ed9c6512fcf25f932f0d967ef162c193b5fc3899275da6d7c3355e4a8ee1af9fa318cc7e7cd3d19ca2232036b8e8ea45653dde65833e409777d02803e8fa023ee9c2f7", &(0x7f00000003c0)=""/25) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r4, 0x3) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='veth0_to_bridge\x00', 0x10) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "b4b92fdad4e7a70c", "7d73fe916ce129400c232df47eaf629dc6601d4cbc857f2637133c7efccc01ff", "5d304bea", "c91ee3d9ae2b86dc"}, 0x38) 17:59:45 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc00e) 17:59:45 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6dde9a4705000090b5dd52bca435160000dd"]) 17:59:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="77d0f7c0352c6c6f7765726469723d2e3a66696c6530"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)) [ 1618.309308][T31672] overlayfs: unrecognized mount option "mÞšG" or missing value 17:59:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x5111, 0x0) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000000c0)={r4, &(0x7f0000000080)=""/14}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r5 = open(&(0x7f0000000340)='./bus\x00', 0x711142, 0x104) ftruncate(r5, 0x2007fff) sendfile(r0, r5, 0x0, 0x800000000024) 17:59:46 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x610582, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x70, @empty, 0x1f}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0xc4) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x4) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000400, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYBLOB="102f9b010fc2d0b1968b69d190791f7d722ba571c38cc9456637688776cab3e94fd78771e9890ce0bcf84a4f2dd8a841cdc38ede3f431cfa53f55eb7d4e0aba71a1111f93d2e22cb7e0b0c57d4c0f737e1a789fa6e4920a588093257ea258c77ed2c4a26c7f7b08be1e9c92e1dbfb01f3de8226658dd126f9c4ddcb0f09425630c27a4", @ANYRESHEX, @ANYPTR64, @ANYBLOB="27599cc7d28ff4164828bfb7f176a97ec82082f4da2792718b17743fc646c98705644047df6a9580a3ffdc58f399fee125f677faac"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000100)={0x6, 0x3, 0x4, 0x8, 0x8}) [ 1618.635881][T31683] overlayfs: unrecognized mount option "?€=¼VseÖn¿™@°†Ó‹¨”±á ú›Qvyixz2U¬Ú—6H˜þR.øq$ú®Ê?–pOÔŒ»¼±º•Æ`™§Ãýº°JŠÄ4—µÝ6ˆI4Æ™Éͪ5£IC" or missing value 17:59:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/dsp\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x76, 0xffc0}, &(0x7f00000009c0)=0xc) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1618.696356][T31683] overlayfs: unrecognized mount option "?€=¼VseÖn¿™@°†Ó‹¨”±á ú›Qvyixz2U¬Ú—6H˜þR.øq$ú®Ê?–pOÔŒ»¼±º•Æ`™§Ãýº°JŠÄ4—µÝ6ˆI4Æ™Éͪ5£IC" or missing value 17:59:46 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @bcast, @bcast, @bcast, @rose, @netrom, @bcast]}, &(0x7f00000002c0)=0x48) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c6c6469723d2e3a6589630390937dbd90d42b285e0bc9be7a175add96dd3f9dcdd24f8496c9050c4aaaba64938f618835802f5dae0902c5457582b028473de82a32cfa90c7b0d572bcc1fb14fce1a5b3715cb21b2e6b15c8d641f18bab5726544b105f8ddf03100b16a992cd41209735a7b7f5ad1072107bfdb"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:46 executing program 0: open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x8041, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x2000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd~o=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="bd4345c1b3f574656eacb42de4b00cbca3212ee43f72ee0306f7d5f8ffffff036b30286fab92701662eea47422e57e6ca43d5ee1c1830afd36cda534d5aeffe4553dfe073568ec4ccdd5854bb4ab342443da7a1612579a907619050000003822836167897a3e3a65603e448efb263c0dcc98c1abe9b03f0b271175374d7cced8aee71dd56888e68c9f296459635f5ce57a86a6ba209725fc7c1e9418a38544e0d03ea74c28d8becd4e46c7e028036d64c9a4c4b1a62712a680d1ac"]) 17:59:46 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xdc0c) [ 1619.073956][T31892] overlayfs: missing 'lowerdir' 17:59:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x20) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:46 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0/file0\x00', 0x7f, 0x6, &(0x7f0000000300)=[{&(0x7f0000000080)="d05b14c08cf56c30d692be8882f947da25aab65a236e5c1e522b65b1db58cdda4b6117d6bfb0aab64f42fe09478ed4200980958771", 0x35, 0xffffffffffffffe0}, {&(0x7f00000005c0)="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", 0x1000, 0x7}, {&(0x7f00000000c0)="985fa53aff540501490e44ea7b6e85adf8f6011629bbc25e91fe2ba4d6861678713553fd95a9276366923322435b048fe81801606913e2c873b2fbc48b393e59257b85d999b9ab9d0518a6b3cbb96eee0af56e2ed36b46c1b2870ac3a07f547ee15cfac0799c6c0fbc5931f4b5fe35f9ea12d0ffaffd88f197859d6a0c524e7fd11a014acf90018f1e4895d42231a8c9b8b6c6cdd0d1807b8873bb20d5462c142862d8204afcbff61fbb736a4a4fb22e3c45bfc5291d1b6b7dc9bd48233292d3de826ff5f4bbcfa98fe0760e3a3387cb", 0xd0, 0x7}, {&(0x7f00000001c0)="60c54f775f439a954a03b1400ff4e494c7a2d01a0415b455ea3f33a279b0e692fee603f00e8226716c759438f148f23662a739bb9720487d0af22c8d226eb50f2a19cb0aa7eb851cb5ba38be88825a73a764527ba5d8ad6d44e24dd376982def473fc6fa6868942191ca772249a4df9bad94894bf68b9b0d2bfdc3a475f99f49d4b4a62a8b1343dd09e08bf9ade59fa4a969", 0x92, 0x7fffffff}, {&(0x7f0000000280)="011295dca2a7596037b3967db375799be42fa71a170b401ca5f0b75f78e427bcdd4f2365cb50a64b34ba551ae4886f3e474647b23fd8bc7827c52c2be3167cdaf46ca062e8635bcd7d279a3c1e713a6c552f60bcc4d6a21a7e9c1e9e91b03fd6b35b9a4a77202f7884c0078ff7", 0x6d, 0x3}, {&(0x7f00000015c0)="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", 0x1000, 0x1}], 0x2000000, &(0x7f00000003c0)='nodev\x00') 17:59:46 executing program 0: open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="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"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000040)=0x8, 0x2) [ 1619.447670][T31976] overlayfs: missing 'lowerdir' 17:59:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x40, 0x1, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x80000000, @loopback}}, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1619.504040][T31976] ceph: device name is missing path (no : separator in /dev/loop2) [ 1619.589179][T31976] overlayfs: missing 'lowerdir' 17:59:47 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:47 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 17:59:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x40}, &(0x7f00000002c0)=0x5c6dbd00, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1f}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=r3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1619.968988][T32128] overlayfs: missing 'lowerdir' [ 1620.000577][T32132] overlayfs: missing 'lowerdir' 17:59:47 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x45a54005e1104ef6, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[]]) 17:59:47 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf000) [ 1620.062070][ T27] audit: type=1800 audit(1574186387.544:83): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17873 res=0 17:59:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x44) fsetxattr$security_selinux(r3, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:userio_device_t:s0\x00', 0x25, 0x3) sendfile(r0, r2, 0x0, 0x800000000024) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) 17:59:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) fallocate(r2, 0x0, 0x5, 0x3) ptrace$setopts(0x4200, r1, 0x10001, 0x42) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x100000, @dev={0xfe, 0x80, [], 0x14}, 0xe2c}}, {{0xa, 0x0, 0x1, @mcast2, 0x4}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:47 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x401, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1620.365811][T32250] overlayfs: missing 'lowerdir' 17:59:47 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x10) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c005d514d691da77a58f73bd9e6ab7b0217ce89ac732dede3a584e08f8ce3c0fbe2ebb4a363cb93a44f59c22647bdd80befed7e27bee1dffc2ef6bc2594d8363facff57f8768575477d1a7936d701a5714d5fa9e4d34fca3307c6ba4ea6bb53c56ae98e7bbbbc6d7a5e1f"]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) write$P9_RATTACH(r2, &(0x7f0000000140)={0xffffffffffffffbc, 0x69, 0x2, {0x0, 0x1, 0x7}}, 0x14) 17:59:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)) prctl$PR_GET_FP_MODE(0x2e) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setown(r0, 0x8, r2) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)) [ 1620.538777][T32327] overlayfs: missing 'lowerdir' [ 1620.551920][T32327] overlayfs: missing 'lowerdir' 17:59:48 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000000)={0x400, 0x7168, 0x1020, 0x1}) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TCXONC(r1, 0x540a, 0x8001) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)) 17:59:48 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000280)={0x2, 0x4, 0x8001, 0x2f8, 0x1, 0x4}) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x4a, "7e4883e043223af96bbd45b06b323d1c30e08958fd16c75277f5841d1c16c5664bdc685c4038574642c9ab3b4a1b01d116fc233d77a6ec6f2df5f8ac1658da267f2d56c1d34c54495a8c"}, &(0x7f00000001c0)=0x52) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r2, 0x40, 0x30}, 0xc) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 1620.830915][T32379] overlayfs: missing 'lowerdir' [ 1620.846527][ T27] audit: type=1800 audit(1574186388.334:84): pid=32244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16521 res=0 17:59:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@default, @bcast, @remote, @rose, @netrom, @bcast, @rose, @bcast]}, &(0x7f0000000100)=0x48, 0x81800) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000400)=0x8) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x12d002) r3 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x800000000024) [ 1620.905362][T32466] overlayfs: missing 'lowerdir' 17:59:48 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4060c0, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x4020131, r0, 0x9) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x40, &(0x7f0000000080)={0x80000001, {{0xa, 0x0, 0x3, @rand_addr="c096f188cc44fbf9fd96e7ebbedeb11b"}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) fcntl$setstatus(r1, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:48 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01"]) 17:59:48 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x34000) 17:59:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000000)='./file0\x00', 0x34) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x100020, &(0x7f0000000000)=ANY=[]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvfrom$unix(0xffffffffffffffff, &(0x7f00000003c0)=""/213, 0xd5, 0x340, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1621.145771][T32476] overlayfs: unrecognized mount option "" or missing value 17:59:48 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x0, 0xffff, [], &(0x7f0000000000)=0xf7}) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x2a8084, &(0x7f0000000580)=ANY=[@ANYBLOB='me]acopy=on,\x00']) [ 1621.235094][T32552] configfs: Unknown parameter './file0' 17:59:48 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 17:59:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000, 0xffffffff, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x48c01}, 0x44) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r2, 0x1e, &(0x7f0000000380)={0x5, 0x1f}, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$sock_proto_private(r4, 0x89f0, &(0x7f0000000680)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed42f90bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a8100000041282a4a25be565d1f364b5c87edd5e67968876e0d7b40bb721f966dfefe21d2341998581e611423cc936f8cd0c29f3874f2") ioctl$TIOCEXCL(r4, 0x540c) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='vi\x88\xc9\xae%\xa7\xc6W', 0x80, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e3a66695b6530f2ca4d8a53e2d7c05cd49b8af303f1f4fe16d6634c7532765f58b37f04af42838ac0ba1778e834625ebec845b1"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/96, 0x60}], 0x1, &(0x7f0000000600)=""/4, 0x4}, 0xb044) [ 1621.442131][T32693] overlayfs: missing 'lowerdir' [ 1621.477401][T32693] overlayfs: missing 'lowerdir' 17:59:49 executing program 2: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80001, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000400)) ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x5) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000080)="a7026ce6fc7b44bdc8698f58ce7b86a3ec96598242f87864d331628b8956ffb7761f4ac9cd626c13768a325318ef802a70ee8af6e50ed51d5bc22251a211c037fa88b172572a16a43b57b2aa2e998a73bd115b330d963c7f451cecabaef96b914e533f94a79402292373cec7c7469a0b86d1f22028d711efac47630daf69c2fe27258069dd2310f0bba362efae10f0eef93b7e1eceadb416f5d46c1637f5be543912", 0xa2}, {&(0x7f0000000140)="fabd6fb0966d2dc1396ea381f98f", 0xe}, {&(0x7f0000000180)="7939c6e5764826e0321ea37135a06d885fab01b38d5985592fea581cf6768f4b1d791b6471e795042f8b9dbbbe5de729749683f425e7ae28004e6f841ddedef2e20ea873c9c4231c4af2e12e39eb1c2c34c22f3e2188c3c8151adfd320608f15b6e82d824cbb4aadb5d45c4ef63aca76be96d5ca43ccc49ac184b4e5e5757692bc4daad09f539bdf9332d27b33fd95b6107d803957d39146e0ff34249aa194cc4c89eea826eae04a70a3966ca92fe7235d871ba4e7af88be1104b4dbc85256720c6f9dfbc81e0afd5a15cab7a5aebbd3a86caa483432076b5f23d1cf6a244569937ceeea40a9ff", 0xe7}, {&(0x7f0000000280)="69e874bb7cdfca13833f75afae083cf9179ee7f228ca6d1a8a5f8849861b445f002b64830008c938c8a056646dfd629e57497d05271c161da8f32219c8c6b0ae0d06f52279a6789bf2f1d81b6b3cd3cdbe0113dd2bc3cc5c298df430264c2401a1246b5b8c5e116880c7e58fdf2408ab76975cedb5633e6690475ca6f5082adc7ed333f4d18d5f3a1dcb80c3513a471049d8cc7008d08ddc63b5ef043c401ae95c314e6b981230a2585ee6e278970462487d1e87d7c8d10b4e401ff4ab43e98702a10b961dd98a15f27d00f46666ee5c3af0efec285f8730b87d30700587768724fe", 0xe2}], 0x4, 0x4) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1621.641711][T32702] overlayfs: missing 'lowerdir' 17:59:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0xffffffff, @dev, 0x800000}}, {{0xa, 0x0, 0x0, @local, 0x5}}}, 0x108) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x82800, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x10, &(0x7f0000000000)='-nodevsecurity.\x00', 0xffffffffffffffff}, 0x30) ptrace$setopts(0xffffffffffffffff, r3, 0x8, 0x40) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:49 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r3 = getgid() write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x7, {0x5, 0x0, 0x2b, 0x71, 0x2, 0x36, {0x2, 0x9e0, 0x3, 0xfffffffffffffffa, 0x8, 0x6, 0xba3e, 0x800, 0x7f, 0x4, 0x6, r2, r3, 0x7fffffff, 0x4}}}, 0x90) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000001c0)) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='metacopy=Ln,\x00']) [ 1621.782240][ T27] audit: type=1800 audit(1574186389.264:85): pid=32532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16593 res=0 17:59:49 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x203a41, 0x1) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000280)={{0x3, 0x0, 0x3, 0x0, 0x200}, 0x2, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x5, 0x7, 0x8}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:59:49 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffff9, 0x100) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0x0, 0x4, 0xaa}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r3 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000001640)) syz_open_dev$radio(&(0x7f00000015c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r8, r7) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r10, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000440)={0x6, 0x7735, 0x8, {}, 0x8001, 0x2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={r10, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r10, 0x800, 0xd4ac}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000380)={0x8, 0x63e, 0x8412, 0x4, 0x4, 0x100, 0xfff, 0x2, r11}, 0x20) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) fsopen(&(0x7f0000003e40)='w\xc2>\x19C\x05\x1df\x81roopfs\x00\xa9\x9e\xcfU\xd1HP_\xaa\xea\x92\x1f\xad\xa2\xc7U\xa0\xc2\x94\xd3\xc1\xcd\xcb\x87\\\x8a[$\x05\x99\xda\x1b\x90\t\xa1x.\xf9\xabH\xd2\x95wi\xb3\x03\x89\xd1\xfc{\xed#|\xb7\xb0\xd48\xa4\x8bH\x8e/\xc5>\xa3J\xd60\x1a\x12f\x96\\U\xbe\x8d\xdb\\\x18\x84\xff&-\xc2\xe2xyU\xa2\xc2\xb2\xab\"\x15UW\xcd\x88\xff\x95\xa7\xef\x1c\x8c\xccM(/\xe4\x7f\x04\xfd1\xc0c\r\x97A\xfdn\xdbQ\xf1\xf3\x8dY\xe1\x7f\xc8\xac\xb7c\xf7EeKjm4t\x1a\x9f\x97\xee\xef\x9e\x85\x02\x04i\x99\xc0\xe816=\xc1S\x89?\b\xe3j$\xd6\xe3\xac\xa7\xce\xda\xac\xaf=f\xff\xd1[I\xec \x81\v\xe4', 0x1) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5}, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="857ead78ba5cc833a5f55a5d80fcd2501f72f873772457587e792c3a1acbe909cf51ef3d59d671594d5a87a4be2c2ed4eb54edc8c99205c92a836266155800ff594322faaf449d145b9d7ef21861586a3b04726d09ae2a0b33d44f4e3d1a2c92a50122c5eaac161b1fc346f898c70338bf3a7b", 0x73}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f00000001c0)="204461722410df36774e14b117b36bdaddbc85881777f40512495d4face8379258d7e0b112871fb4fb8b472fa5086704b6bf9daefa107e64df", 0x39}, {&(0x7f0000001500)="b7cbfddd4084e97101df693f2d1b92f1928c0b477af6d48b5dc28b358622d7cd1d2e4465785660e2b7cd39f072889c680d091f86531d9f3615d89beb35c93054ba9fecb0889787aa0a46838af678fa4d1b5f4b57835958ffe246937fe7ff7defbe486274843f7283e4db64de70bd1f241cd1d06f2912b8f3fed44351b5dfd6f4f26fc9baf34fe65a9d16e95029a4f7a47bba09d1941386339e4e7c", 0x9b}, {&(0x7f0000003d00)="84ceac5d444d3c6a4d9d07f7383a6e7e552897427b7aa3c57d37459591a151f256c17dee392e6ae5386811c335bfa5e41e0af02391a5716f8fad6a4a9d688dae67261a2f6a01c0d777df45d327d814ed1a1d9da4f4043f9d644075f90b44a180e29c8bb47f3fb690841ddf7a28de958ab66d6dc8ef04fa7d26a84d3cfeebb5f2be81e94d1a8ea2c0461ffa6fdbe4892aca6ece5da62cffe2b122b072cfc3ef66cff744b671ce19386973b2ac460c69ca3c2ff84619daff6a0eee737f70c6814284c766b5574b0119610e3f28bb83225ae4c3bd6c8449f2b3d74ccc8dd8c87bd3c0a8", 0xe2}, {&(0x7f00000016c0)="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", 0x1000}], 0x7, &(0x7f00000026c0)=[{0xb0, 0x103, 0xffffffff, "eab99f79d70b13cb97d735a57effb4140b04ff43b8e2ff67b032eaa5db07e760ed4154994f766f14b64c72a8f80046c44edadb0846470390741b8cf5c4b17ee5ba410417754f60094005866b5c88bcb10740c746e02b7c2cae29e1b5874b00f6a88ef03ad0aceb68512d09eed85ab470cad5c3e35847166da660e523dc3105425c5effb27d1a53155ffdd154495f74c1840580c25429a3290ed9c700c5bbb9f1"}, {0x88, 0x101, 0xc7, "a17b80433bfea22d2ba52b00d2df5ab1fc1dd214a5f72426d37567a74304018c8cbfe47ffcd9b635d6252a584576f181cbcc8c88381b69d8e9f1eae141c7c94ade74b1aeca4bf48b8e5e67025fbee19889b6024ba1d604d2304fa0e1e97f7ad0216ea2926e9e78c1b185967252e9fae577d193d087d400"}, {0x98, 0x88, 0x2, "d475ab1051108547e3aa4133a7a171270309fe0b3583a97fa33e438b769cad01989de72da95540fc484c3fc6c2e1b26fc1a27dd46e847cac59b6a6368fac96cab6a647bee9b63ec123da12c29cb506088031a0c15028b1caa890e0b98a43426c31fddcc0cdeaa376755831b2c9ec469aa6c61ff69cd99cba257c2e30dee36a03fa790f"}], 0x1d0}, 0x20000000) readv(r1, &(0x7f0000003c40)=[{&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/96, 0x60}, {&(0x7f0000003a40)}, {&(0x7f0000003a80)=""/165, 0xa5}, {&(0x7f0000003b40)=""/165, 0xa5}, {&(0x7f0000003c00)=""/8, 0x8}], 0x9) 17:59:49 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x4000, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1621.886513][ T376] overlayfs: unrecognized mount option "metacopy=Ln" or missing value 17:59:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r3 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xfff, 0x400880) linkat(r2, &(0x7f0000000000)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x400) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:49 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xd0000) 17:59:49 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x12) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1622.118650][ T457] overlayfs: missing 'lowerdir' [ 1622.172579][ T461] overlayfs: missing 'lowerdir' 17:59:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000140)={0x5, 0x6}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x8300, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@metacopy_on='metacopy=on'}], [{@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@hash='hash'}, {@subj_role={'subj_role', 0x3d, '/dev/dlm-monitor\x00'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/pcmC#D#p\x00'}}]}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x8, 0x4) 17:59:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0xb7e03ff1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) bind(r5, &(0x7f0000000140)=@generic={0x5, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x2e) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/4\x00') ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1622.465792][ T576] overlayfs: unrecognized mount option "permit_directio" or missing value [ 1622.508566][ T576] overlayfs: unrecognized mount option "permit_directio" or missing value 17:59:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f77657264742cb9e22b3a252a5aaf"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r5, r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r7, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={r7, 0x4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e22, 0x7fffffff, @loopback, 0xc307}}}, 0x84) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:50 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1622.728491][ T728] overlayfs: missing 'lowerdir' [ 1622.747831][ T682] overlayfs: unrecognized mount option "lowerdt" or missing value [ 1622.750530][ T779] overlayfs: missing 'lowerdir' 17:59:50 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x3}, 0x8) ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) lstat(0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r0, 0x2fc35000) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file1\x00', 0x8, 0x1) 17:59:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1622.975609][ T892] overlayfs: missing 'lowerdir' [ 1623.051471][ T892] overlayfs: missing 'lowerdir' [ 1623.091748][ T27] audit: type=1800 audit(1574186390.574:86): pid=455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16833 res=0 17:59:51 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r0, &(0x7f0000000000)="75b3e6f38064beec840db9c4f11c2a16a0d27cfeebbd9d23a500c48fece8f3359a0dcf66513bf38d87380624bd00100eba1d5824ad53e8ebddcbaae722d584ffa84f5fd31f7ba7b6b1e4414db802fb1ca76f6a0f25b8ec5c3d84c8", 0x5b, 0x4004910, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @local}, 0x1c) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:51 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x300000) 17:59:51 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockname$llc(r2, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x10) fcntl$dupfd(r1, 0x0, r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESDEC=0x0], @ANYRES64=0x0, @ANYRES32, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRESDEC=r4, @ANYBLOB="4c4bc2231d00117c0d14e76cef2517183ab86bc855650cda50b16208bdcaa3d899955db1ec75ca8ddc05eba6935a1a09e06c3054e574d32162d871c3484fabfbaed5102819705f2af711b1876a487bdee43b06e453b38ba85ed3dd991d9301c087a93a4c6513768ea6512e5366fcfc793ebb41ffdfea4361492fc2ebc4be71e1b8a98c32fc1a2850985934d483d9842e8f57a213156297775f4f6f20a066df8e27d12d2ec2f6c0e04f4b7cf6aecf16150fd0a70f07f32f85911879661eabae62d18defd496644a81d40093ce06b85f0445922847bee08283299e0be610c50f4091ff27effb00960d1d"]]) 17:59:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200002, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xe, 0x4) 17:59:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000003c0)={0x4, 0x3f, 0x3ff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r3, r2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r5, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYBLOB="8f00000018004ecaed347f51a3219c3b6cd6243865193172797b8609e5330e8360461a6c7d56b05838b95b95403972095b235b7c4b4d8b3ad9a9cbcbe5601d6838ebe5cc254d42ef6937d6b1667eab01b37f03f53d96a413b67dd0aa6b0917070165f4d815c623d7b66d2bd839ef672d6be1bc845d2037161efe730e81c28b66c0c58f32c99f81016bc7e0be20cf130000000005c6bae1129f2d7c8207d3e3f5699c0c098c233b145f88810a5c513f5920785ade7e5898ff8f2aa214c7e26f04a39965e9586485c47af1d2ddda4dd282456477ddc80a47a0a0d26744daf71e839f9ae537258b51ac1e0ccec1ef3630ddbad202"], &(0x7f0000000540)=0x97) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KDGKBLED(r6, 0x5111, 0x0) ioctl$sock_proto_private(r6, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020001}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x270, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x45, @remote, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0x0, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x17f}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd1c1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0xffffffffffffffcf, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xffffffff, @mcast2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @empty, 0x4}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xa, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6eb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8000010}, 0x10) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xd000}) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000400)=0x8) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x800000000024) [ 1623.637010][ T1016] overlayfs: missing 'lowerdir' 17:59:51 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x9c\xa2\x0f\x00', 0x192903, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7, 0x80) accept$alg(r1, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d657461636f70793d6f6e2c00c3f43986c270fdf407ed94a86de03033ff0056bb3b77b316871378489044da080bef2cfafb804252d51b0441a7da7bf4f937ea772dbc7ee91f231f5bd1f61e455b304b37660e94697a7ebb94339810b585d1cf98c7c30800210be8a487d674c919de4e4adc6dd0c3da5329c979a80fd0416c7f92e9b991075e11b5c0e8a93e53602ffe1e"]) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x6, 0x5, 0x1, 0x6, 0x4, 0x7, 0x0, 0x80, 0x43, 0x6, 0x80, 0x7f, 0x1ff}, {0x1f, 0x4, 0x3e, 0x3f, 0x7, 0xfa, 0xff, 0x80, 0xfb, 0x0, 0x1f, 0x2, 0x1ff}, {0x4, 0x7, 0xff, 0x9, 0xaf, 0x0, 0x5, 0x6, 0x7, 0x7, 0x4b, 0x1, 0x7}], 0x3}) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="5a2f0f8669e203448075034ba2fbff0982bd8417164c8e45da0ff8c2af47c000b539656cf8808b368a243c0c6b682bbde8"]) 17:59:51 executing program 0: r0 = dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r1, r2+30000000}}, &(0x7f00000001c0)) r3 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./file1\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x2000080001, 0x84) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x1080) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa080000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r8 = fcntl$dupfd(r4, 0x3e21136b17a16b65, r5) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200)={0x0, 0x70}, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) 17:59:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000540)) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x180300, 0x0) write(r3, &(0x7f00000003c0)="2088cb480e2bdbcf805e8cc8be605e0022b36fddeb71f630566080c8d98932cd2be30efee6ec3e98fbeca7d186d0635c86840a5f31c0bb089013118143ef7742fb0d0704cd45b7d4b872754163508504d2265e467f5915d18bc3815d969795268f7898bc5d362ec114a54e8a8925501538b2837171f670eddf95c37d6ee76c8fc5981960c12c5acf0d1ec3940d701f777a7796e170827c36f22175299c6c3f3f26c0c26be3ff4509a2cb94bd43", 0xad) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1623.909307][ T1237] overlayfs: missing 'lowerdir' [ 1623.922188][ T1239] overlayfs: missing 'lowerdir' [ 1623.924084][ T1238] 9pnet: Insufficient options for proto=fd 17:59:51 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev.snd/pcmC#D#c\x80', 0x10002, 0x2000) fsmount(r0, 0x1, 0x88) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:51 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c8e19000c2ddd", @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) [ 1624.047284][ T1246] overlayfs: missing 'lowerdir' 17:59:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x92c) r2 = socket$inet(0x2, 0x2000080001, 0x84) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x0, 0x1ad, 0x0, [], [{0x1, 0x400, 0x7ffd, 0x8001, 0x1f, 0x5}, {0x0, 0xd8, 0x3ff, 0x100000000, 0x8001, 0x401}], [[], [], []]}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) splice(r2, &(0x7f0000000000)=0x5, 0xffffffffffffffff, &(0x7f0000000040), 0x10001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) getrusage(0x0, &(0x7f0000000500)) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, r5}}, 0x18) r6 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r0, r6, 0x0, 0x800000000024) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080), 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r8, 0x80045510, &(0x7f0000000240)=0x2) 17:59:51 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2656da607453f6ce) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10000, 0x0) [ 1624.250441][ T1356] 9pnet: Insufficient options for proto=fd [ 1624.308204][ T1360] 9pnet: Insufficient options for proto=fd [ 1624.321566][ T1359] overlayfs: missing 'lowerdir' [ 1624.345153][ T1359] overlayfs: missing 'lowerdir' 17:59:51 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x400300) 17:59:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:51 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffffffff, 0x303000) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000001c0)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000040)) 17:59:51 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) getrlimit(0xae821831cdad0f32, &(0x7f0000000000)) [ 1624.588568][ T1384] overlayfs: unrecognized mount option "" or missing value [ 1624.612161][ T1384] overlayfs: unrecognized mount option "" or missing value 17:59:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:52 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x282200) recvfrom$x25(r0, &(0x7f0000000040)=""/14, 0xe, 0x40000000, 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1624.827691][ T1612] overlayfs: missing 'lowerdir' 17:59:52 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = socket$isdn(0x22, 0x3, 0x21) prctl$PR_MCE_KILL_GET(0x22) pread64(r0, &(0x7f0000000000)=""/84, 0x54, 0x8000) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x6, 0x234281) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000180)=0x5, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0xd000) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x2bbf16c3a7585a35, &(0x7f0000000100)={[{@xino_off='xino=off'}]}) 17:59:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r2, r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r4, 0x4}, &(0x7f0000000200)=0x8) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c6c6f776572648b34560a740026ff67b46869723d2e3a66696c653090cd53a76247e112f611217903084abaa6901da687224a6640a1b0f7257a40c5566ddb51e4a18eca0e98f1229ca08d8cb12b5ce7ba5568b8a4d80f322b4a07ae6a87d7cce204b511e6c0ede81e3db12e510503000000000000"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) fcntl$dupfd(r6, 0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000440)={@mcast1, @ipv4={[], [], @multicast2}, @remote, 0x4, 0x7ff, 0xff, 0x400, 0x9, 0x1080014, r10}) [ 1624.903204][ T27] audit: type=1800 audit(1574186392.394:87): pid=1374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17261 res=0 17:59:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) sendfile(r2, r2, 0x0, 0x8) 17:59:52 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) mount$9p_xen(&(0x7f0000000000)='overlay\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}, {@aname={'aname', 0x3d, '!@'}}, {@privport='privport'}, {@version_u='version<9p2000.u'}, {@loose='loose'}, {@access_any='access=any'}]}}) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1625.073088][ T1709] overlayfs: unrecognized mount option "lowerd‹4V [ 1625.073088][ T1709] t" or missing value [ 1625.145248][ T1715] overlayfs: missing 'lowerdir' [ 1625.193269][ T1715] 9pnet: Could not find request transport: xen 17:59:52 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$VT_ACTIVATE(r1, 0x5606, 0x3) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000003c0)) read(0xffffffffffffffff, &(0x7f0000000200)=""/126, 0x7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x9, 0x100000001}) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r5) sendmsg$netlink(r3, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}], 0x20}, 0x0) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x4, 0xcf) r10 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x5429, 0x206040) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r12, &(0x7f0000000080), 0x1c) r13 = fcntl$dupfd(r12, 0x0, r12) setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001cc0)={&(0x7f0000001c80)='cgroup-!systemselinux{eth0@\'\x00', r13}, 0x10) r15 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r15, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r15, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r16 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r16) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r18) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = getpid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r21) sendmsg$netlink(r19, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r20, 0x0, r21}}}], 0x20}, 0x0) getgroups(0x6, &(0x7f0000001d00)=[r21, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) r23 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r23, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r23, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r24 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r24, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r24, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r25 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r25, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r25, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r26 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r26, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r26, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001d40)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001dc0)={0x0, 0x0}, &(0x7f0000001e00)=0xc) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = getpid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r31) sendmsg$netlink(r29, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r30, 0x0, r31}}}], 0x20}, 0x0) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x10010000000035) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001e40)=0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r34) r35 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r35) sendmsg$netlink(r13, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@cred={{0xfffffc4e, 0x1, 0x2, {r35, 0x0, r34}}}], 0x20}, 0x0) r36 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r36, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r36, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r37 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r37, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r37, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r38 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r38, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r38, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="06d42b0187f24921097b1bccba1fb8d96e111812dc3c6cb0db6c79d19aa91a40905c5c728d65c485123ba4ca303d38f3cdff227a78714b9017b5a6b6719d907e5e4e0563944252690f06a8fb4683133a501387a62cf14f9b9f58ade38857a49347d99951c3", 0x65}, {&(0x7f00000002c0)="dbf9ac548e3005f21108bcc2cba0f9745657d26a552689d830f055e6af8e5a063702c7fe3e8fc21421856944cb13ef82a464611d9e9ae38a85fd9070da3c281ba7a726dc3176e811f47e041d4cdad5dbb1f2b18b5b2e58e24f0b69b34c0491dac253caf224ece39c1216e1bf8e6729befb5d3d40f4a1688f252e67f2c17cd5d5a09a5254d78259f6ca02f8d16c5ac5dc428a132cf87a8c6fc2bdca14443d9365cec34bc382ac43ab7e5f90746a07a9df104e9d1b0c691cbda5eecf01229611da8834df7a83a2b080259d5c8462bc8cceaeaf", 0xd2}, {&(0x7f0000000440)="4abf5a819f44c03d94cd098803bceb530271d37baf61acf277da9fd46d2753d8414028270c8cce77a2ed0bb1b19555d53fa173bf2d533c473bdb8789b91c5d84ca802b6415acd0dd0029188c8e0539e05d75a5f8c6afac2f7cd868c103f3bbeb97f2fe71cda5a69e7c114b449c8104cab23855ef8f4105ab81012810925ab5392ddeebadd40c4df1fe976c7e2438bffa4e0b26f7b666ee8d9d0a7e6336d6b7564d3748e9c92445263f7a456c093754cf110af95161ea654e8acf18", 0xbb}], 0x3, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r5}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r6, r7, r8, r9, r10, r11, r0]}}], 0x68, 0x4840}, {&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000680)="5b9c3691098fb04598d914401a05396157f24734c16c7dd9679221922a25b3b7e90c6065586f8b9e4281f41f8cf495653808676a9f", 0x35}, {&(0x7f00000006c0)="6f540403935f66d724f8488c27a31da147bc024211b405cf409248481e5dd6cd3757303fa0cbe55b1a6b9490d27b7c439c187f1c79dfc0cce76188aaccc13c70118aa14ebfba8ab56d69", 0x4a}, {&(0x7f0000000740)="e0f5781fddd190fb8b76db7ade28eafd55d6112eccd9f8f2af83dab9e005a779561a439b7677ccae4cac01d27af0aacd5999e6daf4f4952d979182b57dae5923f7fe26438323414373759c01431d5700e79909f776bde8d6375b7a7c72948d5149dc8b50cd6133ff5161856d06da1430d6c034145d5c3fea24b1c405e891ad2fb887781b7260a657a5246d5ff8b22ac0dce386d8e553d014b3fb83fcd7e08f604e7052e804e8b62a9797b22e47621e3082a323afc26b81e9d6a57820c70bcd01c80ffbbf", 0xc4}, {&(0x7f0000000840)="d8fe288a24f6addc16d42594ada69d0400ad41546e431e1fa0be1517c4b36e1e1e5e77ded9de11c65a0c14e9dd4bf8fc85a9cb8f", 0x34}, {&(0x7f0000000880)="03ee3f04a48ce46fbceb77f1861d89c03432f8866227d0dbaa76ff03824eab0b30987149f8e61ded5655f23f2c29a0aa082ebc12ec6765e5c077d1f1f0654f888c25869efec83d7c2187ef4cceda7d618832adbe116924ce103c0b0217faf4f13c05ba87b03e1d4bc080599119da2d066ed50dc9f79d9b9df73f8caddfd6b4a44236ada11b1b576203ae67971d49a7e9ff412a99277e", 0x96}, {&(0x7f0000000940)="153c8acb4668a11c22ae", 0xa}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="98d6acb7c506becb23888a9f01fc6be71c72c9e1e521f15d385d2c7ccad5021df30ba2dbc1243cf8015a052c58250b9a5d9073583fcf50f3b11f506a9968ff1292eae0754661b18cf3cdd4206beb4533be64b9c52b9c631e411fc27c209020df88d4bdfee2bc98697f561cf495df37db54ebbd568822f2da84dda9843811c0fe72890311f63edc8fdac904835d323080f5c0454ec736bb77a98fce6b9167e7297d78478a9e65db9ddc97e3be80285e8e03c77ac7ea76a50006833bc246e588cc417308c9f57a215f790c1ac76315c33307ac35fd22196d8582328c66f985660620d7ae9ee6e5d148358d771179", 0xed}, {&(0x7f0000001a80)="c99ebae07369d8d57f80a903cf81d7d1304c102e55e42e260d5e7775b465bdca0deaea7d419874db0f988175ce7c6ac33dbdc9eff85bd6c234d87f06bb5a44e4d56213c9f6b746a4866236122a3a484524e3c1e3b90feabfe1f2dd8708f9c55f11028f5180072d3a82b31955aed17949855e002075", 0x75}, {&(0x7f0000001b00)="0bed84f4723aadd51f43e20ff323b632e5c4198301ff89f249ac06d3353c1ed6acf7a9a9e51b418473bdb9a7767ee862251514f725a0b50ff9d47c51b9f85f5888a464c52956737795596ca58f4f5e66141465a1a949462f450f3ecbaf8ff1050453bb5d99703389f56508317984256b9f8bb729f072d6cbaef5170fec754a3f21cd4aa3b2d9447caad914c0", 0x8c}], 0xa, &(0x7f0000001e80)=[@rights={{0x18, 0x1, 0x1, [r14, r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r22}}}, @rights={{0x18, 0x1, 0x1, [r23, r24]}}, @rights={{0x24, 0x1, 0x1, [r0, r25, r0, r26, r0]}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r31}}}, @cred={{0x1c, 0x1, 0x2, {r32, r33, r34}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r36, r37]}}, @rights={{0x18, 0x1, 0x1, [r0, r38]}}], 0x100, 0x40}], 0x2, 0xa6dcb4c810ff2ca6) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:52 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf0ffff) 17:59:52 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1a0a0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x5111, 0x0) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000200)) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000080)=""/46, &(0x7f00000001c0)=0x2e) r4 = fcntl$dupfd(r0, 0x605, r1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0x5111, 0x0) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x1080) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r7, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xbb}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x237}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004848}, 0x800) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}}) 17:59:52 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0xffffffa4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x101000, 0x0) lstat(0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x200) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x20e2, 0x8, &(0x7f0000000080)=0x9}) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1625.535279][ T1845] overlayfs: missing 'lowerdir' [ 1625.551866][ T1847] 9pnet: Insufficient options for proto=fd [ 1625.582134][ T1868] overlayfs: missing 'lowerdir' [ 1625.592396][ T27] audit: type=1800 audit(1574186393.074:88): pid=1752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17057 res=0 17:59:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x1) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0xfffffd85) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r3 = fcntl$dupfd(r1, 0x605, r2) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) [ 1625.635097][ T1847] 9pnet: Insufficient options for proto=fd 17:59:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$int_out(r3, 0x5460, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:53 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xd55798e5297cb00f, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d657461636f70793d6f6e2c004218cf3ede00e145b0ecb39f67c300d08c483c59e051a1fe4f51ffb2d06446f6ca907ddcaf09f42c9c963301ff0a0a1f0896b698a1618a7ec500997d79752a049cb8f02449098149dfb008b73e020aa02407470716eed306793fd10e9f27ad9c1c56b94b4c2e8e1b905521e990522d5ef0c3b373680764f72acd3e28c6315cc01e533dfd5992724dadb9302c678c2a5123700027a659b63c92f217a2eb77aadcf4412768fb"]) 17:59:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x1bf7db611525886a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54, 0xfffffffffffffffd, 0x0, 0x0, 0x32f362f0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:53 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r3 = fcntl$dupfd(r2, 0x406, r1) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d660000000000000001", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x48001}, 0x44) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={r6, 0x7, 0x0, 0x3, 0x3}, &(0x7f0000000200)=0x18) [ 1625.894834][ T1966] overlayfs: missing 'lowerdir' 17:59:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0xfff}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002200100029bd70541858648f05e95d5140fcdbdf250201147f7f0000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004800) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000040)=0x4) r3 = syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0x548a, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000000)) 17:59:53 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0xfe1d) r1 = fcntl$dupfd(r0, 0x0, r0) setrlimit(0x0, &(0x7f0000000300)={0x3, 0xffffffffffff3042}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x3, @empty}}, 0x1e) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000100)=0x3) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000180)={[{@nfs_export_on='nfs_export=on'}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r4 = accept$inet(r3, 0x0, &(0x7f00000001c0)) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000200)={'mangle\x00'}, &(0x7f00000002c0)=0x54) capset(&(0x7f0000000080)={0x19980330, r2}, &(0x7f00000000c0)={0x7, 0x4, 0x8, 0x6, 0x871, 0x7}) [ 1625.988471][ T2113] 9pnet: Could not find request transport: f 17:59:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f7765726469663d2e3a66696c1c30"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1626.051331][ T2177] 9pnet: Could not find request transport: f 17:59:53 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x52ca64f9, 0x200040) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)={0x9}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9, 0x7}, 0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r6, r5) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={r8, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x8, 0x1, 0x8000, 0x6, 0x3, 0x2, 0xfff, 0x1ff, r8}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2716efe3bbe23dcc6383082aa0a1bb90200e5ab1760bb83482666062536d9192315716e87199cd946a8dd948d19e105c70c6de98b78024f812988401f2b03380b3e648547337e1349842b7", @ANYRESHEX=r4, @ANYBLOB=',\x00']) [ 1626.130654][ T2181] overlayfs: missing 'lowerdir' [ 1626.199860][ T2181] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 1626.280930][ T2290] 9pnet: Insufficient options for proto=fd [ 1626.308387][ T2292] overlayfs: missing 'lowerdir' 17:59:53 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:59:53 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x1000000) 17:59:53 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6d6e9600"/13]) set_tid_address(&(0x7f0000000000)) 17:59:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) close(r0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x9, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x1c6) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1626.459129][ T27] audit: type=1800 audit(1574186393.944:89): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16593 res=0 17:59:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x100, 0x0) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) connect$x25(r2, &(0x7f00000002c0)={0x9, @null=' \x00'}, 0x12) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="362a56129e259993bb35a814a7d78f8903c381bd6aee467dbbf99c1d34405d958d70c53d4fcd2f79911ff811709fe1aaca0c77054ba73b7ce4b2da5126bf0330993590a9d2904084b59754964b90f7d467c3d3059e0d3125353c4096b0e5b389c367993c30e068233f3fc88980e864143c93768c0c02fdea04422baa7318a0d2737604b753a5c4909a1d800f99a89f3f9913", 0x92, 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r3, 0x10000) [ 1626.611528][ T2397] overlayfs: unrecognized mount option "mn–" or missing value [ 1626.694272][ T2444] overlayfs: unrecognized mount option "mn–" or missing value 17:59:54 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpid() getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c6cc61ea6559cc53b617ca40000823a88fa0000000000006e2c27cb1a2f9888bca58da7c4d3c5f960c06c97f437d16e2d8e629a368f10dc3b5f04969beda0a3c8f038187d3d68fc69f17c465c97224cfe"]) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r3, r2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r5, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={r5, 0xee, "52374d1f99dfd71be90ae86ec6682cb1d44cfe199dd423b3c6756d97f143aad6e4f085fb8a633cf7bc64275650d17a54a55f181e0bc7542ddfcd0905378a0beeec3f80b77b07a350cabf1d7e2fd58d32e466602a0b12f2fa5a52b4c383eda0d0492e538c602460996d3595fa325746e6aa1db112759a0bb4b3bf844df72a3651a81cbda57b72b88b54e0cfe3a119aec5cd506e9cde1c315b005dd7e8b0c087a7c061ae99774c882097e29c8eec151e5999cb7909e374999d3a20e780b400e969ff9c3659e1751ad0abfac3d904cd18e08b70c7939f366e45769285fc31c5d397c1b8d3481cb1a59a4dc2444c2680"}, &(0x7f0000000040)=0xf6) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r7, r6) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000004c0)={r9, 0x8ad2, 0x1000}, &(0x7f0000000540)=0x8) bind(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x1, {0xa, 0x8, 0x80, @ipv4={[], [], @broadcast}, 0x1}}}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1626.918734][ T2619] overlayfs: missing 'lowerdir' 17:59:54 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000080)={[{@metacopy_on='metacopy=on'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, 'overlay\x00'}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}, {@appraise='appraise'}, {@dont_appraise='dont_appraise'}]}) [ 1627.110497][ T2632] overlayfs: unrecognized mount option "mask=MAY_EXEC" or missing value 17:59:54 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) getuid() mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='\x8an\xac*lay\x00', 0x0, &(0x7f0000000040)={[], [{@func={'func', 0x3d, 'POLICY_CHECK'}}]}) [ 1627.186113][ T27] audit: type=1800 audit(1574186394.674:90): pid=2433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16833 res=0 17:59:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c076f77e5566469723d2e3a66696c6530"]) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x113200, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000040)={{0x80, 0x9a, 0x7f, 0x2, 0xa4, 0x1}, 0x1}) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000240)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}], 0x18}, 0x44) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000180)={{0x2, 0x0, @descriptor="0e5db9427d0ea2b0"}, 0x6c, [], "9e3f310d6da07524a99a71ce3d52ad8ea1c28a0f982557106391ab4291f9a37ee1cc210a1b4feb0394cbf4e032332e91ee1786fcdb8a2a1f4192f1717ec6aa6f4c403561f5180a8108f517d02be2612649fbd7e64bc6cb4d9287242dfec4cc6294143f7aacf4eb55e368b553"}) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0x5111, 0x0) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x5) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000300)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x161042, 0x0) ftruncate(r6, 0x2008002) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x395000, 0x0) getpeername$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) sendfile(r0, r6, 0x0, 0x800000000024) 17:59:54 executing program 0: r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) fcntl$dupfd(r2, 0x0, r2) getsockopt$inet6_mreq(r2, 0x29, 0x2d, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000480)={@mcast1, @mcast2, @remote, 0xffffe2be, 0x1ff, 0x8, 0x500, 0xfffffffffffffff9, 0x100, r3}) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 17:59:54 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x2000000) 17:59:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) close(r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r3, r1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r5, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5, 0x7800}, 0x8) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) iopl(0x80) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:54 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0xfffffffe, 0x8, 0x7, 0xcbe3, 0xf, 0x1, 0x6, 0x7f, 0x3f, 0x6, 0x8}) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3f, 0x20000) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000040)={0x1, 0x102, "1ee90b1c991a1b55f8648ff4b13addf7a21ecf4c3e56b742492b7a8475f30a13", 0x400, 0x0, 0xffff, 0x7, 0x2}) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1627.625034][ T2834] overlayfs: missing 'lowerdir' 17:59:55 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)) [ 1627.816202][ T2973] overlayfs: missing 'lowerdir' 17:59:55 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000001, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f00000025c0)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0xfc56, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/4088, 0xffffffffffffffd8}, {&(0x7f00000026c0)=""/205, 0xcd}, {&(0x7f0000002600)=""/22, 0x16}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000002640)=""/91, 0x52}], 0x6, &(0x7f00000027c0)=""/178, 0xb2}, 0x12034) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000200)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', 'posix_acl_access^\x00'}) ioctl$int_in(r2, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1628.037126][ T2979] overlayfs: missing 'lowerdir' 17:59:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x5c000, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0xf873}]}) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:55 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) r1 = syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x80, 0x200080) ioctl$RTC_WIE_OFF(r1, 0x7010) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = semget$private(0x0, 0x2000000010a, 0x0) semop(r2, &(0x7f0000000180)=[{0x3, 0x9084, 0x800}, {0x4, 0x9, 0x800}, {0x0, 0x9256, 0x1000}, {0x3, 0x895a, 0x800}, {0x0, 0x3, 0xc00}, {0x0, 0x2, 0x1400}, {0x2, 0x5, 0x1000}, {0x4, 0x0, 0x1000}, {0x1, 0x4, 0x400}, {0x0, 0x401, 0x40f973c08e26216b}], 0xa) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETNCNT(r2, 0x4, 0xe, &(0x7f0000000000)=""/14) 17:59:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r3 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x259, 0x8000, 0x2, 0x1}) [ 1628.128407][ T27] audit: type=1800 audit(1574186395.614:91): pid=2757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17665 res=0 [ 1628.236192][ T3024] overlayfs: missing 'lowerdir' 17:59:55 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4000000) [ 1628.291815][ T3024] overlayfs: missing 'lowerdir' 17:59:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) 17:59:55 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000280)={{0x2, 0x4e21, @multicast1}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x26, {0x2, 0x4e24, @multicast1}, 'gre0\x00'}) r0 = open$dir(&(0x7f0000000200)='.\x00', 0x90f189d5b65bcfa6, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x7) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/ubi_ctrl\x00', 0x200, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000bc0), 0x4) renameat2(r0, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000300)='./file0/file0\x00', 0x5) r3 = fcntl$dupfd(r1, 0x0, r1) writev(r3, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="7d29cd6aa9e410255051d847a8812272c57e23ef56681a8c0f7b4702fd7337e3e6a32588d2e18a32d5a97f4639688e8d2e259cbfad67aa800be2c571f3952be5517a641f093ff766cc1d96be7970ee252df62f14a8de24c1c0f6cd409761a27bf6c32748dffc323c776c8f3f7f79a23192e52c0f55b7be2410f976f138f29cf18ec3760dfe4934608ba71574ad27d5ec74295cda7bfe3b4f5a54cb18ca4122cef0f462000c755a02345d95e48ac5ade9a34af4aab5", 0xb5}, {&(0x7f0000000480)="bc92e25579e68c1dd89189ed5c39f5faed07867524e5419f2b04c4f0c23a917ef1142677aae0cc6aea300a461aa0ca245dd5bb713430344080d037789f6f28b8bd73d299e374f4816ca0be9b524f1ad190b8f6409a0c0d65321f0a9133e1b026ca3022ea18f12566cbeae0ac3235bbb5d0bfcd3ad8e72178b0f3ba5717f285d0c9ef1c5e8fc36f8bc4d4211d3318cc790eada3ec8b274da6b98a3cedc27e0285129791b46fa6931c78edd41449", 0xad}, {&(0x7f0000000540)="96cbc8549ee7c55ce24a40e6e0e7378f703f0c4053171c6256d8ffbd1f65b0327bd4eb2fd45ea79031261bcb377e609b9f74c8f275ac332192cc8e3f2d1f9fbd8a7339c892ea68b38986d31d1b1c19a5e17550a9d07c414002268004480df3042cebecc46271dcae6e80b65024396d2ebab40a7ecc82474db3f5e3f79bf5d9b73b463bbbf47cab181cb9a14a85c1e8bd932481accae72904f1ada84f5f966f1b9f9facba56829c262734c6ece87d56f7a7b02e325f73b16ccda22e1d5509", 0xbe}, {&(0x7f0000000600)="5f59de533f9044c15371d96a1301b9be9f6e42a764b8f14bbfaf00a6bb265bb0e3bb89882c3be40a287684093fad77c1bf995474b0dccad086f5e6d1d3a353d7eadf3a359119589b9cdc2b7c63193a39decec5c8d5caac0007d213c76a190c39f08546a9e2a44b87f398ac25cae6bb154146dfc5ff", 0x75}, {&(0x7f0000000680)="9646240a2ee42db83532", 0xa}, {&(0x7f00000006c0)="d16118c2e1371d51e160b358b4d02935665e77b0ceb3194d58911270b5d02273aed3262f36d5bb073104fea3dc24b6ff636a72e48db59a599af8d5d029b8a6a26ebc760fd05ff6d744330c075f05fd164a9b0d7eb9adc0dfc41d1b29080b7178d1cc4f", 0x63}, {&(0x7f0000000740)="5e65442bad81f525a0e2a074b7b1222326dd7843fe2d255318a013dc719192f058e687e4529cd603bf1fa97b75cc9a8c7934375e8e7911a273dca538c282374f70cf74e3ce827c9efd7daea784c8c3c9d324103e30b7ff346082150eeada", 0x5e}, {&(0x7f00000007c0)="82f96d84f9d5f72b5bf8e4437c490e613719eafa0719a6ade94e7b9fba5fea054d3be2fc554e1509186e681fa911cbc5f143f468b92dd10612a6fd83478309a20cb3f7c44ae9a2e8f6804a4eecd62ac44810772c7bac52b8ee9248a9b797af9a51ddc9d01fb109e73fd504ac25ed553b6b39add9e9d3b1825d8f94918dafc533fbf5396c9dc29e64dac40189054ffd7e9694cea745cff1f066cad422e09cd5c9da85a5936cd2d988b2b9d3f3cfeaa06c51697017994557967c910ef46e02475d940b33f809acf2", 0xc7}, {&(0x7f00000008c0)="c6d254892ee6319dc32b8d57cb7f6a37c63417171f4e62f2cb821025db8a9ce096e56bd297e6dfea13837a3cd32199a3d5dc4bb5ab472a1cb8ee5eea5ea811efe2b118f76d32bac06fcdddd72836bca0b937b555b32162f0d789694ac00a65db993a4fbb05a52ba8ebc5b7ded74145fd7890962d1a0a736905b3020da282e3dd7684782d55dc46608be2a4841f33014f1be72a17528edd834a56fa417528839a92507bca5e1ab35e17b956655aeb8b8a5df844d2122021264fee1fc898b1c7569a2ad7b1b9f31828ae6e9fdf2601363bdcc36a3c6d4f5ff648265c16f82756c44185f193b522226b9816493cf44c", 0xee}, {&(0x7f00000009c0)="0329a5a5a79e556714f4befc56f9e703f282249ca0f78ce10321c25295441c65d6a2b380062a64aacb8a9355e2ca054445eec4d7ff127f0ef48b1b96545b69307c3dc930fc2a0b9794789fddb5c10d5b86fe6edb89bf6d1ae614b202febcee607444094f53ba9f130ba4e19647e0371686d141cee858c07f509a0bbd9db09e9e1c729e2bd4190f766d4256dc54f0ed8141545f013f1bb199bdb3376d2497f2c7519ca1f5d7d6b3e484b79bb07b2be592973039798aa7c77e516fa0ee5f76fe394daf65cfac55955a6c086c6f7359f3aa07090f970363168f081bf0cfaa57c5", 0xdf}], 0xa) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="1a77666066ef3d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) 17:59:55 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10b400, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1628.555018][ T3220] overlayfs: missing 'lowerdir' 17:59:56 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x42) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d3537edb4d511aaf76f5f434845434b2c7569643e15a8ccd3bdba6442bd3aab21298f6c2d4e357f8bd5d8d878b86508310767005588f47c06f7c8d48a1965c6b86fe600"/79, @ANYRESDEC=r0, @ANYBLOB=',appraise_type=imasig,\x00']) 17:59:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000b0008000100736662002c00020028000000004f0000000000"], 0x58}}, 0x0) 17:59:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) getpeername$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x10) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1628.790405][ T3362] overlayfs: unrecognized mount option "m57í´Õª÷o_CHECK" or missing value [ 1628.826973][ T3365] overlayfs: unrecognized mount option "m57í´Õª÷o_CHECK" or missing value 17:59:56 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x30000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240), 0x4) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x100000000000014e, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 17:59:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e22, @local}, {0x1, @local}, 0x43, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'gretap0\x00'}) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x40}, 0x4}}, {{0xa, 0x0, 0x0, @local, 0x7}}}, 0xfef9) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:56 executing program 0: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r3}) sched_setaffinity(r3, 0x31f, &(0x7f0000000500)) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) stat(&(0x7f0000000540)='./bus/file0\x00', &(0x7f0000000640)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x28100) socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$xdp(0x2c, 0x3, 0x0) r5 = open(0x0, 0x0, 0x0) getdents64(r5, 0x0, 0x600) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) lstat(&(0x7f0000000080)='./control\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000d2b9e79d54d4", @ANYRES32, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000001400", @ANYBLOB, @ANYRES32, @ANYRES32], 0x79, 0x4040040}, 0x4000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0x0, 0x0, 0xee01}, 0xa99, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) socket(0x200000000000011, 0x4000000000080002, 0x0) socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r10 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r11 = socket(0x80000000000000a, 0x2, 0x0) accept4$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r12 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) socket(0x1e, 0x1, 0x0) close(0xffffffffffffffff) r13 = open(&(0x7f0000000080)='./bus\x00', 0x141242, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$VIDIOC_ENUMINPUT(r13, 0xc050561a, 0x0) setsockopt$inet_mreqn(r13, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r14}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) poll(&(0x7f00000001c0)=[{}], 0x1, 0x7) [ 1628.975069][ T27] audit: type=1800 audit(1574186396.464:92): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17041 res=0 17:59:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10000, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r3 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x7ff, 0x0, 0x1, 0x5, 0x400, 0x7, 0x8, 0x1}) [ 1629.085917][ T3375] overlayfs: missing 'lowerdir' [ 1629.125765][ T3375] overlayfs: missing 'lowerdir' 17:59:56 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xa7) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getsockname$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:56 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6000000) 17:59:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1629.366879][ T3606] overlayfs: missing 'lowerdir' [ 1629.416525][ T3612] overlayfs: missing 'lowerdir' 17:59:57 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='metHcopy=on,\x00']) [ 1629.617346][ T3723] overlayfs: unrecognized mount option "metHcopy=on" or missing value 17:59:57 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d657439360fea719d1c9c5b5bd7915e"]) 17:59:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xffff, 0x5}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r4, 0x3}, &(0x7f0000000240)=0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:57 executing program 0: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r3}) sched_setaffinity(r3, 0x31f, &(0x7f0000000500)) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) stat(&(0x7f0000000540)='./bus/file0\x00', &(0x7f0000000640)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x28100) socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$xdp(0x2c, 0x3, 0x0) r5 = open(0x0, 0x0, 0x0) getdents64(r5, 0x0, 0x600) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) lstat(&(0x7f0000000080)='./control\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000d2b9e79d54d4", @ANYRES32, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000001400", @ANYBLOB, @ANYRES32, @ANYRES32], 0x79, 0x4040040}, 0x4000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0x0, 0x0, 0xee01}, 0xa99, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) socket(0x200000000000011, 0x4000000000080002, 0x0) socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r10 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r11 = socket(0x80000000000000a, 0x2, 0x0) accept4$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r12 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) socket(0x1e, 0x1, 0x0) close(0xffffffffffffffff) r13 = open(&(0x7f0000000080)='./bus\x00', 0x141242, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$VIDIOC_ENUMINPUT(r13, 0xc050561a, 0x0) setsockopt$inet_mreqn(r13, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r14}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) poll(&(0x7f00000001c0)=[{}], 0x1, 0x7) 17:59:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x29, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0xfffc, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:59:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) [ 1629.920179][ T27] audit: type=1800 audit(1574186397.404:93): pid=3549 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16564 res=0 [ 1629.940245][ T3734] overlayfs: unrecognized mount option "met96êqœ[[ב^" or missing value 17:59:57 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) sendto(r0, &(0x7f0000000000)="6a84a87ff55f36565298b28110a1832e3c4b568fce", 0x15, 0x400c841, &(0x7f0000000040)=@l2={0x1f, 0x100, {0x1, 0x0, 0x40, 0x7f, 0x5, 0x60}, 0x101, 0x80}, 0x80) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 17:59:57 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xa000000) [ 1630.322096][ T3836] overlayfs: missing 'lowerdir' 17:59:57 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362ee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xad, 0x5, 0x0, 0xff, 0x0, 0x0, 0x6279158f2132ed22, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x6, @perf_bp={&(0x7f0000000000), 0x8}, 0x20, 0x7, 0x0, 0x3, 0x1, 0x7, 0x4}, r1, 0x8, r0, 0x8) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f00000003c0)={0x20, 0x18aca8f1d2bdc531, &(0x7f00000002c0)="e237dde215def6b9e095ac30a6bf579109482e1f13961f17ebb163", {0x8, 0x6, 0x30383653, 0x8, 0x7fff, 0x0, 0xc, 0x9b4}}) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c3b0150989f69a98b2e3a66696c6530"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:57 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xfd98, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x3031fa431d0e4588) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1630.540035][ T3974] overlayfs: missing 'lowerdir' 17:59:58 executing program 0: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r3}) sched_setaffinity(r3, 0x31f, &(0x7f0000000500)) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) stat(&(0x7f0000000540)='./bus/file0\x00', &(0x7f0000000640)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x28100) socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$xdp(0x2c, 0x3, 0x0) r5 = open(0x0, 0x0, 0x0) getdents64(r5, 0x0, 0x600) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) lstat(&(0x7f0000000080)='./control\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000d2b9e79d54d4", @ANYRES32, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000001400", @ANYBLOB, @ANYRES32, @ANYRES32], 0x79, 0x4040040}, 0x4000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0x0, 0x0, 0xee01}, 0xa99, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) socket(0x200000000000011, 0x4000000000080002, 0x0) socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r10 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r11 = socket(0x80000000000000a, 0x2, 0x0) accept4$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r12 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) socket(0x1e, 0x1, 0x0) close(0xffffffffffffffff) r13 = open(&(0x7f0000000080)='./bus\x00', 0x141242, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$VIDIOC_ENUMINPUT(r13, 0xc050561a, 0x0) setsockopt$inet_mreqn(r13, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r14}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) poll(&(0x7f00000001c0)=[{}], 0x1, 0x7) [ 1630.615198][ T3975] overlayfs: missing 'lowerdir' 17:59:58 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000023) [ 1630.646290][ T3972] overlayfs: unrecognized mount option "l;P˜Ÿi©‹.:file0" or missing value 17:59:58 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0xb, 0x4, &(0x7f0000000940)=[{&(0x7f0000000740)="18380fe9834b1127896bfb06208c474a7ac06fb3906adb8ab22502116bb30c2dd84449d83ce7e2654e0a0af550ea271a8a50e8938b15e1e2778567118db80a8a760c82351e5630f5caf3607ba639fef18a0bbd68c4e2f34f98a3d2339d6b87a50f3497b2b7a88e0df7746023a9409fcf278c7944", 0x74, 0x5}, {&(0x7f00000009c0)="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", 0x168}, {&(0x7f0000000800)="f8716d2955db0a06a6158ef7818a99c0e15e096eae02498968713e0c53c6e03ab15dadf74c37a00dfcca9e9c41906fa97213d0d40e054dd1d2db505f0e59c55e265eb2329cf4d6623b9683c67fd41912c375c00768f20b888aa738945cdf16b2e60d78ffa1eefb271a18b873ec8192b77cf879d851befc35ac7213631f65b7fac1e78dabc581407d6571d1a44a616d10850de4d21e63446810b03e61b589195b3e7539370f960162", 0xa8, 0x7b07}, {&(0x7f00000008c0)="f297b7bd7bcc60cbeb2618bdbfb47a3b306e432989b72672ae9a62c83f4f7a28c5db4becd66a492ef93623d9727bea7fdb72fe89deac9e1e2291c78065e295e4982c932e4e7c6d587dc068785daf51f979", 0x51, 0x2}], 0x40, &(0x7f0000000480)='Oveplay\x00') lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x40000) 17:59:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f7765726469ec1c2e3a66696c6530"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x5, 0x400400) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000640)={0x1000, ""/4096}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000580)) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x3b76acba82d3e765}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x6, "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", 0x0, 0x3f, 0x40, 0x6, 0xff, 0x20, 0xff, 0x1}, r6}}, 0x128) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x6, 0x1000, 0x43, &(0x7f0000000000)="b078733ba41f1cfc02535c318aa0227916a3b4c177971bfc050cecf3e716a9486e4cb6504a161ebcc15f33d91596a6f16a22990197a7a2f4e2db357e28adc6e42d1083", 0xba, 0x0, &(0x7f00000001c0)="047a09b26ae5eec1efe48d30db63c85339526a6e4db384cdddd4dfbbc7176cd22d4ffb258a702445e8a989f8b9485d72ade9ac4587d10dab72b7531d81255fa57335591ae3c1d809423187d9922dca926670e8683d1aab853a58844faa055f34b5fa7b56fbed2b542d6e9abcc3a3282b46658dec444d38d95cba7358d83ff371ea73179fa3b9912f435581cc85044f80f3a0a774be8e16f488d7b7c4716838c67c929ee758c9538e47b267a52063ae7b8b31e36e6c10ea55e5aa"}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setownex(r3, 0xf, &(0x7f00000005c0)={0x0, r7}) fcntl$setstatus(r0, 0x4, 0x2000) [ 1630.939769][ T4091] overlayfs: missing 'lowerdir' [ 1631.034637][ T4098] overlayfs: missing 'lowerdir' 17:59:58 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6d547461636f70793d006e2cf0"]) 17:59:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x20, @mcast2, 0x9}, 0x1c) 17:59:58 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc000000) 17:59:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c6c911365726469723d2e3a66696c6530371bf3f2bdb7b68805a198537479887c78759870c5f6b221a1e81d12b5ea38a305b75be38f9c1ad95199edcfff66e319b23b603695bc69cad1a157ac57a9816b01e2e4a3e89849d6140373d744de7083654652d62141a1160e7a4adc99b6e1e5833fc72d8c59daf19e94b6998cc07a7abf746c978dd1c9edafe195271b82"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:58 executing program 0: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r3}) sched_setaffinity(r3, 0x31f, &(0x7f0000000500)) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) stat(&(0x7f0000000540)='./bus/file0\x00', &(0x7f0000000640)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x28100) socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$xdp(0x2c, 0x3, 0x0) r5 = open(0x0, 0x0, 0x0) getdents64(r5, 0x0, 0x600) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) lstat(&(0x7f0000000080)='./control\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000d2b9e79d54d4", @ANYRES32, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000001400", @ANYBLOB, @ANYRES32, @ANYRES32], 0x79, 0x4040040}, 0x4000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0x0, 0x0, 0xee01}, 0xa99, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) socket(0x200000000000011, 0x4000000000080002, 0x0) socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r10 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r11 = socket(0x80000000000000a, 0x2, 0x0) accept4$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r12 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) socket(0x1e, 0x1, 0x0) close(0xffffffffffffffff) r13 = open(&(0x7f0000000080)='./bus\x00', 0x141242, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$VIDIOC_ENUMINPUT(r13, 0xc050561a, 0x0) setsockopt$inet_mreqn(r13, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r14}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) poll(&(0x7f00000001c0)=[{}], 0x1, 0x7) [ 1631.344004][ T4308] overlayfs: unrecognized mount option "mTtacopy=" or missing value 17:59:58 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x20c) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d657461636fa66129bacb3888269bbef66ac0cdf6bd4eb9e2ae1a26c3dc02e85894fbee58863b7fec3fe7ade0abbb46bc4ac99bf98ef6299069cef5516ebe371cd211859f1a1bc2e09adbcbbc3554652864f380354f5aa725e01d0c884d13d4f2f7b3caf9cb"]) [ 1631.464448][ T27] audit: type=1800 audit(1574186398.954:94): pid=4077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17272 res=0 17:59:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x5111, 0x0) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$TCXONC(r3, 0x540a, 0x1) sendfile(r0, r2, 0x0, 0x800000000024) 17:59:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x10, r2, 0x51660000) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="12a8eed3c80081a0bdb12172415ab4244cb8267f85777a03df362100d9c2eba196140e6ddb1226df8d9a71cc756bc9190b5f080b2f2fbd1dec3f33c90e4f4f322a90db0df8c5021d9178df6281f593d12d1924fe74a6971b2f6d63046fd0a1a8eb70aacd4adcaa", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x80010}, 0x40) [ 1631.525845][ T4384] overlayfs: unrecognized mount option "l‘erdir=.:file07óò½·¶ˆ¡˜Styˆ|xu˜pÅö²!¡èµê8£·[ãœÙQ™íÏÿfã²;`6•¼iÊÑ¡W¬W©kâä£è˜IÖs×DÞpƒeFRÖ!A¡zJÜ™¶áåƒ?Ç-ŒYÚñž”¶™ŒÀzz¿tl—ÑÉí¯á•'‚" or missing value [ 1631.608997][ T4457] overlayfs: unrecognized mount option "metaco¦a)ºË8ˆ&›¾öjÀÍö½N¹â®&ÃÜèX”ûîX†;ì?ç­à«»F¼JÉ›ùŽö)iÎõQn¾7Ò…ŸÂàšÛ˼5Te(dó€5OZ§%à ˆMÔò÷³ÊùË" or missing value 17:59:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x0, 0x44) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000240)=0x54) write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x8, 0x3, 0x1}}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000340)) 17:59:59 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6574616b6f70793d6f6e2c0091efe4af0beb6a19273e95877e77de0bebee74492fa5b0f76295d2392fee3803febe107add03ab43c6b91d8fa45976a1eeb97f8eeaeeae8a2862e954919c807d904579953735d5940844323c4bc8876a4a26f0468c"]) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1) 17:59:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x600, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x449, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x7f) setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1631.986870][ T4640] overlayfs: unrecognized mount option "metakopy=on" or missing value [ 1632.048897][ T4640] overlayfs: unrecognized mount option "metakopy=on" or missing value 17:59:59 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='metacopy=o,\x00\x00']) 17:59:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7774}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f00000002c0)={0x7fff, 0x7}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c6c6f776572646972a9cb3d263a66696c6530"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 17:59:59 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xe000000) 17:59:59 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @empty}, {0x4000030000000304, @random="6c21355111a4"}, 0x4, {0x2, 0x0, @remote}, '\xecJ\x00\x965\x00'}) [ 1632.284331][ T27] audit: type=1800 audit(1574186399.774:95): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17271 res=0 [ 1632.287850][ T4842] overlayfs: unrecognized mount option "lowerdir©Ë=&:file0" or missing value [ 1632.352727][ T4857] overlayfs: unrecognized mount option "metacopy=o" or missing value 17:59:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000400)=0x5a16) r3 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r3, 0x2007fff) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r5 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r8 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@authinfo={0x18, 0x84, 0x6, {0x9}}], 0x18}, 0x44) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000080)={0x4, 0xa83, 0x5, 0x0, 0x0, [{r5, 0x0, 0x6}, {r6}, {r1, 0x0, 0x6}, {r7, 0x0, 0x9}, {r8, 0x0, 0xffffffffffffffff}]}) sendfile(r0, r3, 0x0, 0x800000000024) 17:59:59 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) lstat(0x0, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x4, 0x8, 0x1, 0x8, 0x1}) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x4a015, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 18:00:00 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 18:00:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x110, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39f2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd744}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x8022) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7ff15e4736f21a7c92010030ffffffe800"/26]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) fcntl$dupfd(r1, 0xc0a, r3) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 18:00:00 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x44680, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet(0x2, 0x2, 0x94) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) sendmsg$inet_sctp(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@local, @remote}, 0x8) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 18:00:00 executing program 0: restart_syscall() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x1420000a74, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 1632.865570][ T4987] overlayfs: missing 'lowerdir' 18:00:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f0000000440)="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") connect$inet6(r1, &(0x7f0000000400)={0xa, 0xfffc, 0x3, @loopback}, 0xfffffffffffffddc) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x4e22, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x17}, 0x1c) [ 1632.938549][ T4998] IPv6: Can't replace route, no match found 18:00:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='+cpu Vmids +rdma }io +cpu \x00'/38], 0x26) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x3, 0x80}, 0x8) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='pstore\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2c6c6f7765726469723d2c3a66696c6530ff1b2a20e96769cc22eee209f6d5400d00fa9c1f02cc267f4530040ad806ef481be84450e733b53f0489dfde9a5924df90ede6ac2ec17e21e350b62fe51f381f22a6881427aa2ebc2bf20c61213bd7b87cfd9c8b7f229b9eae0a338772a018105fce"]) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r6, 0x5111, 0x0) pipe2$9p(&(0x7f0000000440), 0x80800) 18:00:00 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f0000002740)={&(0x7f0000000040)=@l2, 0x80, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/232, 0xe8}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x7, &(0x7f0000002640)=""/227, 0xe3}, 0x40) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000002780)=0xa010, 0x4) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1633.016945][ T5075] IPv6: Can't replace route, no match found [ 1633.139258][ T5102] overlayfs: missing 'lowerdir' 18:00:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr\x00\x00\x10\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) 18:00:00 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf000000) [ 1633.172338][ T27] audit: type=1800 audit(1574186400.654:96): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16593 res=0 18:00:00 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0x7, 0x3ff, 0x7f5, 0x400, 0x3, 0x980090, r2}) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6d657475b6cce45341453bbc67"]) 18:00:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4200, r1, 0x20, 0x1) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x2, 0x3, 0x2, 0x3, 0x100}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 18:00:00 executing program 4: setxattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f00000001c0)='wlan1+\xd0}wlan0\x00', 0xe, 0x2) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r4, r3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="8c500c0a321f7cf757626559fb272ee293c029edbe89f08233e2fcbfb32340193c3e573428561260429008000000cb6200f295f6802c6e692e65805377d0c89600331c575f44245bb6e8b8a2cd7cb2e49847753d40458910fb33766b49d52de505cc49c32112a40c939a85d9fe58ea0e1565fe179b976d9e03443354ef1022431bb9e49d8b8c1b8d994783adcb5baed33abe1710774b740200cf820cdfd081796fb93f050e5aacc1f451665dc37deb09baa4f4a2a73cf11a471ba24cc86b3f00"/215, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r6, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x61}]}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r6, 0x7, 0x100, 0x4, 0x5, 0x81}, &(0x7f0000000040)=0x14) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000500)={{0x9b, 0xf8}, 'port1\x00', 0x12, 0x80008, 0x4, 0x7f, 0x8, 0x6, 0x4, 0x0, 0x2, 0x3}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r7 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r0, r7, 0x0, 0x800000000024) [ 1633.446141][ T5244] overlayfs: unrecognized mount option "metu¶ÌäSAE;¼g" or missing value 18:00:01 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x6000}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x7}}], [{@euid_lt={'euid<', r1}}, {@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) 18:00:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xffff, 0x5}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r4, 0x3}, &(0x7f0000000240)=0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 18:00:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x2000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3822002e3200050700"/20, @ANYRES32=r7, @ANYBLOB="80000000000000001800000cffff0000000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000014100100000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000200e000000114000600ffffff7f0400"/28], 0x34}}, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000400)) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000003c0)={@local, 0x4b, r7}) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='X', 0x1, 0xffffffffffffffff) 18:00:01 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x992, 0x80, 0x6}) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1633.967941][ T5438] overlayfs: missing 'lowerdir' 18:00:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r1, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 1634.037185][ T5439] overlayfs: missing 'lowerdir' 18:00:01 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='metacopy5on,\x00']) 18:00:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xffff, 0x5}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r4, 0x3}, &(0x7f0000000240)=0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 18:00:01 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x10000000) [ 1634.166634][ T27] audit: type=1800 audit(1574186401.654:97): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16486 res=0 18:00:01 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x8) r2 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r2, 0x2007fff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x800000000024) 18:00:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, 0x0, &(0x7f0000000180)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x5111, 0x0) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000002c0)=0x4, &(0x7f00000003c0)=0x2) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) fcntl$dupfd(r5, 0x0, r5) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8) bind(0xffffffffffffffff, &(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x1, 0xf8, 0x80, "9309d02cb3f0721d8eda5a624f72a337cda526083c081b7971381b671265f2ec432b87d188ab6b2b4a42910d7865a1b0eb38a5bf375f9f170f2b7097cec6cf", 0x32}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1) [ 1634.256336][ T5548] overlayfs: unrecognized mount option "metacopy5on" or missing value 18:00:01 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="e930548ae7a80b1d07a26ae8215eb4fa704921c3", 0x14, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000200)=""/169, 0xa9) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d657461636f7079356f6e2c006ef61116b9966fcd80a38472ab28ce1af1a8b1d04b636149052bd59a3a5f0f884de103def3c06e9fbb24c2e6772fa1bec135674cfdfab47e9f68d6365c9dfbb2b5e706ce528330318191e786aa89947bf4ebbdf33ac9bf022f925ab7b205d50544889c78275540e55d77c35057c1eaaee5021d58f55ccf640b07ed094e22e5bb9f20ad8d9c2e717116dca8ae6b31c0e7bca052503e86f0a8ccf35b9b430045db4be69611fe1351736f7addc312887e3f4f8aaa16b8c8c9caf439f83aa82aa957513d8a0f5e06cf70"]) 18:00:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1634.598101][ T5662] overlayfs: unrecognized mount option "metacopy5on" or missing value 18:00:02 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5111, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0x5111, 0x0) ioctl$sock_proto_private(r5, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1634.837594][ T5771] overlayfs: missing 'lowerdir' 18:00:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r2 = dup2(r1, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x5, 0xb}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x6}], 0x1f9) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 18:00:02 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000140)={[{@metacopy_on='metacopy=on'}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise='appraise'}, {@obj_user={'obj_user', 0x3d, 'overlay\x00'}}]}) 18:00:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xfffffffffffffe38) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1634.998761][ T27] audit: type=1800 audit(1574186402.484:98): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17292 res=0 18:00:02 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) ioctl(r2, 0x3d13, &(0x7f0000000500)="81483064015f99fabd3b587a1ec444b4d44939d24cd362834789d158ad415c8779d1896bbcaabae1333ee7f5c5d62fe0ddf9c5ec7560cac3896841c07371afa24a39f3341e6f6bd3b70129fb868531118202d13bf019a256d28c6b272e759014681a5b7dd6b8cf772b11ef778bf02ad8b1ccd4417968568e8f2c94413b3ea6a6b8950b7dee04efdc") r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) read(r3, &(0x7f0000000000)=""/129, 0x81) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000400)=0x8) r6 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r0, r6, 0x0, 0x800000000024) 18:00:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r0, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 18:00:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 18:00:02 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r6, @ANYBLOB="ecff12000040"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3f000000) [ 1635.150317][ T5815] overlayfs: unrecognized mount option "fowner=00000000000000000000" or missing value [ 1635.279209][ T5925] overlayfs: unrecognized mount option "fowner=00000000000000000000" or missing value 18:00:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x5111, 0x0) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={r3, 0xfffffffd}, &(0x7f00000002c0)=0x8) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 18:00:02 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)={[{@metacopy_on='metacopy=on'}]}) [ 1635.535874][ T6086] overlayfs: missing 'lowerdir' [ 1635.558570][ T6106] overlayfs: missing 'lowerdir' 18:00:03 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x8200) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d3d0014f9ffffff00000000005213b56a616bf096b47ad45e751780e3cf3642b43c231092fc2596924a9f9b9ce0"]) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f00000002c0)="cacd8332efe2a0fc50acf3f71f9fc32de5aa26bbc2ed17390bc12ac36d307f4246c3297df1131e5346f9ca95d2944839a8f9f73b3a141ef730bb4ffb702fdd992b1dd1c2bdb5fbc58808a2f2ffd4c46c8a24767bd7413433b7dacb559bcc5bcdb395ba9d68876e0d7b40bb721f966dfefe21d2341998581e61049c88e52906dffcf9727f5b6dd5c650") ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) 18:00:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) 18:00:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r2 = socket$inet(0x2, 0x2000080001, 0x84) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000003c0)={{0x3f, 0x9, 0x4, 0x80, 0x8, 0x80}, 0x7ff, 0x1f, 0x8000, 0x6, 0x9, "916c4a793dbae7f90852e44d58974866dc3586744d20b32813deb2b7741a9b72bf9656f8184bad3361adcf05cf0c4669d1d77f25980a8c6bae9522687bda93353bfa617eab89130af997d60187f6a45e19f7a9824f79494d02386aec241983c65d60af168e2717e5700b79965e67bb8d307b53f0c2fa4b47a748c5edb4f33cf9"}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r3 = fcntl$dupfd(r1, 0x2ea5dfb71fe0e52a, r2) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000240)=0x8) r4 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x80) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x1}, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, 0x0, &(0x7f0000000180)) ioctl$TCSBRK(r0, 0x5409, 0x9) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f1b79e070985b01893a66696c6530"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1635.779003][ T6213] overlayfs: unrecognized mount option "m=" or missing value [ 1635.838431][ T6213] overlayfs: unrecognized mount option "m=" or missing value 18:00:03 executing program 2: socket$inet(0x2, 0x8, 0x7f) ioctl$KDGKBLED(0xffffffffffffffff, 0x5111, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) iopl(0x3) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) fcntl$dupfd(r0, 0x0, r1) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02f1ff5c50e1c5e0d399a001067cac733c487bcc4d8208d0b2b8e9eac462"], 0xf, 0x1) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000240)={0x5, r3}) bind(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x10000, &(0x7f0000000000)) 18:00:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4, 0x20000) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setown(r0, 0x8, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r2, 0x29, 0x40, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) fcntl$setstatus(r2, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 18:00:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x32f362f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0xffff0c70}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)) [ 1636.034229][ T6216] overlayfs: unrecognized mount option "loyàp˜[‰:file0" or missing value [ 1636.105824][ T6297] kasan: CONFIG_KASAN_INLINE enabled [ 1636.111159][ T6297] kasan: GPF could be caused by NULL-ptr deref or user memory access