0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0], 0x1) 03:33:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffffffffffffff01, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000080)) write$9p(r3, &(0x7f0000000180)="7d2cf51a772781ce1399d6bca26db7827c27577d2b261e10805944a8e0333381a4373c019ac07edeef8dedf7bb6b38eb80c9ebc2a98633c60fddde05ff8dcff9f0e78b1888f2472e2b", 0x49) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x100000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x200000000000, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000300)={[], 0x0, 0x4}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b1) [ 1481.244071][ T6990] overlayfs: unrecognized mount option "me [ 1481.244071][ T6990] acopy=on" or missing value 03:33:20 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setxattr$security_evm(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@md5={0x1, "cb3d35d158b8950357b0e9ff827955a0"}, 0x11, 0x3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x480000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000006c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}, 0x25}]}}) [ 1481.339017][ T6997] overlayfs: unrecognized mount option "me [ 1481.339017][ T6997] acopy=on" or missing value [ 1481.446199][ T7002] 9p: Unknown access argument 00000000000000000000% 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='me%acopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0x5, 0x5, [], &(0x7f0000000140)=0x6}) r3 = dup2(r0, r1) read(r0, 0x0, 0xffffffe3) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') dup2(r1, r4) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b2) [ 1481.901252][ T7023] overlayfs: unrecognized mount option "me%acopy=on" or missing value [ 1481.995679][ T7029] overlayfs: unrecognized mount option "me%acopy=on" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001) semtimedop(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='me,acopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x800, 0x40) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) semtimedop(0xffffffffffffffff, &(0x7f0000000780)=[{}], 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b3) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x8100) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f00000000c0)={{0x0, @addr=0x491}, "66d39db4ce753dfc7a15aca2f01be9fc4ead635be4f627756f0527d67b958d7a"}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0], 0x1) [ 1482.283934][ T7052] overlayfs: unrecognized mount option "me" or missing value 03:33:20 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0xb0241, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) seccomp(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000180)={0x8, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1c2) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x154) pread64(r2, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) r3 = getuid() ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000001400)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x9, 0x1, &(0x7f0000000240)=[{&(0x7f00000012c0)="7e9cdf7ba3e834a7f5adf9ac625d205f9ed3b4378541f71a92f259ae8b81bd555a0420b1f43dcbee7fb490caa7b275f4f25894194ae570e885c847c37e4f0521b1e3070c5e39a591a0f2564552490553cfdbca3c5869db60aa965adda1ebc99e6b0c05abaebdcee992e94a0ea086dd1ca85bf51e6dd688639476900a1617590d064483fb35286281fc7ed4f8", 0x8c, 0x800}], 0x40002, &(0x7f0000001380)={[{@errors_remount='errors=remount-ro'}, {@uid={'uid', 0x3d, r3}}], [{@dont_measure='dont_measure'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 1482.379517][ T7059] overlayfs: unrecognized mount option "me" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='me\\acopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: socketpair$unix(0x1, 0x4000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f0000000500), &(0x7f0000000540)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x8) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xa01, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000080)) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x20000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000160000,user_id=', @ANYRESDEC=r6, @ANYBLOB="2c674380b6452dd62b5b60d3b304390000000000000000000000", @ANYRESDEC=r7, @ANYBLOB=',blksize=0x0000000000001400,default_permissions,blksize=0x0000000000000600,max_read=0x0000000000000003,blksize=0x0000000000000c00,default_permissions,smackfsroot=],appraise,rootcontext=staff_u,\x00']) recvmmsg(r2, &(0x7f000030efc4)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:33:20 executing program 1 (fault-call:15 fault-nth:0): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b4) [ 1482.953501][ T7084] overlayfs: unrecognized mount option "me\acopy=on" or missing value [ 1482.969123][ T7085] FAULT_INJECTION: forcing a failure. [ 1482.969123][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.045683][ T7091] overlayfs: unrecognized mount option "me\acopy=on" or missing value [ 1483.059314][ T7085] CPU: 1 PID: 7085 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1483.067916][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.077978][ T7085] Call Trace: [ 1483.081303][ T7085] dump_stack+0x1db/0x2d0 [ 1483.085653][ T7085] ? dump_stack_print_info.cold+0x20/0x20 [ 1483.091404][ T7085] should_fail.cold+0xa/0x14 [ 1483.096026][ T7085] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1483.101849][ T7085] ? ___might_sleep+0x1e7/0x310 [ 1483.106736][ T7085] ? arch_local_save_flags+0x50/0x50 [ 1483.112047][ T7085] __should_failslab+0x121/0x190 [ 1483.117003][ T7085] should_failslab+0x9/0x14 [ 1483.121522][ T7085] kmem_cache_alloc+0x2be/0x710 [ 1483.126384][ T7085] ? mark_held_locks+0xb1/0x100 [ 1483.131261][ T7085] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1483.137534][ T7085] mmu_topup_memory_caches+0x97/0x490 [ 1483.142920][ T7085] kvm_mmu_load+0x21/0x1200 [ 1483.147434][ T7085] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1483.153705][ T7085] ? check_preemption_disabled+0x48/0x290 [ 1483.159439][ T7085] vcpu_enter_guest+0x3f0e/0x6520 [ 1483.164481][ T7085] ? emulator_read_emulated+0x50/0x50 [ 1483.171441][ T7085] ? add_lock_to_list.isra.0+0x450/0x450 [ 1483.177077][ T7085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1483.183322][ T7085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1483.189667][ T7085] ? check_preemption_disabled+0x48/0x290 [ 1483.195414][ T7085] ? __lock_is_held+0xb6/0x140 [ 1483.200188][ T7085] ? lock_acquire+0x1db/0x570 [ 1483.204872][ T7085] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1483.210601][ T7085] ? lock_release+0xc40/0xc40 [ 1483.215283][ T7085] ? kvm_gen_update_masterclock+0x380/0x380 [ 1483.221184][ T7085] ? rcu_sync_dtor+0x170/0x170 [ 1483.225974][ T7085] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1483.231537][ T7085] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1483.237325][ T7085] kvm_vcpu_ioctl+0x558/0x12d0 [ 1483.242099][ T7085] ? kvm_vcpu_block+0x1010/0x1010 [ 1483.247138][ T7085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1483.253388][ T7085] ? lock_downgrade+0x910/0x910 [ 1483.258240][ T7085] ? kasan_check_read+0x11/0x20 [ 1483.263108][ T7085] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1483.269092][ T7085] ? rcu_read_unlock_special+0x380/0x380 [ 1483.274739][ T7085] ? __fget+0x49a/0x710 [ 1483.278923][ T7085] ? ksys_dup3+0x660/0x660 [ 1483.283375][ T7085] ? kvm_vcpu_block+0x1010/0x1010 [ 1483.288401][ T7085] do_vfs_ioctl+0x107b/0x17d0 [ 1483.293084][ T7085] ? wait_for_completion+0x810/0x810 [ 1483.298379][ T7085] ? ioctl_preallocate+0x2f0/0x2f0 [ 1483.303500][ T7085] ? __fget_light+0x2db/0x420 [ 1483.308211][ T7085] ? fget_raw+0x20/0x20 [ 1483.312383][ T7085] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1483.318626][ T7085] ? fput+0x128/0x1a0 [ 1483.322616][ T7085] ? do_syscall_64+0x8c/0x800 [ 1483.327641][ T7085] ? do_syscall_64+0x8c/0x800 [ 1483.332325][ T7085] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1483.337617][ T7085] ? security_file_ioctl+0x93/0xc0 [ 1483.342788][ T7085] ksys_ioctl+0xab/0xd0 [ 1483.346964][ T7085] __x64_sys_ioctl+0x73/0xb0 [ 1483.351559][ T7085] do_syscall_64+0x1a3/0x800 [ 1483.356163][ T7085] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1483.361802][ T7085] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1483.367530][ T7085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1483.373094][ T7085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1483.378996][ T7085] RIP: 0033:0x457ec9 [ 1483.382917][ T7085] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1483.402518][ T7085] RSP: 002b:00007f36672e0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1483.410931][ T7085] RAX: ffffffffffffffda RBX: 00007f36672e0c90 RCX: 0000000000457ec9 [ 1483.418908][ T7085] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1483.426880][ T7085] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.434864][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36672e16d4 [ 1483.442837][ T7085] R13: 00000000004c0e36 R14: 00000000004d28d8 R15: 0000000000000008 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000000c0)={0x26, "7d63e61eefbd5bdfb8c1887ad69384ddc00f0c478eabe59e3f03ec848a38950bfd7f47bc359f828e35d19ff9f9e93dccfe93cc0e4c4d8b2d38fc777c706d49a4213e8272d9f4dc113a2e3f09f3b2de42134bc9329b6c4b66ed9ee38839bee0ff2c5b350f2e4a4bc13b88c349c66762799554e65010e5107f351a131372d6a9d0"}) mprotect(&(0x7f000037d000/0x2000)=nil, 0x2000, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x194) mlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x989680}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='met\ncopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r0, 0xf) [ 1483.733689][ T7107] overlayfs: unrecognized mount option "met [ 1483.733689][ T7107] copy=on" or missing value 03:33:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d60cfebd5b78b3bd75a95adb406132a9f447fea777bd4c74a5983f182b11f69237c3fe3180ead3702523fd8e21da7b006aa883e272b1e3ade9ec79bea709ce70a41e64ec5c770fa96f35c0c29f100000000000000"], 0x1) ioctl$int_in(r0, 0xc0045005, &(0x7f00000004c0)=0x200026f6) [ 1483.817033][ T7115] overlayfs: unrecognized mount option "met [ 1483.817033][ T7115] copy=on" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='met%copy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b5) 03:33:20 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x80000) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x104967ea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) [ 1484.117068][ T7131] overlayfs: unrecognized mount option "met%copy=on" or missing value [ 1484.216853][ T7138] overlayfs: unrecognized mount option "met%copy=on" or missing value 03:33:20 executing program 1 (fault-call:15 fault-nth:1): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='met,copy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1484.397131][ T7144] FAULT_INJECTION: forcing a failure. [ 1484.397131][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.417103][ T7144] CPU: 1 PID: 7144 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1484.425699][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.435764][ T7144] Call Trace: [ 1484.439068][ T7144] dump_stack+0x1db/0x2d0 [ 1484.443432][ T7144] ? dump_stack_print_info.cold+0x20/0x20 [ 1484.449157][ T7144] ? percpu_ref_put_many+0x129/0x270 [ 1484.454467][ T7144] should_fail.cold+0xa/0x14 [ 1484.459097][ T7144] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1484.464918][ T7144] ? ___might_sleep+0x1e7/0x310 [ 1484.469784][ T7144] ? arch_local_save_flags+0x50/0x50 [ 1484.475099][ T7144] __should_failslab+0x121/0x190 [ 1484.480050][ T7144] should_failslab+0x9/0x14 [ 1484.484562][ T7144] kmem_cache_alloc+0x2be/0x710 [ 1484.489421][ T7144] ? __lock_acquire+0x572/0x4a10 [ 1484.494370][ T7144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1484.500649][ T7144] mmu_topup_memory_caches+0x97/0x490 [ 1484.506034][ T7144] kvm_mmu_load+0x21/0x1200 [ 1484.510538][ T7144] ? mark_held_locks+0x100/0x100 [ 1484.515353][ T7151] overlayfs: unrecognized mount option "met" or missing value [ 1484.515486][ T7144] ? lock_release+0xc40/0xc40 [ 1484.527609][ T7144] ? mark_held_locks+0x100/0x100 [ 1484.532556][ T7144] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1484.538837][ T7144] vcpu_enter_guest+0x3f0e/0x6520 [ 1484.543906][ T7144] ? emulator_read_emulated+0x50/0x50 [ 1484.549292][ T7144] ? add_lock_to_list.isra.0+0x450/0x450 [ 1484.554934][ T7144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1484.561218][ T7144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1484.567482][ T7144] ? check_preemption_disabled+0x48/0x290 [ 1484.573224][ T7144] ? __lock_is_held+0xb6/0x140 [ 1484.578010][ T7144] ? lock_acquire+0x1db/0x570 [ 1484.582699][ T7144] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1484.588431][ T7144] ? lock_release+0xc40/0xc40 [ 1484.593115][ T7144] ? kvm_gen_update_masterclock+0x380/0x380 [ 1484.599026][ T7144] ? rcu_sync_dtor+0x170/0x170 [ 1484.603806][ T7144] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1484.609356][ T7144] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1484.615111][ T7144] kvm_vcpu_ioctl+0x558/0x12d0 [ 1484.619891][ T7144] ? kvm_vcpu_block+0x1010/0x1010 [ 1484.624919][ T7144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1484.631198][ T7144] ? lock_downgrade+0x910/0x910 [ 1484.636056][ T7144] ? kasan_check_read+0x11/0x20 [ 1484.640919][ T7144] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1484.646951][ T7144] ? rcu_read_unlock_special+0x380/0x380 [ 1484.652606][ T7144] ? __fget+0x49a/0x710 [ 1484.656782][ T7144] ? ksys_dup3+0x660/0x660 [ 1484.661215][ T7144] ? kvm_vcpu_block+0x1010/0x1010 [ 1484.666266][ T7144] do_vfs_ioctl+0x107b/0x17d0 [ 1484.670977][ T7144] ? wait_for_completion+0x810/0x810 [ 1484.676279][ T7144] ? ioctl_preallocate+0x2f0/0x2f0 [ 1484.681602][ T7144] ? __fget_light+0x2db/0x420 [ 1484.686314][ T7144] ? fget_raw+0x20/0x20 [ 1484.690482][ T7144] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1484.696843][ T7144] ? fput+0x128/0x1a0 [ 1484.700840][ T7144] ? do_syscall_64+0x8c/0x800 [ 1484.705526][ T7144] ? do_syscall_64+0x8c/0x800 [ 1484.710216][ T7144] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1484.715521][ T7144] ? security_file_ioctl+0x93/0xc0 [ 1484.720647][ T7144] ksys_ioctl+0xab/0xd0 [ 1484.724812][ T7144] __x64_sys_ioctl+0x73/0xb0 [ 1484.729416][ T7144] do_syscall_64+0x1a3/0x800 [ 1484.734033][ T7144] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1484.739677][ T7144] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1484.745412][ T7144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1484.750988][ T7144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1484.756899][ T7144] RIP: 0033:0x457ec9 [ 1484.760815][ T7144] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1484.780447][ T7144] RSP: 002b:00007f3667301c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1484.788880][ T7144] RAX: ffffffffffffffda RBX: 00007f3667301c90 RCX: 0000000000457ec9 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xfffffffffffffff7) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1484.796875][ T7144] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1484.804844][ T7144] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1484.813342][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36673026d4 [ 1484.821321][ T7144] R13: 00000000004c0e36 R14: 00000000004d28d8 R15: 0000000000000008 [ 1484.873365][ T7150] overlayfs: unrecognized mount option "met" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b6) 03:33:20 executing program 1 (fault-call:15 fault-nth:2): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0xbf, 0x6, 0x401}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x44, 0x1, 'client0\x00', 0x2, "e998e651674fcf3b", "a53492fb33035f7b4bf6dd43492d301671362ec4a04c5187f6aab9752c4f1537", 0x400, 0x80}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20000000000000a, &(0x7f0000000080)=0x2008, 0x4) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x80000) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4004e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='met\\copy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1485.095718][ T7170] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1485.200280][ T7179] overlayfs: unrecognized mount option "met\copy=on" or missing value [ 1485.229338][ T7180] FAULT_INJECTION: forcing a failure. [ 1485.229338][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.274336][ T7185] overlayfs: unrecognized mount option "met\copy=on" or missing value [ 1485.300199][ T7180] CPU: 1 PID: 7180 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1485.308819][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.318898][ T7180] Call Trace: [ 1485.322231][ T7180] dump_stack+0x1db/0x2d0 [ 1485.326607][ T7180] ? dump_stack_print_info.cold+0x20/0x20 [ 1485.332345][ T7180] ? percpu_ref_put_many+0x129/0x270 [ 1485.337673][ T7180] should_fail.cold+0xa/0x14 [ 1485.342289][ T7180] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1485.348125][ T7180] ? ___might_sleep+0x1e7/0x310 [ 1485.353019][ T7180] ? arch_local_save_flags+0x50/0x50 [ 1485.358322][ T7180] __should_failslab+0x121/0x190 [ 1485.363284][ T7180] should_failslab+0x9/0x14 [ 1485.367801][ T7180] kmem_cache_alloc+0x2be/0x710 03:33:20 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0xb, 0x200000010000e) ioctl$int_in(r1, 0x8000008010500c, &(0x7f00000000c0)) r2 = fcntl$dupfd(r0, 0x0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x68) r3 = getpid() r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000380)=""/64, 0x40) ptrace$getsig(0x4202, r3, 0xffffffff, &(0x7f00000003c0)) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x6, 0x7ff}, {0x8001, 0x2}], r5}, 0x18, 0x2) sched_setscheduler(r3, 0x5, &(0x7f0000000080)) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) [ 1485.372689][ T7180] mmu_topup_memory_caches+0x97/0x490 [ 1485.378074][ T7180] kvm_mmu_load+0x21/0x1200 [ 1485.382593][ T7180] ? vcpu_enter_guest+0x68a/0x6520 [ 1485.387729][ T7180] vcpu_enter_guest+0x3f0e/0x6520 [ 1485.392797][ T7180] ? emulator_read_emulated+0x50/0x50 [ 1485.398169][ T7180] ? add_lock_to_list.isra.0+0x450/0x450 [ 1485.403801][ T7180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1485.410042][ T7180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1485.416325][ T7180] ? check_preemption_disabled+0x48/0x290 [ 1485.422074][ T7180] ? __lock_is_held+0xb6/0x140 [ 1485.426850][ T7180] ? lock_acquire+0x1db/0x570 [ 1485.431534][ T7180] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1485.437271][ T7180] ? lock_release+0xc40/0xc40 [ 1485.441953][ T7180] ? kvm_gen_update_masterclock+0x380/0x380 [ 1485.447854][ T7180] ? rcu_sync_dtor+0x170/0x170 [ 1485.452628][ T7180] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1485.458177][ T7180] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1485.463930][ T7180] kvm_vcpu_ioctl+0x558/0x12d0 [ 1485.468715][ T7180] ? kvm_vcpu_block+0x1010/0x1010 [ 1485.473798][ T7180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1485.480053][ T7180] ? lock_downgrade+0x910/0x910 [ 1485.484906][ T7180] ? kasan_check_read+0x11/0x20 [ 1485.489792][ T7180] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1485.495785][ T7180] ? rcu_read_unlock_special+0x380/0x380 [ 1485.501434][ T7180] ? __fget+0x49a/0x710 [ 1485.505613][ T7180] ? ksys_dup3+0x660/0x660 [ 1485.510043][ T7180] ? kvm_vcpu_block+0x1010/0x1010 [ 1485.515069][ T7180] do_vfs_ioctl+0x107b/0x17d0 [ 1485.515089][ T7180] ? wait_for_completion+0x810/0x810 [ 1485.515110][ T7180] ? ioctl_preallocate+0x2f0/0x2f0 [ 1485.515128][ T7180] ? __fget_light+0x2db/0x420 [ 1485.515147][ T7180] ? fget_raw+0x20/0x20 [ 1485.530183][ T7180] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1485.530203][ T7180] ? fput+0x128/0x1a0 [ 1485.530221][ T7180] ? do_syscall_64+0x8c/0x800 [ 1485.530238][ T7180] ? do_syscall_64+0x8c/0x800 [ 1485.530264][ T7180] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1485.530291][ T7180] ? security_file_ioctl+0x93/0xc0 [ 1485.569010][ T7180] ksys_ioctl+0xab/0xd0 [ 1485.573178][ T7180] __x64_sys_ioctl+0x73/0xb0 [ 1485.577789][ T7180] do_syscall_64+0x1a3/0x800 [ 1485.582390][ T7180] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1485.588034][ T7180] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1485.593781][ T7180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1485.599348][ T7180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1485.605259][ T7180] RIP: 0033:0x457ec9 [ 1485.609167][ T7180] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1485.628778][ T7180] RSP: 002b:00007f36672e0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1485.637192][ T7180] RAX: ffffffffffffffda RBX: 00007f36672e0c90 RCX: 0000000000457ec9 [ 1485.645167][ T7180] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1485.653140][ T7180] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.661110][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36672e16d4 [ 1485.669086][ T7180] R13: 00000000004c0e36 R14: 00000000004d28d8 R15: 0000000000000008 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta#opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b7) 03:33:20 executing program 1 (fault-call:15 fault-nth:3): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc) r1 = shmget(0x1, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/127) [ 1485.889513][ T7202] overlayfs: unrecognized mount option "meta#opy=on" or missing value 03:33:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) io_setup(0x3, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid'}}]}}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000100)={0x400, 0x9, 0x4, 0x7, [], [], [], 0x2, 0x7f5, 0x80, 0x2, "b2c3d8014cbf7c6025efda8b45515335"}) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x1, 0x4}}, 0x26) [ 1485.982929][ T7208] FAULT_INJECTION: forcing a failure. [ 1485.982929][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.017779][ T7215] overlayfs: unrecognized mount option "meta#opy=on" or missing value [ 1486.053974][ T7208] CPU: 1 PID: 7208 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1486.062585][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.072642][ T7208] Call Trace: [ 1486.075943][ T7208] dump_stack+0x1db/0x2d0 [ 1486.080298][ T7208] ? dump_stack_print_info.cold+0x20/0x20 [ 1486.086030][ T7208] ? percpu_ref_put_many+0x129/0x270 [ 1486.091338][ T7208] should_fail.cold+0xa/0x14 [ 1486.095937][ T7208] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1486.101752][ T7208] ? ___might_sleep+0x1e7/0x310 [ 1486.106618][ T7208] ? arch_local_save_flags+0x50/0x50 [ 1486.111932][ T7208] __should_failslab+0x121/0x190 [ 1486.116877][ T7208] should_failslab+0x9/0x14 [ 1486.116895][ T7208] kmem_cache_alloc+0x2be/0x710 [ 1486.116914][ T7208] ? mark_held_locks+0xb1/0x100 [ 1486.116928][ T7208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1486.116952][ T7208] mmu_topup_memory_caches+0x97/0x490 [ 1486.116973][ T7208] kvm_mmu_load+0x21/0x1200 [ 1486.116989][ T7208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1486.117008][ T7208] ? check_preemption_disabled+0x48/0x290 [ 1486.117033][ T7208] vcpu_enter_guest+0x3f0e/0x6520 [ 1486.131222][ T7208] ? emulator_read_emulated+0x50/0x50 [ 1486.131253][ T7208] ? add_lock_to_list.isra.0+0x450/0x450 [ 1486.175290][ T7208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.181543][ T7208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.181562][ T7208] ? check_preemption_disabled+0x48/0x290 [ 1486.181586][ T7208] ? __lock_is_held+0xb6/0x140 [ 1486.198317][ T7208] ? lock_acquire+0x1db/0x570 [ 1486.203004][ T7208] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1486.203026][ T7208] ? lock_release+0xc40/0xc40 [ 1486.203049][ T7208] ? kvm_gen_update_masterclock+0x380/0x380 [ 1486.219337][ T7208] ? rcu_sync_dtor+0x170/0x170 [ 1486.224125][ T7208] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1486.229687][ T7208] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1486.235435][ T7208] kvm_vcpu_ioctl+0x558/0x12d0 [ 1486.240217][ T7208] ? kvm_vcpu_block+0x1010/0x1010 [ 1486.245289][ T7208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.251548][ T7208] ? lock_downgrade+0x910/0x910 [ 1486.256416][ T7208] ? kasan_check_read+0x11/0x20 [ 1486.261404][ T7208] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1486.267401][ T7208] ? rcu_read_unlock_special+0x380/0x380 [ 1486.273059][ T7208] ? __fget+0x49a/0x710 [ 1486.277240][ T7208] ? ksys_dup3+0x660/0x660 [ 1486.281698][ T7208] ? kvm_vcpu_block+0x1010/0x1010 [ 1486.286737][ T7208] do_vfs_ioctl+0x107b/0x17d0 [ 1486.291438][ T7208] ? wait_for_completion+0x810/0x810 [ 1486.296742][ T7208] ? ioctl_preallocate+0x2f0/0x2f0 [ 1486.301878][ T7208] ? __fget_light+0x2db/0x420 [ 1486.306570][ T7208] ? fget_raw+0x20/0x20 [ 1486.310748][ T7208] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1486.317008][ T7208] ? fput+0x128/0x1a0 [ 1486.321008][ T7208] ? do_syscall_64+0x8c/0x800 [ 1486.325705][ T7208] ? do_syscall_64+0x8c/0x800 [ 1486.330402][ T7208] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1486.335701][ T7208] ? security_file_ioctl+0x93/0xc0 [ 1486.340830][ T7208] ksys_ioctl+0xab/0xd0 [ 1486.345005][ T7208] __x64_sys_ioctl+0x73/0xb0 [ 1486.349737][ T7208] do_syscall_64+0x1a3/0x800 [ 1486.354356][ T7208] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1486.360003][ T7208] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1486.365745][ T7208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1486.371325][ T7208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1486.377230][ T7208] RIP: 0033:0x457ec9 [ 1486.381162][ T7208] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1486.400778][ T7208] RSP: 002b:00007f36672e0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1486.409202][ T7208] RAX: ffffffffffffffda RBX: 00007f36672e0c90 RCX: 0000000000457ec9 [ 1486.417202][ T7208] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1486.425181][ T7208] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.433162][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36672e16d4 [ 1486.441141][ T7208] R13: 00000000004c0e36 R14: 00000000004d28d8 R15: 0000000000000008 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta%opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b8) 03:33:20 executing program 1 (fault-call:15 fault-nth:4): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1486.691013][ T7237] overlayfs: unrecognized mount option "meta%opy=on" or missing value [ 1486.726142][ T7231] FAULT_INJECTION: forcing a failure. [ 1486.726142][ T7231] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.796194][ T7231] CPU: 0 PID: 7231 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1486.804860][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.814944][ T7231] Call Trace: [ 1486.818285][ T7231] dump_stack+0x1db/0x2d0 [ 1486.822640][ T7231] ? dump_stack_print_info.cold+0x20/0x20 [ 1486.828376][ T7231] ? percpu_ref_put_many+0x129/0x270 [ 1486.833695][ T7231] should_fail.cold+0xa/0x14 [ 1486.838362][ T7231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1486.844192][ T7231] ? ___might_sleep+0x1e7/0x310 [ 1486.849058][ T7231] ? arch_local_save_flags+0x50/0x50 [ 1486.854370][ T7231] __should_failslab+0x121/0x190 [ 1486.859326][ T7231] should_failslab+0x9/0x14 [ 1486.863844][ T7231] kmem_cache_alloc+0x2be/0x710 [ 1486.868714][ T7231] ? mark_held_locks+0xb1/0x100 [ 1486.873580][ T7231] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1486.879841][ T7231] mmu_topup_memory_caches+0x97/0x490 [ 1486.885233][ T7231] kvm_mmu_load+0x21/0x1200 [ 1486.889774][ T7231] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1486.896033][ T7231] ? check_preemption_disabled+0x48/0x290 [ 1486.901777][ T7231] vcpu_enter_guest+0x3f0e/0x6520 [ 1486.906831][ T7231] ? emulator_read_emulated+0x50/0x50 [ 1486.912215][ T7231] ? add_lock_to_list.isra.0+0x450/0x450 [ 1486.917885][ T7231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.924137][ T7231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.930395][ T7231] ? check_preemption_disabled+0x48/0x290 [ 1486.936144][ T7231] ? __lock_is_held+0xb6/0x140 [ 1486.940923][ T7231] ? lock_acquire+0x1db/0x570 [ 1486.945617][ T7231] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1486.951359][ T7231] ? lock_release+0xc40/0xc40 [ 1486.956049][ T7231] ? kvm_gen_update_masterclock+0x380/0x380 [ 1486.961958][ T7231] ? rcu_sync_dtor+0x170/0x170 [ 1486.966747][ T7231] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1486.972314][ T7231] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1486.978063][ T7231] kvm_vcpu_ioctl+0x558/0x12d0 [ 1486.982846][ T7231] ? kvm_vcpu_block+0x1010/0x1010 [ 1486.987889][ T7231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.994147][ T7231] ? lock_downgrade+0x910/0x910 [ 1486.999012][ T7231] ? kasan_check_read+0x11/0x20 [ 1487.003881][ T7231] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1487.009879][ T7231] ? rcu_read_unlock_special+0x380/0x380 [ 1487.015539][ T7231] ? __fget+0x49a/0x710 [ 1487.019722][ T7231] ? ksys_dup3+0x660/0x660 [ 1487.024160][ T7231] ? kvm_vcpu_block+0x1010/0x1010 [ 1487.029277][ T7231] do_vfs_ioctl+0x107b/0x17d0 [ 1487.033970][ T7231] ? wait_for_completion+0x810/0x810 [ 1487.039301][ T7231] ? ioctl_preallocate+0x2f0/0x2f0 [ 1487.044433][ T7231] ? __fget_light+0x2db/0x420 [ 1487.049128][ T7231] ? fget_raw+0x20/0x20 [ 1487.053311][ T7231] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1487.059565][ T7231] ? fput+0x128/0x1a0 [ 1487.063566][ T7231] ? do_syscall_64+0x8c/0x800 [ 1487.068301][ T7231] ? do_syscall_64+0x8c/0x800 [ 1487.072991][ T7231] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1487.078311][ T7231] ? security_file_ioctl+0x93/0xc0 [ 1487.083438][ T7231] ksys_ioctl+0xab/0xd0 [ 1487.087619][ T7231] __x64_sys_ioctl+0x73/0xb0 [ 1487.092227][ T7231] do_syscall_64+0x1a3/0x800 [ 1487.096858][ T7231] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1487.102519][ T7231] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1487.108282][ T7231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1487.113859][ T7231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1487.119760][ T7231] RIP: 0033:0x457ec9 [ 1487.123668][ T7231] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000100)=[{0x1}], 0x1, &(0x7f0000000000)={0x0, 0x989680}) [ 1487.143301][ T7231] RSP: 002b:00007f3667301c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.151724][ T7231] RAX: ffffffffffffffda RBX: 00007f3667301c90 RCX: 0000000000457ec9 [ 1487.159708][ T7231] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1487.167686][ T7231] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1487.175667][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36673026d4 [ 1487.183646][ T7231] R13: 00000000004c0e36 R14: 00000000004d28d8 R15: 0000000000000008 [ 1487.227073][ T7247] overlayfs: unrecognized mount option "meta%opy=on" or missing value 03:33:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x400, 0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000100)={r3, 0x5}) r4 = dup2(r1, r1) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) 03:33:20 executing program 1 (fault-call:15 fault-nth:5): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001b9) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x40000000004) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta*opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = socket(0x40000000015, 0x0, 0x0) getsockopt(r0, 0x114, 0x8, 0x0, &(0x7f0000000000)) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), 0xfffffffffffffeda) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1487.471215][ T7262] FAULT_INJECTION: forcing a failure. [ 1487.471215][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.526445][ T7274] overlayfs: unrecognized mount option "meta*opy=on" or missing value [ 1487.565644][ T7262] CPU: 0 PID: 7262 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1487.574286][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.584355][ T7262] Call Trace: [ 1487.587673][ T7262] dump_stack+0x1db/0x2d0 [ 1487.592036][ T7262] ? dump_stack_print_info.cold+0x20/0x20 [ 1487.597778][ T7262] ? vprintk_func+0x86/0x189 [ 1487.602392][ T7262] should_fail.cold+0xa/0x14 [ 1487.607001][ T7262] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1487.612831][ T7262] ? ___might_sleep+0x1e7/0x310 [ 1487.617701][ T7262] ? arch_local_save_flags+0x50/0x50 [ 1487.623014][ T7262] __should_failslab+0x121/0x190 [ 1487.627969][ T7262] should_failslab+0x9/0x14 [ 1487.632490][ T7262] kmem_cache_alloc+0x2be/0x710 [ 1487.637364][ T7262] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1487.642865][ T7262] mmu_topup_memory_caches+0x97/0x490 [ 1487.648279][ T7262] kvm_mmu_load+0x21/0x1200 [ 1487.652811][ T7262] ? vcpu_enter_guest+0x3f06/0x6520 [ 1487.658033][ T7262] vcpu_enter_guest+0x3f0e/0x6520 [ 1487.663086][ T7262] ? emulator_read_emulated+0x50/0x50 [ 1487.668475][ T7262] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1487.673774][ T7262] ? retint_kernel+0x2d/0x2d [ 1487.678381][ T7262] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1487.684030][ T7262] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1487.689508][ T7262] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1487.695677][ T7262] ? __lock_is_held+0xb6/0x140 [ 1487.700464][ T7262] ? lock_acquire+0x1db/0x570 [ 1487.705160][ T7262] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1487.710910][ T7262] ? lock_release+0xc40/0xc40 [ 1487.715606][ T7262] ? rcu_sync_dtor+0x170/0x170 [ 1487.720396][ T7262] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1487.725973][ T7262] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1487.731728][ T7262] kvm_vcpu_ioctl+0x558/0x12d0 [ 1487.736514][ T7262] ? kvm_vcpu_block+0x1010/0x1010 [ 1487.741562][ T7262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.747877][ T7262] ? lock_downgrade+0x910/0x910 [ 1487.752741][ T7262] ? kasan_check_read+0x11/0x20 [ 1487.757613][ T7262] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1487.763611][ T7262] ? rcu_read_unlock_special+0x380/0x380 [ 1487.769291][ T7262] ? __fget+0x49a/0x710 [ 1487.773475][ T7262] ? ksys_dup3+0x660/0x660 [ 1487.777912][ T7262] ? kvm_vcpu_block+0x1010/0x1010 [ 1487.782954][ T7262] do_vfs_ioctl+0x107b/0x17d0 [ 1487.787648][ T7262] ? wait_for_completion+0x810/0x810 [ 1487.792956][ T7262] ? ioctl_preallocate+0x2f0/0x2f0 [ 1487.798142][ T7262] ? __fget_light+0x2db/0x420 [ 1487.802839][ T7262] ? fget_raw+0x20/0x20 [ 1487.807018][ T7262] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1487.813431][ T7262] ? fput+0x128/0x1a0 [ 1487.817429][ T7262] ? do_syscall_64+0x8c/0x800 [ 1487.822143][ T7262] ? do_syscall_64+0x8c/0x800 [ 1487.826838][ T7262] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1487.832140][ T7262] ? security_file_ioctl+0x93/0xc0 [ 1487.837295][ T7262] ksys_ioctl+0xab/0xd0 [ 1487.841473][ T7262] __x64_sys_ioctl+0x73/0xb0 [ 1487.846103][ T7262] do_syscall_64+0x1a3/0x800 [ 1487.850717][ T7262] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1487.856369][ T7262] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1487.862110][ T7262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1487.867684][ T7262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1487.873591][ T7262] RIP: 0033:0x457ec9 [ 1487.877505][ T7262] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1487.897115][ T7262] RSP: 002b:00007f3667301c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.905537][ T7262] RAX: ffffffffffffffda RBX: 00007f3667301c90 RCX: 0000000000457ec9 [ 1487.913525][ T7262] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 03:33:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syslog(0x4, &(0x7f0000000040), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x800000001, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) [ 1487.921626][ T7262] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1487.929607][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36673026d4 [ 1487.937588][ T7262] R13: 00000000004c0e36 R14: 00000000004d28d8 R15: 0000000000000008 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") r1 = socket(0x8000000000010, 0x802, 0x3) write(r1, &(0x7f0000000000)="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", 0xfc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400000, 0x0) write$P9_RWRITE(r2, &(0x7f0000000180)={0xb, 0x77, 0x1, 0x8000}, 0xb) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta+opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1488.005499][ T7288] overlayfs: unrecognized mount option "meta*opy=on" or missing value 03:33:20 executing program 1 (fault-call:15 fault-nth:6): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001ba) [ 1488.144410][ T7299] overlayfs: unrecognized mount option "meta+opy=on" or missing value 03:33:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0)={r3, 0x0, 0x6, 0x7f, 0x3, 0x1c8}, &(0x7f0000000100)=0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000c00)}, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726c69723d6e0066696c65302c6c6f77657232d018436a976a4d352c06351b506469723d2e2f666956cc40139bb8d047156469723d2e2f66696c65315c00"]) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x1ff) ioctl$KIOCSOUND(r2, 0x4b2f, 0xff) setxattr$security_smack_entry(0x0, &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) ioctl$BLKRRPART(r2, 0x125f, 0x0) sendto(r2, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8", 0xc0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000640)={{0x2, 0x4e20, @empty}, {0x306, @local}, 0x0, {0x2, 0x4e24, @multicast1}, 'vlan0\x00'}) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000ac0)="67fa843e442e61d71105d6e9ede36304a659f4ee933b20b62e1e3d2fb3e8edf0e6b43eeb0d633c7c1fec7d2da2e689a1bab7d60453ac60cec7e1f4de788c5ee0a9ceb049cb2e877c679a5e3f7cbc5419aa40dfa8544dd726b76c4ee461b82ee81f6a329551519bde795134497ad22fe97fb23ed6b47a5f4699746fe5dc0613a1906dfe7a2643ec9d4f9eeee58237f7827a511d7acec88119d892d62937508bdba5a5ef00cc82b45a1e98c6fdbfc42db8a39fbb3b1080007bbfc4a46da49f19ff045b6b0a1aaf38540cfb9c600f4d33d1182ccb88e84ce0d1abea83cc78b66ec7234f6dfeaa82ea9fff3488f0b13e4af5e2ad6d88cdfeb3099811a7aff585beb0") setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000980)={'security\x00', 0xef, "9fc280bf8becfc1678038f77f402f0460a913c58aa925e0b9667101263a7f514f004af204e0175214f02097974b42a9053a293b5903f8d815bbd54a1df572c435c683ff47925c7fc42d1569948bd8c4da2fa393dba834cc25879111a9cddae221487abd8358b5a3277312fbeb1351466b5a6eae7485c8a87914c76d5e780250f45faf72b6981d01545c9bdb415a5da4b3d2e93f5814c059745b2e28a6afe389f25f2374e060291b5ad2ddfd269a211a398a699acccc84625364dc14622d4c9eb8b90c2bf85027e04c82211c72a3f280cb3da9cbc7af4ffbfb19eaf38ca245b282a286b445a819f0ec01d7d73f0a6a5"}, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000010003000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="0400070000000000080000005c6ecdd5219a49407a9c63d22ca2bf8822c1b300d9635d626a8a5b32c13f23bc53425b4590237943105d8e902a84fb22e7bdcfb611a5767de6b3", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="10000400000000002000030000000000"], 0x54, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000d80)=[{0x0}, {0x0}], 0x2, &(0x7f0000001ec0)=""/203, 0xcb}}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {0x0}, {0x0}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003380)=""/11, 0xb}], 0x5, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003480)=""/4096, 0x1000}, {0x0}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}}], 0x4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000008c0), &(0x7f0000000940)=0x4) ioctl$KVM_NMI(r1, 0xae9a) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000006c0)="3f60a535575e34e8e9e842d0f991f7bfc92f0be6fb05b5d685b7621a0d6f4914e162", 0x22}], 0x1}, 0x8004) [ 1488.238079][ T7303] overlayfs: unrecognized mount option "meta+opy=on" or missing value [ 1488.260336][ T7301] FAULT_INJECTION: forcing a failure. [ 1488.260336][ T7301] name failslab, interval 1, probability 0, space 0, times 0 03:33:20 executing program 3: socket$l2tp(0x18, 0x1, 0x1) accept4$rose(0xffffffffffffff9c, &(0x7f0000000000)=@short={0xb, @dev, @default, 0x1, @bcast}, &(0x7f00000000c0)=0x1c, 0x800) r0 = socket$unix(0x1, 0x5, 0x0) ioctl(r0, 0x1c3, &(0x7f0000000140)="2912000000000000004e65b6717ebb66f43f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1488.334376][ T7301] CPU: 0 PID: 7301 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1488.343005][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.353072][ T7301] Call Trace: [ 1488.356390][ T7301] dump_stack+0x1db/0x2d0 [ 1488.360762][ T7301] ? dump_stack_print_info.cold+0x20/0x20 [ 1488.366502][ T7301] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1488.371803][ T7301] ? retint_kernel+0x2d/0x2d [ 1488.376411][ T7301] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1488.382067][ T7301] should_fail.cold+0xa/0x14 [ 1488.386677][ T7301] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1488.392511][ T7301] ? retint_kernel+0x2d/0x2d [ 1488.397130][ T7301] __should_failslab+0x121/0x190 [ 1488.402089][ T7301] should_failslab+0x9/0x14 [ 1488.406609][ T7301] kmem_cache_alloc+0x2be/0x710 [ 1488.411485][ T7301] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1488.416965][ T7301] mmu_topup_memory_caches+0x97/0x490 [ 1488.422359][ T7301] kvm_mmu_load+0x21/0x1200 [ 1488.426932][ T7301] ? vcpu_enter_guest+0x3f06/0x6520 [ 1488.432156][ T7301] vcpu_enter_guest+0x3f0e/0x6520 [ 1488.437194][ T7301] ? retint_kernel+0x2d/0x2d [ 1488.441798][ T7301] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1488.447440][ T7301] ? mark_held_locks+0xb1/0x100 [ 1488.452325][ T7301] ? emulator_read_emulated+0x50/0x50 [ 1488.457710][ T7301] ? add_lock_to_list.isra.0+0x450/0x450 [ 1488.463356][ T7301] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1488.469011][ T7301] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1488.474494][ T7301] ? retint_kernel+0x2d/0x2d [ 1488.479106][ T7301] ? lock_acquire+0x1db/0x570 [ 1488.483794][ T7301] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1488.489533][ T7301] ? lock_release+0xc40/0xc40 [ 1488.494234][ T7301] ? rcu_sync_dtor+0x170/0x170 [ 1488.499048][ T7301] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1488.504606][ T7301] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1488.510355][ T7301] kvm_vcpu_ioctl+0x558/0x12d0 [ 1488.515142][ T7301] ? kvm_vcpu_block+0x1010/0x1010 [ 1488.520188][ T7301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1488.526453][ T7301] ? lock_downgrade+0x910/0x910 [ 1488.531399][ T7301] ? kasan_check_read+0x11/0x20 [ 1488.536290][ T7301] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1488.542466][ T7301] ? rcu_read_unlock_special+0x380/0x380 [ 1488.548111][ T7301] ? __fget+0x542/0x710 [ 1488.552295][ T7301] ? __fget+0x1a3/0x710 [ 1488.556472][ T7301] ? __fget+0x49a/0x710 [ 1488.560651][ T7301] ? ksys_dup3+0x660/0x660 [ 1488.565094][ T7301] ? kvm_vcpu_block+0x1010/0x1010 [ 1488.570131][ T7301] do_vfs_ioctl+0x107b/0x17d0 [ 1488.574828][ T7301] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1488.580318][ T7301] ? ioctl_preallocate+0x2f0/0x2f0 [ 1488.585447][ T7301] ? __fget_light+0x2db/0x420 [ 1488.590138][ T7301] ? fget_raw+0x20/0x20 [ 1488.594318][ T7301] ? ksys_write+0x1b0/0x260 [ 1488.598837][ T7301] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 1488.604451][ T7301] ? do_syscall_64+0x8c/0x800 [ 1488.609142][ T7301] ? do_syscall_64+0x8c/0x800 [ 1488.613833][ T7301] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1488.619149][ T7301] ? security_file_ioctl+0x93/0xc0 [ 1488.624296][ T7301] ksys_ioctl+0xab/0xd0 [ 1488.628472][ T7301] __x64_sys_ioctl+0x73/0xb0 [ 1488.633081][ T7301] do_syscall_64+0x1a3/0x800 [ 1488.637691][ T7301] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1488.643341][ T7301] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1488.649081][ T7301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1488.654654][ T7301] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1488.660555][ T7301] RIP: 0033:0x457ec9 [ 1488.664466][ T7301] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta,opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1488.684564][ T7301] RSP: 002b:00007f3667301c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.692983][ T7301] RAX: ffffffffffffffda RBX: 00007f3667301c90 RCX: 0000000000457ec9 [ 1488.700965][ T7301] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1488.708951][ T7301] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1488.716930][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36673026d4 [ 1488.724918][ T7301] R13: 00000000004c0e36 R14: 00000000004d28d8 R15: 0000000000000008 03:33:20 executing program 3: r0 = msgget(0x2, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r2 = getegid() r3 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xffffff79) r5 = fcntl$getown(0xffffffffffffff9c, 0x9) r6 = getpid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x100000000, r1, r2, r3, r4, 0x10, 0x5}, 0x5, 0x5, 0x11, 0x7, 0x40, 0x8, r5, r6}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000300)='./file0\x00', 0x3, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="c1ad11cc08218c4fed3ec8c034d64943383e38eca07644d6a487d45d0efa83c0bb915e7b569343da49d7154cd9f4c277c814058b4d03dc2bb6c15a259178023bb057a7a5fb3e35af7cc63b840d4b541103283fb1fd0915b0ce8027899346f805ae880bc427cb595733045ab46eaaeccc7490a9d94149e9c9de802f3b767a4de97e22bb7850efd4696ec9ee969cc5d2be7edcf37304a863b373fa6cf7d77a601b8d5cd1b7d9f418d8ed91fc36c88ec58d935e4f5b376d2170cd98d9df5f68f8d5569e5e5a872ef5e7a6ff7c5405c406744bc37b859b0cb654911868006852820d09", 0xe1, 0x3ef}], 0x8000, &(0x7f0000000480)={[{@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}], [{@obj_role={'obj_role', 0x3d, 'H'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@hash='hash'}, {@fowner_gt={'fowner>', r3}}]}) r7 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x200) connect$pptp(r7, &(0x7f00000002c0)={0x18, 0x2, {0x3, @local}}, 0xffffffffffffffc6) socket$nl_crypto(0x10, 0x3, 0x15) ioctl(r7, 0x2, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 2: socket$l2tp(0x18, 0x1, 0x1) accept4$rose(0xffffffffffffff9c, &(0x7f0000000000)=@short={0xb, @dev, @default, 0x1, @bcast}, &(0x7f00000000c0)=0x1c, 0x800) r0 = socket$unix(0x1, 0x5, 0x0) ioctl(r0, 0x1c3, &(0x7f0000000140)="2912000000000000004e65b6717ebb66f43f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) close(r0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x3) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x258, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@local, @local, @broadcast, 0xc, 0xffffffff}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x401, 0x3}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, @mac=@link_local, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff]}, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x9b94, 'bond_slave_0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x16}, @rand_addr, @rand_addr=0xffffffffffffff24, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x64, &(0x7f00000001c0)=r0, 0xfeb8) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1 (fault-call:15 fault-nth:7): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1488.932139][ T7338] overlayfs: unrecognized mount option "meta" or missing value [ 1488.995284][ T7339] overlayfs: unrecognized mount option "meta" or missing value 03:33:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200000000000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ppoll(&(0x7f0000000080)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x8, 0x2, r1, &(0x7f00000000c0)='./file0\x00') 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001bb) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta-opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) r0 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) setsockopt(r0, 0x65, 0xffffffffffff8000, &(0x7f0000000080)="8a18a27587f134ec22ce6e997c3d0bb6df5968ca98945d479b5bb3d3804514d5e8d164d0112b63e5cc8b1f9889594b65feeff58fc5b6c530f2c1c62c7a82569ba98701c7d9d141f4c2", 0x49) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 1489.185343][ T7346] FAULT_INJECTION: forcing a failure. [ 1489.185343][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.226322][ T7360] overlayfs: unrecognized mount option "meta-opy=on" or missing value [ 1489.257439][ T7346] CPU: 0 PID: 7346 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1489.266051][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.276114][ T7346] Call Trace: [ 1489.279431][ T7346] dump_stack+0x1db/0x2d0 [ 1489.283781][ T7346] ? dump_stack_print_info.cold+0x20/0x20 [ 1489.289618][ T7346] should_fail.cold+0xa/0x14 [ 1489.294231][ T7346] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1489.300091][ T7346] ? ___might_sleep+0x1e7/0x310 [ 1489.300111][ T7346] ? arch_local_save_flags+0x50/0x50 [ 1489.300141][ T7346] __should_failslab+0x121/0x190 [ 1489.300162][ T7346] should_failslab+0x9/0x14 [ 1489.300184][ T7346] kmem_cache_alloc+0x2be/0x710 [ 1489.315293][ T7346] mmu_topup_memory_caches+0x97/0x490 [ 1489.315317][ T7346] kvm_mmu_load+0x21/0x1200 [ 1489.315339][ T7346] ? vcpu_enter_guest+0x704/0x6520 [ 1489.315364][ T7346] vcpu_enter_guest+0x3f0e/0x6520 [ 1489.315388][ T7346] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1489.350178][ T7346] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1489.356355][ T7346] ? emulator_read_emulated+0x50/0x50 [ 1489.361741][ T7346] ? add_lock_to_list.isra.0+0x450/0x450 [ 1489.367398][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1489.373647][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1489.379906][ T7346] ? check_preemption_disabled+0x48/0x290 [ 1489.385647][ T7346] ? __lock_is_held+0xb6/0x140 [ 1489.390430][ T7346] ? lock_acquire+0x1db/0x570 [ 1489.395123][ T7346] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1489.400861][ T7346] ? lock_release+0xc40/0xc40 [ 1489.405552][ T7346] ? kvm_gen_update_masterclock+0x380/0x380 [ 1489.411461][ T7346] ? rcu_sync_dtor+0x170/0x170 [ 1489.416269][ T7346] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1489.421827][ T7346] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1489.427574][ T7346] kvm_vcpu_ioctl+0x558/0x12d0 [ 1489.432363][ T7346] ? kvm_vcpu_block+0x1010/0x1010 [ 1489.437406][ T7346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1489.443663][ T7346] ? lock_downgrade+0x910/0x910 [ 1489.448526][ T7346] ? kasan_check_read+0x11/0x20 [ 1489.453394][ T7346] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1489.459392][ T7346] ? rcu_read_unlock_special+0x380/0x380 [ 1489.465050][ T7346] ? __fget+0x49a/0x710 [ 1489.469228][ T7346] ? ksys_dup3+0x660/0x660 [ 1489.473687][ T7346] ? kvm_vcpu_block+0x1010/0x1010 [ 1489.478724][ T7346] do_vfs_ioctl+0x107b/0x17d0 [ 1489.483423][ T7346] ? ioctl_preallocate+0x2f0/0x2f0 [ 1489.488549][ T7346] ? __fget_light+0x2db/0x420 [ 1489.493269][ T7346] ? fget_raw+0x20/0x20 [ 1489.497448][ T7346] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1489.503701][ T7346] ? fput+0x128/0x1a0 [ 1489.507704][ T7346] ? do_syscall_64+0x8c/0x800 [ 1489.512405][ T7346] ? do_syscall_64+0x8c/0x800 [ 1489.517095][ T7346] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1489.522402][ T7346] ? security_file_ioctl+0x93/0xc0 [ 1489.527534][ T7346] ksys_ioctl+0xab/0xd0 [ 1489.531710][ T7346] __x64_sys_ioctl+0x73/0xb0 [ 1489.536321][ T7346] do_syscall_64+0x1a3/0x800 [ 1489.540942][ T7346] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1489.546593][ T7346] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1489.552334][ T7346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1489.557910][ T7346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1489.563813][ T7346] RIP: 0033:0x457ec9 [ 1489.567726][ T7346] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1489.587340][ T7346] RSP: 002b:00007f3667301c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.595767][ T7346] RAX: ffffffffffffffda RBX: 00007f3667301c90 RCX: 0000000000457ec9 [ 1489.603748][ T7346] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1489.611852][ T7346] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1489.619847][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36673026d4 03:33:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x17) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x5f88, 0x88c0, 0x5a7b, 0x10, 0x1000, 0x9, 0x3f, 0x200, 0x3, 0x10000, 0x3}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 1489.627830][ T7346] R13: 00000000004c0e36 R14: 00000000004d28d8 R15: 0000000000000008 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1489.682113][ T7366] overlayfs: unrecognized mount option "meta-opy=on" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta.opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001bc) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1489.940963][ T7381] overlayfs: unrecognized mount option "meta.opy=on" or missing value [ 1490.033185][ T7388] overlayfs: unrecognized mount option "meta.opy=on" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001bd) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="c3237888f43d179eb0670b8a98c1ff36392e38640027dd23cc73882df6b77225cf94f2e8f80924d9b80d0f1ce361e612d60d8f78b9cdb2e418c200f02e1d739a141d9cf6d8d842420567f61d13aa5cf82ea6461c9c9f1a38be9349d5e02bc6f8d647ee9fe7c1d1b331ecb2ff2a3c718e5b52e4525eaf76540782c89537ee28e12c7f7d000000") semget$private(0x0, 0x4, 0x200) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x40000, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta0opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001be) 03:33:20 executing program 3: accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@remote, @bcast, @netrom, @default, @bcast, @rose, @rose]}, &(0x7f0000000140)=0x48, 0x800) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl(r0, 0x0, &(0x7f0000000000)="295cc807003e") mprotect(&(0x7f0000601000/0x1000)=nil, 0x1000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xb, 0x0) read(r2, &(0x7f00000002c0)=""/158, 0xfffffffffffffd27) ioctl$int_in(r2, 0x80000040045010, &(0x7f00000000c0)=0x2000b) close(r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x7fffffff}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000700)={r6, 0x9}, &(0x7f0000000740)=0x8) syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000900)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xfee3) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000780)=0x101, 0x4) getgroups(0x6, &(0x7f0000000580)=[0xee01, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xee00]) getgroups(0x2, &(0x7f00000005c0)=[0xffffffffffffffff, 0xee00]) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010004000000000002001302", @ANYRES32=r3, @ANYBLOB="c31b2acbf9d9a3b2c7d924a035477f4e601c66f063324b47dc2cfb2c08676a2ae1417b97e0d4460cc422bba5cc815dbacab50655b34b580f665e87420ba3ff930f0cd1e5b21f1e1747b11c5b04b87ca8d73a48518054a898de996cb4eaf1b5e047fb80d6b6826af90ae5bb935d3b789840af72ffa5f1360a6a6ffc057fee6840219c3fd754502dc01c60e92cc16ea7d9ddd2f63162c5ecb41dea1e72942228121b18844483ed01c0c72fa27fabf587e5e76869f64ef24f7a5da5901eec31b523432b36b90f951ace10ac7eebf79e3748841f9e1c31881ae868dd7f62aa", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="040000000000000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="10000300000000002000010000000000"], 0x54, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r10 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000280)=0xfffffffeffffffff) fcntl$setown(r2, 0x8, r10) [ 1490.857630][ T7418] overlayfs: unrecognized mount option "meta0opy=on" or missing value [ 1490.911873][ T7423] overlayfs: unrecognized mount option "meta0opy=on" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metaXopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x5421, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1491.209125][ T7439] overlayfs: unrecognized mount option "metaXopy=on" or missing value [ 1491.253062][ T7442] overlayfs: unrecognized mount option "metaXopy=on" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001bf) [ 1491.306837][ T7444] IPVS: ftp: loaded support on port[0] = 21 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='meta\\opy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1491.487183][ T7457] overlayfs: unrecognized mount option "meta\opy=on" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x5450, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1491.587329][ T7458] overlayfs: unrecognized mount option "meta\opy=on" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metadopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x480, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c0) [ 1491.772791][ T7444] chnl_net:caif_netlink_parms(): no params data found [ 1491.828917][ T7476] overlayfs: unrecognized mount option "metadopy=on" or missing value [ 1491.867965][ T7480] overlayfs: unrecognized mount option "metadopy=on" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x5451, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1492.027408][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.063664][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.093563][ T7444] device bridge_slave_0 entered promiscuous mode [ 1492.114791][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.137094][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.161388][ T7444] device bridge_slave_1 entered promiscuous mode [ 1492.215237][ T7444] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1492.227169][ T7444] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1492.257918][ T7444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1492.266411][ T7444] team0: Port device team_slave_0 added [ 1492.285128][ T7444] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1492.293638][ T7444] team0: Port device team_slave_1 added [ 1492.300130][ T7444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1492.309160][ T7444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1492.371877][ T7444] device hsr_slave_0 entered promiscuous mode [ 1492.409321][ T7444] device hsr_slave_1 entered promiscuous mode [ 1492.460223][ T7444] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1492.471805][ T7444] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1492.508129][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.515315][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.522742][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.529840][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.619628][ T7444] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1492.647361][ T7444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.681064][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1492.701953][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.713500][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.729550][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1492.745838][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1492.760700][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1492.769105][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1492.787768][ T7444] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1492.794849][ T7444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.804891][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1492.812704][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1492.821328][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1492.830286][ T3751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.837413][ T3751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.849040][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1492.857019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1492.866068][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1492.875110][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.882172][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.893368][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1492.904089][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1492.911781][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1492.921074][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1492.932933][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1492.953620][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1492.962345][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1492.974160][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1492.982693][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1492.991753][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1493.000787][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1493.011944][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1493.034373][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1493.042720][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1493.055099][ T7444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1493.063990][ T7444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1493.085282][ T7444] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1493.095776][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1493.103672][T13928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1493.112982][T13928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1493.128835][ T7444] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1493.144522][ T7444] 8021q: adding VLAN 0 to HW filter on device batadv0 03:33:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYBLOB="d8472600"], 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x100000001, 0x9, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r3, 0x4, 0x14400) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) poll(&(0x7f0000000400)=[{r1, 0x1}, {r1, 0x1410}, {r1, 0x120c}, {r1, 0x2183}, {}], 0x5, 0x8) connect$unix(r1, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e) pread64(r3, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00', r2}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d7", 0x29}], 0x1}], 0x1, 0x4010) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000008c0)={0x0, 0x0, 0x72feb984}, &(0x7f0000000900)=0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000500)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) getegid() dup2(r0, r4) syz_emit_ethernet(0x30, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, [], {@llc_tr={0x11, {@snap={0x0, 0x1, "ed", "80da46", 0x89ff, "5873867110c22f81a95a544d15c962a6faf92bb1cc24dae03057"}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000015c0)=@newspdinfo={0x1c, 0x24, 0x125, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0) 03:33:21 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metaiopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:21 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x5452, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:21 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c1) 03:33:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:21 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1493.324168][ T7521] overlayfs: unrecognized mount option "metaiopy=on" or missing value [ 1493.423463][ T7529] overlayfs: unrecognized mount option "metaiopy=on" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metalopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) r2 = open(0x0, 0x200, 0x20) fanotify_init(0x0, 0x80000) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x1003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000007318fc52000000000000ba2ecd4647a5655f5e32222e0565ad00412f7274cfd670685447214e3cb530cc407d59afdac46b95597be11c160f1720d3d48abb54e557e92030a0771e1c3374313b39adc5d4fccf5f1119fce1be2c358b2f2a2d1041f622fc109f0dbf44ed0b56436a57eb92699b85aa08e3bff45752b98ccbe221cb18fdc4babaf48815cc30b7c69d3f929c52acc2e9984993118a959a8c8fc8d3ba5903abf2f9ca2b"], 0x14}}, 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c2) [ 1493.677578][ T7543] overlayfs: unrecognized mount option "metalopy=on" or missing value [ 1493.731537][ T7546] overlayfs: unrecognized mount option "metalopy=on" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metaoopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1494.091126][ T7565] overlayfs: unrecognized mount option "metaoopy=on" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x0, @multicast1, 0x4e21, 0x1, 'dh\x00', 0x2, 0x8, 0x49}, 0x2c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x20000000400000, 0x1800}, {0x0, 0xc, 0x800}, {0x3, 0x3b, 0xffd}], 0x3, &(0x7f00000000c0)={0x77359400}) [ 1494.196057][ T7571] overlayfs: unrecognized mount option "metaoopy=on" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c3) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metapopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1494.581623][ T7592] overlayfs: unrecognized mount option "metapopy=on" or missing value [ 1494.681493][ T7596] overlayfs: unrecognized mount option "metapopy=on" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c4) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metasopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1494.972023][ T7608] overlayfs: unrecognized mount option "metasopy=on" or missing value 03:33:20 executing program 2: semget(0x3, 0x0, 0x6f0a5b1ab95126ff) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1495.013886][ T7611] overlayfs: unrecognized mount option "metasopy=on" or missing value 03:33:20 executing program 2: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xff60}, 0xe3c7) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) r2 = getegid() chown(&(0x7f0000000000)='./file0\x00', 0x0, r2) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000fef000/0xf000)=nil) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2c, 0x4, 0x0, {0x0, 0xadd6, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) ptrace$poke(0x4, 0x0, &(0x7f0000000200), 0x3) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metauopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c5) [ 1495.230676][ T7628] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1495.260784][ T7629] overlayfs: unrecognized mount option "metauopy=on" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1495.324557][ T7619] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1495.337492][ T7637] overlayfs: unrecognized mount option "metauopy=on" or missing value 03:33:20 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80800, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/234) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000000)=0x8, 0x4) semget(0x0, 0x3, 0x40) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x5) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000000c0)) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metaxopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000740)=ANY=[@ANYBLOB="0a6465762f6e6264608ef33f3580410e4652b420a2b4030000"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0xfffd) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) epoll_create(0x6) getgroups(0x1, &(0x7f00000003c0)=[0xffffffffffffffff]) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000240)) getpgrp(0x0) gettid() getegid() gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005f00)={{{@in=@local, @in6=@local}}, {{@in=@multicast1}}}, &(0x7f0000006000)=0xe8) stat(&(0x7f0000006040)='./file0\x00', &(0x7f0000006080)) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000002c0)='!nodevem0\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='/dev/radio#\x00', &(0x7f0000000380)='port1\x00', &(0x7f0000000500)='\'\x00'], &(0x7f0000000700)=[&(0x7f0000000580)='\ndev/nbd', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='\ndev/nbd', &(0x7f00000006c0)='/dev/loop#\x00']) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000006100)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f00000000c0)="0abc7ee61d0390c2c7727e98909f4487cadd75eed1642ff60032bdaef8c01009fe6eeea586d61f9b901f26709a41b049c5fc7b3d6fb3c55c3096fabe67ce6a28b2e2fa24d84a62523aa81ed1c49053dd93b19e5943dbf3b6a1cfe077d48a648b005d896887603c4884c7593528e50c72ff74d40bd2dc5933c49f6506e208", 0x0}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000440)={{0x2, 0x18f}, 'port1\x00', 0x80, 0x80403, 0x1f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x401}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1495.702713][ T7665] overlayfs: unrecognized mount option "metaxopy=on" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c6) [ 1495.770690][ T7671] overlayfs: unrecognized mount option "metaxopy=on" or missing value [ 1495.780012][ T7667] 9pnet_virtio: no channels available for device [ 1495.780012][ T7667] dev/nbd`Žó?5€AFR´ ¢´ 03:33:20 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) move_pages(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000100)=[0x607, 0xf82, 0x5, 0xfff, 0x3, 0x395], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x6) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x120000, 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metac\npy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) r3 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000500)=""/198) clock_getres(0x0, &(0x7f0000000200)) bind$alg(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) getresgid(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0}, 0x0) write$binfmt_script(r0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0xff, @mcast1, 0x8}}, 0x2, 0x100000001}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r5}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='ip6gre0\x00', 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000380)={&(0x7f0000000300)=""/91, 0x5b}) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40)}}], 0x1, 0x0) [ 1496.070516][ T7694] overlayfs: unrecognized mount option "metac [ 1496.070516][ T7694] py=on" or missing value [ 1496.145229][ T7699] overlayfs: unrecognized mount option "metac [ 1496.145229][ T7699] py=on" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c7) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metac%py=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x30, 0x82, &(0x7f00000000c0)="68e89ae06bfc192e83b237b349e6266a15cd7a2d7d211a5f0f435be65191b7a1d7ad9cbf62f1526e204a3ed0193330e3", &(0x7f0000000100)=""/130, 0x4000000000007}, 0x28) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c8) [ 1496.712472][ T7730] overlayfs: unrecognized mount option "metac%py=on" or missing value [ 1496.809233][ T7735] overlayfs: unrecognized mount option "metac%py=on" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metac,py=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x40) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) getgid() ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) [ 1497.029134][ T7754] overlayfs: unrecognized mount option "metac" or missing value [ 1497.083369][ T7757] overlayfs: unrecognized mount option "metac" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metac\\py=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001c9) [ 1497.285478][ T7772] overlayfs: unrecognized mount option "metac\py=on" or missing value 03:33:20 executing program 2: r0 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x407fffffff, 0xe4da219e2b824f22) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x0, 0x80000001}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) [ 1497.376443][ T7776] overlayfs: unrecognized mount option "metac\py=on" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metaco,y=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='bdev\x00', 0xffffffffffffff9c}, 0x10) r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl(r0, 0x7, &(0x7f00000001c0)="3ef22f36e5bd47bd1820b9342a1c71bb4a80b83ceb61be9b3058e5e4353f9c9a3b9e4965515ac5340000000000000000000000004edfdea9195d75359d1fc1e73bf9cdaf57aa53591acd42") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/46) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001ca) 03:33:20 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000000000020001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) write$capi20(r0, &(0x7f0000000340)={0x10, 0x251, 0x82, 0x4000000083, 0x80020000, 0xfff}, 0x10) mprotect(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x21) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000004c0)={0x0, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x2, 0x101080) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000440)={0x5a70, 0x1, 0x1}) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) recvfrom$packet(r0, &(0x7f0000000200)=""/237, 0xed, 0x10001, &(0x7f0000000300)={0x11, 0x7, r3, 0x1, 0x7ff, 0x6, @link_local}, 0x14) r4 = getuid() stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x2}, [{0x2, 0x4, r4}, {0x2, 0x5, r5}], {0x4, 0x3}, [{0x8, 0x7, r6}, {0x8, 0x2, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x3, r10}], {0x10, 0x6}, {0x20, 0x7}}, 0x5c, 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x28000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x80000001, 0x0, 0x10001, 0x5a5118e7}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x3fff8, r1}) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1497.777325][ T7809] overlayfs: unrecognized mount option "metaco" or missing value 03:33:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x144, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x467f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2283}]}, @TIPC_NLA_BEARER={0xf4, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x678d}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @multicast2}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd97, @mcast2, 0x80}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x8010) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/113, 0x7ffff000}], 0x1}}], 0x2, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000300)='aead\x00', &(0x7f0000000340)='/dev/audio\x00', &(0x7f0000000580)=',$', &(0x7f0000000600)='aead\x00'], &(0x7f0000000740)=[&(0x7f0000000680)='team_slave_0\x00', &(0x7f00000006c0)='ib', &(0x7f0000000700)='aegis128-generic\x00']) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000780)=0x9) prctl$PR_SET_FPEXC(0xc, 0x80) [ 1497.872419][ T7817] overlayfs: unrecognized mount option "metaco" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metaco\\y=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001cb) [ 1498.116703][ T7841] overlayfs: unrecognized mount option "metaco\y=on" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1498.171606][ T7842] overlayfs: unrecognized mount option "metaco\y=on" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacop\n=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001cc) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f00007c8000/0x2000)=nil, 0x2000, 0x4) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x2c6d, &(0x7f0000000080)={0x77359400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x8000, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xa000, 0x0) accept4$unix(r0, 0x0, &(0x7f00000000c0), 0x80000) [ 1498.757067][ T7869] overlayfs: unrecognized mount option "metacop [ 1498.757067][ T7869] =on" or missing value 03:33:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40080, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0xfff, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x0, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101380, 0x0) ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000080)=0xffffffffffff6036) ioctl$TCSETS(r4, 0x5437, 0x0) dup2(r1, r0) [ 1498.885352][ T7883] overlayfs: unrecognized mount option "metacop [ 1498.885352][ T7883] =on" or missing value 03:33:20 executing program 3: clock_getres(0x9, &(0x7f0000000340)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="4973cab27f8460b9037ad8550c12fa8ea424ed49bd131a240afd736aaa308bb98cee401744357eea539000e266978a835492e2a906cc1949a52c3734e23b22867193e72f4d", 0x45, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', r0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x101001) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="96d07ef15d43af65") 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacop%=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001cd) 03:33:20 executing program 2: mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=0']) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x1, "30d4e2e8"}, 0x6, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, &(0x7f00000001c0)) [ 1499.201218][ T7907] overlayfs: unrecognized mount option "metacop%=on" or missing value 03:33:20 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0xb, @raw_data="0362a6bada26018c0f7fba9cd851ef5cc3b7687e229740fedc5e3bc3a2a0904bf70e5beffc8ea8bc8ef92ab89fe36890545c0ab0180be006208b235a365ea1961cfb0d9382a651e3a628943dc274c33f42e6d090059be83cbc3702452b0692f4a40610d78a85b08247a021697c9b2b1d3455ee784cce8bfcef6abe62fd1f54f672b82063c6ded9d48282e6a41f14481a5aa6ee44f59133f2fa386cb54ed7a62311e7256900c3806b5e23d3afc3453f5f5d08fba2409a24c98089bd380d553af088eec5ca62ca46b4"}) [ 1499.301588][ T7914] overlayfs: unrecognized mount option "metacop%=on" or missing value [ 1499.393853][ T7920] Unknown ioctl -1060350442 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xf) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacop,=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = socket(0x8, 0xc8ee0f320e82eed4, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x0, 0x100000000, 0x8001}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x4, 0x2e, 0x13, 0x7, 0x4, 0x1000, 0x7, 0x8000cb, 0x1}}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') accept4$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x80800) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000340)={@empty, @empty, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000008c0)=0xe8) getpeername$packet(r1, &(0x7f0000000e80)={0x11, 0x0, 0x0}, &(0x7f0000000ec0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000001000)={@mcast1, 0x0}, &(0x7f0000001040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000010c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000011c0)=0xe8) getpeername$packet(r0, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001240)=0x14) getsockname$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000001580)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000015c0)={@initdev, @multicast1, 0x0}, &(0x7f0000001600)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001640)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001700)={@initdev, @broadcast, 0x0}, &(0x7f0000001740)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000017c0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000018c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000001b80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000023c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002380)={&(0x7f0000001bc0)={0x790, r2, 0x402, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xe8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x6, 0x8, 0x3, 0x6}, {0x9e4f, 0x3, 0x40, 0x8}, {0xcb4, 0xffffffff, 0xffffffffffffffff, 0x2}, {0x700, 0xffffffff, 0x7, 0x5}, {0x1d, 0x5}, {0xfffffffffffff001, 0x7245, 0x6, 0x1f}, {0x1f}]}}}]}}, {{0x8, 0x1, r5}, {0x140, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x0, 0x1, 0x8, 0xffffffff00000000}, {0x2, 0x7, 0x5, 0x7}, {0x4, 0x6, 0xff, 0xdc36}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x258, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9db4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xf2}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r15}, {0x134, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8, 0x6, r17}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x7f, 0x401, 0x9ce, 0x2}, {0x4, 0x6, 0xffffffff, 0x401}]}}}]}}, {{0x8, 0x1, r18}, {0x1a0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}]}, 0x790}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x8}, 0x8) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001ce) [ 1499.788538][ T7952] overlayfs: unrecognized mount option "metacop" or missing value [ 1499.836910][ T7956] overlayfs: unrecognized mount option "metacop" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000080045017, 0x0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newtclass={0xb8, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, r1, {}, {0xffff, 0x1}, {0xc, 0xffff}}, [@tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x34, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0xe98, 0x0, 0x3f}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0xd574550, 0x40}}]}}, @TCA_RATE={0x8, 0x5, {0x800, 0x7}}, @TCA_RATE={0x8, 0x5, {0x1, 0x6}}, @TCA_RATE={0x8, 0x5, {0x100000001, 0x1}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x4}}, @TCA_RATE={0x8, 0x5, {0x4, 0x1000}}, @TCA_RATE={0x8, 0x5, {0x6, 0xfffffffffffffc01}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffff}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffed, 0xffff}}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x40000) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacop\\=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000500)={0x0, 0x0, 0x10000000}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/131) sendmsg$rds(r0, &(0x7f0000002140)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/44, 0x2c}, {&(0x7f0000000440)=""/27, 0x1b}], 0x7, &(0x7f0000001f00)=[@mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x5}, &(0x7f0000000640)=0x5, &(0x7f0000000680), 0x1ff, 0x8, 0xffff, 0x0, 0x5, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000006c0)=""/250, 0xfa}, &(0x7f00000007c0), 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x3ff}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0xa3f}, &(0x7f0000000800)=0x2, &(0x7f0000000840)=0x1, 0x5, 0x0, 0xfff, 0x6, 0x41, 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{0xffffffff, 0x7}, &(0x7f0000000880)=0x370d, &(0x7f00000008c0), 0x203, 0x2, 0x90ef, 0x7, 0x20, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0xda92}, {&(0x7f0000000900)=""/78, 0x4e}, &(0x7f0000001d00)=[{&(0x7f0000000980)=""/57, 0x39}, {&(0x7f00000009c0)=""/27, 0x1b}, {&(0x7f0000000a00)=""/82, 0x52}, {&(0x7f0000000a80)=""/238, 0xee}, {&(0x7f0000000b80)=""/249, 0xf9}, {&(0x7f0000000c80)=""/60, 0x3c}, {&(0x7f0000000cc0)=""/44, 0x2c}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x8, 0x12, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001d80)=""/158, 0x9e}, &(0x7f0000001e40), 0x11}}, @mask_fadd={0x58, 0x114, 0x8, {{0x400, 0x6}, &(0x7f0000001e80)=0x2, &(0x7f0000001ec0)=0xfffffffffffffff8, 0x100, 0xffffffff, 0x7fffffff, 0x1, 0x6, 0x6}}], 0x220, 0x4080}, 0x8800) socket$packet(0x11, 0x3, 0x300) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001cf) [ 1500.110621][ T7980] overlayfs: unrecognized mount option "metacop\=on" or missing value [ 1500.195842][ T7986] overlayfs: unrecognized mount option "metacop\=on" or missing value 03:33:20 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="75707065726475723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b0069723d2e2f66696c65315c00e45f57da98df2c0d41bed44ed088dd403dcdce0e65976f663172"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @empty}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @multicast1, r0}, 0xc) chdir(&(0x7f0000000340)='./file0\x00') r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000002080)={0x50, 0x0, 0x3, {0x7, 0x1c, 0x1, 0x1, 0x7, 0x8, 0x8, 0x2}}, 0x50) socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000480)=0x40) sendmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000580)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000600)="3857026184677e016b944d1ff51982b24597fba20f8fafb1d76366b4417a", 0x1e}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="5a8fd56567383f7ffdc37e432ea5a80595f67e7917218c7986bda46f3022b59543b2c5e4cd95b4a9d49a7b361a285e543ee4daf11cde200dae20d1897cb76dcc5708e7a962f976b72406dc4ce45b6b59c19c1bf5fdca0925f30afdc833fecccff53e99dff218d30514511d4bd6ba415b6f8f150d80a7f43d9dca4cc13650de91041ab9f7d5bce4e822fbf65b4d03220dff54eda4c65c2d2585558788567022d275dd81236a9613976b02cf8664650f3e01755b52fc4313ee74a855a7a9e3577f997c4ed162dccfd30ffdb0c437dd91743f89acd36872c7e9135fe9781b2069814bdf6c6318e302", 0xe7}, {&(0x7f0000001740)="c51f012b6ed22248b3d0edd61894700475a0d5f7bc870a4b8ded03b757c269899a62b731a6ac0214651d946298a121a0e018e3a0de66aa0bc2d79fdd36338226203f8d3718a0b8491da110746798f8518c54dac5bc8a62cf21ba1fa958dca355993b0d90a17def27f4708fc4debce62e8818", 0x72}, {&(0x7f00000017c0)="ebeaed640bbe77437979f24945bfe0592a1f60cf0e322b55f1f3aeb6341ba3c9b5694aa4fca24bd1ae8e", 0x2a}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001880)="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", 0xfa}, {&(0x7f0000001980)="433cc1dbc35880cf60ca5eeff71a93905b1cc8f4da41057ebb404c49b5a3805bc8e59234e4b7853bedc5959f71fa04798b479a641d7aacc0c871fdff5c662d76dd2e6295d37d2bd03c0bca3db474e8300c07560f3d38a9614a39b8d52706854f5bc9a219a7c895f80b1fdc2326d3101df2f1dfef70e9f4f4b0c05af105af36eb07360722e43a24ac08529d82bf20dadcdb56aac2e6945f70cd69", 0x9a}, {&(0x7f0000001a40)="dee6268a349face26a314a71ccaddd2ad9c78df7db5841107593eb9d9be7954dbb2d4d9a7666a0bfe03358ad1f9a179a1e76ea882309f4d79cd0d03d586670c2027a0f72e221be4170657d607e56569dba13cba4400759627e73f0575defb180152ee5fa8555120c7fcc7b18c3bf9619045ad7bbfe5b6b33a0fcd5689cd8ef90740aba84cbab8cd396273406d4ecaf73a08e6ec0d3a309785d307885338575f89c1964499a7ac5ba0f6e5b76fd8da1c912d0", 0xb2}, {&(0x7f0000001b00)="d1ae66820c6cb2749418793de85c95076be0f0b5179ec938830395e6b375e5c5a433abd9b8925aacc4073161c678c53e3c5487de941a1bf6db65afeb7657cef51548b0ea2a6f40f5298067d572eb5e2daefb494be73ddb9f6e3611ae4d0c0247ae42bd85edc8d023cfaf786a4a95025037aac90257cde12a9058cbc36611587947b251c393de4c4b883b58faaafb336e39ca444ab976d5eb79d1175ee0db46acfda2dc2cf8b90f1c3faed24a458a0b024edb02db56efd6c13cd8bc84fdd45ec42da1d460b64b4039a15502b8ff8fddf77d35d27a43f384a7b72e", 0xda}, {&(0x7f0000001c00)="cf47e0747ad0af168da6bc9240183382f7d63c00eefa41944ddafe9bfaeb9579fea9e63e619ae49cde3f47590799d2ad14b3ddb59407e6526d3711638c330dcd43795dfb4622f533d3df158139a616427c5a77fa89eb3115a658ef4b360235da51c05fa35acf349e5d8c19f538ccdd625486308ae9c6dbbb667a0b33ddf54f057f", 0x81}, {&(0x7f0000001cc0)="ec33f3ac32779375963d97fea9d5a461560a527df8e7ad46f68288873d87e240a894bef6088e3b1c960701af6e48609c2bec76709b30e9ce475c33d7", 0x3c}], 0x6, &(0x7f0000001d80)=[{0xc0, 0x0, 0x3f, "fd846b0fe659df0c0e766985bdf9698799d73d6563435f5096c6f48bbe578993ead2974bc465ed8108b9636bda503c7379a388b2e7ec54d2a24b804beb177931e19bf3b1689fb5eb362c760bfd132ffa2bff2737dd95636d6e32ebabcab01b10197b7484fff84ae06660b5a2ffde730bf3a968120e48e93504bcbb091001f4003ec8520f25eacedd4a293aa7cbc5f5da34850250fe8172e71baa9ad9dd6444d31c9a23ec3a255e693e8f155a19babf"}, {0xe8, 0x118, 0xfffffffffffffffe, "486dda0f24ac1addac9a865f942ca14b91766afb960a7cf00ce36f7ad80d2fc2e4d8a5acb4785748014c7cc337c78628d811fe69a0cc817e597d645ea94c1617e5b090596a351cce1e35b300d97a6b46e096264e4787dbfd0a86b3be281665f9d6478d556c71d3d12fda8e9d0e0d61a764a71f1c16224cfafc2b119276b6b014e606aff315a9361e74d6f7ecb1309f8b18206bc5bd2ed812bde2a0af0a7be1e3ef3b934aabe67a40b50a2986b8983ec45e09ade7a36da00dedd939b1a0cdab97b2a0ee4355e02c0b8387608f441a6478f741"}, {0x48, 0x104, 0x7, "839fba7ef3d7d0f7390cdd285d2c5b3e51ed7cb47b68849975d84fd94c1a440a2a9cbf43061ccf5cb4215492f8b0085ae5ece6"}, {0x38, 0x100, 0xfffffffffffffe00, "f882a5b722d51e708ceb343d21bf6d665b6904c33f44683cc7f1e2b7ae329ac1ac201d06fc"}], 0x228}, 0x6}], 0x2, 0x40000) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file1\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000002040)=0x5) unlink(&(0x7f0000000180)='./file0\x00') mkdir(&(0x7f00000001c0)='\x00', 0x10) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14, 0x800) [ 1500.324073][ T7996] overlayfs: unrecognized mount option "upperdur=./file0" or missing value [ 1500.426894][ T7998] overlayfs: unrecognized mount option "upperdur=./file0" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopz=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: pipe(&(0x7f0000000180)={0x0, 0x0}) fcntl$setpipe(r0, 0x407, 0xdb45aa1) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000000040)={0x399f1736, r1}, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x40, 0x4}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x250d) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d0) [ 1500.805631][ T8016] overlayfs: unrecognized mount option "metacopz=on" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x800}], 0x1, &(0x7f0000000080)={r0, r1+30000000}) 03:33:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="8500000037000000bca0000200000000000000000000003f00000059f871cf21eb94794a9081339c96823a304ae25182014b10c53c51e00f72a6c1be65dddcebdee9df421a2c35b5d3495686fbd17e87448c3be07fe5b4ec08fe6103378ddfb441703f586fe07052fba78b3c31bcd4707f1c8e58fe8fe253c0a661752bbd155a032244f54d476e79b7f37c0e02ed8d60b19890c18e615b9895a03a46e4b806bbe82474b77281f0bf970a382a3b5d57b45616363e64776f1bce88fdc820e392187f5ec661895e8a83894c60fad5d1bd54ab98fb92f2500a95a3fdf0b117705d"], &(0x7f0000000200)='GPLz', 0x5, 0xff7b, &(0x7f00000006c0)=""/195}, 0x48) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}, [0x2, 0x95, 0x4, 0x401, 0x0, 0x6cc7, 0xe7d1, 0x1, 0x1ff, 0xffff, 0x7cfa, 0x9, 0x4, 0x4, 0x80]}, &(0x7f0000000440)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000480)={r3, 0x1}, &(0x7f00000004c0)=0x8) io_getevents(r1, 0x7, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000040)=0x1, 0x4) [ 1500.892665][ T8024] overlayfs: unrecognized mount option "metacopz=on" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy,on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000000000000000, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000248) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x200, 0x58d0, 0x200020000000, 0x101, 0x0, 0x6, 0x4, 0x3, 0x0, 0x3ff, 0x8, 0x9, 0x0, 0x3, 0x8, 0x2, 0xffff, 0x5, 0x200, 0x8f4, 0x3, 0xff, 0x58, 0xfffffffffffffff7, 0x3ff, 0x1, 0x0, 0x4, 0x5, 0xffff, 0x9, 0x1, 0x1, 0x8a, 0x5, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x80, 0x9}, 0x0, 0x3, 0x0, 0x1, 0x14f, 0x8001, 0xc1}, r0, 0x0, 0xffffffffffffff9c, 0xa) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x100) write(r1, &(0x7f0000c34fff), 0xffffff0b) socket$inet_udp(0x2, 0x2, 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d1) [ 1501.171507][ T8041] overlayfs: unrecognized mount option "metacopy" or missing value [ 1501.207988][ T8044] overlayfs: unrecognized mount option "metacopy" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x11) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy0on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x5) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d2) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000329000/0x3000)=nil, 0x3000, 0x3000000) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1501.804979][ T8076] overlayfs: unrecognized mount option "metacopy0on" or missing value [ 1501.883600][ T8081] overlayfs: unrecognized mount option "metacopy0on" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopyBon'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x400442c9, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000200)={0xfffffffffffffffe, 0x2, 0x8, 0x2, [], [], [], 0x101, 0x3, 0x9, 0x83f, "457b1e5eb8465f4ceccb8040caa7cead"}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x900, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_open_dev$vivid(&(0x7f0000000340)='/dev/video#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3f, 0x3}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d3) 03:33:20 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x5, &(0x7f0000ffd000/0x2000)=nil, 0x1) listen(0xffffffffffffffff, 0x5c2) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x2080, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) getgid() mkdir(&(0x7f00000004c0)='./file0\x00', 0x3) mount(&(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x8000000000044000) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000180)) io_setup(0x9, &(0x7f0000000400)=0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000, 0x407000}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x81}, &(0x7f00000002c0)=0x8) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bcsh0\x00'}) [ 1502.129947][ T8100] overlayfs: unrecognized mount option "metacopyBon" or missing value [ 1502.223928][ T8105] overlayfs: unrecognized mount option "metacopyBon" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy\\on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1502.389578][ T8116] QAT: Invalid ioctl 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1502.415964][ T8112] QAT: Invalid ioctl [ 1502.515939][ T8123] overlayfs: unrecognized mount option "metacopy\on" or missing value [ 1502.596872][ T8125] overlayfs: unrecognized mount option "metacopy\on" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 2: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x2, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/110, 0x6e) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0xbef8, 0xda, 0x1000, 0x5, 0x0, 0x4, 0x0, 0x0, 0x3ff, 0xa3, 0x1f, 0x1, 0x100000001, 0x9, 0x1, 0x1000000000000000}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1, 0x6}}, 0xc6, 0x0, 0x529, 0x401, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x10000}, 0x8) open(0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000006c0)=""/204) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d4) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=\nn'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in=@broadcast, 0x4e24, 0x0, 0x800, 0x0, 0xa, 0x20, 0x20, 0x2b, 0x0, r1}, {0x20, 0x7, 0x9, 0x3, 0xc07, 0x80000000, 0x3f}, {0x9, 0x5, 0x9, 0xdc39}, 0x2, 0x6e6bc0, 0x2, 0x0, 0x2}, {{@in6, 0x4d3, 0xff}, 0xa, @in=@broadcast, 0x3505, 0x3, 0x1, 0xff, 0x8b0, 0x9, 0x6}}, 0xe8) [ 1502.917226][ T8150] overlayfs: unrecognized mount option "metacopy= [ 1502.917226][ T8150] n" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x8400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/127) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) dup3(r1, r2, 0x0) [ 1503.044495][ T8160] overlayfs: unrecognized mount option "metacopy= [ 1503.044495][ T8160] n" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d5) 03:33:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00005eaff6)='./control\x00', 0x8) inotify_rm_watch(r1, r2) dup3(r0, r1, 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xf) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=%n'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1503.472996][ T8186] overlayfs: unrecognized mount option "metacopy=%n" or missing value [ 1503.527401][ T8187] overlayfs: unrecognized mount option "metacopy=%n" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x60) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x44, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d6) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=,n'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1503.917206][ T8211] overlayfs: unrecognized mount option "metacopy=" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") r0 = semget$private(0x0, 0x4, 0x20) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x2, 0x1800}, {0x0, 0x7, 0x800}, {0x0, 0x8, 0x1800}, {0x0, 0xffffffff, 0x800}, {0x1, 0x7ff, 0x1800}, {0x1, 0x6f, 0x1000}], 0x6, &(0x7f0000000100)={r1, r2+30000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) munlock(&(0x7f0000669000/0x4000)=nil, 0x4000) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x4000) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x11d0a000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r6}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 03:33:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="070000170000000000007e96ab065de1fe3a148ab2a388fe8975e0982a5163e31d31e0b0aaea0f348d71be4fb8c40c6f0fc0adcb48f610ef743668ee5d33cc6af3c76e3df30ec99ce6ec831db80000000000000000000000"], 0x1, 0x2) dup(r0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)={0xb, {0x9, 0x200000000, 0xffffffff80000001, 0x5}, {0x1, 0x1000000000, 0x7, 0x100000000}, {0x368, 0x3}}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x20}) [ 1503.999928][ T8217] overlayfs: unrecognized mount option "metacopy=" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d7) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=\\n'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x11) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc282841e0000002e3d8960f65b27ee8125f42360c00f00015739d53d5"]}, 0x48}}, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xce) close(r2) recvfrom$llc(r3, &(0x7f0000000100), 0x0, 0x140, &(0x7f0000000340)={0x1a, 0x33b, 0x3, 0x0, 0x2, 0x5, @dev={[], 0x12}}, 0x10) r4 = dup(r1) r5 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000200)={{0x0, 0x0, 0x51, 0x9, '\x00', 0xffffffff}, 0x1, 0x200, 0x100000001, r5, 0x8, 0x4342, 'syz1\x00', &(0x7f0000000080)=['.selinux\x00', '\x00', '!-selinuxGPL\x00', '#\x00', 'em1.:#\'securityppp1].\'wlan1ppp0selfeth0vmnet0\x00', 'vmnet0\x00', '\x00', '/\x00'], 0x51, [], [0xac68, 0xffffffff, 0x8001, 0x10000]}) [ 1504.265240][ T8241] overlayfs: unrecognized mount option "metacopy=\n" or missing value 03:33:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x10000) write(r0, &(0x7f0000000040)="ca1eb53d2642d2cbc41191b9ce2b667da0c43f6ac910768059cf05b9bc29ddafa5c421fcc3d8881d6fcb5e59ccbbdbcd388665dda63d6336d250761404ec97cf7367231f1e905f4b58d44c233002c2f1f1ca918fa542d2ebf210acb774f694667f4776a49f741131c8afa2f02f666d51f8c2a59885f8371f142dd5921300889fff3302e5b292754dade26381612d1a2e1ba928a8307f49b48ef9", 0x9a) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000140)={0x0, 0x4, 0x9, &(0x7f0000000100)=0x4}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x4b, "e48f4e7875590c70c841cceeeed1f89075e0e5f2615b4be3e73fed227ad764682a195d25c8c01f964be3df2e54135d3bcb16454d06f44d7d01c0f893560844300e63fc0cde6ab93330eeed"}, &(0x7f0000000240)=0x53) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r3, 0x1f, 0x64, 0x7, 0xfd59, 0x4}, 0x14) r4 = gettid() ptrace$getenv(0x4201, r4, 0x5, &(0x7f00000002c0)) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000300)={0x6, @remote}) write$sndseq(r2, &(0x7f0000000340)=[{0x0, 0xbcb1, 0x3, 0xffffffffffffffc1, @tick=0x3, {0x2, 0xf0f7}, {0x1, 0x872}, @raw8={"c1c70b520f2f57e88d9124f0"}}, {0x5, 0x8a, 0x1f, 0x4, @time, {0x7, 0x4}, {0x81, 0xb79}, @time=@time}], 0x60) r5 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x7}}, 0x80000000, 0x8000, 0x7f, 0x20}, &(0x7f0000000480)=0x98) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000004c0)=0xfffffffffffffff7, 0x4) time(&(0x7f0000000500)) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) getpeername$llc(r0, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000005c0)=0x10) ioctl$TIOCSCTTY(r0, 0x540e, 0x7ff) ioctl$TIOCSBRK(r0, 0x5427) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x1000, @remote, 0x100}, @in={0x2, 0x4e23, @multicast1}], 0x2c) mkdirat$cgroup(r5, &(0x7f0000000640)='syz0\x00', 0x1ff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioprio_get$pid(0x3, r4) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000680)={r0, 0x81, 0x8, r5}) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f00000006c0), &(0x7f0000000740)=0x68) ptrace$peekuser(0x3, r4, 0x5) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000780)={0xc003, 0x3, 0x7, 0x2, 0xbe7, 0x8001, 0x4}) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f00000007c0)='syzkaller0\x00') getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000800)={r3, 0x7c0, 0x0, 0x8, 0x5}, &(0x7f0000000840)=0x18) [ 1504.333168][ T8247] overlayfs: unrecognized mount option "metacopy=\n" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x70) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x8400) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xff, 0x0, 0x3, 0x6ee612c8, 0x400, 0x10000, 0x200, 0x2, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r2, 0x66, "ad2049427b28ad50697a264c51a62e31055b62b226ad2e6536d24fa08c2bc6da5af1ed578975a28fea8707bb441a62c09575294b0b37a8733882a859446078eafc849245358ce1f03b2a07714f7b79ec557888c6ddd9b9ffe74787d602650e8eafb05608073e"}, &(0x7f0000000180)=0xfffffffffffffc26) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000059ec5285f44c0559d900d17a1ce38724979052e6c3b26ef20d96db979ae8b7ae359ac65959c4843a6896", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3, 0x0, 0xfffffffe}, &(0x7f00000001c0)=0x10) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=o,'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d8) [ 1504.925621][ T8272] overlayfs: unrecognized mount option "metacopy=o" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f000046a000/0x3000)=nil, 0x3000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1504.991501][ T8279] overlayfs: unrecognized mount option "metacopy=o" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=o\\'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x60) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001d9) [ 1505.216801][ T8293] overlayfs: unrecognized mount option "metacopy=o\,workdir=./file1" or missing value [ 1505.266161][ T8295] overlayfs: unrecognized mount option "metacopy=o\,workdir=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x70) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on', 0x42}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1505.492388][ T8310] overlayfs: unrecognized mount option "metacopy=onBworkdir=./file1" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001da) [ 1505.571665][ T8314] overlayfs: unrecognized mount option "metacopy=onBworkdir=./file1" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1a0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on', 0x5c}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1a0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001db) [ 1505.926619][ T8337] overlayfs: unrecognized mount option "metacopy=on\workdir=./file1" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1506.033522][ T8344] overlayfs: unrecognized mount option "metacopy=on\workdir=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={',orkdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x300) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1506.327881][ T8359] overlayfs: unrecognized mount option "orkdir=./file1" or missing value [ 1506.405449][ T8361] overlayfs: unrecognized mount option "orkdir=./file1" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001dc) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'\\orkdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3e8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1506.697122][ T8376] overlayfs: unrecognized mount option "\orkdir=./file1" or missing value 03:33:20 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffff9c, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x30, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x3f}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x4}) ppoll(&(0x7f0000000a00)=[{r2, 0x2000}, {r2, 0x244c}, {r1, 0x4000}, {r0, 0x80}, {r2, 0x109}, {r2, 0x300}, {r0, 0x8}, {r3}, {r3, 0x180}], 0x9, &(0x7f0000000a80), &(0x7f0000001040)={0x100000001}, 0x8) accept4$llc(r2, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x10, 0x800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shmget$private(0x0, 0x3000, 0x282, &(0x7f0000010000/0x3000)=nil) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080), 0x4) ioctl$TIOCSBRK(r2, 0x5427) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x2bb, @local, 0x4}}, [0x6bfc, 0x8000, 0xfff, 0x0, 0x8, 0x1, 0xffff, 0xc49, 0xb803, 0x80000001, 0x1f, 0x7fff, 0x2, 0x100, 0x2]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000240)={r5, 0x102, 0x30, 0x0, 0x3}, &(0x7f0000000280)=0x18) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f0000001080)=ANY=[@ANYBLOB="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"]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000480)={{0x5, 0x3, 0x80000000, 0x3ff, '\x00', 0x7}, 0x1, [0x5, 0xfffffffffffffffa, 0x7fffffff, 0x100, 0x2, 0x6, 0x100000001, 0x4, 0x1, 0x6da, 0x6, 0xd122, 0xffffffffffffff81, 0x29664000000000, 0x8, 0x400, 0x2, 0xffffffffffff9ccf, 0x1, 0x3, 0x6, 0x9, 0x3, 0x7, 0x400, 0x2, 0xffffffffffffd5b1, 0x8, 0xe6, 0x5, 0x7, 0x200, 0x2, 0x100000000, 0x1, 0x7fffffff, 0x401, 0x8, 0x1ff, 0x8001, 0xfffffffffffffff9, 0x100, 0x40, 0x3544, 0x456b, 0x7, 0x3, 0x6, 0x4aeb, 0x0, 0x4, 0x427, 0x2000000, 0x19b, 0x100000001, 0x100, 0x8, 0x9, 0x20, 0x3ff, 0x8bbd, 0xfffffffffffffffe, 0xfffffffffffff001, 0x7ff, 0x1ad7, 0x0, 0x4, 0xed, 0x4, 0x9, 0x3f, 0x0, 0x8, 0x2, 0x8, 0x100, 0xc016, 0x7, 0x43fb800000000, 0x8, 0x3, 0x4, 0x22, 0x80, 0x1, 0x4c, 0x10001, 0x4c, 0xff, 0x800, 0x400, 0x5, 0x3, 0x0, 0x7, 0x1e0, 0x1ff, 0x4, 0xffffffffffffff80, 0x4, 0x8, 0x8, 0x3ff, 0xfffffffffffffe01, 0xbac, 0xfff, 0x0, 0x100000000, 0x7, 0x40, 0x7, 0x7, 0x4, 0x101, 0x10001, 0x4, 0x1, 0x2, 0x7, 0x8, 0x7fffffff, 0x1, 0x6, 0xb86, 0x1, 0x401, 0x0, 0xbb7], {0x0, 0x989680}}) close(r4) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000000c0)={0x4, 0x1, @start={0x6, 0x1}}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000bc0)=0xe8) sendmsg$xdp(r2, &(0x7f0000001000)={&(0x7f0000000c00)={0x2c, 0x7, r6, 0x14}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c40)="76c2d84da192badb1b81bf3045aceb2b34a310835dffc6c6850d955b2227197005f80a80843f4b749f676ee82c73e33e8d668ee6feabcdcd2856e6dade15e49a019dc28beb66a8f5fadb035b8bfca5ec6d1bc2899d72653376072ea92b9fe28596fdd91f20e5988806feb867dc59dcd9e030e9c37ad51c2f", 0x78}, {&(0x7f0000000cc0)="471dd0be9dea2b641c8f8756a448a368d5ef12c15805fc600c24db7b978845fcdd84370e8c0e731da289a0b5462895", 0x2f}, {&(0x7f0000000d00)="9aae5dfd1f499ec36a8385602e79ee5a0b8f17df927a1d7f0873364678dd58a4761d49b5bdcaa1e5a431b8bfb43f30130ad7e9f3e6bee9506036477dbb42b17ea435bcb3f3de1b1238dbd02acfcec63627", 0x51}, {&(0x7f0000000d80)="44a07c7406393984688cae71bd22f06b0f25cd42410c212ac895fb9a62a8595f1c90c42fcbeb41528e7c22f02bd734f2bcd52d62ae65151b5182ff2876a6dda1d86909c7b272017423abc27744b3953bb0b31816b08d3a044195f9ffb15497740cf50b9829c50b67189cef64e53267eb2dd677bbaf9e5f4a3be5aa3b88794493c145074f25e98423e8a8de83d4e5e7b833975b22e6f4194f52e33a6263234a7fda2faf7dfb1c2ce9f4fe2a3223b1d585b415eea4d5db2b419f1b92d2ead32124fac4bc835ff081abf5b8e3ea1ed8141e99339031a496bf42b9b36f6389df0c099679760bfb", 0xe5}, {&(0x7f0000000e80)="6eb05065d0cf5573939f74aca1addb1fcf88ff85c096e3697306bc318e0a3b13e7ea45a8b78a4ef4f68b2f0404cd8e804d515bd05961d3d8f060fe2bf30ed0721d4f2cc6efd6fb77da6b601f4c300770992a0f4bc2b5c6e5d5edd877f9b299b251c398dff8b7a2d95eed66a581d04524399de358b5bc2a5714fd55aad18ba8bcc371dba6eadd893b8490530a5ff04b18fd73be177e553760f6ad5ab706233ec6b823121e1ec707ab21a843b21df211da0ac286f4676fe6857abf82c2cbdceff452ae6f37075091654163cd22e32e9233179e2aca14a947d25fd336d43d5ee12afa06f7eb", 0xe4}], 0x5, 0x0, 0x0, 0x4004040}, 0x80) socket(0x0, 0xe, 0x4) close(r3) fsetxattr$security_evm(r1, &(0x7f0000000980)='security.evm\x00', &(0x7f00000009c0)=@v2={0x7, 0x0, 0x2, 0xfffffffffffffffc, 0x11, "34bcc57d8aa0b8b5c3504da4d852ccbdd3"}, 0x1b, 0x1) ioctl$TIOCSBRK(r0, 0x5427) [ 1506.782942][ T8382] overlayfs: unrecognized mount option "\orkdir=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'w\nrkdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x2, 0xb8, 0x2, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x29, 0x1}, 0x14}}, 0x0) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x300) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001dd) 03:33:20 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1507.019688][ T8403] overlayfs: unrecognized mount option "w [ 1507.019688][ T8403] rkdir=./file1" or missing value 03:33:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000140), 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x7, &(0x7f0000000040)={0x0}) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080)={r3}, 0x10) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x14e27, 0x4}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000500)={0x0, @aes256, 0x3, "01dc4d4ea12ee6b0"}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xffffffffffffffdd) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x4e23, 0x7fff, 0x2, 0xa0, 0x80, 0x2f, 0x0, r4}, {0x5, 0x1000, 0x5, 0x80, 0x72, 0x9, 0x6, 0x9}, {0x6, 0x3ff, 0x100000001, 0x100000001}, 0x5, 0x6e6bbb, 0x2, 0x1, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x1, 0x6, 0x80000001, 0x5, 0x3f}}, 0xe8) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x05\x00', 0x6}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x5) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x8000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00', 0x0, 0x18}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000004c0)=0x4, 0x4) [ 1507.104935][ T8409] overlayfs: unrecognized mount option "w [ 1507.104935][ T8409] rkdir=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x500) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f000030d000/0x1000)=nil, 0x1000, 0x8) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)=0x4) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x100, 0x0, 0xffff, {r1, r2+10000000}, 0x6f, 0x8}) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'w%rkdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001de) 03:33:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'irlan0\x00', {0x2, 0x4e23, @empty}}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 1507.405221][ T8437] overlayfs: unrecognized mount option "w%rkdir=./file1" or missing value [ 1507.492544][ T8439] overlayfs: unrecognized mount option "w%rkdir=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x700) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'w,rkdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'N\x00\x00\x04\x00\x00\x00\x00\x00\x06\x00k\x00\x00H\x7f', r1}) socketpair(0x8, 0x4, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @dev}, 0x10) close(r0) [ 1507.746345][ T8464] overlayfs: unrecognized mount option "w" or missing value [ 1507.820988][ T8469] overlayfs: unrecognized mount option "w" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3e8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001df) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = memfd_create(&(0x7f0000000400)='/dev/snH/seq\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x105000, 0x8) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000200)) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) close(r2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x401, "af9b4a2a5cf0547a0c79f918a2508de62edc3171397ab05c70186900ec44b270", 0x3, 0xffffffffffffffc2, 0x5, 0xbf00, 0x100, 0x4}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'w\\rkdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) semtimedop(0x0, &(0x7f00000000c0), 0xae, &(0x7f0000000000)) 03:33:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000001ea6c000100000000004f00000000000000000000000000000000000000"]}) [ 1508.161188][ T8496] overlayfs: unrecognized mount option "w\rkdir=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xf00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1508.265237][ T8503] overlayfs: unrecognized mount option "w\rkdir=./file1" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e0) 03:33:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getresuid(0x0, &(0x7f00000005c0), &(0x7f0000000600)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) fstat(r0, 0x0) stat(&(0x7f0000000800)='./file0/file0\x00', &(0x7f0000000900)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@local, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000a80)=0xe8) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000400)='./file0\x00', 0x400, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500)="e386fd7c3f6c2bc033e15f71bd050a56fbb0195b468400ba7d310f63e94c35c436c2d871e4bb415d5f41e6a6ce7b16625cf4c6e2493dceed1b", 0x39}], 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r4 = request_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f0000000c40)={'syz', 0x0}, &(0x7f0000000c80)='cgroup.procs\x00', 0xfffffffffffffff8) r5 = add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r4) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f0000000340)='\x00') ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000001540)=""/4096, 0x6}) lstat(&(0x7f0000000740)='./file0/file0\x00', &(0x7f00000006c0)) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) getuid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001300)) getegid() gettid() openat$ion(0xffffffffffffff9c, 0x0, 0x44203, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001500)=0xbb) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x0, 0xb7, &(0x7f0000000440)=""/183}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) readv(r2, 0x0, 0x0) setfsgid(r3) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'wo\nkdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: getresgid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) r1 = geteuid() syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x27, 0x7, &(0x7f00000004c0)=[{&(0x7f0000000100)="04ba53755aff7d219c41f2689b209ddec095107d74476de8c24e61e888cf8a8e424b0ef897c23feb55676c1a959c2a5da01b6494f51ed34f671e01fef22c11ce03734d28dcdaf9d0fe36d898753a1df73941f665dc83cdd1fae493abfcd850def0fd841dc79de5e099780faba8e6991c362f6618d9591877de3be853d153c1783d90cb7abf3316e38ae71964609d73717391", 0x92, 0xff}, {&(0x7f00000001c0)="263301663a145a546912c25ee20fbffa5c10941131bc033f38b05345180ba56233e48a16f058febdbdf336e04aee379f28f7487b933eb26558ac8de70c90dfb6881c7dcb925561c2ed9de9b9f604dd0652809cbf8ecba032a45eb4ddbf8361232c443237a54b45b39b44a3", 0x6b, 0x1}, {&(0x7f0000000240)="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", 0xfa, 0xff}, {&(0x7f0000000340)="11488471d3c98a73b5794ee0b91c4190d5f4e15e03375a66f888bf19fcb760cf", 0x20, 0xfffffffffffffffb}, {&(0x7f0000000380)="2e8269a1b590b84e4e545093411f6dc6a5b9385db122e4cf023cee4e3890c1a6127ed35628924311266f62086da5b2b6e564a811b83a042b1a9506bc7cdbc6df85c1748a8f", 0x45, 0x5}, {&(0x7f0000000400)="01c191ab35ac3a7f37a8", 0xa, 0x4}, {&(0x7f0000000440)="5c1d59020ecacdc5f3d1ea1e98e880643934fd1a28e62a998b614425f3be9659e9118c64d850dc7de8a57b0c96bf3995b1e9591b703fbc5efb33df8f8f47fed28dceb9b065bd347daef305e6af67d3b0d9969c3e3dedf6f527470177dd", 0x5d, 0x1}], 0x1100028, &(0x7f0000000640)={[{@discard='discard'}, {@whint_mode_user='whint_mode=user-based'}, {@adaptive_mode='mode=adaptive'}, {@resgid={'resgid', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@euid_lt={'euid<', r1}}, {@obj_user={'obj_user'}}, {@smackfshat={'smackfshat', 0x3d, ')wlan1{cgroup^'}}, {@subj_type={'subj_type', 0x3d, 'GPLnodevlocpuset,}'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vmnet1'}}, {@dont_hash='dont_hash'}]}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1508.526817][ T8524] overlayfs: unrecognized mount option "wo [ 1508.526817][ T8524] kdir=./file1" or missing value [ 1508.574836][ T8527] overlayfs: unrecognized mount option "wo [ 1508.574836][ T8527] kdir=./file1" or missing value [ 1508.610517][ T8513] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1508.634017][ T8513] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 1508.678507][ T8513] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 1508.751197][ T8528] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1508.766398][ T8528] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 1508.779841][ T8528] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x500) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'wo%kdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=ANY=[]) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0x1, 0x18, "d9ec3c370f5f7dd282e33077d3c63b7f184715252ab16d81e776f84e12003449248201b3cac45580727d286c020e7917f7f2ab94760e6694a44dbdc459df2ffb", "503e4cbbc580be941278fc0fd5fa41ea16d07fc8dfaf304955ac80566107234c", [0x9, 0x4]}) r2 = socket$inet(0x2, 0x4000040000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="9033b323f56edd031aba36094d00000000000000c51c2fd1e1734b34ba275c27467a8cb77dd224a4cd8092a46cf47158e03aaaa2f9", 0x35, 0x4004040, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23}}}, &(0x7f0000000480)=0x84) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x2040, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/79) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendto$inet(r2, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e1) [ 1509.063288][ T8549] overlayfs: unrecognized mount option "wo%kdir=./file1" or missing value [ 1509.124145][ T8553] overlayfs: unrecognized mount option "wo%kdir=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'wo,kdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0xa38, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1509.361817][ T8567] overlayfs: unrecognized mount option "wo" or missing value 03:33:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x100000031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10000) openat$cgroup_type(r1, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x2}, 0x7) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x400, 0xa4, 0x2, 0x8001, 0x8, 0x7}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) fanotify_init(0x0, 0x40000) semget$private(0x0, 0x0, 0x210) open$dir(&(0x7f0000000000)='./file0\x00', 0x4200, 0x10) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xd) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) pipe(&(0x7f0000000500)) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e2) [ 1509.445241][ T8569] overlayfs: unrecognized mount option "wo" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'wo\\kdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3f00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1509.734157][ T8591] overlayfs: unrecognized mount option "wo\kdir=./file1" or missing value [ 1509.848059][ T8595] overlayfs: unrecognized mount option "wo\kdir=./file1" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x700) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e3) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'woqkdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x4000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1510.186064][ T8612] overlayfs: unrecognized mount option "woqkdir=./file1" or missing value [ 1510.301628][ T8620] overlayfs: unrecognized mount option "woqkdir=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'wor,dir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000275000/0x2000)=nil, 0x2000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e4) [ 1510.532659][ T8634] overlayfs: unrecognized mount option "wor" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x6000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1510.642235][ T8638] overlayfs: unrecognized mount option "wor" or missing value 03:33:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x100000031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10000) openat$cgroup_type(r1, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x2}, 0x7) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x400, 0xa4, 0x2, 0x8001, 0x8, 0x7}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) fanotify_init(0x0, 0x40000) semget$private(0x0, 0x0, 0x210) open$dir(&(0x7f0000000000)='./file0\x00', 0x4200, 0x10) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xd) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) pipe(&(0x7f0000000500)) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'wor\\dir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e5) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x7000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f00003d5000/0x4000)=nil, 0x4000, 0x7) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1511.497007][ T8667] overlayfs: unrecognized mount option "wor\dir=./file1" or missing value [ 1511.587801][ T8675] overlayfs: unrecognized mount option "wor\dir=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'work\nir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xe803) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e6) [ 1511.971626][ T8688] overlayfs: unrecognized mount option "work [ 1511.971626][ T8688] ir=./file1" or missing value [ 1512.081692][ T8691] overlayfs: unrecognized mount option "work [ 1512.081692][ T8691] ir=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc0000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'work%ir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0x7, 0x10000, 0xa2c9, 0x8, 0x80000001, 0xffffffffffffff01}}, 0x8) semtimedop(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)={0x77359400}) [ 1512.453666][ T8711] overlayfs: unrecognized mount option "work%ir=./file1" or missing value [ 1512.589730][ T8716] overlayfs: unrecognized mount option "work%ir=./file1" or missing value 03:33:20 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0xefc}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0xfffffffffffff1ff, @loopback, 0x4}], 0x6c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, 0x0, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xd2, "36aaf42340d7752d34fc9b7d11abd88af9ef236bf9dd5702266dbfb2df2facf30cf61f12bd0e8d936d8a76d26288605d84a81f3b19d8bd2a75279df61721a377d2cd6325c192e18f9b064fa2d04e922dda004a12269b1e8b372671cd388fa3fda098c67f9232bd3f6e964a14277bba1303e0168a12733324dbb3f61c4c65bd5f5850374d7213a5d896718d611116290b5a3962ffef7307b3db79d1596ba673b5228cdeacae8adeed58443c6ccd45fab5538225565397fb2c92a83484a765443c288a6f1995ea32dae0c6d4c5adbf9bb26e28"}, &(0x7f0000000480)=0xda) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e24, 0x3, @loopback}}, 0x8, 0xfffffffffffffff8}, &(0x7f0000000580)=0x90) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff8a, 0xc9, 0x6}, &(0x7f0000000040)=0x10) ioctl$VT_DISALLOCATE(r1, 0x5608) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x9d, @loopback, 0x3}, @in={0x2, 0x4e20, @local}], 0x2c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r3, 0x5}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000280)={0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4001, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) fadvise64(r0, 0x0, 0x8001, 0x3) fstat(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={r5}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e7) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semget$private(0x0, 0x1, 0x101) r0 = semget$private(0x0, 0x4, 0x204) semtimedop(r0, &(0x7f0000000040)=[{0x5, 0x3}], 0x1, &(0x7f0000000080)) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xf00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'work,ir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xfec00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) recvmmsg(0xffffffffffffff9c, &(0x7f0000000600)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/184, 0xb8}], 0x1, &(0x7f0000000200)=""/232, 0xe8}, 0x7b2}, {{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/64, 0x40}, {&(0x7f00000003c0)=""/102, 0x66}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/36, 0x24}], 0x5, &(0x7f00000005c0)=""/15, 0xf}}], 0x2, 0x10000, &(0x7f0000000680)={0x77359400}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 1513.171040][ T8734] overlayfs: unrecognized mount option "work" or missing value [ 1513.289597][ T8747] overlayfs: unrecognized mount option "work" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x100000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'work\\ir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e8) [ 1513.537283][ T8760] overlayfs: unrecognized mount option "work\ir=./file1" or missing value [ 1513.601838][ T8764] overlayfs: unrecognized mount option "work\ir=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x600000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd\nr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1513.885196][ T8777] overlayfs: unrecognized mount option "workd [ 1513.885196][ T8777] r=./file1" or missing value [ 1514.004621][ T8782] overlayfs: unrecognized mount option "workd [ 1514.004621][ T8782] r=./file1" or missing value 03:33:20 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x9, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f, 0x0, 0x3d, 0x200, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x0, 0x1ff, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14, 0x80800) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)='\n\\') r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) r4 = fcntl$getown(r1, 0x9) sched_getparam(r4, &(0x7f0000000180)) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r5, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00)}}, {{&(0x7f0000000000)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001e9) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x700000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000050000000ff5d0000fcffffff9500000000000000300b000000000000b4ac028f231ba5b98a94f63e9998f507c0ff10000000dd0f"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, &(0x7f0000000100), 0x41000, 0x0, [], 0x0, 0xd}, 0x48) fcntl$getown(r0, 0x9) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd#r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1514.371292][ T8806] overlayfs: unrecognized mount option "workd#r=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x8000a0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1514.465011][ T8810] overlayfs: unrecognized mount option "workd#r=./file1" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001ea) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd%r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1514.756786][ T8826] overlayfs: unrecognized mount option "workd%r=./file1" or missing value 03:33:20 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x9, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f, 0x0, 0x3d, 0x200, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x0, 0x1ff, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14, 0x80800) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)='\n\\') r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) r4 = fcntl$getown(r1, 0x9) sched_getparam(r4, &(0x7f0000000180)) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r5, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00)}}, {{&(0x7f0000000000)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) [ 1514.817020][ T8831] overlayfs: unrecognized mount option "workd%r=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd*r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001eb) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000288000/0x1000)=nil, 0x1000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1515.138592][ T8850] overlayfs: unrecognized mount option "workd*r=./file1" or missing value [ 1515.222046][ T8856] overlayfs: unrecognized mount option "workd*r=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xec0f00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x96bb}]}}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd+r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001ec) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1515.482150][ T8874] overlayfs: unrecognized mount option "workd+r=./file1" or missing value [ 1515.537108][ T8876] overlayfs: unrecognized mount option "workd+r=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd,r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1515.777993][ T8896] overlayfs: unrecognized mount option "workd" or missing value 03:33:20 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000004}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) flock(r1, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000008f0000000000800000a8f8b3509b2f00004341c586a8000000000000"], 0x1, 0x0, 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001ed) [ 1515.855438][ T8898] overlayfs: unrecognized mount option "workd" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1000080) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd-r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r1}) [ 1516.140356][ T8921] overlayfs: unrecognized mount option "workd-r=./file1" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3f00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1516.223744][ T8926] overlayfs: unrecognized mount option "workd-r=./file1" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001ee) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd.r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1516.474416][ T8943] overlayfs: unrecognized mount option "workd.r=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1516.570382][ T8947] overlayfs: unrecognized mount option "workd.r=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd0r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1516.740747][ T8957] overlayfs: unrecognized mount option "workd0r=./file1" or missing value 03:33:20 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e37db24a4451a5e358df3c28effd28fcabe832ac6ae5aa252608438dd3a329fa22c85b77d340e29fd66ec32c0e13f9f3ab2a1cd482ddfe9b9788400d1a882c56d664b4405c3adff14bcb"], 0x1, 0x0, 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001ef) [ 1516.783745][ T8962] overlayfs: unrecognized mount option "workd0r=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdXr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1517.071576][ T8982] overlayfs: unrecognized mount option "workdXr=./file1" or missing value 03:33:20 executing program 3: pipe2$9p(&(0x7f0000000140), 0x84000) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x10) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) ioctl(r0, 0xb8d, &(0x7f0000000440)="c240322917b14ce7f6c15d5a4f327e555455ca5d8aa5ac0c7b296af0969909e0464e3cac5fa74301104b97ae87a711c3e1eb0b4ca31cbaf93308e655c87c5600f7ffffffffffffff1dc25e68b69c3d5471cbb25491846970d91b5af5473a8b6c48f6631162190779ebc6233b5b486fbaeee20ca713871d5d40e75595a858228ea0be30122eb7b24e1ce67f7bdca16d") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1517.128292][ T8988] overlayfs: unrecognized mount option "workdXr=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workd\\r', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x4000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f0) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="060014c4fc174d046b12819760cbe6e7550ada99307bd81f96c5031d801ddd919626723e0f6fb8ede42fa85937b6155b453258e4b8df2a8ceea9375fffc3a58592c258653e6872cad26a9e4bf9d887", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x1c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x5}, 0x8) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x5000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1517.380370][ T9003] overlayfs: unrecognized mount option "workd\r=./file1" or missing value [ 1517.445865][ T9011] overlayfs: unrecognized mount option "workd\r=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdcr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x2, 0x2, 0x8000000001}, 0x21) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x740003, 0x0, 0x20820000, r0, 0x2}, 0x2c) [ 1517.738213][ T9025] overlayfs: unrecognized mount option "workdcr=./file1" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f1) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x7000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1517.812105][ T9028] overlayfs: unrecognized mount option "workdcr=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workddr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x400080, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) ioctl(r1, 0x6681, 0x0) stat(&(0x7f0000000780)='./file0\x00', 0x0) getuid() write$UHID_INPUT(r1, &(0x7f0000000900)={0x8, "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", 0x1000}, 0x1006) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), 0x0) stat(&(0x7f00000008c0)='./file0\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/19, 0x13, 0x2000, 0x0, 0x0) getgroups(0x0, 0x0) [ 1518.082985][ T9047] overlayfs: unrecognized mount option "workddr=./file1" or missing value 03:33:20 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) [ 1518.163618][ T9052] overlayfs: unrecognized mount option "workddr=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdhr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x6000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f2) 03:33:20 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x412002, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x5, 0x3, 0xc26, 0x0, 0x0, [], [], [], 0xa5, 0x800}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @local}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000380)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@ipv4={[], [], @remote}, @mcast2, @local, 0x7, 0x3, 0xfffffffffffffffb, 0x500, 0xfffffffffffffffe, 0x1040009, r2}) syz_open_procfs(r1, &(0x7f0000000240)='uid_map\x00') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x5) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000343000/0x1000)=nil, 0x1000, 0x200000004) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1518.463202][ T9080] overlayfs: unrecognized mount option "workdhr=./file1" or missing value [ 1518.544553][ T9087] overlayfs: unrecognized mount option "workdhr=./file1" or missing value 03:33:20 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000340)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f00000003c0)='./file0\x00', 0x8010, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="79869c37"], 0x1, 0x0, 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdlr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f3) [ 1518.799691][ T9105] overlayfs: unrecognized mount option "workdlr=./file1" or missing value [ 1518.872414][ T9108] overlayfs: unrecognized mount option "workdlr=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xf000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdor', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f4) [ 1519.140334][ T9123] overlayfs: unrecognized mount option "workdor=./file1" or missing value [ 1519.184103][ T9129] overlayfs: unrecognized mount option "workdor=./file1" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x7000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x11000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdpr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: futex(&(0x7f0000000100)=0x2, 0x81, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)=0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = socket(0x8000000001, 0x800, 0xcf13) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 1519.452431][ T9150] overlayfs: unrecognized mount option "workdpr=./file1" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f5) 03:33:20 executing program 2: [ 1519.522938][ T9156] overlayfs: unrecognized mount option "workdpr=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdsr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x18000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: [ 1519.854516][ T9179] overlayfs: unrecognized mount option "workdsr=./file1" or missing value 03:33:20 executing program 2: 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f6) [ 1519.909128][ T9182] overlayfs: unrecognized mount option "workdsr=./file1" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdur', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3f000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xe803) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f7) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f000047c000/0x4000)=nil, 0x4000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@my=0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18, 0x0, 0x2, {0x1}}, 0x18) 03:33:20 executing program 2: [ 1520.489498][ T9209] overlayfs: unrecognized mount option "workdur=./file1" or missing value [ 1520.597253][ T9219] overlayfs: unrecognized mount option "workdur=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdxr', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f8) [ 1520.876060][ T9236] overlayfs: unrecognized mount option "workdxr=./file1" or missing value 03:33:20 executing program 2: [ 1520.923254][ T9238] overlayfs: unrecognized mount option "workdxr=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xa0008000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdi\n', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1521.199850][ T9254] overlayfs: unrecognized mount option "workdi [ 1521.199850][ T9254] =./file1" or missing value [ 1521.243634][ T9257] overlayfs: unrecognized mount option "workdi [ 1521.243634][ T9257] =./file1" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc0000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 2: 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001f9) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = semget(0x3, 0x1, 0x20) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdi%', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xa0010000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: [ 1521.636586][ T9281] overlayfs: unrecognized mount option "workdi%=./file1" or missing value 03:33:20 executing program 2: [ 1521.763150][ T9295] overlayfs: unrecognized mount option "workdi%=./file1" or missing value 03:33:20 executing program 2: keyctl$session_to_parent(0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000e20200030000001900000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012bbdd71e41502ec8909803306000003000000"], 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01070000000000000000130000000c00090006f102002152e4cb81e045dd8b442fe71c5d8bd6adf6a2a85c9e2f569bd196b4271cd3c04179bcdda381027da4427fe32c9530d039eef2a4a1347de8273d555f56f17603277f7600a5f0bcf3215620b8ab91fe10bb2ec5b567f1f5ec42e10de0532e5b8ba41f7b0c80b86d0f73b5d7c0013996d110daff12a2e1514874d7fca89b212938d84058f4f0e9f3b00053290eb01d1c68973ba407037b7a70"], 0x1}}, 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdi,', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xe8030000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001fa) [ 1522.006707][ T9310] overlayfs: unrecognized mount option "workdi" or missing value [ 1522.088537][ T9314] overlayfs: unrecognized mount option "workdi" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xfec00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 2: socket$packet(0x11, 0x2, 0x300) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x34}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xffff8000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdi\\', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001fb) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) r4 = dup3(r0, r1, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') creat(&(0x7f0000000300)='./file0\x00', 0x6c) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x800) tkill(r2, 0x1000000000014) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8000) setsockopt$inet_dccp_int(r6, 0x21, 0x5, &(0x7f00000000c0)=0x400, 0x4) [ 1522.681190][ T9345] overlayfs: unrecognized mount option "workdi\=./file1" or missing value [ 1522.747820][ T9350] overlayfs: unrecognized mount option "workdi\=./file1" or missing value [ 1522.771681][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1522.777945][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1522.784348][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1522.790337][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdiq', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1522.852116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1522.858770][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001fc) [ 1523.021015][ T9367] overlayfs: unrecognized mount option "workdiq=./file1" or missing value [ 1523.132672][ T9371] overlayfs: unrecognized mount option "workdiq=./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1a0ffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x2c, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001fd) [ 1523.403951][ T9389] overlayfs: unrecognized mount option "workdir" or missing value [ 1523.551601][ T9395] overlayfs: unrecognized mount option "workdir" or missing value [ 1523.577820][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1523.583698][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1523.589547][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1523.589632][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x100000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:22 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0) pipe(&(0x7f0000000080)) 03:33:22 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x7f3667302700) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:22 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x30, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:22 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000001fe) 03:33:22 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x600000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:22 executing program 3: ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000080)="295cc807003e") r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xa0, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000140)={0x5, 0x34, &(0x7f00000000c0)="8d73f0f941bd785bda9c65456390cc0f04d0ad6fc2c3f4da0a4c6806522102334c983bcddc4fa21c8b555a1f9539f0cc0f650ef7d7faf3db764dc8d76473dfbc150e4272700ffb443f1cedf9eec3d13c5b74c4c0a9782ab861d1", {0x6, 0x0, 0x38415261, 0x3, 0xfff, 0x2a3d4788, 0x6, 0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = semget(0x3, 0x0, 0x40) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x80000000000000}], 0x1, &(0x7f0000000080)={0x0, 0x989680}) ioctl$FICLONE(r0, 0x40049409, r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x800, 0x0) [ 1525.790686][ T26] audit: type=1804 audit(2000000002.161:267): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir414784039/syzkaller.yPFOle/69/bus" dev="sda1" ino=16663 res=1 [ 1525.820816][ T9424] overlayfs: unrecognized mount option "workdir0./file1" or missing value 03:33:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="c052"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x256) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1525.879986][ T26] audit: type=1804 audit(2000000002.191:268): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir414784039/syzkaller.yPFOle/69/bus" dev="sda1" ino=16663 res=1 [ 1525.915490][ T9430] overlayfs: unrecognized mount option "workdir0./file1" or missing value [ 1525.987310][ T26] audit: type=1804 audit(2000000002.221:269): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir414784039/syzkaller.yPFOle/69/bus" dev="sda1" ino=16663 res=1 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x42, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000201) [ 1526.176914][ T9445] overlayfs: unrecognized mount option "workdirB./file1" or missing value [ 1526.232328][ T9453] overlayfs: unrecognized mount option "workdirB./file1" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x10000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x80000008) rmdir(&(0x7f0000000040)='./file0\x00') 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x5c, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x6000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1526.525339][ T9470] overlayfs: unrecognized mount option "workdir\./file1" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000202) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = openat$autofs(0xffffffffffffff9c, 0xfffffffffffffffd, 0x200800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0xc968, 0x0, 0x42, 0x8}) [ 1526.603601][ T9478] overlayfs: unrecognized mount option "workdir\./file1" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x700000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x273067367f0000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}, 0x42}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1526.911346][ T9499] overlayfs: missing 'lowerdir' [ 1526.972043][ T9504] overlayfs: missing 'lowerdir' 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000203) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x60000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1527.196712][ T9519] overlayfs: missing 'lowerdir' [ 1527.222243][ T9520] overlayfs: missing 'lowerdir' 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x70000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'\nowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000040)=0x1c) fcntl$setsig(r0, 0xa, 0x19) syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@logbsize={'logbsize', 0x3d, [0x33]}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000204) [ 1527.421844][ T9533] overlayfs: unrecognized mount option " [ 1527.421844][ T9533] owerdir=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x8000a0ffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1527.504524][ T9535] overlayfs: unrecognized mount option " [ 1527.504524][ T9535] owerdir=./bus" or missing value [ 1527.536047][ T9537] XFS (loop2): invalid logbufsize: 3 [not 16k,32k,64k,128k or 256k] 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") r0 = semget$private(0x0, 0x3, 0x208) semtimedop(r0, &(0x7f00000000c0)=[{0x3, 0xd3, 0x1000}, {0x7, 0xfffffffffffffff9, 0x1000}], 0x2, &(0x7f0000000100)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1527.686732][ T9555] XFS (loop2): invalid logbufsize: 3 [not 16k,32k,64k,128k or 256k] 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x8000a0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'%owerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff00000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000205) 03:33:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x519000, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x2, {{0xfffffffffffff876, 0x2, 0x1, 0x0, 0x3, 0x100000000, 0x5, 0x1}}}, 0x60) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)}], 0x1, 0x0) [ 1527.839951][ T9569] overlayfs: unrecognized mount option "%owerdir=./bus" or missing value [ 1527.947551][ T9576] overlayfs: unrecognized mount option "%owerdir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={',owerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xec0f0000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x897cb65decef564a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e26, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'eql\x00', {0x2, 0x4e23, @rand_addr=0x8000}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f00000001c0)={@default, @bcast}) bind$isdn_base(r2, &(0x7f0000000200)={0x22, 0x8001, 0xa6b6, 0x2, 0x10000}, 0x6) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000100)={0x9, 0xdc}) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x100) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) listen(r0, 0x5) listen(r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x93cdcfda7e75b708, 0x0) [ 1528.217189][ T9599] overlayfs: unrecognized mount option "owerdir=./bus" or missing value 03:33:20 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x2100, 0x0) ioctl$BLKPG(r0, 0x90000915, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000206) [ 1528.264823][ T9600] overlayfs: unrecognized mount option "owerdir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'.owerdir', 0x3d, './bus'}}]}) [ 1528.517869][ T9618] overlayfs: unrecognized mount option ".owerdir=./bus" or missing value 03:33:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) keyctl$unlink(0x16, 0x0, r0) [ 1528.576583][ T9623] overlayfs: unrecognized mount option ".owerdir=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{0x20000000000000}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0)=0x10001) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x9}, 0x28, 0x2) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'Lowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f041, 0x0, [], @p_u8=0x0}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1000, 0x0) dup3(r1, r0, 0x0) [ 1528.799512][ T9641] vivid-000: disconnect [ 1528.812420][ T9644] overlayfs: unrecognized mount option "Lowerdir=./bus" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000207) 03:33:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1528.876200][ T9648] overlayfs: unrecognized mount option "Lowerdir=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x100008000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'\\owerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x50040, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000100)={r3, 0x21}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c63000036f0cc561f3356fee88ca312fc07ab8685e4b80d94d3aa1ddeb3804539f642ba6fcc113491ebaeeed4d2191cbc33b19acaa6d15b2165b351e1460bcd6e356286009aa00a34dee21665466dc8079df2569b33b589b307df482fe12d3851b268686338bbd36b009e2a809640de41c2e4aa099620d396cad8cd7e56a185f81715431aa73d3fc0cd7f6d0fdd2f860813132507a07df6f0e9162dba0bea027fd100f2072a727f3c6cd8d69b2b69858489"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 1529.164986][ T9668] overlayfs: unrecognized mount option "\owerdir=./bus" or missing value [ 1529.175842][ T9666] binder: 9665:9666 got reply with fd, -1, but target does not allow fds [ 1529.202177][ T9666] binder: 9665:9666 transaction failed 29201/-1, size 24-8 line 3139 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x200000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1529.229429][ T9672] overlayfs: unrecognized mount option "\owerdir=./bus" or missing value [ 1529.244103][ T9666] binder: send failed reply for transaction 42 to 9665:9666 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000208) [ 1529.275199][ T9674] binder_alloc: binder_alloc_mmap_handler: 9665 20001000-20004000 already mapped failed -16 [ 1529.286118][ T9666] binder: BINDER_SET_CONTEXT_MGR already set [ 1529.292860][ T9666] binder: 9665:9666 ioctl 40046207 0 returned -16 [ 1529.299938][ T9674] binder_alloc: 9665: binder_alloc_buf, no vma [ 1529.307104][ T9676] binder: 9665:9676 got reply transaction with no transaction stack [ 1529.334885][ T9674] binder: 9665:9674 transaction failed 29189/-3, size 0-0 line 3035 [ 1529.364676][T30461] binder: undelivered TRANSACTION_COMPLETE [ 1529.370810][T30461] binder: undelivered TRANSACTION_ERROR: 29201 [ 1529.377950][ T9676] binder: 9665:9676 transaction failed 29201/-71, size 24-8 line 2801 [ 1529.391136][T30461] binder: undelivered TRANSACTION_ERROR: 29190 [ 1529.403671][T30461] binder: undelivered TRANSACTION_ERROR: 29201 [ 1529.438976][T30461] binder: undelivered TRANSACTION_ERROR: 29189 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xec0f00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'uowerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x841, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000580)={0x8, 0x65, &(0x7f00000004c0)="b8705a4e9230419a6bf52234dd7d109d650e761aaea3f3f761ae1af0bf292ea69a25082c7e56443e3c0413b9c32a2805fd795a5ff3506e3bfd5fb9", {0x7ef, 0x7ff, 0x32314d4e, 0x5, 0xdb, 0x7, 0x4, 0x26f}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x40}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000500), &(0x7f0000000540)=0x4) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', '\x01ama\x00\x00\x00\x00J\xb2\xce\xc8\x00', @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x200) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x9, 0xd9f9, 0x7fffffff, 0x5}, {0xe88, 0x0, 0x5, 0x23e6}, {0x4, 0x20, 0x4, 0x8}, {0x0, 0x8, 0x0, 0x100000001}]}) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r1 = socket(0x4000008, 0x1, 0x2) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0xd9, ""/217}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x8, @local}, @in={0x2, 0x4e21, @rand_addr=0x3}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0xfffffffffffffffb, @mcast2, 0xe0}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x401}, @in={0x2, 0x4e22, @multicast2}], 0x84) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x300000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000209) [ 1529.900510][ T9710] overlayfs: unrecognized mount option "uowerdir=./bus" or missing value [ 1529.975249][ T9717] overlayfs: unrecognized mount option "uowerdir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'l\nwerdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x400000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000020a) [ 1530.236860][ T9727] overlayfs: unrecognized mount option "l [ 1530.236860][ T9727] werdir=./bus" or missing value [ 1530.339334][ T9731] overlayfs: unrecognized mount option "l [ 1530.339334][ T9731] werdir=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x500000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'l%werdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x10001, 0x2e, 0x1, 0xff, 0x0, 0x27a34d9f, 0x10000, 0x9, 0xfffffffffffffffb, 0x9, 0x200000, 0x800, 0x80}, {0x5c, 0x0, 0x5, 0x3ff, 0x8000, 0x0, 0x0, 0x280, 0x8, 0xfffffffffffff000, 0x400, 0xffff, 0x100000000}, {0x1c, 0x5, 0x7fffffff, 0x8, 0xffffffff, 0x4, 0x246, 0x4, 0x6, 0x3, 0x9, 0x7fff, 0x8001}], 0x3}) [ 1530.683446][ T9753] overlayfs: unrecognized mount option "l%werdir=./bus" or missing value [ 1530.801606][ T9761] overlayfs: unrecognized mount option "l%werdir=./bus" or missing value 03:33:20 executing program 2: socket(0x8, 0x8000a, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000feffffff01000000190000000000000007fd6c6f00000000000000000000000000007465716c3000000000000000000000006970365f76746930000000000000000062637366300000000000000000000000ffffffff0000000000000000b8000800b8000000e800000069700000000000000000000000000000000000000000000000000000000000002000000000000000ac1414bbffffffff00000000000000000006a000000000000000000000000000415544495400000000000000000000000000000000000000000000000000000008000000000000000000000000000000008ef8378f6b46000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff000000000000000000709f4af3e25b52ca7807371c46d529cd8f295d3cfc5b13f93a4773dacb5f38386d4df566cc1dc6e3aa9e7abb5122c0a18df798df903e0042d0a752c7d44955c48fb13bf0203073a6c93aceea4ea7c9093bcbf1f28466dae2b994d230a4af50d277c7a29a349352b20676d285f48c1061c290a45078786b05e72892298d9303"]}, 0x261) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000020b) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'l,werdir', 0x3d, './bus'}}]}) [ 1530.900436][ T9765] kernel msg: ebtables bug: please report to author: Wrong len argument 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x700000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1530.945331][ T9770] kernel msg: ebtables bug: please report to author: Wrong len argument 03:33:20 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xec0f00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1531.050379][ T9780] overlayfs: unrecognized mount option "l" or missing value [ 1531.139377][ T9785] overlayfs: unrecognized mount option "l" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'l\\werdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x800000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000020c) [ 1531.389858][ T9798] overlayfs: unrecognized mount option "l\werdir=./bus" or missing value [ 1531.467549][ T9804] overlayfs: unrecognized mount option "l\werdir=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc00000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lo,erdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xf8, 0x81, {"54755e2b85f7fd89481fc65492ef0651fa7572bb0b4e17721ce8b49616224019cc994810c6c569380d2b99ae09a4a5b46f7c882d507729a39fd0076c4af58fb92ccce23d3855ce349e37f2ab03c474b511015b661c9a2cc80392d3e64fc845fa9379864a6bbb06350dcfeea4180c4d41b815bd2dcea8cc76768afa97974d8bbff044937cd6a49bde0bf75687f8f1c2ccfc08c473fab61bb1c545411dabdabbb00281366097d52d2321e7e3fa06b31a703bb7394b55ce9ad361784e4a6976892c506d0c696f631b8d1d7c4dd5a820b56820254dae81d7c84ea4755e74cca28f9e"}}, {0x0, "e2aa30fba295cffd3bb2c0b73cf2718a167cbf1ce269fd39640d0e9e81c177e5a1e678965b124ec6405294dbc05f6cf2b90ebb0d5edd39906e923d7cb246a0ec768d8400ad7b4f189a342af249"}}, &(0x7f0000000240)=""/245, 0x147, 0xf5}, 0x20) fsetxattr$security_smack_entry(r0, &(0x7f0000000340)='security.SMACK64EXEC\x00', &(0x7f0000000380)='#)user\x00', 0x7, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xf00000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1531.721706][ T9822] overlayfs: unrecognized mount option "lo" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000020d) [ 1531.818329][ T9830] overlayfs: unrecognized mount option "lo" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1000080) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lo\\erdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1100000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000003c0)={0x0, @loopback, 0x0, 0x0, 'rr\x00', 0x2, 0x0, 0x49}, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000480)={@loopback, @loopback}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000004c0)={0x6, 0x0, [{0x80000001, 0x9, 0x8, 0xffffffff, 0xffffffff}, {0x80000007, 0x800000000000000, 0x0, 0x5, 0x80000000}, {0x40000001, 0x3, 0x1a31, 0x1, 0xffffffffffffffff}, {0x0, 0x20, 0x0, 0x8, 0x6}, {0x1, 0x880, 0x8, 0x6, 0x5}, {0xb, 0x8, 0x7, 0x1, 0x6779}]}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) mbind(&(0x7f0000a18000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x9, 0x63, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000110) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000100)=0x8) [ 1532.104403][ T9847] overlayfs: unrecognized mount option "lo\erdir=./bus" or missing value [ 1532.163289][ T9857] overlayfs: unrecognized mount option "lo\erdir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'low\nrdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x1800000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000020e) [ 1532.461499][ T9872] overlayfs: unrecognized mount option "low [ 1532.461499][ T9872] rdir=./bus" or missing value [ 1532.595012][ T9880] overlayfs: unrecognized mount option "low [ 1532.595012][ T9880] rdir=./bus" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000300)=[{r0, 0x3200}, {r0}, {r0, 0x1}, {r0}, {r0, 0x488}, {r0, 0x8704}, {r0, 0x40}], 0x7, &(0x7f0000000340), &(0x7f0000000380)={0x4}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x800}, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8001, 0x20000, 0xe, 0xb836, 0x7, 0x2, 0x3f, 0x7, 0x328, 0x40, 0x26, 0x0, 0x9, 0x38, 0x1, 0x9, 0x10001, 0x7}, [{0x6474e557, 0x0, 0x6, 0x2, 0x2, 0x3, 0x1000, 0x2ea9b577}, {0x60000007, 0x5, 0x9, 0x68, 0x0, 0x10000000, 0x1ff, 0x1}], "d486b7ca0131626f6e6fc1f1c48c54d291e64c77c154d863cdcd5f7e8ead3ae28a2343f711ae797f452865e4821fb6a8d9986c9c9b34f91fe75c84107c5780bbe2fcfc3ac89c0e8be97344f511d241b770abbba0f242f6afd953a66b7c0d157ebac75fc817c201f3e93b81", [[]]}, 0x21b) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3f00000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'low%rdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000020f) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0xfffffffffffffffd}], 0x1, &(0x7f0000000000)={0x77359400}) [ 1532.898064][ T9898] overlayfs: unrecognized mount option "low%rdir=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) [ 1532.981779][ T9901] overlayfs: unrecognized mount option "low%rdir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'low,rdir', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x4000000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1533.207113][ T9924] overlayfs: unrecognized mount option "low" or missing value 03:33:20 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r0, r1, 0x8, &(0x7f0000000300)={0xc, 0x0, 0xfff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[{0x20, 0x0, 0x0, "1e19a2e753c899ab86"}], 0x20}, 0x0) recvmmsg(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/73, 0x49}], 0x1, &(0x7f0000000200)=""/219, 0xdb}}], 0x2, 0x0, 0x0) close(r4) close(r3) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") get_mempolicy(&(0x7f0000000000), &(0x7f00000000c0), 0x5, &(0x7f0000037000/0x2000)=nil, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1533.262978][ T9926] overlayfs: unrecognized mount option "low" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xe803000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'low\\rdir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000210) 03:33:20 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8000, 0x20000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40084) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xfffffffffffffd8c}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001440)=ANY=[@ANYRES32=r3, @ANYBLOB="00100000c029fffa10390a6bf3b33dd01513d32d978e22879d3485cf9702fc3135e88dd391aebd51a889313785c973c044b0a9074ec5eea2bdeab90c1ddf2ec3f8c89c9214dd27ae969a4cc4cb296bde585be056c6d419aea542a48b07a5f7499fa7c69300bdab6427e4b700eb73bdd421c8d1642a6a944ac3c8bf98d292cc5683b37f1ae5966fe7b7d6a778d957fdbf80954802edb839ba279506bf32c998b0be8d123cae94f895fe6298e1f06ad6327327c35919a2572d7b2715900b7ee433c056c6300c1d517744e0a2c949bfd3199d24aebbfdc5735d9443cdc26d6e1f4300baef2b76d0c6a861970ca07a44ca288daf657bed20a900914b9bc34009c23314042759b7f2f5925c7b63c91921cee9dcd017fc1a62b6f792efc9496c3584e522dde71d835b1dd3c28d54b6423dcc37001f36359d9bea89429b0d97116782079274545958213db545571f4d5ed0e6a4967dbc28a2759fb752e712c430d111947081e9745a74bc52e82b187c466a19c59bbbc91a03bf36f3faf3735e3ece3a5de0c30820371f848b0c6e3784d6d761654d7ba2541514d6c5f4409dbd2af4852f99d9e3c2bca80d0c23b53df1aaacec11ea1abf23f59c23a4a4a8f8e711b5f10a3b8941cc03368f5b44b4a85908a400ed984fd92e7f77380ef7de72e6b1e91acd83b0fce47b71c414c94a4180ae5208dccb8416958331037608790a5d0baa3ec939d8e0d058b76b2f1ad89ec5d85fedfffb59dee6c1199ce11cbfb906820b6eff0de1f1ffa3a30cd4dfe6cf403220caf9721140c2728c72c2fd08b5ce0863935f55a6e48a4f74cff828a9c81e1ffe08ad638df30de09e88524bf1ab5c71aa33fb6b70d87d52a26faff05d5205786ea127a844af80027cfb59866efbb07f439c4fae298f5bc8c010df7c2b2af927b18e7f0e89cb57e525c24276c67b5563059b5a2dea0db6313cc26d5f400569e796d2de8b7a30aa97d556b24fc7414597a1f68cb9b1aebfe1a0004a885ca8e35ace8913d20ced6c3697805323034d7aebd5fb84a0186abec5ef5ef0e59f564c3eaea89b62cbb3ea9db42beba9d009744a4603c66addc0c52a7cc701d9a05afbc7e1dcb2f1fc32f973b0e5e7573068a943bd92ad56c28aeb041291e1c2be8903c556240c24bc9cefc51701a117ada83dae5163cab4613db6933934d3590aa82f13d38c210eba21d2aaf8746044c36c0827e1321db18ae7aaffd531e5cdaebbc47d40940fcb826df3df0899029fbaa7be3afd54c404906232dc2050bee7da243eed4b7a9d6fe45e2df6b24a537a8ac23c60aab921f362e2247823db079a9513da254aaa31d8ea13b02bd1f315547104353af92b435f74ee8a1e54273fde684488afb166914782cbb17f1793fa3efcbae7b2952c69d7da2d258bbb238dc25a8723514c3a48ff436c7fd29cb45231825d8140c4de4275468e6f92abc14ea1e6c2b3213658eee12901b6614d206ba9d1876cb1b9eb183b33c9352f030b299b0089714e44aa2bfc2ff009623d2189c034a53aede024a7bc21a01760892bcbeb592e5790b62e2f4fcbf7c0e896af3c4c6467b4da529dc5faee8b798a15288f38e288456814e12d769071a8c39cb74da487b53ecfec40a1f1bd821197ecdc79e86ffbd9de04f6c6d64452d5be4ee24dc69ca92da181aad043546eada1c6ab72fd43a8e23a69571caee670c3c2007526f945f28584584515a2b06865529b81e472a6767da4dc21d3880ff5f1071aaeaeadd918c3cb4c0014bad6de947290f6102568f6e29940143af3a232134b4dfd99533dafeb29eda668320df99ebb9509149336eb451813a26abda6f02645e85e1016e22c595417c3129f8fe9e2576198a9c851b5e23a3accbe25299fffcdb0572f2de87b754649c94b4367eeb6f9c02d06281680e3e9967c87736f0b3ecb8b75d49bf4cd789d937d980d1090213caf9888dda7602f96b7048ec22ce8ff2a6ffc80bfa18ccc02fac137ef007c75bb557e790c2d8a7b95f4f8645d8dac4728988ef42791ada92b42cfab2713fbe60ef3213c586fccbc002da3b98b642619a61627ef35694bd0c36c8609a795907099f3e643d5b40970c61868119810a4486eec9e219e1a65b17af8a02564ea41d11157d89588d217060f46e96ff91803d547bce4719ae8a5578c5262079dd6c6aa362655972f6718d535d31e7f5346bd2570aeaa5e85986b263e445702deab310e7a6d283c795a6adc0abba80a946b4069f9ea5cd6a68339677767a4a399524e2bbaf03d1989b50ccdc28192c98eafe6c152ad135e898698c1a7c7d8f2cd02df9dea8dda16bb5da8eeaff6825ec20ec6f26e5d1b4259651312e882cf40c18b621802359998814912db11ad26be66e00adfb2dcde3eaeb168775cb99cb585fea40cd153637a4d55e83e605a721e761ed4e37cbd2f6da1bf24a60e9df39da817deb12fcfa55fd2beafb4e4a59afd9a183e540d50408aca8bf3d95c06ba59ce1a213b344b6686919af344b571be776ab6bfff1ff4a59f3231ffb988b9172cc468c6a59bf22ee1b443cae0c0e36e10ee0d9988abab4d4fdc21ed9c2e7be9c12fbbab10c0f1931d05fc1510025f18df11d49c3829281bd516911d36280ad063e17200b2f9f0fa823f9c65d2a88ba19846cb659979b88a915739a136ba69eac5d6874ea2565cc1a79575cbb1d549319698bd282586489ef0f8e7b6fd05720822edabf11e540707e3940f474d4cb540f469618b30c95964c781fcbe5924daf86925559603a0e0e307552f94510dd9400f24903d70984628fe6f1bcd86d1def27f2f073f109315450c1402eeba5e132cb5ca911608212b5065015e8ab2afa6dc89fe168ef9aa8bca4cb8550688cd556a17e67b6149d3c33f8d183e431e87841ce68a669ccdf24131fd0ffeeeffe72b73a391eb816dbbc2e2634b00138e4c47ed15a67f7d327c91ee2204e691b3b5978c81d1d40319fd5e1332376aad9008a3857cc952a5ae9001bea4a72d982c7d127ac97ce547476edd61956ae4f3f1240a933e6e0c769bc0cf4fb9f86f0fd60ad8e83d0b94adbe5100ba473f009b0af62c4c1041c9cca292ae84174a63c4c0b8ae7d9d8e2e14eb09b0ddad66cd76bfb5f158d946b78d46210673ee7c8ec980dbb6a487190c16e9b1b33f6c8deef13b19e6cb0d12042e27fd735de45c170a7c7d543db58ef6f9ae6eae579f712714d73d2d53ee412da9193ebbc4d1af14399c5fd565436a09f540d588c979fe21cd63426a0af0158b87339c373d8de2017ca478f9a393045e4a198b22afd3bd34a5fd9ddac91cba709cb13c6122b422fab4f833e644872de4d48b83bd1cb9aef7bfeeba6ff15b9cf30f386563e5a4cc2aaf6301c71af0338952c5a336a1f0d6a7e720e6943f3e32428ae33a9dbf16d835c4b4d5921b824c079521470d1e2bdbe50c3e52f39a18f9b6a56eb0e41ec04455119d690e0b5de4de02f5caae849ba9689aeccb89115e108ee00edb03331d4acb9f1f4b56899ea5ac5107feab98cb281dc483e9c57c7a0e67ae6c46735bd4e159a0c6854b7d64cb3a29b56f9b6356cc121510ef85762a607f144db57592ebaeb975618c7d21bc4fcc5d7272a28246551b278ab0beaee81238755133a8b4cd6d6d5e76573e8b98000d9521b98f1fa89273db3c827a2e8052fc1f79c536aca9b0874e836b78d29a446fdd2ed02fc3d6acef0310c99094add079bedc8cc72313acac639e0f70439ebcdd7e164d0ad50fb4808d432586d8d6fe3ce3fba4f0fee30f4936e81eada457d0574506d533b1efc4a6ce4c5a37d029b4b046a51c010a16ebc311fbc2a8c101ca3911b3363023126c99c1d5df756becfcd0a2cdc316552af1e61940ef8bd5b08a8d93f789532cc9419417fe46528e4458d64eec3d999d023dbdc329df95f8ab1b4812d64d65903a38f4cf5cd103870fbc26ff6d01bb9bd57d6396f3d15bbe2e98ddbb64f4b3aeb990d3cdbe6c230458756a1dfe9323f9b825792a53e5576874dd137e79e691fed596ee49151ade5798aeeabe4960251d0d9ace8cc108908c33af7af992d7a992c4b32d04a2c02006c894f3de8c8570a1ebeb832c3164b7d2c157e9b779a15d76374d480b380453da4c94fcb307e0c708f7dc18c2f74d159c635e31d91b3932d3ff5fb4c22f8cb1b203a1eae267b5a8f1e595c243a91676f241c665eca8c7d12304cbe3f7f8404ad5a6d655bdcfd0f0de1ad15a5330c73b115ffc343506b268e280da55e7e15ae0be5e024f31c999792ad3b0617bac3d8485d1cf3b10ecab5372d3c6f192554461e1ff403d9020f5794076467646c3f6e9fc3eb52ad6e48cc1fff0e61acda5fe2f409d318ea86ae8905c16537c9f56d0cb33933984462131b06dc45744c481dd83fd14c6e4112a11b1b91c9919d80f9195edbf461b3032a4350777ad6054d73e6d5bc65c64ea95f62d76a5d9c31c8a19eb8186dde1a9531e711f5a614d10aa5320079f1ec95c5afbe82ae4a5abbf637790ebdb592a1e6c97ff6f9a6ab75444717c96ef607eab9e51e5db8386ae372ea85f4cf6737f18b397797f9dd499d20d3aaa23c2ba8442786febe4cfb02e82076884e99184546b0bd9a6ff939b5f9d78b79f110f9be030daf6b14bf2ca103e068eff378fb5475606fc4a68ee7a7faed5e40eae3a8115e02dedb56a5d97d8ed55fd0663ac3952f0c650188bad10084c263862d6f90f57f79afae1ecf1d6005abd31d4dfca2ac48631bd15599dab6a7be5a95e0f8b69887084bacfb2ab821a6ea316d52e185cd8bb5f8fa2ecf2106975aa1319a5a9e5468931ee3f0a84da44542533fd9cf4a317c9de48a5e60679a78288ad1e43f7f1fae03c77172945d48ba0f502bb95e4b29d4343ebfabdc0d2efc1da42ce289ac518747f92b40d0a69f6795dd5feaf456959118248e4aa8eb18b51f74faf27e1e9510b9e2338656a2100ca36c40c6b7aac71fee4d6e6233118bc67875a43d07e8e375b4cd2e19ddbab5d57eb8e5303704175fb690ccab0aba78c40cab74002d97998af0cafee2ffeb1be28c44bd64f759f6dbda8fe10ba35418ed12e9fd3ac3901f622c1b72f335d07633813614ac1d22e455daa02dd62c647bee1b59df033e11a5b8d1faae7e809ff2617b9692f2fdec679741cd82ca2799c1470b305f8d46f55edf8b1d9d0193268572c6b940f575ad3bb2a15f3ed30f19fa8e95354739bcd824b82b16ea5bc3a8318fe5353e0b17d7b371b11ede4dc8089980d7e78ffd05bc9c4c755f4a51657daabfe5370308d6eb6f64b19b49a2bbb6bbdceb8ca30c40baa53ef07afbe898352cd166be2d03504c292a52a0f4393c6b731aa1d57cbab8a4409ccf9cc01cac9ddd81fde17451e2aa9ada4f24c427c079200a2c868244263eeec134d4fe74e3759debae82904377658924b46862e8b039783cb626e6e9809f9e2e62d94e2e06b64c4963ab28965308e6d01fb67b6c3cfbda5dcefb3d0481a2927a9a43aa3435e1ab4735a5cb35e1f545b4dcf2cd685c470b4d57fe92971628a6913d66289aefbfbc71869b0f3a7a661d2428a39528a696eb968a40ec246b349c9657d293bb57d65cd6a0966b2cb5625f7dfde07f2f9651a27333ec691097c40c6c84267a5fefda7b1626c1a05ecbcd6e0a08f5f9bf83c2453a7182d33842457f7e19827c04f55116c15d973b53f283959bf1f06ffbfe301b666256823743237ad96c5022bd456c38926c826ffa2cf1c42398867515826acd9ecb05e28884cb8f489c19db89fb262ad3fe0e4431d2c37a7594ce5fd0c5e77c7176aacbdff6e5c32f976ffc3abd60a9851e521c764316e"], &(0x7f0000000140)=0x1008) r4 = fcntl$dupfd(r0, 0x0, r2) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f00000001c0)={0x8, 0x5, 0x3}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001400)=0x0) setpriority(0x0, r5, 0x2) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffff00000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1533.606505][ T9949] overlayfs: unrecognized mount option "low\rdir=./bus" or missing value 03:33:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80) write(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e23, 0x3, @loopback, 0x7fffffff}, 0x20, [0x3, 0x3, 0xc0, 0x20, 0x2, 0xe31b, 0x100000001, 0x3]}, 0x5c) [ 1533.675748][ T9954] overlayfs: unrecognized mount option "low\rdir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowe\ndir', 0x3d, './bus'}}]}) [ 1533.907452][ T9967] overlayfs: unrecognized mount option "lowe [ 1533.907452][ T9967] dir=./bus" or missing value [ 1533.967158][ T9972] overlayfs: unrecognized mount option "lowe [ 1533.967158][ T9972] dir=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000211) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffffa0008000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) tee(r1, r0, 0x9, 0x4000000004) close(r0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=0x0) ptrace$peekuser(0x3, r6, 0x5) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = semget(0x2, 0x4, 0x1) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000000)=""/6) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x400, 0x200000) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000100)="f44c613a36811ad76f999c76c4bc016ad60042", 0x13) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowe%dir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r1, &(0x7f000000a080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x29, 0x802, 0x0) close(r2) socket$kcm(0xa, 0x5, 0x0) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="c6", 0x1}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x3f, 0x4, 0x6, 0x9}, {0x6, 0x7fffffff, 0x5, 0x7ff}, {0x100000001, 0x800, 0x9, 0x3}, {0x140000, 0x1000, 0x4, 0x3}]}, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x801, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8907, 0x0) [ 1534.286223][ T9997] overlayfs: unrecognized mount option "lowe%dir=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffffa0010000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1534.351174][T10002] overlayfs: unrecognized mount option "lowe%dir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowe,dir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000212) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1534.634356][T10015] overlayfs: unrecognized mount option "lowe" or missing value [ 1534.699165][T10017] overlayfs: unrecognized mount option "lowe" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowe\\dir', 0x3d, './bus'}}]}) [ 1534.936744][T10032] overlayfs: unrecognized mount option "lowe\dir=./bus" or missing value [ 1534.952815][ C0] net_ratelimit: 12 callbacks suppressed [ 1534.952858][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1534.964983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1534.971598][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1534.978072][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1534.999889][T10032] overlayfs: unrecognized mount option "lowe\dir=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x2, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000213) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'loweqdir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x2aaaaaed, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 2: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r3, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000080), 0x7d20, 0x0, &(0x7f00000001c0), 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000002c0)={0xa, 0x70, 0x0, 0x200000000000000, 0xff, 0xff, 0x0, 0xffffffffffffffc1, 0x0, 0x8, 0x0, 0x4, 0x2, 0x9, 0x41ab80d8, 0xc4, 0x0, 0x8, 0x4, 0x42, 0x400008, 0x2, 0x5, 0x9, 0x9, 0x0, 0x3ff, 0xffffffff, 0xc000, 0x3, 0x0, 0x20, 0xff, 0x7ff, 0x19, 0x7, 0x6fb8000000000, 0x3, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000180), 0xf}, 0x3000, 0x4, 0x0, 0x1, 0x1, 0x6, 0x81}, r4, 0x10, r2, 0xa) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x6, {0xffffffffffffffff}}, 0x314) getpeername$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0xffffffffffffff9d) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000340)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x4, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) [ 1535.225190][T10053] overlayfs: unrecognized mount option "loweqdir=./bus" or missing value [ 1535.325337][T10062] overlayfs: unrecognized mount option "loweqdir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lower\nir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1535.439932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1535.446389][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000214) [ 1535.563351][T10079] overlayfs: unrecognized mount option "lower [ 1535.563351][T10079] ir=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x3, 0x7}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000002c0)=""/219) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1535.678856][T10084] overlayfs: unrecognized mount option "lower [ 1535.678856][T10084] ir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lower%ir', 0x3d, './bus'}}]}) 03:33:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100e00f80ecdb4cb9d91f63190400000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 1535.921990][T10094] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'. [ 1535.964461][T10105] overlayfs: unrecognized mount option "lower%ir=./bus" or missing value [ 1535.990804][T10094] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'. 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x5000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000215) 03:33:20 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000214) [ 1536.085839][T10108] overlayfs: unrecognized mount option "lower%ir=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000100)={0x800, 0xc8, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000340)={0x6}, &(0x7f00000005c0), &(0x7f00000006c0), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000740)='team\x00') getsockname(r0, &(0x7f0000000380)=@hci={0x1f, 0x0}, &(0x7f0000000580)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x250}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="6be61db638d186be3eba32c11469fe3014c5ec7f09fd012e8ac2bb6fb870314059eabc7dc2b6a36b87f358035bb5400746cf54b32c2c9c5b96d8b8eb86abb41fb2360d677739d5cff250dfcf01e8f16ddc34d6653e0d46e202f5fd85f80b00e5aadc23a371dbbc8b1f7690456c821520813fd5989cdfa8eefb6510", @ANYRES16=r5, @ANYBLOB="080326bd7000fbdbdf250300000008000100", @ANYRES32=r6, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400f9000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x38, ""/56}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1536.162131][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1536.167982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1536.172192][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1536.179553][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lower,ir', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x10002, 0x0, &(0x7f0000787000/0x2000)=nil}) [ 1536.350579][T10126] overlayfs: unrecognized mount option "lower" or missing value [ 1536.450209][T10130] overlayfs: unrecognized mount option "lower" or missing value 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b3fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000000000011, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x100000073) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000300)=""/167) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff9100080081001900080045000c1c0000000000119078ac14ffbbe000000100004e2100089078"], 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lower\\ir', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000216) [ 1536.696524][T10144] overlayfs: unrecognized mount option "lower\ir=./bus" or missing value [ 1536.770238][T10147] overlayfs: unrecognized mount option "lower\ir=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd\nr', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1537.058597][T10166] overlayfs: unrecognized mount option "lowerd [ 1537.058597][T10166] r=./bus" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000217) [ 1537.128946][T10170] overlayfs: unrecognized mount option "lowerd [ 1537.128946][T10170] r=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x7000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd#r', 0x3d, './bus'}}]}) 03:33:20 executing program 3: truncate(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r3, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1537.400915][T10188] overlayfs: unrecognized mount option "lowerd#r=./bus" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000218) [ 1537.454094][T10189] overlayfs: unrecognized mount option "lowerd#r=./bus" or missing value 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b3fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000000000011, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x100000073) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000300)=""/167) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff9100080081001900080045000c1c0000000000119078ac14ffbbe000000100004e2100089078"], 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd%r', 0x3d, './bus'}}]}) [ 1537.754107][T10212] overlayfs: unrecognized mount option "lowerd%r=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@newneigh={0x4c, 0x1c, 0x800, 0x70bd29, 0x25dfdbfd, {0x1f, 0x0, 0x0, r5, 0x50, 0x15, 0xb671dab6fa789c97}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0xfffffffffffffff7, 0x9, 0x6}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_SRC_VNI={0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84f586d19e5a1e35}, 0x4000000) [ 1537.807302][T10216] overlayfs: unrecognized mount option "lowerd%r=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd*r', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000219) [ 1538.097190][T10230] overlayfs: unrecognized mount option "lowerd*r=./bus" or missing value [ 1538.169834][T10233] overlayfs: unrecognized mount option "lowerd*r=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd+r', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "80204a225575ed017247c9af5bd17042c95d9b41"}, 0x15, 0x3) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x8000000002000be, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r1, 0x7, 0x30, 0x101, 0x10000}, &(0x7f0000000280)=0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000021a) [ 1538.475939][T10251] overlayfs: unrecognized mount option "lowerd+r=./bus" or missing value 03:33:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x10, 0x1cafeaffd609fbc5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x2c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x206, 0x0, 0x0, 0x1, [], 0x0, 0xfffffffffffffffd}, 0x48) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x1}) getrlimit(0xf, &(0x7f0000000080)) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) restart_syscall() ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x20101000, 0x1000, 0x1f, 0x3330, 0x5, 0x8, 0x100000000, 0x1, 0xffffffffffffff66}, 0x10) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1538.569950][T10256] overlayfs: unrecognized mount option "lowerd+r=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd,r', 0x3d, './bus'}}]}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x2}}, 0xe8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000440)={r4, 0x1, 0x6, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000380)=""/152, 0x98}], 0x2}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf250100140079000000080012000300000000000000000046000200b4a69956a98fe47000000000ac1414bb000000000000000000040000000000000000000000000000000000000400003f00000000000000030000000000120002000b00050000000100000000000000000000000000000000000000000000"], 0x88}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400000000000117, 0x0) [ 1538.853088][T10277] overlayfs: unrecognized mount option "lowerd" or missing value [ 1538.903544][T10278] overlayfs: unrecognized mount option "lowerd" or missing value 03:33:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000001, &(0x7f0000000200)=0x75, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000580)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000400)='em0\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9af, 0x4000) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x65, 0x40303, 0x0, 0x0, 0x8000, 0x8001, 0x0, 0xed6f, 0xb3, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x8000, 0x0, 0x8e, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x652f, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x10, 0x3, 0x1, 0x9, 0x0, 0x7, 0x4}, r1, 0x0, r2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000001c0)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) write$P9_ROPEN(r3, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x0, 0x1}, 0x1}}, 0x18) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) getsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040), &(0x7f00000003c0)=0x32f) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75adde08e55100ccc787198f5"], 0xb4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000021b) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd-r', 0x3d, './bus'}}]}) [ 1539.137166][T10292] overlayfs: unrecognized mount option "lowerd-r=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000002c0)={r5, 0x1}) [ 1539.178027][T10294] overlayfs: unrecognized mount option "lowerd-r=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xc000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd.r', 0x3d, './bus'}}]}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x404, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x28000000000, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000021c) 03:33:20 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000002c0)={0x7}, 0x7) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x2, 0x77357d7f, 0x0, @stepwise={0x7, 0x0, 0x6, 0x30000, 0x3, 0x54e4}}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000300)={0xb, @pix={0x7, 0x0, 0x4c47504a, 0x0, 0x400000000000, 0x3, 0x7, 0x9, 0x1, 0xf, 0x2, 0x7}}) fallocate(r2, 0x0, 0xc9, 0x6cf) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x101}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa000005}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28751ee5", @ANYRES16=r3, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4004}, 0x90) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) [ 1539.617009][T10319] overlayfs: unrecognized mount option "lowerd.r=./bus" or missing value [ 1539.708236][T10324] overlayfs: unrecognized mount option "lowerd.r=./bus" or missing value 03:33:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x9, 0x30, 0x9, 0xfffffffffffffffb}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x4, 0x30, 0xbe59, 0x1000}, &(0x7f0000000140)=0x18) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x84, @broadcast, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="4300001f0000000e000000d3706f2730e98b6a70410c72d104"]}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x10, 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/173, 0xad}], 0x1, 0x500000000000000) r3 = socket(0x1e, 0x805, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000002c0)) getsockname$inet6(r3, &(0x7f0000000100), &(0x7f00000000c0)=0x36c) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f00000002c0)=""/110) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'eql\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', r6}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006880)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000006980)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000069c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000200)=0x6) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000006b00)={@loopback, 0x0}, &(0x7f0000006b40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006c40)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000006d40)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000006d80)={0x0, @loopback, @loopback}, &(0x7f0000006dc0)=0xc) recvmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000006e00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000007080)=[{&(0x7f0000006e80)=""/98, 0x62}, {&(0x7f0000006f00)=""/119, 0x77}, {&(0x7f0000006f80)=""/11, 0xb}, {&(0x7f0000006fc0)=""/55, 0x37}, {&(0x7f0000007000)=""/128, 0x80}], 0x5, &(0x7f0000007100)=""/149, 0x95}, 0xffff}, {{&(0x7f00000071c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000008840)=[{&(0x7f0000007240)=""/136, 0x88}, {&(0x7f0000007300)=""/251, 0xfb}, {&(0x7f0000007400)=""/4096, 0x1000}, {&(0x7f0000008400)=""/165, 0xa5}, {&(0x7f00000084c0)=""/170, 0xaa}, {&(0x7f0000008580)=""/184, 0xb8}, {&(0x7f0000008640)=""/36, 0x24}, {&(0x7f0000008680)=""/49, 0x31}, {&(0x7f00000086c0)=""/176, 0xb0}, {&(0x7f0000008780)=""/133, 0x85}], 0xa, &(0x7f0000008900)=""/167, 0xa7}, 0x3}], 0x2, 0x100, &(0x7f0000008a40)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008b40)={'erspan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000008b80)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000008c80)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008d00)={'team_slave_1\x00', 0x0}) getpeername$packet(r0, &(0x7f0000008d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008d80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000009300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f00000092c0)={&(0x7f0000008dc0)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r5, @ANYBLOB="00032abd7000ffdbdf250300000008000100", @ANYRES32=r7, @ANYBLOB="fc01020054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400040003ff1f00000003000581090000000100a5e90300000006000970070000003c00010024000100656e61626c656400000000eeff0000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="08000700000000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c00040001003f0200000000ff01020407000000d70002010001000007000502900000000901df00010000009c0e20ff0800000000c00207040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400d5070000080007000000000008000100", @ANYRES32=r11, @ANYBLOB="500002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r12, @ANYBLOB="70010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="e40002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400c50d000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ffffffff38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040008000000"], 0x4d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000940)={0x4849505, 0x8, 0x6, 'queue1\x00', 0x1e}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd0r', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000021d) 03:33:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x11036, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1f8c, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x254, 0xfb, &(0x7f0000000340)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x200002, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000640)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @random="6e5b0750f801"}) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00\xf0', @random="01003a1e2410"}) fcntl$getown(0xffffffffffffffff, 0x9) r5 = dup3(r1, r3, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)={0xffffffffffffffff}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1c}, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0x40, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@ipv4, 0x1e570444, 0x2, 0x0, 0xe, 0x5, 0x1, 0x100}, 0x20) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000480)=0x6e6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) close(r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=0x0], 0x0) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000440)={0x9, {0x2, 0x6, 0x93b6, 0x1}}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000005c0)={0x4000000, 0x1ff, 0x12}) add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240), 0xfffff, 0xfffffffffffffffb) [ 1540.016170][T10343] overlayfs: unrecognized mount option "lowerd0r=./bus" or missing value [ 1540.079632][T10344] overlayfs: unrecognized mount option "lowerd0r=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdXr', 0x3d, './bus'}}]}) [ 1540.309397][T10361] overlayfs: unrecognized mount option "lowerdXr=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1540.356963][ C0] net_ratelimit: 24 callbacks suppressed [ 1540.356970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1540.357008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1540.362679][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1540.440158][T10367] overlayfs: unrecognized mount option "lowerdXr=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xf000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000021e) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f000014a000/0x3000)=nil, 0x3000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerd\\r', 0x3d, './bus'}}]}) [ 1540.710973][T10387] overlayfs: unrecognized mount option "lowerd\r=./bus" or missing value 03:33:20 executing program 2: getpid() preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) [ 1540.815179][T10387] overlayfs: unrecognized mount option "lowerd\r=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdcr', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f00000002c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x81, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x87, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYRESHEX=r0, @ANYBLOB="d55ce68ebd3ee1b585a6f6656d09575cd0783b1ada8af7d121aea0f7d5ea5636f2774ec20e4f61cda6efdf9bc393cc56a93d054c884a386ce102904e6c8565766ff8f1fce7add6a9c8d5809c6afb650a20b24d2de50670d05fd68c732c854001ac8f8e24f36e600bc1b4af213b57139f1011c259b4d9e454b585ccd5d78314bfd044ff2ea804a884c9b04df08a047b68a612004399e477afdc6e2ee6600ed8b2497788838f22a39057032207ee2634307154d2c09746505462fff2079337fee13c3f5bdd1d1eea4fe77647e5f8ad2aabd6c949369a9c356a8f1fd89574f2667e8a4babc02ad1aade3d", @ANYRESHEX=r0, @ANYRESDEC], @ANYRESOCT=r0, @ANYBLOB="2bbfb81acde5abb3eb38df522944e451e9e14e8e1f4546c36796bbb767057ae9565b8ef52b195329c310fe90b15b21e812e0684fe443141ea08802970b2ce2f8cf0904eec197098f3ce558eb3e903e5a2104e80743d7fce5661b11eab9b6708dac0d8260b20fae1c59ac573677256bd101d346ff932c6be99f431c21aa32698c46ff4e627a8e33d87a7f76cf8afcc194f819d3c7134a66b415e700546f577c647eabca754830f1d01acf5c4059", @ANYRES64=0x0], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="0d57d6c3201b2b717249badc73239f33ec1183c691264e4c268da738696abf1739c8a50d05f8e61e8d36552e55d3621318afd86e1d2eb6c0e600f55d76e66415d19b92784065d5bd37ad225dd500072126", @ANYRES32=r0], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0]], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESDEC=r0], @ANYBLOB="120ab4a7f11226ef8be5345169d2073695086d395b4c179ee82acfaf045d2a50730645d8712641139da0faf96dbfbb5ce6bac2019fa7f79825135303e7cdbc670bedd1e87110011c3cf2af743dd57d83a2dc1692de30fa93373335dee9260d5a8a81b884c358d4352d76fbaa213499b0dc230ed8fc3b1d2e262c542c66df4395fcf0cd1d8926602153224e008efd715461045d877501c537cfe1", @ANYRESOCT], @ANYRESOCT=r0], 0x0, 0x3e5}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x8002a0ffffffff, 0xe, 0x0, &(0x7f0000000140)="3c08000000f08b41637c2fee86dd", 0x0, 0x631}, 0x28) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000021f) 03:33:20 executing program 2: ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) gettid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="59cc9ee6e8e1164f1c10fcad86dd6005f5260008000000f40000000000000000000000000000ff0200000000000000000000000800010000000000089078"], 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x802102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x1000100, {0x0, 0x2710}, {0x2, 0x8, 0x8001, 0x20, 0x1, 0x7, "04da05a9"}, 0x8, 0x3, @userptr=0xfda, 0x4}) [ 1541.070626][T10407] overlayfs: unrecognized mount option "lowerdcr=./bus" or missing value [ 1541.137620][T10411] overlayfs: unrecognized mount option "lowerdcr=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerddr', 0x3d, './bus'}}]}) [ 1541.244319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1541.250351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1541.256339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1541.262125][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000580)="01b981647a32554af0a4e3eb545aa0ca0d59f64cc3df7f96750293b10319218b20a6c55d6bbb4643987bd00437600384551d7c2ec14e1f25114d93f00dca3a809b8d76f42b258b8ec5f1105263bfc48a15c740bda96010a3238100cb22a92d586968e90aaffd4803140d32f90feb4678e91757db406182b1b10417dbba58b64a3c8e33f36a92905ae690e3f4d005a8261808bd9dbbdd91e88244a9047cd2fc07ec64f984a628df3c124187f04c3c06e572642f553f7c35292aa26fe05ea70cf4bf80c4d118f54764d6a2e88c943dd008fda81419666f7759c7faa64b11023de1ac8801ba0c70782ae7ce2bdd9f4733a39a75fa659af796e3ab70a3fdebc4d5d2dbe193c75f8174e8df77db8763ee6cf7f7a88c2a337ab4c05ce809a888988782a56593aec9b2ac8e7f8c8e85e3d655bdc312cef29bbb9830027520f4ea2e0c28cd148388b2e41a0301d864bbcc1dcda70dec29477841afc4403ee647b94bcb51f74243fa89becd906ced576bc01c28b683119123852b8a646072e0222c10cdfb40fc8a08e9f092010218d26fae2cc6b2612f07bf040c33951994e6338ed84c51cf72f40ad1748310e0aa054b80fc9e875db350ae317af3cf13d14a2dedf239750268c9aba7e218556ed2ebe28e06ecf4515f261801f45a2df4a023824835e66da9f8c7fb42c050959f5f9eba6a12a6651cee07662b902d07f9aae795b91cdf4d407cdfc6450d23f47120a6312f9ad666237b2ac48f65a145d056ae0405f592cf96e3a11e7094961aca92df63adeae6d854bba3fe83c7f510d4d41cc188ac21c6aad985a7ccd2a0f59796339c2ba55c61f2dcfbbc033ef3ab4be3ec1731c03fcf608f51a379cd8ca068242a3ba25915d9aaee8e06da09554392009e5b85e2a8485d496efcdfcb6e23e03077178230942319bd2a4c560815a34e9609df3ae8ac6140d72332e58f9bf8872ae64af353636218102f9e6ae118a692e17527f5ad5507ef47be00ab7a7e08dc45cb5918346a238c5a430a0d2993ca5a86aea53b45502983845291aa914f40bed894f487f15bfe75669683d9d3a9d2da48641a8c671992ca1572ae8f0bcc3f48819a34d1c00151b16fd11f427b364e96e00105d83b8f95e6e84d42bad7ca77e7b8e24342d5fe9077aafc078de7ee5e1470ddf165ebcc92605676af6efbf2dddf00b2bc08bc50bc3ba53f209f63b64b653b941f610178374386a45a3e7727d223276b4f059eb83678edba841d2e8de88871cdb3d329dbbb3f3e9c57b98797d4cf21858231dba06c5a2c3b0ab877fc7099012561458f5862379c45dd30700c177cb252d5fc0890ba4e691f9c749554dc376d719f95bfa45aa45b0bb95d38728594e94c36441d64d818816b432b36dfde7abd68f86ae630ab1f17622dfa9f2a96e22cf65cd202f8b1588a44579dde2768d5a50c23ccd4422b71697068f85ce48a7cdf94e4162bee76461bc3a42982dae01193ae88270a3604ba7b1b79015ad0a52181c3900bc530e0f50c004f361404bf180b3a2b782842a7893ea63fc8dd7c8dbdb22b48030c50e88068bca13f9b03ec87c6956cd8e70990381b6b852dc357276c0c6cc3ba37679bb36e4b33c0dfbdf729d22b7045986d4e1a190b2a19b448587b68d47a9eb9023076e23d1f1faf976ca9ece20e2e53a14b45e0d307dc586d9406cd9d5107a2f04a3e3359481b231c58fa68c983953cd8f0499f0d98690035bc0061a813f9ab984f483262e6c2b27c05853344d219ec66c121877d4a0f9959c00ff2d4eb28ff0949684a63b8360f42792deb0c30457e6438897cbd2ae738d7af92bcef00762f365b3ca008db4a1003776bf2068a916b33ddbe041b6f1fa78bb726dcedc7bc922ec25ffd8528a395252b2bcf27ffd55beeb365489eabe18654c398ad00c21cd427b80e20c2801372b057d521ccb7af1c9f1bfef3164cac0cdb4c6d22fb672dda39bb000a3aad006311ee076d1144ff49cd4e8401b0050a8b57a5af0b156e464329e4f91620991107135cc959593a656a4b6286ec92ab1b128c766d5ba8eacb7e0fdcf08500726b93a4d2cf9becfe537fd934d0e28d97c042f63f7f66b8cf224e7350dd03242ac6f7e9be2ecd157c3dd566d88de58a1b6d5a864c260bb576adb958c0ee5c9135c20b0af2c13454197a806141e6ae2794294226bf2c7fc10939d539b2a1a81832bf3b150e1c035b84bf1b8adab7475a6514bc969761b8284aa8f5434b5e294747a5ff8605748ed457aeec3d4dd9c12b7fc7ce2b0757212bf901cd0d473eaaa03b8908ee2a68a4d0cd975eff98227f88badcf8fc2c366a05e2e39d93e536c2983fcf87edecdf1cab227263dff3361b833b08d1083370cbfe1c0a2f29c35b8550e7190f4a6fb1ea368d9689ebb223a056e9778e94d00ff4a15d46b653cccb438ed1471efe143d03c881d1d40f48f75b0a2d35c3ba10de3c5ea735ba1b8da21b154d777e3a1f11abd7fd678f9c8d6ae92e3edf0f4f65270348b3353f06ddbacb05aaca04c62f38081ae4c94e049ea0c1646d8e2fa011bf5e865cbc6bcba0743ff742b7459a2128f603564511c68352ae418233f5f81570c5175530586ad30d192d1c1790c11ccba68a42370eb765d3dc7356e1ffbf95f74979fd56b736a6973d7a618f0a4759f364527178650597c4fcd4877460b781e657a447fdcdba3b392a5ad2cbe06f681f3df4974e167b51ea5231b8e75a3f13c9cce367b4a0263ff1bb4427d02efc330298cad378f8e38f0bf930316d6ed2e21cb1ad5361bd41f9d3e520695b27e56af1dcac5179e5d151c0e18f3bde226b6c37386af55c0b900f5232090a9147b1c27eef805ef00209a08e532020d9cf23ea2b27191d41907395a38b824045f26b18be813dae1d81a28dca4d7621bc577b348be0f2e562d92bf523a133d00132016facac5dd9db969f9b8202d7b785ae851a87e1c525a5b862a48777d9087a1cb426e38541542b9630f8b898359b769edce727801c38fb90cea5c264123562ebf181ca4c63f47eb8f91c54bed1a3a3b6ca73d9b46d8b46b218a740dc2e93c2896ed48542dc646287a8718393906f8f6178d02147889c8d9262d97a3199d7b76d5fb3a29e249254f1edff001c3b0cf5fc3554552e91cba185402239ac35b93a5c983b87ed7f44b2615663785b9ffd6157541cd5f7bf8fee0ccb071358215ec2cb0f4a89e25bdc583cfec62bd66d12db9a7a228d7c0b8a8d1ac56425df3a3a30233ed5d462b4b0a62c439636f974f9cfdac37b0d60de8464704e6dd0581ebe3fbb6bb9375362c4ba722123512ecf6993bb42dfab0b539394f72342b798504e36bfce97c55edf2db54145cd8db5b5b917ca81db2a2c3876943174ebc3be4200a03dce15f04264e686002e6f6726d2a06402fcb1e050a81f5f49586d5b4b0188e83ed8f26adc0bb39d0c356a56825f6188bb9fdf999c970dbdcd5ab58ab1afa700507d4376ab89bfaa45f735b6ee887ad6770257fd1c9b7b498a98843d7a7dca163c5529b8a79f0a31a71d041e0d33a91af2dd7e932c347c116c9d8f8ed32e6addd0c07359c98f0da5695eb55a451108b801dfd8176d4a0f7d7e7bf0826ffd3e40d8cd7cba5850838371aad15e5511a8a903065b8782b5166de826167c5663d020b445b457b9b1576a36c20e4f6093fde0ab28a2f2a148becf4a8174555b3860b0457ec0cf2c6944959d97b295d8b9291d5aaaf9bede7c20be28d7e9580ff5faab83e3405c67da56f836be3e383adffe571b715af6e328c7c0b2f552119bf6d3d36671a85e3d2984b5ffe5db70320386376e5860d42f02b06b00b0bce12f8ad97e3ce18364daf1c3a4edc5134ec04c2646dd38a4c392e4854f79ebb999c824eb66c8f8cda36010193343a6ec430e1d2181e1b02edd2632e6bc494e5ee14da1f63388c762c070909704badd20221e42bdcb55a1e1bbe1651c9f0843d9e7f31cc97618b581763bff9e016b7e7b0cbd7bf23a762c23ab4c23f109c393e37d930e4c04413e8d4906c66877c44c9e721b53c52875d11aac1648a064353ed56770bf56c9f0f5b1854d7ea1fbce11ac4ac26d14fa2b670c3ddbb7f75e5b02bc92cf13e94c5c2f7f5c728e234d01bf0de3cd08c4d56ffef0a13bec3ec746a48f9657f81fbac3d4a9ae58a7e339e1d54780e1048a8e15461db4b2d0bd7bd9419d73c081394606051ebeb35db7f2b1cd3e7197e8a1a300180baf9d5186f418d989d290c0ec6415f228e728796a857ee952e06b6988ed627ad81d4c7f6f638cb102374497066059d41a0be9d9d0f3f2b4a5e040af2ab1d26761ff587d4d645f7068d2d2c6430e4998178d45a11062973df9c7706ef3417870b29d11b7492999f0bbf68a88922f90a0e4ca4a57549927c7b2f1b13d283fe1c0d1ba7e82d8d41553da72a1863096e8e92ae33b24ee0ac2eb981b78797857a8c80d1ecf5dfc1f76bf931b4800aeecc8a821648d5e3a68082d6112a378bcec53b7b6011189fc0b73173b64479d29791a2356a9529356748954f3ef2a55d9cae265c64af717772dbb562aa2b941b5cf0dd6154a1df6665a138bd6752de99e93f000c3fd3bd31be0c99a254d679194248741757389f349bcb35612c3b18f1808d66fe90b0ff0391c7bd0fbedd73e3cef5f0bd81646d0356f486721353acbce74b9b9a84a0e9a45d0a3ae96d46a1a2e679256cc3cf11b213b2a72be281ef80c2046ee5caa71cbf08a4d50d6c2eb5bd4bb39461412ad2beb8cd08633c914ac0973e0bf7e0afd31139ee885a8ff93a771b1064480424a158792b13676f9b45f528537c9a40c4958c3f64d9bd38b3742ef900c2a3e491d6e5f679ef2cb51973b3b2518eb536d887f68fefcecabf521f07cfd2ae101bdc77901c058118a57b70cc59f4a34d06cf2f3f78cb35fbb63af801ec9c093ea14c99812463f67a0ed0fcd3ce0361914f0011455c25dd01da6891636fbc26f5c368b5e201c9fd77ef2562b67032377e2b05fc8bb906042ed6abcd149dbdc7f1d41b3f2291bf2c250dcf261cd52357dbf8ae6034c0eb0e5dbe1b67411d579d7785ba8c68cf69de1202dbd0cbe2e7f9e05698d77103a15b3454ee80b5c22126ed58423dc506e749f31422b74493736126360921d8e773dd3be77601b0c6247fbcb67e4cd2406528d65e9aebd5844196743d9c0987ae6021a0848bff76d9b1e4e56eaad5aba5a33476343f92b836801bec750006697f95759e956d9296acbc5fdb69ec4dc188fc6aede5c32492f5dbefc9b7f409f4e161432832bdde8a2ad8875180b90e0fdba774b7a34dc27d8c792cdb1ba71c5b88905d283e9eebeba0589587da14f3c7d5eefbee2c11e450289b379716ec0886a9334db3bc58f80a4812779213543b63d44e4543217bf969b2b41a3c914592a20e4711d64091ea831da284ac7dd814d5e5f9a875b08cb550702d53dd4b32ec3a65591c22f87bf51304570f5128e5dd734c3902877f6de01133291fb7ae5745df8cc3f6f8c09816763a8430e29a930c78dd7df5e08f9422f8fc61bef46d901299ec7b5e861d004dd25ea9ae6a434f4e1d4a558c0422641cc18b4897af9c8b59ee407ab0a094e9fcee7bdae15d1757cebf2687f8b23fd03e39c4b8a4308b3cfd87b00156fad7103a3fb36a23f3fe694c732004c8a2b388a306eda772c82626354d64a564ad7b276ccb8e4f1d116cf28d02d567bd1241a242ae3d2f1dcc60521b83a794b9ab303b19b432d6ab43638e8c149c2a5bf32f3d1541fefb6f7e513293b42f0a4a0b7e198de5f5cbf2cb793ad6c715f4c120a") syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1541.366918][T10426] overlayfs: unrecognized mount option "lowerddr=./bus" or missing value [ 1541.404393][T10429] overlayfs: unrecognized mount option "lowerddr=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x11000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000220) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000240)={{0xfffffffffffffffa, 0xcdc5, 0x0, 0x3, 0x2b5, 0xffff}, 0xff, 0x3, 0x6, 0x400, 0x1, "71266e9f490d855ea6580395de505f826d0a81e909b3a9781147cc1702326b12aeca006cecd79a4dfdb25175d754a0be9467bd7022879d534d5be2ac6b2087fec62267a2ae53a1dad01539683b5a69080a6e7c77257acaf03b2608ad99ae61d788f8b731b97dfa6327874381a4eb0e4d032469ce996bd47f25192efb2302153b"}) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdhr', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1541.647661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1541.653589][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1541.659469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1541.683108][T10451] overlayfs: unrecognized mount option "lowerdhr=./bus" or missing value [ 1541.727062][T10453] overlayfs: unrecognized mount option "lowerdhr=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdlr', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000221) [ 1541.971721][T10469] overlayfs: unrecognized mount option "lowerdlr=./bus" or missing value [ 1541.994580][T10472] overlayfs: unrecognized mount option "lowerdlr=./bus" or missing value 03:33:20 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f00000002c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x81, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdor', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1542.248674][T10487] overlayfs: unrecognized mount option "lowerdor=./bus" or missing value [ 1542.357269][T10495] overlayfs: unrecognized mount option "lowerdor=./bus" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x8000, 0x0, 0x4, 0x7fff, 0x1, [{0x0, 0xfffffffffffffffa, 0x10e1}]}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x200001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdpr', 0x3d, './bus'}}]}) [ 1542.685072][T10514] overlayfs: unrecognized mount option "lowerdpr=./bus" or missing value [ 1542.756132][T10516] overlayfs: unrecognized mount option "lowerdpr=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x18000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000002c0)={0x20000, 0x0, [0xd1d, 0x1f, 0x100000000, 0x8000000, 0x2, 0x1ff, 0x3, 0x1000]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x800000001, 0x0) listen(r1, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f00000000c0)=""/146) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdsr', 0x3d, './bus'}}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000222) 03:33:20 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{0x1ff, 0x200, 0x20000, 0x3}, {0x80, 0x3, 0x4}, {0xfff, 0x7, 0x200, 0x7}, {0x5, 0x2, 0x0, 0x5}, {0xf9, 0x20, 0x8001, 0x56e4}, {0x9, 0x6, 0xac74, 0x1f}, {0xba, 0x81, 0x2, 0x7}, {0x80, 0x5, 0x2, 0x800}, {0x2, 0x44, 0x80000000, 0x400}, {0x1, 0x2, 0x100000001, 0x40}]}, 0x10) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000000)='./file0\x00', 0xf9fdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00084002998681ff130200001204100000030100000200000001000084811f4ce10000001e001e00000000000010ec0302008100526549734572324673", 0x3d, 0x400000000010000}], 0x0, 0x0) [ 1543.037361][T10533] overlayfs: unrecognized mount option "lowerdsr=./bus" or missing value [ 1543.109249][T10540] overlayfs: unrecognized mount option "lowerdsr=./bus" or missing value [ 1543.154926][T10543] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdur', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) accept(r0, &(0x7f00000002c0)=@caif=@util, &(0x7f0000000100)=0x80) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1543.269595][T10548] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000223) 03:33:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) [ 1543.413772][T10557] overlayfs: unrecognized mount option "lowerdur=./bus" or missing value 03:33:20 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x101000, 0x0) ioctl(r0, 0xe25, &(0x7f0000000100)="2967c807003e") modify_ldt$read(0x0, &(0x7f00000001c0)=""/228, 0xe4) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x352a, 0x1ff}, {0x1f, 0x8}]}, 0x14, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) [ 1543.516668][T10557] overlayfs: unrecognized mount option "lowerdur=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdxr', 0x3d, './bus'}}]}) [ 1543.796469][T10583] overlayfs: unrecognized mount option "lowerdxr=./bus" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x3f000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = mmap$binder(&(0x7f00005f0000/0x1000)=nil, 0x1000, 0x0, 0x140811, r0, 0x3b) r2 = mmap$binder(&(0x7f00003f5000/0x4000)=nil, 0x4000, 0x2, 0x50, r0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3f725afbf67a20fe, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) r5 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x40010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x12c, 0x0, &(0x7f00000003c0)=[@acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x3, 0x4}, @free_buffer={0x40086303, r1}, @dead_binder_done={0x40086310, 0x1}, @clear_death={0x400c630f, 0x3, 0x1}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x20, &(0x7f00000000c0)=[@flat={0x776a2a85, 0x10b, r2, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000140)=[0x18, 0x28, 0x40, 0x0]}}, @request_death={0x400c630e, 0x0, 0x4}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x20, &(0x7f0000000200)=[@ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x3b}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x1, 0x4, 0x2c}], &(0x7f0000000280)=[0x0, 0x40, 0x28, 0x68]}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000300)=[@flat={0x73622a85, 0x100, r3, 0x4}, @flat={0x776a2a85, 0x10b, r4, 0x2}, @flat={0x77682a85, 0xa, r5}], &(0x7f0000000380)=[0x28, 0x28]}, 0xc4c}}], 0xe9, 0x0, &(0x7f0000000500)="024f77ba1d719d35b9490344585d3f45a90ed167030381929915fe0ab65d9c05d512356e2d6d471726ee3675945c3e70df43643cbe17854dbc3a9a31e2fc534a05e808a43444f84b6d6985721561f4c4a768710b998b721ae18343246284991e94a19e00565e94c2b928d63eefc9993ae4564b23036ec1fca1d3a0bcc28ad95551e8920c2f1dfe9dd41b1e456000fc6b36efcc307459a18bad22043dca5655260f256239e7e18b72c03e68f01472ed8a70ddbd84c8a27676632b7567e9e5286cdd4623ac55a576c453b04572c33c6e2401d87a7d0e9104caa2cf091f197ccb53a32ce882c04e7115d6"}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x0, 0x81, 'queue1\x00', 0x20}) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0xce7c, 0x7fff, 0x1, 0x1, 0x6, 0x3, 0x7, 0x9, r5}, 0x20) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000224) [ 1543.849630][T10585] overlayfs: unrecognized mount option "lowerdxr=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdi\n', 0x3d, './bus'}}]}) [ 1544.134357][T10608] overlayfs: unrecognized mount option "lowerdi [ 1544.134357][T10608] =./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1544.213984][T10610] overlayfs: unrecognized mount option "lowerdi [ 1544.213984][T10610] =./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdi%', 0x3d, './bus'}}]}) 03:33:20 executing program 2: getpgid(0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x402, 0x37) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) socketpair$unix(0x1, 0x10000000000003, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400009) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) r4 = socket(0x1e, 0x1, 0x0) sendmsg(r4, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0x4000000000000004}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001f80)={'vcan0\x00'}) r6 = getuid() fstat(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x1f, 0x3, &(0x7f0000000700)=[{&(0x7f00000004c0)="1d33f03c80cad2a3a3dc484bca056733ce512cccc2a8551839d9fad5a0894bd1bd2e3796829add9a4dc090b91595cbce24d29ba523103e0c370a36ffaf2b3ba285b3ac1958627b6bfa0180bd5cc0bf91f55bde3ca8c81b40e9dfb7363f4ccc855e216affffbfd305fbb983e14d1c2887781792a46c410e076af98f876c09a7f3c0210e9b88e14d7dcbaf8e07e3d6cd9fc3e8849366de7f02d3382363e337b3d82b2abb90b47a62b6e107c845cfeb0f285c889c9c6a08125d16f46a4b88b9309ebb9f9a4c6c8625f77509cd38d07642d19d4958d9f413bc52d92b224d3b2827a8ed3cc812dafd880fe5c0cd141266ad3d013c09890e1428b4d0463f", 0xfb, 0x401}, {&(0x7f00000005c0)="d12912a2b58f7acd2bad7974a4001d6d2789a80e508a754a01d598", 0x1b, 0x6}, {&(0x7f0000000600)="271995ae53637ac36a39525e766697a28008b639222a854780faeb80d1f3260dac623816b8d40ac21d9fe3bcd64c9a88ff12dad4a54311f3ee16c3535ecc35da4631391ed849e9ebf6a7b80cd648758d1fc2ad43bd1890df4e4aaee1652660d69c02ac8a79c02ed75b24c2f05463bb695a9678c5b47a9146552ed4de5cb3ffc9a451e10d3c520141688016c44937cfbe854e1d392e854c0442d7ba72f76c57106eae662860aebbad9782d2c47adacb6ece9f24ef4bb99e55f27f3a0fb1259dffad46b6f72c8bb28284", 0xc9}], 0x2000, &(0x7f0000000800)={[{@part={'part', 0x3d, 0x48}}], [{@pcr={'pcr', 0x3d, 0x7}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r7}}, {@seclabel='seclabel'}, {@dont_hash='dont_hash'}, {@dont_hash='dont_hash'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', r8}}]}) stat(&(0x7f0000000480)='./file0\x00', 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) stat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)) write$binfmt_elf64(r0, 0x0, 0x2ecdad6e) close(0xffffffffffffffff) getdents(r5, &(0x7f0000000f80)=""/235, 0xeb) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000225) [ 1544.419632][T10623] overlayfs: unrecognized mount option "lowerdi%=./bus" or missing value [ 1544.478926][T10628] overlayfs: unrecognized mount option "lowerdi%=./bus" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdi,', 0x3d, './bus'}}]}) [ 1544.727506][T10643] overlayfs: unrecognized mount option "lowerdi" or missing value 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x75d7, 0x48000) accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80000) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) [ 1544.798439][T10648] overlayfs: unrecognized mount option "lowerdi" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000226) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdi\\', 0x3d, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000005000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000100)="f4f30f5f0d0f01caf30f6fbf0c00670fe545c9baf80c66b8e31f7b8766efbafc0cb0f4eeea00004e000fe21bff4e0766660f381c6100", 0x36}], 0x1, 0x1, &(0x7f0000000300)=[@dstype3={0x7, 0x5}], 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1545.171079][T10669] overlayfs: unrecognized mount option "lowerdi\=./bus" or missing value [ 1545.231986][T10673] overlayfs: unrecognized mount option "lowerdi\=./bus" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000227) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdiq', 0x3d, './bus'}}]}) [ 1545.439127][ C0] net_ratelimit: 20 callbacks suppressed [ 1545.439135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.450668][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.456518][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.462399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.582216][T10689] overlayfs: unrecognized mount option "lowerdiq=./bus" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) r6 = getpgrp(0xffffffffffffffff) kcmp(r5, r6, 0x3, r3, r0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1545.678102][T10692] overlayfs: unrecognized mount option "lowerdiq=./bus" or missing value 03:33:20 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x5}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x3, 0x5, {0x7, @raw_data="78d334bdb4d5f0a358e353286d833efcd3ae5bad731d498689379fe2d40de38a28ec6a79e0d76f09adc637d45597f883113b50d74a8ab31a057b1a0a8d3099447c9ecdc6c7a280c449f6a3c38108a11b7ca2748cbaef4d1664ae6518d9a8f5afcdb762a157a3e05f03bc19eb994fb3f62f8f6cf5b568bfa317041c02817fda5a0fc2655bb0d2ec008f8207b1c4b03f19ad11e34424219194ca0ce0ba81b49ccff7f4582d3867c75a92a11033cdcf6244717d3cb3c0cae43b1613c7273539b22bc86e10b14a01eb9a"}}) 03:33:20 executing program 3: r0 = getegid() getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setresgid(r0, r1, r2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x2c, './bus'}}]}) [ 1545.842473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.848411][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.854275][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.860066][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:33:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x8000, 0x1f, 0x20, 0x7}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) [ 1545.924057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.930681][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.992715][T10714] overlayfs: unrecognized mount option "lowerdir" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xa0008000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000228) 03:33:20 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000227) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x80, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1546.101447][T10719] overlayfs: unrecognized mount option "lowerdir" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x30, './bus'}}]}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000580)=""/4096, &(0x7f0000000100)=0x1000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1546.405167][T10741] overlayfs: unrecognized mount option "lowerdir0./bus" or missing value [ 1546.481718][T10742] overlayfs: unrecognized mount option "lowerdir0./bus" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000229) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x42, './bus'}}]}) [ 1546.764511][T10760] overlayfs: unrecognized mount option "lowerdirB./bus" or missing value 03:33:20 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x84000, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000000000000}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1546.854709][T10763] overlayfs: unrecognized mount option "lowerdirB./bus" or missing value 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000022a) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x5c, './bus'}}]}) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xa0010000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 2: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4) keyctl$assume_authority(0x10, r0) [ 1547.105314][T10779] overlayfs: unrecognized mount option "lowerdir\./bus" or missing value [ 1547.161452][T10787] overlayfs: unrecognized mount option "lowerdir\./bus" or missing value 03:33:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000016000000134c573afb635cdea6a668821a2e5599f3ee3dad97e4011bebc6b794eb0a095c9daebca435c549af293d3c94042a669a9ee87f4fe0c14c44ac08e32e6795747fd479c93ad7166571c4c6b9ab5bf0bf3b9c5574773a4b68c46422b6dea413876348f8441b6c"], 0x14}, 0x8}, 0x0) accept4(r0, &(0x7f00000001c0)=@can={0x1d, 0x0}, &(0x7f0000000240)=0x80, 0x800) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x690, 0x4e20, 0x1848, 0xa, 0x20, 0x0, 0xbe, r3, r4}, {0x7f, 0x5d2b, 0x8000, 0x3, 0x2, 0x1ff, 0x0, 0x5}, {0x5, 0xfffffffffffffadf, 0x8, 0x3f}, 0x8, 0x6e6bbb, 0x2, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d5, 0x2b}, 0x0, @in6, 0x3500, 0x7, 0x3, 0x1, 0xffffffffffffff12, 0x200, 0x7f}}, 0xe8) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x42}]}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000022b) 03:33:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000700)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, @in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x4e23, @remote}], 0x48) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x0, 0x0, 0x5, 0x0, 0x0, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xfffffe08) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f0000000000)) r1 = getpid() capset(&(0x7f0000000200)={0x0, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x400}) mknod(&(0x7f0000000a00)='./file0\x00', 0x0, 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000002c0)={0x4, 0xfffffffffffffffc, [{0x10000, 0x0, 0x80}, {0x8, 0x0, 0xe4}, {0x1, 0x0, 0x60}, {0x3ff}]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000340)=0xffffffffffffffdd) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) [ 1547.447689][T10808] overlayfs: failed to resolve './busB': -2 [ 1547.474448][T10809] overlayfs: failed to resolve './busB': -2 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x5c}]}) 03:33:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xe, 0x0, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x10000, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) close(r0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x224, 0x800) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000022c) [ 1547.782493][T10832] overlayfs: filesystem on './bus' not supported as upperdir 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [], 0x2}) 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xe8030000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f00000002c0)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000300)="cfb4063f3ad2dbfacccb16a5e186f443d8c2a86659648712577b3b28c521d697c4dd3d432bc8d7c832ca56725eb58159676ad7eb3e5179ba0d916d0cd57847eb17ee857ad5020793e3ae45957af850e55777cfc40a6bd56f552eb019c034fa69125a398b4012aa9013620ce16f78fbebf1f4bfcd9036b1bf64371c9cceac2e7829e5d81b24bf20c236239ed61be983307568d6f83f8b9ff90c9c0225c2c48ffeaab943276b421ea1402704986a83adabefbcd7aba8af7a97f96668a3432da358293618") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) sendto$inet6(r0, &(0x7f0000000380)="0401000000c000ddb80100000000000001000000d9033780398d5375c5f73f939029ef0712f295136f8f6575903376b15cddc7d07a1300f0ffffffffffffb404e1b58400000000000000f55d4626a880be8bb6c3cfaeba524830f00ea8635534529e419a", 0x64, 0x0, &(0x7f0000000080)={0xa, 0x200400800, 0x100000001, @local}, 0x1c) [ 1548.101525][T10853] overlayfs: unrecognized mount option "" or missing value [ 1548.183747][T10859] overlayfs: unrecognized mount option "" or missing value 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [], 0x3}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x80, 0x0) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000022d) [ 1548.417468][T10876] overlayfs: unrecognized mount option "" or missing value 03:33:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0xffffffffffffff43) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x100000001, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) [ 1548.485967][T10881] overlayfs: unrecognized mount option "" or missing value 03:33:20 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x15, 0x0, &(0x7f0000000100)}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540)=[@dstype0={0x6, 0xd}], 0x1) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [], 0x4}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="295cc807003e") r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20800, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}) 03:33:20 executing program 2: capset(&(0x7f0000b3e000)={0x19980330}, &(0x7f0000f21fe8)) r0 = socket$inet(0x2, 0x4000000000000004, 0x40000081) bind$inet(r0, &(0x7f0000000380)={0x2, 0x3, @broadcast}, 0x10) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000022e) [ 1548.775643][T10901] overlayfs: unrecognized mount option "" or missing value [ 1548.861626][T10906] overlayfs: unrecognized mount option "" or missing value 03:33:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000440)={0x0, 0x6, 0x1, 0x19, &(0x7f0000ffc000/0x4000)=nil, 0xe51}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={r4, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x9, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0xffff8000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x80, 0x8, 0x81, 'queue1\x00', 0x20}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000800000f3066b9ae02000066b80000000066ba010000000f300f225e66b9fe0b00000f3266b80b0000000f23c80f21f866350c0060000f23f8b80f008ee80f009200003e0fc76a0d3e65660f3823a20e00ba4100ed", 0x60}], 0x1, 0x12, &(0x7f0000000540), 0x0) 03:33:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0xff, 0x800}) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000100)=@rose) ioctl(r0, 0xffffffffffffffb8, &(0x7f0000000040)) 03:33:20 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [], 0x5}) 03:33:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x152) clock_settime(0x0, &(0x7f0000000200)={0x77359400}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffc) rename(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) getegid() r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x80000) write$FUSE_IOCTL(r4, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000022f) [ 1549.252442][T10889] WARNING: CPU: 0 PID: 10889 at arch/x86/kvm/mmu.c:830 mmu_spte_clear_track_bits+0x43a/0x500 [ 1549.264277][T10889] Kernel panic - not syncing: panic_on_warn set ... [ 1549.270884][T10889] CPU: 0 PID: 10889 Comm: syz-executor1 Not tainted 4.20.0-next-20190103 #5 [ 1549.279572][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.286946][T10929] overlayfs: unrecognized mount option "" or missing value [ 1549.289633][T10889] Call Trace: [ 1549.300198][T10889] dump_stack+0x1db/0x2d0 [ 1549.304559][T10889] ? dump_stack_print_info.cold+0x20/0x20 [ 1549.310308][T10889] ? mmu_spte_clear_track_bits+0x350/0x500 [ 1549.316124][T10889] panic+0x2cb/0x65c [ 1549.317389][ T3864] kobject: 'loop2' (0000000069fe1c30): kobject_uevent_env [ 1549.320035][T10889] ? add_taint.cold+0x16/0x16 [ 1549.329143][ T3864] kobject: 'loop2' (0000000069fe1c30): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1549.331809][T10889] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1549.331826][T10889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.331839][T10889] ? __probe_kernel_read+0x1f4/0x250 [ 1549.331856][T10889] ? __warn.cold+0x5/0x48 [ 1549.331870][T10889] ? __warn+0xe8/0x1d0 [ 1549.331890][T10889] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1549.373505][T10889] __warn.cold+0x20/0x48 [ 1549.377790][T10889] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1549.383600][T10889] report_bug+0x263/0x2b0 [ 1549.387980][T10889] do_error_trap+0x11b/0x200 [ 1549.392604][T10889] do_invalid_op+0x37/0x50 [ 1549.397027][T10889] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1549.402841][T10889] invalid_op+0x14/0x20 [ 1549.407005][T10889] RIP: 0010:mmu_spte_clear_track_bits+0x43a/0x500 [ 1549.413425][T10889] Code: 45 89 67 90 31 ff 44 89 e6 48 ba 00 00 00 00 00 fc ff df c6 04 10 f8 e8 a4 da 70 00 45 85 e4 0f 85 74 fd ff ff e8 16 d9 70 00 <0f> 0b e9 68 fd ff ff e8 0a d9 70 00 4c 89 f7 e8 82 24 f7 ff 31 f6 [ 1549.433025][T10889] RSP: 0018:ffff888085f1f3f0 EFLAGS: 00010293 [ 1549.439108][T10889] RAX: ffff8880504ca080 RBX: 400000002664bc77 RCX: ffffffff811127dc [ 1549.447079][T10889] RDX: 0000000000000000 RSI: ffffffff811127ea RDI: 0000000000000005 [ 1549.455048][T10889] RBP: ffff888085f1f4c8 R08: ffff8880504ca080 R09: fffff9400013325f [ 1549.463018][T10889] R10: fffff9400013325e R11: ffffea00009992f7 R12: 0000000000000000 [ 1549.470992][T10889] R13: 1ffff11010be3e80 R14: 000000000002664b R15: ffff888085f1f4a0 [ 1549.478999][T10889] ? mmu_spte_clear_track_bits+0x42c/0x500 [ 1549.484811][T10889] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1549.490629][T10889] ? mmu_spte_update+0x330/0x330 [ 1549.495574][T10889] ? __lock_acquire+0x572/0x4a10 [ 1549.500564][T10889] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1549.506803][T10889] ? __pte_list_remove+0x94/0x460 [ 1549.511845][T10889] drop_spte+0x24/0x220 [ 1549.516057][T10889] mmu_page_zap_pte+0x2e2/0x3b0 [ 1549.520917][T10889] ? drop_spte+0x220/0x220 [ 1549.525333][T10889] ? __lock_is_held+0xb6/0x140 [ 1549.530134][T10889] kvm_mmu_prepare_zap_page+0x19d/0x1440 [ 1549.535788][T10889] ? debug_check_no_obj_freed+0x2f2/0x5a7 [ 1549.541510][T10889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.547770][T10889] ? check_preemption_disabled+0x48/0x290 [ 1549.553502][T10889] ? kvm_handle_hva_range+0x730/0x730 [ 1549.558875][T10889] ? kvm_make_vcpus_request_mask+0x481/0x5a0 [ 1549.564867][T10889] ? gfn_to_pfn_atomic+0x6c0/0x6c0 [ 1549.569984][T10889] ? add_lock_to_list.isra.0+0x450/0x450 [ 1549.575633][T10889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.581877][T10889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.588127][T10889] ? check_preemption_disabled+0x48/0x290 [ 1549.593860][T10889] ? kvm_make_vcpus_request_mask+0x5a0/0x5a0 [ 1549.599882][T10889] kvm_mmu_invalidate_zap_all_pages+0x53e/0x710 [ 1549.606140][T10889] ? kvm_mmu_zap_collapsible_sptes+0x830/0x830 [ 1549.612357][T10889] ? lock_release+0xc40/0xc40 [ 1549.617044][T10889] ? rcu_sync_dtor+0x170/0x170 [ 1549.621837][T10889] kvm_arch_flush_shadow_all+0x16/0x20 [ 1549.627318][T10889] kvm_mmu_notifier_release+0x5c/0x90 [ 1549.632694][T10889] ? kvm_vcpu_on_spin+0x800/0x800 [ 1549.637739][T10889] mmu_notifier_unregister+0x1dd/0x5e0 [ 1549.643201][T10889] ? kvm_vcpu_on_spin+0x800/0x800 [ 1549.648232][T10889] ? __mmu_notifier_register+0x30/0x30 [ 1549.653714][T10889] ? free_pages+0x46/0x50 [ 1549.658055][T10889] kvm_put_kvm+0x6aa/0xff0 [ 1549.662519][T10889] ? kvm_write_guest_cached+0x40/0x40 [ 1549.667905][T10889] ? ima_file_free+0x128/0x630 [ 1549.672679][T10889] ? debugfs_remove+0x130/0x130 [ 1549.677561][T10889] kvm_vcpu_release+0x7b/0xa0 [ 1549.682701][T10889] __fput+0x3c5/0xb10 [ 1549.686692][T10889] ? kvm_vm_release+0x60/0x60 [ 1549.691390][T10889] ? file_free_rcu+0xe0/0xe0 [ 1549.695979][T10889] ? task_work_run+0x1bb/0x2b0 [ 1549.700760][T10889] ? trace_hardirqs_off_caller+0x300/0x300 [ 1549.706566][T10889] ? do_raw_spin_trylock+0x270/0x270 [ 1549.711861][T10889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.718110][T10889] ____fput+0x16/0x20 [ 1549.722130][T10889] task_work_run+0x1f4/0x2b0 [ 1549.726730][T10889] ? task_work_cancel+0x2c0/0x2c0 [ 1549.731766][T10889] ? __close_fd+0x25f/0x3d0 [ 1549.736275][T10889] ? do_syscall_64+0x8c/0x800 [ 1549.740981][T10889] exit_to_usermode_loop+0x32a/0x3b0 [ 1549.746277][T10889] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1549.752366][T10889] ? syscall_trace_enter+0x12a0/0x12a0 [ 1549.757837][T10889] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1549.763342][T10889] do_syscall_64+0x696/0x800 [ 1549.767963][T10889] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1549.773600][T10889] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1549.779333][T10889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1549.784892][T10889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1549.790802][T10889] RIP: 0033:0x411c91 [ 1549.794700][T10889] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1549.814506][T10889] RSP: 002b:00007fffb455f9d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1549.822935][T10889] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411c91 [ 1549.830934][T10889] RDX: 0000000000000000 RSI: 0000000000742648 RDI: 0000000000000006 [ 1549.838905][T10889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1549.846903][T10889] R10: 00007fffb455f900 R11: 0000000000000293 R12: 0000000000000000 [ 1549.854874][T10889] R13: 0000000000000001 R14: 0000000000000373 R15: 0000000000000001 [ 1549.864921][T10889] Kernel Offset: disabled [ 1549.870187][T10889] Rebooting in 86400 seconds..