3651da032465813804f3e168fe2a607f62822da7fe6bdb4501e47101e1277609c89a0f9602bfd526922a0971cdf68c6878df546be7d02b372ed754d07480fe800f10632ad29cd7ef4735323e5a947a72e6efcc0981612d51eb73c58451d4700e2580b7b2ce0fc55dd311f5271d4da50b497666e4e6a6bec8cc6e7610bc9cd574c9a867bc9bd87bcbb9cde9880039d90dfbfffd2988db8da210c2576c8a4cec872b19eac45d1ebd05899c59a23cf2b6395e15d1bea744d1e483966a3abb4f38d6431915c45015f17fc8382ec38eb5c57016d77b15837882be5b43cb897e09df6ae2e5cae96e844d907b05665355595a06bb238f9dd542e9aa96efdf09a1868f39e88f20c2b2a52fa0cbe99f22024ed5426b505bdf275f96861f45fd4a15e84db0553b63343c06fb2eb72b55d865409b49e2d8fd10a7b28528f63310b47d797d938676182b15b7ef455661c7f2339c57615a45b43f759b6ef27d8a5de0f4959b75e904c32fb42ded9063b98e527ba534f6890fc363881e9d50b6d204caca5ec7af52c2d62e36d9c4d014248fa0e4cad91703311d7dc6601fe2e66696edf2090f8bd5e2621c0a7ed6a3e9626df3c05c43cfe7c13f9efccac7d193c265b6882d2ae53616c88f1c880bd90db18b65a356b9ede8de10cd8779380700839329382a2bf585ad801df61adc97e020976c1fe3809444cbba5ea935ccea55df135b6c3d56a2ef255bcd1fd44cc43014f708df9bbb4891f3287b2c7887ab5f17ea8af89adfa7f6a9448157a1a83b15e48d0b9b62ab9f63f8abcfbcb002bcbe9731f2de9e19f3f7ba37b8383815e730e3d44b28d23f79270cca58ff5d0bf481c20c0bd0b2808eb23448d9a5f6d372e65ef35b0b5415fef717abc29b9072ee75d5bb7079f2aefd9199a5c5225d442f7ac044d2c156c73f8fa72dbefe6110f2a768f40420e24be828665bef199e50671818a5f0826d7bf67ba1ece37e37d0c217aee7bec7316a68509f740eaec2289ae289ea82032d38735c9cfbae36da50d74884c1470278cb82954f9aaca60345f2d4e90c9362123727f582d609f983bded59388c22b80b6bacad2f90187d673a5587af824f4d2376b4b7c0e40312f1b9d05b9a4eb2581772ff62a6b878911ef750e38edb7940bd0bf67f71bec8fad960037fe06e0c157acd8d852de21a5409417dc125eb864b39a5d51787570cfa21e2abd60fec75d2b80c270847cf7dfe2efed7de20e40e5aa6f4ecdf0d146f383b7df2b7e4a9094458056a395b4be8c896be291acbae20b0153b91d68ea94d78a7863b638b74c14c3fe94eb5a7d24375eea667546e5a28a07843a52ddca6d18b8791cdf275f99a861de265fa3ed1a0106bc8337ca5016363fc27f4771302fc2c4b13df6ce754b4e1cbdd8b3532ca3187faaa65fbd825a512db90ceb3b2cc600dc6e52b586ad7fe9c729e0d0a589fe088cf27a650c62b4d7efbdb526deccd8de24438ce18ec650b7c7708accb7f50008b1dcbc781e6fff10911045add73743ff2ca25f8d377b713a46bb390a3ff8fb5e3d7704124174c8def960f1159408c8b5020f4965dd48057c4a2db94fa735577e147e613bfce18cb108e009d1b31c3fcf585d95deec9abdda8394eea95238f6b10e17792d745ef456beff86963e52a0798ca527dc14bbd8cbfc909334b0d47e1868d8eb61e37d79d948bb8105b8000d2a081e32729607a2bda2006f6d976b64cc85ef9782ce6d105ef9b1bda7ca6016c3183593d0937167b5512f9b98d1dd9255a707b8e9fb0ba150aa80a6c3263f1c99298ed52cdf0dc45885ec4b8350fa2e6ff5d2dfe44fd5b596b186819aff63c1d1858923f553784f27ee8632cf1e2fb7b500bde1b57026f6939b5eb6449c62d86dbdcf4134c422e016ad49499a9781f1b4337bcfae1df0a1a25dc93a8137a098838a0c4c979b03904995a42bc40e95809f28a767b46df24ce7a3b579255df7767689a1741ad0d8071e3828e6244d4aa541bedd5bdebc942eb9ab330cd5c54ec894471e4f672455105c0387d7d9745ff7f11d94814a2acd208c5649e21bba31a4103693965c60bada955a0b3c0572afdfe009f58c1480e6ed4d1ce0ce503ede5ef884551b15cd6ef155df4065535c88ec902f0ad7408b758c69190a3d047366a51cce0abde1914720654f4f6c01305a766b739ff42c128187cbdcc04f294dce12d6d902a1f733e98e2774e7e635780974c88e18b0ee5569ae8eea6ddda3ff3de27c663ea4b02acb651341640209714f8b5818541f0eb71e840ddfaa3484c76d92ce129631565b8dea78cc3e99d01b25b915860461590a4feb7ff75adb0a80d773b4d2b588e68abeaa04582e82211a5df038533619827adff8a82e7dd6cd5b8139c1e40e5a934a3dde6564e44d3cdeb09cf60b5b2080dbfd3419bcf4ad7be23d150a00570a5e9230496aaa0f99995101afb88e97cf833ded7be38563dcff11b27f384dafd478af3eb170e20b9a2099359f6d0ffd728f64c1b5a05565e693a60d02794556d6fc0c643178f9ac4efdd8e18f1df5b97ca16f0b206920d05514113d747e79a6128a23b54f39dc4c2de684b29a98c670857054543877d9328fb0a58ecc8d0e21f9445fbd2f0fae85f6af81818389842f18afcbdc1c1fa3f83728488dd8a4e6fd80ee0c8b6719fa1b2d958ee5cd8890f27a813c0124abff5dc98933dcf73e9ea9f9c4d14967da063a19e92a489c7472c46b091d815245630e731e93f2cbadf7947addb55ae695e178087e4f5d457d4db3bc6893fbd03c2eaf7574ed674426f257f2bb946c46c9cdd8b8ac1162cc4da1781b6840df17ed201334e780c788296a02b2906b450ba40c6b981a39b6f42e05998e910cdde86cb3eed16f6f51d9e67b5f64a6e4851db9383d4f5af3ae0e101dc6a101c92ce097c2ebc7f92f8d01b5a18c05dd6c39a07a646cd5d7c3f12d8e7405ca936111026c2aaaac6cb4d3ab1efdd18652df55aa17c83e85ec39922efb87d57284c9ec163819eb8a7a1626ae51944200b9f6ec316b5f10096782bef94c44db19937f945743da39347b6391cca69b42f9be6aba28a983e5934192a8a585575f984f3e8fc85237d3ee19271cb502a3177495c4729493a97517f45e1f4ad402069331ec3968c63025fcdfdbd22b58038f0a07f68e64ac6ac88f809a967cda2b63a0fcfb7fec4e2498e349838527aef33a6e9626fae3601ba2445f45810fdb6f73953d6063ed3a11e328f3ab7388e83c503cc8ceeb435d41012ba02ffc47d531abd030a4189ecaadd5a9218818a81e771815333202979aa75c75190acf35905d611f43cad81d35ee416bf78a43296b2e487e79d22291e467c4cb35a25440ab1c7060fb1485060f7daed23be93c0b74425ed17ee90b651fe458d9636b9534940b00e37fc51745624bb4341aa4f73d62f257654d58bede2390081fc92dfe3a831720c34e02932201dc139648d05f35a3b750a3e7fc5d8f76e83e836faaba964921cbc73061e092489bd0ad508226c421c192f4afbd534352e16dbb7bb5a95acc5a7e0036192b2a640a3451c35d91d51b84252882466359e2783e720d821ff99a636e337c177940567e9eb0d842012ef77fda514a8856f9dea22a516850e0e0c69be8c8c0c4af17620cc676090764134a3d345774aceae26ca36681ba94545659868280661249efb7addc4405e082f89fa30ff17a98c68c2991766b95be8e613f04acd98b47ca8f55c339242a977c3acbfa71174580224e3e3cbcf9d5e9f75c194af3509aabd99337fbac5208e06d5ae61010de5fa96591b9df218c081bc275a178bcfad66e5b2af8de3c74d49cd90d2864ad73a2a3bcaafa40620fdfdaff5abd8929d56dd40295a96262b89996490c3a8b3285ce1ca35be1589548201f7b73090ceb36744414a72d8c25d91f1d724ff61f443c6ae041c4be59ad75e47bf3272c6b1c6457021ec591c66657991a4712acb1d803f7febc1ce9cb96831ef79ce5310e130c4d73f11d39f4af0a2d4a7c48f44595e0cf4f395b823a8c47109f844e4eadee3152f4892906f586b0053fcc035983f528a760f5b9fb59f23b8986e06e5813383d61ee85f0ae0cca6a071937669d9f3175a8668b17d056eed94426ef517c67dab1bb6e2eecfc03e5ee81ee8205c3316026929d33644a9470b56cd8260da8473f64a937c69b700b3b19164b453da3f9e726ccf8f03f82bda9621728ed842998d5a88827a9bc189922adf90bd673ad1c5a98ce69392279f24bc6142edaed173b7ea24ad5621597a58cbffd174cee656072288f3312383735abef070d48055716d2923efe1243a0d1ffe64643a1a6de7d1f0460b49185adc049c5f253b0803478891865d880f4a8ca68f70545bbceb6d3f2b2c9a0c7540e97a02abfc69538936245dbf9ea79ad65b68c4fa4a2749fc263d66077c64e7ba14577843225395666b7b7714020a15c388a1aca7d9ab5e7de327472c5b8d854a2d85e32baf7fa0e028658024a478dfd1496dcf7e0b84a298ea0cf5f5ea6408b8052859082d634db9c45c1c638ec7cfb1226d876a5ffc0c5a0b848a9fd6fb3f03ce666d0d794ac743240d3627e87885602bbe1d3f99353a98e9ab02b28ba75d7f8d592f887e057ffbe907ce544980c611e165444b68189b10d3819ce5bb0672bf4b92184cbcf9cfe57226b4886ea5e1b1663aa707bd01a6069f49a7535eb990c9412d1cfb1459e5f3ff8527cd8735a3ae81088d36c4b5ffb1b66fe47351924724d3e12890670b8c4cb920a7706de47e4e02460cf3832168b57d79eb0cc3bbf37f7033c70bba7c9910aded83d72868bd042079d10ae8937d6184ebbbf600c3d9b17cf1d39b20a7fe6e5e13ec1f6c6d6125941d28b7d3730ee53a867275173a30027a", &(0x7f0000001180)="7750688d76cd21253e7cf577107129ad04ed98e5f817e79373e967855045261fd965e18d8d8f5aa88736061fcf7507dea1efb4a1363c67bd909af58bcf19535fae8e4d011695c7b89479761ebeec414e719e62b311eb70f7277fc47059edbb11cdc9f31f83c9cb306125be7372fd247c000fd30f83e5938418729d0c8bfd5c199695434093fad22acdfa7b1a5b6b0cadb97c93b7b8a9110e61195c43d33d69d02472877268a19391ca73ecc27d9ee0fa0535f2e353dba89aa19168f1a8c0367dc70376da23a69ddaede8f5009e6f982b45d5ea81e19e338f"}}, &(0x7f00000012c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:24:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2050.284305][T19518] overlayfs: missing 'lowerdir' [ 2050.322347][T19532] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2050.345452][T19518] overlayfs: failed to resolve './file1t': -2 [ 2050.357310][T19520] overlayfs: missing 'lowerdir' 17:24:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:15 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x600}) 17:24:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:15 executing program 5: syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2050.731379][T19548] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2050.793984][T19544] overlayfs: missing 'lowerdir' 17:24:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000034) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:19 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000540)) r2 = syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0x6, 0x385280) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x300000006) r3 = shmget$private(0x0, 0x4000, 0x410, &(0x7f0000ffa000/0x4000)=nil) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000300)=0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000340)={{0x6, r4, r5, r6, r7, 0x22}, 0x10001, 0x8000, 0x5, 0x7, r8, r9, 0x81}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000500)={0xfffffffffffffdf4, &(0x7f0000000400)="fad8580bb03e549c19ed7bee61b14a5e79b6193879ce7760dfd5a71fb7fbc022adfc1e7ffdde47de068eb8cd74a3af694fd10200f1dbb8dcf6403c9841d4d8c8ff024b90162a4a46bfbabd261466aca3a113f1315daf9e2f4f38b8c91691e0dfaee74039dce0ee29bdbaf2e3f708a13746aab3244d06364061977ac5694ed8b0e8c2044395d0cab1062eda57f9cfd86b5dd21d4165e163790df97752624987020f6afd0e4f71f05213c055c0d8528a9149f3b492328474cd3fe9a180dcca08b9652e6f335193268ccbcd4d75796a480e978420"}) r10 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x3c, &(0x7f0000dbb000), &(0x7f0000000000)=0x3c4) 17:24:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x700}) 17:24:19 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/207, 0xcf}], 0x4, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x6, r0, 0x4, 0x0) 17:24:19 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40000000fffc, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000cc0000000100000022788660d6ab90beaab90180000000000000d015589d55325e25a0125401bda54c526234ac73cb26a451ec4e1432d87f0e16153d767ceac58bb99bc1eef0c784aea3e8a4bddae04ffc25f68a6ec368ef4517bc93016b3c49a57dbaf1bde8a42b5c0407f174290aa6be81b3488b83030010c50566a09f254171f138ab91d373f3ca1366c87eb61d289af74884cb080c8f1654437e7dbb72c87b0ef00d9fd3331b3d0882dd0a14aca19593462a6f2ded3a1061dd000000"], 0x0, 0xce}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0x4008af03, &(0x7f0000000100)=0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x9, 0x1}, &(0x7f0000000140)=0x0) timer_delete(r4) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x440200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2054.491524][T19571] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2054.508516][ C1] net_ratelimit: 23 callbacks suppressed [ 2054.508524][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2054.508594][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2054.514340][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2054.520112][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2054.525917][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2054.531550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2054.537269][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2054.573223][T19563] overlayfs: missing 'lowerdir' 17:24:19 executing program 0: socketpair$unix(0x1, 0x200000000000003, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/207, 0xcf}], 0x4, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000180)) exit_group(0x8) [ 2054.588532][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2054.594424][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2054.600455][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:24:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000005, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/187, 0x1000}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3fffffffffffd, 0x88d9, @loopback}, 0x1c) 17:24:19 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x900}) [ 2054.969667][T19594] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2055.011884][T19591] overlayfs: missing 'lowerdir' [ 2055.142276][T19594] overlayfs: missing 'lowerdir' 17:24:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000035) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null]}) r1 = gettid() futex(&(0x7f00000002c0), 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) bind$ax25(r0, &(0x7f0000000240)={{0x3, @null, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x48) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/207, 0xcf}], 0x4, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 17:24:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xa00}) 17:24:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:24 executing program 5: r0 = socket(0x0, 0x10080a, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000100)=""/75, &(0x7f0000000180)=0x4b) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000380)={@dev, @dev, 0x0}, &(0x7f00000003c0)=0xc) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x2000) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0x0, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'hsr0\x00\x00 \x00', r1}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto(r0, &(0x7f00000000c0)="e360b641b37f000000358000892f", 0xe, 0x0, 0x0, 0x0) 17:24:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) r2 = getuid() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @loopback}, &(0x7f0000000940)=0xc) getresuid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)=@acquire={0x1e4, 0x17, 0xa04, 0x70bd2b, 0x25dfdbfd, {{@in6=@loopback, 0x4d5, 0x32}, @in6=@dev={0xfe, 0x80, [], 0x1f}, {@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x401, 0xa, 0x80, 0x0, 0x3e, r1, r2}, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e20, 0xffffffffffffffff, 0x4e22, 0x19fd, 0xa, 0xa0, 0xa0, 0x3b, r3, r4}, {0x6, 0x9, 0x5, 0x9, 0x9, 0x4, 0x9, 0x41}, {0xfff, 0x2ea, 0x5, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x3, 0x80000000, 0x2, 0x70bd2c}, [@algo_comp={0xbc, 0x3, {{'lzs\x00'}, 0x388, "d985306db5341619c28b1667bcea6c0ed7117e6a7df8b88b2c391a49db0d8017927ef14db30115e283d6cad27af2797c1566988c637966b6002897706882ca7f3b934a94e66b45eca3561e88f583d0f32e7a42fe897981f5045500fbb34d83fe2a113ca80dc371fdf0304b29fecf88b54e"}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0xc0) r5 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2f) geteuid() process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/207, 0xcf}], 0x4, 0x0) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r5, 0x0, 0x0) 17:24:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x280000, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x7fffffff, 0x8, 0x3}) ioctl$PPPIOCDISCONN(r1, 0x7439) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x18, 0x4) ioctl$KVM_NMI(r1, 0xae9a) 17:24:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2059.030111][T19623] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:24:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xffffffffffffff59, 0xc0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x128, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffb}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000001c0)={0x1f}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/207, 0xcf}], 0x4, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2059.089627][T19615] overlayfs: missing 'lowerdir' 17:24:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='befs\x00', 0x3060016, &(0x7f0000000080)) [ 2059.185835][T19631] overlayfs: missing 'lowerdir' [ 2060.748516][ C0] net_ratelimit: 23 callbacks suppressed [ 2060.748525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2060.748557][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2060.754266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2060.760096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2060.765828][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2060.771517][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2060.777230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2060.828519][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2060.834401][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2060.840288][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:24:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000036) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xb00}) 17:24:28 executing program 5: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4adb, 0x13) syncfs(r0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x200000080000, 0x4) 17:24:28 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:28 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8001, 0x10400) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000200)={{0x8, 0x2, 0x5, 0x9, '\x00', 0xffffffffffffffff}, 0x6, 0x20, 0x4, r0, 0x3, 0x95, 'syz1\x00', &(0x7f00000001c0)=['-vboxnet0\'\x00', '\x00', '\x00'], 0xd, [], [0xffffffff, 0x8, 0xa0, 0x2820]}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, 0x103, 0x4, {0x80000000, 0x3, 0x9, 0x1505}}) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/207, 0xcf}], 0x4, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:24:28 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000000)={'bond0\x00', r2}) 17:24:28 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:28 executing program 0: socketpair$unix(0x1, 0x1000000000000005, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/207, 0xcf}], 0x4, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x7ff, 0x202000) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x100, 0x0, 0x1, 0x7, 0x3f, 0x5, 0x200, 0x4]}) [ 2063.706083][T19664] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2063.752772][T19659] overlayfs: missing 'lowerdir' 17:24:28 executing program 5: setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@v2={0x3, 0x1, 0x13, 0x1, 0xfa, "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"}, 0x104, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x9e0000, 0x1, 0x4fc2, [], &(0x7f0000000040)={0x9f09d7, 0x1, [], @value64=0x7fff}}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x1, 0x0, 0x3, 0x12548868, 0x0, "6d43350f3718efa0a0daa269697962c49643c0de02a09491b4553bd89dc2ff40e576ceb62f4a4f06103dc89d07deefc82f2018ba15cddd77b2f947c5bf8ef6", 0x35}, 0x60) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 17:24:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2063.870645][T19664] overlayfs: missing 'lowerdir' 17:24:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)=':em1\x00', r1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/207, 0xcf}], 0x4, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2066.988518][ C0] net_ratelimit: 22 callbacks suppressed [ 2066.988527][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2066.988560][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2066.994313][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.000156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.005895][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.011628][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.017341][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.068533][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.074375][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.080407][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:24:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000037) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xc00}) 17:24:33 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x80000000031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x5, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0300000008000000000000000000200000000000000000000000000000000000000000000000c9a311d900000000004d3b8adfee30a12e95aed60d86fcb52060cd32c42d4df860f9ec4fb3563f76fb02fbd6b468"]}) r2 = fcntl$dupfd(r0, 0x406, r1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000140)=[{{r3, r4/1000+10000}, 0x16, 0x10001, 0x2}, {{0x0, 0x7530}, 0x1f, 0xffff, 0x3ff}, {{}, 0x15, 0x0, 0xffffffffffffffc1}], 0x48) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0xaec) r5 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x52, 0x20240) mq_timedsend(r5, &(0x7f0000000080)="8423ba214d72cfa0eae159f10180d17f53a6c638e0fd06fde306d154fd18dfd4dadf70a2", 0x24, 0x1a2e, &(0x7f00000000c0)={0x0, 0x989680}) 17:24:33 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:33 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:33 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x440000, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x41051, r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/115) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 17:24:33 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2000, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil) shmget$private(0x0, 0x3000, 0xb, &(0x7f0000ffc000/0x3000)=nil) r2 = shmget$private(0x0, 0x1000, 0x800000001a, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, 0x0) r3 = socket$inet(0x2, 0x200000004, 0x3) r4 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) r5 = dup2(r3, r4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0xc0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local}, r7}}, 0x48) accept$unix(r5, &(0x7f00000002c0)=@abs, &(0x7f0000000240)=0x6e) 17:24:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) sendto$unix(r0, &(0x7f0000000080)="e0", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x59, "f5bf8be363ad3d393d38ff45f600d235398c3a3bc029b4ef640027bf37548e37b51484a49a75e3d2c420162ad2eb5735a950836825c1e475c2d2badafe9dd76d53ac7493f5a948256b823772b8636ca47a3b084dc24da7656b"}, &(0x7f0000000000)=0x61) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r4, 0x664}, 0x8) close(r1) 17:24:33 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2068.010522][T19710] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2068.084346][T19705] overlayfs: missing 'lowerdir' 17:24:33 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x10080) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup2(r2, r4) dup3(r4, r3, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) accept4$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) [ 2068.214180][T19724] overlayfs: missing 'lowerdir' [ 2068.232187][T19724] overlayfs: failed to resolve './file1': -2 17:24:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xd00}) [ 2068.451601][T19745] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2068.488973][T19740] overlayfs: missing 'lowerdir' [ 2068.596196][T19748] overlayfs: missing 'lowerdir' 17:24:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000038) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x543, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100), 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x80, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000180), 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) write$UHID_INPUT(r0, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) 17:24:37 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x1020}) 17:24:37 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8000000000005, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb4, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x2, @ipv4={[], [], @remote}, 0x10000000000000}, @in6={0xa, 0x4e24, 0x231d, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x401}, @in6={0xa, 0x4e21, 0x1f, @local, 0x800}, @in={0x2, 0x4e20, @remote}], 0x74) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="ed00bd10bdbcc7071f3a07a29ce18de9", 0x10) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @win={{0x0, 0x0, 0x34343459}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 17:24:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1810860c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) r8 = open(0x0, 0x0, 0x4) ioctl$SG_GET_SCSI_ID(r8, 0x2276, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) clone(0xc000800, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) getresuid(&(0x7f0000000240), 0x0, &(0x7f00000002c0)) write$P9_RREAD(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="50372818e4ef4e28afa0f3c208188ffeb20170a654b139ca80a911ede0ce5f7199cd8caf1d3e020000004a729500bdf95f5a701af68dde3e4adc6c88c20f4f37ce"], 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, 0x0, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000200)=0xe5, 0x4) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000003c0)={"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"}) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0xf0b) 17:24:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000000)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) r2 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x80) getsockopt$inet_dccp_buf(r2, 0x21, 0x8e, &(0x7f00000001c0)=""/6, &(0x7f0000000200)=0x6) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2072.823013][T19771] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2072.877989][T19764] overlayfs: missing 'lowerdir' [ 2072.887126][T19781] overlayfs: failed to resolve './file1 ': -2 17:24:38 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:38 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x689, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:38 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2000}) [ 2073.228533][ C1] net_ratelimit: 23 callbacks suppressed [ 2073.228543][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2073.238520][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2073.240101][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2073.245835][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2073.251892][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2073.257692][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2073.263398][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2073.269175][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2073.308528][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2073.314372][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2073.408749][T19799] overlayfs: missing 'lowerdir' [ 2073.423434][T19798] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2073.544528][T19798] overlayfs: missing 'lowerdir' [ 2073.575088][T19796] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:24:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000039) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:42 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/67, 0x43}], 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x4, 0x9, 0x7fffffff, 'queue1\x00', 0x6}) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x200000) write$binfmt_misc(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1004) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xbff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0xffffffff00000000, 0x30}, 0xc) 17:24:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:42 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x500000000000000) 17:24:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2010}) 17:24:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x400000) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=@routing={0xbf, 0x6, 0x2, 0xffffffff, 0x0, [@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty]}, 0x38) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x6) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f00000009c0)=0x1, 0x13) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, 0x0, 0x0, 0x8001, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="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", 0x599, 0x0, 0x0, 0x0) 17:24:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x806, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2077.719513][T19830] overlayfs: missing 'lowerdir' [ 2077.739552][T19823] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:24:42 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) prctl$PR_GET_DUMPABLE(0x3) [ 2077.795990][T19830] overlayfs: failed to resolve './file1': -2 17:24:43 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2077.886111][T19830] overlayfs: missing 'lowerdir' 17:24:43 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x4, &(0x7f00000001c0)='tls\x00', 0xffffffffffffffff}, 0x30) prlimit64(r2, 0x0, &(0x7f00000002c0)={0x1f, 0x6}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r3, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x3, 0x9, 0x4, 0x70000, {0x0, 0x7530}, {0x5, 0x0, 0x40, 0x7fff, 0x8, 0x3, "19debc57"}, 0x10000, 0x4, @planes=&(0x7f0000000040)={0x2b, 0x9, @userptr=0x1ea, 0x2}, 0x4}) [ 2077.917142][T19838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2079.468512][ C1] net_ratelimit: 24 callbacks suppressed [ 2079.468521][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2079.468562][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2079.474231][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2079.480066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2079.485810][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2079.491472][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2079.497175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2079.548543][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2079.554358][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2079.563337][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:24:47 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000003a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:47 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x170) write$tun(r0, &(0x7f00000000c0)={@void, @void, @ipv4={{0x15, 0x4, 0x25c, 0x5, 0xd5, 0x68, 0x5, 0x7ff, 0x37, 0x0, @broadcast, @loopback, {[@end, @cipso={0x86, 0x10, 0x9, [{0x3, 0xa, "b7884fc4d0135c51"}]}, @cipso={0x86, 0x27, 0x4, [{0x0, 0x2}, {0x2, 0xc, "859b51ca49e6caa13742"}, {0x6, 0x3, "82"}, {0x0, 0x10, "667dad5d6f1afbfc95e48f226f62"}]}, @timestamp={0x44, 0x8, 0x80000000, 0x0, 0x8000, [{[], 0x5}]}]}}, @igmp={0x0, 0x1f, 0x0, @local, "b55d91aaeb504eebf8c8350d346b7b296413221236329cd8ed5dbf5e035571c52ecfce8a4e973bf729187948735c6f667d7c3517585688b29b99de12ee39bcef2bcd9a57f3587f65a4e480fc6f23ea39eedd5190a9dceb17811ccd868d1d8c561e83568a9bef6e84eb328fc27076a9d170cf3c36aeb683c4df"}}}, 0xd5) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xc, @pix={0x0, 0x3, 0x38415262, 0x2, 0x7, 0xfffffffffffff001, 0x9, 0x79, 0x1, 0xb}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2c0000, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7d579a06, 0x40) 17:24:47 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x3f00}) 17:24:47 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x80600, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000280)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xb9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r3, 0x7, 0x1, [0x20]}, &(0x7f00000001c0)=0xa) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x2000000000000000, 0x2000) 17:24:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:47 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xe80, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2082.236098][T19869] overlayfs: missing 'lowerdir' 17:24:47 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000001400)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x34, 0x0, &(0x7f0000000000)="e460cdfba83c7174230707008906cbe9c390dc427fe4f489f984dbe4f98b6126a2aa6bb8870baa3c57c42640a5467e4650bb3163", 0x0}, 0x28) [ 2082.307229][T19863] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:24:47 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2082.471541][T19869] overlayfs: missing 'lowerdir' 17:24:47 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x3580, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:47 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4000}) 17:24:47 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x0, 0x84, "b4257f9ccafa3e6e406f3594e6e6825219f3be7cbe723da7d0c132d1d6e418145b1abce3e4a6e9c2ac4f63141b12846edf0dc1713ded76d7630ff4d67fbaa50c76fc98c657711a4067ad60c7df66bf0c34d92bca875031c513fc2922666bfd922100fecdc149a9cd39985331c4ee034761019ea25158f4151be270533b53a455ba83295d"}) getsockopt$packet_buf(r0, 0x107, 0x200000011, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) [ 2082.726414][T19883] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2082.819803][T19881] overlayfs: missing 'lowerdir' [ 2082.948183][T19895] overlayfs: missing 'lowerdir' [ 2085.708568][ C1] net_ratelimit: 23 callbacks suppressed [ 2085.708577][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2085.708606][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2085.714292][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2085.720570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2085.726324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2085.732007][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2085.737704][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2085.788551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2085.794371][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2085.800254][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:24:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = inotify_init1(0x80000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x2, 0x6b2, 0x99}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e21, @loopback}}) r2 = socket$inet(0x2, 0x4000000000004003, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) 17:24:51 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4800}) 17:24:51 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:24:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000003b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:51 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x6, 0x0, 0x0, 0x0, @initdev, @initdev, {[@ssrr={0x89, 0x3}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2086.068667][T19917] overlayfs: missing 'lowerdir' 17:24:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x4788, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2086.117060][T19917] overlayfs: failed to resolve './file1': -2 17:24:51 executing program 5: [ 2086.174695][T19914] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:24:51 executing program 0: 17:24:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x4888, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:51 executing program 5: [ 2086.321610][T19917] overlayfs: missing 'lowerdir' 17:24:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x13f, 0x2}}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:51 executing program 0: 17:24:51 executing program 5: 17:24:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x5c00, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:51 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4c00}) [ 2086.873557][T19939] overlayfs: missing 'lowerdir' [ 2086.902164][T19939] overlayfs: failed to resolve './file1': -2 [ 2086.980984][T19939] overlayfs: missing 'lowerdir' [ 2087.004808][T19936] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:24:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000003c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:55 executing program 0: 17:24:55 executing program 5: 17:24:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x6488, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x5c00}) 17:24:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:55 executing program 5: 17:24:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x7000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:55 executing program 0: 17:24:55 executing program 5: [ 2090.667878][T19966] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2090.719648][T19957] overlayfs: missing 'lowerdir' 17:24:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x800e, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:55 executing program 5: [ 2090.829232][T19966] overlayfs: missing 'lowerdir' [ 2091.948510][ C1] net_ratelimit: 22 callbacks suppressed [ 2091.948520][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2091.958503][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2091.960008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2091.965714][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2091.971519][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2091.977214][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2091.982901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2091.988635][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2092.028532][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2092.034321][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:24:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000003d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:24:59 executing program 0: 17:24:59 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500), 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(r1, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x8) times(0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) socket(0x0, 0x0, 0x0) sync() r4 = socket(0x1e, 0x0, 0x0) socket(0x9, 0x80000, 0xffff) ioctl$KVM_NMI(r1, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980)="230a9f39cc653f", 0x7, 0x0) clone(0x102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0xc0081) r5 = dup2(r4, r2) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f00000002c0)=""/237) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x94a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000010000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f3100000180c2000000000000000000aaaaaaaaaaaa0000000000000000100900003809000080090000616d6f6e670000000000000000000000000000000000000000000000000000007c080000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061df8548198e4bd03a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4c200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000e000000172"]}, 0x9c2) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) 17:24:59 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6000}) 17:24:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8035, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:24:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:24:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x109000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000300)) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r1, 0xc0445611, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x40100000, {0x0, 0x7530}, {0x3, 0x0, 0x100000001, 0x0, 0x101, 0x31, "ab66a221"}, 0x0, 0x3, @userptr, 0x4}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) listen(r2, 0x7) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0x9201, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) close(r5) fchmodat(0xffffffffffffffff, 0x0, 0x0) 17:24:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2094.550513][T19990] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 2094.616644][T19994] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:24:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x2d9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000f40)="03f4a2c970de1d9c3776a9481255ced5dbc57fe63cd931916a02bae17f7850aea473b1c2395dcc0f572febcadeb7fa0f2ee9dc78ccc69169ccfc0bf46dbaba25f3f5a75b77654c0cb9989ea026da080991348232bc2541328a29ec7e06942980144d2ae1b8811ef7af232c4bcb7d89d1aafda6e27d68ed8047debe4f6acdb39851142538045af7a37276d45101a908acd7e6586aaa477a1ed765207d078f68d3f09646ebb175b64f48673bab39a740b280f8876953befe1c9eb8b1494786cdda1a87dbce", 0xc4, 0x7a84061d, 0x0, 0x0) [ 2094.712066][T19984] overlayfs: missing 'lowerdir' 17:24:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8847, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2094.835344][T19994] overlayfs: missing 'lowerdir' [ 2094.861851][T19984] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:25:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8848, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mknod$loop(0x0, 0x7c0, 0xffffffffffffffff) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001000) [ 2098.188516][ C1] net_ratelimit: 24 callbacks suppressed [ 2098.188524][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2098.188552][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2098.194282][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2098.200124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2098.205863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2098.211564][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2098.217270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2098.268532][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2098.274394][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2098.280361][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:25:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000003e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:03 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6800}) 17:25:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) rmdir(&(0x7f0000000080)='./control\x00') 17:25:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8864, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:03 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x890) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:03 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8906, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:03 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 2098.674360][T20051] overlayfs: missing 'lowerdir' 17:25:03 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1302}}, 0x80, &(0x7f00000000c0), 0x2fe, &(0x7f0000000440)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400000, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc2, &(0x7f00000000c0)=""/19, &(0x7f0000000100)=0x13) 17:25:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2098.715359][T20051] overlayfs: failed to resolve './file1': -2 [ 2098.880140][T20064] overlayfs: missing 'lowerdir' 17:25:04 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:04 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000041) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:08 executing program 5: open(&(0x7f0000000200)='./bus\x00', 0x30000, 0x20) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) mkdir(&(0x7f0000000900)='./file0\x00', 0xffffffffffffffff) r0 = open(&(0x7f0000001d00)='./file0\x00', 0x0, 0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/uinput\x00', 0x80802, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000880)) creat(&(0x7f0000000700)='./bus\x00', 0x20046) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x344) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000001dc0)=0x1ffffd, 0xcb600901aedb742c) fchown(r2, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000001b80)={&(0x7f0000000880)=@caif=@dgm, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/39, 0x27}, {&(0x7f0000001a40)=""/171, 0xab}], 0x4, &(0x7f0000001b40)=""/28, 0x1c}, 0x2) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000000)) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000]}, 0x45c) r4 = semget(0x1, 0x1, 0x10) semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000000100)=""/194) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00\x00\x00\x00\x00\x05\x00'}) ioctl$UI_DEV_DESTROY(r1, 0x5502) 17:25:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6c00}) 17:25:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:08 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:08 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:08 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x2) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4080000000) getsockopt$inet_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) alarm(0x6) msgget(0x1, 0x8) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000640)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendto$llc(r3, &(0x7f0000000380)="68afd25c177c792c142e7d99aca2d44d302d24e09a42f52793fd70bb89639cbbbaf714a60410b58d751b3a291c766fd62acdc1162a4a9c16e8eff5a51c7e59fa067a1cb71403c6bb", 0x48, 0x4040010, 0x0, 0x0) [ 2102.978768][T20087] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2103.030894][T20081] overlayfs: missing 'lowerdir' 17:25:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:08 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 2103.167306][T20098] overlayfs: missing 'lowerdir' 17:25:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x7400}) [ 2103.472185][T20109] overlayfs: missing 'lowerdir' [ 2103.503014][T20107] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2104.428644][ C0] net_ratelimit: 23 callbacks suppressed [ 2104.428653][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2104.428786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2104.434404][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2104.434513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2104.440268][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2104.445949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2104.453330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2104.475408][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2104.509090][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2104.515427][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:25:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000042) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x7a00}) 17:25:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:13 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2108.170833][T20134] overlayfs: missing 'lowerdir' 17:25:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2108.199598][T20134] overlayfs: failed to resolve './file1': -2 [ 2108.328969][T20134] overlayfs: missing 'lowerdir' 17:25:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xac03}) 17:25:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2108.608881][T20150] overlayfs: missing 'lowerdir' [ 2108.633118][T20146] overlayfs: failed to resolve './file1': -2 [ 2108.720986][T20151] overlayfs: missing 'lowerdir' [ 2110.668498][ C0] net_ratelimit: 24 callbacks suppressed [ 2110.668506][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2110.668535][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2110.674224][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2110.680093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2110.685828][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2110.691510][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2110.697231][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2110.748503][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2110.754296][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2110.760173][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:25:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000043) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x420100, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x81, 0x1, 0x2, 0x4}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x7fffffff, 0x7, 0x8}, &(0x7f0000000300)=0x98) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = getegid() setresgid(r1, r4, r5) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c106cb0c2dac21084b2f4d19f14cf3000f51d", @ANYRES16=r6, @ANYBLOB="200528bd7000fedbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x20000004) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x200000, 0x0) write$P9_RWRITE(r8, &(0x7f0000000180)={0xb, 0x77, 0x2, 0x6}, 0xb) r9 = eventfd(0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f00000015c0)={r9}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000040)={r9, 0x0, 0x3}) 17:25:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:17 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xedc0}) 17:25:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:17 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8060000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:17 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2112.079770][T20177] overlayfs: missing 'lowerdir' [ 2112.095823][T20171] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:25:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2000013f, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x10}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) [ 2112.170852][T20166] overlayfs: failed to resolve './file1À': -2 17:25:17 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2112.279606][T20171] overlayfs: missing 'lowerdir' 17:25:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000044) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:21 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000000d08fffffdffffff9500ff0000000000000009000000180000002400000000000000fefffffff5a0f8ff00000000180000000300000000000000a10e00008500400000000000000000000000000000000000000000004f39081b837da4633f9a4a0220e951e07fda9ad10dab00000000000000000000"], 0x0, 0x6de2c07c, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0x9}, 0x48) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x200}, {r1, 0x40}, {}, {r0, 0x2000}, {0xffffffffffffffff, 0x8000}, {}], 0x6, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000002c0)={0x3}, 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/zero\x00', 0x24000, 0x0) r3 = syz_open_pts(r2, 0x8100) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000180)=0x4) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000200)=0x8) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r5 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) ioctl(r5, 0x6, &(0x7f0000000dc0)="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") r6 = creat(&(0x7f0000000440)='./bus\x00', 0x4) rmdir(&(0x7f0000000300)='./bus\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000900)={@mcast2, @remote, @mcast2, 0x2, 0xfffffffffffffffe, 0x7fffffff, 0x100000000000400, 0x84, 0x617, r7}) write$binfmt_elf64(r2, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r5, @ANYRES32=r2, @ANYRESOCT, @ANYRESOCT=r6, @ANYRESOCT=r6, @ANYRES32=r6, @ANYRESHEX=r3], 0xfffffffffffffd35) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r3, 0xf, &(0x7f0000000580)={0x4}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000001c0)={'hwsim0\x00', @local}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(r6, 0x541c, &(0x7f0000000500)={0x5, 0x9, 0x5, 0x100000000, 0x40001}) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getsockname$inet(r8, &(0x7f0000000540)={0x2, 0x0, @dev}, &(0x7f00000005c0)=0x10) sendfile(r4, r8, &(0x7f00000000c0)=0x202, 0xdd) 17:25:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x40000}) 17:25:21 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x6000000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:21 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:21 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2116.278921][T20211] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2116.345186][T20207] overlayfs: missing 'lowerdir' 17:25:21 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x4) lseek(r0, 0x2d, 0x1) [ 2116.482379][T20220] overlayfs: missing 'lowerdir' 17:25:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x1000000}) [ 2116.718853][T20230] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2116.757842][T20228] overlayfs: missing 'lowerdir' [ 2116.908496][ C0] net_ratelimit: 23 callbacks suppressed [ 2116.908505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2116.908546][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2116.914281][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2116.920148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2116.925878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2116.931573][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2116.937297][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2116.988543][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2116.994433][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2117.000334][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:25:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000045) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:25 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x43050000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="649c47ad46390dc86dae79fa409d4d544a5892ec3e4184ca2890e6502eba53cd210387bdfab3596010adacdf38c59a05488f97b8bcf2affe359041df8637d24a542cbb58ae180149e14cf4bb376b37d131cec7f3c905db00ecd28a0000000000000000", 0x63) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='1', 0x1}]) 17:25:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2000000}) 17:25:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x6000000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:25 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2120.796494][T20259] overlayfs: missing 'lowerdir' [ 2120.797007][T20254] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:25:26 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x600, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x70) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x1, 0xfffffffff0000000}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}]}}) 17:25:26 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x70000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2120.974702][T20254] overlayfs: missing 'lowerdir' 17:25:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x4, &(0x7f00000013c0)=[{&(0x7f00000001c0)="0e40440837945a6c2cd34f0ce7b803fc70891b704f333a49f4dd09aae957c019e5b0a95f944af67da5cc268cf4f4fbb2b9be835686b910801a0b29505581635c7efa3f5c4c0971e8e144a02bc68885c84f3c65b89e5b26d5118a938326ddbc0b8886e171e9b75155289589efda2dedb344977fa89acf43470cb4dd929cf906eb02bc9ff11f514392b6bb2f583a84a297b6614f239b0079ddac903fa22b9eb7679298e114a7f52db618419d62ae8914464dcfb1803c9245de5068d4d9f4af050ee6aceb4026a9a6b69375595c60d619328b880c02a29255ef3c2cff7f6386a0", 0xdf, 0xf8}, {&(0x7f00000002c0)="db057984461f2620dc4c96e676126da6e87df646a1bcc8963da3e2fcbcad826cbb5f49ac91fc83d4fca365dab24eb4d5a118a438ebf1e0d87e8a6fbcbebbe89a984e79b1d4ae74fb294fc4b1536344014b2d75a1bdcc2546c368bf4fbcfe219e89081983593ff8b893240557ed33aed633257d4d754fa5ab53d080259831d5a9c08b14a91f23cb0034a9aad2ce7330def9dbeff226360f33cbf9739356c7602b3de9c0e3564bd4a7365b4e8c8afad610af8ceb6d97bf4eca289cb17dddefce9ae0334e3a5685fec71471d0a6afad3ebd4d11fd8f11adbea4872c56e85387e77199a916ecda3e905102a1e35778f8db747d863e5e3761c2ecbc42058cc362b597a92f1d5f6710ff3df7f9763ae570bd97165086f22cdbaa1b0e4c04773783c3c0ab1aece2755d0bd18d0f1a33160a37830504d54f37130394043b4c5e7a188e2ecf558a7942ab0579c35ab36c275df2012807a59ebbd94e8fb330b91477667566beb4cb4eb61c9307823993a3a8c0e714199dd679f3aa1f07f8d72c3cec47a0dba982326406784c15356f41d058d27bc987c936fe01df3db1b1dd083f1dc5f1d5aa2068e4e622e9c9f24e50f94c66487a3667391564baa752a175b79a95fbe2b85550b7b1f61d889e078d5550d803c4df2574b675171390864ef6e2b95d00026652d600d7bcfe60033c07d5f1b897cff426773bb2e5e12a930ea19303a8bb8a912facdf79e3daf9794e0c65a18c3c406228e9d249fd1f7791d5d80e1e301327d6d8b3b3357b4022f7eabfcc400a7c6114287ff3e1927a6bf27d794f41dcbcc0cbf85e60362551468f1d103eeef0d007ca5bced5edffe3a132a1a6dc7cbfeab5ce07a18becbee2f92adb4a172f26e40c5ee4b5fa6c0b7eb2d0aa65354f512b2da273624a6775767e1cab5eb1de8ba01d41f34ebb1d56e750ca9fa42cff8b416d1318017a0aac75da6700768e5ca261c63c031fc125b00c68ad31b19d0cf76e04d18350ea92555d723a76a7cda5ce44d116ddd29d2c019bc9dc6e87b3ee81adad856b3a1dd598e313c430f8c9b12d8ddefb4242c9270ecc322bfcaf9a2bb819c20cdee65a91fdba8860ef5c2d1dfd7ecb3a1d1b1a773832a42115008943905ad62195762429cefbe68c03a57fbdcb6ed174e7d642c4e23ae5a92441a820c8f2eefabd3f6bce1f23cc6d9461d0c739b8303e5137bd9897e83d03d1229c0151a667b1fa782d3dfdfe20992c18e1c2ed7d81cb1e8d93b7c868fd0776dfc14eb3eaa5b879d1986fca16503fdfc5984b5989ae33a649b1827b780b8257f7bc2cf619ceec977dc7fec95b6013245310535d7e43961bbe9f36e3fb048e97b98b06c218c885f0ce6e78414313ebe6c45546ccde821e6f5ac9de3d74646b12a3e4b9ed6e1f7b990f37a4a44db0fe4bb0570cc0fd77354ea1381eb4d594c5a13938e6761e63881caa26b049f895247a4ca9e7920094f87317fcbe4ca50c2ad6a7f7c219e036208ad5cd1094c1d0abaf6b506146553afc954beb3b3c5e823482e65fdcbdcdd5234be7aeffc3423e21b1f93261b797e71572f8f151b04ab7da0e27657882c44a5fea31b0a07290618c0f37c3293d92088f9bcdc22a5c7590f5723a3611d614545a7ed1c30ff8ea5fe7c7431fcccb14fece376db22ae93509ceb82f0675071a54a7910680d7d3c107289395e6adfcfee42abb6c6bc7e16b8e02b901d0d03e124c4a37a6aa5d18dc25dfd8afe9b1ebcf77ac3aeb3b79f7f313be501c14a771fa80f680b9c13e54bb900fc9c3816f5a0ab013ca542c8d8bf51850a277b0e34d2e108f36c9ace4938f3c943c3096db483d5b66a8ddd0d7bcb2a6c7d51859a05597d217485eaa511bbee083d1a44cc507ebf613f32801ceac5e9d3e336359d20ff4daa536b321831f5023b22d4b988d6a9bc91766140fbdccf56e3bd14c25eb7a7aa4c5fccc8aef0b38aba6363c4562f74efe687a05a8e9d217b2778c987a548414b39e05bff690264201939bf1f7017fa7893b31c196a54add9384297064e7beba0fbc0da33cd24eb6a29d3089f7402d3758a6df4f9f18bf11c5d94b3096375464b0dfa3e9a969c60204ba1b9ac4bd4dc0de6bd8cb5d72c615e49cbe9afe9c9c9088f17ed25a05904833f384e9676d30202d2740323c3db75f3ee80686f0788929f747909152f6e9ec083da3b3cb0d6291c52c4dd6ff90e0981dd44ec73658f310c24b351656121ad09d8c8c2b5e267fd8b54171123ce8c68029f226b55e3a3426678f232acda61c5d5ce8ef8a6f1acf862929466ed1d659b315c4ec66320eabce24e5c18dc558b56119e8877a33b7ec0e7218ddf88ad6951863814d2dff5f432e6f893d47163daaa2c262e2dcfac1aabe1049eaf1fb32efa877847afbceb5cf54cbd423dfc059e888ff457e5cd21c7fa5d081b5fff4ec1d0590b1c595027a04789743d78fef11a8209dd4110e5ad4ca5df44cac651405df56f877f551ac9ad2a11a5c3d9bda565c26fdace0de67cab19b5ebf5e31fd443a9916ec238b5e6f8885c7bf2ec10a10ffbe88d17dec33ec776d53b3b4fc59346177efc23e74840920afdbfcd2f834186d0678f683377921286bbdfd3671904d062e8feea9a0d2cf20ffcf35fb335091a3568ff3b5a824b844e43931e450b8589b34adff609f6ebd49e0165ff2f3536565954852f482417a4c0635ccc39264820b5b29ef00e01b894ebf26bb768849a695759c34269af3064b3a4162b23f16c29b47e1f5c53cae09b5846446fc0b741a82125ba5d012883951986c31e9329d8c4e56c3d091a4484c96236bcc4d40eeff25c8acc7ee0bf8f9c803e012488078c2285a972a6d8c62dee87dfbfa0ba3f53a48e1ea9368ed532b415bdd4c1ed3412533f0aa261d45c62584c0576c629a034bfadd3746751acb8ca7e12ba60ecdd9c922c498d30214248851284df79c5e661f3766320a5d0232d2c9fe1ab4c8306afa2e52a3369082d415b1b05c3bcf91762095392214d8100e03f04d271068377107f1e23e9679a521aee23c2ccac33746a245a47151b22badd04e0e0c6336f28333fe836a971a2bda358a0e526ae319a47f52a9e8b51a5f079a62040098cdb3701027bf67c3e984d4272cb2ca658d7fe53220f730d08035567e90deaeabb4cee2cece98d7470b03213307757e2ebfae8b53ee683f4b4bc55c345b093b48c4d81783188849faf4ed6a3b27378d1d5a5fbd2264ebbd7a06674e0d9df9c7e6eb07d6e5e3c065648f37a222800d30012cde2c29ad32362983ef6146cb54420d6b568620508a8ffcdb7794d0043f240336fedf81eac099aae25ce8eee64674fa5cb06345762fde275c099d0474e45b5850a286c7212bfe8315f74c85b01070bb6cccd5b1baac25459f36809688b80c56d1724870c679b3bc83ad92981c35f0e0c61d6ca81a3567b0c63735cd7f2a0bde5b6a0af0397679edce934c03a0480b89db7367aaaee2979256ed2e279a3139fbcb1e441366b7b21d6b0e3d190c66e4aeb546d78167cdf6906feff29f5ea63ea09e0734486316ebccc94c7d6d3a3c4241c0243096af1858402c664fabf481c4b1d00e7facf8b4bc7094e8f3b575699a3f5d7022596a45e182b6b5710391013fc3f2602159f73f6536771770f3bbec3e1934c96b7b807103c7cdcb3cf7693620904d5a56ace9fd517d07d3715cd4e4516d84afc008dc82ea0636453bd16ce240809d52ebac2661c34614b035de605130792b91c7bab8cc521cc8dc1dd145087dd2557017cf8ff1f29b5f6bc32777b45f1b23aa3c6a355f4db6d1a835e4c0692c8c3e2d3da30f4c3fc4b3f809fecc9adfd30fc6653942dcad0a6fa3a8feb4fd83db1a5293fde4d0f76fa264f01f75c142a2333c2635f5a54d2bc28cbc1f563831a8e6fce81d25d91fa9bc1dbf41ae6a0a7492213a32cbcdad05f7a482087c8ca6255b64a3834097ce729f3300b1aff41a9265401ea66c6077a6f56910206840ce28be42a342519a1662b70d3301e240acf492d42eeff2cf877039984b7769391afec7bf1c5ae4bfbc4f8d29009700a47fe56865de6e3433f7466b720f98946102accc42d224f39afcf16d8452d8ca34c82c877437cf6c8cc6537eb7d3b5ec90535d5858bb75edeff5d50b2a22e9268715e829dc91685a1eedce12f33cc7669cb89519032c262ace092f12b9971c2a3563893da272b3d3ed749cce50fd7de327f22f75958e86644160c202bc28590f24b8efa8f0044ea90a1596a623fb79d7821713157badedafa962d1d85525d9554619f8c552a502528c8ae5e0f1ea3f6cb94966df9d1274a845bb7c9943a8235088158299c20f5266d8292460ce5a9ae3e9f0e5b1a954855e1e7de3b532831c874dee846e95c30b10482a8651aaad92a821e04bfbc61d9206dd9b51bdb70686b3ac7bdb22f756cb733cffe9b5dcd4f419c5564ff3e812d723f1a38c2f5f2885022fa05f1cee9b3c6ad41cb3a7de88e4da09f8ba8ca9cd2f0fd1c23d6aeeaa8ea22baa8726c4d43be7f0b6c2a147218b204618634380897a65ac9cf5a2845011acb8093c44d90b09a814d43f744d8b04fe6bb501dc294f98159734884c042f5ecf14a11ec13d4f4752b75d299f208d6e618cf70e60bfbf933f9ba57402694a732d369d3bbe51e6e24cfc6033790e3ae54282d2582502f6b44f92513ddeeaefb7d94b8c582d45d6555056502b1f41415d20d46430d42dbff3225d47cc8950edcf5c258b2422d7de4a2bab4a406f7252d955b8f5d58057b3e9e42ff1e6a310ec5bfcb296736c36f9e860b4e392f640c082135ad2d640c67b966341ae9e1cb68d83e93357bb90128f7e379a9898f53f7f90c5d0585ea2c030ecd68036d4c0dbe06b2487fd8a8fbb99bffe9642fbd5b66614c8bd297147431fb8faa44044eca1df21309f2c81c821efbdad5df20768b11ce572af64d67e16fefea3a50541c4c6265538c7973d7513f9bb24dbeab33f20b91bef2271f9767cb33c36488d6853c109b3f6777421ebf1281ab22d69b8683f31b10fe6ccb73eeb7810b0562b72ed102a641aa60b10fb97b6c9a2c32e208edc67d3decb7b02edbbcc3b96b01952e7489b5082d9c40c20d87b68fd37f4eeef85c9c4517439a0a0cfc58df48d7c2295954ba71f6eb0bb28255905766f15d2d78e505814461875117faaa22e1b317cd69e63100b28dc6b994f18e16e8d660e6c7751716cd9190865e497ed9cb47e4dcb785b07deb455c6f466cc41340106887f6e6d888c04d2f951ac4da09d9ae800b3db3c1ac043984c699d0e92f4fa8df520c195f9e687ef2069daf812af50e9226790371f15130f81c5195369d3c059ac204caa015f308124e64343088de71854a1eaae5c4699a997be4bb79a2ded0b2eb0744d2afa0edab8a1746b8ec64f220b3cb950dd69192210914af520248596a0c0781429cfd0a8e73a4a2fcb61d74b7b24be3a37e780e93c403d031ef3f3d9b87374b6fcdd79e824cbe06cba04a3acf6583af8f7fbefaff7f286b2118a54c1f631cf7a8d29f2c7d5be1edaa897c7adf4bcc74529a4a19e45bbe8d4fbf87e4751be18fc84e56f59b19858433a3eb65af05f5947ad96f8fd3be0432fc399e7f4edc01d52b0bfd389d51da74fb17126e8a9996bc96a3a22783f304a95ad54802dde40735e4f75921ad812e43472d4a399aaacae447f2c3e437f32f9582fad47e8df61e721fcf06d71b142f5062aea0a951a8701b7ce895dbb10df8003429fd0e3ee0b08ff7619700af1dbdd03b23e6d31f7d08f967ec9268fa2d9903218ebb9578abd599fc38dcdf0a1", 0x1000, 0x4}, {&(0x7f00000012c0)="5a67e7ce4df0670d1dfb330654a64b8a8b9bdeda2959587960b8f37a3a67805c2d797d27ac73529ad315f4fa1ee86d5b153589eb08ddc7a6eee36a966268b6c7ae065c3495343503c36c75e87c6bc6e73cd0249b24f51fa38c0187236aac11d12e9959697e5da97b798a13c1407232a54975291e9922cf999e0ba5d1235116098a820bc4711f708fb1fb77acc62086f9c037e9c4deb0539889bfdbecc3c985fc037ca484697852fdb3282bc5a3ff3ab20521fd1fb1584647a964cae7f5e42b95b358bdeeffb1", 0xc6, 0x9}, {&(0x7f0000000100)="2bf0921488f58944d35b570cbd2d20a0dc87d096c94823bfbab2bc748ee970f8adcc6352b866887d06b846f97dd1a2e169d5dbbe1bf478b4d69c4e", 0x3b, 0x800}], 0xa6000, &(0x7f0000001500)=ANY=[@ANYBLOB='disable_sparse=no,case_sensitive=yes,disable_sparse=yes,dmask=00000000000000000000033,uid>', @ANYRESDEC=r1, @ANYBLOB=',fscontext=root,fowner>', @ANYRESDEC=r2, @ANYBLOB='EAD,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r3 = syz_open_dev$adsp(&(0x7f00000015c0)='/dev/adsp#\x00', 0x6, 0x10000) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) statx(0xffffffffffffffff, 0x0, 0x4400, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001600)={0x3, 0x8000, 0x400, 0x10001, 0x0}, &(0x7f0000001640)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000001680)={r4, 0x8000, 0x5, [0x5560, 0x5, 0x8, 0x8000, 0x2]}, &(0x7f00000016c0)=0x12) 17:25:26 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x800e0000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:26 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x3000000}) [ 2121.276470][T20277] overlayfs: missing 'lowerdir' [ 2121.278120][T20275] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2121.414846][T20275] overlayfs: missing 'lowerdir' [ 2121.485125][T20273] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2123.148499][ C0] net_ratelimit: 20 callbacks suppressed [ 2123.148508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.148539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.154234][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.160098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.165781][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.171480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.177175][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.228498][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.234367][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.240266][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:25:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000046) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x80350000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:30 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2000000}) 17:25:30 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x6000000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:30 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x82, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4000000}) 17:25:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x81000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2125.358664][T20292] overlayfs: missing 'lowerdir' [ 2125.406346][T20292] overlayfs: failed to resolve './file1': -2 [ 2125.414192][T20301] overlayfs: missing 'lowerdir' [ 2125.430032][T20298] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:25:30 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2000000}) 17:25:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x86ddffff, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2125.611099][T20301] overlayfs: missing 'lowerdir' 17:25:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x5000000}) [ 2125.772499][T20310] overlayfs: missing 'lowerdir' 17:25:31 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x88470000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2125.813014][T20313] overlayfs: failed to resolve './file1': -2 17:25:31 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2000000}) [ 2125.946572][T20316] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2125.961949][T20312] overlayfs: missing 'lowerdir' [ 2126.121137][T20312] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2126.146267][T20316] overlayfs: missing 'lowerdir' [ 2126.210339][T20322] overlayfs: missing 'lowerdir' [ 2126.256369][T20322] overlayfs: failed to resolve './file1': -2 [ 2129.388534][ C0] net_ratelimit: 23 callbacks suppressed [ 2129.388543][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.388576][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.394283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.400632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.406347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.412050][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.417762][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.468524][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.474354][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.480254][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:25:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000047) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x88480000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 17:25:35 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6000000}) 17:25:35 executing program 5: r0 = open(&(0x7f0000000180)='./file0/file0/file0\x00', 0x1, 0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0/file0/file0\x00') mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0/file0/file0\x00', 0x14, 0x2) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000001880)='./file0/file0\x00', 0x0, 0xfffffd, 0x0) chmod(&(0x7f0000000080)='./file0/file0\x00', 0x0) 17:25:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x88640000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 2130.287396][T20331] overlayfs: missing 'lowerdir' 17:25:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) write$uinput_user_dev(r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x100010) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ea}, 0x0) getresuid(&(0x7f0000000640), &(0x7f0000001840)=0x0, &(0x7f0000001880)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000018c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000019c0)=0xe8) r6 = geteuid() syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x6, &(0x7f0000001780)=[{&(0x7f00000001c0)="92cdf4cb15af22cc155969809d384670484af0e3cc7a9a6e7bc59536f16d49f42312a100c7817151e5ae58bd6ef568766b73fa187013f1e794dd43deead534b5db1e3f14d7433f0d98bbb343c2cafcca999319e4", 0x54, 0x4}, {&(0x7f00000004c0)="5f867075fde12fc0aaf5ba201f133fc112978e93cd2467aab2c2b8528b0a75094bda23a1078924db99da95fe83f5143f701486f7", 0x34, 0x3ff}, {&(0x7f00000006c0)="36ffa3a03b7e02cd8542f48ecebfb7df97e6639c60961c8d1e62ed16c9ba2ee02e5ad4d21445311017ffd55a624215a4fa1e0de2b68e9110ea5087b3fa1e675b7f4e4b980d20ae3dfb03f39c43d9cbe67cbe050dfa933ca2ad56ae669fe1fcd1d4ba03c25472a3b3cde245409794055d6234b577f357357b064e4283b585a7cf9878ac22e626b54c298f436db56f5c03435783b12b69221f9072c75c7bc09ecb71bd9600cf5723e6e9f6675b57aca72da63509ba2824f7f7b8cc56eb8465eb677f47c9550b69ecb718a3cf6265bd1683c1add703e5edc597feb966f8828175081d69c6e92e1d92f9a941a5b84f0302a6434c81045636a645e6e508a59e81ac5d09bf59e2c06accefcce29ba584789390f85ffd280d5b988b9f4cce194c851b2ff2a321bd9afa85817564b0bdebe9febcadaa105c4f27aeb15fb05247ee392758b5d1d9295bdef76ae2eee6931f6021c1b5aa60ab01b9d658947e2be02fd15aa8bf9513d7b868410fddc8a8bcce5e895ee56ee68315b4370aff68699b9272092666c845be9f8bf0874f911d9a4711c943150f88ad1fcbdb719661083643b7bf8455f89428ed1cd14467df03721e20a4c5baab1c7f5fb0c8ae1e6c61dbc0d8880a4b54e03e2fe97989c5ad976b9ba73200c1e9c7668d51da340209869bdcff2b914857e4c8702ee2e8aa9fb92e7af4d25bb7762735de9693fd6ca45916cc41eb9783862a6cda8aeb816326fadfe9de8e4418bc031bacbc356682e6c6d6fa9a2fc7cf2cbe8398835979ba60f7c3d36ca52e6eb3b6b94c2dc7a9e8201772763d740932b7f5eb80f12f37d63b4a2ddcecbc1d6cf441edaf53650bbe2e7d9160cb3858c1594a9b2a04865c9a890cf99fe6b0f18e2232746dd4f66072cbde7276fd3eb8b9b941fbc846c44e09d5c3ccdea817034473abfb4d309bdbd8d64517b8ae6d499161a795cdcd09d7748afe4c100f9d3c435a068fbb29bf7f9a1645a2541bf17880bd6e70f20364969064adf970c536eb3e01cbd49664647fd807304df14376ca786d0bae8c439d04c345773c0a38026fe9cb090f31924e735a71fb34ef18bf44184e76f78c017c7cf4d3ffb1c3736e92cc8d405391d282a44db9127e45d4450e8ce2120e8499744d0951482c94111df174a72fa3715e1b573221587a444975c398359de4d6de2671ea8ed8677679e4b856b3bc4c212636151ddee0e8ae8949c5dcc6d601587c4232ed59d4010af45c31b7be8158f6c28f26a969a2587fba15a395b0e0cc6ef2556bc52289c95b75b9ec62c916912277f823ff5c1cb1060601ccd41d9d06da459b7ecabf6a6477da7023f3f20da94ea4259e56a06a2d1e6ab75cd15632bef7fd399d4743d21401dd79d7e766418324290d63fff9003f6b79eb9cb384c06a6086ecb411f5a2775fbb878cd9001a2a7968b43466cc7bbaf3cabd57687df3f72c03d6b6525de31a5593de79f034ced6a755af9be955afc08a4b7ebae6adcc703c0a5c4751e525ae2677d506f754489f5f5fce765690ed252cbfa36549596fa0d25447c5f6ec4fd36e17a52d3ac06a7b7b6adc931543a4a5a86110673f802097d70da89a3c17bdcac73dce6282dfe183be8de2c519b32fcf9b39bb2c5d75421adb4f3b4a86a02c76c525e984564b692cfa359b3e8bdc95ff07d07feba458b4968251afce5f4989f89ec2236ec0160b4c5a405059ac4750cb30b032327c3d8d37aed500c027629a0a14cf5c457e04ca9f93ee5eab6825b549114096329028620ac9e9781739c2c6dfe8837c30105e800d9bfc62c58b560d5a26cd0418ee8196e8f8834029bf64188bc9900600b26e0caf21eb8271cc97003735470b5f375ea5c0d90bec40ff964e1f85c036bdbbb18262d5a18a344e813316f19d414e740202d5e3fd6392bccdccf85d2e2f8c305269a03321c7a136f2213eec2e5cbd7bb0b7f77df7e6d16715f5671917f3ddf580d3b16959b1f5544f96029f0c4b5b4494ee661c33dbeb1761e0c3e0b92b30d38d19b478f6a76d6bdf1a71bf3ae981b9f32f400b21a785cd64430b78eb88d59f61a5d6bdb967ccac40323882e8880034971764c99d723eb280495abf8de1eaf1fe9684f93efcaa29c9bb1ac42a72f1f65fd13892e95923cef1ef10bfcb2df9fca6ba8482c20d77735574cce5e94f514dad655b52367a2c84f5bb853597f0f70bfb2ae58d1e2296ca299237f681edd856e42d04ad5a88cab49fac0115af1ef2c579e2caeae76feb3affd6ba98705dea417b1ce2e9c2559b2af0f992d178291b4f8f2c7c3e9732c95e3888c0c31b869809244a95a40ad819ff190c76d1cba84cf249875f4d2d93d02616d57fb397d1d98ac1f010bbc6a102db79fdbc79741343af8d344dc6eaa9317c04870c83831e758a422eec08bfbc9d59bbb2898965682342246fabaae8b4bdc9710aec6c8953c755bff87ce36553a4e46a0af976504a0ae0151ad6f1ac628bf2e250e5947bb93f60341871d43588824a5640803faeafc93d608bcb6e2d27e5ff63f1f7e03eb7d152b13d3cd631906cc0fd4e138f0958106759fabf9ba3902774d4c0eb3668c96d359833d8bb8edf49f96433a70653c66cdd2184c0f20b06f1f06ae8be41ace1af1a2883abb463fea8ae00dfbe3d15a16d49c289b7de4b87e1f2374b2060d691189ce57725007fc1f12e77c35250c91c390616d46b81267ba4b0005142bedd2adfab980a616b396d926675365b40e9558d8b0c24c6b145faf0830f90ef59bbc28745b263174b297d66ff48fde53bb3104fc8f3e3610dd061f2907af99fb7e623e3d4fa1ceda291b91bd3bed923045f664947297162d6945ba7f37b6da905c2ab8f9fce7c3709cc987aedd2a6309ec0ab8dcd79e991687ba3f46265c800bb283068bd6da096ec16b3f44a436e6ae369135733f787faf53efe3dacf235d0fb17098ca87fbdc45c0ee143a8bd2e80781753ba6bcb1c2d16b7380913b47ef8d17844bdcbae5a16a94c2ed4e2e07aa78a6ea5de56d4ac056ec1db72fd23ccc4a88d66ee1baf1ddbee59780bd7adbd81b750ce9c14c7cb054322168b1ac0aebad33da2731e341b81c509f130435d0166f1ddcff0588d63f549da25a7923c30cfcc9dd49709a7ef0d8807e024e17da1626883d61117722ea1ae7df3db9e8808c000c24b1a731289876ce5e9610c9df1cb6a5f33162d5b596a1a3561e032a93e8cbbd638f10b38392c2878973621f137e61e19055b1cd31c4222b3fe147f74de29b4bc3535cffb66f1502419fdaf15ee5265234c728d2c184a7fa1d37d665430daf3373169172c746b5f49e2e3a7b7ecac214522eaa2c255af70bf9ad325f8a2c3fb3257b3ef843df0629f3a825f5334bea78041811d5679c844d1312e37d3d75be64140f88f93118337fe2d9c6f4c365bcd009ece48166fb87e7e80ece09899f3ea80be043547a08693226b0fef4e67b50d9aaa7f94a3f50d8dccfae19a2c1b4312d38cea18dc3917584883d3a871fb6ee46d0b1e59925fcd5910e9d35c2d9d0239f99c73f78e972e20706f225362da598a1cfb5230487d0aaee88a9a615de0b0a8943fdfae38bcc5a488c8c75669047e761063c3fe2ffeeb7223681b46b2e091a2e0a14a0d7fea676c9f19fe5d7c5919ddc40cfe29b35d74c1b217a978a9b4a5388807206da919badb38bca63c3f7834395a807893888e4b00bbf1d65e1461f26ecdd5c1b81efa5f7c083987a5cb284083a7bf242dd815a56c06939ce82853f0e7d7e9feeebded66def7c67b72a53dbbc5f99873f0178d07c1353bda8fa51c3173d78d464e05daccc75fc128a90e18120a3d3b29cf5275b73dcb2b7fc46e47392d5257752eeeba9f59bca0ddc115d3a5b2b8b1e2bfc5e2a7d834ba81f77436a3fc4b5c26cd766e4d27d21bc08019ae54520796b03bc294db5136fb8ae3011cae972c8f1a864cca43149f19cef763c4d18d7884986c122d069fc9305b048638d01c4aa76d6bed3d86f353484998e815491579f2b8bd3c2199e5607bb886663c5adb28de7f10b23aca5aab1324476a751e056c9e357bc71334f03d19ef507acb330a724b8cb1cdb4b7c397f212c796fb7f0b7328f195d5611c137b1cb8fc83f5ddfdb8dd8f2093ca66ca850342b1d67ab913334a762b06086d07b2752cd0a28031f2f663b09f6582ed50a318e3917b513e7795c22f09a4b54a8b6133e7214cd2144562f02aad0d43d856774e8bd3f82ceeba6fd375cca7b7fe718bead8b09971b9e7f3b04075d04819a606d029cd2dd004a49a1aa43d3c2fedcca7befb581a0c98d5100bccf8db4827febc46ebd84bb6294841ac24be7c59570f0e81b3fa13a7d6a51a629d74a629854e239dd8cdfff41d3d276800ffcabb9796dc26a47736ea4e43b1ede947556b42095482ce1a60bfc677d77a0fc88ebce9b2e4457582271a1db2444b4d6d388cb8bdb9056f5854f942446e3649bbafb827db2cb238c5a8289e5facbe36717f3ccdbc2d797a35569cd2a209b606427e078c18e22f7bec667cb3411b53b72045c1e4a5c459b16c48d7ba8b736ff6382eb083a8417977f7f36dbf0b4c577b4e03033153c5e8d8b34a8d55bb04871d02c3b3afdeea1436b427e814c6a46ec232b90e96f637075c7eee5536b38067a05803d8094fe1e15fceea5f43dc31e168aa1708f64d8ed0680a702d17d5103adb1e6d9385f22a3c0a591f84e47ca0b7db12781bb313b0ec42c9ceb85a8e56fc2162564e02b908a4944d03a2f069994e36776e18e269b29ca7be258a3d55d96228abdb30bc7905de65d0360f57f306f2015b92d1d089cbb33dd946f9a89537ddb8609a3e2c81ed1409f59125158cecdba137f936ab7a23764b20daf13d1751657b729319212e37e5ffe071b078fb8189c7b97d4861372c0676e56184811fe050cf7e347ab221beb3a92b387be12cd6ff20c4ede6741b9a54410df3727833343eec50af2016ad707ee55ca9278a0d9993a8b1cc297d34e22dc50c2fe0fc47101a9ac93b2715486b64d7fffe1f472c17300705daf128ad67c473db2028d7d99e60eb0c5f6294578075f2b5dc857279c63be8e86145e9fd41b60f03860e3f544f158382ca768c3efe889ddc3a889f4e3f9772f2aa70f4098a3271c21e08478b843e8b72a65be48a28aef4c1cabe604e60a65a04f3022e79bff0b7b087605799a02bb07db5eae1df0a7fad50811d9ec2f8d4515e8a208c4f1ec5e108e9ae623df5eddb6bf291cd88a0c7ed810a2834ef043bacd0ded52376b005ff60a038284f759051567567fb467ca2889d007f37c66b2ebd080bec376b272e0cfe257ac0506220bbcf7c14c1a0cdd319e93591d225f16ab06c8c7ddc4326eab33bf97bca93c4a0d626b958425f635e192c89e222179bc83be08b1fccd9a21cd01fd6b8abbb9b0e6935b65e9a6a27debc6648df33243019aeef1091b55a4058283c4232407601e33dab9b1124d411776a36ec9ad4e3c212483d91606dc4455a068b31703b20b5e0ef76cab3bfd6eaea015b2162e4786cece9a37b9ca8725b91b965eee19471883bc5c79779f559b5ca4ad7356cdcf8507b3e289968fd91cc4c497c08dbacf4bf1936a8ac8cda95f3b313e5abd918fc8b2b644983d5fb7f244785130c477e0e512de688009a4f285416d6366ff82c2e4276ece42846f0c7fab97ccf96a8146fa3238f5747376d257f30239d233a06ac2b0457b405288ee41619f3f3db73a9238a6cdd4385aeac142825ca25ec71764b1d8c59546f1b906e66d9447ab00b0203686b47705a3d418b8d4b48089bb8e582bbbcd2", 0x1000, 0x514c}, {&(0x7f0000000500)="1267621d695e0f263e26d825b4d164cc40da0aa9950ad419450601d7849916e9e2e4fe5ddc8364a6a9d8291c5a04ab799d5350bce5ca68f361269b5ec52183f93b82d858f9490510f428e74d4696ea615b5aac7124260d8176370fc4cdd0e574c02c0ed4fe089f26a7fb1a69298304a829eb8b310ce118a19664c7647531edf2659c3b179e0ba4685f232e190950d16c95deb5ab32da8a2f130e190bc65d96c791cd5af2f4a2ce0926fa47a709fdec346b0d44f5811978d4868ceb61390d4c8577", 0xc1, 0xb2e0}, {&(0x7f0000000600)="9afd1c", 0x3, 0x1}, {&(0x7f00000016c0)="19a9245c1a28866a5e14c1ecdc6fe2cfbb6b610c11ee7744f9e8d26d322574525c92a868b999496d835b0848a2768b4f6bddca4708d7522141aae704d11389f6dcec6a65108c60ad4d2e60057ae1d04e631678a9651a030d7c38007ead3a3d67a3317f4bf5fa3c30bd57343961b9f29b28025d880557c40e01b71d6c9c874709dabb6a3481108989c82bd75c3eea1cbf37325588ae79fbba6bb958833f56118f690ceaed5620f55af440c8dfcb7ba8d695d777814ec8c09793d16b", 0xbb, 0x1}], 0x2200800, &(0x7f0000001a00)={[{@logbsize={'logbsize', 0x3d, [0x70, 0x7f]}}, {@noquota='noquota'}, {@nobarrier='nobarrier'}], [{@euid_gt={'euid>', r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':posix_acl_access/'}}, {@pcr={'pcr', 0x3d, 0x31}}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}, {@fowner_lt={'fowner<', r5}}, {@uid_lt={'uid<', r6}}, {@pcr={'pcr', 0x3d, 0x2}}]}) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000440)) r8 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) msgsnd(0x0, &(0x7f0000000300)={0x38}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r8, 0x1000000000016) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 2130.334230][T20341] overlayfs: failed to resolve './file1': -2 17:25:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 2130.451928][T20354] overlayfs: missing 'lowerdir' 17:25:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x88a8ffff, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x7000000}) [ 2130.726769][T20368] overlayfs: missing 'lowerdir' [ 2130.743860][T20367] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2130.851265][T20367] overlayfs: missing 'lowerdir' 17:25:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000048) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:39 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x88640000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:39 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x88caffff, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x6000000}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 17:25:39 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x8000000}) 17:25:39 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:39 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f0000a07fff)) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x4, &(0x7f00000003c0)=[{&(0x7f00000000c0)="eace7270af570fa58800938bdbb14d1fc4797d91d4354069f385df82a995b4197f3c69eaf4aa97a4e4bc0d973e03d7e8a2d9f0f533100ec6a2371bf0f2079dd0141e808905e6573019e1425935e2ed550805e206d3f5f1d87d39575f331311a34e9e57e01bda753612e5140ab125a0d49193199bb14510c9f6fe12df14e94490cf54432a826dc02a9c75c208fc7e69598dbf8a8f", 0x94, 0x3}, {&(0x7f0000000180)="8da634c8718aa0cdb648a1bab3b2c8b55b701328bb0384b45c335cb6d03cb630deb43034d84c01bd1ac609f55b7f6581ef8082e814db79d35f0e1f4a6d6877eb853a4ef5bdf4589df6576b21143ca57a03d08baa42581b9b6b13daf58f1057a289d3ea83f22086a13abc44716428296fe5fbf9e73df7982da9ad6a70b8cae51abc11461061e1b055ed74a4f0abcb0097cdfaed8e9cebed6e", 0x98, 0x5}, {&(0x7f0000000240)="76a6e1ac8633f0eb7c6680827bec90e93ff342134948b718f09312fcc2439b7ef2cfbae32f1bb60d80c3d621580751269e716241904aa4cd4c911d827ea6b65edb0e46e1e3f809caf5d28d4d6e", 0x4d, 0x81}, {&(0x7f00000002c0)="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", 0xfc, 0x3ff}], 0x2, &(0x7f0000000440)='GPL\x00') 17:25:39 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x89060000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 2134.712120][T20388] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2134.805540][T20378] overlayfs: missing 'lowerdir' 17:25:40 executing program 5: r0 = memfd_create(&(0x7f0000002000)='/{\x06\x001ppp1%:em0\xf9', 0x0) write$evdev(r0, &(0x7f0000001000)=[{{}, 0x0, 0x0, 0x4}], 0x18) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000001000)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x21) 17:25:40 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2134.931599][T20399] overlayfs: missing 'lowerdir' 17:25:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 2135.628491][ C0] net_ratelimit: 23 callbacks suppressed [ 2135.628500][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2135.628527][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2135.634227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2135.640198][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2135.645911][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2135.651598][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2135.657324][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2135.708500][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2135.714385][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2135.720388][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:25:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000049) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:44 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xffffa888, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x9000000}) 17:25:44 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x89060000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x0, 0x0, 0x2000002) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:44 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:44 executing program 5: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000001, 0xc0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000040)=0xb) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0) 17:25:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x0, 0x0, 0x2000002) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:44 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xffffca88, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2139.017747][T20428] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:25:44 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xffffdd86, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x0, 0x0, 0x2000002) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 2139.204744][T20424] overlayfs: missing 'lowerdir' [ 2139.285317][T20428] overlayfs: missing 'lowerdir' 17:25:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 2141.868502][ C0] net_ratelimit: 21 callbacks suppressed [ 2141.868511][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2141.868542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2141.874252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2141.880099][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2141.885835][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2141.891512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2141.897216][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2141.948517][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2141.954396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2141.960302][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:25:48 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000004a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:48 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xa000000}) 17:25:48 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x4, 0x40) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000001c0)=""/200, &(0x7f00000002c0)=0xc8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x3ae, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) fcntl$setflags(r0, 0x2, 0x1) 17:25:48 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:48 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x10000000000001, {{0x2, 0x0, @multicast2}}}, 0xfe30) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000002000000e00000020000000000000000000000000000e400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be31738ed20accfb719000000000000000000000000000000000000000000000000000017000000000000000000000000000000000000000000"], 0x90) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2200, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 2143.375305][T20461] overlayfs: missing 'lowerdir' 17:25:48 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:48 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 2143.402914][T20461] overlayfs: failed to resolve './file1': -2 [ 2143.506264][T20474] overlayfs: missing 'lowerdir' 17:25:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:48 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:48 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xb000000}) 17:25:48 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xf0ffffffffffff, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2143.865476][T20485] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2143.916147][T20482] overlayfs: missing 'lowerdir' 17:25:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000004b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 17:25:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:53 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x40, 0x0, 0xf82055efa15ff4ba) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000480)='./file0\x00', 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0)) sendto$unix(r0, &(0x7f0000000100)="9e1d574534a6ae9fcc44d3360a5bda6b305feb1b139168e4a5ea2113f9eac2554c24fe", 0x23, 0x4048041, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) fsetxattr$trusted_overlay_nlink(r1, 0x0, &(0x7f0000000340)={'U-', 0x205c5}, 0x28, 0x2) gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r2 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x10000}, 0xb8fb, 0x0, 0xffffffffffffffff, 0x8000, 0x0, r2, 0x81}) r3 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[0x2000000, 0x4c00], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xc) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000680)='Fvmnet1/\x00', 0xffffffffffffffff) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000380)={0x8001007, 0x8, 0x2}) r4 = request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) io_setup(0xa7e7, &(0x7f0000000580)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000640)={0x0, 0x80000, r0}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000440)={'NETMAP\x00'}, &(0x7f0000000700)=0x1e) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000006c0)={r5}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x1}, 0x28, 0x3) memfd_create(0x0, 0x0) 17:25:53 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xc000000}) 17:25:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2148.102403][T20508] overlayfs: missing 'lowerdir' [ 2148.108469][ C0] net_ratelimit: 23 callbacks suppressed [ 2148.108477][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2148.108832][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2148.114259][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2148.120273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2148.125748][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2148.132224][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:25:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 2148.137195][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2148.143242][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2148.180471][T20512] overlayfs: failed to resolve './file1': -2 [ 2148.188488][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2148.194287][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2148.202894][T20505] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:25:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2148.439421][T20508] overlayfs: missing 'lowerdir' 17:25:53 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xd000000}) 17:25:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2148.694345][T20533] overlayfs: missing 'lowerdir' [ 2148.695572][T20531] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2148.839304][T20531] overlayfs: missing 'lowerdir' 17:25:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000004c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:25:57 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:25:57 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:25:57 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:25:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x20000000}) 17:25:57 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:25:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:25:57 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:25:57 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2152.711524][T20561] overlayfs: missing 'lowerdir' 17:25:57 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2152.746808][T20561] overlayfs: failed to resolve './file1': -2 [ 2152.867100][T20544] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:25:58 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2153.086061][T20561] overlayfs: missing 'lowerdir' [ 2154.348498][ C0] net_ratelimit: 22 callbacks suppressed [ 2154.348507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2154.348540][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2154.354275][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2154.360067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2154.365762][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2154.371461][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2154.377165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2154.428494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2154.434335][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2154.440249][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:01 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x20100000}) 17:26:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000004d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x806000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:01 executing program 4: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:01 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5, 0x3f00}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 17:26:02 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:02 executing program 4: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2156.815110][T20587] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2156.855872][T20580] overlayfs: missing 'lowerdir' 17:26:02 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 17:26:02 executing program 4: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:02 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2157.007108][T20590] overlayfs: missing 'lowerdir' 17:26:02 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5, 0x3f00}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 17:26:02 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x3f000000}) [ 2157.330603][T20610] overlayfs: missing 'lowerdir' [ 2157.340838][T20610] overlayfs: failed to resolve './file1': -2 [ 2157.361461][T20609] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2157.472987][T20610] overlayfs: missing 'lowerdir' [ 2160.588488][ C0] net_ratelimit: 23 callbacks suppressed [ 2160.588496][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.588531][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.594222][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.600069][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.605754][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.611457][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.617164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.668828][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.674663][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.680577][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000004e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:06 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 17:26:06 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:06 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x1400000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:06 executing program 5: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='('], 0x1}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='ip6_vti0\x00 \x00', 0xfd7a) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x30, 0x0, 0x0, 0xc9) 17:26:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x40000000}) 17:26:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x2e1) mknod$loop(&(0x7f0000000500)='./bus\x00', 0xb0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) timer_getoverrun(0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000280)) openat$vhci(0xffffffffffffff9c, 0x0, 0x4000) setitimer(0x1, 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) umount2(&(0x7f0000000240)='./bus\x00', 0x4) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) recvfrom$inet(r1, &(0x7f0000000340)=""/196, 0xc4, 0x2000, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) flock(0xffffffffffffffff, 0x5) getpid() getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000540)={'icmp6\x00'}, &(0x7f0000000580)=0x1e) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x82) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7f) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 17:26:06 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 17:26:06 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:06 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2161.660051][T20634] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2161.681629][T20627] overlayfs: missing 'lowerdir' 17:26:06 executing program 0: pipe(0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) [ 2161.757453][T20641] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2161.815587][T20639] overlayfs: missing 'lowerdir' 17:26:07 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x4305000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000004f) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:11 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x48000000}) 17:26:11 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:11 executing program 0: pipe(0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 17:26:11 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x5c00000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000006c0)=[{r0}], 0x1, 0x0, &(0x7f0000000740)={0xd2e1}, 0x8) 17:26:11 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x7000000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:11 executing program 4: socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:11 executing program 0: pipe(0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) [ 2166.512586][T20677] overlayfs: missing 'lowerdir' [ 2166.545725][T20673] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:26:11 executing program 4: socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:11 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x800e000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:11 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2166.715406][T20677] overlayfs: missing 'lowerdir' [ 2166.828498][ C0] net_ratelimit: 22 callbacks suppressed [ 2166.828507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.829115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.834248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.834353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.840846][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.845845][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.853359][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.863848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.946372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.953510][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8035000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000050) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4c000000}) 17:26:15 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:15 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 17:26:15 executing program 4: socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8100000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:15 executing program 5: [ 2170.580382][T20709] overlayfs: missing 'lowerdir' 17:26:15 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2170.615592][T20706] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:26:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:15 executing program 5: 17:26:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x86ddffff00000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2170.826409][T20709] overlayfs: missing 'lowerdir' [ 2173.068493][ C1] net_ratelimit: 25 callbacks suppressed [ 2173.068502][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2173.078443][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2173.080005][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2173.085679][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2173.091512][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2173.097192][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2173.102907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2173.108648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2173.148482][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2173.154390][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000051) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:26:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x5c000000}) 17:26:20 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8847000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:20 executing program 5: 17:26:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) 17:26:20 executing program 5: 17:26:20 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8848000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2175.010519][T20741] overlayfs: missing 'lowerdir' [ 2175.038936][T20738] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:26:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) 17:26:20 executing program 5: 17:26:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2175.172506][T20741] overlayfs: missing 'lowerdir' [ 2179.308473][ C0] net_ratelimit: 25 callbacks suppressed [ 2179.308482][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2179.308534][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2179.314310][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2179.320138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2179.325840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2179.331507][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2179.337207][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2179.388519][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2179.394351][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2179.400255][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000052) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8864000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:24 executing program 5: 17:26:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x60000000}) 17:26:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) 17:26:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:24 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="50bd574e73780000"], 0x0) 17:26:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x88a8ffff00000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2179.708533][T20772] overlayfs: missing 'lowerdir' 17:26:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffffffffffc}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x400, 0x4, [0x0, 0x0, 0x7f, 0x0]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 2179.735180][T20772] overlayfs: failed to resolve './file1': -2 17:26:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2179.800946][T20767] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:26:25 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x88caffff00000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2179.962863][T20767] overlayfs: missing 'lowerdir' 17:26:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000053) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:28 executing program 5: socket(0x0, 0x4, 0x4004) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r1 = dup2(r0, r0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) 17:26:28 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x8906000000000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x68000000}) 17:26:28 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:28 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:26:28 executing program 4: gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x10, 0x800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 17:26:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:29 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2183.835210][T20803] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2183.889680][T20797] overlayfs: missing 'lowerdir' 17:26:29 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:29 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2184.030291][T20815] overlayfs: missing 'lowerdir' [ 2185.548465][ C0] net_ratelimit: 23 callbacks suppressed [ 2185.548473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2185.548502][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2185.554202][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2185.560425][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2185.566109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2185.571825][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2185.577528][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2185.628480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2185.634351][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2185.640256][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:32 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000054) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:32 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:32 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6c000000}) 17:26:32 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x2, "b61ca6c40ef538d3"}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="05454c46a20c000000009bdccb5d5348070000000000000000000000000000ff000000008fd6da88de4376e74f5c"], 0x1c) 17:26:32 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x2, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030b00000000000000000000000100090000000000030006000000e0000001000000000000000002000100000000000000060b00000000030005000000000002000000e00000010000000000000000000000000000"], 0x58}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0xcf5f, 0x9}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x1ff, 0x1003}, &(0x7f0000000280)=0x8) 17:26:33 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2187.804438][T20841] overlayfs: missing 'lowerdir' 17:26:33 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2187.857824][T20844] overlayfs: failed to resolve './file1': -2 17:26:33 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x3, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2187.979801][T20841] overlayfs: missing 'lowerdir' 17:26:33 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:33 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2188.017390][T20828] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2191.788497][ C0] net_ratelimit: 23 callbacks suppressed [ 2191.788507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2191.788541][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2191.794239][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2191.800079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2191.805768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2191.811466][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2191.817180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2191.868490][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2191.874321][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2191.880238][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000055) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x4, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x1000005) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/200, 0xc8}], 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000180)={r0, r1, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0), 0x3}], 0x320, 0x0) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000200), &(0x7f0000000240)=0x4) 17:26:37 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x74000000}) 17:26:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x5, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) futex(&(0x7f0000000000), 0x3, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f00000000c0), 0x2) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000fc0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002540)="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", 0x100}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 2192.507892][T20876] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:26:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2192.574576][T20870] overlayfs: missing 'lowerdir' 17:26:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x6, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2192.751279][T20876] overlayfs: missing 'lowerdir' [ 2192.778118][T20870] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:26:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000056) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x7, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x40040) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="e2"], 0x1) close(r1) 17:26:42 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x7a000000}) 17:26:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x8, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:42 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2197.243904][T20916] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2197.294675][T20910] overlayfs: missing 'lowerdir' 17:26:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x9, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:42 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2197.418250][T20916] overlayfs: missing 'lowerdir' 17:26:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x8cffffff}) [ 2197.740663][T20940] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2197.775034][T20938] overlayfs: missing 'lowerdir' [ 2197.819528][T20938] overlayfs: failed to resolve './file1ÿ': -2 [ 2197.916679][T20942] overlayfs: missing 'lowerdir' [ 2197.938280][T20940] overlayfs: failed to resolve './file1ÿ': -2 [ 2198.028458][ C0] net_ratelimit: 23 callbacks suppressed [ 2198.028466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.028498][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.034179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.040084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.045764][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.051456][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.057170][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.108472][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.114421][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.120344][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000057) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xa, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 17:26:46 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xac030000}) 17:26:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000055) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xe, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2201.405283][T20960] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2201.484393][T20948] overlayfs: missing 'lowerdir' 17:26:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x50, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2201.605503][T20960] overlayfs: missing 'lowerdir' 17:26:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfc, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:46 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xc0ed0000}) [ 2201.850691][T20978] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2201.880276][T20976] overlayfs: missing 'lowerdir' [ 2204.268468][ C0] net_ratelimit: 24 callbacks suppressed [ 2204.268476][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2204.268509][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.274210][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.280095][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2204.285829][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2204.291518][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.297219][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.348516][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2204.354395][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.360318][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:50 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x1f4, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000058) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:50 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf6ffffff}) 17:26:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 17:26:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:50 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xc0ed0000}) 17:26:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x543, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:50 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x218, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2205.512381][T20997] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2205.548019][T20992] overlayfs: missing 'lowerdir' [ 2205.577848][T21003] overlayfs: failed to resolve './file1ÿ': -2 17:26:50 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x240, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2205.659043][T21001] overlayfs: missing 'lowerdir' 17:26:50 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf9fdffff}) [ 2205.725128][T21009] overlayfs: failed to resolve './file1': -2 17:26:50 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x300, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x608, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:51 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xc0ed0000}) [ 2205.928840][T21020] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2205.976379][T21014] overlayfs: missing 'lowerdir' [ 2206.009991][T21020] overlayfs: failed to resolve './file1ÿ': -2 [ 2206.039380][T21023] overlayfs: missing 'lowerdir' [ 2206.075000][T21023] overlayfs: failed to resolve './file1': -2 [ 2206.104157][T21025] overlayfs: missing 'lowerdir' [ 2206.128490][T21025] overlayfs: failed to resolve './file1ÿ': -2 17:26:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x689, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000059) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:55 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xc0ed0000}) 17:26:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x3e8, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:55 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 17:26:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xfffffdf9}) 17:26:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x500, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2209.997103][T21029] overlayfs: missing 'lowerdir' 17:26:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2210.029314][T21041] overlayfs: missing 'lowerdir' [ 2210.046917][T21029] overlayfs: failed to resolve './file1': -2 [ 2210.064067][T21041] overlayfs: failed to resolve './file1ù': -2 17:26:55 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:26:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x600, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x806, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2210.226314][T21045] overlayfs: missing 'lowerdir' [ 2210.269446][T21035] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:26:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x700, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2210.508449][ C0] net_ratelimit: 23 callbacks suppressed [ 2210.508457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2210.508488][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2210.514232][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2210.520045][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2210.525742][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2210.531433][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2210.537154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2210.588455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2210.594337][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2210.600263][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:59 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xffffff7f}) 17:26:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000005a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:26:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:26:59 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x900, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:26:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:59 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xa00, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:26:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2214.429459][T21079] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2214.445752][T21075] overlayfs: missing 'lowerdir' 17:26:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xe80, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:26:59 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xe00, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2214.509764][T21075] overlayfs: failed to resolve './file1': -2 17:26:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2214.654635][T21079] overlayfs: missing 'lowerdir' [ 2214.666509][T21075] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:26:59 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xffffff8c}) [ 2214.987384][T21100] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2215.046781][T21098] overlayfs: missing 'lowerdir' [ 2215.072477][T21098] overlayfs: failed to resolve './file1Œ': -2 [ 2215.185615][T21102] overlayfs: missing 'lowerdir' [ 2216.748473][ C1] net_ratelimit: 24 callbacks suppressed [ 2216.748482][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2216.758467][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2216.760013][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2216.765691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2216.771524][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2216.777219][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2216.782919][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2216.788660][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2216.828498][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2216.834349][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000005b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:03 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x1802, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:03 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:03 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xfffffff6}) 17:27:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x3580, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:03 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x2000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2218.649412][T21119] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2218.665857][T21112] overlayfs: missing 'lowerdir' 17:27:03 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x3f00, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2218.699526][T21126] overlayfs: failed to resolve './file1ö': -2 17:27:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2218.793163][T21119] overlayfs: missing 'lowerdir' 17:27:04 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xedc000000000}) 17:27:04 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x4000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2219.057587][T21137] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2219.073975][T21133] overlayfs: missing 'lowerdir' [ 2219.211090][T21133] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2219.211536][T21137] overlayfs: missing 'lowerdir' 17:27:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000005c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x4002, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4000000000000}) 17:27:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:08 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x5000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2222.960261][T21157] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2222.988465][ C1] net_ratelimit: 22 callbacks suppressed [ 2222.988474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2222.988499][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x4788, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2222.994300][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.000080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.005823][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.011532][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.017293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.068466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.074369][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.080307][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.098604][T21150] overlayfs: missing 'lowerdir' 17:27:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x80fe, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2223.173422][T21162] overlayfs: missing 'lowerdir' 17:27:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x4888, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x100000000000000}) 17:27:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xc0fe, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x5c00, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2223.415644][T21177] overlayfs: missing 'lowerdir' [ 2223.434007][T21173] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2223.610158][T21177] overlayfs: missing 'lowerdir' 17:27:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000005d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:11 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xe803, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:11 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x6488, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:11 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x200000000000000}) 17:27:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:11 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x0, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:12 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xf401, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:12 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x7000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2226.958872][T21198] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2226.975794][T21189] overlayfs: missing 'lowerdir' 17:27:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x0, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:12 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfc00, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:12 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x800e, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2227.156806][T21208] overlayfs: missing 'lowerdir' 17:27:12 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfe80, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2229.228455][ C1] net_ratelimit: 24 callbacks suppressed [ 2229.228464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.228484][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.234200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2229.239973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2229.245791][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.251519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.257156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2229.262904][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2229.308476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.314294][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x300000000000000}) 17:27:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000005e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x0, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:16 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfec0, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:16 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8035, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:16 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xff00, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:16 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2231.530688][T21236] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:27:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2231.591394][T21223] overlayfs: missing 'lowerdir' 17:27:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:16 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xff0f, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2231.733323][T21236] overlayfs: missing 'lowerdir' 17:27:16 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8847, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2231.764768][T21223] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:27:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x400000000000000}) [ 2232.028132][T21261] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2232.070833][T21259] overlayfs: missing 'lowerdir' [ 2232.212117][T21261] overlayfs: missing 'lowerdir' [ 2235.468449][ C0] net_ratelimit: 23 callbacks suppressed [ 2235.468458][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2235.468488][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2235.474178][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2235.480024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2235.485748][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2235.491438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2235.497151][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2235.548464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2235.554385][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2235.560292][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000005f) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:21 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8848, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:21 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x50000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x500000000000000}) 17:27:21 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8864, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:21 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x1000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2236.082092][T21283] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:27:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2236.140491][T21271] overlayfs: missing 'lowerdir' 17:27:21 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8906, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2236.245067][T21296] overlayfs: missing 'lowerdir' 17:27:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000060) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:25 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x2000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x600000000000000}) 17:27:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:25 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:25 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x3000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:25 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2240.571100][T21318] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:27:25 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x4000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2240.658767][T21314] overlayfs: missing 'lowerdir' 17:27:25 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2240.796115][T21318] overlayfs: missing 'lowerdir' [ 2241.708447][ C0] net_ratelimit: 23 callbacks suppressed [ 2241.708455][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2241.708488][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2241.714180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2241.720018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2241.725712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2241.731403][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2241.737093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2241.788457][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2241.794288][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2241.800172][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000061) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:30 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x5000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x700000000000000}) 17:27:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x6000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:30 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2245.040800][T21350] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2245.063472][T21344] overlayfs: missing 'lowerdir' 17:27:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x7000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:30 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2245.196748][T21359] overlayfs: missing 'lowerdir' [ 2247.948436][ C0] net_ratelimit: 21 callbacks suppressed [ 2247.948444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2247.948473][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2247.954204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2247.960039][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2247.965740][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2247.971426][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2247.977138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2248.028487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2248.034350][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2248.040240][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000062) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:34 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:34 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x800000000000000}) 17:27:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:34 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x8000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:34 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x9000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:34 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2248.990440][T21385] overlayfs: missing 'lowerdir' [ 2249.021964][T21382] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:27:34 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xa000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2249.258035][T21382] overlayfs: missing 'lowerdir' 17:27:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000063) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xe000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:37 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x900000000000000}) 17:27:38 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x18020000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:38 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2252.880935][T21416] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2252.907419][T21412] overlayfs: missing 'lowerdir' 17:27:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:38 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x20000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2253.103239][T21427] overlayfs: missing 'lowerdir' [ 2254.188455][ C0] net_ratelimit: 22 callbacks suppressed [ 2254.188464][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2254.188495][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2254.194218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2254.200000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2254.205717][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2254.211409][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2254.217096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2254.268463][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2254.274285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2254.280202][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000064) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:41 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8060000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:41 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:27:41 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xa00000000000000}) 17:27:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:41 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x2328aebf, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x3f000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2256.854801][T21447] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:27:42 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2256.906226][T21437] overlayfs: missing 'lowerdir' 17:27:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x40000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2257.030131][T21447] overlayfs: missing 'lowerdir' [ 2260.428466][ C0] net_ratelimit: 24 callbacks suppressed [ 2260.428476][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2260.428516][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.434200][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.440050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2260.445728][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2260.451435][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.457134][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.508459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2260.514285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.520191][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000065) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 17:27:46 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xb00000000000000}) 17:27:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x40020000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x50000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 17:27:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2261.283423][T21484] overlayfs: missing 'lowerdir' [ 2261.300804][T21479] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:27:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x826625db, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x43050000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2261.459649][T21484] overlayfs: missing 'lowerdir' 17:27:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000066) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 17:27:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:50 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x8dffffff, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:50 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xc00000000000000}) 17:27:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x5c000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x70000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:50 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x91ffffff, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 2265.817191][T21513] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2265.856042][T21508] overlayfs: missing 'lowerdir' 17:27:51 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xbfae2823, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x800e0000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2265.992757][T21523] overlayfs: missing 'lowerdir' [ 2266.668438][ C1] net_ratelimit: 21 callbacks suppressed [ 2266.668446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2266.668501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2266.674205][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2266.680008][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2266.685731][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2266.691399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2266.697126][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2266.749004][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2266.754887][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2266.760783][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000067) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:54 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 17:27:54 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xd00000000000000}) 17:27:54 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xdb256682, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:54 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x80350000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:54 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x81000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:55 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 17:27:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xe8030000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x86ddffff, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2269.917408][T21540] overlayfs: missing 'lowerdir' 17:27:55 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 2269.956601][T21545] overlayfs: failed to resolve './file1': -2 [ 2270.094926][T21545] overlayfs: missing 'lowerdir' [ 2270.138298][T21560] overlayfs: failed to resolve './file1': -2 [ 2272.908465][ C1] net_ratelimit: 23 callbacks suppressed [ 2272.908475][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2272.918448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2272.920046][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2272.925720][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2272.931603][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2272.937274][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2272.942984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2272.948722][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2272.988491][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2272.994366][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000068) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:27:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:59 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xf4010000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:27:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x88470000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 17:27:59 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2000000000000000}) 17:27:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x88480000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:27:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 2274.034446][T21577] overlayfs: missing 'lowerdir' 17:27:59 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xf5ffffff, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2274.066092][T21576] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:27:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:27:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x88640000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2274.227302][T21577] overlayfs: missing 'lowerdir' 17:28:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000069) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:03 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfc000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "d8a554b3505afd2d03fcf9f05bc9409290f76d1fe312d6b15e386e8c004353f563b7d622a2ea85b4e0ed2ecbfe7e9c6948412531dfbdccae3163001d31a0e8ca2a0e885aaa2458819120f191ef08f4545c"}, 0xc9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000f40)="03f4a2c970de1d9c3776a9481255ced5dbc57fe63cd931916a02bae17f7850aea473b1c2395dcc0f572febcadeb7fa0f2ee9dc78ccc69169ccfc0bf46dbaba25f3f5a75b77654c0cb9989ea026da080991348232bc2541328a29ec7e06942980144d2ae1b8811ef7af232c4bcb7d89d1aafda6e27d68ed8047debe4f6acdb39851142538045af7a37276d45101a908acd7e6586aaa477a1ed765207d078f68d3f09646ebb175b64f48673bab39a740b280f8876953befe1c9eb8b1494786cdda1a87dbce", 0xc4, 0x0, 0x0, 0x0) 17:28:03 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2010000000000000}) 17:28:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x88a8ffff, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:03 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfe800000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2278.611703][T21608] overlayfs: missing 'lowerdir' 17:28:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x88caffff, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2278.651182][T21608] overlayfs: failed to resolve './file1': -2 17:28:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r0, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2278.781438][T21617] overlayfs: missing 'lowerdir' 17:28:04 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfec00000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:04 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x3f00000000000000}) [ 2279.083343][T21629] overlayfs: missing 'lowerdir' [ 2279.111407][T21627] overlayfs: failed to resolve './file1': -2 [ 2279.148430][ C0] net_ratelimit: 23 callbacks suppressed [ 2279.148438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2279.148471][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.154211][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.159993][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2279.165678][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2279.171376][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.177064][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.195562][T21630] overlayfs: missing 'lowerdir' [ 2279.228443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2279.234306][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.240174][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r0, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:07 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x89060000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xff000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4000000000000000}) 17:28:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xff0f0000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:07 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r0, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:07 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xffffff8d, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2282.114473][T21653] overlayfs: missing 'lowerdir' [ 2282.130954][T21653] overlayfs: failed to resolve './file1': -2 [ 2282.152960][T21648] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:28:07 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:07 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xffffa888, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) [ 2282.305233][T21653] overlayfs: missing 'lowerdir' [ 2285.388464][ C0] net_ratelimit: 21 callbacks suppressed [ 2285.388472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2285.388502][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2285.394191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2285.400071][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2285.405780][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2285.411483][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2285.417194][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2285.468421][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2285.474216][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2285.480086][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:11 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:11 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xffffff91, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:11 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xffffca88, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:11 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4800000000000000}) 17:28:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:11 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfffffff5, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:11 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:11 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xffffdd86, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) [ 2286.022452][T21682] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2286.045521][T21674] overlayfs: missing 'lowerdir' 17:28:11 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x1fd5f03e0e9, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2286.212263][T21691] overlayfs: missing 'lowerdir' 17:28:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:15 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) close(r0) 17:28:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4c00000000000000}) 17:28:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x7ffffffff000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x5000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2290.179678][T21715] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2290.241895][T21705] overlayfs: missing 'lowerdir' 17:28:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xf0ffffff7f0000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:15 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) close(r0) 17:28:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2290.352419][T21723] overlayfs: missing 'lowerdir' [ 2291.628424][ C0] net_ratelimit: 23 callbacks suppressed [ 2291.628433][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2291.628466][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2291.634161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2291.640010][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2291.645714][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2291.651403][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2291.657099][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2291.709300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2291.715097][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2291.720994][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:19 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xf0ffffffffffff, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:19 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x100000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x5c00000000000000}) 17:28:19 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) close(r0) 17:28:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:20 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:20 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x200000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) [ 2294.926633][T21749] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:28:20 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x300000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2294.977022][T21744] overlayfs: missing 'lowerdir' 17:28:20 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2295.084465][T21759] overlayfs: missing 'lowerdir' [ 2297.868412][ C0] net_ratelimit: 21 callbacks suppressed [ 2297.868420][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2297.868452][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2297.874173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2297.879958][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2297.885652][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2297.891349][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2297.897051][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2297.948415][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2297.954215][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2297.960090][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:24 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:24 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x400000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6000000000000000}) 17:28:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:24 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x500000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:24 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2299.484801][T21783] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2299.513022][T21788] overlayfs: missing 'lowerdir' 17:28:24 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0xffffffffffffffff) 17:28:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2299.731046][T21788] overlayfs: missing 'lowerdir' [ 2299.753409][T21775] overlayfs: failed to resolve './file1': -2 17:28:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006f) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:29 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x600000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:29 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0xffffffffffffffff) 17:28:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6800000000000000}) 17:28:29 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0xffffffffffffffff) 17:28:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:29 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x700000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2303.982733][T21815] overlayfs: missing 'lowerdir' [ 2304.034461][T21810] overlayfs: failed to resolve './file1': -2 17:28:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x806000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2304.108416][ C0] net_ratelimit: 22 callbacks suppressed [ 2304.108425][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2304.108459][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2304.114710][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2304.120608][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2304.126348][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2304.132159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2304.137957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2304.174575][T21815] overlayfs: missing 'lowerdir' [ 2304.188473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2304.194439][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2304.200330][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000070) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:33 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x800000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6c00000000000000}) 17:28:33 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:33 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:33 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x900000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2308.275796][T21847] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2308.308162][T21843] overlayfs: missing 'lowerdir' 17:28:33 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1400000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) [ 2310.348412][ C0] net_ratelimit: 23 callbacks suppressed [ 2310.348422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2310.348460][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2310.354373][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2310.360275][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2310.366077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2310.371794][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2310.377515][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2310.428458][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2310.434470][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2310.440546][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000071) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xa00000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:37 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x7400000000000000}) 17:28:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:38 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x4305000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:38 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xe00000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2312.959414][T21879] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2312.997091][T21873] overlayfs: missing 'lowerdir' 17:28:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:38 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x1802000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2313.132951][T21890] overlayfs: missing 'lowerdir' [ 2313.162993][T21890] overlayfs: failed to resolve './file1': -2 [ 2316.588459][ C1] net_ratelimit: 24 callbacks suppressed [ 2316.588482][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2316.588535][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2316.594212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2316.600028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2316.605786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2316.611454][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2316.617174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2316.669403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2316.675212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2316.681089][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000072) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x5c00000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x2000000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x7a00000000000000}) 17:28:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x7000000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x2328aebf00000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2317.287287][T21911] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2317.358740][T21903] overlayfs: missing 'lowerdir' 17:28:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x800e000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2317.500012][T21911] overlayfs: missing 'lowerdir' 17:28:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x3f00000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:46 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000073) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:46 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x8cffffff00000000}) 17:28:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8035000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x4000000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8100000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:46 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:28:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x4002000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2321.554407][T21943] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:28:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x86ddffff00000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2321.642184][T21938] overlayfs: missing 'lowerdir' 17:28:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:46 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, 0x0) close(r0) [ 2321.774046][T21953] overlayfs: missing 'lowerdir' [ 2322.828409][ C0] net_ratelimit: 24 callbacks suppressed [ 2322.828418][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2322.828448][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2322.834156][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2322.840066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2322.845733][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2322.851438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2322.857145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2322.908427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2322.914293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2322.920210][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000074) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:51 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x5000000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8847000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:51 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xac03000000000000}) 17:28:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:51 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, 0x0) close(r0) 17:28:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8848000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:51 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x8dffffff00000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:51 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, 0x0) close(r0) [ 2326.247927][T21979] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2326.317491][T21974] overlayfs: missing 'lowerdir' 17:28:51 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x91ffffff00000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2326.436938][T21989] overlayfs: missing 'lowerdir' [ 2326.476516][T21974] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2329.068426][ C0] net_ratelimit: 22 callbacks suppressed [ 2329.068434][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2329.068466][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2329.074199][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2329.079989][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2329.085853][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2329.091525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2329.097233][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2329.148493][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2329.154340][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2329.160239][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000075) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:28:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8864000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:28:55 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) close(r0) 17:28:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xdb25668200000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf6ffffff00000000}) 17:28:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xe803000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x88a8ffff00000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2330.684123][T22012] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:28:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:28:55 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) close(r0) [ 2330.745199][T22005] overlayfs: missing 'lowerdir' 17:28:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xe9e0035ffd010000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:28:56 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x88caffff00000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000076) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:00 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf9fdffff00000000}) 17:29:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:00 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) close(r0) 17:29:00 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xf401000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x8906000000000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:00 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)) close(r0) 17:29:00 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xf5ffffff00000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2335.100549][T22046] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2335.161891][T22040] overlayfs: missing 'lowerdir' 17:29:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2335.308392][ C0] net_ratelimit: 23 callbacks suppressed [ 2335.308400][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2335.308438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.314187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.319988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2335.325637][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2335.331323][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.337056][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.355909][T22056] overlayfs: missing 'lowerdir' [ 2335.388473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2335.394333][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.400208][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:29:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000077) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:04 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfc00000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:04 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)) close(r0) 17:29:04 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xffffff7f00000000}) 17:29:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:04 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:04 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfe80000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:04 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:04 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)) close(r0) [ 2339.367597][T22078] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2339.386434][T22073] overlayfs: missing 'lowerdir' 17:29:04 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xfec0000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2341.548400][ C0] net_ratelimit: 23 callbacks suppressed [ 2341.548409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2341.548447][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2341.554165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2341.559967][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2341.565661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2341.571352][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2341.577057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2341.628404][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2341.634192][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2341.640330][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:29:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@random={'osx.', ':ppp0posix_acl_access\x00'}, &(0x7f00000001c0)=""/47, 0x2f) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:29:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000078) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:08 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) close(r0) 17:29:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xff00000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:08 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xff0f000000000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:08 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) close(r0) [ 2343.701554][T22112] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2343.756081][T22108] overlayfs: missing 'lowerdir' 17:29:09 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0xffffffff00000000, 0x20000008, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2343.987460][T22123] overlayfs: filesystem on './file0' not supported as upperdir [ 2344.023931][T22112] overlayfs: missing 'lowerdir' 17:29:09 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x10000) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file1/file1\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000540)={0x9, 0x0, 0x10001, 0x1000}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000580)={0xfffffffffffffffe, r2, 0x1, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x7, 0x10000}, &(0x7f0000000280)=0x90) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000005c0)={0x2, "31ee7ba94f2c1525f811a406b6e42a03d2bdd41eb2880f1b7a5fe4cd18cf25b0", 0x1, 0x1}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r3, 0x4, 0x30}, &(0x7f00000004c0)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r3, 0x1, 0x0, 0x100000000}, 0x10) utimes(&(0x7f0000000080)='./file1/file1\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f00000001c0)='./file1/file0\x00', r1, &(0x7f0000000200)='./file0\x00') mount$overlay(0x400006, &(0x7f0000000600)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 2344.282537][T22132] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2344.325866][T22130] overlayfs: missing 'lowerdir' [ 2344.371962][T22130] overlayfs: workdir and upperdir must reside under the same mount [ 2344.427643][T22132] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2344.477751][T22130] overlayfs: missing 'lowerdir' [ 2344.479390][T22136] overlayfs: workdir and upperdir must reside under the same mount [ 2347.788399][ C0] net_ratelimit: 25 callbacks suppressed [ 2347.788407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2347.788445][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2347.794117][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2347.799955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2347.805668][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2347.811368][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2347.817071][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2347.868443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2347.874237][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2347.880118][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:29:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000079) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) close(r0) 17:29:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000140)={{0x3, @name="937275bc706245486504e49c0605c4e85be6cea98faa3e3f94d6ad1fb70c9c19"}, "675674b33fb3621c6a409ac068daeb09e6537dde2f9824e217f357a562ddbb33"}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x2000, 0x0) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000300)) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000340)) 17:29:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2348.517446][T22152] overlayfs: missing 'lowerdir' 17:29:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0xffffffffffffffff) [ 2348.584698][T22148] overlayfs: failed to resolve './file1': -2 17:29:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:29:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2348.725076][T22148] overlayfs: missing 'lowerdir' 17:29:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:17 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0x2, 0x0, 0x0, @loopback}, 0x1c) 17:29:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000600)=""/233, &(0x7f00000001c0)=0xe9) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0xffffffffffffff64, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000400)="150bd8efa41c7e0e9355ed4d9cbafa48838b4f3d02bc59dbc0707ccbdae471d5e76a95b31b3ec19dc6f9a8e84da946da418c04afa2c47e52e9322a6c394ed193f55ddd4561241c910f9bf7dfe099b2974a821fed205077b7fd670a8fedec2f0d3d6c2f263208715bf9c3761b1caae98abe3270d85084200898c1e970dc0d74327219e3a8bd5b6326f7a9275a44b3265dc102028f11aca74bb5b4f1dc0bb60426f79de559d77b34fdfe5ea9b26ddb43500eb13d522bded260963ea892a4dad64120cc0b60c74399845ed319b9f6799e9e4f0c0f39745c87ab0df16e62e9c6614ac3a453345fce6d01e77f2b81e0e7cde7", &(0x7f0000000080)=""/24}, 0x18) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000500)=""/196) 17:29:17 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:17 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0xffffffffffffffff) 17:29:17 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xe, 0x0, 0x0, @loopback}, 0x1c) 17:29:17 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:17 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0xffffffffffffffff) 17:29:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:17 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xfffffffd, 0x0, 0x0, @loopback}, 0x1c) 17:29:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="5500000018007f8500fe01b2a4a280930a06000000a84308910000003900090035000c00060000001900150000000000000000dc1338d54400009b84136ef75afb83fb448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 2354.028397][ C0] net_ratelimit: 22 callbacks suppressed [ 2354.028407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.028452][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.034146][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.040000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.045694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.051378][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.057070][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.108467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.114332][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.120233][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:29:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:21 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) 17:29:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001400)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2, @ANYBLOB="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", @ANYRES64=r1]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:29:21 executing program 0: syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c42a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 17:29:21 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:21 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x3, 0x0, @loopback}, 0x1c) 17:29:21 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2356.763630][T22216] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2356.823093][T22207] overlayfs: unrecognized mount option "" or missing value 17:29:22 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4, 0x0, @loopback}, 0x1c) 17:29:22 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2356.960517][T22222] overlayfs: unrecognized mount option "" or missing value [ 2360.268391][ C0] net_ratelimit: 22 callbacks suppressed [ 2360.268401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2360.268435][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.274112][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.279970][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2360.285663][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2360.291370][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.297074][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.348504][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2360.354308][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.360189][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:29:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:26 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000180)={0x6, 0x5, 0xb25, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:29:26 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x5, 0x0, @loopback}, 0x1c) 17:29:26 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:26 executing program 0: open(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB=','], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x6}, {0x8, 0x1}, {0x8, 0x1}], {0x10, 0x7}, {0x20, 0x2}}, 0x7c, 0x0) 17:29:26 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x6, 0x0, @loopback}, 0x1c) 17:29:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000440)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 17:29:26 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x543, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2361.331376][T22249] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2361.374938][T22241] overlayfs: missing 'lowerdir' 17:29:26 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x7, 0x0, @loopback}, 0x1c) 17:29:26 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000001c0)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000940)={0x20, "81a044f0c245e9ce968db60bdf5e6bd881255e4548243a599a721f0c8208724f", 0x2, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) syz_mount_image$xfs(&(0x7f0000000280)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x6, &(0x7f0000000740)=[{&(0x7f0000000400)="96ae212d10fe59bf0152923de3a2e0563b9a48b461acca2318496d8c19ee36a5dd9a9bbc164432b1f4a2e8a3992709d0a56df4486d5bbcfa0bc491840e4331dd749bcded128005b0a1aee544c47abc1f3f087dcce743ea9642f199001dcad037e40a8f624f6d876236e0b8f252c0ab2b85bd1a9fe24e79", 0x77, 0x8}, {&(0x7f0000000480)="fc62611752ce051c67f7a363c71c3af9b692cd7ec5843fe85012204bcd4d56311665fe50bed86859aac1b91c805e6d34ab57c6d4f1014b8d43d505b2c77eb1dbe8d923539fb522c22825de3de673ba14048094cbd99eece2444126f83db0b6032de288a0824288a0c827ee0b080dced62fe0d76b6690c81e4ecb7f3d8e1a8de146112454103f81abe749fa62a04d190c6bcfed27e3ac0add6c452ce18fdf49df65c6dbe5b50d6cb36b05a702eb0305ddbe589484c058337c4688f72ad17813f55dd31da51a31990072da5ff9ec6767227bf88c1fc7fa77a760b6e9f9d3ff37a77740c374f1", 0xe5, 0x100000000}, {&(0x7f0000000580)="cfa13894e81dcfaa2614c9a296551b22aeaeb4381c12dac4400b224bd37af3a1a1bcc364c848f7f6ff5a6ee39ce04359e2db7bda182433491b5761db6570c95938ed2eff01f1ad597c5a2fc04f1440ffc1eb6c4e67c6", 0x56, 0x8a8}, {&(0x7f0000000600)="ec6b3575643cda4203e0ddc296280d2a83c7ccf35988421f223c664c07644af7646e07f414c057d65f3e9d2bcd7b43e6ebc02e40096659e347e52fa3c3a6002a852ab18ac44f5041e4b57224d34c848f6456e4a2afc96a4504e1cb00a03f5b", 0x5f, 0x3}, {&(0x7f0000000340)="bd84a5f375bc4cc869c0edc100b6599df78a981a6241c92a32b4d4b2643db18befdf02145e959dcc6e9f65bf9a11a6ad4cd8f8d16761097c37b7", 0x3a, 0x2}, {&(0x7f0000000680)="5324f5ad2b5b03667d450647152e83dae6ef58c5bd447ef8b449b77e5aa5115a4720fd052e0f65fe01", 0x29, 0x4}], 0x2000, &(0x7f0000000900)={[{@gqnoenforce='gqnoenforce'}], [{@euid_gt={'euid>', r2}}, {@subj_user={'subj_user', 0x3d, '/dev/vcsa#\x00'}}]}) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000200)) ioprio_set$uid(0x3, r3, 0x1) getpid() clock_gettime(0x0, &(0x7f0000000700)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x401, 0x4a, 0x7f, 0x87f, 0xbc66}, 0x14) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:29:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x8, 0x0, @loopback}, 0x1c) 17:29:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x608, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xa9) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2c4d2a06e800"], 0x6) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x6}, {0x8, 0x1}, {0x8, 0x1}], {0x10, 0x7}, {0x20, 0x2}}, 0x7c, 0x0) 17:29:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x9, 0x0, @loopback}, 0x1c) 17:29:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:30 executing program 0: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'veth0_to_team\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) socketpair(0x0, 0x6, 0x1ffffffffffffd, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e, 0x2013, r0, 0x0) socket$inet6(0xa, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2365.506422][T22284] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:29:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xa, 0x0, @loopback}, 0x1c) 17:29:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2365.591201][T22289] overlayfs: missing 'lowerdir' [ 2365.712039][T22284] overlayfs: missing 'lowerdir' [ 2365.759601][T22305] overlayfs: filesystem on './file0' not supported as upperdir [ 2366.508394][ C0] net_ratelimit: 22 callbacks suppressed [ 2366.508404][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2366.508445][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.514183][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.519980][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2366.525671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2366.531336][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.537049][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.588474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2366.594287][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.600188][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:29:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:35 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xe, 0x0, @loopback}, 0x1c) 17:29:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x806, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:35 executing program 0: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'veth0_to_team\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) socketpair(0x0, 0x6, 0x1ffffffffffffd, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e, 0x2013, r0, 0x0) socket$inet6(0xa, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:29:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="fa68a5718aba34558a24b2056d03d4dd640572030c", @ANYPTR, @ANYRES16=r0]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) 17:29:35 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x50, 0x0, @loopback}, 0x1c) 17:29:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2370.067877][T22329] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:29:35 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xfc, 0x0, @loopback}, 0x1c) 17:29:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x2e1) mknod$loop(&(0x7f0000000500)='./bus\x00', 0xb0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x4000) setitimer(0x1, 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000440)=""/174) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) umount2(&(0x7f0000000240)='./bus\x00', 0x4) fcntl$setpipe(r0, 0x407, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) recvfrom$inet(r2, &(0x7f0000000340)=""/196, 0xc4, 0x2000, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) flock(r1, 0x5) getpid() getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000540)={'icmp6\x00'}, &(0x7f0000000580)=0x1e) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) [ 2370.170554][T22325] overlayfs: missing 'lowerdir' 17:29:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2370.269995][T22329] overlayfs: missing 'lowerdir' [ 2370.286475][T22329] overlayfs: failed to resolve './file1': -2 [ 2372.748381][ C1] net_ratelimit: 24 callbacks suppressed [ 2372.748390][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2372.748418][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2372.754156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2372.760000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2372.765770][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2372.771666][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2372.777356][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2372.828385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2372.834248][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2372.840153][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:29:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000082) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:39 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x1f4, 0x0, @loopback}, 0x1c) 17:29:39 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x7, &(0x7f0000000200)={0x0, 0x0}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRESHEX=r1]]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:29:39 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe80, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000100)={0xffffffffffffff10}, 0xfffffc92) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14103e, 0x0) getresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r3, 0x0) 17:29:39 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x218, 0x0, @loopback}, 0x1c) 17:29:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:39 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:39 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2374.146066][T22368] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2374.220261][T22355] overlayfs: unrecognized mount option "€" or missing value 17:29:39 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x240, 0x0, @loopback}, 0x1c) 17:29:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e", 0x62) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2374.355549][T22373] overlayfs: unrecognized mount option "€" or missing value [ 2374.385156][T22355] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:29:43 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6c00000000000000}) 17:29:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000083) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:43 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x300, 0x0, @loopback}, 0x1c) 17:29:43 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3580, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)='n', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:43 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') execveat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000280)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='overlay\x00', &(0x7f0000000200)='btrfs\x00'], &(0x7f0000000540)=[&(0x7f0000000300)='+keyringcgroupcgroupf$nodev{eth1nodevmime_type\x00', &(0x7f0000000340)='vmnet0\x00', &(0x7f0000000400)='nodev\\\x00', &(0x7f0000000440)='proc@@]$\x00', &(0x7f0000000480)='workdir', &(0x7f00000004c0)='workdir', &(0x7f0000000500)='ntfs\x00'], 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000005c0)={0x0, 0x7, 0x8, &(0x7f0000000580)=0x75fe}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:29:43 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:43 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x3e8, 0x0, @loopback}, 0x1c) 17:29:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)='n', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2378.830256][T22402] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2378.866410][T22394] overlayfs: missing 'lowerdir' [ 2378.876562][T22396] overlayfs: missing 'lowerdir' [ 2378.904844][T22402] overlayfs: missing 'lowerdir' [ 2378.913820][T22404] overlayfs: failed to resolve './file1': -2 [ 2378.972248][T22402] overlayfs: missing 'lowerdir' [ 2378.988460][ C1] net_ratelimit: 24 callbacks suppressed [ 2378.988467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2378.988483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2378.994194][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2379.000016][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:29:44 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:44 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x500, 0x0, @loopback}, 0x1c) [ 2379.005799][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.011514][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.017190][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2379.022917][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:29:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)='n', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:44 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6c00000000000000}) [ 2379.068415][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.074240][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2379.257935][T22420] overlayfs: missing 'lowerdir' [ 2379.293657][T22420] overlayfs: failed to resolve './file1': -2 17:29:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000084) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:48 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) r3 = geteuid() mount$9p_virtio(&(0x7f0000000080)='nodev%]cgroup\x00', &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000001c0)='9p\x00', 0x40080, &(0x7f0000000500)={'trans=virtio,', {[{@version_L='version=9p2000.L'}, {@nodevmap='nodevmap'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, 'md5sum/cgroupmd5sum\'$em1'}}, {@fowner_lt={'fowner<', r2}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@uid_lt={'uid<', r3}}, {@dont_appraise='dont_appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x81}}]}}) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000280)=0x6e, 0x80800) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000600)={[{@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:29:48 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x600, 0x0, @loopback}, 0x1c) 17:29:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37", 0x32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:48 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6c00000000000000}) 17:29:48 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4888, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x700, 0x0, @loopback}, 0x1c) 17:29:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37", 0x32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2382.985946][T22436] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2383.017747][T22426] overlayfs: missing 'lowerdir' [ 2383.040557][T22431] overlayfs: missing 'lowerdir' [ 2383.047147][T22444] overlayfs: failed to resolve './file1': -2 17:29:48 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c00, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x900, 0x0, @loopback}, 0x1c) [ 2383.083565][T22445] overlayfs: missing 'lowerdir' 17:29:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37", 0x32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2383.212010][T22452] overlayfs: missing 'lowerdir' [ 2385.228412][ C0] net_ratelimit: 25 callbacks suppressed [ 2385.228421][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.228455][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.234133][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.240017][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.245715][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.251436][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.257138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.308378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.314200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.320110][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:29:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000085) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6488, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xa00, 0x0, @loopback}, 0x1c) 17:29:52 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080)=0x3) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) r2 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f00000006c0)=@sha1={0x1, "9b19c1b1b9bbf89764f8afabd9eb719a924a517e"}, 0x15, 0x3) r4 = getuid() syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file1/file0\x00', 0xd9f, 0x7, &(0x7f00000009c0)=[{&(0x7f0000000400)="d2b472736dc0ce4a445f2e67a4f3db5f62fa94cb6519404e2b158f230f44dee0f786728cc61f59f707afc1f62dc70d1ab4684751f4b36984664bf0f218d8c56d57721c0c07b37af00122f8bff87be4c0c3f2b830faecd16f1e1c9705732c62f5d0bfb7087d5f0ace500e32b1fde3152d0008e3fecf544a14504691fee68419e135b8bd56570fb972a7a7201400600de034ad318837ee1c82ecdd5507bc024f6feb64bb71e6b60ae0c8bafaf6a85c735e96c2b00de26fe85a4d909b392ca4e0149df3cf9e11d033dc78a751245c0da8f6032cdb61e6829676fff3612a2e660020b34a1f4704b447abfb2f", 0xea, 0x98b}, {&(0x7f0000000500)="2c53879749e3ee2fc10ba8fabb8e4f099ea6ab0bbb6d182261b4943600c9c01c1af95cce0a875377fa7c58045a2f61b92b30409615bbc340facb39e74579e322d8a5de89cc15ca6796454b8a4b0aa8d0ad91c0995ea1c60182be2c812a81285e80ace77fd749c9e66c4879e054a98437394982b1f5ca27d1d2c2a2c35e88e7dba892d0c974b9350c1b4a980d8e2ef37255492a42087c5bac5db1d4846b825459df3c8f7588dd9b727720de0ed61ebf50c31a", 0xb2, 0xffffffff80000000}, {&(0x7f00000005c0)="dfd0a7c0e243e70c9171448e853e88caa16c173152b1ec962b1c6c1ffbc58dbe1fd8b4c8636e7c72571b1cf6fce7b6317586f6c5a88b0b6e5903a288273d97a69c80c8fdd977f3994fca8e32d6544f7f1a30d4c7ae0da89bed5ea277ac0d53c592c3827c64585e249c35e240e7d85f7b51cb957f2aff3785beaacc5c1e22f18a9bf56387789da1143ab54443593290a928629d58d0d75fa8e1f447dbba63b9d16dfaa5ef9f1f5d51a41ecc99d8d0a8fe369cf4951f4ff62cdf06b06dd947a8dbdbe974e9507997aec6", 0xc9, 0x7}, {&(0x7f0000000740)="4ad014adfb028ad87835af63d328654c76d680e825bece908ef86f7485231e2bf6878e5b0d592d9097809d94ee5ce1a1008e4eba3d958a744ad29759d64b81448896d9251fec11381ac42241719b6b88d3856ae6869cc53ddcbd1a53a414a6c377dd2f0cd71de1241a772f1d560ac7eadfa70f2db3c40ef74caf0b5e8b76ad830b57f1afb4e358bb534ac1368f49b3e541cb3eb6379767f52b88", 0x9a, 0x2}, {&(0x7f0000000800)="6262944d9834d6cbed593f4d8fce63a72c2c7b02c17536781fd4fbc21f42a4d4ba3d673bc0499c43340a32da05aeef75e915c9ac586fa88bcf2409e7635d755fbc0443954b2b19bebc402d4d6c06a8c7f7b80e8f7c1e01b3337daaea324b020b3ca2a0199010ac698ac5e8024f98e7132ef3ed52d98b56ed439c46a81eb2b0571fa62e79e5582d3254f9f232b1a549ac1ee60e08f5d905d9616609dd673d354b84c58803c0467f3e72a36a1b780edfcd6f7281b8f0b686f250", 0xb9, 0x22}, {&(0x7f0000001400)="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", 0x1000, 0x9}, {&(0x7f00000008c0)="8cab415e88f840839e369171761de27ff750f4bd26336df93b304a183a1258ec91a95b26b0018b539dca67526c49b7e486308f570f527d15695e549dbfb2115ccd880603b184b89407abbb4564b5c630f097bc87b402867157aa86ba7135d59083dafc84eb03f8f07107cf9b922ae35de0fd5194748d50e08ca6602015e4fe8e8361db2d0a1bbf4ace51cb04e26e9c9de04098bee99d065cde6b00d852786c2db388857ca921a5993c71f2d2f369eccc9b3ff068efeafdc3709b98a287a43c793ace1fd23c3f49075611bf7c4c14dec8c120104031cb5d797d119d83106bf66f0e7c29f5ef2e5abbe1c3b10ec29eeae346ada3", 0xf3, 0x9}], 0x20001, &(0x7f0000000a80)={[{@numtail='nonumtail=0'}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, 'overlay\x00'}}, {@fowner_gt={'fowner>', r2}}, {@fowner_gt={'fowner>', r3}}, {@euid_gt={'euid>', r4}}, {@smackfsroot={'smackfsroot'}}, {@subj_role={'subj_role'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:29:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)='nL', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xe00, 0x0, @loopback}, 0x1c) 17:29:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)='nL', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2387.277624][T22464] overlayfs: missing 'lowerdir' 17:29:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x1802, 0x0, @loopback}, 0x1c) 17:29:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800e, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2387.357560][T22464] overlayfs: failed to resolve './file1': -2 17:29:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)='nL', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2387.451872][T22480] overlayfs: missing 'lowerdir' [ 2391.468411][ C1] net_ratelimit: 23 callbacks suppressed [ 2391.468420][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.468476][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.474155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.479992][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.486217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.491885][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.497612][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:29:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000086) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:29:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x2000, 0x0, @loopback}, 0x1c) 17:29:56 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8035, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:29:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) setxattr$security_ima(&(0x7f0000000080)='./file1/file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "57d3ba08a1d36ae6ee5be1499d19bc5a082e2647"}, 0x15, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000400)=""/221) 17:29:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b", 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:56 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$FIGETBSZ(r0, 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e656317970172797074667320757365723a2620"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 2391.548872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.554675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.560544][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.643166][T22502] encrypted_key: keyword 'nec—ryptfs' not recognized 17:29:56 executing program 0: 17:29:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x3f00, 0x0, @loopback}, 0x1c) 17:29:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b", 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:29:56 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2391.727297][T22507] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2391.745461][T22512] overlayfs: missing 'lowerdir' 17:29:57 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4000, 0x0, @loopback}, 0x1c) 17:29:57 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8847, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2391.963885][T22507] overlayfs: filesystem on './file0' not supported as upperdir [ 2391.969775][T22499] overlayfs: missing 'lowerdir' 17:30:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000087) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b", 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:01 executing program 0: 17:30:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4002, 0x0, @loopback}, 0x1c) 17:30:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8848, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:01 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80420}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x20004004) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:01 executing program 0: 17:30:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca549", 0x26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x5000, 0x0, @loopback}, 0x1c) [ 2396.252813][T22541] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2396.261291][T22533] overlayfs: missing 'lowerdir' 17:30:01 executing program 0: 17:30:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x80fe, 0x0, @loopback}, 0x1c) [ 2396.446613][T22541] overlayfs: missing 'lowerdir' [ 2397.708400][ C0] net_ratelimit: 23 callbacks suppressed [ 2397.708409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2397.708455][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2397.714120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2397.719980][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2397.725663][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2397.731359][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2397.737057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2397.788349][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2397.794137][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2397.800062][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000088) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:05 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8906, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca549", 0x26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:05 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xc0fe, 0x0, @loopback}, 0x1c) 17:30:05 executing program 0: 17:30:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:05 executing program 0: 17:30:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b", 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:05 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xe803, 0x0, @loopback}, 0x1c) 17:30:05 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2400.533073][T22565] overlayfs: missing 'lowerdir' [ 2400.541099][T22570] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:30:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000ac7fb0)=ANY=[@ANYBLOB="00010000000000000700080000000000"], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0xab) 17:30:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b", 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2400.705123][T22565] overlayfs: missing 'lowerdir' [ 2400.706419][T22570] overlayfs: filesystem on './file0' not supported as upperdir [ 2403.948371][ C0] net_ratelimit: 23 callbacks suppressed [ 2403.948379][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2403.948424][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2403.954124][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2403.959965][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2403.965638][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2403.971343][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2403.977045][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2404.028436][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2404.034253][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2404.040175][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000089) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:09 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xf401, 0x0, @loopback}, 0x1c) 17:30:09 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf0ffff, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000001380)={0x100000001, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x4, 0x8000a0ffffffff}) 17:30:09 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000340)='./file0\x00', 0xfffffffffffffffc) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) lsetxattr$security_smack_entry(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='ntfs\x00', 0x5, 0x2) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b", 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 17:30:09 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xfc00, 0x0, @loopback}, 0x1c) 17:30:09 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2404.776449][T22607] overlayfs: missing 'lowerdir' 17:30:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2404.846047][T22593] overlayfs: failed to resolve './file1': -2 17:30:10 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xfe80, 0x0, @loopback}, 0x1c) [ 2404.943115][T22607] overlayfs: missing 'lowerdir' [ 2404.962177][T22620] overlayfs: failed to resolve './file1': -2 [ 2404.965450][T22617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2405.015610][T22617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2405.056985][T22617] device team0 left promiscuous mode [ 2405.081341][T22617] device team_slave_0 left promiscuous mode [ 2405.098586][T22617] device team_slave_1 left promiscuous mode [ 2405.635364][T22617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:30:14 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xfec0, 0x0, @loopback}, 0x1c) 17:30:14 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:14 executing program 0: socket$unix(0x1, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_setup(0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 17:30:14 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xff00, 0x0, @loopback}, 0x1c) 17:30:14 executing program 0: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$P9_RVERSION(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x10b) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) [ 2409.450171][T22648] overlayfs: missing 'lowerdir' 17:30:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xff0f, 0x0, @loopback}, 0x1c) [ 2409.481003][T22643] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:30:14 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2409.730682][T22643] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2409.773252][T22638] overlayfs: missing 'lowerdir' 17:30:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="eca08a9f8ed162c2f641d8f6b2fc6d591abb3f8214f617e4bbd651133b2522d831944d4768bfd2589a30e0ed0c1525e4d0af62e390465459d9f0839b888f507b75764112bd54d9c8a59bb18227640e0216670be3495d7e8157da10150f95ab1a102636bc096bbb79b77a2d50a2a4f59855fd5a42e74b1785229930ba478398e51d657f0566a5bb3b88eb79e533b583f53120ef9149185726200e8586e9cc98fa60c5a6833c2f4a0d93d96edbb441e95d9db8c448d602928e59b22aac48", 0xbd) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x100000, 0x200, r2, 0x0, r3, 0x0, 0x7f, 0x9}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 2410.003858][T22667] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2410.042490][T22665] overlayfs: missing 'lowerdir' [ 2410.177269][T22671] overlayfs: missing 'lowerdir' [ 2410.188369][ C1] net_ratelimit: 25 callbacks suppressed [ 2410.188389][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.188416][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.194116][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.200314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.206077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.211757][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.217465][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.268369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.274229][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.280134][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb", 0x23) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) r3 = geteuid() mount$9p_virtio(&(0x7f0000000080)='nodev%]cgroup\x00', &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000001c0)='9p\x00', 0x40080, &(0x7f0000000500)={'trans=virtio,', {[{@version_L='version=9p2000.L'}, {@nodevmap='nodevmap'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, 'md5sum/cgroupmd5sum\'$em1'}}, {@fowner_lt={'fowner<', r2}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@uid_lt={'uid<', r3}}, {@dont_appraise='dont_appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x81}}]}}) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000280)=0x6e, 0x80800) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000600)={[{@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:18 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x50000, 0x0, @loopback}, 0x1c) 17:30:18 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x8}, 0x4) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000400)=""/242) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @local}, 0x24, 0x0, 0x0, 0x0, 0xe0a, &(0x7f0000000200)='bcsh0\x00', 0x0, 0xfffffffffffffffb, 0x20}) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x1, &(0x7f0000000200)=ANY=[]) pread64(r1, &(0x7f00000001c0)=""/25, 0x19, 0x0) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) 17:30:18 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:18 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x1000000, 0x0, @loopback}, 0x1c) 17:30:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2413.610713][T22687] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2413.625315][T22690] overlayfs: missing 'lowerdir' [ 2413.713612][T22683] overlayfs: missing 'lowerdir' 17:30:18 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x2000000, 0x0, @loopback}, 0x1c) 17:30:18 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8060000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 2413.976441][T22703] overlayfs: missing 'lowerdir' [ 2413.994276][T22706] overlayfs: failed to resolve './file1': -2 [ 2416.428370][ C1] net_ratelimit: 25 callbacks suppressed [ 2416.428379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.428426][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.434111][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.439948][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.445678][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.451353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.457061][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.508950][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.514764][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.520671][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:22 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./r=./file0,workdir=./file1\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 17:30:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:22 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x3000000, 0x0, @loopback}, 0x1c) 17:30:22 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:23 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4000000, 0x0, @loopback}, 0x1c) 17:30:23 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2417.933198][T22722] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2417.972554][T22712] overlayfs: missing 'lowerdir' 17:30:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2417.983722][T22718] overlayfs: missing 'lowerdir' 17:30:23 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x5000000, 0x0, @loopback}, 0x1c) [ 2418.034306][T22718] overlayfs: failed to resolve './file1': -2 [ 2418.063015][T22712] overlayfs: missing 'lowerdir' 17:30:23 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 2418.119839][T22730] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2418.199481][T22722] overlayfs: missing 'lowerdir' [ 2418.304040][T22739] overlayfs: missing 'lowerdir' [ 2418.362657][T22739] overlayfs: failed to resolve './file1': -2 17:30:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120dae", 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x6000000, 0x0, @loopback}, 0x1c) 17:30:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000001c0)=@rose) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x100) clock_gettime(0x0, &(0x7f0000000700)) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000001400)="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", 0x1000) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) r2 = semget(0x0, 0x1, 0x0) semctl$SETVAL(r2, 0x6, 0x10, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0xfffffffffffffe31, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6000000000000000}) 17:30:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x43050000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x7000000, 0x0, @loopback}, 0x1c) 17:30:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2422.175146][T22744] overlayfs: missing 'lowerdir' [ 2422.182251][T22757] overlayfs: failed to resolve './file1': -2 17:30:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x8000000, 0x0, @loopback}, 0x1c) 17:30:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6000000000000000}) [ 2422.545690][T22769] overlayfs: missing 'lowerdir' [ 2422.579842][T22769] overlayfs: failed to resolve './file1': -2 [ 2422.668367][ C1] net_ratelimit: 21 callbacks suppressed [ 2422.668376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.668405][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.674145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.680031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.685773][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.691461][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.697168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.748378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.754255][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.760162][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:31 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x8001}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0x7, @local, 0xfffffffffffffff9}}, 0x8000, 0x4, 0x2, 0x1, 0xfff}, &(0x7f00000004c0)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000180)) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x11, 0x0, 0x7}, 0x75}}, 0x18) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000280), 0x8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:31 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x9000000, 0x0, @loopback}, 0x1c) 17:30:31 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x70000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6000000000000000}) 17:30:31 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xa000000, 0x0, @loopback}, 0x1c) 17:30:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:31 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800e0000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2426.353821][T22791] overlayfs: missing 'lowerdir' [ 2426.354649][T22785] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2426.396199][T22783] overlayfs: missing 'lowerdir' 17:30:31 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xe000000, 0x0, @loopback}, 0x1c) [ 2426.471592][T22783] overlayfs: failed to resolve './file1': -2 17:30:31 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80350000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df12", 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2426.549044][T22785] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2426.606398][T22791] overlayfs: missing 'lowerdir' [ 2428.908360][ C0] net_ratelimit: 23 callbacks suppressed [ 2428.908369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2428.908403][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2428.914234][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2428.920014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2428.925727][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2428.931402][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2428.937105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2428.988427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2428.994261][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2429.000136][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008f) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x5c00000000000000}) 17:30:35 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x18020000, 0x0, @loopback}, 0x1c) 17:30:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x81000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, @default, @rose={'rose', 0x0}, 0x2, 'syz1\x00', @null, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x86ddffff, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:35 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x20000000, 0x0, @loopback}, 0x1c) 17:30:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2430.439518][T22816] overlayfs: missing 'lowerdir' [ 2430.459467][T22823] overlayfs: failed to resolve './file1': -2 [ 2430.472155][T22824] overlayfs: missing 'lowerdir' [ 2430.482289][T22818] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:30:35 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88470000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:35 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x2328aebf, 0x0, @loopback}, 0x1c) 17:30:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4800000000000000}) [ 2430.724182][T22818] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2430.767018][T22813] overlayfs: missing 'lowerdir' [ 2430.883128][T22836] overlayfs: missing 'lowerdir' [ 2430.905281][T22837] overlayfs: failed to resolve './file1': -2 17:30:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000090) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:39 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88480000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:39 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x3f000000, 0x0, @loopback}, 0x1c) 17:30:39 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1/file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000400)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000340)=0xe5) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x260, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0xfffffffffffffec2, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000090) 17:30:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4800000000000000}) 17:30:39 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x40000000, 0x0, @loopback}, 0x1c) 17:30:39 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88640000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2434.289833][T22853] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2434.315420][T22843] overlayfs: missing 'lowerdir' [ 2434.364089][T22862] overlayfs: workdir and upperdir must reside under the same mount [ 2434.380929][T22847] overlayfs: missing 'lowerdir' 17:30:39 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x40020000, 0x0, @loopback}, 0x1c) 17:30:39 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2434.404455][T22864] overlayfs: failed to resolve './file1': -2 [ 2434.429189][T22853] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2434.470431][T22866] overlayfs: missing 'lowerdir' [ 2434.487618][T22843] overlayfs: workdir and upperdir must reside under the same mount 17:30:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2435.148373][ C0] net_ratelimit: 24 callbacks suppressed [ 2435.148381][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2435.148410][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2435.154126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2435.159955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2435.165630][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2435.171356][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2435.177045][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2435.228368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2435.234243][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2435.240144][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000091) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x50000000, 0x0, @loopback}, 0x1c) 17:30:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) 17:30:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4800000000000000}) 17:30:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88caffff, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x826625db, 0x0, @loopback}, 0x1c) 17:30:42 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x89060000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2437.746484][T22891] overlayfs: missing 'lowerdir' [ 2437.771274][T22894] overlayfs: missing 'lowerdir' [ 2437.794702][T22891] overlayfs: failed to resolve './file1': -2 [ 2437.805106][T22889] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:30:43 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:43 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x8dffffff, 0x0, @loopback}, 0x1c) [ 2438.021021][T22889] overlayfs: missing 'lowerdir' [ 2438.041519][T22884] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2441.388392][ C1] net_ratelimit: 22 callbacks suppressed [ 2441.388401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2441.388443][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2441.394124][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2441.399917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2441.405663][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2441.411324][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2441.417524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2441.468371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2441.474175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2441.480060][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000092) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:47 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) socket$inet(0x2, 0x3, 0x83) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:30:47 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffa888, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:47 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x91ffffff, 0x0, @loopback}, 0x1c) 17:30:47 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1a2, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000140)={0x9, 0x1}) clock_gettime(0x6, &(0x7f00000001c0)) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120daebb8ca54933b0b23c08859a6a46632b37005e0fea77f35b3fb5b40cdfdf2af7b7b00ca2a4ac20188aa03b9c05f338a336a5d519de834ab7e44b9362d313cc836e0ec2a7f8aeac94839269495ed3d3b5493a72c5210fc6d7b4ffeab7a5b461d7863d302a8b7eca46440359dabea78045e64c8f67b9f427d9bcd8207d3846288a5554c3cc74c6f8d645e13536923dc5f14167add592b47c1e63970f318ffe411355f9", 0xc3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:47 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffca88, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:47 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xbfae2823, 0x0, @loopback}, 0x1c) 17:30:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:47 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffdd86, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000093) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:51 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xdb256682, 0x0, @loopback}, 0x1c) 17:30:51 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x200000000000000}) 17:30:51 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1711b666}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x1f, 0x81}, &(0x7f0000000200)=0x8) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000340)='>kh\xa0\x00\x06+rv\xc3\xd4\xb8g\x1eM`\x16zH\x16\v\xaf@\xfe\xb7tmpfs', 0x200020, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xe8030000, 0x0, @loopback}, 0x1c) [ 2446.920800][T22945] overlayfs: missing 'lowerdir' 17:30:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2446.957206][T22954] overlayfs: failed to resolve './file1': -2 [ 2447.025238][T22952] overlayfs: missing 'lowerdir' 17:30:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:52 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x200000000000000}) 17:30:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xf4010000, 0x0, @loopback}, 0x1c) [ 2447.095871][T22950] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2447.332199][T22966] overlayfs: missing 'lowerdir' [ 2447.382754][T22966] overlayfs: failed to resolve './file1': -2 [ 2447.628352][ C0] net_ratelimit: 23 callbacks suppressed [ 2447.628360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.628400][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.634176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.640063][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.645756][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.651452][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.657153][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.708433][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.714289][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.720188][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:30:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xf5ffffff, 0x0, @loopback}, 0x1c) 17:30:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000094) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:30:56 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:30:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:30:56 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x200000000000000}) 17:30:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xfc000000, 0x0, @loopback}, 0x1c) 17:30:56 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2451.380871][T22986] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2451.397513][T22976] overlayfs: missing 'lowerdir' [ 2451.406901][T22980] overlayfs: missing 'lowerdir' 17:30:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xfe800000, 0x0, @loopback}, 0x1c) [ 2451.461789][T22980] overlayfs: failed to resolve './file1': -2 17:30:56 executing program 0: r0 = epoll_create1(0x0) readv(0xffffffffffffffff, 0x0, 0x0) epoll_wait(r0, 0x0, 0x0, 0x3f) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:30:56 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:30:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @sack_perm, @mss={0x2, 0x80000001}, @mss={0x2, 0x7}, @sack_perm, @window={0x3, 0x307, 0x3}, @mss={0x2, 0xf0}, @window={0x3, 0x3, 0x1}], 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getdents64(r0, &(0x7f0000000200)=""/35, 0x23) clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x401, 0x4) 17:30:56 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xfec00000, 0x0, @loopback}, 0x1c) [ 2451.800245][T23009] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2451.860150][T23005] overlayfs: missing 'lowerdir' [ 2451.865373][T23011] overlayfs: unrecognized mount option "¢d}–aÖ=./file0" or missing value [ 2451.949203][T23011] overlayfs: missing 'lowerdir' [ 2451.974804][T23011] overlayfs: unrecognized mount option "¢d}–aÖ=./file0" or missing value [ 2453.868350][ C0] net_ratelimit: 23 callbacks suppressed [ 2453.868359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.868391][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.874111][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.879911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.885619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.891293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.896997][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.948368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.954188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.960087][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:31:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000095) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:00 executing program 0: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9c, 0xa07000, 0x0}) 17:31:00 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xff000000, 0x0, @loopback}, 0x1c) 17:31:00 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) setsockopt(r0, 0x8, 0x20, &(0x7f0000000180)="f53be35e05a42cb6504d49e95e9c9ab9dd8d7e98d56546047a529fb049f6093a49460b3b8ac048de4f85e7b610101f2c063cb9af795ecc2edd049f60e4c4c1d1e06057bddfa4ad44882959557ed17b926de2278440", 0x55) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065722c6c6f7765726469723d2ef8bcea9b7bc23b2ea4596eb8d52f66696c65302c776f726b"]) 17:31:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) [ 2455.791804][T23025] binder: 23020:23025 got reply transaction with no transaction stack 17:31:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xff0f0000, 0x0, @loopback}, 0x1c) 17:31:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2455.845673][T23025] binder: 23020:23025 transaction failed 29201/-71, size 0-0 line 2899 [ 2455.882224][T23030] binder: 23020:23030 got reply transaction with no transaction stack [ 2455.919219][T23029] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2455.933771][T23030] binder: 23020:23030 transaction failed 29201/-71, size 0-0 line 2899 17:31:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xffffff8d, 0x0, @loopback}, 0x1c) [ 2455.969878][T23023] overlayfs: missing 'lowerdir' [ 2455.970448][T23036] overlayfs: unrecognized mount option "upper" or missing value 17:31:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="28d2eb00000000000000000000000000", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="1c458765f391bf93f0248dbb5dc1566e", 0x10}], 0x1}, {0x0, 0x0, 0x0}], 0x2, 0x0) 17:31:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xffffff91, 0x0, @loopback}, 0x1c) [ 2456.184153][T23044] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2456.211996][T23029] overlayfs: unrecognized mount option "upper" or missing value [ 2456.283620][T23023] overlayfs: missing 'lowerdir' [ 2460.108353][ C1] net_ratelimit: 23 callbacks suppressed [ 2460.108361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2460.108390][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2460.114080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2460.119900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2460.125646][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2460.131334][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2460.137038][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2460.188335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2460.194128][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2460.200000][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:31:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000096) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:05 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:05 executing program 0: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) lstat(0x0, 0x0) getuid() getgroups(0x0, 0x0) getgroups(0x0, 0x0) getresgid(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') 17:31:05 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xfffffff5, 0x0, @loopback}, 0x1c) 17:31:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/75) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) lremovexattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00') mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:31:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:31:05 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x1fd5f03e0e9, 0x0, @loopback}, 0x1c) 17:31:05 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x806000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:05 executing program 0: getrusage(0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getitimer(0x3, 0x0) [ 2460.675342][T23072] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:31:05 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x7ffffffff000, 0x0, @loopback}, 0x1c) [ 2460.720779][T23063] overlayfs: missing 'lowerdir' 17:31:05 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_SET_CPUID(r0, 0x4004551e, &(0x7f0000000080)=ANY=[]) ioctl$sock_inet_SIOCRTMSG(r0, 0x8004550f, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}}) 17:31:06 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2460.886392][T23063] overlayfs: missing 'lowerdir' 17:31:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x5000000000000, 0x0, @loopback}, 0x1c) 17:31:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000097) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:10 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8000087fd, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:31:10 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x74000000}) 17:31:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:31:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xf0ffffff7f0000, 0x0, @loopback}, 0x1c) 17:31:10 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x100000000000000, 0x0, @loopback}, 0x1c) [ 2465.180785][T23114] overlayfs: missing 'lowerdir' 17:31:10 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2465.214987][T23113] overlayfs: missing 'lowerdir' [ 2465.215543][T23114] overlayfs: failed to resolve './file1': -2 [ 2465.240837][T23113] overlayfs: failed to resolve './file1': -2 [ 2465.277125][T23110] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:31:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x200000000000000, 0x0, @loopback}, 0x1c) 17:31:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x74000000}) [ 2465.384112][T23114] overlayfs: missing 'lowerdir' 17:31:10 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:10 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 2465.546262][T23125] overlayfs: missing 'lowerdir' [ 2465.554106][T23130] overlayfs: failed to resolve './file1': -2 [ 2465.657254][T23132] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2465.709114][T23129] overlayfs: missing 'lowerdir' [ 2466.348368][ C0] net_ratelimit: 22 callbacks suppressed [ 2466.348377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2466.348411][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2466.354170][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2466.359922][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2466.365619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2466.371304][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2466.377013][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2466.428338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2466.434121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2466.439999][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:31:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000098) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x300000000000000, 0x0, @loopback}, 0x1c) 17:31:14 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x74000000}) 17:31:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:31:14 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x800007ff) chdir(&(0x7f0000000100)='./file0\x00') ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000400)={0x7, 0x6}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000280)={0x5, 0x3, 0x3, 0x1}) mknod$loop(&(0x7f0000000200)='./file1/file0\x00', 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) getpid() ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000300)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xf, 0x4, 0x8, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) setxattr$security_smack_transmute(&(0x7f0000000080)='.\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) 17:31:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x400000000000000, 0x0, @loopback}, 0x1c) 17:31:14 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7000000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2469.800491][T23151] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2469.837991][T23143] overlayfs: missing 'lowerdir' [ 2469.849614][T23147] overlayfs: missing 'lowerdir' 17:31:15 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x500000000000000, 0x0, @loopback}, 0x1c) [ 2469.904361][T23147] overlayfs: failed to resolve './file1': -2 17:31:15 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2469.995832][T23159] overlayfs: missing 'lowerdir' [ 2470.041057][T23159] overlayfs: failed to resolve './file1': -2 17:31:15 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x600000000000000, 0x0, @loopback}, 0x1c) [ 2470.084076][T23143] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2472.588341][ C0] net_ratelimit: 21 callbacks suppressed [ 2472.588350][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2472.588379][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2472.594097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2472.599883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2472.605597][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2472.611286][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2472.617001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2472.668325][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2472.674134][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2472.680012][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:31:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000099) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:19 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:19 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:31:19 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x700000000000000, 0x0, @loopback}, 0x1c) 17:31:19 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x9ec43a45d4aaffb1) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:31:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:31:19 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x800000000000000, 0x0, @loopback}, 0x1c) 17:31:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:31:19 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2474.390339][T23188] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2474.441290][T23176] overlayfs: missing 'lowerdir' 17:31:19 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x900000000000000, 0x0, @loopback}, 0x1c) 17:31:19 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2474.596056][T23188] overlayfs: missing 'lowerdir' 17:31:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000a40)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}, {{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0x168) 17:31:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) fsetxattr$security_smack_entry(r1, &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000200)='\x00', 0x1, 0x1) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:31:23 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) 17:31:23 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:23 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xa00000000000000, 0x0, @loopback}, 0x1c) 17:31:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 17:31:23 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0xe00000000000000, 0x0, @loopback}, 0x1c) 17:31:23 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) [ 2478.135569][T23221] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2478.185280][T23212] overlayfs: missing 'lowerdir' 17:31:23 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x1802000000000000, 0x0, @loopback}, 0x1c) 17:31:23 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:23 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1, 0x2) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000100)=""/210, 0xd2, &(0x7f0000000200)=""/142, 0x0, 0x3}}, 0x68) close(r0) [ 2478.287553][T23230] overlayfs: missing 'lowerdir' [ 2478.296787][T23229] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 2478.323011][T23212] overlayfs: filesystem on './file0' not supported as upperdir [ 2478.828343][ C0] net_ratelimit: 24 callbacks suppressed [ 2478.828352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2478.828385][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2478.834115][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2478.839875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2478.845591][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2478.851273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2478.856984][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2478.908340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2478.914172][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2478.920058][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:31:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 17:31:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x2000000000000000, 0x0, @loopback}, 0x1c) 17:31:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c6530e9916f7765726469723d2e2f146e1bae1bd9c407726b6469723d2e2f66696c65315c00"]) 17:31:27 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) close(r0) 17:31:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2482.514139][T23254] overlayfs: missing 'lowerdir' 17:31:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x2328aebf00000000, 0x0, @loopback}, 0x1c) 17:31:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}]}, 0xb0) [ 2482.540353][T23254] overlayfs: missing 'lowerdir' 17:31:27 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x9, &(0x7f0000001700)=[{&(0x7f0000000140)="b9b01a88e4424eb374be8f3ab43e2c6c13fc1bbcafb94c9e0c778d67019844f7134201f9a0eaeb8d6b318c39e90bbbf33263386aa714504767e68c35921863a14108c2f81c4bf390c86627a4a4624a426cc8d2777476487e92a9b8119795c501cd6065306a2dac7523b0d883f5cc0379a1ce5690c469838952b3ac0335e4ded5c3a877bd2a90c68f9ea59d698249ed95dc36", 0x92, 0x539e}, {&(0x7f0000000200)="41ce0d52b111a0034deef3fa729b290dc41e272d0ee3ef32b438f3fc8f638d7f0d798061b67505aef32dcccf137f5c1f49c4e6cba7fe8c3d4c3592f8a95988bb8ca234598114be40a890f33a2a6a7b70af77215696a41b0f10fe778e7bf41d1d3ffc3a964d35bf2e647a868e1d7ae8ecdb7da11afe1c35a2b12a46f4d4fe367d792b7b077db579d1698a5e23603e03f30b92bd515b4fa1a6a822790fe9a02863692b37dfe4910aef5c39d0e432e1cba4d387983627ef454b363fb10c87d8654c74247c1442adea8bcf910461764fa2d444e4", 0xd2, 0x10000}, {&(0x7f0000000300)="e6619d4e5b58dcf74f2088fc9c3b661c4faa25c6449d913e9ca30e36c95f69f25a26f5ce2f964617b742a1efcb9a92b2b64bc1a76e0bd9213e17a015e8644e8c954ccb903e29a68f7b68618845ec386150688a50423c57d985c2709f4ec15cbb10e20d17ae1b47e8eacb64a014", 0x6d, 0xff80000000000000}, {&(0x7f0000000700)="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", 0x1000, 0x4}, {&(0x7f0000000380)="bd7a0d8694f54e029670bdac77dc6aba03b2b58bcf23280013fd82eabd11d618a51d166e177a7969bf2a738bb289a1529d8aab6cad988e428429d6bec433894e6c9861aeaf4419e5b0f80e2d98a2108b2a9df00f9344cff3d703efa8351c777f28a48c67e2003ed38fc275fba82c552772dd6f4ef66c477f3df84ad282", 0x7d, 0x9}, {&(0x7f0000000400)="239584335fbe09653982f134a873853e608ad0dfbcbebd4ef72c5ba9e2532d9e8a793b06027bb1cf", 0x28}, {&(0x7f0000000440)="7484672ef01b79af8f94a4c7", 0xc, 0x9}, {&(0x7f0000000480)="697c57a68ef5bc6f09a7f38ab4a3df8f5719b13111a56fed1a7712515b3e302c5cb9dfdea8d12a13e7f29a054db85fd28224b5b65b5edcf4912b232481e80ad1e6adf8de509a47bd5fb9f5fbf9ad9a45471120b4ae85d971d7c411b8a48d472bd087fe4dd264e816cab123b8bc8964a09ef3b9d6169e8fc377c415b5ac85", 0x7e, 0x7fffffff}, {&(0x7f0000000500)="5b81e4cdb629aaaae4c46d4c250105ffd103cd71e001fdbe4216aa0e8ebd4d43f60eaf41fb3c9b2da6bdebecbe3a252f31afa82a5d911ba776d6ca43fcc965d28ec138c18b54046704c79702f8193b1b29f1457104426d5316b63a08397f6e210e9568d4e6133e8e24e79ad760a923942dc9e38351adb0a1c33d9e2490ad0bf13287ba224d23a8784922bf07c7c7bdec155d2d342f52406778fb9b80e97e8f22465032d284728d1ae6ec601699b8d78dfc036ba29589a8ad603ea5c9d1984512d2c13350f09597cfb193b77616554f74fe8864", 0xd3, 0x6}], 0x100000, 0x0) close(r0) [ 2482.665936][T23257] overlayfs: missing 'lowerdir' 17:31:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}]}, 0xb0) 17:31:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2485.068336][ C1] net_ratelimit: 23 callbacks suppressed [ 2485.068345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2485.068381][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2485.074064][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2485.079892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2485.085640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2485.091669][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2485.097375][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2485.148328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2485.154132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2485.160070][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:31:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:32 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x4000000000000) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:31:32 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x3f00000000000000, 0x0, @loopback}, 0x1c) 17:31:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0xffffffff, 0x7, 0x0, '{wlan1\x8c'}}]}, 0xb0) 17:31:32 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:32 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000003c0)=""/90) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000100)=0x2, 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x78500, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140), 0x4) openat$cgroup(r4, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000380)={r5, 0x3, 0x5, 0x2cba80000000, 0x80, 0x100, 0x6}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000240)={0xb93, 0x80000000, 0x10001}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x13, 0x7, 0x9, 0x7ff, 0x2, 0x1, 0x7}, 0x2c) 17:31:32 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0xc8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0xc8) 17:31:32 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4000000000000000, 0x0, @loopback}, 0x1c) [ 2487.196359][T23292] overlayfs: missing 'lowerdir' [ 2487.210474][T23290] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:31:32 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x4002000000000000, 0x0, @loopback}, 0x1c) 17:31:32 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:32 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x1, 0x100) bind$rose(r1, &(0x7f0000000380)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) write$vnet(r1, &(0x7f0000000300)={0x1, {&(0x7f00000001c0)=""/50, 0x32, &(0x7f0000000200)=""/226, 0x0, 0x3}}, 0x68) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000240)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000000)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000380)="0f0766b818008ed80f20e035000040000f22e00faea66647000066ba2000b801000000efc4c13565d4b805000000b9f4ce05c80f01d9670f01750c66b8e3000f00d8c4c2e99626", 0x47}], 0x1, 0x40000, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x202000) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) r7 = accept$alg(r2, 0x0, 0x0) r8 = dup2(r1, r6) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000000c0)={0x1, 0x4}, 0x2) write$binfmt_script(r7, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffd9e}}], 0x1, 0x40000060, 0x0) socket$key(0xf, 0x3, 0x2) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x48802, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000003c0)=0x6) connect$unix(r9, &(0x7f0000000100)=@file={0x1}, 0x6e) close(r0) [ 2487.384859][T23292] overlayfs: missing 'lowerdir' [ 2491.308334][ C0] net_ratelimit: 23 callbacks suppressed [ 2491.308343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2491.308376][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2491.314066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2491.319873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2491.325595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2491.331285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2491.336988][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2491.388399][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2491.394249][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2491.400200][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:31:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 17:31:36 executing program 4 (fault-call:11 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0xc8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0xc8) 17:31:36 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x5000000000000000, 0x0, @loopback}, 0x1c) 17:31:36 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10040) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x80000001, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x4000000) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) sendto$unix(r1, &(0x7f0000000400)="932e0d57dbffad2da1c60a6b96430141b102bdc9d4e75d1deac33ac5be733e12bc1cdf3bcaff315e2adb81b598e6a7b1e7fa16fc71b489504ac5b885669fe42f7f37a9db7e7b212dcee1dc3b8229943c488482743f96eeb248bc96e3194f6673f7aea6e3f9a7370a9a2e", 0x6a, 0x40, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() clock_gettime(0x0, &(0x7f0000000700)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 17:31:36 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:36 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x10000, 0x0) [ 2491.836275][T23315] FAULT_INJECTION: forcing a failure. [ 2491.836275][T23315] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.897854][T23315] CPU: 0 PID: 23315 Comm: syz-executor.4 Not tainted 5.1.0-rc2 #36 [ 2491.905790][T23315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.915847][T23315] Call Trace: [ 2491.919154][T23315] dump_stack+0x172/0x1f0 [ 2491.923502][T23315] should_fail.cold+0xa/0x15 [ 2491.928112][T23315] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2491.933943][T23315] ? ___might_sleep+0x163/0x280 [ 2491.938812][T23315] __should_failslab+0x121/0x190 [ 2491.943762][T23315] should_failslab+0x9/0x14 [ 2491.948274][T23315] __kmalloc+0x2dc/0x740 [ 2491.952526][T23315] ? mutex_trylock+0x18e/0x1e0 [ 2491.957292][T23315] ? tty_write_lock+0x23/0x90 [ 2491.961981][T23315] ? tty_write+0x545/0x7a0 [ 2491.964217][T23328] overlayfs: missing 'lowerdir' [ 2491.966407][T23315] tty_write+0x545/0x7a0 [ 2491.975484][T23315] ? apparmor_file_permission+0x25/0x30 [ 2491.981042][T23315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2491.987289][T23315] ? process_echoes+0x170/0x170 [ 2491.992154][T23315] __vfs_write+0x8d/0x110 [ 2491.993200][T23328] overlayfs: failed to resolve './file1': -2 [ 2491.996483][T23315] ? tty_read+0x2a0/0x2a0 [ 2491.996504][T23315] vfs_write+0x20c/0x580 [ 2491.996527][T23315] ksys_write+0xea/0x1f0 [ 2491.996550][T23315] ? __ia32_sys_read+0xb0/0xb0 [ 2492.020061][T23315] ? do_syscall_64+0x26/0x610 [ 2492.024741][T23315] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.030815][T23315] ? do_syscall_64+0x26/0x610 [ 2492.035534][T23315] __x64_sys_write+0x73/0xb0 [ 2492.040137][T23315] do_syscall_64+0x103/0x610 17:31:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x8dffffff00000000, 0x0, @loopback}, 0x1c) [ 2492.044739][T23315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.050636][T23315] RIP: 0033:0x458209 [ 2492.054536][T23315] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2492.075143][T23315] RSP: 002b:00007f32c3b4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2492.075160][T23315] RAX: ffffffffffffffda RBX: 00007f32c3b4dc90 RCX: 0000000000458209 17:31:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000340)={0xa, 0x91ffffff00000000, 0x0, @loopback}, 0x1c) [ 2492.075169][T23315] RDX: 00000000000000c8 RSI: 0000000020000a40 RDI: 0000000000000003 [ 2492.075178][T23315] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2492.075187][T23315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32c3b4e6d4 [ 2492.075195][T23315] R13: 00000000004c7042 R14: 00000000004dc928 R15: 0000000000000008 [ 2492.120652][T23327] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 17:31:37 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4888}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 17:31:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20000101000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}]}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x3, 0x400002) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) close(r0) 17:31:37 executing program 4 (fault-call:11 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000200)="6e4cf44f00b0bda8a04b8e9f116227ec09df715153407a9f449b19b83fc9df120d", 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r3, 0x540a, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a40)={0xc8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x1d, 0x0, 'vmnet1)vboxnet0user\x98\xb2eth0GPL{'}}]}, 0xc8) [ 2492.361274][T23327] overlayfs: failed to resolve './file1': -2 [ 2492.452375][T23347] FAULT_INJECTION: forcing a failure. [ 2492.452375][T23347] name failslab, interval 1, probability 0, space 0, times 0 [ 2492.467530][T23347] CPU: 1 PID: 23347 Comm: syz-executor.4 Not tainted 5.1.0-rc2 #36 [ 2492.469237][ T3876] ------------[ cut here ]------------ [ 2492.475422][T23347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2492.475427][T23347] Call Trace: [ 2492.475447][T23347] dump_stack+0x172/0x1f0 [ 2492.475470][T23347] should_fail.cold+0xa/0x15 [ 2492.475503][T23347] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2492.481187][ T3876] IRQs not enabled as expected [ 2492.490998][T23347] ? __lock_acquire+0x548/0x3fb0 [ 2492.491018][T23347] __should_failslab+0x121/0x190 [ 2492.491036][T23347] should_failslab+0x9/0x14 [ 2492.491050][T23347] __kmalloc+0x71/0x740 [ 2492.491070][T23347] ? mark_held_locks+0xf0/0xf0 [ 2492.495177][ T3876] WARNING: CPU: 0 PID: 3876 at fs/eventpoll.c:683 ep_scan_ready_list+0x826/0xb20 [ 2492.498665][T23347] ? perf_trace_lock+0x510/0x510 [ 2492.503233][ T3876] Kernel panic - not syncing: panic_on_warn set ... [ 2492.509028][T23347] ? mark_held_locks+0xf0/0xf0 [ 2492.562293][T23347] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 2492.568113][T23347] __tty_buffer_request_room+0x1fb/0x5c0 [ 2492.573761][T23347] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 2492.580008][T23347] pty_write+0x133/0x200 [ 2492.584337][T23347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2492.590584][T23347] tty_put_char+0x137/0x160 [ 2492.595088][T23347] ? dev_match_devt+0x90/0x90 [ 2492.599764][T23347] ? mutex_trylock+0x1e0/0x1e0 [ 2492.604528][T23347] ? kasan_check_read+0x11/0x20 [ 2492.609381][T23347] do_output_char+0x15c/0x880 [ 2492.614062][T23347] __process_echoes+0x3cd/0xa40 [ 2492.618915][T23347] ? lock_acquire+0x16f/0x3f0 [ 2492.623607][T23347] process_echoes+0xfc/0x170 [ 2492.628198][T23347] n_tty_write+0x1b3/0x1150 [ 2492.632703][T23347] ? find_held_lock+0x35/0x130 [ 2492.637470][T23347] ? __might_fault+0x12b/0x1e0 [ 2492.642239][T23347] ? lock_downgrade+0x880/0x880 [ 2492.647090][T23347] ? process_echoes+0x170/0x170 [ 2492.651947][T23347] ? do_wait_intr_irq+0x2b0/0x2b0 [ 2492.656970][T23347] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2492.663207][T23347] ? _copy_from_user+0xdd/0x150 [ 2492.668056][T23347] tty_write+0x45b/0x7a0 [ 2492.672305][T23347] ? process_echoes+0x170/0x170 [ 2492.677160][T23347] __vfs_write+0x8d/0x110 [ 2492.681485][T23347] ? tty_read+0x2a0/0x2a0 [ 2492.685816][T23347] vfs_write+0x20c/0x580 [ 2492.690059][T23347] ksys_write+0xea/0x1f0 [ 2492.694301][T23347] ? __ia32_sys_read+0xb0/0xb0 [ 2492.699080][T23347] ? do_syscall_64+0x26/0x610 [ 2492.703759][T23347] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.709821][T23347] ? do_syscall_64+0x26/0x610 [ 2492.714503][T23347] __x64_sys_write+0x73/0xb0 [ 2492.719095][T23347] do_syscall_64+0x103/0x610 [ 2492.723683][T23347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.729563][T23347] RIP: 0033:0x458209 [ 2492.733801][T23347] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2492.753402][T23347] RSP: 002b:00007f32c3b4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2492.764505][T23347] RAX: ffffffffffffffda RBX: 00007f32c3b4dc90 RCX: 0000000000458209 [ 2492.772477][T23347] RDX: 00000000000000c8 RSI: 0000000020000a40 RDI: 0000000000000003 [ 2492.780445][T23347] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2492.788415][T23347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32c3b4e6d4 [ 2492.796388][T23347] R13: 00000000004c7042 R14: 00000000004dc928 R15: 0000000000000008 [ 2492.804382][ T3876] CPU: 0 PID: 3876 Comm: udevd Not tainted 5.1.0-rc2 #36 [ 2492.804385][ C1] [ 2492.804398][ C1] ====================================================== [ 2492.804403][ C1] WARNING: possible circular locking dependency detected [ 2492.804406][ C1] 5.1.0-rc2 #36 Not tainted [ 2492.804410][ C1] ------------------------------------------------------ [ 2492.804414][ C1] syz-executor.4/23347 is trying to acquire lock: [ 2492.804417][ C1] 000000000effc1e6 (console_owner){-.-.}, at: console_unlock+0x3fc/0xeb0 [ 2492.804430][ C1] [ 2492.804434][ C1] but task is already holding lock: [ 2492.804437][ C1] 00000000bcea3b0c (&(&port->lock)->rlock){-.-.}, at: pty_write+0xff/0x200 [ 2492.804457][ C1] [ 2492.804461][ C1] which lock already depends on the new lock. [ 2492.804464][ C1] [ 2492.804466][ C1] [ 2492.804471][ C1] the existing dependency chain (in reverse order) is: [ 2492.804473][ C1] [ 2492.804476][ C1] -> #2 (&(&port->lock)->rlock){-.-.}: [ 2492.804489][ C1] lock_acquire+0x16f/0x3f0 [ 2492.804493][ C1] _raw_spin_lock_irqsave+0x95/0xcd [ 2492.804497][ C1] tty_port_tty_get+0x22/0x80 [ 2492.804501][ C1] tty_port_default_wakeup+0x16/0x40 [ 2492.804505][ C1] tty_port_tty_wakeup+0x5d/0x70 [ 2492.804509][ C1] uart_write_wakeup+0x46/0x70 [ 2492.804513][ C1] serial8250_tx_chars+0x4a4/0xb20 [ 2492.804518][ C1] serial8250_handle_irq.part.0+0x1be/0x2e0 [ 2492.804522][ C1] serial8250_default_handle_irq+0xc5/0x150 [ 2492.804526][ C1] serial8250_interrupt+0xfb/0x1a0 [ 2492.804530][ C1] __handle_irq_event_percpu+0x146/0x900 [ 2492.804535][ C1] handle_irq_event_percpu+0x74/0x160 [ 2492.804538][ C1] handle_irq_event+0xa7/0x134 [ 2492.804542][ C1] handle_edge_irq+0x264/0x8e0 [ 2492.804546][ C1] handle_irq+0x252/0x3d8 [ 2492.804549][ C1] do_IRQ+0x99/0x1d0 [ 2492.804553][ C1] ret_from_intr+0x0/0x1e [ 2492.804557][ C1] native_safe_halt+0x2/0x10 [ 2492.804560][ C1] arch_cpu_idle+0x10/0x20 [ 2492.804564][ C1] default_idle_call+0x36/0x90 [ 2492.804568][ C1] do_idle+0x386/0x570 [ 2492.804572][ C1] cpu_startup_entry+0x1b/0x20 [ 2492.804576][ C1] start_secondary+0x360/0x4d0 [ 2492.804580][ C1] secondary_startup_64+0xa4/0xb0 [ 2492.804582][ C1] [ 2492.804584][ C1] -> #1 (&port_lock_key){-.-.}: [ 2492.804597][ C1] lock_acquire+0x16f/0x3f0 [ 2492.804601][ C1] _raw_spin_lock_irqsave+0x95/0xcd [ 2492.804606][ C1] serial8250_console_write+0x253/0x9c0 [ 2492.804610][ C1] univ8250_console_write+0x5f/0x70 [ 2492.804613][ C1] console_unlock+0xb1e/0xeb0 [ 2492.804617][ C1] vprintk_emit+0x280/0x6d0 [ 2492.804621][ C1] vprintk_default+0x28/0x30 [ 2492.804624][ C1] vprintk_func+0x7e/0x189 [ 2492.804628][ C1] printk+0xba/0xed [ 2492.804632][ C1] register_console+0x74d/0xb50 [ 2492.804636][ C1] univ8250_console_init+0x3e/0x4b [ 2492.804639][ C1] console_init+0x4f7/0x761 [ 2492.804643][ C1] start_kernel+0x574/0x84f [ 2492.804647][ C1] x86_64_start_reservations+0x29/0x2b [ 2492.804651][ C1] x86_64_start_kernel+0x77/0x7b [ 2492.804655][ C1] secondary_startup_64+0xa4/0xb0 [ 2492.804657][ C1] [ 2492.804659][ C1] -> #0 (console_owner){-.-.}: [ 2492.804673][ C1] __lock_acquire+0x239c/0x3fb0 [ 2492.804676][ C1] lock_acquire+0x16f/0x3f0 [ 2492.804680][ C1] console_unlock+0x466/0xeb0 [ 2492.804684][ C1] vprintk_emit+0x280/0x6d0 [ 2492.804688][ C1] vprintk_default+0x28/0x30 [ 2492.804691][ C1] vprintk_func+0x7e/0x189 [ 2492.804695][ C1] printk+0xba/0xed [ 2492.804698][ C1] should_fail+0x708/0x852 [ 2492.804702][ C1] __should_failslab+0x121/0x190 [ 2492.804706][ C1] should_failslab+0x9/0x14 [ 2492.804710][ C1] __kmalloc+0x71/0x740 [ 2492.804714][ C1] __tty_buffer_request_room+0x1fb/0x5c0 [ 2492.804718][ C1] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 2492.804722][ C1] pty_write+0x133/0x200 [ 2492.804726][ C1] tty_put_char+0x137/0x160 [ 2492.804730][ C1] do_output_char+0x15c/0x880 [ 2492.804734][ C1] __process_echoes+0x3cd/0xa40 [ 2492.804737][ C1] process_echoes+0xfc/0x170 [ 2492.804741][ C1] n_tty_write+0x1b3/0x1150 [ 2492.804745][ C1] tty_write+0x45b/0x7a0 [ 2492.804748][ C1] __vfs_write+0x8d/0x110 [ 2492.804752][ C1] vfs_write+0x20c/0x580 [ 2492.804755][ C1] ksys_write+0xea/0x1f0 [ 2492.804759][ C1] __x64_sys_write+0x73/0xb0 [ 2492.804763][ C1] do_syscall_64+0x103/0x610 [ 2492.804767][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.804770][ C1] [ 2492.804774][ C1] other info that might help us debug this: [ 2492.804776][ C1] [ 2492.804779][ C1] Chain exists of: [ 2492.804781][ C1] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 2492.804798][ C1] [ 2492.804802][ C1] Possible unsafe locking scenario: [ 2492.804804][ C1] [ 2492.804808][ C1] CPU0 CPU1 [ 2492.804812][ C1] ---- ---- [ 2492.804814][ C1] lock(&(&port->lock)->rlock); [ 2492.804823][ C1] lock(&port_lock_key); [ 2492.804832][ C1] lock(&(&port->lock)->rlock); [ 2492.804840][ C1] lock(console_owner); [ 2492.804847][ C1] [ 2492.804850][ C1] *** DEADLOCK *** [ 2492.804853][ C1] [ 2492.804857][ C1] 6 locks held by syz-executor.4/23347: [ 2492.804859][ C1] #0: 000000007aae6631 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2492.804875][ C1] #1: 00000000c97afe1e (&tty->atomic_write_lock){+.+.}, at: tty_write_lock+0x23/0x90 [ 2492.804891][ C1] #2: 000000007058af5a (&o_tty->termios_rwsem/1){++++}, at: n_tty_write+0x1ab/0x1150 [ 2492.804910][ C1] #3: 0000000015fbc25a (&ldata->output_lock){+.+.}, at: process_echoes+0xb6/0x170 [ 2492.804936][ C1] #4: 00000000bcea3b0c (&(&port->lock)->rlock){-.-.}, at: pty_write+0xff/0x200 [ 2492.804951][ C1] #5: 00000000c87cd362 (console_lock){+.+.}, at: vprintk_emit+0x267/0x6d0 [ 2492.804967][ C1] [ 2492.804970][ C1] stack backtrace: [ 2492.804975][ C1] CPU: 1 PID: 23347 Comm: syz-executor.4 Not tainted 5.1.0-rc2 #36 [ 2492.804981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2492.804984][ C1] Call Trace: [ 2492.804987][ C1] dump_stack+0x172/0x1f0 [ 2492.804992][ C1] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 2492.804996][ C1] check_prev_add.constprop.0+0xf11/0x23c0 [ 2492.804999][ C1] ? check_usage+0x570/0x570 [ 2492.805002][ C1] ? graph_lock+0x7b/0x200 [ 2492.805006][ C1] ? __lockdep_reset_lock+0x450/0x450 [ 2492.805011][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2492.805014][ C1] ? find_first_zero_bit+0x9a/0xc0 [ 2492.805019][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2492.805022][ C1] __lock_acquire+0x239c/0x3fb0 [ 2492.805027][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2492.805032][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2492.805035][ C1] ? mark_held_locks+0xf0/0xf0 [ 2492.805039][ C1] ? kasan_check_write+0x14/0x20 [ 2492.805042][ C1] lock_acquire+0x16f/0x3f0 [ 2492.805046][ C1] ? console_unlock+0x3fc/0xeb0 [ 2492.805049][ C1] console_unlock+0x466/0xeb0 [ 2492.805053][ C1] ? console_unlock+0x3fc/0xeb0 [ 2492.805056][ C1] vprintk_emit+0x280/0x6d0 [ 2492.805060][ C1] vprintk_default+0x28/0x30 [ 2492.805063][ C1] vprintk_func+0x7e/0x189 [ 2492.805066][ C1] printk+0xba/0xed [ 2492.805070][ C1] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 2492.805074][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2492.805077][ C1] ? ___ratelimit+0x60/0x595 [ 2492.805081][ C1] should_fail+0x708/0x852 [ 2492.805085][ C1] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2492.805089][ C1] ? __lock_acquire+0x548/0x3fb0 [ 2492.805093][ C1] __should_failslab+0x121/0x190 [ 2492.805096][ C1] should_failslab+0x9/0x14 [ 2492.805099][ C1] __kmalloc+0x71/0x740 [ 2492.805103][ C1] ? mark_held_locks+0xf0/0xf0 [ 2492.805107][ C1] ? perf_trace_lock+0x510/0x510 [ 2492.805110][ C1] ? mark_held_locks+0xf0/0xf0 [ 2492.805115][ C1] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 2492.805119][ C1] __tty_buffer_request_room+0x1fb/0x5c0 [ 2492.805123][ C1] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 2492.805127][ C1] pty_write+0x133/0x200 [ 2492.805131][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2492.805134][ C1] tty_put_char+0x137/0x160 [ 2492.805138][ C1] ? dev_match_devt+0x90/0x90 [ 2492.805142][ C1] ? mutex_trylock+0x1e0/0x1e0 [ 2492.805145][ C1] ? kasan_check_read+0x11/0x20 [ 2492.805148][ C1] do_output_char+0x15c/0x880 [ 2492.805152][ C1] __process_echoes+0x3cd/0xa40 [ 2492.805156][ C1] ? lock_acquire+0x16f/0x3f0 [ 2492.805159][ C1] process_echoes+0xfc/0x170 [ 2492.805163][ C1] n_tty_write+0x1b3/0x1150 [ 2492.805166][ C1] ? find_held_lock+0x35/0x130 [ 2492.805170][ C1] ? __might_fault+0x12b/0x1e0 [ 2492.805173][ C1] ? lock_downgrade+0x880/0x880 [ 2492.805177][ C1] ? process_echoes+0x170/0x170 [ 2492.805181][ C1] ? do_wait_intr_irq+0x2b0/0x2b0 [ 2492.805185][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2492.805189][ C1] ? _copy_from_user+0xdd/0x150 [ 2492.805192][ C1] tty_write+0x45b/0x7a0 [ 2492.805196][ C1] ? process_echoes+0x170/0x170 [ 2492.805199][ C1] __vfs_write+0x8d/0x110 [ 2492.805202][ C1] ? tty_read+0x2a0/0x2a0 [ 2492.805205][ C1] vfs_write+0x20c/0x580 [ 2492.805209][ C1] ksys_write+0xea/0x1f0 [ 2492.805212][ C1] ? __ia32_sys_read+0xb0/0xb0 [ 2492.805216][ C1] ? do_syscall_64+0x26/0x610 [ 2492.805220][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.805224][ C1] ? do_syscall_64+0x26/0x610 [ 2492.805227][ C1] __x64_sys_write+0x73/0xb0 [ 2492.805231][ C1] do_syscall_64+0x103/0x610 [ 2492.805235][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.805238][ C1] RIP: 0033:0x458209 [ 2492.805249][ C1] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2492.805253][ C1] RSP: 002b:00007f32c3b4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2492.805262][ C1] RAX: ffffffffffffffda RBX: 00007f32c3b4dc90 RCX: 0000000000458209 [ 2492.805268][ C1] RDX: 00000000000000c8 RSI: 0000000020000a40 RDI: 0000000000000003 [ 2492.805273][ C1] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2492.805278][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32c3b4e6d4 [ 2492.805283][ C1] R13: 00000000004c7042 R14: 00000000004dc928 R15: 0000000000000008 [ 2493.841319][ T3876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2493.851363][ T3876] Call Trace: [ 2493.854666][ T3876] dump_stack+0x172/0x1f0 [ 2493.859084][ T3876] ? ep_scan_ready_list+0x750/0xb20 [ 2493.864282][ T3876] panic+0x2cb/0x65c [ 2493.868178][ T3876] ? __warn_printk+0xf3/0xf3 [ 2493.872771][ T3876] ? ep_scan_ready_list+0x826/0xb20 [ 2493.877976][ T3876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2493.884214][ T3876] ? __warn.cold+0x5/0x45 [ 2493.888539][ T3876] ? __warn+0xe8/0x1d0 [ 2493.892606][ T3876] ? ep_scan_ready_list+0x826/0xb20 [ 2493.897797][ T3876] __warn.cold+0x20/0x45 [ 2493.902037][ T3876] ? ep_scan_ready_list+0x826/0xb20 [ 2493.907236][ T3876] report_bug+0x263/0x2b0 [ 2493.911567][ T3876] do_error_trap+0x11b/0x200 [ 2493.916152][ T3876] do_invalid_op+0x37/0x50 [ 2493.920565][ T3876] ? ep_scan_ready_list+0x826/0xb20 [ 2493.925860][ T3876] invalid_op+0x14/0x20 [ 2493.930099][ T3876] RIP: 0010:ep_scan_ready_list+0x826/0xb20 [ 2493.935897][ T3876] Code: ff 44 89 fe e8 0b 13 ac ff 45 84 ff 0f 85 14 f9 ff ff e8 bd 11 ac ff 48 c7 c7 c0 07 76 87 c6 05 63 1d 96 07 01 e8 68 c0 7e ff <0f> 0b e9 f5 f8 ff ff e8 9e 11 ac ff 48 8d 7b 50 48 89 f8 48 c1 e8 [ 2493.955504][ T3876] RSP: 0018:ffff88809857fc08 EFLAGS: 00010286 [ 2493.961567][ T3876] RAX: 0000000000000000 RBX: ffffffff81c4aa40 RCX: 0000000000000000 [ 2493.969534][ T3876] RDX: 0000000000000000 RSI: ffffffff815ae3f6 RDI: ffffed10130aff73 [ 2493.977499][ T3876] RBP: ffff88809857fcd0 R08: ffff888098572500 R09: ffffed1015d05011 [ 2493.985465][ T3876] R10: ffffed1015d05010 R11: ffff8880ae828087 R12: ffff88809849c080 [ 2493.993429][ T3876] R13: ffff88809857fdc0 R14: 0000000000000000 R15: 0000000000000000 [ 2494.001409][ T3876] ? ep_insert+0x1720/0x1720 [ 2494.006002][ T3876] ? vprintk_func+0x86/0x189 [ 2494.010592][ T3876] ? ep_scan_ready_list+0x826/0xb20 [ 2494.015789][ T3876] ? compat_get_fd_set+0x80/0x80 [ 2494.020727][ T3876] ? ep_unregister_pollwait.isra.0+0x3d0/0x3d0 [ 2494.026872][ T3876] ep_poll+0x1f9/0xe50 [ 2494.030919][ T3876] ? _raw_spin_unlock_irq+0x28/0x90 [ 2494.036104][ T3876] ? finish_task_switch+0x146/0x780 [ 2494.041348][ T3876] ? _raw_spin_unlock_irq+0x28/0x90 [ 2494.046523][ T3876] ? ep_modify+0x8e0/0x8e0 [ 2494.050920][ T3876] ? kasan_check_write+0x14/0x20 [ 2494.055842][ T3876] ? finish_task_switch+0x1f0/0x780 [ 2494.061015][ T3876] ? __switch_to_asm+0x34/0x70 [ 2494.065759][ T3876] ? __schedule+0x81f/0x1cc0 [ 2494.070332][ T3876] ? task_work_run+0x118/0x1c0 [ 2494.075066][ T3876] ? _raw_spin_unlock_irq+0x28/0x90 [ 2494.080240][ T3876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2494.086455][ T3876] ? __fget_light+0x1a9/0x230 [ 2494.091114][ T3876] do_epoll_wait+0x1b3/0x200 [ 2494.095679][ T3876] __x64_sys_epoll_wait+0x97/0xf0 [ 2494.100682][ T3876] do_syscall_64+0x103/0x610 [ 2494.105253][ T3876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2494.111121][ T3876] RIP: 0033:0x7f2110ee4943 [ 2494.115510][ T3876] Code: 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 83 3d b5 dc 2a 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 3b c4 00 00 48 89 04 24 [ 2494.135102][ T3876] RSP: 002b:00007ffda5e7d3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 2494.143488][ T3876] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f2110ee4943 [ 2494.151433][ T3876] RDX: 0000000000000008 RSI: 00007ffda5e7d4e0 RDI: 000000000000000a [ 2494.159387][ T3876] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 2494.167334][ T3876] R10: 0000000000000bb8 R11: 0000000000000246 R12: 0000000000000003 [ 2494.175280][ T3876] R13: 0000000000000000 R14: 00000000015ec860 R15: 00000000015dc250 [ 2494.184039][ T3876] Kernel Offset: disabled [ 2494.188362][ T3876] Rebooting in 86400 seconds..