000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6)
syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x119200)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, r6)

02:19:06 executing program 3:
semctl$SETVAL(0xffffffffffffffff, 0x4, 0x10, &(0x7f0000000140)=0xffffffff)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x137c, 0xfff, 0x8, 0x7ff}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x24008000)
semctl$SETVAL(0xffffffffffffffff, 0x4, 0x10, &(0x7f0000000140)=0xffffffff) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x137c, 0xfff, 0x8, 0x7ff}, 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x24008000) (async)

02:19:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000080))

02:19:06 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x32c}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x130, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x79}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040001}, 0x8810)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}}, 0x90)

02:19:06 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6)
syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x119200)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, r6)

02:19:06 executing program 3:
semctl$SETVAL(0xffffffffffffffff, 0x4, 0x10, &(0x7f0000000140)=0xffffffff) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x137c, 0xfff, 0x8, 0x7ff}, 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x24008000)

02:19:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000080))

02:19:06 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000))
io_uring_setup(0x55aa, &(0x7f0000000080)={0x0, 0x9307, 0x20, 0x1, 0x80, 0x0, r0})
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x2b22db3}}, './file0\x00'})
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:06 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6)
syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x119200)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, r6)

02:19:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r0, 0x679})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x87fe5e7b0ac034c, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:06 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = epoll_create1(0x80000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'})
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
write$tcp_mem(r4, &(0x7f00000001c0)={0x2c7d, 0x20, 0x1, 0x20, 0xff}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0xffffffffffffff38, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e21, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, r5}}, 0x91)

02:19:06 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = epoll_create1(0x80000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'})
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
write$tcp_mem(r4, &(0x7f00000001c0)={0x2c7d, 0x20, 0x1, 0x20, 0xff}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0xffffffffffffff38, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e21, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, r5}}, 0x91)

02:19:06 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x220800)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000100000000172e2f66696c6530007f8994645627a0cf51eebc309ade6fd70026ffff62d3585b84cd86ec99363b8ca7d0d55a941f4038045768cfb48cf8d9611d1a8fa0cc5634d911e152b32e5279763bc592f4da4128041a92cd0a14d112ce38a74de9ccb52b022b7c25a39d8490"])

02:19:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x87fe5e7b0ac034c, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r0, 0x679})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:06 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x220800)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000100000000172e2f66696c6530007f8994645627a0cf51eebc309ade6fd70026ffff62d3585b84cd86ec99363b8ca7d0d55a941f4038045768cfb48cf8d9611d1a8fa0cc5634d911e152b32e5279763bc592f4da4128041a92cd0a14d112ce38a74de9ccb52b022b7c25a39d8490"])

02:19:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x87fe5e7b0ac034c, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000040)={0x6, 0x3, "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"})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r2)

[  954.421144][   T25] audit: type=1326 audit(1656037146.137:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19576 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:06 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) (async, rerun: 32)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1}}, 0x18) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async, rerun: 64)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)) (async, rerun: 64)
io_uring_setup(0x55aa, &(0x7f0000000080)={0x0, 0x9307, 0x20, 0x1, 0x80, 0x0, r0})
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x80) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x2b22db3}}, './file0\x00'}) (async)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r0, 0x679})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000040)={0x6, 0x3, "0926d2d29a336f9964c8ff6f644d4a95ccb95b99668227aea8fd50eba9686db923b48c042e98c9a785016ed1cbfc2a659f74b0eeb713e87ebac5d7f0c0a490d274d85fdfec4d149120c36916cd60960db02a498abb66c9aa5c3f705cdda6d74ca9000059abb49eb8f6ce39ef619618f19dabc3a25363c9c4e77023b7aa429db4154a4f8cba365928e6efa6da5c566853d078fcb327d16fed9feb794c1faf42412ef82918a7014c8633cf565de8ed10152310215e89af16f750f12370872a8df9a71b1d491866922e3de2221eacb4ba3e69837caeb0dc4194fd775ba444142b8c8d3c950ab32a02dd1a4bcddcb2b8735ee0f9240c0e28de7a2dcaed464968d03a"})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000040)={0x6, 0x3, "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"}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r2) (async)

02:19:06 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = epoll_create1(0x80000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'})
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
write$tcp_mem(r4, &(0x7f00000001c0)={0x2c7d, 0x20, 0x1, 0x20, 0xff}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0xffffffffffffff38, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e21, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, r5}}, 0x91)

02:19:06 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x220800)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000100000000172e2f66696c6530007f8994645627a0cf51eebc309ade6fd70026ffff62d3585b84cd86ec99363b8ca7d0d55a941f4038045768cfb48cf8d9611d1a8fa0cc5634d911e152b32e5279763bc592f4da4128041a92cd0a14d112ce38a74de9ccb52b022b7c25a39d8490"])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x220800) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000100000000172e2f66696c6530007f8994645627a0cf51eebc309ade6fd70026ffff62d3585b84cd86ec99363b8ca7d0d55a941f4038045768cfb48cf8d9611d1a8fa0cc5634d911e152b32e5279763bc592f4da4128041a92cd0a14d112ce38a74de9ccb52b022b7c25a39d8490"]) (async)

02:19:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'})

02:19:06 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="00000000000000550c00000002000000"])
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000080)={0xf})
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)

02:19:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000040)={0x6, 0x3, "0926d2d29a336f9964c8ff6f644d4a95ccb95b99668227aea8fd50eba9686db923b48c042e98c9a785016ed1cbfc2a659f74b0eeb713e87ebac5d7f0c0a490d274d85fdfec4d149120c36916cd60960db02a498abb66c9aa5c3f705cdda6d74ca9000059abb49eb8f6ce39ef619618f19dabc3a25363c9c4e77023b7aa429db4154a4f8cba365928e6efa6da5c566853d078fcb327d16fed9feb794c1faf42412ef82918a7014c8633cf565de8ed10152310215e89af16f750f12370872a8df9a71b1d491866922e3de2221eacb4ba3e69837caeb0dc4194fd775ba444142b8c8d3c950ab32a02dd1a4bcddcb2b8735ee0f9240c0e28de7a2dcaed464968d03a"}) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r2) (rerun: 64)

02:19:07 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080))
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, r1)

02:19:07 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="00000000000000550c00000002000000"])
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000080)={0xf})
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)

02:19:07 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) (async)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1}}, 0x18) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)) (async)
io_uring_setup(0x55aa, &(0x7f0000000080)={0x0, 0x9307, 0x20, 0x1, 0x80, 0x0, r0}) (async)
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x80) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x2b22db3}}, './file0\x00'}) (async)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
prctl$PR_SET_THP_DISABLE(0x29, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:07 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'}) (async, rerun: 64)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080))
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, r1)

02:19:07 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
socketpair(0xa, 0x3, 0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:07 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="00000000000000550c00000002000000"])
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000080)={0xf})
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)

02:19:07 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'})

02:19:07 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x2000c001)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000180))

02:19:07 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'}) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080))
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, r1)

02:19:07 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000080)={0xf})

[  955.323342][   T25] audit: type=1326 audit(1656037147.037:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19652 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  955.351714][T19659] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:07 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

02:19:07 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x2000c001) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000180))

02:19:07 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

02:19:07 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000080)={0xf})

02:19:07 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x2000c001)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000180))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x2000c001) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000180)) (async)

02:19:07 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async)

[  955.357969][T18999] udevd[18999]: inotify_add_watch(7, /dev/loop12, 10) failed: No such file or directory
[  955.427751][T18999] udevd[18999]: inotify_add_watch(7, /dev/loop12, 10) failed: No such file or directory
02:19:07 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
socketpair(0xa, 0x3, 0x0, &(0x7f0000000040)) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:07 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

02:19:07 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:07 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000080)={0xf})

02:19:07 executing program 3:
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x2}, 0x18)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x23c9a4e835000da0, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0x116, 0xeb7, "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", 0x81, 0x1, 0x0, 0x1, 0x9, 0x5e, 0x7, 0x1}, r2}}, 0x128)

02:19:07 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:07 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
syz_io_uring_setup(0x6f4e, &(0x7f0000000040)={0x0, 0x8944, 0x8, 0x1, 0x3ad}, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

02:19:07 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)

02:19:07 executing program 3:
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x2}, 0x18)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x23c9a4e835000da0, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0x116, 0xeb7, "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", 0x81, 0x1, 0x0, 0x1, 0x9, 0x5e, 0x7, 0x1}, r2}}, 0x128)
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x2}, 0x18) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x23c9a4e835000da0, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0x116, 0xeb7, "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", 0x81, 0x1, 0x0, 0x1, 0x9, 0x5e, 0x7, 0x1}, r2}}, 0x128) (async)

02:19:07 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:07 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
syz_io_uring_setup(0x6f4e, &(0x7f0000000040)={0x0, 0x8944, 0x8, 0x1, 0x3ad}, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

02:19:07 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)

[  956.190077][   T25] audit: type=1326 audit(1656037147.907:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19697 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:08 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000040)) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r1=>0xee01, 0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)

02:19:08 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
syz_io_uring_setup(0x6f4e, &(0x7f0000000040)={0x0, 0x8944, 0x8, 0x1, 0x3ad}, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
syz_io_uring_setup(0x6f4e, &(0x7f0000000040)={0x0, 0x8944, 0x8, 0x1, 0x3ad}, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async)

02:19:08 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)

02:19:08 executing program 3:
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x2}, 0x18)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x23c9a4e835000da0, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0x116, 0xeb7, "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", 0x81, 0x1, 0x0, 0x1, 0x9, 0x5e, 0x7, 0x1}, r2}}, 0x128)

02:19:08 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)

02:19:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r1=>0xee01, 0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc) (async)

02:19:08 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)

02:19:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r1=>0xee01, 0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc) (async)

02:19:08 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'})

02:19:08 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x6, 0x0, 0x7}, {0x2, 0x1, 0x6, 0x1000}, {0xffff, 0x3, 0x3f}, {0x1, 0x7a, 0x2, 0xffffffff}, {0x7, 0x9, 0x1f, 0xc044}]})
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40080)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="e906000000040000000000006c653000"])
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, 0x0)

[  957.037567][   T25] audit: type=1326 audit(1656037148.747:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19728 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:08 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2c00, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0x200, 0x4)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:08 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x6, 0x0, 0x7}, {0x2, 0x1, 0x6, 0x1000}, {0xffff, 0x3, 0x3f}, {0x1, 0x7a, 0x2, 0xffffffff}, {0x7, 0x9, 0x1f, 0xc044}]})
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40080)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="e906000000040000000000006c653000"])
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x6, 0x0, 0x7}, {0x2, 0x1, 0x6, 0x1000}, {0xffff, 0x3, 0x3f}, {0x1, 0x7a, 0x2, 0xffffffff}, {0x7, 0x9, 0x1f, 0xc044}]}) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40080) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="e906000000040000000000006c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, 0x0) (async)

02:19:08 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'})

02:19:08 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:08 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x6, 0x0, 0x7}, {0x2, 0x1, 0x6, 0x1000}, {0xffff, 0x3, 0x3f}, {0x1, 0x7a, 0x2, 0xffffffff}, {0x7, 0x9, 0x1f, 0xc044}]})
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40080)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="e906000000040000000000006c653000"])
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x6, 0x0, 0x7}, {0x2, 0x1, 0x6, 0x1000}, {0xffff, 0x3, 0x3f}, {0x1, 0x7a, 0x2, 0xffffffff}, {0x7, 0x9, 0x1f, 0xc044}]}) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40080) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="e906000000040000000000006c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, 0x0) (async)

02:19:08 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2c00, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0x200, 0x4)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2c00, 0x0) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0x200, 0x4) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:08 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) (async)

[  957.119395][T19756] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:08 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x82, 0x25, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x7800, 0x8, 0x0, 0x4}})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501803, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40c4)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3543, 0x4, 0x3, 0x275, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
syz_io_uring_setup(0x7773, &(0x7f00000002c0)={0x0, 0x7b5a, 0x1, 0x2, 0x14f, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000340))
clock_gettime(0x4, &(0x7f00000003c0))
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)

02:19:08 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x0, &(0x7f0000000040)})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0/file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:08 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x4, 0x260180)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/vcs#\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

02:19:08 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2c00, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0x200, 0x4) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:08 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:08 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x82, 0x25, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x7800, 0x8, 0x0, 0x4}})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501803, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40c4)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3543, 0x4, 0x3, 0x275, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
syz_io_uring_setup(0x7773, &(0x7f00000002c0)={0x0, 0x7b5a, 0x1, 0x2, 0x14f, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000340))
clock_gettime(0x4, &(0x7f00000003c0))
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x82, 0x25, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x7800, 0x8, 0x0, 0x4}}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501803, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40c4) (async)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3543, 0x4, 0x3, 0x275, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x7773, &(0x7f00000002c0)={0x0, 0x7b5a, 0x1, 0x2, 0x14f, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000340)) (async)
clock_gettime(0x4, &(0x7f00000003c0)) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async)

02:19:08 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x0, &(0x7f0000000040)})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0/file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async, rerun: 64)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:08 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x4, 0x260180)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2) (async)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/vcs#\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

02:19:08 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:08 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)

02:19:08 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x4, 0x260180)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/vcs#\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

02:19:09 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x0, &(0x7f0000000040)})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0/file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x0, &(0x7f0000000040)}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0/file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:09 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)

02:19:09 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x82, 0x25, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x7800, 0x8, 0x0, 0x4}}) (rerun: 32)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501803, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40c4)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3543, 0x4, 0x3, 0x275, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
syz_io_uring_setup(0x7773, &(0x7f00000002c0)={0x0, 0x7b5a, 0x1, 0x2, 0x14f, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000340)) (async, rerun: 64)
clock_gettime(0x4, &(0x7f00000003c0)) (rerun: 64)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)

02:19:09 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

02:19:09 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})

02:19:09 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)

02:19:09 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

[  957.241937][T19807] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:09 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:09 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:09 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

02:19:09 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

[  957.324952][   T25] audit: type=1326 audit(1656037149.037:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:09 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:09 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:09 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

[  957.404607][T19874] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:09 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

02:19:09 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00'})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>r1, 0x6, 0x9, 0x20, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x10, 0x101, 0xb6c5}})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="03000000190d00009f90000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0400006001000000010000c0050300008ef84c2128f12eecccb2c7874e4b69be9da5fe3b629fed3df4f6b99b35fb8c4a5ce7c18b4b81b0177bdf3da812fd7289b775d342518441a76979f49d41b11f0e874c26c1968c1511b4396329ce3d8313"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8010)

02:19:09 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})

02:19:09 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:09 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x743582, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:09 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)

02:19:09 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>r1, 0x6, 0x9, 0x20, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x10, 0x101, 0xb6c5}})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="03000000190d00009f90000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0400006001000000010000c0050300008ef84c2128f12eecccb2c7874e4b69be9da5fe3b629fed3df4f6b99b35fb8c4a5ce7c18b4b81b0177bdf3da812fd7289b775d342518441a76979f49d41b11f0e874c26c1968c1511b4396329ce3d8313"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8010)

02:19:09 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x743582, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:09 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async, rerun: 64)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>r1, 0x6, 0x9, 0x20, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x10, 0x101, 0xb6c5}})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="03000000190d00009f90000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0400006001000000010000c0050300008ef84c2128f12eecccb2c7874e4b69be9da5fe3b629fed3df4f6b99b35fb8c4a5ce7c18b4b81b0177bdf3da812fd7289b775d342518441a76979f49d41b11f0e874c26c1968c1511b4396329ce3d8313"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8010)

02:19:09 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

02:19:09 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:09 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
getegid()

02:19:09 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x743582, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:09 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7f, 0x660080)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080)="7f54ab2171a6a3f4d5d7b34ebe7b9d97d037d90eeefdfd050a6d0fbc6908ddb3b0fcc4a158a892ec7ffb57fbac716a6aa92ebd4378d06510eb496d6dfb248ce66d6214c5d150de5a6e0779454e844cd82b0710ca423054477d00a4c99b2d018d1c81a2b538c715221bfd04433447c90d95158043bae5e85f65a646757993909eac90b0f03bee5d9ca4facc737baf0c597f8c64ae98d563e198f8a4ae8beba0973dd35604f7b25fe8ae424eab62d46a60ba93ccd522ade2a5298946cee0a12a462f4d3c829781ded0618487798a5216be189e29b26502356e5b8e871299265641d5ac", &(0x7f00000001c0)=@udp=r1, 0x4}, 0x20)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)

[  958.180682][   T25] audit: type=1326 audit(1656037149.897:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:10 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})

02:19:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7f, 0x660080)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080)="7f54ab2171a6a3f4d5d7b34ebe7b9d97d037d90eeefdfd050a6d0fbc6908ddb3b0fcc4a158a892ec7ffb57fbac716a6aa92ebd4378d06510eb496d6dfb248ce66d6214c5d150de5a6e0779454e844cd82b0710ca423054477d00a4c99b2d018d1c81a2b538c715221bfd04433447c90d95158043bae5e85f65a646757993909eac90b0f03bee5d9ca4facc737baf0c597f8c64ae98d563e198f8a4ae8beba0973dd35604f7b25fe8ae424eab62d46a60ba93ccd522ade2a5298946cee0a12a462f4d3c829781ded0618487798a5216be189e29b26502356e5b8e871299265641d5ac", &(0x7f00000001c0)=@udp=r1, 0x4}, 0x20)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000000180), 0x7f, 0x660080) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080)="7f54ab2171a6a3f4d5d7b34ebe7b9d97d037d90eeefdfd050a6d0fbc6908ddb3b0fcc4a158a892ec7ffb57fbac716a6aa92ebd4378d06510eb496d6dfb248ce66d6214c5d150de5a6e0779454e844cd82b0710ca423054477d00a4c99b2d018d1c81a2b538c715221bfd04433447c90d95158043bae5e85f65a646757993909eac90b0f03bee5d9ca4facc737baf0c597f8c64ae98d563e198f8a4ae8beba0973dd35604f7b25fe8ae424eab62d46a60ba93ccd522ade2a5298946cee0a12a462f4d3c829781ded0618487798a5216be189e29b26502356e5b8e871299265641d5ac", &(0x7f00000001c0)=@udp=r1, 0x4}, 0x20) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc) (async)

02:19:10 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:10 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
getegid()

02:19:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e95867f4932b52f"])
syz_open_dev$usbfs(&(0x7f00000000c0), 0xffff, 0x783000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa)

02:19:10 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
getegid()

02:19:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7f, 0x660080)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080)="7f54ab2171a6a3f4d5d7b34ebe7b9d97d037d90eeefdfd050a6d0fbc6908ddb3b0fcc4a158a892ec7ffb57fbac716a6aa92ebd4378d06510eb496d6dfb248ce66d6214c5d150de5a6e0779454e844cd82b0710ca423054477d00a4c99b2d018d1c81a2b538c715221bfd04433447c90d95158043bae5e85f65a646757993909eac90b0f03bee5d9ca4facc737baf0c597f8c64ae98d563e198f8a4ae8beba0973dd35604f7b25fe8ae424eab62d46a60ba93ccd522ade2a5298946cee0a12a462f4d3c829781ded0618487798a5216be189e29b26502356e5b8e871299265641d5ac", &(0x7f00000001c0)=@udp=r1, 0x4}, 0x20) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)

02:19:10 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:10 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/uts\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x541b, r3)

02:19:10 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000080)={0x3, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)

02:19:10 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:10 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, <r2=>0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}) (async)
r5 = syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/uts\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r6, 0x541b, r3)

[  959.048972][   T25] audit: type=1326 audit(1656037150.767:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  959.113001][T19947] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:11 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))

02:19:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e95867f4932b52f"])
syz_open_dev$usbfs(&(0x7f00000000c0), 0xffff, 0x783000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e95867f4932b52f"]) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0xffff, 0x783000) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) (async)

02:19:11 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000080)={0x3, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)

02:19:11 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:11 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, <r2=>0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/uts\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x541b, r3)

02:19:11 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000080)={0x3, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)

02:19:11 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:11 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000040)=0x8)

02:19:11 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000040)=0x8)

02:19:11 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000040)=0x8)

02:19:11 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:11 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

[  959.908685][   T25] audit: type=1326 audit(1656037151.617:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:12 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async)

02:19:12 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e95867f4932b52f"]) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0xffff, 0x783000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa)

02:19:12 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r1)

02:19:12 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc) (async, rerun: 64)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:12 executing program 0:
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000550c00000002000000"])

02:19:12 executing program 0:
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000550c00000002000000"])

02:19:12 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r1)

02:19:12 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:12 executing program 0:
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000550c00000002000000"])

02:19:12 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r1)

02:19:12 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:12 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

[  960.772803][   T25] audit: type=1326 audit(1656037152.487:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20003 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:12 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))

02:19:12 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r1)

02:19:12 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0xe})

02:19:12 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:12 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:12 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:12 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0xe})

02:19:12 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r1)

02:19:12 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:12 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:12 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0/file0\x00'})
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x14841, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
r4 = getuid()
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x69e, &(0x7f0000000380)="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"})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0)
r6 = getpgid(0x0)
syz_open_procfs$namespace(r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r5}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB='./file0\x00'])

02:19:12 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r1)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r1) (async)

[  960.902624][   T25] audit: type=1326 audit(1656037152.617:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:13 executing program 5:
r0 = semget(0x0, 0x2, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0)
semop(r0, &(0x7f0000000000)=[{0x2, 0x1, 0x1800}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:13 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1)
ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0xe})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1) (async)
ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0xe}) (async)

02:19:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:13 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0/file0\x00'})
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x14841, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
r4 = getuid()
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x69e, &(0x7f0000000380)="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"})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0)
r6 = getpgid(0x0)
syz_open_procfs$namespace(r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r5}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB='./file0\x00'])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0/file0\x00'}) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x14841, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
getuid() (async)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x69e, &(0x7f0000000380)="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"}) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0) (async)
getpgid(0x0) (async)
syz_open_procfs$namespace(r6, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB='./file0\x00']) (async)

02:19:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
recvmsg$can_bcm(r2, &(0x7f0000000380)={&(0x7f0000000100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000200)=""/68, 0x44}], 0x2, &(0x7f0000000280)=""/240, 0xf0}, 0x40)

02:19:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
recvmsg$can_bcm(r2, &(0x7f0000000380)={&(0x7f0000000100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000200)=""/68, 0x44}], 0x2, &(0x7f0000000280)=""/240, 0xf0}, 0x40)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
recvmsg$can_bcm(r2, &(0x7f0000000380)={&(0x7f0000000100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000200)=""/68, 0x44}], 0x2, &(0x7f0000000280)=""/240, 0xf0}, 0x40) (async)

02:19:13 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0/file0\x00'})
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x14841, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
r4 = getuid()
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x69e, &(0x7f0000000380)="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"})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0)
r6 = getpgid(0x0)
syz_open_procfs$namespace(r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r5}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB='./file0\x00'])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0/file0\x00'}) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x14841, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
getuid() (async)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x69e, &(0x7f0000000380)="4482c0e393ae0fd1639f209532bc659e070a54f71e02558f6b5a78e618dd4698d180709d5d4148be99e8be88ba27cef701374eba6a76595c6d0a2da80b37b2ead7a3098b4a4eebdd56f8b2d56d2940f65562021366421abee555dba85a6378ceefb30f5b065d4e00d5e9fd2afc2901ecc2468e376918cdedd785b2e59ab7d640a1034fc3ed55fa6b733214e998a87f10197c66df3c1262fef8e3581e34971e6aad2d19582d833fd739911f2488c71c8b8d62674a885cd28ef6c6fc2f0d34a1b6573287a3d5eceb1ccbc3b23959724af1074c10a1c5b777da6256f1b4198fcc541200ffbef64f5159550d7a25ce0c26b8ad61d1b8b5cc329410ac77a419eef421719edf5343d407f0723028af23a96184922271f6070812ad90427d5235d220febada21b6d6a9bb79a9ec28d65cfd0b0601c287bdbc3e4f226eb811d02819bf2fa836f65a45fd5fe960cb2923dd67ce10712ff780c14604c6c7fd58755e63ab9c717b8cba3546e70458861e5559e65312165247e80dcf040a26a5c2432717feb1e2cca8577f12b5364721dc35f62522777766d62b2a69b5dd8c440bcf6073a5090ed00d8b5dc462d5079a97eda43bb4aff5800e02e6b086756542dce699ee15b83e13edf93d9cd4e5447f7e148ca440c2b733c1b1b7ffbfc372ee4f7e8c7205958460ac01d956eddf26f72b56ea37f9b6531b1242d707cdf4026d7f45936bc6b2bcebfb5bd5f10bf02a7affd8da74320312d54d5c7b8f022b1337549b47b2b9d7d7b8f7c9ea631a801a33cefe369493f0e63bc8357d7a13fb8172e7fae4178a5f2ae31981b7896201bec0483ea6579cda3cb2fb455b4f4cf552be9d7164cad2129332138a2fd1186866e8938a31c402b2a7c672abbc8ad5535fd06c3732a07e259386efa52a568d9df2e42d7d6af50f00e8308612cdd96f234174c9e76da910f91b80f1217915470bd63f1979f9a06afa6b10e374cd7882482be343f2501c09a46305db146035b15c5e636dd8109bdad8ffcc4b57120b8aac6bf66418cc63e5e1c506f7af07b16a33f686d7e8270c831f11ea40e9133b55e6c37e155fed09a2a7e46d7440c517df07852291080cb0f65415243684b7a78002b627aa0d0d7b2b89369a78224966abceeec671ad0d92a3c024e859bc81623d7dd60ce7e88e03e9a5f0e5fabe84cfd46809fc97b5060bcf38c1fb9ccf4de91e72ad3565622d9b790e791b063e19623fbf257a6dc11bc54e643504281a92427ea8aae33bc85d51c2bc8dc97c485478047e3f87a6c9353ea67fe71b43ace37a79fb5504b556962a25b736df8bcc102cc2d0ee6b97a74f3bba81291201b2677edb0e092eb478dda43ddb75f8cb18bab57ddbce4a389dd8a42f20f7abeee9e4643fd70121a694f00f4cbda4a724ca69c741d1cd472c5b3eefdb5d479b312219bc8ff7770256385ccc1691f01e759ead76105d805a6cba9aa2b89727f3705bf04b8c444961082bf722683467021d74208c8cc481343c37b24e3de2bdf84b3022082a1dbc3e45fd2013272721d0e932136e4263740162d21f87ba3cc10227d1c651c3d6d589412a21cdbe8c24bc5771c159d949edad0e3fd65f9e8be3c67881ce1b8e52f77a16b573d49d261c2cce127eadc299dc78e2725df141a9f755fefac3687486f026828be0bf9ed063019cfb35457c37bc9d435cae3304616a3224e61b5d22158e8cddfc71214e4eb33c9d30847fe641f79cb9e53cdf57e4a2e8a487a38f08dcab3a816b3d56c9c3a6e650183f710132bc2f9e108aff0f34ed2bbaf2a3d9eb8345972f99054ee9f6de38bcaa3760c86536907c4fd8c6c781a2d492431630be3c40c44dbdd7a4471b9d0308d090a2a8eba7b73919c6d2fa6801b25a307fab39f7bae64d089a972f03e8b5a753e28d3b21a493276c0aa333381261b9fc6d695405e28a604fdbc12f9faa3642ede8a55948f967924dda1721d3b05a410e18415b907097ba1bbb01e8d5265ce9c1e87ae97c18682724471795c10e75e94f74bb2a99a5c36170754696328ef21482c998d07d8288dc8897b0f85fccffd1e9e454b7296c21ff70f727417e7d70713d495a1c488ffc4ef8c1c0858452db572f720228902532641637ff9ce4ad1f30f800a80e48645103b7aae3d6b0deea933393b86d57377186343aafb7461478f8ca1e66a9d9efdd3e7ed5bfcf1208dfeb2429136fd193eb0959f416a23c7a6ded4cf8930b8c867961256106c43ec68becec34d079a90c4e4c2a28138f9f0f257dc3f8c17c063fe7418bf875f5779f19d7c10f7184b223facb83392035235788ff67737ec6d5604f45fbf2945956921a91333975e9a2a902938970434c89d6cece629ba505ddc5acce6c6af9e3a6cd728c0bc91398a6bb5e6648386e3fb692f7a8fdbdb71f9f9a079680f82f835835b6c3dad48c6fa607c3b2fd55553d1c1c23719243be9da5d67a60d6d096b32545f5f23f59d7ad13c2a6b1c1cd5fe7a2b020eed5dd349b040908a4c20779a8943aac19f460742eff6ee6dde47648b33ab27ae5c8790ff029f57acd34683f112178395f1327417b3866ccd9af9f240d824ea60f6fa40f55666d4cd045394bfb44241ef591dc016fb6c708e59e7c2ac96b2517a42c5d360236d9aa5ed72937477ccbca17209ce344c19d6e8046dae16bd3af5cc40e21d8d6bb43a049a44900a2d7f8e9cb159731ba079aad0c1ca039aff75a9aea22d5e160915ae31b595b6aab4d3c30ff4e0dd49dc0c313b5690499fccb5b75c56e9804343c39e2ca70eb6ca751174cf4156611bc022afb57714227ce2d8e77a4ac7f2dd5680e99118d157728ee765d3289d39e4f0d3c91961bd7b96bd9812eb7dbba4354c67ceacbf9d96220f5189a6f639108cd41c86a791a099eab37864f2ee38c31f1b1874b6e74956ea87f3a8364ca1d31385d4af5ebc55ca9be8f92e976a96e448a0b34b4c59b7024a8605ea6d68272cc9f7b99d2630845d530a8645517f539ea4ad308cabf8f8253dba756b84a37e5ca8d39a85fdf9987e07e5cf5c395368746bd339fdbec5606a9f474b39b80ed2291a96aa64cf93dbaeb3d1d44e536c4a9a3bd4180fcd36d226478768247871ff24f8b6ddfa60d446dea0aba72b9f3f70f89dbdca7059eaddefa119ce53236d5df1db75836056603912090fed917b367942ce71c516ff64a059c7e614820abdd2169d07e6aa12281d06100febc45c0cd2fd87c15ba0bfd0015bb5f384b0e3980ee52e90f24e23204681819b3edc0972d1ab0a868485eeb71498cf6e0ee492a0370fbd8f9743948c4c9d28bc4a3ab15a788bad60fd8abcbbb5b0fcf03858529d0811c584cb2e67692fa57c759814d7bb3b70ed0a9833d946b81ee696b557e49786968e9b9bae5af36d8358e8e223b81c446d6f483b4769447d99802f69555d7bd77027e2300788b8b7a142c431bc30b25fd78f817b777923289b530623b3a7612c618598449669b5098ecd09d8d2673e555f58664183e7e377cb467d58589da90da534b794a284c788f4acdc0f8aa4157adb6d8faf880aaaf0434f888e8a52d4b994f3481ca5d8b9783b593d9fc324281be82fb2a6286fb7eec7bae3c2fbc93cda2cc993f286f74029a1186baad117dd285238e23f2ef531e700f6a31ffe2d6fe3fd7b3d263a0cf2d9918ba855892f6aa314563e69286c65d3bf2c10122d535e846d8c813a06ec7a374c7e951313c60e313d5e2d5377ddf50f51b4ddff3f1b10cbc854f9913fd579d092d25f0ba8361d6aa5b197004285945a580b5c81186069ef57f333e789f3bf1f1972795e00cfe4601020eb2d8c514fcb023758be9f1457df19df391e91b80d808ba5e94b7522faffc10ec624f08f61da474942656d85e59b0e32f2ec4f7d70518fa115c981ac061d69787ea54377e532283bf815b799864e956217f47f1be659b41513d6d1e69d6ee5690b57d9ecbaefbfc2b1520835135d049f0dad16fca6868f63621f623b3a2577da84045c71d53fcabae6cede4e65cef3d7bc52858f2e53f000e4448b2496a2b26f404415aead5c9177a02a5046f171301c4ce88b50797bf3cf17e47e2a364c1c2ed821e9e6fdc5ed400355f6bbd4f36fde507b76a8147680ece3aa08b1ecbbd64ed97f7fe6ea12a000e1339e487d1d182548eaa4ced231830455873272e8e59cb8f0be9445b9701c09aac1a0adc7f625a4fc0984e570f54777cf6d964a5fc8bc24677cf7e8602c67225b31201cb9818e6c9a647ff3fce523202b662d79ca52fa466e3a4593fb09d1af1a6b270d7386455bb8763e0c2f9674fc6da44669e95dce16dd8f7d924471bcba38c77e3312fef48dbd91b18ee649acc9ab93c9468a72a56ae08194fa7471dcfccbbabd0b38df6a2f6f3689240ac9eca6ca6172e3b9313c8377345d308f7193789f7e976fee2b95fa8be62cdf16e8a5df07635e8852e9a0e2c26548433f4126d79203adab046305a0215f193a10aeee58eae46dc3d4372c420d8f60b88f256d33fce1d768a5da270375138c72c08bae48666a5308eb8173569e61471aa2915d932682ea810746721df307ab0e7d05eeb11cce97beef055452f863e779e4d2aa15770e88a716181da5b5974271b902feb62df3774d775f43156cdcfa144e44f08fa143d6876922462e2df83e04a3148c5afd2b2b1b6d93a7207934c77dd731ddcdab0cc89e49032cf7257f477b12d017a605bdfa7932e3fdcaa2be2113692d82ff3f0919aed188a5a857300f055bf412e2c64d66b328a247e8d4b2ae6e562305e4cc820af9224e934487e650338a3386b75f616524cec394a14255c2e7bed6ab67311f9871d56778ae9fe961fec9beb498f6f43ed7d08c4d99b48dd0fe69eb69c517b922c392c80ee8a4931e9f0c7f36517878066e1b584967579ac229cf52034e72c6a1547a2badb03f29c1c0869650657794bd20dd23754a3fdcee98c45a45e207137a6ca24ed3b4ce7f1c0be075bf9dcf7fc06552ec66f725358e3c846913dff9cc4bf46a9f848c0011abdc55c1595616e3b6cf7cf5db46dcc23de774cf1e272cadc8f3118348932a0e1a48631eb99d3b41471866f53794741d57b79789f262e735caa3fab140982f22b22e088c5dbe656c82d3f1dbcf03d29cc40a1f2d933d5dfd4aea496dfe005f02cede04db2f739902fbe456e05570d3f588a4b546fdbf7ecda47823c3515232f3e4b9216ba046fafa5622e48ac2693024e3d670a6bb7053b40f77a74abbacd03da1dbb8569234268aacdc04df5b762cf1c39e009ff7c5c00fd7f499b142c55d7469e90275311ab1d14f043e2b1e6025876cf111bd7de279153fb183d2c396a959070f47a2a330c674d75e93de90d1442f279b215da9ac7f96e8664f89efdc1ab1a84eb832b17a4a4cc53775dde612fd472c4e6db3547fd8f174be05ef13de4e77c0aafd53703af5b46cb7f865d6410701880f1b1d3420abb3e85d2074aafd2bb68f00ba963020666e7342034dd6bd652946f063091bfef23bf3fbf64809fcfc10a1771e9b8890588908a88de08e77352680961fd2a8da70519134f773e78ae02b60ab74ccecf36d7936d75c118df40064174de6b45adf5004a937ab8a2329993f3a3fca839981cdba773829ff23806f7eac080ebe3b5eb63183df2aa823d36c7d355dd1875747372534a6b83e52852b206c18bfbddc622a5a43246bb6c9be59878636bfc64664e6a7ed103dc17c78147a4770eaa177cae9e9487a2692b7357452ce241a57af22248604f3be98f13766dcdb77a0cb812430fb914f63239e153cbf07b2e4be28dc048"}) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0) (async)
getpgid(0x0) (async)
syz_open_procfs$namespace(r6, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB='./file0\x00']) (async)

02:19:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
recvmsg$can_bcm(r2, &(0x7f0000000380)={&(0x7f0000000100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000200)=""/68, 0x44}], 0x2, &(0x7f0000000280)=""/240, 0xf0}, 0x40)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
recvmsg$can_bcm(r2, &(0x7f0000000380)={&(0x7f0000000100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000200)=""/68, 0x44}], 0x2, &(0x7f0000000280)=""/240, 0xf0}, 0x40) (async)

02:19:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

[  961.753913][   T25] audit: type=1326 audit(1656037153.467:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:13 executing program 1:
socket$isdn_base(0x22, 0x3, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r4)
socket$inet_sctp(0x2, 0x1, 0x84)

02:19:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:14 executing program 5:
r0 = semget(0x0, 0x2, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0)
semop(r0, &(0x7f0000000000)=[{0x2, 0x1, 0x1800}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
semget(0x0, 0x2, 0x40) (async)
semctl$IPC_RMID(r0, 0x0, 0x0) (async)
semop(r0, &(0x7f0000000000)=[{0x2, 0x1, 0x1800}], 0x1) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:14 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000080)=0xf8, 0x4)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:14 executing program 1:
socket$isdn_base(0x22, 0x3, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r4)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$isdn_base(0x22, 0x3, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r4) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)

02:19:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x2}}, 0x18)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x541b, 0xc)

02:19:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:14 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000080)=0xf8, 0x4) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x2}}, 0x18)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x2, 0x8}}, 0x20) (async)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x2}}, 0x18) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x541b, 0xc) (async)

02:19:14 executing program 1:
socket$isdn_base(0x22, 0x3, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r4)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$isdn_base(0x22, 0x3, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r4) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)

02:19:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:14 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (rerun: 64)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000080)=0xf8, 0x4) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:14 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x2}}, 0x18)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x541b, 0xc)

[  962.618848][   T25] audit: type=1326 audit(1656037154.337:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20139 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:14 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:14 executing program 5:
r0 = semget(0x0, 0x2, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0)
semop(r0, &(0x7f0000000000)=[{0x2, 0x1, 0x1800}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
semget(0x0, 0x2, 0x40) (async)
semctl$IPC_RMID(r0, 0x0, 0x0) (async)
semop(r0, &(0x7f0000000000)=[{0x2, 0x1, 0x1800}], 0x1) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80c0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:14 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = socket$caif_stream(0x25, 0x1, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r2=>r1}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040))

02:19:14 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:14 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff9, 0x80c00)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80c0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80c0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)

02:19:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000550c00000002000000"])

02:19:14 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff9, 0x80c00)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff9, 0x80c00) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:14 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = socket$caif_stream(0x25, 0x1, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r2=>r1}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
socket$caif_stream(0x25, 0x1, 0x2) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)) (async)

02:19:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80c0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

[  962.740755][   T25] audit: type=1326 audit(1656037154.457:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20196 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x8, 0x0, 0x29, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, 0x20, 0x20, 0x8, 0x6}})

02:19:14 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040))

02:19:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:14 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = socket$caif_stream(0x25, 0x1, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r2=>r1}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040))

02:19:14 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff9, 0x80c00)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff9, 0x80c00) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x8, 0x0, 0x29, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, 0x20, 0x20, 0x8, 0x6}})

[  962.795200][T20211] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:14 executing program 1:
getegid()
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:14 executing program 1:
getegid() (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x8, 0x0, 0x29, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, 0x20, 0x20, 0x8, 0x6}})

02:19:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:14 executing program 1:
getegid() (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

[  962.860922][   T25] audit: type=1326 audit(1656037154.577:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20229 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:15 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040))

02:19:15 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:15 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000006cb503ed83763802e5d2000000004a350100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0))

02:19:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

02:19:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)

02:19:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

02:19:15 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000006cb503ed83763802e5d2000000004a350100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0))

02:19:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0])

02:19:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x41a182, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:15 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000006cb503ed83763802e5d2000000004a350100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000006cb503ed83763802e5d2000000004a350100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) (async)

02:19:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x41a182, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x41a182, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)

[  963.707323][   T25] audit: type=1326 audit(1656037155.427:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:16 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040))

02:19:16 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB])

02:19:16 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x7fffffff}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @private0, 0x6af5}, r3}}, 0x30)

02:19:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x41a182, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:16 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x7fffffff}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @private0, 0x6af5}, r3}}, 0x30)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7fffffff}}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @private0, 0x6af5}, r3}}, 0x30) (async)

02:19:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB])

02:19:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200580, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x8}}, './file0\x00'})
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200580, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x8}}, './file0\x00'})
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200580, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 32)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x8}}, './file0\x00'})
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB])

02:19:16 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x7fffffff}}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @private0, 0x6af5}, r3}}, 0x30)

[  964.562018][   T25] audit: type=1326 audit(1656037156.277:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  964.616818][T20330] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:17 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x63, &(0x7f0000000100)=[{0x4, 0x1, 0x1}]})
r0 = getpgid(0x0)
syz_open_procfs$namespace(r0, 0x0)
getpgid(0x0)
r1 = getpgid(0x0)
syz_open_procfs$namespace(r1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r2=>0x0})
syz_open_procfs$namespace(r2, 0x0)
r3 = getpgid(0x0)
syz_open_procfs$namespace(r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYRES16=r3])
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x61b)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB])

02:19:17 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffe92, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7af6bdf347cde62574c9af49eb470d0685f8298602f4158e75bf6297d7b6892100a0ec33feab9d740f136dc1a77b8d8e1b20207964f9042d8673cf0d95d8bf24a3b86ea391e2ad10f913964be151a45dc5ea9b4df7bbfbe407ae7c03074d2b199a7ef91ffc7ce2fb9ea49002d2aa16e1de79dd46cb19371e2fe7ab13bf2799da2479ebcb19d70efc155f69c43638c7af72382759bb050bd65bf446c84b0ebb132dfbc8185a469528b79844dde93008b044a558fb2d7215ea248b4581dfb8d0e8ed8d5e0aa32e292c8d113cf9d25143", @ANYRES16=0x0, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48d0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)
getuid()
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$USBDEVFS_RESET(r3, 0x5514)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18)

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
syz_io_uring_setup(0x270d, &(0x7f0000000040)={0x0, 0x9890, 0x1, 0x0, 0x35b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
syz_io_uring_setup(0x270d, &(0x7f0000000040)={0x0, 0x9890, 0x1, 0x0, 0x35b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
syz_io_uring_setup(0x270d, &(0x7f0000000040)={0x0, 0x9890, 0x1, 0x0, 0x35b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async)

02:19:17 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffe92, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7af6bdf347cde62574c9af49eb470d0685f8298602f4158e75bf6297d7b6892100a0ec33feab9d740f136dc1a77b8d8e1b20207964f9042d8673cf0d95d8bf24a3b86ea391e2ad10f913964be151a45dc5ea9b4df7bbfbe407ae7c03074d2b199a7ef91ffc7ce2fb9ea49002d2aa16e1de79dd46cb19371e2fe7ab13bf2799da2479ebcb19d70efc155f69c43638c7af72382759bb050bd65bf446c84b0ebb132dfbc8185a469528b79844dde93008b044a558fb2d7215ea248b4581dfb8d0e8ed8d5e0aa32e292c8d113cf9d25143", @ANYRES16=0x0, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48d0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)
getuid()
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$USBDEVFS_RESET(r3, 0x5514)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffe92, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7af6bdf347cde62574c9af49eb470d0685f8298602f4158e75bf6297d7b6892100a0ec33feab9d740f136dc1a77b8d8e1b20207964f9042d8673cf0d95d8bf24a3b86ea391e2ad10f913964be151a45dc5ea9b4df7bbfbe407ae7c03074d2b199a7ef91ffc7ce2fb9ea49002d2aa16e1de79dd46cb19371e2fe7ab13bf2799da2479ebcb19d70efc155f69c43638c7af72382759bb050bd65bf446c84b0ebb132dfbc8185a469528b79844dde93008b044a558fb2d7215ea248b4581dfb8d0e8ed8d5e0aa32e292c8d113cf9d25143", @ANYRES16=0x0, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48d0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc) (async)
getuid() (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$USBDEVFS_RESET(r3, 0x5514) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) (async)

02:19:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB])

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
syz_io_uring_setup(0x270d, &(0x7f0000000040)={0x0, 0x9890, 0x1, 0x0, 0x35b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0xb936}}, './file0\x00'})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)

02:19:17 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x63, &(0x7f0000000100)=[{0x4, 0x1, 0x1}]})
r0 = getpgid(0x0)
syz_open_procfs$namespace(r0, 0x0)
getpgid(0x0) (async)
r1 = getpgid(0x0)
syz_open_procfs$namespace(r1, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r2=>0x0})
syz_open_procfs$namespace(r2, 0x0)
r3 = getpgid(0x0)
syz_open_procfs$namespace(r3, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYRES16=r3]) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x61b) (async)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x7fff)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x430603, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)

02:19:17 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffe92, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7af6bdf347cde62574c9af49eb470d0685f8298602f4158e75bf6297d7b6892100a0ec33feab9d740f136dc1a77b8d8e1b20207964f9042d8673cf0d95d8bf24a3b86ea391e2ad10f913964be151a45dc5ea9b4df7bbfbe407ae7c03074d2b199a7ef91ffc7ce2fb9ea49002d2aa16e1de79dd46cb19371e2fe7ab13bf2799da2479ebcb19d70efc155f69c43638c7af72382759bb050bd65bf446c84b0ebb132dfbc8185a469528b79844dde93008b044a558fb2d7215ea248b4581dfb8d0e8ed8d5e0aa32e292c8d113cf9d25143", @ANYRES16=0x0, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48d0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc) (async)
getuid()
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$USBDEVFS_RESET(r3, 0x5514) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18)

02:19:17 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x63, &(0x7f0000000100)=[{0x4, 0x1, 0x1}]})
r0 = getpgid(0x0)
syz_open_procfs$namespace(r0, 0x0) (async)
getpgid(0x0) (async)
r1 = getpgid(0x0)
syz_open_procfs$namespace(r1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r2=>0x0})
syz_open_procfs$namespace(r2, 0x0) (async)
r3 = getpgid(0x0)
syz_open_procfs$namespace(r3, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYRES16=r3])
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x61b)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB])

02:19:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x7fff) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x430603, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)

02:19:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0xf, 0x20000000)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB])

02:19:17 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0xb15, 0x3, 0x6, 0x2}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:17 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$rfkill(r1, &(0x7f0000000040)={0x8, 0x9, 0x3}, 0x8)

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0xb936}}, './file0\x00'}) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)

02:19:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x7fff) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x430603, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)

02:19:17 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
write$rfkill(r1, &(0x7f0000000040)={0x8, 0x9, 0x3}, 0x8)

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0xb936}}, './file0\x00'})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xb936}}, './file0\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) (async)

02:19:17 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0xb15, 0x3, 0x6, 0x2}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ff0f0000000000002e2f66696c653000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r5, 0x30, 0x1, @in6={0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00', 0x7}}}, 0xa0)

[  965.530423][T20403] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:17 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0xb15, 0x3, 0x6, 0x2}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:17 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
write$rfkill(r1, &(0x7f0000000040)={0x8, 0x9, 0x3}, 0x8)

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="012193abeedc42e6fd696c673000"/29])
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ff0f0000000000002e2f66696c653000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r5, 0x30, 0x1, @in6={0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00', 0x7}}}, 0xa0)

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="012193abeedc42e6fd696c673000"/29]) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (rerun: 64)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:17 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:17 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa)

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="012193abeedc42e6fd696c673000"/29])
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="012193abeedc42e6fd696c673000"/29]) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ff0f0000000000002e2f66696c653000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r5, 0x30, 0x1, @in6={0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00', 0x7}}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r2) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r5, 0x30, 0x1, @in6={0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00', 0x7}}}, 0xa0) (async)

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:17 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) (async)

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)

02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  965.629132][   T25] audit: type=1326 audit(1656037157.347:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20436 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:17 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:17 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa)

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)

02:19:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)

02:19:18 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7f4e}}, './file0\x00'})

02:19:18 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="18004323fc62001704b949d2066baa060800000000000000fe94c4d4762e9c7f30"])
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r4, 0x4c, 0xb7})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:18 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x309, "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", 0x6, 0x40, 0x4, 0x20, 0x7f, 0xf4, 0x0, 0x1}, r3}}, 0x128)
socketpair(0x1a, 0x4, 0x80000000, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x9, &(0x7f0000000300))
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0xffff})
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r6}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x3, {0xa, 0x4e22, 0x8, @private1, 0x200}, r6}}, 0x38)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x210000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x19, 0x400800)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="00e4e1b7b285f9bb52b40000"])
ioctl$LOOP_CTL_REMOVE(r7, 0x4c82, 0xc)

02:19:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7f4e}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7f4e}}, './file0\x00'}) (async)

02:19:18 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff}) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x309, "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", 0x6, 0x40, 0x4, 0x20, 0x7f, 0xf4, 0x0, 0x1}, r3}}, 0x128) (async)
socketpair(0x1a, 0x4, 0x80000000, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
socketpair(0x1, 0x5, 0x9, &(0x7f0000000300)) (async)
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0xffff}) (async)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r6}}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x3, {0xa, 0x4e22, 0x8, @private1, 0x200}, r6}}, 0x38) (async)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x210000, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x19, 0x400800)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="00e4e1b7b285f9bb52b40000"])
ioctl$LOOP_CTL_REMOVE(r7, 0x4c82, 0xc)

02:19:18 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="18004323fc62001704b949d2066baa060800000000000000fe94c4d4762e9c7f30"]) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r4, 0x4c, 0xb7})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:18 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:18 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff}) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x309, "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", 0x6, 0x40, 0x4, 0x20, 0x7f, 0xf4, 0x0, 0x1}, r3}}, 0x128)
socketpair(0x1a, 0x4, 0x80000000, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
socketpair(0x1, 0x5, 0x9, &(0x7f0000000300)) (rerun: 64)
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0xffff})
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r6}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x3, {0xa, 0x4e22, 0x8, @private1, 0x200}, r6}}, 0x38)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x210000, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x19, 0x400800)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="00e4e1b7b285f9bb52b40000"]) (async)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c82, 0xc)

02:19:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7f4e}}, './file0\x00'})

02:19:18 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="18004323fc62001704b949d2066baa060800000000000000fe94c4d4762e9c7f30"])
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r4, 0x4c, 0xb7})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="18004323fc62001704b949d2066baa060800000000000000fe94c4d4762e9c7f30"]) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r4, 0x4c, 0xb7}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

[  966.488090][   T25] audit: type=1326 audit(1656037158.207:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:18 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x30, 0x59, {}, {0x0, 0x2710}, {0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "eb79d59803745381"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48b164bd7bc97fb4)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x60, 0xf, 0x9, 0xaae, 0x28, 0x9, &(0x7f0000000040)="a8323ffee9d393d5926d7d559cab7bb54ddda078b51d90d7abae14f9f4ed8549201ef1b5f3a237f2"})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f0000000240))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:18 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10a, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000085}, 0x40024)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r3, {0xfffffda3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r2, 0x8, "ac0c05", "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"}}, 0x110)

02:19:18 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x30, 0x59, {}, {0x0, 0x2710}, {0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "eb79d59803745381"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48b164bd7bc97fb4) (async)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x60, 0xf, 0x9, 0xaae, 0x28, 0x9, &(0x7f0000000040)="a8323ffee9d393d5926d7d559cab7bb54ddda078b51d90d7abae14f9f4ed8549201ef1b5f3a237f2"}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f0000000240)) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r3, {0xfffffda3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 32)
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r2, 0x8, "ac0c05", "39b92ab97b1ef3e5e865cbf762fe72ac6565a0c106e53d2456e72e8335486686a98fd691038b019625bf5ef85d140b1c1da3f79cbd5f2b8c191cbf0b8b2429f16f941cfade30b4b5242ab373331a67e2a50a7f7f3ddb266cf2c09a30b160caac8fa5c17ea5425934f457757aa7ae9a172f22df8428728d26486a95423c192c73733d88c3b997bc45ffa9b1d81f0c3feeee6f1145b88d59814e6c439022a258f0ffdc917eadc26ed8c8338792deebcf6a53d4a3eafcf421c5a49dddbee73371f24ea33bb09e87e56c3213267e715724c371c69a1556d3e10d4a0369d5df414fc8d611983310fc3a5bf5d1585b16527f3a42276e5619c973b09443a3cbc6456cc5"}}, 0x110) (rerun: 32)

02:19:18 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10a, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000085}, 0x40024)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10a, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000085}, 0x40024) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:18 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x30, 0x59, {}, {0x0, 0x2710}, {0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "eb79d59803745381"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48b164bd7bc97fb4) (async)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x60, 0xf, 0x9, 0xaae, 0x28, 0x9, &(0x7f0000000040)="a8323ffee9d393d5926d7d559cab7bb54ddda078b51d90d7abae14f9f4ed8549201ef1b5f3a237f2"})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64)
semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f0000000240)) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  966.534713][   T25] audit: type=1326 audit(1656037158.247:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r3, {0xfffffda3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r2, 0x8, "ac0c05", "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"}}, 0x110)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106, 0x6}}, 0x20) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) (async)
socket$caif_seqpacket(0x25, 0x5, 0x3) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xfffffda3}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r2, 0x8, "ac0c05", "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"}}, 0x110) (async)

[  966.630983][   T25] audit: type=1326 audit(1656037158.347:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:19 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

02:19:19 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10a, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000085}, 0x40024)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10a, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000085}, 0x40024) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

02:19:19 executing program 3:
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x40e, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x1)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async, rerun: 32)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

02:19:19 executing program 3:
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x40e, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (rerun: 64)

02:19:19 executing program 3:
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x40e, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x1)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  967.372453][   T25] audit: type=1326 audit(1656037159.087:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20562 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async, rerun: 32)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

02:19:19 executing program 1:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0x3f, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c844)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xa)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x32c}, 0x14}}, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000002c0)="44e5c50a61341e0a9e2eaa4fb494e2fd9cba78cd9cba9557111a8591186099800bdf86522ad63eac9259ed6c8ddb91f8cc017e4607c39bf941713c0e4d6ffe98f20f1bbc02cc59ad0f0b813466128c1a24f7b452ca4016b65bdc9bfc217e4ecd01b3e5d8ce8c86e13e43fda69146d0b7952e49b59836523c54e4481a03a3f8c8d1b4d4ffc525963adcba1f798105ad4b07c3", 0x92)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6)
syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r2)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)

02:19:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x584, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:19 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080))

02:19:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x584, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) (async, rerun: 32)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (rerun: 32)

02:19:19 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'}) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

02:19:19 executing program 1:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0x3f, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c844) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xa) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x32c}, 0x14}}, 0x0) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async, rerun: 64)
r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (rerun: 64)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000002c0)="44e5c50a61341e0a9e2eaa4fb494e2fd9cba78cd9cba9557111a8591186099800bdf86522ad63eac9259ed6c8ddb91f8cc017e4607c39bf941713c0e4d6ffe98f20f1bbc02cc59ad0f0b813466128c1a24f7b452ca4016b65bdc9bfc217e4ecd01b3e5d8ce8c86e13e43fda69146d0b7952e49b59836523c54e4481a03a3f8c8d1b4d4ffc525963adcba1f798105ad4b07c3", 0x92) (async, rerun: 32)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) (async)
syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r2)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)

02:19:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x584, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x584, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)

02:19:19 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080)) (async)

02:19:19 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080))

02:19:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040))

02:19:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async, rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) (rerun: 32)

02:19:19 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

02:19:19 executing program 1:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0x3f, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c844)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xa)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x32c}, 0x14}}, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000002c0)="44e5c50a61341e0a9e2eaa4fb494e2fd9cba78cd9cba9557111a8591186099800bdf86522ad63eac9259ed6c8ddb91f8cc017e4607c39bf941713c0e4d6ffe98f20f1bbc02cc59ad0f0b813466128c1a24f7b452ca4016b65bdc9bfc217e4ecd01b3e5d8ce8c86e13e43fda69146d0b7952e49b59836523c54e4481a03a3f8c8d1b4d4ffc525963adcba1f798105ad4b07c3", 0x92)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6)
syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r2)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0x3f, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c844) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xa) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x32c}, 0x14}}, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000002c0)="44e5c50a61341e0a9e2eaa4fb494e2fd9cba78cd9cba9557111a8591186099800bdf86522ad63eac9259ed6c8ddb91f8cc017e4607c39bf941713c0e4d6ffe98f20f1bbc02cc59ad0f0b813466128c1a24f7b452ca4016b65bdc9bfc217e4ecd01b3e5d8ce8c86e13e43fda69146d0b7952e49b59836523c54e4481a03a3f8c8d1b4d4ffc525963adcba1f798105ad4b07c3", 0x92) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) (async)
syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r2) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)

02:19:20 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040))

[  968.223278][   T25] audit: type=1326 audit(1656037159.937:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="3f000000000000002e2f66696c653000462f0e2cff5a546e1340b92f2f3c68a89dd904efb62df458bfe55c62ddce5f60b555a77b60aeb614159be2a6e0b52b9840bcc99a49591a6a2e6348c791df358d2b6b9c6ed01298b4aac693eb4304a90b0f83749370b4b9c5f1a117c5e4b382de8db4a91645d77cb1983614c1d0227b8101664c7d4ddb0cc8efac960d68913eb159"])
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2)

02:19:20 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)

02:19:20 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async)

02:19:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r3)

02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="3f000000000000002e2f66696c653000462f0e2cff5a546e1340b92f2f3c68a89dd904efb62df458bfe55c62ddce5f60b555a77b60aeb614159be2a6e0b52b9840bcc99a49591a6a2e6348c791df358d2b6b9c6ed01298b4aac693eb4304a90b0f83749370b4b9c5f1a117c5e4b382de8db4a91645d77cb1983614c1d0227b8101664c7d4ddb0cc8efac960d68913eb159"]) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2)

02:19:20 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1ce100001a0000012dbd7000fddbdf2580100000ff00c80000090000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80000)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)

02:19:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r3) (async)

02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="3f000000000000002e2f66696c653000462f0e2cff5a546e1340b92f2f3c68a89dd904efb62df458bfe55c62ddce5f60b555a77b60aeb614159be2a6e0b52b9840bcc99a49591a6a2e6348c791df358d2b6b9c6ed01298b4aac693eb4304a90b0f83749370b4b9c5f1a117c5e4b382de8db4a91645d77cb1983614c1d0227b8101664c7d4ddb0cc8efac960d68913eb159"]) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2)

02:19:20 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1ce100001a0000012dbd7000fddbdf2580100000ff00c80000090000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80000) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)

02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x296c, &(0x7f0000000040)={0x0, 0xdec3, 0x1, 0xffffffff, 0x2cd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000140)=0x7)

02:19:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r3)

02:19:20 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1ce100001a0000012dbd7000fddbdf2580100000ff00c80000090000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80000)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)

02:19:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28805, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

[  969.073863][   T25] audit: type=1326 audit(1656037160.787:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:20 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000", @ANYRES32=r1, @ANYBLOB="05000000000000002e2f66696c65300066f3ef424c22b149012bc9c6801fb235a231a57668b98a7e897d4792b008da9cf7d2a5c4dc2009af991a74fb012ae62ff7e2a875e3bab74dcb90a06a6cf35486ade9d2da491f7237a156f04b3c08269be646aa1eeac3b92e3de5fbe94c91d00aee7e7f2af6eb81a69df189ba03424f8b3bb370f43865da14ae70acf556e970950d92a976ccff9de819c3761cadf768ee38a48f72f0c4708b2ef8d2526a08c2a0015e5498a6e2df2eb0c2aaa51e83ab279ce55bcb4026663d4455d9f5"])
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x296c, &(0x7f0000000040)={0x0, 0xdec3, 0x1, 0xffffffff, 0x2cd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000140)=0x7)

02:19:20 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0101, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0xb83}}, './file0\x00'})
ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000180)={0x3, "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"})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r3, 0x7c5ac94d7b10a1c5, r1, 0x3b4, 0x80000})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000002c0))

02:19:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28805, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x296c, &(0x7f0000000040)={0x0, 0xdec3, 0x1, 0xffffffff, 0x2cd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000140)=0x7)

02:19:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28805, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

[  969.169033][   T25] audit: type=1326 audit(1656037160.887:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:20 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0101, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0xb83}}, './file0\x00'})
ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000180)={0x3, "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"})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r3, 0x7c5ac94d7b10a1c5, r1, 0x3b4, 0x80000})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000002c0))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0101, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xb83}}, './file0\x00'}) (async)
ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000180)={0x3, "712316848b489a819d76b4fea9ada20649a658bbda0d18230525ddbb2de4b6adb4debbf0e683826f84c4fa956065b6b8d56909a7f19abad1614484795eba144af5f8b49349091b5cc0b69fd10ebaf3ee9e5e29bdacc48ebd345a21eab3be96a4af7b358bb464c0d6022b1e4eb2d38487a8d4df048f8d58bbdab11a5620abbaf8970cc972c4941515e7736ae689a450ada776b165eb9743d85ff5c90dfb89fd27b215a123a904457830e9266b4d276445b2cb49f51200be53bef6a0cfe00c783d4c7b9c7e172be8dec812e7a4463adbea9fc93d3b41a3768c9f7d42b614fac17953d5a688cdd3723a79e127d9119496fa5181f3051f9dfd435e57bd25d7ce375f"}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r3, 0x7c5ac94d7b10a1c5, r1, 0x3b4, 0x80000}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000002c0)) (async)

02:19:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)

02:19:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (async)

02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x8943, &(0x7f0000000140)={'ip6tnl0\x00', 0x0})
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x1000000)

02:19:20 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0101, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0xb83}}, './file0\x00'})
ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000180)={0x3, "712316848b489a819d76b4fea9ada20649a658bbda0d18230525ddbb2de4b6adb4debbf0e683826f84c4fa956065b6b8d56909a7f19abad1614484795eba144af5f8b49349091b5cc0b69fd10ebaf3ee9e5e29bdacc48ebd345a21eab3be96a4af7b358bb464c0d6022b1e4eb2d38487a8d4df048f8d58bbdab11a5620abbaf8970cc972c4941515e7736ae689a450ada776b165eb9743d85ff5c90dfb89fd27b215a123a904457830e9266b4d276445b2cb49f51200be53bef6a0cfe00c783d4c7b9c7e172be8dec812e7a4463adbea9fc93d3b41a3768c9f7d42b614fac17953d5a688cdd3723a79e127d9119496fa5181f3051f9dfd435e57bd25d7ce375f"})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r3, 0x7c5ac94d7b10a1c5, r1, 0x3b4, 0x80000}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000002c0))

02:19:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x8943, &(0x7f0000000140)={'ip6tnl0\x00', 0x0})
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x1000000)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x8943, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) (async)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x1000000) (async)

[  969.200533][   T25] audit: type=1326 audit(1656037160.917:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20701 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:21 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) (async)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000", @ANYRES32=r1, @ANYBLOB="05000000000000002e2f66696c65300066f3ef424c22b149012bc9c6801fb235a231a57668b98a7e897d4792b008da9cf7d2a5c4dc2009af991a74fb012ae62ff7e2a875e3bab74dcb90a06a6cf35486ade9d2da491f7237a156f04b3c08269be646aa1eeac3b92e3de5fbe94c91d00aee7e7f2af6eb81a69df189ba03424f8b3bb370f43865da14ae70acf556e970950d92a976ccff9de819c3761cadf768ee38a48f72f0c4708b2ef8d2526a08c2a0015e5498a6e2df2eb0c2aaa51e83ab279ce55bcb4026663d4455d9f5"]) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (rerun: 32)

02:19:21 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (async)

02:19:21 executing program 3:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:21 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x8943, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) (async)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x1000000)

02:19:21 executing program 3:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004000) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:21 executing program 2:
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f00000000c0))
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e22, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x38)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:21 executing program 2:
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f00000000c0))
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e22, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x38)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f00000000c0)) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e22, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x38) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)

02:19:21 executing program 1:
r0 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, r0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

02:19:21 executing program 3:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004000) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:21 executing program 2:
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f00000000c0)) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e22, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x38) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:21 executing program 1:
r0 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, r0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

02:19:21 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="a90000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="40070000000000002e2f66686c653000c6d75aa73b6c2a45b1a3740909e3e7e3ef0b531a659c91657a85433af517f113b6a80baa392e02a8f8785892a82b44bbea24188cf7fc25749b87396d7165d39dea0811be30ef383b57a4851e611a645ee13957597aa44527629c2e2bd74c8f8275c3f6"])
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0x0)

[  970.034077][   T25] audit: type=1326 audit(1656037161.747:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20745 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:22 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000", @ANYRES32=r1, @ANYBLOB="05000000000000002e2f66696c65300066f3ef424c22b149012bc9c6801fb235a231a57668b98a7e897d4792b008da9cf7d2a5c4dc2009af991a74fb012ae62ff7e2a875e3bab74dcb90a06a6cf35486ade9d2da491f7237a156f04b3c08269be646aa1eeac3b92e3de5fbe94c91d00aee7e7f2af6eb81a69df189ba03424f8b3bb370f43865da14ae70acf556e970950d92a976ccff9de819c3761cadf768ee38a48f72f0c4708b2ef8d2526a08c2a0015e5498a6e2df2eb0c2aaa51e83ab279ce55bcb4026663d4455d9f5"])
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) (async)
socket$caif_seqpacket(0x25, 0x5, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000", @ANYRES32=r1, @ANYBLOB="05000000000000002e2f66696c65300066f3ef424c22b149012bc9c6801fb235a231a57668b98a7e897d4792b008da9cf7d2a5c4dc2009af991a74fb012ae62ff7e2a875e3bab74dcb90a06a6cf35486ade9d2da491f7237a156f04b3c08269be646aa1eeac3b92e3de5fbe94c91d00aee7e7f2af6eb81a69df189ba03424f8b3bb370f43865da14ae70acf556e970950d92a976ccff9de819c3761cadf768ee38a48f72f0c4708b2ef8d2526a08c2a0015e5498a6e2df2eb0c2aaa51e83ab279ce55bcb4026663d4455d9f5"]) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:22 executing program 1:
r0 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, r0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, r0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async)

02:19:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="a90000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="40070000000000002e2f66686c653000c6d75aa73b6c2a45b1a3740909e3e7e3ef0b531a659c91657a85433af517f113b6a80baa392e02a8f8785892a82b44bbea24188cf7fc25749b87396d7165d39dea0811be30ef383b57a4851e611a645ee13957597aa44527629c2e2bd74c8f8275c3f6"]) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0x0)

02:19:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="a90000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="40070000000000002e2f66686c653000c6d75aa73b6c2a45b1a3740909e3e7e3ef0b531a659c91657a85433af517f113b6a80baa392e02a8f8785892a82b44bbea24188cf7fc25749b87396d7165d39dea0811be30ef383b57a4851e611a645ee13957597aa44527629c2e2bd74c8f8275c3f6"]) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0x0)

02:19:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:22 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xd328}}, './file0/file0\x00'})
r2 = getuid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x3, r2, 0x0, 0xee01, 0xee00, 0x4, 0x101}, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8})

02:19:22 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))

02:19:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:22 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xd328}}, './file0/file0\x00'}) (async)
r2 = getuid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x3, r2, 0x0, 0xee01, 0xee00, 0x4, 0x101}, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8})

02:19:22 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc) (async)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async)

02:19:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x88c00, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x65b, 0x20, 0x200000, 0x20, 0xe91}, 0x48)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  970.879563][   T25] audit: type=1326 audit(1656037162.597:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:22 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc) (async)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))

02:19:22 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xd328}}, './file0/file0\x00'})
r2 = getuid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x3, r2, 0x0, 0xee01, 0xee00, 0x4, 0x101}, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xd328}}, './file0/file0\x00'}) (async)
getuid() (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x3, r2, 0x0, 0xee01, 0xee00, 0x4, 0x101}, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}) (async)

02:19:22 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000400)=[{0x6, 0x6, 0xfc}]})
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000140)=0x1ff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x1, 0x20, 0x80, 0x8000}]})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x0, 0x0, 0x32, 0x7}, {0xf800, 0x20, 0x2d, 0xfffffff8}, {0x6, 0x3, 0x0, 0x69a}, {0x8000, 0x0, 0x40, 0xf98e}, {0x7, 0x4, 0x4, 0x2}, {0x0, 0x5, 0x1, 0x401}]})

02:19:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x88c00, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x65b, 0x20, 0x200000, 0x20, 0xe91}, 0x48)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x88c00, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) (async)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x65b, 0x20, 0x200000, 0x20, 0xe91}, 0x48) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:22 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xde0f}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
socketpair(0x1e, 0x5, 0x4, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="060300000039f5908ae6000000000000"])
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x1a}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8811}, 0x8090)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7)
r8 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, 0x0)
read$usbfs(r8, &(0x7f0000000180)=""/247, 0xf7)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'})

02:19:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x88c00, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) (async)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x65b, 0x20, 0x200000, 0x20, 0xe91}, 0x48) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x5}}, 0x8, 0x0, &(0x7f0000000040)="9ade3fda1ece421d"})

02:19:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x5}}, 0x8, 0x0, &(0x7f0000000040)="9ade3fda1ece421d"})

02:19:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x5}}, 0x8, 0x0, &(0x7f0000000040)="9ade3fda1ece421d"})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x5}}, 0x8, 0x0, &(0x7f0000000040)="9ade3fda1ece421d"}) (async)

02:19:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)

[  970.993558][   T25] audit: type=1326 audit(1656037162.707:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20824 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:22 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xde0f}}, './file0/file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
socketpair(0x1e, 0x5, 0x4, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="060300000039f5908ae6000000000000"])
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x1a}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8811}, 0x8090)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0) (async, rerun: 32)
r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (rerun: 32)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) (async)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) (async)
r8 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, 0x0) (async)
read$usbfs(r8, &(0x7f0000000180)=""/247, 0xf7) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'})

02:19:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)

02:19:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
r3 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, <r4=>0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'})
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000000c0))
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x400}}, './file0\x00'})

02:19:22 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xde0f}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
socketpair(0x1e, 0x5, 0x4, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="060300000039f5908ae6000000000000"])
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x1a}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8811}, 0x8090)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7)
r8 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, 0x0)
read$usbfs(r8, &(0x7f0000000180)=""/247, 0xf7)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xde0f}}, './file0/file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
socketpair(0x1e, 0x5, 0x4, &(0x7f00000000c0)) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="060300000039f5908ae6000000000000"]) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x1a}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8811}, 0x8090) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) (async)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, 0x0) (async)
read$usbfs(r8, &(0x7f0000000180)=""/247, 0xf7) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async)

02:19:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) (async)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
r3 = getuid() (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, <r4=>0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'})
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000000c0)) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x400}}, './file0\x00'})

02:19:23 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000400)=[{0x6, 0x6, 0xfc}]})
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000140)=0x1ff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x1, 0x20, 0x80, 0x8000}]})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x0, 0x0, 0x32, 0x7}, {0xf800, 0x20, 0x2d, 0xfffffff8}, {0x6, 0x3, 0x0, 0x69a}, {0x8000, 0x0, 0x40, 0xf98e}, {0x7, 0x4, 0x4, 0x2}, {0x0, 0x5, 0x1, 0x401}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000400)=[{0x6, 0x6, 0xfc}]}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000140)=0x1ff) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x1, 0x20, 0x80, 0x8000}]}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x0, 0x0, 0x32, 0x7}, {0xf800, 0x20, 0x2d, 0xfffffff8}, {0x6, 0x3, 0x0, 0x69a}, {0x8000, 0x0, 0x40, 0xf98e}, {0x7, 0x4, 0x4, 0x2}, {0x0, 0x5, 0x1, 0x401}]}) (async)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)

02:19:23 executing program 1:
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x5, 0x1})
epoll_create1(0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200201, 0x0)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

02:19:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
r3 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, <r4=>0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'})
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000000c0))
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x400}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
getuid() (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000000c0)) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x400}}, './file0\x00'}) (async)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)

02:19:23 executing program 1:
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x5, 0x1}) (async)
epoll_create1(0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200201, 0x0)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)

02:19:23 executing program 1:
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x5, 0x1}) (async)
epoll_create1(0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200201, 0x0)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  971.850713][   T25] audit: type=1326 audit(1656037163.567:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20904 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xa)

02:19:23 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00e1\x00'])
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})

02:19:23 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000400)=[{0x6, 0x6, 0xfc}]}) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000140)=0x1ff) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x1, 0x20, 0x80, 0x8000}]}) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x0, 0x0, 0x32, 0x7}, {0xf800, 0x20, 0x2d, 0xfffffff8}, {0x6, 0x3, 0x0, 0x69a}, {0x8000, 0x0, 0x40, 0xf98e}, {0x7, 0x4, 0x4, 0x2}, {0x0, 0x5, 0x1, 0x401}]})

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xa)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xa) (async)

02:19:23 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00e1\x00']) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x220400)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x540, 0x7d, {}, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "527976346192192c9d782ed8ec01278b7efe9c1efba9746db3a71df333406b2bb92cc011d27da56930478c7cbcf331da6752c3cea0230671e970a9cf584f74fe"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r4 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r0, {<r6=>r4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="02400000000000002e2f66696c653000"])
r7 = getegid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r2, {r6, r7}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r9=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'})

02:19:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xa)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xa) (async)

02:19:23 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00e1\x00'])
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00e1\x00']) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async)

02:19:23 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="00005900000000002e2f6600006503007b43bdba606181d69f786c918666ff76a90ffe4558d401335e585953cfb50832a4251001aecac8fa9c73be3f76c68bd02d97ea13ac4db5bb863b8a30354d5d73b1a63d792dd8932fff111123b8a2bee8dbc43ed2026984bd28b423370fef07c45e58a68fdbf7940567bfc3116d984b2384a207dd19f3dcff12da8cce5d67dd9fe9c01b59518068ee39ffba711a84579c58447232efb1cd48b965b0aa9e59f6d9b805f39216c49c3551de4f99c547bcd01fa646ce047ba695bd355e705b54363b01ff02c395f84e59f2312cbbc0594036"])
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

[  971.968117][   T25] audit: type=1326 audit(1656037163.687:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:23 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x8900)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x1ca0}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x2)

02:19:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x220400) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x540, 0x7d, {}, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "527976346192192c9d782ed8ec01278b7efe9c1efba9746db3a71df333406b2bb92cc011d27da56930478c7cbcf331da6752c3cea0230671e970a9cf584f74fe"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r4 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r0, {<r6=>r4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="02400000000000002e2f66696c653000"])
r7 = getegid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r2, {r6, r7}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r9=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'})

02:19:23 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x8900) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x1ca0}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) (async)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x2)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x220400) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x540, 0x7d, {}, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "527976346192192c9d782ed8ec01278b7efe9c1efba9746db3a71df333406b2bb92cc011d27da56930478c7cbcf331da6752c3cea0230671e970a9cf584f74fe"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async)
r4 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r0, {<r6=>r4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="02400000000000002e2f66696c653000"])
r7 = getegid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r2, {r6, r7}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r9=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'})

02:19:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:23 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x8900)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x1ca0}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x8900) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1ca0}}, './file0\x00'}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) (async)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x2) (async)

[  972.015443][   T25] audit: type=1326 audit(1656037163.727:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20987 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:23 executing program 1:
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040))
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20840, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:23 executing program 2:
r0 = semget(0x1, 0x3, 0x111)
r1 = semget(0x0, 0x4, 0x50)
semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f00000000c0))
semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f00000000c0)=""/81)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, 0xc)
r3 = semget(0x0, 0x1, 0x4)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000140)=""/200)

02:19:24 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'}) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) (async)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="00005900000000002e2f6600006503007b43bdba606181d69f786c918666ff76a90ffe4558d401335e585953cfb50832a4251001aecac8fa9c73be3f76c68bd02d97ea13ac4db5bb863b8a30354d5d73b1a63d792dd8932fff111123b8a2bee8dbc43ed2026984bd28b423370fef07c45e58a68fdbf7940567bfc3116d984b2384a207dd19f3dcff12da8cce5d67dd9fe9c01b59518068ee39ffba711a84579c58447232efb1cd48b965b0aa9e59f6d9b805f39216c49c3551de4f99c547bcd01fa646ce047ba695bd355e705b54363b01ff02c395f84e59f2312cbbc0594036"]) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:24 executing program 1:
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) (async)
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20840, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:24 executing program 2:
r0 = semget(0x1, 0x3, 0x111) (async, rerun: 64)
r1 = semget(0x0, 0x4, 0x50) (rerun: 64)
semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f00000000c0))
semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f00000000c0)=""/81) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, 0xc) (async, rerun: 32)
r3 = semget(0x0, 0x1, 0x4) (rerun: 32)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000140)=""/200)

02:19:24 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) (async)

02:19:24 executing program 2:
r0 = semget(0x1, 0x3, 0x111)
r1 = semget(0x0, 0x4, 0x50)
semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f00000000c0))
semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f00000000c0)=""/81)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, 0xc) (async)
r3 = semget(0x0, 0x1, 0x4)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000140)=""/200)

02:19:24 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800) (async)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:24 executing program 1:
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040))
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20840, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) (async)
socket$pptp(0x18, 0x1, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20840, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:24 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="01000000000000002f2f66696c653000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0)
ioctl$RNDCLEARPOOL(r6, 0x5206, &(0x7f0000000040)=0x10001)

02:19:24 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="01000000000000002f2f66696c653000"]) (rerun: 32)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async, rerun: 64)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (rerun: 64)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async, rerun: 64)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (rerun: 64)
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0) (async)
ioctl$RNDCLEARPOOL(r6, 0x5206, &(0x7f0000000040)=0x10001)

02:19:24 executing program 3:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:24 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="008dc1616aa31f0000002e2f"])

02:19:24 executing program 3:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  972.870043][   T25] audit: type=1326 audit(1656037164.587:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21060 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:25 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) (async)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) (async)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="00005900000000002e2f6600006503007b43bdba606181d69f786c918666ff76a90ffe4558d401335e585953cfb50832a4251001aecac8fa9c73be3f76c68bd02d97ea13ac4db5bb863b8a30354d5d73b1a63d792dd8932fff111123b8a2bee8dbc43ed2026984bd28b423370fef07c45e58a68fdbf7940567bfc3116d984b2384a207dd19f3dcff12da8cce5d67dd9fe9c01b59518068ee39ffba711a84579c58447232efb1cd48b965b0aa9e59f6d9b805f39216c49c3551de4f99c547bcd01fa646ce047ba695bd355e705b54363b01ff02c395f84e59f2312cbbc0594036"]) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="01000000000000002f2f66696c653000"])
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async, rerun: 32)
r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (rerun: 32)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, 0x0) (async)
ioctl$RNDCLEARPOOL(r6, 0x5206, &(0x7f0000000040)=0x10001)

02:19:25 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="008dc1616aa31f0000002e2f"])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="008dc1616aa31f0000002e2f"]) (async)

02:19:25 executing program 3:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:25 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file1\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ffffff7f000000002e2f66696c653000"])
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={<r7=>0x0})
r8 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r9=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r9, 0x3f, "23acc5", "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"}}, 0x110)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r7, 0x1, r1, 0xffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080))
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)

02:19:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x5020c0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:25 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="008dc1616aa31f0000002e2f"])

02:19:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x5020c0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:25 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file1\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r0, 0x0)
socket$l2tp(0x2, 0x2, 0x73) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'}) (async)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ffffff7f000000002e2f66696c653000"]) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={<r7=>0x0}) (async, rerun: 64)
r8 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r9=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20) (rerun: 32)
write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r9, 0x3f, "23acc5", "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"}}, 0x110) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r7, 0x1, r1, 0xffff}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (rerun: 32)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)

02:19:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x5020c0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:25 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xa)

02:19:25 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file1\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'}) (async)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ffffff7f000000002e2f66696c653000"])
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={<r7=>0x0}) (async)
r8 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r9=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r9, 0x3f, "23acc5", "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"}}, 0x110)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r7, 0x1, r1, 0xffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)

[  973.712981][   T25] audit: type=1326 audit(1656037165.427:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:25 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180))
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="9b0f0000000000002e2f66696c653000bb8dd50c037d5d33e2add70eb4a8b0ba3d2409faa6f4a1b4bf709ba7a6325f289f5ec21f96c98512e8187516df9c4dab14c9bd205fe6e42d46d2c0f17fbb82b69460ca8a45472ea43b21815fc9"])

02:19:25 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xa)

02:19:25 executing program 2:
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d41bff14dd28d80000000000000006ed7f680059fdee6320c978f19b59ee66ae258596eed502eb90a483848399f958d85e4bcf1af6ee74bf716e9e97060fb0ec0aa180b60ffcec94a694d3cefa834685de1f6bdeec80ab626ed9dc2256eb5222103511e8d1794b43d988fb483d520d1e", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250700000006001c0008000000050022000100000008000c0000000000050022000000000008000a0002000000050004001f00000006001b004e22000008000900010000001400080073797a6b616c6c657230000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

02:19:25 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="019fcc6273cb8ce152c4770000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='./file0\x00'])
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xb174}}, './file0\x00'})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)

02:19:25 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="019fcc6273cb8ce152c4770000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='./file0\x00'])
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xb174}}, './file0\x00'})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="019fcc6273cb8ce152c4770000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='./file0\x00']) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xb174}}, './file0\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) (async)

02:19:25 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xa)

02:19:25 executing program 2:
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d41bff14dd28d80000000000000006ed7f680059fdee6320c978f19b59ee66ae258596eed502eb90a483848399f958d85e4bcf1af6ee74bf716e9e97060fb0ec0aa180b60ffcec94a694d3cefa834685de1f6bdeec80ab626ed9dc2256eb5222103511e8d1794b43d988fb483d520d1e", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250700000006001c0008000000050022000100000008000c0000000000050022000000000008000a0002000000050004001f00000006001b004e22000008000900010000001400080073797a6b616c6c657230000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

02:19:25 executing program 2:
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d41bff14dd28d80000000000000006ed7f680059fdee6320c978f19b59ee66ae258596eed502eb90a483848399f958d85e4bcf1af6ee74bf716e9e97060fb0ec0aa180b60ffcec94a694d3cefa834685de1f6bdeec80ab626ed9dc2256eb5222103511e8d1794b43d988fb483d520d1e", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250700000006001c0008000000050022000100000008000c0000000000050022000000000008000a0002000000050004001f00000006001b004e22000008000900010000001400080073797a6b616c6c657230000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d41bff14dd28d80000000000000006ed7f680059fdee6320c978f19b59ee66ae258596eed502eb90a483848399f958d85e4bcf1af6ee74bf716e9e97060fb0ec0aa180b60ffcec94a694d3cefa834685de1f6bdeec80ab626ed9dc2256eb5222103511e8d1794b43d988fb483d520d1e", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250700000006001c0008000000050022000100000008000c0000000000050022000000000008000a0002000000050004001f00000006001b004e22000008000900010000001400080073797a6b616c6c657230000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async)

02:19:25 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x68c040, 0x0)

02:19:25 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="019fcc6273cb8ce152c4770000000100000018000000", @ANYRES32=<r1=>r0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='./file0\x00'])
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xb174}}, './file0\x00'})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="019fcc6273cb8ce152c4770000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='./file0\x00']) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xb174}}, './file0\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) (async)

02:19:25 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x68c040, 0x0)

02:19:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socket$l2tp(0x2, 0x2, 0x73)
timer_create(0x4, &(0x7f0000000200)={0x0, 0x41, 0x1, @thr={&(0x7f0000000040)="bc487baa9c1641845587e76ce0faaefd66c49ef90d094ae48c1ed5a0cec9e710ee6496165c9d9ea11cdc1343dcc2cbbc44bae20bd2bfeacd5a4c47eb73cd9ed27dee415953549a4c3f2b90691f23c6af1cfcb0c730f135538f778cd837c327e588a5793b52a76f15929a4158275c2472d172c19f84a36849defc9867193744377b63e7714e5ddfc4c1acbbc3a380f534019c423c4bd7927262", &(0x7f0000000100)="000e76a3ac94dd93fdb0d06e57a3628dddb26d0f410dd44577fcc39ca868068f462ca970a23c99e49c02e1eafc2a4419cd696a8f42ba6bd5c3698c97b738f2119d5c8aacd8f24a95263095a9547849da27d814f55fa9ca58622eb67dab1e7066c82bc7317e71c7be30bf5e14f549c6dcfa0dfc3787bcdadf4f5d163f3494708b3e8a913fe395695b9ff641c70eb3a4271b0ad5087c0c7c6f2a71064a54a6a1b953e193267be373418226cdeb8f44af00d67597a77f2a6c55c84ff7d91eb166c83d1e0b133518f46d831b17a43e6e"}}, &(0x7f0000000240)=<r1=>0x0)
timer_gettime(r1, &(0x7f0000000280))

[  973.828075][   T25] audit: type=1326 audit(1656037165.547:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21128 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:26 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180))
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="9b0f0000000000002e2f66696c653000bb8dd50c037d5d33e2add70eb4a8b0ba3d2409faa6f4a1b4bf709ba7a6325f289f5ec21f96c98512e8187516df9c4dab14c9bd205fe6e42d46d2c0f17fbb82b69460ca8a45472ea43b21815fc9"])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000080)=[{0x6}]}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180)) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="9b0f0000000000002e2f66696c653000bb8dd50c037d5d33e2add70eb4a8b0ba3d2409faa6f4a1b4bf709ba7a6325f289f5ec21f96c98512e8187516df9c4dab14c9bd205fe6e42d46d2c0f17fbb82b69460ca8a45472ea43b21815fc9"]) (async)

02:19:26 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x68c040, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x68c040, 0x0) (async)

02:19:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffff, 0x400000)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', <r2=>0x0, 0x4, 0x1f, 0x3, 0x5, 0x8, @mcast1, @local, 0x7, 0x700, 0xff}})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x9, 0x77b, 0x8, 0x80, 0xffffffffffffffff, 0x6, '\x00', r2, r1, 0x3, 0x2, 0x4}, 0x48)
r3 = socket$caif_stream(0x25, 0x1, 0x4)
connect$caif(r3, &(0x7f00000002c0)=@rfm={0x25, 0x1, "dc5e459b196d80402dffaa41b6f23f74"}, 0x18)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4b6fa84b7484868e)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xc)

02:19:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socket$l2tp(0x2, 0x2, 0x73)
timer_create(0x4, &(0x7f0000000200)={0x0, 0x41, 0x1, @thr={&(0x7f0000000040)="bc487baa9c1641845587e76ce0faaefd66c49ef90d094ae48c1ed5a0cec9e710ee6496165c9d9ea11cdc1343dcc2cbbc44bae20bd2bfeacd5a4c47eb73cd9ed27dee415953549a4c3f2b90691f23c6af1cfcb0c730f135538f778cd837c327e588a5793b52a76f15929a4158275c2472d172c19f84a36849defc9867193744377b63e7714e5ddfc4c1acbbc3a380f534019c423c4bd7927262", &(0x7f0000000100)="000e76a3ac94dd93fdb0d06e57a3628dddb26d0f410dd44577fcc39ca868068f462ca970a23c99e49c02e1eafc2a4419cd696a8f42ba6bd5c3698c97b738f2119d5c8aacd8f24a95263095a9547849da27d814f55fa9ca58622eb67dab1e7066c82bc7317e71c7be30bf5e14f549c6dcfa0dfc3787bcdadf4f5d163f3494708b3e8a913fe395695b9ff641c70eb3a4271b0ad5087c0c7c6f2a71064a54a6a1b953e193267be373418226cdeb8f44af00d67597a77f2a6c55c84ff7d91eb166c83d1e0b133518f46d831b17a43e6e"}}, &(0x7f0000000240)=<r1=>0x0)
timer_gettime(r1, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
timer_create(0x4, &(0x7f0000000200)={0x0, 0x41, 0x1, @thr={&(0x7f0000000040)="bc487baa9c1641845587e76ce0faaefd66c49ef90d094ae48c1ed5a0cec9e710ee6496165c9d9ea11cdc1343dcc2cbbc44bae20bd2bfeacd5a4c47eb73cd9ed27dee415953549a4c3f2b90691f23c6af1cfcb0c730f135538f778cd837c327e588a5793b52a76f15929a4158275c2472d172c19f84a36849defc9867193744377b63e7714e5ddfc4c1acbbc3a380f534019c423c4bd7927262", &(0x7f0000000100)="000e76a3ac94dd93fdb0d06e57a3628dddb26d0f410dd44577fcc39ca868068f462ca970a23c99e49c02e1eafc2a4419cd696a8f42ba6bd5c3698c97b738f2119d5c8aacd8f24a95263095a9547849da27d814f55fa9ca58622eb67dab1e7066c82bc7317e71c7be30bf5e14f549c6dcfa0dfc3787bcdadf4f5d163f3494708b3e8a913fe395695b9ff641c70eb3a4271b0ad5087c0c7c6f2a71064a54a6a1b953e193267be373418226cdeb8f44af00d67597a77f2a6c55c84ff7d91eb166c83d1e0b133518f46d831b17a43e6e"}}, &(0x7f0000000240)) (async)
timer_gettime(r1, &(0x7f0000000280)) (async)

02:19:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socket$l2tp(0x2, 0x2, 0x73)
timer_create(0x4, &(0x7f0000000200)={0x0, 0x41, 0x1, @thr={&(0x7f0000000040)="bc487baa9c1641845587e76ce0faaefd66c49ef90d094ae48c1ed5a0cec9e710ee6496165c9d9ea11cdc1343dcc2cbbc44bae20bd2bfeacd5a4c47eb73cd9ed27dee415953549a4c3f2b90691f23c6af1cfcb0c730f135538f778cd837c327e588a5793b52a76f15929a4158275c2472d172c19f84a36849defc9867193744377b63e7714e5ddfc4c1acbbc3a380f534019c423c4bd7927262", &(0x7f0000000100)="000e76a3ac94dd93fdb0d06e57a3628dddb26d0f410dd44577fcc39ca868068f462ca970a23c99e49c02e1eafc2a4419cd696a8f42ba6bd5c3698c97b738f2119d5c8aacd8f24a95263095a9547849da27d814f55fa9ca58622eb67dab1e7066c82bc7317e71c7be30bf5e14f549c6dcfa0dfc3787bcdadf4f5d163f3494708b3e8a913fe395695b9ff641c70eb3a4271b0ad5087c0c7c6f2a71064a54a6a1b953e193267be373418226cdeb8f44af00d67597a77f2a6c55c84ff7d91eb166c83d1e0b133518f46d831b17a43e6e"}}, &(0x7f0000000240)=<r1=>0x0)
timer_gettime(r1, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
timer_create(0x4, &(0x7f0000000200)={0x0, 0x41, 0x1, @thr={&(0x7f0000000040)="bc487baa9c1641845587e76ce0faaefd66c49ef90d094ae48c1ed5a0cec9e710ee6496165c9d9ea11cdc1343dcc2cbbc44bae20bd2bfeacd5a4c47eb73cd9ed27dee415953549a4c3f2b90691f23c6af1cfcb0c730f135538f778cd837c327e588a5793b52a76f15929a4158275c2472d172c19f84a36849defc9867193744377b63e7714e5ddfc4c1acbbc3a380f534019c423c4bd7927262", &(0x7f0000000100)="000e76a3ac94dd93fdb0d06e57a3628dddb26d0f410dd44577fcc39ca868068f462ca970a23c99e49c02e1eafc2a4419cd696a8f42ba6bd5c3698c97b738f2119d5c8aacd8f24a95263095a9547849da27d814f55fa9ca58622eb67dab1e7066c82bc7317e71c7be30bf5e14f549c6dcfa0dfc3787bcdadf4f5d163f3494708b3e8a913fe395695b9ff641c70eb3a4271b0ad5087c0c7c6f2a71064a54a6a1b953e193267be373418226cdeb8f44af00d67597a77f2a6c55c84ff7d91eb166c83d1e0b133518f46d831b17a43e6e"}}, &(0x7f0000000240)) (async)
timer_gettime(r1, &(0x7f0000000280)) (async)

02:19:26 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)

02:19:26 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc) (async)

02:19:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x100}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100))
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="000000000000e1002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x75, r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x5d, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x700, 0x10001, 0x7}})
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r4, {0x7}}, './file0\x00'})
ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000180))
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r5)

02:19:26 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)

02:19:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x100}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100))
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="000000000000e1002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x75, r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x5d, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x700, 0x10001, 0x7}})
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r4, {0x7}}, './file0\x00'})
ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000180))
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r5)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) (async)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100)) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="000000000000e1002e2f66696c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x75, r3}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x5d, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x700, 0x10001, 0x7}}) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) (async)
ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000180)) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r5) (async)

02:19:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffff, 0x400000) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', <r2=>0x0, 0x4, 0x1f, 0x3, 0x5, 0x8, @mcast1, @local, 0x7, 0x700, 0xff}})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x9, 0x77b, 0x8, 0x80, 0xffffffffffffffff, 0x6, '\x00', r2, r1, 0x3, 0x2, 0x4}, 0x48) (async)
r3 = socket$caif_stream(0x25, 0x1, 0x4)
connect$caif(r3, &(0x7f00000002c0)=@rfm={0x25, 0x1, "dc5e459b196d80402dffaa41b6f23f74"}, 0x18)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4b6fa84b7484868e) (async)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xc)

[  974.673965][   T25] audit: type=1326 audit(1656037166.387:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21173 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x100}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100)) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="000000000000e1002e2f66696c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x75, r3}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x5d, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x700, 0x10001, 0x7}}) (async)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r4, {0x7}}, './file0\x00'})
ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000180)) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, r5)

02:19:26 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180)) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="9b0f0000000000002e2f66696c653000bb8dd50c037d5d33e2add70eb4a8b0ba3d2409faa6f4a1b4bf709ba7a6325f289f5ec21f96c98512e8187516df9c4dab14c9bd205fe6e42d46d2c0f17fbb82b69460ca8a45472ea43b21815fc9"])

02:19:26 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2b0a41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000cca931ddb11fc1dab0b95d18340cb6b2e74182c3c1a2fec399905aa54e357e7d5c73323981", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./fild0\x00'])
socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)

02:19:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffff, 0x400000) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', <r2=>0x0, 0x4, 0x1f, 0x3, 0x5, 0x8, @mcast1, @local, 0x7, 0x700, 0xff}})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x9, 0x77b, 0x8, 0x80, 0xffffffffffffffff, 0x6, '\x00', r2, r1, 0x3, 0x2, 0x4}, 0x48) (async)
r3 = socket$caif_stream(0x25, 0x1, 0x4)
connect$caif(r3, &(0x7f00000002c0)=@rfm={0x25, 0x1, "dc5e459b196d80402dffaa41b6f23f74"}, 0x18) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4b6fa84b7484868e) (rerun: 32)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xc)

02:19:26 executing program 2:
getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={0x0, 0x2a5, 0x711e})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0xfffffffb, 0x97, "ebd9b621e2161cecc9b851458df27006e2a3fe80e9c99854a4c944f5cf6c35c87267f00b2bd624c29dad4964802f6496af297ae3c6472ccf2b50af95a2e426cdcb67e0598898358e843268d213f6366ab4e10be6bd2439c1278e15b37ed055c282bd6aa8df1958eb43a5c9b55c4ea49f95970600ed6ba58e46649087ed8da47476d21a580da7a9fc86fe1d46c94ef6a4624338d7fa6c12"})

02:19:26 executing program 3:
r0 = semget(0x2, 0x3, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r1, 0x0, 0x0)
r2 = semget(0x2, 0x2, 0x40)
semget(0x1, 0x0, 0x479)
semget(0x1, 0x3, 0x428)
semget(0x1, 0x1, 0x121)
semget(0x1, 0x4, 0x400)
r3 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r3, 0x0, 0x0)
r4 = semget(0x3, 0x2, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$GETNCNT(r2, 0x2, 0xe, &(0x7f0000000140)=""/132)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioprio_get$uid(0x2, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xc)

02:19:26 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2b0a41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000cca931ddb11fc1dab0b95d18340cb6b2e74182c3c1a2fec399905aa54e357e7d5c73323981", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./fild0\x00'])
socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2b0a41, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000cca931ddb11fc1dab0b95d18340cb6b2e74182c3c1a2fec399905aa54e357e7d5c73323981", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./fild0\x00']) (async)
socket$pptp(0x18, 0x1, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc) (async)

02:19:26 executing program 2:
getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={0x0, 0x2a5, 0x711e}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0xfffffffb, 0x97, "ebd9b621e2161cecc9b851458df27006e2a3fe80e9c99854a4c944f5cf6c35c87267f00b2bd624c29dad4964802f6496af297ae3c6472ccf2b50af95a2e426cdcb67e0598898358e843268d213f6366ab4e10be6bd2439c1278e15b37ed055c282bd6aa8df1958eb43a5c9b55c4ea49f95970600ed6ba58e46649087ed8da47476d21a580da7a9fc86fe1d46c94ef6a4624338d7fa6c12"})

02:19:26 executing program 3:
r0 = semget(0x2, 0x3, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r1, 0x0, 0x0) (async)
r2 = semget(0x2, 0x2, 0x40)
semget(0x1, 0x0, 0x479) (async)
semget(0x1, 0x3, 0x428)
semget(0x1, 0x1, 0x121) (async)
semget(0x1, 0x4, 0x400) (async)
r3 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r3, 0x0, 0x0) (async)
r4 = semget(0x3, 0x2, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0) (async)
semctl$GETNCNT(r2, 0x2, 0xe, &(0x7f0000000140)=""/132) (async)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioprio_get$uid(0x2, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xc)

02:19:26 executing program 2:
getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={0x0, 0x2a5, 0x711e})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0xfffffffb, 0x97, "ebd9b621e2161cecc9b851458df27006e2a3fe80e9c99854a4c944f5cf6c35c87267f00b2bd624c29dad4964802f6496af297ae3c6472ccf2b50af95a2e426cdcb67e0598898358e843268d213f6366ab4e10be6bd2439c1278e15b37ed055c282bd6aa8df1958eb43a5c9b55c4ea49f95970600ed6ba58e46649087ed8da47476d21a580da7a9fc86fe1d46c94ef6a4624338d7fa6c12"})

02:19:26 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2b0a41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000cca931ddb11fc1dab0b95d18340cb6b2e74182c3c1a2fec399905aa54e357e7d5c73323981", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./fild0\x00']) (async)
socket$pptp(0x18, 0x1, 0x2) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)

02:19:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x7, 0xdb1, 0x7000, 0x5}, 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:26 executing program 3:
r0 = semget(0x2, 0x3, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0) (async)
r1 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r1, 0x0, 0x0)
r2 = semget(0x2, 0x2, 0x40) (async)
semget(0x1, 0x0, 0x479) (async)
semget(0x1, 0x3, 0x428) (async)
semget(0x1, 0x1, 0x121) (async)
semget(0x1, 0x4, 0x400) (async)
r3 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r3, 0x0, 0x0) (async)
r4 = semget(0x3, 0x2, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$GETNCNT(r2, 0x2, 0xe, &(0x7f0000000140)=""/132)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioprio_get$uid(0x2, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xc)

02:19:26 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8, 0x0, 0x0, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:26 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x4)
r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1c9182dd, 0x1)
ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000440)=0xfff)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)=0x302)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000340)={0x101})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7f}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x24040040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f00000000c0)="888a8bf95a79377953ef12aca1a4d0b12ddd21342d2b3ffe30b8b4f496fe95b7513995e884f9e2f07c4711285ca7ed14b13388d45376390ce8fc9472171c1bf65bf56bbd2acc43b1110c238292b9867fab8e6a9bcc7f64a7ba7eade81f803208f25f1ed8706043338f9348a60332d9322f7e6fba8f3b0fe8572c24add8059c9fec59e4b421301ab2adb8d222242ab72d45c53b74eaa27f98585b8b3e2e1cb7eeeef9077b3b57d8387bfdd726", &(0x7f0000000180)=@tcp6=r4}, 0x20)

02:19:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x7, 0xdb1, 0x7000, 0x5}, 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:26 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8, 0x0, 0x0, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8, 0x0, 0x0, 0x7}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:26 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x4)
r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1c9182dd, 0x1)
ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000440)=0xfff)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)=0x302)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000340)={0x101})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7f}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x24040040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f00000000c0)="888a8bf95a79377953ef12aca1a4d0b12ddd21342d2b3ffe30b8b4f496fe95b7513995e884f9e2f07c4711285ca7ed14b13388d45376390ce8fc9472171c1bf65bf56bbd2acc43b1110c238292b9867fab8e6a9bcc7f64a7ba7eade81f803208f25f1ed8706043338f9348a60332d9322f7e6fba8f3b0fe8572c24add8059c9fec59e4b421301ab2adb8d222242ab72d45c53b74eaa27f98585b8b3e2e1cb7eeeef9077b3b57d8387bfdd726", &(0x7f0000000180)=@tcp6=r4}, 0x20)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x4) (async)
syz_open_dev$usbfs(&(0x7f0000000400), 0x1c9182dd, 0x1) (async)
ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000440)=0xfff) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)=0x302) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000340)={0x101}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7f}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x24040040) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f00000000c0)="888a8bf95a79377953ef12aca1a4d0b12ddd21342d2b3ffe30b8b4f496fe95b7513995e884f9e2f07c4711285ca7ed14b13388d45376390ce8fc9472171c1bf65bf56bbd2acc43b1110c238292b9867fab8e6a9bcc7f64a7ba7eade81f803208f25f1ed8706043338f9348a60332d9322f7e6fba8f3b0fe8572c24add8059c9fec59e4b421301ab2adb8d222242ab72d45c53b74eaa27f98585b8b3e2e1cb7eeeef9077b3b57d8387bfdd726", &(0x7f0000000180)=@tcp6=r4}, 0x20) (async)

02:19:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x7, 0xdb1, 0x7000, 0x5}, 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x7, 0xdb1, 0x7000, 0x5}, 0x8) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)

02:19:26 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8, 0x0, 0x0, 0x7}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:26 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x4)
r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1c9182dd, 0x1)
ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000440)=0xfff)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)=0x302)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000340)={0x101})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7f}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x24040040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f00000000c0)="888a8bf95a79377953ef12aca1a4d0b12ddd21342d2b3ffe30b8b4f496fe95b7513995e884f9e2f07c4711285ca7ed14b13388d45376390ce8fc9472171c1bf65bf56bbd2acc43b1110c238292b9867fab8e6a9bcc7f64a7ba7eade81f803208f25f1ed8706043338f9348a60332d9322f7e6fba8f3b0fe8572c24add8059c9fec59e4b421301ab2adb8d222242ab72d45c53b74eaa27f98585b8b3e2e1cb7eeeef9077b3b57d8387bfdd726", &(0x7f0000000180)=@tcp6=r4}, 0x20)

02:19:26 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e20, 0x3e, @rand_addr=' \x01\x00', 0x401}}}, 0xa0)

02:19:26 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000bedbdf250100000005000d000100000005000d000100000006000e00feff00001400080065727370616e300000000000000000000c001000040000a1310000004617871d1e10c041"], 0x4c}, 0x1, 0x0, 0x0, 0x24004004}, 0x8000)

02:19:26 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0xee01}}, './file0\x00'})
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000b726adc60000"])
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004040)

02:19:26 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = getuid()
r2 = getpgid(0x0)
syz_open_procfs$namespace(r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="010040be5cce377ca08d5b00c1126ce5b9dc1c6cd8b000000040624ef7b21fb05d4a5c8dad5877e1e47fd6232d593ee0c4", @ANYRES32=r0, @ANYRES32=<r3=>r1, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES16=r2])
r4 = semget(0x2, 0x1, 0x40c)
semctl$GETNCNT(r4, 0x4, 0xe, &(0x7f0000000200)=""/140)
r5 = semget(0x2, 0x1, 0x388)
semctl$GETVAL(r5, 0x1, 0xc, &(0x7f0000000100)=""/219)
r6 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r6, 0x0, 0x0)
semctl$SEM_STAT(r6, 0x4, 0x12, &(0x7f00000002c0))
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000040)={{0x3, r3, 0xee00, r1, 0x0, 0x2, 0x480}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r7, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {0xffffff05}}, './file0\x00'})

02:19:26 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e20, 0x3e, @rand_addr=' \x01\x00', 0x401}}}, 0xa0)

02:19:26 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
r1 = getuid() (async)
r2 = getpgid(0x0)
syz_open_procfs$namespace(r2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="010040be5cce377ca08d5b00c1126ce5b9dc1c6cd8b000000040624ef7b21fb05d4a5c8dad5877e1e47fd6232d593ee0c4", @ANYRES32=r0, @ANYRES32=<r3=>r1, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES16=r2]) (async)
r4 = semget(0x2, 0x1, 0x40c)
semctl$GETNCNT(r4, 0x4, 0xe, &(0x7f0000000200)=""/140) (async)
r5 = semget(0x2, 0x1, 0x388)
semctl$GETVAL(r5, 0x1, 0xc, &(0x7f0000000100)=""/219)
r6 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r6, 0x0, 0x0)
semctl$SEM_STAT(r6, 0x4, 0x12, &(0x7f00000002c0)) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000040)={{0x3, r3, 0xee00, r1, 0x0, 0x2, 0x480}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9}) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r7, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {0xffffff05}}, './file0\x00'})

02:19:26 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0xee01}}, './file0\x00'})
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000b726adc60000"])
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004040)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000b726adc60000"]) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) (async)

02:19:26 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
r1 = getuid() (async)
r2 = getpgid(0x0)
syz_open_procfs$namespace(r2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="010040be5cce377ca08d5b00c1126ce5b9dc1c6cd8b000000040624ef7b21fb05d4a5c8dad5877e1e47fd6232d593ee0c4", @ANYRES32=r0, @ANYRES32=<r3=>r1, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES16=r2]) (async)
r4 = semget(0x2, 0x1, 0x40c)
semctl$GETNCNT(r4, 0x4, 0xe, &(0x7f0000000200)=""/140) (async)
r5 = semget(0x2, 0x1, 0x388)
semctl$GETVAL(r5, 0x1, 0xc, &(0x7f0000000100)=""/219) (async)
r6 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r6, 0x0, 0x0) (async)
semctl$SEM_STAT(r6, 0x4, 0x12, &(0x7f00000002c0)) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000040)={{0x3, r3, 0xee00, r1, 0x0, 0x2, 0x480}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r7, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {0xffffff05}}, './file0\x00'})

02:19:26 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e20, 0x3e, @rand_addr=' \x01\x00', 0x401}}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e20, 0x3e, @rand_addr=' \x01\x00', 0x401}}}, 0xa0) (async)

02:19:26 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0xee01}}, './file0\x00'})
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000b726adc60000"])
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004040)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000b726adc60000"]) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) (async)

02:19:26 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x791842, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair(0xf, 0x6, 0x75, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x100}, 0x8)
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:26 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="9a64abe0e16005196848b61a07b8dbf7b740738d694f97a1ce25ec970fba128eedefae74d98d301e2fe1ee1bb2f6674f58b8ef177c087ac2403e3f16dad894346f5e9a1f0bbaf819249643fb970600e87f28406ef1efff14ae29bcb25e40cec95bee581e5c699d6d293867aca0f6d4c55d613024b3a9cdc190776210748e147d07c67acbff9df32986446f06c358eed037384a61c73c62c625812110f38e3cd3c660d412e35c4e969e18fa8a9e30136babb40520140cf99558cbd8d33e34a7b184227571a99a82393746ecfd10c0d559e49525d474ca490691", &(0x7f0000000180)=@udp6=r3, 0x2}, 0x20)
ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000200)={0xad8b, 'syz1\x00'})

02:19:26 executing program 2:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x27ffff85822ada54}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, 0xc)

02:19:27 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000bedbdf250100000005000d000100000005000d000100000006000e00feff00001400080065727370616e300000000000000000000c001000040000a1310000004617871d1e10c041"], 0x4c}, 0x1, 0x0, 0x0, 0x24004004}, 0x8000)

02:19:27 executing program 2:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x27ffff85822ada54}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, 0xc)

02:19:27 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="9a64abe0e16005196848b61a07b8dbf7b740738d694f97a1ce25ec970fba128eedefae74d98d301e2fe1ee1bb2f6674f58b8ef177c087ac2403e3f16dad894346f5e9a1f0bbaf819249643fb970600e87f28406ef1efff14ae29bcb25e40cec95bee581e5c699d6d293867aca0f6d4c55d613024b3a9cdc190776210748e147d07c67acbff9df32986446f06c358eed037384a61c73c62c625812110f38e3cd3c660d412e35c4e969e18fa8a9e30136babb40520140cf99558cbd8d33e34a7b184227571a99a82393746ecfd10c0d559e49525d474ca490691", &(0x7f0000000180)=@udp6=r3, 0x2}, 0x20) (async)
ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000200)={0xad8b, 'syz1\x00'})

02:19:27 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x791842, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair(0xf, 0x6, 0x75, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x100}, 0x8)
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x791842, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socketpair(0xf, 0x6, 0x75, &(0x7f00000000c0)) (async)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x100}, 0x8) (async)
socket$caif_stream(0x25, 0x1, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:27 executing program 2:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101}) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x27ffff85822ada54}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, 0xc)

02:19:27 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000bedbdf250100000005000d000100000005000d000100000006000e00feff00001400080065727370616e300000000000000000000c001000040000a1310000004617871d1e10c041"], 0x4c}, 0x1, 0x0, 0x0, 0x24004004}, 0x8000) (rerun: 32)

02:19:27 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="9a64abe0e16005196848b61a07b8dbf7b740738d694f97a1ce25ec970fba128eedefae74d98d301e2fe1ee1bb2f6674f58b8ef177c087ac2403e3f16dad894346f5e9a1f0bbaf819249643fb970600e87f28406ef1efff14ae29bcb25e40cec95bee581e5c699d6d293867aca0f6d4c55d613024b3a9cdc190776210748e147d07c67acbff9df32986446f06c358eed037384a61c73c62c625812110f38e3cd3c660d412e35c4e969e18fa8a9e30136babb40520140cf99558cbd8d33e34a7b184227571a99a82393746ecfd10c0d559e49525d474ca490691", &(0x7f0000000180)=@udp6=r3, 0x2}, 0x20)
ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000200)={0xad8b, 'syz1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="9a64abe0e16005196848b61a07b8dbf7b740738d694f97a1ce25ec970fba128eedefae74d98d301e2fe1ee1bb2f6674f58b8ef177c087ac2403e3f16dad894346f5e9a1f0bbaf819249643fb970600e87f28406ef1efff14ae29bcb25e40cec95bee581e5c699d6d293867aca0f6d4c55d613024b3a9cdc190776210748e147d07c67acbff9df32986446f06c358eed037384a61c73c62c625812110f38e3cd3c660d412e35c4e969e18fa8a9e30136babb40520140cf99558cbd8d33e34a7b184227571a99a82393746ecfd10c0d559e49525d474ca490691", &(0x7f0000000180)=@udp6=r3, 0x2}, 0x20) (async)
ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000200)={0xad8b, 'syz1\x00'}) (async)

02:19:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0x0)

02:19:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0x0)

02:19:27 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x791842, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair(0xf, 0x6, 0x75, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x100}, 0x8)
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x791842, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socketpair(0xf, 0x6, 0x75, &(0x7f00000000c0)) (async)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x100}, 0x8) (async)
socket$caif_stream(0x25, 0x1, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:27 executing program 5:
getuid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0x0)

02:19:27 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x3c}}, 0x40040)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2)
r4 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, r4)

[  975.783707][   T25] kauditd_printk_skb: 3 callbacks suppressed
[  975.783721][   T25] audit: type=1326 audit(1656037167.497:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:27 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x3c}}, 0x40040) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2)
r4 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, r4)

[  975.837912][   T25] audit: type=1326 audit(1656037167.557:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21378 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:27 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:27 executing program 2:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x17, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_RECV_SEQ, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xe}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x10678c8b28bc7dc3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r1, {0x10000}}, './file0\x00'})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000200))
ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f00000001c0)=0x8000)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)

02:19:27 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:27 executing program 1:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101}) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x3c}}, 0x40040)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2)
r4 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, r4)

02:19:27 executing program 2:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x17, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_RECV_SEQ, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xe}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x10678c8b28bc7dc3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r1, {0x10000}}, './file0\x00'}) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000200))
ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f00000001c0)=0x8000)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, 0xc) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

02:19:27 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:27 executing program 2:
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000340)={0x101}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x17, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_RECV_SEQ, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xe}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x10678c8b28bc7dc3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) (async)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r1, {0x10000}}, './file0\x00'}) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000200)) (async)
ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f00000001c0)=0x8000) (async)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, 0xc) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

02:19:27 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x11)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  975.849307][   T25] audit: type=1326 audit(1656037167.567:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21404 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:28 executing program 5:
getuid() (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:28 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x17}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x8000)

02:19:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

02:19:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) (rerun: 32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x11) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x11)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x11) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

02:19:28 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x17}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x8000)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x17}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x8000) (async)

02:19:28 executing program 5:
getuid() (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

[  976.698856][   T25] audit: type=1326 audit(1656037168.417:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21444 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:28 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x17}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x8000)

02:19:28 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00')
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)

02:19:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2, {0x3f}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={<r4=>0x0})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x0, r5, 0x4, 0x80000})
read$rfkill(r2, &(0x7f00000000c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:28 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async)

02:19:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2, {0x3f}}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={<r4=>0x0}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x0, r5, 0x4, 0x80000}) (async)
read$rfkill(r2, &(0x7f00000000c0), 0x8) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async)

02:19:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2, {0x3f}}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={<r4=>0x0})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x0, r5, 0x4, 0x80000}) (async)
read$rfkill(r2, &(0x7f00000000c0), 0x8) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

[  976.744876][   T25] audit: type=1326 audit(1656037168.457:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21466 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  976.773730][   T25] audit: type=1326 audit(1656037168.487:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21475 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:28 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$isdn_base(0x22, 0x3, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:28 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001900000229bd7000b8929b8ebea39e83724f73be09a99c02484687b28c2cdf325d00030013000008000100ffffffff05001ba48aaa899afa2d47bbea8e2f169ceb00b091a7daa650f1c823e1a50c4e930c6c096635833b0e659ddec33b3e127574dba1fda3edd62954252d33fe79222ece4cc50000"], 0x34}}, 0xc8844)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1})

02:19:28 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001900000229bd7000b8929b8ebea39e83724f73be09a99c02484687b28c2cdf325d00030013000008000100ffffffff05001ba48aaa899afa2d47bbea8e2f169ceb00b091a7daa650f1c823e1a50c4e930c6c096635833b0e659ddec33b3e127574dba1fda3edd62954252d33fe79222ece4cc50000"], 0x34}}, 0xc8844)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1})

02:19:29 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00')
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00') (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:29 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$isdn_base(0x22, 0x3, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:29 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001900000229bd7000b8929b8ebea39e83724f73be09a99c02484687b28c2cdf325d00030013000008000100ffffffff05001ba48aaa899afa2d47bbea8e2f169ceb00b091a7daa650f1c823e1a50c4e930c6c096635833b0e659ddec33b3e127574dba1fda3edd62954252d33fe79222ece4cc50000"], 0x34}}, 0xc8844) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0xdc9, 0x1}, 0x5, 0x3})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010018020000000000000000", @ANYRES32=<r2=>r1, @ANYBLOB="01000000000000002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="7859f4cf80c534af87010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\b|\x00\x00\x00\x00\x00\x00./file0\x00'])

02:19:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1})

02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0xdc9, 0x1}, 0x5, 0x3}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010018020000000000000000", @ANYRES32=<r2=>r1, @ANYBLOB="01000000000000002e2f66696c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="7859f4cf80c534af87010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\b|\x00\x00\x00\x00\x00\x00./file0\x00'])

02:19:29 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101081, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0xdc9, 0x1}, 0x5, 0x3})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010018020000000000000000", @ANYRES32=<r2=>r1, @ANYBLOB="01000000000000002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="7859f4cf80c534af87010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\b|\x00\x00\x00\x00\x00\x00./file0\x00'])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0xdc9, 0x1}, 0x5, 0x3}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010018020000000000000000", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="7859f4cf80c534af87010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\b|\x00\x00\x00\x00\x00\x00./file0\x00']) (async)

02:19:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:29 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101081, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)

02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

[  977.622686][   T25] audit: type=1326 audit(1656037169.337:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:29 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00')
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:29 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101081, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101081, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:29 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040)="a813d03d6f56c3ac0f32c9c550daafed1a1c7c57803cd1998c5d2a51ef8bbfa8b7dc983263d0be1f165045928d5e62335ca76551a3153cbaccebfb0968a3add8dec1e94a3ef7539fd7edfd6507e85d139ccb39e9d5f3d1f65095aeb3907d98a4c499205e8a5adf14518d3fdb3538d7e0775b9866a962eb65", &(0x7f00000000c0)=@tcp6}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={0x0, 0x6, 0x61})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x410380, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, r1)

02:19:29 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x800)

02:19:29 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file0\x00'})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x9c9b, 0x15, [{0x1}, {0xf}, {0xf, 0x1}, {0xa, 0x1}, {0xf, 0x1}, {0x3}, {0xf, 0x1}, {0x6, 0x1}, {0x9}, {0x8, 0x1}, {0x6}, {0xa, 0x1}, {0xe}, {0xd, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0xa, 0x1}, {0xb}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}]})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)

02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0xc})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000", @ANYRES32=r6, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x1, 0x3, &(0x7f00000000c0)="05e141580687e18871459f7c61a9bcbf2a6108720b9633593610255e873ad247ec2d5ff99e5aa01cfdfc4c79f5fd329f0db6e0a4b1a4a9dbb2cc8a7c"})
r7 = getpgrp(0x0)
process_vm_readv(r7, &(0x7f00000035c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004880)=[{&(0x7f0000003680)=""/214, 0xd6}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x2, 0x0)
semget(0x2, 0x4, 0x769)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)

02:19:29 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file0\x00'})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x9c9b, 0x15, [{0x1}, {0xf}, {0xf, 0x1}, {0xa, 0x1}, {0xf, 0x1}, {0x3}, {0xf, 0x1}, {0x6, 0x1}, {0x9}, {0x8, 0x1}, {0x6}, {0xa, 0x1}, {0xe}, {0xd, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0xa, 0x1}, {0xb}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)

02:19:29 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040)="a813d03d6f56c3ac0f32c9c550daafed1a1c7c57803cd1998c5d2a51ef8bbfa8b7dc983263d0be1f165045928d5e62335ca76551a3153cbaccebfb0968a3add8dec1e94a3ef7539fd7edfd6507e85d139ccb39e9d5f3d1f65095aeb3907d98a4c499205e8a5adf14518d3fdb3538d7e0775b9866a962eb65", &(0x7f00000000c0)=@tcp6}, 0x20) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={0x0, 0x6, 0x61}) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x410380, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, r1)

[  977.736884][   T25] audit: type=1326 audit(1656037169.457:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  977.771026][   T25] audit: type=1326 audit(1656037169.497:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0xc})
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000", @ANYRES32=r6, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x1, 0x3, &(0x7f00000000c0)="05e141580687e18871459f7c61a9bcbf2a6108720b9633593610255e873ad247ec2d5ff99e5aa01cfdfc4c79f5fd329f0db6e0a4b1a4a9dbb2cc8a7c"})
r7 = getpgrp(0x0)
process_vm_readv(r7, &(0x7f00000035c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004880)=[{&(0x7f0000003680)=""/214, 0xd6}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x2, 0x0)
semget(0x2, 0x4, 0x769)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0xc}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000", @ANYRES32=r6, @ANYBLOB="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"]) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x1, 0x3, &(0x7f00000000c0)="05e141580687e18871459f7c61a9bcbf2a6108720b9633593610255e873ad247ec2d5ff99e5aa01cfdfc4c79f5fd329f0db6e0a4b1a4a9dbb2cc8a7c"}) (async)
getpgrp(0x0) (async)
process_vm_readv(r7, &(0x7f00000035c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004880)=[{&(0x7f0000003680)=""/214, 0xd6}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x2, 0x0) (async)
semget(0x2, 0x4, 0x769) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) (async)

02:19:29 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file0\x00'})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x9c9b, 0x15, [{0x1}, {0xf}, {0xf, 0x1}, {0xa, 0x1}, {0xf, 0x1}, {0x3}, {0xf, 0x1}, {0x6, 0x1}, {0x9}, {0x8, 0x1}, {0x6}, {0xa, 0x1}, {0xe}, {0xd, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0xa, 0x1}, {0xb}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)

02:19:29 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040)="a813d03d6f56c3ac0f32c9c550daafed1a1c7c57803cd1998c5d2a51ef8bbfa8b7dc983263d0be1f165045928d5e62335ca76551a3153cbaccebfb0968a3add8dec1e94a3ef7539fd7edfd6507e85d139ccb39e9d5f3d1f65095aeb3907d98a4c499205e8a5adf14518d3fdb3538d7e0775b9866a962eb65", &(0x7f00000000c0)=@tcp6}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={0x0, 0x6, 0x61})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x410380, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, r1)

02:19:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x354180, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0xc}) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0) (async)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000", @ANYRES32=r6, @ANYBLOB="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"]) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x1, 0x3, &(0x7f00000000c0)="05e141580687e18871459f7c61a9bcbf2a6108720b9633593610255e873ad247ec2d5ff99e5aa01cfdfc4c79f5fd329f0db6e0a4b1a4a9dbb2cc8a7c"}) (async)
r7 = getpgrp(0x0)
process_vm_readv(r7, &(0x7f00000035c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004880)=[{&(0x7f0000003680)=""/214, 0xd6}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x2, 0x0) (async)
semget(0x2, 0x4, 0x769) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)

[  977.807357][T21585] autofs4:pid:21585:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(134217733.2868903936), cmd(0xc0189371)
[  977.807386][T21585] autofs4:pid:21585:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371)
02:19:29 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c82, r3)

02:19:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x354180, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

[  977.847601][T21597] autofs4:pid:21597:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(134217733.2868903936), cmd(0xc0189371)
[  977.847629][T21597] autofs4:pid:21597:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371)
02:19:30 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:30 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x354180, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x354180, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)

02:19:30 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x800)

02:19:30 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c82, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c82, r3) (async)

02:19:30 executing program 2:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./file0\x00'])
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe82}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ']\xa2+'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40084)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, 0xc)

02:19:30 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c82, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c82, r3) (async)

02:19:30 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040))
socketpair(0xf, 0x2, 0x800, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xe76}}, './file0\x00'})

02:19:30 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:30 executing program 2:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000d4b8f6bb02f65372cbe687539e864b725f6f1a44d8c3623970fb51e3e2e58bca1504150472c7791d74a9d38b36030004000000000000a644b33bdb120857da3e1993216f3d767e156a6203ad2cad0a6c8289910e0d4dfec047e47b5ddaf22370b4a9b5765ce855be887b8d5b1857e1cdecc0bd2f63682ded5bd163a86dc293f3e01bcbed199c65a8c9f8f5b3fda3ad937f0466c1ab896418101295235282b49bc713faebfc020a6eba3de5731d8eeeb4514a533afe7f1414a4cce9dd2f2c13f1a51d85fa2badc92e5a3315d0a095d5661d3e2a3998dca2b3e763fbb14befdeb303a31c695fbd2bcd69a9b0fafc0e48a7ca47906cb2e3135ad28fc4051bd3589a068ae64d8ff408821e16c6cb75070aadacea05dea9d384f8247c1dc1", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./file0\x00']) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe82}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ']\xa2+'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) (async)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, 0xc)

02:19:30 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

[  978.608145][   T25] audit: type=1326 audit(1656037170.327:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:30 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040))
socketpair(0xf, 0x2, 0x800, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xe76}}, './file0\x00'})

02:19:30 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)) (async)
socketpair(0xf, 0x2, 0x800, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xe76}}, './file0\x00'})

02:19:30 executing program 2:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000d4b8f6bb02f65372cbe687539e864b725f6f1a44d8c3623970fb51e3e2e58bca1504150472c7791d74a9d38b36030004000000000000a644b33bdb120857da3e1993216f3d767e156a6203ad2cad0a6c8289910e0d4dfec047e47b5ddaf22370b4a9b5765ce855be887b8d5b1857e1cdecc0bd2f63682ded5bd163a86dc293f3e01bcbed199c65a8c9f8f5b3fda3ad937f0466c1ab896418101295235282b49bc713faebfc020a6eba3de5731d8eeeb4514a533afe7f1414a4cce9dd2f2c13f1a51d85fa2badc92e5a3315d0a095d5661d3e2a3998dca2b3e763fbb14befdeb303a31c695fbd2bcd69a9b0fafc0e48a7ca47906cb2e3135ad28fc4051bd3589a068ae64d8ff408821e16c6cb75070aadacea05dea9d384f8247c1dc1", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./file0\x00'])
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe82}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ']\xa2+'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40084)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, 0xc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000d4b8f6bb02f65372cbe687539e864b725f6f1a44d8c3623970fb51e3e2e58bca1504150472c7791d74a9d38b36030004000000000000a644b33bdb120857da3e1993216f3d767e156a6203ad2cad0a6c8289910e0d4dfec047e47b5ddaf22370b4a9b5765ce855be887b8d5b1857e1cdecc0bd2f63682ded5bd163a86dc293f3e01bcbed199c65a8c9f8f5b3fda3ad937f0466c1ab896418101295235282b49bc713faebfc020a6eba3de5731d8eeeb4514a533afe7f1414a4cce9dd2f2c13f1a51d85fa2badc92e5a3315d0a095d5661d3e2a3998dca2b3e763fbb14befdeb303a31c695fbd2bcd69a9b0fafc0e48a7ca47906cb2e3135ad28fc4051bd3589a068ae64d8ff408821e16c6cb75070aadacea05dea9d384f8247c1dc1", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./file0\x00']) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe82}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ']\xa2+'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, 0xc) (async)

02:19:30 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="0100960001000000180000009c0d30b344beb9aa24c9e32a21f4cbe36580aef58f57c494051d5d1cf2f9d944f18e81a792e3847c6d864805d29f48c5bcc16cb9a906ab171753e6a845fc2353b06f0a2c1baf0bbb30620870", @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r1, 0x353b, 0x800})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

02:19:31 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="0100960001000000180000009c0d30b344beb9aa24c9e32a21f4cbe36580aef58f57c494051d5d1cf2f9d944f18e81a792e3847c6d864805d29f48c5bcc16cb9a906ab171753e6a845fc2353b06f0a2c1baf0bbb30620870", @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r1, 0x353b, 0x800})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="0100960001000000180000009c0d30b344beb9aa24c9e32a21f4cbe36580aef58f57c494051d5d1cf2f9d944f18e81a792e3847c6d864805d29f48c5bcc16cb9a906ab171753e6a845fc2353b06f0a2c1baf0bbb30620870", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r1, 0x353b, 0x800}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)

02:19:31 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x800)

02:19:31 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:31 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="0100960001000000180000009c0d30b344beb9aa24c9e32a21f4cbe36580aef58f57c494051d5d1cf2f9d944f18e81a792e3847c6d864805d29f48c5bcc16cb9a906ab171753e6a845fc2353b06f0a2c1baf0bbb30620870", @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r1, 0x353b, 0x800}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

02:19:31 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:31 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1ff, 0x1, 0x6, 0xfff}, {0x4, 0x0, 0x4, 0x7}, {0x2, 0x2c, 0x81, 0x4c}, {0x3ff, 0x36, 0x0, 0x9}, {0x3e, 0x9e, 0x0, 0x5}, {0x2, 0x40, 0x9, 0x2e}, {0x4, 0x7, 0x0, 0x2}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:31 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="040000000000e1ff2d2f66696c653000"])
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

02:19:31 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x440400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:31 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="040000000000e1ff2d2f66696c653000"])
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="040000000000e1ff2d2f66696c653000"]) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)

02:19:31 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1ff, 0x1, 0x6, 0xfff}, {0x4, 0x0, 0x4, 0x7}, {0x2, 0x2c, 0x81, 0x4c}, {0x3ff, 0x36, 0x0, 0x9}, {0x3e, 0x9e, 0x0, 0x5}, {0x2, 0x40, 0x9, 0x2e}, {0x4, 0x7, 0x0, 0x2}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x440400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:31 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d1}, 0x0)
syz_io_uring_setup(0x5e20, &(0x7f0000000080)={0x0, 0x984c, 0x10, 0x3, 0x103, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0/file0\x00'})
recvmsg$can_bcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000780)=""/23, 0x17}, {&(0x7f0000000540)=""/202, 0xca}], 0x5, &(0x7f00000006c0)=""/101, 0x65}, 0x12000)

02:19:31 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="040000000000e1ff2d2f66696c653000"])
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x440400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (rerun: 64)

02:19:31 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1ff, 0x1, 0x6, 0xfff}, {0x4, 0x0, 0x4, 0x7}, {0x2, 0x2c, 0x81, 0x4c}, {0x3ff, 0x36, 0x0, 0x9}, {0x3e, 0x9e, 0x0, 0x5}, {0x2, 0x40, 0x9, 0x2e}, {0x4, 0x7, 0x0, 0x2}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1ff, 0x1, 0x6, 0xfff}, {0x4, 0x0, 0x4, 0x7}, {0x2, 0x2c, 0x81, 0x4c}, {0x3ff, 0x36, 0x0, 0x9}, {0x3e, 0x9e, 0x0, 0x5}, {0x2, 0x40, 0x9, 0x2e}, {0x4, 0x7, 0x0, 0x2}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:31 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d1}, 0x0)
syz_io_uring_setup(0x5e20, &(0x7f0000000080)={0x0, 0x984c, 0x10, 0x3, 0x103, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0/file0\x00'})
recvmsg$can_bcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000780)=""/23, 0x17}, {&(0x7f0000000540)=""/202, 0xca}], 0x5, &(0x7f00000006c0)=""/101, 0x65}, 0x12000)

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'})

02:19:31 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x80006}}, './file0\x00'})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file1\x00'})

02:19:31 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d1}, 0x0)
syz_io_uring_setup(0x5e20, &(0x7f0000000080)={0x0, 0x984c, 0x10, 0x3, 0x103, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0/file0\x00'})
recvmsg$can_bcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000780)=""/23, 0x17}, {&(0x7f0000000540)=""/202, 0xca}], 0x5, &(0x7f00000006c0)=""/101, 0x65}, 0x12000)

02:19:31 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (async)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x80006}}, './file0\x00'})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file1\x00'})

02:19:31 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, <r2=>0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, r2}}, './file0\x00'})

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) (async)

02:19:31 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x80006}}, './file0\x00'})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (async)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x80006}}, './file0\x00'}) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) (async)

02:19:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) (async)

02:19:31 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0x8, 0x1, "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", 0x20, 0xff, 0x3f, 0x0, 0x2f, 0x8, 0x1}}}, 0x128)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:31 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040))
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'})

02:19:31 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0x8, 0x1, "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", 0x20, 0xff, 0x3f, 0x0, 0x2f, 0x8, 0x1}}}, 0x128)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0x8, 0x1, "e67e4f45a4ad7bfece5810ced96970d30052869d498a25f8e095be53352f178bee726a01fce2326270f91b350ab5162bdfd64f9588acbf0012186dca154a48ad0f80e1a14237c175e84f5617029c29ea89b9b729dbfaea784fda025c17a26dcef9b21aa00483b2a8fc91d525a6d66ba3de79a53f8440c3bc4e21ecd2ce0c38a6047af360f65fd892508f22d25c18926363df440106b645d6458bfdc80b531e5bb07b1bd5bf8198b5921845cc4d237b090b54e0b3ab61ebfcfe88ba862fe6193a25261a99cd8bd1df1270fb33e86d5b00dac9afe1300338179dd7de496aaed57a68e5542a138f7c3f3ab8d47b43a3b4a82f44ed699277a8656a24ef7eca0151af", 0x20, 0xff, 0x3f, 0x0, 0x2f, 0x8, 0x1}}}, 0x128) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:31 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x6068}}, './file0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)

02:19:31 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'})

02:19:31 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x6068}}, './file0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6068}}, './file0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async)

02:19:31 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040))
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x541b, 0xc)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'})

02:19:31 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0x8, 0x1, "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", 0x20, 0xff, 0x3f, 0x0, 0x2f, 0x8, 0x1}}}, 0x128)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0x8, 0x1, "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", 0x20, 0xff, 0x3f, 0x0, 0x2f, 0x8, 0x1}}}, 0x128) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:32 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x8}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, <r2=>0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, r2}}, './file0\x00'})

02:19:32 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0xffffffffffffffff, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)

02:19:32 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x6068}}, './file0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6068}}, './file0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async)

02:19:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2bc, 0x20080)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x20044001)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5)
r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>r1}, './file0\x00'})
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005000}, 0x8805)

02:19:32 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0xffffffffffffffff, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)

02:19:32 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0xffffffffffffffff, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0xffffffffffffffff, 0x400) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) (async)

02:19:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2bc, 0x20080)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x20044001)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5)
r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>r1}, './file0\x00'})
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005000}, 0x8805)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0x2bc, 0x20080) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x20044001) (async)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005000}, 0x8805) (async)

02:19:32 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x7}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="08010000180000022cbd7000fedbdf2502801471fd03c80900260000080001006401010206001d004e23000008000200e000000108000200000000000000090000802420a3fd3c494aa1a3c2263528a6a758f736d4c312e807ba2eb193846c60fe5d09dbbf8d7188e400537f1fdfa52e3f4039c1cc297fa9261c4841f4e8e7ecc898cc73e101f81c92d1dec53fada684949e05125fdb77a912c68cb1b2b8021010a41082099c89030d8ba93b569ccc", @ANYRES32=0x0, @ANYBLOB="08000f0009000000b8001680b400010001000000000000006c06040302109e0ffe8000000000000000000000000000bbfc010000000000000000000000000001fc010000000000000000000000000000ff010000000000000000000000000001fc01000000000000000000000000000120010000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000fffffffffffffe80000000000000000000000000000f200100"/192], 0x108}, 0x1, 0x0, 0x0, 0x4004041}, 0x11)

02:19:32 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x7}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="08010000180000022cbd7000fedbdf2502801471fd03c80900260000080001006401010206001d004e23000008000200e000000108000200000000000000090000802420a3fd3c494aa1a3c2263528a6a758f736d4c312e807ba2eb193846c60fe5d09dbbf8d7188e400537f1fdfa52e3f4039c1cc297fa9261c4841f4e8e7ecc898cc73e101f81c92d1dec53fada684949e05125fdb77a912c68cb1b2b8021010a41082099c89030d8ba93b569ccc", @ANYRES32=0x0, @ANYBLOB="08000f0009000000b8001680b400010001000000000000006c06040302109e0ffe8000000000000000000000000000bbfc010000000000000000000000000001fc010000000000000000000000000000ff010000000000000000000000000001fc01000000000000000000000000000120010000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000fffffffffffffe80000000000000000000000000000f200100"/192], 0x108}, 0x1, 0x0, 0x0, 0x4004041}, 0x11)

02:19:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2bc, 0x20080)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x20044001)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5)
r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>r1}, './file0\x00'}) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005000}, 0x8805)

02:19:32 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = getpgid(0x0)
syz_open_procfs$namespace(r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="dc040d93e76209f347ca78ef9f7b8570109b3cc5a8c60055b2de907c96175996aee1fd26f3a7737b439a2ec3bf9c804359eec7f8926295eeab68e3035a61ab1de2183b3e20ba2009537d1ddfd45c2b8db5cf2d67d6b8b82f26d3349b4b234ba664219bfe4cbd758e2535aff07554ad32efb3bb5e71e27312f00a7e9157bf8ed881c618dbfd0025246cd09c46a44eb7c7", @ANYBLOB="ffffff7f000000002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

02:19:32 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x7}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="08010000180000022cbd7000fedbdf2502801471fd03c80900260000080001006401010206001d004e23000008000200e000000108000200000000000000090000802420a3fd3c494aa1a3c2263528a6a758f736d4c312e807ba2eb193846c60fe5d09dbbf8d7188e400537f1fdfa52e3f4039c1cc297fa9261c4841f4e8e7ecc898cc73e101f81c92d1dec53fada684949e05125fdb77a912c68cb1b2b8021010a41082099c89030d8ba93b569ccc", @ANYRES32=0x0, @ANYBLOB="08000f0009000000b8001680b400010001000000000000006c06040302109e0ffe8000000000000000000000000000bbfc010000000000000000000000000001fc010000000000000000000000000000ff010000000000000000000000000001fc01000000000000000000000000000120010000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000fffffffffffffe80000000000000000000000000000f200100"/192], 0x108}, 0x1, 0x0, 0x0, 0x4004041}, 0x11)

02:19:33 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, <r2=>0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, r2}}, './file0\x00'})

02:19:33 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = getpgid(0x0)
syz_open_procfs$namespace(r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="dc040d93e76209f347ca78ef9f7b8570109b3cc5a8c60055b2de907c96175996aee1fd26f3a7737b439a2ec3bf9c804359eec7f8926295eeab68e3035a61ab1de2183b3e20ba2009537d1ddfd45c2b8db5cf2d67d6b8b82f26d3349b4b234ba664219bfe4cbd758e2535aff07554ad32efb3bb5e71e27312f00a7e9157bf8ed881c618dbfd0025246cd09c46a44eb7c7", @ANYBLOB="ffffff7f000000002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
getpgid(0x0) (async)
syz_open_procfs$namespace(r1, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="dc040d93e76209f347ca78ef9f7b8570109b3cc5a8c60055b2de907c96175996aee1fd26f3a7737b439a2ec3bf9c804359eec7f8926295eeab68e3035a61ab1de2183b3e20ba2009537d1ddfd45c2b8db5cf2d67d6b8b82f26d3349b4b234ba664219bfe4cbd758e2535aff07554ad32efb3bb5e71e27312f00a7e9157bf8ed881c618dbfd0025246cd09c46a44eb7c7", @ANYBLOB="ffffff7f000000002e2f66696c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)

02:19:33 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0200000000000000000000696c653000a0a6b57330420c3673b44d16d475b5044ef06ac2c4d5a8783cd7724bfd8a7e9e6d0ec9fc9da5e3abc6b10255b4295f8f0d6f6c5471e9b869420b391509ae5202be0d8fe03fe4b403881710c357ee702f10931d6f02006a1d977ac22dff499e82d85042815d6f2d9d257be023215b401926684c834e79071d64db272be217957a05b72f7cbcd99d4aa904a73a45c48c06b99585df842a65417b9055683e81c5facc374c06e1974c032b444f9a10c97dfdf99f45516b7207bdb15a2358c6042d40cd324e"])
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000400000000408e5b90ea3b6c9b86cc4f", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])

02:19:33 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:33 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r4 = socket$pptp(0x18, 0x1, 0x2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="011dc80047836e0730eb15f21b1a04d2e325a7cb25b0a5e110e49e947256572b3ec7ef2c08c7e0f43b4f34ce271b147b4404964cdcdc59c17ddb98d12b93718f4804240397403869cc", @ANYRES32=r4, @ANYBLOB="ff0366e96c653000"])

02:19:33 executing program 4:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./file0\x00'])
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe82}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ']\xa2+'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40084)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x541b, 0xc)

02:19:33 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0200000000000000000000696c653000a0a6b57330420c3673b44d16d475b5044ef06ac2c4d5a8783cd7724bfd8a7e9e6d0ec9fc9da5e3abc6b10255b4295f8f0d6f6c5471e9b869420b391509ae5202be0d8fe03fe4b403881710c357ee702f10931d6f02006a1d977ac22dff499e82d85042815d6f2d9d257be023215b401926684c834e79071d64db272be217957a05b72f7cbcd99d4aa904a73a45c48c06b99585df842a65417b9055683e81c5facc374c06e1974c032b444f9a10c97dfdf99f45516b7207bdb15a2358c6042d40cd324e"])
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000400000000408e5b90ea3b6c9b86cc4f", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0200000000000000000000696c653000a0a6b57330420c3673b44d16d475b5044ef06ac2c4d5a8783cd7724bfd8a7e9e6d0ec9fc9da5e3abc6b10255b4295f8f0d6f6c5471e9b869420b391509ae5202be0d8fe03fe4b403881710c357ee702f10931d6f02006a1d977ac22dff499e82d85042815d6f2d9d257be023215b401926684c834e79071d64db272be217957a05b72f7cbcd99d4aa904a73a45c48c06b99585df842a65417b9055683e81c5facc374c06e1974c032b444f9a10c97dfdf99f45516b7207bdb15a2358c6042d40cd324e"]) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000400000000408e5b90ea3b6c9b86cc4f", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)

02:19:33 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r4 = socket$pptp(0x18, 0x1, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="011dc80047836e0730eb15f21b1a04d2e325a7cb25b0a5e110e49e947256572b3ec7ef2c08c7e0f43b4f34ce271b147b4404964cdcdc59c17ddb98d12b93718f4804240397403869cc", @ANYRES32=r4, @ANYBLOB="ff0366e96c653000"])

02:19:33 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:33 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async, rerun: 64)
r1 = getpgid(0x0) (rerun: 64)
syz_open_procfs$namespace(r1, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="dc040d93e76209f347ca78ef9f7b8570109b3cc5a8c60055b2de907c96175996aee1fd26f3a7737b439a2ec3bf9c804359eec7f8926295eeab68e3035a61ab1de2183b3e20ba2009537d1ddfd45c2b8db5cf2d67d6b8b82f26d3349b4b234ba664219bfe4cbd758e2535aff07554ad32efb3bb5e71e27312f00a7e9157bf8ed881c618dbfd0025246cd09c46a44eb7c7", @ANYBLOB="ffffff7f000000002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

02:19:33 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'}) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r4 = socket$pptp(0x18, 0x1, 0x2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="011dc80047836e0730eb15f21b1a04d2e325a7cb25b0a5e110e49e947256572b3ec7ef2c08c7e0f43b4f34ce271b147b4404964cdcdc59c17ddb98d12b93718f4804240397403869cc", @ANYRES32=r4, @ANYBLOB="ff0366e96c653000"]) (rerun: 64)

02:19:33 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = semget(0x0, 0x3, 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r1)

02:19:33 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c82, r3)

[  981.312632][   T25] kauditd_printk_skb: 3 callbacks suppressed
[  981.312645][   T25] audit: type=1326 audit(1656037173.027:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21916 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:33 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:33 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'})

02:19:33 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = semget(0x0, 0x3, 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r1)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
semget(0x0, 0x3, 0x2) (async)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r1) (async)

02:19:33 executing program 3:
socketpair(0x2a, 0x3, 0x3, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xa501}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x60000}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="014025f30000060018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file1\x00'])
r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x8000000000000000, 0x482f82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$USBDEVFS_GET_SPEED(r4, 0x551f)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xc)

02:19:33 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0200000000000000000000696c653000a0a6b57330420c3673b44d16d475b5044ef06ac2c4d5a8783cd7724bfd8a7e9e6d0ec9fc9da5e3abc6b10255b4295f8f0d6f6c5471e9b869420b391509ae5202be0d8fe03fe4b403881710c357ee702f10931d6f02006a1d977ac22dff499e82d85042815d6f2d9d257be023215b401926684c834e79071d64db272be217957a05b72f7cbcd99d4aa904a73a45c48c06b99585df842a65417b9055683e81c5facc374c06e1974c032b444f9a10c97dfdf99f45516b7207bdb15a2358c6042d40cd324e"])
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000400000000408e5b90ea3b6c9b86cc4f", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0200000000000000000000696c653000a0a6b57330420c3673b44d16d475b5044ef06ac2c4d5a8783cd7724bfd8a7e9e6d0ec9fc9da5e3abc6b10255b4295f8f0d6f6c5471e9b869420b391509ae5202be0d8fe03fe4b403881710c357ee702f10931d6f02006a1d977ac22dff499e82d85042815d6f2d9d257be023215b401926684c834e79071d64db272be217957a05b72f7cbcd99d4aa904a73a45c48c06b99585df842a65417b9055683e81c5facc374c06e1974c032b444f9a10c97dfdf99f45516b7207bdb15a2358c6042d40cd324e"]) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000400000000408e5b90ea3b6c9b86cc4f", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)

02:19:33 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c82, r3)

02:19:33 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = semget(0x0, 0x3, 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r1)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
semget(0x0, 0x3, 0x2) (async)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r1) (async)

02:19:33 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040)="a813d03d6f56c3ac0f32c9c550daafed1a1c7c57803cd1998c5d2a51ef8bbfa8b7dc983263d0be1f165045928d5e62335ca76551a3153cbaccebfb0968a3add8dec1e94a3ef7539fd7edfd6507e85d139ccb39e9d5f3d1f65095aeb3907d98a4c499205e8a5adf14518d3fdb3538d7e0775b9866a962eb65", &(0x7f00000000c0)=@tcp6}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={0x0, 0x6, 0x61})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x410380, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, r1)

02:19:33 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c82, r3)

02:19:33 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x20, "c2eb35", "6fa0d5397bac51ea0fd7bf024b467aa027ea8bb7ad4ad45a3d7fdc2acfee73b4f1ceae09fbdc35f83163a5c7300797c26c229b825947a37280b242030356d8f0f8658cf246c8d4c7fbdc9f945db004c1a6e1c35aa8a0e8713de186bb08f000ff13fbe4835dc65c689c49e1460d0f73e05b44c03ae2678ca5403aa77d451cc8fee4096ffd6d7029f47de9a44249ef4b43e5296c9f295dc4ab736c0ca6dfc502390e1bfd5f587dddbfa6c00dba95d4053daf4523e9abdaab97ed764d2b40f0146fd7038f00bf6c4df59123ded55951384b4808e71bc4551071994900f05f7345ed737d20662bd65bb04f0fc45dccf57e5120479673a98d914c32e2d4e741e6fab1"}}, 0x110)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r3, 0x9}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r4, 0x5, "679c5c", "8740269b3796b0c493c21239056a67bdec3b3dccde7a847e11040145d6d79e8502a36799b96586283a98f8e98f6d9f29a139b912ad30e38612248ff1a1c20afb7f60f33997ebdbbdc7cc7e8a0ee8c073ea7ffc39bdf8239d6c331d12586ccb628dd004285dc4f3eec9efd07827ac1fd6afc3b4470da2bec5b0ee316aea50517aeab5d737f7e7a4f8dbe84b36a2414ef82e8e8c6380d95bf0518d3e02e5590cbc656a63f1ad1a532bc3d411013bafc87b99b41cd8353b69c48402d706d6a5de948e3432f89759b272ae4e8411c4b5013510d81ffd323aabbae5738717533fd8323531f759f4a4595ace5db44a0a43aa207576d2a86f5578afe7eaf5b57afd0f2e"}}, 0x110)

02:19:33 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040)="a813d03d6f56c3ac0f32c9c550daafed1a1c7c57803cd1998c5d2a51ef8bbfa8b7dc983263d0be1f165045928d5e62335ca76551a3153cbaccebfb0968a3add8dec1e94a3ef7539fd7edfd6507e85d139ccb39e9d5f3d1f65095aeb3907d98a4c499205e8a5adf14518d3fdb3538d7e0775b9866a962eb65", &(0x7f00000000c0)=@tcp6}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={0x0, 0x6, 0x61})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x410380, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, r1)

02:19:33 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x20, "c2eb35", "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"}}, 0x110) (async, rerun: 32)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r3, 0x9}}, 0x10) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20) (rerun: 64)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r4, 0x5, "679c5c", "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"}}, 0x110)

02:19:33 executing program 3:
socketpair(0x2a, 0x3, 0x3, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xa501}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x60000}, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="014025f30000060018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file1\x00']) (async)
r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x8000000000000000, 0x482f82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) (async)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xc)

[  982.178087][   T25] audit: type=1326 audit(1656037173.897:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  982.240645][T21989] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:34 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'}) (async)

02:19:34 executing program 3:
socketpair(0x2a, 0x3, 0x3, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xa501}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x60000}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="014025f30000060018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file1\x00']) (async)
r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x8000000000000000, 0x482f82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) (async)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xc)

02:19:34 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040)="a813d03d6f56c3ac0f32c9c550daafed1a1c7c57803cd1998c5d2a51ef8bbfa8b7dc983263d0be1f165045928d5e62335ca76551a3153cbaccebfb0968a3add8dec1e94a3ef7539fd7edfd6507e85d139ccb39e9d5f3d1f65095aeb3907d98a4c499205e8a5adf14518d3fdb3538d7e0775b9866a962eb65", &(0x7f00000000c0)=@tcp6}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={0x0, 0x6, 0x61})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x410380, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, r1)

02:19:34 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x5, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'})

02:19:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x20, "c2eb35", "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"}}, 0x110) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r3, 0x9}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r4, 0x5, "679c5c", "8740269b3796b0c493c21239056a67bdec3b3dccde7a847e11040145d6d79e8502a36799b96586283a98f8e98f6d9f29a139b912ad30e38612248ff1a1c20afb7f60f33997ebdbbdc7cc7e8a0ee8c073ea7ffc39bdf8239d6c331d12586ccb628dd004285dc4f3eec9efd07827ac1fd6afc3b4470da2bec5b0ee316aea50517aeab5d737f7e7a4f8dbe84b36a2414ef82e8e8c6380d95bf0518d3e02e5590cbc656a63f1ad1a532bc3d411013bafc87b99b41cd8353b69c48402d706d6a5de948e3432f89759b272ae4e8411c4b5013510d81ffd323aabbae5738717533fd8323531f759f4a4595ace5db44a0a43aa207576d2a86f5578afe7eaf5b57afd0f2e"}}, 0x110)

02:19:34 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)

02:19:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x46a4c2, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:34 executing program 0:
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d41bff14dd28d80000000000000006ed7f680059fdee6320c978f19b59ee66ae258596eed502eb90a483848399f958d85e4bcf1af6ee74bf716e9e97060fb0ec0aa180b60ffcec94a694d3cefa834685de1f6bdeec80ab626ed9dc2256eb5222103511e8d1794b43d988fb483d520d1e", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250700000006001c0008000000050022000100000008000c0000000000050022000000000008000a0002000000050004001f00000006001b004e22000008000900010000001400080073797a6b616c6c657230000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

02:19:34 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x5, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x5, 0xee, &(0x7f0000000280)) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) (async)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) (async)

02:19:34 executing program 0:
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d41bff14dd28d80000000000000006ed7f680059fdee6320c978f19b59ee66ae258596eed502eb90a483848399f958d85e4bcf1af6ee74bf716e9e97060fb0ec0aa180b60ffcec94a694d3cefa834685de1f6bdeec80ab626ed9dc2256eb5222103511e8d1794b43d988fb483d520d1e", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250700000006001c0008000000050022000100000008000c0000000000050022000000000008000a0002000000050004001f00000006001b004e22000008000900010000001400080073797a6b616c6c657230000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

02:19:34 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)

02:19:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x46a4c2, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

[  983.032339][   T25] audit: type=1326 audit(1656037174.747:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:34 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'}) (async)

02:19:34 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:34 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)

02:19:34 executing program 0:
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d41bff14dd28d80000000000000006ed7f680059fdee6320c978f19b59ee66ae258596eed502eb90a483848399f958d85e4bcf1af6ee74bf716e9e97060fb0ec0aa180b60ffcec94a694d3cefa834685de1f6bdeec80ab626ed9dc2256eb5222103511e8d1794b43d988fb483d520d1e", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250700000006001c0008000000050022000100000008000c0000000000050022000000000008000a0002000000050004001f00000006001b004e22000008000900010000001400080073797a6b616c6c657230000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

02:19:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x46a4c2, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)

02:19:34 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
socketpair(0x1d, 0x5, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
socketpair(0x1d, 0x5, 0xee, &(0x7f0000000280)) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) (async)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) (async)

02:19:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:34 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:34 executing program 0:
r0 = semget(0x1, 0x3, 0x111)
r1 = semget(0x0, 0x4, 0x50)
semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f00000000c0))
semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f00000000c0)=""/81)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x541b, 0xc)
r3 = semget(0x0, 0x1, 0x4)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000140)=""/200)

02:19:34 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x8943, &(0x7f0000000140)={'ip6tnl0\x00', 0x0})
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x1000000)

02:19:34 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (rerun: 64)

02:19:34 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  983.147370][   T25] audit: type=1326 audit(1656037174.867:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:34 executing program 1:
r0 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000040)=""/182)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)

02:19:34 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080))

02:19:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:34 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:34 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:34 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000018000000", @ANYBLOB="a4866010254b68fe1367c3b7936d7eaf2de6136ec3a75a67086bca0b5634daeaba5c4ea6c500f81841a24d009ae446a9a21fd5406c407f326e42b09d4cc74b2a9f51a51224fb54675b9a0eb3912c19932aaa0bd33f320af50d07db7ee5e9c43afb022b64507615a23e5e5488a86cb37a06cf0c17e000001edc9eafe9cefab5d5a0c568fe0443dc90767ac5455b5799300452c2c8d049d18513c4f079f728b8e109ec53032c70d588d7f32b82c4219cb193b821a039f1c9fa884192519263395b31f46c6929d57700daa450635735a6a8caf8de7a60e5d79f017673f5d771fbd5d6cb1c249fadce690bd6", @ANYBLOB="02000000000000002e2f66696c653000"])
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="02009e3bb0c4000018b373001bb31fc628c49ba9e989a66853566c", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x7, 0x40, 0x3}, {0x1, 0x5, 0x9}, {0x5ed, 0x9, 0xff, 0x5}, {0x6, 0x72, 0x4, 0x4}, {0x6, 0x1, 0x44, 0x1}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0/file0\x00'})
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1c530f82}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x32a, 0x6, 0x7, 0x1}, {0x4, 0x7f, 0x8, 0x3}, {0x8716, 0x6, 0x1, 0xffffffff}, {0x0, 0x2, 0x0, 0x2}]})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:19:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:35 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080))

[  983.217128][T22077] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:35 executing program 1:
r0 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0) (async)
semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000040)=""/182) (async, rerun: 64)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)

02:19:35 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080))

02:19:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:35 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:35 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), 0x8) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:35 executing program 1:
r0 = semget(0x2, 0x2, 0x40)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000040)=""/182)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc)
semget(0x2, 0x2, 0x40) (async)
semctl$IPC_RMID(r0, 0x0, 0x0) (async)
semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000040)=""/182) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0xc) (async)

02:19:35 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:35 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  983.276662][   T25] audit: type=1326 audit(1656037174.997:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22091 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:35 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[  983.341309][T22111] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:35 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000018000000", @ANYBLOB="a4866010254b68fe1367c3b7936d7eaf2de6136ec3a75a67086bca0b5634daeaba5c4ea6c500f81841a24d009ae446a9a21fd5406c407f326e42b09d4cc74b2a9f51a51224fb54675b9a0eb3912c19932aaa0bd33f320af50d07db7ee5e9c43afb022b64507615a23e5e5488a86cb37a06cf0c17e000001edc9eafe9cefab5d5a0c568fe0443dc90767ac5455b5799300452c2c8d049d18513c4f079f728b8e109ec53032c70d588d7f32b82c4219cb193b821a039f1c9fa884192519263395b31f46c6929d57700daa450635735a6a8caf8de7a60e5d79f017673f5d771fbd5d6cb1c249fadce690bd6", @ANYBLOB="02000000000000002e2f66696c653000"])
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="02009e3bb0c4000018b373001bb31fc628c49ba9e989a66853566c", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x7, 0x40, 0x3}, {0x1, 0x5, 0x9}, {0x5ed, 0x9, 0xff, 0x5}, {0x6, 0x72, 0x4, 0x4}, {0x6, 0x1, 0x44, 0x1}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0/file0\x00'}) (async)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1c530f82}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x32a, 0x6, 0x7, 0x1}, {0x4, 0x7f, 0x8, 0x3}, {0x8716, 0x6, 0x1, 0xffffffff}, {0x0, 0x2, 0x0, 0x2}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:19:35 executing program 3:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e24, 0x26, @private0={0xfc, 0x0, '\x00', 0x1}, 0xab9b}}}, 0x38)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000002c0)=0x7ff)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18)

02:19:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:35 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:35 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:19:35 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:35 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:35 executing program 3:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e24, 0x26, @private0={0xfc, 0x0, '\x00', 0x1}, 0xab9b}}}, 0x38)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000002c0)=0x7ff)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18)

02:19:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:35 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:35 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:19:35 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000018000000", @ANYBLOB="a4866010254b68fe1367c3b7936d7eaf2de6136ec3a75a67086bca0b5634daeaba5c4ea6c500f81841a24d009ae446a9a21fd5406c407f326e42b09d4cc74b2a9f51a51224fb54675b9a0eb3912c19932aaa0bd33f320af50d07db7ee5e9c43afb022b64507615a23e5e5488a86cb37a06cf0c17e000001edc9eafe9cefab5d5a0c568fe0443dc90767ac5455b5799300452c2c8d049d18513c4f079f728b8e109ec53032c70d588d7f32b82c4219cb193b821a039f1c9fa884192519263395b31f46c6929d57700daa450635735a6a8caf8de7a60e5d79f017673f5d771fbd5d6cb1c249fadce690bd6", @ANYBLOB="02000000000000002e2f66696c653000"]) (async)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="02009e3bb0c4000018b373001bb31fc628c49ba9e989a66853566c", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x7, 0x40, 0x3}, {0x1, 0x5, 0x9}, {0x5ed, 0x9, 0xff, 0x5}, {0x6, 0x72, 0x4, 0x4}, {0x6, 0x1, 0x44, 0x1}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0/file0\x00'}) (async)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1c530f82}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x32a, 0x6, 0x7, 0x1}, {0x4, 0x7f, 0x8, 0x3}, {0x8716, 0x6, 0x1, 0xffffffff}, {0x0, 0x2, 0x0, 0x2}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:19:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

[  984.141991][   T25] audit: type=1326 audit(1656037175.857:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22135 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:35 executing program 3:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e24, 0x26, @private0={0xfc, 0x0, '\x00', 0x1}, 0xab9b}}}, 0x38)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000002c0)=0x7ff)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e24, 0x26, @private0={0xfc, 0x0, '\x00', 0x1}, 0xab9b}}}, 0x38) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000002c0)=0x7ff) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async)

02:19:35 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:35 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = syz_io_uring_setup(0x52a0, &(0x7f0000000040)={0x0, 0xef72, 0x20, 0x20000, 0x385}, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0x7f}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r5, 0x6}}, 0x10)

02:19:35 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x84002)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:35 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:35 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x101}}, './file0\x00'})
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x80000}}, 0x10)

02:19:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:36 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

[  984.208982][   T25] audit: type=1326 audit(1656037175.927:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22155 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x101}}, './file0\x00'})
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x80000}}, 0x10)

02:19:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:36 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x101}}, './file0\x00'})
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x80000}}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x80000}}, 0x10) (async)

02:19:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = syz_io_uring_setup(0x52a0, &(0x7f0000000040)={0x0, 0xef72, 0x20, 0x20000, 0x385}, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0x7f}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r5, 0x6}}, 0x10)

02:19:36 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

[  984.264512][T22178] debugfs: Directory 'loop12' with parent 'block' already present!
[  984.287193][   T25] audit: type=1326 audit(1656037176.007:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  984.311141][T22187] debugfs: Directory 'loop0' with parent 'block' already present!
[  984.323792][   T25] audit: type=1400 audit(1656037176.037:748): avc:  denied  { read write } for  pid=1820 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
02:19:36 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x84002) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:36 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:36 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
r2 = syz_io_uring_setup(0x52a0, &(0x7f0000000040)={0x0, 0xef72, 0x20, 0x20000, 0x385}, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0x7f}}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r5, 0x6}}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) (async)
syz_io_uring_setup(0x52a0, &(0x7f0000000040)={0x0, 0xef72, 0x20, 0x20000, 0x385}, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x2, 0x8}}, 0x20) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r5, 0x6}}, 0x10) (async)

02:19:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:36 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x84002)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x84002) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:36 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:36 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  985.118366][   T25] audit: type=1326 audit(1656037176.837:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22205 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:36 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:36 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})

02:19:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:36 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})

[  985.197364][T22245] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:37 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

02:19:37 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:37 executing program 0:
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)

02:19:37 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async)

02:19:37 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async)

02:19:37 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:37 executing program 0:
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)

02:19:37 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:37 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0xffff0001, 0x8})

02:19:37 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:37 executing program 0:
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)

02:19:37 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:38 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

02:19:38 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0xffff0001, 0x8})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0xffff0001, 0x8}) (async)

02:19:38 executing program 3:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4155970, 0xffffffffffffffff, 0x8000000)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0x7ff)

02:19:38 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:38 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:38 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

02:19:38 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:38 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:38 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

[  986.901867][   T25] kauditd_printk_skb: 3 callbacks suppressed
[  986.901881][   T25] audit: type=1326 audit(1656037178.617:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22350 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:38 executing program 3:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4155970, 0xffffffffffffffff, 0x8000000) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0xffffffffffffffff) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0x7ff)

02:19:38 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0xffff0001, 0x8})

02:19:38 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:38 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:38 executing program 3:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4155970, 0xffffffffffffffff, 0x8000000)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0x7ff)

[  986.949058][   T25] audit: type=1326 audit(1656037178.667:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22357 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:38 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:38 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:38 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc) (async)

02:19:38 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:38 executing program 3:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc)

02:19:38 executing program 3:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) (async)

[  986.990019][T22379] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:38 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:38 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:38 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)

02:19:38 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:38 executing program 3:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc)

02:19:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)

02:19:38 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x3)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa14f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

02:19:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:38 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000004c0)={0x64, 0x25, 0x400, 0x9, 0x1e, 0x2, &(0x7f0000000480)="3ba6c58d28e0e48e1d8122e73b1b848ed061670b219a121afbc1fdc47e83"})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r7}}, 0x18)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r8}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000380)={0x0, 0x0, r8, 0x4, 0x80000})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e24, 0x8, @remote, 0x2}, r7}}, 0x38)

[  987.092807][T22414] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:38 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), 0x8)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)

02:19:38 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x3) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa14f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

02:19:38 executing program 4:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)

02:19:38 executing program 3:
clock_getres(0x2, &(0x7f0000000040))
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x8, &(0x7f0000000080)="c6e7bbb650f9e9d4346a983e5818bdfb0a2c4d6a0c46fc7bb82a0d50e45bf933c1266e8e6a6bde83283bedd7bd0398f22d7d42f3c92f5418aae237c040365486"})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:38 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x3) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa14f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

02:19:38 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)

02:19:38 executing program 4:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:38 executing program 3:
clock_getres(0x2, &(0x7f0000000040))
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x8, &(0x7f0000000080)="c6e7bbb650f9e9d4346a983e5818bdfb0a2c4d6a0c46fc7bb82a0d50e45bf933c1266e8e6a6bde83283bedd7bd0398f22d7d42f3c92f5418aae237c040365486"})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
clock_getres(0x2, &(0x7f0000000040)) (async)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x8, &(0x7f0000000080)="c6e7bbb650f9e9d4346a983e5818bdfb0a2c4d6a0c46fc7bb82a0d50e45bf933c1266e8e6a6bde83283bedd7bd0398f22d7d42f3c92f5418aae237c040365486"}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

[  987.170847][   T25] audit: type=1326 audit(1656037178.887:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22434 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:38 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)

02:19:39 executing program 4:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:39 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:39 executing program 3:
clock_getres(0x2, &(0x7f0000000040)) (async)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x8, &(0x7f0000000080)="c6e7bbb650f9e9d4346a983e5818bdfb0a2c4d6a0c46fc7bb82a0d50e45bf933c1266e8e6a6bde83283bedd7bd0398f22d7d42f3c92f5418aae237c040365486"}) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:39 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:39 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000004c0)={0x64, 0x25, 0x400, 0x9, 0x1e, 0x2, &(0x7f0000000480)="3ba6c58d28e0e48e1d8122e73b1b848ed061670b219a121afbc1fdc47e83"})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0)
read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r7}}, 0x18)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r8}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000380)={0x0, 0x0, r8, 0x4, 0x80000})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e24, 0x8, @remote, 0x2}, r7}}, 0x38)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000004c0)={0x64, 0x25, 0x400, 0x9, 0x1e, 0x2, &(0x7f0000000480)="3ba6c58d28e0e48e1d8122e73b1b848ed061670b219a121afbc1fdc47e83"}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r7}}, 0x18) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000380)={0x0, 0x0, r8, 0x4, 0x80000}) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e24, 0x8, @remote, 0x2}, r7}}, 0x38) (async)

02:19:39 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0xc05, 0x444a82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r2)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0x2730}}, 0xc)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4)
ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
getuid()
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_getnexthop={0x58, 0x6a, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYRES64=r5, @ANYRES32=r0])
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000002c0)=0x5)

02:19:39 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:39 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0xc05, 0x444a82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r2) (async, rerun: 64)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0x2730}}, 0xc) (async, rerun: 64)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4)
ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async, rerun: 64)
getuid() (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_getnexthop={0x58, 0x6a, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYRES64=r5, @ANYRES32=r0]) (async)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000002c0)=0x5)

02:19:39 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:39 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {<r2=>r0}}, './file0\x00'})
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

02:19:39 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:39 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:39 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0xc05, 0x444a82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r2) (async)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0x2730}}, 0xc)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) (async)
ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) (async, rerun: 64)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
getuid() (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_getnexthop={0x58, 0x6a, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYRES64=r5, @ANYRES32=r0]) (async, rerun: 32)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000002c0)=0x5)

02:19:39 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

[  988.013895][   T25] audit: type=1326 audit(1656037179.727:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22468 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:39 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:39 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {<r2=>r0}}, './file0\x00'})
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

02:19:39 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:39 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000004c0)={0x64, 0x25, 0x400, 0x9, 0x1e, 0x2, &(0x7f0000000480)="3ba6c58d28e0e48e1d8122e73b1b848ed061670b219a121afbc1fdc47e83"}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) (async)
read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'}) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r7}}, 0x18) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000380)={0x0, 0x0, r8, 0x4, 0x80000})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e24, 0x8, @remote, 0x2}, r7}}, 0x38)

02:19:39 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:39 executing program 4:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:39 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {<r2=>r0}}, './file0\x00'})
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

02:19:39 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:39 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:39 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)

02:19:39 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100b404475635330b6277d1f350000018000000", @ANYRES32, @ANYBLOB="00020000000000002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000810000001800bd21db4ae3f32cebbbce0000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="fa00001f0100000018000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x9)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc)

02:19:39 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:39 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100b404475635330b6277d1f350000018000000", @ANYRES32, @ANYBLOB="00020000000000002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000810000001800bd21db4ae3f32cebbbce0000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="fa00001f0100000018000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x9)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100b404475635330b6277d1f350000018000000", @ANYRES32, @ANYBLOB="00020000000000002e2f66696c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000810000001800bd21db4ae3f32cebbbce0000", @ANYRES32, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="fa00001f0100000018000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x9) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) (async)

[  988.115599][   T25] audit: type=1326 audit(1656037179.837:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22468 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:39 executing program 4:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:39 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

[  988.158301][   T25] audit: type=1326 audit(1656037179.877:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22526 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:40 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x6, &(0x7f0000000000)=[{0xf0e, 0xa0, 0x2, 0x62e}, {0x7, 0x6, 0x1, 0x6}, {0x2, 0x3, 0x8, 0x3e2}, {0x83, 0x3f, 0x1, 0x9}, {0x135, 0x1, 0x1, 0x100}, {0xfd, 0x1, 0x1a, 0xcf4f}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:40 executing program 4:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 32)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (rerun: 32)

02:19:40 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100b404475635330b6277d1f350000018000000", @ANYRES32, @ANYBLOB="00020000000000002e2f66696c653000"])
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000810000001800bd21db4ae3f32cebbbce0000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="fa00001f0100000018000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x9)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100b404475635330b6277d1f350000018000000", @ANYRES32, @ANYBLOB="00020000000000002e2f66696c653000"]) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000810000001800bd21db4ae3f32cebbbce0000", @ANYRES32, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="fa00001f0100000018000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x9) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) (async)

02:19:40 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:40 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x6, &(0x7f0000000000)=[{0xf0e, 0xa0, 0x2, 0x62e}, {0x7, 0x6, 0x1, 0x6}, {0x2, 0x3, 0x8, 0x3e2}, {0x83, 0x3f, 0x1, 0x9}, {0x135, 0x1, 0x1, 0x100}, {0xfd, 0x1, 0x1a, 0xcf4f}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:40 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x6, &(0x7f0000000000)=[{0xf0e, 0xa0, 0x2, 0x62e}, {0x7, 0x6, 0x1, 0x6}, {0x2, 0x3, 0x8, 0x3e2}, {0x83, 0x3f, 0x1, 0x9}, {0x135, 0x1, 0x1, 0x100}, {0xfd, 0x1, 0x1a, 0xcf4f}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:40 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:40 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

02:19:40 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$USBDEVFS_RESET(r4, 0x5514)

02:19:40 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:40 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x5, 0xdc1a, 0x9, 0x8001}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2503000000080002000400000004000180080002000100000014ea008008000700", @ANYRES32=0x0, @ANYBLOB="060001000a00000008000300050000000800020000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x80c1)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xff, 0xea, 0x5, 0x4}, {0x0, 0x71, 0xff, 0x9}, {0x101, 0x2, 0x1, 0x4d03}]})

02:19:40 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

[  989.064934][T22583] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:40 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:40 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$USBDEVFS_RESET(r4, 0x5514)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_RESET(r4, 0x5514) (async)

02:19:40 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

02:19:40 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:40 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

02:19:40 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

02:19:40 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

[  989.106029][   T25] audit: type=1326 audit(1656037180.827:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22600 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:40 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:41 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

02:19:41 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x5, 0xdc1a, 0x9, 0x8001}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2503000000080002000400000004000180080002000100000014ea008008000700", @ANYRES32=0x0, @ANYBLOB="060001000a00000008000300050000000800020000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x80c1)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xff, 0xea, 0x5, 0x4}, {0x0, 0x71, 0xff, 0x9}, {0x101, 0x2, 0x1, 0x4d03}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x5, 0xdc1a, 0x9, 0x8001}, 0x8) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2503000000080002000400000004000180080002000100000014ea008008000700", @ANYRES32=0x0, @ANYBLOB="060001000a00000008000300050000000800020000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x80c1) (async)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xff, 0xea, 0x5, 0x4}, {0x0, 0x71, 0xff, 0x9}, {0x101, 0x2, 0x1, 0x4d03}]}) (async)

02:19:41 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101}) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$USBDEVFS_RESET(r4, 0x5514)

02:19:41 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:41 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:41 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:41 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)

02:19:41 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:41 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async)

02:19:41 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:41 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:41 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:41 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x1, 0x80000})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000040)=0xffffffffffff1601)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
r4 = semget(0x3, 0x1, 0xa0)
semop(r4, &(0x7f0000000080)=[{0x1, 0x8, 0x800}], 0x1)

[  989.969213][   T25] audit: type=1326 audit(1656037181.687:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22652 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:41 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x5, 0xdc1a, 0x9, 0x8001}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2503000000080002000400000004000180080002000100000014ea008008000700", @ANYRES32=0x0, @ANYBLOB="060001000a00000008000300050000000800020000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x80c1)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xff, 0xea, 0x5, 0x4}, {0x0, 0x71, 0xff, 0x9}, {0x101, 0x2, 0x1, 0x4d03}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x5, 0xdc1a, 0x9, 0x8001}, 0x8) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2503000000080002000400000004000180080002000100000014ea008008000700", @ANYRES32=0x0, @ANYBLOB="060001000a00000008000300050000000800020000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x80c1) (async)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xff, 0xea, 0x5, 0x4}, {0x0, 0x71, 0xff, 0x9}, {0x101, 0x2, 0x1, 0x4d03}]}) (async)

02:19:41 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:41 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x1, 0x80000}) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000040)=0xffffffffffff1601) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
r4 = semget(0x3, 0x1, 0xa0)
semop(r4, &(0x7f0000000080)=[{0x1, 0x8, 0x800}], 0x1)

02:19:41 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$USBDEVFS_RESET(r4, 0x5514)

02:19:41 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:41 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:41 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:41 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:41 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x1, 0x80000}) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) (async)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000040)=0xffffffffffff1601)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) (async)
r4 = semget(0x3, 0x1, 0xa0)
semop(r4, &(0x7f0000000080)=[{0x1, 0x8, 0x800}], 0x1)

[  990.028340][   T25] audit: type=1400 audit(1656037181.747:761): avc:  denied  { open } for  pid=1820 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  990.028579][   T25] audit: type=1400 audit(1656037181.747:762): avc:  denied  { ioctl } for  pid=1820 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=590 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
02:19:41 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:41 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:41 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$USBDEVFS_RESET(r4, 0x5514)

02:19:41 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x9, 0x0, 0xfd, 0x1}, {0x9fa7, 0x17, 0x5, 0x200}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:41 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x1, 0x80000})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000040)=0xffffffffffff1601)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
r4 = semget(0x3, 0x1, 0xa0)
semop(r4, &(0x7f0000000080)=[{0x1, 0x8, 0x800}], 0x1)

02:19:41 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)

02:19:41 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:41 executing program 4:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4155970, 0xffffffffffffffff, 0x8000000)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0x7ff)

02:19:41 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)
ioctl$USBDEVFS_RESET(r4, 0x5514)

02:19:41 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x1, 0x80000})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c82, 0xc)
r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000040)=0xffffffffffff1601)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
r4 = semget(0x3, 0x1, 0xa0)
semop(r4, &(0x7f0000000080)=[{0x1, 0x8, 0x800}], 0x1)

02:19:41 executing program 4:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4155970, 0xffffffffffffffff, 0x8000000)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0x7ff)

02:19:41 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:41 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:41 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x9, 0x0, 0xfd, 0x1}, {0x9fa7, 0x17, 0x5, 0x200}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:41 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})

02:19:42 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:42 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x9, 0x0, 0xfd, 0x1}, {0x9fa7, 0x17, 0x5, 0x200}]}) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (rerun: 64)

[  990.231885][T22716] debugfs: Directory 'loop12' with parent 'block' already present!
02:19:42 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:42 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:42 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})

02:19:42 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:42 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x4}]})
getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:42 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:42 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:42 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:42 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)

02:19:42 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:42 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:42 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:42 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

[  990.333206][T22748] debugfs: Directory 'loop0' with parent 'block' already present!
[  990.400720][T22769] debugfs: Directory 'loop1' with parent 'block' already present!
02:19:42 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x4}]}) (async)
getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:42 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:42 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:42 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:42 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:42 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:42 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:42 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:42 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  991.244406][T22800] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:43 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x4}]})
getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x4}]}) (async)
getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:43 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:43 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:43 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:43 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:43 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:43 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:43 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:43 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:43 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:43 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:43 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  992.046498][   T25] kauditd_printk_skb: 5 callbacks suppressed
[  992.046510][   T25] audit: type=1326 audit(1656037183.767:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:43 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x401, 0x1, 0x3f, 0x53ef}, {0xe231, 0x20, 0x81, 0x1ff}, {0x3, 0x4, 0x20, 0x1ff}, {0x4, 0x6, 0x9, 0x10001}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffff8}}, './file0\x00'})
read$usbfs(r1, &(0x7f00000000c0)=""/197, 0xc5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:43 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:43 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:43 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[  992.118524][T22818] debugfs: Directory 'loop0' with parent 'block' already present!
[  992.135254][T22823] debugfs: Directory 'loop2' with parent 'block' already present!
[  992.136641][T22820] debugfs: Directory 'loop1' with parent 'block' already present!
02:19:43 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:43 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:43 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

[  992.176566][T22829] debugfs: Directory 'loop3' with parent 'block' already present!
02:19:43 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0)

02:19:43 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:43 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[  992.191058][   T25] audit: type=1326 audit(1656037183.887:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22830 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:43 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:43 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  992.249105][T22846] debugfs: Directory 'loop0' with parent 'block' already present!
[  992.271436][T22850] debugfs: Directory 'loop1' with parent 'block' already present!
[  992.289442][T22854] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:44 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x401, 0x1, 0x3f, 0x53ef}, {0xe231, 0x20, 0x81, 0x1ff}, {0x3, 0x4, 0x20, 0x1ff}, {0x4, 0x6, 0x9, 0x10001}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffff8}}, './file0\x00'})
read$usbfs(r1, &(0x7f00000000c0)=""/197, 0xc5) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:44 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:44 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:44 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:44 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:44 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:44 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:44 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:44 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:44 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:44 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:44 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[  993.033296][   T25] audit: type=1326 audit(1656037184.747:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:44 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[  993.085778][T22876] debugfs: Directory 'loop1' with parent 'block' already present!
[  993.088792][T12707] udevd[12707]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  993.092953][T22879] debugfs: Directory 'loop0' with parent 'block' already present!
[  993.100066][T12705] udevd[12705]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  993.106737][T22882] debugfs: Directory 'loop2' with parent 'block' already present!
02:19:45 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x401, 0x1, 0x3f, 0x53ef}, {0xe231, 0x20, 0x81, 0x1ff}, {0x3, 0x4, 0x20, 0x1ff}, {0x4, 0x6, 0x9, 0x10001}]}) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffff8}}, './file0\x00'})
read$usbfs(r1, &(0x7f00000000c0)=""/197, 0xc5) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (rerun: 32)

02:19:45 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:45 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:19:45 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:19:45 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:45 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:45 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:45 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:45 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:45 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:45 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:45 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

[  993.904093][   T25] audit: type=1326 audit(1656037185.617:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22893 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fbd0964b109 code=0x0
[  993.959115][T22908] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:46 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:19:46 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:46 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x2, 0x80, 0x1, 0x3}, {0x9, 0x9, 0x3, 0x10000}, {0x6, 0x7, 0x9, 0x2}, {0x7fff, 0x0, 0x80, 0x1}, {0x1, 0x2, 0x72, 0x4}, {0xcfc6, 0x7, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:46 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:46 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:46 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})

02:19:46 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))

02:19:46 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x2, 0x80, 0x1, 0x3}, {0x9, 0x9, 0x3, 0x10000}, {0x6, 0x7, 0x9, 0x2}, {0x7fff, 0x0, 0x80, 0x1}, {0x1, 0x2, 0x72, 0x4}, {0xcfc6, 0x7, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:46 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x2, 0x80, 0x1, 0x3}, {0x9, 0x9, 0x3, 0x10000}, {0x6, 0x7, 0x9, 0x2}, {0x7fff, 0x0, 0x80, 0x1}, {0x1, 0x2, 0x72, 0x4}, {0xcfc6, 0x7, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:46 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x8004)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:46 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:46 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  994.775887][T12707] udevd[12707]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
02:19:46 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:19:46 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:46 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:46 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:46 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:46 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:46 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:46 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:46 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[  994.802960][   T25] audit: type=1326 audit(1656037186.517:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22929 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  994.839511][T22940] debugfs: Directory 'loop0' with parent 'block' already present!
[  994.845284][T22934] debugfs: Directory 'loop1' with parent 'block' already present!
[  994.846026][T22936] debugfs: Directory 'loop2' with parent 'block' already present!
[  994.847172][T22940] debugfs: Directory 'loop3' with parent 'block' already present!
[  994.910702][T22951] debugfs: Directory 'loop0' with parent 'block' already present!
[  994.929225][T18999] udevd[18999]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
02:19:47 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x8004)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x8004) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:47 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:19:47 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:47 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:47 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:47 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)

02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:47 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:47 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  995.669978][   T25] audit: type=1326 audit(1656037187.387:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22964 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  995.704423][T22972] debugfs: Directory 'loop1' with parent 'block' already present!
02:19:47 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x8004)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x8004) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:47 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:47 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:47 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

[  995.772187][   T25] audit: type=1326 audit(1656037187.487:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22964 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:47 executing program 3:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:47 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:47 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  995.822783][   T25] audit: type=1326 audit(1656037187.537:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22987 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:47 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:47 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0xff}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3d3b}}, './file0\x00'})

02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:47 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 3:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:47 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 3:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

[  995.890389][T23005] debugfs: Directory 'loop0' with parent 'block' already present!
[  995.904409][T23009] debugfs: Directory 'loop1' with parent 'block' already present!
02:19:47 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:19:47 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:47 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:47 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:47 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

[  995.942207][T23026] debugfs: Directory 'loop0' with parent 'block' already present!
[  995.961768][   T25] audit: type=1326 audit(1656037187.677:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23027 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:48 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0xff}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3d3b}}, './file0\x00'})

02:19:48 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:48 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:48 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:48 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:48 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:48 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)

02:19:48 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

02:19:48 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:48 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:48 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)

02:19:48 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

[  996.835129][   T25] audit: type=1326 audit(1656037188.547:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:49 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0xff}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3d3b}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0xff}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3d3b}}, './file0\x00'}) (async)

02:19:49 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)

02:19:49 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)

02:19:49 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:49 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:49 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:49 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:49 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)

02:19:49 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:19:49 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:19:49 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:19:49 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[  997.701265][   T25] audit: type=1326 audit(1656037189.417:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:49 executing program 5:
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x4, 0x767e56f364e57b4b, "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"})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, <r1=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:49 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:49 executing program 0:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:49 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:49 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:49 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:49 executing program 0:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  997.761575][T23094] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:49 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:49 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:49 executing program 0:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:49 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:49 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  997.836001][   T25] audit: type=1326 audit(1656037189.547:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23111 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  997.875593][T23118] debugfs: Directory 'loop1' with parent 'block' already present!
[  997.899766][T23122] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:50 executing program 5:
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x4, 0x767e56f364e57b4b, "1d24a6b84f3dc5b858d7bdda8c189eb2a97b7b04e669de453387796f9cb2464c83c00963fcf0154542053f693257371d581ed0a158bb4f4ad2dddc3bf05a6c0a685454bae68c1df3c3fb3590679ea5fa5c3c46112f235ef41b761f0d5f6850d5e62df766c3e5cdf183548120fa095f7e57e20b78a41405e81b12c782e33455aefb7a79e90527abf2b9244869632006c9c5d665869a510f48583085820cc633aea8b7eb0e3b39a02f4ae950d432e907da0403979fd2fcb622d4c9923e3912f2002030d2f466550f02ee02ea9ca93890822b2d1fcb1de350a8b578e4e828dfbede90370fb4a477a9c94b4c909dc63aee0d0f924d09c71f861f56caec0a0eb2407a"})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, <r1=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x4, 0x767e56f364e57b4b, "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"}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r1}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:50 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:50 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:50 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:50 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:50 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:50 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:50 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  998.703826][   T25] audit: type=1326 audit(1656037190.417:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23134 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:50 executing program 5:
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x4, 0x767e56f364e57b4b, "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"}) (async)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, <r1=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r1}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:50 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:50 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:50 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[  998.757650][T23147] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:50 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:50 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:50 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:50 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[  998.817347][   T25] audit: type=1326 audit(1656037190.537:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23153 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  998.839478][T23159] debugfs: Directory 'loop3' with parent 'block' already present!
[  998.841192][T23163] debugfs: Directory 'loop2' with parent 'block' already present!
[  998.890653][T23169] debugfs: Directory 'loop0' with parent 'block' already present!
[  998.899203][T23171] debugfs: Directory 'loop1' with parent 'block' already present!
02:19:51 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x2447}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, 0x0)

02:19:51 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:51 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:51 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:51 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:51 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:51 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:51 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:51 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:51 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:51 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:51 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[  999.672070][   T25] audit: type=1326 audit(1656037191.387:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23178 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[  999.724527][T23197] debugfs: Directory 'loop1' with parent 'block' already present!
02:19:52 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x2447}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, 0x0)

02:19:52 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:52 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:52 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:52 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:52 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:52 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:52 executing program 1:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:52 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:52 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1000.504023][   T25] audit: type=1326 audit(1656037192.217:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23202 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:52 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:52 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

[ 1000.538352][T12707] udevd[12707]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[ 1000.586488][T23224] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:53 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x2447}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, 0x0)

02:19:53 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:53 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:53 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:19:53 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:53 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:53 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:53 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:53 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:19:53 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:53 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:53 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[ 1001.350211][   T25] audit: type=1326 audit(1656037193.067:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23227 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[ 1001.422617][T23250] debugfs: Directory 'loop1' with parent 'block' already present!
02:19:53 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xc5}}, './file0\x00'})

02:19:53 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:53 executing program 4:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:53 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:53 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:53 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:53 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:53 executing program 4:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:53 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:53 executing program 4:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:53 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:53 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1002.211464][   T25] audit: type=1326 audit(1656037193.927:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[ 1002.248345][T23269] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1002.274791][T23275] debugfs: Directory 'loop2' with parent 'block' already present!
02:19:54 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async, rerun: 64)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xc5}}, './file0\x00'})

02:19:54 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:54 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:54 executing program 3:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:54 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:54 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:54 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:54 executing program 3:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:54 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:54 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:54 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:54 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1003.074927][   T25] audit: type=1326 audit(1656037194.787:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[ 1003.130445][T23302] debugfs: Directory 'loop0' with parent 'block' already present!
02:19:55 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xc5}}, './file0\x00'})

02:19:55 executing program 3:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:55 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:55 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:55 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:55 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:55 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:55 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:55 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:55 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:55 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:55 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1003.923595][   T25] audit: type=1326 audit(1656037195.637:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23313 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:56 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:56 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:56 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:56 executing program 2:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)

02:19:56 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:56 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:56 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x7ff}}, './file0\x00'})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x1}}, 0x18)

02:19:56 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:56 executing program 2:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)

02:19:56 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:56 executing program 2:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)

02:19:56 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:56 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:56 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:56 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:56 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:56 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)

[ 1004.785344][   T25] audit: type=1326 audit(1656037196.497:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:56 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[ 1004.867450][T23363] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1004.875434][T23365] debugfs: Directory 'loop1' with parent 'block' already present!
02:19:57 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x7ff}}, './file0\x00'}) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) (async, rerun: 64)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x1}}, 0x18) (rerun: 64)

02:19:57 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:57 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:57 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:57 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)

02:19:57 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:57 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:57 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:57 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:57 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:57 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:57 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[ 1005.653814][   T25] audit: type=1326 audit(1656037197.367:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:58 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x7ff}}, './file0\x00'})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) (async)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x1}}, 0x18)

02:19:58 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:19:58 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:58 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:58 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x0, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:58 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:58 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:58 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x0, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:58 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x0, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:58 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:58 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)

02:19:58 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

[ 1006.509522][   T25] audit: type=1326 audit(1656037198.227:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:19:59 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x3b, 0xfc}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:19:59 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:59 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)

02:19:59 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:59 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:59 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:59 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)

02:19:59 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:59 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:59 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x0, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:59 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:59 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[ 1007.374487][   T25] audit: type=1326 audit(1656037199.087:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23434 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[ 1007.399665][T23433] can: request_module (can-proto-0) failed.
[ 1007.438884][T23444] can: request_module (can-proto-0) failed.
[ 1007.453517][T23451] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1007.456542][T18999] udevd[18999]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1007.487057][T23451] can: request_module (can-proto-0) failed.
02:19:59 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x3b, 0xfc}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x3b, 0xfc}, 0x18) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:19:59 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:59 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:59 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:59 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x0, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:19:59 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:59 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:19:59 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:59 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:19:59 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

02:20:00 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

02:20:00 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x0, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1008.236276][   T25] audit: type=1326 audit(1656037199.957:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23464 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:00 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x3b, 0xfc}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:00 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:00 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

02:20:00 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:20:00 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x0, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:00 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:00 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:00 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:20:00 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[ 1008.351619][T23491] debugfs: Directory 'loop1' with parent 'block' already present!
[ 1008.365399][T18998] udevd[18998]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1008.368460][   T25] audit: type=1326 audit(1656037200.067:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23494 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:00 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:20:00 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:00 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

[ 1008.382590][T23500] debugfs: Directory 'loop2' with parent 'block' already present!
[ 1008.416751][T23497] can: request_module (can-proto-0) failed.
[ 1008.447009][T23492] can: request_module (can-proto-0) failed.
[ 1008.467589][T23510] can: request_module (can-proto-0) failed.
02:20:00 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:00 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:20:00 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:20:00 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:00 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:20:00 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:00 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:00 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:00 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80200, 0x0)

02:20:00 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:00 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[ 1009.214523][T23528] can: request_module (can-proto-0) failed.
[ 1009.217148][   T25] audit: type=1326 audit(1656037200.927:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23525 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:01 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1009.245902][T23519] can: request_module (can-proto-0) failed.
[ 1009.283587][T23534] can: request_module (can-proto-0) failed.
[ 1009.312306][T23540] can: request_module (can-proto-0) failed.
02:20:01 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:01 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:01 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:01 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:01 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80200, 0x0)

02:20:01 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:01 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:01 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:01 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80200, 0x0)

02:20:01 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:20:01 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:01 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[ 1010.060300][   T25] audit: type=1326 audit(1656037201.777:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23553 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[ 1010.094812][T18999] udevd[18999]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1010.132199][T23578] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1010.135662][T23579] debugfs: Directory 'loop1' with parent 'block' already present!
[ 1010.145247][T12707] udevd[12707]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
02:20:02 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:02 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:02 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

02:20:02 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:20:02 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:02 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:20:02 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

02:20:02 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:02 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:02 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

[ 1010.914142][ T1843] ==================================================================
[ 1010.914170][ T1843] BUG: KCSAN: data-race in do_dentry_open / setattr_copy
[ 1010.914199][ T1843] 
[ 1010.914203][ T1843] write to 0xffff88811c409d48 of 2 bytes by task 12706 on cpu 0:
[ 1010.914218][ T1843]  setattr_copy+0x238/0x250
02:20:02 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:20:02 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[ 1010.914238][ T1843]  shmem_setattr+0xb0/0x410
[ 1010.914255][ T1843]  notify_change+0x8e6/0xa00
[ 1010.914275][ T1843]  chmod_common+0x13c/0x270
[ 1010.914295][ T1843]  __x64_sys_chmod+0x8f/0x100
[ 1010.914315][ T1843]  do_syscall_64+0x2b/0x70
[ 1010.914334][ T1843]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 1010.914354][ T1843] 
[ 1010.914359][ T1843] read to 0xffff88811c409d48 of 2 bytes by task 1843 on cpu 1:
[ 1010.914372][ T1843]  do_dentry_open+0x161/0x850
[ 1010.914392][ T1843]  vfs_open+0x43/0x50
[ 1010.914405][ T1843]  path_openat+0x16cf/0x1b30
[ 1010.914423][ T1843]  do_filp_open+0x105/0x220
[ 1010.914441][ T1843]  do_sys_openat2+0xb5/0x2a0
[ 1010.914456][ T1843]  __x64_sys_openat+0xef/0x110
[ 1010.914471][ T1843]  do_syscall_64+0x2b/0x70
[ 1010.914490][ T1843]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 1010.914509][ T1843] 
[ 1010.914512][ T1843] value changed: 0x6180 -> 0x61b0
[ 1010.914521][ T1843] 
[ 1010.914523][ T1843] Reported by Kernel Concurrency Sanitizer on:
[ 1010.914529][ T1843] CPU: 1 PID: 1843 Comm: syz-executor.3 Not tainted 5.19.0-rc3-syzkaller-00146-g92f20ff72066-dirty #0
[ 1010.914551][ T1843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1010.914562][ T1843] ==================================================================
[ 1010.925075][   T25] audit: type=1326 audit(1656037202.637:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[ 1010.971465][T18999] udevd[18999]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
02:20:03 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000480)={0x8, 0x120, 0xfa00, {0x3, {0xfffffffd, 0x3, "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", 0x7, 0x7, 0x3, 0x9, 0x1, 0x4, 0xfd}, r2}}, 0x128)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x7, &(0x7f00000002c0)=[{0x70, 0x2a, 0x1f, 0x800}, {0x7, 0x3, 0x1f, 0x1}, {0x5, 0x7, 0x1f, 0x7dffffff}, {0x1ba, 0x6, 0x3, 0x5}, {0x1f4, 0x6, 0x6b, 0x40}, {0x91, 0x6, 0xff, 0x1}, {0x6, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="01000000000000802e2f66696c65300800000000000000a2c29f5fea808f7efdffba76d87e6d8975bfd477f9ab4c91663de0f0605041e8280503bd5b414c361103a30f2b33d546ead0f45b050a9fc1ce9d5e7ac1f0ea7227bbe30f86ac6d0e583f2c051b1c66318f3868e5b7ae940c"])

02:20:03 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:20:03 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:03 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:03 executing program 0:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:03 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

02:20:03 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

02:20:03 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xc)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

02:20:03 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:03 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)

02:20:03 executing program 0:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:03 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1011.784874][   T25] audit: type=1326 audit(1656037203.497:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:04 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000480)={0x8, 0x120, 0xfa00, {0x3, {0xfffffffd, 0x3, "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", 0x7, 0x7, 0x3, 0x9, 0x1, 0x4, 0xfd}, r2}}, 0x128) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x7, &(0x7f00000002c0)=[{0x70, 0x2a, 0x1f, 0x800}, {0x7, 0x3, 0x1f, 0x1}, {0x5, 0x7, 0x1f, 0x7dffffff}, {0x1ba, 0x6, 0x3, 0x5}, {0x1f4, 0x6, 0x6b, 0x40}, {0x91, 0x6, 0xff, 0x1}, {0x6, 0x7}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="01000000000000802e2f66696c65300800000000000000a2c29f5fea808f7efdffba76d87e6d8975bfd477f9ab4c91663de0f0605041e8280503bd5b414c361103a30f2b33d546ead0f45b050a9fc1ce9d5e7ac1f0ea7227bbe30f86ac6d0e583f2c051b1c66318f3868e5b7ae940c"])

02:20:04 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 0:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1012.643706][   T25] audit: type=1326 audit(1656037204.357:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:04 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000480)={0x8, 0x120, 0xfa00, {0x3, {0xfffffffd, 0x3, "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", 0x7, 0x7, 0x3, 0x9, 0x1, 0x4, 0xfd}, r2}}, 0x128)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x7, &(0x7f00000002c0)=[{0x70, 0x2a, 0x1f, 0x800}, {0x7, 0x3, 0x1f, 0x1}, {0x5, 0x7, 0x1f, 0x7dffffff}, {0x1ba, 0x6, 0x3, 0x5}, {0x1f4, 0x6, 0x6b, 0x40}, {0x91, 0x6, 0xff, 0x1}, {0x6, 0x7}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="01000000000000802e2f66696c65300800000000000000a2c29f5fea808f7efdffba76d87e6d8975bfd477f9ab4c91663de0f0605041e8280503bd5b414c361103a30f2b33d546ead0f45b050a9fc1ce9d5e7ac1f0ea7227bbe30f86ac6d0e583f2c051b1c66318f3868e5b7ae940c"])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000480)={0x8, 0x120, 0xfa00, {0x3, {0xfffffffd, 0x3, "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", 0x7, 0x7, 0x3, 0x9, 0x1, 0x4, 0xfd}, r2}}, 0x128) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x7, &(0x7f00000002c0)=[{0x70, 0x2a, 0x1f, 0x800}, {0x7, 0x3, 0x1f, 0x1}, {0x5, 0x7, 0x1f, 0x7dffffff}, {0x1ba, 0x6, 0x3, 0x5}, {0x1f4, 0x6, 0x6b, 0x40}, {0x91, 0x6, 0xff, 0x1}, {0x6, 0x7}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)) (async)
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000340)={0x101}) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="01000000000000802e2f66696c65300800000000000000a2c29f5fea808f7efdffba76d87e6d8975bfd477f9ab4c91663de0f0605041e8280503bd5b414c361103a30f2b33d546ead0f45b050a9fc1ce9d5e7ac1f0ea7227bbe30f86ac6d0e583f2c051b1c66318f3868e5b7ae940c"]) (async)

02:20:04 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 2:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1012.712309][T23668] debugfs: Directory 'loop1' with parent 'block' already present!
[ 1012.722989][T23667] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1012.727879][T12707] udevd[12707]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1012.755087][T23674] debugfs: Directory 'loop2' with parent 'block' already present!
02:20:04 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1012.763986][   T25] audit: type=1326 audit(1656037204.477:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23676 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:04 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socketpair(0x0, 0x80000, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x0, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1012.865165][   T25] audit: type=1326 audit(1656037204.577:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23676 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
[ 1012.881632][T23710] debugfs: Directory 'loop0' with parent 'block' already present!
02:20:04 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x400080)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x9}, {0x23, 0x8, 0x5, 0x10000}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:04 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x0, 0xee, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[ 1012.911559][T23713] debugfs: Directory 'loop1' with parent 'block' already present!
[ 1012.933937][T23721] debugfs: Directory 'loop0' with parent 'block' already present!
02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000280))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:04 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

[ 1012.941940][   T25] audit: type=1326 audit(1656037204.657:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23719 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80200, 0x0)

02:20:04 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socketpair(0x0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)

02:20:04 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1013.022404][T23739] debugfs: Directory 'loop2' with parent 'block' already present!
02:20:05 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x400080)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x9}, {0x23, 0x8, 0x5, 0x10000}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x400080) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x9}, {0x23, 0x8, 0x5, 0x10000}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

02:20:05 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:20:05 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

[ 1013.812431][   T25] audit: type=1326 audit(1656037205.527:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23758 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:05 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x400080)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x9}, {0x23, 0x8, 0x5, 0x10000}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x400080) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x9}, {0x23, 0x8, 0x5, 0x10000}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:20:05 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

[ 1013.846839][T23767] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1013.859167][T23769] debugfs: Directory 'loop1' with parent 'block' already present!
[ 1013.878093][T23771] debugfs: Directory 'loop2' with parent 'block' already present!
02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:20:05 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

[ 1013.954433][   T25] audit: type=1326 audit(1656037205.667:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23785 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0964b109 code=0x0
02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:20:05 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x7f, 0xfff}, {0xfff3, 0x1, 0x3, 0x4}]})
r0 = semget(0x2, 0x3, 0x1ae)
semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000480)=""/4096)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

[ 1014.001519][T23791] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1014.017175][T23792] debugfs: Directory 'loop1' with parent 'block' already present!
[ 1014.031437][T23796] debugfs: Directory 'loop2' with parent 'block' already present!
[ 1014.034627][T23798] debugfs: Directory 'loop3' with parent 'block' already present!
02:20:05 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x7f, 0xfff}, {0xfff3, 0x1, 0x3, 0x4}]}) (async)
r0 = semget(0x2, 0x3, 0x1ae)
semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000480)=""/4096) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:20:05 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x7f, 0xfff}, {0xfff3, 0x1, 0x3, 0x4}]}) (async)
r0 = semget(0x2, 0x3, 0x1ae)
semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000480)=""/4096)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:05 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:20:05 executing program 5:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, &(0x7f0000000400)})
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 5:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, &(0x7f0000000400)})
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, &(0x7f0000000400)}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)

02:20:05 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

[ 1014.162325][T23833] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1014.168405][T23839] debugfs: Directory 'loop1' with parent 'block' already present!
02:20:05 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 5:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, &(0x7f0000000400)}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)

02:20:05 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280))
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:05 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x40, 0x56, 0xf9}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x20c00000}}, './file0\x00'})

02:20:06 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:06 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)

02:20:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:06 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x40, 0x56, 0xf9}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x20c00000}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x40, 0x56, 0xf9}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x20c00000}}, './file0\x00'}) (async)

[ 1014.274504][T23909] debugfs: Directory 'loop0' with parent 'block' already present!
[ 1014.302265][T23911] debugfs: Directory 'loop1' with parent 'block' already present!
[ 1014.302845][T23917] debugfs: Directory 'loop2' with parent 'block' already present!
02:20:06 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x40, 0x56, 0xf9}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x20c00000}}, './file0\x00'})

02:20:06 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:06 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:06 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:06 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
mq_unlink(&(0x7f0000000000)=',$\x00')
socket$isdn_base(0x22, 0x3, 0x0)

02:20:06 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
mq_unlink(&(0x7f0000000000)=',$\x00')
socket$isdn_base(0x22, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
mq_unlink(&(0x7f0000000000)=',$\x00') (async)
socket$isdn_base(0x22, 0x3, 0x0) (async)

[ 1014.324292][T23917] debugfs: Directory 'loop4' with parent 'block' already present!
[ 1014.328045][T23918] debugfs: Directory 'loop3' with parent 'block' already present!
02:20:06 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
mq_unlink(&(0x7f0000000000)=',$\x00')
socket$isdn_base(0x22, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async)
mq_unlink(&(0x7f0000000000)=',$\x00') (async)
socket$isdn_base(0x22, 0x3, 0x0) (async)

02:20:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44800)
r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

02:20:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:06 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)

02:20:06 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
syz_open_dev$vcsn(&(0x7f0000001840), 0x0, 0x0)

02:20:06 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x7, 0xc9, &(0x7f0000000740)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/23, 0x17}], 0xa, 0x0, 0x1}, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
socketpair(0x1d, 0x80000, 0xee, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x101})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ff11286}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5