program: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1a00000008060ede27bcdd545ef25dcf0e03000000000000000000000000000500010006000000"], 0x1c}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000bcf93c17880001f04570cd7d7d0517a2d9defa2aad11a8242e27f8f935749207399762d826f0bf6918bd4e0b2ab254f7bdf11b93e2bb9a09f0930b915e31a108a0f6ef187be0d68cf494629d0324133c53975f8ec47996a84b8c346efe76a3994ed9c366a77bb8eca0d2683f7c817cf0f1249274b73d09", @ANYRES16=r4, @ANYBLOB="01002bbd7000000000000c00ffff14000380100003800c000180080001000900000004000180"], 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x1df, &(0x7f00000002c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="5042ed4a020000009ca80fe809000000"], 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x0, 0xff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r9, 0x6, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=@mgmt_frame=@auth={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x1}}, 0x0, 0x1, 0x24, @void}, 0x1e) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000000)) [ 68.388331][ T5302] Bluetooth: hci0: command tx timeout [ 68.467738][ T5317] loop0: detected capacity change from 0 to 8 [ 68.496003][ T5317] ------------[ cut here ]------------ [ 68.498925][ T5317] WARNING: CPU: 0 PID: 5317 at fs/file.c:1202 file_seek_cur_needs_f_lock+0x121/0x150 [ 68.503309][ T5317] Modules linked in: [ 68.505162][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 68.510704][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.515237][ T5317] RIP: 0010:file_seek_cur_needs_f_lock+0x121/0x150 [ 68.518127][ T5317] Code: 23 e8 83 31 85 ff eb 05 e8 7c 31 85 ff b0 01 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 69 31 85 ff 31 c0 eb eb e8 60 31 85 ff 90 <0f> 0b 90 eb de 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c fd fe ff ff [ 68.525989][ T5317] RSP: 0018:ffffc9000d617e60 EFLAGS: 00010283 [ 68.528700][ T5317] RAX: ffffffff823a8ef0 RBX: ffff88803ecf9e90 RCX: 0000000000100000 [ 68.532014][ T5317] RDX: ffffc9000df3a000 RSI: 000000000000000d RDI: 000000000000000e [ 68.535288][ T5317] RBP: 0000000000000000 R08: ffff88803ecf9e97 R09: 1ffff11007d9f3d2 [ 68.538558][ T5317] R10: dffffc0000000000 R11: ffffed1007d9f3d3 R12: 0000000000000000 [ 68.541790][ T5317] R13: dffffc0000000000 R14: 0000000000000000 R15: bfffffffffffffff [ 68.545227][ T5317] FS: 00007fd0126296c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 68.549048][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.551814][ T5317] CR2: 0000000000000000 CR3: 000000003f56c000 CR4: 0000000000352ef0 [ 68.555151][ T5317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.558557][ T5317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.561798][ T5317] Call Trace: [ 68.563213][ T5317] [ 68.564431][ T5317] generic_file_llseek_size+0xaa/0x4b0 [ 68.566662][ T5317] __x64_sys_lseek+0x14c/0x1e0 [ 68.568841][ T5317] do_syscall_64+0xf6/0x210 [ 68.570827][ T5317] ? clear_bhb_loop+0x45/0xa0 [ 68.572902][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.575430][ T5317] RIP: 0033:0x7fd01178e969 [ 68.577387][ T5317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.592500][ T5317] RSP: 002b:00007fd012629038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 68.596109][ T5317] RAX: ffffffffffffffda RBX: 00007fd0119b5fa0 RCX: 00007fd01178e969 [ 68.599627][ T5317] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 000000000000000b [ 68.603327][ T5317] RBP: 00007fd011810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 68.606563][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.610457][ T5317] R13: 0000000000000000 R14: 00007fd0119b5fa0 R15: 00007ffe98c61688 [ 68.614008][ T5317] [ 68.615304][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.618291][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 68.623085][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.627682][ T5317] Call Trace: [ 68.629206][ T5317] [ 68.630374][ T5317] dump_stack_lvl+0x99/0x250 [ 68.632603][ T5317] ? __asan_memcpy+0x40/0x70 [ 68.634594][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.636800][ T5317] ? __pfx__printk+0x10/0x10 [ 68.638787][ T5317] panic+0x2db/0x790 [ 68.640641][ T5317] ? __pfx_panic+0x10/0x10 [ 68.642663][ T5317] ? show_trace_log_lvl+0x4fb/0x550 [ 68.644957][ T5317] __warn+0x31b/0x4b0 [ 68.646615][ T5317] ? file_seek_cur_needs_f_lock+0x121/0x150 [ 68.649028][ T5317] ? file_seek_cur_needs_f_lock+0x121/0x150 [ 68.652117][ T5317] report_bug+0x2be/0x4f0 [ 68.654004][ T5317] ? file_seek_cur_needs_f_lock+0x121/0x150 [ 68.656507][ T5317] ? file_seek_cur_needs_f_lock+0x121/0x150 [ 68.659028][ T5317] ? file_seek_cur_needs_f_lock+0x123/0x150 [ 68.661583][ T5317] handle_bug+0x84/0x160 [ 68.663464][ T5317] exc_invalid_op+0x1a/0x50 [ 68.665302][ T5317] asm_exc_invalid_op+0x1a/0x20 [ 68.667441][ T5317] RIP: 0010:file_seek_cur_needs_f_lock+0x121/0x150 [ 68.670274][ T5317] Code: 23 e8 83 31 85 ff eb 05 e8 7c 31 85 ff b0 01 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 69 31 85 ff 31 c0 eb eb e8 60 31 85 ff 90 <0f> 0b 90 eb de 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c fd fe ff ff [ 68.677964][ T5317] RSP: 0018:ffffc9000d617e60 EFLAGS: 00010283 [ 68.680281][ T5317] RAX: ffffffff823a8ef0 RBX: ffff88803ecf9e90 RCX: 0000000000100000 [ 68.683763][ T5317] RDX: ffffc9000df3a000 RSI: 000000000000000d RDI: 000000000000000e [ 68.686707][ T5317] RBP: 0000000000000000 R08: ffff88803ecf9e97 R09: 1ffff11007d9f3d2 [ 68.690053][ T5317] R10: dffffc0000000000 R11: ffffed1007d9f3d3 R12: 0000000000000000 [ 68.693496][ T5317] R13: dffffc0000000000 R14: 0000000000000000 R15: bfffffffffffffff [ 68.696915][ T5317] ? file_seek_cur_needs_f_lock+0x120/0x150 [ 68.699494][ T5317] generic_file_llseek_size+0xaa/0x4b0 [ 68.701971][ T5317] __x64_sys_lseek+0x14c/0x1e0 [ 68.704230][ T5317] do_syscall_64+0xf6/0x210 [ 68.706311][ T5317] ? clear_bhb_loop+0x45/0xa0 [ 68.708389][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.711098][ T5317] RIP: 0033:0x7fd01178e969 [ 68.713108][ T5317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.721321][ T5317] RSP: 002b:00007fd012629038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 68.724987][ T5317] RAX: ffffffffffffffda RBX: 00007fd0119b5fa0 RCX: 00007fd01178e969 [ 68.728368][ T5317] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 000000000000000b [ 68.731741][ T5317] RBP: 00007fd011810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 68.735248][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.738622][ T5317] R13: 0000000000000000 R14: 00007fd0119b5fa0 R15: 00007ffe98c61688 [ 68.744439][ T5317] [ 68.746043][ T5317] Kernel Offset: disabled [ 68.747761][ T5317] Rebooting in 86400 seconds..