./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2798969336

<...>
Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts.
execve("./syz-executor2798969336", ["./syz-executor2798969336"], 0x7ffc030ec6a0 /* 10 vars */) = 0
brk(NULL)                               = 0x55555575f000
brk(0x55555575fc40)                     = 0x55555575fc40
arch_prctl(ARCH_SET_FS, 0x55555575f300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
set_tid_address(0x55555575f5d0)         = 3607
set_robust_list(0x55555575f5e0, 24)     = 0
rt_sigaction(SIGRTMIN, {sa_handler=0x7f66234b12b0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f66234b1980}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x7f66234b1350, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f66234b1980}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2798969336", 4096) = 28
brk(0x555555780c40)                     = 0x555555780c40
brk(0x555555781000)                     = 0x555555781000
mprotect(0x7f6623571000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555575f5d0) = 3608
./strace-static-x86_64: Process 3608 attached
[pid  3608] set_robust_list(0x55555575f5e0, 24) = 0
[pid  3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3608] setpgid(0, 0)               = 0
[pid  3608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3608] write(3, "1000", 4)         = 4
[pid  3608] close(3)                    = 0
[pid  3608] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6623481000
[pid  3608] mprotect(0x7f6623482000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  3608] clone(child_stack=0x7f66234a13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3609 attached
 <unfinished ...>
[pid  3609] set_robust_list(0x7f66234a19e0, 24) = 0
[pid  3609] futex(0x7f66235773e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  3608] <... clone resumed>, parent_tid=[3609], tls=0x7f66234a1700, child_tidptr=0x7f66234a19d0) = 3609
[pid  3608] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3609] <... futex resumed>)        = 0
[pid  3608] <... futex resumed>)        = 1
[pid  3609] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP <unfinished ...>
[pid  3608] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3609] <... socket resumed>)       = 3
[pid  3609] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  3608] <... futex resumed>)        = 0
[pid  3609] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4 <unfinished ...>
[pid  3608] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3609] <... setsockopt resumed>)   = 0
[pid  3608] <... futex resumed>)        = 0
[pid  3609] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3608] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3609] <... futex resumed>)        = 0
[pid  3608] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  3609] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28 <unfinished ...>
[pid  3608] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3608] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3609] <... connect resumed>)      = 0
[pid  3609] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  3608] <... futex resumed>)        = 0
[pid  3608] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3608] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3609] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid  3609] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  3608] <... futex resumed>)        = 0
[pid  3609] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x38\x00\xf4\x5a\x46\x7c\xef\x8d\xb2\x0c\x7f\x00\x00\x00\x08\x01\x00\x00\x00\x00\x00\x00\xe6\x60\x08\x00\x17\x00\x00\x00\xfb\x48\x6d\x4e\x2d\xce\xfe\xe8", 40 <unfinished ...>
[pid  3608] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3608] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  3608] futex(0x7f66235773fc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6623460000
[pid  3608] mprotect(0x7f6623461000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  3608] clone(child_stack=0x7f66234803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3615], tls=0x7f6623480700, child_tidptr=0x7f66234809d0) = 3615
[pid  3608] futex(0x7f66235773f8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3608] futex(0x7f66235773fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3615 attached
 <unfinished ...>
[pid  3615] set_robust_list(0x7f66234809e0, 24) = 0
[pid  3615] read(3,  <unfinished ...>
[pid  3608] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  3615] <... read resumed>0x20000080, 193) = -1 EPERM (Operation not permitted)
[pid  3609] <... setsockopt resumed>)   = 0
[pid  3608] futex(0x7f662357740c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3615] futex(0x7f66235773fc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3615] futex(0x7f66235773f8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  3609] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3609] futex(0x7f66235773e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  3608] <... futex resumed>)        = 0
[pid  3608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f662343f000
[pid  3608] mprotect(0x7f6623440000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  3608] clone(child_stack=0x7f662345f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3623], tls=0x7f662345f700, child_tidptr=0x7f662345f9d0) = 3623
[pid  3608] futex(0x7f6623577408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3608] futex(0x7f662357740c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3623 attached
 <unfinished ...>
[pid  3623] set_robust_list(0x7f662345f9e0, 24) = 0
[pid  3623] read(3,  <unfinished ...>
[pid  3608] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  3608] exit_group(0 <unfinished ...>
[pid  3623] <... read resumed> <unfinished ...>) = ?
[pid  3615] <... futex resumed>)        = ?
[pid  3609] <... futex resumed>)        = ?
[pid  3608] <... exit_group resumed>)   = ?
[pid  3623] +++ exited with 0 +++
[pid  3615] +++ exited with 0 +++
[pid  3609] +++ exited with 0 +++
[pid  3608] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3608, si_uid=0, si_status=0, si_utime=0, si_stime=2} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3624 attached
, child_tidptr=0x55555575f5d0) = 3624
[pid  3624] set_robust_list(0x55555575f5e0, 24) = 0
[pid  3624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3624] setpgid(0, 0)               = 0
[pid  3624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3624] write(3, "1000", 4)         = 4
[pid  3624] close(3)                    = 0
[pid  3624] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6623481000
[pid  3624] mprotect(0x7f6623482000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  3624] clone(child_stack=0x7f66234a13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3625 attached
 <unfinished ...>
[pid  3625] set_robust_list(0x7f66234a19e0, 24 <unfinished ...>
[pid  3624] <... clone resumed>, parent_tid=[3625], tls=0x7f66234a1700, child_tidptr=0x7f66234a19d0) = 3625
[pid  3625] <... set_robust_list resumed>) = 0
[pid  3624] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3625] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP <unfinished ...>
[pid  3624] <... futex resumed>)        = 0
[pid  3625] <... socket resumed>)       = 3
[pid  3624] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3625] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3624] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  3625] <... futex resumed>)        = 0
[pid  3624] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3625] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4 <unfinished ...>
[pid  3624] <... futex resumed>)        = 0
[pid  3625] <... setsockopt resumed>)   = 0
[pid  3624] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3625] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3624] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  3625] <... futex resumed>)        = 0
[pid  3624] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3625] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28 <unfinished ...>
[pid  3624] <... futex resumed>)        = 0
[pid  3625] <... connect resumed>)      = 0
[pid  3624] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3625] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3624] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  3625] <... futex resumed>)        = 0
[pid  3624] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3625] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4 <unfinished ...>
[pid  3624] <... futex resumed>)        = 0
[pid  3625] <... setsockopt resumed>)   = 0
[pid  3624] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3625] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3624] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  3625] <... futex resumed>)        = 0
[pid  3624] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3625] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x38\x00\xf4\x5a\x46\x7c\xef\x8d\xb2\x0c\x7f\x00\x00\x00\x08\x01\x00\x00\x00\x00\x00\x00\xe6\x60\x08\x00\x17\x00\x00\x00\xfb\x48\x6d\x4e\x2d\xce\xfe\xe8", 40 <unfinished ...>
[pid  3624] <... futex resumed>)        = 0
[pid  3625] <... setsockopt resumed>)   = 0
[pid  3624] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  3625] futex(0x7f66235773ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3624] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  3625] <... futex resumed>)        = 0
[pid  3624] futex(0x7f66235773e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  3625] read(3,  <unfinished ...>
[pid  3624] <... futex resumed>)        = 0
[pid  3624] futex(0x7f66235773ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  3624] futex(0x7f66235773fc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6623460000
[pid  3624] mprotect(0x7f6623461000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  3624] clone(child_stack=0x7f66234803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3626], tls=0x7f6623480700, child_tidptr=0x7f66234809d0) = 3626
[pid  3624] futex(0x7f66235773f8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  3624] futex(0x7f66235773fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3626 attached
 <unfinished ...>
[pid  3626] set_robust_list(0x7f66234809e0, 24) = 0
[pid  3626] read(3,  <unfinished ...>
[pid  3624] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  3624] futex(0x7f66235773fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid  3624] exit_group(0 <unfinished ...>
[pid  3625] <... read resumed> <unfinished ...>) = ?
[pid  3624] <... exit_group resumed>)   = ?
[pid  3625] +++ exited with 0 +++
syzkaller login: [   45.782557][ T3626] 
[   45.785071][ T3626] ====================================
[   45.790654][ T3626] WARNING: syz-executor279/3626 still has locks held!
[   45.797564][ T3626] 5.19.0-rc6-syzkaller-01454-ge22c88799f26 #0 Not tainted
[   45.804671][ T3626] ------------------------------------
[   45.810263][ T3626] 1 lock held by syz-executor279/3626:
[   45.815721][ T3626]  #0: ffff888026449ab0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_rx_reader_lock+0x2da/0x4e0
[   45.825873][ T3626] 
[   45.825873][ T3626] stack backtrace:
[   45.831796][ T3626] CPU: 0 PID: 3626 Comm: syz-executor279 Not tainted 5.19.0-rc6-syzkaller-01454-ge22c88799f26 #0
[   45.842298][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[   45.852348][ T3626] Call Trace:
[   45.855612][ T3626]  <TASK>
[   45.858536][ T3626]  dump_stack_lvl+0xcd/0x134
[   45.863136][ T3626]  get_signal+0x1424/0x2600
[   45.867637][ T3626]  ? exit_signals+0x8b0/0x8b0
[   45.872315][ T3626]  ? mark_lock.part.0+0xee/0x1910
[   45.877354][ T3626]  ? __task_pid_nr_ns+0x168/0x4b0
[   45.882390][ T3626]  ? lock_chain_count+0x20/0x20
[   45.887241][ T3626]  arch_do_signal_or_restart+0x82/0x2300
[   45.892891][ T3626]  ? from_kuid_munged+0xa2/0x130
[   45.897815][ T3626]  ? find_held_lock+0x2d/0x110
[   45.902583][ T3626]  ? get_sigframe_size+0x10/0x10
[   45.907507][ T3626]  ? ptrace_notify+0xfa/0x140
[   45.912179][ T3626]  ? mark_held_locks+0x9f/0xe0
[   45.916947][ T3626]  ? exit_to_user_mode_prepare+0x137/0x250
[   45.922779][ T3626]  exit_to_user_mode_prepare+0x15f/0x250
[   45.928400][ T3626]  syscall_exit_to_user_mode+0x19/0x50
[   45.933849][ T3626]  do_syscall_64+0x42/0xb0
[   45.938251][ T3626]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   45.944143][ T3626] RIP: 0033:0x7f66234ef999
[   45.948558][ T3626] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   45.968149][ T3626] RSP: 002b:00007f66234802f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[pid  3626] <... read resumed> <unfinished ...>) = ?
[   45.976548][ T3626] RAX: fffffffffffffe00 RBX: 00007f66235773f0 RCX: 00007f66234ef999
[   45.984517][ T3626] RDX: 00000000000000c1 RSI: 0000000020000080 RDI: 0000000000000003
[   45.992473][ T3626] RBP: 00007f6623545064 R08: 00007f6623480700 R09: 0000000000000000
[   46.000440][ T3626] R10: 00007f6623480700 R11: 0000000000000246 R12: 0100000000000000
[   46.008396][ T3626] R13: e8fece2d4e6d48fb R14: 0cb28def7c465af4 R15: 00007f66235773f8
[   46.016359][ T3626]  </TASK>
[pid  3607] kill(-3624, SIGKILL)        = 0
[pid  3607] kill(3624, SIGKILL)         = 0
[pid  3607] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  3607] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
[pid  3607] getdents64(3, 0x555555760620 /* 2 entries */, 32768) = 48
[pid  3607] getdents64(3, 0x555555760620 /* 0 entries */, 32768) = 0
[pid  3607] close(3)                    = 0