./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1887170117

<...>
Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts.
execve("./syz-executor1887170117", ["./syz-executor1887170117"], 0x7ffd020129a0 /* 10 vars */) = 0
brk(NULL)                               = 0x555588362000
brk(0x555588362d40)                     = 0x555588362d40
arch_prctl(ARCH_SET_FS, 0x5555883623c0) = 0
set_tid_address(0x555588362690)         = 5874
set_robust_list(0x5555883626a0, 24)     = 0
rseq(0x555588362ce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1887170117", 4096) = 28
getrandom("\xb2\x48\x38\x0f\x84\x25\x87\x4e", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555588362d40
brk(0x555588383d40)                     = 0x555588383d40
brk(0x555588384000)                     = 0x555588384000
mprotect(0x7fdcca5a2000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached
 <unfinished ...>
[pid  5875] set_robust_list(0x5555883626a0, 24 <unfinished ...>
[pid  5874] <... clone resumed>, child_tidptr=0x555588362690) = 5875
[pid  5875] <... set_robust_list resumed>) = 0
[pid  5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5875] setpgid(0, 0)               = 0
[pid  5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5875] write(3, "1000", 4)         = 4
[pid  5875] close(3)                    = 0
[pid  5875] write(1, "executing program\n", 18executing program
) = 18
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5875] rt_sigaction(SIGRT_1, {sa_handler=0x7fdcca5443e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fdcca535a60}, NULL, 8) = 0
[pid  5875] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fdcca4b7000
[pid  5875] mprotect(0x7fdcca4b8000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5875] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fdcca4d7990, parent_tid=0x7fdcca4d7990, exit_signal=0, stack=0x7fdcca4b7000, stack_size=0x20300, tls=0x7fdcca4d76c0}./strace-static-x86_64: Process 5876 attached
 <unfinished ...>
[pid  5876] rseq(0x7fdcca4d7fe0, 0x20, 0, 0x53053053) = 0
[pid  5876] set_robust_list(0x7fdcca4d79a0, 24) = 0
[pid  5876] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5875] <... clone3 resumed> => {parent_tid=[5876]}, 88) = 5876
[pid  5876] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5875] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5876] futex(0x7fdcca5a8308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5875] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5875] futex(0x7fdcca5a8308, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5876] <... futex resumed>)        = 0
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5876] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = 3
[pid  5876] futex(0x7fdcca5a830c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5876] futex(0x7fdcca5a8308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5875] <... futex resumed>)        = 0
[pid  5875] futex(0x7fdcca5a8308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5876] <... futex resumed>)        = 0
[pid  5875] <... futex resumed>)        = 1
[pid  5876] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_CMTP <unfinished ...>
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5876] <... socket resumed>)       = -1 EPROTONOSUPPORT (Protocol not supported)
[pid  5876] futex(0x7fdcca5a830c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5875] <... futex resumed>)        = 0
[pid  5876] futex(0x7fdcca5a8308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5875] futex(0x7fdcca5a8308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5876] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5875] <... futex resumed>)        = 0
[pid  5876] close(4 <unfinished ...>
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5876] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid  5876] futex(0x7fdcca5a830c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5876] futex(0x7fdcca5a8308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5875] <... futex resumed>)        = 0
[pid  5876] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5875] futex(0x7fdcca5a8308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5876] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDWR <unfinished ...>
[pid  5875] <... futex resumed>)        = 0
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5876] <... openat resumed>)       = -1 EPERM (Operation not permitted)
[pid  5876] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDONLY) = 4
[pid  5876] futex(0x7fdcca5a830c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5875] <... futex resumed>)        = 0
[pid  5876] unshare(CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET <unfinished ...>
[pid  5875] futex(0x7fdcca5a8308, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5875] futex(0x7fdcca5a831c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fdcca496000
[pid  5876] <... unshare resumed>)      = 0
[pid  5875] mprotect(0x7fdcca497000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid  5876] futex(0x7fdcca5a830c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5875] <... mprotect resumed>)     = 0
[pid  5876] <... futex resumed>)        = 0
[pid  5876] futex(0x7fdcca5a8308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5875] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fdcca4b6990, parent_tid=0x7fdcca4b6990, exit_signal=0, stack=0x7fdcca496000, stack_size=0x20300, tls=0x7fdcca4b66c0}./strace-static-x86_64: Process 5879 attached
 => {parent_tid=[5879]}, 88) = 5879
[pid  5879] rseq(0x7fdcca4b6fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5879] <... rseq resumed>)         = 0
[pid  5875] futex(0x7fdcca5a8318, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5879] set_robust_list(0x7fdcca4b69a0, 24 <unfinished ...>
[pid  5875] <... futex resumed>)        = 0
[pid  5879] <... set_robust_list resumed>) = 0
[pid  5875] futex(0x7fdcca5a831c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5879] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5879] socket(AF_ATMPVC, SOCK_RAW, 0) = 5
[pid  5879] futex(0x7fdcca5a831c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5875] <... futex resumed>)        = 0
[pid  5879] futex(0x7fdcca5a8318, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5875] futex(0x7fdcca5a8308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5876] <... futex resumed>)        = 0
[pid  5875] <... futex resumed>)        = 1
[pid  5876] ioctl(5, SIOCSIFATMTCP <unfinished ...>
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5876] <... ioctl resumed>, 0)     = 0
[pid  5876] futex(0x7fdcca5a830c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5875] <... futex resumed>)        = 0
[pid  5876] <... futex resumed>)        = 1
[pid  5875] futex(0x7fdcca5a8308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5876] bpf(BPF_LINK_UPDATE, {link_update={link_fd=-1, new_prog_fd=-1, flags=BPF_F_REPLACE, old_prog_fd=-1}}, 16 <unfinished ...>
[pid  5875] <... futex resumed>)        = 0
[pid  5876] <... bpf resumed>)          = -1 EBADF (Bad file descriptor)
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5876] futex(0x7fdcca5a830c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5875] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5876] <... futex resumed>)        = 0
[pid  5875] futex(0x7fdcca5a8308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5876] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xff\xff\xff\xff\xff\xff\xff\xff\x04\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_OOB|MSG_TRUNC}, 0 <unfinished ...>
[pid  5875] <... futex resumed>)        = 0
[  102.008348][ T5876] Oops: general protection fault, probably for non-canonical address 0xdffffc00200000ab: 0000 [#1] SMP KASAN PTI
[  102.020308][ T5876] KASAN: probably user-memory-access in range [0x0000000100000558-0x000000010000055f]
[  102.029878][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz-executor188 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) 
[  102.042308][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  102.052360][ T5876] RIP: 0010:atmtcp_c_send+0x1da/0x950
[  102.057746][ T5876] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[  102.077346][ T5876] RSP: 0018:ffffc900040ef810 EFLAGS: 00010203
[  102.083441][ T5876] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[  102.091418][ T5876] RDX: ffff88807a111e00 RSI: 00000000ffffffff RDI: ffff8880725e904c
[  102.099397][ T5876] RBP: ffff88807250cb40 R08: ffff8880725e90ab R09: 1ffff1100e4bd215
[  102.107362][ T5876] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[  102.115325][ T5876] R13: ffff8880725e9040 R14: 000000010000055f R15: 00000000ffffffff
[  102.123287][ T5876] FS:  00007fdcca4d76c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000
[  102.132202][ T5876] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.138776][ T5876] CR2: 000000000045ad50 CR3: 0000000032dae000 CR4: 00000000003526f0
[  102.146738][ T5876] Call Trace:
[  102.150013][ T5876]  <TASK>
[  102.152945][ T5876]  vcc_sendmsg+0xa10/0xc60
[  102.157351][ T5876]  ? __switch_to+0xdae/0x1670
[  102.162021][ T5876]  ? __pfx_vcc_sendmsg+0x10/0x10
[  102.166951][ T5876]  ? __pfx_autoremove_wake_function+0x10/0x10
[  102.173017][ T5876]  ? aa_sock_msg_perm+0xf1/0x1d0
[  102.178010][ T5876]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  102.183421][ T5876]  ? __pfx_vcc_sendmsg+0x10/0x10
[  102.188354][ T5876]  __sock_sendmsg+0x219/0x270
[  102.193040][ T5876]  ____sys_sendmsg+0x505/0x830
[  102.197799][ T5876]  ? __pfx_____sys_sendmsg+0x10/0x10
[  102.203088][ T5876]  ? import_iovec+0x74/0xa0
[  102.207585][ T5876]  ___sys_sendmsg+0x21f/0x2a0
[  102.212252][ T5876]  ? __pfx____sys_sendmsg+0x10/0x10
[  102.217447][ T5876]  ? __fget_files+0x2a/0x420
[  102.222045][ T5876]  ? __fget_files+0x3a0/0x420
[  102.226726][ T5876]  __x64_sys_sendmsg+0x19b/0x260
[  102.231651][ T5876]  ? _raw_spin_unlock_irq+0x2e/0x50
[  102.236852][ T5876]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  102.242307][ T5876]  ? rcu_is_watching+0x15/0xb0
[  102.247072][ T5876]  do_syscall_64+0xfa/0x3b0
[  102.251578][ T5876]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.256766][ T5876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.262820][ T5876]  ? clear_bhb_loop+0x60/0xb0
[  102.267490][ T5876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.273375][ T5876] RIP: 0033:0x7fdcca51e4a9
[  102.277782][ T5876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  102.297372][ T5876] RSP: 002b:00007fdcca4d7198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.305794][ T5876] RAX: ffffffffffffffda RBX: 00007fdcca5a8308 RCX: 00007fdcca51e4a9
[  102.313756][ T5876] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  102.321711][ T5876] RBP: 00007fdcca5a8300 R08: 65732f636f72702f R09: 65732f636f72702f
[  102.329669][ T5876] R10: 65732f636f72702f R11: 0000000000000246 R12: 00007fdcca5750ac
[  102.337632][ T5876] R13: 00007fdcca4d71a0 R14: 0000200000000200 R15: 0000200000000250
[  102.345615][ T5876]  </TASK>
[  102.348623][ T5876] Modules linked in:
[  102.352676][ T5876] ---[ end trace 0000000000000000 ]---
[pid  5875] futex(0x7fdcca5a830c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[  102.358659][ T5876] RIP: 0010:atmtcp_c_send+0x1da/0x950
[  102.364039][ T5876] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[  102.383969][ T5876] RSP: 0018:ffffc900040ef810 EFLAGS: 00010203
[  102.390076][ T5876] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[  102.398103][ T5876] RDX: ffff88807a111e00 RSI: 00000000ffffffff RDI: ffff8880725e904c
[  102.406100][ T5876] RBP: ffff88807250cb40 R08: ffff8880725e90ab R09: 1ffff1100e4bd215
[  102.414099][ T5876] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[  102.422094][ T5876] R13: ffff8880725e9040 R14: 000000010000055f R15: 00000000ffffffff
[  102.430081][ T5876] FS:  00007fdcca4d76c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000
[  102.439032][ T5876] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.445611][ T5876] CR2: 000000000045ad50 CR3: 0000000032dae000 CR4: 00000000003526f0
[  102.453622][ T5876] Kernel panic - not syncing: Fatal exception
[  102.459994][ T5876] Kernel Offset: disabled
[  102.464317][ T5876] Rebooting in 86400 seconds..