./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3014344327

<...>
Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts.
execve("./syz-executor3014344327", ["./syz-executor3014344327"], 0x7ffc92d7c9f0 /* 10 vars */) = 0
brk(NULL)                               = 0x55556cc5c000
brk(0x55556cc5cd40)                     = 0x55556cc5cd40
arch_prctl(ARCH_SET_FS, 0x55556cc5c3c0) = 0
set_tid_address(0x55556cc5c690)         = 5865
set_robust_list(0x55556cc5c6a0, 24)     = 0
rseq(0x55556cc5cce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3014344327", 4096) = 28
getrandom("\xb7\xe9\x5e\x87\x17\x01\x58\x22", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55556cc5cd40
brk(0x55556cc7dd40)                     = 0x55556cc7dd40
brk(0x55556cc7e000)                     = 0x55556cc7e000
mprotect(0x7fb476005000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached
 <unfinished ...>
[pid  5866] set_robust_list(0x55556cc5c6a0, 24 <unfinished ...>
[pid  5865] <... clone resumed>, child_tidptr=0x55556cc5c690) = 5866
[pid  5866] <... set_robust_list resumed>) = 0
[pid  5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5866] setpgid(0, 0)               = 0
[pid  5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5866] write(3, "1000", 4)         = 4
[pid  5866] close(3)                    = 0
[pid  5866] write(1, "executing program\n", 18executing program
) = 18
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5866] rt_sigaction(SIGRT_1, {sa_handler=0x7fb475fa73e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb475f98a60}, NULL, 8) = 0
[pid  5866] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb475f1a000
[pid  5866] mprotect(0x7fb475f1b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb475f3a990, parent_tid=0x7fb475f3a990, exit_signal=0, stack=0x7fb475f1a000, stack_size=0x20300, tls=0x7fb475f3a6c0} => {parent_tid=[5867]}, 88) = 5867
./strace-static-x86_64: Process 5867 attached
[pid  5866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5867] rseq(0x7fb475f3afe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5866] futex(0x7fb47600b308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5867] <... rseq resumed>)         = 0
[pid  5866] <... futex resumed>)        = 0
[pid  5867] set_robust_list(0x7fb475f3a9a0, 24 <unfinished ...>
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5867] <... set_robust_list resumed>) = 0
[pid  5867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5867] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = 3
[pid  5867] futex(0x7fb47600b30c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5866] <... futex resumed>)        = 0
[pid  5867] futex(0x7fb47600b308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5866] futex(0x7fb47600b308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5867] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5866] <... futex resumed>)        = 0
[pid  5867] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_CMTP <unfinished ...>
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5867] <... socket resumed>)       = -1 EPROTONOSUPPORT (Protocol not supported)
[pid  5867] futex(0x7fb47600b30c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5866] <... futex resumed>)        = 0
[pid  5867] <... futex resumed>)        = 1
[pid  5866] futex(0x7fb47600b308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5867] close(4)                    = -1 EBADF (Bad file descriptor)
[pid  5866] <... futex resumed>)        = 0
[pid  5867] futex(0x7fb47600b30c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5867] <... futex resumed>)        = 0
[pid  5866] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5867] futex(0x7fb47600b308, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable)
[pid  5866] futex(0x7fb47600b308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5867] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDWR <unfinished ...>
[pid  5866] <... futex resumed>)        = 0
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5867] <... openat resumed>)       = -1 EPERM (Operation not permitted)
[pid  5867] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDONLY) = 4
[pid  5867] futex(0x7fb47600b30c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5867] futex(0x7fb47600b308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5866] <... futex resumed>)        = 0
[pid  5866] futex(0x7fb47600b308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5867] <... futex resumed>)        = 0
[pid  5866] <... futex resumed>)        = 1
[pid  5867] unshare(CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET <unfinished ...>
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5866] futex(0x7fb47600b31c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb475ef9000
[pid  5866] mprotect(0x7fb475efa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5867] <... unshare resumed>)      = 0
[pid  5866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb475f19990, parent_tid=0x7fb475f19990, exit_signal=0, stack=0x7fb475ef9000, stack_size=0x20300, tls=0x7fb475f196c0}./strace-static-x86_64: Process 5872 attached
 <unfinished ...>
[pid  5867] futex(0x7fb47600b30c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5872] rseq(0x7fb475f19fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5867] futex(0x7fb47600b308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5872] <... rseq resumed>)         = 0
[pid  5872] set_robust_list(0x7fb475f199a0, 24) = 0
[pid  5872] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5866] <... clone3 resumed> => {parent_tid=[5872]}, 88) = 5872
[pid  5872] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5866] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5872] futex(0x7fb47600b318, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5866] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5866] futex(0x7fb47600b318, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] <... futex resumed>)        = 0
[pid  5866] <... futex resumed>)        = 1
[pid  5872] socket(AF_ATMPVC, SOCK_RAW, 0 <unfinished ...>
[pid  5866] futex(0x7fb47600b31c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5872] <... socket resumed>)       = 5
[pid  5872] futex(0x7fb47600b31c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5866] <... futex resumed>)        = 0
[pid  5872] futex(0x7fb47600b318, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5866] futex(0x7fb47600b308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5867] <... futex resumed>)        = 0
[pid  5867] ioctl(5, SIOCSIFATMTCP <unfinished ...>
[pid  5866] <... futex resumed>)        = 1
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5867] <... ioctl resumed>, 0)     = 0
[pid  5867] futex(0x7fb47600b30c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5866] <... futex resumed>)        = 0
[pid  5866] futex(0x7fb47600b308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5867] bpf(BPF_LINK_UPDATE, {link_update={link_fd=-1, new_prog_fd=-1, flags=BPF_F_REPLACE, old_prog_fd=-1}}, 16 <unfinished ...>
[pid  5866] <... futex resumed>)        = 0
[pid  5867] <... bpf resumed>)          = -1 EBADF (Bad file descriptor)
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5867] futex(0x7fb47600b30c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5867] futex(0x7fb47600b308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5866] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5866] futex(0x7fb47600b308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5867] <... futex resumed>)        = 0
[pid  5866] <... futex resumed>)        = 1
[pid  5867] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xff\xff\xff\xff\xff\xff\xff\xff\x04\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_OOB|MSG_TRUNC}, 0 <unfinished ...>
[   90.896831][ T5867] Oops: general protection fault, probably for non-canonical address 0xdffffc00200000ab: 0000 [#1] SMP KASAN PTI
[   90.909021][ T5867] KASAN: probably user-memory-access in range [0x0000000100000558-0x000000010000055f]
[   90.918579][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz-executor301 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) 
[   90.930985][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   90.941041][ T5867] RIP: 0010:atmtcp_c_send+0x1da/0x950
[pid  5866] futex(0x7fb47600b30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[   90.946459][ T5867] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[   90.966077][ T5867] RSP: 0018:ffffc900040af810 EFLAGS: 00010203
[   90.972158][ T5867] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[   90.980128][ T5867] RDX: ffff8880551b1e00 RSI: 00000000ffffffff RDI: ffff88807f0cc34c
[   90.988192][ T5867] RBP: ffff888076bbd000 R08: ffff88807f0cc3ab R09: 1ffff1100fe19875
[   90.996161][ T5867] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[   91.004136][ T5867] R13: ffff88807f0cc340 R14: 000000010000055f R15: 00000000ffffffff
[   91.012104][ T5867] FS:  00007fb475f3a6c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000
[   91.021036][ T5867] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   91.027634][ T5867] CR2: 00005590276e67a8 CR3: 0000000074fca000 CR4: 00000000003526f0
[   91.035614][ T5867] Call Trace:
[   91.038905][ T5867]  <TASK>
[   91.041866][ T5867]  vcc_sendmsg+0xa10/0xc60
[   91.046289][ T5867]  ? __switch_to+0xdae/0x1670
[   91.050974][ T5867]  ? __pfx_vcc_sendmsg+0x10/0x10
[   91.055938][ T5867]  ? __pfx_autoremove_wake_function+0x10/0x10
[   91.062022][ T5867]  ? aa_sock_msg_perm+0xf1/0x1d0
[   91.066985][ T5867]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   91.072271][ T5867]  ? __pfx_vcc_sendmsg+0x10/0x10
[   91.077208][ T5867]  __sock_sendmsg+0x219/0x270
[   91.081888][ T5867]  ____sys_sendmsg+0x505/0x830
[   91.086651][ T5867]  ? __pfx_____sys_sendmsg+0x10/0x10
[   91.091935][ T5867]  ? import_iovec+0x74/0xa0
[   91.096438][ T5867]  ___sys_sendmsg+0x21f/0x2a0
[   91.101115][ T5867]  ? __pfx____sys_sendmsg+0x10/0x10
[   91.106323][ T5867]  ? __fget_files+0x2a/0x420
[   91.110914][ T5867]  ? __fget_files+0x3a0/0x420
[   91.115626][ T5867]  __x64_sys_sendmsg+0x19b/0x260
[   91.120925][ T5867]  ? _raw_spin_unlock_irq+0x2e/0x50
[   91.126169][ T5867]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   91.131643][ T5867]  ? rcu_is_watching+0x15/0xb0
[   91.136410][ T5867]  do_syscall_64+0xfa/0x3b0
[   91.140918][ T5867]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.146124][ T5867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.152190][ T5867]  ? clear_bhb_loop+0x60/0xb0
[   91.156872][ T5867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.162767][ T5867] RIP: 0033:0x7fb475f814a9
[   91.167208][ T5867] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   91.186814][ T5867] RSP: 002b:00007fb475f3a198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.195235][ T5867] RAX: ffffffffffffffda RBX: 00007fb47600b308 RCX: 00007fb475f814a9
[   91.203208][ T5867] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[   91.211180][ T5867] RBP: 00007fb47600b300 R08: 65732f636f72702f R09: 65732f636f72702f
[   91.219153][ T5867] R10: 65732f636f72702f R11: 0000000000000246 R12: 00007fb475fd80ac
[   91.227208][ T5867] R13: 00007fb475f3a1a0 R14: 0000200000000200 R15: 0000200000000250
[   91.235184][ T5867]  </TASK>
[   91.238198][ T5867] Modules linked in:
[   91.242354][ T5867] ---[ end trace 0000000000000000 ]---
[   91.247979][ T5867] RIP: 0010:atmtcp_c_send+0x1da/0x950
[   91.253399][ T5867] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[   91.273118][ T5867] RSP: 0018:ffffc900040af810 EFLAGS: 00010203
[   91.279268][ T5867] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[   91.287304][ T5867] RDX: ffff8880551b1e00 RSI: 00000000ffffffff RDI: ffff88807f0cc34c
[   91.295354][ T5867] RBP: ffff888076bbd000 R08: ffff88807f0cc3ab R09: 1ffff1100fe19875
[   91.303334][ T5867] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[   91.311365][ T5867] R13: ffff88807f0cc340 R14: 000000010000055f R15: 00000000ffffffff
[   91.319385][ T5867] FS:  00007fb475f3a6c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000
[   91.328413][ T5867] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   91.335060][ T5867] CR2: 00005590276e67a8 CR3: 0000000074fca000 CR4: 00000000003526f0
[   91.343150][ T5867] Kernel panic - not syncing: Fatal exception
[   91.349446][ T5867] Kernel Offset: disabled
[   91.353788][ T5867] Rebooting in 86400 seconds..