./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1928755783

<...>
Warning: Permanently added '10.128.10.51' (ED25519) to the list of known hosts.
execve("./syz-executor1928755783", ["./syz-executor1928755783"], 0x7ffcb57b7e40 /* 10 vars */) = 0
brk(NULL)                               = 0x5555834f7000
brk(0x5555834f7d40)                     = 0x5555834f7d40
arch_prctl(ARCH_SET_FS, 0x5555834f73c0) = 0
set_tid_address(0x5555834f7690)         = 5796
set_robust_list(0x5555834f76a0, 24)     = 0
rseq(0x5555834f7ce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1928755783", 4096) = 28
getrandom("\x4a\x4c\x8c\xed\x16\x55\x50\xd7", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555834f7d40
brk(0x555583518d40)                     = 0x555583518d40
brk(0x555583519000)                     = 0x555583519000
mprotect(0x7f15581f8000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555834f7690) = 5797
./strace-static-x86_64: Process 5797 attached
[pid  5797] set_robust_list(0x5555834f76a0, 24) = 0
[pid  5797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5797] setpgid(0, 0)               = 0
[pid  5797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5797] write(3, "1000", 4)         = 4
[pid  5797] close(3)                    = 0
[pid  5797] write(1, "executing program\n", 18executing program
) = 18
[pid  5797] futex(0x7f15581fe30c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5797] rt_sigaction(SIGRT_1, {sa_handler=0x7f155819a3a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f155818ba20}, NULL, 8) = 0
[pid  5797] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f155810d000
[pid  5797] mprotect(0x7f155810e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f155812d990, parent_tid=0x7f155812d990, exit_signal=0, stack=0x7f155810d000, stack_size=0x20300, tls=0x7f155812d6c0}./strace-static-x86_64: Process 5798 attached
 => {parent_tid=[5798]}, 88) = 5798
[pid  5797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5797] futex(0x7f15581fe308, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5797] futex(0x7f15581fe30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5798] rseq(0x7f155812dfe0, 0x20, 0, 0x53053053) = 0
[pid  5798] set_robust_list(0x7f155812d9a0, 24) = 0
[pid  5798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5798] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = 3
[pid  5798] futex(0x7f15581fe30c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5797] <... futex resumed>)        = 0
[pid  5798] futex(0x7f15581fe308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5797] futex(0x7f15581fe308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5798] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5798] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_CMTP <unfinished ...>
[pid  5797] <... futex resumed>)        = 0
[pid  5797] futex(0x7f15581fe30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5797] futex(0x7f15581fe31c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15580ec000
[pid  5797] mprotect(0x7f15580ed000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f155810c990, parent_tid=0x7f155810c990, exit_signal=0, stack=0x7f15580ec000, stack_size=0x20300, tls=0x7f155810c6c0}./strace-static-x86_64: Process 5800 attached
 <unfinished ...>
[pid  5800] rseq(0x7f155810cfe0, 0x20, 0, 0x53053053) = 0
[pid  5797] <... clone3 resumed> => {parent_tid=[5800]}, 88) = 5800
[pid  5800] set_robust_list(0x7f155810c9a0, 24 <unfinished ...>
[pid  5797] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5800] <... set_robust_list resumed>) = 0
[pid  5797] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5800] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5797] futex(0x7f15581fe318, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5800] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5797] <... futex resumed>)        = 0
[pid  5800] close(4)                    = -1 EBADF (Bad file descriptor)
[pid  5797] futex(0x7f15581fe31c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5800] futex(0x7f15581fe31c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5797] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5800] <... futex resumed>)        = 0
[pid  5797] futex(0x7f15581fe318, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5800] openat(AT_FDCWD, "/proc/self/ns/ipc", O_RDWR <unfinished ...>
[pid  5797] <... futex resumed>)        = 0
[pid  5797] futex(0x7f15581fe31c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5800] <... openat resumed>)       = -1 EPERM (Operation not permitted)
[pid  5800] openat(AT_FDCWD, "/proc/self/ns/ipc", O_RDONLY) = 4
[pid  5800] futex(0x7f15581fe31c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5797] <... futex resumed>)        = 0
[pid  5800] futex(0x7f15581fe318, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5797] futex(0x7f15581fe318, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5800] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5797] <... futex resumed>)        = 0
[pid  5800] unshare(CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET <unfinished ...>
[pid  5797] futex(0x7f15581fe31c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5798] <... socket resumed>)       = -1 EPROTONOSUPPORT (Protocol not supported)
[pid  5798] futex(0x7f15581fe30c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5798] futex(0x7f15581fe308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5797] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  5797] futex(0x7f15581fe308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5798] <... futex resumed>)        = 0
[pid  5797] <... futex resumed>)        = 1
[pid  5798] socket(AF_ATMPVC, SOCK_RAW, 0) = 5
[pid  5798] futex(0x7f15581fe30c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5797] futex(0x7f15581fe30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5798] <... futex resumed>)        = 0
[pid  5797] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5797] futex(0x7f15581fe308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5798] ioctl(5, SIOCSIFATMTCP <unfinished ...>
[pid  5797] <... futex resumed>)        = 0
[pid  5798] <... ioctl resumed>, 0)     = 0
[pid  5797] futex(0x7f15581fe30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5798] futex(0x7f15581fe30c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5798] futex(0x7f15581fe308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5797] <... futex resumed>)        = 0
[pid  5797] futex(0x7f15581fe308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5798] <... futex resumed>)        = 0
[pid  5797] <... futex resumed>)        = 1
[  206.178093][ T5798] =====================================================
[  206.185597][ T5798] BUG: KMSAN: uninit-value in atmtcp_c_send+0x255/0xed0
[  206.192806][ T5798]  atmtcp_c_send+0x255/0xed0
[  206.197945][ T5798]  vcc_sendmsg+0xd7c/0xff0
[  206.202628][ T5798]  __sock_sendmsg+0x330/0x3d0
[  206.207719][ T5798]  ____sys_sendmsg+0x7e0/0xd80
[  206.212707][ T5798]  ___sys_sendmsg+0x271/0x3b0
[  206.217734][ T5798]  __x64_sys_sendmsg+0x211/0x3e0
[  206.222885][ T5798]  x64_sys_call+0x32fb/0x3db0
[  206.227923][ T5798]  do_syscall_64+0xd9/0x210
[  206.232633][ T5798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.238995][ T5798] 
[  206.241455][ T5798] Uninit was created at:
[  206.246159][ T5798]  kmem_cache_alloc_node_noprof+0x818/0xf00
[  206.252289][ T5798]  kmalloc_reserve+0x13c/0x4b0
[  206.257449][ T5798]  __alloc_skb+0x347/0x7d0
[  206.262156][ T5798]  vcc_sendmsg+0xb40/0xff0
[  206.267019][ T5798]  __sock_sendmsg+0x330/0x3d0
[  206.271975][ T5798]  ____sys_sendmsg+0x7e0/0xd80
[pid  5798] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x55\x05\xe7\x6b", iov_len=4}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_EOR|MSG_CONFIRM|MSG_ZEROCOPY <unfinished ...>
[pid  5797] futex(0x7f15581fe30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5800] <... unshare resumed>)      = 0
[pid  5800] futex(0x7f15581fe31c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5800] futex(0x7f15581fe318, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5797] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[  206.277101][ T5798]  ___sys_sendmsg+0x271/0x3b0
[  206.282016][ T5798]  __x64_sys_sendmsg+0x211/0x3e0
[  206.288152][ T5798]  x64_sys_call+0x32fb/0x3db0
[  206.293360][ T5798]  do_syscall_64+0xd9/0x210
[  206.298059][ T5798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.304297][ T5798] 
[  206.306803][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: syz-executor192 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(undef) 
[  206.319837][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  206.330209][ T5798] =====================================================
[  206.337567][ T5798] Disabling lock debugging due to kernel taint
[  206.344050][ T5798] Kernel panic - not syncing: kmsan.panic set ...
[  206.350676][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: syz-executor192 Tainted: G    B               6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(undef) 
[  206.364984][ T5798] Tainted: [B]=BAD_PAGE
[  206.369275][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  206.379520][ T5798] Call Trace:
[  206.382960][ T5798]  <TASK>
[  206.386056][ T5798]  __dump_stack+0x26/0x30
[  206.390581][ T5798]  dump_stack_lvl+0x53/0x270
[  206.395377][ T5798]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  206.401443][ T5798]  dump_stack+0x1e/0x25
[  206.405810][ T5798]  panic+0x4bd/0xd50
[  206.410067][ T5798]  kmsan_report+0x31c/0x320
[  206.414885][ T5798]  ? __msan_warning+0x1b/0x30
[  206.419782][ T5798]  ? atmtcp_c_send+0x255/0xed0
[  206.424797][ T5798]  ? vcc_sendmsg+0xd7c/0xff0
[  206.429578][ T5798]  ? __sock_sendmsg+0x330/0x3d0
[  206.434688][ T5798]  ? ____sys_sendmsg+0x7e0/0xd80
[  206.439893][ T5798]  ? ___sys_sendmsg+0x271/0x3b0
[  206.445005][ T5798]  ? __x64_sys_sendmsg+0x211/0x3e0
[  206.450380][ T5798]  ? x64_sys_call+0x32fb/0x3db0
[  206.455443][ T5798]  ? do_syscall_64+0xd9/0x210
[  206.460327][ T5798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.466639][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.472007][ T5798]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  206.478138][ T5798]  ? should_fail_ex+0x45/0x8a0
[  206.483161][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.488553][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.493976][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.499361][ T5798]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  206.505398][ T5798]  ? _copy_from_iter+0x84a/0x3350
[  206.510627][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.516028][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.521404][ T5798]  __msan_warning+0x1b/0x30
[pid  5797] exit_group(0 <unfinished ...>
[pid  5800] <... futex resumed>)        = ?
[pid  5797] <... exit_group resumed>)   = ?
[pid  5800] +++ exited with 0 +++
[  206.526118][ T5798]  atmtcp_c_send+0x255/0xed0
[  206.531048][ T5798]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  206.537143][ T5798]  ? __pfx_atmtcp_c_send+0x10/0x10
[  206.542468][ T5798]  ? __pfx_atmtcp_c_send+0x10/0x10
[  206.547829][ T5798]  vcc_sendmsg+0xd7c/0xff0
[  206.552457][ T5798]  ? __pfx_autoremove_wake_function+0x10/0x10
[  206.558831][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.564224][ T5798]  ? __pfx_vcc_sendmsg+0x10/0x10
[  206.569324][ T5798]  ? __pfx_vcc_sendmsg+0x10/0x10
[  206.574476][ T5798]  __sock_sendmsg+0x330/0x3d0
[  206.579391][ T5798]  ____sys_sendmsg+0x7e0/0xd80
[  206.584325][ T5798]  ___sys_sendmsg+0x271/0x3b0
[  206.589169][ T5798]  ? __rcu_read_unlock+0x6d/0xd0
[  206.594259][ T5798]  ? __fget_files+0x3b4/0x4a0
[  206.599232][ T5798]  ? __fget_files+0x3b9/0x4a0
[  206.604171][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.609457][ T5798]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  206.615464][ T5798]  __x64_sys_sendmsg+0x211/0x3e0
[  206.620555][ T5798]  ? kmsan_get_metadata+0xfb/0x160
[  206.625880][ T5798]  x64_sys_call+0x32fb/0x3db0
[  206.630768][ T5798]  do_syscall_64+0xd9/0x210
[  206.635449][ T5798]  ? ret_from_fork+0x1a5/0x310
[  206.640403][ T5798]  ? clear_bhb_loop+0x40/0x90
[  206.645224][ T5798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.651266][ T5798] RIP: 0033:0x7f1558174469
[  206.655948][ T5798] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  206.675727][ T5798] RSP: 002b:00007f155812d198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  206.684319][ T5798] RAX: ffffffffffffffda RBX: 00007f15581fe308 RCX: 00007f1558174469
[  206.692421][ T5798] RDX: 0000000004000880 RSI: 0000200000000140 RDI: 0000000000000005
[  206.700516][ T5798] RBP: 00007f15581fe300 R08: 0000000000000000 R09: 0000000000000000
[  206.708634][ T5798] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15581cb0ac
[  206.716813][ T5798] R13: 0000000000000000 R14: 00002000000000c0 R15: 0000200000000150
[  206.724993][ T5798]  </TASK>
[  206.728522][ T5798] Kernel Offset: disabled
[  206.732984][ T5798] Rebooting in 86400 seconds..