./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3317424434

<...>
Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
execve("./syz-executor3317424434", ["./syz-executor3317424434"], 0x7ffe956d78a0 /* 10 vars */) = 0
brk(NULL)                               = 0x555582925000
brk(0x555582925d40)                     = 0x555582925d40
arch_prctl(ARCH_SET_FS, 0x5555829253c0) = 0
set_tid_address(0x555582925690)         = 5863
set_robust_list(0x5555829256a0, 24)     = 0
rseq(0x555582925ce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3317424434", 4096) = 28
getrandom("\x3f\x60\x4f\x1a\x5c\xfa\x38\x24", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555582925d40
brk(0x555582946d40)                     = 0x555582946d40
brk(0x555582947000)                     = 0x555582947000
mprotect(0x7f8d7e9ee000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5864 attached
, child_tidptr=0x555582925690) = 5864
[pid  5864] set_robust_list(0x5555829256a0, 24) = 0
[pid  5864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5864] setpgid(0, 0)               = 0
[pid  5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5864] write(3, "1000", 4)         = 4
[pid  5864] close(3)                    = 0
executing program
[pid  5864] write(1, "executing program\n", 18) = 18
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5864] rt_sigaction(SIGRT_1, {sa_handler=0x7f8d7e9903e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8d7e981a60}, NULL, 8) = 0
[pid  5864] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d7e903000
[pid  5864] mprotect(0x7f8d7e904000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5864] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8d7e923990, parent_tid=0x7f8d7e923990, exit_signal=0, stack=0x7f8d7e903000, stack_size=0x20300, tls=0x7f8d7e9236c0}./strace-static-x86_64: Process 5865 attached
 => {parent_tid=[5865]}, 88) = 5865
[pid  5865] rseq(0x7f8d7e923fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5864] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5865] <... rseq resumed>)         = 0
[pid  5864] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5865] set_robust_list(0x7f8d7e9239a0, 24 <unfinished ...>
[pid  5864] futex(0x7f8d7e9f4308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5865] <... set_robust_list resumed>) = 0
[pid  5864] <... futex resumed>)        = 0
[pid  5865] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5865] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5865] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = 3
[pid  5865] futex(0x7f8d7e9f430c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5864] <... futex resumed>)        = 0
[pid  5865] futex(0x7f8d7e9f4308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5864] futex(0x7f8d7e9f4308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5865] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5864] <... futex resumed>)        = 0
[pid  5865] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_CMTP <unfinished ...>
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5865] <... socket resumed>)       = -1 EPROTONOSUPPORT (Protocol not supported)
[pid  5865] futex(0x7f8d7e9f430c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5864] <... futex resumed>)        = 0
[pid  5865] <... futex resumed>)        = 1
[pid  5864] futex(0x7f8d7e9f4308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5865] close(4 <unfinished ...>
[pid  5864] <... futex resumed>)        = 0
[pid  5865] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5865] futex(0x7f8d7e9f430c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5864] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5865] futex(0x7f8d7e9f4308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5864] futex(0x7f8d7e9f4308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5865] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5864] <... futex resumed>)        = 0
[pid  5865] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDWR <unfinished ...>
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5865] <... openat resumed>)       = -1 EPERM (Operation not permitted)
[pid  5865] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDONLY) = 4
[pid  5865] futex(0x7f8d7e9f430c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5864] <... futex resumed>)        = 0
[pid  5865] <... futex resumed>)        = 1
[pid  5864] futex(0x7f8d7e9f4308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5865] unshare(CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET <unfinished ...>
[pid  5864] <... futex resumed>)        = 0
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5864] futex(0x7f8d7e9f431c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d7e8e2000
[pid  5865] <... unshare resumed>)      = 0
[pid  5864] mprotect(0x7f8d7e8e3000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5864] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid  5865] futex(0x7f8d7e9f430c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5864] <... rt_sigprocmask resumed>[], 8) = 0
[pid  5865] futex(0x7f8d7e9f4308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8d7e902990, parent_tid=0x7f8d7e902990, exit_signal=0, stack=0x7f8d7e8e2000, stack_size=0x20300, tls=0x7f8d7e9026c0}./strace-static-x86_64: Process 5869 attached
 => {parent_tid=[5869]}, 88) = 5869
[pid  5869] rseq(0x7f8d7e902fe0, 0x20, 0, 0x53053053) = 0
[pid  5869] set_robust_list(0x7f8d7e9029a0, 24 <unfinished ...>
[pid  5864] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5869] <... set_robust_list resumed>) = 0
[pid  5864] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5869] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5864] futex(0x7f8d7e9f4318, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5869] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5864] <... futex resumed>)        = 0
[pid  5869] socket(AF_ATMPVC, SOCK_RAW, 0) = 5
[pid  5864] futex(0x7f8d7e9f431c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5869] futex(0x7f8d7e9f431c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5864] <... futex resumed>)        = 0
[pid  5864] futex(0x7f8d7e9f4308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5869] futex(0x7f8d7e9f4318, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5865] <... futex resumed>)        = 0
[pid  5864] <... futex resumed>)        = 1
[pid  5865] ioctl(5, SIOCSIFATMTCP <unfinished ...>
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5865] <... ioctl resumed>, 0)     = 0
[pid  5865] futex(0x7f8d7e9f430c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5865] futex(0x7f8d7e9f4308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5864] <... futex resumed>)        = 0
[pid  5864] futex(0x7f8d7e9f4308, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5865] <... futex resumed>)        = 0
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5865] bpf(BPF_LINK_UPDATE, {link_update={link_fd=-1, new_prog_fd=-1, flags=BPF_F_REPLACE, old_prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor)
[pid  5865] futex(0x7f8d7e9f430c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5864] <... futex resumed>)        = 0
[pid  5865] <... futex resumed>)        = 1
[pid  5864] futex(0x7f8d7e9f4308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5865] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xff\xff\xff\xff\xff\xff\xff\xff\x04\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_OOB|MSG_TRUNC}, 0 <unfinished ...>
[pid  5864] <... futex resumed>)        = 0
[   92.099635][ T5865] Oops: general protection fault, probably for non-canonical address 0xdffffc00200000ab: 0000 [#1] SMP KASAN PTI
[   92.115008][ T5865] KASAN: probably user-memory-access in range [0x0000000100000558-0x000000010000055f]
[   92.126347][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: syz-executor331 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) 
[pid  5864] futex(0x7f8d7e9f430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[   92.143390][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   92.155339][ T5865] RIP: 0010:atmtcp_c_send+0x1da/0x950
[   92.163482][ T5865] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[   92.191483][ T5865] RSP: 0018:ffffc90003f5f810 EFLAGS: 00010203
[   92.199240][ T5865] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[   92.208781][ T5865] RDX: ffff88802a510000 RSI: 00000000ffffffff RDI: ffff888030a6068c
[   92.220289][ T5865] RBP: ffff88802699fb40 R08: ffff888030a606eb R09: 1ffff1100614c0dd
[   92.230866][ T5865] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[   92.241661][ T5865] R13: ffff888030a60680 R14: 000000010000055f R15: 00000000ffffffff
[   92.252162][ T5865] FS:  00007f8d7e9236c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000
[   92.262484][ T5865] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.272133][ T5865] CR2: 000000000045ad50 CR3: 0000000075bde000 CR4: 00000000003526f0
[   92.284129][ T5865] Call Trace:
[   92.288559][ T5865]  <TASK>
[   92.291771][ T5865]  vcc_sendmsg+0xa10/0xc60
[   92.296562][ T5865]  ? __switch_to+0xdae/0x1670
[   92.303018][ T5865]  ? __pfx_vcc_sendmsg+0x10/0x10
[   92.310408][ T5865]  ? __pfx_autoremove_wake_function+0x10/0x10
[   92.320326][ T5865]  ? aa_sock_msg_perm+0xf1/0x1d0
[   92.326568][ T5865]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   92.332772][ T5865]  ? __pfx_vcc_sendmsg+0x10/0x10
[   92.339354][ T5865]  __sock_sendmsg+0x219/0x270
[   92.346385][ T5865]  ____sys_sendmsg+0x505/0x830
[   92.351577][ T5865]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.357936][ T5865]  ? import_iovec+0x74/0xa0
[   92.364090][ T5865]  ___sys_sendmsg+0x21f/0x2a0
[   92.370026][ T5865]  ? __pfx____sys_sendmsg+0x10/0x10
[   92.376045][ T5865]  ? __fget_files+0x2a/0x420
[   92.381145][ T5865]  ? __fget_files+0x3a0/0x420
[   92.386572][ T5865]  __x64_sys_sendmsg+0x19b/0x260
[   92.392044][ T5865]  ? _raw_spin_unlock_irq+0x2e/0x50
[   92.398259][ T5865]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   92.408479][ T5865]  ? rcu_is_watching+0x15/0xb0
[   92.415734][ T5865]  do_syscall_64+0xfa/0x3b0
[   92.422093][ T5865]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.428407][ T5865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.435783][ T5865]  ? clear_bhb_loop+0x60/0xb0
[   92.442472][ T5865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.450135][ T5865] RIP: 0033:0x7f8d7e96a4a9
[   92.456950][ T5865] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   92.483727][ T5865] RSP: 002b:00007f8d7e923198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.494548][ T5865] RAX: ffffffffffffffda RBX: 00007f8d7e9f4308 RCX: 00007f8d7e96a4a9
[   92.505372][ T5865] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[   92.518204][ T5865] RBP: 00007f8d7e9f4300 R08: 65732f636f72702f R09: 65732f636f72702f
[   92.529377][ T5865] R10: 65732f636f72702f R11: 0000000000000246 R12: 00007f8d7e9c10ac
[   92.539270][ T5865] R13: 00007f8d7e9231a0 R14: 0000200000000200 R15: 0000200000000250
[   92.551968][ T5865]  </TASK>
[   92.555887][ T5865] Modules linked in:
[   92.560998][ T5865] ---[ end trace 0000000000000000 ]---
[   92.567890][ T5865] RIP: 0010:atmtcp_c_send+0x1da/0x950
[   92.575807][ T5865] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[   92.598747][ T5865] RSP: 0018:ffffc90003f5f810 EFLAGS: 00010203
[   92.606683][ T5865] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[   92.617262][ T5865] RDX: ffff88802a510000 RSI: 00000000ffffffff RDI: ffff888030a6068c
[   92.628591][ T5865] RBP: ffff88802699fb40 R08: ffff888030a606eb R09: 1ffff1100614c0dd
[   92.639311][ T5865] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[   92.649913][ T5865] R13: ffff888030a60680 R14: 000000010000055f R15: 00000000ffffffff
[   92.661475][ T5865] FS:  00007f8d7e9236c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000
[   92.674049][ T5865] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.682801][ T5865] CR2: 000000000045ad50 CR3: 0000000075bde000 CR4: 00000000003526f0
[   92.693245][ T5865] Kernel panic - not syncing: Fatal exception
[   92.701868][ T5865] Kernel Offset: disabled
[   92.707414][ T5865] Rebooting in 86400 seconds..