./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor896523438

<...>
Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts.
execve("./syz-executor896523438", ["./syz-executor896523438"], 0x7ffcf705cf40 /* 10 vars */) = 0
brk(NULL)                               = 0x555558be1000
brk(0x555558be1d40)                     = 0x555558be1d40
arch_prctl(ARCH_SET_FS, 0x555558be13c0) = 0
set_tid_address(0x555558be1690)         = 5873
set_robust_list(0x555558be16a0, 24)     = 0
rseq(0x555558be1ce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor896523438", 4096) = 27
getrandom("\x97\xfc\x2c\xe3\xa1\xc2\xec\x70", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555558be1d40
brk(0x555558c02d40)                     = 0x555558c02d40
brk(0x555558c03000)                     = 0x555558c03000
mprotect(0x7fc92e56e000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555558be1690) = 5874
./strace-static-x86_64: Process 5874 attached
[pid  5874] set_robust_list(0x555558be16a0, 24) = 0
[pid  5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5874] setpgid(0, 0)               = 0
[pid  5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5874] write(3, "1000", 4)         = 4
[pid  5874] close(3)                    = 0
[pid  5874] write(1, "executing program\n", 18executing program
) = 18
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5874] rt_sigaction(SIGRT_1, {sa_handler=0x7fc92e5103e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc92e501a60}, NULL, 8) = 0
[pid  5874] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc92e483000
[pid  5874] mprotect(0x7fc92e484000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5874] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc92e4a3990, parent_tid=0x7fc92e4a3990, exit_signal=0, stack=0x7fc92e483000, stack_size=0x20300, tls=0x7fc92e4a36c0}./strace-static-x86_64: Process 5877 attached
 <unfinished ...>
[pid  5877] rseq(0x7fc92e4a3fe0, 0x20, 0, 0x53053053) = 0
[pid  5877] set_robust_list(0x7fc92e4a39a0, 24) = 0
[pid  5877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5877] futex(0x7fc92e574308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5874] <... clone3 resumed> => {parent_tid=[5877]}, 88) = 5877
[pid  5874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5874] futex(0x7fc92e574308, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5877] <... futex resumed>)        = 0
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5877] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = 3
[pid  5877] futex(0x7fc92e57430c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5874] <... futex resumed>)        = 0
[pid  5874] futex(0x7fc92e574308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5877] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_CMTP <unfinished ...>
[pid  5874] <... futex resumed>)        = 0
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5877] <... socket resumed>)       = -1 EPROTONOSUPPORT (Protocol not supported)
[pid  5877] futex(0x7fc92e57430c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5874] <... futex resumed>)        = 0
[pid  5877] futex(0x7fc92e574308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5874] futex(0x7fc92e574308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5877] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5874] <... futex resumed>)        = 0
[pid  5877] close(4 <unfinished ...>
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5877] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid  5877] futex(0x7fc92e57430c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5874] <... futex resumed>)        = 0
[pid  5877] <... futex resumed>)        = 1
[pid  5874] futex(0x7fc92e574308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5877] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDWR <unfinished ...>
[pid  5874] <... futex resumed>)        = 0
[   92.010407][   T24] cfg80211: failed to load regulatory.db
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5877] <... openat resumed>)       = -1 EPERM (Operation not permitted)
[pid  5877] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDONLY) = 4
[pid  5877] futex(0x7fc92e57430c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5874] <... futex resumed>)        = 0
[pid  5877] unshare(CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET <unfinished ...>
[pid  5874] futex(0x7fc92e574308, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5874] futex(0x7fc92e57431c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc92e462000
[pid  5874] mprotect(0x7fc92e463000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid  5877] <... unshare resumed>)      = 0
[pid  5874] <... mprotect resumed>)     = 0
[pid  5877] futex(0x7fc92e57430c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5874] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid  5877] <... futex resumed>)        = 0
[pid  5877] futex(0x7fc92e574308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5874] <... rt_sigprocmask resumed>[], 8) = 0
[pid  5874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc92e482990, parent_tid=0x7fc92e482990, exit_signal=0, stack=0x7fc92e462000, stack_size=0x20300, tls=0x7fc92e4826c0}./strace-static-x86_64: Process 5880 attached
 <unfinished ...>
[pid  5880] rseq(0x7fc92e482fe0, 0x20, 0, 0x53053053) = 0
[pid  5880] set_robust_list(0x7fc92e4829a0, 24 <unfinished ...>
[pid  5874] <... clone3 resumed> => {parent_tid=[5880]}, 88) = 5880
[pid  5880] <... set_robust_list resumed>) = 0
[pid  5874] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5880] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5874] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5880] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5874] futex(0x7fc92e574318, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5880] socket(AF_ATMPVC, SOCK_RAW, 0 <unfinished ...>
[pid  5874] <... futex resumed>)        = 0
[pid  5880] <... socket resumed>)       = 5
[pid  5874] futex(0x7fc92e57431c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5880] futex(0x7fc92e57431c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5874] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5880] <... futex resumed>)        = 0
[pid  5880] futex(0x7fc92e574318, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5874] futex(0x7fc92e574308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5877] <... futex resumed>)        = 0
[pid  5874] <... futex resumed>)        = 1
[pid  5877] ioctl(5, SIOCSIFATMTCP <unfinished ...>
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5877] <... ioctl resumed>, 0)     = 0
[pid  5877] futex(0x7fc92e57430c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5877] futex(0x7fc92e574308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5874] <... futex resumed>)        = 0
[pid  5874] futex(0x7fc92e574308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5877] <... futex resumed>)        = 0
[pid  5874] <... futex resumed>)        = 1
[pid  5877] bpf(BPF_LINK_UPDATE, {link_update={link_fd=-1, new_prog_fd=-1, flags=BPF_F_REPLACE, old_prog_fd=-1}}, 16 <unfinished ...>
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5877] <... bpf resumed>)          = -1 EBADF (Bad file descriptor)
[pid  5877] futex(0x7fc92e57430c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5874] <... futex resumed>)        = 0
[pid  5877] <... futex resumed>)        = 1
[pid  5877] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xff\xff\xff\xff\xff\xff\xff\xff\x04\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_OOB|MSG_TRUNC}, 0 <unfinished ...>
[pid  5874] futex(0x7fc92e574308, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   92.208502][ T5877] Oops: general protection fault, probably for non-canonical address 0xdffffc00200000ab: 0000 [#1] SMP KASAN PTI
[   92.220435][ T5877] KASAN: probably user-memory-access in range [0x0000000100000558-0x000000010000055f]
[   92.230022][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: syz-executor896 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) 
[   92.242455][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   92.252513][ T5877] RIP: 0010:atmtcp_c_send+0x1da/0x950
[   92.257916][ T5877] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[   92.277565][ T5877] RSP: 0018:ffffc9000418f810 EFLAGS: 00010203
[   92.283644][ T5877] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[   92.291643][ T5877] RDX: ffff8880324c1e00 RSI: 00000000ffffffff RDI: ffff888074ec16cc
[   92.299631][ T5877] RBP: ffff888074543280 R08: ffff888074ec172b R09: 1ffff1100e9d82e5
[   92.307605][ T5877] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[   92.315625][ T5877] R13: ffff888074ec16c0 R14: 000000010000055f R15: 00000000ffffffff
[   92.323628][ T5877] FS:  00007fc92e4a36c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000
[   92.332563][ T5877] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.339172][ T5877] CR2: 000000000045ad50 CR3: 000000007d7ce000 CR4: 00000000003526f0
[   92.347154][ T5877] Call Trace:
[   92.350441][ T5877]  <TASK>
[   92.353383][ T5877]  vcc_sendmsg+0xa10/0xc60
[   92.357823][ T5877]  ? __switch_to+0xdae/0x1670
[   92.362520][ T5877]  ? __pfx_vcc_sendmsg+0x10/0x10
[   92.367457][ T5877]  ? __pfx_autoremove_wake_function+0x10/0x10
[   92.373539][ T5877]  ? aa_sock_msg_perm+0xf1/0x1d0
[   92.378495][ T5877]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   92.383784][ T5877]  ? __pfx_vcc_sendmsg+0x10/0x10
[   92.388723][ T5877]  __sock_sendmsg+0x219/0x270
[   92.393411][ T5877]  ____sys_sendmsg+0x505/0x830
[   92.398177][ T5877]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.403463][ T5877]  ? import_iovec+0x74/0xa0
[   92.407969][ T5877]  ___sys_sendmsg+0x21f/0x2a0
[   92.412650][ T5877]  ? __pfx____sys_sendmsg+0x10/0x10
[   92.417858][ T5877]  ? __fget_files+0x2a/0x420
[   92.422447][ T5877]  ? __fget_files+0x3a0/0x420
[   92.427121][ T5877]  __x64_sys_sendmsg+0x19b/0x260
[   92.432074][ T5877]  ? _raw_spin_unlock_irq+0x2e/0x50
[   92.437289][ T5877]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   92.442753][ T5877]  ? rcu_is_watching+0x15/0xb0
[   92.447627][ T5877]  do_syscall_64+0xfa/0x3b0
[   92.452149][ T5877]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.457377][ T5877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.463445][ T5877]  ? clear_bhb_loop+0x60/0xb0
[   92.468213][ T5877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.474108][ T5877] RIP: 0033:0x7fc92e4ea4a9
[   92.478537][ T5877] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   92.498238][ T5877] RSP: 002b:00007fc92e4a3198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[pid  5874] futex(0x7fc92e57430c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[   92.506654][ T5877] RAX: ffffffffffffffda RBX: 00007fc92e574308 RCX: 00007fc92e4ea4a9
[   92.514638][ T5877] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[   92.522634][ T5877] RBP: 00007fc92e574300 R08: 65732f636f72702f R09: 65732f636f72702f
[   92.530609][ T5877] R10: 65732f636f72702f R11: 0000000000000246 R12: 00007fc92e5410ac
[   92.538585][ T5877] R13: 00007fc92e4a31a0 R14: 0000200000000200 R15: 0000200000000250
[   92.546573][ T5877]  </TASK>
[   92.549596][ T5877] Modules linked in:
[   92.553743][ T5877] ---[ end trace 0000000000000000 ]---
[   92.560032][ T5877] RIP: 0010:atmtcp_c_send+0x1da/0x950
[   92.565641][ T5877] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[   92.585334][ T5877] RSP: 0018:ffffc9000418f810 EFLAGS: 00010203
[   92.591457][ T5877] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[   92.599501][ T5877] RDX: ffff8880324c1e00 RSI: 00000000ffffffff RDI: ffff888074ec16cc
[   92.607524][ T5877] RBP: ffff888074543280 R08: ffff888074ec172b R09: 1ffff1100e9d82e5
[   92.615553][ T5877] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[   92.623578][ T5877] R13: ffff888074ec16c0 R14: 000000010000055f R15: 00000000ffffffff
[   92.631586][ T5877] FS:  00007fc92e4a36c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000
[   92.640587][ T5877] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.647177][ T5877] CR2: 000000000045ad50 CR3: 000000007d7ce000 CR4: 00000000003526f0
[   92.655202][ T5877] Kernel panic - not syncing: Fatal exception
[   92.661606][ T5877] Kernel Offset: disabled
[   92.665941][ T5877] Rebooting in 86400 seconds..