./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4268927717

<...>
Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts.
execve("./syz-executor4268927717", ["./syz-executor4268927717"], 0x7ffdea6a1830 /* 10 vars */) = 0
brk(NULL)                               = 0x5555777c9000
brk(0x5555777c9d40)                     = 0x5555777c9d40
arch_prctl(ARCH_SET_FS, 0x5555777c93c0) = 0
set_tid_address(0x5555777c9690)         = 5868
set_robust_list(0x5555777c96a0, 24)     = 0
rseq(0x5555777c9ce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor4268927717", 4096) = 28
getrandom("\x67\x93\x6b\xc9\xa3\x88\x65\xd9", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555777c9d40
brk(0x5555777ead40)                     = 0x5555777ead40
brk(0x5555777eb000)                     = 0x5555777eb000
mprotect(0x7f56dc70f000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached
, child_tidptr=0x5555777c9690) = 5871
[pid  5871] set_robust_list(0x5555777c96a0, 24) = 0
[   92.054535][ T1210] cfg80211: failed to load regulatory.db
[pid  5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5871] setpgid(0, 0)               = 0
[pid  5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5871] write(3, "1000", 4)         = 4
[pid  5871] close(3)                    = 0
executing program
[pid  5871] write(1, "executing program\n", 18) = 18
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5871] rt_sigaction(SIGRT_1, {sa_handler=0x7f56dc6b13e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f56dc6a2a60}, NULL, 8) = 0
[pid  5871] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f56dc624000
[pid  5871] mprotect(0x7f56dc625000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f56dc644990, parent_tid=0x7f56dc644990, exit_signal=0, stack=0x7f56dc624000, stack_size=0x20300, tls=0x7f56dc6446c0}./strace-static-x86_64: Process 5872 attached
 => {parent_tid=[5872]}, 88) = 5872
[pid  5872] rseq(0x7f56dc644fe0, 0x20, 0, 0x53053053) = 0
[pid  5872] set_robust_list(0x7f56dc6449a0, 24 <unfinished ...>
[pid  5871] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5872] <... set_robust_list resumed>) = 0
[pid  5871] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5872] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5871] futex(0x7f56dc715308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5871] <... futex resumed>)        = 0
[pid  5872] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = 3
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5872] futex(0x7f56dc71530c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5871] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5871] futex(0x7f56dc715308, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5872] <... futex resumed>)        = 0
[pid  5872] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_CMTP) = -1 EPROTONOSUPPORT (Protocol not supported)
[pid  5872] futex(0x7f56dc71530c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5871] <... futex resumed>)        = 0
[pid  5872] futex(0x7f56dc715308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5871] futex(0x7f56dc715308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5871] <... futex resumed>)        = 0
[pid  5872] close(4 <unfinished ...>
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5872] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid  5872] futex(0x7f56dc71530c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5871] <... futex resumed>)        = 0
[pid  5872] futex(0x7f56dc715308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5871] futex(0x7f56dc715308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5871] <... futex resumed>)        = 0
[pid  5872] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDWR <unfinished ...>
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5872] <... openat resumed>)       = -1 EPERM (Operation not permitted)
[pid  5872] openat(AT_FDCWD, "/proc/self/ns/pid_for_children", O_RDONLY) = 4
[pid  5872] futex(0x7f56dc71530c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5871] <... futex resumed>)        = 0
[pid  5872] <... futex resumed>)        = 1
[pid  5871] futex(0x7f56dc715308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] unshare(CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET <unfinished ...>
[pid  5871] <... futex resumed>)        = 0
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5872] <... unshare resumed>)      = 0
[pid  5871] futex(0x7f56dc71531c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] futex(0x7f56dc71530c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5871] <... futex resumed>)        = 0
[pid  5872] <... futex resumed>)        = 0
[pid  5871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid  5872] futex(0x7f56dc715308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5871] <... mmap resumed>)         = 0x7f56dc603000
[pid  5871] mprotect(0x7f56dc604000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f56dc623990, parent_tid=0x7f56dc623990, exit_signal=0, stack=0x7f56dc603000, stack_size=0x20300, tls=0x7f56dc6236c0}./strace-static-x86_64: Process 5875 attached
 => {parent_tid=[5875]}, 88) = 5875
[pid  5875] rseq(0x7f56dc623fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5871] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5875] <... rseq resumed>)         = 0
[pid  5871] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5875] set_robust_list(0x7f56dc6239a0, 24 <unfinished ...>
[pid  5871] futex(0x7f56dc715318, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5875] <... set_robust_list resumed>) = 0
[pid  5875] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5871] <... futex resumed>)        = 0
[pid  5875] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5871] futex(0x7f56dc71531c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5875] socket(AF_ATMPVC, SOCK_RAW, 0) = 5
[pid  5875] futex(0x7f56dc71531c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5871] <... futex resumed>)        = 0
[pid  5875] futex(0x7f56dc715318, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5871] futex(0x7f56dc715308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] <... futex resumed>)        = 0
[pid  5872] ioctl(5, SIOCSIFATMTCP <unfinished ...>
[pid  5871] <... futex resumed>)        = 1
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5872] <... ioctl resumed>, 0)     = 0
[pid  5872] futex(0x7f56dc71530c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5871] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5872] bpf(BPF_LINK_UPDATE, {link_update={link_fd=-1, new_prog_fd=-1, flags=BPF_F_REPLACE, old_prog_fd=-1}}, 16 <unfinished ...>
[pid  5871] futex(0x7f56dc715308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] <... bpf resumed>)          = -1 EBADF (Bad file descriptor)
[pid  5872] futex(0x7f56dc71530c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5871] <... futex resumed>)        = 0
[pid  5872] <... futex resumed>)        = 0
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5872] futex(0x7f56dc715308, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5871] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5871] futex(0x7f56dc715308, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5872] <... futex resumed>)        = 0
[pid  5872] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xff\xff\xff\xff\xff\xff\xff\xff\x04\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_OOB|MSG_TRUNC}, 0 <unfinished ...>
[pid  5871] <... futex resumed>)        = 1
[   92.447584][ T5872] Oops: general protection fault, probably for non-canonical address 0xdffffc00200000ab: 0000 [#1] SMP KASAN PTI
[   92.459579][ T5872] KASAN: probably user-memory-access in range [0x0000000100000558-0x000000010000055f]
[   92.469162][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz-executor426 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) 
[   92.481593][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   92.491676][ T5872] RIP: 0010:atmtcp_c_send+0x1da/0x950
[pid  5871] futex(0x7f56dc71530c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[   92.497102][ T5872] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[   92.516733][ T5872] RSP: 0018:ffffc9000429f810 EFLAGS: 00010203
[   92.522826][ T5872] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[   92.530803][ T5872] RDX: ffff88807bca3c00 RSI: 00000000ffffffff RDI: ffff88802a6a0d0c
[   92.538784][ T5872] RBP: ffff88807d0603c0 R08: ffff88802a6a0d6b R09: 1ffff110054d41ad
[   92.546760][ T5872] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[   92.554747][ T5872] R13: ffff88802a6a0d00 R14: 000000010000055f R15: 00000000ffffffff
[   92.562892][ T5872] FS:  00007f56dc6446c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000
[   92.571825][ T5872] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.578408][ T5872] CR2: 00007f56dc6f6973 CR3: 00000000769d2000 CR4: 00000000003526f0
[   92.586389][ T5872] Call Trace:
[   92.589671][ T5872]  <TASK>
[   92.592606][ T5872]  vcc_sendmsg+0xa10/0xc60
[   92.597052][ T5872]  ? __switch_to+0xdae/0x1670
[   92.601734][ T5872]  ? __pfx_vcc_sendmsg+0x10/0x10
[   92.606673][ T5872]  ? __pfx_autoremove_wake_function+0x10/0x10
[   92.612763][ T5872]  ? aa_sock_msg_perm+0xf1/0x1d0
[   92.617715][ T5872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   92.623005][ T5872]  ? __pfx_vcc_sendmsg+0x10/0x10
[   92.627944][ T5872]  __sock_sendmsg+0x219/0x270
[   92.632635][ T5872]  ____sys_sendmsg+0x505/0x830
[   92.637417][ T5872]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.642722][ T5872]  ? import_iovec+0x74/0xa0
[   92.647272][ T5872]  ___sys_sendmsg+0x21f/0x2a0
[   92.651958][ T5872]  ? __pfx____sys_sendmsg+0x10/0x10
[   92.657193][ T5872]  ? __fget_files+0x2a/0x420
[   92.661791][ T5872]  ? __fget_files+0x3a0/0x420
[   92.666480][ T5872]  __x64_sys_sendmsg+0x19b/0x260
[   92.671426][ T5872]  ? _raw_spin_unlock_irq+0x2e/0x50
[   92.676747][ T5872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   92.682217][ T5872]  ? rcu_is_watching+0x15/0xb0
[   92.686989][ T5872]  do_syscall_64+0xfa/0x3b0
[   92.691547][ T5872]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.696759][ T5872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.702847][ T5872]  ? clear_bhb_loop+0x60/0xb0
[   92.707531][ T5872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.713426][ T5872] RIP: 0033:0x7f56dc68b4a9
[   92.717857][ T5872] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   92.737472][ T5872] RSP: 002b:00007f56dc644198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.745905][ T5872] RAX: ffffffffffffffda RBX: 00007f56dc715308 RCX: 00007f56dc68b4a9
[   92.753976][ T5872] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[   92.761960][ T5872] RBP: 00007f56dc715300 R08: 65732f636f72702f R09: 65732f636f72702f
[   92.769943][ T5872] R10: 65732f636f72702f R11: 0000000000000246 R12: 00007f56dc6e20ac
[   92.777930][ T5872] R13: 00007f56dc6441a0 R14: 0000200000000200 R15: 0000200000000250
[   92.785915][ T5872]  </TASK>
[   92.788936][ T5872] Modules linked in:
[   92.792984][ T5872] ---[ end trace 0000000000000000 ]---
[   92.798570][ T5872] RIP: 0010:atmtcp_c_send+0x1da/0x950
[   92.804146][ T5872] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[   92.823843][ T5872] RSP: 0018:ffffc9000429f810 EFLAGS: 00010203
[   92.829939][ T5872] RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000
[   92.837951][ T5872] RDX: ffff88807bca3c00 RSI: 00000000ffffffff RDI: ffff88802a6a0d0c
[   92.845996][ T5872] RBP: ffff88807d0603c0 R08: ffff88802a6a0d6b R09: 1ffff110054d41ad
[   92.854022][ T5872] R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000
[   92.862014][ T5872] R13: ffff88802a6a0d00 R14: 000000010000055f R15: 00000000ffffffff
[   92.870045][ T5872] FS:  00007f56dc6446c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000
[   92.879064][ T5872] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.885718][ T5872] CR2: 00007f56dc6c7150 CR3: 00000000769d2000 CR4: 00000000003526f0
[   92.893759][ T5872] Kernel panic - not syncing: Fatal exception
[   92.900082][ T5872] Kernel Offset: disabled
[   92.904406][ T5872] Rebooting in 86400 seconds..