./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2439783245

<...>
Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts.
execve("./syz-executor2439783245", ["./syz-executor2439783245"], 0x7fffeb89b450 /* 10 vars */) = 0
brk(NULL)                               = 0x555555f2e000
brk(0x555555f2ed40)                     = 0x555555f2ed40
arch_prctl(ARCH_SET_FS, 0x555555f2e3c0) = 0
set_tid_address(0x555555f2e690)         = 5056
set_robust_list(0x555555f2e6a0, 24)     = 0
rseq(0x555555f2ece0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2439783245", 4096) = 28
getrandom("\x54\x8a\xb2\xb7\x94\x1b\x7c\x98", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555555f2ed40
brk(0x555555f4fd40)                     = 0x555555f4fd40
brk(0x555555f50000)                     = 0x555555f50000
mprotect(0x7fb5ac96b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5057 attached
, child_tidptr=0x555555f2e690) = 5057
[pid  5057] set_robust_list(0x555555f2e6a0, 24) = 0
[pid  5057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5057] setpgid(0, 0)               = 0
[pid  5057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5057] write(3, "1000", 4)         = 4
[pid  5057] close(3)                    = 0
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5057] rt_sigaction(SIGRT_1, {sa_handler=0x7fb5ac90d870, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb5ac8feef0}, NULL, 8) = 0
[pid  5057] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb5ac887000
[pid  5057] mprotect(0x7fb5ac888000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5057] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5057] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb5ac8a7990, parent_tid=0x7fb5ac8a7990, exit_signal=0, stack=0x7fb5ac887000, stack_size=0x20300, tls=0x7fb5ac8a76c0}./strace-static-x86_64: Process 5058 attached
 => {parent_tid=[5058]}, 88) = 5058
[pid  5058] rseq(0x7fb5ac8a7fe0, 0x20, 0, 0x53053053) = 0
[pid  5057] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5058] set_robust_list(0x7fb5ac8a79a0, 24 <unfinished ...>
[pid  5057] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5058] <... set_robust_list resumed>) = 0
[pid  5058] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5058] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5057] <... futex resumed>)        = 0
[pid  5058] openat(AT_FDCWD, "/dev/virtual_nci", O_RDWR <unfinished ...>
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5058] <... openat resumed>)       = 3
[pid  5058] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5058] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5058] <... futex resumed>)        = 0
[pid  5058] ioctl(3, _IOC(_IOC_NONE, 0, 0, 0), 0x200000c0) = 0
[pid  5058] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5058] <... futex resumed>)        = 1
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5058] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5058] <... socket resumed>)       = 4
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5058] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5057] <... futex resumed>)        = 0
[pid  5058] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5058] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5057] <... futex resumed>)        = 0
[pid  5058] sendto(4, "\x1c\x00\x00\x00\x10\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00", 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 <unfinished ...>
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5058] <... sendto resumed>)       = 28
[pid  5058] recvfrom(4, "\xd8\x01\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\xc1\x13\x00\x00\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1f\x00\x00\x00\x80\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00"..., 4096, 0, NULL, NULL) = 472
[pid  5058] recvfrom(4, "\x24\x00\x00\x00\x02\x00\x00\x01\x00\x00\x00\x00\xc1\x13\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x10\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00", 4096, 0, NULL, NULL) = 36
[pid  5058] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5057] <... futex resumed>)        = 0
[pid  5058] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5058] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5057] <... futex resumed>)        = 0
[pid  5058] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x1c\x00\x00\x00\x1e\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x02\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00", iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 <unfinished ...>
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5057] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb5ac866000
[pid  5057] mprotect(0x7fb5ac867000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5057] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5057] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb5ac886990, parent_tid=0x7fb5ac886990, exit_signal=0, stack=0x7fb5ac866000, stack_size=0x20300, tls=0x7fb5ac8866c0}./strace-static-x86_64: Process 5063 attached
 => {parent_tid=[5063]}, 88) = 5063
[pid  5057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5063] rseq(0x7fb5ac886fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5057] futex(0x7fb5ac971378, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5063] <... rseq resumed>)         = 0
[pid  5057] <... futex resumed>)        = 0
[pid  5063] set_robust_list(0x7fb5ac8869a0, 24 <unfinished ...>
[pid  5057] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5063] <... set_robust_list resumed>) = 0
[pid  5063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5063] write(3, "\x40\x00\x00\x00\x00\x00", 6) = 6
[pid  5063] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5063] <... futex resumed>)        = 1
[pid  5057] futex(0x7fb5ac971378, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5063] write(3, "\x40\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5063] <... write resumed>)        = 20
[pid  5057] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5063] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5057] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5063] <... futex resumed>)        = 0
[pid  5057] futex(0x7fb5ac971378, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5063] write(3, "\x41\x00\x00\x00", 4 <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5063] <... write resumed>)        = 4
[pid  5057] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5063] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5057] <... futex resumed>)        = 0
[pid  5063] futex(0x7fb5ac971378, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5057] futex(0x7fb5ac971378, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5063] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5063] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x1e\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x06\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x03\x00\xff\xff\xff\xff", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5057] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5057] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid  5057] futex(0x7fb5ac97138c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb5ac845000
[pid  5057] mprotect(0x7fb5ac846000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5057] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5057] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb5ac865990, parent_tid=0x7fb5ac865990, exit_signal=0, stack=0x7fb5ac845000, stack_size=0x20300, tls=0x7fb5ac8656c0}./strace-static-x86_64: Process 5064 attached
 => {parent_tid=[5064]}, 88) = 5064
[pid  5064] rseq(0x7fb5ac865fe0, 0x20, 0, 0x53053053) = 0
[pid  5057] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5064] set_robust_list(0x7fb5ac8659a0, 24 <unfinished ...>
[pid  5057] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5064] <... set_robust_list resumed>) = 0
[pid  5064] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5057] futex(0x7fb5ac971388, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5064] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5057] <... futex resumed>)        = 0
[pid  5057] futex(0x7fb5ac97138c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5064] write(3, "\x40\x02\x00\x00\x00", 5) = 5
[pid  5058] <... sendmsg resumed>)      = 28
[pid  5058] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5064] futex(0x7fb5ac97138c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5058] <... futex resumed>)        = 0
[pid  5064] <... futex resumed>)        = 1
[pid  5058] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5064] futex(0x7fb5ac971388, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5058] <... futex resumed>)        = 0
[pid  5057] <... futex resumed>)        = 1
[pid  5058] write(3, "\x40\x02\x00\x00\x00", 5 <unfinished ...>
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5058] <... write resumed>)        = 5
[pid  5058] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5058] <... futex resumed>)        = 1
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5058] write(3, "\x41\x03\x00\x00", 4 <unfinished ...>
[pid  5057] <... futex resumed>)        = 0
[pid  5058] <... write resumed>)        = 4
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5058] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5057] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5058] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5058] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5057] <... futex resumed>)        = 0
[pid  5058] write(3, "\x61\x03\x00\x00\x01\x01\x01\x00\x00", 9 <unfinished ...>
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5058] <... write resumed>)        = 9
[pid  5058] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5057] <... futex resumed>)        = 0
[pid  5058] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x1e\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x1c\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x03\x00\x21\x00\x00\x10", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 <unfinished ...>
[pid  5057] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000) = 0
[  100.930341][ T2470] nci: nci_add_new_protocol: the target found does not have the desired protocol
[pid  5057] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5057] exit_group(0 <unfinished ...>
[pid  5064] <... futex resumed>)        = ?
[pid  5057] <... exit_group resumed>)   = ?
[pid  5064] +++ exited with 0 +++
[pid  5063] <... sendmsg resumed>)      = ?
[pid  5058] <... sendmsg resumed>)      = ?
[pid  5063] +++ exited with 0 +++
[  101.355369][ T5063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  101.364533][ T5063] nci: nci_start_poll: failed to set local general bytes
[  102.936834][ T1145] cfg80211: failed to load regulatory.db
[pid  5056] kill(-5057, SIGKILL)        = 0
[pid  5056] kill(5057, SIGKILL)         = 0
[pid  5056] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5056] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
[pid  5056] getdents64(3, 0x555555f2f730 /* 2 entries */, 32768) = 48
[pid  5056] getdents64(3, 0x555555f2f730 /* 0 entries */, 32768) = 0
[pid  5056] close(3)                    = 0
[pid  5058] +++ exited with 0 +++
[pid  5057] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5057, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5066 attached
, child_tidptr=0x555555f2e690) = 5066
[pid  5066] set_robust_list(0x555555f2e6a0, 24) = 0
[pid  5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5066] setpgid(0, 0)               = 0
[pid  5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5066] write(3, "1000", 4)         = 4
[pid  5066] close(3)                    = 0
[  106.444158][ T5058] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5066] rt_sigaction(SIGRT_1, {sa_handler=0x7fb5ac90d870, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb5ac8feef0}, NULL, 8) = 0
[pid  5066] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb5ac887000
[pid  5066] mprotect(0x7fb5ac888000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb5ac8a7990, parent_tid=0x7fb5ac8a7990, exit_signal=0, stack=0x7fb5ac887000, stack_size=0x20300, tls=0x7fb5ac8a76c0}./strace-static-x86_64: Process 5067 attached
 <unfinished ...>
[pid  5067] rseq(0x7fb5ac8a7fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5066] <... clone3 resumed> => {parent_tid=[5067]}, 88) = 5067
[pid  5067] <... rseq resumed>)         = 0
[pid  5066] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5067] set_robust_list(0x7fb5ac8a79a0, 24 <unfinished ...>
[pid  5066] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5067] <... set_robust_list resumed>) = 0
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5066] <... futex resumed>)        = 0
[pid  5067] openat(AT_FDCWD, "/dev/virtual_nci", O_RDWR <unfinished ...>
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5067] <... openat resumed>)       = 3
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5066] <... futex resumed>)        = 0
[pid  5067] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5067] ioctl(3, _IOC(_IOC_NONE, 0, 0, 0) <unfinished ...>
[pid  5066] <... futex resumed>)        = 0
[pid  5067] <... ioctl resumed>, 0x200000c0) = 0
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5066] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5067] <... futex resumed>)        = 1
[pid  5066] <... futex resumed>)        = 0
[pid  5067] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC <unfinished ...>
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} <unfinished ...>
[pid  5067] <... socket resumed>)       = 4
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5066] <... futex resumed>)        = 0
[pid  5067] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5066] <... futex resumed>)        = 0
[pid  5067] sendto(4, "\x1c\x00\x00\x00\x10\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00", 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 <unfinished ...>
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5067] <... sendto resumed>)       = 28
[pid  5067] recvfrom(4, "\xd8\x01\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\xca\x13\x00\x00\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1f\x00\x00\x00\x80\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00"..., 4096, 0, NULL, NULL) = 472
[pid  5067] recvfrom(4, "\x24\x00\x00\x00\x02\x00\x00\x01\x00\x00\x00\x00\xca\x13\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x10\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00", 4096, 0, NULL, NULL) = 36
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5067] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] <... futex resumed>)        = 0
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] <... futex resumed>)        = 0
[pid  5066] <... futex resumed>)        = 1
[pid  5067] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x1c\x00\x00\x00\x1e\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x02\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00", iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 <unfinished ...>
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5066] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb5ac866000
[pid  5066] mprotect(0x7fb5ac867000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb5ac886990, parent_tid=0x7fb5ac886990, exit_signal=0, stack=0x7fb5ac866000, stack_size=0x20300, tls=0x7fb5ac8866c0}./strace-static-x86_64: Process 5071 attached
 <unfinished ...>
[pid  5071] rseq(0x7fb5ac886fe0, 0x20, 0, 0x53053053) = 0
[pid  5071] set_robust_list(0x7fb5ac8869a0, 24 <unfinished ...>
[pid  5066] <... clone3 resumed> => {parent_tid=[5071]}, 88) = 5071
[pid  5071] <... set_robust_list resumed>) = 0
[pid  5071] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5066] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5071] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5071] futex(0x7fb5ac971378, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5066] futex(0x7fb5ac971378, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5071] <... futex resumed>)        = 0
[pid  5066] <... futex resumed>)        = 1
[pid  5071] write(3, "\x40\x00\x00\x00\x00\x00", 6) = 6
[pid  5066] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5071] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5066] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5066] futex(0x7fb5ac971378, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5071] <... futex resumed>)        = 0
[pid  5071] write(3, "\x40\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20) = 20
[pid  5071] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5071] futex(0x7fb5ac971378, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
[pid  5066] <... futex resumed>)        = 1
[pid  5071] futex(0x7fb5ac971378, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable)
[pid  5066] futex(0x7fb5ac971378, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5071] <... futex resumed>)        = 0
[pid  5066] <... futex resumed>)        = 1
[pid  5071] write(3, "\x41\x00\x00\x00", 4 <unfinished ...>
[pid  5066] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5071] <... write resumed>)        = 4
[pid  5071] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5066] <... futex resumed>)        = 0
[pid  5071] futex(0x7fb5ac971378, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] futex(0x7fb5ac971378, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5071] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5066] <... futex resumed>)        = 0
[pid  5071] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x1e\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x06\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x03\x00\xff\xff\xff\xff", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 <unfinished ...>
[pid  5066] futex(0x7fb5ac97137c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5067] <... sendmsg resumed>)      = 28
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5067] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5067] <... futex resumed>)        = 0
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5067] write(3, "\x40\x02\x00\x00\x00", 5) = 5
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5067] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] <... futex resumed>)        = 0
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] <... futex resumed>)        = 0
[pid  5066] <... futex resumed>)        = 1
[pid  5067] write(3, "\x40\x02\x00\x00\x00", 5 <unfinished ...>
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5067] <... write resumed>)        = 5
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5066] <... futex resumed>)        = 0
[pid  5067] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5066] <... futex resumed>)        = 0
[pid  5067] write(3, "\x41\x03\x00\x00", 4 <unfinished ...>
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5067] <... write resumed>)        = 4
[pid  5071] <... sendmsg resumed>)      = 36
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5071] futex(0x7fb5ac97137c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] <... futex resumed>)        = 1
[pid  5066] <... futex resumed>)        = 0
[pid  5067] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5066] <... futex resumed>)        = 0
[pid  5067] write(3, "\x61\x03\x00\x00\x01\x01\x01\x00\x00", 9 <unfinished ...>
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5071] <... futex resumed>)        = 0
[pid  5067] <... write resumed>)        = 9
[pid  5071] futex(0x7fb5ac971378, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5067] futex(0x7fb5ac97136c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5066] <... futex resumed>)        = 0
[pid  5067] futex(0x7fb5ac971368, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5066] futex(0x7fb5ac971368, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5067] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5066] <... futex resumed>)        = 0
[pid  5067] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x1e\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x1c\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x03\x00\x21\x00\x00\x10", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 <unfinished ...>
[  106.746016][ T5067] ================================================================================
[  106.755998][ T5067] UBSAN: shift-out-of-bounds in net/nfc/nci/core.c:912:45
[  106.763258][ T5067] shift exponent 268435489 is too large for 32-bit type 'int'
[  106.771496][ T5067] CPU: 1 PID: 5067 Comm: syz-executor243 Not tainted 6.6.0-rc4-next-20231003-syzkaller #0
[  106.781411][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[pid  5066] futex(0x7fb5ac97136c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[  106.794354][ T5067] Call Trace:
[  106.797658][ T5067]  <TASK>
[  106.800613][ T5067]  dump_stack_lvl+0x125/0x1b0
[  106.805391][ T5067]  __ubsan_handle_shift_out_of_bounds+0x27a/0x600
[  106.811871][ T5067]  nci_activate_target.cold+0x1a/0x1f
[  106.817284][ T5067]  ? nci_dep_link_down+0x250/0x250
[  106.822633][ T5067]  nfc_activate_target+0x1f5/0x4c0
[  106.827785][ T5067]  nfc_genl_activate_target+0x1f1/0x280
[  106.833368][ T5067]  genl_family_rcv_msg_doit+0x1fc/0x2e0
[  106.838974][ T5067]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[  106.846450][ T5067]  ? security_capable+0x92/0xc0
[  106.851534][ T5067]  genl_rcv_msg+0x55c/0x800
[  106.856075][ T5067]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[  106.861998][ T5067]  ? nfc_genl_stop_poll+0x280/0x280
[  106.867343][ T5067]  netlink_rcv_skb+0x16b/0x440
[  106.872163][ T5067]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[  106.878102][ T5067]  ? netlink_ack+0x1370/0x1370
[  106.882918][ T5067]  ? down_write_killable+0x250/0x250
[  106.888241][ T5067]  ? netlink_deliver_tap+0x1a0/0xd00
[  106.893587][ T5067]  ? _copy_from_iter+0x2c1/0x10f0
[  106.898742][ T5067]  genl_rcv+0x28/0x40
[  106.902940][ T5067]  netlink_unicast+0x536/0x810
[  106.907874][ T5067]  ? netlink_attachskb+0x880/0x880
[  106.913024][ T5067]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  106.919300][ T5067]  ? __phys_addr_symbol+0x30/0x70
[  106.924358][ T5067]  ? __check_object_size+0x323/0x730
[  106.929682][ T5067]  netlink_sendmsg+0x93c/0xe40
[  106.934484][ T5067]  ? netlink_unicast+0x810/0x810
[  106.939464][ T5067]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  106.944786][ T5067]  ? netlink_unicast+0x810/0x810
[  106.950018][ T5067]  __sock_sendmsg+0xd5/0x180
[  106.954634][ T5067]  ____sys_sendmsg+0x6ac/0x940
[  106.959425][ T5067]  ? copy_msghdr_from_user+0x10b/0x160
[  106.964918][ T5067]  ? kernel_sendmsg+0x50/0x50
[  106.969662][ T5067]  ___sys_sendmsg+0x135/0x1d0
[  106.974379][ T5067]  ? do_recvmmsg+0x740/0x740
[  106.979094][ T5067]  ? lock_sync+0x190/0x190
[  106.983555][ T5067]  ? __fget_light+0xe6/0x260
[  106.988279][ T5067]  __sys_sendmsg+0x117/0x1e0
[  106.992915][ T5067]  ? __sys_sendmsg_sock+0x30/0x30
[  106.998040][ T5067]  ? ptrace_notify+0xf4/0x130
[  107.002745][ T5067]  ? lockdep_hardirqs_on+0x7d/0x100
[  107.007975][ T5067]  ? _raw_spin_unlock_irq+0x2e/0x50
[  107.013197][ T5067]  ? ptrace_notify+0xf4/0x130
[  107.017900][ T5067]  do_syscall_64+0x38/0xb0
[  107.022356][ T5067]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  107.028281][ T5067] RIP: 0033:0x7fb5ac8e7789
[  107.032796][ T5067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  107.053032][ T5067] RSP: 002b:00007fb5ac8a7238 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.061477][ T5067] RAX: ffffffffffffffda RBX: 00007fb5ac971368 RCX: 00007fb5ac8e7789
[  107.069473][ T5067] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 0000000000000004
[  107.077457][ T5067] RBP: 00007fb5ac971360 R08: 00007fb5ac8a76c0 R09: 00007fb5ac8a76c0
[  107.085506][ T5067] R10: 00007fb5ac8a76c0 R11: 0000000000000246 R12: 00007fb5ac93e064
[  107.093504][ T5067] R13: 0000000000000000 R14: 00007fff7171ee50 R15: 00007fff7171ef38
[  107.101614][ T5067]  </TASK>
[  107.105719][ T5067] ================================================================================
[  107.115096][ T5067] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  107.122337][ T5067] CPU: 1 PID: 5067 Comm: syz-executor243 Not tainted 6.6.0-rc4-next-20231003-syzkaller #0
[  107.132261][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[  107.142350][ T5067] Call Trace:
[  107.145651][ T5067]  <TASK>
[  107.148618][ T5067]  dump_stack_lvl+0xd9/0x1b0
[  107.153241][ T5067]  panic+0x6dc/0x790
[  107.157173][ T5067]  ? panic_smp_self_stop+0xa0/0xa0
[  107.162405][ T5067]  ? kmsg_dump_get_line+0x350/0x350
[  107.167704][ T5067]  ? check_panic_on_warn+0x1f/0xb0
[  107.172876][ T5067]  check_panic_on_warn+0xab/0xb0
[  107.177881][ T5067]  __ubsan_handle_shift_out_of_bounds+0x2a2/0x600
[  107.184349][ T5067]  nci_activate_target.cold+0x1a/0x1f
[  107.189947][ T5067]  ? nci_dep_link_down+0x250/0x250
[  107.195120][ T5067]  nfc_activate_target+0x1f5/0x4c0
[  107.200283][ T5067]  nfc_genl_activate_target+0x1f1/0x280
[  107.205869][ T5067]  genl_family_rcv_msg_doit+0x1fc/0x2e0
[  107.211457][ T5067]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[  107.218892][ T5067]  ? security_capable+0x92/0xc0
[  107.223783][ T5067]  genl_rcv_msg+0x55c/0x800
[  107.228358][ T5067]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[  107.234399][ T5067]  ? nfc_genl_stop_poll+0x280/0x280
[  107.239651][ T5067]  netlink_rcv_skb+0x16b/0x440
[  107.244497][ T5067]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[  107.250431][ T5067]  ? netlink_ack+0x1370/0x1370
[  107.255253][ T5067]  ? down_write_killable+0x250/0x250
[  107.260588][ T5067]  ? netlink_deliver_tap+0x1a0/0xd00
[  107.265907][ T5067]  ? _copy_from_iter+0x2c1/0x10f0
[  107.270967][ T5067]  genl_rcv+0x28/0x40
[  107.274985][ T5067]  netlink_unicast+0x536/0x810
[  107.279805][ T5067]  ? netlink_attachskb+0x880/0x880
[  107.284940][ T5067]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  107.290872][ T5067]  ? __phys_addr_symbol+0x30/0x70
[  107.295939][ T5067]  ? __check_object_size+0x323/0x730
[  107.301281][ T5067]  netlink_sendmsg+0x93c/0xe40
[  107.306450][ T5067]  ? netlink_unicast+0x810/0x810
[  107.311436][ T5067]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  107.316752][ T5067]  ? netlink_unicast+0x810/0x810
[  107.321719][ T5067]  __sock_sendmsg+0xd5/0x180
[  107.326347][ T5067]  ____sys_sendmsg+0x6ac/0x940
[  107.331223][ T5067]  ? copy_msghdr_from_user+0x10b/0x160
[  107.336716][ T5067]  ? kernel_sendmsg+0x50/0x50
[  107.341557][ T5067]  ___sys_sendmsg+0x135/0x1d0
[pid  5066] exit_group(0)               = ?
[pid  5071] <... futex resumed>)        = ?
[pid  5071] +++ exited with 0 +++
[  107.346285][ T5067]  ? do_recvmmsg+0x740/0x740
[  107.350929][ T5067]  ? lock_sync+0x190/0x190
[  107.355418][ T5067]  ? __fget_light+0xe6/0x260
[  107.360063][ T5067]  __sys_sendmsg+0x117/0x1e0
[  107.364696][ T5067]  ? __sys_sendmsg_sock+0x30/0x30
[  107.369756][ T5067]  ? ptrace_notify+0xf4/0x130
[  107.374476][ T5067]  ? lockdep_hardirqs_on+0x7d/0x100
[  107.379707][ T5067]  ? _raw_spin_unlock_irq+0x2e/0x50
[  107.384935][ T5067]  ? ptrace_notify+0xf4/0x130
[  107.389657][ T5067]  do_syscall_64+0x38/0xb0
[  107.394175][ T5067]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  107.400197][ T5067] RIP: 0033:0x7fb5ac8e7789
[  107.404747][ T5067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  107.424397][ T5067] RSP: 002b:00007fb5ac8a7238 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.432860][ T5067] RAX: ffffffffffffffda RBX: 00007fb5ac971368 RCX: 00007fb5ac8e7789
[  107.440857][ T5067] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 0000000000000004
[  107.448857][ T5067] RBP: 00007fb5ac971360 R08: 00007fb5ac8a76c0 R09: 00007fb5ac8a76c0
[  107.456852][ T5067] R10: 00007fb5ac8a76c0 R11: 0000000000000246 R12: 00007fb5ac93e064
[  107.465540][ T5067] R13: 0000000000000000 R14: 00007fff7171ee50 R15: 00007fff7171ef38
[  107.473550][ T5067]  </TASK>
[  107.476859][ T5067] Kernel Offset: disabled
[  107.481314][ T5067] Rebooting in 86400 seconds..