./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4190471745

<...>
forked to background, child pid 3181
no interfaces have a carrier
[   22.735679][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0
[   22.749063][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts.
execve("./syz-executor4190471745", ["./syz-executor4190471745"], 0x7ffcc708d6a0 /* 10 vars */) = 0
brk(NULL)                               = 0x555556723000
brk(0x555556723c40)                     = 0x555556723c40
arch_prctl(ARCH_SET_FS, 0x555556723300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4190471745", 4096) = 28
brk(0x555556744c40)                     = 0x555556744c40
brk(0x555556745000)                     = 0x555556745000
mprotect(0x7f3ee02fa000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1)                        = 1
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567235d0) = 3612
./strace-static-x86_64: Process 3612 attached
[pid  3611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3613 attached
 <unfinished ...>
[pid  3611] <... clone resumed>, child_tidptr=0x5555567235d0) = 3613
./strace-static-x86_64: Process 3614 attached
[pid  3612] <... clone resumed>, child_tidptr=0x5555567235d0) = 3614
[pid  3611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3615 attached
 <unfinished ...>
[pid  3611] <... clone resumed>, child_tidptr=0x5555567235d0) = 3615
[pid  3614] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3614] <... prctl resumed>)        = 0
[pid  3615] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3613] <... clone resumed>, child_tidptr=0x5555567235d0) = 3616
[pid  3611] <... clone resumed>, child_tidptr=0x5555567235d0) = 3617
[pid  3614] setpgid(0, 0 <unfinished ...>
[pid  3611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3614] <... setpgid resumed>)      = 0
./strace-static-x86_64: Process 3618 attached
./strace-static-x86_64: Process 3616 attached
[pid  3611] <... clone resumed>, child_tidptr=0x5555567235d0) = 3618
[pid  3614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3616] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 3619 attached
 <unfinished ...>
[pid  3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3614] <... openat resumed>)       = 3
[pid  3611] <... clone resumed>, child_tidptr=0x5555567235d0) = 3619
[pid  3616] <... prctl resumed>)        = 0
[pid  3614] write(3, "1000", 4 <unfinished ...>
[pid  3616] setpgid(0, 0)               = 0
[pid  3614] <... write resumed>)        = 4
[pid  3614] close(3)                    = 0
[pid  3614] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3614] <... openat resumed>)       = 3
[pid  3619] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3616] <... openat resumed>)       = 3
[pid  3618] <... clone resumed>, child_tidptr=0x5555567235d0) = 3621
[pid  3616] write(3, "1000", 4)         = 4
[pid  3616] close(3)                    = 0
[pid  3616] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3615] <... clone resumed>, child_tidptr=0x5555567235d0) = 3620
[pid  3614] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...}./strace-static-x86_64: Process 3622 attached
./strace-static-x86_64: Process 3621 attached
 <unfinished ...>
[pid  3616] <... openat resumed>)       = 3
./strace-static-x86_64: Process 3617 attached
[pid  3619] <... clone resumed>, child_tidptr=0x5555567235d0) = 3622
[pid  3616] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3621] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3617] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3620 attached
./strace-static-x86_64: Process 3623 attached
 <unfinished ...>
[pid  3622] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3621] <... prctl resumed>)        = 0
[pid  3622] <... prctl resumed>)        = 0
[pid  3621] setpgid(0, 0 <unfinished ...>
[pid  3620] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3617] <... clone resumed>, child_tidptr=0x5555567235d0) = 3623
[pid  3623] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3622] setpgid(0, 0 <unfinished ...>
[pid  3621] <... setpgid resumed>)      = 0
[pid  3620] <... prctl resumed>)        = 0
[pid  3623] <... prctl resumed>)        = 0
[pid  3622] <... setpgid resumed>)      = 0
[pid  3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3620] setpgid(0, 0 <unfinished ...>
[pid  3623] setpgid(0, 0 <unfinished ...>
[pid  3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3621] <... openat resumed>)       = 3
[pid  3620] <... setpgid resumed>)      = 0
[pid  3622] <... openat resumed>)       = 3
[pid  3623] <... setpgid resumed>)      = 0
[pid  3621] write(3, "1000", 4 <unfinished ...>
[pid  3620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3622] write(3, "1000", 4 <unfinished ...>
[pid  3621] <... write resumed>)        = 4
[pid  3620] <... openat resumed>)       = 3
[pid  3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3622] <... write resumed>)        = 4
[pid  3621] close(3 <unfinished ...>
[pid  3620] write(3, "1000", 4 <unfinished ...>
[pid  3623] <... openat resumed>)       = 3
[pid  3622] close(3 <unfinished ...>
[pid  3621] <... close resumed>)        = 0
[pid  3620] <... write resumed>)        = 4
[pid  3623] write(3, "1000", 4 <unfinished ...>
[pid  3622] <... close resumed>)        = 0
[pid  3621] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3620] close(3 <unfinished ...>
[pid  3623] <... write resumed>)        = 4
[pid  3622] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3621] <... openat resumed>)       = 3
[pid  3620] <... close resumed>)        = 0
[pid  3623] close(3 <unfinished ...>
[pid  3622] <... openat resumed>)       = 3
[pid  3621] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3620] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3623] <... close resumed>)        = 0
[pid  3623] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3
[pid  3623] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3622] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3620] <... openat resumed>)       = 3
[pid  3620] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3614] <... ioctl resumed>)        = 0
[pid  3614] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3614] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3614] write(5, "8", 1)            = 1
[pid  3614] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3616] <... ioctl resumed>)        = 0
[pid  3616] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3616] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3616] write(5, "8", 1)            = 1
[pid  3616] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3621] <... ioctl resumed>)        = 0
[pid  3621] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3621] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3621] write(5, "8", 1)            = 1
[pid  3621] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3623] <... ioctl resumed>)        = 0
[pid  3623] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3623] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3623] write(5, "8", 1)            = 1
[pid  3623] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3622] <... ioctl resumed>)        = 0
[pid  3622] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3622] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3622] write(5, "8", 1)            = 1
[pid  3622] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3620] <... ioctl resumed>)        = 0
[pid  3620] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3620] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3620] write(5, "8", 1)            = 1
[pid  3620] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3614] <... ioctl resumed>)        = 0
[pid  3614] exit_group(0)               = ?
[pid  3614] +++ exited with 0 +++
[pid  3612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3614, si_uid=0, si_status=0, si_utime=0, si_stime=3} ---
[pid  3612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567235d0) = 3624
[pid  3616] <... ioctl resumed>)        = 0
[pid  3616] exit_group(0)               = ?
[pid  3616] +++ exited with 0 +++
[pid  3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3616, si_uid=0, si_status=0, si_utime=0, si_stime=2} ---
[pid  3613] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567235d0) = 3625
./strace-static-x86_64: Process 3624 attached
[pid  3624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3624] setpgid(0, 0)               = 0
[pid  3624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 3625 attached
) = 3
[pid  3623] <... ioctl resumed>)        = 0
[pid  3622] <... ioctl resumed>)        = 0
[pid  3621] <... ioctl resumed>)        = 0
[pid  3620] <... ioctl resumed>)        = 0
[pid  3625] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3624] write(3, "1000", 4 <unfinished ...>
[pid  3623] exit_group(0 <unfinished ...>
[pid  3622] exit_group(0 <unfinished ...>
[pid  3621] exit_group(0 <unfinished ...>
[pid  3620] exit_group(0 <unfinished ...>
[pid  3625] <... prctl resumed>)        = 0
[pid  3624] <... write resumed>)        = 4
[pid  3623] <... exit_group resumed>)   = ?
[pid  3622] <... exit_group resumed>)   = ?
[pid  3621] <... exit_group resumed>)   = ?
[pid  3620] <... exit_group resumed>)   = ?
[pid  3625] setpgid(0, 0 <unfinished ...>
[pid  3624] close(3 <unfinished ...>
[pid  3623] +++ exited with 0 +++
[pid  3625] <... setpgid resumed>)      = 0
[pid  3624] <... close resumed>)        = 0
[pid  3622] +++ exited with 0 +++
[pid  3621] +++ exited with 0 +++
[pid  3620] +++ exited with 0 +++
[pid  3617] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3623, si_uid=0, si_status=0, si_utime=0, si_stime=2} ---
[pid  3625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3624] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3625] <... openat resumed>)       = 3
[pid  3624] <... openat resumed>)       = 3
[pid  3619] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3622, si_uid=0, si_status=0, si_utime=0, si_stime=3} ---
[pid  3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3621, si_uid=0, si_status=0, si_utime=0, si_stime=2} ---
[pid  3615] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3620, si_uid=0, si_status=0, si_utime=0, si_stime=3} ---
[pid  3624] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3619] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  3618] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  3615] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  3625] write(3, "1000", 4 <unfinished ...>
[pid  3619] <... restart_syscall resumed>) = 0
[pid  3618] <... restart_syscall resumed>) = 0
[pid  3615] <... restart_syscall resumed>) = 0
[pid  3625] <... write resumed>)        = 4
[pid  3625] close(3 <unfinished ...>
[pid  3617] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3626 attached
 <unfinished ...>
[pid  3625] <... close resumed>)        = 0
[pid  3619] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  3615] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3628 attached
./strace-static-x86_64: Process 3627 attached
 <unfinished ...>
[pid  3626] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3625] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3617] <... clone resumed>, child_tidptr=0x5555567235d0) = 3626
[pid  3628] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3627] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3626] <... prctl resumed>)        = 0
[pid  3625] <... openat resumed>)       = 3
[pid  3619] <... clone resumed>, child_tidptr=0x5555567235d0) = 3627
[pid  3618] <... clone resumed>, child_tidptr=0x5555567235d0) = 3629
[pid  3615] <... clone resumed>, child_tidptr=0x5555567235d0) = 3628
[pid  3628] <... prctl resumed>)        = 0
[pid  3627] <... prctl resumed>)        = 0
[pid  3626] setpgid(0, 0 <unfinished ...>
[pid  3625] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3628] setpgid(0, 0 <unfinished ...>
[pid  3627] setpgid(0, 0 <unfinished ...>
[pid  3626] <... setpgid resumed>)      = 0
[pid  3628] <... setpgid resumed>)      = 0
[pid  3627] <... setpgid resumed>)      = 0
[pid  3626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 3629 attached
 <unfinished ...>
[pid  3628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3626] <... openat resumed>)       = 3
[pid  3629] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  3628] <... openat resumed>)       = 3
[pid  3627] <... openat resumed>)       = 3
[pid  3626] write(3, "1000", 4 <unfinished ...>
[pid  3629] <... prctl resumed>)        = 0
[pid  3628] write(3, "1000", 4 <unfinished ...>
[pid  3627] write(3, "1000", 4 <unfinished ...>
[pid  3626] <... write resumed>)        = 4
[pid  3629] setpgid(0, 0 <unfinished ...>
[pid  3628] <... write resumed>)        = 4
[pid  3627] <... write resumed>)        = 4
[pid  3626] close(3 <unfinished ...>
[pid  3629] <... setpgid resumed>)      = 0
[pid  3628] close(3 <unfinished ...>
[pid  3627] close(3 <unfinished ...>
[pid  3626] <... close resumed>)        = 0
[pid  3629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  3628] <... close resumed>)        = 0
[pid  3627] <... close resumed>)        = 0
[pid  3626] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3629] <... openat resumed>)       = 3
[pid  3628] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3627] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3626] <... openat resumed>)       = 3
[pid  3629] write(3, "1000", 4 <unfinished ...>
[pid  3628] <... openat resumed>)       = 3
[pid  3627] <... openat resumed>)       = 3
[pid  3624] <... ioctl resumed>)        = 0
[pid  3626] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3629] <... write resumed>)        = 4
[pid  3628] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3627] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3624] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3629] close(3 <unfinished ...>
[pid  3624] <... openat resumed>)       = 4
[pid  3629] <... close resumed>)        = 0
[pid  3624] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR <unfinished ...>
[pid  3629] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR <unfinished ...>
[pid  3624] <... openat resumed>)       = 5
[pid  3629] <... openat resumed>)       = 3
[pid  3624] write(5, "8", 1 <unfinished ...>
[pid  3629] ioctl(3, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=3, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3624] <... write resumed>)        = 1
[pid  3624] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3625] <... ioctl resumed>)        = 0
[pid  3625] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3625] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3625] write(5, "8", 1)            = 1
[pid  3625] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3626] <... ioctl resumed>)        = 0
[pid  3626] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3626] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3626] write(5, "8", 1)            = 1
[pid  3626] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3628] <... ioctl resumed>)        = 0
[pid  3628] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3628] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3628] write(5, "8", 1)            = 1
[pid  3628] ioctl(4, KDFONTOP, {op=KD_FONT_OP_SET, flags=0, width=24, height=31, charcount=512, data="\x0d\xe4\x73\x70\x56\x3e\xd4\x50\xe7\x4f\xba\x9e\xe1\x79\xc0\xc3\xe9\xad\xc8\x5c\xaf\x8b\x84\x72\x24\x62\xad\x15\x24\xc6\x6b\xfb\x8e\x45\xba\x6e\x38\x74\xc6\x5b\x82\x9b\x1f\x1a\x23\x5b\xd3\xb1\x48\xfb\x05\x15\xce\xe6\x7c\xda\xf9\xae\xae\x59\x5c\x1e\x8e\xa1\xa6\x1d\x94\x24\x98\x1d\x3f\x26\xe4\x69\x9a\x20\x6b\xcd\xd0\xf8\xf5\x37\x45\x66\x88\xf3\xcd\xfc\x70\x45\xda\x32\x84\x2f\x9b\x8e\x41\x12\x7e\xd9"...} <unfinished ...>
[pid  3627] <... ioctl resumed>)        = 0
[pid  3627] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
[pid  3627] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid  3627] write(5, "8", 1)            = 1
syzkaller login: [   43.783586][ T3625] BUG: unable to handle page fault for address: ffffc900041c1000
[   43.783605][ T3625] #PF: supervisor write access in kernel mode
[   43.783617][ T3625] #PF: error_code(0x0002) - not-present page
[   43.783628][ T3625] PGD 11800067 P4D 11800067 PUD 119c9067 PMD 1c5d7067 PTE 0
[   43.783671][ T3625] Oops: 0002 [#1] PREEMPT SMP KASAN
[   43.783691][ T3625] CPU: 1 PID: 3625 Comm: syz-executor419 Not tainted 6.0.0-rc2-syzkaller #0
[   43.783715][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[   43.783727][ T3625] RIP: 0010:bitfill_aligned+0x182/0x210
[   43.783792][ T3625] Code: 08 48 33 45 f8 48 89 45 f8 89 d8 44 29 e8 41 29 c4 e8 92 a5 42 fd 44 89 e0 31 d2 48 89 ef f7 f3 49 89 c4 48 89 c1 48 8b 04 24 <f3> 48 ab 31 ff 4c 89 f6 e8 51 a2 42 fd 4d 85 f6 0f 84 69 ff ff ff
[   43.783816][ T3625] RSP: 0018:ffffc9000375f7d8 EFLAGS: 00010212
[   43.783839][ T3625] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 00000000000001fc
[   43.783855][ T3625] RDX: 0000000000000000 RSI: ffffffff843965be RDI: ffffc900041c1000
[   43.783872][ T3625] RBP: ffffc900041ba000 R08: 0000000000000005 R09: 0000000000000000
[   43.783889][ T3625] R10: 0000000000000000 R11: ffff88813fffa700 R12: 0000000000000ffc
[   43.783906][ T3625] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000003ff00
[   43.783926][ T3625] FS:  0000555556723300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[   43.783950][ T3625] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   43.783967][ T3625] CR2: ffffc900041c1000 CR3: 0000000070094000 CR4: 0000000000350ee0
[   43.783984][ T3625] Call Trace:
[   43.783990][ T3625]  <TASK>
[   43.784001][ T3625]  sys_fillrect+0x431/0x800
[   43.784029][ T3625]  ? bitfill_unaligned_rev+0x530/0x530
[   43.784059][ T3625]  drm_fbdev_fb_fillrect+0x172/0x360
[   43.784097][ T3625]  bit_clear_margins+0x2d5/0x4b0
[   43.784123][ T3625]  ? bit_bmove+0x210/0x210
[   43.784150][ T3625]  ? _raw_spin_unlock_irqrestore+0x50/0x70
[   43.784178][ T3625]  ? _raw_spin_unlock_irqrestore+0x50/0x70
[   43.784203][ T3625]  fbcon_clear_margins.constprop.0+0x175/0x1c0
[   43.784233][ T3625]  fbcon_do_set_font+0x5e1/0x6f0
[   43.784263][ T3625]  fbcon_set_font+0x89d/0xab0
[   43.784288][ T3625]  ? fbcon_set_def_font+0x320/0x320
[   43.784308][ T3625]  con_font_op+0x73a/0xc90
[   43.784330][ T3625]  ? con_write+0x40/0x40
[   43.784364][ T3625]  vt_ioctl+0x1efa/0x2b20
[   43.784390][ T3625]  ? vt_waitactive+0x350/0x350
[   43.784418][ T3625]  ? tomoyo_path_number_perm+0x24e/0x590
[   43.784449][ T3625]  ? tomoyo_execute_permission+0x4a0/0x4a0
[   43.784476][ T3625]  ? __sanitizer_cov_trace_switch+0x50/0x90
[   43.784507][ T3625]  ? vt_waitactive+0x350/0x350
[   43.784525][ T3625]  tty_ioctl+0xfab/0x15d0
[   43.784542][ T3625]  ? tty_fasync+0x390/0x390
[   43.784559][ T3625]  ? find_held_lock+0x2d/0x110
[   43.784578][ T3625]  ? ptrace_notify+0xfa/0x140
[   43.784596][ T3625]  ? lock_downgrade+0x6e0/0x6e0
[   43.784613][ T3625]  ? _raw_spin_unlock_irq+0x1f/0x40
[   43.784631][ T3625]  ? bpf_lsm_file_ioctl+0x5/0x10
[   43.784659][ T3625]  ? tty_fasync+0x390/0x390
[   43.784686][ T3625]  __x64_sys_ioctl+0x193/0x200
[   43.784713][ T3625]  do_syscall_64+0x35/0xb0
[   43.784741][ T3625]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   43.784776][ T3625] RIP: 0033:0x7f3ee028d239
[   43.784792][ T3625] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   43.784808][ T3625] RSP: 002b:00007ffcdcbe0d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   43.784826][ T3625] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f3ee028d239
[   43.784837][ T3625] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000004
[   43.784849][ T3625] RBP: 00007ffcdcbe0da0 R08: 0000000000000001 R09: 0000000000000000
[   43.784860][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[   43.784871][ T3625] R13: 00007ffcdcbe0d9c R14: 00007ffcdcbe0dc0 R15: 00007ffcdcbe0db0
[   43.784889][ T3625]  </TASK>
[   43.784894][ T3625] Modules linked in:
[   43.784903][ T3625] CR2: ffffc900041c1000
[   43.784911][ T3625] ---[ end trace 0000000000000000 ]---
[   43.784919][ T3625] RIP: 0010:bitfill_aligned+0x182/0x210
[   43.784942][ T3625] Code: 08 48 33 45 f8 48 89 45 f8 89 d8 44 29 e8 41 29 c4 e8 92 a5 42 fd 44 89 e0 31 d2 48 89 ef f7 f3 49 89 c4 48 89 c1 48 8b 04 24 <f3> 48 ab 31 ff 4c 89 f6 e8 51 a2 42 fd 4d 85 f6 0f 84 69 ff ff ff
[   43.784958][ T3625] RSP: 0018:ffffc9000375f7d8 EFLAGS: 00010212
[   43.784973][ T3625] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 00000000000001fc
[   43.784984][ T3625] RDX: 0000000000000000 RSI: ffffffff843965be RDI: ffffc900041c1000
[   43.784995][ T3625] RBP: ffffc900041ba000 R08: 0000000000000005 R09: 0000000000000000
[   43.785007][ T3625] R10: 0000000000000000 R11: ffff88813fffa700 R12: 0000000000000ffc
[   43.785019][ T3625] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000003ff00
[   43.785036][ T3625] FS:  0000555556723300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[   43.785063][ T3625] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   43.785081][ T3625] CR2: ffffc900041c1000 CR3: 0000000070094000 CR4: 0000000000350ee0
[   43.785099][ T3625] Kernel panic - not syncing: Fatal exception
[   43.785632][ T3625] Kernel Offset: disabled