diff mbox series

scrub: slab-use-after-free (ae76d8e3e)

Message ID 0a3faca1c52f7fff0ac35566c6453f81f57a3d16.camel@rong.moe (mailing list archive)
State New, archived
Headers show
Series scrub: slab-use-after-free (ae76d8e3e) | expand

Commit Message

Rong Zhang Jan. 13, 2024, 5:40 p.m. UTC
Hi all,

I recently scrubbed my fs and surprisingly saw kernel oops. For context
and more information about the fs, please refer to
https://lore.kernel.org/linux-btrfs/8bd12a1ee60172f53ee0c27374f41c3ec9976be8.camel@rong.moe

Usually the kernel oops when the scrub progress is 1~30%. Then it will
oops again, making the btrfs process die. After that, any attempt to
unmount the fs hangs forever, so do reboot and shutdown.

It seems always reproducible if any of the below conditions is met:
- Intel CPU (i7-7567U/i7-13700H), intel_iommu=off
- x86_64 KVM (host CPU: Intel/AMD), virtio-blk
- RK3399
- Mounted via a loop device

Not reproducible on:
- Intel CPU (i7-7567U/i7-13700H), intel_iommu=on
- AMD Ryzen CPU (PRO 4750U), amd_iommu=on/off

Starting here, all experiments were done in a KVM:
- Host: Intel i7-7567U
- Vdisk: raw dump of my fs, virtio-blk (IO scheduler: none)
- btrfs-progs: 6.6.3

The first reproducible stable kernel is 6.5.4.

Bisection between 6.5.3 and 6.5.4 indicates that the buggy commit is
ce585c9b1cd700324fecedae130a9c35261fec30, which is a backport of
ae76d8e3e1351aa1ba09cc68dab6866d356f2e17 (first appeared in v6.6-rc1).

KASAN detected slab-use-after-free in __blk_rq_map_sg while scrubbing
on v6.7, meanwhile an assertion was failed at block/blk-merge.c:584.
See also the attached dmesg.

With the below patch applied to v6.7, slab-use-after-free and oops
disappeared, making scrub able to finish.


Thanks,
Rongrong
[    0.000000] Linux version 6.7.0-x64v3-dbg (icenowy@edelgard) (gcc (GCC) 13.2.0 20230727 (AOSC OS, Core), GNU ld (GNU Binutils) 2.41) #11 SMP PREEMPT_DYNAMIC Wed Jan 10 22:23:38 CST 2024
[    0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-6.7.0-x64v3-dbg root=UUID=5d5180c8-c108-490a-ba5e-16e23b89e553 ro quiet
[    0.000000] KERNEL supported cpus:
[    0.000000]   Intel GenuineIntel
[    0.000000]   AMD AuthenticAMD
[    0.000000]   Hygon HygonGenuine
[    0.000000]   Centaur CentaurHauls
[    0.000000]   zhaoxin   Shanghai  
[    0.000000] BIOS-provided physical RAM map:
[    0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000002ffff] usable
[    0.000000] BIOS-e820: [mem 0x0000000000030000-0x000000000004ffff] reserved
[    0.000000] BIOS-e820: [mem 0x0000000000050000-0x000000000009efff] usable
[    0.000000] BIOS-e820: [mem 0x000000000009f000-0x000000000009ffff] reserved
[    0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000007e79dfff] usable
[    0.000000] BIOS-e820: [mem 0x000000007e79e000-0x000000007e9ebfff] reserved
[    0.000000] BIOS-e820: [mem 0x000000007e9ec000-0x000000007eaebfff] type 20
[    0.000000] BIOS-e820: [mem 0x000000007eaec000-0x000000007eb6bfff] reserved
[    0.000000] BIOS-e820: [mem 0x000000007eb6c000-0x000000007eb7dfff] ACPI data
[    0.000000] BIOS-e820: [mem 0x000000007eb7e000-0x000000007ebfdfff] ACPI NVS
[    0.000000] BIOS-e820: [mem 0x000000007ebfe000-0x000000007effffff] usable
[    0.000000] BIOS-e820: [mem 0x000000007f000000-0x000000007fffffff] reserved
[    0.000000] BIOS-e820: [mem 0x00000000e0000000-0x00000000efffffff] reserved
[    0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved
[    0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000027fffffff] usable
[    0.000000] NX (Execute Disable) protection: active
[    0.000000] APIC: Static calls initialized
[    0.000000] efi: EFI v2.7 by Debian distribution of EDK II
[    0.000000] efi: SMBIOS=0x7e9d4000 SMBIOS 3.0=0x7e9d2000 ACPI=0x7eb7d000 ACPI 2.0=0x7eb7d014 MEMATTR=0x7d564018 MOKvar=0x7e97d000 
[    0.000000] SMBIOS 3.0.0 present.
[    0.000000] DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 2023.11-2 12/24/2023
[    0.000000] Hypervisor detected: KVM
[    0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00
[    0.000000] kvm-clock: using sched offset of 19886327621986 cycles
[    0.000003] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns
[    0.000007] tsc: Detected 3503.998 MHz processor
[    0.000056] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
[    0.000061] e820: remove [mem 0x000a0000-0x000fffff] usable
[    0.000074] last_pfn = 0x280000 max_arch_pfn = 0x400000000
[    0.000092] MTRR map: 4 entries (2 fixed + 2 variable; max 18), built from 8 variable MTRRs
[    0.000095] x86/PAT: Configuration [0-7]: WB  WC  UC- UC  WB  WP  UC- WT  
[    0.000117] last_pfn = 0x7f000 max_arch_pfn = 0x400000000
[    0.016686] Secure boot disabled
[    0.016689] RAMDISK: [mem 0x2f507000-0x33a7afff]
[    0.016697] ACPI: Early table checksum verification disabled
[    0.016701] ACPI: RSDP 0x000000007EB7D014 000024 (v02 BOCHS )
[    0.016709] ACPI: XSDT 0x000000007EB7C0E8 00004C (v01 BOCHS  BXPC     00000001      01000013)
[    0.016726] ACPI: FACP 0x000000007EB78000 0000F4 (v03 BOCHS  BXPC     00000001 BXPC 00000001)
[    0.016755] ACPI: DSDT 0x000000007EB79000 002B91 (v01 BOCHS  BXPC     00000001 BXPC 00000001)
[    0.016765] ACPI: FACS 0x000000007EBDC000 000040
[    0.016772] ACPI: APIC 0x000000007EB77000 000090 (v03 BOCHS  BXPC     00000001 BXPC 00000001)
[    0.016780] ACPI: MCFG 0x000000007EB76000 00003C (v01 BOCHS  BXPC     00000001 BXPC 00000001)
[    0.016788] ACPI: WAET 0x000000007EB75000 000028 (v01 BOCHS  BXPC     00000001 BXPC 00000001)
[    0.016796] ACPI: BGRT 0x000000007EB74000 000038 (v01 INTEL  EDK2     00000002      01000013)
[    0.016802] ACPI: Reserving FACP table memory at [mem 0x7eb78000-0x7eb780f3]
[    0.016805] ACPI: Reserving DSDT table memory at [mem 0x7eb79000-0x7eb7bb90]
[    0.016808] ACPI: Reserving FACS table memory at [mem 0x7ebdc000-0x7ebdc03f]
[    0.016810] ACPI: Reserving APIC table memory at [mem 0x7eb77000-0x7eb7708f]
[    0.016812] ACPI: Reserving MCFG table memory at [mem 0x7eb76000-0x7eb7603b]
[    0.016814] ACPI: Reserving WAET table memory at [mem 0x7eb75000-0x7eb75027]
[    0.016816] ACPI: Reserving BGRT table memory at [mem 0x7eb74000-0x7eb74037]
[    0.017190] No NUMA configuration found
[    0.017192] Faking a node at [mem 0x0000000000000000-0x000000027fffffff]
[    0.017226] NODE_DATA(0) allocated [mem 0x27ffd0000-0x27fffafff]
[    0.017915] Zone ranges:
[    0.017917]   DMA      [mem 0x0000000000001000-0x0000000000ffffff]
[    0.017920]   DMA32    [mem 0x0000000001000000-0x00000000ffffffff]
[    0.017923]   Normal   [mem 0x0000000100000000-0x000000027fffffff]
[    0.017926]   Device   empty
[    0.017928] Movable zone start for each node
[    0.017932] Early memory node ranges
[    0.017933]   node   0: [mem 0x0000000000001000-0x000000000002ffff]
[    0.017935]   node   0: [mem 0x0000000000050000-0x000000000009efff]
[    0.017937]   node   0: [mem 0x0000000000100000-0x000000007e79dfff]
[    0.017939]   node   0: [mem 0x000000007ebfe000-0x000000007effffff]
[    0.017941]   node   0: [mem 0x0000000100000000-0x000000027fffffff]
[    0.017944] Initmem setup node 0 [mem 0x0000000000001000-0x000000027fffffff]
[    0.017955] On node 0, zone DMA: 1 pages in unavailable ranges
[    0.017965] On node 0, zone DMA: 32 pages in unavailable ranges
[    0.018214] On node 0, zone DMA: 97 pages in unavailable ranges
[    0.051907] On node 0, zone DMA32: 1120 pages in unavailable ranges
[    0.155369] On node 0, zone Normal: 4096 pages in unavailable ranges
[    0.413222] kasan: KernelAddressSanitizer initialized
[    0.413867] ACPI: PM-Timer IO Port: 0x608
[    0.413888] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1])
[    0.413913] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23
[    0.413918] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
[    0.413922] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level)
[    0.413924] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
[    0.413927] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level)
[    0.413929] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level)
[    0.413938] ACPI: Using ACPI (MADT) for SMP configuration information
[    0.413952] e820: update [mem 0x7ce91000-0x7ce99fff] usable ==> reserved
[    0.413971] TSC deadline timer available
[    0.413972] smpboot: Allowing 4 CPUs, 0 hotplug CPUs
[    0.413991] kvm-guest: APIC: eoi() replaced with kvm_guest_apic_eoi_write()
[    0.414026] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff]
[    0.414030] PM: hibernation: Registered nosave memory: [mem 0x00030000-0x0004ffff]
[    0.414033] PM: hibernation: Registered nosave memory: [mem 0x0009f000-0x0009ffff]
[    0.414035] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000fffff]
[    0.414039] PM: hibernation: Registered nosave memory: [mem 0x7ce91000-0x7ce99fff]
[    0.414042] PM: hibernation: Registered nosave memory: [mem 0x7e79e000-0x7e9ebfff]
[    0.414044] PM: hibernation: Registered nosave memory: [mem 0x7e9ec000-0x7eaebfff]
[    0.414046] PM: hibernation: Registered nosave memory: [mem 0x7eaec000-0x7eb6bfff]
[    0.414048] PM: hibernation: Registered nosave memory: [mem 0x7eb6c000-0x7eb7dfff]
[    0.414050] PM: hibernation: Registered nosave memory: [mem 0x7eb7e000-0x7ebfdfff]
[    0.414054] PM: hibernation: Registered nosave memory: [mem 0x7f000000-0x7fffffff]
[    0.414056] PM: hibernation: Registered nosave memory: [mem 0x80000000-0xdfffffff]
[    0.414058] PM: hibernation: Registered nosave memory: [mem 0xe0000000-0xefffffff]
[    0.414060] PM: hibernation: Registered nosave memory: [mem 0xf0000000-0xfeffbfff]
[    0.414062] PM: hibernation: Registered nosave memory: [mem 0xfeffc000-0xfeffffff]
[    0.414063] PM: hibernation: Registered nosave memory: [mem 0xff000000-0xffffffff]
[    0.414067] [mem 0x80000000-0xdfffffff] available for PCI devices
[    0.414070] Booting paravirtualized kernel on KVM
[    0.414073] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns
[    0.423105] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:4 nr_cpu_ids:4 nr_node_ids:1
[    0.423646] percpu: Embedded 69 pages/cpu s245760 r8192 d28672 u524288
[    0.423658] pcpu-alloc: s245760 r8192 d28672 u524288 alloc=1*2097152
[    0.423662] pcpu-alloc: [0] 0 1 2 3 
[    0.423708] kvm-guest: PV spinlocks disabled, no host support
[    0.423709] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-6.7.0-x64v3-dbg root=UUID=5d5180c8-c108-490a-ba5e-16e23b89e553 ro quiet
[    0.423803] Unknown kernel command line parameters "BOOT_IMAGE=/boot/vmlinuz-6.7.0-x64v3-dbg", will be passed to user space.
[    0.423847] random: crng init done
[    0.425751] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear)
[    0.426677] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear)
[    0.427026] Fallback order for Node 0: 0 
[    0.427031] Built 1 zonelists, mobility grouping on.  Total pages: 2056977
[    0.427034] Policy zone: Normal
[    0.427042] mem auto-init: stack:off, heap alloc:on, heap free:off
[    0.427044] stackdepot: allocating hash table via alloc_large_system_hash
[    0.429132] stackdepot hash table entries: 1048576 (order: 11, 8388608 bytes, linear)
[    0.429141] software IO TLB: area num 4.
[    0.610044] Memory: 6930412K/8367224K available (22528K kernel code, 7515K rwdata, 8912K rodata, 3040K init, 5368K bss, 1436556K reserved, 0K cma-reserved)
[    0.610903] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.610965] Kernel/User page tables isolation: enabled
[    0.611537] Dynamic Preempt: full
[    0.611989] rcu: Preemptible hierarchical RCU implementation.
[    0.611991] rcu: 	RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=4.
[    0.611994] 	Trampoline variant of Tasks RCU enabled.
[    0.611995] 	Tracing variant of Tasks RCU enabled.
[    0.611996] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[    0.611998] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4
[    0.612042] NR_IRQS: 524544, nr_irqs: 456, preallocated irqs: 16
[    0.612638] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.612801] Console: colour dummy device 80x25
[    0.612804] printk: legacy console [tty0] enabled
[    0.612904] ACPI: Core revision 20230628
[    0.613381] APIC: Switch to symmetric I/O mode setup
[    0.613481] x2apic enabled
[    0.613642] APIC: Switched APIC routing to: physical x2apic
[    0.614346] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x328211acd6a, max_idle_ns: 440795259903 ns
[    0.614357] Calibrating delay loop (skipped) preset value.. 7007.99 BogoMIPS (lpj=14015992)
[    0.614459] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0
[    0.614462] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0
[    0.614468] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization
[    0.614472] Spectre V2 : Mitigation: IBRS
[    0.614474] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch
[    0.614476] Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT
[    0.614478] RETBleed: Mitigation: IBRS
[    0.614481] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier
[    0.614483] Speculative Store Bypass: Vulnerable
[    0.614496] MDS: Vulnerable: Clear CPU buffers attempted, no microcode
[    0.614498] MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode
[    0.614501] SRBDS: Unknown: Dependent on hypervisor status
[    0.614503] GDS: Unknown: Dependent on hypervisor status
[    0.614514] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'
[    0.614518] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers'
[    0.614521] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers'
[    0.614525] x86/fpu: xstate_offset[2]:  576, xstate_sizes[2]:  256
[    0.614529] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format.
[    0.618353] Freeing SMP alternatives memory: 40K
[    0.618353] pid_max: default: 32768 minimum: 301
[    0.618353] LSM: initializing lsm=lockdown,capability,landlock,yama,apparmor,integrity
[    0.618353] landlock: Up and running.
[    0.618353] Yama: becoming mindful.
[    0.618353] AppArmor: AppArmor initialized
[    0.618353] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.618353] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.618353] smpboot: CPU0: Intel Core Processor (Skylake, IBRS, no TSX) (family: 0x6, model: 0x5e, stepping: 0x3)
[    0.618353] RCU Tasks: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[    0.618353] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[    0.618353] Performance Events: unsupported p6 CPU model 94 no PMU driver, software events only.
[    0.618353] signal: max sigframe size: 1776
[    0.618353] rcu: Hierarchical SRCU implementation.
[    0.618353] rcu: 	Max phase no-delay instances is 1000.
[    0.619392] NMI watchdog: Perf NMI watchdog permanently disabled
[    0.619745] smp: Bringing up secondary CPUs ...
[    0.620387] smpboot: x86: Booting SMP configuration:
[    0.620390] .... node  #0, CPUs:      #2 #1 #3
[    0.626455] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details.
[    0.626455] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details.
[    0.628354] smp: Brought up 1 node, 4 CPUs
[    0.628354] smpboot: Max logical packages: 1
[    0.628354] smpboot: Total of 4 processors activated (28031.98 BogoMIPS)
[    0.631010] devtmpfs: initialized
[    0.631044] x86/mm: Memory block size: 128MB
[    0.650677] ACPI: PM: Registering ACPI NVS region [mem 0x7eb7e000-0x7ebfdfff] (524288 bytes)
[    0.651527] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.651556] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.651905] pinctrl core: initialized pinctrl subsystem
[    0.652895] PM: RTC time: 15:58:26, date: 2024-01-10
[    0.655898] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.657601] DMA: preallocated 1024 KiB GFP_KERNEL pool for atomic allocations
[    0.657955] DMA: preallocated 1024 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.658341] DMA: preallocated 1024 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.658534] audit: initializing netlink subsys (disabled)
[    0.658610] audit: type=2000 audit(1704902306.425:1): state=initialized audit_enabled=0 res=1
[    0.660386] thermal_sys: Registered thermal governor 'fair_share'
[    0.660390] thermal_sys: Registered thermal governor 'bang_bang'
[    0.660394] thermal_sys: Registered thermal governor 'step_wise'
[    0.660397] thermal_sys: Registered thermal governor 'user_space'
[    0.660400] thermal_sys: Registered thermal governor 'power_allocator'
[    0.660470] cpuidle: using governor ladder
[    0.660482] cpuidle: using governor menu
[    0.660716] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
[    0.661670] PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xe0000000-0xefffffff] (base 0xe0000000)
[    0.661687] PCI: MMCONFIG at [mem 0xe0000000-0xefffffff] reserved as E820 entry
[    0.661728] PCI: Using configuration type 1 for base access
[    0.663613] kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible.
[    0.663637] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
[    0.663637] HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page
[    0.668191] ACPI: Added _OSI(Module Device)
[    0.668195] ACPI: Added _OSI(Processor Device)
[    0.668198] ACPI: Added _OSI(3.0 _SCP Extensions)
[    0.668200] ACPI: Added _OSI(Processor Aggregator Device)
[    0.780901] ACPI: 1 ACPI AML tables successfully acquired and loaded
[    0.791035] ACPI: _OSC evaluation for CPUs failed, trying _PDC
[    0.799516] ACPI: Interpreter enabled
[    0.799675] ACPI: PM: (supports S0 S5)
[    0.799679] ACPI: Using IOAPIC for interrupt routing
[    0.800489] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[    0.800493] PCI: Ignoring E820 reservations for host bridge windows
[    0.804433] ACPI: Enabled 2 GPEs in block 00 to 3F
[    0.909294] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[    0.909353] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI EDR HPX-Type3]
[    0.912732] acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR DPC]
[    0.918887] acpi PNP0A08:00: _OSC: OS now controls [SHPCHotplug PME AER PCIeCapability]
[    0.926311] PCI host bridge to bus 0000:00
[    0.926323] pci_bus 0000:00: root bus resource [io  0x0000-0x0cf7 window]
[    0.926337] pci_bus 0000:00: root bus resource [io  0x0d00-0xffff window]
[    0.926349] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
[    0.926364] pci_bus 0000:00: root bus resource [mem 0x80000000-0xdfffffff window]
[    0.926377] pci_bus 0000:00: root bus resource [mem 0xf0000000-0xfebfffff window]
[    0.926389] pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window]
[    0.926403] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.926669] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000
[    0.929202] pci 0000:00:01.0: [1b36:0100] type 00 class 0x030000
[    0.944112] pci 0000:00:01.0: reg 0x10: [mem 0x84000000-0x87ffffff]
[    0.948318] pci 0000:00:01.0: reg 0x14: [mem 0x80000000-0x83ffffff]
[    0.952229] pci 0000:00:01.0: reg 0x18: [mem 0x89c44000-0x89c45fff]
[    0.958397] pci 0000:00:01.0: reg 0x1c: [io  0x6060-0x607f]
[    0.966398] pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref]
[    0.966844] pci 0000:00:01.0: BAR 0: assigned to efifb
[    0.966870] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[    0.970498] pci 0000:00:02.0: [1b36:000c] type 01 class 0x060400
[    0.971840] pci 0000:00:02.0: reg 0x10: [mem 0x89c54000-0x89c54fff]
[    0.977303] pci 0000:00:02.1: [1b36:000c] type 01 class 0x060400
[    0.978360] pci 0000:00:02.1: reg 0x10: [mem 0x89c53000-0x89c53fff]
[    0.985572] pci 0000:00:02.2: [1b36:000c] type 01 class 0x060400
[    0.985572] pci 0000:00:02.2: reg 0x10: [mem 0x89c52000-0x89c52fff]
[    0.986353] pci 0000:00:02.3: [1b36:000c] type 01 class 0x060400
[    0.990361] pci 0000:00:02.3: reg 0x10: [mem 0x89c51000-0x89c51fff]
[    0.995714] pci 0000:00:02.4: [1b36:000c] type 01 class 0x060400
[    0.997099] pci 0000:00:02.4: reg 0x10: [mem 0x89c50000-0x89c50fff]
[    1.004321] pci 0000:00:02.5: [1b36:000c] type 01 class 0x060400
[    1.005659] pci 0000:00:02.5: reg 0x10: [mem 0x89c4f000-0x89c4ffff]
[    1.011991] pci 0000:00:02.6: [1b36:000c] type 01 class 0x060400
[    1.013350] pci 0000:00:02.6: reg 0x10: [mem 0x89c4e000-0x89c4efff]
[    1.018385] pci 0000:00:02.7: [1b36:000c] type 01 class 0x060400
[    1.019778] pci 0000:00:02.7: reg 0x10: [mem 0x89c4d000-0x89c4dfff]
[    1.025831] pci 0000:00:03.0: [1b36:000c] type 01 class 0x060400
[    1.030820] pci 0000:00:03.0: reg 0x10: [mem 0x89c4c000-0x89c4cfff]
[    1.037489] pci 0000:00:03.1: [1b36:000c] type 01 class 0x060400
[    1.038816] pci 0000:00:03.1: reg 0x10: [mem 0x89c4b000-0x89c4bfff]
[    1.044066] pci 0000:00:03.2: [1b36:000c] type 01 class 0x060400
[    1.045363] pci 0000:00:03.2: reg 0x10: [mem 0x89c4a000-0x89c4afff]
[    1.052396] pci 0000:00:03.3: [1b36:000c] type 01 class 0x060400
[    1.053776] pci 0000:00:03.3: reg 0x10: [mem 0x89c49000-0x89c49fff]
[    1.059872] pci 0000:00:03.4: [1b36:000c] type 01 class 0x060400
[    1.061227] pci 0000:00:03.4: reg 0x10: [mem 0x89c48000-0x89c48fff]
[    1.067024] pci 0000:00:03.5: [1b36:000c] type 01 class 0x060400
[    1.068334] pci 0000:00:03.5: reg 0x10: [mem 0x89c47000-0x89c47fff]
[    1.078447] pci 0000:00:1b.0: [8086:293e] type 00 class 0x040300
[    1.078957] pci 0000:00:1b.0: reg 0x10: [mem 0x89c40000-0x89c43fff]
[    1.085875] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100
[    1.086175] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[    1.088637] pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601
[    1.094230] pci 0000:00:1f.2: reg 0x20: [io  0x6040-0x605f]
[    1.094750] pci 0000:00:1f.2: reg 0x24: [mem 0x89c46000-0x89c46fff]
[    1.098258] pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500
[    1.098444] pci 0000:00:1f.3: reg 0x20: [io  0x6000-0x603f]
[    1.102579] acpiphp: Slot [0] registered
[    1.102691] pci 0000:01:00.0: [1af4:1041] type 00 class 0x020000
[    1.105381] pci 0000:01:00.0: reg 0x14: [mem 0x89a00000-0x89a00fff]
[    1.107540] pci 0000:01:00.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref]
[    1.108369] pci 0000:01:00.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref]
[    1.162184] pci 0000:00:02.0: PCI bridge to [bus 01]
[    1.162207] pci 0000:00:02.0:   bridge window [mem 0x89a00000-0x89bfffff]
[    1.162226] pci 0000:00:02.0:   bridge window [mem 0x800000000-0x8000fffff 64bit pref]
[    1.164073] acpiphp: Slot [0-2] registered
[    1.164196] pci 0000:02:00.0: [1b36:000d] type 00 class 0x0c0330
[    1.164949] pci 0000:02:00.0: reg 0x10: [mem 0x89800000-0x89803fff 64bit]
[    1.219356] pci 0000:00:02.1: PCI bridge to [bus 02]
[    1.219378] pci 0000:00:02.1:   bridge window [mem 0x89800000-0x899fffff]
[    1.221555] acpiphp: Slot [0-3] registered
[    1.221662] pci 0000:03:00.0: [1af4:1043] type 00 class 0x078000
[    1.224547] pci 0000:03:00.0: reg 0x14: [mem 0x89600000-0x89600fff]
[    1.228418] pci 0000:03:00.0: reg 0x20: [mem 0x800100000-0x800103fff 64bit pref]
[    1.285300] pci 0000:00:02.2: PCI bridge to [bus 03]
[    1.285333] pci 0000:00:02.2:   bridge window [mem 0x89600000-0x897fffff]
[    1.285361] pci 0000:00:02.2:   bridge window [mem 0x800100000-0x8001fffff 64bit pref]
[    1.287950] acpiphp: Slot [0-4] registered
[    1.288129] pci 0000:04:00.0: [1af4:1042] type 00 class 0x010000
[    1.290115] pci 0000:04:00.0: reg 0x14: [mem 0x89400000-0x89400fff]
[    1.293429] pci 0000:04:00.0: reg 0x20: [mem 0x800200000-0x800203fff 64bit pref]
[    1.345408] pci 0000:00:02.3: PCI bridge to [bus 04]
[    1.345431] pci 0000:00:02.3:   bridge window [mem 0x89400000-0x895fffff]
[    1.345449] pci 0000:00:02.3:   bridge window [mem 0x800200000-0x8002fffff 64bit pref]
[    1.347536] acpiphp: Slot [0-5] registered
[    1.347638] pci 0000:05:00.0: [1af4:1045] type 00 class 0x00ff00
[    1.351077] pci 0000:05:00.0: reg 0x20: [mem 0x800300000-0x800303fff 64bit pref]
[    1.402310] pci 0000:00:02.4: PCI bridge to [bus 05]
[    1.402333] pci 0000:00:02.4:   bridge window [mem 0x89200000-0x893fffff]
[    1.402352] pci 0000:00:02.4:   bridge window [mem 0x800300000-0x8003fffff 64bit pref]
[    1.404405] acpiphp: Slot [0-6] registered
[    1.404525] pci 0000:06:00.0: [1af4:1044] type 00 class 0x00ff00
[    1.407088] pci 0000:06:00.0: reg 0x14: [mem 0x89000000-0x89000fff]
[    1.411111] pci 0000:06:00.0: reg 0x20: [mem 0x800400000-0x800403fff 64bit pref]
[    1.465046] pci 0000:00:02.5: PCI bridge to [bus 06]
[    1.465070] pci 0000:00:02.5:   bridge window [mem 0x89000000-0x891fffff]
[    1.465089] pci 0000:00:02.5:   bridge window [mem 0x800400000-0x8004fffff 64bit pref]
[    1.466825] acpiphp: Slot [0-7] registered
[    1.467029] pci 0000:00:02.6: PCI bridge to [bus 07]
[    1.467072] pci 0000:00:02.6:   bridge window [mem 0x88e00000-0x88ffffff]
[    1.468783] acpiphp: Slot [0-8] registered
[    1.468889] pci 0000:08:00.0: [1af4:1042] type 00 class 0x010000
[    1.470362] pci 0000:08:00.0: reg 0x14: [mem 0x88c00000-0x88c00fff]
[    1.472968] pci 0000:08:00.0: reg 0x20: [mem 0x800500000-0x800503fff 64bit pref]
[    1.528552] pci 0000:00:02.7: PCI bridge to [bus 08]
[    1.528574] pci 0000:00:02.7:   bridge window [mem 0x88c00000-0x88dfffff]
[    1.528593] pci 0000:00:02.7:   bridge window [mem 0x800500000-0x8005fffff 64bit pref]
[    1.530506] acpiphp: Slot [0-9] registered
[    1.530658] pci 0000:09:00.0: [1af4:105a] type 00 class 0x018000
[    1.532365] pci 0000:09:00.0: reg 0x14: [mem 0x88a00000-0x88a00fff]
[    1.534761] pci 0000:09:00.0: reg 0x20: [mem 0x800600000-0x800603fff 64bit pref]
[    1.587204] pci 0000:00:03.0: PCI bridge to [bus 09]
[    1.587227] pci 0000:00:03.0:   bridge window [mem 0x88a00000-0x88bfffff]
[    1.587245] pci 0000:00:03.0:   bridge window [mem 0x800600000-0x8006fffff 64bit pref]
[    1.589358] acpiphp: Slot [0-10] registered
[    1.589545] pci 0000:00:03.1: PCI bridge to [bus 0a]
[    1.589564] pci 0000:00:03.1:   bridge window [mem 0x88800000-0x889fffff]
[    1.591743] acpiphp: Slot [0-11] registered
[    1.591930] pci 0000:00:03.2: PCI bridge to [bus 0b]
[    1.591966] pci 0000:00:03.2:   bridge window [mem 0x88600000-0x887fffff]
[    1.594162] acpiphp: Slot [0-12] registered
[    1.594395] pci 0000:00:03.3: PCI bridge to [bus 0c]
[    1.594416] pci 0000:00:03.3:   bridge window [mem 0x88400000-0x885fffff]
[    1.596597] acpiphp: Slot [0-13] registered
[    1.596783] pci 0000:00:03.4: PCI bridge to [bus 0d]
[    1.596802] pci 0000:00:03.4:   bridge window [mem 0x88200000-0x883fffff]
[    1.598874] acpiphp: Slot [0-14] registered
[    1.599064] pci 0000:00:03.5: PCI bridge to [bus 0e]
[    1.599083] pci 0000:00:03.5:   bridge window [mem 0x88000000-0x881fffff]
[    1.618624] ACPI: PCI: Interrupt link LNKA configured for IRQ 10
[    1.621761] ACPI: PCI: Interrupt link LNKB configured for IRQ 10
[    1.624807] ACPI: PCI: Interrupt link LNKC configured for IRQ 11
[    1.627844] ACPI: PCI: Interrupt link LNKD configured for IRQ 11
[    1.630952] ACPI: PCI: Interrupt link LNKE configured for IRQ 10
[    1.633999] ACPI: PCI: Interrupt link LNKF configured for IRQ 10
[    1.637055] ACPI: PCI: Interrupt link LNKG configured for IRQ 11
[    1.640015] ACPI: PCI: Interrupt link LNKH configured for IRQ 11
[    1.640749] ACPI: PCI: Interrupt link GSIA configured for IRQ 16
[    1.641165] ACPI: PCI: Interrupt link GSIB configured for IRQ 17
[    1.641576] ACPI: PCI: Interrupt link GSIC configured for IRQ 18
[    1.641983] ACPI: PCI: Interrupt link GSID configured for IRQ 19
[    1.642506] ACPI: PCI: Interrupt link GSIE configured for IRQ 20
[    1.642905] ACPI: PCI: Interrupt link GSIF configured for IRQ 21
[    1.643315] ACPI: PCI: Interrupt link GSIG configured for IRQ 22
[    1.643694] ACPI: PCI: Interrupt link GSIH configured for IRQ 23
[    1.653614] iommu: Default domain type: Translated
[    1.653614] iommu: DMA domain TLB invalidation policy: lazy mode
[    1.658008] SCSI subsystem initialized
[    1.658481] libata version 3.00 loaded.
[    1.658558] ACPI: bus type USB registered
[    1.658817] usbcore: registered new interface driver usbfs
[    1.658913] usbcore: registered new interface driver hub
[    1.659037] usbcore: registered new device driver usb
[    1.659460] pps_core: LinuxPPS API ver. 1 registered
[    1.659466] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    1.659523] PTP clock support registered
[    1.659705] EDAC MC: Ver: 3.0.0
[    1.662375] efivars: Registered efivars operations
[    1.663168] NetLabel: Initializing
[    1.663168] NetLabel:  domain hash size = 128
[    1.663168] NetLabel:  protocols = UNLABELED CIPSOv4 CALIPSO
[    1.663168] NetLabel:  unlabeled traffic allowed by default
[    1.666487] mctp: management component transport protocol core
[    1.666490] NET: Registered PF_MCTP protocol family
[    1.666567] PCI: Using ACPI for IRQ routing
[    1.735992] PCI: pci_cache_line_size set to 64 bytes
[    1.736229] e820: reserve RAM buffer [mem 0x0009f000-0x0009ffff]
[    1.736303] e820: reserve RAM buffer [mem 0x7ce91000-0x7fffffff]
[    1.736324] e820: reserve RAM buffer [mem 0x7e79e000-0x7fffffff]
[    1.736356] e820: reserve RAM buffer [mem 0x7f000000-0x7fffffff]
[    1.738424] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[    1.738424] pci 0000:00:01.0: vgaarb: bridge control possible
[    1.738425] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[    1.738443] vgaarb: loaded
[    1.739114] clocksource: Switched to clocksource kvm-clock
[    1.739654] VFS: Disk quotas dquot_6.6.0
[    1.739714] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    1.742071] AppArmor: AppArmor Filesystem Enabled
[    1.742291] pnp: PnP ACPI init
[    1.746178] system 00:04: [mem 0xe0000000-0xefffffff window] has been reserved
[    1.752350] pnp: PnP ACPI: found 5 devices
[    1.782256] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
[    1.782852] NET: Registered PF_INET protocol family
[    1.783403] IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[    1.788524] tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear)
[    1.788654] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    1.788906] TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    1.789938] TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear)
[    1.791137] TCP: Hash tables configured (established 65536 bind 65536)
[    1.791744] MPTCP token hash table entries: 8192 (order: 5, 196608 bytes, linear)
[    1.791967] UDP hash table entries: 4096 (order: 5, 131072 bytes, linear)
[    1.792137] UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear)
[    1.792710] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    1.792798] NET: Registered PF_XDP protocol family
[    1.792808] pci 0000:01:00.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window
[    1.792834] pci 0000:00:02.0: bridge window [io  0x1000-0x0fff] to [bus 01] add_size 1000
[    1.792846] pci 0000:00:02.1: bridge window [io  0x1000-0x0fff] to [bus 02] add_size 1000
[    1.792857] pci 0000:00:02.1: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 02] add_size 200000 add_align 100000
[    1.792870] pci 0000:00:02.2: bridge window [io  0x1000-0x0fff] to [bus 03] add_size 1000
[    1.792881] pci 0000:00:02.3: bridge window [io  0x1000-0x0fff] to [bus 04] add_size 1000
[    1.792891] pci 0000:00:02.4: bridge window [io  0x1000-0x0fff] to [bus 05] add_size 1000
[    1.792902] pci 0000:00:02.5: bridge window [io  0x1000-0x0fff] to [bus 06] add_size 1000
[    1.792913] pci 0000:00:02.6: bridge window [io  0x1000-0x0fff] to [bus 07] add_size 1000
[    1.792923] pci 0000:00:02.6: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 07] add_size 200000 add_align 100000
[    1.792935] pci 0000:00:02.7: bridge window [io  0x1000-0x0fff] to [bus 08] add_size 1000
[    1.792946] pci 0000:00:03.0: bridge window [io  0x1000-0x0fff] to [bus 09] add_size 1000
[    1.792957] pci 0000:00:03.1: bridge window [io  0x1000-0x0fff] to [bus 0a] add_size 1000
[    1.792967] pci 0000:00:03.1: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0a] add_size 200000 add_align 100000
[    1.792979] pci 0000:00:03.2: bridge window [io  0x1000-0x0fff] to [bus 0b] add_size 1000
[    1.792989] pci 0000:00:03.2: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000
[    1.793001] pci 0000:00:03.3: bridge window [io  0x1000-0x0fff] to [bus 0c] add_size 1000
[    1.793012] pci 0000:00:03.3: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0c] add_size 200000 add_align 100000
[    1.793023] pci 0000:00:03.4: bridge window [io  0x1000-0x0fff] to [bus 0d] add_size 1000
[    1.793034] pci 0000:00:03.4: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0d] add_size 200000 add_align 100000
[    1.793045] pci 0000:00:03.5: bridge window [io  0x1000-0x0fff] to [bus 0e] add_size 1000
[    1.793059] pci 0000:00:03.5: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0e] add_size 200000 add_align 100000
[    1.793336] pci 0000:00:02.1: BAR 15: assigned [mem 0x800700000-0x8008fffff 64bit pref]
[    1.793347] pci 0000:00:02.6: BAR 15: assigned [mem 0x800900000-0x800afffff 64bit pref]
[    1.793372] pci 0000:00:03.1: BAR 15: assigned [mem 0x800b00000-0x800cfffff 64bit pref]
[    1.793381] pci 0000:00:03.2: BAR 15: assigned [mem 0x800d00000-0x800efffff 64bit pref]
[    1.793391] pci 0000:00:03.3: BAR 15: assigned [mem 0x800f00000-0x8010fffff 64bit pref]
[    1.793416] pci 0000:00:03.4: BAR 15: assigned [mem 0x801100000-0x8012fffff 64bit pref]
[    1.793427] pci 0000:00:03.5: BAR 15: assigned [mem 0x801300000-0x8014fffff 64bit pref]
[    1.793437] pci 0000:00:02.0: BAR 13: assigned [io  0x1000-0x1fff]
[    1.793445] pci 0000:00:02.1: BAR 13: assigned [io  0x2000-0x2fff]
[    1.793454] pci 0000:00:02.2: BAR 13: assigned [io  0x3000-0x3fff]
[    1.793463] pci 0000:00:02.3: BAR 13: assigned [io  0x4000-0x4fff]
[    1.793472] pci 0000:00:02.4: BAR 13: assigned [io  0x5000-0x5fff]
[    1.793481] pci 0000:00:02.5: BAR 13: assigned [io  0x7000-0x7fff]
[    1.793490] pci 0000:00:02.6: BAR 13: assigned [io  0x8000-0x8fff]
[    1.793502] pci 0000:00:02.7: BAR 13: assigned [io  0x9000-0x9fff]
[    1.793512] pci 0000:00:03.0: BAR 13: assigned [io  0xa000-0xafff]
[    1.793521] pci 0000:00:03.1: BAR 13: assigned [io  0xb000-0xbfff]
[    1.793530] pci 0000:00:03.2: BAR 13: assigned [io  0xc000-0xcfff]
[    1.793540] pci 0000:00:03.3: BAR 13: assigned [io  0xd000-0xdfff]
[    1.793551] pci 0000:00:03.4: BAR 13: assigned [io  0xe000-0xefff]
[    1.793561] pci 0000:00:03.5: BAR 13: assigned [io  0xf000-0xffff]
[    1.793934] pci 0000:01:00.0: BAR 6: assigned [mem 0x89a40000-0x89a7ffff pref]
[    1.793947] pci 0000:00:02.0: PCI bridge to [bus 01]
[    1.793970] pci 0000:00:02.0:   bridge window [io  0x1000-0x1fff]
[    1.795291] pci 0000:00:02.0:   bridge window [mem 0x89a00000-0x89bfffff]
[    1.796029] pci 0000:00:02.0:   bridge window [mem 0x800000000-0x8000fffff 64bit pref]
[    1.797468] pci 0000:00:02.1: PCI bridge to [bus 02]
[    1.797481] pci 0000:00:02.1:   bridge window [io  0x2000-0x2fff]
[    1.798601] pci 0000:00:02.1:   bridge window [mem 0x89800000-0x899fffff]
[    1.799297] pci 0000:00:02.1:   bridge window [mem 0x800700000-0x8008fffff 64bit pref]
[    1.800772] pci 0000:00:02.2: PCI bridge to [bus 03]
[    1.800786] pci 0000:00:02.2:   bridge window [io  0x3000-0x3fff]
[    1.802139] pci 0000:00:02.2:   bridge window [mem 0x89600000-0x897fffff]
[    1.802914] pci 0000:00:02.2:   bridge window [mem 0x800100000-0x8001fffff 64bit pref]
[    1.804453] pci 0000:00:02.3: PCI bridge to [bus 04]
[    1.804467] pci 0000:00:02.3:   bridge window [io  0x4000-0x4fff]
[    1.805690] pci 0000:00:02.3:   bridge window [mem 0x89400000-0x895fffff]
[    1.808264] pci 0000:00:02.3:   bridge window [mem 0x800200000-0x8002fffff 64bit pref]
[    1.809257] pci 0000:00:02.4: PCI bridge to [bus 05]
[    1.809270] pci 0000:00:02.4:   bridge window [io  0x5000-0x5fff]
[    1.809984] pci 0000:00:02.4:   bridge window [mem 0x89200000-0x893fffff]
[    1.810500] pci 0000:00:02.4:   bridge window [mem 0x800300000-0x8003fffff 64bit pref]
[    1.811514] pci 0000:00:02.5: PCI bridge to [bus 06]
[    1.811527] pci 0000:00:02.5:   bridge window [io  0x7000-0x7fff]
[    1.812280] pci 0000:00:02.5:   bridge window [mem 0x89000000-0x891fffff]
[    1.812819] pci 0000:00:02.5:   bridge window [mem 0x800400000-0x8004fffff 64bit pref]
[    1.813917] pci 0000:00:02.6: PCI bridge to [bus 07]
[    1.813947] pci 0000:00:02.6:   bridge window [io  0x8000-0x8fff]
[    1.814751] pci 0000:00:02.6:   bridge window [mem 0x88e00000-0x88ffffff]
[    1.815441] pci 0000:00:02.6:   bridge window [mem 0x800900000-0x800afffff 64bit pref]
[    1.816906] pci 0000:00:02.7: PCI bridge to [bus 08]
[    1.816919] pci 0000:00:02.7:   bridge window [io  0x9000-0x9fff]
[    1.820205] pci 0000:00:02.7:   bridge window [mem 0x88c00000-0x88dfffff]
[    1.820643] pci 0000:00:02.7:   bridge window [mem 0x800500000-0x8005fffff 64bit pref]
[    1.821627] pci 0000:00:03.0: PCI bridge to [bus 09]
[    1.821640] pci 0000:00:03.0:   bridge window [io  0xa000-0xafff]
[    1.822402] pci 0000:00:03.0:   bridge window [mem 0x88a00000-0x88bfffff]
[    1.822820] pci 0000:00:03.0:   bridge window [mem 0x800600000-0x8006fffff 64bit pref]
[    1.823732] pci 0000:00:03.1: PCI bridge to [bus 0a]
[    1.823745] pci 0000:00:03.1:   bridge window [io  0xb000-0xbfff]
[    1.824414] pci 0000:00:03.1:   bridge window [mem 0x88800000-0x889fffff]
[    1.824911] pci 0000:00:03.1:   bridge window [mem 0x800b00000-0x800cfffff 64bit pref]
[    1.825928] pci 0000:00:03.2: PCI bridge to [bus 0b]
[    1.825942] pci 0000:00:03.2:   bridge window [io  0xc000-0xcfff]
[    1.826630] pci 0000:00:03.2:   bridge window [mem 0x88600000-0x887fffff]
[    1.827095] pci 0000:00:03.2:   bridge window [mem 0x800d00000-0x800efffff 64bit pref]
[    1.828056] pci 0000:00:03.3: PCI bridge to [bus 0c]
[    1.828068] pci 0000:00:03.3:   bridge window [io  0xd000-0xdfff]
[    1.828951] pci 0000:00:03.3:   bridge window [mem 0x88400000-0x885fffff]
[    1.829694] pci 0000:00:03.3:   bridge window [mem 0x800f00000-0x8010fffff 64bit pref]
[    1.832967] pci 0000:00:03.4: PCI bridge to [bus 0d]
[    1.832981] pci 0000:00:03.4:   bridge window [io  0xe000-0xefff]
[    1.833622] pci 0000:00:03.4:   bridge window [mem 0x88200000-0x883fffff]
[    1.834162] pci 0000:00:03.4:   bridge window [mem 0x801100000-0x8012fffff 64bit pref]
[    1.835285] pci 0000:00:03.5: PCI bridge to [bus 0e]
[    1.835299] pci 0000:00:03.5:   bridge window [io  0xf000-0xffff]
[    1.835982] pci 0000:00:03.5:   bridge window [mem 0x88000000-0x881fffff]
[    1.836492] pci 0000:00:03.5:   bridge window [mem 0x801300000-0x8014fffff 64bit pref]
[    1.837425] pci_bus 0000:00: resource 4 [io  0x0000-0x0cf7 window]
[    1.837432] pci_bus 0000:00: resource 5 [io  0x0d00-0xffff window]
[    1.837437] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window]
[    1.837443] pci_bus 0000:00: resource 7 [mem 0x80000000-0xdfffffff window]
[    1.837448] pci_bus 0000:00: resource 8 [mem 0xf0000000-0xfebfffff window]
[    1.837453] pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window]
[    1.837459] pci_bus 0000:01: resource 0 [io  0x1000-0x1fff]
[    1.837463] pci_bus 0000:01: resource 1 [mem 0x89a00000-0x89bfffff]
[    1.837468] pci_bus 0000:01: resource 2 [mem 0x800000000-0x8000fffff 64bit pref]
[    1.837474] pci_bus 0000:02: resource 0 [io  0x2000-0x2fff]
[    1.837478] pci_bus 0000:02: resource 1 [mem 0x89800000-0x899fffff]
[    1.837483] pci_bus 0000:02: resource 2 [mem 0x800700000-0x8008fffff 64bit pref]
[    1.837489] pci_bus 0000:03: resource 0 [io  0x3000-0x3fff]
[    1.837493] pci_bus 0000:03: resource 1 [mem 0x89600000-0x897fffff]
[    1.837498] pci_bus 0000:03: resource 2 [mem 0x800100000-0x8001fffff 64bit pref]
[    1.837504] pci_bus 0000:04: resource 0 [io  0x4000-0x4fff]
[    1.837508] pci_bus 0000:04: resource 1 [mem 0x89400000-0x895fffff]
[    1.837513] pci_bus 0000:04: resource 2 [mem 0x800200000-0x8002fffff 64bit pref]
[    1.837519] pci_bus 0000:05: resource 0 [io  0x5000-0x5fff]
[    1.837523] pci_bus 0000:05: resource 1 [mem 0x89200000-0x893fffff]
[    1.837528] pci_bus 0000:05: resource 2 [mem 0x800300000-0x8003fffff 64bit pref]
[    1.837534] pci_bus 0000:06: resource 0 [io  0x7000-0x7fff]
[    1.837538] pci_bus 0000:06: resource 1 [mem 0x89000000-0x891fffff]
[    1.837543] pci_bus 0000:06: resource 2 [mem 0x800400000-0x8004fffff 64bit pref]
[    1.837549] pci_bus 0000:07: resource 0 [io  0x8000-0x8fff]
[    1.837553] pci_bus 0000:07: resource 1 [mem 0x88e00000-0x88ffffff]
[    1.837558] pci_bus 0000:07: resource 2 [mem 0x800900000-0x800afffff 64bit pref]
[    1.837564] pci_bus 0000:08: resource 0 [io  0x9000-0x9fff]
[    1.837568] pci_bus 0000:08: resource 1 [mem 0x88c00000-0x88dfffff]
[    1.837573] pci_bus 0000:08: resource 2 [mem 0x800500000-0x8005fffff 64bit pref]
[    1.837578] pci_bus 0000:09: resource 0 [io  0xa000-0xafff]
[    1.837583] pci_bus 0000:09: resource 1 [mem 0x88a00000-0x88bfffff]
[    1.837587] pci_bus 0000:09: resource 2 [mem 0x800600000-0x8006fffff 64bit pref]
[    1.837593] pci_bus 0000:0a: resource 0 [io  0xb000-0xbfff]
[    1.837600] pci_bus 0000:0a: resource 1 [mem 0x88800000-0x889fffff]
[    1.837604] pci_bus 0000:0a: resource 2 [mem 0x800b00000-0x800cfffff 64bit pref]
[    1.837610] pci_bus 0000:0b: resource 0 [io  0xc000-0xcfff]
[    1.837615] pci_bus 0000:0b: resource 1 [mem 0x88600000-0x887fffff]
[    1.837620] pci_bus 0000:0b: resource 2 [mem 0x800d00000-0x800efffff 64bit pref]
[    1.837625] pci_bus 0000:0c: resource 0 [io  0xd000-0xdfff]
[    1.837630] pci_bus 0000:0c: resource 1 [mem 0x88400000-0x885fffff]
[    1.837635] pci_bus 0000:0c: resource 2 [mem 0x800f00000-0x8010fffff 64bit pref]
[    1.837640] pci_bus 0000:0d: resource 0 [io  0xe000-0xefff]
[    1.837645] pci_bus 0000:0d: resource 1 [mem 0x88200000-0x883fffff]
[    1.837649] pci_bus 0000:0d: resource 2 [mem 0x801100000-0x8012fffff 64bit pref]
[    1.837655] pci_bus 0000:0e: resource 0 [io  0xf000-0xffff]
[    1.837660] pci_bus 0000:0e: resource 1 [mem 0x88000000-0x881fffff]
[    1.837664] pci_bus 0000:0e: resource 2 [mem 0x801300000-0x8014fffff 64bit pref]
[    1.861014] ACPI: \_SB_.GSIG: Enabled at IRQ 22
[    1.901583] pci 0000:02:00.0: quirk_usb_early_handoff+0x0/0x8b0 took 61262 usecs
[    1.901735] PCI: CLS 0 bytes, default 64
[    1.901793] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
[    1.901796] software IO TLB: mapped [mem 0x0000000076fbe000-0x000000007afbe000] (64MB)
[    1.901928] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x328211acd6a, max_idle_ns: 440795259903 ns
[    1.902435] Trying to unpack rootfs image as initramfs...
[    1.905178] Initialise system trusted keyrings
[    1.905271] Key type blacklist registered
[    1.905585] workingset: timestamp_bits=36 max_order=21 bucket_order=0
[    1.907725] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    1.909103] fuse: init (API version 7.39)
[    1.910017] integrity: Platform Keyring initialized
[    1.910051] integrity: Machine keyring initialized
[    1.960248] Key type asymmetric registered
[    1.960258] Asymmetric key parser 'x509' registered
[    1.960647] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 243)
[    1.961019] io scheduler mq-deadline registered
[    1.990798] pcieport 0000:00:02.0: PME: Signaling with IRQ 24
[    1.991877] pcieport 0000:00:02.0: AER: enabled with IRQ 24
[    1.993958] pcieport 0000:00:02.1: PME: Signaling with IRQ 25
[    1.995120] pcieport 0000:00:02.1: AER: enabled with IRQ 25
[    2.020889] pcieport 0000:00:02.2: PME: Signaling with IRQ 26
[    2.021995] pcieport 0000:00:02.2: AER: enabled with IRQ 26
[    2.047686] pcieport 0000:00:02.3: PME: Signaling with IRQ 27
[    2.048912] pcieport 0000:00:02.3: AER: enabled with IRQ 27
[    2.074728] pcieport 0000:00:02.4: PME: Signaling with IRQ 28
[    2.075792] pcieport 0000:00:02.4: AER: enabled with IRQ 28
[    2.101924] pcieport 0000:00:02.5: PME: Signaling with IRQ 29
[    2.103020] pcieport 0000:00:02.5: AER: enabled with IRQ 29
[    2.128822] pcieport 0000:00:02.6: PME: Signaling with IRQ 30
[    2.129671] pcieport 0000:00:02.6: AER: enabled with IRQ 30
[    2.155746] pcieport 0000:00:02.7: PME: Signaling with IRQ 31
[    2.156826] pcieport 0000:00:02.7: AER: enabled with IRQ 31
[    2.181771] ACPI: \_SB_.GSIH: Enabled at IRQ 23
[    2.183318] pcieport 0000:00:03.0: PME: Signaling with IRQ 32
[    2.184364] pcieport 0000:00:03.0: AER: enabled with IRQ 32
[    2.210174] pcieport 0000:00:03.1: PME: Signaling with IRQ 33
[    2.211137] pcieport 0000:00:03.1: AER: enabled with IRQ 33
[    2.236864] pcieport 0000:00:03.2: PME: Signaling with IRQ 34
[    2.237755] pcieport 0000:00:03.2: AER: enabled with IRQ 34
[    2.263794] pcieport 0000:00:03.3: PME: Signaling with IRQ 35
[    2.264697] pcieport 0000:00:03.3: AER: enabled with IRQ 35
[    2.290607] pcieport 0000:00:03.4: PME: Signaling with IRQ 36
[    2.291492] pcieport 0000:00:03.4: AER: enabled with IRQ 36
[    2.317480] pcieport 0000:00:03.5: PME: Signaling with IRQ 37
[    2.318415] pcieport 0000:00:03.5: AER: enabled with IRQ 37
[    2.319319] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4
[    2.320070] efifb: probing for efifb
[    2.320176] efifb: showing boot graphics
[    2.321539] efifb: framebuffer at 0x84000000, using 3072k, total 3072k
[    2.321549] efifb: mode is 1024x768x32, linelength=4096, pages=1
[    2.321554] efifb: scrolling: redraw
[    2.321556] efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0
[    2.322256] fbcon: Deferring console take-over
[    2.322259] fb0: EFI VGA frame buffer device
[    2.323121] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
[    2.326074] ACPI: button: Power Button [PWRF]
[    2.506276] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
[    2.528759] 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
[    2.588957] Linux agpgart interface v0.103
[    2.618681] loop: module loaded
[    2.620996] tun: Universal TUN/TAP device driver, 1.6
[    2.621483] PPP generic driver version 2.4.2
[    2.622985] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12
[    2.623852] serio: i8042 KBD port at 0x60,0x64 irq 1
[    2.623882] serio: i8042 AUX port at 0x60,0x64 irq 12
[    2.624730] mousedev: PS/2 mouse device common for all mice
[    2.625721] rtc_cmos 00:03: RTC can wake from S4
[    2.627480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1
[    2.628749] rtc_cmos 00:03: registered as rtc0
[    2.628817] rtc_cmos 00:03: setting system clock to 2024-01-10T15:58:28 UTC (1704902308)
[    2.629164] rtc_cmos 00:03: alarms up to one day, y3k, 242 bytes nvram
[    2.629274] i2c_dev: i2c /dev entries driver
[    2.629555] device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log.
[    2.629601] device-mapper: uevent: version 1.0.3
[    2.630219] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@redhat.com
[    2.630236] intel_pstate: CPU model not supported
[    2.633758] ledtrig-cpu: registered to indicate activity on CPUs
[    2.634528] NET: Registered PF_INET6 protocol family
[    5.802576] Freeing initrd memory: 71120K
[    5.832517] Segment Routing with IPv6
[    5.832616] In-situ OAM (IOAM) with IPv6
[    5.832784] NET: Registered PF_PACKET protocol family
[    5.833108] Key type dns_resolver registered
[    5.836027] IPI shorthand broadcast: enabled
[    5.876292] sched_clock: Marking stable (5872010450, 1708262)->(5969729405, -96010693)
[    5.877479] registered taskstats version 1
[    5.878154] Loading compiled-in X.509 certificates
[    5.880926] Loaded X.509 cert 'Build time autogenerated kernel key: 6bf7f016fb3f6df81ed8362a07357c17158fcd93'
[    5.932788] Key type .fscrypt registered
[    5.932793] Key type fscrypt-provisioning registered
[    6.004570] Key type encrypted registered
[    6.004593] AppArmor: AppArmor sha1 policy hashing enabled
[    6.005338] integrity: Loading X.509 certificate: UEFI:db
[    6.005640] integrity: Loaded X.509 cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53'
[    6.005645] integrity: Loading X.509 certificate: UEFI:db
[    6.006040] integrity: Loaded X.509 cert 'Microsoft Corporation UEFI CA 2011: 13adbf4309bd82709c8cd54f316ed522988a1bd4'
[    6.008003] ima: No TPM chip found, activating TPM-bypass!
[    6.008050] Loading compiled-in module X.509 certificates
[    6.011204] Loaded X.509 cert 'Build time autogenerated kernel key: 6bf7f016fb3f6df81ed8362a07357c17158fcd93'
[    6.011218] ima: Allocated hash algorithm: sha1
[    6.011285] ima: No architecture policies found
[    6.011504] evm: Initialising EVM extended attributes:
[    6.011509] evm: security.selinux
[    6.011512] evm: security.SMACK64
[    6.011515] evm: security.SMACK64EXEC
[    6.011518] evm: security.SMACK64TRANSMUTE
[    6.011521] evm: security.SMACK64MMAP
[    6.011524] evm: security.apparmor
[    6.011527] evm: security.ima
[    6.011530] evm: security.capability
[    6.011533] evm: HMAC attrs: 0x1
[    6.016944] PM:   Magic number: 8:752:992
[    6.017110] memory memory35: hash matches
[    6.018685] RAS: Correctable Errors collector initialized.
[    6.018737] clk: Disabling unused clocks
[    6.020439] Freeing unused decrypted memory: 2028K
[    6.022089] Freeing unused kernel image (initmem) memory: 3040K
[    6.041874] Write protecting the kernel read-only data: 32768k
[    6.043557] Freeing unused kernel image (rodata/data gap) memory: 1328K
[    6.165967] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[    6.165973] x86/mm: Checking user space page tables
[    6.281432] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[    6.281497] Run /init as init process
[    6.281502]   with arguments:
[    6.281506]     /init
[    6.281508]   with environment:
[    6.281511]     HOME=/
[    6.281513]     TERM=linux
[    6.281516]     BOOT_IMAGE=/boot/vmlinuz-6.7.0-x64v3-dbg
[    7.286219] xhci_hcd 0000:02:00.0: xHCI Host Controller
[    7.286326] xhci_hcd 0000:02:00.0: new USB bus registered, assigned bus number 1
[    7.286894] xhci_hcd 0000:02:00.0: hcc params 0x00087001 hci version 0x100 quirks 0x0000000000000010
[    7.295261] xhci_hcd 0000:02:00.0: xHCI Host Controller
[    7.295325] xhci_hcd 0000:02:00.0: new USB bus registered, assigned bus number 2
[    7.295360] xhci_hcd 0000:02:00.0: Host supports USB 3.0 SuperSpeed
[    7.296604] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.07
[    7.296616] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    7.296623] usb usb1: Product: xHCI Host Controller
[    7.296632] usb usb1: Manufacturer: Linux 6.7.0-x64v3-dbg xhci-hcd
[    7.296638] usb usb1: SerialNumber: 0000:02:00.0
[    7.297888] ACPI: bus type drm_connector registered
[    7.301219] hub 1-0:1.0: USB hub found
[    7.301538] hub 1-0:1.0: 15 ports detected
[    7.301580] virtio_blk virtio2: 4/0/0 default/read/poll queues
[    7.335550] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[    7.338783] ahci 0000:00:1f.2: version 3.0
[    7.353392] virtio_blk virtio2: [vda] 83886080 512-byte logical blocks (42.9 GB/40.0 GiB)
[    7.383150]  vda: vda1 vda2 vda3
[    7.389822] virtio_blk virtio5: 4/0/0 default/read/poll queues
[    7.400447] virtio_blk virtio5: [vdb] 3907035136 512-byte logical blocks (2.00 TB/1.82 TiB)
[    7.403157] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    7.405090] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.07
[    7.405101] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    7.405108] usb usb2: Product: xHCI Host Controller
[    7.405114] usb usb2: Manufacturer: Linux 6.7.0-x64v3-dbg xhci-hcd
[    7.405120] usb usb2: SerialNumber: 0000:02:00.0
[    7.411098] hub 2-0:1.0: USB hub found
[    7.411394] hub 2-0:1.0: 15 ports detected
[    7.427195] ACPI: \_SB_.GSIA: Enabled at IRQ 16
[    7.428437] i801_smbus 0000:00:1f.3: Enabling SMBus device
[    7.428689] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt
[    7.430854] i2c i2c-0: 1/1 memory slots populated (from DMI)
[    7.430862] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD
[    7.436893] ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode
[    7.437017] ahci 0000:00:1f.2: flags: 64bit ncq only 
[    7.460003] virtio_net virtio0 enp1s0: renamed from eth0
[    7.477958] scsi host0: ahci
[    7.482302] scsi host1: ahci
[    7.487136] scsi host2: ahci
[    7.496065] scsi host3: ahci
[    7.504644] scsi host4: ahci
[    7.507873] scsi host5: ahci
[    7.512580] ata1: SATA max UDMA/133 abar m4096@0x89c46000 port 0x89c46100 irq 58 lpm-pol 0
[    7.512597] ata2: SATA max UDMA/133 abar m4096@0x89c46000 port 0x89c46180 irq 58 lpm-pol 0
[    7.512604] ata3: SATA max UDMA/133 abar m4096@0x89c46000 port 0x89c46200 irq 58 lpm-pol 0
[    7.512610] ata4: SATA max UDMA/133 abar m4096@0x89c46000 port 0x89c46280 irq 58 lpm-pol 0
[    7.512616] ata5: SATA max UDMA/133 abar m4096@0x89c46000 port 0x89c46300 irq 58 lpm-pol 0
[    7.512623] ata6: SATA max UDMA/133 abar m4096@0x89c46000 port 0x89c46380 irq 58 lpm-pol 0
[    7.522226] ACPI: \_SB_.GSIF: Enabled at IRQ 21
[    7.524032] qxl 0000:00:01.0: vgaarb: deactivate vga console
[    7.524198] [drm] Device Version 0.0
[    7.524201] [drm] Compression level 0 log level 0
[    7.524204] [drm] 12286 io pages at offset 0x1000000
[    7.524207] [drm] 16777216 byte draw area at offset 0x0
[    7.524210] [drm] RAM header offset: 0x3ffe000
[    7.524762] [drm] qxl: 16M of VRAM memory size
[    7.524766] [drm] qxl: 63M of IO pages memory ready (VRAM domain)
[    7.524768] [drm] qxl: 64M of Surface memory size
[    7.527460] [drm] slot 0 (main): base 0x84000000, size 0x03ffe000
[    7.527551] [drm] slot 1 (surfaces): base 0x80000000, size 0x04000000
[    7.534567] [drm] Initialized qxl 0.1.0 20120117 for 0000:00:01.0 on minor 0
[    7.537637] fbcon: qxldrmfb (fb0) is primary device
[    7.537642] fbcon: Deferring console take-over
[    7.537647] qxl 0000:00:01.0: [drm] fb0: qxldrmfb frame buffer device
[    7.645854] usb 1-1: new high-speed USB device number 2 using xhci_hcd
[    7.796616] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[    7.796638] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[    7.796651] usb 1-1: Product: QEMU USB Tablet
[    7.796662] usb 1-1: Manufacturer: QEMU
[    7.796672] usb 1-1: SerialNumber: 28754-0000:00:02.1:00.0-1
[    7.826443] ata2: SATA link down (SStatus 0 SControl 300)
[    7.826804] ata4: SATA link down (SStatus 0 SControl 300)
[    7.827148] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[    7.827518] ata3: SATA link down (SStatus 0 SControl 300)
[    7.827816] ata5: SATA link down (SStatus 0 SControl 300)
[    7.828111] ata6: SATA link down (SStatus 0 SControl 300)
[    7.828261] ata1.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100
[    7.828298] ata1.00: applying bridge limits
[    7.828490] ata1.00: configured for UDMA/100
[    7.830664] scsi 0:0:0:0: CD-ROM            QEMU     QEMU DVD-ROM     2.5+ PQ: 0 ANSI: 5
[    7.880208] hid: raw HID events driver (C) Jiri Kosina
[    7.902474] sr 0:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray
[    7.902545] cdrom: Uniform CD-ROM driver Revision: 3.20
[    7.948477] sr 0:0:0:0: Attached scsi CD-ROM sr0
[    7.950877] sr 0:0:0:0: Attached scsi generic sg0 type 5
[    7.993291] usbcore: registered new interface driver usbhid
[    7.993305] usbhid: USB HID core driver
[    8.019421] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input4
[    8.025216] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:02:00.0-1/input0
[    8.463535] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3
[    8.497770] raid6: avx2x4   gen() 14624 MB/s
[    8.565763] raid6: avx2x2   gen() 10267 MB/s
[    8.633746] raid6: avx2x1   gen()  5541 MB/s
[    8.633755] raid6: using algorithm avx2x4 gen() 14624 MB/s
[    8.701765] raid6: .... xor() 10605 MB/s, rmw enabled
[    8.701773] raid6: using avx2x2 recovery algorithm
[    8.706493] xor: automatically using best checksumming function   avx       
[    8.864562] Btrfs loaded, zoned=yes, fsverity=yes
[    9.110889] PM: Image not found (code -22)
[    9.186690] fbcon: Taking over console
[    9.191950] Console: switching to colour frame buffer device 128x48
[    9.215822] EXT4-fs (vda2): mounted filesystem 5d5180c8-c108-490a-ba5e-16e23b89e553 ro with ordered data mode. Quota mode: none.
[    9.755155] systemd[1]: Inserted module 'autofs4'
[    9.881593] systemd[1]: systemd 255.2-3 running in system mode (+PAM +AUDIT +SELINUX +APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified)
[    9.881614] systemd[1]: Detected virtualization kvm.
[    9.881655] systemd[1]: Detected architecture x86-64.
[    9.884538] systemd[1]: Hostname set to <debian>.
[   10.434941] systemd[1]: Queued start job for default target graphical.target.
[   10.476200] systemd[1]: Created slice system-getty.slice - Slice /system/getty.
[   10.478724] systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe.
[   10.480854] systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck.
[   10.482914] systemd[1]: Created slice user.slice - User and Session Slice.
[   10.483319] systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch.
[   10.484547] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point.
[   10.484635] systemd[1]: Expecting device dev-disk-by\x2duuid-6A96\x2dD69D.device - /dev/disk/by-uuid/6A96-D69D...
[   10.484654] systemd[1]: Expecting device dev-disk-by\x2duuid-7b071056\x2d90f4\x2d423a\x2da763\x2d8752b17f0d24.device - /dev/disk/by-uuid/7b071056-90f4-423a-a763-8752b17f0d24...
[   10.484672] systemd[1]: Expecting device dev-vdb.device - /dev/vdb...
[   10.484700] systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes.
[   10.484733] systemd[1]: Reached target nss-user-lookup.target - User and Group Name Lookups.
[   10.484756] systemd[1]: Reached target remote-fs.target - Remote File Systems.
[   10.484775] systemd[1]: Reached target slices.target - Slice Units.
[   10.484809] systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes.
[   10.490948] systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket.
[   10.491537] systemd[1]: Listening on systemd-fsckd.socket - fsck to fsckd communication Socket.
[   10.491947] systemd[1]: Listening on systemd-initctl.socket - initctl Compatibility Named Pipe.
[   10.492742] systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log).
[   10.493470] systemd[1]: Listening on systemd-journald.socket - Journal Socket.
[   10.493592] systemd[1]: systemd-pcrextend.socket - TPM2 PCR Extension (Varlink) was skipped because of an unmet condition check (ConditionSecurity=measured-uki).
[   10.494877] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket.
[   10.495442] systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket.
[   10.500841] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System...
[   10.505342] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System...
[   10.509546] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System...
[   10.509904] systemd[1]: sys-kernel-tracing.mount - Kernel Trace File System was skipped because of an unmet condition check (ConditionPathExists=/sys/kernel/tracing).
[   10.520033] systemd[1]: Starting keyboard-setup.service - Set the console keyboard layout...
[   10.531078] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes...
[   10.539755] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs...
[   10.554459] systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod...
[   10.564179] systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm...
[   10.589546] systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore...
[   10.603358] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse...
[   10.616239] systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop...
[   10.616424] systemd[1]: systemd-fsck-root.service - File System Check on Root Device was skipped because of an unmet condition check (ConditionPathExists=!/run/initramfs/fsck-root).
[   10.635312] systemd[1]: Starting systemd-journald.service - Journal Service...
[   10.651778] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules...
[   10.651818] systemd[1]: systemd-pcrmachine.service - TPM2 PCR Machine ID Measurement was skipped because of an unmet condition check (ConditionSecurity=measured-uki).
[   10.656765] pstore: Using crash dump compression: deflate
[   10.675810] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems...
[   10.676629] systemd[1]: systemd-tpm2-setup-early.service - TPM2 SRK Setup (Early) was skipped because of an unmet condition check (ConditionSecurity=measured-uki).
[   10.679505] pstore: Registered efi_pstore as persistent store backend
[   10.690417] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices...
[   10.708533] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System.
[   10.715611] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System.
[   10.716743] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System.
[   10.725185] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes.
[   10.727780] systemd[1]: modprobe@configfs.service: Deactivated successfully.
[   10.729234] systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs.
[   10.738784] systemd[1]: modprobe@dm_mod.service: Deactivated successfully.
[   10.740485] systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod.
[   10.743092] systemd[1]: modprobe@drm.service: Deactivated successfully.
[   10.744903] systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm.
[   10.748440] systemd[1]: modprobe@efi_pstore.service: Deactivated successfully.
[   10.750051] systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore.
[   10.752292] systemd[1]: modprobe@fuse.service: Deactivated successfully.
[   10.753990] systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse.
[   10.756325] systemd[1]: modprobe@loop.service: Deactivated successfully.
[   10.757942] systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop.
[   10.791085] systemd-journald[268]: Collecting audit messages is disabled.
[   10.795371] systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System...
[   10.814180] systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System...
[   10.814572] systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met.
[   10.819807] lp: driver loaded but no devices found
[   10.827828] systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully...
[   10.835416] systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System.
[   10.838964] EXT4-fs (vda2): re-mounted 5d5180c8-c108-490a-ba5e-16e23b89e553 r/w. Quota mode: none.
[   10.860093] ppdev: user-space parallel port driver
[   10.872051] systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems.
[   10.873647] systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System.
[   10.879399] systemd[1]: systemd-hwdb-update.service - Rebuild Hardware Database was skipped because of an unmet condition check (ConditionNeedsUpdate=/etc).
[   10.879593] systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore).
[   10.890174] systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed...
[   10.890241] systemd[1]: systemd-tpm2-setup.service - TPM2 SRK Setup was skipped because of an unmet condition check (ConditionSecurity=measured-uki).
[   11.000636] systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules.
[   11.014614] systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables...
[   11.022228] systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully.
[   11.023744] systemd[1]: systemd-sysusers.service - Create System Users was skipped because no trigger condition checks were met.
[   11.069331] systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev...
[   11.075237] systemd[1]: Finished keyboard-setup.service - Set the console keyboard layout.
[   11.092628] systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed.
[   11.129793] systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables.
[   11.153142] systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev.
[   11.154440] systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems.
[   11.214390] systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files...
[   11.290614] systemd[1]: Started systemd-journald.service - Journal Service.
[   11.365049] systemd-journald[268]: Received client request to flush runtime journal.
[   11.408275] systemd-journald[268]: /var/log/journal/e0f24451ec2e403faa0a33be9a2602cf/system.journal: Journal file uses a different sequence number ID, rotating.
[   11.408302] systemd-journald[268]: Rotating system journal.
[   12.431979] BTRFS: device fsid 1e4fb969-7384-48fb-9377-6fb8817279ee devid 1 transid 38224 /dev/vdb scanned by mount (364)
[   12.434302] BTRFS info (device vdb): first mount of filesystem 1e4fb969-7384-48fb-9377-6fb8817279ee
[   12.434331] BTRFS info (device vdb): using crc32c (crc32c-intel) checksum algorithm
[   12.434343] BTRFS info (device vdb): enabling auto defrag
[   12.434350] BTRFS info (device vdb): force zstd compression, level 3
[   12.434357] BTRFS info (device vdb): using free space tree
[   12.570488] Adding 999420k swap on /dev/vda3.  Priority:-2 extents:1 across:999420k 
[   12.871505] iTCO_vendor_support: vendor-support=0
[   12.886204] BTRFS info (device vdb): auto enabling async discard
[   12.955404] virtiofs virtio6: virtio_fs_setup_dax: No cache capability
[   12.984055] iTCO_wdt iTCO_wdt.1.auto: Found a ICH9 TCO device (Version=2, TCOBASE=0x0660)
[   12.985364] input: PC Speaker as /devices/platform/pcspkr/input/input5
[   13.101970] iTCO_wdt iTCO_wdt.1.auto: initialized. heartbeat=30 sec (nowayout=0)
[   13.157741] audit: type=1400 audit(1704902319.024:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lsb_release" pid=409 comm="apparmor_parser"
[   13.157771] audit: type=1400 audit(1704902319.024:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=412 comm="apparmor_parser"
[   13.157788] audit: type=1400 audit(1704902319.024:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=412 comm="apparmor_parser"
[   13.157805] audit: type=1400 audit(1704902319.024:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="mysqld_akonadi" pid=411 comm="apparmor_parser"
[   13.157823] audit: type=1400 audit(1704902319.024:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="mariadbd_akonadi" pid=410 comm="apparmor_parser"
[   13.204212] audit: type=1400 audit(1704902319.072:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="postgresql_akonadi" pid=415 comm="apparmor_parser"
[   13.218925] audit: type=1400 audit(1704902319.088:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/man" pid=419 comm="apparmor_parser"
[   13.218977] audit: type=1400 audit(1704902319.088:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_filter" pid=419 comm="apparmor_parser"
[   13.219021] audit: type=1400 audit(1704902319.088:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_groff" pid=419 comm="apparmor_parser"
[   13.222099] audit: type=1400 audit(1704902319.092:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/akonadiserver" pid=418 comm="apparmor_parser"
[   13.291799] RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer
[   13.400953] Error: Driver 'pcspkr' is already registered, aborting...
[   13.481786] cryptd: max_cpu_qlen set to 1000
[   13.605329] AVX2 version of gcm_enc/dec engaged.
[   13.605933] AES CTR mode by8 optimization enabled
[   13.765655] snd_hda_codec_generic hdaudioC0D0: autoconfig for Generic: line_outs=1 (0x3/0x0/0x0/0x0/0x0) type:line
[   13.765670] snd_hda_codec_generic hdaudioC0D0:    speaker_outs=0 (0x0/0x0/0x0/0x0/0x0)
[   13.765678] snd_hda_codec_generic hdaudioC0D0:    hp_outs=0 (0x0/0x0/0x0/0x0/0x0)
[   13.765684] snd_hda_codec_generic hdaudioC0D0:    mono: mono_out=0x0
[   13.766792] snd_hda_codec_generic hdaudioC0D0:    inputs:
[   13.766798] snd_hda_codec_generic hdaudioC0D0:      Line=0x5
[   14.657109] NET: Registered PF_QIPCRTR protocol family
[   24.929953] systemd-journald[268]: /var/log/journal/e0f24451ec2e403faa0a33be9a2602cf/user-1000.journal: Journal file uses a different sequence number ID, rotating.
[  125.640729] BTRFS info (device vdb): last unmount of filesystem 1e4fb969-7384-48fb-9377-6fb8817279ee
[  134.660697] BTRFS: device fsid 1e4fb969-7384-48fb-9377-6fb8817279ee devid 1 transid 38225 /dev/vdb scanned by mount (870)
[  134.666195] BTRFS info (device vdb): first mount of filesystem 1e4fb969-7384-48fb-9377-6fb8817279ee
[  134.666230] BTRFS info (device vdb): using crc32c (crc32c-intel) checksum algorithm
[  134.666243] BTRFS info (device vdb): enabling auto defrag
[  134.666250] BTRFS info (device vdb): force zstd compression, level 3
[  134.666256] BTRFS info (device vdb): using free space tree
[  134.854263] BTRFS info (device vdb): auto enabling async discard
[  168.192083] BTRFS info (device vdb): scrub: started on devid 1
[  171.700526] BTRFS critical (device vdb): unable to find chunk map for logical 2214744064 length 4096
[  171.700738] BTRFS critical (device vdb): unable to find chunk map for logical 2214744064 length 45056
[  171.700951] ==================================================================
[  171.700962] BUG: KASAN: slab-use-after-free in __blk_rq_map_sg+0x18f/0x7c0
[  171.700978] Read of size 8 at addr ffff8881013c9040 by task btrfs/909

[  171.700990] CPU: 0 PID: 909 Comm: btrfs Not tainted 6.7.0-x64v3-dbg #11 c50636e9419a8354555555245df535e380563b2b
[  171.701004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 2023.11-2 12/24/2023
[  171.701008] Call Trace:
[  171.701015]  <TASK>
[  171.701019]  dump_stack_lvl+0x43/0x60
[  171.701040]  print_report+0xcf/0x640
[  171.701055]  ? _raw_read_unlock_irqrestore+0x50/0x50
[  171.701070]  ? __virt_addr_valid+0xd4/0x150
[  171.701084]  ? __blk_rq_map_sg+0x18f/0x7c0
[  171.701093]  kasan_report+0xa6/0xd0
[  171.701104]  ? __blk_rq_map_sg+0x18f/0x7c0
[  171.701115]  __blk_rq_map_sg+0x18f/0x7c0
[  171.701126]  ? bio_split_rw+0x400/0x400
[  171.701136]  virtblk_prep_rq.isra.0+0x215/0x6a0 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[  171.701157]  ? virtblk_add_req+0x1d0/0x1d0 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[  171.701176]  ? bio_init+0x1b3/0x1d0
[  171.701190]  virtio_queue_rqs+0xc4/0x310 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[  171.701206]  ? virtblk_attrs_are_visible+0x80/0x80 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[  171.701223]  blk_mq_flush_plug_list.part.0+0x780/0x860
[  171.701236]  ? blk_mq_try_issue_list_directly+0x1c0/0x1c0
[  171.701246]  ? btrfs_submit_bio+0x11/0x20 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.701450]  ? scrub_submit_initial_read+0x207/0x6e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.701653]  ? btrfs_lookup_csums_bitmap+0x2a2/0x630 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.701793] BTRFS critical (device vdb): unable to find chunk map for logical 2214744064 length 4096
[  171.701800] BTRFS critical (device vdb): unable to find chunk map for logical 2214744064 length 4096
[  171.701832] BTRFS critical (device vdb): unable to find chunk map for logical 2214748160 length 4096
[  171.702023]  __blk_flush_plug+0x1ba/0x220
[  171.702196] BTRFS critical (device vdb): unable to find chunk map for logical 2214748160 length 4096
[  171.702368]  ? blk_start_plug_nr_ios+0xc0/0xc0
[  171.702561] BTRFS critical (device vdb): unable to find chunk map for logical 2214752256 length 4096
[  171.702540]  ? fill_one_extent_info+0x142/0x180 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.702736] BTRFS critical (device vdb): unable to find chunk map for logical 2214752256 length 4096
[  171.702738]  blk_finish_plug+0x3b/0x60
[  171.702941] BTRFS critical (device vdb): unable to find chunk map for logical 2214756352 length 4096
[  171.702921]  submit_initial_group_read+0x10a/0x290 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.703116] BTRFS critical (device vdb): unable to find chunk map for logical 2214756352 length 4096
[  171.703119]  ? scrub_submit_initial_read+0x6e0/0x6e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.703314] BTRFS critical (device vdb): unable to find chunk map for logical 2214760448 length 4096
[  171.703296]  ? btrfs_check_eb_owner+0x2d0/0x2d0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.703489] BTRFS critical (device vdb): unable to find chunk map for logical 2214760448 length 4096
[  171.703491]  flush_scrub_stripes+0x38e/0x430 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.703693] BTRFS critical (device vdb): unable to find chunk map for logical 2214764544 length 4096
[  171.703668]  ? scrub_write_sectors+0x2e0/0x2e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.703875] BTRFS critical (device vdb): unable to find chunk map for logical 2214764544 length 4096
[  171.703877]  ? scrub_simple_mirror.isra.0+0x1ff/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.704072] BTRFS critical (device vdb): unable to find chunk map for logical 2214768640 length 4096
[  171.704051]  ? scrub_simple_mirror.isra.0+0x93/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.704303] BTRFS critical (device vdb): unable to find chunk map for logical 2214768640 length 4096
[  171.704252]  scrub_stripe+0x82a/0xae0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.704505] BTRFS critical (device vdb): unable to find chunk map for logical 2214772736 length 4096
[  171.704489]  ? scrub_simple_mirror.isra.0+0x310/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.704690] BTRFS critical (device vdb): unable to find chunk map for logical 2214772736 length 4096
[  171.704697]  ? fill_one_extent_info+0x180/0x180 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.704937] BTRFS critical (device vdb): unable to find chunk map for logical 2214776832 length 4096
[  171.704909]  ? __lookup_extent_mapping+0x132/0x1b0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.705157] BTRFS critical (device vdb): unable to find chunk map for logical 2214776832 length 4096
[  171.705160]  scrub_chunk+0x178/0x200 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.705415] BTRFS critical (device vdb): unable to find chunk map for logical 2214780928 length 4096
[  171.705390]  scrub_enumerate_chunks+0x4bc/0xa30 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.705617] BTRFS critical (device vdb): unable to find chunk map for logical 2214780928 length 4096
[  171.705625]  ? scrub_chunk+0x200/0x200 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.705826]  ? free_unref_page+0x12e/0x1c0
[  171.705841]  ? _raw_spin_lock+0x7c/0xd0
[  171.705848] BTRFS critical (device vdb): unable to find chunk map for logical 2214785024 length 4096
[  171.705848]  ? _raw_write_lock_nested+0xd0/0xd0
[  171.705857]  btrfs_scrub_dev+0x398/0x810 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.706024] BTRFS critical (device vdb): unable to find chunk map for logical 2214785024 length 4096
[  171.706029]  ? scrub_stripe_read_repair_worker+0xce0/0xce0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.706203]  ? _copy_from_user+0x42/0x90
[  171.706229] BTRFS error (device vdb): fixed up error at logical 2214723584 on dev /dev/vdb physical 2214723584
[  171.706235] BTRFS error (device vdb): fixed up error at logical 2214723584 on dev /dev/vdb physical 2214723584
[  171.706244] BTRFS error (device vdb): fixed up error at logical 2214723584 on dev /dev/vdb physical 2214723584
[  171.706249] BTRFS error (device vdb): fixed up error at logical 2214723584 on dev /dev/vdb physical 2214723584
[  171.706254] BTRFS error (device vdb): fixed up error at logical 2214723584 on dev /dev/vdb physical 2214723584
[  171.706212]  btrfs_ioctl+0x4b9/0x3020 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.706373]  ? kasan_save_stack+0x2b/0x40
[  171.706380]  ? kasan_save_stack+0x1c/0x40
[  171.706387]  ? kasan_set_track+0x21/0x30
[  171.706393]  ? __kasan_slab_alloc+0x85/0x90
[  171.706400]  ? kmem_cache_alloc_node+0x19f/0x320
[  171.706406]  ? alloc_io_context+0x18/0x110
[  171.706412]  ? set_task_ioprio+0x118/0x1a0
[  171.706417]  ? __do_sys_ioprio_set+0x7a/0x3d0
[  171.706424]  ? do_syscall_64+0x5d/0xe0
[  171.706433]  ? btrfs_ioctl_get_supported_features+0x20/0x20 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.706606]  ? __pte_offset_map+0x152/0x1f0
[  171.706614]  ? __mod_memcg_lruvec_state+0xcb/0x160
[  171.706625]  ? set_ptes.isra.0+0x80/0x130
[  171.706630]  ? do_vfs_ioctl+0x9ec/0xc20
[  171.706641]  ? vfs_fileattr_set+0x4c0/0x4c0
[  171.706648]  ? folio_batch_add_and_move+0x76/0x90
[  171.706660]  ? __rcu_read_unlock+0x43/0x70
[  171.706672]  ? do_anonymous_page+0x3d5/0x610
[  171.706681]  ? __handle_mm_fault+0xe83/0x1220
[  171.706688]  ? _raw_spin_lock_irq+0x82/0xe0
[  171.706695]  ? _raw_write_lock_irq+0xe0/0xe0
[  171.706701]  ? copy_page_range+0x1ac0/0x1ac0
[  171.706709]  ? __rcu_read_unlock+0x43/0x70
[  171.706718]  ? __fget_light+0xfa/0x1c0
[  171.706730]  __x64_sys_ioctl+0xbd/0x100
[  171.706740]  do_syscall_64+0x5d/0xe0
[  171.706748]  ? __rcu_read_unlock+0x43/0x70
[  171.706759]  ? fpregs_assert_state_consistent+0x51/0x60
[  171.706772]  ? exit_to_user_mode_prepare+0x2b/0x130
[  171.706782]  ? syscall_exit_to_user_mode+0x30/0x50
[  171.706790]  ? do_syscall_64+0x6c/0xe0
[  171.706798]  ? exit_to_user_mode_prepare+0x2b/0x130
[  171.706807]  ? syscall_exit_to_user_mode+0x30/0x50
[  171.706815]  ? do_syscall_64+0x6c/0xe0
[  171.706822]  ? exit_to_user_mode_prepare+0x2b/0x130
[  171.706833]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  171.706849] RIP: 0033:0x7f47e5e0952b
[  171.706856] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  171.706864] RSP: 002b:00007f47e5bffc80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  171.706878] RAX: ffffffffffffffda RBX: 000055f3ec8d0420 RCX: 00007f47e5e0952b
[  171.706885] RDX: 000055f3ec8d0420 RSI: 00000000c400941b RDI: 0000000000000003
[  171.706890] RBP: 0000000000000000 R08: 00007f47e5c006c0 R09: 0000000000000000
[  171.706895] R10: 0000000000000000 R11: 0000000000000246 R12: fffffffffffffdc0
[  171.706902] R13: 0000000000000000 R14: 00007fff7ff9f400 R15: 00007f47e5400000
[  171.706913]  </TASK>

[  171.706919] Allocated by task 909:
[  171.706925]  kasan_save_stack+0x1c/0x40
[  171.706934]  kasan_set_track+0x21/0x30
[  171.706942]  __kasan_slab_alloc+0x85/0x90
[  171.706951]  kmem_cache_alloc+0x174/0x2f0
[  171.706959]  bvec_alloc+0x71/0xe0
[  171.706965]  bio_alloc_bioset+0x2c1/0x420
[  171.706973]  btrfs_bio_alloc+0x29/0x50 [btrfs]
[  171.707160]  scrub_submit_initial_read+0x165/0x6e0 [btrfs]
[  171.707355]  submit_initial_group_read+0xfc/0x290 [btrfs]
[  171.707551]  flush_scrub_stripes+0x38e/0x430 [btrfs]
[  171.707728]  scrub_stripe+0x82a/0xae0 [btrfs]
[  171.707883]  scrub_chunk+0x178/0x200 [btrfs]
[  171.708038]  scrub_enumerate_chunks+0x4bc/0xa30 [btrfs]
[  171.708193]  btrfs_scrub_dev+0x398/0x810 [btrfs]
[  171.708374]  btrfs_ioctl+0x4b9/0x3020 [btrfs]
[  171.708536]  __x64_sys_ioctl+0xbd/0x100
[  171.708543]  do_syscall_64+0x5d/0xe0
[  171.708549]  entry_SYSCALL_64_after_hwframe+0x63/0x6b

[  171.708559] Freed by task 909:
[  171.708562]  kasan_save_stack+0x1c/0x40
[  171.708568]  kasan_set_track+0x21/0x30
[  171.708574]  kasan_save_free_info+0x27/0x40
[  171.708582]  ____kasan_slab_free+0x166/0x1c0
[  171.708588]  slab_free_freelist_hook+0xd1/0x190
[  171.708594]  kmem_cache_free+0x190/0x2c0
[  171.708600]  bio_free+0x4b/0x70
[  171.708605]  scrub_read_endio+0x7c/0x160 [btrfs]
[  171.708761]  btrfs_submit_chunk+0x786/0xbe0 [btrfs]
[  171.708913]  btrfs_submit_bio+0x11/0x20 [btrfs]
[  171.709069]  scrub_submit_initial_read+0x207/0x6e0 [btrfs]
[  171.709268]  submit_initial_group_read+0xfc/0x290 [btrfs]
[  171.709463]  flush_scrub_stripes+0x38e/0x430 [btrfs]
[  171.709658]  scrub_stripe+0x82a/0xae0 [btrfs]
[  171.709850]  scrub_chunk+0x178/0x200 [btrfs]
[  171.710040]  scrub_enumerate_chunks+0x4bc/0xa30 [btrfs]
[  171.710237]  btrfs_scrub_dev+0x398/0x810 [btrfs]
[  171.710393]  btrfs_ioctl+0x4b9/0x3020 [btrfs]
[  171.710553]  __x64_sys_ioctl+0xbd/0x100
[  171.710561]  do_syscall_64+0x5d/0xe0
[  171.710566]  entry_SYSCALL_64_after_hwframe+0x63/0x6b

[  171.710581] The buggy address belongs to the object at ffff8881013c9040
                which belongs to the cache biovec-16 of size 256
[  171.710586] The buggy address is located 0 bytes inside of
                freed 256-byte region [ffff8881013c9040, ffff8881013c9140)

[  171.710593] The buggy address belongs to the physical page:
[  171.710596] page:0000000082779992 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1013c8
[  171.710601] head:0000000082779992 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  171.710606] flags: 0x17ffffc0000840(slab|head|node=0|zone=2|lastcpupid=0x1fffff)
[  171.710614] page_type: 0xffffffff()
[  171.710619] raw: 0017ffffc0000840 ffff8881000c7400 dead000000000122 0000000000000000
[  171.710625] raw: 0000000000000000 0000000080190019 00000001ffffffff 0000000000000000
[  171.710628] page dumped because: kasan: bad access detected

[  171.710632] Memory state around the buggy address:
[  171.710636]  ffff8881013c8f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.710640]  ffff8881013c8f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.710645] >ffff8881013c9000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  171.710648]                                            ^
[  171.710651]  ffff8881013c9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.710656]  ffff8881013c9100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  171.710660] ==================================================================
[  171.711056] Disabling lock debugging due to kernel taint
[  171.711142] ------------[ cut here ]------------
[  171.711146] WARNING: CPU: 1 PID: 909 at block/blk-merge.c:584 __blk_rq_map_sg+0x789/0x7c0
[  171.711158] Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr intel_rapl_msr intel_rapl_common crct10dif_pclmul snd_hda_codec_generic polyval_clmulni ledtrig_audio polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 snd_hda_intel aesni_intel snd_intel_dspcfg snd_intel_sdw_acpi crypto_simd snd_hda_codec snd_hda_core cryptd snd_hwdep binfmt_misc snd_pcm rapl snd_timer snd iTCO_wdt soundcore pcspkr virtiofs intel_pmc_bxt iTCO_vendor_support nls_iso8859_1 joydev input_leds mac_hid serio_raw msr parport_pc ppdev lp parport efi_pstore nfnetlink dmi_sysfs qemu_fw_cfg virtio_rng ip_tables x_tables autofs4 btrfs xor raid6_pq libcrc32c hid_generic usbhid hid qxl drm_ttm_helper ttm psmouse crc32_pclmul drm_kms_helper i2c_i801 ahci lpc_ich virtio_net libahci i2c_smbus virtio_blk drm net_failover xhci_pci failover xhci_pci_renesas
[  171.711410] CPU: 1 PID: 909 Comm: btrfs Tainted: G    B              6.7.0-x64v3-dbg #11 c50636e9419a8354555555245df535e380563b2b
[  171.711420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 2023.11-2 12/24/2023
[  171.711425] RIP: 0010:__blk_rq_map_sg+0x789/0x7c0
[  171.711434] Code: 10 e9 ab fa ff ff 4c 8b 6c 24 08 8b 74 24 3c 8b 6c 24 74 01 74 24 40 e9 e3 fa ff ff 49 8d 7e 7c e8 3c e5 c3 ff e9 e9 fb ff ff <0f> 0b e9 e2 fb ff ff 48 8d bc 24 a8 00 00 00 4c 89 ee 48 89 4c 24
[  171.711442] RSP: 0018:ffff888107ae70e0 EFLAGS: 00010202
[  171.711449] RAX: 0000000000000008 RBX: ffff8881013c49a0 RCX: ffffffffaa010583
[  171.711456] RDX: dffffc0000000000 RSI: 0000000000000005 RDI: ffff8881256f60bc
[  171.711461] RBP: 0000000000000c73 R08: 0000000000000001 R09: 0000000000000000
[  171.711466] R10: ffffffffac942e27 R11: 0000000000000001 R12: 0000000000000001
[  171.711471] R13: ffff8881256f605c R14: ffff8881256f6040 R15: ffff888107ae7248
[  171.711477] FS:  00007f47e5c006c0(0000) GS:ffff888237880000(0000) knlGS:0000000000000000
[  171.711484] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.711489] CR2: 00007fc9beb8fa10 CR3: 0000000126db0002 CR4: 00000000003706f0
[  171.711498] Call Trace:
[  171.711502]  <TASK>
[  171.711506]  ? __warn+0x8e/0x110
[  171.711521]  ? __blk_rq_map_sg+0x789/0x7c0
[  171.711530]  ? report_bug+0x18c/0x1d0
[  171.711540]  ? handle_bug+0x79/0xa0
[  171.711549]  ? exc_invalid_op+0x13/0x40
[  171.711559]  ? asm_exc_invalid_op+0x16/0x20
[  171.711572]  ? __blk_rq_map_sg+0x363/0x7c0
[  171.711581]  ? __blk_rq_map_sg+0x789/0x7c0
[  171.711596]  ? bio_split_rw+0x400/0x400
[  171.711608]  virtblk_prep_rq.isra.0+0x215/0x6a0 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[  171.711629]  ? virtblk_add_req+0x1d0/0x1d0 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[  171.711648]  ? bio_init+0x1b3/0x1d0
[  171.711658]  virtio_queue_rqs+0xc4/0x310 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[  171.711677]  ? virtblk_attrs_are_visible+0x80/0x80 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[  171.711695]  blk_mq_flush_plug_list.part.0+0x780/0x860
[  171.711708]  ? blk_mq_try_issue_list_directly+0x1c0/0x1c0
[  171.711719]  ? btrfs_submit_bio+0x11/0x20 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.711916]  ? scrub_submit_initial_read+0x207/0x6e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.712136]  ? btrfs_lookup_csums_bitmap+0x2a2/0x630 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.712355]  __blk_flush_plug+0x1ba/0x220
[  171.712367]  ? blk_start_plug_nr_ios+0xc0/0xc0
[  171.712376]  ? fill_one_extent_info+0x142/0x180 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.712554]  blk_finish_plug+0x3b/0x60
[  171.712564]  submit_initial_group_read+0x10a/0x290 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.712761]  ? scrub_submit_initial_read+0x6e0/0x6e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.712960]  ? btrfs_check_eb_owner+0x2d0/0x2d0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.713160]  flush_scrub_stripes+0x38e/0x430 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.713374]  ? scrub_write_sectors+0x2e0/0x2e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.713659]  ? scrub_simple_mirror.isra.0+0x1ff/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.713897]  ? scrub_simple_mirror.isra.0+0x93/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.714101]  scrub_stripe+0x82a/0xae0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.714308]  ? scrub_simple_mirror.isra.0+0x310/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.714515]  ? fill_one_extent_info+0x180/0x180 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.714745]  ? __lookup_extent_mapping+0x132/0x1b0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.714945]  scrub_chunk+0x178/0x200 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.715152]  scrub_enumerate_chunks+0x4bc/0xa30 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.715366]  ? scrub_chunk+0x200/0x200 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.715567]  ? free_unref_page+0x12e/0x1c0
[  171.715580]  ? _raw_spin_lock+0x7c/0xd0
[  171.715590]  ? _raw_write_lock_nested+0xd0/0xd0
[  171.715602]  btrfs_scrub_dev+0x398/0x810 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.715805]  ? scrub_stripe_read_repair_worker+0xce0/0xce0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.716013]  ? _copy_from_user+0x42/0x90
[  171.716025]  btrfs_ioctl+0x4b9/0x3020 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.716246]  ? kasan_save_stack+0x2b/0x40
[  171.716257]  ? kasan_save_stack+0x1c/0x40
[  171.716266]  ? kasan_set_track+0x21/0x30
[  171.716275]  ? __kasan_slab_alloc+0x85/0x90
[  171.716284]  ? kmem_cache_alloc_node+0x19f/0x320
[  171.716293]  ? alloc_io_context+0x18/0x110
[  171.716300]  ? set_task_ioprio+0x118/0x1a0
[  171.716307]  ? __do_sys_ioprio_set+0x7a/0x3d0
[  171.716315]  ? do_syscall_64+0x5d/0xe0
[  171.716325]  ? btrfs_ioctl_get_supported_features+0x20/0x20 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[  171.716528]  ? __pte_offset_map+0x152/0x1f0
[  171.716543]  ? __mod_memcg_lruvec_state+0xcb/0x160
[  171.716552]  ? set_ptes.isra.0+0x80/0x130
[  171.716560]  ? do_vfs_ioctl+0x9ec/0xc20
[  171.716570]  ? vfs_fileattr_set+0x4c0/0x4c0
[  171.716580]  ? folio_batch_add_and_move+0x76/0x90
[  171.716593]  ? __rcu_read_unlock+0x43/0x70
[  171.716604]  ? do_anonymous_page+0x3d5/0x610
[  171.716615]  ? __handle_mm_fault+0xe83/0x1220
[  171.716625]  ? _raw_spin_lock_irq+0x82/0xe0
[  171.716634]  ? _raw_write_lock_irq+0xe0/0xe0
[  171.716643]  ? copy_page_range+0x1ac0/0x1ac0
[  171.716654]  ? __rcu_read_unlock+0x43/0x70
[  171.716664]  ? __fget_light+0xfa/0x1c0
[  171.716676]  __x64_sys_ioctl+0xbd/0x100
[  171.716688]  do_syscall_64+0x5d/0xe0
[  171.716697]  ? __rcu_read_unlock+0x43/0x70
[  171.716708]  ? fpregs_assert_state_consistent+0x51/0x60
[  171.716717]  ? exit_to_user_mode_prepare+0x2b/0x130
[  171.716727]  ? syscall_exit_to_user_mode+0x30/0x50
[  171.716735]  ? do_syscall_64+0x6c/0xe0
[  171.716743]  ? exit_to_user_mode_prepare+0x2b/0x130
[  171.716753]  ? syscall_exit_to_user_mode+0x30/0x50
[  171.716760]  ? do_syscall_64+0x6c/0xe0
[  171.716767]  ? exit_to_user_mode_prepare+0x2b/0x130
[  171.716778]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  171.716790] RIP: 0033:0x7f47e5e0952b
[  171.716797] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  171.716805] RSP: 002b:00007f47e5bffc80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  171.716813] RAX: ffffffffffffffda RBX: 000055f3ec8d0420 RCX: 00007f47e5e0952b
[  171.716819] RDX: 000055f3ec8d0420 RSI: 00000000c400941b RDI: 0000000000000003
[  171.716824] RBP: 0000000000000000 R08: 00007f47e5c006c0 R09: 0000000000000000
[  171.716830] R10: 0000000000000000 R11: 0000000000000246 R12: fffffffffffffdc0
[  171.716835] R13: 0000000000000000 R14: 00007fff7ff9f400 R15: 00007f47e5400000
[  171.716849]  </TASK>
[  171.716853] ---[ end trace 0000000000000000 ]---
[  418.371626] workqueue: drm_fb_helper_damage_work [drm_kms_helper] hogged CPU for >10000us 4 times, consider switching to WQ_UNBOUND
[  737.152708] workqueue: drm_fb_helper_damage_work [drm_kms_helper] hogged CPU for >10000us 8 times, consider switching to WQ_UNBOUND
[  826.589770] BTRFS critical (device vdb): unable to find chunk map for logical 463895601152 length 4096
[  826.590317] BTRFS critical (device vdb): unable to find chunk map for logical 463895601152 length 57344
[  826.591645] BTRFS critical (device vdb): unable to find chunk map for logical 463895601152 length 4096
[  826.592153] BTRFS critical (device vdb): unable to find chunk map for logical 463895601152 length 4096
[  826.592732] BTRFS critical (device vdb): unable to find chunk map for logical 463895605248 length 4096
[  826.593310] BTRFS critical (device vdb): unable to find chunk map for logical 463895605248 length 4096
[  826.593981] BTRFS critical (device vdb): unable to find chunk map for logical 463895609344 length 4096
[  826.594590] BTRFS critical (device vdb): unable to find chunk map for logical 463895609344 length 4096
[  826.595290] BTRFS critical (device vdb): unable to find chunk map for logical 463895613440 length 4096
[  826.595879] BTRFS critical (device vdb): unable to find chunk map for logical 463895613440 length 4096
[  826.596515] BTRFS critical (device vdb): unable to find chunk map for logical 463895617536 length 4096
[  826.597093] BTRFS critical (device vdb): unable to find chunk map for logical 463895617536 length 4096
[  826.597790] BTRFS critical (device vdb): unable to find chunk map for logical 463895621632 length 4096
[  826.598217] BTRFS critical (device vdb): unable to find chunk map for logical 463895621632 length 4096
[  826.598675] BTRFS critical (device vdb): unable to find chunk map for logical 463895625728 length 4096
[  826.599150] BTRFS critical (device vdb): unable to find chunk map for logical 463895625728 length 4096
[  826.599853] BTRFS critical (device vdb): unable to find chunk map for logical 463895629824 length 4096
[  826.600413] BTRFS critical (device vdb): unable to find chunk map for logical 463895629824 length 4096
[  826.601051] BTRFS critical (device vdb): unable to find chunk map for logical 463895633920 length 4096
[  826.607108] BTRFS critical (device vdb): unable to find chunk map for logical 463895633920 length 4096
[  826.609932] BTRFS critical (device vdb): unable to find chunk map for logical 463895638016 length 4096
[  826.612556] BTRFS critical (device vdb): unable to find chunk map for logical 463895638016 length 4096
[  826.615161] BTRFS critical (device vdb): unable to find chunk map for logical 463895642112 length 4096
[  826.617619] BTRFS critical (device vdb): unable to find chunk map for logical 463895642112 length 4096
[  826.619909] BTRFS critical (device vdb): unable to find chunk map for logical 463895646208 length 4096
[  826.621676] BTRFS critical (device vdb): unable to find chunk map for logical 463895646208 length 4096
[  826.623488] BTRFS critical (device vdb): unable to find chunk map for logical 463895650304 length 4096
[  826.625236] BTRFS critical (device vdb): unable to find chunk map for logical 463895650304 length 4096
[  826.627045] BTRFS critical (device vdb): unable to find chunk map for logical 463895654400 length 4096
[  826.628911] BTRFS critical (device vdb): unable to find chunk map for logical 463895654400 length 4096
[  826.630744] BTRFS error (device vdb): fixed up error at logical 463895592960 on dev /dev/vdb physical 463895592960
[  826.630761] BTRFS error (device vdb): fixed up error at logical 463895592960 on dev /dev/vdb physical 463895592960
[ 1198.173643] BTRFS critical (device vdb): unable to find chunk map for logical 839699791872 length 4096
[ 1198.174739] BTRFS critical (device vdb): unable to find chunk map for logical 839699791872 length 16384
[ 1198.177974] BTRFS critical (device vdb): unable to find chunk map for logical 839699791872 length 4096
[ 1198.178913] BTRFS critical (device vdb): unable to find chunk map for logical 839699791872 length 4096
[ 1198.179921] BTRFS critical (device vdb): unable to find chunk map for logical 839699795968 length 4096
[ 1198.180888] BTRFS critical (device vdb): unable to find chunk map for logical 839699795968 length 4096
[ 1198.181860] BTRFS critical (device vdb): unable to find chunk map for logical 839699800064 length 4096
[ 1198.182906] BTRFS critical (device vdb): unable to find chunk map for logical 839699800064 length 4096
[ 1198.183967] BTRFS critical (device vdb): unable to find chunk map for logical 839699804160 length 4096
[ 1198.184920] BTRFS critical (device vdb): unable to find chunk map for logical 839699804160 length 4096
[ 1198.186049] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186058] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186065] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186071] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186077] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186083] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186090] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186095] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186102] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1198.186108] BTRFS error (device vdb): fixed up error at logical 839699742720 on dev /dev/vdb physical 839699742720
[ 1362.873487] BTRFS critical (device vdb): unable to find chunk map for logical 1016250572800 length 4096
[ 1362.875134] BTRFS critical (device vdb): unable to find chunk map for logical 1016250572800 length 57344
[ 1362.876492] ------------[ cut here ]------------
[ 1362.876496] kernel BUG at include/linux/scatterlist.h:115!
[ 1362.876609] BTRFS critical (device vdb): unable to find chunk map for logical 1016250572800 length 4096
[ 1362.877644] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 1362.878855] BTRFS critical (device vdb): unable to find chunk map for logical 1016250572800 length 4096
[ 1362.878894] BTRFS critical (device vdb): unable to find chunk map for logical 1016250576896 length 4096
[ 1362.878900] BTRFS critical (device vdb): unable to find chunk map for logical 1016250576896 length 4096
[ 1362.878932] BTRFS critical (device vdb): unable to find chunk map for logical 1016250580992 length 4096
[ 1362.878938] BTRFS critical (device vdb): unable to find chunk map for logical 1016250580992 length 4096
[ 1362.878969] BTRFS critical (device vdb): unable to find chunk map for logical 1016250585088 length 4096
[ 1362.878974] BTRFS critical (device vdb): unable to find chunk map for logical 1016250585088 length 4096
[ 1362.879005] BTRFS critical (device vdb): unable to find chunk map for logical 1016250589184 length 4096
[ 1362.879009] BTRFS critical (device vdb): unable to find chunk map for logical 1016250589184 length 4096
[ 1362.879039] BTRFS critical (device vdb): unable to find chunk map for logical 1016250593280 length 4096
[ 1362.879045] BTRFS critical (device vdb): unable to find chunk map for logical 1016250593280 length 4096
[ 1362.879076] BTRFS critical (device vdb): unable to find chunk map for logical 1016250597376 length 4096
[ 1362.879081] BTRFS critical (device vdb): unable to find chunk map for logical 1016250597376 length 4096
[ 1362.879128] BTRFS critical (device vdb): unable to find chunk map for logical 1016250601472 length 4096
[ 1362.879134] BTRFS critical (device vdb): unable to find chunk map for logical 1016250601472 length 4096
[ 1362.879165] BTRFS critical (device vdb): unable to find chunk map for logical 1016250605568 length 4096
[ 1362.879171] BTRFS critical (device vdb): unable to find chunk map for logical 1016250605568 length 4096
[ 1362.879224] BTRFS critical (device vdb): unable to find chunk map for logical 1016250609664 length 4096
[ 1362.879230] BTRFS critical (device vdb): unable to find chunk map for logical 1016250609664 length 4096
[ 1362.879264] BTRFS critical (device vdb): unable to find chunk map for logical 1016250613760 length 4096
[ 1362.879269] BTRFS critical (device vdb): unable to find chunk map for logical 1016250613760 length 4096
[ 1362.879302] BTRFS critical (device vdb): unable to find chunk map for logical 1016250617856 length 4096
[ 1362.879308] BTRFS critical (device vdb): unable to find chunk map for logical 1016250617856 length 4096
[ 1362.879343] BTRFS critical (device vdb): unable to find chunk map for logical 1016250621952 length 4096
[ 1362.879349] BTRFS critical (device vdb): unable to find chunk map for logical 1016250621952 length 4096
[ 1362.879383] BTRFS critical (device vdb): unable to find chunk map for logical 1016250626048 length 4096
[ 1362.879389] BTRFS critical (device vdb): unable to find chunk map for logical 1016250626048 length 4096
[ 1362.879427] scrub_stripe_report_errors: 2 callbacks suppressed
[ 1362.879432] BTRFS error (device vdb): fixed up error at logical 1016250564608 on dev /dev/vdb physical 1016250564608
[ 1362.879439] BTRFS error (device vdb): fixed up error at logical 1016250564608 on dev /dev/vdb physical 1016250564608
[ 1362.935312] CPU: 1 PID: 909 Comm: btrfs Tainted: G    B   W          6.7.0-x64v3-dbg #11 c50636e9419a8354555555245df535e380563b2b
[ 1362.939482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 2023.11-2 12/24/2023
[ 1362.941821] RIP: 0010:__blk_rq_map_sg+0x7b7/0x7c0
[ 1362.944354] Code: fb ff ff 48 8d bc 24 a8 00 00 00 4c 89 ee 48 89 4c 24 08 e8 cb cd 39 00 48 8b 4c 24 08 84 c0 0f 85 61 ff ff ff e9 11 fa ff ff <0f> 0b 0f 0b e8 f0 51 b7 00 48 b8 00 00 00 00 00 fc ff df 55 48 89
[ 1362.949638] RSP: 0018:ffff888107ae70e0 EFLAGS: 00010202
[ 1362.952294] RAX: 0000000000000000 RBX: ffff88814baaa400 RCX: ffffffffaa010443
[ 1362.954997] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88814baaa400
[ 1362.957755] RBP: 0000000000000000 R08: ffff8881009a0e58 R09: ffff88815ad83d30
[ 1362.960529] R10: ffff88815ad83da8 R11: 0000000000000001 R12: 0000000000000000
[ 1362.963390] R13: 04e101300000038d R14: 0000000000000000 R15: ffff888107ae7248
[ 1362.966331] FS:  00007f47e5c006c0(0000) GS:ffff888237880000(0000) knlGS:0000000000000000
[ 1362.969296] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1362.972343] CR2: 00007fbde9e1a840 CR3: 0000000126db0006 CR4: 00000000003706f0
[ 1362.975387] Call Trace:
[ 1362.978343]  <TASK>
[ 1362.981141]  ? die+0x2d/0x80
[ 1362.983936]  ? do_trap+0x12b/0x160
[ 1362.986657]  ? __blk_rq_map_sg+0x7b7/0x7c0
[ 1362.989434]  ? __blk_rq_map_sg+0x7b7/0x7c0
[ 1362.992195]  ? handle_invalid_op+0x82/0xb0
[ 1362.995042]  ? __blk_rq_map_sg+0x7b7/0x7c0
[ 1362.997924]  ? exc_invalid_op+0x29/0x40
[ 1363.000893]  ? asm_exc_invalid_op+0x16/0x20
[ 1363.003896]  ? __blk_rq_map_sg+0x223/0x7c0
[ 1363.006944]  ? __blk_rq_map_sg+0x7b7/0x7c0
[ 1363.009941]  ? bio_split_rw+0x400/0x400
[ 1363.012943]  ? __rcu_read_unlock+0x43/0x70
[ 1363.016010]  virtblk_prep_rq.isra.0+0x215/0x6a0 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[ 1363.019323]  ? virtblk_add_req+0x1d0/0x1d0 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[ 1363.022791]  ? bio_init+0x1b3/0x1d0
[ 1363.026317]  virtio_queue_rqs+0xc4/0x310 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[ 1363.030055]  ? virtblk_attrs_are_visible+0x80/0x80 [virtio_blk 19a65eeee9ae6fcf02edfad39bb9ddee07dcdaff]
[ 1363.033945]  blk_mq_flush_plug_list.part.0+0x780/0x860
[ 1363.037900]  ? blk_mq_try_issue_list_directly+0x1c0/0x1c0
[ 1363.041886]  ? btrfs_submit_bio+0x11/0x20 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.046590]  ? scrub_submit_initial_read+0x207/0x6e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.051077]  ? btrfs_lookup_csums_bitmap+0x2a2/0x630 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.055647]  __blk_flush_plug+0x1ba/0x220
[ 1363.060084]  ? blk_start_plug_nr_ios+0xc0/0xc0
[ 1363.064524]  ? fill_one_extent_info+0x142/0x180 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.069487]  blk_finish_plug+0x3b/0x60
[ 1363.074397]  submit_initial_group_read+0x10a/0x290 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.079633]  ? scrub_submit_initial_read+0x6e0/0x6e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.084946]  ? blk_finish_plug+0x43/0x60
[ 1363.089883]  ? submit_initial_group_read+0x10a/0x290 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.095111]  ? scrub_write_sectors+0x2e0/0x2e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.100269]  flush_scrub_stripes+0x38e/0x430 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.105403]  ? scrub_write_sectors+0x2e0/0x2e0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.110516]  ? scrub_simple_mirror.isra.0+0x1ff/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.115690]  ? scrub_simple_mirror.isra.0+0x93/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.120810]  scrub_stripe+0x82a/0xae0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.125840]  ? scrub_simple_mirror.isra.0+0x310/0x310 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.130822]  ? fill_one_extent_info+0x180/0x180 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.135820]  ? __lookup_extent_mapping+0x132/0x1b0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.140849]  scrub_chunk+0x178/0x200 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.146059]  scrub_enumerate_chunks+0x4bc/0xa30 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.151356]  ? scrub_chunk+0x200/0x200 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.156724]  ? free_unref_page+0x12e/0x1c0
[ 1363.161902]  ? _raw_spin_lock+0x7c/0xd0
[ 1363.166930]  ? _raw_write_lock_nested+0xd0/0xd0
[ 1363.171946]  btrfs_scrub_dev+0x398/0x810 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.177244]  ? scrub_stripe_read_repair_worker+0xce0/0xce0 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.182650]  ? _copy_from_user+0x42/0x90
[ 1363.187906]  btrfs_ioctl+0x4b9/0x3020 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.193527]  ? kasan_save_stack+0x2b/0x40
[ 1363.198923]  ? kasan_save_stack+0x1c/0x40
[ 1363.204286]  ? kasan_set_track+0x21/0x30
[ 1363.209656]  ? __kasan_slab_alloc+0x85/0x90
[ 1363.215106]  ? kmem_cache_alloc_node+0x19f/0x320
[ 1363.220436]  ? alloc_io_context+0x18/0x110
[ 1363.225828]  ? set_task_ioprio+0x118/0x1a0
[ 1363.231121]  ? __do_sys_ioprio_set+0x7a/0x3d0
[ 1363.236583]  ? do_syscall_64+0x5d/0xe0
[ 1363.241911]  ? btrfs_ioctl_get_supported_features+0x20/0x20 [btrfs e57987a360bed82fe8756dcd3e0de5406ccfe965]
[ 1363.247686]  ? __pte_offset_map+0x152/0x1f0
[ 1363.253306]  ? __mod_memcg_lruvec_state+0xcb/0x160
[ 1363.258880]  ? set_ptes.isra.0+0x80/0x130
[ 1363.264312]  ? do_vfs_ioctl+0x9ec/0xc20
[ 1363.269553]  ? vfs_fileattr_set+0x4c0/0x4c0
[ 1363.274633]  ? folio_batch_add_and_move+0x76/0x90
[ 1363.279879]  ? __rcu_read_unlock+0x43/0x70
[ 1363.284984]  ? do_anonymous_page+0x3d5/0x610
[ 1363.290055]  ? __handle_mm_fault+0xe83/0x1220
[ 1363.294992]  ? _raw_spin_lock_irq+0x82/0xe0
[ 1363.299940]  ? _raw_write_lock_irq+0xe0/0xe0
[ 1363.304821]  ? copy_page_range+0x1ac0/0x1ac0
[ 1363.309628]  ? __rcu_read_unlock+0x43/0x70
[ 1363.314377]  ? __fget_light+0xfa/0x1c0
[ 1363.319015]  __x64_sys_ioctl+0xbd/0x100
[ 1363.323655]  do_syscall_64+0x5d/0xe0
[ 1363.328090]  ? __rcu_read_unlock+0x43/0x70
[ 1363.332473]  ? fpregs_assert_state_consistent+0x51/0x60
[ 1363.336773]  ? exit_to_user_mode_prepare+0x2b/0x130
[ 1363.341009]  ? syscall_exit_to_user_mode+0x30/0x50
[ 1363.345239]  ? do_syscall_64+0x6c/0xe0
[ 1363.349304]  ? exit_to_user_mode_prepare+0x2b/0x130
[ 1363.353339]  ? syscall_exit_to_user_mode+0x30/0x50
[ 1363.357276]  ? do_syscall_64+0x6c/0xe0
[ 1363.361192]  ? exit_to_user_mode_prepare+0x2b/0x130
[ 1363.365120]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 1363.368883] RIP: 0033:0x7f47e5e0952b
[ 1363.372590] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1363.380259] RSP: 002b:00007f47e5bffc80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1363.384070] RAX: ffffffffffffffda RBX: 000055f3ec8d0420 RCX: 00007f47e5e0952b
[ 1363.387926] RDX: 000055f3ec8d0420 RSI: 00000000c400941b RDI: 0000000000000003
[ 1363.391793] RBP: 0000000000000000 R08: 00007f47e5c006c0 R09: 0000000000000000
[ 1363.395591] R10: 0000000000000000 R11: 0000000000000246 R12: fffffffffffffdc0
[ 1363.399350] R13: 0000000000000000 R14: 00007fff7ff9f400 R15: 00007f47e5400000
[ 1363.403059]  </TASK>
[ 1363.406599] Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr intel_rapl_msr intel_rapl_common crct10dif_pclmul snd_hda_codec_generic polyval_clmulni ledtrig_audio polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 snd_hda_intel aesni_intel snd_intel_dspcfg snd_intel_sdw_acpi crypto_simd snd_hda_codec snd_hda_core cryptd snd_hwdep binfmt_misc snd_pcm rapl snd_timer snd iTCO_wdt soundcore pcspkr virtiofs intel_pmc_bxt iTCO_vendor_support nls_iso8859_1 joydev input_leds mac_hid serio_raw msr parport_pc ppdev lp parport efi_pstore nfnetlink dmi_sysfs qemu_fw_cfg virtio_rng ip_tables x_tables autofs4 btrfs xor raid6_pq libcrc32c hid_generic usbhid hid qxl drm_ttm_helper ttm psmouse crc32_pclmul drm_kms_helper i2c_i801 ahci lpc_ich virtio_net libahci i2c_smbus virtio_blk drm net_failover xhci_pci failover xhci_pci_renesas
[ 1363.441926] ---[ end trace 0000000000000000 ]---
[ 1364.583797] RIP: 0010:__blk_rq_map_sg+0x7b7/0x7c0
[ 1364.583856] Code: fb ff ff 48 8d bc 24 a8 00 00 00 4c 89 ee 48 89 4c 24 08 e8 cb cd 39 00 48 8b 4c 24 08 84 c0 0f 85 61 ff ff ff e9 11 fa ff ff <0f> 0b 0f 0b e8 f0 51 b7 00 48 b8 00 00 00 00 00 fc ff df 55 48 89
[ 1364.583862] RSP: 0018:ffff888107ae70e0 EFLAGS: 00010202
[ 1364.583889] RAX: 0000000000000000 RBX: ffff88814baaa400 RCX: ffffffffaa010443
[ 1364.583893] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88814baaa400
[ 1364.583897] RBP: 0000000000000000 R08: ffff8881009a0e58 R09: ffff88815ad83d30
[ 1364.583901] R10: ffff88815ad83da8 R11: 0000000000000001 R12: 0000000000000000
[ 1364.583905] R13: 04e101300000038d R14: 0000000000000000 R15: ffff888107ae7248
[ 1364.583910] FS:  00007f47e5c006c0(0000) GS:ffff888237880000(0000) knlGS:0000000000000000
[ 1364.637560] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1364.643169] CR2: 00007fbde9e1a840 CR3: 0000000126db0006 CR4: 00000000003706f0
[ 1364.649659] ------------[ cut here ]------------
[ 1364.658778] WARNING: CPU: 1 PID: 909 at kernel/exit.c:818 do_exit+0xce3/0xfe0
[ 1364.665677] Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr intel_rapl_msr intel_rapl_common crct10dif_pclmul snd_hda_codec_generic polyval_clmulni ledtrig_audio polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 snd_hda_intel aesni_intel snd_intel_dspcfg snd_intel_sdw_acpi crypto_simd snd_hda_codec snd_hda_core cryptd snd_hwdep binfmt_misc snd_pcm rapl snd_timer snd iTCO_wdt soundcore pcspkr virtiofs intel_pmc_bxt iTCO_vendor_support nls_iso8859_1 joydev input_leds mac_hid serio_raw msr parport_pc ppdev lp parport efi_pstore nfnetlink dmi_sysfs qemu_fw_cfg virtio_rng ip_tables x_tables autofs4 btrfs xor raid6_pq libcrc32c hid_generic usbhid hid qxl drm_ttm_helper ttm psmouse crc32_pclmul drm_kms_helper i2c_i801 ahci lpc_ich virtio_net libahci i2c_smbus virtio_blk drm net_failover xhci_pci failover xhci_pci_renesas
[ 1364.712519] CPU: 1 PID: 909 Comm: btrfs Tainted: G    B D W          6.7.0-x64v3-dbg #11 c50636e9419a8354555555245df535e380563b2b
[ 1364.724396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 2023.11-2 12/24/2023
[ 1364.730503] RIP: 0010:do_exit+0xce3/0xfe0
[ 1364.736615] Code: bd d8 09 00 00 31 f6 e8 bb cc ff ff e9 73 fc ff ff 4c 89 e6 bf 05 06 00 00 e8 c9 73 01 00 e9 2b f5 ff ff 0f 0b e9 9a f3 ff ff <0f> 0b e9 0f f4 ff ff 48 89 ef e8 be f2 16 00 e9 c4 f6 ff ff 48 8b
[ 1364.749340] RSP: 0018:ffff888107ae7e68 EFLAGS: 00010286
[ 1364.755791] RAX: 0000000000000000 RBX: ffff888108b9a300 RCX: ffffffffa98f488b
[ 1364.762119] RDX: dffffc0000000000 RSI: ffffffffa98f485e RDI: ffff88811faac150
[ 1364.769118] RBP: ffff88811faab480 R08: 0000000000000001 R09: ffffed1020f5cfc2
[ 1364.775437] R10: 0000000000000003 R11: 0000000000000001 R12: 000000000000000b
[ 1364.781740] R13: ffff88811faac068 R14: ffff888125bbe040 R15: 0000000000000004
[ 1364.787988] FS:  00007f47e5c006c0(0000) GS:ffff888237880000(0000) knlGS:0000000000000000
[ 1364.794215] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1364.800625] CR2: 00007fbde9e1a840 CR3: 0000000126db0006 CR4: 00000000003706f0
[ 1364.806968] Call Trace:
[ 1364.813307]  <TASK>
[ 1364.819624]  ? __warn+0x8e/0x110
[ 1364.825803]  ? do_exit+0xce3/0xfe0
[ 1364.831768]  ? report_bug+0x18c/0x1d0
[ 1364.837538]  ? handle_bug+0x79/0xa0
[ 1364.843196]  ? exc_invalid_op+0x13/0x40
[ 1364.848572]  ? asm_exc_invalid_op+0x16/0x20
[ 1364.853802]  ? do_exit+0xeb/0xfe0
[ 1364.859087]  ? do_exit+0xbe/0xfe0
[ 1364.864185]  ? do_exit+0xce3/0xfe0
[ 1364.869197]  ? do_exit+0xeb/0xfe0
[ 1364.874064]  ? __rcu_read_unlock+0x43/0x70
[ 1364.879121]  ? mm_update_next_owner+0x410/0x410
[ 1364.883752]  ? exit_to_user_mode_prepare+0x2b/0x130
[ 1364.888322]  ? syscall_exit_to_user_mode+0x30/0x50
[ 1364.893070]  ? do_syscall_64+0x6c/0xe0
[ 1364.898714]  make_task_dead+0xba/0x200
[ 1364.904323]  ? exit_to_user_mode_prepare+0x2b/0x130
[ 1364.909743]  rewind_stack_and_make_dead+0x17/0x20
[ 1364.914306] RIP: 0033:0x7f47e5e0952b
[ 1364.919481] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1364.930791] RSP: 002b:00007f47e5bffc80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1364.935845] RAX: ffffffffffffffda RBX: 000055f3ec8d0420 RCX: 00007f47e5e0952b
[ 1364.940527] RDX: 000055f3ec8d0420 RSI: 00000000c400941b RDI: 0000000000000003
[ 1364.945840] RBP: 0000000000000000 R08: 00007f47e5c006c0 R09: 0000000000000000
[ 1364.950772] R10: 0000000000000000 R11: 0000000000000246 R12: fffffffffffffdc0
[ 1364.954996] R13: 0000000000000000 R14: 00007fff7ff9f400 R15: 00007f47e5400000
[ 1364.959746]  </TASK>
[ 1364.964137] ---[ end trace 0000000000000000 ]---
[ 1789.143384] workqueue: drm_fb_helper_damage_work [drm_kms_helper] hogged CPU for >10000us 16 times, consider switching to WQ_UNBOUND

Comments

Qu Wenruo Jan. 13, 2024, 9:23 p.m. UTC | #1
On 2024/1/14 04:10, Rongrong wrote:
> Hi all,
>
> I recently scrubbed my fs and surprisingly saw kernel oops. For context
> and more information about the fs, please refer to
> https://lore.kernel.org/linux-btrfs/8bd12a1ee60172f53ee0c27374f41c3ec9976be8.camel@rong.moe
>
> Usually the kernel oops when the scrub progress is 1~30%. Then it will
> oops again, making the btrfs process die. After that, any attempt to
> unmount the fs hangs forever, so do reboot and shutdown.
>
> It seems always reproducible if any of the below conditions is met:
> - Intel CPU (i7-7567U/i7-13700H), intel_iommu=off
> - x86_64 KVM (host CPU: Intel/AMD), virtio-blk
> - RK3399
> - Mounted via a loop device
>
> Not reproducible on:
> - Intel CPU (i7-7567U/i7-13700H), intel_iommu=on
> - AMD Ryzen CPU (PRO 4750U), amd_iommu=on/off
>
> Starting here, all experiments were done in a KVM:
> - Host: Intel i7-7567U
> - Vdisk: raw dump of my fs, virtio-blk (IO scheduler: none)
> - btrfs-progs: 6.6.3
>
> The first reproducible stable kernel is 6.5.4.
>
> Bisection between 6.5.3 and 6.5.4 indicates that the buggy commit is
> ce585c9b1cd700324fecedae130a9c35261fec30, which is a backport of
> ae76d8e3e1351aa1ba09cc68dab6866d356f2e17 (first appeared in v6.6-rc1).
>
> KASAN detected slab-use-after-free in __blk_rq_map_sg while scrubbing
> on v6.7, meanwhile an assertion was failed at block/blk-merge.c:584.
> See also the attached dmesg.
>
> With the below patch applied to v6.7, slab-use-after-free and oops
> disappeared, making scrub able to finish.

Thanks for the report.

Although I believe the root cause is the same for the uncorrectable errors.

And IMHO, even with the patch, as long as you enable KASAN, KASAN would
still warn about the use-after-free.

The root cause is that, the new scrub code expects the whole 64K read to
be mapped in one go, thus no bio split from btrfs bio layer.

But for the converted fs, the end of a data chunk is not ensured to end
at the 64K boundary, thus it can lead to unexpected bio split.

With the extra bio split, the scrub_read_endio() can be called twice,
causing the same bio to be freed and all kind of weird use-after-free.

Sorry I didn't notice it early enough, as it needs the full chunk tree
dump to verify.

So all of these would be handled in the original thread.

Thanks,
Qu
>
> diff --git a/fs/btrfs/scrub.c b/fs/btrfs/scrub.c
> index b877203f1dc5..3fecd7eee0bf 100644
> --- a/fs/btrfs/scrub.c
> +++ b/fs/btrfs/scrub.c
> @@ -1698,14 +1698,11 @@ static void submit_initial_group_read(struct scrub_ctx *sctx,
>                                        unsigned int first_slot,
>                                        unsigned int nr_stripes)
>   {
> -       struct blk_plug plug;
> -
>          ASSERT(first_slot < SCRUB_TOTAL_STRIPES);
>          ASSERT(first_slot + nr_stripes <= SCRUB_TOTAL_STRIPES);
>
>          scrub_throttle_dev_io(sctx, sctx->stripes[0].dev,
>                                btrfs_stripe_nr_to_offset(nr_stripes));
> -       blk_start_plug(&plug);
>          for (int i = 0; i < nr_stripes; i++) {
>                  struct scrub_stripe *stripe = &sctx->stripes[first_slot + i];
>
> @@ -1713,7 +1710,6 @@ static void submit_initial_group_read(struct scrub_ctx *sctx,
>                  ASSERT(test_bit(SCRUB_STRIPE_FLAG_INITIALIZED, &stripe->state));
>                  scrub_submit_initial_read(sctx, stripe);
>          }
> -       blk_finish_plug(&plug);
>   }
>
>   static int flush_scrub_stripes(struct scrub_ctx *sctx)
>
> Thanks,
> Rongrong
diff mbox series

Patch

diff --git a/fs/btrfs/scrub.c b/fs/btrfs/scrub.c
index b877203f1dc5..3fecd7eee0bf 100644
--- a/fs/btrfs/scrub.c
+++ b/fs/btrfs/scrub.c
@@ -1698,14 +1698,11 @@  static void submit_initial_group_read(struct scrub_ctx *sctx,
                                      unsigned int first_slot,
                                      unsigned int nr_stripes)
 {
-       struct blk_plug plug;
-
        ASSERT(first_slot < SCRUB_TOTAL_STRIPES);
        ASSERT(first_slot + nr_stripes <= SCRUB_TOTAL_STRIPES);

        scrub_throttle_dev_io(sctx, sctx->stripes[0].dev,
                              btrfs_stripe_nr_to_offset(nr_stripes));
-       blk_start_plug(&plug);
        for (int i = 0; i < nr_stripes; i++) {
                struct scrub_stripe *stripe = &sctx->stripes[first_slot + i];

@@ -1713,7 +1710,6 @@  static void submit_initial_group_read(struct scrub_ctx *sctx,
                ASSERT(test_bit(SCRUB_STRIPE_FLAG_INITIALIZED, &stripe->state));
                scrub_submit_initial_read(sctx, stripe);
        }
-       blk_finish_plug(&plug);
 }

 static int flush_scrub_stripes(struct scrub_ctx *sctx)