Warning: Permanently added '[localhost]:29057' (ED25519) to the list of known hosts. 2025/08/04 02:59:00 ignoring optional flag "sandboxArg"="0" 2025/08/04 02:59:01 parsed 1 programs syzkaller login: [ 88.359946][ T5347] cgroup: Unknown subsys name 'net' [ 88.425721][ T5347] cgroup: Unknown subsys name 'cpuset' [ 88.431235][ T5347] cgroup: Unknown subsys name 'rlimit' [ 90.077830][ T5347] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.872336][ T54] cfg80211: failed to load regulatory.db [ 94.140107][ T5362] chnl_net:caif_netlink_parms(): no params data found [ 94.214698][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.219115][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.223451][ T5362] bridge_slave_0: entered allmulticast mode [ 94.228690][ T5362] bridge_slave_0: entered promiscuous mode [ 94.235865][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.238967][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.243164][ T5362] bridge_slave_1: entered allmulticast mode [ 94.247767][ T5362] bridge_slave_1: entered promiscuous mode [ 94.273710][ T5362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.279854][ T5362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.305524][ T5362] team0: Port device team_slave_0 added [ 94.310609][ T5362] team0: Port device team_slave_1 added [ 94.334518][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.337719][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.350059][ T5362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.357088][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.360289][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.373601][ T5362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.407841][ T5362] hsr_slave_0: entered promiscuous mode [ 94.411412][ T5362] hsr_slave_1: entered promiscuous mode [ 94.559923][ T5362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.568922][ T5362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.575377][ T5362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.581703][ T5362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.617644][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.621050][ T5362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.624851][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.627655][ T5362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.686403][ T5362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.699015][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.704246][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.716580][ T5362] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.727887][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.731075][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.748295][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.751250][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.933501][ T5362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.975875][ T5362] veth0_vlan: entered promiscuous mode [ 94.984707][ T5362] veth1_vlan: entered promiscuous mode [ 95.013797][ T5362] veth0_macvtap: entered promiscuous mode [ 95.019857][ T5362] veth1_macvtap: entered promiscuous mode [ 95.038677][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.051651][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.064930][ T1050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.079924][ T1050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.094288][ T1050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.098219][ T1050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.161563][ T5362] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.306613][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.361152][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.399932][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.443708][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.504091][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.507410][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.547862][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.551002][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.982253][ T43] bridge_slave_1: left allmulticast mode [ 97.984749][ T43] bridge_slave_1: left promiscuous mode [ 97.988027][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.034500][ T43] bridge_slave_0: left allmulticast mode [ 98.037021][ T43] bridge_slave_0: left promiscuous mode [ 98.039549][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.556784][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.563873][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.568965][ T43] bond0 (unregistering): Released all slaves [ 98.714139][ T43] hsr_slave_0: left promiscuous mode [ 98.719104][ T43] hsr_slave_1: left promiscuous mode [ 98.723523][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.726284][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.730234][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.736670][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.747677][ T43] veth1_macvtap: left promiscuous mode [ 98.750332][ T43] veth0_macvtap: left promiscuous mode [ 98.753939][ T43] veth1_vlan: left promiscuous mode [ 98.756489][ T43] veth0_vlan: left promiscuous mode [ 99.063018][ T43] team0 (unregistering): Port device team_slave_1 removed [ 99.086021][ T43] team0 (unregistering): Port device team_slave_0 removed [ 101.101265][ T5465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.106535][ T5465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.116665][ T5465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.122778][ T5465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.126245][ T5465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/08/04 02:59:18 executed programs: 0 [ 103.056395][ T5465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.060817][ T5465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.066085][ T5465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.069077][ T5465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.072727][ T5465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.426642][ T5496] chnl_net:caif_netlink_parms(): no params data found [ 103.566533][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.569756][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.582557][ T5496] bridge_slave_0: entered allmulticast mode [ 103.586406][ T5496] bridge_slave_0: entered promiscuous mode [ 103.590956][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.607272][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.610495][ T5496] bridge_slave_1: entered allmulticast mode [ 103.616521][ T5496] bridge_slave_1: entered promiscuous mode [ 103.659425][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.668885][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.705605][ T5496] team0: Port device team_slave_0 added [ 103.723724][ T5496] team0: Port device team_slave_1 added [ 103.764662][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.767760][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.801953][ T5496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.808221][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.811301][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.842583][ T5496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.924148][ T5496] hsr_slave_0: entered promiscuous mode [ 103.933661][ T5496] hsr_slave_1: entered promiscuous mode [ 104.655607][ T5496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.664411][ T5496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.686586][ T5496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.704019][ T5496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.854432][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.888975][ T5496] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.918787][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.922387][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.933722][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.937398][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.144403][ T5465] Bluetooth: hci0: command tx timeout [ 105.304010][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.371153][ T5496] veth0_vlan: entered promiscuous mode [ 105.396153][ T5496] veth1_vlan: entered promiscuous mode [ 105.447558][ T5496] veth0_macvtap: entered promiscuous mode [ 105.464306][ T5496] veth1_macvtap: entered promiscuous mode [ 105.490053][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.510199][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.539032][ T1042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.548061][ T1042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.568733][ T1042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.573096][ T1042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.684494][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.687907][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.751087][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.756507][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.047923][ T5553] loop0: detected capacity change from 0 to 16384 [ 106.523920][ T5553] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none [ 106.523935][ T5553] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 106.551191][ T5553] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 106.561489][ T5553] bcachefs (loop0): recovering from clean shutdown, journal seq 15 [ 106.574975][ T5553] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 106.574975][ T5553] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 106.648345][ T5553] bcachefs (loop0): invalid bkey in btree_node btree=subvolumes level=0: u64s 10 type subvolume 0:1970324836974593:0 len 0 ver 0: root 4096 snapshot id 4294967295 creation_parent 0 fs_parent 0 [ 106.648379][ T5553] invalid pos, deleting [ 106.686823][ T5553] bcachefs (loop0): error reading btree root btree=subvolumes level=0: btree_node_read_error, fixing [ 106.706752][ T5553] bcachefs (loop0): invalid bkey in btree_node btree=snapshot_trees level=0: u64s 6 type snapshot_tree POS_MIN len 0 ver 0: subvol 1 root snapshot 4294967295 [ 106.706768][ T5553] bad pos, deleting [ 106.737685][ T5553] bcachefs (loop0): error reading btree root btree=snapshot_trees level=0: btree_node_read_error, fixing [ 106.753806][ T5553] ------------[ cut here ]------------ [ 106.756356][ T5553] UBSAN: array-index-out-of-bounds in fs/bcachefs/disk_accounting.c:238:2 [ 106.760006][ T5553] index 175 is out of range for type 'const unsigned int[9]' [ 106.783284][ T5553] CPU: 0 UID: 0 PID: 5553 Comm: syz.0.17 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 106.783302][ T5553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.783307][ T5553] Call Trace: [ 106.783313][ T5553] [ 106.783317][ T5553] dump_stack_lvl+0x189/0x250 [ 106.783418][ T5553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.783427][ T5553] ? __pfx__printk+0x10/0x10 [ 106.783436][ T5553] ? __lock_acquire+0xab9/0xd20 [ 106.783471][ T5553] ubsan_epilogue+0xa/0x40 [ 106.783484][ T5553] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 106.783499][ T5553] bch2_accounting_validate+0x112f/0x1400 [ 106.783514][ T5553] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 106.783562][ T5553] ? __pfx_bch2_accounting_validate+0x10/0x10 [ 106.783573][ T5553] ? __lock_acquire+0xab9/0xd20 [ 106.783584][ T5553] ? __free_frozen_pages+0x65e/0xd30 [ 106.783595][ T5553] ? __pfx_bch2_accounting_validate+0x10/0x10 [ 106.783603][ T5553] bch2_bkey_val_validate+0x202/0x3e0 [ 106.783616][ T5553] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 106.783627][ T5553] ? __asan_memset+0x22/0x50 [ 106.783636][ T5553] ? __bch2_bkey_unpack_key+0x98b/0xe10 [ 106.783659][ T5553] bch2_btree_node_read_done+0x4051/0x5550 [ 106.783708][ T5553] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 106.783722][ T5553] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 106.783740][ T5553] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 106.783753][ T5553] ? bch2_printbuf_make_room+0xdb/0x360 [ 106.783773][ T5553] ? enumerated_ref_put+0xbe/0x270 [ 106.783787][ T5553] btree_node_read_work+0x40e/0xe60 [ 106.783811][ T5553] ? __pfx_btree_node_read_work+0x10/0x10 [ 106.783823][ T5553] ? bch2_latency_acct+0x436/0x520 [ 106.783844][ T5553] ? __pfx_bch2_latency_acct+0x10/0x10 [ 106.783857][ T5553] ? bio_associate_blkg+0x6d/0x230 [ 106.783876][ T5553] bch2_btree_node_read+0x887/0x2a00 [ 106.783898][ T5553] ? bch2_btree_node_hash_insert+0x88/0xc0 [ 106.783914][ T5553] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 106.783925][ T5553] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 106.783938][ T5553] ? bch2_trans_unlock+0x8a/0x580 [ 106.783960][ T5553] ? bch2_trans_unlock+0x491/0x580 [ 106.783978][ T5553] bch2_btree_root_read+0x5f0/0x760 [ 106.783993][ T5553] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 106.784013][ T5553] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 106.784025][ T5553] read_btree_roots+0x2c6/0x840 [ 106.784049][ T5553] ? __pfx_read_btree_roots+0x10/0x10 [ 106.784067][ T5553] bch2_fs_recovery+0x261f/0x3a50 [ 106.784082][ T5553] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 106.784094][ T5553] ? __lock_acquire+0xab9/0xd20 [ 106.784106][ T5553] ? __mutex_trylock_common+0x153/0x260 [ 106.784113][ T5553] ? __pfx___mutex_trylock_common+0x10/0x10 [ 106.784122][ T5553] ? rcu_is_watching+0x15/0xb0 [ 106.784130][ T5553] ? __lock_acquire+0xab9/0xd20 [ 106.784151][ T5553] ? bch2_fs_start+0xa0f/0xda0 [ 106.784161][ T5553] ? up_write+0x1c4/0x420 [ 106.784167][ T5553] ? bch2_fs_start+0x5e7/0xda0 [ 106.784176][ T5553] bch2_fs_start+0xaaf/0xda0 [ 106.784187][ T5553] ? bch2_fs_start+0x5e7/0xda0 [ 106.784201][ T5553] ? __pfx_bch2_fs_start+0x10/0x10 [ 106.784226][ T5553] ? sget+0x267/0x620 [ 106.784240][ T5553] bch2_fs_get_tree+0xb39/0x1520 [ 106.784275][ T5553] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 106.784300][ T5553] ? aa_get_newest_label+0xf7/0x5d0 [ 106.784315][ T5553] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 106.784331][ T5553] ? rcu_is_watching+0x15/0xb0 [ 106.784349][ T5553] vfs_get_tree+0x8f/0x2b0 [ 106.784361][ T5553] do_new_mount+0x2a2/0x9e0 [ 106.784376][ T5553] ? ns_capable+0x8a/0xf0 [ 106.784385][ T5553] ? __pfx_do_new_mount+0x10/0x10 [ 106.784395][ T5553] ? path_mount+0x61c/0xfe0 [ 106.784404][ T5553] ? user_path_at+0x44/0x60 [ 106.784417][ T5553] __se_sys_mount+0x317/0x410 [ 106.784436][ T5553] ? __pfx___se_sys_mount+0x10/0x10 [ 106.784450][ T5553] ? do_syscall_64+0xbe/0x3b0 [ 106.784460][ T5553] ? __x64_sys_mount+0x20/0xc0 [ 106.784474][ T5553] do_syscall_64+0xfa/0x3b0 [ 106.784482][ T5553] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.784497][ T5553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.784509][ T5553] ? clear_bhb_loop+0x60/0xb0 [ 106.784521][ T5553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.784529][ T5553] RIP: 0033:0x7f474459030a [ 106.784540][ T5553] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.784551][ T5553] RSP: 002b:00007ffe60141518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.784563][ T5553] RAX: ffffffffffffffda RBX: 00007ffe601415a0 RCX: 00007f474459030a [ 106.784570][ T5553] RDX: 0000200000001000 RSI: 0000200000000000 RDI: 00007ffe60141560 [ 106.784576][ T5553] RBP: 0000200000001000 R08: 00007ffe601415a0 R09: 0000000000000000 [ 106.784582][ T5553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 106.784587][ T5553] R13: 00007ffe60141560 R14: 0000000000004932 R15: 0000200000000040 [ 106.784603][ T5553] [ 106.784608][ T5553] ---[ end trace ]--- [ 107.132742][ T5553] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 107.135942][ T5553] CPU: 0 UID: 0 PID: 5553 Comm: syz.0.17 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 107.140736][ T5553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.145322][ T5553] Call Trace: [ 107.146851][ T5553] [ 107.148180][ T5553] dump_stack_lvl+0x99/0x250 [ 107.150229][ T5553] ? __asan_memcpy+0x40/0x70 [ 107.152238][ T5553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.154688][ T5553] ? __pfx__printk+0x10/0x10 [ 107.156772][ T5553] vpanic+0x27a/0x730 [ 107.158308][ T5553] ? __pfx_vpanic+0x10/0x10 [ 107.160180][ T5553] panic+0xb9/0xc0 [ 107.161821][ T5553] ? __pfx_panic+0x10/0x10 [ 107.163873][ T5553] ? __pfx__printk+0x10/0x10 [ 107.166535][ T5553] check_panic_on_warn+0x89/0xb0 [ 107.169058][ T5553] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 107.171929][ T5553] bch2_accounting_validate+0x112f/0x1400 [ 107.174578][ T5553] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 107.177194][ T5553] ? __pfx_bch2_accounting_validate+0x10/0x10 [ 107.179939][ T5553] ? __lock_acquire+0xab9/0xd20 [ 107.182061][ T5553] ? __free_frozen_pages+0x65e/0xd30 [ 107.184361][ T5553] ? __pfx_bch2_accounting_validate+0x10/0x10 [ 107.187106][ T5553] bch2_bkey_val_validate+0x202/0x3e0 [ 107.189423][ T5553] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 107.192043][ T5553] ? __asan_memset+0x22/0x50 [ 107.194032][ T5553] ? __bch2_bkey_unpack_key+0x98b/0xe10 [ 107.196486][ T5553] bch2_btree_node_read_done+0x4051/0x5550 [ 107.199043][ T5553] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 107.201655][ T5553] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 107.203960][ T5553] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 107.206329][ T5553] ? bch2_printbuf_make_room+0xdb/0x360 [ 107.208704][ T5553] ? enumerated_ref_put+0xbe/0x270 [ 107.210960][ T5553] btree_node_read_work+0x40e/0xe60 [ 107.213307][ T5553] ? __pfx_btree_node_read_work+0x10/0x10 [ 107.215838][ T5553] ? bch2_latency_acct+0x436/0x520 [ 107.218113][ T5553] ? __pfx_bch2_latency_acct+0x10/0x10 [ 107.220426][ T5553] ? bio_associate_blkg+0x6d/0x230 [ 107.222693][ T5553] bch2_btree_node_read+0x887/0x2a00 [ 107.224834][ T5553] ? bch2_btree_node_hash_insert+0x88/0xc0 [ 107.227291][ T5553] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 107.229689][ T5553] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 107.231969][ T5553] ? bch2_trans_unlock+0x8a/0x580 [ 107.234024][ T5553] ? bch2_trans_unlock+0x491/0x580 [ 107.236102][ T5553] bch2_btree_root_read+0x5f0/0x760 [ 107.238175][ T5553] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 107.240502][ T5553] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 107.242812][ T5553] read_btree_roots+0x2c6/0x840 [ 107.244787][ T5553] ? __pfx_read_btree_roots+0x10/0x10 [ 107.246989][ T5553] bch2_fs_recovery+0x261f/0x3a50 [ 107.249035][ T5553] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 107.251358][ T5553] ? __lock_acquire+0xab9/0xd20 [ 107.253524][ T5553] ? __mutex_trylock_common+0x153/0x260 [ 107.256013][ T5553] ? __pfx___mutex_trylock_common+0x10/0x10 [ 107.258552][ T5553] ? rcu_is_watching+0x15/0xb0 [ 107.260640][ T5553] ? __lock_acquire+0xab9/0xd20 [ 107.262836][ T5553] ? bch2_fs_start+0xa0f/0xda0 [ 107.265182][ T5553] ? up_write+0x1c4/0x420 [ 107.267072][ T5553] ? bch2_fs_start+0x5e7/0xda0 [ 107.269087][ T5553] bch2_fs_start+0xaaf/0xda0 [ 107.271486][ T5553] ? bch2_fs_start+0x5e7/0xda0 [ 107.274088][ T5553] ? __pfx_bch2_fs_start+0x10/0x10 [ 107.276774][ T5553] ? sget+0x267/0x620 [ 107.278727][ T5553] bch2_fs_get_tree+0xb39/0x1520 [ 107.280799][ T5553] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 107.283103][ T5553] ? aa_get_newest_label+0xf7/0x5d0 [ 107.285239][ T5553] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 107.287749][ T5553] ? rcu_is_watching+0x15/0xb0 [ 107.289842][ T5553] vfs_get_tree+0x8f/0x2b0 [ 107.291839][ T5553] do_new_mount+0x2a2/0x9e0 [ 107.293781][ T5553] ? ns_capable+0x8a/0xf0 [ 107.295633][ T5553] ? __pfx_do_new_mount+0x10/0x10 [ 107.297765][ T5553] ? path_mount+0x61c/0xfe0 [ 107.299890][ T5553] ? user_path_at+0x44/0x60 [ 107.301863][ T5553] __se_sys_mount+0x317/0x410 [ 107.304083][ T5553] ? __pfx___se_sys_mount+0x10/0x10 [ 107.306379][ T5553] ? do_syscall_64+0xbe/0x3b0 [ 107.308471][ T5553] ? __x64_sys_mount+0x20/0xc0 [ 107.310511][ T5553] do_syscall_64+0xfa/0x3b0 [ 107.312419][ T5553] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.314701][ T5553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.317231][ T5553] ? clear_bhb_loop+0x60/0xb0 [ 107.319236][ T5553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.321797][ T5553] RIP: 0033:0x7f474459030a [ 107.323766][ T5553] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.331499][ T5553] RSP: 002b:00007ffe60141518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.334973][ T5553] RAX: ffffffffffffffda RBX: 00007ffe601415a0 RCX: 00007f474459030a [ 107.338311][ T5553] RDX: 0000200000001000 RSI: 0000200000000000 RDI: 00007ffe60141560 [ 107.341611][ T5553] RBP: 0000200000001000 R08: 00007ffe601415a0 R09: 0000000000000000 [ 107.344830][ T5553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 107.348330][ T5553] R13: 00007ffe60141560 R14: 0000000000004932 R15: 0000200000000040 [ 107.352052][ T5553] [ 107.353759][ T5553] Kernel Offset: disabled [ 107.355712][ T5553] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:59:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000070 RBX=0000000000000070 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900029bdf90 R8 =ffff888033980237 R9 =1ffff11006730046 R10=dffffc0000000000 R11=ffffffff854ec100 R12=dffffc0000000000 R13=ffffffff99af6918 R14=ffffffff99dfb840 R15=0000000000000000 RIP=ffffffff854ec17c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558c4e7500 ffffffff 00c00000 GS =0000 ffff88808d21f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005569a4973950 CR3=00000000573bf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe601419c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe60141b46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe60141b46 00007ffe60141b4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4744612e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4744612e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4744612e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4744612e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4744612eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4744612f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000