program: prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8d, 0x0, 0x390}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0xb, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000280)={0x0, 0x8, 0x20000005, &(0x7f0000000240)={0x0, "0f5dbf9b3c00000000c4f5f9c6974700510000000000000000000200"}}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xac, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0xd, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1e, &(0x7f0000005b80)=ANY=[@ANYBLOB="6e6fef27a17265636f766572792c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6572726f72733d636f6e74696e75652c0025a1bf2a49c7ca7ac748c6e80ff25ad96fd0adf2c7d1340dba56c7443566128ff6ff28683322125e1cf67a022832afcacc74ebf650fb50faa896bb21d180f3cccb67ac461b586a6ec8b97954822ba1d4cbb051a787c37c394872de7d1d1e8d634c77b69b56cb30b2e3313fca74b0058309154b76224281eef5f07c601a68842230def52997b4a9e56b76b2b9f6228b6586fc86a35b005622bc2a61657432bf07abc8d6f7fb04201c0ade3bce0f1e41dadfee80e1804283c1f1dba0ee0d78d4c2c47f96b7"], 0x9, 0x5a27, &(0x7f0000000140)="$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") [ 68.948724][ T5332] Bluetooth: hci0: command tx timeout [ 69.268700][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.419221][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 69.424178][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.427118][ T55] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 69.431114][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.442928][ T55] usb 5-1: config 0 descriptor?? [ 69.856026][ T55] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 70.561087][ T5352] loop0: detected capacity change from 0 to 32768 [ 70.999797][ T5352] bcachefs (loop0): starting version 1.519: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=0,compression=lz4,nopromote_whole_extents,allocator_stuck_timeout=3 [ 70.999816][ T5352] allowing incompatible features above 0.0: (unknown version) [ 70.999823][ T5352] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 71.019943][ T5332] Bluetooth: hci0: command tx timeout [ 71.030695][ T5352] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 71.035689][ T5352] bcachefs (loop0): invalid bkey in superblock btree=extents level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 360287970189639680:0:0 durability: 0 (invalid extent entry 000000000001b000) [ 71.035722][ T5352] invalid extent entry type (got 12, max 7), deleting [ 71.052078][ T5352] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 71.055491][ T5352] bcachefs (loop0): Version downgrade required: [ 71.060836][ T5352] bcachefs (loop0): Version upgrade required: [ 71.060836][ T5352] Version upgrade from 0.24: unwritten_extents to 1.519: (unknown version) incomplete [ 71.060836][ T5352] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 71.060836][ T5352] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 71.186121][ T5352] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0: (unpack error) [ 71.186140][ T5352] invalid variable length fields, deleting [ 71.207498][ T5352] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 71.207530][ T5352] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key 0:262144:0 durability: 1 ptr: 0:32:0 gen 0 [ 71.207539][ T5352] loop0 node offset 0/16: incorrect min_key: got POS_MIN should be 0:262144:0 [ 71.207546][ T5352] loop0 btree validate error [ 71.207551][ T5352] flagging btree snapshots lost data [ 71.207557][ T5352] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 71.207579][ T5352] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 71.207592][ T5352] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 71.207661][ T5352] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 71.207670][ T5352] ret btree_node_read_err_bad_node [ 71.251102][ T5352] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 71.262127][ T5352] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 71.262141][ T5352] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 65535 min_key R 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 71.262151][ T5352] node offset 16/65535 bset u64s 13 bset byte offset 80: keys out of order: u64s 5 type set 3:29:0 len 1 ver 0 > u64s 5 type set 0:31:0 len 1 ver 0 [ 71.262160][ T5352] node offset 24/65535 bset u64s 24 bset byte offset 192: keys out of order: u64s 5 type deleted 50331648:38:0 len 0 ver 0 > u64s 5 type set 0:120:0 len 77 ver 0 [ 71.262168][ T5352] loop0 node offset 32/65535: btree node data missing: expected 65535 sectors, found 32 [ 71.262175][ T5352] loop0 btree validate error [ 71.262180][ T5352] repair success (rewriting node) [ 71.304343][ T5352] bcachefs (loop0): check_topology... [ 71.304672][ T5352] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 71.312757][ T5352] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 71.317850][ T5352] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 71.321484][ T5352] bcachefs (loop0): scan_for_btree_nodes... [ 71.341751][ T5352] bcachefs (loop0): btree node scan found 1 nodes after overwrites [ 71.351270][ T5352] done [ 71.352716][ T5352] bcachefs (loop0): check_topology... [ 71.353101][ T5352] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 71.361153][ T5352] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 71.367063][ T5352] done [ 71.369864][ T5352] bcachefs (loop0): accounting_read... done [ 71.374500][ T5352] bcachefs (loop0): alloc_read... done [ 71.378034][ T5352] bcachefs (loop0): snapshots_read... done [ 71.384199][ T5352] bcachefs (loop0): check_allocations... [ 71.390812][ T5352] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 71.390835][ T5352] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 71.409720][ T5352] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 71.409787][ T5352] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 71.421701][ T5352] bcachefs (loop0): bucket 0:38 gen 0 different types of data in same bucket: journal, btree [ 71.421714][ T5352] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 71.440245][ T5352] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 71.440262][ T5352] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 281474976710656: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 71.457009][ T5352] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 71.457025][ T5352] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 71.469954][ T5352] bcachefs (loop0): bucket 0:35 gen 0 different types of data in same bucket: journal, btree [ 71.469970][ T5352] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 71.484466][ T5352] ------------[ cut here ]------------ [ 71.487103][ T5352] kernel BUG at fs/bcachefs/btree_iter.c:633! [ 71.492752][ T5352] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 71.495680][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 71.499635][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.504396][ T5352] RIP: 0010:bch2_btree_path_level_init+0xa01/0xa20 [ 71.507259][ T5352] Code: fd 90 0f 0b e8 30 4f 97 fd 90 0f 0b e8 28 4f 97 fd 90 0f 0b e8 20 4f 97 fd 90 0f 0b e8 18 4f 97 fd 90 0f 0b e8 10 4f 97 fd 90 <0f> 0b e8 08 4f 97 fd 90 0f 0b e8 00 4f 97 fd 90 0f 0b 66 66 66 66 [ 71.515769][ T5352] RSP: 0018:ffffc9000d4ae4a0 EFLAGS: 00010283 [ 71.518541][ T5352] RAX: ffffffff84287b90 RBX: ffff8880529d4360 RCX: 0000000000100000 [ 71.521963][ T5352] RDX: ffffc9000dfea000 RSI: 0000000000091f6c RDI: 0000000000091f6d [ 71.525321][ T5352] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 71.528745][ T5352] R10: dffffc0000000000 R11: fffff52001a95c88 R12: 000d280000000000 [ 71.532277][ T5352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.535829][ T5352] FS: 00007f651338c6c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 71.539754][ T5352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.542660][ T5352] CR2: 00007f2f6881d000 CR3: 0000000043ce6000 CR4: 0000000000352ef0 [ 71.546220][ T5352] Call Trace: [ 71.547810][ T5352] [ 71.549157][ T5352] bch2_btree_path_traverse_one+0xfec/0x21d0 [ 71.551746][ T5352] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 71.554357][ T5352] ? bch2_check_allocations+0x120d/0x57b0 [ 71.556578][ T5352] ? bch2_btree_iter_verify+0x1d/0x360 [ 71.558866][ T5352] bch2_btree_iter_peek_max+0x9e8/0x58f0 [ 71.561257][ T5352] ? bch2_check_allocations+0x120d/0x57b0 [ 71.563703][ T5352] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 71.565988][ T5352] ? bch2_trans_begin+0xbe0/0x2310 [ 71.568102][ T5352] ? bch2_check_allocations+0x11cd/0x57b0 [ 71.570534][ T5352] ? bch2_trans_begin+0xbf5/0x2310 [ 71.572482][ T5352] ? bch2_trans_begin+0x1a71/0x2310 [ 71.574745][ T5352] ? bch2_trans_node_iter_init+0x348/0x5e0 [ 71.577458][ T5352] ? bch2_trans_node_iter_init+0x406/0x5e0 [ 71.580059][ T5352] ? __pfx_bch2_trans_begin+0x10/0x10 [ 71.582044][ T5352] ? __pfx_bch2_trans_node_iter_init+0x10/0x10 [ 71.584774][ T5352] ? bch2_check_allocations+0x1aa1/0x57b0 [ 71.587326][ T5352] bch2_check_allocations+0x120d/0x57b0 [ 71.591349][ T5352] ? prb_read_valid+0x3c/0x60 [ 71.594222][ T5352] ? desc_read+0x1b8/0x3f0 [ 71.595940][ T5352] ? bch2_check_allocations+0xfa1/0x57b0 [ 71.598491][ T5352] ? prb_first_seq+0xfd/0x1a0 [ 71.600579][ T5352] ? __pfx_prb_first_seq+0x10/0x10 [ 71.602739][ T5352] ? desc_read+0x1b8/0x3f0 [ 71.604568][ T5352] ? __pfx_bch2_check_allocations+0x10/0x10 [ 71.606916][ T5352] ? up+0xde/0x150 [ 71.608471][ T5352] ? __pfx__prb_read_valid+0x10/0x10 [ 71.610701][ T5352] ? __console_unlock+0x14c/0x1a0 [ 71.612899][ T5352] ? __pfx___console_unlock+0x10/0x10 [ 71.615210][ T5352] ? prb_read_valid+0x3c/0x60 [ 71.617114][ T5352] ? console_unlock+0x21b/0x270 [ 71.619254][ T5352] ? bch2_check_allocations+0x11c1/0x57b0 [ 71.621632][ T5352] ? irq_work_queue+0xc3/0x140 [ 71.623638][ T5352] ? bch2_check_allocations+0x1aa1/0x57b0 [ 71.626101][ T5352] ? __pfx_vprintk_emit+0x10/0x10 [ 71.628275][ T5352] ? do_raw_spin_lock+0x121/0x290 [ 71.630534][ T5352] ? __pfx___bch2_print+0x10/0x10 [ 71.632772][ T5352] ? lockdep_hardirqs_on+0x9c/0x150 [ 71.635119][ T5352] __bch2_run_recovery_passes+0x3bd/0x1060 [ 71.637696][ T5352] bch2_run_recovery_passes+0x184/0x210 [ 71.640203][ T5352] bch2_fs_recovery+0x2690/0x3a50 [ 71.642497][ T5352] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 71.644962][ T5352] ? __lock_acquire+0xab9/0xd20 [ 71.647192][ T5352] ? __mutex_trylock_common+0x153/0x260 [ 71.649702][ T5352] ? __lock_acquire+0xab9/0xd20 [ 71.651931][ T5352] ? __lock_acquire+0xab9/0xd20 [ 71.654148][ T5352] ? bch2_fs_start+0xa0f/0xda0 [ 71.656419][ T5352] ? up_write+0x1c4/0x420 [ 71.658372][ T5352] ? bch2_fs_start+0x5e7/0xda0 [ 71.660490][ T5352] bch2_fs_start+0xaaf/0xda0 [ 71.662594][ T5352] ? bch2_fs_start+0x5e7/0xda0 [ 71.664713][ T5352] ? __pfx_bch2_fs_start+0x10/0x10 [ 71.666994][ T5352] ? sget+0x267/0x620 [ 71.668840][ T5352] bch2_fs_get_tree+0xb39/0x1520 [ 71.670789][ T5352] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 71.673078][ T5352] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 71.675493][ T5352] vfs_get_tree+0x92/0x2b0 [ 71.677514][ T5352] do_new_mount+0x2a2/0x9e0 [ 71.679588][ T5352] ? ns_capable+0x8a/0xf0 [ 71.681649][ T5352] ? __pfx_do_new_mount+0x10/0x10 [ 71.683865][ T5352] ? path_mount+0x61c/0xfe0 [ 71.685932][ T5352] ? user_path_at+0x44/0x60 [ 71.687948][ T5352] __se_sys_mount+0x317/0x410 [ 71.689993][ T5352] ? __pfx___se_sys_mount+0x10/0x10 [ 71.692185][ T5352] ? do_syscall_64+0xbe/0x3b0 [ 71.694064][ T5352] ? __x64_sys_mount+0x20/0xc0 [ 71.696218][ T5352] do_syscall_64+0xfa/0x3b0 [ 71.698397][ T5352] ? lockdep_hardirqs_on+0x9c/0x150 [ 71.700705][ T5352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.703308][ T5352] ? clear_bhb_loop+0x60/0xb0 [ 71.705335][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.707736][ T5352] RIP: 0033:0x7f651259066a [ 71.709679][ T5352] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.717676][ T5352] RSP: 002b:00007f651338be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.721489][ T5352] RAX: ffffffffffffffda RBX: 00007f651338bef0 RCX: 00007f651259066a [ 71.724885][ T5352] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 00007f651338beb0 [ 71.728090][ T5352] RBP: 00002000000000c0 R08: 00007f651338bef0 R09: 000000000000001e [ 71.731342][ T5352] R10: 000000000000001e R11: 0000000000000246 R12: 0000200000000100 [ 71.734518][ T5352] R13: 00007f651338beb0 R14: 0000000000005a27 R15: 0000200000005b80 [ 71.738043][ T5352] [ 71.739494][ T5352] Modules linked in: [ 71.744808][ T5352] ---[ end trace 0000000000000000 ]--- [ 71.756848][ T5352] RIP: 0010:bch2_btree_path_level_init+0xa01/0xa20 [ 71.759803][ T5352] Code: fd 90 0f 0b e8 30 4f 97 fd 90 0f 0b e8 28 4f 97 fd 90 0f 0b e8 20 4f 97 fd 90 0f 0b e8 18 4f 97 fd 90 0f 0b e8 10 4f 97 fd 90 <0f> 0b e8 08 4f 97 fd 90 0f 0b e8 00 4f 97 fd 90 0f 0b 66 66 66 66 [ 71.769112][ T5352] RSP: 0018:ffffc9000d4ae4a0 EFLAGS: 00010283 [ 71.772064][ T5352] RAX: ffffffff84287b90 RBX: ffff8880529d4360 RCX: 0000000000100000 [ 71.776276][ T5352] RDX: ffffc9000dfea000 RSI: 0000000000091f6c RDI: 0000000000091f6d [ 71.781050][ T5352] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 71.785085][ T5352] R10: dffffc0000000000 R11: fffff52001a95c88 R12: 000d280000000000 [ 71.789207][ T5352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.792581][ T5352] FS: 00007f651338c6c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 71.796122][ T5352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.799432][ T5352] CR2: 00007f2f6881d000 CR3: 0000000043ce6000 CR4: 0000000000352ef0 [ 71.802896][ T5352] Kernel panic - not syncing: Fatal exception [ 71.805719][ T5352] Kernel Offset: disabled [ 71.807595][ T5352] Rebooting in 86400 seconds..