program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000083c834767ef6b8978d1eb0bc501a7c3607e9ccb22cef241a00fcf64b9d07d81e06c5d53c423f633cb50e52f659968b866254ce71b4c2c205cb9b5db233db8e62add23eb84cb908292d29f6a308ebf1a0fe4179dc47e2af69b866983afced4359a6ef02b4091b01ce73c413848fe17f1ed6d809bfe693b451c7d4ad60311564b309f5ced76a9e", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r4 = io_uring_setup(0x2a2c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r6, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) connect$rose(r6, &(0x7f0000005a80)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$dri(&(0x7f0000000580), 0x20, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300d3"], 0x2d) syz_emit_vhci(&(0x7f0000005ac0)=ANY=[@ANYBLOB="04080c00c8000214463d800b59fbdc4c09041abaf6665e194126b47b6525e34158b4583384069807fdf0b85abfaf97a9d9ec1229378f9cae7d07656b4c318afc67fd24aeab3eb4b9efc548873efd02a7f53bee5dfd190f"], 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800001, &(0x7f0000005b40)={[{@errors_continue}, {@compression={'compression', 0x3d, 'gzip'}}, {@inodes_use_key_cache}, {@errors_continue}, {@nochanges}, {@norecovery}, {@version_upgrade={'version_upgrade', 0x3d, 'incompatible'}}, {@reconstruct_alloc}, {@no_data_io}]}, 0x1, 0x597b, &(0x7f0000000100)="$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") sendmsg$nl_route(r7, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000480)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200000000000000000002e00000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) [ 68.680548][ T5304] Bluetooth: hci0: command tx timeout [ 68.783294][ T5319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.797298][ T5319] bond0: (slave rose0): Enslaving as an active interface with an up link [ 69.456028][ T5320] loop0: detected capacity change from 0 to 32768 [ 69.695282][ T5320] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=ro,errors=continue,metadata_checksum=none,data_checksum=none,compression=gzip,nochanges,norecovery,nojournal_transaction_names,read_only,reconstruct_alloc,version_upgrade=incompatible,no_data_io [ 69.705382][ T5320] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 69.710745][ T5320] bcachefs (loop0): dropping and reconstructing all alloc info [ 69.714145][ T5320] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 69.714145][ T5320] rw journal devs: loop0 [ 69.739452][ T5320] bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0 [ 69.739468][ T5320] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 69.739474][ T5320] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 69.761592][ T5320] bcachefs (loop0): flagging btree extents lost data [ 69.765837][ T5320] error reading btree root extents l=0: btree_node_read_error, fixing [ 69.770839][ T5320] bcachefs (loop0): will run btree node scan [ 69.784541][ T5320] bcachefs (loop0): scan_for_btree_nodes... [ 69.791065][ T5320] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 69.791210][ T5320] extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 69.791221][ T5320] xattrs l=0 seq=1 journal_seq=4 cookie=2285c34bed0abe32 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0 [ 69.791230][ T5320] lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 69.791239][ T5320] deleted_inodes l=0 seq=1 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 69.791246][ T5320] [ 69.819680][ T5320] done [ 69.821070][ T5320] bcachefs (loop0): check_topology... [ 69.821135][ T5320] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 69.829361][ T5320] bcachefs (loop0): bch2_get_scanned_nodes(): recovering extents l=0 POS_MIN - SPOS_MAX [ 69.832916][ T5320] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 69.843914][ T5320] done [ 69.845117][ T5320] bcachefs (loop0): accounting_read... done [ 69.849307][ T5320] bcachefs (loop0): alloc_read... done [ 69.851603][ T5320] bcachefs (loop0): stripes_read... done [ 69.853695][ T5320] bcachefs (loop0): snapshots_read... done [ 69.856787][ T5320] bcachefs (loop0): check_allocations... [ 69.860054][ T5320] btree ptr not marked in member info btree allocated bitmap [ 69.860075][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 69.873248][ T5320] btree ptr not marked in member info btree allocated bitmap [ 69.873264][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 69.884275][ T5320] btree ptr not marked in member info btree allocated bitmap [ 69.884291][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 69.894206][ T5320] btree ptr not marked in member info btree allocated bitmap [ 69.894218][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 69.909727][ T5320] done [ 69.912396][ T5320] bcachefs (loop0): going read-write [ 69.917501][ T5320] bcachefs (loop0): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 69.922637][ T5320] ------------[ cut here ]------------ [ 69.924576][ T5320] kernel BUG at fs/bcachefs/alloc_foreground.c:493! [ 69.928733][ T5320] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 69.931293][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 69.935014][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.939060][ T5320] RIP: 0010:bch2_bucket_alloc_trans+0x39ec/0x3a50 [ 69.941501][ T5320] Code: e8 79 b5 f2 fd e9 f0 c7 ff ff 89 d9 80 e1 07 38 c1 0f 8c f3 fd ff ff 48 89 df e8 0f b4 f2 fd e9 e6 fd ff ff e8 d5 49 8c fd 90 <0f> 0b e8 cd 49 8c fd 90 0f 0b e8 25 e1 b5 07 f3 0f 1e fa e8 bc 49 [ 69.948579][ T5320] RSP: 0018:ffffc9000d2ed6a0 EFLAGS: 00010283 [ 69.950873][ T5320] RAX: ffffffff8413389b RBX: 0000000000000019 RCX: 0000000000100000 [ 69.954328][ T5320] RDX: ffffc9000eccb000 RSI: 000000000007759d RDI: 000000000007759e [ 69.957258][ T5320] RBP: ffffc9000d2eddc8 R08: ffffffff84130b69 R09: 0000000000000000 [ 69.960111][ T5320] R10: ffffc9000d2edc88 R11: fffff52001a5db96 R12: dffffc0000000000 [ 69.962725][ T5320] R13: ffff8880522e0000 R14: 0000000000000000 R15: 0000000000000000 [ 69.965490][ T5320] FS: 00007fde831b36c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 69.968741][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.971167][ T5320] CR2: 00005647530d6018 CR3: 00000000528a2000 CR4: 0000000000352ef0 [ 69.974079][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.976991][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.979966][ T5320] Call Trace: [ 69.981197][ T5320] [ 69.982312][ T5320] ? __die_body+0x5f/0xb0 [ 69.983970][ T5320] ? die+0x9e/0xc0 [ 69.985376][ T5320] ? do_trap+0x15a/0x3a0 [ 69.986898][ T5320] ? bch2_bucket_alloc_trans+0x39ec/0x3a50 [ 69.989174][ T5320] ? do_error_trap+0x1dc/0x2c0 [ 69.990939][ T5320] ? bch2_bucket_alloc_trans+0x39ec/0x3a50 [ 69.993021][ T5320] ? __pfx_do_error_trap+0x10/0x10 [ 69.994892][ T5320] ? report_bug+0x3e8/0x500 [ 69.996658][ T5320] ? handle_invalid_op+0x34/0x40 [ 69.998621][ T5320] ? bch2_bucket_alloc_trans+0x39ec/0x3a50 [ 70.000768][ T5320] ? exc_invalid_op+0x38/0x50 [ 70.002473][ T5320] ? asm_exc_invalid_op+0x1a/0x20 [ 70.004377][ T5320] ? bch2_bucket_alloc_trans+0xcb9/0x3a50 [ 70.006434][ T5320] ? bch2_bucket_alloc_trans+0x39eb/0x3a50 [ 70.008493][ T5320] ? bch2_bucket_alloc_trans+0x39ec/0x3a50 [ 70.010599][ T5320] ? lockdep_unlock+0x16a/0x300 [ 70.012398][ T5320] ? __pfx_bch2_bucket_alloc_trans+0x10/0x10 [ 70.014435][ T5320] ? lockdep_unlock+0x16a/0x300 [ 70.016182][ T5320] ? check_path+0x21/0x40 [ 70.017871][ T5320] ? check_noncircular+0x259/0x4a0 [ 70.019841][ T5320] ? __pfx_check_noncircular+0x10/0x10 [ 70.021826][ T5320] ? lockdep_unlock+0x16a/0x300 [ 70.023730][ T5320] ? __pfx_lockdep_unlock+0x10/0x10 [ 70.025709][ T5320] ? mark_lock+0x9a/0x360 [ 70.027356][ T5320] ? __lock_acquire+0x1397/0x2100 [ 70.029156][ T5320] ? __pfx_lock_acquire+0x10/0x10 [ 70.031007][ T5320] ? bch2_bucket_alloc_set_trans+0x26f/0xd30 [ 70.033084][ T5320] bch2_bucket_alloc_set_trans+0x517/0xd30 [ 70.035211][ T5320] ? bch2_bucket_alloc_set_trans+0x26f/0xd30 [ 70.037296][ T5320] ? __pfx_lock_release+0x10/0x10 [ 70.039121][ T5320] ? __pfx_bch2_bucket_alloc_set_trans+0x10/0x10 [ 70.041629][ T5320] ? unwind_next_frame+0x18e6/0x22d0 [ 70.043666][ T5320] ? deref_stack_reg+0x17c/0x210 [ 70.045455][ T5320] ? mark_lock+0x9a/0x360 [ 70.047041][ T5320] ? __lock_acquire+0x1397/0x2100 [ 70.048984][ T5320] ? kernel_text_address+0xa7/0xe0 [ 70.050831][ T5320] ? __kernel_text_address+0xd/0x40 [ 70.052734][ T5320] ? unwind_get_return_address+0x4d/0x90 [ 70.054831][ T5320] __open_bucket_add_buckets+0x13d0/0x1ec0 [ 70.056934][ T5320] ? __pfx_stack_trace_save+0x10/0x10 [ 70.058884][ T5320] ? __pfx___open_bucket_add_buckets+0x10/0x10 [ 70.061178][ T5320] ? mark_lock+0x2ae/0x360 [ 70.062906][ T5320] ? __lock_acquire+0x1397/0x2100 [ 70.064727][ T5320] ? bch2_btree_path_verify_locks+0x633/0x720 [ 70.067067][ T5320] ? __bch2_trans_relock+0x44a/0x5f0 [ 70.068981][ T5320] open_bucket_add_buckets+0x33a/0x410 [ 70.071066][ T5320] bch2_alloc_sectors_start_trans+0xce9/0x2030 [ 70.073345][ T5320] ? __pfx_lock_release+0x10/0x10 [ 70.075262][ T5320] ? trace_contention_end+0x3c/0x120 [ 70.077213][ T5320] ? __pfx_bch2_alloc_sectors_start_trans+0x10/0x10 [ 70.079695][ T5320] ? __mutex_unlock_slowpath+0x21e/0x790 [ 70.081831][ T5320] ? __pfx___mutex_lock+0x10/0x10 [ 70.083677][ T5320] bch2_btree_reserve_get+0x612/0x1890 [ 70.085592][ T5320] ? __pfx_bch2_btree_reserve_get+0x10/0x10 [ 70.087721][ T5320] ? rcuwait_wake_up+0x1e5/0x230 [ 70.089579][ T5320] ? percpu_up_read+0xdc/0x1b0 [ 70.091410][ T5320] ? __pfx___bch2_disk_reservation_add+0x10/0x10 [ 70.093765][ T5320] ? bch2_btree_update_start+0x682/0x14e0 [ 70.095762][ T5320] bch2_btree_update_start+0xe56/0x14e0 [ 70.097952][ T5320] ? bch2_btree_node_rewrite+0x1c0/0x1270 [ 70.100137][ T5320] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 70.102213][ T5320] ? __pfx___might_resched+0x10/0x10 [ 70.104175][ T5320] ? btree_node_unlock+0x13c/0x270 [ 70.106195][ T5320] ? bch2_trans_unlock+0x3a6/0x470 [ 70.108163][ T5320] ? bch2_trans_begin+0x9c5/0x1bf0 [ 70.110093][ T5320] bch2_btree_node_rewrite+0x1c0/0x1270 [ 70.112245][ T5320] ? __pfx_bch2_btree_node_rewrite+0x10/0x10 [ 70.114525][ T5320] ? rewrite_old_nodes_pred+0x3f7/0x550 [ 70.116530][ T5320] ? bch2_move_btree+0x76e/0xde0 [ 70.118297][ T5320] bch2_move_btree+0x7af/0xde0 [ 70.120139][ T5320] ? __pfx_rewrite_old_nodes_pred+0x10/0x10 [ 70.122424][ T5320] ? __pfx_bch2_move_btree+0x10/0x10 [ 70.124436][ T5320] ? mark_lock+0x9a/0x360 [ 70.125975][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.128172][ T5320] ? bch2_move_btree+0x247/0xde0 [ 70.130233][ T5320] ? kasan_save_track+0x51/0x80 [ 70.132091][ T5320] ? kasan_save_track+0x3f/0x80 [ 70.133854][ T5320] ? kasan_save_free_info+0x40/0x50 [ 70.135823][ T5320] ? bch2_move_btree+0x4b8/0xde0 [ 70.137704][ T5320] ? mark_lock+0x9a/0x360 [ 70.139603][ T5320] bch2_scan_old_btree_nodes+0x14b/0x3c0 [ 70.141752][ T5320] ? __pfx_bch2_scan_old_btree_nodes+0x10/0x10 [ 70.144147][ T5320] ? bch2_printbuf_exit+0x6d/0xa0 [ 70.146032][ T5320] ? __bch2_fs_read_write+0x102/0x370 [ 70.148022][ T5320] bch2_fs_recovery+0x34f5/0x39d0 [ 70.149844][ T5320] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 70.151753][ T5320] ? __pfx_lock_release+0x10/0x10 [ 70.153617][ T5320] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 70.155756][ T5320] ? __pfx_lock_release+0x10/0x10 [ 70.157666][ T5320] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 70.159730][ T5320] ? llist_reverse_order+0x72/0x90 [ 70.161542][ T5320] bch2_fs_start+0x356/0x5b0 [ 70.163222][ T5320] bch2_fs_get_tree+0xd68/0x1710 [ 70.165018][ T5320] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 70.167049][ T5320] ? generic_parse_monolithic+0x387/0x400 [ 70.169154][ T5320] ? apparmor_capable+0x13b/0x1b0 [ 70.171080][ T5320] vfs_get_tree+0x90/0x2b0 [ 70.172742][ T5320] do_new_mount+0x2be/0xb40 [ 70.174427][ T5320] ? __pfx_do_new_mount+0x10/0x10 [ 70.176279][ T5320] __se_sys_mount+0x2d6/0x3c0 [ 70.178067][ T5320] ? __pfx___se_sys_mount+0x10/0x10 [ 70.180167][ T5320] ? do_syscall_64+0x100/0x230 [ 70.182453][ T5320] ? __x64_sys_mount+0x20/0xc0 [ 70.184275][ T5320] do_syscall_64+0xf3/0x230 [ 70.186010][ T5320] ? clear_bhb_loop+0x35/0x90 [ 70.187692][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.189742][ T5320] RIP: 0033:0x7fde823874ca [ 70.191358][ T5320] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.198487][ T5320] RSP: 002b:00007fde831b2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.201436][ T5320] RAX: ffffffffffffffda RBX: 00007fde831b2ef0 RCX: 00007fde823874ca [ 70.204474][ T5320] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fde831b2eb0 [ 70.207272][ T5320] RBP: 00000000200000c0 R08: 00007fde831b2ef0 R09: 0000000000800001 [ 70.209908][ T5320] R10: 0000000000800001 R11: 0000000000000246 R12: 0000000020000000 [ 70.212734][ T5320] R13: 00007fde831b2eb0 R14: 000000000000597b R15: 0000000020005b40 [ 70.215533][ T5320] [ 70.216543][ T5320] Modules linked in: [ 70.218463][ T5320] ---[ end trace 0000000000000000 ]--- [ 70.224576][ T5320] RIP: 0010:bch2_bucket_alloc_trans+0x39ec/0x3a50 [ 70.231886][ T5320] Code: e8 79 b5 f2 fd e9 f0 c7 ff ff 89 d9 80 e1 07 38 c1 0f 8c f3 fd ff ff 48 89 df e8 0f b4 f2 fd e9 e6 fd ff ff e8 d5 49 8c fd 90 <0f> 0b e8 cd 49 8c fd 90 0f 0b e8 25 e1 b5 07 f3 0f 1e fa e8 bc 49 [ 70.241214][ T5320] RSP: 0018:ffffc9000d2ed6a0 EFLAGS: 00010283 [ 70.243386][ T5320] RAX: ffffffff8413389b RBX: 0000000000000019 RCX: 0000000000100000 [ 70.246539][ T5320] RDX: ffffc9000eccb000 RSI: 000000000007759d RDI: 000000000007759e [ 70.249366][ T5320] RBP: ffffc9000d2eddc8 R08: ffffffff84130b69 R09: 0000000000000000 [ 70.252302][ T5320] R10: ffffc9000d2edc88 R11: fffff52001a5db96 R12: dffffc0000000000 [ 70.255163][ T5320] R13: ffff8880522e0000 R14: 0000000000000000 R15: 0000000000000000 [ 70.259455][ T5320] FS: 00007fde831b36c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 70.262853][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.265242][ T5320] CR2: 00005647530d6018 CR3: 00000000528a2000 CR4: 0000000000352ef0 [ 70.268777][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.271764][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.274669][ T5320] Kernel panic - not syncing: Fatal exception [ 70.277129][ T5320] Kernel Offset: disabled [ 70.278858][ T5320] Rebooting in 86400 seconds..