=== DF-2270: count-validation bypass via real /dev/ch0 ===
ges type=1 base=0 count=16 -> ioctl=0 errno=0 (SUCCESS)
  kernel returned 16 element statuses for type 1
ges type=1 base=0 count=17 -> ioctl=-1 errno=22 (Invalid argument)
ges type=8 base=0 count=300 -> ioctl=0 errno=0 (SUCCESS)
  kernel returned 300 element statuses for type 8
ges type=4 base=0 count=1 -> ioctl=-1 errno=22 (Invalid argument)
ges type=1000 base=0 count=1000 -> ioctl=0 errno=0 (SUCCESS)
  kernel returned 1000 element statuses for type 1000
=== DF-2272: CHIOMOVE type race (expected 0 trips: copyin) ===
DF-2270/rig/hang_serial.log:DFH2270HANG: *** THREAD DID NOT RETURN within 8s: kmalloc(..., M_INTWAIT) of ~4GiB is stuck (watchdog fired; system must be reset)
DF-2270/rig/hang_pagedaemon.log:DFH2270HANG: thread calling REAL chgetelemstatus() with type=8 count=65535 (desclen=0xffff -> ~4GiB M_INTWAIT kmalloc)
DF-2270/rig/hang_pagedaemon.log:DFH2270HANG: *** THREAD DID NOT RETURN within 8s: kmalloc(..., M_INTWAIT) of ~4GiB is stuck (watchdog fired; system must be reset)
DF-2270/rig/hang_pagedaemon.log:pagedaemon: WARNING! Continuous paging for 1 minutes
DF-2270/rig/hang_pagedaemon.log:pagedaemon: WARNING! Continuous paging for 1 minutes
=== DF-2270 fixed: OOB types must now EINVAL ===
ges type=1 base=0 count=16 -> ioctl=0 errno=0 (SUCCESS)
  kernel returned 16 element statuses for type 1
ges type=1 base=0 count=17 -> ioctl=-1 errno=22 (Invalid argument)
ges type=8 base=0 count=300 -> ioctl=-1 errno=22 (Invalid argument)
ges type=1000 base=0 count=1000 -> ioctl=-1 errno=22 (Invalid argument)
=== DF-2272 fixed: race still 0, ioctls functional ===