== ATTACK 1: power-parameter extension loop (pccard_cis.c:995-1003)
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO power_ext: entering verbatim pccard_read_cis()
SCENARIO power_ext: READ BUDGET EXHAUSTED (cap=4000000) -- pccard_scan_cis has NOT returned; kernel has no such cap
LEDGER power_ext: sizeof(cfe)=160 sizeof(pf)=216 | alloc cfe=1 pf=1 other=0 | kfree cfe=0 pf=0 other=0 | LIVE cfe=1 pf=1 other=0
RING: no periodicity found in 8192 reads
SCENARIO power_ext: exit 90 (non-terminating scan)
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO power_ext: child_exit=90
== ATTACK 2: misc extension loop (pccard_cis.c:1243-1246)
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO misc_ext: entering verbatim pccard_read_cis()
SCENARIO misc_ext: READ BUDGET EXHAUSTED (cap=4000000) -- pccard_scan_cis has NOT returned; kernel has no such cap
LEDGER misc_ext: sizeof(cfe)=160 sizeof(pf)=216 | alloc cfe=1 pf=1 other=0 | kfree cfe=0 pf=0 other=0 | LIVE cfe=1 pf=1 other=0
RING: no periodicity found in 8192 reads
SCENARIO misc_ext: exit 90 (non-terminating scan)
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO misc_ext: child_exit=90
== wall-clock variants (SIGALRM = scan still running after 3s)
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO power_ext_alarm: entering verbatim pccard_read_cis()
SCENARIO power_ext_alarm: SIGALRM after wall-clock budget; bus_reads=10 (scan_cis still running)
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO power_ext_alarm: child_exit=99
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO misc_ext_alarm: entering verbatim pccard_read_cis()
SCENARIO misc_ext_alarm: SIGALRM after wall-clock budget; bus_reads=11 (scan_cis still running)
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO misc_ext_alarm: child_exit=99
== minimal-overwalk controls (read at idx==length, then stops)
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO power_stops: entering verbatim pccard_read_cis()
SCENARIO power_stops: returned normally. card->error=0 bus_reads=17 flag_switches=2
MARK: image offset 22 (idx == tuple->length, past declared body) was bus-read 2 time(s)
OOB: 0 out-of-mapping bus reads
CARD: functions=1 cis1_major=-1 manufacturer=0xffffffff product=0xffffffff
LEDGER power_stops: sizeof(cfe)=160 sizeof(pf)=216 | alloc cfe=1 pf=1 other=0 | kfree cfe=0 pf=0 other=0 | LIVE cfe=1 pf=1 other=0
TEARDOWN: harness drained 1 cfe + pf chain (pccard.c:317-324 semantics)
SCENARIO power_stops: exit 0
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO power_stops: child_exit=0
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO misc_stops: entering verbatim pccard_read_cis()
SCENARIO misc_stops: returned normally. card->error=0 bus_reads=16 flag_switches=2
MARK: image offset 20 (idx == tuple->length, past declared body) was bus-read 2 time(s)
OOB: 0 out-of-mapping bus reads
CARD: functions=1 cis1_major=-1 manufacturer=0xffffffff product=0xffffffff
LEDGER misc_stops: sizeof(cfe)=160 sizeof(pf)=216 | alloc cfe=1 pf=1 other=0 | kfree cfe=0 pf=0 other=0 | LIVE cfe=1 pf=1 other=0
TEARDOWN: harness drained 1 cfe + pf chain (pccard.c:317-324 semantics)
SCENARIO misc_stops: exit 0
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO misc_stops: child_exit=0
== benign control
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO benign_cfe: entering verbatim pccard_read_cis()
SCENARIO benign_cfe: returned normally. card->error=0 bus_reads=16 flag_switches=1
OOB: 0 out-of-mapping bus reads
CARD: functions=1 cis1_major=-1 manufacturer=0xffffffff product=0xffffffff
LEDGER benign_cfe: sizeof(cfe)=160 sizeof(pf)=216 | alloc cfe=1 pf=1 other=0 | kfree cfe=0 pf=0 other=0 | LIVE cfe=1 pf=1 other=0
TEARDOWN: harness drained 1 cfe + pf chain (pccard.c:317-324 semantics)
SCENARIO benign_cfe: exit 0
RIG: sizeof(struct pccard_config_entry)=160 sizeof(struct pccard_function)=216 offsetof(pf, cfe_head)=40
SCENARIO benign_cfe: child_exit=0