⬢ DragonFlyBSD Kernel Audit
DF-3729 / run.2.log
← back to finding ↓ download raw
--- baseline (unfixed replica) ---
== DF-3729 ciss_notify_rescan_logical unbounded walk ==
report buffer = 128 bytes (15 LUNs) + 4096-byte redzone; ciss_max_logical_bus=2

controller list_size=0x1000 -> ndrives=131072 (buffer holds 15; init_logical would have rejected this at ciss.c:1357)

  i=  0 lun read in-buffer (raw 0x00000003) -> bus=  0 target=  3
  i=  1 lun read in-buffer (raw 0x00010007) -> bus=  1 target=  7
  i=  2 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  3 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  4 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  5 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  6 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  7 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i= 30 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 31 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 32 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 33 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 34 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 35 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 36 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 37 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 38 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 39 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 40 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 41 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 42 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 43 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 44 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 45 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 46 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 47 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 48 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 49 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 50 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 51 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 52 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 53 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 54 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 55 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 56 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 57 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 58 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 59 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 60 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 61 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 62 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 63 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 64 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 65 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 66 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 67 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 68 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 69 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 70 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 71 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 72 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 73 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 74 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 75 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 76 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 77 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 78 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 79 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 80 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 81 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 82 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 83 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 84 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 85 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 86 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 87 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 88 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 89 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 90 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 91 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 92 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 93 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 94 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 95 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 96 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 97 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 98 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i= 99 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=100 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=101 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=102 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=103 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=104 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=105 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=106 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=107 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=108 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=109 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=110 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=111 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=112 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=113 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=114 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=115 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=116 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=117 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=118 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=119 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=120 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=121 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=122 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=123 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=124 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=125 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=126 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=127 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=128 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=129 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=130 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=131 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=132 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=133 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=134 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=135 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=136 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=137 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=138 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=139 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=140 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=141 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=142 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=143 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=144 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=145 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=146 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=147 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=148 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=149 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=150 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=151 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=152 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=153 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=154 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=155 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=156 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=157 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=158 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=159 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=160 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=161 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=162 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=163 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=164 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=165 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=166 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=167 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=168 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=169 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=170 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=171 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=172 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=173 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=174 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=175 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=176 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=177 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=178 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=179 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=180 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=181 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=182 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=183 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=184 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=185 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=186 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=187 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=188 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=189 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=190 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=191 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=192 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=193 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=194 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=195 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=196 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=197 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=198 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=199 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=200 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=201 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=202 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=203 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=204 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=205 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=206 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=207 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=208 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=209 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=210 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=211 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=212 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=213 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=214 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=215 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=216 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=217 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=218 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=219 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=220 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=221 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=222 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=223 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=224 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=225 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=226 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=227 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=228 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=229 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=230 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=231 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=232 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=233 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=234 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=235 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=236 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=237 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=238 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=239 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=240 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=241 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=242 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=243 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=244 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=245 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=246 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=247 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=248 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=249 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=250 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=251 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=252 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=253 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=254 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)
  i=255 lun read OOB (redzone) (raw 0xffffffff) -> bus=255 target=255  -> INDEXES ROW 255 OF 2, COL beyond 14 (OOB WRITE)

[BUG REPRODUCED] 226 OOB heap READS past the report buffer and 226 OOB row/col
index computations -> ciss_logical[bus][target] OOB WRITES (cl_update,
cl_address, cl_controller, then identify stores cl_ldrive/cl_lstatus pointers).
RUN_EXIT=0
--- fixed replica (-DFIXED) ---
== DF-3729 ciss_notify_rescan_logical unbounded walk ==
report buffer = 128 bytes (15 LUNs) + 4096-byte redzone; ciss_max_logical_bus=2

controller list_size=0x1000 -> ndrives=131072 (buffer holds 15; init_logical would have rejected this at ciss.c:1357)

[fix] clamping ndrives 131072 -> 15

  i=  0 lun read in-buffer (raw 0x00000003) -> bus=  0 target=  3
  i=  1 lun read in-buffer (raw 0x00010007) -> bus=  1 target=  7
  i=  2 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  3 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  4 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  5 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  6 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  7 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0

[FIXED] ndrives clamped to 15 and bus/target validated: 0 OOB accesses.
RUN_EXIT=0
OVERALL_EXIT=1