⬢ DragonFlyBSD Kernel Audit
DF-4268 / run.race_production.dmesg.log
← back to finding ↓ download raw
dfwb3: === DF-4268: race the PRODUCTION wb_rxeof handler M-bM^@M^T the userland 'chip' (df8_toggle, other CPU) rewrites slot0.wb_status GOOD(0xc0400300/len64) <-> HUGE(0xc3ff0300/len16383), both OWN=1 (mid-write-back transient), 4:1 duty ===
dfwb3: [4268-armed] head==chain0:1 slot0.status=0x80000300 OWN:1 RXLEN:0 mbuf=0xfffff80089797a00
dfwb3: dispatch CPU=0 M-bM^@M^T START the toggler now (usched -p <other-cpu> ./df8_toggle); racing for up to 250 dispatches
dfwb3: if_input: m=0xfffff8008979fa00 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: if_input: m=0xfffff8008979fa00 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: if_input: m=0xfffff8008979fa00 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: if_input: m=0xfffff80117606c00 m_len=1019 pkthdr.len=1019 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: if_input: m=0xfffff8008979fa00 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: dispatch 25: delivered=30 maxplen=1019 won=0
dfwb3: dispatch 50: delivered=58 maxplen=1019 won=0
dfwb3: dispatch 75: delivered=87 maxplen=1019 won=0
dfwb3: dispatch 100: delivered=117 maxplen=1019 won=0
dfwb3: dispatch 125: delivered=141 maxplen=1019 won=0
dfwb3: dispatch 150: delivered=168 maxplen=1019 won=0
dfwb3: dispatch 175: delivered=196 maxplen=1019 won=0
dfwb3: dispatch 200: delivered=224 maxplen=1019 won=0
dfwb3: dispatch 225: delivered=250 maxplen=1019 won=0
dfwb3: dispatch 250: delivered=276 maxplen=1019 won=0
dfwb3: DF-4268 PRODUCTION race over after 250 dispatches (~17 s): delivered=276 maxplen=1019 WON=0
dfwb3: go4268 SURVIVED M-bM^@M^T guest stays up
dfwb3: layout: sizeof(wb_softc)=0x1e80 if_timer=0x6a bhandle=0x3c0 btag=0x3c8 ldata=0x400 rx_chain0=0x448 stat_timer=0x1e68 snd.altq_subq=0x210
dfwb3: resolved: rxeof=0xffffffff808dae30 init=0xffffffff808da6d0 stop=0xffffffff808d9850 start=0 txeof=0 watchdog=0 mbstat=0 mbtypes=0
dfwb3: === DF-4268: race the PRODUCTION wb_rxeof handler M-bM^@M^T the userland 'chip' (df8_toggle, other CPU) rewrites slot0.wb_status GOOD(0xc0400300/len64) <-> HUGE(0xffff0300/len16383), both OWN=1 (mid-write-back transient), 4:1 duty ===
dfwb3: [4268-armed] head==chain0:1 slot0.status=0x80000300 OWN:1 RXLEN:0 mbuf=0xfffff80117176000
dfwb3: dispatch CPU=0 M-bM^@M^T START the toggler now (usched -p <other-cpu> ./df8_toggle); racing for up to 250 dispatches
dfwb3: if_input: m=0xfffff80089798800 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: if_input: m=0xfffff80089798800 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: if_input: m=0xfffff80089798800 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: if_input: m=0xfffff80089798800 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: if_input: m=0xfffff80089798800 m_len=60 pkthdr.len=60 dst=ff:ff:ff:ff:ff:ff type=df67 (further normal deliveries suppressed in log)
dfwb3: dispatch 25: delivered=25 maxplen=60 won=0
dfwb3: dispatch 50: delivered=46 maxplen=60 won=0
dfwb3: dispatch 75: delivered=67 maxplen=60 won=0
dfwb3: dispatch 100: delivered=90 maxplen=60 won=0
dfwb3: dispatch 125: delivered=113 maxplen=60 won=0
dfwb3: dispatch 150: delivered=135 maxplen=60 won=0
dfwb3: dispatch 175: delivered=156 maxplen=60 won=0
dfwb3: dispatch 200: delivered=181 maxplen=60 won=0
dfwb3: dispatch 225: delivered=202 maxplen=60 won=0
dfwb3: dispatch 250: delivered=221 maxplen=60 won=0
dfwb3: DF-4268 PRODUCTION race over after 250 dispatches (~16 s): delivered=221 maxplen=60 WON=0
dfwb3: go4268 SURVIVED M-bM^@M^T guest stays up