[drm] amdgpu kernel modesetting enabled.
[DF4740] module loaded: sysctl hw.df4740.test=1 (recovery UAF) or =2 (fini/TDR UAF)
[DF4740] test1 attempt 1: setup
[DF4740] run_job(victim): hold entered - recovery inside unlocked window (sched_main.c:368-369)
[DF4740] free_job(victim) job=0xfffff8008f8ecf80 s_fence=0xfffff8008d3cd800 - victim job FREED while recovery(B) sits inside run_job()
[DF4740] stagehand: victim freed; waiting 3s for drm-RCU delay-line free of s_fence 0xfffff8008d3cd800
[DF4740] stagehand: opening gate - recovery resumes into freed/reclaimed s_fence memory
[DF4740] run_job(victim): released; recovery now writes s_fence=0xfffff8008d3cd800 (freed=1) at sched_main.c:373-374
[DF4740] *** UAF CONFIRMED (stage 1): recovery armed cb 0xfffff8008d3cd8a0 (offset +0xa0) inside FREED s_fence 0xfffff8008d3cd800 (sched_main.c:374) ***
[DF4740] stage 1 complete: armed-cb-on-freed=1 heap-write=-1; now run 'sysctl hw.df4740.fire=1' to signal the recovery parent and use the freed object