DF-4964 / run.log
TRIGGER: map=fffff80118930000 (64KB real), driver told BAR2=4096 bytes TRIGGER: canary@+0x7014 before = deadbeef, canary@+0x7000 before = cafebabe TRIGGER: calling sili_port_alloc(sc, port=3) contigmalloc_map: failed size 4096 low=0 high=fff align=8 boundary=0 flags=00000102 pci0.3: NOSGET TRIGGER: canary@+0x7014 after = 00000fff TRIGGER: canary@+0x7000 after = 00000001 TRIGGER: *** OOB MMIO WRITES PROVEN at +0x7014 and +0x7000 (INT_DISABLE/CTL_SET landed outside the 4KB BAR2 window) *** TRIGGER: sili_port_alloc returned 12 TRIGGER: unloaded, guest still alive TRIGGER: fake_bar=fffff80118a4c000, driver told BAR2=4096 bytes TRIGGER: canary@+0x7014 before = deadbeef, canary@+0x7000 before = cafebabe TRIGGER: calling sili_port_alloc(sc, port=3) contigmalloc_map: failed size 4096 low=0 high=fff align=8 boundary=0 flags=00000102 pci0.3: NOSGET TRIGGER: canary@+0x7014 after = 00000fff TRIGGER: canary@+0x7000 after = 00000001 TRIGGER: *** OOB MMIO WRITES PROVEN at +0x7014 and +0x7000 (INT_DISABLE/CTL_SET landed outside the 4KB BAR2 window) *** TRIGGER: sili_port_alloc returned 12 TRIGGER: unloaded, guest still alive TRIGGER: PANIC MODE, fake BAR2 base=00000000 (targets +0x7000 provably unmapped via pmap_extract) TRIGGER: first OOB write will land at 00007014 -- expect Fatal trap 12 TRIGGER: unloaded, guest still alive module_register_init: MOD_LOAD (df4964, ffffffff82600000, 0) error 2 TRIGGER: PANIC MODE, fake BAR2 base=00000000 (targets +0x7000 provably unmapped via pmap_extract) TRIGGER: first OOB write will land at 00007014 -- expect Fatal trap 12 TRIGGER: unloaded, guest still alive module_register_init: MOD_LOAD (df4964, ffffffff82600000, 0) error 2 TRIGGER: dbg kmem_alloc(2MB) = fffff80118b50000 TRIGGER: dbg extract(b+0x7000)=00000000 extract(b+0x7014)=00000014 TRIGGER: PANIC MODE, fake BAR2 base=00000000 (targets +0x7000 provably unmapped via pmap_extract) TRIGGER: first OOB write will land at 00007014 -- expect Fatal trap 12 TRIGGER: unloaded, guest still alive module_register_init: MOD_LOAD (df4964, ffffffff82600000, 0) error 2 TRIGGER: dbg kmem_alloc(2MB) = fffff80118b60000 TRIGGER: dbg extract(b+0x7000)=00000000 extract(b+0x7014)=00000014 TRIGGER: PANIC MODE, fake BAR2 base=fffff80118c60000 (targets +0x7000 provably unmapped via pmap_extract) TRIGGER: first OOB write will land at fffff80118c67014 -- expect Fatal trap 12 TRIGGER: fake_bar=fffff80118c60000, driver told BAR2=4096 bytes TRIGGER: calling sili_port_alloc(sc, port=3) Fatal trap 12: page fault while in kernel mode cpuid = 1; lapic id = 1 fault virtual address = 0xfffff80118c67014 fault code = supervisor write data, page not present instruction pointer = 0x8:0xffffffff80309b90 stack pointer = 0x10:0xfffff80118a4b6f8 frame pointer = 0x10:0xfffff80118a4b738 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 2781 current thread = pri 6 kernel: type 12 trap, code=2 CPU1 stopping CPUs: 0x0000003d stopped Stopped at sili_port_alloc+0x360: movl $0xfff,0x1014(%rdx) db>