# DF-5303 baseline run (unpatched guest source), guest root:
#   # kldload /root/df5302/df5302.ko
#   # sysctl kern.df5302_mode=2
#   # sysctl kern.df5302_fire=1
# (ssh session dies at the panic; output captured on the serial console, vm.sh log)
DF5302: harness loaded (production fwohci.c compiled in); kern.df5302_mode=1 kern.df5302_fire=1 to trigger
DF5303: sc=0xfffff80118697000 sizeof=35400 &sc->ir[0x20]=0xfffff8011869f9c8 is 7936 bytes past ir[0] (1 into the 35400-byte softc tail alias)
DF5303: phantom dbch->ndb(=maxrec)=10 phantom->top(=sid_dma.dma_map)=0x10
DF5303: calling production dump_db(sc, OHCI_MAX_DMA_CH=0x44) -- expect fault at 0x10 inside the STAILQ walk
Fatal user address access from kernel mode from sysctl at ffffffff826007f8


Fatal trap 12: page fault while in kernel mode
cpuid = 1; lapic id = 1
fault virtual address	= 0x10
fault code		= supervisor read data, page not present
instruction pointer	= 0x8:0xffffffff826007f8
stack pointer	        = 0x10:0xfffff801183fb708
frame pointer	        = 0x10:0xfffff801183fb758
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 0, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1441
current thread          = pri 6 
kernel: type 12 trap, code=0

CPU1 stopping CPUs: 0x0000003d
 stopped
Stopped at      dump_db+0x58:   movq    (%rax),%r9
db>