Using anonymous memory (512 MB)
Copyright (c) 2003-2026 The DragonFly Project.
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
DragonFly 6.5-DEVELOPMENT #10: Sat Oct  3 16:35:36 UTC 2026
    root@dfbsd:/usr/obj/usr/src/sys/VKERNEL64
real memory = 536870912 (524288K bytes)
avail memory = 517398528 (505272K bytes)
DragonFly/MP: Multiprocessor
 cpu0 (BSP)
CPU Topology: cores_per_chip: 1; threads_per_core: 1; chips_per_package: 1;
Initialize MI interrupts for 1 cpus
initclocks
WARNING: KERNBASE being used
interrupt uses mplock: swi_taskq
wdog: In-kernel automatic watchdog reset enabled
vkd0: <Virtual disk> 
vkd0: 512MB (1048576 512 byte sectors)
md0: Malloc disk
vkd0: MBR magic not found; assume a COMPATIBILITY_SLICE (s0)
md0: MBR magic not found; assume a COMPATIBILITY_SLICE (s0)
DFBUSDMA: begin (vkernel busdma DF-5370 / DF-5372 tests)
DF5372: bounce vaddr=0x8013a9e000 datacount=64 (misaligned buf=0x8013b26400)
DF5372: PREWRITE alone: copy ok
DF5372: combined PREWRITE|POSTREAD: SILENT NO-OP (bug confirmed)
DF5372: VERDICT PROVEN - combined op copies nothing
DF5370: maps A=0x800e966020 B=0x800e966068 C=0x800e9660b0 created
DFZ[after 3 map creates]: total=3 free=3 reserved=0 active=0
DFX: tag alignment=1 lowaddr=ffffff highaddr=ffffffffffffffff
DFX: bufA=0x8013b27600 extract=1d61f600; bufB=0x8013bef800 extract0=1d747800 extract1=1d746800 extract6=1d74d800
DF5370: load A ret=0 cb_err=0 nsegs=1 (consumes 1 bounce page)
DFZ[after load A]: total=3 free=2 reserved=0 active=1
DFM[A]: pagesneeded=0 pagesreserved=0 dmat=0
DF5370: load B ret=36 cb_err=0 (EINPROGRESS - mapB queued on bounce_map_waitinglist)
DFZ[after load B]: total=3 free=0 reserved=2 active=1
DFM[B]: pagesneeded=7 pagesreserved=2 dmat=0x8013c0b860
DF5370: mirror check mapB pagesneeded=7 pagesreserved=2 dmat=0x8013c0b860 (tag=0x8013c0b860): OK
DF5370: bus_dmamap_destroy(queued mapB) = 0 (FREED WHILE STILL QUEUED - UAF armed)
DF5370: reclaim: freed mapB=0x800e966068 fake=0x800e966068 SAME CHUNK - planted pagesneeded=0x10000 pagesreserved=0 dmat=0x1120e20 (fully controlled) bzone=0x800e9ae460
DF5370: after wake: freed chunk pagesneeded=65536 pagesreserved=1
DF5370: VERDICT PROVEN - kernel wrote pagesreserved (0->1) into the reclaimed chunk after following its PLANTED dmat pointer
DF5370: victim mapC load err=36 (EINPROGRESS forever - zone wedged by a freed map's ghost reservation)
DF5370: VERDICT wedge PROVEN
DFBUSDMA: done
DUMMYNET initialized (011031)
ipfw2 initialized, default to accept, logging disabled
CAM: Configuring 0 busses
CAM: finished configuring all busses
Mounting root from ufs:vkd0s0a
no disk named 'vkd0s0a'
setrootbyname failed
ffs_mountroot: can't find rootvp
Root mount failed: 6
Mounting root from ufs:vkd0s1a
no disk named 'vkd0s1a'
setrootbyname failed
ffs_mountroot: can't find rootvp
Root mount failed: 6

Manual root filesystem specification:
  <fstype>:<device>  Specify root (e.g. ufs:da0s1a)
  ?                  List valid disk boot devices
  panic              Just panic
  abort              Abort manual input

mountroot> panic: Root mount failed, startup aborted.
cpuid = 0
Trace beginning at frame 0x7fffffdfcfe0
kgetdiskbyname() at 0x55550a
kgetdiskbyname() at 0x55550a
mi_startup() at 0x4900b1
main() at 0x454197
_start() at 0x4547fa
Debugger("panic")

CPU0 stopping CPUs: 0x0000000000000000
 stopped
Stopped at      0x71cad9:       movb    $0,0x9fa60c(%rip)
db> ufs:vkd0
No such command
db> panic: vconsgetc: EOF on console 0 4
cpuid = 0
Uptime: 3s
vkernels don't support dumps