DF-5406 / run.log
DMA space used: 13580k, remaining available: 131072k Mounting devfs hammer2_mount: "vbd0s1d": no recovery needed hammer2: enable read/write HAMMER2: VOLDATA DUMP HAMMER2: INITIATE SPANs swap low/high-water marks set to 41940/62910 hidrig: loaded (DF-5406 harness), sysctl kern.hidrig_mode / kern.hidrig_fire hidrig: sizeof(struct hid_data)=1088 sizeof(struct hid_item)=100 hidrig: offsetof(hid_data, cur)=24 MAXPUSH=4 MAXID=16 MAXUSAGE=64 hidrig: &cur[k] offset = 24 + k*100; alloc size 1088 hidrig: cur[11]=+1124 cur[21]=+2124 cur[255]=+25524 (object ends at +1088) kern.hidrig_mode: 0 -> 3 kern.hidrig_fire: 0 -> 0 hidrig: unloaded hidrig: loaded (DF-5406 harness), sysctl kern.hidrig_mode / kern.hidrig_fire hidrig: live parser chunk s=0xfffff80089703200 (size 1088), 9 guards hidrig: target guard[7]=0xfffff80089703680 delta=1152 above s hidrig: target index k=16: marker 0xc0de0010 at s+1628 = guard[7]+476 hidrig: firing 30-byte descriptor hidrig: parse done, 1 items returned hidrig: GUARD 7 base=0xfffff80089703680 +0x01dc: 0xc0de0010 <-- CROSS-OBJECT CORRUPTION hidrig: guard scan done: 1/9 guards corrupted hidrig: mode 3 complete hidrig: hid_data=0xfffff801188e0500 size=1088 cur=0xfffff801188e0518(+24) cur[255] would be 0xfffff801188e68b4 hidrig: item 1: kind=0 logmin=0x00000000 logmax=0x00000000 pos=0 size=0 count=1 hidrig: item 2: kind=0 logmin=0xfeed0001 logmax=0xfeed0002 pos=0 size=0 count=1 hidrig: phase A done (last item logmin should read 0xfeed0001 back from +24.4KB OOB memory) hidrig: phase B: allocator churn (free-list stomp) hidrig: churn alloc 0 ok (0xfffff801188e9080) hidrig: churn alloc 32 ok (0xfffff801188e9080) hidrig: churn alloc 64 ok (0xfffff801188e9080) hidrig: churn alloc 96 ok (0xfffff801188e9080) hidrig: churn alloc 128 ok (0xfffff801188e9080) hidrig: churn alloc 160 ok (0xfffff801188e9080) hidrig: churn alloc 192 ok (0xfffff801188e9080) hidrig: churn alloc 224 ok (0xfffff801188e9080) hidrig: mode 1 complete (no trap in churn) hidrig: hid_data=0xfffff80123ab6400 size=1088 cur=0xfffff80123ab6418(+24) cur[255] would be 0xfffff80123abc7b4 hidrig: item 1: kind=0 logmin=0x00000000 logmax=0x00000000 pos=0 size=0 count=1 hidrig: item 2: kind=0 logmin=0xfeed0001 logmax=0xfeed0002 pos=0 size=0 count=1 hidrig: phase A done (last item logmin should read 0xfeed0001 back from +24.4KB OOB memory) hidrig: phase B: allocator churn (free-list stomp) Fatal trap 12: page fault while in kernel mode cpuid = 3; lapic id = 3 fault virtual address = 0xfffff80123ac008c fault code = supervisor write data, page not present instruction pointer = 0x8:0xffffffff80a4b333 stack pointer = 0x10:0xfffff8011838b210 frame pointer = 0x10:0xfffff8011838b228 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 2747 current thread = pri 6 kernel: type 12 trap, code=2 CPU3 stopping CPUs: 0x00000037 stopped Stopped at hid_get_item+0x83: movq $0,0x58(%r10) db>