/dev/vbd0s1a: FILESYSTEM CLEAN; SKIPPING CHECKS
/dev/vbd0s1a: clean, 53311 free (1479 frags, 6479 blocks, 0.3% fragmentation)
mount_hammer2: unable to connect to cluster controller
mount_hammer2: cluster_connect(/dev/vbd0s1d@ROOT) failed
hammer2_mount: "vbd0s1d": no recovery needed
hammer2: enable read/write
HAMMER2: VOLDATA DUMP
HAMMER2: INITIATE SPANs
mount_hammer2: unable to connect to cluster controller
mount_hammer2: cluster_connect(/dev/vbd0s1d@ROOT) failed
Mounting tmpfs at /var/run/shm.
Setting hostname: dfbsd.
Starting dhclient.
starting dhclient on vtnet0
lo0: flags=808049<UP,LOOPBACK,RUNNING,MULTICAST,PROXY> metric 0 mtu 16384
	options=43<RXCSUM,TXCSUM,RSS>
	inet 127.0.0.1 netmask 0xff000000
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2
	groups: lo
vtnet0: flags=808802<BROADCAST,SIMPLEX,MULTICAST,PROXY> metric 0 mtu 1500
	options=28<VLAN_MTU,JUMBO_MTU>
	ether 52:54:00:12:34:56
	media: Ethernet 1000baseT <full-duplex>
	status: active
route: writing to routing socket: Network is unreachable
add net default: gateway 10.0.2.2: Network is unreachable
Additional routing options:.
Starting devd.
Additional TCP options:.
Mounting NFS file systems:.
ELF ldconfig path: /lib /usr/lib /usr/local/lib /usr/local/libdata/ldconfig/pkg
Building databases...
Starting syslogd.
Oct  8 10:09:16 dfbsd syslogd: kernel boot file is /boot/kernel/kernel

No core dumps found.
swap low/high-water marks set to 41940/62910
swapon: adding /dev/vbd0s1b as swap device
NFS CLIENT: access_cache_timeout=5 neg_cache_timeout=3.
Starting local daemons:.
Updating motd.
Configuring syscons: blanktime.
Starting sshd.
sendmail_submit: /etc/mail/aliases.db not present,  generating
sendmail_clientmqueue: /etc/mail/aliases.db not present,  generating
Starting cron.
Local package initialization:.

Thu Oct  8 10:09:16 UTC 2026


DragonFly/x86_64 (dfbsd) (ttyd0)



login: [PTSIM3] bus registered; use debug.ptsim3.scan=1 then debug.ptsim3.go=N
[PTSIM3] mode 4: parked=8 ios=8
[PTSIM3] xpt_done() from kthread done; camisr now BLOCKED on the sim lock we hold
[PTSIM3] bus deregistered (cam_sim refcount back to 1)
[PTSIM3] cam_sim_free(0xfffff80117612060) returned; chunk refcount now reads 1 (baseline-unfixed: 0 = already kfree'd while camisr is blocked on our lock; DF-5592-fixed: 1 = cam_simq pin held)
[PTSIM3] sim lock RELEASED -- camisr now runs on the FREED cam_sim chunk
[PTSIM3] mode 4: marker_hit=1; freed-chunk refcount slot now reads 0 (finalize set 0 before kfree; 0/garbage = freed AFTER camisr processing)
[PTSIM3] mode 4: completion callback ran; with the fix this happened while the sim was still pinned+valid (no UAF)