DF-5664 / panic.txt
login: usbmbuf_of: sizeof(struct usb_mbuf)=48 usbmbuf_of: block_size=0x08000000 nblocks=32 usbmbuf_of: bytes truly required = 0x100000600 (4294968832) usbmbuf_of: kmalloc size (truncated!) = 0x600 (1536) usbmbuf_of: kmalloc_usable_size = 1536 usbmbuf_of: queue populated with 32 mbufs (expected 32) usbmbuf_of: m[0] hdr@+000000 data_ptr=0xfffff80116bade80 (base+0x600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[1] hdr@+000048 data_ptr=0xfffff8011ebade80 (base+0x8000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[2] hdr@+000096 data_ptr=0xfffff80126bade80 (base+0x10000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[3] hdr@+000144 data_ptr=0xfffff8012ebade80 (base+0x18000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[4] hdr@+000192 data_ptr=0xfffff80136bade80 (base+0x20000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[5] hdr@+000240 data_ptr=0xfffff8013ebade80 (base+0x28000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[6] hdr@+000288 data_ptr=0xfffff80146bade80 (base+0x30000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[7] hdr@+000336 data_ptr=0xfffff8014ebade80 (base+0x38000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[8] hdr@+000384 data_ptr=0xfffff80156bade80 (base+0x40000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[9] hdr@+000432 data_ptr=0xfffff8015ebade80 (base+0x48000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[10] hdr@+000480 data_ptr=0xfffff80166bade80 (base+0x50000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[11] hdr@+000528 data_ptr=0xfffff8016ebade80 (base+0x58000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[12] hdr@+000576 data_ptr=0xfffff80176bade80 (base+0x60000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[13] hdr@+000624 data_ptr=0xfffff8017ebade80 (base+0x68000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[14] hdr@+000672 data_ptr=0xfffff80186bade80 (base+0x70000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[15] hdr@+000720 data_ptr=0xfffff8018ebade80 (base+0x78000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[16] hdr@+000768 data_ptr=0xfffff80196bade80 (base+0x80000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[17] hdr@+000816 data_ptr=0xfffff8019ebade80 (base+0x88000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[18] hdr@+000864 data_ptr=0xfffff801a6bade80 (base+0x90000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[19] hdr@+000912 data_ptr=0xfffff801aebade80 (base+0x98000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[20] hdr@+000960 data_ptr=0xfffff801b6bade80 (base+0xa0000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[21] hdr@+001008 data_ptr=0xfffff801bebade80 (base+0xa8000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[22] hdr@+001056 data_ptr=0xfffff801c6bade80 (base+0xb0000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[23] hdr@+001104 data_ptr=0xfffff801cebade80 (base+0xb8000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[24] hdr@+001152 data_ptr=0xfffff801d6bade80 (base+0xc0000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[25] hdr@+001200 data_ptr=0xfffff801debade80 (base+0xc8000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[26] hdr@+001248 data_ptr=0xfffff801e6bade80 (base+0xd0000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[27] hdr@+001296 data_ptr=0xfffff801eebade80 (base+0xd8000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[28] hdr@+001344 data_ptr=0xfffff801f6bade80 (base+0xe0000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[29] hdr@+001392 data_ptr=0xfffff801febade80 (base+0xe8000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[30] hdr@+001440 data_ptr=0xfffff80206bade80 (base+0xf0000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: m[31] hdr@+001488 data_ptr=0xfffff8020ebade80 (base+0xf8000600) len=0x8000000 <== OOB (past allocation) usbmbuf_of: POKE: writing 1 byte via m[31]->cur_data_ptr (wild pointer)... usbmbuf_of: if you can read this, the page was mapped (unlikely) Fatal trap 12: page fault while in kernel mode cpuid = 2; lapic id = 2 fault virtual address = 0xfffff8020ebade80 fault code = supervisor write data, page not present instruction pointer = 0x8:0xffffffff826001cb stack pointer = 0x10:0xfffff8011841d798 frame pointer = 0x10:0xfffff8011841d7e8 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 1591 current thread = pri 6 kernel: type 12 trap, code=2 CPU2 stopping CPUs: 0x0000003b stopped Stopped at usbmbuf_of_modevent+0x1cb: movb $0x41,(%rax) db>