1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
|
loaded ta_22-0-0-77_7c426e7f.bin, session slot 0, cmd_buf PA 0x8200000 len 0x8000
residue set: TA blocks=248 faults=0
=== snapshot at 0x402938 : sp=0x41bf70 ctx=0x41d030 (machine FROZEN before teardown) ===
freeze OK: translate(sp)=0x4257f70
DACR=0x00005401 -> accessible domains [0, 5, 6, 7]
--realwrites: TA stack 0x418000-0x41c000 EXCLUDED from paint (non-zero stack writes are fatal)
attacker-writable regions (user-RW AND DACR-permitted in the TA's own TTBR0):
0x00407000-0x00417000 dom=6 magic prefix 0x50 (paint from 0x40707f)
0x0041d000-0x00421000 dom=6 magic prefix 0x51 (paint from 0x41d07f)
0x00422000-0x00423000 dom=6 magic prefix 0x52 (paint from 0x42207f)
0x04000000-0x04001000 dom=5 magic prefix 0x53 (paint from 0x400007f)
0x04002000-0x04003000 dom=5 magic prefix 0x54 (paint from 0x400207f)
painted 23 pages; pinned 3 uncontrollable words
vector base 0x0, abort hooks armed
=== POSITIVE CONTROLS (predicted outcomes) ===
0x00402425 PREFETCH fetch=0x0 sp=0x41bfb8
expected: add sp,#0x28 ; pop.w{..pc} -> pc from *(sp+0x44), PAINTED => PC_CONTROL
vec=0xc lr_abt=0x4 sp_usr=0x41bfb8
0x0040371d PREFETCH fetch=0x0 sp=0x41d054
expected: mov sp,r4 ; pop.w{..pc} -> pc from *(ctx+0x20), BELOW carve floor => not ctrl
vec=0xc lr_abt=0x4 sp_usr=0x41d054
0x0040157b DATA insn=0x40157a ctrl_regs=[]
expected: str r0,[r1] with r1=0 -> data abort at 0
vec=0x10 lr_abt=0x401582 sp_usr=0x41bf70
=== SWEEP: 24384 candidates, cap 300 insns ===
.. 250/24384 0s 1032.3/s eta 23s hits=0 {'RAN': 232, 'DATA': 17, 'SVC': 1, 'PREFETCH': 1}
.. 500/24384 0s 1623.2/s eta 15s hits=0 {'RAN': 480, 'DATA': 17, 'PREFETCH': 3, 'SVC': 1}
.. 750/24384 0s 1965.6/s eta 12s hits=0 {'RAN': 588, 'DATA': 157, 'PREFETCH': 5, 'SVC': 1}
.. 1000/24384 0s 2358.6/s eta 10s hits=0 {'RAN': 589, 'DATA': 402, 'PREFETCH': 9, 'SVC': 1}
.. 1250/24384 1s 2499.6/s eta 9s hits=0 {'RAN': 804, 'DATA': 432, 'PREFETCH': 14, 'SVC': 1}
.. 1500/24384 1s 2677.7/s eta 9s hits=0 {'RAN': 1050, 'DATA': 432, 'PREFETCH': 18, 'SVC': 1}
.. 1750/24384 1s 2725.6/s eta 8s hits=0 {'RAN': 1222, 'DATA': 432, 'SVC': 69, 'PREFETCH': 28}
.. 2000/24384 1s 2914.6/s eta 8s hits=0 {'RAN': 1223, 'DATA': 476, 'SVC': 247, 'PREFETCH': 55}
HIT V=0x00401217 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf60
.. 2250/24384 1s 3118.2/s eta 7s hits=1 {'RAN': 1235, 'DATA': 560, 'SVC': 263, 'PREFETCH': 160, 'UCERR': 32}
.. 2500/24384 1s 3288.5/s eta 7s hits=1 {'RAN': 1235, 'DATA': 640, 'PREFETCH': 312, 'SVC': 263, 'UCERR': 50}
.. 2750/24384 1s 3443.1/s eta 6s hits=1 {'RAN': 1235, 'DATA': 768, 'PREFETCH': 421, 'SVC': 263, 'UCERR': 63}
.. 3000/24384 1s 3553.8/s eta 6s hits=1 {'RAN': 1243, 'DATA': 853, 'PREFETCH': 576, 'SVC': 263, 'UCERR': 65}
HIT V=0x00401873 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
.. 3250/24384 1s 3632.5/s eta 6s hits=2 {'RAN': 1266, 'DATA': 892, 'PREFETCH': 748, 'SVC': 263, 'UCERR': 80}
.. 3500/24384 1s 3700.6/s eta 6s hits=2 {'RAN': 1347, 'DATA': 967, 'PREFETCH': 833, 'SVC': 263, 'UCERR': 89}
.. 3750/24384 1s 3755.9/s eta 5s hits=2 {'RAN': 1376, 'DATA': 1045, 'PREFETCH': 971, 'SVC': 263, 'UCERR': 94}
.. 4000/24384 1s 3802.4/s eta 5s hits=2 {'RAN': 1459, 'DATA': 1100, 'PREFETCH': 1076, 'SVC': 263, 'UCERR': 101}
.. 4250/24384 1s 3896.6/s eta 5s hits=2 {'RAN': 1459, 'DATA': 1248, 'PREFETCH': 1165, 'SVC': 263, 'UCERR': 114}
.. 4500/24384 1s 3955.8/s eta 5s hits=2 {'RAN': 1471, 'DATA': 1351, 'PREFETCH': 1287, 'SVC': 265, 'UCERR': 125}
HIT V=0x004025a5 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
.. 4750/24384 1s 4043.0/s eta 5s hits=3 {'DATA': 1486, 'RAN': 1473, 'PREFETCH': 1316, 'SVC': 318, 'UCERR': 155}
.. 5000/24384 1s 4095.1/s eta 5s hits=3 {'DATA': 1612, 'RAN': 1500, 'PREFETCH': 1386, 'SVC': 329, 'UCERR': 171}
HIT V=0x0040291b PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x0040291d PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
.. 5250/24384 1s 4159.1/s eta 5s hits=5 {'DATA': 1729, 'RAN': 1514, 'PREFETCH': 1473, 'SVC': 342, 'UCERR': 188}
.. 5500/24384 1s 4196.1/s eta 5s hits=5 {'DATA': 1864, 'RAN': 1541, 'PREFETCH': 1541, 'SVC': 347, 'UCERR': 203}
.. 5750/24384 1s 4224.6/s eta 4s hits=5 {'DATA': 1978, 'PREFETCH': 1588, 'RAN': 1574, 'SVC': 386, 'UCERR': 220}
.. 6000/24384 1s 4264.9/s eta 4s hits=5 {'DATA': 2143, 'PREFETCH': 1623, 'RAN': 1593, 'SVC': 403, 'UCERR': 234}
.. 6250/24384 1s 4304.9/s eta 4s hits=5 {'DATA': 2308, 'PREFETCH': 1674, 'RAN': 1608, 'SVC': 408, 'UCERR': 248}
.. 6500/24384 1s 4339.1/s eta 4s hits=5 {'DATA': 2425, 'PREFETCH': 1729, 'RAN': 1634, 'SVC': 444, 'UCERR': 264}
.. 6750/24384 2s 4394.6/s eta 4s hits=5 {'DATA': 2568, 'PREFETCH': 1773, 'RAN': 1640, 'SVC': 485, 'UCERR': 280}
.. 7000/24384 2s 4447.2/s eta 4s hits=5 {'DATA': 2757, 'PREFETCH': 1803, 'RAN': 1640, 'SVC': 505, 'UCERR': 291}
.. 7250/24384 2s 4487.2/s eta 4s hits=5 {'DATA': 2923, 'PREFETCH': 1834, 'RAN': 1647, 'SVC': 528, 'UCERR': 314}
.. 7500/24384 2s 4528.3/s eta 4s hits=5 {'DATA': 3025, 'PREFETCH': 1884, 'RAN': 1658, 'SVC': 592, 'UCERR': 337}
.. 7750/24384 2s 4541.5/s eta 4s hits=5 {'DATA': 3178, 'PREFETCH': 1930, 'RAN': 1686, 'SVC': 593, 'UCERR': 359}
.. 8000/24384 2s 4563.9/s eta 4s hits=5 {'DATA': 3297, 'PREFETCH': 1968, 'RAN': 1705, 'SVC': 651, 'UCERR': 375}
.. 8250/24384 2s 4590.7/s eta 4s hits=5 {'DATA': 3397, 'PREFETCH': 2048, 'RAN': 1724, 'SVC': 691, 'UCERR': 386}
.. 8500/24384 2s 4617.5/s eta 3s hits=5 {'DATA': 3502, 'PREFETCH': 2109, 'RAN': 1748, 'SVC': 706, 'UCERR': 431}
.. 8750/24384 2s 4623.5/s eta 3s hits=5 {'DATA': 3562, 'PREFETCH': 2225, 'RAN': 1793, 'SVC': 717, 'UCERR': 449}
.. 9000/24384 2s 4642.3/s eta 3s hits=5 {'DATA': 3718, 'PREFETCH': 2271, 'RAN': 1816, 'SVC': 724, 'UCERR': 467}
.. 9250/24384 2s 4657.0/s eta 3s hits=5 {'DATA': 3834, 'PREFETCH': 2340, 'RAN': 1842, 'SVC': 751, 'UCERR': 479}
.. 9500/24384 2s 4675.2/s eta 3s hits=5 {'DATA': 3981, 'PREFETCH': 2387, 'RAN': 1866, 'SVC': 763, 'UCERR': 499}
.. 9750/24384 2s 4689.4/s eta 3s hits=5 {'DATA': 4111, 'PREFETCH': 2448, 'RAN': 1887, 'SVC': 787, 'UCERR': 513}
.. 10000/24384 2s 4694.8/s eta 3s hits=5 {'DATA': 4244, 'PREFETCH': 2510, 'RAN': 1912, 'SVC': 803, 'UCERR': 527}
.. 10250/24384 2s 4710.1/s eta 3s hits=5 {'DATA': 4353, 'PREFETCH': 2582, 'RAN': 1935, 'SVC': 834, 'UCERR': 542}
HIT V=0x00405295 PC_CONTROL pc<-CTRL 0x41d3c4 (=0x41d000+0x3c4) | sp=0x41bff8
HIT V=0x00405299 PC_CONTROL pc<-CTRL 0x41d3c4 (=0x41d000+0x3c4) | sp=0x41bff8
HIT V=0x0040529b PC_CONTROL pc<-CTRL 0x41d3c4 (=0x41d000+0x3c4) | sp=0x41bff8
HIT V=0x0040529d PC_CONTROL pc<-CTRL 0x41d3c4 (=0x41d000+0x3c4) | sp=0x41bff8
.. 10500/24384 2s 4737.0/s eta 3s hits=9 {'DATA': 4473, 'PREFETCH': 2617, 'RAN': 1944, 'SVC': 899, 'UCERR': 559}
HIT V=0x004053cb PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004053cd PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004053cf PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004053d1 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004053d3 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004053d5 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee8
HIT V=0x004053d7 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee8
HIT V=0x004053db PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee8
HIT V=0x004053dd PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee8
HIT V=0x004053df PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004053e1 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004053e3 PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
HIT V=0x004053e5 PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
HIT V=0x004053e7 PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
HIT V=0x004053e9 PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
HIT V=0x004053eb PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
HIT V=0x00405439 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
HIT V=0x0040543b PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
HIT V=0x0040543f PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
HIT V=0x00405441 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
HIT V=0x00405443 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
.. 10750/24384 2s 4769.6/s eta 3s hits=30 {'DATA': 4566, 'PREFETCH': 2675, 'RAN': 1948, 'SVC': 957, 'UCERR': 575}
HIT V=0x004055f3 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004055f5 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
HIT V=0x004055f7 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bef0
HIT V=0x004055f9 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x004055fb PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x004055fd PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405601 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405603 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405607 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405609 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x0040560b PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x0040560d PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x0040560f PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405611 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405613 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x004056f1 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
.. 11000/24384 2s 4809.3/s eta 3s hits=46 {'DATA': 4655, 'PREFETCH': 2701, 'RAN': 1948, 'SVC': 1065, 'UCERR': 586}
HIT V=0x004056f3 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bef4
HIT V=0x004056f5 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bef4
HIT V=0x004056f7 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x004056f9 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405703 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405711 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405713 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405719 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x0040571d PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x0040571f PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405723 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405725 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405727 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405729 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x0040572b PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x0040572d PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405731 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405733 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405735 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405737 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
HIT V=0x00405739 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
.. 11250/24384 2s 4832.9/s eta 3s hits=67 {'DATA': 4752, 'PREFETCH': 2750, 'RAN': 1960, 'SVC': 1121, 'UCERR': 601}
.. 11500/24384 2s 4834.5/s eta 3s hits=67 {'DATA': 4772, 'PREFETCH': 2970, 'RAN': 1960, 'SVC': 1121, 'UCERR': 611}
.. 11750/24384 2s 4844.3/s eta 3s hits=67 {'DATA': 4785, 'PREFETCH': 3200, 'RAN': 1960, 'SVC': 1121, 'UCERR': 618}
.. 12000/24384 2s 4867.1/s eta 3s hits=67 {'DATA': 4837, 'PREFETCH': 3390, 'RAN': 1960, 'SVC': 1121, 'UCERR': 626}
.. 12250/24384 3s 4890.9/s eta 2s hits=67 {'DATA': 4837, 'PREFETCH': 3624, 'RAN': 1960, 'SVC': 1121, 'UCERR': 642}
.. 12500/24384 3s 4928.3/s eta 2s hits=67 {'DATA': 4900, 'PREFETCH': 3685, 'RAN': 1960, 'SVC': 1223, 'UCERR': 666}
.. 12750/24384 3s 4954.7/s eta 2s hits=67 {'DATA': 5043, 'PREFETCH': 3727, 'RAN': 1960, 'SVC': 1257, 'UCERR': 697}
.. 13000/24384 3s 4969.8/s eta 2s hits=67 {'DATA': 5278, 'PREFETCH': 3730, 'RAN': 1960, 'SVC': 1257, 'UCERR': 709}
.. 13250/24384 3s 4975.2/s eta 2s hits=67 {'DATA': 5518, 'PREFETCH': 3730, 'RAN': 1960, 'SVC': 1257, 'UCERR': 719}
.. 13500/24384 3s 4989.3/s eta 2s hits=67 {'DATA': 5748, 'PREFETCH': 3739, 'RAN': 1960, 'SVC': 1257, 'UCERR': 730}
.. 13750/24384 3s 5005.1/s eta 2s hits=67 {'DATA': 5978, 'PREFETCH': 3745, 'RAN': 1960, 'SVC': 1257, 'UCERR': 744}
.. 14000/24384 3s 4967.6/s eta 2s hits=67 {'DATA': 6106, 'PREFETCH': 3840, 'RAN': 1961, 'SVC': 1257, 'UCERR': 770}
.. 14250/24384 3s 4685.5/s eta 2s hits=67 {'DATA': 6108, 'PREFETCH': 4047, 'RAN': 2002, 'SVC': 1257, 'UCERR': 770}
.. 14500/24384 3s 4688.6/s eta 2s hits=67 {'DATA': 6108, 'PREFETCH': 4050, 'RAN': 2112, 'SVC': 1257, 'UCERR': 907}
.. 14750/24384 3s 4714.9/s eta 2s hits=67 {'DATA': 6113, 'PREFETCH': 4061, 'RAN': 2141, 'SVC': 1265, 'UCERR': 1104}
.. 15000/24384 3s 4717.9/s eta 2s hits=67 {'DATA': 6113, 'PREFETCH': 4064, 'RAN': 2259, 'SVC': 1265, 'UCERR': 1233}
.. 15250/24384 3s 4745.9/s eta 2s hits=67 {'DATA': 6122, 'PREFETCH': 4096, 'RAN': 2259, 'UCERR': 1442, 'SVC': 1265}
.. 15500/24384 3s 4773.4/s eta 2s hits=67 {'DATA': 6165, 'PREFETCH': 4243, 'RAN': 2259, 'UCERR': 1501, 'SVC': 1266}
.. 15750/24384 3s 4813.4/s eta 2s hits=67 {'DATA': 6221, 'PREFETCH': 4284, 'RAN': 2259, 'UCERR': 1642, 'SVC': 1278}
.. 16000/24384 3s 4847.9/s eta 2s hits=67 {'DATA': 6271, 'PREFETCH': 4353, 'RAN': 2259, 'UCERR': 1758, 'SVC': 1293}
.. 16250/24384 3s 4884.6/s eta 2s hits=67 {'DATA': 6323, 'PREFETCH': 4411, 'RAN': 2259, 'UCERR': 1890, 'SVC': 1301}
.. 16500/24384 3s 4924.1/s eta 2s hits=67 {'DATA': 6377, 'PREFETCH': 4451, 'RAN': 2259, 'UCERR': 2040, 'SVC': 1307}
.. 16750/24384 3s 4963.5/s eta 2s hits=67 {'DATA': 6417, 'PREFETCH': 4492, 'RAN': 2259, 'UCERR': 2187, 'SVC': 1329}
.. 17000/24384 3s 5004.7/s eta 1s hits=67 {'DATA': 6449, 'PREFETCH': 4513, 'UCERR': 2345, 'RAN': 2259, 'SVC': 1368}
.. 17250/24384 3s 5041.6/s eta 1s hits=67 {'DATA': 6500, 'PREFETCH': 4557, 'UCERR': 2482, 'RAN': 2259, 'SVC': 1386}
.. 17500/24384 3s 5082.5/s eta 1s hits=67 {'DATA': 6539, 'PREFETCH': 4581, 'UCERR': 2648, 'RAN': 2259, 'SVC': 1407}
.. 17750/24384 3s 5123.6/s eta 1s hits=67 {'DATA': 6553, 'PREFETCH': 4632, 'UCERR': 2824, 'RAN': 2259, 'SVC': 1416}
.. 18000/24384 3s 5162.4/s eta 1s hits=67 {'DATA': 6589, 'PREFETCH': 4662, 'UCERR': 2984, 'RAN': 2259, 'SVC': 1440}
.. 18250/24384 4s 5197.0/s eta 1s hits=67 {'DATA': 6631, 'PREFETCH': 4716, 'UCERR': 3116, 'RAN': 2259, 'SVC': 1462}
.. 18500/24384 4s 5229.5/s eta 1s hits=67 {'DATA': 6684, 'PREFETCH': 4762, 'UCERR': 3266, 'RAN': 2259, 'SVC': 1463}
.. 18750/24384 4s 5270.0/s eta 1s hits=67 {'DATA': 6706, 'PREFETCH': 4786, 'UCERR': 3453, 'RAN': 2259, 'SVC': 1480}
.. 19000/24384 4s 5305.0/s eta 1s hits=67 {'DATA': 6752, 'PREFETCH': 4825, 'UCERR': 3602, 'RAN': 2259, 'SVC': 1496}
.. 19250/24384 4s 5339.2/s eta 1s hits=67 {'DATA': 6798, 'PREFETCH': 4869, 'UCERR': 3743, 'RAN': 2259, 'SVC': 1515}
.. 19500/24384 4s 5372.5/s eta 1s hits=67 {'DATA': 6850, 'PREFETCH': 4912, 'UCERR': 3881, 'RAN': 2259, 'SVC': 1532}
.. 19750/24384 4s 5402.8/s eta 1s hits=67 {'DATA': 6877, 'PREFETCH': 4975, 'UCERR': 4018, 'RAN': 2259, 'SVC': 1555}
.. 20000/24384 4s 5435.1/s eta 1s hits=67 {'DATA': 6913, 'PREFETCH': 5038, 'UCERR': 4144, 'RAN': 2259, 'SVC': 1580}
.. 20250/24384 4s 5464.0/s eta 1s hits=67 {'DATA': 6944, 'PREFETCH': 5133, 'UCERR': 4257, 'RAN': 2259, 'SVC': 1591}
HIT V=0x004060f0 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
HIT V=0x004060f4 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
HIT V=0x004060f8 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
HIT V=0x004060fc PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
HIT V=0x00406100 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
HIT V=0x00406114 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
.. 20500/24384 4s 5487.2/s eta 1s hits=73 {'DATA': 6969, 'PREFETCH': 5193, 'UCERR': 4383, 'RAN': 2259, 'SVC': 1624}
.. 20750/24384 4s 5513.9/s eta 1s hits=73 {'DATA': 7023, 'PREFETCH': 5226, 'UCERR': 4517, 'RAN': 2259, 'SVC': 1653}
.. 21000/24384 4s 5535.3/s eta 1s hits=73 {'DATA': 7108, 'PREFETCH': 5260, 'UCERR': 4603, 'RAN': 2259, 'SVC': 1698}
.. 21250/24384 4s 5535.3/s eta 1s hits=73 {'DATA': 7173, 'PREFETCH': 5357, 'UCERR': 4678, 'RAN': 2259, 'SVC': 1711}
.. 21500/24384 4s 5532.4/s eta 1s hits=73 {'DATA': 7322, 'PREFETCH': 5454, 'UCERR': 4680, 'RAN': 2261, 'SVC': 1711}
.. 21750/24384 4s 5546.5/s eta 0s hits=73 {'DATA': 7401, 'PREFETCH': 5564, 'UCERR': 4722, 'RAN': 2280, 'SVC': 1711}
.. 22000/24384 4s 5561.0/s eta 0s hits=73 {'DATA': 7573, 'PREFETCH': 5585, 'UCERR': 4751, 'RAN': 2308, 'SVC': 1711}
.. 22250/24384 4s 5571.3/s eta 0s hits=73 {'DATA': 7715, 'PREFETCH': 5658, 'UCERR': 4782, 'RAN': 2311, 'SVC': 1712}
.. 22500/24384 4s 5525.8/s eta 0s hits=73 {'DATA': 7734, 'PREFETCH': 5661, 'UCERR': 4785, 'RAN': 2534, 'SVC': 1714}
.. 22750/24384 4s 5526.7/s eta 0s hits=73 {'DATA': 7734, 'PREFETCH': 5661, 'UCERR': 4785, 'RAN': 2784, 'SVC': 1714}
.. 23000/24384 4s 5491.5/s eta 0s hits=73 {'DATA': 7734, 'PREFETCH': 5661, 'UCERR': 4785, 'RAN': 3034, 'SVC': 1714}
.. 23250/24384 4s 5468.7/s eta 0s hits=73 {'DATA': 7734, 'PREFETCH': 5850, 'UCERR': 4785, 'RAN': 3095, 'SVC': 1714}
.. 23500/24384 4s 5478.5/s eta 0s hits=73 {'DATA': 7821, 'PREFETCH': 5997, 'UCERR': 4800, 'RAN': 3095, 'SVC': 1715}
.. 23750/24384 4s 5501.0/s eta 0s hits=73 {'DATA': 7874, 'PREFETCH': 6082, 'UCERR': 4911, 'RAN': 3095, 'SVC': 1716}
.. 24000/24384 4s 5499.9/s eta 0s hits=73 {'DATA': 7889, 'PREFETCH': 6090, 'UCERR': 4977, 'RAN': 3255, 'SVC': 1717}
.. 24250/24384 4s 5478.9/s eta 0s hits=73 {'DATA': 7889, 'PREFETCH': 6255, 'UCERR': 4977, 'RAN': 3340, 'SVC': 1717}
=== outcome histogram ===
DATA 7889 (32.4%)
PREFETCH 6388 (26.2%)
UCERR 4977 (20.4%)
RAN 3340 (13.7%)
SVC 1717 (7.0%)
PC_CONTROL 73 (0.3%)
=== CONTROL hits: 73 ===
V=0x00401217 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf60
V=0x00401873 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x004025a5 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040291b PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040291d PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405295 PC_CONTROL pc<-CTRL 0x41d3c4 (=0x41d000+0x3c4) | sp=0x41bff8
V=0x00405299 PC_CONTROL pc<-CTRL 0x41d3c4 (=0x41d000+0x3c4) | sp=0x41bff8
V=0x0040529b PC_CONTROL pc<-CTRL 0x41d3c4 (=0x41d000+0x3c4) | sp=0x41bff8
V=0x0040529d PC_CONTROL pc<-CTRL 0x41d3c4 (=0x41d000+0x3c4) | sp=0x41bff8
V=0x004053cb PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004053cd PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004053cf PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004053d1 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004053d3 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004053d5 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee8
V=0x004053d7 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee8
V=0x004053db PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee8
V=0x004053dd PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee8
V=0x004053df PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004053e1 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004053e3 PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
V=0x004053e5 PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
V=0x004053e7 PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
V=0x004053e9 PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
V=0x004053eb PC_CONTROL pc<-CTRL 0x41d3cc (=0x41d000+0x3cc) | sp=0x41c000
V=0x00405439 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
V=0x0040543b PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
V=0x0040543f PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
V=0x00405441 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
V=0x00405443 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
V=0x004055f3 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004055f5 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
V=0x004055f7 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bef0
V=0x004055f9 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x004055fb PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x004055fd PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405601 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405603 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405607 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405609 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040560b PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040560d PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040560f PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405611 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405613 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x004056f1 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed8
V=0x004056f3 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bef4
V=0x004056f5 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bef4
V=0x004056f7 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x004056f9 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405703 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405711 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405713 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405719 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040571d PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040571f PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405723 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405725 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405727 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405729 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040572b PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x0040572d PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405731 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405733 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405735 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405737 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x00405739 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bf70
V=0x004060f0 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
V=0x004060f4 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
V=0x004060f8 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
V=0x004060fc PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
V=0x00406100 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bed0
V=0x00406114 PC_CONTROL pc<-CTRL 0x416e5c (=0x407000+0xfe5c) | sp=0x41bee0
wrote /tmp/sweep_real.json
|
