resume crashes for the first re-execution of xword

[huhong789]

Hi,

I'm exploring shortcut following the instructions in README, but find that the execution of resume lead to crash. The crash happens when I try to re-execute the xword for the first time. Below is the crash information.

# command to run
$ ./resume /replay_logdb/rec_75  --pthread /home/hong/shortcut/eglibc-2.15/prefix/lib --from_ckpt=1310575 -l
Resume start 17670, 1593539656.299020
WINDSHIELDWIPERS
TENNISBALL
PENDULUM
dumping taintbuf
[MISMATCH] tid 17670 index diverges at 0x0.


Segmentation fault

$ dmesg
hong@hong-VirtualBox:~/shortcut/test$ dmesg
[85401.101604] -1 17528 0 1 0
[85401.101611] Pid 17670 replay_full_ckpt_wakeup starts 1593539656.300703, is_thread 0
[85401.101838] Pid 17670 returns from start_fw_slice 1593539656.300931, user 0 kernel 0, threads 1 1
[85401.115621] sys_execute_fw_slice: cannot find rollback process, pid is 0
[85401.115654] ------------[ cut here ]------------
[85401.115655] kernel BUG at kernel/replay_ckpt.c:2112!
[85401.115657] invalid opcode: 0000 [#17] SMP
[85401.115658] Modules linked in: spec(O) binfmt_misc aesni_intel cryptd aes_i586 snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm snd_seq_midi vboxguest(O) snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device joydev bnep rfcomm microcode snd bluetooth soundcore parport_pc snd_page_alloc ppdev psmouse serio_raw video vmwgfx mac_hid ttm i2c_piix4 drm lp parport hid_generic usbhid hid ahci libahci e1000
[85401.115670]
[85401.115672] Pid: 17670, comm: resume Tainted: G      D    O 3.5.7.13 #6 innotek GmbH VirtualBox/VirtualBox
[85401.115674] EIP: 0060:[<c10d692b>] EFLAGS: 00210292 CPU: 0
[85401.115676] EIP is at sys_execute_fw_slice+0x98b/0xae0
[85401.115677] EAX: 0000003d EBX: e80f0000 ECX: 0000221b EDX: 00200086
[85401.115678] ESI: 00000000 EDI: 00000002 EBP: e5f6dfac ESP: e5f6df14
[85401.115679]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[85401.115680] CR0: 8005003b CR2: 8fb61000 CR3: 25d6d000 CR4: 000406f0
[85401.115682] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[85401.115683] DR6: fffe0ff0 DR7: 00000400
[85401.115684] Process resume (pid: 17670, ti=e5f6c000 task=e80f0000 task.ti=e5f6c000)
[85401.115684] Stack:
[85401.115685]  c1804408 00000000 e5f6df4c c11cf2d5 00000020 00000000 00000000 f6f2c910
[85401.115688]  d157e338 d157e338 e4029788 e4029780 e80c7300 00000000 e5f6df64 c11cc164
[85401.115690]  d157e338 e80c7300 e4029780 00000003 e5f6df7c c11cc203 e80c7340 00000003
[85401.115693] Call Trace:
[85401.115695]  [<c11cf2d5>] ? fput+0x185/0x230
[85401.115697]  [<c11cc164>] ? filp_close+0x54/0x80
[85401.115699]  [<c11cc203>] ? sys_close+0x73/0xc0
[85401.115701]  [<c10c4748>] ? shim_close+0x1e8/0x470
[85401.115702]  [<c10c5428>] ? shim_write+0x158/0x1f0
[85401.115704]  [<c164f8bf>] sysenter_do_call+0x12/0x28
[85401.115705] Code: 00 00 00 89 f8 e8 66 f4 f9 ff 8b 58 2c e9 d8 f6 ff ff 8b 83 b4 0c 00 00 8b 40 08 c7 04 24 08 44 80 c1 89 44 24 04 e8 92 7c 56 00 <0f> 0b 89 e0 25 00 e0 ff ff 8b 78 18 c7 40 18 ff ff ff ff 8d 45
[85401.115723] EIP: [<c10d692b>] sys_execute_fw_slice+0x98b/0xae0 SS:ESP 0068:e5f6df14
[85401.115725] ---[ end trace bf449d0fe3e100fa ]---

I have successfully tested all instructions in Basics, which means the omniplay part should be working.

The same error happens even if I do not update board.tofro.