On Sat, 29 Apr 2023, Finn Thain wrote:
efffefc0: 0eee0709 fmtb.int1, ssw efffefc4: 24798004 fmtb.isc, isb efffefc8: efffeffc fmtb.daddr efffefcc: efffeff8 fmtb.int2 efffefd0: d1d2d3d4 fmtb.dobuf efffefd4: 48e7383c fmtb.int3 efffefd8: 80000394 fmtb.int3 efffefdc: 80000392 fmtb.baddr efffefe0: 80000390 fmtb.int4 efffefe4: 000007a7 fmtb.dibuf efffefe8: 383cff0d fmtb.int5 efffefec: 000ff153 fmtb.int5, ver, int6 efffeff0: 383c2479 fmtb.int7 efffeff4: 8007b4e0 fmtb.int7 efffeff8: 0000383c fmtb.int7 efffeffc: 00000000 fmtb.int7 effff000: * 80100000 fmtb.int7 effff004: * 800003f8 fmtb.int7 effff008: * 000000e0 fmtb.int7 effff00c: * 014ed500 fmtb.int7 effff010: * effffcc4 fmtb.int7 effff014: c1c2c3c4 user stack effff018: effff03c user stack effff01c: 800003f8 user stack effff020: d1d2d3d4 user stack effff024: e1e2e3e4 user stack effff028: f1f2f3f4 user stack effff02c: 91929394 user stack effff030: a1a2a3a4 user stack effff034: b1b2b3b4 user stack effff038: c1c2c3c4 user stack effff03c: effff060 user stack The portion marked with an * is the part that damages the user stack, as these locations are all higher than USP.
Well, the nominal "USP" is 0xeffff014. But at this point MOVEM had already used up 5 long words below that, and will use up 2 more once resumed. So the real USP is 0xefffeff8 (which is found in fmtb.int2, FWIW).