So somehow I didn't know about #qemu `-d in_asm`, which is letting me finally make progress on figuring out why #Plan9 1e for PC is crashing .
So far:
- "0x800012c6: 00 80 0e 00 00 00 addb %al, 0xe(%eax)": that's not the instructions at that address, it must be getting overwritten
- a few gdb watchpoints later: %sp is getting set to in the code area, so "benign" instructions are corrupting things.
Now to figure out how %sp is getting messed up.