panic: pmap_unwire: invalid PDE
2 views
Skip to first unread message
syzbot
Aug 11, 2022, 4:34:33 PM8/11/22
to syzkaller-o...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: a004629d760f Revert uLong -> z_off_t change in the kernel
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1261aded080000
kernel config: https://syzkaller.appspot.com/x/.config?x=7058272de1526588
dashboard link: https://syzkaller.appspot.com/bug?extid=922c2ec14d832dfa1311
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+922c2e...@syzkaller.appspotmail.com
panic: pmap_unwire: invalid PDE
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*203166 24751 32767 0x10 0x4000000 1K syz-executor.6
486757 14500 32767 0x1010 0x4080000 0 syz-executor.4
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8264de00) at panic+0x177 sys/kern/subr_prf.c:202
pmap_unwire(fffffd8070461108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd806bbe12f0,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1677
uvm_map_pageable_wire(fffffd806bbe12f0,fffffd8068132ed8,fffffd807d283360,0,0,0) at uvm_map_pageable_wire+0x5c0
sys_mlock(ffff8000fffeea80,ffff80002e518c68,ffff80002e518cb0) at sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
syscall(ffff80002e518d30) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e518d30) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf353793e410, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{1}>
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: pmap_unwire: invalid PDE
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8264de00) at panic+0x177 sys/kern/subr_prf.c:202
pmap_unwire(fffffd8070461108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd806bbe12f0,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1677
uvm_map_pageable_wire(fffffd806bbe12f0,fffffd8068132ed8,fffffd807d283360,0,0,0) at uvm_map_pageable_wire+0x5c0
sys_mlock(ffff8000fffeea80,ffff80002e518c68,ffff80002e518cb0) at sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
syscall(ffff80002e518d30) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e518d30) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf353793e410, count: -8
ddb{1}> show registers
rdi 0
rsi 0x1
rbp 0xffff80002e5189c0
rbx 0xffff800020dd9b97
rdx 0
rcx 0
rax 0xffff8000fffeea80
r8 0x101010101010101
r9 0x8080808080808080
r10 0x2ac68fc50a64296b
r11 0x99caf8f8d9e00ad2
r12 0xffff800020dd9998
r13 0
r14 0
r15 0x1
rip 0xffffffff822e6648 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80002e5189b0
ss 0
db_enter+0x18: addq $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor.6) pid=203166 stat=onproc
flags process=10<SUGID> proc=4000000<THREAD>
pri=32, usrpri=81, nice=20
forw=0xffffffffffffffff, list=0xffff8000fffefce0,0xffffffff82abd960
process=0xffff8000ffff2158 user=0xffff80002e513000, vmspace=0xfffffd806bbe12f0
estcpu=36, cpticks=1, pctcpu=0.0
user=0, sys=0, intr=0
ddb{1}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
2777 381805 42102 32767 2 0x10 syz-executor.5
2777 366350 42102 32767 2 0x4000010 syz-executor.5
2777 276998 42102 32767 2 0x4000010 syz-executor.5
58392 276153 31299 32767 2 0x10 syz-executor.0
58392 399676 31299 32767 2 0x4000010 syz-executor.0
58392 379297 31299 32767 3 0x4000090 fsleep syz-executor.0
93530 381437 86361 32767 2 0x10 syz-executor.1
93530 480770 86361 32767 3 0x4000090 fsleep syz-executor.1
28600 183141 27275 32767 2 0x10 syz-executor.7
28600 318034 27275 32767 2 0x4000010 syz-executor.7
24751 358294 84117 32767 3 0x10 vmmaplk syz-executor.6
24751 472263 84117 32767 3 0x4000010 biowait syz-executor.6
*24751 203166 84117 32767 7 0x4000010 syz-executor.6
26160 203014 27298 32767 2 0x10 syz-executor.2
26160 93799 27298 32767 3 0x4000090 fsleep syz-executor.2
14500 231896 26274 32767 2 0x81010 syz-executor.4
14500 486757 26274 32767 7 0x4081010 syz-executor.4
14500 420405 26274 32767 3 0x4003010 suspend syz-executor.4
40203 168257 87433 32767 3 0x90 nanoslp syz-executor.3
40203 258048 87433 32767 3 0x4000090 netio syz-executor.3
40203 59185 87433 32767 3 0x4000090 fsleep syz-executor.3
31299 413363 71362 32767 3 0x90 nanoslp syz-executor.0
71362 324729 7185 0 3 0x82 wait syz-executor.0
27298 223287 28223 32767 3 0x90 nanoslp syz-executor.2
28223 521326 7185 0 3 0x82 wait syz-executor.2
27275 307570 44952 32767 3 0x90 nanoslp syz-executor.7
44952 44002 7185 0 3 0x82 wait syz-executor.7
42102 358272 57079 32767 3 0x90 nanoslp syz-executor.5
57079 55050 7185 0 3 0x82 wait syz-executor.5
86361 302879 30309 32767 3 0x90 nanoslp syz-executor.1
30309 453797 7185 0 3 0x82 wait syz-executor.1
87433 239459 86665 32767 3 0x90 nanoslp syz-executor.3
86665 110755 7185 0 3 0x82 wait syz-executor.3
84117 332282 77613 32767 3 0x90 nanoslp syz-executor.6
77613 91151 7185 0 3 0x82 wait syz-executor.6
26274 276740 66998 32767 3 0x90 nanoslp syz-executor.4
66998 276598 7185 0 3 0x82 wait syz-executor.4
24968 205175 0 0 3 0x14200 bored sosplice
7185 235178 15408 0 3 0x82 wait syz-fuzzer
7185 222776 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 278151 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 429455 15408 0 3 0x4000082 wait syz-fuzzer
7185 400400 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 410736 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 67796 15408 0 3 0x4000082 wait syz-fuzzer
7185 362360 15408 0 3 0x4000082 kqread syz-fuzzer
7185 502784 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 437638 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 170372 15408 0 3 0x4000082 wait syz-fuzzer
7185 241116 15408 0 3 0x4000082 wait syz-fuzzer
7185 237268 15408 0 3 0x4000082 wait syz-fuzzer
7185 471303 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 198815 15408 0 3 0x4000082 wait syz-fuzzer
7185 301182 15408 0 3 0x4000082 wait syz-fuzzer
15408 390244 99132 0 3 0x10008a sigsusp ksh
99132 490153 82979 0 3 0x9a kqread sshd
53113 485067 1 0 3 0x100083 ttyin getty
82979 180992 1 0 3 0x88 kqread sshd
66354 289174 55298 73 3 0x1100090 kqread syslogd
55298 316798 1 0 3 0x100082 netio syslogd
29894 283555 1 0 3 0x100080 kqread resolvd
81445 63571 90021 77 3 0x100092 kqread dhcpleased
36898 220397 90021 77 3 0x100092 kqread dhcpleased
90021 463354 1 0 3 0x80 kqread dhcpleased
19228 148943 0 0 3 0x14200 bored smr
84943 420190 0 0 2 0x14200 zerothread
93172 355625 0 0 3 0x14200 aiodoned aiodoned
93117 433343 0 0 3 0x14200 syncer update
26454 463639 0 0 3 0x14200 cleaner cleaner
46845 257289 0 0 3 0x14200 reaper reaper
87434 420960 0 0 3 0x14200 pgdaemon pagedaemon
40976 248147 0 0 3 0x14200 bored viomb
96208 28523 0 0 3 0x40014200 acpi0 acpi0
99452 229584 0 0 3 0x40014200 idle1
69972 395466 0 0 3 0x14200 bored softnet
78594 355801 0 0 3 0x14200 bored softnet
62966 355498 0 0 3 0x14200 bored softnet
31946 486608 0 0 3 0x14200 bored softnet
63763 137977 0 0 3 0x14200 bored systqmp
65145 257599 0 0 3 0x14200 bored systq
57030 445082 0 0 3 0x40014200 bored softclock
43571 230086 0 0 3 0x40014200 idle0
1 296386 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{1}> show all locks
Process 24751 (syz-executor.6) thread 0xffff8000fffefce0 (472263)
exclusive rrwlock inode r = 0 (0xfffffd806ae662c8)
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4 vn_lock+0x84 sys/kern/vfs_vnops.c:567
#5 vn_write+0x123 sys/kern/vfs_vnops.c:408
#6 dofilewritev+0x19c sys/kern/sys_generic.c:380
#7 sys_pad_pwritev+0xb9 sys_pwritev sys/kern/vfs_syscalls.c:3399 [inline]
#7 sys_pad_pwritev+0xb9 sys/kern/vfs_syscalls.c:3455
#8 syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#8 syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
#9 Xsyscall+0x128
Process 24751 (syz-executor.6) thread 0xffff8000fffeea80 (203166)
exclusive rwlock uobjlk r = 0 (0xfffffd8077c6d7f0)
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 uvm_fault_unwire_locked+0x1c6 sys/uvm/uvm_fault.c:1668
#3 uvm_map_pageable_wire+0x5c0
#4 sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
#5 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#5 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#6 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82aeb6b0)
#0 witness_lock+0x44d
#1 __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2 mi_switch+0x3bb sys/kern/sched_bsd.c:416
#3 sleep_finish+0x180 sys/kern/kern_synch.c:420
#4 rw_enter+0x35a sys/kern/kern_rwlock.c:286
#5 uvm_fault_unwire_locked+0x1c6 sys/uvm/uvm_fault.c:1668
#6 uvm_map_pageable_wire+0x5c0
#7 sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
#8 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#8 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#9 Xsyscall+0x128
exclusive rwlock vmmaplk r = 0 (0xfffffd806bbe1308)
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 uvm_map_pageable_wire+0x374 vm_map_unbusy_ln sys/uvm/uvm_map.c:5543 [inline]
#2 uvm_map_pageable_wire+0x374 sys/uvm/uvm_map.c:2394
#3 sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
#4 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#4 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#5 Xsyscall+0x128
ddb{1}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10213 6412K 6419K 78643K 11521 0
pcb 13 12K 14K 78643K 17 0
rtable 244 6K 7K 78643K 4833 0
ifaddr 82 18K 18K 78643K 594 0
sysctl 3 1K 5K 78643K 18 0
counters 56 35K 35K 78643K 200 0
ioctlops 0 0K 2K 78643K 558 0
iov 0 0K 28K 78643K 5756 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 4 0
vnodes 1271 79K 80K 78643K 8899 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 9K 78643K 401 0
VM map 2 1K 1K 78643K 2 0
sem 12 0K 1K 78643K 8313 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 26 97K 117K 78643K 31642 0
sigio 0 0K 0K 78643K 627 0
proc 56 78K 115K 78643K 5206 0
subproc 104 6K 6K 78643K 1040 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 1 0K 0K 78643K 3182 0
in_multi 99 6K 7K 78643K 1253 0
ether_multi 1 0K 0K 78643K 125 0
mrt 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 259 1155K 1155K 78643K 259 0
exec 0 0K 2K 78643K 7414 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 8 62K 62K 78643K 8 0
UVM amap 472 96K 113K 78643K 194038 0
UVM aobj 131 4K 4K 78643K 131 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 1118 0
NDP 11 0K 2K 78643K 243 0
temp 124 4726K 4854K 78643K 82764 0
kqueue 12 18K 26K 78643K 2920 0
SYN cache 2 16K 16K 78643K 2 0
ddb{1}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 22 0 0 1 0 1 1 0 8 0
rtpcb 120 3150 0 3147 37 36 1 3 0 8 0
rtentry 112 940 0 825 4 0 4 4 0 8 0
unpcb 144 82857 0 82836 384 377 7 14 0 8 5
syncache 296 324 0 324 52 51 1 1 0 8 1
sackhl 24 1 0 1 1 1 0 1 0 8 0
tcpqe 32 208 0 208 37 36 1 1 0 8 1
tcpcb 736 13184 0 13171 387 380 7 20 0 8 5
arp 120 176 0 156 1 0 1 1 0 8 0
ipq 40 129 0 129 18 18 0 1 0 8 0
ipqe 40 367 0 367 18 18 0 1 0 8 0
inpcb 320 28786 0 28768 405 395 10 17 0 8 8
nd6 48 263 0 236 1 0 1 1 0 8 0
kcovpl 48 80 0 72 1 0 1 1 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 3739 0 3270 34 4 30 31 0 8 0
art_table 32 3740 0 3270 4 0 4 4 0 8 0
art_node 16 939 0 834 1 0 1 1 0 8 0
sysvmsgpl 40 3 0 1 1 0 1 1 0 8 0
semapl 112 8309 0 8299 1 0 1 1 0 8 0
shmpl 112 128 0 0 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 45114 0 43594 96 0 96 96 0 8 0
ffsino 272 45114 0 43594 102 0 102 102 0 8 0
nchpl 144 88767 0 87126 63 0 63 63 0 8 0
uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0
vnodes 216 5926 0 0 330 0 330 330 0 8 0
namei 1024 331676 0 331676 9 8 1 2 0 8 1
percpumem 16 112 0 72 1 0 1 1 0 8 0
kstatmem 264 166 0 144 2 0 2 2 0 8 0
scxspl 216 263506 0 263504 93 89 4 8 0 8 3
plimitpl 152 6746 0 6724 21 20 1 2 0 8 0
sigapl 424 31774 0 31719 7 0 7 7 0 8 0
futexpl 64 294406 0 294402 6 5 1 1 0 8 0
knotepl 120 1740 0 0 19 1 18 18 0 8 0
kqueuepl 216 9684 0 9676 157 152 5 8 0 8 4
pipepl 320 8226 0 8198 199 196 3 13 0 8 0
fdescpl 496 31756 0 31719 7 2 5 6 0 8 0
filepl 152 277694 0 277450 456 438 18 26 0 8 6
lockfpl 104 7005 0 7002 3 2 1 2 0 8 0
lockfspl 48 1697 0 1694 1 0 1 1 0 8 0
sessionpl 144 95 0 79 1 0 1 1 0 8 0
pgrppl 48 419 0 403 1 0 1 1 0 8 0
ucredpl 104 41338 0 41320 1 0 1 1 0 8 0
zombiepl 144 31720 0 31719 1 0 1 1 0 8 0
processpl 1064 31774 0 31719 4 0 4 4 0 8 0
procpl 672 95273 0 95190 16 8 8 9 0 8 0
sosppl 168 550 0 550 60 59 1 1 0 8 1
sockpl 488 115763 0 115717 2255 2240 15 50 0 8 8
mcl64k 65536 81 0 0 4 1 3 3 0 8 0
mcl16k 16384 33 0 0 4 1 3 3 0 8 0
mcl12k 12288 17 0 0 2 0 2 2 0 8 0
mcl9k 9216 63 0 0 3 1 2 2 0 8 0
mcl8k 8192 82 0 0 6 3 3 3 0 8 0
mcl4k 4096 98 0 0 9 6 3 8 0 8 1
mcl2k2 2112 15 0 0 1 0 1 1 0 8 0
mcl2k 2048 630 0 0 44 14 30 44 0 8 0
mtagpl 96 3 0 0 1 0 1 1 0 8 0
mbufpl 256 7599 0 0 415 1 414 414 0 8 0
bufpl 288 56406 0 50079 453 0 453 453 0 8 0
anonpl 24 6604215 0 6590477 302 194 108 132 0 186 0
amapchunkpl 152 622056 0 621363 343 314 29 42 0 158 0
amappl16 200 103770 0 103409 502 481 21 45 0 8 0
amappl15 192 7293 0 7286 1 0 1 1 0 8 0
amappl14 184 1639 0 1630 1 0 1 1 0 8 0
amappl13 176 8387 0 8382 1 0 1 1 0 8 0
amappl12 168 3183 0 3172 1 0 1 1 0 8 0
amappl11 160 5553 0 5538 2 1 1 2 0 8 0
amappl10 152 2436 0 2427 1 0 1 1 0 8 0
amappl9 144 1819 0 1817 1 0 1 1 0 8 0
amappl8 136 6138 0 5823 11 0 11 11 0 8 0
amappl7 128 3660 0 3633 1 0 1 1 0 8 0
amappl6 120 2024 0 2004 2 1 1 2 0 8 0
amappl5 112 27255 0 27232 1 0 1 1 0 8 0
amappl4 104 10372 0 10336 4 2 2 2 0 8 0
amappl3 96 104124 0 104046 8 6 2 3 0 8 0
amappl2 88 12209 0 12155 6 4 2 2 0 8 0
amappl1 80 791038 0 790235 27 10 17 19 0 8 0
amappl 88 190880 0 190668 6 0 6 6 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 130 0 0 3 0 3 3 0 8 0
uaddrrnd 24 31757 0 31720 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 31757 0 31720 1 0 1 1 0 8 0
vmmpekpl 168 261927 0 261869 4 0 4 4 0 8 0
vmmpepl 168 3172477 0 3169245 471 327 144 170 0 357 0
vmsppl 368 31756 0 31720 4 0 4 4 0 8 0
rwobjpl 56 794276 0 786523 142 29 113 116 0 8 0
pdppl 4096 63521 0 63440 902 821 81 91 0 8 0
pvpl 32 12456775 0 12437196 913 714 199 240 0 265 16
pmappl 248 31756 0 31720 4 1 3 3 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 2476 0 1241 36 0 36 36 0 8 0
ddb{1}> machine ddbcpu 0
Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp
x86_ipi_db(ffffffff82914ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 sys/kern/kern_lock.c:147
intr_handler(ffff8000296298b0,ffff80000004bd00) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532
Xintr_ioapic_edge21_untramp() at Xintr_ioapic_edge21_untramp+0x18f
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 sys/kern/kern_lock.c:147
single_thread_check_locked(ffff8000fffeed20,0,0) at single_thread_check_locked+0x216 sys/kern/kern_sig.c:2038
userret(ffff8000fffeed20) at userret+0x236 single_thread_check sys/kern/kern_sig.c:2058 [inline]
userret(ffff8000fffeed20) at userret+0x236 sys/kern/kern_sig.c:2008
child_return(ffff8000fffeed20) at child_return+0x109 mi_child_return sys/sys/syscall_mi.h:163 [inline]
child_return(ffff8000fffeed20) at child_return+0x109 sys/arch/amd64/amd64/trap.c:622
end trace frame: 0x0, count: 5
ddb{0}> trace
x86_ipi_db(ffffffff82914ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 sys/kern/kern_lock.c:147
intr_handler(ffff8000296298b0,ffff80000004bd00) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532
Xintr_ioapic_edge21_untramp() at Xintr_ioapic_edge21_untramp+0x18f
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 sys/kern/kern_lock.c:147
single_thread_check_locked(ffff8000fffeed20,0,0) at single_thread_check_locked+0x216 sys/kern/kern_sig.c:2038
userret(ffff8000fffeed20) at userret+0x236 single_thread_check sys/kern/kern_sig.c:2058 [inline]
userret(ffff8000fffeed20) at userret+0x236 sys/kern/kern_sig.c:2008
child_return(ffff8000fffeed20) at child_return+0x109 mi_child_return sys/sys/syscall_mi.h:163 [inline]
child_return(ffff8000fffeed20) at child_return+0x109 sys/arch/amd64/amd64/trap.c:622
end trace frame: 0x0, count: -10
ddb{0}> machine ddbcpu 1
Stopped at db_enter+0x18: addq $0x8,%rsp
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8264de00) at panic+0x177 sys/kern/subr_prf.c:202
pmap_unwire(fffffd8070461108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd806bbe12f0,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1677
uvm_map_pageable_wire(fffffd806bbe12f0,fffffd8068132ed8,fffffd807d283360,0,0,0) at uvm_map_pageable_wire+0x5c0
sys_mlock(ffff8000fffeea80,ffff80002e518c68,ffff80002e518cb0) at sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
syscall(ffff80002e518d30) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e518d30) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf353793e410, count: 7
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8264de00) at panic+0x177 sys/kern/subr_prf.c:202
pmap_unwire(fffffd8070461108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd806bbe12f0,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1677
uvm_map_pageable_wire(fffffd806bbe12f0,fffffd8068132ed8,fffffd807d283360,0,0,0) at uvm_map_pageable_wire+0x5c0
sys_mlock(ffff8000fffeea80,ffff80002e518c68,ffff80002e518cb0) at sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
syscall(ffff80002e518d30) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e518d30) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf353793e410, count: -8
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: a004629d760f Revert uLong -> z_off_t change in the kernel
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1261aded080000
kernel config: https://syzkaller.appspot.com/x/.config?x=7058272de1526588
dashboard link: https://syzkaller.appspot.com/bug?extid=922c2ec14d832dfa1311
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+922c2e...@syzkaller.appspotmail.com
panic: pmap_unwire: invalid PDE
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*203166 24751 32767 0x10 0x4000000 1K syz-executor.6
486757 14500 32767 0x1010 0x4080000 0 syz-executor.4
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8264de00) at panic+0x177 sys/kern/subr_prf.c:202
pmap_unwire(fffffd8070461108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd806bbe12f0,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1677
uvm_map_pageable_wire(fffffd806bbe12f0,fffffd8068132ed8,fffffd807d283360,0,0,0) at uvm_map_pageable_wire+0x5c0
sys_mlock(ffff8000fffeea80,ffff80002e518c68,ffff80002e518cb0) at sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
syscall(ffff80002e518d30) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e518d30) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf353793e410, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{1}>
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: pmap_unwire: invalid PDE
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8264de00) at panic+0x177 sys/kern/subr_prf.c:202
pmap_unwire(fffffd8070461108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd806bbe12f0,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1677
uvm_map_pageable_wire(fffffd806bbe12f0,fffffd8068132ed8,fffffd807d283360,0,0,0) at uvm_map_pageable_wire+0x5c0
sys_mlock(ffff8000fffeea80,ffff80002e518c68,ffff80002e518cb0) at sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
syscall(ffff80002e518d30) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e518d30) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf353793e410, count: -8
ddb{1}> show registers
rdi 0
rsi 0x1
rbp 0xffff80002e5189c0
rbx 0xffff800020dd9b97
rdx 0
rcx 0
rax 0xffff8000fffeea80
r8 0x101010101010101
r9 0x8080808080808080
r10 0x2ac68fc50a64296b
r11 0x99caf8f8d9e00ad2
r12 0xffff800020dd9998
r13 0
r14 0
r15 0x1
rip 0xffffffff822e6648 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80002e5189b0
ss 0
db_enter+0x18: addq $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor.6) pid=203166 stat=onproc
flags process=10<SUGID> proc=4000000<THREAD>
pri=32, usrpri=81, nice=20
forw=0xffffffffffffffff, list=0xffff8000fffefce0,0xffffffff82abd960
process=0xffff8000ffff2158 user=0xffff80002e513000, vmspace=0xfffffd806bbe12f0
estcpu=36, cpticks=1, pctcpu=0.0
user=0, sys=0, intr=0
ddb{1}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
2777 381805 42102 32767 2 0x10 syz-executor.5
2777 366350 42102 32767 2 0x4000010 syz-executor.5
2777 276998 42102 32767 2 0x4000010 syz-executor.5
58392 276153 31299 32767 2 0x10 syz-executor.0
58392 399676 31299 32767 2 0x4000010 syz-executor.0
58392 379297 31299 32767 3 0x4000090 fsleep syz-executor.0
93530 381437 86361 32767 2 0x10 syz-executor.1
93530 480770 86361 32767 3 0x4000090 fsleep syz-executor.1
28600 183141 27275 32767 2 0x10 syz-executor.7
28600 318034 27275 32767 2 0x4000010 syz-executor.7
24751 358294 84117 32767 3 0x10 vmmaplk syz-executor.6
24751 472263 84117 32767 3 0x4000010 biowait syz-executor.6
*24751 203166 84117 32767 7 0x4000010 syz-executor.6
26160 203014 27298 32767 2 0x10 syz-executor.2
26160 93799 27298 32767 3 0x4000090 fsleep syz-executor.2
14500 231896 26274 32767 2 0x81010 syz-executor.4
14500 486757 26274 32767 7 0x4081010 syz-executor.4
14500 420405 26274 32767 3 0x4003010 suspend syz-executor.4
40203 168257 87433 32767 3 0x90 nanoslp syz-executor.3
40203 258048 87433 32767 3 0x4000090 netio syz-executor.3
40203 59185 87433 32767 3 0x4000090 fsleep syz-executor.3
31299 413363 71362 32767 3 0x90 nanoslp syz-executor.0
71362 324729 7185 0 3 0x82 wait syz-executor.0
27298 223287 28223 32767 3 0x90 nanoslp syz-executor.2
28223 521326 7185 0 3 0x82 wait syz-executor.2
27275 307570 44952 32767 3 0x90 nanoslp syz-executor.7
44952 44002 7185 0 3 0x82 wait syz-executor.7
42102 358272 57079 32767 3 0x90 nanoslp syz-executor.5
57079 55050 7185 0 3 0x82 wait syz-executor.5
86361 302879 30309 32767 3 0x90 nanoslp syz-executor.1
30309 453797 7185 0 3 0x82 wait syz-executor.1
87433 239459 86665 32767 3 0x90 nanoslp syz-executor.3
86665 110755 7185 0 3 0x82 wait syz-executor.3
84117 332282 77613 32767 3 0x90 nanoslp syz-executor.6
77613 91151 7185 0 3 0x82 wait syz-executor.6
26274 276740 66998 32767 3 0x90 nanoslp syz-executor.4
66998 276598 7185 0 3 0x82 wait syz-executor.4
24968 205175 0 0 3 0x14200 bored sosplice
7185 235178 15408 0 3 0x82 wait syz-fuzzer
7185 222776 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 278151 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 429455 15408 0 3 0x4000082 wait syz-fuzzer
7185 400400 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 410736 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 67796 15408 0 3 0x4000082 wait syz-fuzzer
7185 362360 15408 0 3 0x4000082 kqread syz-fuzzer
7185 502784 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 437638 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 170372 15408 0 3 0x4000082 wait syz-fuzzer
7185 241116 15408 0 3 0x4000082 wait syz-fuzzer
7185 237268 15408 0 3 0x4000082 wait syz-fuzzer
7185 471303 15408 0 3 0x4000082 thrsleep syz-fuzzer
7185 198815 15408 0 3 0x4000082 wait syz-fuzzer
7185 301182 15408 0 3 0x4000082 wait syz-fuzzer
15408 390244 99132 0 3 0x10008a sigsusp ksh
99132 490153 82979 0 3 0x9a kqread sshd
53113 485067 1 0 3 0x100083 ttyin getty
82979 180992 1 0 3 0x88 kqread sshd
66354 289174 55298 73 3 0x1100090 kqread syslogd
55298 316798 1 0 3 0x100082 netio syslogd
29894 283555 1 0 3 0x100080 kqread resolvd
81445 63571 90021 77 3 0x100092 kqread dhcpleased
36898 220397 90021 77 3 0x100092 kqread dhcpleased
90021 463354 1 0 3 0x80 kqread dhcpleased
19228 148943 0 0 3 0x14200 bored smr
84943 420190 0 0 2 0x14200 zerothread
93172 355625 0 0 3 0x14200 aiodoned aiodoned
93117 433343 0 0 3 0x14200 syncer update
26454 463639 0 0 3 0x14200 cleaner cleaner
46845 257289 0 0 3 0x14200 reaper reaper
87434 420960 0 0 3 0x14200 pgdaemon pagedaemon
40976 248147 0 0 3 0x14200 bored viomb
96208 28523 0 0 3 0x40014200 acpi0 acpi0
99452 229584 0 0 3 0x40014200 idle1
69972 395466 0 0 3 0x14200 bored softnet
78594 355801 0 0 3 0x14200 bored softnet
62966 355498 0 0 3 0x14200 bored softnet
31946 486608 0 0 3 0x14200 bored softnet
63763 137977 0 0 3 0x14200 bored systqmp
65145 257599 0 0 3 0x14200 bored systq
57030 445082 0 0 3 0x40014200 bored softclock
43571 230086 0 0 3 0x40014200 idle0
1 296386 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{1}> show all locks
Process 24751 (syz-executor.6) thread 0xffff8000fffefce0 (472263)
exclusive rrwlock inode r = 0 (0xfffffd806ae662c8)
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4 vn_lock+0x84 sys/kern/vfs_vnops.c:567
#5 vn_write+0x123 sys/kern/vfs_vnops.c:408
#6 dofilewritev+0x19c sys/kern/sys_generic.c:380
#7 sys_pad_pwritev+0xb9 sys_pwritev sys/kern/vfs_syscalls.c:3399 [inline]
#7 sys_pad_pwritev+0xb9 sys/kern/vfs_syscalls.c:3455
#8 syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#8 syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
#9 Xsyscall+0x128
Process 24751 (syz-executor.6) thread 0xffff8000fffeea80 (203166)
exclusive rwlock uobjlk r = 0 (0xfffffd8077c6d7f0)
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 uvm_fault_unwire_locked+0x1c6 sys/uvm/uvm_fault.c:1668
#3 uvm_map_pageable_wire+0x5c0
#4 sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
#5 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#5 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#6 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82aeb6b0)
#0 witness_lock+0x44d
#1 __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2 mi_switch+0x3bb sys/kern/sched_bsd.c:416
#3 sleep_finish+0x180 sys/kern/kern_synch.c:420
#4 rw_enter+0x35a sys/kern/kern_rwlock.c:286
#5 uvm_fault_unwire_locked+0x1c6 sys/uvm/uvm_fault.c:1668
#6 uvm_map_pageable_wire+0x5c0
#7 sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
#8 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#8 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#9 Xsyscall+0x128
exclusive rwlock vmmaplk r = 0 (0xfffffd806bbe1308)
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 uvm_map_pageable_wire+0x374 vm_map_unbusy_ln sys/uvm/uvm_map.c:5543 [inline]
#2 uvm_map_pageable_wire+0x374 sys/uvm/uvm_map.c:2394
#3 sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
#4 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#4 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#5 Xsyscall+0x128
ddb{1}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10213 6412K 6419K 78643K 11521 0
pcb 13 12K 14K 78643K 17 0
rtable 244 6K 7K 78643K 4833 0
ifaddr 82 18K 18K 78643K 594 0
sysctl 3 1K 5K 78643K 18 0
counters 56 35K 35K 78643K 200 0
ioctlops 0 0K 2K 78643K 558 0
iov 0 0K 28K 78643K 5756 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 4 0
vnodes 1271 79K 80K 78643K 8899 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 9K 78643K 401 0
VM map 2 1K 1K 78643K 2 0
sem 12 0K 1K 78643K 8313 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 26 97K 117K 78643K 31642 0
sigio 0 0K 0K 78643K 627 0
proc 56 78K 115K 78643K 5206 0
subproc 104 6K 6K 78643K 1040 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 1 0K 0K 78643K 3182 0
in_multi 99 6K 7K 78643K 1253 0
ether_multi 1 0K 0K 78643K 125 0
mrt 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 259 1155K 1155K 78643K 259 0
exec 0 0K 2K 78643K 7414 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 8 62K 62K 78643K 8 0
UVM amap 472 96K 113K 78643K 194038 0
UVM aobj 131 4K 4K 78643K 131 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 1118 0
NDP 11 0K 2K 78643K 243 0
temp 124 4726K 4854K 78643K 82764 0
kqueue 12 18K 26K 78643K 2920 0
SYN cache 2 16K 16K 78643K 2 0
ddb{1}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 22 0 0 1 0 1 1 0 8 0
rtpcb 120 3150 0 3147 37 36 1 3 0 8 0
rtentry 112 940 0 825 4 0 4 4 0 8 0
unpcb 144 82857 0 82836 384 377 7 14 0 8 5
syncache 296 324 0 324 52 51 1 1 0 8 1
sackhl 24 1 0 1 1 1 0 1 0 8 0
tcpqe 32 208 0 208 37 36 1 1 0 8 1
tcpcb 736 13184 0 13171 387 380 7 20 0 8 5
arp 120 176 0 156 1 0 1 1 0 8 0
ipq 40 129 0 129 18 18 0 1 0 8 0
ipqe 40 367 0 367 18 18 0 1 0 8 0
inpcb 320 28786 0 28768 405 395 10 17 0 8 8
nd6 48 263 0 236 1 0 1 1 0 8 0
kcovpl 48 80 0 72 1 0 1 1 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 3739 0 3270 34 4 30 31 0 8 0
art_table 32 3740 0 3270 4 0 4 4 0 8 0
art_node 16 939 0 834 1 0 1 1 0 8 0
sysvmsgpl 40 3 0 1 1 0 1 1 0 8 0
semapl 112 8309 0 8299 1 0 1 1 0 8 0
shmpl 112 128 0 0 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 45114 0 43594 96 0 96 96 0 8 0
ffsino 272 45114 0 43594 102 0 102 102 0 8 0
nchpl 144 88767 0 87126 63 0 63 63 0 8 0
uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0
vnodes 216 5926 0 0 330 0 330 330 0 8 0
namei 1024 331676 0 331676 9 8 1 2 0 8 1
percpumem 16 112 0 72 1 0 1 1 0 8 0
kstatmem 264 166 0 144 2 0 2 2 0 8 0
scxspl 216 263506 0 263504 93 89 4 8 0 8 3
plimitpl 152 6746 0 6724 21 20 1 2 0 8 0
sigapl 424 31774 0 31719 7 0 7 7 0 8 0
futexpl 64 294406 0 294402 6 5 1 1 0 8 0
knotepl 120 1740 0 0 19 1 18 18 0 8 0
kqueuepl 216 9684 0 9676 157 152 5 8 0 8 4
pipepl 320 8226 0 8198 199 196 3 13 0 8 0
fdescpl 496 31756 0 31719 7 2 5 6 0 8 0
filepl 152 277694 0 277450 456 438 18 26 0 8 6
lockfpl 104 7005 0 7002 3 2 1 2 0 8 0
lockfspl 48 1697 0 1694 1 0 1 1 0 8 0
sessionpl 144 95 0 79 1 0 1 1 0 8 0
pgrppl 48 419 0 403 1 0 1 1 0 8 0
ucredpl 104 41338 0 41320 1 0 1 1 0 8 0
zombiepl 144 31720 0 31719 1 0 1 1 0 8 0
processpl 1064 31774 0 31719 4 0 4 4 0 8 0
procpl 672 95273 0 95190 16 8 8 9 0 8 0
sosppl 168 550 0 550 60 59 1 1 0 8 1
sockpl 488 115763 0 115717 2255 2240 15 50 0 8 8
mcl64k 65536 81 0 0 4 1 3 3 0 8 0
mcl16k 16384 33 0 0 4 1 3 3 0 8 0
mcl12k 12288 17 0 0 2 0 2 2 0 8 0
mcl9k 9216 63 0 0 3 1 2 2 0 8 0
mcl8k 8192 82 0 0 6 3 3 3 0 8 0
mcl4k 4096 98 0 0 9 6 3 8 0 8 1
mcl2k2 2112 15 0 0 1 0 1 1 0 8 0
mcl2k 2048 630 0 0 44 14 30 44 0 8 0
mtagpl 96 3 0 0 1 0 1 1 0 8 0
mbufpl 256 7599 0 0 415 1 414 414 0 8 0
bufpl 288 56406 0 50079 453 0 453 453 0 8 0
anonpl 24 6604215 0 6590477 302 194 108 132 0 186 0
amapchunkpl 152 622056 0 621363 343 314 29 42 0 158 0
amappl16 200 103770 0 103409 502 481 21 45 0 8 0
amappl15 192 7293 0 7286 1 0 1 1 0 8 0
amappl14 184 1639 0 1630 1 0 1 1 0 8 0
amappl13 176 8387 0 8382 1 0 1 1 0 8 0
amappl12 168 3183 0 3172 1 0 1 1 0 8 0
amappl11 160 5553 0 5538 2 1 1 2 0 8 0
amappl10 152 2436 0 2427 1 0 1 1 0 8 0
amappl9 144 1819 0 1817 1 0 1 1 0 8 0
amappl8 136 6138 0 5823 11 0 11 11 0 8 0
amappl7 128 3660 0 3633 1 0 1 1 0 8 0
amappl6 120 2024 0 2004 2 1 1 2 0 8 0
amappl5 112 27255 0 27232 1 0 1 1 0 8 0
amappl4 104 10372 0 10336 4 2 2 2 0 8 0
amappl3 96 104124 0 104046 8 6 2 3 0 8 0
amappl2 88 12209 0 12155 6 4 2 2 0 8 0
amappl1 80 791038 0 790235 27 10 17 19 0 8 0
amappl 88 190880 0 190668 6 0 6 6 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 130 0 0 3 0 3 3 0 8 0
uaddrrnd 24 31757 0 31720 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 31757 0 31720 1 0 1 1 0 8 0
vmmpekpl 168 261927 0 261869 4 0 4 4 0 8 0
vmmpepl 168 3172477 0 3169245 471 327 144 170 0 357 0
vmsppl 368 31756 0 31720 4 0 4 4 0 8 0
rwobjpl 56 794276 0 786523 142 29 113 116 0 8 0
pdppl 4096 63521 0 63440 902 821 81 91 0 8 0
pvpl 32 12456775 0 12437196 913 714 199 240 0 265 16
pmappl 248 31756 0 31720 4 1 3 3 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 2476 0 1241 36 0 36 36 0 8 0
ddb{1}> machine ddbcpu 0
Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp
x86_ipi_db(ffffffff82914ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 sys/kern/kern_lock.c:147
intr_handler(ffff8000296298b0,ffff80000004bd00) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532
Xintr_ioapic_edge21_untramp() at Xintr_ioapic_edge21_untramp+0x18f
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 sys/kern/kern_lock.c:147
single_thread_check_locked(ffff8000fffeed20,0,0) at single_thread_check_locked+0x216 sys/kern/kern_sig.c:2038
userret(ffff8000fffeed20) at userret+0x236 single_thread_check sys/kern/kern_sig.c:2058 [inline]
userret(ffff8000fffeed20) at userret+0x236 sys/kern/kern_sig.c:2008
child_return(ffff8000fffeed20) at child_return+0x109 mi_child_return sys/sys/syscall_mi.h:163 [inline]
child_return(ffff8000fffeed20) at child_return+0x109 sys/arch/amd64/amd64/trap.c:622
end trace frame: 0x0, count: 5
ddb{0}> trace
x86_ipi_db(ffffffff82914ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 sys/kern/kern_lock.c:147
intr_handler(ffff8000296298b0,ffff80000004bd00) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532
Xintr_ioapic_edge21_untramp() at Xintr_ioapic_edge21_untramp+0x18f
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aeb4a8) at __mp_lock+0x122 sys/kern/kern_lock.c:147
single_thread_check_locked(ffff8000fffeed20,0,0) at single_thread_check_locked+0x216 sys/kern/kern_sig.c:2038
userret(ffff8000fffeed20) at userret+0x236 single_thread_check sys/kern/kern_sig.c:2058 [inline]
userret(ffff8000fffeed20) at userret+0x236 sys/kern/kern_sig.c:2008
child_return(ffff8000fffeed20) at child_return+0x109 mi_child_return sys/sys/syscall_mi.h:163 [inline]
child_return(ffff8000fffeed20) at child_return+0x109 sys/arch/amd64/amd64/trap.c:622
end trace frame: 0x0, count: -10
ddb{0}> machine ddbcpu 1
Stopped at db_enter+0x18: addq $0x8,%rsp
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8264de00) at panic+0x177 sys/kern/subr_prf.c:202
pmap_unwire(fffffd8070461108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd806bbe12f0,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1677
uvm_map_pageable_wire(fffffd806bbe12f0,fffffd8068132ed8,fffffd807d283360,0,0,0) at uvm_map_pageable_wire+0x5c0
sys_mlock(ffff8000fffeea80,ffff80002e518c68,ffff80002e518cb0) at sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
syscall(ffff80002e518d30) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e518d30) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf353793e410, count: 7
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8264de00) at panic+0x177 sys/kern/subr_prf.c:202
pmap_unwire(fffffd8070461108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd806bbe12f0,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1677
uvm_map_pageable_wire(fffffd806bbe12f0,fffffd8068132ed8,fffffd807d283360,0,0,0) at uvm_map_pageable_wire+0x5c0
sys_mlock(ffff8000fffeea80,ffff80002e518c68,ffff80002e518cb0) at sys_mlock+0x184 sys/uvm/uvm_mmap.c:804
syscall(ffff80002e518d30) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e518d30) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf353793e410, count: -8
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Oct 8, 2022, 10:34:35 PM10/8/22
to syzkaller-o...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 721f596233a1 List SIMCom SIM8262E-M2 as supported for umb(4)
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17e4e8c8880000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/89c7abd4176d/disk-721f5962.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/1f65cd464fc9/bsd-721f5962.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/8b3bddbaeec3/kernel-721f5962.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+922c2e...@syzkaller.appspotmail.com
panic: pmap_unwire: invalid PDE
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*384095 92143 0 0 0x4000000 0K syz-executor.7
5954 69064 0 0 0x4000000 1 syz-executor.3
pmap_unwire(fffffd8069898108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd80701ba748,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1678
uvm_map_pageable(fffffd80701ba748,20000000,20002000,1,0) at uvm_map_pageable+0x597 uvm_map_pageable_pgon sys/uvm/uvm_map.c:2089 [inline]
uvm_map_pageable(fffffd80701ba748,20000000,20002000,1,0) at uvm_map_pageable+0x597 sys/uvm/uvm_map.c:2330
sys_munlock(ffff800021403508,ffff800021488e58,ffff800021488ea0) at sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
syscall(ffff800021488f20) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff800021488f20) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: pmap_unwire: invalid PDE
ddb{0}> trace
pmap_unwire(fffffd8069898108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd80701ba748,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1678
uvm_map_pageable(fffffd80701ba748,20000000,20002000,1,0) at uvm_map_pageable+0x597 uvm_map_pageable_pgon sys/uvm/uvm_map.c:2089 [inline]
uvm_map_pageable(fffffd80701ba748,20000000,20002000,1,0) at uvm_map_pageable+0x597 sys/uvm/uvm_map.c:2330
sys_munlock(ffff800021403508,ffff800021488e58,ffff800021488ea0) at sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
syscall(ffff800021488f20) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff800021488f20) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
ddb{0}> show registers
rdi 0
rsi 0x1
rbp 0xffff800021488bc0
rbx 0xffffffff82974b8f cpu_info_full_primary+0x2b8f
rdx 0x3fd
rcx 0
rax 0x20
r8 0x101010101010101
r9 0x8080808080808080
r10 0x53f60bafbcae6c1a
r11 0xee0748f6c31234f4
r12 0xffffffff82974990 cpu_info_full_primary+0x2990
cs 0x8
rflags 0x246
rsp 0xffff800021488bb0
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.7) pid=384095 stat=onproc
flags process=0 proc=4000000<THREAD>
pri=32, usrpri=76, nice=20
forw=0xffffffffffffffff, list=0xffff800021301ce0,0xffffffff82b66800
process=0xffff8000ffff0018 user=0xffff800021483000, vmspace=0xfffffd80701ba748
estcpu=36, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb{0}> ps
92143 290819 58860 0 2 0x4000000 syz-executor.7
*92143 384095 58860 0 7 0x4000000 syz-executor.7
2736 252222 9354 0 2 0 syz-executor.5
2736 257796 9354 0 3 0x4000080 fsleep syz-executor.5
2736 305853 9354 0 3 0x4000080 fsleep syz-executor.5
68440 68340 84422 0 2 0 syz-executor.6
68440 519315 84422 0 3 0x4000080 fsleep syz-executor.6
68440 462964 84422 0 3 0x4000080 fsleep syz-executor.6
68440 168745 84422 0 2 0x4000000 syz-executor.6
94265 466706 10818 0 2 0 syz-executor.0
94265 90082 10818 0 3 0x4000080 fsleep syz-executor.0
94265 228439 10818 0 3 0x4000080 fsleep syz-executor.0
4181 281154 89419 0 2 0 syz-executor.2
4181 122982 89419 0 3 0x4000080 fsleep syz-executor.2
4181 524016 89419 0 2 0x4000000 syz-executor.2
20313 333986 69580 0 2 0 syz-executor.1
20313 168492 69580 0 3 0x4000080 fsleep syz-executor.1
20313 263845 69580 0 2 0x4000000 syz-executor.1
69064 432904 48094 0 2 0 syz-executor.3
69064 5954 48094 0 7 0x4000000 syz-executor.3
69064 232736 48094 0 3 0x4000080 fsleep syz-executor.3
48094 162502 9344 0 3 0x82 nanoslp syz-executor.3
50477 93129 9344 0 3 0x82 nanoslp syz-executor.4
9354 165625 9344 0 3 0x82 nanoslp syz-executor.5
84422 373408 9344 0 3 0x82 nanoslp syz-executor.6
58860 298973 9344 0 3 0x82 nanoslp syz-executor.7
10818 294965 9344 0 3 0x82 nanoslp syz-executor.0
89419 342884 9344 0 2 0x2 syz-executor.2
69580 75068 9344 0 3 0x82 nanoslp syz-executor.1
9344 330067 33188 0 3 0x82 thrsleep syz-execprog
9344 407351 33188 0 3 0x4000082 thrsleep syz-execprog
9344 114270 33188 0 3 0x4000082 wait syz-execprog
9344 125435 33188 0 3 0x4000082 wait syz-execprog
9344 307537 33188 0 3 0x4000082 wait syz-execprog
9344 123726 33188 0 3 0x4000082 wait syz-execprog
9344 21853 33188 0 3 0x4000082 thrsleep syz-execprog
9344 68083 33188 0 3 0x4000082 wait syz-execprog
9344 225110 33188 0 3 0x4000082 thrsleep syz-execprog
9344 459730 33188 0 3 0x4000082 wait syz-execprog
9344 206726 33188 0 3 0x4000082 kqread syz-execprog
9344 258188 33188 0 3 0x4000082 wait syz-execprog
9344 212476 33188 0 3 0x4000082 wait syz-execprog
9344 377186 33188 0 3 0x4000082 thrsleep syz-execprog
9344 360818 33188 0 3 0x4000082 thrsleep syz-execprog
9344 247948 33188 0 3 0x4000082 thrsleep syz-execprog
33188 306139 81967 0 3 0x10008a sigsusp ksh
81967 238456 10582 0 3 0x9a kqread sshd
40998 193937 1 0 3 0x100083 ttyin getty
10582 174087 1 0 3 0x88 kqread sshd
35253 510135 64644 74 3 0x1100092 bpf pflogd
64644 113101 1 0 3 0x80 netio pflogd
23509 405767 32411 73 3 0x1100090 kqread syslogd
32411 39246 1 0 3 0x100082 netio syslogd
48827 163000 1 0 3 0x100080 kqread resolvd
45926 176695 52183 77 3 0x100092 kqread dhcpleased
47238 344415 52183 77 3 0x100092 kqread dhcpleased
52183 455738 1 0 3 0x80 kqread dhcpleased
27663 35522 0 0 3 0x14200 bored smr
15602 5013 0 0 2 0x14200 zerothread
13694 505047 0 0 3 0x14200 aiodoned aiodoned
77447 138870 0 0 3 0x14200 syncer update
28521 468836 0 0 3 0x14200 cleaner cleaner
76533 45402 0 0 3 0x14200 reaper reaper
17052 455841 0 0 3 0x14200 pgdaemon pagedaemon
89006 305303 0 0 3 0x14200 bored viomb
35499 191843 0 0 3 0x40014200 acpi0 acpi0
31911 311589 0 0 3 0x40014200 idle1
74700 513084 0 0 3 0x14200 bored softnet
25429 411299 0 0 3 0x14200 bored softnet
28908 266583 0 0 3 0x14200 bored softnet
16720 110222 0 0 3 0x14200 bored softnet
24344 116393 0 0 3 0x14200 bored systqmp
1244 75854 0 0 3 0x14200 bored systq
20999 316001 0 0 3 0x40014200 bored softclock
87658 392755 0 0 3 0x40014200 idle0
1 207142 0 0 3 0x82 wait init
Process 92143 (syz-executor.7) thread 0xffff800021301ce0 (290819)
exclusive rrwlock inode r = 0 (0xfffffd80707ec4d8)
#5 vget+0x1fc sys/kern/vfs_subr.c:676
#6 ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7 ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1324
#8 ufs_lookup+0x122c sys/ufs/ufs/ufs_lookup.c:582
#9 VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:560
#11 namei+0x36a sys/kern/vfs_lookup.c:244
#12 vn_open+0x188 sys/kern/vfs_vnops.c:107
#13 doopenat+0x26a sys/kern/vfs_syscalls.c:1127
#14 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#14 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#15 Xsyscall+0x128
Process 92143 (syz-executor.7) thread 0xffff800021403508 (384095)
exclusive rwlock uobjlk r = 0 (0xfffffd807e9bac20)
#3 uvm_map_pageable+0x597 uvm_map_pageable_pgon sys/uvm/uvm_map.c:2089 [inline]
#3 uvm_map_pageable+0x597 sys/uvm/uvm_map.c:2330
#4 sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
#3 sleep_finish+0x180 sys/kern/kern_synch.c:417
#4 rw_enter+0x35a sys/kern/kern_rwlock.c:286
#5 uvm_fault_unwire_locked+0x1c6 sys/uvm/uvm_fault.c:1669
#6 uvm_map_pageable+0x597 uvm_map_pageable_pgon sys/uvm/uvm_map.c:2089 [inline]
#6 uvm_map_pageable+0x597 sys/uvm/uvm_map.c:2330
#7 sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
#3 uvm_map_pageable+0x11a sys/uvm/uvm_map.c:2263
#4 sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
pcb 13 8K 8K 78643K 13 0
rtable 234 6K 6K 78643K 347 0
ifaddr 87 17K 17K 78643K 92 0
counters 56 35K 35K 78643K 56 0
ioctlops 0 0K 4K 78643K 1487 0
iov 0 0K 24K 78643K 470 0
proc 67 91K 115K 78643K 506 0
ether_multi 1 0K 0K 78643K 1 0
exec 0 0K 2K 78643K 647 0
UVM amap 231 74K 74K 78643K 5716 0
UVM aobj 3 2K 2K 78643K 3 0
temp 56 4718K 4782K 78643K 4671 0
kqueue 12 18K 18K 78643K 25 0
rtentry 112 111 0 1 4 0 4 4 0 8 0
unpcb 144 35 0 20 1 0 1 1 0 8 0
syncache 296 5 0 5 2 2 0 1 0 8 0
tcpcb 768 8 0 5 1 0 1 1 0 8 0
arp 120 18 0 0 1 0 1 1 0 8 0
inpcb 368 64 0 58 1 0 1 1 0 8 0
nd6 48 24 0 0 1 0 1 1 0 8 0
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfstitem 24 23 0 2 1 0 1 1 0 8 0
pfstkey 120 23 0 2 1 0 1 1 0 8 0
pfstate 336 23 0 2 2 0 2 2 0 8 0
pfrule 1360 21 0 16 2 1 1 2 0 8 0
art_table 32 453 0 0 4 0 4 4 0 8 0
art_node 16 110 0 10 1 0 1 1 0 8 0
ffsino 272 2382 0 937 97 0 97 97 0 8 0
nchpl 144 3538 0 1850 63 0 63 63 0 8 0
uvmvnodes 80 2392 0 0 49 0 49 49 0 8 0
vnodes 216 2392 0 0 133 0 133 133 0 8 0
namei 1024 9580 0 9580 3 1 2 2 0 8 2
percpumem 16 40 0 0 1 0 1 1 0 8 0
kstatmem 264 24 0 0 2 0 2 2 0 8 0
scxspl 216 10460 0 10460 9 1 8 8 0 8 8
plimitpl 152 25 0 9 1 0 1 1 0 8 0
sigapl 424 894 0 846 8 1 7 7 0 8 1
futexpl 64 3397 0 3388 1 0 1 1 0 8 0
knotepl 120 102 0 0 4 0 4 4 0 8 0
kqueuepl 216 21 0 13 1 0 1 1 0 8 0
pipepl 320 134 0 106 4 1 3 3 0 8 0
fdescpl 496 877 0 847 5 0 5 5 0 8 0
filepl 152 2958 0 2817 6 0 6 6 0 8 0
lockfpl 104 905 0 898 1 0 1 1 0 8 0
lockfspl 48 456 0 449 1 0 1 1 0 8 0
sessionpl 144 26 0 9 1 0 1 1 0 8 0
pgrppl 48 26 0 9 1 0 1 1 0 8 0
ucredpl 104 69 0 57 1 0 1 1 0 8 0
zombiepl 144 847 0 846 2 1 1 1 0 8 0
processpl 1064 894 0 846 4 0 4 4 0 8 0
procpl 672 1945 0 1867 8 1 7 7 0 8 0
sockpl 488 132 0 108 5 1 4 4 0 8 0
mcl8k 8192 4 0 0 1 0 1 1 0 8 0
mcl4k 4096 5 0 0 1 0 1 1 0 8 0
mcl2k 2048 81 0 0 10 0 10 10 0 8 0
mtagpl 96 2 0 0 1 0 1 1 0 8 0
mbufpl 256 222 0 0 13 0 13 13 0 8 0
bufpl 288 4889 0 135 340 0 340 340 0 8 0
anonpl 24 149442 0 142903 52 6 46 47 0 186 5
amapchunkpl 152 13118 0 12606 22 1 21 21 0 158 1
amappl16 200 1152 0 1044 6 0 6 6 0 8 0
amappl15 192 105 0 94 1 0 1 1 0 8 0
amappl14 184 16 0 13 1 0 1 1 0 8 0
amappl13 176 252 0 245 2 1 1 1 0 8 0
amappl12 168 10 0 9 2 1 1 1 0 8 0
amappl11 160 175 0 156 1 0 1 1 0 8 0
amappl10 152 77 0 73 2 1 1 1 0 8 0
amappl9 144 979 0 970 3 2 1 1 0 8 0
amappl8 136 643 0 600 2 0 2 2 0 8 0
amappl7 128 183 0 167 1 0 1 1 0 8 0
amappl6 120 297 0 275 2 0 2 2 0 8 1
amappl5 112 550 0 532 1 0 1 1 0 8 0
amappl4 104 1059 0 1027 2 0 2 2 0 8 0
amappl3 96 2076 0 2015 2 0 2 2 0 8 0
amappl2 88 1119 0 1045 4 1 3 3 0 8 1
amappl1 80 24430 0 23604 25 2 23 23 0 8 5
amappl 88 4803 0 4652 4 0 4 4 0 92 0
uaddrrnd 24 878 0 848 1 0 1 1 0 8 0
vmmpekpl 168 12799 0 12765 2 0 2 2 0 8 0
vmmpepl 168 83425 0 81108 108 3 105 105 0 357 0
vmsppl 368 877 0 848 4 0 4 4 0 8 0
rwobjpl 56 26261 0 22610 52 0 52 52 0 8 0
pdppl 4096 1763 0 1696 100 31 69 83 0 8 2
pvpl 32 394867 0 382892 275 4 271 271 0 265 173
pmappl 248 877 0 848 3 0 3 3 0 8 0
ddb{0}>
HEAD commit: 721f596233a1 List SIMCom SIM8262E-M2 as supported for umb(4)
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17e4e8c8880000
kernel config: https://syzkaller.appspot.com/x/.config?x=7058272de1526588
dashboard link: https://syzkaller.appspot.com/bug?extid=922c2ec14d832dfa1311
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=118242dc880000
dashboard link: https://syzkaller.appspot.com/bug?extid=922c2ec14d832dfa1311
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/89c7abd4176d/disk-721f5962.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/1f65cd464fc9/bsd-721f5962.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/8b3bddbaeec3/kernel-721f5962.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+922c2e...@syzkaller.appspotmail.com
panic: pmap_unwire: invalid PDE
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
5954 69064 0 0 0x4000000 1 syz-executor.3
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff826560a8) at panic+0x177 sys/kern/subr_prf.c:198
pmap_unwire(fffffd8069898108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd80701ba748,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1678
uvm_map_pageable(fffffd80701ba748,20000000,20002000,1,0) at uvm_map_pageable+0x597 uvm_map_pageable_pgon sys/uvm/uvm_map.c:2089 [inline]
uvm_map_pageable(fffffd80701ba748,20000000,20002000,1,0) at uvm_map_pageable+0x597 sys/uvm/uvm_map.c:2330
sys_munlock(ffff800021403508,ffff800021488e58,ffff800021488ea0) at sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
syscall(ffff800021488f20) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff800021488f20) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x66615977a40, count: 7
end of kernel
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: pmap_unwire: invalid PDE
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff826560a8) at panic+0x177 sys/kern/subr_prf.c:198
pmap_unwire(fffffd8069898108,20000000) at pmap_unwire+0x1d9 sys/arch/amd64/amd64/pmap.c:2189
uvm_fault_unwire_locked(fffffd80701ba748,20000000,20002000) at uvm_fault_unwire_locked+0x1fc sys/uvm/uvm_fault.c:1678
uvm_map_pageable(fffffd80701ba748,20000000,20002000,1,0) at uvm_map_pageable+0x597 uvm_map_pageable_pgon sys/uvm/uvm_map.c:2089 [inline]
uvm_map_pageable(fffffd80701ba748,20000000,20002000,1,0) at uvm_map_pageable+0x597 sys/uvm/uvm_map.c:2330
sys_munlock(ffff800021403508,ffff800021488e58,ffff800021488ea0) at sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
syscall(ffff800021488f20) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff800021488f20) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x66615977a40, count: -8
end of kernel
ddb{0}> show registers
rdi 0
rsi 0x1
rbp 0xffff800021488bc0
rbx 0xffffffff82974b8f cpu_info_full_primary+0x2b8f
rdx 0x3fd
rcx 0
rax 0x20
r8 0x101010101010101
r9 0x8080808080808080
r10 0x53f60bafbcae6c1a
r11 0xee0748f6c31234f4
r12 0xffffffff82974990 cpu_info_full_primary+0x2990
r13 0
r14 0
r15 0x1
rip 0xffffffff81a07d98 db_enter+0x18
r14 0
r15 0x1
cs 0x8
rflags 0x246
rsp 0xffff800021488bb0
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.7) pid=384095 stat=onproc
flags process=0 proc=4000000<THREAD>
pri=32, usrpri=76, nice=20
forw=0xffffffffffffffff, list=0xffff800021301ce0,0xffffffff82b66800
process=0xffff8000ffff0018 user=0xffff800021483000, vmspace=0xfffffd80701ba748
estcpu=36, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb{0}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
92143 494755 58860 0 3 0 vmmaplk syz-executor.7
92143 290819 58860 0 2 0x4000000 syz-executor.7
*92143 384095 58860 0 7 0x4000000 syz-executor.7
2736 252222 9354 0 2 0 syz-executor.5
2736 257796 9354 0 3 0x4000080 fsleep syz-executor.5
2736 305853 9354 0 3 0x4000080 fsleep syz-executor.5
68440 68340 84422 0 2 0 syz-executor.6
68440 519315 84422 0 3 0x4000080 fsleep syz-executor.6
68440 462964 84422 0 3 0x4000080 fsleep syz-executor.6
68440 168745 84422 0 2 0x4000000 syz-executor.6
94265 466706 10818 0 2 0 syz-executor.0
94265 90082 10818 0 3 0x4000080 fsleep syz-executor.0
94265 228439 10818 0 3 0x4000080 fsleep syz-executor.0
4181 281154 89419 0 2 0 syz-executor.2
4181 122982 89419 0 3 0x4000080 fsleep syz-executor.2
4181 524016 89419 0 2 0x4000000 syz-executor.2
20313 333986 69580 0 2 0 syz-executor.1
20313 168492 69580 0 3 0x4000080 fsleep syz-executor.1
20313 263845 69580 0 2 0x4000000 syz-executor.1
69064 432904 48094 0 2 0 syz-executor.3
69064 5954 48094 0 7 0x4000000 syz-executor.3
69064 232736 48094 0 3 0x4000080 fsleep syz-executor.3
48094 162502 9344 0 3 0x82 nanoslp syz-executor.3
50477 93129 9344 0 3 0x82 nanoslp syz-executor.4
9354 165625 9344 0 3 0x82 nanoslp syz-executor.5
84422 373408 9344 0 3 0x82 nanoslp syz-executor.6
58860 298973 9344 0 3 0x82 nanoslp syz-executor.7
10818 294965 9344 0 3 0x82 nanoslp syz-executor.0
89419 342884 9344 0 2 0x2 syz-executor.2
69580 75068 9344 0 3 0x82 nanoslp syz-executor.1
9344 330067 33188 0 3 0x82 thrsleep syz-execprog
9344 407351 33188 0 3 0x4000082 thrsleep syz-execprog
9344 114270 33188 0 3 0x4000082 wait syz-execprog
9344 125435 33188 0 3 0x4000082 wait syz-execprog
9344 307537 33188 0 3 0x4000082 wait syz-execprog
9344 123726 33188 0 3 0x4000082 wait syz-execprog
9344 21853 33188 0 3 0x4000082 thrsleep syz-execprog
9344 68083 33188 0 3 0x4000082 wait syz-execprog
9344 225110 33188 0 3 0x4000082 thrsleep syz-execprog
9344 459730 33188 0 3 0x4000082 wait syz-execprog
9344 206726 33188 0 3 0x4000082 kqread syz-execprog
9344 258188 33188 0 3 0x4000082 wait syz-execprog
9344 212476 33188 0 3 0x4000082 wait syz-execprog
9344 377186 33188 0 3 0x4000082 thrsleep syz-execprog
9344 360818 33188 0 3 0x4000082 thrsleep syz-execprog
9344 247948 33188 0 3 0x4000082 thrsleep syz-execprog
33188 306139 81967 0 3 0x10008a sigsusp ksh
81967 238456 10582 0 3 0x9a kqread sshd
40998 193937 1 0 3 0x100083 ttyin getty
10582 174087 1 0 3 0x88 kqread sshd
35253 510135 64644 74 3 0x1100092 bpf pflogd
64644 113101 1 0 3 0x80 netio pflogd
23509 405767 32411 73 3 0x1100090 kqread syslogd
32411 39246 1 0 3 0x100082 netio syslogd
48827 163000 1 0 3 0x100080 kqread resolvd
45926 176695 52183 77 3 0x100092 kqread dhcpleased
47238 344415 52183 77 3 0x100092 kqread dhcpleased
52183 455738 1 0 3 0x80 kqread dhcpleased
27663 35522 0 0 3 0x14200 bored smr
15602 5013 0 0 2 0x14200 zerothread
13694 505047 0 0 3 0x14200 aiodoned aiodoned
77447 138870 0 0 3 0x14200 syncer update
28521 468836 0 0 3 0x14200 cleaner cleaner
76533 45402 0 0 3 0x14200 reaper reaper
17052 455841 0 0 3 0x14200 pgdaemon pagedaemon
89006 305303 0 0 3 0x14200 bored viomb
35499 191843 0 0 3 0x40014200 acpi0 acpi0
31911 311589 0 0 3 0x40014200 idle1
74700 513084 0 0 3 0x14200 bored softnet
25429 411299 0 0 3 0x14200 bored softnet
28908 266583 0 0 3 0x14200 bored softnet
16720 110222 0 0 3 0x14200 bored softnet
24344 116393 0 0 3 0x14200 bored systqmp
1244 75854 0 0 3 0x14200 bored systq
20999 316001 0 0 3 0x40014200 bored softclock
87658 392755 0 0 3 0x40014200 idle0
1 207142 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{0}> show all locks
Process 92143 (syz-executor.7) thread 0xffff800021301ce0 (290819)
exclusive rrwlock inode r = 0 (0xfffffd80707ec4d8)
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4 vn_lock+0x84 sys/kern/vfs_vnops.c:564
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#5 vget+0x1fc sys/kern/vfs_subr.c:676
#6 ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7 ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1324
#8 ufs_lookup+0x122c sys/ufs/ufs/ufs_lookup.c:582
#9 VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:560
#11 namei+0x36a sys/kern/vfs_lookup.c:244
#12 vn_open+0x188 sys/kern/vfs_vnops.c:107
#13 doopenat+0x26a sys/kern/vfs_syscalls.c:1127
#14 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#14 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#15 Xsyscall+0x128
Process 92143 (syz-executor.7) thread 0xffff800021403508 (384095)
exclusive rwlock uobjlk r = 0 (0xfffffd807e9bac20)
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 uvm_fault_unwire_locked+0x1c6 sys/uvm/uvm_fault.c:1669
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#3 uvm_map_pageable+0x597 uvm_map_pageable_pgon sys/uvm/uvm_map.c:2089 [inline]
#3 uvm_map_pageable+0x597 sys/uvm/uvm_map.c:2330
#4 sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
#5 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#5 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#6 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82a17850)
#5 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#6 Xsyscall+0x128
#0 witness_lock+0x44d
#1 __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2 mi_switch+0x3bb sys/kern/sched_bsd.c:415
#1 __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#3 sleep_finish+0x180 sys/kern/kern_synch.c:417
#4 rw_enter+0x35a sys/kern/kern_rwlock.c:286
#5 uvm_fault_unwire_locked+0x1c6 sys/uvm/uvm_fault.c:1669
#6 uvm_map_pageable+0x597 uvm_map_pageable_pgon sys/uvm/uvm_map.c:2089 [inline]
#6 uvm_map_pageable+0x597 sys/uvm/uvm_map.c:2330
#7 sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
#8 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#8 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#9 Xsyscall+0x128
exclusive rwlock vmmaplk r = 0 (0xfffffd80701ba760)
#8 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#9 Xsyscall+0x128
#0 witness_lock+0x44d
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2 vm_map_lock_ln+0xda sys/uvm/uvm_map.c:5276
#1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#3 uvm_map_pageable+0x11a sys/uvm/uvm_map.c:2263
#4 sys_munlock+0x100 sys/uvm/uvm_mmap.c:868
#5 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#5 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#6 Xsyscall+0x128
ddb{0}> show malloc
#5 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#6 Xsyscall+0x128
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10188 6474K 6474K 78643K 11278 0
pcb 13 8K 8K 78643K 13 0
rtable 234 6K 6K 78643K 347 0
ifaddr 87 17K 17K 78643K 92 0
counters 56 35K 35K 78643K 56 0
ioctlops 0 0K 4K 78643K 1487 0
iov 0 0K 24K 78643K 470 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 4 0
vnodes 1167 73K 73K 78643K 1180 0
log 0 0K 0K 78643K 4 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 1K 78643K 2 0
UFS mount 5 36K 36K 78643K 5 0
VM map 2 1K 1K 78643K 2 0
sem 2 0K 0K 78643K 2 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 17 61K 93K 78643K 587 0
ACPI 1697 195K 286K 78643K 12548 0
proc 67 91K 115K 78643K 506 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
in_multi 99 6K 6K 78643K 99 0
NFS daemon 1 16K 16K 78643K 1 0
ether_multi 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 25 122K 122K 78643K 25 0
MSDOSFS mount 1 16K 16K 78643K 1 0
exec 0 0K 2K 78643K 647 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 8 62K 64K 78643K 10 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
UVM amap 231 74K 74K 78643K 5716 0
UVM aobj 3 2K 2K 78643K 3 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
NDP 12 0K 2K 78643K 28 0
crypto data 1 1K 1K 78643K 1 0
temp 56 4718K 4782K 78643K 4671 0
kqueue 12 18K 18K 78643K 25 0
SYN cache 2 16K 16K 78643K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 22 0 0 1 0 1 1 0 8 0
rtpcb 120 33 0 30 1 0 1 1 0 8 0
plcache 128 22 0 0 1 0 1 1 0 8 0
rtentry 112 111 0 1 4 0 4 4 0 8 0
unpcb 144 35 0 20 1 0 1 1 0 8 0
syncache 296 5 0 5 2 2 0 1 0 8 0
tcpcb 768 8 0 5 1 0 1 1 0 8 0
arp 120 18 0 0 1 0 1 1 0 8 0
inpcb 368 64 0 58 1 0 1 1 0 8 0
nd6 48 24 0 0 1 0 1 1 0 8 0
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfstitem 24 23 0 2 1 0 1 1 0 8 0
pfstkey 120 23 0 2 1 0 1 1 0 8 0
pfstate 336 23 0 2 2 0 2 2 0 8 0
pfrule 1360 21 0 16 2 1 1 2 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 452 0 0 29 0 29 29 0 8 0
art_table 32 453 0 0 4 0 4 4 0 8 0
art_node 16 110 0 10 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 2382 0 937 91 0 91 91 0 8 0
ffsino 272 2382 0 937 97 0 97 97 0 8 0
nchpl 144 3538 0 1850 63 0 63 63 0 8 0
uvmvnodes 80 2392 0 0 49 0 49 49 0 8 0
vnodes 216 2392 0 0 133 0 133 133 0 8 0
namei 1024 9580 0 9580 3 1 2 2 0 8 2
percpumem 16 40 0 0 1 0 1 1 0 8 0
kstatmem 264 24 0 0 2 0 2 2 0 8 0
scxspl 216 10460 0 10460 9 1 8 8 0 8 8
plimitpl 152 25 0 9 1 0 1 1 0 8 0
sigapl 424 894 0 846 8 1 7 7 0 8 1
futexpl 64 3397 0 3388 1 0 1 1 0 8 0
knotepl 120 102 0 0 4 0 4 4 0 8 0
kqueuepl 216 21 0 13 1 0 1 1 0 8 0
pipepl 320 134 0 106 4 1 3 3 0 8 0
fdescpl 496 877 0 847 5 0 5 5 0 8 0
filepl 152 2958 0 2817 6 0 6 6 0 8 0
lockfpl 104 905 0 898 1 0 1 1 0 8 0
lockfspl 48 456 0 449 1 0 1 1 0 8 0
sessionpl 144 26 0 9 1 0 1 1 0 8 0
pgrppl 48 26 0 9 1 0 1 1 0 8 0
ucredpl 104 69 0 57 1 0 1 1 0 8 0
zombiepl 144 847 0 846 2 1 1 1 0 8 0
processpl 1064 894 0 846 4 0 4 4 0 8 0
procpl 672 1945 0 1867 8 1 7 7 0 8 0
sockpl 488 132 0 108 5 1 4 4 0 8 0
mcl8k 8192 4 0 0 1 0 1 1 0 8 0
mcl4k 4096 5 0 0 1 0 1 1 0 8 0
mcl2k 2048 81 0 0 10 0 10 10 0 8 0
mtagpl 96 2 0 0 1 0 1 1 0 8 0
mbufpl 256 222 0 0 13 0 13 13 0 8 0
bufpl 288 4889 0 135 340 0 340 340 0 8 0
anonpl 24 149442 0 142903 52 6 46 47 0 186 5
amapchunkpl 152 13118 0 12606 22 1 21 21 0 158 1
amappl16 200 1152 0 1044 6 0 6 6 0 8 0
amappl15 192 105 0 94 1 0 1 1 0 8 0
amappl14 184 16 0 13 1 0 1 1 0 8 0
amappl13 176 252 0 245 2 1 1 1 0 8 0
amappl12 168 10 0 9 2 1 1 1 0 8 0
amappl11 160 175 0 156 1 0 1 1 0 8 0
amappl10 152 77 0 73 2 1 1 1 0 8 0
amappl9 144 979 0 970 3 2 1 1 0 8 0
amappl8 136 643 0 600 2 0 2 2 0 8 0
amappl7 128 183 0 167 1 0 1 1 0 8 0
amappl6 120 297 0 275 2 0 2 2 0 8 1
amappl5 112 550 0 532 1 0 1 1 0 8 0
amappl4 104 1059 0 1027 2 0 2 2 0 8 0
amappl3 96 2076 0 2015 2 0 2 2 0 8 0
amappl2 88 1119 0 1045 4 1 3 3 0 8 1
amappl1 80 24430 0 23604 25 2 23 23 0 8 5
amappl 88 4803 0 4652 4 0 4 4 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 2 0 0 1 0 1 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
uaddrrnd 24 878 0 848 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 878 0 848 1 0 1 1 0 8 0
vmmpekpl 168 12799 0 12765 2 0 2 2 0 8 0
vmmpepl 168 83425 0 81108 108 3 105 105 0 357 0
vmsppl 368 877 0 848 4 0 4 4 0 8 0
rwobjpl 56 26261 0 22610 52 0 52 52 0 8 0
pdppl 4096 1763 0 1696 100 31 69 83 0 8 2
pvpl 32 394867 0 382892 275 4 271 271 0 265 173
pmappl 248 877 0 848 3 0 3 3 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 701 0 35 20 0 20 20 0 8 0
ddb{0}>
Reply all
Reply to author
Forward
0 new messages