Unsure if this ever got through.

---------- Forwarded message ---------
From: <[email protected]>
Date: Wed., 11 Dec. 2019, 12:15
Subject: Syzkaller witness reports locking order issue
To: <[email protected]>
Cc: <[email protected]>


>Synopsis:      Witness reports locking order issue pwritev/mmap/mlock
>Category:      system
>Environment:
        System      : OpenBSD 6.6
        Details     : OpenBSD 6.6-current (GENERIC.MP) #509: Tue Dec  3
19:03:47 MST 2019
                         [email protected]:
/usr/src/sys/arch/amd64/compile/GENERIC.MP

        Architecture: OpenBSD.amd64
        Machine     : amd64
>Description:
        Found from running the syzkaller against the OpenBSD kernel.

login: witness: lock order reversal:
 1st 0xfffffd80294d0e90 vmmaplk (&map->lock)
 2nd 0xfffffd801e2d90a8 inode (&ip->i_lock)
lock order "&ip->i_lock"(rrwlock) -> "&map->lock"(rwlock) first seen at:
#0  witness_checkorder+0x69c witness_lock_order_check
usr/src/sys/kern/subr_witness.c:2441 [inline]
#0  witness_checkorder+0x69c usr/src/sys/kern/subr_witness.c:872
#1  rw_enter+0xd4
#2  vm_map_lock_ln+0x10d usr/src/sys/uvm/uvm_map.c:5397
#3  uvm_map+0x2da usr/src/sys/uvm/uvm_map.c:1226
#4  km_alloc+0x18b usr/src/sys/uvm/uvm_km.c:908
#5  pool_multi_alloc_ni+0xd0 usr/src/sys/kern/subr_pool.c:1692
#6  pool_p_alloc+0x74 pool_allocator_alloc
usr/src/sys/kern/subr_pool.c:1606 [inline]
#6  pool_p_alloc+0x74 usr/src/sys/kern/subr_pool.c:927
#7  pool_do_get+0x10f usr/src/sys/kern/subr_pool.c:712
#8  pool_get+0xeb usr/src/sys/kern/subr_pool.c:581
#9  ufsdirhash_build+0x3ea usr/src/sys/ufs/ufs/ufs_dirhash.c:180
#10 ufs_lookup+0x2a1 usr/src/sys/ufs/ufs/ufs_lookup.c:200
#11 VOP_LOOKUP+0x5b usr/src/sys/kern/vfs_vops.c:91
#12 vfs_lookup+0x7a6 usr/src/sys/kern/vfs_lookup.c:568
#13 namei+0x63c usr/src/sys/kern/vfs_lookup.c:249
#14 start_init+0xc9 check_console usr/src/sys/kern/init_main.c:596 [inline]
#14 start_init+0xc9 usr/src/sys/kern/init_main.c:636
#15 proc_trampoline+0x1c
lock order "&map->lock"(rwlock) -> "&ip->i_lock"(rrwlock) first seen at:
#0  witness_checkorder+0x69c witness_lock_order_check
usr/src/sys/kern/subr_witness.c:2441 [inline]
#0  witness_checkorder+0x69c usr/src/sys/kern/subr_witness.c:872
#1  rw_enter+0xd4
#2  rrw_enter+0x88 usr/src/sys/kern/kern_rwlock.c:453
#3  VOP_LOCK+0xf0 usr/src/sys/kern/vfs_vops.c:615
#4  vn_lock+0x81 usr/src/sys/kern/vfs_vnops.c:571
#5  uvn_io+0x2c8 usr/src/sys/uvm/uvm_vnode.c:1189
#6  uvn_get+0x226 usr/src/sys/uvm/uvm_vnode.c:1049
#7  uvm_fault+0x11cc usr/src/sys/uvm/uvm_fault.c:1023
#8  uvm_fault_wire+0x70 usr/src/sys/uvm/uvm_fault.c:1295
#9  uvm_map_pageable_wire+0x2dd usr/src/sys/uvm/uvm_map.c:2349
#10 sys_mlock+0x185 usr/src/sys/uvm/uvm_mmap.c:765
#11 syscall+0x4a4 mi_syscall usr/src/sys/sys/syscall_mi.h:92 [inline]
#11 syscall+0x4a4 usr/src/sys/arch/amd64/amd64/trap.c:555
#12 Xsyscall+0x128
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> trace
db_enter() at db_enter+0x18 usr/src/sys/arch/amd64/amd64/db_interface.c:398
witness_checkorder(fffffd801e2d90a8,9,0) at witness_checkorder+0x1009
witness_debugger usr/src/sys/kern/subr_witness.c:2504 [inline]
witness_checkorder(fffffd801e2d90a8,9,0) at witness_checkorder+0x1009
usr/src/sys/kern/subr_witness.c:1086
rw_enter(fffffd801e2d9098,81) at rw_enter+0xd4
rrw_enter(fffffd801e2d9098,81) at rrw_enter+0x88
usr/src/sys/kern/kern_rwlock.c:453
VOP_LOCK(fffffd802eca5aa8,81) at VOP_LOCK+0xf0
usr/src/sys/kern/vfs_vops.c:615
vn_lock(fffffd802eca5aa8,81) at vn_lock+0x81
usr/src/sys/kern/vfs_vnops.c:571
uvn_io(fffffd802ecfb3b0,ffff800011575a18,1,2,0) at uvn_io+0x2c8
usr/src/sys/uvm/uvm_vnode.c:1189
uvn_get(fffffd802ecfb3b0,8000,ffff800011575c70,ffff800011575c04,0,4) at
uvn_get+0x226 usr/src/sys/uvm/uvm_vnode.c:1049
uvm_fault(fffffd80294d0e78,2000a000,2,4) at uvm_fault+0x11cc
usr/src/sys/uvm/uvm_fault.c:1023
uvm_fault_wire(fffffd80294d0e78,2000a000,2000b000,4) at uvm_fault_wire+0x70
usr/src/sys/uvm/uvm_fault.c:1295
uvm_map_pageable_wire(fffffd80294d0e78,fffffd80230bc240,fffffd802307a1c0,ffff800013586000,ffffffff81bea277,0)
at uvm_map_pageable_wire+0x2dd usr/src/sys/uvm/uvm_map.c:2349
sys_mlock(ffff80001144bb58,ffff800011575e68,ffff800011575eb0) at
sys_mlock+0x185 usr/src/sys/uvm/uvm_mmap.c:765
syscall(ffff800011575f30) at syscall+0x4a4 mi_syscall
usr/src/sys/sys/syscall_mi.h:92 [inline]
syscall(ffff800011575f30) at syscall+0x4a4
usr/src/sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9029d457cc0, count: -14
ddb{0}> show registers
rdi                              0x3
rsi                          0x3ffff    acpi_pdirpa+0x2be67
rbp               0xffff800011575690
rbx                              0x3
rdx                          0x40000    acpi_pdirpa+0x2be68
rcx               0xffff800013586000
rax               0xffff800000415a00
r8                0xffffffff81be8072    witness_checkorder+0xfe2
r9                               0x5
r10                              0x3
r11               0x6dd77ae5246822b1
r12               0xfffffd8002988d40
r13                                0
r14               0xffffffff82607120    w_lodata+0x4cd40
r15               0xffffffff8260ff70    w_lodata+0x55b90
rip               0xffffffff81892048    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff800011575680
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.0) pid=231208 stat=onproc
    flags process=0 proc=4000000<THREAD>
    pri=86, usrpri=86, nice=20
    forw=0xffffffffffffffff, list=0xffff80001144a2a8,0xffffffff82625fc0
    process=0xffff80001148a000 user=0xffff800011570000,
vmspace=0xfffffd80294d0e78
    estcpu=36, cpticks=0, pctcpu=0.0
    user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 64498  102683  87187      0  2           0                syz-executor.0
 64498  460838  87187      0  3   0x4000080  ttyin         syz-executor.0
*64498  231208  87187      0  7   0x4000000                syz-executor.0
 80799  131586   3891      0  3        0x80  nanosleep     syz-executor.1
 80799  481921   3891      0  3   0x4000080  ttyin         syz-executor.1
 80799  387313   3891      0  3   0x4000080  fsleep        syz-executor.1
  3891  396281  94265      0  3        0x82  nanosleep     syz-executor.1
 65996  286596      1      0  3    0x100083  ttyin         getty
 87187  247510  94265      0  3        0x82  nanosleep     syz-executor.0
 84399  103648      0      0  3     0x14200  bored         sosplice
 94265   61757  88337      0  3        0x82  thrsleep      syz-fuzzer
 94265  326902  88337      0  3   0x4000082  thrsleep      syz-fuzzer
 94265  176521  88337      0  3   0x4000082  thrsleep      syz-fuzzer
 94265   69357  88337      0  3   0x4000082  thrsleep      syz-fuzzer
 94265  325999  88337      0  3   0x4000082  kqread        syz-fuzzer
 94265  424827  88337      0  3   0x4000082  thrsleep      syz-fuzzer
 94265   61381  88337      0  3   0x4000082  thrsleep      syz-fuzzer
 94265   74050  88337      0  3   0x4000082  thrsleep      syz-fuzzer
 88337  296849  89795      0  3    0x10008a  pause         ksh
 89795  358214  88307      0  3        0x92  select        sshd
 80361  473215      1      0  3    0x100098  poll          cron
 14380  302390      1    110  3    0x100090  poll          sndiod
 90277  164791      1     99  3    0x100090  poll          sndiod
  9641  214762  89803     95  3    0x100092  kqread        smtpd
 72213  240504  89803    103  3    0x100092  kqread        smtpd
 59154  320699  89803     95  3    0x100092  kqread        smtpd
 56828  219632  89803     95  3    0x100092  kqread        smtpd
  6620  319483  89803     95  3    0x100092  kqread        smtpd
 62926  395921  89803     95  3    0x100092  kqread        smtpd
 89803  121147      1      0  3    0x100080  kqread        smtpd
 88307   66877      1      0  3        0x80  select        sshd
 26988  372177      1      0  3    0x100080  poll          ntpd
 76050   15644   1606     83  3    0x100092  poll          ntpd
  1606  210833      1     83  3    0x100092  poll          ntpd
 91134  290719  46232     74  3    0x100092  bpf           pflogd
 46232  344805      1      0  3        0x80  netio         pflogd
  2854  332933    122     73  3    0x100090  kqread        syslogd
   122  361642      1      0  3    0x100082  netio         syslogd
 86438  423587      1     77  3    0x100090  poll          dhclient
 10986  166697      1      0  3        0x80  poll          dhclient
 19334  129923  40063    115  3    0x100092  kqread        slaacd
 62209   77099  40063    115  3    0x100092  kqread        slaacd
 40063  449022      1      0  3    0x100080  kqread        slaacd
 45711  167114      0      0  2     0x14200                zerothread
 14132  524001      0      0  3     0x14200  aiodoned      aiodoned
  1298  494986      0      0  3     0x14200  syncer        update
 38266  389686      0      0  3     0x14200  cleaner       cleaner
 44010  283250      0      0  3     0x14200  reaper        reaper
 87854  371290      0      0  3     0x14200  pgdaemon      pagedaemon
 51738  127570      0      0  3     0x14200  bored         crynlk
  1272  505378      0      0  3     0x14200  bored         crypto
 65273  234937      0      0  3     0x14200  bored         softnet
 59151  487056      0      0  3     0x14200  bored         systqmp
 87489  123900      0      0  3     0x14200  bored         systq
 89838  131964      0      0  3  0x40014200  bored         softclock
 76893  271776      0      0  3  0x40014200                idle0
 71074  360360      0      0  3     0x14200  bored         smr
     1  219688      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 64498 (syz-executor.0) thread 0xffff80001144bb58 (231208)
shared rwlock vmmaplk r = 0 (0xfffffd80294d0e90)
#0  witness_lock+0x52e usr/src/sys/kern/subr_witness.c:1163
#1  rw_enter+0x453 usr/src/sys/kern/kern_rwlock.c:309
#2  vm_map_lock_ln+0x10d usr/src/sys/uvm/uvm_map.c:5397
#3  uvm_map_pageable+0x11d usr/src/sys/uvm/uvm_map.c:2445
#4  sys_mlock+0x185 usr/src/sys/uvm/uvm_mmap.c:765
#5  syscall+0x4a4 mi_syscall usr/src/sys/sys/syscall_mi.h:92 [inline]
#5  syscall+0x4a4 usr/src/sys/arch/amd64/amd64/trap.c:555
#6  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8265b060)
#0  witness_lock+0x52e usr/src/sys/kern/subr_witness.c:1163
#1  syscall+0x400 mi_syscall usr/src/sys/sys/syscall_mi.h:83 [inline]
#1  syscall+0x400 usr/src/sys/arch/amd64/amd64/trap.c:555
#2  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf   730    632K    1069K  78643K      5191        0
            pcb    14      8K       8K  78643K       132        0
         rtable   108      4K       4K  78643K      1422        0
         ifaddr    49     13K      14K  78643K       657        0
       counters    19     16K      16K  78643K        19        0
       ioctlops     0      0K       4K  78643K      1526        0
            iov     0      0K      24K  78643K       289        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1217     76K      77K  78643K      3228        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K        61        0
         VM map     2      1K       1K  78643K         2        0
            sem    12      1K       1K  78643K       212        0
        dirhash    18      3K       3K  78643K        18        0
      file desc     6     17K      25K  78643K      3263        0
          sigio     0      0K       0K  78643K        81        0
           proc    82     88K     124K  78643K      2005        0
        subproc    32      2K       2K  78643K       306        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K        48        0
       in_multi    33      2K       2K  78643K       209        0
    ether_multi     1      0K       0K  78643K         1        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   120    530K     530K  78643K       120        0
           exec     0      0K       1K  78643K      1027        0
     pfkey data     0      0K       0K  78643K         8        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     62K      62K  78643K         7        0
       UVM amap   329     31K     926K  78643K     10916        0
       UVM aobj   101      7K       7K  78643K       120        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K        24        0
            NDP     7      0K       0K  78643K       162        0
           temp   131   3053K    3125K  78643K     77555        0
         kqueue     0      0K       0K  78643K        49        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg
Idle
arp         64       41    0       34     1     0     1     1     0     8
  0
plcache    128       10    0        0     1     0     1     1     0     8
  0
rtpcb       80       97    0       93     1     0     1     1     0     8
  0
rtentry    112      206    0      162     2     0     2     2     0     8
  0
unpcb      120     2483    0     2424     8     5     3     4     0     8
  1
syncache   264        4    0        4     1     1     0     1     0     8
  0
tcpqe       32     1463    0     1463    11    10     1     1     0     8
  1
tcpcb      544      442    0      430     6     4     2     3     0     8
  0
inpcb      296     5510    0     5477    18    14     4     9     0     8
  0
nd6         48       36    0       32     1     0     1     1     0     8
  0
pkpcb       40       75    0       75    13    12     1     1     0     8
  1
ppxss      1128      79    0       79    12    11     1     1     0     8
  1
pffrag     232       16    0       16     6     6     0     1     0   482
  0
pffrnode    88       16    0       16     6     6     0     1     0     8
  0
pffrent     40       50    0       50     6     6     0     1     0     8
  0
pfosfp      40      846    0      423     5     0     5     5     0     8
  0
pfosfpen   112     1428    0      714    21     0    21    21     0     8
  0
pfstitem    24      202    0      161     1     0     1     1     0     8
  0
pfstkey    112      202    0      161     2     0     2     2     0     8
  0
pfstate    328      202    0      161     5     0     5     5     0     8
  0
pfrule     1360      21    0       16     2     1     1     2     0     8
  0
art_heap8  4096       1    0        0     1     0     1     1     0     8
  0
art_heap4  256      929    0      711    14     0    14    14     0     8
  0
art_table   32      930    0      711     2     0     2     2     0     8
  0
art_node    16      206    0      164     1     0     1     1     0     8
  0
sysvmsgpl   40       14    0        9     1     0     1     1     0     8
  0
semapl     112      210    0      200     1     0     1     1     0     8
  0
shmpl      112      118    0       19     3     0     3     3     0     8
  0
dirhash    1024      21    0        0     3     0     3     3     0     8
  0
dino1pl    128     6073    0     4595    48     0    48    48     0     8
  0
ffsino     272     6073    0     4595    99     0    99    99     0     8
  0
nchpl      144    11537    0     9804    65     0    65    65     0     8
  0
uvmvnodes   72     6629    0        0   121     0   121   121     0     8
  0
vnodes     208     6629    0        0   349     0   349   349     0     8
  0
namei      1024   37565    0    37565     2     1     1     1     0     8
  1
percpumem   16       30    0        0     1     0     1     1     0     8
  0
scxspl     192    32439    0    32439     1     0     1     1     0     8
  1
plimitpl   152      112    0       93     1     0     1     1     0     8
  0
sigapl     432     3528    0     3496     5     1     4     5     0     8
  0
futexpl     56    57449    0    57448     1     0     1     1     0     8
  0
knotepl    112     1341    0     1268     3     0     3     3     0     8
  0
kqueuepl   104      784    0      772     1     0     1     1     0     8
  0
pipepl     160     4846    0     4827     3     1     2     2     0     8
  1
fdescpl    488     3529    0     3496     5     0     5     5     0     8
  0
filepl     152    28030    0    27836    25    16     9    12     0     8
  0
lockfpl    104      773    0      771     1     0     1     1     0     8
  0
lockfspl    48      290    0      288     1     0     1     1     0     8
  0
sessionpl  112       48    0       29     1     0     1     1     0     8
  0
pgrppl      48       69    0       50     1     0     1     1     0     8
  0
ucredpl     96     4131    0     4102     1     0     1     1     0     8
  0
zombiepl   144     3497    0     3497     2     1     1     1     0     8
  1
processpl  896     3544    0     3497     6     0     6     6     0     8
  0
procpl     632     8683    0     8625     9     3     6     7     0     8
  0
srpgc       64       32    0       32    11    10     1     1     0     8
  1
sosppl     128       51    0       51    11    10     1     1     0     8
  1
sockpl     384     8172    0     8081    36    25    11    18     0     8
  0
mcl64k     65536      2    0        0     1     0     1     1     0     8
  0
mcl16k     16384      2    0        0     1     0     1     1     0     8
  0
mcl12k     12288      1    0        0     1     0     1     1     0     8
  0
mcl9k      9216       2    0        0     1     0     1     1     0     8
  0
mcl8k      8192       4    0        0     1     0     1     1     0     8
  0
mcl4k      4096       5    0        0     1     0     1     1     0     8
  0
mcl2k2     2112       1    0        0     1     0     1     1     0     8
  0
mcl2k      2048     120    0        0    15     2    13    15     0     8
  0
mtagpl      80        2    0        0     1     0     1     1     0     8
  0
mbufpl     256      394    0        0    17     0    17    17     0     8
  0
bufpl      280    14430    0     7828   474     0   474   474     0     8
  0
anonpl      16   295777    0   286454    95    55    40    54     0    45
  0
amapchunkpl 152  133949    0   133683  4421  4299   122  4402     0   158
111
amappl16   192    14744    0    14406    65    47    18    30     0     8
  0
amappl15   184      434    0      434     3     3     0     1     0     8
  0
amappl14   176      492    0      479     1     0     1     1     0     8
  0
amappl13   168      695    0      693     1     0     1     1     0     8
  0
amappl12   160      337    0      336     1     0     1     1     0     8
  0
amappl11   152      854    0      810     2     0     2     2     0     8
  0
amappl10   144      467    0      463     1     0     1     1     0     8
  0
amappl9    136     1002    0      990     1     0     1     1     0     8
  0
amappl8    128      276    0      227     2     0     2     2     0     8
  0
amappl7    120      714    0      687     1     0     1     1     0     8
  0
amappl6    112      732    0      721     1     0     1     1     0     8
  0
amappl5    104     2491    0     2461     1     0     1     1     0     8
  0
amappl4     96     2731    0     2659     3     1     2     3     0     8
  0
amappl3     88     1324    0     1304     1     0     1     1     0     8
  0
amappl2     80    26941    0    26744     6     1     5     5     0     8
  0
amappl1     72    85089    0    83847    41    15    26    34     0     8
  0
amappl      80     9450    0     9324     3     0     3     3     0    84
  0
dma4096    4096       1    0        1     1     1     0     1     0     8
  0
dma256     256        7    0        7     1     1     0     1     0     8
  0
dma128     128        1    0        1     1     1     0     1     0     8
  0
dma64       64        1    0        1     1     1     0     1     0     8
  0
dma32       32        6    0        6     1     1     0     1     0     8
  0
dma16       16        1    0        0     1     0     1     1     0     8
  0
aobjpl      64      119    0       19     2     0     2     2     0     8
  0
uaddrrnd    24     3529    0     3496     1     0     1     1     0     8
  0
uaddrbest   32        2    0        0     1     0     1     1     0     8
  0
uaddr       24     3529    0     3496     1     0     1     1     0     8
  0
vmmpekpl   168    43806    0    43758     3     0     3     3     0     8
  0
vmmpepl    168   427790    0   424523   223    71   152   168     0   357
  5
vmsppl     368     3528    0     3496     4     0     4     4     0     8
  0
pdppl      4096    7064    0     6992    11     1    10    11     0     8
  0
pvpl        32   959987    0   942153   291   141   150   183     0   265
  0
pmappl     232     3528    0     3496     6     4     2     3     0     8
  0
extentpl    40       14    0        6     1     0     1     1     0     8
  0
phpool     112      180    0       11     5     0     5     5     0     8
  0

>How-To-Repeat:
        Syzkaller reproducer:
        # {Threaded:false Collide:false Repeat:false RepeatTimes:0 Procs:1
Sandbox: Fault:false FaultCall:-1 FaultNth:0 Leak:false NetInjection:false
NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false
CloseFDs:false KCSAN:false DevlinkPCI:false UseTmpDir:false
HandleSegv:false Repro:false Trace:false}
        r0 = open(&(0x7f0000000380)='./file0\x00', 0x981a7ebd41dbff6, 0x0)
        pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='\x00', 0xff4e}],
0x1, 0x0, 0x80000)
        mmap(&(0x7f0000002000/0x9000)=nil, 0x9000, 0x4, 0x10, r0, 0x0, 0x0)
        mlock(&(0x7f000000a000/0x4000)=nil, 0x4000)


        C reproducer:
        // autogenerated by syzkaller (https://github.com/google/syzkaller)

        #define _GNU_SOURCE

        #include <endian.h>
        #include <pwd.h>
        #include <stdarg.h>
        #include <stdbool.h>
        #include <stdint.h>
        #include <stdio.h>
        #include <stdlib.h>
        #include <string.h>
        #include <sys/syscall.h>
        #include <unistd.h>

        #define __syscall syscall

        uint64_t r[1] = {0xffffffffffffffff};

        int main(void)
        {
        syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x1012ul, -1,
0ul, 0ul);
        intptr_t res = 0;
        memcpy((void*)0x20000380, "./file0\000", 8);
        res = syscall(SYS_open, 0x20000380ul, 0x981a7ebd41dbff6ul, 0ul);
        if (res != -1)
        r[0] = res;
        *(uint64_t*)0x20000100 = 0x20000000;
        memcpy((void*)0x20000000, "\000", 1);
        *(uint64_t*)0x20000108 = 0xff4e;
        syscall(SYS_pwritev, r[0], 0x20000100ul, 1ul, 0ul, 0x80000ul);
        syscall(SYS_mmap, 0x20002000ul, 0x9000ul, 4ul, 0x10ul, r[0], 0ul,
0ul);
        syscall(SYS_mlock, 0x2000a000ul, 0x4000ul);
        return 0;
        }
>Fix:
        Unknown


dmesg:
OpenBSD 6.6-current (GENERIC.MP) #509: Tue Dec  3 19:03:47 MST 2019
    [email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 6425542656 (6127MB)
avail mem = 6218407936 (5930MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xe0010 (248 entries)
bios0: vendor Phoenix Technologies LTD version "6.00" date 12/12/2018
bios0: VMware, Inc. VMware Virtual Platform
acpi0 at bios0: ACPI 4.0
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP BOOT APIC MCFG SRAT HPET WAET
acpi0: wakeup devices PCI0(S3) USB_(S1) P2P0(S3) S1F0(S3) S2F0(S3) S8F0(S3)
S16F(S3) S18F(S3) S22F(S3) S23F(S3) S24F(S3) S25F(S3) PE40(S3) S1F0(S3)
PE50(S3) S1F0(S3) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E5-2640 v4 @ 2.40GHz, 2397.77 MHz, 06-4f-01
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,SSE3,PCLMUL,VMX,SSSE3,FMA3,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,ARAT,XSAVEOPT,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 65MHz
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E5-2640 v4 @ 2.40GHz, 2397.36 MHz, 06-4f-01
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,SSE3,PCLMUL,VMX,SSSE3,FMA3,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,ARAT,XSAVEOPT,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 0, package 2
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E5-2640 v4 @ 2.40GHz, 2397.35 MHz, 06-4f-01
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,SSE3,PCLMUL,VMX,SSSE3,FMA3,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,ARAT,XSAVEOPT,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 0, package 4
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E5-2640 v4 @ 2.40GHz, 2397.34 MHz, 06-4f-01
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,SSE3,PCLMUL,VMX,SSSE3,FMA3,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,ARAT,XSAVEOPT,MELTDOWN
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 0, package 6
ioapic0 at mainbus0: apid 1 pa 0xfec00000, version 20, 24 pins
acpimcfg0 at acpi0
acpimcfg0: addr 0xf0000000, bus 0-127
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpicpu0 at acpi0: C1(@1 halt!)
acpicpu1 at acpi0: C1(@1 halt!)
acpicpu2 at acpi0: C1(@1 halt!)
acpicpu3 at acpi0: C1(@1 halt!)
acpipci0 at acpi0 PCI0: 0x00000000 0x00000011 0x00000001
acpicmos0 at acpi0
"PNP0A05" at acpi0 not configured
acpiac0 at acpi0: AC unit online
cpu0: using VERW MDS workaround
pvbus0 at mainbus0: VMware
vmt0 at pvbus0
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x01
ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x01
pci1 at ppb0 bus 1
pcib0 at pci0 dev 7 function 0 "Intel 82371AB PIIX4 ISA" rev 0x08
pciide0 at pci0 dev 7 function 1 "Intel 82371AB IDE" rev 0x01: DMA, channel
0 configured to compatibility, channel 1 configured to compatibility
atapiscsi0 at pciide0 channel 0 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: <NECVMWar, VMware IDE CDR00, 1.00> removable
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
piixpm0 at pci0 dev 7 function 3 "Intel 82371AB Power" rev 0x08: SMBus
disabled
"VMware VMCI" rev 0x10 at pci0 dev 7 function 7 not configured
vga1 at pci0 dev 15 function 0 "VMware SVGA II" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb1 at pci0 dev 17 function 0 "VMware PCI" rev 0x02
pci2 at ppb1 bus 2
ppb2 at pci0 dev 21 function 0 "VMware PCIE" rev 0x01
pci3 at ppb2 bus 3
mpi0 at pci3 dev 0 function 0 "Symbios Logic SAS1068" rev 0x01: apic 1 int
18
mpi0: SAS3444, firmware 1.3.41.32
scsibus2 at mpi0: 256 targets, initiator 16
sd0 at scsibus2 targ 0 lun 0: <VMware, Virtual disk, 2.0>
sd0: 50176MB, 512 bytes/sector, 102760448 sectors
ppb3 at pci0 dev 21 function 1 "VMware PCIE" rev 0x01
pci4 at ppb3 bus 4
ppb4 at pci0 dev 21 function 2 "VMware PCIE" rev 0x01
pci5 at ppb4 bus 5
ppb5 at pci0 dev 21 function 3 "VMware PCIE" rev 0x01
pci6 at ppb5 bus 6
ppb6 at pci0 dev 21 function 4 "VMware PCIE" rev 0x01
pci7 at ppb6 bus 7
ppb7 at pci0 dev 21 function 5 "VMware PCIE" rev 0x01
pci8 at ppb7 bus 8
ppb8 at pci0 dev 21 function 6 "VMware PCIE" rev 0x01
pci9 at ppb8 bus 9
ppb9 at pci0 dev 21 function 7 "VMware PCIE" rev 0x01
pci10 at ppb9 bus 10
ppb10 at pci0 dev 22 function 0 "VMware PCIE" rev 0x01
pci11 at ppb10 bus 11
vmx0 at pci11 dev 0 function 0 "VMware VMXNET3" rev 0x01: apic 1 int 19,
address 00:50:56:bf:bb:54
ppb11 at pci0 dev 22 function 1 "VMware PCIE" rev 0x01
pci12 at ppb11 bus 12
ppb12 at pci0 dev 22 function 2 "VMware PCIE" rev 0x01
pci13 at ppb12 bus 13
ppb13 at pci0 dev 22 function 3 "VMware PCIE" rev 0x01
pci14 at ppb13 bus 14
ppb14 at pci0 dev 22 function 4 "VMware PCIE" rev 0x01
pci15 at ppb14 bus 15
ppb15 at pci0 dev 22 function 5 "VMware PCIE" rev 0x01
pci16 at ppb15 bus 16
ppb16 at pci0 dev 22 function 6 "VMware PCIE" rev 0x01
pci17 at ppb16 bus 17
ppb17 at pci0 dev 22 function 7 "VMware PCIE" rev 0x01
pci18 at ppb17 bus 18
ppb18 at pci0 dev 23 function 0 "VMware PCIE" rev 0x01
pci19 at ppb18 bus 19
ppb19 at pci0 dev 23 function 1 "VMware PCIE" rev 0x01
pci20 at ppb19 bus 20
ppb20 at pci0 dev 23 function 2 "VMware PCIE" rev 0x01
pci21 at ppb20 bus 21
ppb21 at pci0 dev 23 function 3 "VMware PCIE" rev 0x01
pci22 at ppb21 bus 22
ppb22 at pci0 dev 23 function 4 "VMware PCIE" rev 0x01
pci23 at ppb22 bus 23
ppb23 at pci0 dev 23 function 5 "VMware PCIE" rev 0x01
pci24 at ppb23 bus 24
ppb24 at pci0 dev 23 function 6 "VMware PCIE" rev 0x01
pci25 at ppb24 bus 25
ppb25 at pci0 dev 23 function 7 "VMware PCIE" rev 0x01
pci26 at ppb25 bus 26
ppb26 at pci0 dev 24 function 0 "VMware PCIE" rev 0x01
pci27 at ppb26 bus 27
ppb27 at pci0 dev 24 function 1 "VMware PCIE" rev 0x01
pci28 at ppb27 bus 28
ppb28 at pci0 dev 24 function 2 "VMware PCIE" rev 0x01
pci29 at ppb28 bus 29
ppb29 at pci0 dev 24 function 3 "VMware PCIE" rev 0x01
pci30 at ppb29 bus 30
ppb30 at pci0 dev 24 function 4 "VMware PCIE" rev 0x01
pci31 at ppb30 bus 31
ppb31 at pci0 dev 24 function 5 "VMware PCIE" rev 0x01
pci32 at ppb31 bus 32
ppb32 at pci0 dev 24 function 6 "VMware PCIE" rev 0x01
pci33 at ppb32 bus 33
ppb33 at pci0 dev 24 function 7 "VMware PCIE" rev 0x01
pci34 at ppb33 bus 34
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5 irq 1 irq 12
pckbd0 at pckbc0 (kbd slot)
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
vmm0 at mainbus0: VMX/EPT
vscsi0 at root
scsibus3 at vscsi0: 256 targets
softraid0 at root
scsibus4 at softraid0: 256 targets
root on sd0a (2bc27dbf3b69d55d.a) swap on sd0b dump on sd0b

usbdevs:
usbdevs: no USB controllers found

pcidump:
Domain /dev/pci0:
 0:0:0: Intel 82443BX AGP
        0x0000: Vendor ID: 8086, Product ID: 7190
        0x0004: Command: 0006, Status: 0200
        0x0008: Class: 06 Bridge, Subclass: 00 Host,
                Interface: 00, Revision: 01
        0x000c: BIST: 00, Header Type: 00, Latency Timer: 00,
                Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 15ad Product ID: 1976
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 00 Line: 00 Min Gnt: 00 Max Lat: 00
        0x0000: 71908086 02000006 06000001 00000000
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 00000000 00000000 00000000 197615ad
        0x0030: 00000000 00000000 00000000 00000000
        0x0040: 0000fce1 fe800008 00000000 00000000
        0x0050: ff008008 00000000 01111003 11333000
        0x0060: 00800080 00000080 00000000 00000000
        0x0070: 00180000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000013 f0000003 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00180000
 0:1:0: Intel 82443BX AGP
        0x0000: Vendor ID: 8086, Product ID: 7191
        0x0004: Command: 011f, Status: 0220
        0x0008: Class: 06 Bridge, Subclass: 04 PCI,
                Interface: 00, Revision: 01
        0x000c: BIST: 00, Header Type: 01, Latency Timer: 00,
                Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: Primary Bus: 0, Secondary Bus: 1, Subordinate Bus: 1,
                Secondary Latency Timer: 40
        0x001c: I/O Base: f0, I/O Limit: 00, Secondary Status: 02a0
        0x0020: Memory Base: fff0, Memory Limit: 0000
        0x0024: Prefetch Memory Base: fff0, Prefetch Memory Limit: 0000
        0x0028: Prefetch Memory Base Upper 32 Bits: 00000000
        0x002c: Prefetch Memory Limit Upper 32 Bits: 00000000
        0x0030: I/O Base Upper 16 Bits: 0000, I/O Limit Upper 16 Bits: 0000
        0x0038: Expansion ROM Base Address: 00000000
        0x003c: Interrupt Pin: 00, Line: 00, Bridge Control: 0004
        0x0000: 71918086 0220011f 06040001 00010000
        0x0010: 00000000 00000000 40010100 02a000f0
        0x0020: 0000fff0 0000fff0 00000000 00000000
        0x0030: 00000000 00000000 00000000 00040000
        0x0040: 00000000 00000000 00000000 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:7:0: Intel 82371AB PIIX4 ISA
        0x0000: Vendor ID: 8086, Product ID: 7110
        0x0004: Command: 0007, Status: 0280
        0x0008: Class: 06 Bridge, Subclass: 01 ISA,
                Interface: 00, Revision: 08
        0x000c: BIST: 00, Header Type: 80, Latency Timer: 00,
                Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 15ad Product ID: 1976
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 00 Line: 00 Min Gnt: 00 Max Lat: 00
        0x0000: 71108086 02800007 06010008 00800000
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 00000000 00000000 00000000 197615ad
        0x0030: 00000000 00000000 00000000 00000000
        0x0040: 00000000 00000000 00000000 00100000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 0a0b8009 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:7:1: Intel 82371AB IDE
        0x0000: Vendor ID: 8086, Product ID: 7111
        0x0004: Command: 0005, Status: 0280
        0x0008: Class: 01 Mass Storage, Subclass: 01 IDE,
                Interface: 8a, Revision: 01
        0x000c: BIST: 00, Header Type: 00, Latency Timer: 40,
                Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR io addr: 0x00001060/0x0010
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 15ad Product ID: 1976
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 00 Line: ff Min Gnt: 00 Max Lat: 00
        0x0000: 71118086 02800005 01018a01 00004000
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 00001061 00000000 00000000 197615ad
        0x0030: 00000000 00000000 00000000 000000ff
        0x0040: 0000a307 00000000 00000001 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:7:3: Intel 82371AB Power
        0x0000: Vendor ID: 8086, Product ID: 7113
        0x0004: Command: 0001, Status: 0280
        0x0008: Class: 06 Bridge, Subclass: 80 Miscellaneous,
                Interface: 00, Revision: 08
        0x000c: BIST: 00, Header Type: 80, Latency Timer: 00,
                Cache Line Size: 00
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: BAR empty (00000000)
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 15ad Product ID: 1976
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 00 Line: 00 Min Gnt: 00 Max Lat: 00
        0x0000: 71138086 02800001 06800008 00800000
        0x0010: 00000000 00000000 00000000 00000000
        0x0020: 00000000 00000000 00000000 197615ad
        0x0030: 00000000 00000000 00000000 00000000
        0x0040: 00001001 00000000 00000000 00000000
        0x0050: 00000000 00000000 02000077 00000000
        0x0060: 00000000 00210cf0 00000000 00000000
        0x0070: 00000000 00000000 00000000 0001002e
        0x0080: 00000001 00000000 00000000 00000000
        0x0090: 00001041 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:7:7: VMware VMCI
        0x0000: Vendor ID: 15ad, Product ID: 0740
        0x0004: Command: 0003, Status: 0290
        0x0008: Class: 08 System, Subclass: 80 Miscellaneous,
                Interface: 00, Revision: 10
        0x000c: BIST: 00, Header Type: 00, Latency Timer: 40,
                Cache Line Size: 00
        0x0010: BAR io addr: 0x00001080/0x0040
        0x0014: BAR mem 64bit addr: 0x00000000febfe000/0x00002000
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 15ad Product ID: 0740
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 09 Min Gnt: 06 Max Lat: ff
        0x0040: Capability 0x05: Message Signalled Interrupts (MSI)
                Enabled: no
        0x0058: Capability 0x11: Extended Message Signalled Interrupts
(MSI-X)
                Enabled: no; table size 2 (BAR 1:0)
        0x0000: 074015ad 02900003 08800010 00004000
        0x0010: 00001081 febfe004 00000000 00000000
        0x0020: 00000000 00000000 00000000 074015ad
        0x0030: 00000000 00000040 00000000 ff060109
        0x0040: 00805805 00000000 00000000 00000000
        0x0050: 00000000 00000000 00010011 00000001
        0x0060: 00001001 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:15:0: VMware SVGA II
        0x0000: Vendor ID: 15ad, Product ID: 0405
        0x0004: Command: 0007, Status: 0290
        0x0008: Class: 03 Display, Subclass: 00 VGA,
                Interface: 00, Revision: 00
        0x000c: BIST: 00, Header Type: 00, Latency Timer: 40,
                Cache Line Size: 08
        0x0010: BAR io addr: 0x00001070/0x0010
        0x0014: BAR mem prefetchable 32bit addr: 0xe8000000/0x08000000
        0x0018: BAR mem 32bit addr: 0xfe000000/0x00800000
        0x001c: BAR empty (00000000)
        0x0020: BAR empty (00000000)
        0x0024: BAR empty (00000000)
        0x0028: Cardbus CIS: 00000000
        0x002c: Subsystem Vendor ID: 15ad Product ID: 0405
        0x0030: Expansion ROM Base Address: 00000000
        0x0038: 00000000
        0x003c: Interrupt Pin: 01 Line: 09 Min Gnt: 00 Max Lat: 00
        0x0040: Capability 0x09: Vendor Specific
        0x0044: Capability 0x13: PCI Advanced Features
        0x0000: 040515ad 02900007 03000000 00004008
        0x0010: 00001071 e8000008 fe000000 00000000
        0x0020: 00000000 00000000 00000000 040515ad
        0x0030: 00000000 00000040 00000000 00000109
        0x0040: 00004409 03060013 00000000 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:17:0: VMware PCI
        0x0000: Vendor ID: 15ad, Product ID: 0790
        0x0004: Command: 0007, Status: 0290
        0x0008: Class: 06 Bridge, Subclass: 04 PCI,
                Interface: 01, Revision: 02
        0x000c: BIST: 00, Header Type: 01, Latency Timer: 40,
                Cache Line Size: 08
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: Primary Bus: 0, Secondary Bus: 2, Subordinate Bus: 2,
                Secondary Latency Timer: 44
        0x001c: I/O Base: 20, I/O Limit: 30, Secondary Status: 0280
        0x0020: Memory Base: fd60, Memory Limit: fdf0
        0x0024: Prefetch Memory Base: e7b1, Prefetch Memory Limit: e7f1
        0x0028: Prefetch Memory Base Upper 32 Bits: 00000000
        0x002c: Prefetch Memory Limit Upper 32 Bits: 00000000
        0x0030: I/O Base Upper 16 Bits: 0000, I/O Limit Upper 16 Bits: 0000
        0x0038: Expansion ROM Base Address: 00000000
        0x003c: Interrupt Pin: 00, Line: ff, Bridge Control: 0004
        0x0040: Capability 0x0d: PCI-PCI
        0x0000: 079015ad 02900007 06040102 00014008
        0x0010: 00000000 00000000 44020200 02803020
        0x0020: fdf0fd60 e7f1e7b1 00000000 00000000
        0x0030: 00000000 00000040 00000000 000400ff
        0x0040: 0000000d 079015ad 00000000 00000000
        0x0050: 00000000 00000000 00000000 00000000
        0x0060: 00000000 00000000 00000000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 00000000
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:21:0: VMware PCIE
        0x0000: Vendor ID: 15ad, Product ID: 07a0
        0x0004: Command: 0007, Status: 0010
        0x0008: Class: 06 Bridge, Subclass: 04 PCI,
                Interface: 00, Revision: 01
        0x000c: BIST: 00, Header Type: 81, Latency Timer: 00,
                Cache Line Size: 08
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: Primary Bus: 0, Secondary Bus: 3, Subordinate Bus: 3,
                Secondary Latency Timer: 00
        0x001c: I/O Base: 40, I/O Limit: 40, Secondary Status: 0000
        0x0020: Memory Base: fd50, Memory Limit: fd50
        0x0024: Prefetch Memory Base: fff1, Prefetch Memory Limit: 0001
        0x0028: Prefetch Memory Base Upper 32 Bits: 00000000
        0x002c: Prefetch Memory Limit Upper 32 Bits: 00000000
        0x0030: I/O Base Upper 16 Bits: 0000, I/O Limit Upper 16 Bits: 0000
        0x0038: Expansion ROM Base Address: 00000000
        0x003c: Interrupt Pin: 00, Line: ff, Bridge Control: 0004
        0x0040: Capability 0x0d: PCI-PCI
        0x0048: Capability 0x01: Power Management
                State: D0
        0x0050: Capability 0x10: PCI Express
                Link Speed: 5.0 / 5.0 GT/s, Link Width: x32 / x32
        0x0100: Enhanced Capability 0x00: Unknown
        0x008c: Capability 0x05: Message Signalled Interrupts (MSI)
                Enabled: no
        0x0000: 07a015ad 00100007 06040001 00810008
        0x0010: 00000000 00000000 00030300 00004040
        0x0020: fd50fd50 0001fff1 00000000 00000000
        0x0030: 00000000 00000040 00000000 000400ff
        0x0040: 0000480d 07a015ad c8035001 00000000
        0x0050: 01428c10 00000000 00000000 00100602
        0x0060: 22020000 05047843 01480000 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 01800005
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:21:1: VMware PCIE
        0x0000: Vendor ID: 15ad, Product ID: 07a0
        0x0004: Command: 0007, Status: 0010
        0x0008: Class: 06 Bridge, Subclass: 04 PCI,
                Interface: 00, Revision: 01
        0x000c: BIST: 00, Header Type: 81, Latency Timer: 00,
                Cache Line Size: 08
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: Primary Bus: 0, Secondary Bus: 4, Subordinate Bus: 4,
                Secondary Latency Timer: 00
        0x001c: I/O Base: 80, I/O Limit: 80, Secondary Status: 0000
        0x0020: Memory Base: fd10, Memory Limit: fd10
        0x0024: Prefetch Memory Base: e781, Prefetch Memory Limit: e781
        0x0028: Prefetch Memory Base Upper 32 Bits: 00000000
        0x002c: Prefetch Memory Limit Upper 32 Bits: 00000000
        0x0030: I/O Base Upper 16 Bits: 0000, I/O Limit Upper 16 Bits: 0000
        0x0038: Expansion ROM Base Address: 00000000
        0x003c: Interrupt Pin: 00, Line: ff, Bridge Control: 0004
        0x0040: Capability 0x0d: PCI-PCI
        0x0048: Capability 0x01: Power Management
                State: D0
        0x0050: Capability 0x10: PCI Express
                Link Speed: 5.0 / 5.0 GT/s, Link Width: x32 / x32
        0x0100: Enhanced Capability 0x00: Unknown
        0x008c: Capability 0x05: Message Signalled Interrupts (MSI)
                Enabled: no
        0x0000: 07a015ad 00100007 06040001 00810008
        0x0010: 00000000 00000000 00040400 00008080
        0x0020: fd10fd10 e781e781 00000000 00000000
        0x0030: 00000000 00000040 00000000 000400ff
        0x0040: 0000480d 07a015ad c8035001 00000000
        0x0050: 01428c10 00000000 00000000 00100602
        0x0060: 02020000 050c7843 00000400 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 01800005
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:21:2: VMware PCIE
        0x0000: Vendor ID: 15ad, Product ID: 07a0
        0x0004: Command: 0007, Status: 0010
        0x0008: Class: 06 Bridge, Subclass: 04 PCI,
                Interface: 00, Revision: 01
        0x000c: BIST: 00, Header Type: 81, Latency Timer: 00,
                Cache Line Size: 08
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: Primary Bus: 0, Secondary Bus: 5, Subordinate Bus: 5,
                Secondary Latency Timer: 00
        0x001c: I/O Base: c0, I/O Limit: c0, Secondary Status: 0000
        0x0020: Memory Base: fcd0, Memory Limit: fcd0
        0x0024: Prefetch Memory Base: e741, Prefetch Memory Limit: e741
        0x0028: Prefetch Memory Base Upper 32 Bits: 00000000
        0x002c: Prefetch Memory Limit Upper 32 Bits: 00000000
        0x0030: I/O Base Upper 16 Bits: 0000, I/O Limit Upper 16 Bits: 0000
        0x0038: Expansion ROM Base Address: 00000000
        0x003c: Interrupt Pin: 00, Line: ff, Bridge Control: 0004
        0x0040: Capability 0x0d: PCI-PCI
        0x0048: Capability 0x01: Power Management
                State: D0
        0x0050: Capability 0x10: PCI Express
                Link Speed: 5.0 / 5.0 GT/s, Link Width: x32 / x32
        0x0100: Enhanced Capability 0x00: Unknown
        0x008c: Capability 0x05: Message Signalled Interrupts (MSI)
                Enabled: no
        0x0000: 07a015ad 00100007 06040001 00810008
        0x0010: 00000000 00000000 00050500 0000c0c0
        0x0020: fcd0fcd0 e741e741 00000000 00000000
        0x0030: 00000000 00000040 00000000 000400ff
        0x0040: 0000480d 07a015ad c8035001 00000000
        0x0050: 01428c10 00000000 00000000 00100602
        0x0060: 02020000 05147843 00000400 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 01800005
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:21:3: VMware PCIE
        0x0000: Vendor ID: 15ad, Product ID: 07a0
        0x0004: Command: 0007, Status: 0010
        0x0008: Class: 06 Bridge, Subclass: 04 PCI,
                Interface: 00, Revision: 01
        0x000c: BIST: 00, Header Type: 81, Latency Timer: 00,
                Cache Line Size: 08
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: Primary Bus: 0, Secondary Bus: 6, Subordinate Bus: 6,
                Secondary Latency Timer: 00
        0x001c: I/O Base: f0, I/O Limit: 00, Secondary Status: 0000
        0x0020: Memory Base: fc90, Memory Limit: fc90
        0x0024: Prefetch Memory Base: e701, Prefetch Memory Limit: e701
        0x0028: Prefetch Memory Base Upper 32 Bits: 00000000
        0x002c: Prefetch Memory Limit Upper 32 Bits: 00000000
        0x0030: I/O Base Upper 16 Bits: 0000, I/O Limit Upper 16 Bits: 0000
        0x0038: Expansion ROM Base Address: 00000000
        0x003c: Interrupt Pin: 00, Line: ff, Bridge Control: 0004
        0x0040: Capability 0x0d: PCI-PCI
        0x0048: Capability 0x01: Power Management
                State: D0
        0x0050: Capability 0x10: PCI Express
                Link Speed: 5.0 / 5.0 GT/s, Link Width: x32 / x32
        0x0100: Enhanced Capability 0x00: Unknown
        0x008c: Capability 0x05: Message Signalled Interrupts (MSI)
                Enabled: no
        0x0000: 07a015ad 00100007 06040001 00810008
        0x0010: 00000000 00000000 00060600 000000f0
        0x0020: fc90fc90 e701e701 00000000 00000000
        0x0030: 00000000 00000040 00000000 000400ff
        0x0040: 0000480d 07a015ad c8035001 00000000
        0x0050: 01428c10 00000000 00000000 00100602
        0x0060: 02020000 051c7843 00000400 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 01800005
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:21:4: VMware PCIE
        0x0000: Vendor ID: 15ad, Product ID: 07a0
        0x0004: Command: 0007, Status: 0010
        0x0008: Class: 06 Bridge, Subclass: 04 PCI,
                Interface: 00, Revision: 01
        0x000c: BIST: 00, Header Type: 81, Latency Timer: 00,
                Cache Line Size: 08
        0x0010: BAR empty (00000000)
        0x0014: BAR empty (00000000)
        0x0018: Primary Bus: 0, Secondary Bus: 7, Subordinate Bus: 7,
                Secondary Latency Timer: 00
        0x001c: I/O Base: f0, I/O Limit: 00, Secondary Status: 0000
        0x0020: Memory Base: fc50, Memory Limit: fc50
        0x0024: Prefetch Memory Base: e6c1, Prefetch Memory Limit: e6c1
        0x0028: Prefetch Memory Base Upper 32 Bits: 00000000
        0x002c: Prefetch Memory Limit Upper 32 Bits: 00000000
        0x0030: I/O Base Upper 16 Bits: 0000, I/O Limit Upper 16 Bits: 0000
        0x0038: Expansion ROM Base Address: 00000000
        0x003c: Interrupt Pin: 00, Line: ff, Bridge Control: 0004
        0x0040: Capability 0x0d: PCI-PCI
        0x0048: Capability 0x01: Power Management
                State: D0
        0x0050: Capability 0x10: PCI Express
                Link Speed: 5.0 / 5.0 GT/s, Link Width: x32 / x32
        0x0100: Enhanced Capability 0x00: Unknown
        0x008c: Capability 0x05: Message Signalled Interrupts (MSI)
                Enabled: no
        0x0000: 07a015ad 00100007 06040001 00810008
        0x0010: 00000000 00000000 00070700 000000f0
        0x0020: fc50fc50 e6c1e6c1 00000000 00000000
        0x0030: 00000000 00000040 00000000 000400ff
        0x0040: 0000480d 07a015ad c8035001 00000000
        0x0050: 01428c10 00000000 00000000 00100602
        0x0060: 02020000 05247843 00000400 00000000
        0x0070: 00000000 00000000 00000000 00000000
        0x0080: 00000000 00000000 00000000 01800005
        0x0090: 00000000 00000000 00000000 00000000
        0x00a0: 00000000 00000000 00000000 00000000
        0x00b0: 00000000 00000000 00000000 00000000
        0x00c0: 00000000 00000000 00000000 00000000
        0x00d0: 00000000 00000000 00000000 00000000
        0x00e0: 00000000 00000000 00000000 00000000
        0x00f0: 00000000 00000000 00000000 00000000
 0:21:5: VMware PCIE
        0x0000: Vendor ID: 15ad, Product ID: 07a0
        0x0004: Command: 0007, Status: 0010
        0x0008: Class: 06 Bridge, Subclass: 04 PCI,

Reply via email to