Hi all,
More debugging later, it turns out that I can now pretty reliably
panic the GENERIC.MP kernel with a WireGuard tunnel that has an MTU of
1500 bytes, sending over the iwx(4) in my machine.
Christian Ehrhard (over at Genua) provided a diff that printf's when
there's a read-only mbuf passed to m_pullup:
Index: uipc_mbuf.c
===================================================================
RCS file: /home/OpenBSD/cvs/src/sys/kern/uipc_mbuf.c,v
retrieving revision 1.279
diff -u -p -r1.279 uipc_mbuf.c
--- uipc_mbuf.c 6 Mar 2021 09:20:49 -0000 1.279
+++ uipc_mbuf.c 11 Jan 2022 20:51:45 -0000
@@ -937,6 +937,10 @@ m_pullup(struct mbuf *m0, int len)
if (m == NULL)
goto freem0;
+ if (M_READONLY(m))
+ printf("BUG: Calling %s() on read-only mbuf cluster\n",
+ __func__);
+
head = M_DATABUF(m0);
if (m0->m_len == 0) {
m0->m_data = head;
This gets triggered A LOT when doing transfers over the wg(4)
interface. The panic doesn't happen every time this condition is met
though, but seems easier to trigger with multiple parallel transfers.
Lowering the MTU of wg0 to 1400, the printf() is no longer called, and
the kernel no longer panics.
I changed Christian's diff to enter ddb (by calling assert(FALSE))
after the printf. The resulting trace showed:
panic() at panic+0xbf
__assert() at __assert+0x25
m_pullup() at m_pullup+0x304
wg_input() at wg_input+0x17a
udp_sbappend() at udp_sbappend+0x78
...
Does this mean there's a problem with the call to m_pullup in wg_input
(if_wg.c:2031)?
Again, many thanks to stsp@ and Christian for their patience, diffs,
help and suggestions.
Paul
On Mon, Jan 10, 2022 at 10:05:14AM +0100, Paul de Weerd wrote:
| Hi all,
|
| After many kernel rebuilds, data transfers, panics and a lot of
| back-and-forth with stsp@, and later also Christian Ehrhardt (many
| thanks for their patience to both of them!), we've found the
| following:
|
| The problem started after the commit by stsp@ that implements Rx
| aggregation offload in iwm and iwx:
|
|
http://cvsweb.openbsd.org/src/sys/dev/pci/if_iwx.c?rev=1.53&content-type=text/x-cvsweb-markup
|
| At the suggestion of Christian, I then ran with a diff that changes
| the m_copym in if_iwx.c:8651 to m_dup_pkt (which needed some more
| changes from Christian). This "fixed" the issue (worked around it): I
| could no longer panic the machine.
|
| Stefan then suggested disabling some other bits, as I have a vmm(4) VM
| on this laptop for which the host OS routes traffic and a wg(4) tunnel
| for IPv6 connectivity (both for the host OS and the VM). Turns out
| that disabling the wg(4) tunnel prevents the system from panic'ing.
| It's still not easy to reproduce this issue, it sometimes takes
| several days (and many GBs of data transferred) before it triggers.
|
| So it seems there's some kind of mbuf corruption going on. Quoting
| from one of Stefan's e-mails:
|
| > Not necessarily, since other NICs probably won't use multiple mbufs
| > to get a per-frame split-up view of a large DMA buffer that contains
| > multiple frames, like iwm/iwx do when firmware puts more than one
| > frame into this buffer.
| >
| > I believe any of the mbufs which we layer on top of this large buffer
| > with m_split() might have been used by some other component of the
| > system before iwx grabs such an mbuf.
| >
| > So I suspect there will either be a buffer overrun of some m->m_data
| > pointer which ends up writing into an adjacent mbuf cluster which happens
| > to be in use by iwx, or there will be a use-after-free write via an
| > m->m_data pointer which was previously used by some other network
| > stack component and now points to one of the frames in the DMA buffer.
|
| I'm going to do some more experimenting with the wg setup to see if I
| can find more clues, but if anyone has any suggestions on what to try
| next, please share!
|
| Thanks,
|
| Paul
|
| On Mon, Nov 08, 2021 at 01:57:53PM +0100, Paul de Weerd wrote:
| | Hi all,
| |
| | After upgrading my laptop to a newer snapshot this weekend, I started
| | getting panics. I was running OpenBSD 7.0-current (GENERIC.MP) #60:
| | Sun Oct 31 13:27:05 MDT 2021 before the upgrade. Hand-typed from a
| | picture I took:
| |
| | panic: kernel diagnostic assertion "ieee80211_has_seq(hw)" failed: file
"/usr/src/sys/net80211/ieee80211_input.c", line 145
| | Stopped at db_enter+0x10: popq %rbp
| | TID PID UID PRFLAGS PFLAGS CPU COMMAND
| | 503471 51765 107 0x100010 0x4000000 3 vmd
| | 333711 51765 107 0x100010 0x4000000 1 vmd
| | 148566 72734 0 0x14000 0x200 2 drmwq
| | db_enter() at db_enter+0x10
| | panic(ffffffff81e52e8a) at panic+0xbf
| | __assert(ffffffff81ec2db8,ffffffff81ef7c3b,91,ffffffff81ecda4c) at
__assert+0x25
| | ieee80211_get_hdrlen(fffffd805ce2967a) at ieee80211_get_hdrlen+0x8f
| | iwx_ccmp_decap(...) at iwx_ccmp_decap+0x40
| | iwx_rx_frame(...) at iwx_rx_frame+0xe1
| | iwx_release_frames(...) at iwx_release_frames+0x17f
| | iwx_rx_reorder(...) at iwx_rx_reorder+0x595
| | iwx_rx_mpdu_mq(...) at iwx_rx_mpdu_mq+0x2e0
| | iwx_rx_pkt(...) at iwx_rx_pkt+0x650
| | iwx_notif_intr(...) at iwx_notif_intr+0x9c
| | iwx_intr_msix(...) at iwx_intr_msix+0xb4
| | intr_handler(...) at intr_handler+0x6e
| | Xintr_ioapic_edge31_untramp() at Xintr_ioapic_edge31_untramp+0x18f
| | end trace frame: 0xffff80001d98f4e0, count: 0
| |
| | Photo available at http://www.weirdnet.nl/ff/20211106_iwx_panic.jpg
| |
| | I was able to reproduce this panic by upgrading the snapshot running
| | inside the only VM on that machine, the panic happens while
| | downloading sets. I also tried to download the sets on the native
| | machine, but haven't been able to reproduce the crash so far. This is
| | on an "Intel Wi-Fi 6 AX200" iwx(4) device (see full dmesg below).
| |
| | Paul
| |
| | OpenBSD 7.0-current (GENERIC.MP) #72: Fri Nov 5 10:08:43 MDT 2021
| | [email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
| | real mem = 16877355008 (16095MB)
| | avail mem = 16349810688 (15592MB)
| | random: good seed from bootblocks
| | mpath0 at root
| | scsibus0 at mpath0: 256 targets
| | mainbus0 at root
| | bios0 at mainbus0: SMBIOS rev. 3.2 @ 0x5fcfe000 (95 entries)
| | bios0: vendor Dell Inc. version "1.0.9" date 07/20/2021
| | bios0: Dell Inc. XPS 13 9305
| | acpi0 at bios0: ACPI 6.1
| | acpi0: sleep states S0 S4 S5
| | acpi0: tables DSDT FACP SSDT SSDT HPET APIC MCFG SSDT NHLT SSDT SSDT SSDT
SSDT LPIT WSMT SSDT SSDT DBGP DBG2 SLIC BOOT SSDT TPM2 MSDM DMAR SSDT SSDT PTDT
BGRT FPDT
| | acpi0: wakeup devices PEG0(S4) PEGP(S4) PEGP(S4) PEGP(S4) XHCI(S0) XDCI(S4)
HDAS(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
PXSX(S4) RP05(S4) [...]
| | acpitimer0 at acpi0: 3579545 Hz, 24 bits
| | acpihpet0 at acpi0: 19200000 Hz
| | acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
| | cpu0 at mainbus0: apid 0 (boot processor)
| | cpu0: 11th Gen Intel(R) Core(TM) i7-1165G7 @ 2.80GHz, 4689.19 MHz, 06-8c-01
| | cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,AVX512F,AVX512DQ,RDSEED,ADX,SMAP,AVX512IFMA,CLFLUSHOPT,CLWB,PT,AVX512CD,SHA,AVX512BW,AVX512VL,AVX512VBMI,UMIP,PKU,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
| | cpu0: 256KB 64b/line disabled L2 cache
| | cpu0: smt 0, core 0, package 0
| | mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
| | cpu0: apic clock running at 38MHz
| | cpu0: mwait min=64, max=64, C-substates=0.2.0.1.2.1.1.1, IBE
| | cpu1 at mainbus0: apid 2 (application processor)
| | cpu1: 11th Gen Intel(R) Core(TM) i7-1165G7 @ 2.80GHz, 4689.21 MHz, 06-8c-01
| | cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,AVX512F,AVX512DQ,RDSEED,ADX,SMAP,AVX512IFMA,CLFLUSHOPT,CLWB,PT,AVX512CD,SHA,AVX512BW,AVX512VL,AVX512VBMI,UMIP,PKU,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
| | cpu1: 256KB 64b/line disabled L2 cache
| | cpu1: smt 0, core 1, package 0
| | cpu2 at mainbus0: apid 4 (application processor)
| | cpu2: 11th Gen Intel(R) Core(TM) i7-1165G7 @ 2.80GHz, 4090.58 MHz, 06-8c-01
| | cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,AVX512F,AVX512DQ,RDSEED,ADX,SMAP,AVX512IFMA,CLFLUSHOPT,CLWB,PT,AVX512CD,SHA,AVX512BW,AVX512VL,AVX512VBMI,UMIP,PKU,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
| | cpu2: 256KB 64b/line disabled L2 cache
| | cpu2: smt 0, core 2, package 0
| | cpu3 at mainbus0: apid 6 (application processor)
| | cpu3: 11th Gen Intel(R) Core(TM) i7-1165G7 @ 2.80GHz, 4090.59 MHz, 06-8c-01
| | cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,AVX512F,AVX512DQ,RDSEED,ADX,SMAP,AVX512IFMA,CLFLUSHOPT,CLWB,PT,AVX512CD,SHA,AVX512BW,AVX512VL,AVX512VBMI,UMIP,PKU,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
| | cpu3: 256KB 64b/line disabled L2 cache
| | cpu3: smt 0, core 3, package 0
| | ioapic0 at mainbus0: apid 2 pa 0xfec00000, version 20, 120 pins
| | acpimcfg0 at acpi0
| | acpimcfg0: addr 0xc0000000, bus 0-255
| | acpiprt0 at acpi0: bus 0 (PC00)
| | acpiprt1 at acpi0: bus 1 (PEG0)
| | acpiprt2 at acpi0: bus 164 (RP01)
| | acpiprt3 at acpi0: bus -1 (RP02)
| | acpiprt4 at acpi0: bus -1 (RP03)
| | acpiprt5 at acpi0: bus -1 (RP04)
| | acpiprt6 at acpi0: bus -1 (RP05)
| | acpiprt7 at acpi0: bus -1 (RP06)
| | acpiprt8 at acpi0: bus -1 (RP07)
| | acpiprt9 at acpi0: bus -1 (RP08)
| | acpiprt10 at acpi0: bus -1 (RP09)
| | acpiprt11 at acpi0: bus -1 (RP10)
| | acpiprt12 at acpi0: bus -1 (RP11)
| | acpiprt13 at acpi0: bus 165 (RP12)
| | acpiprt14 at acpi0: bus -1 (RP13)
| | acpiprt15 at acpi0: bus -1 (RP14)
| | acpiprt16 at acpi0: bus -1 (RP15)
| | acpiprt17 at acpi0: bus -1 (RP16)
| | acpiprt18 at acpi0: bus -1 (RP17)
| | acpiprt19 at acpi0: bus -1 (RP18)
| | acpiprt20 at acpi0: bus -1 (RP19)
| | acpiprt21 at acpi0: bus -1 (RP20)
| | acpiprt22 at acpi0: bus -1 (RP21)
| | acpiprt23 at acpi0: bus -1 (RP22)
| | acpiprt24 at acpi0: bus -1 (RP23)
| | acpiprt25 at acpi0: bus -1 (RP24)
| | acpiprt26 at acpi0: bus 2 (TRP0)
| | acpiprt27 at acpi0: bus 83 (TRP1)
| | acpiec0 at acpi0
| | ### AML PARSE ERROR (0xfffe65a6): Undefined name: VSP1
| | error evaluating: \\_SB_.PC00.LPCB.ECDV.TSKN._STA
| | "INT3472" at acpi0 not configured
| | acpipci0 at acpi0 PC00: 0x00000000 0x00000011 0x00000001
| | acpicmos0 at acpi0
| | "INT3403" at acpi0 not configured
| | "INT3403" at acpi0 not configured
| | "INT3403" at acpi0 not configured
| | "INT3403" at acpi0 not configured
| | "INT3403" at acpi0 not configured
| | ### AML PARSE ERROR (0xfffe65a6): Undefined name: VSP1
| | error evaluating: \\_SB_.PC00.LPCB.ECDV.TSKN._STA
| | "INT3403" at acpi0 not configured
| | "ELAN2930" at acpi0 not configured
| | "DLL0945" at acpi0 not configured
| | "SONY362A" at acpi0 not configured
| | "SONY362A" at acpi0 not configured
| | "ACPI000E" at acpi0 not configured
| | pchgpio0 at acpi0 GPI0 addr 0xfd6e0000/0x10000 0xfd6d0000/0x10000
0xfd6a0000/0x10000 0xfd690000/0x10000 irq 14, 360 pins
| | "PNP0C14" at acpi0 not configured
| | "PNP0C14" at acpi0 not configured
| | "INT33A1" at acpi0 not configured
| | "PNP0C14" at acpi0 not configured
| | "PNP0C14" at acpi0 not configured
| | "PNP0C14" at acpi0 not configured
| | "PNP0C14" at acpi0 not configured
| | "PNP0C14" at acpi0 not configured
| | "PNP0C14" at acpi0 not configured
| | acpibtn0 at acpi0: LID0
| | acpibtn1 at acpi0: PBTN
| | acpibtn2 at acpi0: SBTN
| | acpiac0 at acpi0: AC unit online
| | acpibat0 at acpi0: BAT0 model "DELL G8VCF6C" serial 563 type LiP oem "SMP"
| | "INTC1051" at acpi0 not configured
| | "INTC1040" at acpi0 not configured
| | "USBC000" at acpi0 not configured
| | tpm0 at acpi0 TPM_ 2.0 (TIS) addr 0xfed40000/0x5000, device 0x0000104a rev
0x4e
| | acpipwrres0 at acpi0: DBTP, resource for HS01
| | acpipwrres1 at acpi0: WRST
| | acpipwrres2 at acpi0: DRST
| | acpipwrres3 at acpi0: V0PR
| | acpipwrres4 at acpi0: V1PR
| | acpipwrres5 at acpi0: V2PR
| | acpipwrres6 at acpi0: WRST
| | acpipwrres7 at acpi0: TBT0, resource for TDM0, TRP0, TRP1
| | acpipwrres8 at acpi0: TBT1, resource for TDM1, TRP2, TRP3
| | acpipwrres9 at acpi0: D3C_, resource for TXHC, TDM0, TDM1, TRP0, TRP1,
TRP2, TRP3
| | acpicpu0 at acpi0: C3(200@1048 mwait.1@0x60), C2(200@253 mwait.1@0x31),
C1(1000@1 mwait.1), PSS
| | acpicpu1 at acpi0: C3(200@1048 mwait.1@0x60), C2(200@253 mwait.1@0x31),
C1(1000@1 mwait.1), PSS
| | acpicpu2 at acpi0: C3(200@1048 mwait.1@0x60), C2(200@253 mwait.1@0x31),
C1(1000@1 mwait.1), PSS
| | acpicpu3 at acpi0: C3(200@1048 mwait.1@0x60), C2(200@253 mwait.1@0x31),
C1(1000@1 mwait.1), PSS
| | acpipwrres10 at acpi0: PIN_
| | acpivideo0 at acpi0: GFX0
| | acpivout0 at acpivideo0: LCD_
| | cpu0: Enhanced SpeedStep 4689 MHz: speeds: 2701, 2700, 2600, 2500, 2300,
2100, 1900, 1700, 1600, 1400, 1200, 1100, 900, 700, 600, 400 MHz
| | pci0 at mainbus0 bus 0
| | 0:31:5: mem address conflict 0xfe010000/0x1000
| | pchb0 at pci0 dev 0 function 0 "Intel Core 11G Host" rev 0x01
| | inteldrm0 at pci0 dev 2 function 0 "Intel Xe Graphics" rev 0x01
| | drm0 at inteldrm0
| | inteldrm0: msi, TIGERLAKE, gen 12
| | "Intel Core 11G DTT" rev 0x01 at pci0 dev 4 function 0 not configured
| | ppb0 at pci0 dev 6 function 0 "Intel Core 11G PCIE" rev 0x01: msi
| | pci1 at ppb0 bus 1
| | nvme0 at pci1 dev 0 function 0 vendor "SK hynix", unknown product 0x174a
rev 0x00: msix, NVMe 1.3
| | nvme0: PC711 NVMe SK hynix 512GB, firmware 41001131, serial
CDA7N524910607D6E
| | scsibus1 at nvme0: 2 targets, initiator 0
| | sd0 at scsibus1 targ 1 lun 0: <NVMe, PC711 NVMe SK hy, 4100>
| | sd0: 488386MB, 512 bytes/sector, 1000215216 sectors
| | ppb1 at pci0 dev 7 function 0 "Intel Core 11G PCIE" rev 0x01: msi
| | pci2 at ppb1 bus 2
| | ppb2 at pci0 dev 7 function 1 "Intel Core 11G PCIE" rev 0x01: msi
| | pci3 at ppb2 bus 83
| | "Intel Core 11G GNA" rev 0x01 at pci0 dev 8 function 0 not configured
| | "Intel Core 11G SRAM" rev 0x01 at pci0 dev 10 function 0 not configured
| | xhci0 at pci0 dev 13 function 0 "Intel Core 11G xHCI" rev 0x01: msi, xHCI
1.20
| | usb0 at xhci0: USB revision 3.0
| | uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev
3.00/1.00 addr 1
| | "Intel Core 11G TBT" rev 0x01 at pci0 dev 13 function 2 not configured
| | xhci1 at pci0 dev 20 function 0 "Intel 500 Series xHCI" rev 0x20: msi, xHCI
1.20
| | usb1 at xhci1: USB revision 3.0
| | uhub1 at usb1 configuration 1 interface 0 "Intel xHCI root hub" rev
3.00/1.00 addr 1
| | "Intel 500 Series Shared SRAM" rev 0x20 at pci0 dev 20 function 2 not
configured
| | dwiic0 at pci0 dev 21 function 0 "Intel 500 Series I2C" rev 0x20: apic 2
int 27
| | iic0 at dwiic0
| | ihidev0 at iic0 addr 0x10 gpio 321, vendor 0x4f3 product 0x2930, ELAN2930
| | ihidev0: 14 report ids
| | ims0 at ihidev0 reportid 1: 1 button, tip
| | wsmouse0 at ims0 mux 0
| | hid at ihidev0 reportid 2 not configured
| | hid at ihidev0 reportid 3 not configured
| | hid at ihidev0 reportid 4 not configured
| | hid at ihidev0 reportid 6 not configured
| | hid at ihidev0 reportid 10 not configured
| | hid at ihidev0 reportid 14 not configured
| | dwiic1 at pci0 dev 21 function 1 "Intel 500 Series I2C" rev 0x20: apic 2
int 40
| | iic1 at dwiic1
| | ihidev1 at iic1 addr 0x2c gpio 327, vendor 0x6cb product 0x76b1, DLL0945
| | ihidev1: 14 report ids
| | imt0 at ihidev1: clickpad, 5 contacts
| | wsmouse1 at imt0 mux 0
| | ims1 at ihidev1 reportid 2: 2 buttons
| | wsmouse2 at ims1 mux 0
| | hid at ihidev1 reportid 6 not configured
| | hid at ihidev1 reportid 7 not configured
| | hid at ihidev1 reportid 9 not configured
| | hid at ihidev1 reportid 10 not configured
| | hid at ihidev1 reportid 11 not configured
| | hid at ihidev1 reportid 12 not configured
| | hid at ihidev1 reportid 13 not configured
| | hid at ihidev1 reportid 14 not configured
| | "Intel 500 Series HECI" rev 0x20 at pci0 dev 22 function 0 not configured
| | dwiic2 at pci0 dev 25 function 0 "Intel 500 Series I2C" rev 0x20: apic 2
int 31
| | iic2 at dwiic2
| | dwiic3 at pci0 dev 25 function 1 "Intel 500 Series I2C" rev 0x20: apic 2
int 32
| | iic3 at dwiic3
| | ppb3 at pci0 dev 28 function 0 "Intel 500 Series PCIE" rev 0x20: msi
| | pci4 at ppb3 bus 164
| | rtsx0 at pci4 dev 0 function 0 "Realtek RTS525A Card Reader" rev 0x01: msi
| | sdmmc0 at rtsx0: 4-bit, dma
| | ppb4 at pci0 dev 29 function 0 "Intel 500 Series PCIE" rev 0x20: msi
| | pci5 at ppb4 bus 165
| | iwx0 at pci5 dev 0 function 0 "Intel Wi-Fi 6 AX200" rev 0x1a, msix
| | pcib0 at pci0 dev 31 function 0 "Intel 500 Series eSPI" rev 0x20
| | azalia0 at pci0 dev 31 function 3 "Intel 500 Series HD Audio" rev 0x20: msi
| | azalia0: codecs: Realtek ALC299, Intel/0x2812, using Realtek ALC299
| | audio0 at azalia0
| | ichiic0 at pci0 dev 31 function 4 "Intel 500 Series SMBus" rev 0x20: apic 2
int 16
| | iic4 at ichiic0
| | "Intel 500 Series SPI" rev 0x20 at pci0 dev 31 function 5 not configured
| | isa0 at pcib0
| | isadma0 at isa0
| | pckbc0 at isa0 port 0x60/5 irq 1 irq 12
| | pckbd0 at pckbc0 (kbd slot)
| | wskbd0 at pckbd0: console keyboard
| | pms0 at pckbc0 (aux slot)
| | wsmouse3 at pms0 mux 0
| | pcppi0 at isa0 port 0x61
| | spkr0 at pcppi0
| | vmm0 at mainbus0: VMX/EPT
| | efifb at mainbus0 not configured
| | dt: 445 probes
| | uvideo0 at uhub1 port 3 configuration 1 interface 0
"CN09357G8LG0017QA9T6A01 Integrated_Webcam_HD" rev 2.01/80.08 addr 2
| | video0 at uvideo0
| | umodem0 at uhub1 port 9 configuration 1 interface 0 "HTMicroelectronics
Goodix Fingerprint Device" rev 2.00/1.00 addr 3
| | umodem0: data interface 1, has no CM over data, has no break
| | umodem0: status change notification available
| | ucom0 at umodem0
| | vscsi0 at root
| | scsibus2 at vscsi0: 256 targets
| | softraid0 at root
| | scsibus3 at softraid0: 256 targets
| | softraid0: sd1 was not shutdown properly
| | sd1 at scsibus3 targ 1 lun 0: <OPENBSD, SR CRYPTO, 006>
| | sd1: 471045MB, 512 bytes/sector, 964701698 sectors
| | root on sd1a (cbe0d0458386a175.a) swap on sd1b dump on sd1b
| | WARNING: / was not properly unmounted
| | inteldrm0: 3840x2160, 32bpp
| | wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation), using wskbd0
| | wsdisplay0: screen 1-5 added (std, vt100 emulation)
| | iwx0: hw rev 0x340, fw ver 63.c04f3485.0, address __:__:__:__:__:__
| |
| | --
| | >++++++++[<++++++++++>-]<+++++++.>+++[<------>-]<.>+++[<+
| | +++++++++++>-]<.>++[<------------>-]<+.--------------.[-]
| | http://www.weirdnet.nl/
| |
|
| --
| >++++++++[<++++++++++>-]<+++++++.>+++[<------>-]<.>+++[<+
| +++++++++++>-]<.>++[<------------>-]<+.--------------.[-]
| http://www.weirdnet.nl/
|
--
>++++++++[<++++++++++>-]<+++++++.>+++[<------>-]<.>+++[<+
+++++++++++>-]<.>++[<------------>-]<+.--------------.[-]
http://www.weirdnet.nl/
