18a272653SPeter Holm#!/bin/sh 28a272653SPeter Holm 38a272653SPeter Holm# 4*4d846d26SWarner Losh# SPDX-License-Identifier: BSD-2-Clause 58a272653SPeter Holm# 68a272653SPeter Holm# Copyright (c) 2020 Peter Holm <pho@FreeBSD.org> 78a272653SPeter Holm# 88a272653SPeter Holm# Redistribution and use in source and binary forms, with or without 98a272653SPeter Holm# modification, are permitted provided that the following conditions 108a272653SPeter Holm# are met: 118a272653SPeter Holm# 1. Redistributions of source code must retain the above copyright 128a272653SPeter Holm# notice, this list of conditions and the following disclaimer. 138a272653SPeter Holm# 2. Redistributions in binary form must reproduce the above copyright 148a272653SPeter Holm# notice, this list of conditions and the following disclaimer in the 158a272653SPeter Holm# documentation and/or other materials provided with the distribution. 168a272653SPeter Holm# 178a272653SPeter Holm# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 188a272653SPeter Holm# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 198a272653SPeter Holm# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 208a272653SPeter Holm# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 218a272653SPeter Holm# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 228a272653SPeter Holm# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 238a272653SPeter Holm# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 248a272653SPeter Holm# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 258a272653SPeter Holm# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 268a272653SPeter Holm# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 278a272653SPeter Holm# SUCH DAMAGE. 288a272653SPeter Holm# 298a272653SPeter Holm 308a272653SPeter Holm# Attempt to reproduce 318a272653SPeter Holm# "panic: pmap_release: pmap 0xfffffe012fb61b08 resident count 1 != 0" 328a272653SPeter Holm# No problems seen. 338a272653SPeter Holm 348a272653SPeter Holm# Test scenario suggestion by kib@ 358a272653SPeter Holm 368a272653SPeter Holm. ../default.cfg 378a272653SPeter Holm[ `id -u` -ne 0 ] && echo "Must be root!" && exit 1 388a272653SPeter Holm[ `uname -p` != "amd64" ] && exit 0 398a272653SPeter Holm 408a272653SPeter Holmdir=/tmp 418a272653SPeter Holmodir=`pwd` 428a272653SPeter Holmcd $dir 438a272653SPeter Holmsed '1,/^EOF/d' < $odir/$0 > $dir/mmap39.c 448a272653SPeter Holmmycc -o mmap39 -Wall -Wextra -O0 -g mmap39.c -static || exit 1 458a272653SPeter Holmrm -f mmap39.c 468a272653SPeter Holmcd $odir 478a272653SPeter Holm 488a272653SPeter Holmset -e 498a272653SPeter Holmmount | grep "on $mntpoint " | grep -q /dev/md && umount -f $mntpoint 508a272653SPeter Holm[ -c /dev/md$mdstart ] && mdconfig -d -u $mdstart 518a272653SPeter Holmmdconfig -a -t swap -s 2g -u $mdstart 528a272653SPeter Holmnewfs $newfs_flags md$mdstart > /dev/null 538a272653SPeter Holmmount /dev/md$mdstart $mntpoint 548a272653SPeter Holmset +e 558a272653SPeter Holm 568a272653SPeter Holmfor i in `jot 128`; do 57a724ccf3SPeter Holm proccontrol -m aslr -s disable $dir/mmap39 & 588a272653SPeter Holm pids="$pids $!" 598a272653SPeter Holmdone 608a272653SPeter Holms=0 618a272653SPeter Holmfor pid in $pids; do 628a272653SPeter Holm wait $pid 638a272653SPeter Holm r=$? 648a272653SPeter Holm [ $s -ne 0 ] && s=$r 658a272653SPeter Holmdone 668a272653SPeter Holm 678a272653SPeter Holm[ -f mmap39.core -a $s -eq 0 ] && 688a272653SPeter Holm { ls -l mmap39.core; mv mmap39.core $dir; s=1; } 698a272653SPeter Holmcd $odir 708a272653SPeter Holm 718a272653SPeter Holmfor i in `jot 6`; do 728a272653SPeter Holm mount | grep -q "on $mntpoint " || break 738a272653SPeter Holm umount $mntpoint && break || sleep 10 748a272653SPeter Holm [ $i -eq 6 ] && 758a272653SPeter Holm { echo FATAL; fstat -mf $mntpoint; exit 1; } 768a272653SPeter Holmdone 778a272653SPeter Holmmdconfig -d -u $mdstart 788a272653SPeter Holmrm -rf $dir/mmap39 798a272653SPeter Holmexit $s 808a272653SPeter Holm 818a272653SPeter HolmEOF 828a272653SPeter Holm#include <sys/param.h> 838a272653SPeter Holm#include <sys/mman.h> 848a272653SPeter Holm#include <sys/wait.h> 858a272653SPeter Holm 868a272653SPeter Holm#include <err.h> 878a272653SPeter Holm#include <stdio.h> 888a272653SPeter Holm#include <time.h> 898a272653SPeter Holm#include <unistd.h> 908a272653SPeter Holm 918a272653SPeter Holmvoid 928a272653SPeter Holmtest(void) 938a272653SPeter Holm{ 948a272653SPeter Holm size_t i, len; 958a272653SPeter Holm void *p; 968a272653SPeter Holm 978a272653SPeter Holm p = (void *)0x8000000000; /* 512G */ 988a272653SPeter Holm len = 0x200000; /* 2M */ 998a272653SPeter Holm if ((p = mmap(p, len, PROT_READ | PROT_WRITE, MAP_ANON, -1, 0)) == 1008a272653SPeter Holm MAP_FAILED) 1018a272653SPeter Holm err(1, "mmap"); 1028a272653SPeter Holm 1038a272653SPeter Holm if (p != (void *)0x8000000000) 1048a272653SPeter Holm errx(1, "mmap address fail"); 1058a272653SPeter Holm 1068a272653SPeter Holm for (i = 0; i < len; i += PAGE_SIZE) 1078a272653SPeter Holm *(char *)(p + i) = 1; 1088a272653SPeter Holm 1098a272653SPeter Holm if (munmap(p, len) == -1) 1108a272653SPeter Holm err(1, "munmap()"); 1118a272653SPeter Holm 1128a272653SPeter Holm _exit(0); 1138a272653SPeter Holm} 1148a272653SPeter Holm 1158a272653SPeter Holmint 1168a272653SPeter Holmmain(void) 1178a272653SPeter Holm{ 1188a272653SPeter Holm time_t start; 1198a272653SPeter Holm pid_t pid; 1208a272653SPeter Holm 1218a272653SPeter Holm sleep(5); 1228a272653SPeter Holm start = time(NULL); 1238a272653SPeter Holm while (time(NULL) - start < 120) { 1248a272653SPeter Holm if ((pid = fork()) == 0) 1258a272653SPeter Holm test(); 1268a272653SPeter Holm if (waitpid(pid, NULL, 0) != pid) 1278a272653SPeter Holm err(1, "waitpid"); 1288a272653SPeter Holm } 1298a272653SPeter Holm 1308a272653SPeter Holm return (0); 1318a272653SPeter Holm} 132