panic: pmap_demote_pde: page table page for a wired mapping is missing

Status: fixed on 2019/03/22 00:15
Reported-by: syzbot+292d3b0416c27c131505@syzkaller.appspotmail.com
Fix commit: 64087fd7f372 Disallow preemptive creation of wired superpage mappings.
First crash: 2693d, last: 2689d

Sample crash report:
panic: pmap_demote_pde: page table page for a wired mapping is missing
cpuid = 0
time = 1552804140
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe001fa276b0
vpanic() at vpanic+0x1e0/frame 0xfffffe001fa27710
panic() at panic+0x43/frame 0xfffffe001fa27770
pmap_demote_pde_locked() at pmap_demote_pde_locked+0x1288/frame 0xfffffe001fa27840
pmap_remove() at pmap_remove+0x5c8/frame 0xfffffe001fa278d0
vm_map_protect() at vm_map_protect+0x666/frame 0xfffffe001fa27940
sys_mprotect() at sys_mprotect+0xcc/frame 0xfffffe001fa27980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe001fa27ab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe001fa27ab0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x4574fa, rsp = 0x7fffdffdcf88, rbp = 0x6b5a00 ---
KDB: enter: panic
[ thread pid 759 tid 100101 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (56):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/17 06:32 freebsd 310a121be6b8 bab43553 console log report syz C ci-freebsd-main
2019/03/17 05:38 freebsd 310a121be6b8 bab43553 console log report syz C ci-freebsd-main
2019/03/21 17:33 freebsd 6bc222605a21 f6094a8c console log report ci-freebsd-main
2019/03/21 10:01 freebsd f61d24052aac 427ea487 console log report ci-freebsd-main
2019/03/21 08:36 freebsd f61d24052aac 427ea487 console log report ci-freebsd-main
2019/03/21 07:21 freebsd f61d24052aac 427ea487 console log report ci-freebsd-main
2019/03/21 05:15 freebsd f61d24052aac 427ea487 console log report ci-freebsd-main
2019/03/20 23:19 freebsd 3d80c6291b89 142c38ee console log report ci-freebsd-main
2019/03/20 17:34 freebsd 3d80c6291b89 142c38ee console log report ci-freebsd-main
2019/03/20 16:04 freebsd 3d80c6291b89 142c38ee console log report ci-freebsd-main
2019/03/20 09:28 freebsd 90d8cba8606b 2458c1c6 console log report ci-freebsd-main
2019/03/20 07:52 freebsd 90d8cba8606b 2458c1c6 console log report ci-freebsd-main
2019/03/20 05:36 freebsd 90d8cba8606b 2458c1c6 console log report ci-freebsd-main
2019/03/20 02:56 freebsd 90d8cba8606b 2458c1c6 console log report ci-freebsd-main
2019/03/19 22:37 freebsd 5d2bb1696724 e4549234 console log report ci-freebsd-main
2019/03/19 14:27 freebsd 5d2bb1696724 e4549234 console log report ci-freebsd-main
2019/03/19 09:50 freebsd 8bfcb839fd2f 46264c32 console log report ci-freebsd-main
2019/03/19 03:16 freebsd 8bfcb839fd2f 46264c32 console log report ci-freebsd-main
2019/03/18 23:22 freebsd b24a98cb7ea8 4656beca console log report ci-freebsd-main
2019/03/18 20:17 freebsd b24a98cb7ea8 4656beca console log report ci-freebsd-main
2019/03/18 19:02 freebsd b24a98cb7ea8 4656beca console log report ci-freebsd-main
2019/03/18 17:02 freebsd b24a98cb7ea8 4656beca console log report ci-freebsd-main
2019/03/18 15:44 freebsd b24a98cb7ea8 4656beca console log report ci-freebsd-main
2019/03/18 12:22 freebsd b24a98cb7ea8 4656beca console log report ci-freebsd-main
2019/03/18 10:46 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 10:08 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 07:57 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 07:48 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 07:16 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 07:09 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 05:28 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 03:04 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 02:53 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 02:20 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 02:16 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 02:09 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 01:39 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 01:29 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 01:00 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/17 18:45 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 13:45 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 12:50 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 10:18 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 10:12 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 10:04 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 09:55 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 09:19 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 07:40 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 07:37 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 07:35 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 07:27 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 07:22 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 05:24 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.