syzbot


assert "dupe == NULL" failed in uvm_page.c (5)

Status: upstream: reported on 2025/11/08 13:44
Reported-by: syzbot+cb2555c3bd673da0f6f4@syzkaller.appspotmail.com
First crash: 138d, last: 1d16h
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "dupe == NULL" failed in uvm_page.c (2) -1 1 2071d 2071d 0/3 auto-closed as invalid on 2020/10/22 03:53
openbsd assert "dupe == NULL" failed in uvm_page.c (4) -1 209 570d 867d 0/3 auto-obsoleted due to no activity on 2024/10/21 16:21
openbsd assert "dupe == NULL" failed in uvm_page.c -1 4 2235d 2348d 0/3 auto-closed as invalid on 2020/05/10 22:18
openbsd assert "dupe == NULL" failed in uvm_page.c (3) -1 25 1192d 1561d 0/3 auto-obsoleted due to no activity on 2023/03/20 05:40

Sample crash report:
login: panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 144
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 357799  77160      0  0x10000002          0    1  syz-executor
*208129   8367      0         0x2          0    0  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834492d9) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8348a601,ffffffff8347ed5d,90,ffffffff834274c3) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_pagealloc_pg(fffffd8008747fd0,fffffd806c721758,1c1a5000,0) at uvm_pagealloc_pg+0x54b sys/uvm/uvm_page.c:707
uvm_pagealloc(fffffd806c721758,1c1a5000,0,3) at uvm_pagealloc+0x252 sys/uvm/uvm_page.c:913
pmap_get_ptp(fffffd806c721700,70696dc98000) at pmap_get_ptp+0x1d0 sys/arch/amd64/amd64/pmap.c:-1
pmap_enter(fffffd806c721700,70696dc98000,5e641000,3,21) at pmap_enter+0x38a sys/arch/amd64/amd64/pmap.c:-1
uvm_fault_upper(ffff800039fbded0,ffff800039fbdf08,ffff800039fbddd0) at uvm_fault_upper+0x338 sys/uvm/uvm_fault.c:1131
uvm_fault(fffffd806f5a83d8,70696dc98000,0,1) at uvm_fault+0x198 sys/uvm/uvm_fault.c:635
upageflttrap(ffff800039fbe070,70696dc98cf0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
usertrap(ffff800039fbe070) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x70696dc98d10, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 144
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834492d9) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8348a601,ffffffff8347ed5d,90,ffffffff834274c3) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_pagealloc_pg(fffffd8008747fd0,fffffd806c721758,1c1a5000,0) at uvm_pagealloc_pg+0x54b sys/uvm/uvm_page.c:707
uvm_pagealloc(fffffd806c721758,1c1a5000,0,3) at uvm_pagealloc+0x252 sys/uvm/uvm_page.c:913
pmap_get_ptp(fffffd806c721700,70696dc98000) at pmap_get_ptp+0x1d0 sys/arch/amd64/amd64/pmap.c:-1
pmap_enter(fffffd806c721700,70696dc98000,5e641000,3,21) at pmap_enter+0x38a sys/arch/amd64/amd64/pmap.c:-1
uvm_fault_upper(ffff800039fbded0,ffff800039fbdf08,ffff800039fbddd0) at uvm_fault_upper+0x338 sys/uvm/uvm_fault.c:1131
uvm_fault(fffffd806f5a83d8,70696dc98000,0,1) at uvm_fault+0x198 sys/uvm/uvm_fault.c:635
upageflttrap(ffff800039fbe070,70696dc98cf0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
usertrap(ffff800039fbe070) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x70696dc98d10, count: -12
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800039fbda00
rbx               0xffffffff838d6e07    cpu_info_full_primary+0x2e07
rdx                                0
rcx               0xffff80003c3ee558
rax               0xffffffff838d5ff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x55ad7e82400015ce
r11               0xb4e790dc03561db4
r12               0xffffffff838d6c08    cpu_info_full_primary+0x2c08
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff822cd475    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800039fbd9f0
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=208129 pid=8367 tcnt=1 stat=onproc
    flags process=2<EXEC> proc=0
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4134f8,0xffff8000fffe9cb8
    process=0xffff80003c4b0028 user=0xffff800039fb9000, vmspace=0xfffffd806f5a83d8
    estcpu=36, cpticks=28, pctcpu=0.8, user=2, sys=25, intr=1
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 78015  297057  84473      0  2           0                syz-executor
 78015   79271  84473      0  2   0x4000000                syz-executor
 20269  471547   8367      0  2           0                syz-executor
 20269  319439   8367      0  3   0x4000080  fsleep        syz-executor
 91888  214461  90640      0  3        0x80  nanoslp       syz-executor
 91888  271700  90640      0  3   0x4000080  fsleep        syz-executor
 91888  188734  90640      0  3   0x4000080  fsleep        syz-executor
 91888  144977  90640      0  3   0x4000080  fsleep        syz-executor
 42835  476724  97157      0  2           0                syz-executor
 42835  209749  97157      0  3   0x4000080  fsleep        syz-executor
 97157  337168  26327      0  2       0xc82                syz-executor
 64123  340620   5772  60929  3      0x3010  suspend       syz-executor
 64123  230946   5772  60929  3   0x4081010  biowait       syz-executor
 64123  292176   5772  60929  3   0x4081010  inode         syz-executor
 64123  158110   5772  60929  3   0x4081010  inode         syz-executor
 64123  282787   5772  60929  3   0x4081010  inode         syz-executor
 64123  474025   5772  60929  3   0x4081010  inode         syz-executor
 64123  425249   5772  60929  3   0x4081010  inode         syz-executor
 64123  240987   5772  60929  3   0x4081010  inode         syz-executor
 64123  220348   5772  60929  3   0x4081010  inode         syz-executor
 93317   91314      1      0  3    0x100083  ttyin         getty
 77160  357799  26327      0  7  0x10000002                syz-executor
 50738  240935      0      0  3     0x14200  acct          acct
 88678  489150      0      0  3     0x14280  nfsidl        nfsio
 78388  378632      0      0  3     0x14280  nfsidl        nfsio
 78876  135944      0      0  3     0x14280  nfsidl        nfsio
 10487  489729      0      0  3     0x14280  nfsidl        nfsio
 66831   18206      0      0  3     0x14280  nfsidl        nfsio
 34027  119237      0      0  3     0x14280  nfsidl        nfsio
 38756  248350      0      0  3     0x14280  nfsidl        nfsio
 17340  453785      0      0  3     0x14280  nfsidl        nfsio
 64450  487928      0      0  3     0x14280  nfsidl        nfsio
 41076  426416      0      0  3     0x14280  nfsidl        nfsio
 77983  520955      0      0  3     0x14280  nfsidl        nfsio
 84354  435858      0      0  3     0x14280  nfsidl        nfsio
 94278  364524      0      0  3     0x14280  nfsidl        nfsio
 28828  290493      0      0  3     0x14280  nfsidl        nfsio
 97890  513792      0      0  3     0x14280  nfsidl        nfsio
 37127   65210      0      0  3     0x14280  nfsidl        nfsio
 89622  226469      0      0  3     0x14280  nfsidl        nfsio
 96911   45004      0      0  3     0x14280  nfsidl        nfsio
 88942  272402      0      0  3     0x14280  nfsidl        nfsio
 69727  363871      0      0  3     0x14280  nfsidl        nfsio
* 8367  208129  26327      0  7         0x2                syz-executor
 90640  427168  26327      0  3        0x82  nanoslp       syz-executor
  5772  144122  26327      0  3        0x82  wait          syz-executor
 35589  500560   5585      0  3    0x100082  sbwait        arp
  5585  424079  48283      0  3    0x10008a  sigsusp       sh
 48283  301779  26327      0  3        0x82  wait          syz-executor
 57425  107788  26327      0  3        0x82  wait          syz-executor
 84473  233146  26327      0  2       0xc82                syz-executor
 26327   41210  22102      0  2         0x2                syz-executor
 22102   98651  43601      0  3    0x10008a  sigsusp       ksh
 43601   75801  10498      0  3        0x98  kqread        sshd-session
 10498  182601   3774      0  3        0x92  kqread        sshd-session
  3774  117245      1      0  3        0x88  kqread        sshd
 75181  105815  38431     74  3   0x1100092  bpf           pflogd
 38431  498415      1      0  3        0x80  sbwait        pflogd
 80728    5820  66917     73  3   0x1100090  kqread        syslogd
 66917  364154      1      0  3    0x100082  sbwait        syslogd
 69810  284451      1      0  3    0x100080  kqread        resolvd
 68186  394470  64716     77  3    0x100092  kqread        dhcpleased
 83505   65997  64716     77  3    0x100092  kqread        dhcpleased
 64716   73549      1      0  3        0x80  kqread        dhcpleased
 69689    9166      0      0  3     0x14200  bored         smr
 26412  524242      0      0  2     0x14200                zerothread
 63155   35478      0      0  3     0x14200  aiodoned      aiodoned
 10479  133939      0      0  3     0x14200  syncer        update
 77250   56087      0      0  3     0x14200  cleaner       cleaner
 32313  184387      0      0  3     0x14200  reaper        reaper
  4598  253979      0      0  3     0x14200  pgdaemon      pagedaemon
 87488   78512      0      0  3     0x14200  bored         viomb
 69661  456876      0      0  3  0x40014200  acpi0         acpi0
 33850  253569      0      0  3  0x40014200                idle1
 72113  182483      0      0  3     0x14200  bored         softnet1
 94670  182544      0      0  3     0x14200  bored         softnet0
 53065  454898      0      0  3     0x14200  bored         systqmp
 72662  497041      0      0  3     0x14200  bored         systq
 16148  269766      0      0  3     0x14200  tmoslp        softclockmp
 49633  331941      0      0  3  0x40014200  tmoslp        softclock
 65177  155169      0      0  3  0x40014200                idle0
     1  134137      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806c721710)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  pmap_enter+0x24b rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline]
#2  pmap_enter+0x24b pmap_map_ptes sys/arch/amd64/amd64/pmap.c:437 [inline]
#2  pmap_enter+0x24b sys/arch/amd64/amd64/pmap.c:2767
#3  uvm_fault_upper+0x338 sys/uvm/uvm_fault.c:1131
#4  uvm_fault+0x198 sys/uvm/uvm_fault.c:635
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
Process 64123 (syz-executor) thread 0xffff80003c496030 (230946)
exclusive rrwlock inode r = 0 (0xfffffd807389a368)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vn_write+0x18f sys/kern/vfs_vnops.c:405
#6  dofilewritev+0x2bd sys/kern/sys_generic.c:384
#7  sys_write+0xa2 sys/kern/sys_generic.c:300
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
#9  Xsyscall+0x128
Process 64123 (syz-executor) thread 0xffff80003c497a20 (292176)
exclusive rrwlock inode r = 0 (0xfffffd806c8637b0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1
#6  namei+0x7ca sys/kern/vfs_lookup.c:250
#7  dorenameat+0x91 sys/kern/vfs_syscalls.c:3020
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
#9  Xsyscall+0x128
Process 8367 (syz-executor) thread 0xffff80003c3ee558 (208129)
shared rwlock amaplk r = 0 (0xfffffd805fe82780)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  uvm_fault_check+0x8a9 sys/uvm/uvm_fault.c:834
#3  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#4  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#5  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#6  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffffd806f5a84d8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880
#3  uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693
#4  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806c721710)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  pmap_enter+0x24b rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline]
#2  pmap_enter+0x24b pmap_map_ptes sys/arch/amd64/amd64/pmap.c:437 [inline]
#2  pmap_enter+0x24b sys/arch/amd64/amd64/pmap.c:2767
#3  uvm_fault_upper+0x338 sys/uvm/uvm_fault.c:1131
#4  uvm_fault+0x198 sys/uvm/uvm_fault.c:635
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11074  12086K   13911K 166960K     14531        0
            pcb    17     16K      18K 166960K       460        0
         rtable   177      9K      10K 166960K       915        0
             pf    35     17K      82K 166960K       268        0
         ifaddr    98     22K      23K 166960K       258        0
        ifgroup    48      2K       2K 166960K       356        0
         sysctl     4      1K       9K 166960K        25        0
       counters    68     36K      38K 166960K       338        0
       ioctlops     0      0K       4K 166960K      1975        0
            iov     0      0K      16K 166960K        68        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1472     93K      94K 166960K      3422        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        24        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        78        0
        dirhash    12      2K       2K 166960K        45        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K     114K 166960K      1692        0
          sigio     0      0K       0K 166960K        47        0
           proc    76    131K     163K 166960K       873        0
        subproc    72      4K       4K 166960K       126        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       441        0
       in_multi    62      4K       6K 166960K       247        0
    ether_multi     1      0K       0K 166960K        15        0
            mrt     1      0K       0K 166960K        27        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   109    493K     493K 166960K       109        0
           exec     0      0K       1K 166960K       735        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   255    154K     191K 166960K     17586        0
       UVM aobj    64      9K       9K 166960K        73        0
     pinsyscall    44     88K     107K 166960K      3017        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       155        0
            NDP    13      0K       1K 166960K       132        0
           temp    84   9084K    9161K 166960K     84414        0
         kqueue    14     22K      30K 166960K       319        0
      SYN cache     2      8K      16K 166960K         3        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      255    0      251     4     2     2     3     0     8    1
rtentry    176      241    0      178     5     0     5     5     0     8    0
unpcb      144     1087    0     1068    10     8     2     6     0     8    1
syncache   336       11    0       11     4     3     1     1     0     8    1
tcpqe       32        3    0        3     2     2     0     1     0     8    0
tcpcb      736      485    0      478    13     6     7     7     0     8    6
arp        136       40    0       28     1     0     1     1     0     8    0
inpcb      328     1881    0     1871    25    15    10    12     0     8    8
nd6        152       42    0       30     1     0     1     1     0     8    0
pkpcb       40        7    0        7     4     3     1     1     0     8    1
kcovpl      48       14    0        6     1     0     1     1     0     8    0
mppekey    1024       3    0        3     2     2     0     1     0     8    0
ppxss      1192      87    0       87     4     3     1     2     0     8    1
pppxif     1576      23    0       23     5     4     1     2     0     8    1
pfstscr     40        3    0        2     1     0     1     1     0     8    0
pffrag     232       14    0        6     1     0     1     1     0   482    0
pffrnode    88       14    0        6     1     0     1     1     0     8    0
pffrent     40       24    0       16     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       2    0        2     1     1     0     1     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24      107    0       35     1     0     1     1     0     8    0
pfstkey    128      113    0       41     3     0     3     3     0     8    0
pfstate    448      109    0       38     9     0     9     9     0     8    0
pfrule     1360      24    0       19     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     1     0     1     0     8    0
art_heap8  4096       4    0        0     4     0     4     4     0     8    0
art_heap4  256      994    0      708    30     7    23    26     0     8    2
art_table   40      998    0      708     5     0     5     5     0     8    0
art_node    32      238    0      182     1     0     1     1     0     8    0
sysvmsgpl   40       54    0       47     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112       70    0       60     1     0     1     1     0     8    0
shmpl      112       67    0        8     2     0     2     2     0     8    0
dirhash    1024      41    0       24     3     0     3     3     0     8    0
dino2pl    256     5144    0     3677    93     0    93    93     0     8    0
ffsino     296     5144    0     3677   114     0   114   114     0     8    0
nchpl      144     7314    0     5599    64     0    64    64     0     8    0
rtmask      32        5    0        5     4     4     0     1     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   26533    0    26526     5     3     2     2     0     8    1
percpumem   16      184    0      135     1     0     1     1     0     8    0
vcpupl     3968       3    0        1     1     0     1     1     0     8    0
vmpool     848        3    0        1     1     0     1     1     0     8    0
kstatmem   264      212    0      186     5     2     3     3     0     8    0
scsiplug    72        4    0        4     3     2     1     1     0     8    1
scxspl     216    36532    0    36531    14    13     1     8     1     8    0
plimitpl   152      415    0      397     1     0     1     1     0     8    0
sigapl     424     2037    0     1967     8     0     8     8     0     8    0
knotepl    120      577    0        0    17     0    17    17     0     8    0
kqueuepl   224      561    0      551     5     4     1     3     0     8    0
pipepl     344      313    0      286     9     0     9     9     0     8    6
fdescpl    528     1979    0     1947     3     0     3     3     0     8    0
filepl     160    14502    0    14283    32    14    18    19     0     8    6
lockfpl    104      541    0      539     1     0     1     1     0     8    0
lockfspl    48      246    0      244     1     0     1     1     0     8    0
sessionpl  144       34    0       25     1     0     1     1     0     8    0
pgrppl      48       84    0       67     1     0     1     1     0     8    0
ucredpl    104     3063    0     3049     1     0     1     1     0     8    0
zombiepl   144     2164    0     2162     1     0     1     1     0     8    0
processpl  1232    2037    0     1967     6     0     6     6     0     8    0
procpl     664     4648    0     4564     8     0     8     8     0     8    0
sosppl     176       24    0       24     3     2     1     1     0     8    1
sockpl     752     3293    0     3260    47    35    12    18     0     8    8
mcl64k     65536      8    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     132    0        0    17     0    17    17     0     8    0
mcl2k      2048      41    0        0     5     0     5     5     0     8    0
mtagpl      96        9    0        0     1     0     1     1     0     8    0
mbufpl     256     1432    0        0    89     0    89    89     0     8    0
bufpl      280    13611    0     7481   439     0   439   439     0     8    0
anonpl      32    10317    0        0    84     0    84    84     0   246    0
amapchunkpl 152   59312    0    58795    58    31    27    41     0   158    6
amappl16   200     5629    0     5437    42    31    11    23     0     8    0
amappl15   192        3    0        3     1     1     0     1     0     8    0
amappl14   184      542    0      540     1     0     1     1     0     8    0
amappl13   176      145    0      132     1     0     1     1     0     8    0
amappl12   168     2255    0     2224     2     0     2     2     0     8    0
amappl11   160        7    0        7     2     2     0     1     0     8    0
amappl10   152       67    0       52     1     0     1     1     0     8    0
amappl9    144      260    0      259     2     1     1     1     0     8    0
amappl8    136      126    0      124     1     0     1     1     0     8    0
amappl7    128      167    0      153     1     0     1     1     0     8    0
amappl6    120      313    0      310     1     0     1     1     0     8    0
amappl5    112      110    0       99     1     0     1     1     0     8    0
amappl4    104      335    0      315     1     0     1     1     0     8    0
amappl3     96    11823    0    11704     4     0     4     4     0     8    0
amappl2     88      630    0      565     2     0     2     2     0     8    0
amappl1     80    17965    0    17335    21     6    15    17     0     8    0
amappl      88    16467    0    16289     5     0     5     5     0    92    0
uvmvnodes   80      160    0        0     4     0     4     4     0     8    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       2    0        2     2     2     0     1     0     8    0
dma2048    2048       1    0        1     1     0     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        8    0        8     3     3     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       20    0       19     1     0     1     1     0     8    0
aobjpl      72       72    0        9     2     0     2     2     0     8    0
uaddrrnd    24     1979    0     1947     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1979    0     1947     1     0     1     1     0     8    0
vmmpekpl   168    17135    0    17082     4     0     4     4     0     8    0
vmmpepl    168   131603    0   129452   114    17    97   107     0   357    0
vmsppl     488     1978    0     1947     5     0     5     5     0     8    0
rwobjpl     80    36234    0    34844    35     4    31    32     0     8    0
pdppl      4096    3971    0     3898   125    48    77    87     0     8    4
pvpl        32    18146    0        0   147     0   147   147     0   265    0
pmappl     256     1981    0     1948     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      415    0       76    10     0    10    10     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834492d9) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8348a601,ffffffff8347ed5d,90,ffffffff834274c3) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_pagealloc_pg(fffffd8008747fd0,fffffd806c721758,1c1a5000,0) at uvm_pagealloc_pg+0x54b sys/uvm/uvm_page.c:707
uvm_pagealloc(fffffd806c721758,1c1a5000,0,3) at uvm_pagealloc+0x252 sys/uvm/uvm_page.c:913
pmap_get_ptp(fffffd806c721700,70696dc98000) at pmap_get_ptp+0x1d0 sys/arch/amd64/amd64/pmap.c:-1
pmap_enter(fffffd806c721700,70696dc98000,5e641000,3,21) at pmap_enter+0x38a sys/arch/amd64/amd64/pmap.c:-1
uvm_fault_upper(ffff800039fbded0,ffff800039fbdf08,ffff800039fbddd0) at uvm_fault_upper+0x338 sys/uvm/uvm_fault.c:1131
uvm_fault(fffffd806f5a83d8,70696dc98000,0,1) at uvm_fault+0x198 sys/uvm/uvm_fault.c:635
upageflttrap(ffff800039fbe070,70696dc98cf0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
usertrap(ffff800039fbe070) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x70696dc98d10, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299bdff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839fe700) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff839fe700) at __mp_lock+0x192 sys/kern/kern_lock.c:173
syscall(ffff80003c429d90) at syscall+0xaf4 mi_syscall sys/sys/syscall_mi.h:175 [inline]
syscall(ffff80003c429d90) at syscall+0xaf4 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7d6ec4572d00, count: 9
ddb{1}> trace
x86_ipi_db(ffff8000299bdff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839fe700) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff839fe700) at __mp_lock+0x192 sys/kern/kern_lock.c:173
syscall(ffff80003c429d90) at syscall+0xaf4 mi_syscall sys/sys/syscall_mi.h:175 [inline]
syscall(ffff80003c429d90) at syscall+0xaf4 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7d6ec4572d00, count: -6

Crashes (100):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/24 22:48 openbsd 7348976a6ac6 74e70d19 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/24 08:56 openbsd 2084961b940b baf8bf12 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/23 04:19 openbsd 33c7e43e4e2f 5b92003d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/22 06:23 openbsd 67e6794a9e1c 5b92003d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/03/22 05:18 openbsd 67e6794a9e1c 5b92003d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/03/21 09:04 openbsd a71bcab410b6 5b92003d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/20 17:44 openbsd 65032adb4937 85bf2a64 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/03/20 11:28 openbsd f53d362946f9 2f245add .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/19 05:15 openbsd cf7d68fc25cd 0199f9a1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/03/17 00:28 openbsd 5eccae830399 0737c18f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/16 19:53 openbsd 15ef65f2835f 64e21424 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/16 17:39 openbsd 15ef65f2835f 64e21424 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/16 14:26 openbsd 15ef65f2835f 64e21424 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/13 05:48 openbsd fd49698d88e5 2f7f359d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/03/12 20:06 openbsd 7210d95da7cb 4efadf07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/12 14:00 openbsd fd49698d88e5 4efadf07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/03/12 06:40 openbsd 73e77b6607d4 2d88ab01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/11 20:56 openbsd 73e77b6607d4 2d88ab01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/03/11 16:54 openbsd 177cf78f1bc3 b4075e21 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/02/14 06:17 openbsd dca435757bf3 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/02/13 22:31 openbsd 002f3ac1824d 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/02/13 09:01 openbsd 7d8bc7d2b639 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/02/13 05:43 openbsd 829f23bb157c 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/02/11 08:31 openbsd 960213463517 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/02/10 05:42 openbsd 7db5826dada7 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/02/07 12:38 openbsd 9d884ef6f275 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/02/06 05:48 openbsd fb820f9a8913 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/02/04 06:56 openbsd 75991a0e19ad 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/02/03 08:17 openbsd 2933a3218787 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/31 13:56 openbsd 3729e22e7105 afc0c4d4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/31 05:20 openbsd ffeb3c477d3b c75a2f6e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/22 20:13 openbsd 9e4d3748fbc0 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/20 21:55 openbsd bbdb2fea834c 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/01/20 13:13 openbsd 7d7bacacae3d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/19 12:48 openbsd 665aeba05e03 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/01/18 22:49 openbsd 085960a72a94 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2026/01/14 17:43 openbsd bf518416d64f 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/11 17:07 openbsd 294bdc40ca4d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/08 06:50 openbsd d77c41cf8f5a c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/07 23:31 openbsd d77c41cf8f5a c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/07 20:51 openbsd b6bc6e61f2e3 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/05 10:50 openbsd 97968167a1e0 917fe602 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/03 09:31 openbsd 287000ffa12f e3fbc05e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2026/01/02 07:50 openbsd e59bb76252c4 2733a373 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/12/30 19:05 openbsd e93b8ae725cf d32f762a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/12/29 19:20 openbsd 4420759a09aa 9831da75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/12/28 04:56 openbsd d9ef728109ec 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/12/28 01:28 openbsd d9ef728109ec 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/12/27 23:34 openbsd d9ef728109ec 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/12/25 01:52 openbsd 37a2fc69fcf0 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/12/24 17:55 openbsd 1dc30a6de584 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/11/14 21:04 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/11/12 12:04 openbsd 4bd49954ab16 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "dupe == NULL" failed in uvm_page.c
2025/11/09 18:02 openbsd ba1265228048 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/11/08 19:23 openbsd f09b465a1938 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
2025/11/08 13:44 openbsd f09b465a1938 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "dupe == NULL" failed in uvm_page.c
* Struck through repros no longer work on HEAD.