syzbot


assert "dupe == NULL" failed in uvm_page.c (3)

Status: upstream: reported on 2021/12/15 17:55
Reported-by: syzbot+40f25dd93335ce4e26e7@syzkaller.appspotmail.com
First crash: 417d, last: 47d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "dupe == NULL" failed in uvm_page.c (2) 1 926d 926d 0/3 auto-closed as invalid on 2020/10/22 03:53
openbsd assert "dupe == NULL" failed in uvm_page.c 4 1091d 1204d 0/3 auto-closed as invalid on 2020/05/10 22:18

Sample crash report:
panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 144
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*493504  17418      0         0x2          0    0  syz-executor.7
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff825a9a70) at panic+0x177 sys/kern/subr_prf.c:198
__assert(ffffffff826224e0,ffffffff8259d36b,90,ffffffff82585a19) at __assert+0x25 sys/kern/subr_prf.c:157
uvm_pagealloc_pg(fffffd80067c7be0,fffffd8065690ad8,d963000,0) at uvm_pagealloc_pg+0x427 uvm_pageinsert sys/uvm/uvm_page.c:138 [inline]
uvm_pagealloc_pg(fffffd80067c7be0,fffffd8065690ad8,d963000,0) at uvm_pagealloc_pg+0x427 sys/uvm/uvm_page.c:709
uvm_pagealloc(fffffd8065690ad8,d963000,0,3) at uvm_pagealloc+0x1e8 sys/uvm/uvm_page.c:917
pmap_get_ptp(fffffd8065690aa8,1b2c621000) at pmap_get_ptp+0x18d sys/arch/amd64/amd64/pmap.c:1191
pmap_enter(fffffd8065690aa8,1b2c621000,67fd6000,3,20) at pmap_enter+0x2ba sys/arch/amd64/amd64/pmap.c:2705
uvm_fault_lower_lookup(ffff80002ca4dea0,ffff80002ca4ded8,ffff80002ca4de20) at uvm_fault_lower_lookup+0x2a7 sys/uvm/uvm_fault.c:1193
uvm_fault_lower(ffff80002ca4dea0,ffff80002ca4ded8,ffff80002ca4de20,0) at uvm_fault_lower+0x5f sys/uvm/uvm_fault.c:1228
uvm_fault(fffffd8074f65010,1b2c620000,0,1) at uvm_fault+0x238
upageflttrap(ffff80002ca4e010,1b2c620000) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
usertrap(ffff80002ca4e010) at usertrap+0x1aa sys/arch/amd64/amd64/trap.c:417
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7f7ffffc44f0, count: 2
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 144
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff825a9a70) at panic+0x177 sys/kern/subr_prf.c:198
__assert(ffffffff826224e0,ffffffff8259d36b,90,ffffffff82585a19) at __assert+0x25 sys/kern/subr_prf.c:157
uvm_pagealloc_pg(fffffd80067c7be0,fffffd8065690ad8,d963000,0) at uvm_pagealloc_pg+0x427 uvm_pageinsert sys/uvm/uvm_page.c:138 [inline]
uvm_pagealloc_pg(fffffd80067c7be0,fffffd8065690ad8,d963000,0) at uvm_pagealloc_pg+0x427 sys/uvm/uvm_page.c:709
uvm_pagealloc(fffffd8065690ad8,d963000,0,3) at uvm_pagealloc+0x1e8 sys/uvm/uvm_page.c:917
pmap_get_ptp(fffffd8065690aa8,1b2c621000) at pmap_get_ptp+0x18d sys/arch/amd64/amd64/pmap.c:1191
pmap_enter(fffffd8065690aa8,1b2c621000,67fd6000,3,20) at pmap_enter+0x2ba sys/arch/amd64/amd64/pmap.c:2705
uvm_fault_lower_lookup(ffff80002ca4dea0,ffff80002ca4ded8,ffff80002ca4de20) at uvm_fault_lower_lookup+0x2a7 sys/uvm/uvm_fault.c:1193
uvm_fault_lower(ffff80002ca4dea0,ffff80002ca4ded8,ffff80002ca4de20,0) at uvm_fault_lower+0x5f sys/uvm/uvm_fault.c:1228
uvm_fault(fffffd8074f65010,1b2c620000,0,1) at uvm_fault+0x238
upageflttrap(ffff80002ca4e010,1b2c620000) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
usertrap(ffff80002ca4e010) at usertrap+0x1aa sys/arch/amd64/amd64/trap.c:417
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7f7ffffc44f0, count: -13
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002ca4d920
rbx               0xffffffff829bdb8f    cpu_info_full_primary+0x2b8f
rdx                                0
rcx                                0
rax               0xffff800022d42fc0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x16ad2f27f04b3eab
r11               0xc96f381bdbcfd1c3
r12               0xffffffff829bd990    cpu_info_full_primary+0x2990
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81370d48    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff80002ca4d910
ss                                 0
db_enter+0x18:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.7) pid=493504 stat=onproc
    flags process=2<EXEC> proc=0
    pri=32, usrpri=83, nice=20
    forw=0xffffffffffffffff, list=0xffff800022d42000,0xffff8000213217b0
    process=0xffff8000fffeee30 user=0xffff80002ca49000, vmspace=0xfffffd8074f65010
    estcpu=36, cpticks=1, pctcpu=0.3
    user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 99695  153246  47716      0  2           0                syz-executor.4
 99695  213447  47716      0  3   0x4000080  fsleep        syz-executor.4
 19076  223205  17418      0  2           0                syz-executor.7
 19076  264712  17418      0  2   0x4000000                syz-executor.7
 19076  414919  17418      0  2   0x4000000                syz-executor.7
 19076  151070  17418      0  2   0x4000000                syz-executor.7
 55551  129930   4819      0  2           0                syz-executor.5
 55551  370769   4819      0  2   0x4000000                syz-executor.5
 55551  391309   4819      0  2   0x4000000                syz-executor.5
 16963  249672   6893      0  2           0                syz-executor.2
 16963   67717   6893      0  3   0x4000080  fsleep        syz-executor.2
 16963   72791   6893      0  3   0x4000080  fsleep        syz-executor.2
 16963  395038   6893      0  3   0x4000080  fsleep        syz-executor.2
*17418  493504  15809      0  7         0x2                syz-executor.7
 65316    9305  15809      0  3        0x82  nanoslp       syz-executor.6
 27072  193404  15809      0  3        0x82  nanoslp       syz-executor.3
 34970  413100  15809      0  2       0x482                syz-executor.1
 50868  316646      0      0  3     0x14200  acct          acct
  5918   94955  15809      0  3        0x82  nanoslp       syz-executor.0
  4819  103980  15809      0  3        0x82  nanoslp       syz-executor.5
 47716     391  15809      0  2       0x482                syz-executor.4
  6893  343950  15809      0  3        0x82  nanoslp       syz-executor.2
 66438   48009      1      0  3    0x100083  ttyopn        getty
 70113  353663      0      0  3     0x14200  bored         sosplice
 44268  256959      1      0  3           0  vmmaplk       syz-executor.3
 44268  130083      1      0  3   0x4000000  vmmaplk       syz-executor.3
 44268  146142      1      0  3   0x4000000  vmmaplk       syz-executor.3
  4620   61079  99740      0  3    0x100082  netio         arp
 99740  301377      1      0  3    0x10008a  sigsusp       sh
 15809  367989  62381      0  3        0x82  wait          syz-fuzzer
 15809  251103  62381      0  3   0x4000082  thrsleep      syz-fuzzer
 15809  295243  62381      0  3   0x4000082  thrsleep      syz-fuzzer
 15809  368920  62381      0  3   0x4000082  thrsleep      syz-fuzzer
 15809  257441  62381      0  3   0x4000082  kqread        syz-fuzzer
 15809   35554  62381      0  3   0x4000082  thrsleep      syz-fuzzer
 15809  368382  62381      0  3   0x4000082  wait          syz-fuzzer
 15809  344459  62381      0  3   0x4000082  thrsleep      syz-fuzzer
 15809  458429  62381      0  3   0x4000082  thrsleep      syz-fuzzer
 15809  512330  62381      0  3   0x4000082  wait          syz-fuzzer
 15809   31328  62381      0  3   0x4000082  wait          syz-fuzzer
 15809  128855  62381      0  3   0x4000082  wait          syz-fuzzer
 15809  470945  62381      0  3   0x4000082  wait          syz-fuzzer
 15809   76197  62381      0  3   0x4000082  wait          syz-fuzzer
 15809  127023  62381      0  3   0x4000082  wait          syz-fuzzer
 15809  458349  62381      0  3   0x4000082  thrsleep      syz-fuzzer
 62381  474586  64065      0  3    0x10008a  sigsusp       ksh
 64065   61333  13882      0  3        0x9a  kqread        sshd
 13882  207143      1      0  3        0x88  kqread        sshd
 63438  317450   7574     74  3   0x1100092  bpf           pflogd
  7574  483454      1      0  3        0x80  netio         pflogd
 14568  500912  90825     73  3   0x1100090  kqread        syslogd
 90825  353485      1      0  3    0x100082  netio         syslogd
 33123  201897      1      0  3    0x100080  kqread        resolvd
 52937  312790  33804     77  3    0x100092  kqread        dhcpleased
   839  512135  33804     77  3    0x100092  kqread        dhcpleased
 33804  201444      1      0  3        0x80  kqread        dhcpleased
 16310  455450      0      0  3     0x14200  bored         smr
 25635  207401      0      0  2     0x14200                zerothread
 81145  258841      0      0  3     0x14200  aiodoned      aiodoned
 17979   17242      0      0  3     0x14200  syncer        update
 53235  124110      0      0  3     0x14200  cleaner       cleaner
 48175  210041      0      0  3     0x14200  reaper        reaper
 96504  197393      0      0  3     0x14200  pgdaemon      pagedaemon
 14891  414723      0      0  3     0x14200  bored         viomb
 77268  397249      0      0  3  0x40014200  acpi0         acpi0
 47429  145421      0      0  7  0x40014200                idle1
 74458  193725      0      0  3     0x14200  bored         softnet
 72674   31680      0      0  3     0x14200  bored         softnet
 58442  118027      0      0  3     0x14200  bored         softnet
  5741  461750      0      0  3     0x14200  bored         softnet
  2935  123896      0      0  3     0x14200  bored         systqmp
 63428  289789      0      0  3     0x14200  bored         systq
 79719  204252      0      0  3  0x40014200  bored         softclock
 29479  186061      0      0  3  0x40014200                idle0
     1   52739      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd8065690ab8)
#0  witness_lock+0x44d
#1  mtx_enter_try+0x100
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  pmap_enter+0x1bf pmap_map_ptes sys/arch/amd64/amd64/pmap.c:420 [inline]
#3  pmap_enter+0x1bf sys/arch/amd64/amd64/pmap.c:2699
#4  uvm_fault_lower_lookup+0x2a7 sys/uvm/uvm_fault.c:1193
#5  uvm_fault_lower+0x5f sys/uvm/uvm_fault.c:1228
#6  uvm_fault+0x238
#7  upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
#8  usertrap+0x1aa sys/arch/amd64/amd64/trap.c:417
#9  recall_trap+0x8
Process 17418 (syz-executor.7) thread 0xffff800022d42fc0 (493504)
exclusive rwlock uobjlk r = 0 (0xfffffd8077849ec0)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  uvm_fault_lower_lookup+0x46 sys/uvm/uvm_fault.c:1127
#3  uvm_fault_lower+0x5f sys/uvm/uvm_fault.c:1228
#4  uvm_fault+0x238
#5  upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
#6  usertrap+0x1aa sys/arch/amd64/amd64/trap.c:417
#7  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffffd8074f650b8)
#0  witness_lock+0x44d
#1  uvmfault_lookup+0xc9 sys/uvm/uvm_fault.c:1773
#2  uvm_fault_check+0x3a sys/uvm/uvm_fault.c:673
#3  uvm_fault+0xf2 sys/uvm/uvm_fault.c:601
#4  upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
#5  usertrap+0x1aa sys/arch/amd64/amd64/trap.c:417
#6  recall_trap+0x8
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd8065690ab8)
#0  witness_lock+0x44d
#1  mtx_enter_try+0x100
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  pmap_enter+0x1bf pmap_map_ptes sys/arch/amd64/amd64/pmap.c:420 [inline]
#3  pmap_enter+0x1bf sys/arch/amd64/amd64/pmap.c:2699
#4  uvm_fault_lower_lookup+0x2a7 sys/uvm/uvm_fault.c:1193
#5  uvm_fault_lower+0x5f sys/uvm/uvm_fault.c:1228
#6  uvm_fault+0x238
#7  upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
#8  usertrap+0x1aa sys/arch/amd64/amd64/trap.c:417
#9  recall_trap+0x8
Process 44268 (syz-executor.3) thread 0xffff8000ffff42a8 (130083)
shared rwlock vmmaplk r = 0 (0xfffffd8069f04ac8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  vm_map_lock_ln+0xda sys/uvm/uvm_map.c:5332
#3  uvm_map_pageable+0x111 sys/uvm/uvm_map.c:2293
#4  sys_mlock+0x184 sys/uvm/uvm_mmap.c:834
#5  syscall+0x438 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#5  syscall+0x438 sys/arch/amd64/amd64/trap.c:599
#6  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10238   6573K    7410K  78643K     46648        0
            pcb    16     22K      30K  78643K     13645        0
         rtable   223      9K      10K  78643K      1774        0
         ifaddr    89     20K      22K  78643K       626        0
         sysctl     2      0K       2K  78643K        10        0
       counters    60     35K      36K  78643K       756        0
       ioctlops     0      0K       4K  78643K      2885        0
            iov     0      0K      32K  78643K      1143        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1500     94K      94K  78643K     12524        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K        81        0
         VM map     2      1K       1K  78643K         2        0
            sem    17      5K      10K  78643K        32        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    17     61K      93K  78643K     13319        0
          sigio     0      0K       0K  78643K        85        0
           proc    76     91K     116K  78643K      1686        0
        subproc   130      8K       8K  78643K       455        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       500        0
       in_multi    96      6K       7K  78643K       637        0
    ether_multi     1      0K       0K  78643K        54        0
            mrt     1      0K       0K  78643K        49        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   241   1076K    1076K  78643K       241        0
           exec     0      0K       1K  78643K      2373        0
     pfkey data     0      0K       0K  78643K        68        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     8     62K      64K  78643K        10        0
       UVM amap   489    541K     542K  78643K     90118        0
       UVM aobj   131      4K       4K  78643K       136        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       289        0
            NDP    16      0K       1K  78643K       213        0
           temp   145   4694K    5718K  78643K     91411        0
         kqueue    13     20K      30K  78643K      2177        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120      494    0      457     8     6     2     4     0     8    0
rtentry    112      561    0      463     4     0     4     4     0     8    0
unpcb      144     7378    0     7363    84    82     2    10     0     8    1
syncache   296       43    0       43    13    12     1     1     0     8    1
tcpqe       32       58    0       58    11    10     1     1     0     8    1
tcpcb      776     2047    0     2043    94    86     8     8     0     8    7
arp        120       77    0       58     1     0     1     1     0     8    0
inpcb      368    30370    0    30359   285   277     8    29     0     8    6
nd6         48      124    0      102     1     0     1     1     0     8    0
pkpcb       40       17    0       17     3     3     0     1     0     8    0
kcovpl      48       35    0       25     1     0     1     1     0     8    0
mppekey    1024       5    0        5     2     2     0     1     0     8    0
ppxss      1256     282    0      282    13    13     0     1     0     8    0
pppxif     1448     165    0      165     8     8     0     1     0     8    0
pfstscr     40       19    0       19     4     4     0     1     0     8    0
pffrag     232       65    0       65     1     1     0     1     0   482    0
pffrnode    88       65    0       65     1     1     0     1     0     8    0
pffrent     40      255    0      255     5     5     0     1     0     8    0
pfosfp      40     1503    0     1076     5     0     5     5     0     8    0
pfosfpen   112     1503    0      785    21     0    21    21     0     8    0
pfanchor   1280     512    1        0    43     0    43    43     0     8    0
pfqueue    264        4    0        4     2     2     0     1     0     8    0
pfstitem    24      343    0      310     1     0     1     1     0     8    0
pfstkey    120      429    0      403     2     1     1     2     0     8    0
pfstate    384      412    0      382    12     8     4     7     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
rttmr      136       12    0       12     4     4     0     1     0     8    0
art_heap8  4096       5    0        4     4     3     1     2     0     8    0
art_heap4  256     2626    0     2185    45    16    29    30     0     8    1
art_table   32     2631    0     2189     4     0     4     4     0     8    0
art_node    16      560    0      475     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        0     1     0     1     1     0     8    0
semupl     112        5    0        5     2     2     0     1     0     8    0
semapl     112       23    0        8     1     0     1     1     0     8    0
shmpl      112      133    0        5     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256    19630    0    18151    93     0    93    93     0     8    0
ffsino     272    19630    0    18151    99     0    99    99     0     8    0
nchpl      144    38098    0    36452    63     0    63    63     0     8    0
uvmvnodes   80     6359    0        0   130     0   130   130     0     8    0
vnodes     216     6359    0        0   354     0   354   354     0     8    0
namei      1024  143206    0   143206     9     8     1     2     0     8    1
percpumem   16      390    0      348     1     0     1     1     0     8    0
vcpupl     2048      64    0        1     8     0     8     8     0     8    0
vmpool     568       77    0       14     7     2     5     5     0     8    0
kstatmem   264      254    0      226     3     0     3     3     0     8    0
scsiplug    72       11    0       11     4     3     1     1     0     8    1
scxspl     216   110934    0   110934    26    25     1     8     0     8    1
plimitpl   152      927    0      909     1     0     1     1     0     8    0
sigapl     424    13653    0    13600    11     5     6     9     0     8    0
futexpl     64   128918    0   128914     5     4     1     1     0     8    0
knotepl    120      791    0        0    14     0    14    14     0     8    0
kqueuepl   216     3107    0     3098    33    31     2     5     0     8    1
pipepl     320     2704    0     2672    95    89     6    13     0     8    3
fdescpl    496    13553    0    13523     5     0     5     5     0     8    0
filepl     152   100769    0   100461   144   126    18    24     0     8    5
lockfpl    104    12266    0    12264     8     7     1     2     0     8    0
lockfspl    48     2971    0     2969     1     0     1     1     0     8    0
sessionpl  144       52    0       33     1     0     1     1     0     8    0
pgrppl      48      229    0      210     1     0     1     1     0     8    0
ucredpl    104     9678    0     9666     1     0     1     1     0     8    0
zombiepl   144    13604    0    13600     3     2     1     1     0     8    0
processpl  1072   13653    0    13600     5     0     5     5     0     8    0
procpl     672    36271    0    36192    19    11     8    10     0     8    0
srpgc       96       26    0       26     9     9     0     1     0     8    0
sosppl     168       67    0       67    14    14     0     1     0     8    0
sockpl     488    38447    0    38385   684   672    12    42     0     8    3
mcl64k     65536     25    0        0     4     2     2     3     0     8    0
mcl16k     16384     17    0        0     3     0     3     3     0     8    0
mcl12k     12288     23    0        0     2     0     2     2     0     8    0
mcl9k      9216      14    0        0     1     0     1     1     0     8    0
mcl8k      8192      48    0        0     6     0     6     6     0     8    0
mcl4k      4096      18    0        0     3     0     3     3     0     8    0
mcl2k2     2112       5    0        0     1     0     1     1     0     8    0
mcl2k      2048     544    0        0    53    19    34    53     0     8    0
mtagpl      96      871    0        0    16     0    16    16     0     8    0
mbufpl     256     2081    0        0    96     0    96    96     0     8    0
bufpl      288    21752    0    15420   453     0   453   453     0     8    0
anonpl      24  2557421    0  2541546   249   125   124   144     0   186    0
amapchunkpl 152  249970    0   249202    88    54    34    45     0   158    0
amappl16   200    21900    0    21327   124    91    33    46     0     8    2
amappl15   192       10    0       10     2     2     0     1     0     8    0
amappl14   184      258    0      240     2     0     2     2     0     8    0
amappl13   176        8    0        8     2     2     0     1     0     8    0
amappl12   168      743    0      736     1     0     1     1     0     8    0
amappl11   160       53    0       39     1     0     1     1     0     8    0
amappl10   152       58    0       44     1     0     1     1     0     8    0
amappl9    144     1002    0     1002    18    17     1     1     0     8    1
amappl8    136      545    0      435     4     0     4     4     0     8    0
amappl7    128      221    0      193     2     0     2     2     0     8    0
amappl6    120      301    0      282     1     0     1     1     0     8    0
amappl5    112      408    0      397     1     0     1     1     0     8    0
amappl4    104      847    0      797     2     0     2     2     0     8    0
amappl3     96    39470    0    39410     2     0     2     2     0     8    0
amappl2     88    14425    0    14343     3     1     2     3     0     8    0
amappl1     80   304270    0   303442    23     4    19    23     0     8    0
amappl      88    89065    0    88828     7     1     6     6     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      135    0        5     3     0     3     3     0     8    0
uaddrrnd    24    13630    0    13537     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24    13630    0    13537     1     0     1     1     0     8    0
vmmpekpl   168   100626    0   100550     4     0     4     4     0     8    0
vmmpepl    168  1214280    0  1211068   391   226   165   183     0   357    9
vmsppl     368    13629    0    13537    10     1     9     9     0     8    0
rwobjpl     56   318106    0   309656   141    21   120   120     0     8    0
pdppl      4096   27267    0    27137   486   349   137   138     0     8    7
pvpl        32  5152365    0  5130469   549   329   220   274     0   265    9
pmappl     248    13629    0    13537     8     1     7     7     0     8    1
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     1678    0      692    29     0    29    29     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff825a9a70) at panic+0x177 sys/kern/subr_prf.c:198
__assert(ffffffff826224e0,ffffffff8259d36b,90,ffffffff82585a19) at __assert+0x25 sys/kern/subr_prf.c:157
uvm_pagealloc_pg(fffffd80067c7be0,fffffd8065690ad8,d963000,0) at uvm_pagealloc_pg+0x427 uvm_pageinsert sys/uvm/uvm_page.c:138 [inline]
uvm_pagealloc_pg(fffffd80067c7be0,fffffd8065690ad8,d963000,0) at uvm_pagealloc_pg+0x427 sys/uvm/uvm_page.c:709
uvm_pagealloc(fffffd8065690ad8,d963000,0,3) at uvm_pagealloc+0x1e8 sys/uvm/uvm_page.c:917
pmap_get_ptp(fffffd8065690aa8,1b2c621000) at pmap_get_ptp+0x18d sys/arch/amd64/amd64/pmap.c:1191
pmap_enter(fffffd8065690aa8,1b2c621000,67fd6000,3,20) at pmap_enter+0x2ba sys/arch/amd64/amd64/pmap.c:2705
uvm_fault_lower_lookup(ffff80002ca4dea0,ffff80002ca4ded8,ffff80002ca4de20) at uvm_fault_lower_lookup+0x2a7 sys/uvm/uvm_fault.c:1193
uvm_fault_lower(ffff80002ca4dea0,ffff80002ca4ded8,ffff80002ca4de20,0) at uvm_fault_lower+0x5f sys/uvm/uvm_fault.c:1228
uvm_fault(fffffd8074f65010,1b2c620000,0,1) at uvm_fault+0x238
upageflttrap(ffff80002ca4e010,1b2c620000) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
usertrap(ffff80002ca4e010) at usertrap+0x1aa sys/arch/amd64/amd64/trap.c:417
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7f7ffffc44f0, count: -13
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206
sched_idle(ffff800020dd8ff0) at sched_idle+0x417 sys/kern/kern_sched.c:175
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206
sched_idle(ffff800020dd8ff0) at sched_idle+0x417 sys/kern/kern_sched.c:175
end trace frame: 0x0, count: -5

Crashes (25):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-openbsd-multicore 2022/12/20 05:40 openbsd fea828ab47f1 c52b2efb .config console log report [disk image] [bsd.gdb] [kernel image] assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/12/14 06:18 openbsd 6fba7c695c88 f6511626 .config console log report [disk image] [bsd.gdb] [kernel image] assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/11/14 04:48 openbsd a9bf6d57fde5 7ba4d859 .config console log report [disk image] [bsd.gdb] [kernel image] assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/10/02 20:50 openbsd c9ce46ce0b1f feb56351 .config console log report [disk image] [bsd.gdb] [kernel image] assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/08/16 18:33 openbsd 555d04f4a08b 7a7cb304 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/07/02 00:22 openbsd 74158beac1ed 1434eec0 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/06/10 23:50 openbsd 77bac82635a6 0d5abf15 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/06/09 08:50 openbsd 01d44e2b5dce 0d5abf15 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/06/06 14:28 openbsd c4eb6273a63b c8857892 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/06/03 09:34 openbsd 37a365c69f17 eee80d3c .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/05/22 11:28 openbsd 0be467f46ad6 7268fa62 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/05/19 11:55 openbsd f9b15afb6ca0 cb1ac2e7 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/04/20 08:41 openbsd 86e5b4b4ac61 7d7bc738 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/04/17 11:30 openbsd a454aff3d36b 8bcc32a6 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/04/02 11:51 openbsd d67ade9b91db 79a2a8fc .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/03/24 22:41 openbsd 2569963f91dd 89bc8608 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/03/08 13:10 openbsd 9f7de9371f1f 7bdd8b2c .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/03/02 04:05 openbsd fbbcf6cd7f4e 45a13a73 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/02/12 08:46 openbsd b92d1435fff2 8b9ca619 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/01/31 20:35 openbsd b05db03c9b94 6b7c57fe .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2022/01/21 22:58 openbsd 353bdeb4de14 214351e1 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2022/01/10 18:08 openbsd 49e0d069cc8b ddb0ab8c .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2021/12/31 17:06 openbsd 093575ddba90 36bd2e48 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-main 2021/12/22 16:38 openbsd 642ce6276684 6caa12e4 .config console log report assert "dupe == NULL" failed in uvm_page.c
ci-openbsd-multicore 2021/12/15 17:54 openbsd 03319b45cc1f 572bcb40 .config console log report assert "dupe == NULL" failed in uvm_page.c
* Struck through repros no longer work on HEAD.