syzbot


uvm_fault: ffs_blkfree (2)

Status: upstream: reported on 2026/04/16 00:40
Reported-by: syzbot+49318ab8bd8b8b7f7ddc@syzkaller.appspotmail.com
First crash: 8d07h, last: 8d07h
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: ffs_blkfree -1 6 586d 588d 0/3 auto-obsoleted due to no activity on 2024/12/13 12:59

Sample crash report:
uvm_fault(0xffffffff83a0b5a0, 0xffff8000133e2004, 0, 1) -> d
kernel: page fault trap, code=0
Stopped at      ffs_blkfree+0x254:      movl    0x4(%r12),%r15d
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*438685  82070      0         0x2          0    0  syz-executor
ffs_blkfree(fffffd8073689e00,2592a,800) at ffs_blkfree+0x254 ffs_cgread sys/ufs/ffs/ffs_alloc.c:856 [inline]
ffs_blkfree(fffffd8073689e00,2592a,800) at ffs_blkfree+0x254 sys/ufs/ffs/ffs_alloc.c:1272
ffs_truncate(fffffd8073689e00,0,0,ffffffffffffffff) at ffs_truncate+0x1390 sys/ufs/ffs/ffs_inode.c:325
ufs_inactive(ffff80002a83bc00) at ufs_inactive+0x1ff sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd806d397798,ffff80002a746538) at VOP_INACTIVE+0xfb sys/kern/vfs_vops.c:498
vput(fffffd806d397798) at vput+0xdc sys/kern/vfs_subr.c:789
VOP_REMOVE(fffffd806d3970d8,fffffd806d397798,ffff80002a83bd68) at VOP_REMOVE+0x199 sys/kern/vfs_vops.c:336
dounlinkat(ffff80002a746538,ffffff9c,7bc1d6e82900,0) at dounlinkat+0x1c4 sys/kern/vfs_syscalls.c:1923
syscall(ffff80002a83bed0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a83bed0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7bc1d6e82db0, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/16 00:39 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: ffs_blkfree
* Struck through repros no longer work on HEAD.