syzkaller-openbsd-bugs - Google Groups

Groups

Contact owners and managers

1–30 of 1872

OpenBSD kernel bugs discovered by syzkaller fuzzer.

0 selected

7:06 PM

KASAN: invalid memory access in igmp_leavegroup

Hello, syzbot found the following issue on: HEAD commit: 04858f5f1e88 Confirm cdevsw access is in-

unread,

KASAN: invalid memory access in igmp_leavegroup

Hello, syzbot found the following issue on: HEAD commit: 04858f5f1e88 Confirm cdevsw access is in-

7:06 PM

4:54 PM

kernel:E pag NUM aau

Hello, syzbot found the following issue on: HEAD commit: 03525b20a4f0 pci_resize_resource() takes

unread,

kernel:E pag NUM aau

Hello, syzbot found the following issue on: HEAD commit: 03525b20a4f0 pci_resize_resource() takes

4:54 PM

syzbot, Greg Steuck2

3:53 PM

panic: Caught invalid memory access at ADDR size NUM op NUM

#syz invalid Predates useful report titles. No leakage into this buck in 10 days. On Mon, Jul 6, 2026

unread,

panic: Caught invalid memory access at ADDR size NUM op NUM

#syz invalid Predates useful report titles. No leakage into this buck in 10 days. On Mon, Jul 6, 2026

3:53 PM

Jul 26

SYZFAIL: tun: re (2)

Hello, syzbot found the following issue on: HEAD commit: 5ba6d07861fc amd64: add KASAN_GATE, the self

unread,

SYZFAIL: tun: re (2)

Hello, syzbot found the following issue on: HEAD commit: 5ba6d07861fc amd64: add KASAN_GATE, the self

Jul 26

Jul 26

assert "refs > NUM" failed in kern_synch.c

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

unread,

assert "refs > NUM" failed in kern_synch.c

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

Jul 26

Jul 26

panic: unhandled af NUM

Hello, syzbot found the following issue on: HEAD commit: dd404cb12ba6 llvm: g/c-collect local changes

unread,

panic: unhandled af NUM

Hello, syzbot found the following issue on: HEAD commit: dd404cb12ba6 llvm: g/c-collect local changes

Jul 26

Jul 26

panic: uvm_fault_unwire_locked: adWdArReNssI NnG:o tSP iLn maNpO

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

unread,

panic: uvm_fault_unwire_locked: adWdArReNssI NnG:o tSP iLn maNpO

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

Jul 26

syzbot, Greg Steuck2

Jul 25

KASAN: invalid memory access in amap_chunk_get

#syz invalid The problem was fixed in KASAN code.

unread,

KASAN: invalid memory access in amap_chunk_get

#syz invalid The problem was fixed in KASAN code.

Jul 25

Jul 25

KASAN: invalid memory access in tagname2tag

syzbot has found a reproducer for the following issue on: HEAD commit: 7c61c2d2eaf2 Fix checkalias

unread,

KASAN: invalid memory access in tagname2tag

syzbot has found a reproducer for the following issue on: HEAD commit: 7c61c2d2eaf2 Fix checkalias

Jul 25

Jul 25

assert "refs != ~NUM" failed in multico

Hello, syzbot found the following issue on: HEAD commit: f3d8a5574675 vmd(8): guard firmware config

unread,

assert "refs != ~NUM" failed in multico

Hello, syzbot found the following issue on: HEAD commit: f3d8a5574675 vmd(8): guard firmware config

Jul 25

Jul 24

uvm_fault: device_lookup

Hello, syzbot found the following issue on: HEAD commit: f3d8a5574675 vmd(8): guard firmware config

unread,

uvm_fault: device_lookup

Hello, syzbot found the following issue on: HEAD commit: f3d8a5574675 vmd(8): guard firmware config

Jul 24

Jul 24

protection_fault: ip6_freemoptions

Hello, syzbot found the following issue on: HEAD commit: 969775618695 Replace outside as well as

unread,

protection_fault: ip6_freemoptions

Hello, syzbot found the following issue on: HEAD commit: 969775618695 Replace outside as well as

Jul 24

Jul 24

assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2)

Hello, syzbot found the following issue on: HEAD commit: 969775618695 Replace outside as well as

unread,

assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2)

Hello, syzbot found the following issue on: HEAD commit: 969775618695 Replace outside as well as

Jul 24

Jul 24

witness: lock_object uninitialized: ADDR (6)

Hello, syzbot found the following issue on: HEAD commit: 7c61c2d2eaf2 Fix checkalias contract to

unread,

witness: lock_object uninitialized: ADDR (6)

Hello, syzbot found the following issue on: HEAD commit: 7c61c2d2eaf2 Fix checkalias contract to

Jul 24

Jul 23

panic: kernel diagnostic assertion "refs != ~NUM" failed: file

Hello, syzbot found the following issue on: HEAD commit: 691001c74c47 Fix inverted logic in

unread,

panic: kernel diagnostic assertion "refs != ~NUM" failed: file

Hello, syzbot found the following issue on: HEAD commit: 691001c74c47 Fix inverted logic in

Jul 23

Jul 23

assert "refs != ~NUM" failed in kern

Hello, syzbot found the following issue on: HEAD commit: 691001c74c47 Fix inverted logic in

unread,

assert "refs != ~NUM" failed in kern

Hello, syzbot found the following issue on: HEAD commit: 691001c74c47 Fix inverted logic in

Jul 23

Jul 23

KASAN: invalid memory access in shm_delete_mapping

Hello, syzbot found the following issue on: HEAD commit: 7c61c2d2eaf2 Fix checkalias contract to

unread,

KASAN: invalid memory access in shm_delete_mapping

Hello, syzbot found the following issue on: HEAD commit: 7c61c2d2eaf2 Fix checkalias contract to

Jul 23

Jul 23

panic: uvm_fault_unwir (2)

Hello, syzbot found the following issue on: HEAD commit: 7c61c2d2eaf2 Fix checkalias contract to

unread,

panic: uvm_fault_unwir (2)

Hello, syzbot found the following issue on: HEAD commit: 7c61c2d2eaf2 Fix checkalias contract to

Jul 23

Jul 22

assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4)

Hello, syzbot found the following issue on: HEAD commit: e524649e2c66 vmd(8): check for under reads/

unread,

assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4)

Hello, syzbot found the following issue on: HEAD commit: e524649e2c66 vmd(8): check for under reads/

Jul 22

Jul 21

kernel:l : pagege a rap , c o eaultStopped at dovutimens+0x368: movl 0x98(%rax),%r12d

Hello, syzbot found the following issue on: HEAD commit: 20200149c668 Use peer_dump_done() in the

unread,

kernel:l : pagege a rap , c o eaultStopped at dovutimens+0x368: movl 0x98(%rax),%r12d

Hello, syzbot found the following issue on: HEAD commit: 20200149c668 Use peer_dump_done() in the

Jul 21

Jul 21

uvm_fault: sys_msgget

Hello, syzbot found the following issue on: HEAD commit: d55fd7dd01df Add add ECDSA tests (based on

unread,

uvm_fault: sys_msgget

Hello, syzbot found the following issue on: HEAD commit: d55fd7dd01df Add add ECDSA tests (based on

Jul 21

Jul 20

uvm_fault: in_pcbhash_insert

Hello, syzbot found the following issue on: HEAD commit: d55fd7dd01df Add add ECDSA tests (based on

unread,

uvm_fault: in_pcbhash_insert

Hello, syzbot found the following issue on: HEAD commit: d55fd7dd01df Add add ECDSA tests (based on

Jul 20

Jul 20

uvm_fault: witness_checkorder (6)

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

unread,

uvm_fault: witness_checkorder (6)

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

Jul 20

Jul 19

uvm_fault: rtable_exists

Hello, syzbot found the following issue on: HEAD commit: 2fc221d2874b Fix csr_swap() to return the

unread,

uvm_fault: rtable_exists

Hello, syzbot found the following issue on: HEAD commit: 2fc221d2874b Fix csr_swap() to return the

Jul 19

Jul 18

assert "bpfilter_lookup(unit) == NULL" failed in bpf.c

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

unread,

assert "bpfilter_lookup(unit) == NULL" failed in bpf.c

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

Jul 18

Jul 18

uvm_fault: rtable_match

Hello, syzbot found the following issue on: HEAD commit: bc321d44d2f5 Alberta moved to permanent -06

unread,

uvm_fault: rtable_match

Hello, syzbot found the following issue on: HEAD commit: bc321d44d2f5 Alberta moved to permanent -06

Jul 18

Jul 18

uvm_fault: dt_ioctl_record_stop (3)

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

unread,

uvm_fault: dt_ioctl_record_stop (3)

Auto-closing this bug as obsolete. Crashes did not happen for a while, no reproducer and no activity.

Jul 18

Jul 18

KASAN: invalid memory access in sysvipc_infoout

syzbot has found a reproducer for the following issue on: HEAD commit: 1a2082c4ae19 kasan: pool

unread,

KASAN: invalid memory access in sysvipc_infoout

syzbot has found a reproducer for the following issue on: HEAD commit: 1a2082c4ae19 kasan: pool

Jul 18

Jul 18

uvm_fault: uvm_fault_upper_lookup

Hello, syzbot found the following issue on: HEAD commit: bc321d44d2f5 Alberta moved to permanent -06

unread,

uvm_fault: uvm_fault_upper_lookup

Hello, syzbot found the following issue on: HEAD commit: bc321d44d2f5 Alberta moved to permanent -06

Jul 18

syzbot, Greg Steuck2

Jul 18

SYZFAIL: tun: re

#syz invalid On Sat, Jul 18, 2026, 01:00 syzbot <syzbot+564370...@syzkaller.appspotmail

unread,

SYZFAIL: tun: re

#syz invalid On Sat, Jul 18, 2026, 01:00 syzbot <syzbot+564370...@syzkaller.appspotmail

Jul 18

Search

Clear search

Close search

Google apps

Main menu