kern.securelevel: 0 -> 1
creating runtime link editor directory cache.
preserving editor files.
starting network daemons: sshd.
starting local daemons:.
Thu Dec 23 02:38:56 PST 2021

OpenBSD/amd64 (ci-openbsd-setuid-1.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts.
2021/12/23 02:39:06 fuzzer started
2021/12/23 02:39:10 dialing manager at 10.128.15.235:11992
2021/12/23 02:39:10 checking machine...
2021/12/23 02:39:10 checking revisions...
2021/12/23 02:39:10 testing simple program...
2021/12/23 02:39:11 building call list...
2021/12/23 02:39:11 syscalls: 387
2021/12/23 02:39:11 code coverage: enabled
2021/12/23 02:39:11 comparison tracing: enabled
2021/12/23 02:39:11 extra coverage: enabled
2021/12/23 02:39:11 delay kcov mmap: enabled
2021/12/23 02:39:11 setuid sandbox: enabled
2021/12/23 02:39:11 namespace sandbox: support is not implemented in syzkaller
2021/12/23 02:39:11 Android sandbox: support is not implemented in syzkaller
2021/12/23 02:39:11 fault injection: support is not implemented in syzkaller
2021/12/23 02:39:11 leak checking: support is not implemented in syzkaller
2021/12/23 02:39:11 net packet injection: enabled
2021/12/23 02:39:11 net device setup: support is not implemented in syzkaller
2021/12/23 02:39:11 concurrency sanitizer: support is not implemented in syzkaller
2021/12/23 02:39:11 devlink PCI setup: support is not implemented in syzkaller
2021/12/23 02:39:11 USB emulation: support is not implemented in syzkaller
2021/12/23 02:39:11 hci packet injection: support is not implemented in syzkaller
2021/12/23 02:39:11 wifi device emulation: support is not implemented in syzkaller
2021/12/23 02:39:11 802.15.4 emulation: support is not implemented in syzkaller
2021/12/23 02:39:11 fetching corpus: 0, signal 0/0 (executing program)
2021/12/23 02:39:11 fetching corpus: 0, signal 0/0 (executing program)
2021/12/23 02:39:11 starting 6 fuzzer processes
02:39:11 executing program 0:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0xa, &(0x7f0000002680)=[{&(0x7f0000000080)="c5", 0x1}], 0x1}, 0x0)
r0 = socket(0x18, 0x400000002, 0x0)
setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000080), 0x4)

02:39:11 executing program 1:
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000002c0)={0x2, &(0x7f0000000080)=[{}, {0x2, 0x0, 0x0, 0x11}]})
ioctl$BIOCGDIRFILT(0xffffffffffffffff, 0x4004427c, &(0x7f0000000000))
sysctl$hw(&(0x7f0000000080)={0xa}, 0x8, 0x0, 0x0, 0x0, 0x0)
r0 = kqueue()
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0, 0x0)
r2 = semget$private(0x0, 0x4, 0x1b2)
semctl$GETNCNT(r2, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$GETVAL(r2, 0x4, 0x5, &(0x7f0000000640)=""/210)
semop(r2, &(0x7f0000000300)=[{0x3, 0x101, 0x1000}, {0x0, 0x4, 0x1000}], 0x1)
semctl$SETVAL(r2, 0x3, 0x8, &(0x7f0000000280)=0x7)
semop(r2, &(0x7f0000000000)=[{0x1, 0x2, 0x1000}, {0x0, 0x6, 0x1800}, {0x2, 0x20}, {0x1, 0x108, 0x3000}, {0x0, 0x3f, 0x1000}, {0x2, 0xb0, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x5, 0x1800}, {0x4, 0x5, 0x1000}, {0x4, 0xdb7f, 0x1000}], 0x2aaaaa81)
semctl$GETNCNT(r2, 0x3, 0x3, &(0x7f0000000100)=""/145)
semctl$SETVAL(r2, 0x0, 0x8, &(0x7f0000000040)=0x1000)
geteuid()

02:39:11 executing program 2:
madvise(&(0x7f0000b45000/0x4000)=nil, 0xfffffffffffffe77, 0x0)

02:39:11 executing program 3:
syz_emit_ethernet(0x281, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/796])
r0 = kqueue()
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x10, r1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x9001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x2}, 0xc)
fcntl$lock(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x40})
r3 = semget$private(0x0, 0x8, 0x10286)
ioctl$VMM_IOC_INFO(r1, 0xc0185603, &(0x7f0000000080)={0x1a, 0x0, &(0x7f0000000040)=""/26})
semctl$IPC_RMID(0x0, 0x0, 0x0)
semop(r3, &(0x7f0000000380)=[{0x6, 0x7, 0x800}, {0x5, 0x6, 0x1000}, {0x2, 0xc1, 0x3400}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x61, 0x1800}, {0x0, 0xc334}, {0x3, 0x8002, 0x1000}, {0x0, 0x7fff, 0x1800}, {0x2, 0x5}], 0xc)
r4 = getuid()
r5 = semget$private(0x0, 0x0, 0x160)
r6 = getegid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x6, 0x0, r6, 0x0, 0x0, 0x14b, 0x7fff}, 0x7, 0x400, 0x80})
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000180)={{0x1, r4, r6, 0x0, 0xffffffffffffffff, 0x80, 0x9}, 0x3, 0x926, 0x1})
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
geteuid()

02:39:11 executing program 4:
r0 = socket(0x11, 0x4003, 0x0)
sendto$unix(r0, &(0x7f00000000c0)="b100050460000000000008000701000000000000ceb1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf0ff000000781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257690000132e27acb5d602000d7d026ba8af63ff37422902e4fdefe095bebd108ae070c1f5ab72c881ff7cc501000000b22f310b404f36a00f90ec6de01be657aea8c500000002003c88c1cf8044101b5496ffffffffffffffffff00"/177, 0xb1, 0x0, 0x0, 0x0)

02:39:11 executing program 5:
clock_getres(0xdeb1a8034fc90004, 0x0)

02:39:12 executing program 0:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0xa, &(0x7f0000002680)=[{&(0x7f0000000080)="c5", 0x1}], 0x1}, 0x0)
r0 = socket(0x18, 0x400000002, 0x0)
setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000080), 0x4)

02:39:12 executing program 2:
madvise(&(0x7f0000b45000/0x4000)=nil, 0xfffffffffffffe77, 0x0)

02:39:12 executing program 0:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0xa, &(0x7f0000002680)=[{&(0x7f0000000080)="c5", 0x1}], 0x1}, 0x0)
r0 = socket(0x18, 0x400000002, 0x0)
setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000080), 0x4)

02:39:12 executing program 2:
madvise(&(0x7f0000b45000/0x4000)=nil, 0xfffffffffffffe77, 0x0)

02:39:12 executing program 0:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0xa, &(0x7f0000002680)=[{&(0x7f0000000080)="c5", 0x1}], 0x1}, 0x0)
r0 = socket(0x18, 0x400000002, 0x0)
setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000080), 0x4)

02:39:12 executing program 2:
madvise(&(0x7f0000b45000/0x4000)=nil, 0xfffffffffffffe77, 0x0)

02:39:12 executing program 0:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0xa, &(0x7f0000002680)=[{&(0x7f0000000080)="c5", 0x1}], 0x1}, 0x0)
r0 = socket(0x18, 0x400000002, 0x0)
setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000080), 0x4)

02:39:12 executing program 2:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0xa, &(0x7f0000002680)=[{&(0x7f0000000080)="c5", 0x1}], 0x1}, 0x0)
r0 = socket(0x18, 0x400000002, 0x0)
setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000080), 0x4)

02:39:12 executing program 1:
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000002c0)={0x2, &(0x7f0000000080)=[{}, {0x2, 0x0, 0x0, 0x11}]})
ioctl$BIOCGDIRFILT(0xffffffffffffffff, 0x4004427c, &(0x7f0000000000))
sysctl$hw(&(0x7f0000000080)={0xa}, 0x8, 0x0, 0x0, 0x0, 0x0)
r0 = kqueue()
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0, 0x0)
r2 = semget$private(0x0, 0x4, 0x1b2)
semctl$GETNCNT(r2, 0x4, 0x3, &(0x7f0000000580)=""/170)
semctl$GETVAL(r2, 0x4, 0x5, &(0x7f0000000640)=""/210)
semop(r2, &(0x7f0000000300)=[{0x3, 0x101, 0x1000}, {0x0, 0x4, 0x1000}], 0x1)
semctl$SETVAL(r2, 0x3, 0x8, &(0x7f0000000280)=0x7)
semop(r2, &(0x7f0000000000)=[{0x1, 0x2, 0x1000}, {0x0, 0x6, 0x1800}, {0x2, 0x20}, {0x1, 0x108, 0x3000}, {0x0, 0x3f, 0x1000}, {0x2, 0xb0, 0x800}, {0x4, 0x81, 0x800}, {0x4, 0x5, 0x1800}, {0x4, 0x5, 0x1000}, {0x4, 0xdb7f, 0x1000}], 0x2aaaaa81)
semctl$GETNCNT(r2, 0x3, 0x3, &(0x7f0000000100)=""/145)
semctl$SETVAL(r2, 0x0, 0x8, &(0x7f0000000040)=0x1000)
geteuid()

02:39:12 executing program 3:
syz_emit_ethernet(0x281, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/796])
r0 = kqueue()
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x10, r1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x9001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x2}, 0xc)
fcntl$lock(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x40})
r3 = semget$private(0x0, 0x8, 0x10286)
ioctl$VMM_IOC_INFO(r1, 0xc0185603, &(0x7f0000000080)={0x1a, 0x0, &(0x7f0000000040)=""/26})
semctl$IPC_RMID(0x0, 0x0, 0x0)
semop(r3, &(0x7f0000000380)=[{0x6, 0x7, 0x800}, {0x5, 0x6, 0x1000}, {0x2, 0xc1, 0x3400}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x61, 0x1800}, {0x0, 0xc334}, {0x3, 0x8002, 0x1000}, {0x0, 0x7fff, 0x1800}, {0x2, 0x5}], 0xc)
r4 = getuid()
r5 = semget$private(0x0, 0x0, 0x160)
r6 = getegid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x6, 0x0, r6, 0x0, 0x0, 0x14b, 0x7fff}, 0x7, 0x400, 0x80})
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000180)={{0x1, r4, r6, 0x0, 0xffffffffffffffff, 0x80, 0x9}, 0x3, 0x926, 0x1})
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
geteuid()

2021/12/23 02:39:23 executor 4 failed 11 times:
executor 4: exit status 67
SYZFAIL: tun_id out of range
tun_id=4 (errno 2: No such file or directory)
loop exited with status 67
login: