SYZFAIL: SIGILL pc-offset:0xffffffff217cdfe1 pc:0xdeadbeef addr:0x0 code=65537 (errno 9: Bad file descriptor) FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) Connection to 10.128.1.54 closed by remote host. login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 ktrace write failed, errno 27, tracing stopped for pid 424 pid 423 (dhclient), jid 0, uid 65: exited on signal 4 (no core dump - bad address) ktrace write failed, errno 27, tracing stopped for pid 338 ktrace write failed, errno 27, tracing stopped for pid 335 pid 1013 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large) pid 1025 (sh), jid 0, uid 0: exited on signal 4 (no core dump - too large) pid 1025 (sh), tap5: tun/tap protocol violation, non-controlling process closed last. pid 1004 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large) pid 1010 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large) pid 1004 (syz-executor), tap3: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0059dcc600 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 tap3: link state changed to DOWN ifaddr cache = 0xfffffe0059dcb780 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 tap5: link state changed to DOWN pid 745 (getty), jid 0, uid 0: exited on signal 4 (core dumped) pid 1011 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large) pid 1010 (syz-executor), tap1: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe005893ca80 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000 tap1: link state changed to DOWN pid 1008 (syz-executor), tap0: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe005893cd80 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800 tap0: link state changed to DOWN pid 1011 (syz-executor), tap2: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0059dcc480 is deleted tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 pid 740 (getty), jid 0, uid 0: exited on signal 4 (core dumped) pid 338 (dhclient), jid 0, uid 0: exited on signal 4 (core dumped) pid 424 (devd), jid 0, uid 0: exited on signal 4 (core dumped) pid 761 (csh), jid 0, uid 0: exited on signal 4 (core dumped) pid 770 (sh), jid 0, uid 0: exited on signal 4 (core dumped) pid 743 (getty), jid 0, uid 0: exited on signal 4 (core dumped) pid 335 (dhclient), jid 0, uid 0: exited on signal 4 (core dumped) pid 742 (getty), jid 0, uid 0: exited on signal 4 (core dumped) pid 736 (sh), jid 0, uid 0: exited on signal 4 (core dumped) pid 741 (getty), jid 0, uid 0: exited on signal 4 (core dumped) if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d20000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3800