syzbot


panic: sandbox escaping file name "../file0", Files are map[../file0:true]

Status: closed as invalid on 2018/11/25 21:51
Reported-by: syzbot+feab84fa35af2ad0807f@syzkaller.appspotmail.com
First crash: 2188d, last: 2188d

Sample crash report:
panic: sandbox escaping file name "../file0", Files are map[../file0:true]

goroutine 16 [running]:
github.com/google/syzkaller/prog.(*randGen).filename(0xc000710c00, 0xc00071cc80, 0xbf4c40, 0xc000220a80, 0xc0007c3fd8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:161 +0x2e3
github.com/google/syzkaller/prog.(*BufferType).generate(0xbf4c40, 0xc000710c00, 0xc00071cc80, 0xc00091e000, 0xb759778146d03a0, 0xc0009379e8, 0x4f0c53, 0xc0007bb740)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:646 +0x4fc
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc000710c00, 0xc00071cc80, 0x8fd620, 0xbf4c40, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:581 +0x1b6
github.com/google/syzkaller/prog.(*randGen).generateArg(0xc000710c00, 0xc00071cc80, 0x8fd620, 0xbf4c40, 0xaaaaaaaaaaaaaaaa, 0x38, 0x7437e2, 0x87a299, 0x3)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:530 +0x52
github.com/google/syzkaller/prog.(*PtrType).generate(0xbd1840, 0xc000710c00, 0xc00071cc80, 0x40b7ff, 0xc000710ca0, 0x20, 0x20, 0x8115a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:729 +0x84
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc000710c00, 0xc00071cc80, 0x8fda80, 0xbd1840, 0xc000937b00, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:581 +0x1b6
github.com/google/syzkaller/prog.(*randGen).generateArg(0xc000710c00, 0xc00071cc80, 0x8fda80, 0xbd1840, 0x2, 0x2, 0x0, 0x203000, 0xc000937ce8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:530 +0x52
github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc000710c00, 0xc00071cc80, 0xbc6800, 0x2, 0x2, 0xa16be8c1fbfc2161, 0xc000937db0, 0x72beae, 0x7f3580, 0xc0007bab70, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:518 +0x11d
github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc000710c00, 0xc00071cc80, 0xbdd2a0, 0x69, 0xc00071cc80, 0xc0007cc540)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:462 +0xd1
github.com/google/syzkaller/prog.(*randGen).generateCall(0xc000710c00, 0xc00071cc80, 0xc00071cc00, 0xc00071cc80, 0xc000937e48, 0x731217)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:454 +0xa4
github.com/google/syzkaller/prog.(*mutator).insertCall(0xc000937ed0, 0x14)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:118 +0xcb
github.com/google/syzkaller/prog.(*Prog).Mutate(0xc00071cc00, 0x8f8680, 0xc0007bb740, 0x1e, 0xc0007aabc0, 0xc000728000, 0xa2e, 0xc00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:32 +0x299
main.(*Proc).loop(0xc0007aac00)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:99 +0x446created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:236 +0xfe2
lluvm_fault(0xffffff007f12c840, 0xd8, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      killjobc+0x39:  cmpq    %r13,0xd8(%r12)

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/11/25 21:32 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:31 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:31 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:29 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:28 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:26 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:23 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:12 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:09 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:06 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
2018/11/25 21:06 openbsd 03d6ed1c9def 38915edf console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.