Extracting prog: 24.965873728s Minimizing prog: 6m8.477815138s Simplifying prog options: 0s Extracting C: 11.214909189s Simplifying C: 1m12.291247776s 24 programs, timeouts [15s 1m40s 6m0s] extracting reproducer from 24 programs single: executing 4 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$fuse-openat$fuse-mount$fuse-inotify_init1-inotify_add_watch-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0/../file0\x00', 0x10000122) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] single: successfully extracted reproducer found reproducer with 7 syscalls minimizing guilty program testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$fuse-openat$fuse-mount$fuse-inotify_init1-inotify_add_watch-read$FUSE detailed listing: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0/../file0\x00', 0x10000122) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$fuse-openat$fuse-mount$fuse-inotify_init1-inotify_add_watch-write$FUSE_DIRENT detailed listing: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0/../file0\x00', 0x10000122) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$fuse-openat$fuse-mount$fuse-inotify_init1-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) inotify_init1(0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$fuse-openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$fuse-openat$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64, @ANYBLOB="0000000000000000000000000000000001000000000000002100000000000000"], 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, 0x0, 0x30) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB], 0x30) program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r1, @ANYBLOB], 0x30) program did not crash extracting C reproducer testing compiled C program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] simplifying C reproducer testing compiled C program (duration=22.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mount$fuse-read$FUSE-write$FUSE_DIRENT program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] reproducing took 7m56.949861092s repro crashed as (corrupted=false): panic: runtime error: slice bounds out of range [16:0] goroutine 179 gp=0xc000197340 m=21 mp=0xc000880008 [running]: panic({0x1c08980?, 0xc000810078?}) GOROOT/src/runtime/panic.go:779 +0x158 fp=0xc0001deb98 sp=0xc0001deae8 pc=0x43ed58 runtime.goPanicSliceB(0x10, 0x0) GOROOT/src/runtime/panic.go:154 +0x7c fp=0xc0001debd8 sp=0xc0001deb98 pc=0x43db7c gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*Response).UnmarshalPayload(0xc0001dee40, {0x2050c80, 0xc000264050}) pkg/sentry/fsimpl/fuse/request_response.go:225 +0x257 fp=0xc0001dec50 sp=0xc0001debd8 pc=0x15e0e17 gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*connection).InitRecv(0xc0002ad0a0, 0xc0001dee40, 0x1) pkg/sentry/fsimpl/fuse/connection_control.go:107 +0x19b fp=0xc0001ded10 sp=0xc0001dec50 pc=0x15c72db gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).asyncCallBack(0xc0001e00e0, {0x2054c58, 0xc00037ea88}, 0xc0001dee40) pkg/sentry/fsimpl/fuse/dev.go:369 +0x1fd fp=0xc0001ded78 sp=0xc0001ded10 pc=0x15cb21d gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).sendResponse(0xc0001e00e0, {0x2054c58, 0xc00037ea88}, 0xc0006c10c0) pkg/sentry/fsimpl/fuse/dev.go:332 +0x2f4 fp=0xc0001dee90 sp=0xc0001ded78 pc=0x15cac34 gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).Write(0xc0001e00e0, {0x2054c58, 0xc00037ea88}, {{0x204d058, 0xc0009bb008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, ...}}, ...) pkg/sentry/fsimpl/fuse/dev.go:256 +0x790 fp=0xc0001df0d8 sp=0xc0001dee90 pc=0x15c9db0 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc0001e00e0, {0x2054c58, 0xc00037ea88}, {{0x204d058, 0xc0009bb008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, ...}}, ...) pkg/sentry/vfs/file_description.go:679 +0x119 fp=0xc0001df1a8 sp=0xc0001df0d8 pc=0xa96459 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc00037ea88, 0xc0001e00e0, {{0x204d058, 0xc0009bb008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, 0x1}}, ...) pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x91 fp=0xc0001df3a0 sp=0xc0001df1a8 pc=0x1174691 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc00037ea88, 0x44af6d?, {{0x3}, {0x200001c0}, {0x30}, {0x7f567f010e78}, {0x7f567f010e78}, {0x7f567f010e78}}) pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x2b2 fp=0xc0001df4f0 sp=0xc0001df3a0 pc=0x11732f2 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc00037ea88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x7f567f010e78}, {0x7f567f010e78}, {0x7f567f010e78}}) pkg/sentry/kernel/task_syscall.go:143 +0x995 fp=0xc0001df938 sp=0xc0001df4f0 pc=0xee5535 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc00037ea88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x7f567f010e78}, {0x7f567f010e78}, {0x7f567f010e78}}) pkg/sentry/kernel/task_syscall.go:323 +0x72 fp=0xc0001df9e0 sp=0xc0001df938 pc=0xee7392 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00037ea88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x7f567f010e78}, {0x7f567f010e78}, {0x7f567f010e78}}) pkg/sentry/kernel/task_syscall.go:283 +0x94 fp=0xc0001dfa50 sp=0xc0001df9e0 pc=0xee6d94 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc00037ea88) pkg/sentry/kernel/task_syscall.go:258 +0x4b0 fp=0xc0001dfb80 sp=0xc0001dfa50 pc=0xee6930 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00037ea88?, 0xc00037ea88) pkg/sentry/kernel/task_run.go:263 +0x1fee fp=0xc0001dfe98 sp=0xc0001dfb80 pc=0xed002e gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc00037ea88, 0x7) pkg/sentry/kernel/task_run.go:98 +0x46d fp=0xc0001dffb0 sp=0xc0001dfe98 pc=0xecd6ad gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:393 +0x45 fp=0xc0001dffe0 sp=0xc0001dffb0 pc=0xee2f05 runtime.goexit({}) src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0001dffe8 sp=0xc0001dffe0 pc=0x47d301 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 165 pkg/sentry/kernel/task_start.go:393 +0x1ae final repro crashed as (corrupted=false): panic: runtime error: slice bounds out of range [16:0] goroutine 179 gp=0xc000197340 m=21 mp=0xc000880008 [running]: panic({0x1c08980?, 0xc000810078?}) GOROOT/src/runtime/panic.go:779 +0x158 fp=0xc0001deb98 sp=0xc0001deae8 pc=0x43ed58 runtime.goPanicSliceB(0x10, 0x0) GOROOT/src/runtime/panic.go:154 +0x7c fp=0xc0001debd8 sp=0xc0001deb98 pc=0x43db7c gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*Response).UnmarshalPayload(0xc0001dee40, {0x2050c80, 0xc000264050}) pkg/sentry/fsimpl/fuse/request_response.go:225 +0x257 fp=0xc0001dec50 sp=0xc0001debd8 pc=0x15e0e17 gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*connection).InitRecv(0xc0002ad0a0, 0xc0001dee40, 0x1) pkg/sentry/fsimpl/fuse/connection_control.go:107 +0x19b fp=0xc0001ded10 sp=0xc0001dec50 pc=0x15c72db gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).asyncCallBack(0xc0001e00e0, {0x2054c58, 0xc00037ea88}, 0xc0001dee40) pkg/sentry/fsimpl/fuse/dev.go:369 +0x1fd fp=0xc0001ded78 sp=0xc0001ded10 pc=0x15cb21d gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).sendResponse(0xc0001e00e0, {0x2054c58, 0xc00037ea88}, 0xc0006c10c0) pkg/sentry/fsimpl/fuse/dev.go:332 +0x2f4 fp=0xc0001dee90 sp=0xc0001ded78 pc=0x15cac34 gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).Write(0xc0001e00e0, {0x2054c58, 0xc00037ea88}, {{0x204d058, 0xc0009bb008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, ...}}, ...) pkg/sentry/fsimpl/fuse/dev.go:256 +0x790 fp=0xc0001df0d8 sp=0xc0001dee90 pc=0x15c9db0 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc0001e00e0, {0x2054c58, 0xc00037ea88}, {{0x204d058, 0xc0009bb008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, ...}}, ...) pkg/sentry/vfs/file_description.go:679 +0x119 fp=0xc0001df1a8 sp=0xc0001df0d8 pc=0xa96459 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc00037ea88, 0xc0001e00e0, {{0x204d058, 0xc0009bb008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, 0x1}}, ...) pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x91 fp=0xc0001df3a0 sp=0xc0001df1a8 pc=0x1174691 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc00037ea88, 0x44af6d?, {{0x3}, {0x200001c0}, {0x30}, {0x7f567f010e78}, {0x7f567f010e78}, {0x7f567f010e78}}) pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x2b2 fp=0xc0001df4f0 sp=0xc0001df3a0 pc=0x11732f2 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc00037ea88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x7f567f010e78}, {0x7f567f010e78}, {0x7f567f010e78}}) pkg/sentry/kernel/task_syscall.go:143 +0x995 fp=0xc0001df938 sp=0xc0001df4f0 pc=0xee5535 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc00037ea88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x7f567f010e78}, {0x7f567f010e78}, {0x7f567f010e78}}) pkg/sentry/kernel/task_syscall.go:323 +0x72 fp=0xc0001df9e0 sp=0xc0001df938 pc=0xee7392 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00037ea88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x7f567f010e78}, {0x7f567f010e78}, {0x7f567f010e78}}) pkg/sentry/kernel/task_syscall.go:283 +0x94 fp=0xc0001dfa50 sp=0xc0001df9e0 pc=0xee6d94 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc00037ea88) pkg/sentry/kernel/task_syscall.go:258 +0x4b0 fp=0xc0001dfb80 sp=0xc0001dfa50 pc=0xee6930 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00037ea88?, 0xc00037ea88) pkg/sentry/kernel/task_run.go:263 +0x1fee fp=0xc0001dfe98 sp=0xc0001dfb80 pc=0xed002e gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc00037ea88, 0x7) pkg/sentry/kernel/task_run.go:98 +0x46d fp=0xc0001dffb0 sp=0xc0001dfe98 pc=0xecd6ad gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:393 +0x45 fp=0xc0001dffe0 sp=0xc0001dffb0 pc=0xee2f05 runtime.goexit({}) src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0001dffe8 sp=0xc0001dffe0 pc=0x47d301 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 165 pkg/sentry/kernel/task_start.go:393 +0x1ae