panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true]

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: 03d6ed1c9def Remove (unused) FS_BOOT training wheels. If y..
git tree: https://github.com/openbsd/src.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=163f377b400000
dashboard link: https://syzkaller.appspot.com/bug?extid=5a187e6cc253995c728c
compiler:

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+5a187e...@syzkaller.appspotmail.com

panic: sandbox escaping file name "../file0/file0", Files are
map[./file0:true ../file0:true]

goroutine 24 [running]:
github.com/google/syzkaller/prog.(*randGen).filename(0xc000297140,
0xc00042dd00, 0xbf69a0, 0x0, 0x0)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:161 +0x2e3
github.com/google/syzkaller/prog.(*BufferType).mutate(0xbf69a0,
0xc000297140, 0xc00042dd00, 0x8faa00, 0xc000398de0, 0xc00042d788,
0xc000398db0, 0x0, 0xc000398e00, 0x2399c8add82fefab, ...)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:264
+0x533
github.com/google/syzkaller/prog.(*Target).mutateArg(0xc0000731e0,
0xc000297140, 0xc00042dd00, 0x8faa00, 0xc000398de0, 0xc00042d788,
0xc000398db0, 0x0, 0x4f0f00, 0xc00027fe0f, ...)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:172
+0xe3
github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc00027fed0, 0xa)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:153
+0x231
github.com/google/syzkaller/prog.(*Prog).Mutate(0xc00042d680, 0x8f8680,
0xc00026bbf0, 0x1e, 0xc000276d00, 0xc000275000, 0x110, 0x200)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:34
+0x2db
main.(*Proc).loop(0xc000276d80)
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:99
+0x446created by main.main
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:236
+0xfe2
login:


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with
syzbot.

[black...@gmail.com]

#syz invalid

[syzbot]

> #syz invalid

Can't find the corresponding bug.


> --
> You received this message because you are subscribed to the Google
> Groups "syzkaller-openbsd-bugs" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to syzkaller-openbsd...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/syzkaller-openbsd-bugs/c2d7afb5-bdaa-4c4a-90ef-3f0ab67406a1%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[syzbot]

> #syz invalid

Your 'invalid' command is accepted, but please keep
syzkaller-o...@googlegroups.com mailing list in CC next time. It
serves as a history of what happened with each bug report. Thank you.

> Maybe reply-all works better?