// https://syzkaller.appspot.com/bug?id=e28a8c9bccd8c58e7fe462274ca213b7eb52615e // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #ifndef __NR_memfd_create #define __NR_memfd_create 319 #endif uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); intptr_t res = 0; memcpy((void*)0x20000140, "system.posix_acl_access\000", 24); res = syscall(__NR_memfd_create, 0x20000140, 3); if (res != -1) r[0] = res; *(uint32_t*)0x20000c40 = -1; syscall(__NR_write, r[0], 0x20000c40, 0xff67); syscall(__NR_fcntl, r[0], 0x409, 8); return 0; }