// https://syzkaller.appspot.com/bug?id=c7fd949e1dcb317375d8c795cbb5965420e0c12d // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); long res = 0; memcpy((void*)0x20000040, "\x2f\x02\x72\x6f\x75\x70\x2e\x73\x74\x61\x70\x00", 12); res = syscall(__NR_openat, -1, 0x20000040, 0x2761, 0); if (res != -1) r[0] = res; res = syscall(__NR_openat, -1, 0x20000040, 2, 0); if (res != -1) r[1] = res; syscall(__NR_ioctl, r[1], 0x6611); *(uint8_t*)0x20000440 = 0x7f; *(uint8_t*)0x20000441 = 3; *(uint8_t*)0x20000442 = 0; *(uint8_t*)0x20000443 = 0; *(uint8_t*)0x20000444 = 5; *(uint8_t*)0x20000445 = -1; *(uint8_t*)0x20000446 = 2; *(uint8_t*)0x20000447 = -1; *(uint8_t*)0x20000448 = 3; *(uint8_t*)0x20000449 = 1; *(uint8_t*)0x2000044a = -1; syscall(__NR_setsockopt, r[0], 0x84, 0xb, 0x20000440, 0xb); return 0; }