// https://syzkaller.appspot.com/bug?id=a18dffaab644e1a6f8c7e85ff0e18b6293ba8af6 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include void loop() { memcpy((void*)0x20000300, "./file0", 8); syscall(__NR_mkdir, 0x20000300, 0); memcpy((void*)0x20000000, "", 1); memcpy((void*)0x20000040, "./file0", 8); memcpy((void*)0x200000c0, "9p", 3); memcpy((void*)0x20000100, "trans=unix,", 11); *(uint8_t*)0x2000010b = 0; syscall(__NR_mount, 0x20000000, 0x20000040, 0x200000c0, 0, 0x20000100); *(uint16_t*)0x20319ff0 = 2; *(uint16_t*)0x20319ff2 = htobe16(0x4e20); *(uint32_t*)0x20319ff4 = htobe32(0); *(uint8_t*)0x20319ff8 = 0; *(uint8_t*)0x20319ff9 = 0; *(uint8_t*)0x20319ffa = 0; *(uint8_t*)0x20319ffb = 0; *(uint8_t*)0x20319ffc = 0; *(uint8_t*)0x20319ffd = 0; *(uint8_t*)0x20319ffe = 0; *(uint8_t*)0x20319fff = 0; syscall(__NR_sendto, -1, 0x20e7c000, 0, 0x8084, 0x20319ff0, 0x10); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }