// https://syzkaller.appspot.com/bug?id=28bc35dd6f026b2878e30804670f6f0c39932f16 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xbb6000, 3, 0x32, -1, 0); *(uint32_t*)0x2015cffc = 0xd9df; syscall(__NR_setsockopt, -1, 1, 0x10, 0x2015cffc, 4); syscall(__NR_sendto, -1, 0x20ba4fc2, 0, 0, 0x20000000, 0); memcpy((void*)0x2094c000, "/dev/sequencer2", 16); r[0] = syscall(__NR_openat, 0xffffffffffffff9c, 0x2094c000, 1, 0); *(uint16_t*)0x20bb5000 = 4; *(uint16_t*)0x20bb5002 = htobe16(5); *(uint32_t*)0x20bb5004 = htobe32(0xfffff801); memcpy((void*)0x20bb5008, "\x84\xe8\xbe\xef\xd9\x32", 6); *(uint8_t*)0x20bb500e = 1; *(uint8_t*)0x20bb500f = 0; syscall(__NR_bind, r[0], 0x20bb5000, 0x10); } int main() { loop(); return 0; }