// https://syzkaller.appspot.com/bug?id=76e1ca0ed8893fcd1c960eb2d322809b83c90ac7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0x7000, 3, 0x32, -1, 0); memcpy((void*)0x20000000, "/dev/ion", 9); r[0] = syscall(__NR_openat, 0xffffffffffffff9c, 0x20000000, 0, 0); memcpy((void*)0x20002000, "./file0", 8); syscall(__NR_chown, 0x20002000, 0, 0); syscall(__NR_ioctl, r[0], 0xc0184908, 0x20002000); } int main() { loop(); return 0; }