// https://syzkaller.appspot.com/bug?id=bda19bf6b14e7fddccf28ac6f0205c7df6d8c32e // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x1012ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x200001c0, "/dev/pf\000", 8); res = syscall(SYS_openat, 0xffffffffffffff9cul, 0x200001c0ul, 0x100ul, 0ul); if (res != -1) r[0] = res; memcpy((void*)0x20000240, "\xb4\x4e\x44\x77\xe2\xf2\xc7\x06\xb3\x3e\x42\x66\x51\x08\x48\xc3\x73" "\x51\xb7\x09\xc5\x5d\x87\x69\xc8\xb0\xb2\x9c\xd5\xf8\xc9\x31\x77\xfa" "\x58\xeb\x31\x5b\x8f\xb5\xd7\x84\x15\x45\x45\xcb\x18\x55\x05\x8b\x7b" "\x98\xbc\x4a\x91\x23\x80\xb2\xc1\x20\xd0\x93\x94\x88\x8f\xd4\x6c\xe5" "\x0e\x46\x34\x14\x98\x1b\x5b", 75); syscall(SYS_ioctl, r[0], 0xc0104419ul, 0x20000240ul); return 0; }