// https://syzkaller.appspot.com/bug?id=5354f1d031a05ad221d00f040e18dc90a2ffd180 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x32ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x20000040, "/dev/ashmem\000", 12); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000040ul, 0ul, 0ul); if (res != -1) r[0] = res; syscall(__NR_ioctl, r[0], 0x40087703, 0xfffffffeul); syscall(__NR_mmap, 0x20701000ul, 0x1000ul, 0ul, 0x12ul, r[0], 0ul); memcpy((void*)0x20000080, "\000\000\000\001\000\000\000\005\000x\222\022\274\006^" "\276wV\363\263\244e\373\305}\234\"\304\004\273\00642\234\032\321\313{" "\260\326\036@}" "\'\251\236\337\f\273\214\301\306\273\305\034\367\257\225\203=" "\t7\226\032\255\320\320\356\234\2262\bu\272\374\256\302\031\353\221" "\311\t\274\301\313\272\343\216\366\211\302\'\337n(Q=v-<\r\321?$" "\213\027Bn\027h\033\254\374\202\034\364\320\365\325\200\300\264a " "\025\232\237\360:\375$\255\273\232|" "b\342\377\356\304\223Q\202\026\277\343c\215 " "\017\261\351\335oci(\313\202\005\376[" "H\257\001\030\310\033\036\276\330>\354\237~" "\247\367\257dd\361\333jE\001\321sD\211\224&\\U\f\030\231]" "\253a\3513\001\2423\311hP1\334-\'\320\236}\211\377\214", 217); syscall(__NR_ioctl, r[0], 0x40087708, 0x20000080ul); syscall(__NR_ioctl, r[0], 0x770a, 0ul); return 0; }