// https://syzkaller.appspot.com/bug?id=1fcf27876ebb8a6449e650c45052331806010187 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #define do_sandbox_setuid() 0 #define do_sandbox_namespace() 0 #define setup_loop() #define reset_loop() #define setup_test() #define reset_test() void loop() { memcpy((void*)0x20000540, "./file0", 8); syscall(SYS_openat, -1, 0x20000540, 8, 0x40, 0x15); memcpy((void*)0x20000600, "./file2", 8); syscall(SYS_openat, -1, 0x20000600, 8, 0x40, 0x181); memcpy((void*)0x20000640, "./file2", 8); memcpy((void*)0x20000680, "./file0/file0", 14); syscall(SYS_rename, 0x20000640, 8, 0x20000680, 0xe); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }