// https://syzkaller.appspot.com/bug?id=acc91fc5738dacbfaa1163219fc6bf0685224b60 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x200000c0, "/dev/ptmx\000", 10); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x200000c0ul, 0x102ul, 0ul); if (res != -1) r[0] = res; memcpy( (void*)0x20000140, "\xff\x44\x1a\xce\x52\xb7\x24\xd3\xcb\x8e\x86\xaa\x13\x5a\xd3\xf7\xfb\xed" "\x25\x72\xa1\xef\x57\xc0\x4b\x90\x23\xad\x51\xb8\x84\x38\xdc\x75\xeb\x93" "\xc0\x00\xdc\x80\x2d\x2d\xf7\x48\xb9\x06\xbf\x05\x5c\x77\x6c\x4f\x9f\x48" "\x80\xc1\x72\x5b\x1d\x15\x09\x55\xc2\x30\xd1\x32\x7b\xc5\x16\x3d\x3b\x5a" "\x34\x55\x27\x23\x08\xb3\x57\xfd\x99\xcf\x9d\x26\xd0\xeb\x72\x0d", 88); syscall(__NR_write, r[0], 0x20000140ul, 0x58ul); return 0; }