// https://syzkaller.appspot.com/bug?id=8fba766ebc0cb4586325380ed578c469fa92de44 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include long r[9]; void loop() { memset(r, -1, sizeof(r)); r[0] = syscall(__NR_mmap, 0x20000000ul, 0xfff000ul, 0x3ul, 0x32ul, 0xfffffffffffffffful, 0x0ul); memcpy((void*)0x20fedff7, "\x2f\x64\x65\x76\x2f\x6b\x76\x6d\x00", 9); r[2] = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20fedff7ul, 0x20000ul, 0x0ul); r[3] = syscall(__NR_ioctl, r[2], 0xae01ul, 0x0ul); r[4] = syscall(__NR_ioctl, r[3], 0xae60ul); r[5] = syscall(__NR_ioctl, r[3], 0xae41ul, 0x0ul); *(uint32_t*)0x20801ffc = (uint32_t)0x4; r[7] = syscall(__NR_ioctl, r[5], 0x4004ae99ul, 0x20801ffcul); r[8] = syscall(__NR_ioctl, r[5], 0xae80ul, 0x0ul); } int main() { loop(); return 0; }