// https://syzkaller.appspot.com/bug?id=d204aaca3ac260c553e053c566b529f350ea6454 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void execute_one(); extern unsigned long long procid; void loop() { while (1) { execute_one(); } } uint64_t r[1] = {0xffffffffffffffff}; void execute_one() { long res = 0; memcpy((void*)0x20ae8ff8, "./file0", 8); res = syscall(__NR_open, 0x20ae8ff8, 0x14104a, 0); if (res != -1) r[0] = res; *(uint64_t*)0x20037fe8 = 0; *(uint64_t*)0x20037ff0 = 0; *(uint16_t*)0x20037ff8 = 1; *(uint16_t*)0x20037ffa = 0x74; *(uint32_t*)0x20037ffc = 2; syscall(__NR_write, r[0], 0x20037fe8, 0x18); *(uint64_t*)0x200000c0 = 0; syscall(__NR_sendfile, r[0], r[0], 0x200000c0, 0x752d); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (;;) { loop(); } }