// https://syzkaller.appspot.com/bug?id=f9a20e98d57a009e0e8c52ac343dfd7ac828c7e4 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void execute_one(); extern unsigned long long procid; void loop() { while (1) { execute_one(); } } uint64_t r[1] = {0xffffffffffffffff}; unsigned long long procid; void execute_one() { long res = 0; memcpy((void*)0x20000480, "/dev/ptmx", 10); res = syscall(__NR_openat, 0xffffffffffffff9c, 0x20000480, 0x10000000000001, 0); if (res != -1) r[0] = res; syscall(__NR_write, r[0], 0x20c34fff, 0xffffff0b); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (procid = 0; procid < 4; procid++) { if (fork() == 0) { for (;;) { loop(); } } } sleep(1000000); return 0; }