// https://syzkaller.appspot.com/bug?id=fa38e58e871452fe6b7573ae26aa22b31abbe7ef // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0xf, 3, 2); if (res != -1) r[0] = res; memcpy((void*)0x20000140, "./file0", 8); syscall(__NR_mkdir, 0x20000140, 0); memcpy((void*)0x20000080, "./file0", 8); memcpy((void*)0x20026ff8, "./file0", 8); memcpy((void*)0x20000040, "ramfs", 6); syscall(__NR_mount, 0x20000080, 0x20026ff8, 0x20000040, 0, 0x2000a000); memcpy((void*)0x20000000, "./file0", 8); syscall(__NR_chdir, 0x20000000); memcpy((void*)0x200008c0, "./file0", 8); res = syscall(__NR_open, 0x200008c0, 0x20141042, 0); if (res != -1) r[1] = res; syscall(__NR_ftruncate, r[1], 0x10001); *(uint64_t*)0x20d83ff8 = 0; syscall(__NR_sendfile, r[0], r[1], 0x20d83ff8, 0x2008000fffffffe); syscall(__NR_socket, 0x10, 3, 0); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }