// https://syzkaller.appspot.com/bug?id=289b942d955c9d469f3e251319e068748f807e58 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); memcpy((void*)0x20000000, "./file0\000", 8); memcpy((void*)0x20000040, "fuse\000", 5); memcpy((void*)0x20000140, "fd", 2); *(uint8_t*)0x20000142 = 0x3d; sprintf((char*)0x20000143, "0x%016llx", (long long)-1); *(uint8_t*)0x20000155 = 0x2c; memcpy((void*)0x20000156, "rootmode", 8); *(uint8_t*)0x2000015e = 0x3d; sprintf((char*)0x2000015f, "%023llo", (long long)0x807a); *(uint8_t*)0x20000176 = 0x2c; memcpy((void*)0x20000177, "user_id", 7); *(uint8_t*)0x2000017e = 0x3d; sprintf((char*)0x2000017f, "%020llu", (long long)0); *(uint8_t*)0x20000193 = 0x2c; memcpy((void*)0x20000194, "group_id", 8); *(uint8_t*)0x2000019c = 0x3d; sprintf((char*)0x2000019d, "%020llu", (long long)0); *(uint8_t*)0x200001b1 = 0x2c; *(uint8_t*)0x200001b2 = 0; syscall(__NR_mount, 0x20000008ul, 0x20000000ul, 0x20000040ul, 0ul, 0x20000140ul); return 0; }