// https://syzkaller.appspot.com/bug?id=7393e83fa3b6e20eb1c40e028ed24dce5c230580 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); memcpy((void*)0x20000180, "./file0", 8); memcpy((void*)0x200001c0, "./file0", 8); syscall(SYS_symlink, 0x20000180, 8, 0x200001c0, 8); *(uint64_t*)0x20000280 = 0x20000200; memcpy((void*)0x20000200, "\xaa\xb3\xdc\x43\xb7\xfa\xc1\x11\xc9\xb1\x02\x93\xad\x1c\x07\x4c\x66" "\xea\x46\xf3\xb5\xe9\x30\xd6\xbc\x9d\xe4\x87\x8c\x38\x4b\x37\x49\x6c" "\x1a\xbc\x08\xba\x48\xdd\xbd\x99\xde\x77\xf4\x78\x0d\x8e\x31\x0a\xab" "\xe5\x63\xba\x9f\xf3\xd2\xf9\xb2\x45\x84\xf8\x34\x91\x55\x6a\xa9\xc6" "\xe9\x0e\x7d\x0a\x92\xcc\xa4\x00\x8c\x03\x27\x9d", 80); *(uint32_t*)0x20000288 = 0x1ff; *(uint8_t*)0x2000028c = 0; *(uint32_t*)0x20000290 = 0xfff; *(uint64_t*)0x20000298 = 5; *(uint64_t*)0x200002a0 = 3; *(uint16_t*)0x20000300 = 1; *(uint16_t*)0x20000302 = 0; *(uint32_t*)0x20000304 = 0x1ff; *(uint64_t*)0x20000308 = 0x200002c0; *(uint64_t*)0x20000310 = 0x4e3; syscall(SYS_send_event, 0x20000280, 0x20000300, 1); memcpy((void*)0x20000380, "/net/tcp/2/listen", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000380, 0x12, 3, 0); syscall(SYS_cache_invalidate); syscall(SYS_fcntl, -1, 4, 0x100800); memcpy((void*)0x20000400, "./file0", 8); syscall(SYS_wstat, 0x20000400, 8, 0x20000440, 0x2e, 0); memcpy((void*)0x20000480, "/net/ether0/0/ifstats", 22); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000480, 0x16, 1, 0); syscall(SYS_change_to_m); memcpy((void*)0x20000500, "/net/ether0/0/ifstats", 22); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000500, 0x16, 1, 0); memcpy((void*)0x20000580, "/net/ipifc/1/status", 20); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000580, 0x14, 1, 0); syscall(SYS_mmap, 0x20ffc000, 0x3000, 0x1000004, 0x10, -1, 0xd692d26); memcpy((void*)0x200005c0, "/proc/self/maps", 16); syscall(SYS_openat, 0xffffffffffffff9c, 0x200005c0, 0x10, 1, 0); memcpy((void*)0x20000640, "/prof/.empty", 13); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000640, 0xd, 3, 0); memcpy((void*)0x200006c0, "/proc/self/strace_traceset", 27); syscall(SYS_openat, 0xffffffffffffff9c, 0x200006c0, 0x1b, 3, 0); memcpy((void*)0x20000700, "/proc/self/proc", 16); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000700, 0x10, 1, 0); memcpy((void*)0x20000740, "/net/udp/stats", 15); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000740, 0xf, 1, 0); memcpy((void*)0x20000780, "/net/udp/0/ctl", 15); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000780, 0xf, 3, 0); memcpy((void*)0x200007c0, "/prof/kpctl", 12); syscall(SYS_openat, 0xffffffffffffff9c, 0x200007c0, 0xc, 3, 0); memcpy((void*)0x20000840, "/dev/zero", 10); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000840, 0xa, 1, 0); memcpy((void*)0x20000880, "/net/tcp/0/remote", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000880, 0x12, 1, 0); memcpy((void*)0x200008c0, "/net/tcp/1/remote", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x200008c0, 0x12, 1, 0); return 0; }