=== Kernel headers ===
a.out.h
acct.h
acrn.h
adb.h
adfs_fs.h
affs_hardblocks.h
agpgart.h
aio_abi.h
am437x-vpfe.h
android
apm_bios.h
arcfb.h
arm_sdei.h
aspeed-lpc-ctrl.h
aspeed-p2a-ctrl.h
atalk.h
atm.h
atm_eni.h
atm_he.h
atm_idt77105.h
===
a.out.h
amd_hsmp.h
auxvec.h
bitsperlong.h
boot.h
===
auxvec.h
bitsperlong.h
bpf_perf_event.h
errno-base.h
errno.h

=== Check /var/.cagefs structures ===
total 16
drwxr-xr-x  2 root       root 4096 Sep 23  2024 .
drwxr-xr-x 11 root       root 4096 Mar 19 15:48 ..
-r--------  1 u610527261 root   16 Sep 23  2024 .cagefs.token
===

=== Try to find real filesystem path ===

=== Write minimal exploit (no stdlib) ===

=== Compile with kernel headers only ===
min.c: In function '_start':
min.c:56:16: error: too few arguments to function 'syscall2'
   56 |     long ret = syscall2(SYS_unshare, CLONE_NEWUSER);
      |                ^~~~~~~~
min.c:39:13: note: declared here
   39 | static long syscall2(long n, long a1, long a2) {
      |             ^~~~~~~~
Compile: 1
/dev/shm/min: cannot open `/dev/shm/min' (No such file or directory)

=== DONE ===