// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x200002c0, "\x8e\xdc\xdb\x66\xeb\x08\xc2\xcb\x84\x9a\x01\xf1\x41\xfd\x0c\x42\x5e" "\xf7\xdb\x9a\xf5\x30\x29\x14\xc6\xd1\x71\xc4\x24\x9a\x83\x7e\xcd\x1e" "\xa8\x8c\x3f\x1e\xd0\x5e\x03\xd0\x22\xad\x1f\xe1\x8f\x84\xeb\x86\x86" "\x08\xf7\x14\x4a\xfb\xfd\x22\x18\x86\x84\x9e\xb9\x57\xba\xf3\x9a\xdc" "\xe3\x0c\x98\x5b\x19\xbc\xd6\xf4\x47\x3d\xdf\x8a\xeb\xf7\xa2\x0e\xab" "\xdc\xad\x30\x81\xcf\x2e\x81\x4e\x2f\x6d\x50\x85\x49\xce\x4a\xc4\x81" "\x82\xef\x2e\x1d\xa6\x39\xe1\x0a\xe8\xa6\xaf\xe6\xff\x01\x0a\x7c\x97" "\xd8\xe3\xeb\xa9\x4e\x2a\xd3\x09\x36\x2e\xa0\xdd\x9e\x73\x06\x1d\x15" "\x53\x51\x31\xdb\x5f\x86\x8e\x52\x9c\x30\x4c\xda\x23\xd3\x74\x49\x0c" "\xc1\x5a\xad\xc7\xe6\xd1\x67\x51\x39\x71\x8c\x85\x0c\x0e\x84\xd4\xbe" "\xcf\xcb\x37\xde\xe9\x87\xbd\xb0\x08\x4b\x96\xc3\xb7\x1d\xe6\x02\x64" "\xdd\x1b\xd9\xc0\xf9\xe3\x4a\x82\x89\x03\xd6\x18\x57\xa5\xb4\x19\x75" "\xde\x06\x51\x39\xd1\x47\xe4\xdb\x03\x87\xdf\x40", 216); syscall(SYS_pop_ctx, 0x200002c0); memcpy((void*)0x20000680, "/net/ipifc/1/data", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000680, 0x12, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }