// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\xe7\x3a\xd7\x42\x1d\x85\x16\x12\x36\x64\xd7\xc9\x9a\xe8\xea\x23\x3f" "\xb2\x50\x06\xcc\xc1\x0d\x7e\x87\x51\x13\xe8\x29\xde\x9d\x79\x84\xca" "\x0d\x05\xeb\xcf\xd2\x02\x01\x65\xd7\x42\x7c\xb2\xe4\xbb\x52\x54\x83" "\xf6\x6f\xba\xa1\xee\x0e\xe7\x86\xfa\x95\xd3\x7e\x48\xb7\x0d\xb0\x96" "\xc1\xc0\xee\x5d\xb5\x87\x57\x46\xe9\x79\x00\x73\x9b\x15\x23\x95\x0f" "\xe5\x56\x6a\x46\x2d\x16\xb2\x74\xb0\x62\xd5\xa9\x7a\x4a\x2e\x2b\xd9" "\x2c\x78\xa8\x6e\xc2\x1d\xb9\xd3\x6f\x01\x4b\x94\xd0\x45\x9a\xec\x35" "\xcc\x8e\xef\xdc\x73\x8b\x88\x27\x01\xa5\x82\x20\x87\xbf\xeb\x32\xbb" "\x52\x10\xc8\x58\xbc\x66\xfd\x57\xc8\x3f\x84\x11\xd9\xc2\x98\x96\x3f" "\x98\xeb\x2a\x76\xcf\xfb\xb4\x12\x42\x11\x61\xc4\xf8\x72\xa1\x8f\x40" "\xb8\x7c\xa3\x4d\x76\xbf\x2e\x90\xcd\x06\x2e\x5e\xd5\xd6\x45\x96\xb7" "\x31\x87\xbd\xc0\x3a\x8b\x8e\xe4\x00\xf9\x93\xef\x9d\x5d\xad\xbd\x89" "\x13\x89\x05\x87\xfa\xc0\xa7\xbd\xe3\x9c\x74\x4e", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000980, "/net/ipifc/1/err", 17); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000980, 0x11, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }