// https://syzkaller.appspot.com/bug?id=77d71b927fdbb036e6c8c044b1c7bccc9b8db877 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include static void execute_one(); void loop() { while (1) { execute_one(); } } uint64_t r[1] = {0xffffffffffffffff}; void execute_one() { long res = 0; memcpy((void*)0x200002c0, "/prof/kpctl", 12); syscall(SYS_openat, 0xffffffffffffff9c, 0x200002c0, 0xc, 3, 0); memcpy((void*)0x20000840, "/proc/self/ns", 14); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000840, 0xe, 1, 0); memcpy((void*)0x20000000, "/net/iproute", 13); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000000, 0xd, 3, 0); memcpy((void*)0x20000080, "/net/ether0/2/type", 19); res = syscall(SYS_openat, 0xffffffffffffff9c, 0x20000080, 0x13, 1, 0); if (res != -1) r[0] = res; memcpy((void*)0x20000140, "/net/tcp/2/remote", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000140, 0x12, 1, 0); syscall(SYS_fd2path, r[0], 0x20000180, 0x6a); memcpy((void*)0x20000280, "/dev/drivers", 13); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000280, 0xd, 1, 0); memcpy((void*)0x200002c0, "/net/udp/stats", 15); syscall(SYS_openat, 0xffffffffffffff9c, 0x200002c0, 0xf, 1, 0); memcpy((void*)0x20000300, "/proc/self/fpregs", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000300, 0x12, 1, 0); memcpy((void*)0x20000340, "/dev/sysstat", 13); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000340, 0xd, 3, 0); memcpy((void*)0x20000400, "/dev/kmesg", 11); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000400, 0xb, 1, 0); memcpy((void*)0x20000480, "/proc/self/fd", 14); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000480, 0xe, 1, 0); syscall(SYS_read, -1, 0x200004c0, 0x16); memcpy((void*)0x20000500, "/net/ether0/1/type", 19); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000500, 0x13, 1, 0); memcpy((void*)0x20000540, "/dev/time", 10); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000540, 0xa, 3, 0); memcpy((void*)0x20000580, "/net/ipifc/0/remote", 20); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000580, 0x14, 1, 0); memcpy((void*)0x200005c0, "/net/tcp/0/err", 15); syscall(SYS_openat, 0xffffffffffffff9c, 0x200005c0, 0xf, 3, 0); memcpy((void*)0x20000600, "/net/icmp/stats", 16); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000600, 0x10, 1, 0); memcpy((void*)0x20000640, "/net/ipifc/0/ctl", 17); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000640, 0x11, 3, 0); syscall(SYS_fcntl, -1, 4, 0x88000); memcpy((void*)0x200006c0, "/net/ether0/1/ifstats", 22); syscall(SYS_openat, 0xffffffffffffff9c, 0x200006c0, 0x16, 1, 0); memcpy((void*)0x20000700, "/dev/killkid", 13); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000700, 0xd, 3, 0); syscall(SYS_fcntl, -1, 1); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (;;) { loop(); } }