// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\x0a\x08\xd3\x56\xf6\xdf\x7b\xae\x5b\x5e\x0a\xd8\x54\x5f\x48\x3f\x5d" "\x7f\x08\x6a\xea\xa7\xea\x63\x55\xdb\x4d\x8a\xcc\xc9\xa7\xf5\x4b\xf8" "\xb1\xe9\xe0\xe8\xde\xca\xc0\x6a\x7f\xd1\xe5\x99\xd2\xb0\x15\x6f\xae" "\xa7\xf3\x78\x84\x9c\x17\xf8\x38\x70\x36\xc1\xc4\xea\x51\x36\xa2\x8a" "\x48\x65\x8f\xe9\x35\x40\xf7\x69\x7e\xcd\xec\x35\x75\x7c\x8b\x1c\x6e" "\xec\x64\xc4\x03\x5d\xaf\xb4\x62\xd6\x22\x6b\xe1\x68\xe3\x40\xba\x5f" "\x25\xe1\x73\x43\xf9\xa1\x31\x5a\x57\x6b\x0c\xa3\x32\x9b\x32\xfe\xd9" "\x30\xfc\x0d\x6e\xd7\xe0\xbc\x9c\xc2\x2b\x14\x05\x70\x8b\x86\x38\x13" "\x1a\x8a\x59\x92\x05\x7e\x60\x72\xd5\x6c\x40\x01\x37\x8c\x0e\x4e\x66" "\xef\x1f\x52\x0f\xc6\x5b\x56\xce\xe0\xc6\x23\x5b\x77\xbd\xa0\x48\x0a" "\x10\x1a\x6d\xd8\xf9\xbb\x64\x52\x96\xcb\x3d\xe9\x09\xcb\x0a\x00\x26" "\xef\xa5\xa4\x53\x97\x62\x80\xa1\x5a\x50\x10\x7b\x88\x2e\x3f\x2f\xe5" "\xb3\x6a\x7d\x57\x05\xc9\x50\x6c\x53\x4f\x32\x01", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000140, "/dev/sysname", 13); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000140, 0xd, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }