// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\x8a\x11\x4f\x78\x87\xa3\xde\x1b\xa3\xfb\x73\x8e\x79\xe3\x15\xfd\x34" "\xac\x7e\xa3\x2a\x4e\x9e\x54\x91\x04\x36\xee\x90\x45\xa8\xd8\x14\x86" "\xbc\xe0\xe5\xa6\xd6\x79\x82\x70\xa8\x2a\x61\x91\x83\xbb\x40\x8e\xca" "\x65\x0a\xcf\xa2\xd2\xe8\x88\x15\xc0\x3a\xd9\x90\x34\xaa\x25\xb3\xc6" "\x4e\x20\x5b\xd1\x46\x4b\xdd\xa9\x8c\x87\xe4\x8d\x8f\xb3\x4c\x8d\xf7" "\x7e\xec\xbf\x88\x02\x4b\xfe\x87\x41\x52\xe8\x6b\xf7\x91\x9f\x3a\x30" "\x6a\xa8\x34\x39\x21\x9a\x19\xc6\x77\xdf\x88\x41\x2c\x09\x30\xd0\x33" "\xb6\x94\x6d\x66\xcd\x75\xe1\xae\x3b\x7c\xbb\xa3\xc1\xf2\x40\x04\x39" "\xd3\x7b\xb3\xff\x3a\x39\x5f\x88\xf1\x2a\xd8\xff\x7f\x4d\x7f\xe4\x96" "\x14\x8c\x34\xc1\xdb\xe9\xc3\xda\x11\x56\x0f\x6d\xad\x9e\xf9\x6e\x93" "\xe7\xaa\x70\xe9\xb9\x32\x45\xe4\x85\x65\x77\xc2\xee\xeb\x03\xcc\xa4" "\xf7\xf4\x0e\xd6\xd3\xc7\xb2\x42\x76\xe7\xf4\x8e\x11\xd3\x29\xb0\xa2" "\x2b\xae\xe3\x12\x04\xa7\x76\x2b\x1d\x62\x61\x3f", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000740, "/proc/self/args", 16); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000740, 0x10, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }