// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\xac\xf8\xb7\x05\xeb\x52\xc2\x50\xe7\xce\x0f\x21\x9f\x5c\x02\x6c\x57" "\xf8\x11\x07\xa1\x8a\x18\xc4\xe4\x27\xbb\x7e\x8f\xe4\x1a\x73\x11\xc7" "\x21\xea\xf5\xb7\x55\x6b\x1a\x5f\x8b\xc1\xdc\x2f\x47\x85\x1a\x67\x76" "\x48\x6f\xb5\x92\x44\x84\xc4\xc9\x12\xa1\xf0\x68\xfa\x57\xd6\x4c\xf9" "\x7b\x21\xac\xb0\xf5\x0a\xbe\x38\x09\xda\x3d\x93\xa1\x40\x72\x52\x65" "\x85\x84\x37\x4d\xe5\xcc\x24\xa8\x8a\x74\x3e\x67\x64\xa2\x33\xd1\x1a" "\xd6\x98\x58\x28\xfe\xf2\xee\xee\x08\x3e\xea\xb7\x20\xc3\x22\xac\x1e" "\x25\xc4\x48\xf9\xee\x2f\x39\x1b\x10\xe4\x9a\x5e\x95\x16\xb6\xc8\x99" "\xaa\x5b\x83\x23\x0f\xda\xee\xc8\x1d\x7b\x9f\xb1\xd1\xd0\x35\x68\xb2" "\x91\xfe\xdc\x40\x5e\x48\xf5\x58\x2f\xfd\x55\xba\xba\x2f\x91\xe3\x43" "\x78\x40\xae\x7f\x3f\x00\x24\x0f\xb3\x5d\xaf\xc7\x09\x03\xea\x63\x86" "\x24\x6b\xa1\x54\x71\xfc\x01\xe5\x41\x52\x87\xde\xc3\xe9\xe7\x05\x90" "\xfb\xa5\x19\x68\xcd\x83\x7b\x92\xd4\x18\x2d\x2a", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000240, "/dev/config", 12); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000240, 0xc, 1, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }