// https://syzkaller.appspot.com/bug?id=d76b65a985a4cbf10165b3cbb882f59a0ab090bd // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #ifndef __NR_mmap #define __NR_mmap 192 #endif #ifndef __NR_socket #define __NR_socket 359 #endif #ifndef __NR_write #define __NR_write 4 #endif #undef __NR_mmap #define __NR_mmap __NR_mmap2 long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); r[0] = syscall(__NR_socket, 0x10, 2, 0xc); memcpy((void*)0x20f81000, "\x1f\x00\x00\x00\x10\x00\x33\x08\x00\x00\x00\x00" "\x00\x00\x00\x0e\x1e\x05\x00\x02\x0a\x00\x01\x00" "\x06\xc7\x16\xe8\x04\xdc\xff", 31); syscall(__NR_write, r[0], 0x20f81000, 0x1f); } int main() { loop(); return 0; }