// https://syzkaller.appspot.com/bug?id=a12a0d53e98be4a617f1e02e8ae91dc4a31525f8 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x200005c0, "/net/icmp/clone\000", 16); res = syscall(SYS_openat, 0xffffffffffffff9cul, 0x200005c0ul, 0x10ul, 3ul, 0ul); if (res != -1) r[0] = res; memcpy((void*)0x20000080, "\xf2\xb9\x01\x00\x00\x00\x38\xbf\xf0\x97\x48\xf9\xa9\x3a\x89\x1a\x5f" "\xfd\x9b\x95\x18\xc1\x0d\x59\xd2\x6b\x0e\x42\x2c\xb6\x5f\xbe\x6c\xb7" "\x92\x85\xf2\xf8\x40\xfe\x34\x0a\x0c\x2b\x42\x0e\x23\xac\x17\x7d\xdd" "\xf2\x0a\x40\xb5\xcc\xc9\x02\x66\xd3\x66\xd4\xb8\x98\x7d\xdc\x6d\x49" "\x02\x73\xf7\x16\x44\x06\xa0\x11\x89\xb4\xec\x46\x82\x99\xf4\xb7\xb4" "\x50\xac\x9a\x00\x64\x0d\x87\x31\x2a\xc2\x11\x26\x96\x9c\x82\x2b\x01" "\xad\xeb\xac\x98\x5c\x56\x3a\x00\x00\x00\xda\xe1\xdc\xda\xdf\xca\x0c" "\x51\x3a\xe7\xdb\x6d\x62\x9c\xe9\xf5\x5a\x4f\x61\xf6\x00\x17\x7f\x28" "\xbf\x66\x2b\xe6\x00\xf5\xca\x11\x22\xfd\x8c\x40\xed\xcc\xd5\x28\xa7" "\x49\x12\xfa\x10\x17\x15\x00\x48\x65\x49\xdc\x2f\x55\xeb\x39\xca\x15" "\xc8\xe2\xe0\x3f\x2b\x96\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00", 189); syscall(SYS_write, r[0], 0x20000080ul, 0xfffffc99ul); return 0; }