// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\xdf\x88\xef\xc1\x9b\x34\x1d\xb1\xec\x12\xd6\x50\xfe\xad\xba\xac\x78" "\x36\x4f\xe9\x6d\x68\x6f\x65\x4f\x1b\x80\x56\x15\x3d\x1b\xd9\xac\x40" "\x62\xa7\xfb\xbb\xb7\xd2\xfe\x59\x5c\xfc\x08\x62\x5c\x79\xcd\xae\x99" "\xb8\x15\xc7\x77\x5e\x9a\xc1\x4a\x70\xe8\x97\x8f\xc6\x7c\xf9\x73\x9f" "\x89\xc4\x61\x64\x88\xc0\xb8\x91\x2a\xdb\x58\x71\xb2\xb9\x0a\xb6\x63" "\x55\x42\x98\xfc\x58\x68\xea\x38\xce\x03\x40\x9d\x9f\xd3\xa3\x49\x62" "\x2b\x6b\x1d\x1b\xf0\x5b\x4a\x27\xe1\x2c\x90\x64\xf7\xe0\xe5\x80\x04" "\x7e\x72\x00\xa4\xcd\x04\x2a\x3a\x4d\xa6\x8a\xa6\x98\x7b\x7f\x6f\xe9" "\x9a\xd1\x26\xec\x57\x37\x9d\x14\x9c\xd7\xbf\x27\x1d\xc3\x8f\x09\x37" "\x88\x73\xc1\x8f\x6d\x38\x7a\xe3\x07\x9f\x14\x7b\xbf\x58\x64\xae\x92" "\x68\x20\x35\x7c\xb5\xc7\xe6\x0f\xe4\x39\x49\x5a\xdc\x86\x49\x83\xea" "\x9c\x20\xb7\x0e\x58\x74\x79\x9d\xaf\x36\x6c\xa3\x15\x74\xb0\x5f\xd2" "\xe3\xa2\x53\xfa\x8b\x51\x43\x2d\xff\xd0\x4b\x3a", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000780, "/net/ether0/0/ifstats", 22); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000780, 0x16, 1, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }