// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\xba\xf3\xf8\xe2\xc4\xc2\x7b\x31\xba\x2b\xe6\xa6\x17\xd5\x57\x1f\x08" "\xc0\x6a\x5f\xb7\x6b\xd6\x7c\x6c\x3f\xbe\x02\xa9\x1d\x87\x97\x62\x5f" "\x4f\xb3\x9d\x15\x70\x49\x8e\x25\x9e\x9c\xd2\xe2\x27\x83\xf4\xda\x46" "\xc9\xf3\xcd\x02\x2c\x33\x14\xad\x5c\x4c\x5b\x0e\xd1\x8c\x92\xe5\x22" "\x9f\x44\x08\xf1\x13\x31\xa0\x4f\x49\x09\x0b\xdb\xe1\xc3\xd0\xc3\xa5" "\x82\xee\x72\x5f\xf7\x8f\x6f\x45\x7f\xc8\xdd\xc7\xc6\x04\x71\xb0\xde" "\x68\x62\x06\xfc\x53\xde\x19\x4c\x19\x60\x36\xd8\x6d\xcf\x0d\x8d\xca" "\xa9\x02\x11\x47\xf0\x04\xd3\x0a\x40\xa3\x93\xb5\x62\x0b\x5f\xcf\xc2" "\x49\xf3\x29\x4a\x80\x78\x03\xd1\xe6\xf1\x26\x22\xa5\xd5\xf3\x35\x93" "\xa1\x92\xa3\x23\xcf\xe3\x00\x6a\x61\xef\x1d\x1c\xe1\x6c\x6f\xc6\xcf" "\xb1\x41\x30\xe5\xf5\x3f\xba\x01\xe0\x67\x37\x87\x55\x60\x2a\x84\x13" "\x35\x02\x2a\x5d\x42\xa4\xa1\x46\x9d\xed\x92\x53\xaf\xb3\xae\x20\x1b" "\x8a\x75\xe4\x5a\x89\xbc\x0b\x61\xce\xbd\x08\x7a", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x200007c0, "/prof/mpstat-raw", 17); syscall(SYS_openat, 0xffffffffffffff9c, 0x200007c0, 0x11, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }