// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\x45\x93\x45\x07\xd6\x53\x5e\xf0\xdc\x9a\x72\x4a\xbe\x4c\xcf\xba\x0d" "\xea\x13\xcf\xd5\x85\x7f\x5e\xca\xe6\x24\x66\xb8\x57\x8a\x58\x7b\x23" "\xea\x7c\x64\xf1\xb5\x75\x2a\x73\xa2\xf5\x6b\x08\x62\x9f\xfd\x29\x4f" "\xb6\xe3\x7b\x41\x3f\x30\x80\xa2\xa2\x7e\xed\x73\x8d\x09\x67\x30\x52" "\x4a\x3d\x2c\x3c\xec\xd2\x53\x60\x7a\x72\xb8\x1a\x62\x68\x7e\x5d\x86" "\xaa\xe8\x1b\xac\xa9\x1d\x10\xa1\xe5\x03\xc6\x24\x55\xbe\x86\xc9\x00" "\xbe\x06\x26\x51\x1d\x41\x5b\x75\x44\x25\xe7\x87\x78\x2d\x95\xf8\xc1" "\x45\x43\x7c\x8e\xc2\x41\x17\x0d\x10\xc7\x0d\x24\x4d\x54\x59\xbb\x1e" "\x15\xd1\xc9\x6b\xd0\xe3\x56\xa3\x48\x56\xc5\x2e\xea\x33\xd9\xd7\x84" "\x87\x33\x70\xba\x3a\x89\x2d\xd1\x33\x5f\x6d\x11\xf1\xc4\x36\x24\x85" "\x02\x63\x44\x9e\x7f\x5b\xe5\x1e\xda\x7d\x37\xfa\x5e\x1a\x62\x74\xfa" "\xb5\x81\x5c\x45\x8a\xb1\x82\x33\x21\x17\xfa\x6d\x39\x08\xdc\xba\x9f" "\xe0\x0a\x42\x10\x3a\x7f\xa4\xde\x81\xba\x87\xb4", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000440, "/prof/kptrace_ctl", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000440, 0x12, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }