// https://syzkaller.appspot.com/bug?id=a12a0d53e98be4a617f1e02e8ae91dc4a31525f8 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x20000040, "/net/ipifc/clone\000", 17); res = syscall(SYS_openat, 0xffffffffffffff9cul, 0x20000040ul, 0x11ul, 3ul, 0ul); if (res != -1) r[0] = res; memcpy((void*)0x200000c0, "\xc8\x31\xbf\xfa\x84\x1d\x78\xa3\x34\x2d\xeb\xc3\x55\x40\xa0\x62\x37" "\x7f\xa9\xb2\x83\x13\xd6\x32\xd0\xba\x24\xad\xaa\x9a\x8a\xbb\x48\x04" "\xf0\x1d\x64\x60\xae\x56\xa2\xca\xc4\x58\x59\x19\xae\x01\xc9\x3c\xd2" "\xdc\xf8\xa2\xbf\xda\x35\xb7\xf3\xa5\xd4\x40\x01\xd5\x01\xf8\xc9\xa8" "\xfc\xad\xcb\xd8\x09\x7a\x6c\x49\xae\x7f\x89\x18\xb6\x6f\x5e\x47\xc9" "\x36\x23\xd4\x01\xcb\xfa\x9a\xd2\x47\x78\xd2\xf4\xe5\x1c\xa3\x7d\x0a" "\x2d\x0a\xb7\x40\x7a\x8c\x46\x1c\x39\xd1\x7c\xd8\x60\x29\xea\x3b\xf6" "\x4a\xee\xcc\x05\xa5", 124); syscall(SYS_write, r[0], 0x200000c0ul, 0xfffffd22ul); return 0; }