// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000140, "\x82\x02\x94\x88\x16\xbf\x0a\xfa\xd6\xd4\xdf\xcd\x96\x0d\xaf\x84\x0f" "\x80\xc2\xa3\x8e\x72\xa7\xb4\x29\xf7\xb0\x5a\x50\x49\x7a\xee\xee\x05" "\x06\xa1\xba\x35\x7f\x00\x5f\x5d\x10\x90\x8a\xeb\x85\xe0\x0a\x1a\x65" "\xbd\xcf\x2d\xaa\x35\xac\xf6\xa6\x39\xe6\x0d\xa2\x2e\x54\x21\x05\x16" "\x8d\xe4\x16\x85\x3d\x6d\x5c\x65\xfd\xcd\xb6\x0c\x08\x87\x3c\x99\x0a" "\xe5\xf9\x2f\x88\x3d\xd7\xa8\xa2\x50\x21\xc5\x75\x8f\x24\x81\x24\x37" "\x10\x39\x5b\xa0\xbc\x08\xc4\x3b\x5c\x43\x65\x4b\x50\x43\xb1\x20\x73" "\x81\x9b\x10\x3a\xeb\x75\xd0\x3b\xf3\x30\x25\x84\x07\x0d\xee\xa4\x63" "\x3b\xe8\x3a\xa2\x06\xa8\xb1\x5b\x37\xd0\xb2\x70\xf1\x3f\xb2\xf4\xc4" "\xcd\xf5\x31\xbd\x82\x58\x3c\x37\xa5\x3d\x77\x71\xa4\x84\xad\x8c\x5d" "\x78\x4c\x80\x99\xb3\xbe\xf4\x48\xd3\x01\xab\x59\xcd\x25\x3e\x93\x23" "\x75\x01\xd3\x94\xb6\xe3\x73\xc6\x49\x25\xeb\x77\x02\xb2\x25\xa4\x84" "\x29\x4c\x31\xb9\xc5\x05\xcf\x91\xc5\x3d\x0f\xc7", 216); syscall(SYS_pop_ctx, 0x20000140); memcpy((void*)0x20000740, "/net/tcp/0/remote", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000740, 0x12, 1, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }