// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include static void execute_one(); void loop() { while (1) { execute_one(); } } uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff}; void execute_one() { long res = 0; memcpy((void*)0x20000100, "/net/ipifc/0/ctl", 17); res = syscall(SYS_openat, 0xffffffffffffff9c, 0x20000100, 0x11, 3, 0); if (res != -1) r[0] = res; res = syscall(SYS_fcntl, r[0], 0, r[0], 0); if (res != -1) r[1] = res; syscall(SYS_fd2path, r[1], 0x20000000, 0x75); syscall(SYS_mprotect, 0x20000000, 0x3000, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (;;) { loop(); } }