// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\x44\x2c\x50\xfa\x7f\x89\x07\x12\xa1\x00\xbb\x7a\x7e\x42\x59\x84\xad" "\xcc\x5a\xe2\x50\x21\xa5\xe2\x47\x65\xfa\xe9\x56\xd1\x52\x79\x95\xc7" "\xad\x33\x31\xe2\xd3\xd0\xfe\x3a\x06\x47\xd7\x2e\x46\x3d\x38\x87\x1a" "\x7c\x13\xbb\x07\x99\xcb\xfa\x0b\x5a\xa3\x8d\x3b\x48\x0f\x47\xba\x75" "\x84\x76\x0c\x4e\xd8\xa0\xff\x62\x0d\xc8\x16\x35\x9c\x4d\x1a\x54\x07" "\x13\xb8\x1b\xfe\xa1\x89\x26\x2e\x0f\x0e\x36\x78\x78\x52\xd0\x54\x8c" "\x2c\x6d\x50\x49\x87\x91\x0d\x85\x06\xa5\x46\xbf\x14\x9d\x0d\xd9\x3b" "\x57\x95\xdc\xf9\xea\x18\x7e\xac\x2c\xc3\x41\xe7\x2f\x7f\xa6\x00\x51" "\xc1\x9b\xdf\x5b\xd5\x5b\xf3\x18\xa9\xad\xd0\x02\x65\x73\xe1\x81\x43" "\x2c\xad\x2d\x0d\x88\xed\x9c\xe9\x6a\x96\xd3\x5d\x3a\x2a\xfe\x6e\x83" "\x1d\x1d\xec\xd4\x85\xad\xfb\xd7\x62\xf6\x40\xf6\x57\xbf\x98\xd7\xa5" "\xd0\x0c\x5b\x3b\xe5\x5d\x83\x37\xae\x6d\xa5\xae\xce\xa4\xb6\xb6\x11" "\xb4\x5b\xaf\x3e\xab\x94\xfd\xc0\x31\xf8\x32\x82", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x200007c0, "/net/ether0/1/ctl", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x200007c0, 0x12, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }