// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000180, "/dev/sysctl", 12); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000180, 0xc, 3, 0); memcpy((void*)0x20000080, "\x97\x94\x14\x6e\xe0\x6f\xa8\x8f\xa3\xac\xd4\xca\x37\x16\x4e\xda\x83" "\x0f\x08\x28\xdc\x4f\xd6\x98\x5d\x39\x0f\x23\x23\xb7\xa7\xf7\x14\xad" "\x8c\x4b\x76\x91\xd2\xd1\xd2\x5b\x5f\xa4\xd8\x3d\x70\x93\x95\x71\x7e" "\x06\x00\x34\xe3\x4b\x7d\x14\x8c\x9e\x6f\xa8\x90\x02\xf0\x8e\xb8\xc8" "\x75\xfa\xcd\xe4\x3d\x8e\xff\x32\x64\x04\x93\x0c\x98\xa1\xfb\x5f\x9e" "\x99\x6d\xea\x75\xb1\x9d\x6b\x03\x54\xbc\xcf\x66\xe3\xbb\x8c\x99\xd8" "\x4f\xf1\xc4\x55\x22\x5b\x37\x2b\xbb\xcd\x99\xae\x92\x75\x3e\xee\x3d" "\x47\x02\x5c\x14\x87\xad\xa1\x13\x66\xed\xc2\x99\x2e\x70\xf5\xa8\x95" "\x0d\x77\xec\x9c\xd9\x2e\xa7\x18\x1c\x06\x8b\x44\xe7\xba\x0b\xe5\x2b" "\xa8\x56\xfa\x64\xc5\xf0\xca\xbe\x96\x8d\x8b\x49\xa7\xf4\x9f\x9a\xb8" "\x77\xb8\x4d\x69\x9c\xac\x07\x2d\x29\xa5\x4d\x08\xf6\x3d\x6b\x92\x6f" "\xa3\x45\x50\x41\x05\xcb\x72\x87\x94\x21\xd8\x4c\x5a\x3e\x7a\x54\x0f" "\x85\x6d\x26\x63\x10\x6d\x9b\xae\x42\xfc\xc8\x37", 216); syscall(SYS_pop_ctx, 0x20000080); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }