// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\x99\x2c\x78\xef\x4f\x53\xc2\x9e\x5c\x0c\xba\xbf\xef\x28\x5b\x17\x57" "\x77\x96\xdf\xdd\xf0\x0d\x33\xc9\x54\x05\x21\xf1\x06\xe8\x5e\xe9\x8f" "\x13\x0f\x5f\xa7\x9f\x75\x27\xc1\x95\xf2\xe0\xb0\xf4\xba\xff\xab\x46" "\x12\x3b\x83\xe6\xb7\x31\xb8\x40\xed\x58\x46\x52\x4c\x42\x4c\x2e\xcf" "\xee\xb9\x18\x9b\x09\x8d\x8c\x63\x64\x7e\xdb\x9b\x8b\xe6\xc3\x9b\x68" "\x7e\x05\xc2\x8a\x7e\x67\xcb\xeb\x29\xa8\x9d\x30\x0b\x11\x5f\x46\x38" "\x34\x72\x83\x8b\x60\x1d\x6c\x3a\xf5\xc1\xcc\x01\x73\x09\x53\x54\x76" "\xe6\x98\x59\x7b\x28\x2c\x9e\xa7\xfe\x9e\x3f\x0b\x87\x24\xd7\x58\xa5" "\x37\x57\x37\xec\xd2\xaa\x64\x4e\x8f\xae\x62\xc0\xa6\x24\xc9\x35\xd6" "\xb6\x27\x1e\x20\xfb\x99\xc9\x06\x4a\xc4\xf4\x57\x85\x8a\x51\x9c\xbd" "\x43\x62\xc4\xda\x72\x53\x92\xbd\x76\x00\x26\x5a\xb2\x00\x98\x97\x10" "\xcb\xcb\x33\x38\x4e\x83\xb7\x25\x01\xe4\xa4\x62\xdc\x28\xc4\xc0\x15" "\x07\x26\xdb\xfe\x8b\xc6\x2c\x2d\x69\xa3\x2a\xf2", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000580, "/dev/sysstat", 13); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000580, 0xd, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }