// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\x15\x15\x23\x8e\x4a\x8c\xba\x05\xea\xfc\x30\x15\x35\x58\x26\x15\x9a" "\x49\x59\x82\x65\x11\x48\x00\x3a\xbd\x70\x8e\xe2\x5e\x17\x35\x32\x1a" "\xa0\x37\xac\x09\xd5\x69\x9e\x75\xc5\xc6\xcc\xee\xc3\x46\x44\xae\x46" "\xeb\x09\xc1\xe4\x1f\xcf\x9d\x92\xa3\x3b\x7f\x55\x80\x3b\x86\x02\x0f" "\xdb\x7a\x40\xe2\x5f\x5a\x81\x03\x93\x95\xde\x3a\x61\x1b\xb0\x67\xb4" "\xb5\xc3\x9a\xb8\xf8\x3b\xe1\x4a\x15\xb4\xff\xed\xce\xde\x3a\x5a\x3b" "\x52\x0b\x42\xad\xe5\x6e\x8f\x50\x03\x9d\xcb\xf2\x30\xf7\x82\x69\x13" "\x96\xbf\xea\xa6\x8c\x35\xbd\xdd\x99\x4f\xb0\xd0\x31\x11\xcf\xcc\xf7" "\xf0\x48\xb6\xc9\x0e\x2a\x91\xd0\xf3\x14\xc4\x6f\x42\x7a\x15\x20\x2d" "\xf6\xfd\x02\x61\x1f\xf1\xd0\xc4\xca\x9d\xa9\x0a\x67\xf8\xe6\x71\xf8" "\xfb\x3b\x7c\x55\x26\x3a\x1e\x21\xe4\x4d\x72\x58\xbf\xdf\x96\x2c\x59" "\xf7\x8b\x78\x9f\x05\xe8\x32\xa3\x5c\x5e\xfe\x22\xf9\xed\x82\x7f\xf9" "\x8b\xa2\x45\x21\x4e\x90\xfe\x82\x21\xdb\x6a\x9f", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000700, "/prof/kprintx", 14); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000700, 0xe, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }