// https://syzkaller.appspot.com/bug?id=16117fda7f2310df64ad01c0e5020acdd5b51f1f // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include long r[6]; void loop() { memset(r, -1, sizeof(r)); r[0] = syscall(__NR_mmap, 0x20000000ul, 0xfb0000ul, 0x3ul, 0x32ul, 0xfffffffffffffffful, 0x0ul); r[1] = syscall(__NR_socket, 0x10ul, 0x3ul, 0x0ul); *(uint64_t*)0x20eb8ff0 = (uint64_t)0x20000fd7; *(uint64_t*)0x20eb8ff8 = (uint64_t)0x2d; memcpy((void*)0x20000fd7, "\x29\x00\x00\x00\x20\x00\x19\x80\x01\x3d\x75\x24\x00\x0a\x00" "\x21\x02\x00\x00\x00\x00\x00\x07\x80\x20\x00\x00\x00\x09\x00" "\x10\x00\x00\x80\x00\x00\x00\x31\x5a\xec\x00\xc8\x7f\x83\x96", 45); r[5] = syscall(__NR_writev, r[1], 0x20eb8ff0ul, 0x1ul); } int main() { loop(); return 0; }