// https://syzkaller.appspot.com/bug?id=a076cd325b310f1d6adcbcbe16470b47dfd99d06 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include static void execute_one(); void loop() { while (1) { execute_one(); } } uint64_t r[1] = {0xffffffffffffffff}; void execute_one() { long res = 0; memcpy((void*)0x20000000, "/net/ether0/1/data", 19); res = syscall(SYS_openat, 0xffffffffffffff9c, 0x20000000, 0x13, 3, 0); if (res != -1) r[0] = res; syscall(SYS_write, r[0], 0x200001c0, 0); syscall(SYS_abort_sysc_fd, r[0]); memcpy((void*)0x20000040, "\x6e\x2f\x9f\xbe\x3b\x4b\xa2\xb3\x92\x83\x86\x24\x53\x1d\x0e\x65\x48" "\x33\xa2\x04\x63\x6e\x4d\x0c\x0b\x54\x79\x7f\x07\x1c\x8e\x4c\x4a\x12" "\xf9\xb2\x46\x01\x60\x4b\x3d\x49\xc3\xd7\x5d\xdb\x8e\x45\x22\xae\xb4" "\x13\xe6\xaa\x07\x4e\x8f\xc0\xef\xc7\x08\x5f\x0f\xb4\x4a\xff\xdd\x03" "\x7b\x0b\xc1\x67\x76\xe2\x11\x54\x4a\x7f\xb2\xcc\x75\x71\x85\x65\x44" "\xa3\x45\x72\x12\x9f\x39\xd2\xf0\xc0\xfc\xad\x60\x91\xd8\xa3\x09\x29" "\x49\xc5\x42\x5e\x30\xb1\x6b\x53\xc2\x46\xda\x2a\x89\xf9\x5f\xd8\xb4" "\xac\xe8\x13\x00\x43\x9b\x69\x5e\x29\x96\xa8\x91\x95\xfb\xe4\x70\x29" "\x64\x6a\xd0\x91\x87\x33\xb4\x16\x27\xe3\xb2\x85\x73\x12\x80\x65\x8f" "\xb0\xf7\xcd\x73\xbc\xb2\xa8\xcb\x83\xa4\x7a\x96\x6c\xca\xea\x92\xd3" "\x84\xa8\x41\xe9\x83\x72\x3c\x9c\xd4\xb0\xb4\x89\xbf\x6b\x85\xa8\xf8" "\x85\x45\xbb", 190); syscall(SYS_write, r[0], 0x20000040, 0xbe); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (;;) { loop(); } }