// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000180, "/dev/stderr", 12); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000180, 0xc, 3, 0); memcpy((void*)0x20000540, "\x8b\x63\x5d\xe4\x89\x5b\x59\x4e\x27\x86\xca\x98\x3e\x7c\xf6\xad\xb5" "\x71\x80\x80\xc3\x37\x78\xc5\xf8\x35\xea\xbf\x18\x17\xfa\x12\xfd\xf6" "\x26\xd6\x00\xb1\xcb\x6a\xb4\xda\x94\x19\xd3\x1b\xa2\xa0\xaa\x28\x1f" "\x93\x1c\x47\xac\xf9\x45\xfb\x7f\x0b\x7f\xc4\xdb\x9a\x9e\xfa\xc6\x99" "\xcd\xd7\x2e\x53\x3b\x43\x23\xe3\xb2\x6b\x1f\x8d\xb1\xbb\x7d\x56\x13" "\x05\xcb\xa4\xde\xa4\x22\xff\x4b\x0a\x67\x9b\xc6\x2c\xf0\xa5\xf8\x16" "\xf5\xea\xed\x27\x2d\xfd\xe0\x3c\xa1\xc5\x45\xba\xcc\x98\xc7\x00\x86" "\xce\xca\x53\xb0\x9e\x7d\xba\x41\x9f\xba\x52\xaf\x88\x7e\xbd\x54\xe7" "\xd6\x5a\xb8\xa4\xb9\x2b\xb1\x1a\xf5\x6f\x7d\x62\xdf\xe2\xda\xb7\x4c" "\x12\x08\xfa\xb3\xda\x2f\xde\xd3\x7a\x8d\x2b\x72\x45\xc7\xde\x2c\x86" "\xc3\x30\xee\x32\xe5\xc9\x9a\x15\xc6\x80\x32\xae\x13\x7d\x55\xc2\x13" "\x8b\xe7\x62\x38\x96\x2d\x3c\x57\x27\xac\x01\x01\x11\x9c\xec\x24\x03" "\x0b\x55\x46\xd2\x90\x43\x1e\x5b\xbf\x66\x53\xdc", 216); syscall(SYS_pop_ctx, 0x20000540); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }