// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\xb5\xec\x8c\xb6\xeb\xde\x75\x67\xbd\xc2\x51\x3d\xcd\x17\x03\xd8\xe3" "\x8c\xf8\x96\xb1\xe9\x4f\xf3\x13\x77\x4f\x70\xcd\x27\x8d\xb9\x9c\x30" "\xea\xf1\x85\xb4\xcb\x80\x92\x7d\x78\xf1\x42\xcb\x2e\x86\x7d\xdd\x0c" "\xe6\x4b\x48\xa1\xae\xdf\xac\xc2\xfa\x24\x3a\xce\x70\xb0\x65\x68\x1c" "\xf1\xb6\x29\xf8\x8a\xd2\x67\xdb\x57\x5c\x34\xcd\x40\x0f\xf0\xa2\xdc" "\xb7\x19\xee\xd2\x3f\x3f\x44\x79\xcb\xcf\x84\x32\x1c\x97\x57\x88\xaf" "\x4f\x37\xbd\x99\x09\xf8\x51\xd5\x6a\x91\x01\x87\x45\x36\xe5\x7f\xb9" "\xd8\x29\xad\x15\xc9\x94\x71\x8c\xaa\xc5\xaf\xf3\xdc\x63\x1a\xa2\xf7" "\x3c\xa9\xf1\x51\x6c\x7d\x48\xca\x25\xde\xfb\x43\x90\x6a\x83\x4d\xa5" "\xf1\xe3\x95\x18\x0b\x10\xf8\xe4\xee\xb5\x8d\x52\x86\x35\x34\x35\x41" "\xd9\xb6\xe2\x0d\xb0\x2d\x77\x47\x21\x26\x54\x1e\x74\xa8\xd1\x3d\x66" "\x31\xfa\x3c\x09\x04\x30\x7b\x12\x3f\xdc\xe9\x93\xd6\xd8\xbe\x47\x88" "\x3c\xf4\xdf\x40\xc4\xa3\x30\xdf\xa5\xeb\x1f\xa7", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000200, "/dev/bintime", 13); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000200, 0xd, 3, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }