// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "./file0", 8); memcpy((void*)0x20000040, "./file0", 8); syscall(SYS_link, 0x20000000, 8, 0x20000040, 8); memcpy((void*)0x20000680, "\x6d\x9c\xb6\x99\xa8\x87\x68\x24\xad\xab\x5b\xc8\xc5\x5f\x01\x06\xda" "\x9a\x45\x67\xe4\xea\x8b\xe0\xdb\x03\xab\xd8\x04\x69\x1f\x86\x5d\x99" "\x18\x03\x3d\x66\xaf\x70\xf4\x7d\x31\x43\x80\x69\x60\x96\x66\x11\x88" "\x1e\x97\x6e\x26\x64\x57\xb3\x6d\xb3\x0a\x09\x2e\x5f\xab\x06\x8f\x24" "\xb2\x93\x07\xe1\xab\x78\xc7\x7e\x1b\x00\xc8\xa6\x55\xb7\x96\xfc\x3b" "\x02\x85\x8b\x96\xda\xf0\x73\x58\x12\xcd\x22\xf7\x91\x07\x2a\x3b\xc4" "\x49\x8e\xc3\xd7\xac\x04\x9f\x97\x59\x86\x8b\x6b\xcd\xa9\x7e\xdd\x90" "\x27\xd7\xff\x27\x1e\x82\x33\x27\xee\x31\xa4\xfb\x9f\x40\x0b\xd9\x46" "\xc2\x4e\x6f\xc2\xc7\x1c\xf0\x62\xc1\x67\x1a\x46\x48\x4c\x9e\x9a\x52" "\xa1\x08\x72\x3c\x59\x89\x61\x96\x7b\x51\xe9\x67\x0d\xe2\x0b\x66\x0b" "\x4c\x14\x3b\x68\x59\x59\x7e\xd6\xad\xe4\xff\x4b\x0b\xec\x60\xe2\x94" "\xcf\x89\x0f\xe0\xa9\x27\x65\xdf\x8c\xfb\x8d\x73\x43\x80\x81\x8e\x68" "\xb8\x62\x63\x26\x81\x48\xb5\x7d\xd7\xad\x13\x5a", 216); syscall(SYS_pop_ctx, 0x20000680); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }