// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "/dev/.empty", 12); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000000, 0xc, 3, 0); memcpy((void*)0x200001c0, "\xbb\xaa\xc5\x18\xd6\x73\xa7\xfa\x1d\x93\x70\xbe\x02\xa2\x13\x2a\x02" "\x0b\x1d\xa6\x82\x40\x5a\xc3\x3e\x92\x4c\x12\xdd\x9b\xdf\xe3\x79\x8f" "\x40\x70\x8c\x8d\xe3\xac\x74\x04\xda\x92\xf6\x06\x57\xd6\x09\x2e\xdf" "\x1c\xa8\xdc\x4f\xb5\xa0\xc9\xed\x67\x32\x4a\xc5\xe7\xbd\x42\x52\x85" "\x59\x0b\xf4\x32\x9e\x4a\x6e\x18\x33\xe5\x0c\xd0\xb9\xaf\x47\x37\xf7" "\x27\x54\x25\x8c\xf5\xd4\xcc\x63\xc8\x58\x0b\x18\x0a\xe3\xbe\x85\x55" "\xab\x59\x9a\xb0\xa0\xf7\xe2\x17\x52\xd7\xce\x14\x74\x66\xc5\xef\xdc" "\xb5\x37\x0e\x7c\x2f\x9d\x49\xe5\x31\xaf\x05\xa3\x85\xe3\x5b\x69\x7a" "\x35\x75\x26\xb6\xa6\xfd\xe8\x2d\x28\xa0\xa6\x0b\x41\x19\xe6\x55\xa7" "\x1e\xda\x24\xce\xce\x6f\x36\x2a\xa5\x30\xe1\xee\xe1\xed\xc9\x7b\xb6" "\xac\x00\xd2\x98\xca\xf2\x6b\x3b\xce\x00\xa0\xc4\x20\xac\xca\xbb\x7a" "\x86\xa1\x77\x3c\xc0\x00\xde\x2a\x4c\x8c\xde\xda\x52\xb2\xde\x58\x21" "\x27\xb0\x50\x0f\x16\x12\x0d\xd8\x41\x5b\x5f\xcd", 216); syscall(SYS_pop_ctx, 0x200001c0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }