// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x200000c0, "\x5d\x47\x87\x58\xba\x03\xa6\xb2\x08\xae\x9a\x6f\xb1\x72\x97\x60\xbf" "\xe2\x9d\xac\x02\xcd\x9d\x13\xf8\x74\xa1\xaa\xf4\x5b\xaa\xd4\x18\x96" "\x54\x1e\x35\x75\x4a\x41\x68\x93\xb0\x9f\x6b\x86\xa1\x95\xc1\xc2\x7f" "\xf3\xb9\xa5\x54\xea\x62\xb3\xfc\x7d\x0b\x81\x62\x1f\xd3\xc8\x1d\x9a" "\x69\x47\xfc\x12\x61\xd9\xdc\xbd\x5c\x35\xa9\x5f\x99\x4d\xfa\xc2\xaa" "\x05\x13\xcf\x14\x00\xf0\xf9\x09\x6e\x5d\x3d\xd7\x3e\x9f\x0a\x5b\x76" "\xc6\x0b\x9b\x1e\x28\x65\xd3\xa1\x02\x8b\xff\x27\x1c\x6f\x05\x2a\x6b" "\x6a\xac\xdc\x1d\x43\x0b\x79\xa1\x14\x32\x95\x19\x98\xf0\x65\x61\xe0" "\x59\x43\xed\x9c\x1f\x70\xfe\xc5\x07\x6d\xa6\x23\xc2\x93\xf4\x2e\x42" "\x23\x32\x48\x71\xc5\x33\xf0\x10\xf5\x2b\x4f\x3d\x1b\x7b\x1d\xce\xd3" "\x29\x54\x5f\x82\x24\xa3\x09\xaf\x86\x52\x49\x71\x50\x57\xfd\x0b\xe1" "\x0f\x6f\x87\x21\x7e\xea\xf9\x65\x19\x7f\xa0\x19\x11\xf4\x5b\x6c\x6d" "\xb8\x6e\x1a\xaa\xb7\x69\xcb\x7d\x86\x3b\x44\x8d", 216); syscall(SYS_pop_ctx, 0x200000c0); memcpy((void*)0x20000200, "/net/ipifc/1/remote", 20); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000200, 0x3d5, 1, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }