// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\xc7\x68\xd1\x61\xa5\x22\x8c\x38\x3a\xb6\x84\x45\x22\xf9\x1a\x12\xa6" "\x61\x58\xac\xac\x4a\x64\x35\x42\x85\xff\xc2\x11\x0d\x35\x22\x99\x02" "\xb4\xec\x4b\x07\x4e\xdf\x1a\x5f\x5b\x51\xa3\x45\x0d\xed\x4f\x17\x84" "\x22\x80\x5c\xd5\x62\xb7\x46\x0c\x4f\x06\xaa\xa5\x4f\x85\xd3\x47\xb8" "\x06\x7f\x9c\xf5\xdf\x49\x06\x35\xb4\x3c\xa0\x56\xf6\x6e\xf4\xa4\xb1" "\xfe\xc4\xfa\xa8\x7b\x51\x77\xf9\x14\x9e\xdb\x82\xf6\xc7\x43\x9d\x52" "\x0a\xa0\xfe\xd9\x40\x08\x2f\x0f\x17\x6a\x49\xf2\x4d\x83\xa0\x02\xe9" "\x96\x11\x98\x6d\xc2\xc8\xa3\xb2\x3b\xb6\x39\xe5\x56\xbf\x8c\xd9\x30" "\x44\x1a\x00\x2a\xf1\x6a\xd4\x99\x81\xf0\xd0\x18\x5c\x8f\x1a\xdb\x83" "\xa1\x98\xde\x98\x8e\xd4\x95\x53\x48\xee\xc3\x76\x22\xac\xa9\xbc\x05" "\x52\x98\x6e\x7e\xfc\x3e\x90\x52\xd1\x4a\x7c\x2e\x4d\x7c\xdc\x81\x46" "\xe5\xc4\x2b\xfc\xb3\xdb\x23\x63\xfb\x90\xd6\x7d\xdb\xbe\x2c\x19\x7b" "\xa1\x45\x0a\xc5\xfb\x7f\xca\xc5\x59\x33\x66\xf5", 216); syscall(SYS_pop_ctx, 0x20000000); memcpy((void*)0x20000240, "/proc/self/notepg", 18); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000240, 0x12, 1, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }