// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000000, "\x0d\xa5\xcd\x3b\x19\xb1\x44\x31\x9a\x74\x15\xef\xef\xa9\x97\x4c\x78" "\xf4\xeb\x05\x18\x36\x96\xd4\x6a\x61\x4d\xfb\x76\xb3\xda\xe9\xb8\xdd" "\xf6\x43\x00\x4e\x91\xe3\xab\x14\x53\x43\x3a\xa2\xba\xed\x87\xfd\xde" "\xfc\xdd\xbd\x19\x8f\x24\xe3\xa3\xcc\xf0\x29\x5d\x3e\xc6\xd7\xd2\xe6" "\xe4\x0a\xcc\xb8\xd0\x0d\xba\xbf\xb6\x2d\x50\xa9\xca\xa4\xe9\xab\x02" "\x64\xe4\x45\x39\x2a\xa0\x50\xc4\x01\x88\x09\x58\x0e\x8e\xe4\xe9\xf0" "\xa0\xdf\x04\x85\xb2\x78\xe1\xc6\x91\xaf\x7e\xc2\x74\xa7\x42\x3a\xd4" "\x00\xc9\xee\xc3\x49\x82\xa0\x42\x65\x2c\x77\x96\x28\x1d\x15\x04\xcf" "\xfe\x4a\x54\x38\xac\xfc\x57\xa5\x8e\x5e\xc9\xcf\x34\xcc\x0d\x09\x8e" "\xfc\x75\x9b\x95\x33\xf2\x8b\xca\x4c\xd6\x81\x54\x77\xad\xa3\xb6\x0f" "\x0f\x77\x56\x55\x6e\x5b\xd8\xd0\xa9\x48\x8b\xdf\x92\x94\x4e\x47\x43" "\x81\x43\x9a\xff\xe9\x84\x12\xba\x24\xaa\x9f\xbf\x56\x4e\xd2\x4b\x76" "\xd2\x36\xa0\x65\x6c\xcb\xb9\xe1\x69\x1f\xcd\xb1", 216); syscall(SYS_pop_ctx, 0x20000000); syscall(SYS_write, -1, 0x20000200, 0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }