// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x200000c0, "\x64\xc1\x38\x6a\x83\xb0\x5b\x49\x73\x8e\x7f\x43\x99\x5d\xb5\x91\x2c" "\x06\x1e\x20\x41\x44\x7d\x27\x42\xfb\x29\x00\xdc\xb6\x10\x38\x88\xd5" "\x35\xc1\xb5\x14\xd1\x20\x18\xcd\x77\xe9\xf6\x0a\xdb\xc9\xe1\x26\xa4" "\x4a\x17\x07\xb3\x33\x77\xca\x15\xc9\xd5\xa7\x10\xad\xa4\xd5\x50\xca" "\xd5\xe0\xf5\x6d\x4e\xad\xdf\x31\x8b\x0a\xaf\xb0\xf9\x44\x66\xb9\xd0" "\x43\x61\x97\xbb\xc7\x45\xbb\x9d\xa4\xd2\xf4\x84\x96\xc1\x52\x3c\x7e" "\x0f\x55\xbf\xc5\xd2\xf6\x60\x24\x8f\x7d\x03\x8b\xfb\xe4\x16\x0e\xb1" "\xc7\x2b\x89\x75\x4b\xa0\xe2\xc1\xb6\x7b\x18\x1b\x4f\xcd\x20\x3b\x1a" "\x37\x6f\x79\xa6\xb8\xbb\x7f\x8c\x2a\x1d\x25\xcc\xa2\x9a\xb9\xa8\x08" "\x40\x44\xa3\x31\x1b\x1c\xd8\x8d\x2f\xcf\x3a\x17\x12\x6e\xf0\x56\xe4" "\x72\x41\xdd\xcd\x56\x7e\xd7\x6d\x6b\xcc\x1a\xd4\x48\x83\xac\xb1\xf2" "\x4a\x62\xc9\x09\x0e\xff\x21\x8c\x65\xae\x4f\x9d\x31\xc9\x1c\x32\x16" "\xd5\xd3\x9a\x46\x7d\xdc\xd3\xfc\x5d\x88\xcc\x94", 216); syscall(SYS_pop_ctx, 0x200000c0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }