// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x200001c0, "\xac\x70\x75\x72\x54\x8b\xe4\x22\x8b\x6a\x1c\x0c\xae\xb0\x71\xdb\x9b" "\x0b\xce\x10\x91\x6f\x5c\x4f\x14\x96\x5f\x0b\xde\x8b\x34\xd7\xe9\xc6" "\xbc\xcd\x43\xae\xf4\xb0\xb8\x90\x37\x97\x80\xc6\xbc\x5a\x37\xf2\x82" "\x7b\x17\x64\x85\x83\xbc\x90\x3d\xcb\x13\x1b\x3b\x19\x4a\x61\xad\x2a" "\xdc\x41\x4a\xe1\xf9\x1c\x2b\x52\x8a\xa9\x40\x65\x75\x09\xe1\xb9\x8a" "\x76\x35\xbf\xea\x9e\x0c\x8b\xf4\xe5\x22\x46\xad\x08\x34\xca\x10\x4c" "\xb5\xff\xed\x1b\x31\x8c\xc4\xae\x5c\xb7\xe4\xf8\xf3\x4d\x60\x78\xd7" "\xc3\xd0\x61\x42\x00\x6a\x0e\x6b\x14\x49\x2c\x54\xab\xdf\x6d\xd9\x5b" "\x0d\xbb\x89\x60\xd4\xc8\xf7\xd6\xbf\x8e\xab\xc3\x43\xbb\xb0\x0d\x1d" "\x3a\xf2\xcd\x5d\x89\x6e\x14\x59\xd8\xb0\xc8\xb8\xa6\xa7\x67\x59\x13" "\xcd\xd1\x66\xfe\x1a\xc1\x6e\x71\x3d\x07\xeb\xad\xda\x02\xde\xdb\xf4" "\xe8\xb8\x2f\x53\xd5\x5a\x98\x96\x51\xc7\x86\x39\x9c\x90\x4d\x02\xa0" "\xe6\xdd\xba\x54\x1b\x71\x1e\xad\x64\x5f\x52\xb5", 216); syscall(SYS_pop_ctx, 0x200001c0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }