// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000580, "\x36\xc1\x7d\xeb\x73\x90\x50\x55\xf4\xb4\x92\x31\x5a\x78\x7f\xe0\xa7" "\x33\xa0\x58\x69\x4d\xb5\xb2\x28\xf1\xb1\xc8\xf5\x90\x83\xe4\x2b\x63" "\xed\x55\x31\x81\x10\x8d\xd8\x9b\xf7\x8e\x36\x05\x23\x38\x9f\x02\xc7" "\x87\xb2\x39\x51\xe6\x54\x4c\x01\x19\x9d\xe9\xcc\xc8\x39\x94\x81\x64" "\x4f\x7c\xac\x68\x0e\x8a\xb7\x35\x14\x87\x24\xf1\x9f\x75\x04\x14\x25" "\x4e\xf5\x36\x22\xcd\xd0\x72\x90\xa3\x1d\x59\x96\x5c\x36\xed\x26\x5b" "\xc5\xc1\xc2\x49\x6a\xc5\x4a\x6d\x95\x89\xff\x0a\x20\x53\x80\xf7\x11" "\xab\x57\x7c\x07\x9d\x17\x6a\xd4\x8b\xc2\xe1\xc1\x76\xcc\x4d\x85\x7d" "\x29\x68\xaf\xf2\x3e\xaf\x0e\x6c\x10\x82\x38\x52\xbf\x70\x56\xd6\x64" "\x8a\xaf\xeb\xc6\x35\x9f\xf1\xea\xa9\x1e\xcc\xb1\xc9\x3b\x9d\x7c\x27" "\x11\x08\x6a\xec\xce\x0c\xb8\x39\xff\x72\x56\xbd\xc1\x92\x2e\x25\xaa" "\xd9\xfa\xc5\xe5\x98\xea\xeb\x38\x39\x63\xbd\x3b\xba\x4a\x07\x8a\x15" "\x9a\xe2\x37\x38\x44\x3e\xda\x8a\x41\xa6\x27\xa6", 216); syscall(SYS_pop_ctx, 0x20000580); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }