// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000100, "\xa2\x7e\x3e\x56\xe0\x08\x65\xa7\x44\xc9\xde\x48\x5b\x6d\xc4\xa7\xfe" "\xa5\x77\x3e\x36\xf6\x75\x08\x1b\xf8\x65\x3f\xd3\x0c\xb0\xbe\xfa\xe8" "\x14\xe6\x1a\xd6\x31\xd4\xe2\x47\xb0\xf2\xa2\x0a\x87\xf8\x69\x77\xa9" "\xf6\x19\xbc\x8b\xb5\xb5\x64\xe0\x9b\xc1\x84\x46\x90\x83\xc2\x8f\xbd" "\xf3\x7e\x37\x4e\x84\x27\xc0\x8f\x0d\xc3\x16\xa3\x9f\x50\x58\xf6\x61" "\xb5\x59\x56\x23\x26\x5d\xe7\xe6\xf0\x7d\xc5\xa4\x40\x11\x9d\x3d\x70" "\x03\xc9\x43\x9a\x15\xb6\x72\x2b\x95\xba\x25\xa1\xff\x37\x3a\x1f\x73" "\x4e\x32\x43\x6d\x12\xc9\xba\x9c\x46\x33\x42\xb3\x26\x37\x94\x6f\xe7" "\xf4\xe7\x1f\xc4\xff\x25\xa5\x41\x9e\xaa\x4d\xf5\xd6\xe2\xa8\xae\x77" "\x56\x2d\x34\x4f\x5f\x77\xaf\xdb\x0e\xf8\x14\x18\xca\x8f\x58\x4f\x09" "\xd6\x96\x4a\xe6\x2a\xb8\xa1\x4d\xf6\xf9\x59\x10\xf5\xc3\x56\x33\x0a" "\x3d\x18\xb8\xff\x1c\xa6\xa4\xfd\x35\x2f\x00\x00\x00\x00\x00\x00\x00" "\x62\xf6\xd7\x81\xd6\x1e\x8f\x39\xa0\x4a\xca\xd5", 216); syscall(SYS_pop_ctx, 0x20000100); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }