// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000640, "\x18\x56\x47\x7f\x0a\x01\x67\x1c\x7e\xd0\xd1\x16\x18\xf6\x7a\x92\xb8" "\xc1\x7a\x4e\x76\xf4\x42\xa9\x6b\xfe\x4d\xd3\x7b\xe9\x9b\xd5\xfc\x00" "\xd5\x16\x14\xa3\x44\x93\x0a\x73\xd5\x7b\xa5\x55\x3e\x5f\x98\xb2\x2e" "\xc8\x5f\x7e\xcf\x9f\x07\x01\x19\x9a\x0d\x46\x55\x0f\x38\x20\xeb\x7f" "\x73\x93\x47\x88\xa7\x71\xa4\xff\x94\x6f\xe4\xe2\x59\x77\x23\xfa\xc5" "\x70\xb1\x48\x54\x5e\x0b\xa7\x65\x4d\x5d\x66\x7b\xa5\x23\xd0\xd5\xb8" "\x7e\x99\x9e\xf2\xc5\x3c\x5e\x8c\x5b\x07\x72\x3b\x71\x52\x92\xd4\x7f" "\x3f\xc2\xc4\xb7\x5e\x50\x64\xcf\xc6\xd3\x5d\xdf\x9c\xb1\x08\x13\x6d" "\x6d\x65\xac\xc8\xfc\x8e\x42\xee\xc1\x6a\x73\x99\x30\x3b\x6a\xc0\x1d" "\x83\x77\x89\x11\x0c\x31\xec\x45\x86\xd5\x7b\x27\xba\x98\x98\xdf\x96" "\x18\x85\x36\xec\x5c\x4e\x2d\xc2\x69\x07\xab\x1e\xc7\xf6\x04\xfe\xd1" "\x1c\xbd\xe0\xfa\x29\x2b\x95\x2e\xc8\x9b\xb5\x26\xf1\xde\x8a\x54\xeb" "\xd7\x44\x01\x93\x21\x33\x11\xeb\x7b\x64\x07\x41", 216); syscall(SYS_pop_ctx, 0x20000640); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }