// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000700, "\x30\xd3\x93\x17\x03\xc3\x94\x7c\xc1\xe0\x9d\xee\xed\x47\xd0\xa3\xd2" "\x09\x20\x3e\x09\x4a\x9d\xd4\x38\xc0\xe4\xb3\x6d\x22\x83\x3a\x3b\x4f" "\xe6\xac\x75\xf6\x7d\x99\x57\x29\x21\x84\xb9\xdb\x5c\x2b\x4a\xa4\x40" "\x13\xf1\xcc\xae\x01\xb0\x8f\x4f\xf1\xca\xc3\x15\x65\x0e\xf7\x1c\xb5" "\xf7\x0b\xbe\xad\xfe\x33\xcf\x93\x3d\xda\xf2\xac\x2c\x07\xa6\x6d\xd6" "\x13\xd7\x02\x70\xe5\x5a\x6c\xd5\xdb\xd9\xb1\x08\xbb\x01\xce\x1a\xb5" "\x25\x71\xf7\xe7\x7a\x22\xca\x33\x58\x60\x1e\x9e\x64\x66\x9e\x31\xa7" "\xe5\x96\x53\x62\x3c\x14\xca\xf8\x2a\xbd\x62\x7f\x7c\x35\xda\xca\xfb" "\x13\xc6\xe1\x98\x18\x10\x7d\xcd\x6d\x95\xa6\x13\xe2\x9f\x80\x44\x96" "\x10\x6b\xbd\xaf\x27\xfb\x74\x51\x32\x7d\x2d\x9e\xc3\x4f\x13\x9e\xe6" "\x02\x14\x5a\x92\xc7\x3b\x37\xa1\x96\xf3\x56\x88\x28\x6f\xea\xb4\xdc" "\x35\x8e\x78\x2f\x4a\x76\xdc\xb1\xbd\x6d\x19\x8a\x6a\x3b\xfc\x3d\x58" "\xc1\xc0\x25\xa7\x45\x86\x19\x57\xe6\x7a\x1e\x82", 216); syscall(SYS_pop_ctx, 0x20000700); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }