// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000180, "\x6c\x6a\xae\x86\x3e\x7f\xcb\xa5\xd1\x7f\x50\xe2\x51\x08\x9f\x18\x2e" "\x50\x85\x08\xf2\xa6\x51\xfd\x43\xf2\xf2\x06\x9d\x8e\x1b\xad\xe4\xd8" "\x38\x3f\x0f\xc2\x05\x9b\xfe\x6b\x8d\x3a\x5a\xfc\xac\xe6\xfa\xb3\xe4" "\xb0\xf2\x08\xee\xa5\x60\xfd\x3d\x47\xf7\x9b\xc7\x8e\xb7\x73\x58\x0d" "\x13\x52\x71\x93\x96\x70\xb1\xd4\x9f\xfd\x92\x7f\xf7\x7d\x94\x4b\xc3" "\xfd\xb2\x19\xc8\x36\xae\x50\x70\x82\xdd\x30\xad\xc1\xd3\xe9\xa7\x69" "\x57\x17\x4c\x84\xd2\xe7\x42\xf1\x61\x11\x13\x3a\x0f\xdd\xb2\x30\xf2" "\x1c\xb4\x42\x14\x9d\xbb\x4e\xf1\x30\x08\x61\x44\xf4\xb6\xdb\x49\x8e" "\x51\x05\x51\xbc\x02\xcc\x5d\x1c\x87\x64\xa0\x0a\x45\xcb\x58\x22\xb6" "\xda\xa3\xad\xb6\x1b\x59\x07\x9c\x8d\x44\x95\xa7\x4e\xa8\x39\x97\x90" "\x8f\x32\x61\x99\x3a\x91\x2f\xf3\x38\x0f\x21\xa0\x0b\x97\x08\x64\x46" "\x4e\xc9\x14\x39\x1a\x78\xbb\x86\xaa\x7e\xfb\x2b\xc1\xf3\x82\x4b\x04" "\xe3\xa4\xa0\xde\x8c\xf4\x9b\x55\x6a\x2e\x1d\xc1", 216); syscall(SYS_pop_ctx, 0x20000180); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }