// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000180, "\x79\x22\xb1\x0d\xb8\xb6\x60\x71\x6f\x44\xc5\x6c\xbf\x5f\x7a\xb8\xc0" "\xab\x6b\x8c\x77\xde\x69\x26\x62\x3f\xab\xe9\xeb\x81\x58\x6a\xe0\xb5" "\x93\x73\x3d\x8b\xde\xf5\x80\x92\x5e\xf5\x2f\x4e\x41\xfc\xda\x0e\x48" "\xeb\x84\xfb\x92\x49\xcb\x83\x0d\xd0\xa8\x0e\x57\x3a\x69\x8a\x70\x68" "\xbc\x29\x90\x42\x03\x33\xef\x93\x4f\xe0\x27\x1f\xbe\x26\xf4\xb1\x88" "\x49\xe9\x34\xfe\x0e\x2a\x89\xaf\x78\x1e\x7a\x3b\x53\xea\xfc\x63\x4c" "\x03\xe9\x3f\xa3\x30\x47\x02\xae\xc6\xdf\xeb\x3a\x88\x4c\x92\x6b\xfc" "\x51\x50\x2a\x27\xe8\x58\xf1\x3d\xdb\x57\xf3\xbc\x57\xe6\xef\x45\xb6" "\xeb\xae\x01\x2e\xe8\x99\x73\x20\x4f\xa3\x88\xd1\xb6\x49\x25\x3c\xc8" "\xd1\x49\x97\xe8\x4d\xc0\xbe\x41\xf4\x95\x91\x3a\xf9\x96\xd0\x2d\x84" "\x7c\xde\xc3\x8e\x68\xd4\xac\xb1\x2d\x85\x63\x33\x44\x08\x2c\xc6\x5d" "\xf4\x22\xb6\xf3\x7e\x09\xd7\xe5\x0c\x65\xd2\xd1\x0f\xce\x83\x58\xa6" "\xe5\xc6\x56\x46\xd3\x2b\xb6\xbd\x92\x15\x0b\xb9", 216); syscall(SYS_pop_ctx, 0x20000180); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }