// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000140, "\x28\x7c\x35\x3e\xbc\x97\x49\x89\x30\xe3\xa2\xe2\xc2\xfd\x88\x2f\x48" "\x82\x33\x4f\xb8\xde\x43\xcf\x86\x03\xa1\xca\xf9\x66\x27\xb1\x6b\xe6" "\x8d\x1f\x91\xf3\xe0\xec\xf3\x8f\x25\x61\xa7\xcf\x05\x4f\x43\xbc\x42" "\x53\x0e\x7f\x20\x70\x25\x36\xf2\xe8\x2e\x30\x73\x3c\xed\x61\x85\x4e" "\xa8\x9c\xa1\xe8\x49\xf8\xed\xb7\x0a\x71\xe5\x97\xc4\x07\x2e\xc4\xb8" "\x4b\x28\x54\x3e\x75\x1b\x69\xcc\x68\x51\x30\xf0\x85\x3a\x43\x29\x19" "\xd2\x03\xb2\x74\x99\x54\xae\x70\x6c\xc9\x60\xb6\x44\x96\xa4\xd9\xab" "\xe1\x80\x87\xa1\x02\x61\x17\x07\xc7\xa7\x77\xe6\x28\x51\xc3\xc8\x66" "\x90\x39\x2c\x34\x71\x43\x57\x87\xe2\xc8\x40\x43\xd6\xca\x1a\x74\x91" "\x73\x92\x10\xd0\x55\xeb\xa0\xa6\x59\xf2\x16\x6d\x2a\x5e\x3e\x2e\xa2" "\xf3\xec\x41\xb8\x05\x86\x8c\x1c\xd1\x57\x0b\x0b\x08\xe4\x16\x34\xc7" "\xae\xbb\x55\xe3\xb8\xa0\x5a\xd8\xbc\x32\x53\x7b\xa1\xdf\xc3\x1e\xa5" "\x0b\xc1\x86\x8d\x75\x5a\x2a\x4d\xc7\x35\xd2\xdf", 216); syscall(SYS_pop_ctx, 0x20000140); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }