// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000140, "\x75\x46\x5f\xc2\x53\x2e\xcf\x53\x58\xa1\xf0\x14\xae\x56\x68\x25\x36" "\xe6\xf1\x76\x5e\x9f\x7a\xcb\x25\x0e\x56\xb7\xc8\xa2\x28\x14\x29\x47" "\x42\xd3\x62\xf9\xd7\x73\xf1\xef\x90\x00\x6e\xe0\x60\x63\x71\xdd\x12" "\x62\x7c\x17\x05\xdc\xea\xcf\x7a\xf9\x30\x2b\x6c\xb3\xfd\x0c\xdf\xea" "\x3c\x5f\x1f\x3b\x97\xfa\x93\x4e\x5d\x0a\xa4\xc6\x5a\x6e\x40\x9f\xa6" "\xb4\xf2\x3e\x49\x31\x8f\x8c\xd6\xa9\xc9\x5f\xb0\x4e\x1a\x03\x6c\xa1" "\x1d\xb7\xec\x14\xa6\xc3\x20\x31\x84\x3e\xab\xe7\x76\xd7\x72\x98\x40" "\xd7\x7f\x19\xe0\xc4\xc4\x76\xbe\x18\x39\xc3\x13\x5a\xf1\xe9\xf5\xc3" "\x4a\xe7\xf9\xeb\xd4\xb4\x4e\x42\x7d\xac\x6a\x54\xc3\x92\xc5\x54\x21" "\xe3\x6f\x30\x7d\x21\x87\xc7\x3d\xa6\xfc\x8f\x09\x00\xce\xf4\xdd\x34" "\xc8\xee\xb1\xa4\xac\x66\x4c\x67\x3f\x97\x85\x94\xee\x2a\x2c\x3e\x13" "\xfd\x58\xaf\xd8\x63\x64\x01\x26\xfe\x24\xe0\x8d\x51\xe7\x1f\x32\x21" "\x81\x33\xc3\xef\xd5\x2b\x30\x5d\x96\xaf\xc4\x7a", 216); syscall(SYS_pop_ctx, 0x20000140); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }