// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000580, "\x24\xee\xbc\xa9\x5b\x73\x2e\xb7\x2a\x4c\x30\x2f\x05\xd6\x86\x82\x87" "\x12\x9e\x94\x5b\x65\xb5\x0c\xc1\x80\x4a\x7e\x23\xcd\xb6\xf4\x45\xc8" "\xda\x9f\x7a\x08\xe7\xd2\x5f\x1c\xf6\x9e\xf4\xf6\x10\x17\xfd\x81\x47" "\x81\xcf\xa2\x53\x65\xc0\xe9\xcf\xc3\x23\xdd\xf6\x1d\xb3\x9e\x9a\x4e" "\x76\x26\x2f\x94\x8c\xd0\xfb\x82\xae\xc7\x8d\x76\x1a\x2c\x2e\x62\xbd" "\xab\x53\x8e\xe6\xce\x87\xd5\xef\x96\xe2\x68\xee\xfe\x00\x91\x44\x60" "\xb3\xe1\xfa\xb4\xef\xc2\x3d\x9a\xaa\x49\x88\x95\x4e\x09\x34\x1c\x49" "\x07\xe2\xb1\xf7\x28\x47\x02\x2e\xf6\xf2\x17\x5d\xd9\x1b\x05\x6a\xb1" "\x2a\xe6\x2e\x4b\xb4\x01\xfc\x13\xca\xec\xfa\x89\x03\x70\xe1\xbd\x57" "\x0a\x2f\xb9\x2b\x8f\xe7\x0c\x3b\x09\x18\x2a\x4f\xfd\x6a\x32\xd3\xc5" "\x8f\x1f\x35\x54\x71\xfb\x6a\x86\x3d\x50\x73\x1a\xb6\x6e\x70\x1e\x67" "\x1a\x0e\x24\x3b\x00\x0d\x67\x48\x3d\xcd\xe7\xd1\x3b\xd1\x72\x5d\x50" "\xcf\x67\xbe\x59\xdb\x61\x06\x6d\x01\xab\x59\x1a", 216); syscall(SYS_pop_ctx, 0x20000580); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }