// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000080, "\xc6\x14\xd9\x06\xbe\xfd\x28\x8c\x61\xee\xcd\x35\xde\xfc\x86\xec\x92" "\x6f\x82\x55\x45\x57\x8e\xd9\xdc\x94\x2a\x1c\x30\x08\x25\x22\xf5\x93" "\xa7\x3d\x92\x70\xc6\xdc\x2a\x3b\xa2\x6c\x44\x52\xc7\x69\x46\x42\xf7" "\x2d\x3a\x8a\xee\x10\x9e\xd0\xa5\x8c\xe0\xdb\x27\x6e\x90\x3d\x3f\x81" "\x27\x8e\x9a\xe0\xbb\x36\x2f\x7e\xe5\x7b\x13\xc1\x61\x84\x9d\x6b\x7a" "\xb4\xdd\x8c\x59\x02\xdc\x28\xd1\x3f\xc2\xc5\x7f\xec\xeb\x5b\xd2\x92" "\xd0\xe8\xbd\x18\x8d\x0f\x79\x31\x2c\xc7\xc6\xd7\x48\x56\xb4\xed\x54" "\x30\x81\x8d\x46\xfa\x55\x2c\x31\x4a\xe3\x2d\x30\xd3\xcc\xa3\xec\xed" "\x68\x89\x07\xc2\xb9\x53\x02\x66\x64\x52\xf6\xc4\x13\x2f\xd3\x4d\xbc" "\xe3\xe8\x9f\x2a\xa2\x44\x9f\xa9\x4a\x49\x49\x4c\x5b\xd9\x3e\xca\xd8" "\x10\xaa\x2a\xd8\xe4\x24\x8a\x91\x96\x2b\xb0\x75\x83\xed\xcc\x1f\x7f" "\xd7\x79\xf1\x84\x85\xc0\x1d\x57\x91\xb1\x6a\x12\x2e\x42\x72\x13\x48" "\x1d\xe8\x3f\xe9\x28\x24\x95\xc2\x44\xd1\xa3\x4c", 216); syscall(SYS_pop_ctx, 0x20000080); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }