// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000140, "\xd4\xc4\xb0\x1c\x76\x81\x51\xc0\x6a\x33\xd3\x37\xf2\x8c\xf0\x0b\xa1" "\x81\x9f\x50\x7f\x3d\xed\x14\x6e\xe7\x39\x1d\x43\xfd\xa4\xca\xda\x1e" "\x1d\x07\xbb\xf3\xed\xb7\x46\x2b\x3f\x49\xdd\xf0\x94\xa0\xf3\x26\xdd" "\x7d\xc1\x07\x0c\x4c\x43\xc4\xe4\x97\xf4\x4b\x56\x81\x86\xb2\x3e\x1a" "\x6c\x69\x39\xae\xce\x36\xa6\xbe\x95\x82\xfd\x9f\x85\xb1\x0c\x3c\xbe" "\xfd\x63\x34\x87\xde\xaa\x63\xc2\xc7\xb9\xf2\xa6\xc1\x45\x02\x78\x32" "\xaf\xf4\x5e\xe5\x06\x34\xcd\xa9\x00\x2f\x16\x67\x56\x1c\x5d\xeb\xd0" "\x91\x27\xfc\xb2\xa0\x87\x6f\xb4\x48\x68\x4a\x86\x1a\x7f\xa2\x20\x4e" "\x3e\x7d\x20\xb8\x6f\xfc\x47\xc2\x7e\xe8\xe5\xf4\x96\xbe\x9f\xac\x2c" "\x54\xa7\x73\xe2\x6b\xe2\x29\xac\xa8\x0a\x4e\xe1\x8a\xbc\xe0\x67\x30" "\x85\x74\xae\xf0\xe3\xbb\x2c\xe9\x53\xaf\x89\x82\x69\xbb\x59\xd0\x0f" "\x75\x14\x82\x8c\xa1\xf4\x75\xfb\x7f\xd0\xae\x7e\xad\xf6\x1c\xab\xd7" "\x37\x3a\x55\x87\xcb\x58\x8a\xe7\xd0\x5a\x85\x5f", 216); syscall(SYS_pop_ctx, 0x20000140); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }