// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000180, "\x66\xb0\x95\x27\xea\xa2\x9d\x0f\x0c\x4d\xd0\xfa\x8d\x5f\xae\x58\x54" "\x4a\x0a\xb8\x88\xeb\xaf\xca\xcd\xa2\xa7\x4f\x5d\x8c\x09\x95\x25\xbb" "\x6c\x1b\xdf\xb4\x18\x21\x0a\x05\x44\x89\xe8\xf4\xf3\x8b\x18\xf7\x9c" "\xa9\x4c\x3c\xbb\x85\x35\x16\x5c\xab\x04\x11\x0d\xc4\xd2\x76\x7c\xae" "\x43\xc3\x05\x83\xc0\x17\xcb\x24\x7b\x63\xc2\xf9\x95\xb6\xda\x7c\x70" "\x58\xd9\x45\x43\x9e\xae\x7e\x72\xf5\x1f\x3a\x2d\x84\x04\x85\x7b\x16" "\xf5\x8f\x3a\xf1\xe8\xe5\xa9\xca\x4a\x75\x96\x58\xd9\xa1\x7e\x8c\x9e" "\x9d\x40\xc6\x7d\xfd\x8e\x91\x1a\xa0\x1a\x69\x57\xbb\xdf\xdd\x29\x73" "\x68\xf6\x4e\x2a\x4e\x04\x18\x9c\xe5\xeb\x35\x43\x92\xd4\x6c\xc6\xdc" "\xf4\x2f\xc7\x03\x25\xe1\x77\x59\x26\x18\x32\xf5\x2a\x6f\x28\xc9\x6e" "\xaa\x5f\x34\x86\x44\x58\x5a\xbe\x4e\x7a\x8b\x2e\x42\xe3\xbc\xce\x60" "\x44\xc5\x2c\x40\x7b\x98\x87\x35\x3e\xf9\xfe\xa7\xbc\xd8\x8e\x3c\x4e" "\xcf\x19\x2f\x8f\xca\x3b\xfc\x7d\x51\x52\xb2\x26", 216); syscall(SYS_pop_ctx, 0x20000180); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }