// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x200014c0, "\x88\x51\xfb\x91\xc7\x25\x1a\x56\x1b\xef\x82\xf0\xea\x33\xd1\xe5\x0d" "\x8c\x3b\x09\x55\x45\x58\x9d\xf7\x00\xb4\xd8\xa1\x9b\x57\x01\xbd\x6f" "\xc0\xcb\x02\xc9\x1c\xa1\x41\xd4\x1d\xd9\x6f\x05\xf6\xa3\x9c\x8d\xad" "\x79\x37\x92\x67\x39\x33\x4e\x6e\x04\x24\x8d\x33\x8f\x8d\x8b\x36\x6f" "\xbc\x81\x80\x44\x33\x7a\x3c\xd6\x5f\xc2\x7d\x4a\xf2\x88\xb3\xe5\x57" "\x5e\xaf\x47\x89\x5c\xd8\x60\x4e\x78\xc0\x38\xb1\xa3\xe4\xde\x89\x81" "\x8f\x23\x36\x37\xfc\x7e\x5e\x88\x97\x9e\xae\x0e\xdb\x60\x42\xdb\x1a" "\x05\x31\x96\x17\x94\x4e\x79\x57\xb4\x39\x72\xca\x2a\xe7\x2e\xc8\x50" "\x3c\x8c\x24\xb2\xcb\xb7\xe8\x3a\x10\x49\x40\x98\x05\x90\xf8\x4d\x80" "\x26\x9d\xaa\x48\xfe\x0a\x2a\xd1\xda\x1d\x9c\x35\x94\xfc\x51\x0f\x07" "\x2f\x86\x6f\x7e\x6d\x03\x1c\x14\x1b\x8a\x78\xb0\x50\x2e\x80\x37\x81" "\x79\x5e\x0e\x6c\x05\x11\xa2\xf3\xde\xdc\x94\xc2\xf4\x1e\xd2\xd4\xe1" "\xc1\x18\xf7\x09\x97\x98\xd0\xa7\x00\x57\xad\x5c", 216); syscall(SYS_pop_ctx, 0x200014c0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }