// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000640, "\x57\x83\x12\x2c\x0d\x5a\x32\x26\xbe\x5a\x4a\xcc\xc0\x24\xa9\xd9\x59" "\x9b\x92\x3a\xed\x55\x6d\x17\x9b\x3c\x9c\x3d\x1c\xa3\xd4\xc9\x9d\xb1" "\x15\x4c\xf5\x5c\x46\xb4\x99\x0c\x41\x94\xd7\x2b\x2c\x0a\xe9\x92\x67" "\x32\x0f\x9c\x26\xaa\x13\xc9\x60\x81\x63\x52\xc1\x66\x9a\xa1\x83\x3f" "\xad\xb8\x0e\xf1\x7c\x9a\x90\x08\xc2\x75\x06\xe4\xd0\x80\x16\x1a\xab" "\xd1\x8c\xc5\xfc\xec\xc8\x12\xb6\x10\xde\x9a\xd8\xfb\xa7\x65\xca\x8f" "\x2f\x81\xe0\x54\xdd\xe4\xc6\xdd\xd8\x78\xc6\xbd\x6d\xb4\x79\x50\x41" "\xf0\xf2\xd7\x51\xa6\xb8\xc0\x8e\x3d\xf7\xa1\x92\x81\x70\x6a\x1d\x85" "\x3d\x11\xc7\xd1\x8c\xa1\xdc\x8a\x53\x96\xa1\x62\x45\xe3\x83\xb0\xa1" "\x73\x62\xb0\x63\x71\x1b\xd8\xe3\x06\xac\x9e\x8b\x55\x52\x62\xaf\x0d" "\x78\x6b\x18\xf5\x6d\xf2\xa2\x07\xf2\xb4\x51\xfb\xce\x9b\xf1\x34\x94" "\xcb\x7b\xce\x56\xee\xb4\xa4\xfd\x98\x1b\xcc\x66\xb8\x57\x38\xa4\x98" "\x40\x4f\xa9\x25\x21\x08\xde\x83\xff\xe9\x90\xcf", 216); syscall(SYS_pop_ctx, 0x20000640); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }