// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000080, "\x7a\x55\x3d\xbf\x90\x27\xb6\x56\x92\x1a\xe8\xf9\x31\x55\x72\x88\xf3" "\x64\x69\x37\x38\x0b\xb8\xf7\x61\x8a\xdb\x0a\x05\x3f\x11\x6b\xc9\x26" "\x65\x2e\xe0\x17\xf4\xfa\xa5\x90\x9b\x79\x47\xd4\x08\x4f\x26\x98\x1a" "\xb1\x7e\x57\x25\x7b\x25\x44\x44\x3e\xb4\x70\x03\xe3\x0c\xca\xa5\x8e" "\x5e\x1e\xe5\xac\xf1\x6f\x3e\xf8\xa4\x2b\x4e\xa1\x37\x78\xd7\xc1\x2c" "\xf5\x5c\x1f\xa8\x88\x77\x14\x32\x47\xd4\x7c\xa5\x81\xc1\x1b\x1d\x89" "\xe9\xeb\xee\x53\x27\x0f\xe4\x58\x93\x56\xaa\x66\xa3\x94\xc2\x29\xda" "\x2b\x1c\x53\x1e\x53\xfd\xa7\x8c\x36\x6e\xe6\x99\xcd\xcb\xae\x6c\xca" "\xd8\x1e\x35\x87\x9b\xec\x0a\x27\x61\x45\x8a\x59\xf2\x66\x18\x7a\x47" "\x4c\x23\xcd\xc3\x7a\x08\xe3\x1c\x14\x27\x2f\x61\x96\x0d\x6f\x0a\x69" "\xf3\xac\x48\xd9\x4c\x99\xce\x67\x2e\x97\xa9\xd2\x34\xc8\x48\x6f\x43" "\xd5\x91\x54\xb2\x14\xc4\xe6\x30\xc3\x56\x71\xd8\x63\xc5\x26\x84\x96" "\x54\x57\xd8\xf8\xe3\x11\xa3\xa5\x82\xc8\x54\x48", 216); syscall(SYS_pop_ctx, 0x20000080); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }