// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000940, "\xae\x8b\x4c\x2b\x6a\x93\x89\x68\x6d\xd3\xc0\xaf\x6c\xe6\x7a\xbe\x20" "\xa6\xde\x5f\xa3\x07\x8e\x42\x3f\x1c\xaf\xa4\xed\x7c\xd9\xf7\x3d\xe6" "\x42\x0d\xb6\xb7\xda\x9b\xcb\x70\x7b\x1f\x4c\xb6\x74\x58\x5f\x16\xe3" "\x32\xab\xd2\x44\x5c\xeb\xd6\x2e\x05\xcf\x0e\x49\x28\x84\xc0\xf5\xae" "\x1c\x19\x4f\xc3\x95\x63\x0c\x35\x2f\x85\x21\x2b\xa3\x06\xc5\x1d\x4e" "\x26\x7d\xeb\xf2\xd5\xb8\x57\x5a\x78\xee\x96\x72\x5c\xf0\xa8\x97\x89" "\xf1\x3a\xf1\xf0\xe3\xa9\x3a\xc8\x22\xd2\x8f\xf9\xb0\x05\xac\x42\x5f" "\x9e\x4e\xc7\xb1\xc4\x03\x54\x4c\x8c\x53\x82\xd0\x73\x4a\x95\xa1\x61" "\x7a\x6a\x03\x80\xca\x44\x59\xa3\xf1\x3e\x2b\x9a\x0a\xfe\x5d\xe1\x3a" "\x80\x49\x0e\xef\xf8\x9c\xf3\x06\x74\x99\x2a\x7f\xe7\xc8\x2a\xf3\xab" "\xd9\x84\x45\xa9\xd5\xa8\x47\xdf\x90\xd9\x39\x3e\x75\x5d\x5d\x81\x52" "\x25\x4f\x06\x07\xbd\x60\x07\x6a\x47\xb6\xae\x29\xa7\x43\xe6\xee\x48" "\xfd\xe8\x42\x93\xbe\xb1\xe5\xe4\xbb\xc8\x01\xda", 216); syscall(SYS_pop_ctx, 0x20000940); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }