// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000300, "\xb3\x20\xce\x53\x8f\x8c\x3a\xf1\xcd\x94\xe9\xf3\xaf\x16\xea\x11\x7c" "\xf9\xaa\xb5\x79\x0b\xc2\x96\x96\x58\xd5\x4f\xf1\x8d\x31\xb1\x6b\x25" "\x3c\xf6\x5c\x7e\x74\x18\xc1\xa4\x10\xab\xc2\x47\x0f\xad\x13\xfe\xb6" "\xe7\x89\xf4\xda\xb2\x52\x88\xec\xd1\x82\xc2\x05\xdb\xc0\x7d\x4f\x1f" "\x70\xf7\xe6\x5b\xcd\xc4\xe3\xea\xae\x0f\x5d\xf7\xff\x59\xe7\xd6\xbc" "\x86\x9d\xfb\xf9\x49\x3f\x28\xdb\xfe\x68\xf4\x6e\xac\x28\xe2\x84\xfd" "\x54\x3e\x92\x62\x09\x29\x2d\xd7\xc0\x5f\x01\x7c\x4a\xf9\x39\x82\x23" "\xf3\x26\x3a\x19\xf3\xe5\x67\x48\xda\x0d\x52\x7a\xa9\x66\x15\x8f\x5d" "\x2c\xa6\x9d\x9c\xee\x95\xa0\x3a\xcc\x4e\xef\x8c\x15\xc6\xbb\xb7\xdd" "\x43\xab\x54\x0f\x33\x55\x56\x95\xe1\x79\xc6\x01\x6c\xa9\xec\xde\xa5" "\xff\x3b\xf3\x1d\xd4\xf6\x46\x7a\xb6\xa6\x97\xc9\xc7\x00\x07\xbc\xad" "\xe0\x50\x90\x57\x33\xa5\xec\x8f\x27\xa0\xb9\x16\xa1\xa8\xc8\x0b\x26" "\x77\x16\x7e\x5f\xf4\xa4\xf0\x7b\x2f\x8c\xcc\xdb", 216); syscall(SYS_pop_ctx, 0x20000300); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }