// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000400, "\x7c\x10\x34\x47\xdd\xae\x81\x01\x90\x59\x92\xe4\xcd\xa6\xee\x1c\x3b" "\x3d\x93\xd8\x8e\xe9\x68\x98\x9b\xf2\xf9\x5d\xea\x49\x75\x99\xb9\x6b" "\x66\x20\xc6\x36\xf6\x55\xc6\x40\xb3\x7c\x04\xe6\xf5\x02\xdc\x93\x1c" "\x4b\xf5\xb2\x57\x5b\x6d\x46\x22\xbb\x1e\xfd\x6b\xcb\x76\x80\x07\xfa" "\xad\xf2\x6c\x19\xac\xf7\xfc\xeb\x81\x93\x3a\x83\x8d\x67\x62\x42\xd0" "\xa6\x9b\xc3\x14\x53\xb3\x97\x7b\x08\x50\xab\x2c\xc2\x07\xcb\x53\xed" "\x5e\xdc\x3e\xec\x09\x60\x58\x6a\xd4\x1d\x4f\xc1\x41\x2b\x3e\xbf\x33" "\xe9\x95\x2f\xc1\x90\x2a\xe2\x3e\xcd\x4e\xb2\xec\x3a\x19\x17\x3a\x57" "\x2b\x4e\xb9\x7b\x7e\x1a\x06\xa9\x9b\x9b\xc3\xff\xb6\x32\x81\x5b\x39" "\x8f\x89\x61\x5e\x9b\xbb\x38\xec\x0a\xe4\xda\x0c\x90\x87\x75\x19\x2a" "\x78\x3e\x2c\x31\x24\xe4\xe8\x4b\x1e\x50\x20\x00\x8e\x3f\xab\xcb\xd1" "\xb9\xa6\x8a\x43\x19\x74\xe3\x49\x3a\x7b\x66\xb2\x5f\x7b\x70\x6f\x81" "\xb5\x1d\xbd\xe7\xcb\x8d\x34\xb4\x8c\x22\x66\xb0", 216); syscall(SYS_pop_ctx, 0x20000400); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }