// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000600, "\x8d\x6a\x4c\x49\xaf\x8b\x3a\x3a\x23\x06\x03\x9f\xc9\xa5\x76\x3a\x9a" "\xce\x4d\xbf\xc8\x1c\x89\x83\xaf\xa7\x4c\x9f\xb3\x9e\x59\x63\xdf\xcc" "\x2c\xdf\x6e\xd0\x8d\xf8\x35\x4c\xbf\x07\xd1\x50\x05\x2d\xa4\x34\x40" "\xce\x51\xfa\xad\x71\x6c\x63\x35\xb5\xe5\xd0\x7e\xa0\xce\x4e\x6c\x75" "\x37\xaa\xff\x67\xd1\xf4\x5f\x5a\xf6\xd5\x99\xa8\x4c\xf7\x62\xf2\x79" "\x73\xff\xb1\x7a\xf4\xe0\x4a\x19\x5f\x55\x1d\x07\x8e\x86\xa2\xc3\x58" "\xf7\x2a\x0a\x74\xd2\xb2\xc0\x66\xa5\x47\xdd\xb6\x53\x63\xc7\x6b\x0e" "\xb9\xb2\x1f\x16\x84\xb0\xc5\xe7\xe2\xfd\xe7\xef\xa4\xd3\x60\x6e\x98" "\x91\xc8\xea\x2f\x5a\x46\x28\x79\x8b\xdd\xb6\x2d\xbf\x30\x13\x78\xd9" "\x30\x6d\xb4\xc2\x2b\xae\x77\xb6\x1e\x83\xb2\xfa\x12\xf8\x31\xf4\xb5" "\xc6\x3b\x43\x43\xb5\x98\xe6\x34\x08\x89\xff\xf9\x59\xe9\x89\x11\xf5" "\x61\x18\x27\x45\x55\x2f\xf8\xe0\x56\x9b\x0c\xfd\x2f\xa4\x1a\x2d\x39" "\xb1\x0c\xee\xe0\x1e\x9c\x5d\x8b\xb2\x4d\x7d\x89", 216); syscall(SYS_pop_ctx, 0x20000600); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }