// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000480, "\xa2\x37\x7e\xd3\xa7\xf3\xb0\xb9\x55\x19\xaa\x25\xc3\x21\x54\x5b\x4f" "\xd8\x87\x5d\xbc\x5c\xca\xb3\xb4\xfe\x17\xc5\x69\x57\x56\x74\x3a\xbb" "\xbf\xb6\x34\x87\x71\x6f\xd3\xba\x5e\x57\xe2\xaf\x34\x6a\x5a\xc9\xcd" "\xe7\x37\x7f\xc1\xa4\x6c\x26\x1c\xc9\xd2\xd4\xd3\x6d\x90\xb1\x22\xce" "\x86\x30\x74\xfb\x3b\x23\xf8\x90\x66\xcc\x1d\x99\x04\xdc\x79\x55\xe0" "\xda\xd0\xe0\xd7\xc1\xed\x4c\x57\x6b\xd4\x75\x14\x74\x18\x02\x1e\x5b" "\x18\x82\x04\x56\xbe\x64\xcb\x61\xca\x84\xd2\x8d\xc1\x0c\xc6\x51\xcb" "\xb8\x63\x24\xc7\x18\x94\x00\x51\x6a\x8b\x55\xc3\xc4\x12\xbc\xd8\x86" "\x4a\x19\xad\xac\x5a\x7c\x8f\xab\xf9\x2d\xf8\xd4\x1b\xe6\xe0\x90\xd6" "\xe4\x4c\xc0\xfb\x9a\xe4\x18\x45\xba\xb3\x66\x5e\x61\x5b\x91\xaa\x8a" "\x4c\x1a\x8b\x61\x0b\xaf\x48\xb5\xe3\x86\xc1\x51\x41\x9e\x35\x72\x02" "\x56\x6d\x88\x90\x00\xa5\x83\x62\x73\x32\xf2\x08\x20\x4e\x07\x70\x14" "\x35\x16\x30\x8b\x1b\x99\x2b\x7d\xa3\x4e\x45\x56", 216); syscall(SYS_pop_ctx, 0x20000480); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }