// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000540, "\x06\x60\x37\xeb\x4c\xcf\xce\x56\x4e\x7c\x0a\xcd\x18\xa2\xa7\xeb\xc4" "\xfb\x43\xde\x72\x2d\x7f\xa4\x3a\x8c\x90\xaa\x58\xf8\x1a\xd5\x92\xc6" "\xd5\xd8\xdf\x0f\x89\xe6\xb0\xbe\x95\x29\xcc\x91\x3d\xf7\x65\x5c\x25" "\x5e\x16\x03\xc1\x3d\x9f\xc1\x68\x25\x1d\x0f\x87\x26\xcb\xa0\x29\x9b" "\xec\xac\x35\x3b\x3b\xaf\xde\xf4\x2e\xe7\xc4\x9e\x95\x8a\x15\x3d\x32" "\x29\x98\xf0\xfc\xf4\x81\x16\x59\x3a\x18\x9e\x67\xc3\xd1\xfc\xad\x14" "\x3d\xce\x95\xcc\xe8\xd9\x4b\x94\xac\x70\x3a\xb1\xda\x72\xd9\x64\x18" "\x55\x92\x9c\x2a\x30\x76\x8d\x4f\x0c\xc1\x64\xa9\x99\xb3\xd9\xc3\x58" "\x67\x15\x56\x22\x70\x8c\x21\xe4\x7c\x7c\x7b\x75\x6e\x7f\x14\x7d\x0b" "\xa2\xc8\xdd\xd3\xd5\x85\xd1\x64\x88\x04\x5d\xae\xf1\x0f\x34\xd9\x1d" "\xdc\x44\x0e\xba\x1a\xd1\x86\x1d\x1a\xc8\x94\x8d\xbe\x78\xf7\x65\x3e" "\x84\x63\x6c\x30\xec\xca\xec\x49\x96\xdc\x1a\x4d\x69\x4e\x54\x4f\xca" "\x5f\xf9\xab\x53\xb1\x19\xec\x0e\xd0\x5b\xd7\xab", 216); syscall(SYS_pop_ctx, 0x20000540); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }