// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x200004c0, "\xb4\x9d\xa9\xc9\x06\x8b\x48\xc3\xb7\x63\x0d\xf8\xa4\x27\xb5\xc1\x2d" "\xd8\x11\x20\x93\x44\x7e\xc9\x99\x46\x33\x40\x1b\x97\x53\x57\xc3\x53" "\x2f\x20\x7a\x9e\x28\xa9\x84\x8e\xfe\xf9\xa9\x4c\xd5\xdc\x21\xb0\x9b" "\x31\xd5\x5c\xed\xd9\x47\x29\xae\xc2\x77\xa0\x02\xad\xc2\x9d\xd2\x75" "\x47\xda\x75\x60\x6e\x32\x4f\x49\xa9\x4c\x08\x06\x6b\x89\xf1\x7b\xd0" "\xa8\x02\x5d\xd1\xbf\x28\x33\x69\x82\xb0\x0a\x13\x8d\x11\xb7\x56\x2d" "\x4e\xc6\xd2\x7d\xc3\x54\x80\x63\x68\x51\xeb\xf4\x85\x94\xde\x3e\x27" "\x30\xf9\xc0\xf4\x78\xe1\x87\xa4\xc5\x69\x18\x04\x97\xfd\xea\x4a\xbc" "\x81\x49\xef\x10\xa3\x07\x85\x61\x55\x57\xfd\x68\x9b\x1d\x11\xfb\x1e" "\x17\x4a\x56\x72\x78\xb1\xa2\x40\xae\x80\x8d\x73\x48\x59\x7c\x43\xa2" "\x07\xb6\xe6\xde\x82\x00\x4d\xfb\x10\xa8\x7f\x5e\x8b\x2a\xeb\xae\xb7" "\xd9\xf8\x4f\xb0\xac\x5a\x80\x8a\x25\x56\x8d\x65\x66\x5c\xc6\xdc\xea" "\xf2\x05\x6e\x38\x67\x74\x27\x59\x8c\x94\xe5\x84", 216); syscall(SYS_pop_ctx, 0x200004c0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }