// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000540, "/dev/sdctl", 11); syscall(SYS_openat, 0xffffffffffffff9c, 0x20000540, 0xb, 3, 0); memcpy((void*)0x200005c0, "\x78\x49\x3f\x40\x19\xc8\xf9\x27\xe1\x69\x75\xd7\xd7\x13\x4f\xe0\x53" "\x69\xe7\x76\xe3\x5a\xf8\x1d\x49\xec\x75\x0c\x66\x5c\xf1\xac\x34\xe0" "\xd4\x27\xe2\x84\x96\xcf\xad\x4a\x6a\x39\x09\xc7\xb4\xb8\x44\x58\x99" "\x9a\xdb\xeb\x75\x34\xcc\x58\x15\x77\xf7\xc9\xd0\x08\x69\x12\xaf\xcb" "\xd6\x4f\x65\x1a\x1e\xbe\x43\xf7\x26\x51\x36\x62\x17\xd3\xf4\x4c\xd9" "\xa6\x4d\x43\xfb\x9f\x8d\x89\x1e\xf0\xeb\xae\x01\x8a\x6d\x2d\xda\xff" "\x3c\x8c\xdf\x3a\xe3\x6a\x20\xe1\xcf\x1e\xa8\xe1\x0b\x3b\x55\xe7\x88" "\xa8\x08\xd7\xab\x40\x37\xe1\x0b\x56\x9b\xd3\x6c\xc9\x52\x34\x82\x02" "\x04\x7b\x25\xf0\x1c\xeb\xb0\x65\x41\xad\x4d\x22\xb0\x37\xfe\x54\xcb" "\x43\x89\x32\x05\x3e\x03\xef\x1f\xc9\x5a\x07\x35\x20\x5d\x92\xe2\x6d" "\x02\x0d\xd9\xa5\x24\x5b\x55\xcb\x59\xef\x3a\x8a\x4a\xff\xec\x59\x60" "\xb1\x84\xeb\x03\x63\x9e\x09\xb2\x29\xd0\x3d\x58\xf2\xc3\xdf\x90\x06" "\xd7\x07\xa8\x2f\xa8\xb9\x29\x91\x3b\xba\xd9\x32", 216); syscall(SYS_pop_ctx, 0x200005c0); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }