// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7
// autogenerated by syzkaller (http://github.com/google/syzkaller)

#define _GNU_SOURCE
#include <stdint.h>
#include <string.h>
#include <sys/syscall.h>
#include <unistd.h>

void loop()
{
  memcpy((void*)0x20000000,
         "\x65\xdc\xf7\x68\x1a\xcc\xf2\xe8\xc2\xf1\x4c\x42\xe2\xd2\xed\x69\xdc"
         "\xbf\x8a\x5a\x4e\xc9\xfd\x4b\x61\x89\xdb\x42\xd7\xd0\x24\xec\xc9\xe1"
         "\xed\xfb\x57\xea\x8f\xd0\x5d\xa5\x8d\xcf\xfd\xac\x94\x87\xfe\xb6\x09"
         "\xee\xe1\x56\xf9\x38\x95\x29\x4c\xa8\x84\x03\x25\xd7\x71\x4e\xea\x87"
         "\xc9\xf5\x7b\x44\xdf\x25\xdb\x33\x2c\x68\xa1\x69\xc3\xca\xa1\x10\x93"
         "\x35\x23\x15\xef\xae\xdc\xd9\x17\x05\xe1\x01\x4c\xc6\x38\xa5\x01\x50"
         "\x10\xf2\x24\xcc\x8b\xa5\xc9\x7b\xe2\x7e\xcd\x37\x77\x02\x2c\xd9\xf1"
         "\x70\x52\xd3\x4b\xae\xad\x37\xbf\x37\xbc\x56\x21\x8e\xa4\x94\x18\x47"
         "\xa4\x7e\xb7\x32\xa7\xf5\x14\xcd\x29\x8b\x72\xad\x6b\x51\x2a\x7e\xfb"
         "\x81\xc8\x53\x5e\x6f\x5a\xa6\x6b\xaf\x80\x1b\x65\x3f\x69\xb0\x8d\x6b"
         "\x66\x51\x3c\xf7\x9f\x46\xb9\x45\xc8\xc9\x16\xb6\x20\xe7\x91\x59\x58"
         "\x79\xfb\xb5\x82\x68\x86\x42\xbf\xb7\xe0\x38\x3d\x4d\xe4\x21\x69\x96"
         "\x6b\x27\x70\x50\x39\x5c\xf5\xb4\x36\x74\xa0\xe2",
         216);
  syscall(SYS_pop_ctx, 0x20000000);
  syscall(SYS_mprotect, 0x20ffd000, 0x1000, 0);
  memcpy((void*)0x20000640, "/dev/config", 12);
  syscall(SYS_openat, 0xffffffffffffff9c, 0x20000640, 0xc, 1, 0);
}

int main()
{
  syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0);
  loop();
  return 0;
}