// https://syzkaller.appspot.com/bug?id=9aae5fdca1a6ae8f37bc35ffc04d407aafc006f4 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #define __syscall syscall int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x1012ul, -1, 0ul); *(uint32_t*)0x20000280 = 1; *(uint32_t*)0x20000284 = 0x50; memcpy((void*)0x200006c0, "\x11\xab\x71\xdf\x0b\xee\x64\x10\x37\xef\x26\x4e\x52\xbf\x5b\xa4\xe8" "\x89\xde\x2a\x70\x05\x2f\xb3\x17\xa6\xfa\xad\x28\x7f\x80\x42\xba\xcf" "\xd8\xd4\xa0\x60\xbe\x98\x39\x7a\x4c\xfe\x10\x95\xa4\xc9\x7e\x36\xa6" "\x14\x81\x5f\xff\x27\x19\x57\xd3\xcd\x40\xa8\x70\x52\xff\xef\x66\x50" "\xd2\xe2\x9d\x42\xad\xf8\x10\xd0\xfc\xa0\x6a\xa5\x86\xd7\xda\xdd\x23" "\xaa\x82\xcf\xfa\x33\x76\x18\xb4\x5d\x60\x88\xa9\x73\x7e\x8b\x58\x1e", 102); *(uint64_t*)0x20000680 = 0x1b80; syscall(SYS_sysctl, 0x20000280ul, 3ul, 0x200006c0ul, 0x20000680ul, 0ul, 0xfffffffffffffe97ul); return 0; }