// https://syzkaller.appspot.com/bug?id=99cebff75dc8a0cc7ac982cd2d804152597d5e62 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); long res = 0; memcpy((void*)0x20000000, "/dev/capuse\000", 12); res = syscall(SYS_openat, 0xffffffffffffff9c, 0x20000000, 0xc, 3, 0); if (res != -1) r[0] = res; memcpy((void*)0x20000200, "\x4a\xc8\x9e\x2d\x5a\x73\x34\x51\xc5\x55\x85\x59\x1a\x4b\xe4\xf3\x29" "\x68\xe0\xc7\x33\xc8\xbe\x7e\x43\x76\xd7\x7f\x25\x43\xa6\x96\x88\xa9" "\xb0\x9f\x89\x5a\x55\x24\x2d\x77\xa9\x62\xcb\x52\x6e\xf5\x34\xdb\x67" "\x98\xe8\x6b\x89\x22\x07\xbb\x02\xed\x1b\x6f\xaa\xac\x83\x39\xa4\x03" "\x64\x39\xae\x52\x7f\x0f\x6a\x23\x2a\x03\xf7\xba\x28\x1d\x42\x0f\x84" "\xcc\xec\x41\x2e\xb2\xae\xc3\x54\x26\xb1\x44\x40\x4a\x8d\x39\x2c\x19" "\x32\x6c\x07\x2c\xd1\x6d\x3c\x53\x14\x36\xe0\x03\x6e\x44\x43\xe5\xa8" "\xbc\x9d\x44\x70\xbb\xd4\x5a\x7e\x0a\x37\xb3\xf1\xfe\xa6\xa9\xfa\xe4" "\x68\xc0\x89\xc8\xf1\x4a\x0b\xf2\xe3\x05\x38\x68\x3a\x74\x72\x82\x1a" "\x8e\x86\x9d\x30\x26\x1f\xc4\x86\x40\xa8\x7b\xe0\xb1\x63\xbd\x2a\x99" "\x2a\x23\xc5\xb0\x0e", 175); syscall(SYS_write, r[0], 0x20000200, 0xaf); return 0; }