// https://syzkaller.appspot.com/bug?id=6599b79e52059759a0af877a925ae07482a3dd64 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #ifndef __NR_capset #define __NR_capset 185 #endif #ifndef __NR_mmap #define __NR_mmap 192 #endif #ifndef __NR_mprotect #define __NR_mprotect 125 #endif #undef __NR_mmap #define __NR_mmap __NR_mmap2 int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); *(uint32_t*)0x20f4b000 = 0x19980330; *(uint32_t*)0x20f4b004 = 0; *(uint32_t*)0x20000000 = 0; *(uint32_t*)0x20000004 = 0; *(uint32_t*)0x20000008 = 0; *(uint32_t*)0x2000000c = 0; *(uint32_t*)0x20000010 = 0; *(uint32_t*)0x20000014 = 0; syscall(__NR_capset, 0x20f4b000, 0x20000000); syscall(__NR_mprotect, 0x20e00000, 0x200000, 0); return 0; }