map[SimplifiedCRepro:// autogenerated by syzkaller (https://github.com/google/syzkaller)
#define _GNU_SOURCE
#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/mount.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>
#ifndef __NR_bpf
#define __NR_bpf 321
#endif
uint64_t r[1] = {0xffffffffffffffff};
int main(void)
{
syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
const char* reason;
(void)reason;
intptr_t res = 0;
if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {}
// bpf$PROG_LOAD arguments: [
// cmd: const = 0x5 (8 bytes)
// arg: ptr[in, bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]]] {
// bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]] {
// type: bpf_prog_type = 0xc (4 bytes)
// ninsn: bytesize8 = 0xe (4 bytes)
// insns: ptr[inout, array[ANYUNION]] {
// array[ANYUNION] {
// union ANYUNION {
// ANYBLOB: buffer: {b7 02 00 00 14 00 00 00 bf a3 00 00 00 00 00 00 07 03 00 00 00 fe ff ff 7a 0a f0 ff 01 00 00 00 79 a4 f0 ff 00 00 00 00 b7 06 00 00 ff ff ff ff 2d 64 05 00 00 00 00 00 65 04 04 00 01 00 00 00 04 04 00 00 01 00 7d 60 b7 03 00 00 00 00 00 00 6a 0a 00 fe 00 00 00 00 85 00 00 00 0d 00 00 00 b7 00 00 00 00 00 00 00 95 00 00 00 00 00 00 00 5e ce fa b8 f2 e8 5c 6c 1c a7 11 fc d0 20 f4 c0 c8 c5 61 47 d6 65 27 da 30 7b f7 31 b9 79 98 83 07 fe f9 78 61 75 03 79 58 5e 5a 07 6d 83 92 40 d2 9c 03 40 55 b6 7d af e6 c8 dc 3d 5d 78 c0 7f a1 f7 e6 55 ce 34 e4 d5 b3 18 5f ec 0e 07 00 4e 60 c0 8d c8 b8 db f1 1e 6e 94 d7 59 38 32 1a 3a a5 02 cd 24 24 a6 6e 6d 2e f8 31 ab 7e a0 c3 4f 17 e3 94 6e f3 bb 62 20 03 b5 38 df d8 e0 12 e7 95 78 e5 1b c5 30 99 e9 0f 45 80 d7 60 55 1b 5b 34 1a 29 f3 1e 31 06 d1 dd d6 15 2f 7c bd b9 cd 38 bd b2 20 9c 67 de ca 8e eb 9c 15 ab 3a 14 81 7a c6 1e 4d d1 11 83 a1 34 77 bf 7e 86 0e 36 65 f1 32 8d 67 04 90 2c be 7b c0 4b 82 d2 78 9c b1 32 b8 66 7c 21 47 66 1d f2 8d 99 61 b6 3e 1a 9c f6 c2 a6 60 a1 fe 3c 18 4b 75 1c 51 16 0f b2 0b 1c 58 1e 7b e6 ba 0d c0 01 c4 11 05 55 85 09 15 14 8b a5 32 e6 ea 09 c3 46 df eb d3 86 08 b3 28 00 80 00 5d 9a 95 00 00 00 00 00 00 00 33 4d 83 23 9d d2 70 80 85 1d ca c3 c1 22 33 f9 a1 fb 9c 2a ec 61 ce 63 a3 8d 2f d5 01 17 b8 9a 9a b3 59 b4 ee a0 c6 e9 57 67 d4 2b 4e 54 86 b6 af 27 db fd 2e 6d 7f 71 5a 7f 3d ea dd 71 30 85 6f 75 64 36 30 37 67 d2 e2 4f 29 e5 da d9 79 6e db 69 7a ee a0 18 2b ab d1 8c ac 1b d4 f4 39 0a f9 a9 ce af d0 00 2c ab 15 4a d0 29 a1 09 00 00 00 27 80 87 00 14 f5 1c 3c 97 5d 5a ec 84 22 2f ff 0d 72 16 fd b0 d3 a0 11 2f 0b 39 50 1a af e2 34 87 00 72 85 8d c0 6e 7c 33 76 42 d3 e5 a8 15 23 2f 5e 16 c1 b3 0c 3a 6a 71 bc 85 01 8e 5f f2 c9 10 18 af c9 ff c2 cc 78 8b ee 1b 47 68 3d b0 1a 46 93 98 68 52 11 df bb ae 3e 2e d0 a5 0e 73 13 bf f5 d4 c3 91 dd ec e0 0f c7 72 dd 6b 4d 4d e2 a4 19 90 f0 5c a3 bd fc 92 c8 8c 5b 8d cd 36 e7 48 7a fa 44 7c 2e df ae 4f 39 0a 83 37 84 1c ef 38 6e 22 cc 22 ee 17 47 6d 73 89 52 22 96 82 e2 4b 92 53 3a c2 a9 f5 a6 99 59 3f 08 44 19 ca e0 b4 53 2b cc 97 d3 ae 48 6a ca 54 18 3f b0 1c 73 f9 79 ca 98 57 39 95 37 f5 dc 2a cb 72 e7 ea d0 50 9d 38 05 78 67 3f 8b 6e 74 ce 23 87 7a 6b 24 db 00 00 00 00 00 00 00 03 62 9f be f2 46 1c 96 a0 88 a2 2e 8b 15 c3 e2 33 db 7a b2 2e 30 d4 6a 9d 24 d3 7c ef 09 9e ce 72 9a a2 18 f9 f4 4a 32 10 22 3f da e7 ed 04 93 5c 3c 90 d3 ad d8 ee bc 86 19 d7 b9 0d fa e1 58 b9 4f 50 ad ab 98 8d d8 e1 2b 1b 56 07 3d 0d 10 f7 06 7c 88 14 34 af 5c c9 39 8f ff 00 40 4d 5d 99 f8 2e 20 ee 6a 8c 88 e1 8c 29 77 aa b3 7d 9a c4 cf c1 c7 b4 00 00 00 00 00 00 07 ff 57 c3 94 95 c8 26 b9 56 ba 85 9a c8 e3 c1 77 b9 1b d7 d5 e4 1f f8 68 f7 ca 16 64 fe 2f 3c ed 84 68 91 18 06 04 b6 dd 24 99 d1 6d 7d 91 58 ff ff ff ff 00 00 00 00 ef 06 9d c4 27 49 da 00 00 00 97 ee 9d 00 00 00 2d 8c 38 a9 67 c1 bb e0 93 15 c2 98 77 a3 31 bc c8 7d c3 ad db 08 14 1b de e5 d2 78 74 b2 f6 63 dd ee f0 00 5b 3d 96 c7 aa bf 77 bf c9 57 69 a9 29 4d f5 17 d9 0b dc 01 e7 38 35 ef d9 8a 6c d5 e1 a9 08 00 c6 6e e2 b1 ad 76 df f9 f9 00 00 71 41 4c 99 d4 89 4e e7 f8 24 9d c1 e3 42 8d 21 29 36 9e e1 b8 5a f6 eb 2e ea 0d 0d f4 14 b3 15 92 47 9e cf 23 92 54 8f 11 e1 03 6a 8d eb d6 4c be 35 94 54 a3 f2 23 9c fe 35 f8 1b 7a 37 f0 16 7e 6d 5c 11 09 00 00 00 00 00 00 00 00 42 b8 ff 8c 21 ad 70 2c ca ca d5 b3 9e ef 21 3d 1c a2 96 d2 a2 77 98 c8 ce 2a 30 5c 0c 7d 35 cf 4b 22 54 9a 4b d9 20 52 18 8b d1 f2 85 f6 53 b6 21 49 1d c6 aa ee 02 00 e2 ff 08 64 4f b9 4c 06 00 6e ff 1b e2 f6 33 c1 d9 87 59 1e c3 db 58 a7 bb 30 42 ec 3f 77 1f 7a 13 38 a5 c3 dd 35 e9 26 04 9f e8 6e 09 c5 8e 27 3c d9 05 de b2 8c 13 c1 ed 1c 0d 9c ae 84 6b cb fa 8c ce 7b 89 3e 57 8a f7 dc 7d 5e 87 d4 4f f8 28 de 45 3f 34 c2 b1 86 60 b0 80 ef c7 07 e6 76 e1 fb 4d 58 25 c0 ca 17 7a 4c 7f bb 4e 62 b4 45 c0 0f 57 6b 2b 5c c7 f8 19 ab d0 d4 7a 31 d8 97 03 95 f8 85 cc 48 06 f4 03 00 96 6f cf 1e 54 f5 a2 d3 87 08 19 48 d6 f4 96 e5 de e7 34 fe 7d a3 77 08 45 cf 44 2d 48 8a fd c0 e1 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 52 05 00 00 00 dc 1c 56 d5 9f 35 d3 67 63 29 52 a9 34 66 ae 59 5c 6a 8c da 69 0d 19 2a 07 08 86 df 42 b2 70 98 77 3b 45 19 8b 4a 34 ac 97 7e bd 44 50 e1 21 d0 13 42 70 3f 5b f0 30 e9 35 87 8a 6d 16 9c 80 aa 42 52 d4 ea 6b 8f 62 16 ff 20 2b 5b 5a 18 2c b5 e8 38 b3 07 63 2d 03 a7 ca 6f 6d 03 39 f9 95 3c 30 93 c3 69 0d 10 ec b6 5d c5 b4 74 81 ed bf 1f 00 00 00 00 00 00 00 4d 16 d2 9c 28 eb 51 67 e9 93 6e d3 27 fb 23 7a 56 22 4e 49 d9 ea 95 5a 5f 0d ec 1b 3c cd 35 36 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 26 de d4 dd 6f e1 51 8c c7 80 20 43 ec fe 69 f7 43 f1 21 3b f8 17 9e cd 9e 5a 22 5d 67 52 1d c7 28 ea c7 d8 0a 56 46 ac 2c bd e2 1d 3e bf bf 69 ff 86 1f 43 94 83 6d df 12 8d 6d 19 07 9e 64 33 6e 7c 67 65 05 c7 8a d6 75 48 f4 b1 92 be 18 27 fc d9 5c f1 07 75 3c b0 a6 a9 79 d3 db 0c 40 70 81 c6 28 1e 2d 84 29 a8 63 90 3c a7 5f 4c 7d f3 ea 8f c2 01 8d 07 af 14 91 ef 06 0c d4 40 3a 34 a8 68 51 09 9f 32 46 8f 65 bd 06 b4 08 2d 43 e1 21 86 1b 5c c0 3f 1a 15 61 f0 58 9e 0d 12 96 9b c9 82 ff 5d 8e 9b 98 6c 0c 6c 74 7d 9a 1c c5 00 bb 89 2c 3a 16 ff 10 fe ea 20 bd ac 00 00 00 00 00 00 00 00 ca 06 f2 56 00 00 00 00 00 00 08 83 b2 1f 32 89 f8 6a 68 26 c6 9f a3 5b a5 cb c3 f2 db 15 16 ff c5 c6 e3 fa 61 8b 24 a6 ce 16 d6 c7 01 0b b3 7b 61 fa 0a 2d 89 74 e6 91 15 d3 33 94 e8 6e 4b 83 82 97 ba 20 f9 69 36 b7 e4 76 6e 92 de a6 c5 d1 d3 3d 84 d9 6b 50 fb 00 00 00 ae 07 c6 5b 71 08 8d d7 d5 d1 e1 ba b9 00 00 00 00 00 00 00 00 00 00 00 00 b5 ac e2 93 be c8 59 c1 3e 32 29 43 2a d7 1d 64 62 18 b5 22 9d d8 81 37 fc 7c 59 aa 24 2a f3 bb 4e fb 82 05 5a 3b 61 22 7a d4 0f 52 c9 f2 50 05 79 31 d8 28 ec 78 e1 16 ae 46 c4 89 7e 27 95 b6 ff 92 e9 a1 f6 3a 6e d8 fb 4f 8f 3a 6e c4 e7 6f 86 21 e2 4b 0b 85 5c 02 f2 b7 ad d5 8f fb 25 f3 39 29 77 29 a7 a5 18 10 13 4d 3d fb f7 1f 65 16 73 7b e5 5c 06 d9 cd cf b1 e2 bb 10 b5 00 00 eb 4a cf f9 07 56 db a1 ec f9 f5 8a fd 3c 19 b5 c4 55 8b a9 af 6b 73 33 c8 94 a1 fb 29 ad e9 ad 75 c9 c0 22 e8 d0 3f e2 8b c3 58 68 44 92 aa 77 1d bf e8 07 45 fe 89 ad 34 9f fa ad 76 ff 9d d6 43 79 6c af fd f6 7a f5 dd 47 6c 37 e7 e9 a8 4e 2e 5d a2 69 6e 28 5a 59 b5 3f 2f b0 e1 6d 82 62 c0 80 c1 59 ce 40 c1 40 89 c8 27 59 10 6f 42 25 82 b4 2e 3e 84 84 ea 5a 6a d9 aa 52 10 6e af e0 e0 ca ea 1a d4 cb 23 f3 c2 b8 a0 f4 55 ba 69 ea 28 4c 26 8d 54 b4 31 58 a8 b1 d1 28 d0 2a f2 63 b3 dc 1c ab 79 4c 9a c5 7a 2a 73 32 f4 d8 76 4c 30 2c cd 5a ac 11 44 82 b6 19 fc 57 5a a0 dd 27 77 e8 81 e2 9a 85 43 80 e2 f1 e4 9d b5 a1 51 7e c4 0b b3 fa 44 f9 95 9b ad 67 cc ab a7 64 08 da 35 c9 f1 53 4c 8b d4 8b bd 61 62 7a 2e 0a 74 b5 e6 ae fb 7e ee 40 3f 02 73 41 37 ff 47 25 58 01 43 91 c6 73 b6 07 1b 6a d0 f0 5e ed 16 4c a6 3e 4e a2 6d ce 0f b3 ce 0f 65 91 d8 0d fb 8f 38 6b b7 9f 55 89 82 9b 6b 06 79 b5 d6 5a 81 82 6f c9 b3 8f 79 1c 8f 18 92 b5 1a d6 5a 89 bc 84 64 6e bf 78 f5 d5 d4 80 4d 9a bb 07 1f d7 11 b5 e7 cc 16 3b 42 a6 51 0b 8f 5e e6 74 7d f0 b5 60 ea be 04 99 bf 1f ef 7c 18 bb 9f 55 ef fa 01 86 79 84 5c 65 98 fb 78 bf 1b 8d 9d 9f 04 a5 f6 06 2c 2b bb 91 95 27 55 b3 f7 c9 48 26 8c b6 47 d0 a0 bb 12 86 48 06 15 94 11 54 a0 1d 74 e2 f2 ef a7 78 50 68 6e e4 54 1f 3e 79 ef a6 35 45 a7 ae 53 d5 f0 c4 0c c8 64 73 f7 eb 09 39 80 bd 0d 97 bb 47 50 12 8d 9c 51 99 84 c5 f7 31 ea 25 9e 71 b2 f1 2d 67 ce 12 e5 2c 28 3e 74 59 4d fc 93 3e 62 57 37 ed 23 1d 61 26 37 21 d4 6d af 09 3f 77 03 57 cd 78 fe 14 31 ae f5 2b 4a 0a 93 3f 1a 53 34 ad 03 f3 87 6f c8 a8 e1 87 f8 03 18 42 7b 4c 92 20 75 cf 82 9e 3c c4 9d 71 d5 21 37 b4 8e 1f b6 b0 5d d1 c7 b2 51 a7 05 9f 0a 4b 4f 34 31 f6 7f c6 5b 75 c2 02 e4 38 16 e3 4f f4 1d 25 24 28 30 b7 88 ae 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 b8 b5 b1 37 dc b7 a7 94 9e 12 30 7d 1f ce 56 fe 5b 76 d2 f3 f5 a7 69 23 79 54 2e 3f d9 a5 a7 dc 57 e1 de c0 bd ce 65 b5 db 59 a0 73 3c 9b 9d a6 12 ad b9 19 48 ec bf af f8 fc 20 6b 83 50 fe 26 8b 98 aa a2 e2 88 be 77 ae dd dc c7 fb 7d 63 1e 69 b1 76 e2 00 00 00 00 00} (length 0xa5e)
// }
// }
// }
// license: ptr[in, buffer] {
// buffer: {73 79 7a 6b 61 6c 6c 65 72 00} (length 0xa)
// }
// loglev: int32 = 0x0 (4 bytes)
// logsize: len = 0x0 (4 bytes)
// log: nil
// kern_version: bpf_kern_version = 0x0 (4 bytes)
// flags: bpf_prog_load_flags = 0x0 (4 bytes)
// prog_name: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00} (length 0x10)
// prog_ifindex: ifindex (resource)
// expected_attach_type: union bpf_prog_attach_types {
// fallback: bpf_attach_types = 0x0 (4 bytes)
// }
// btf_fd: fd_btf (resource)
// func_info_rec_size: const = 0x8 (4 bytes)
// func_info: nil
// func_info_cnt: len = 0x0 (4 bytes)
// line_info_rec_size: const = 0x10 (4 bytes)
// line_info: nil
// line_info_cnt: len = 0x0 (4 bytes)
// attach_btf_id: bpf_btf_id (resource)
// attach_prog_fd: fd_bpf_prog (resource)
// core_relo_cnt: len = 0x0 (4 bytes)
// fd_array: nil
// core_relos: nil
// core_relo_rec_size: const = 0x10 (4 bytes)
// log_true_size: int32 = 0x0 (4 bytes)
// prog_token_fd: union _bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]]_prog_token_fd_wrapper {
// void: buffer: {} (length 0x0)
// }
// pad: union _bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]]_pad_wrapper {
// value: const = 0x0 (4 bytes)
// }
// }
// }
// size: len = 0x48 (8 bytes)
// ]
// returns fd_bpf_prog
*(uint32_t*)0x200000000200 = 0xc;
*(uint32_t*)0x200000000204 = 0xe;
*(uint64_t*)0x200000000208 = 0x200000000500;
memcpy((void*)0x200000000500, "... [truncated large byte array] ...", 2654);
*(uint64_t*)0x200000000210 = 0x200000000340;
memcpy((void*)0x200000000340, "syzkaller\000", 10);
*(uint32_t*)0x200000000218 = 0;
*(uint32_t*)0x20000000021c = 0;
*(uint64_t*)0x200000000220 = 0;
*(uint32_t*)0x200000000228 = 0;
*(uint32_t*)0x20000000022c = 0;
memset((void*)0x200000000230, 0, 16);
*(uint32_t*)0x200000000240 = 0;
*(uint32_t*)0x200000000244 = 0;
*(uint32_t*)0x200000000248 = -1;
*(uint32_t*)0x20000000024c = 8;
*(uint64_t*)0x200000000250 = 0;
*(uint32_t*)0x200000000258 = 0;
*(uint32_t*)0x20000000025c = 0x10;
*(uint64_t*)0x200000000260 = 0;
*(uint32_t*)0x200000000268 = 0;
*(uint32_t*)0x20000000026c = 0;
*(uint32_t*)0x200000000270 = -1;
*(uint32_t*)0x200000000274 = 0;
*(uint64_t*)0x200000000278 = 0;
*(uint64_t*)0x200000000280 = 0;
*(uint32_t*)0x200000000288 = 0x10;
*(uint32_t*)0x20000000028c = 0;
*(uint32_t*)0x200000000290 = 0;
res = syscall(__NR_bpf, /*cmd=*/5ul, /*arg=*/0x200000000200ul, /*size=*/0x48ul);
if (res != -1)
r[0] = res;
// bpf$BPF_PROG_TEST_RUN arguments: [
// cmd: const = 0xa (8 bytes)
// arg: ptr[in, bpf_test_prog_arg] {
// bpf_test_prog_arg {
// prog: fd_bpf_prog (resource)
// retval: const = 0x18000000000002a0 (4 bytes)
// insizedata: len = 0xf (4 bytes)
// outsizedata: len = 0x0 (4 bytes)
// indata: ptr[in, buffer] {
// buffer: {b9 ff 0b 07 68 59 26 8c b8 9e 14 f0 88 a8 47} (length 0xf)
// }
// outdata: nil
// repeat: int32 = 0x10 (4 bytes)
// dur: const = 0x60000000 (4 bytes)
// insizectx: len = 0x0 (4 bytes)
// outsizectx: len = 0x0 (4 bytes)
// inctx: nil
// outctx: nil
// flags: bpf_prog_test_run_flags = 0x0 (4 bytes)
// cpu: const = 0x0 (4 bytes)
// batch_size: int32 = 0x0 (4 bytes)
// pad = 0x0 (4 bytes)
// }
// }
// size: len = 0x50 (8 bytes)
// ]
*(uint32_t*)0x200000000080 = r[0];
*(uint32_t*)0x200000000084 = 0x2a0;
*(uint32_t*)0x200000000088 = 0xf;
*(uint32_t*)0x20000000008c = 0;
*(uint64_t*)0x200000000090 = 0x200000000100;
memcpy((void*)0x200000000100, "\xb9\xff\x0b\x07\x68\x59\x26\x8c\xb8\x9e\x14\xf0\x88\xa8\x47", 15);
*(uint64_t*)0x200000000098 = 0;
*(uint32_t*)0x2000000000a0 = 0x10;
*(uint32_t*)0x2000000000a4 = 0x60000000;
*(uint32_t*)0x2000000000a8 = 0;
*(uint32_t*)0x2000000000ac = 0;
*(uint64_t*)0x2000000000b0 = 0;
*(uint64_t*)0x2000000000b8 = 0;
*(uint32_t*)0x2000000000c0 = 0;
*(uint32_t*)0x2000000000c4 = 0;
*(uint32_t*)0x2000000000c8 = 0;
syscall(__NR_bpf, /*cmd=*/0xaul, /*arg=*/0x200000000080ul, /*size=*/0x50ul);
return 0;
}
]