// https://syzkaller.appspot.com/bug?id=71f9271d761f5b6ed517a18030dc04f0135e6179 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #ifndef SYS_mmap #define SYS_mmap 197 #endif #ifndef SYS_munlockall #define SYS_munlockall 243 #endif #ifndef SYS_munmap #define SYS_munmap 73 #endif #ifndef SYS_shmat #define SYS_shmat 228 #endif #ifndef SYS_shmctl #define SYS_shmctl 443 #endif #ifndef SYS_shmget #define SYS_shmget 231 #endif uint64_t r[1] = {0x0}; int main(void) { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x1012, -1, 0, 0); long res = 0; syscall(SYS_munmap, 0x20ffc000, 0x4000); res = syscall(SYS_shmget, 0, 0x4000, 0x232, 0x20ffc000); if (res != -1) r[0] = res; syscall(SYS_shmat, r[0], 0x20ffe000, 0x3000); syscall(SYS_shmctl, r[0], 3, 0); syscall(SYS_munlockall); syscall(SYS_shmctl, r[0], 4, 0); syscall(SYS_shmctl, r[0], 4, 0); return 0; }