// https://syzkaller.appspot.com/bug?id=f9fc2bc830db673acfca0a1cae6bced696610ed4 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #ifndef __NR_bpf #define __NR_bpf 321 #endif int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); *(uint64_t*)0x20000300 = 0x20000140; *(uint16_t*)0x20000140 = 0xeb9f; *(uint8_t*)0x20000142 = 1; *(uint8_t*)0x20000143 = 0; *(uint32_t*)0x20000144 = 0x18; *(uint32_t*)0x20000148 = 0; *(uint32_t*)0x2000014c = 0x1c; *(uint32_t*)0x20000150 = 0x1c; *(uint32_t*)0x20000154 = 3; *(uint32_t*)0x20000158 = 2; *(uint16_t*)0x2000015c = 0; *(uint8_t*)0x2000015e = 0; *(uint8_t*)0x2000015f = 0xf; *(uint32_t*)0x20000160 = 3; memcpy((void*)0x20000164, "\xfb\x16\x29", 3); *(uint32_t*)0x20000167 = 0; *(uint16_t*)0x2000016b = 0; *(uint8_t*)0x2000016d = 0; *(uint8_t*)0x2000016e = 0xf; *(uint32_t*)0x2000016f = 1; memset((void*)0x20000173, 252, 1); *(uint8_t*)0x20000174 = 0; *(uint8_t*)0x20000175 = 0; *(uint8_t*)0x20000176 = 0; *(uint64_t*)0x20000308 = 0; *(uint32_t*)0x20000310 = 0x37; *(uint32_t*)0x20000314 = 0; *(uint32_t*)0x20000318 = 0; *(uint32_t*)0x2000031c = 0; syscall(__NR_bpf, /*cmd=*/0x12ul, /*arg=*/0x20000300ul, /*size=*/0x20ul); return 0; }