// https://syzkaller.appspot.com/bug?id=7583eb1c0aeb538faab79ea53f121ecaf5122338 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #ifndef __NR_bpf #define __NR_bpf 321 #endif long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); *(uint32_t*)0x204f9fe4 = 0x10; *(uint32_t*)0x204f9fe8 = 4; *(uint32_t*)0x204f9fec = 4; *(uint32_t*)0x204f9ff0 = 1; *(uint32_t*)0x204f9ff4 = 0; *(uint32_t*)0x204f9ff8 = -1; *(uint32_t*)0x204f9ffc = 0; *(uint8_t*)0x204fa000 = 0; *(uint8_t*)0x204fa001 = 0; *(uint8_t*)0x204fa002 = 0; *(uint8_t*)0x204fa003 = 0; *(uint8_t*)0x204fa004 = 0; *(uint8_t*)0x204fa005 = 0; *(uint8_t*)0x204fa006 = 0; *(uint8_t*)0x204fa007 = 0; *(uint8_t*)0x204fa008 = 0; *(uint8_t*)0x204fa009 = 0; *(uint8_t*)0x204fa00a = 0; *(uint8_t*)0x204fa00b = 0; *(uint8_t*)0x204fa00c = 0; *(uint8_t*)0x204fa00d = 0; *(uint8_t*)0x204fa00e = 0; *(uint8_t*)0x204fa00f = 0; r[0] = syscall(__NR_bpf, 0, 0x204f9fe4, 0x2c); *(uint32_t*)0x20ef4fe0 = r[0]; *(uint64_t*)0x20ef4fe8 = 0x20df2000; *(uint64_t*)0x20ef4ff0 = 0x20144000; *(uint64_t*)0x20ef4ff8 = 0; memcpy((void*)0x20144000, "\x0e", 1); syscall(__NR_bpf, 2, 0x20ef4fe0, 0x20); } int main() { loop(); return 0; }