// https://syzkaller.appspot.com/bug?id=01383b29d139cf9c9f9d9bd6e9947474ffe657a6 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0x0}; int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=*/7ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); intptr_t res = 0; syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0xa000ul, /*prot=*/0xaul, /*flags=*/0x2172ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_munmap, /*addr=*/0x20001000ul, /*len=*/0x3000ul); res = syscall(__NR_gettid); if (res != -1) r[0] = res; *(uint64_t*)0x20000200 = 0x208f9f09; *(uint64_t*)0x20000208 = 0xf7; *(uint64_t*)0x20000210 = 0x20000180; *(uint64_t*)0x20000218 = 0x3c; *(uint64_t*)0x20000220 = 0x200001c0; *(uint64_t*)0x20000228 = 0xc; *(uint64_t*)0x20000140 = 0x20217f28; *(uint64_t*)0x20000148 = 0xe7; *(uint64_t*)0x20000150 = 0x20000040; *(uint64_t*)0x20000158 = 0xffffff19; syscall(__NR_process_vm_writev, /*pid=*/r[0], /*loc_vec=*/0x20000200ul, /*loc_vlen=*/3ul, /*rem_vec=*/0x20000140ul, /*rem_vlen=*/2ul, /*flags=*/0ul); return 0; }