// https://syzkaller.appspot.com/bug?id=bff61d87129afb198021fa0a2d4d09706a14ada8 // autogenerated by syzkaller (http://github.com/google/syzkaller) #ifndef __NR_bpf #define __NR_bpf 321 #endif #define _GNU_SOURCE #include #include #include #include static void test(); void loop() { while (1) { test(); } } long r[7]; void test() { memset(r, -1, sizeof(r)); r[0] = syscall(__NR_mmap, 0x20000000ul, 0x25000ul, 0x3ul, 0x32ul, 0xfffffffffffffffful, 0x0ul); *(uint32_t*)0x20024fec = (uint32_t)0x6; *(uint32_t*)0x20024ff0 = (uint32_t)0x4; *(uint32_t*)0x20024ff4 = (uint32_t)0x7218; *(uint32_t*)0x20024ff8 = (uint32_t)0x5ebf; *(uint32_t*)0x20024ffc = (uint32_t)0x0; r[6] = syscall(__NR_bpf, 0x0ul, 0x20024fecul, 0x14ul); } int main() { int i; for (i = 0; i < 8; i++) { if (fork() == 0) { loop(); return 0; } } sleep(1000000); return 0; }