// https://syzkaller.appspot.com/bug?id=874bf0a9464205c21d77d8a3e7bc9dff824329a5 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); *(uint32_t*)0x200000c0 = 0x28; *(uint32_t*)0x200000c4 = 0x4e; *(uint64_t*)0x200000c8 = 2; *(uint64_t*)0x200000d0 = 0x26; *(uint32_t*)0x200000d8 = 0x80; *(uint64_t*)0x200000dc = 3; *(uint32_t*)0x200000e4 = 7; *(uint64_t*)0x200000e8 = 0x75bc; syscall(__NR_open_by_handle_at, /*mountdirfd=*/-1, /*handle=*/0x200000c0ul, /*flags=O_PATH|O_NONBLOCK|O_NOCTTY|O_EXCL|O_APPEND|0x1*/ 0x200d81ul); return 0; }