// https://syzkaller.appspot.com/bug?id=a99f705b2b8b854d70ec4d47eed481c90046bd3c // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x1012ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x20000040, "/dev/bpf\000", 9); syscall(SYS_openat, 0xffffffffffffff9cul, 0x20000040ul, 0ul, 0ul); res = syscall(SYS_kqueue); if (res != -1) r[0] = res; *(uint64_t*)0x20000480 = 0x284; *(uint16_t*)0x20000488 = 0xfff8; *(uint16_t*)0x2000048a = 0x10; *(uint32_t*)0x2000048c = 1; *(uint64_t*)0x20000490 = 0x401; *(uint64_t*)0x20000498 = 5; *(uint64_t*)0x200004a0 = 5; *(uint64_t*)0x200004a8 = 0x24000000; *(uint64_t*)0x200004b0 = 0x100000000; *(uint64_t*)0x200004b8 = 0x3f; *(uint64_t*)0x200004c0 = 3; *(uint16_t*)0x200004c8 = 0xfffe; *(uint16_t*)0x200004ca = 1; *(uint32_t*)0x200004cc = 1; *(uint64_t*)0x200004d0 = 1; *(uint64_t*)0x200004d8 = 3; *(uint64_t*)0x200004e0 = 9; *(uint64_t*)0x200004e8 = 0x3ff; *(uint64_t*)0x200004f0 = 0x100000001; *(uint64_t*)0x200004f8 = 3; *(uint64_t*)0x20000500 = 5; *(uint16_t*)0x20000508 = 0xfffe; *(uint16_t*)0x2000050a = 0x42; *(uint32_t*)0x2000050c = 2; *(uint64_t*)0x20000510 = 5; *(uint64_t*)0x20000518 = 0x7f; *(uint64_t*)0x20000520 = 9; *(uint64_t*)0x20000528 = 0x600000000; *(uint64_t*)0x20000530 = 0x1f; *(uint64_t*)0x20000538 = 7; syscall(SYS_kevent, r[0], 0x20000480ul, 3ul, 0x200001c0ul, 0xaul, 0ul); return 0; }