// https://syzkaller.appspot.com/bug?id=be49c2247d07ad4a4faa018ebea0432f6f0c1a82 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #ifndef __NR_bpf #define __NR_bpf 386 #endif #ifndef __NR_mmap #define __NR_mmap 192 #endif #undef __NR_mmap #define __NR_mmap __NR_mmap2 static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } static void kill_and_wait(int pid, int* status) { kill(-pid, SIGKILL); kill(pid, SIGKILL); for (int i = 0; i < 100; i++) { if (waitpid(-1, status, WNOHANG | __WALL) == pid) return; usleep(1000); } DIR* dir = opendir("/sys/fs/fuse/connections"); if (dir) { for (;;) { struct dirent* ent = readdir(dir); if (!ent) break; if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0) continue; char abort[300]; snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort", ent->d_name); int fd = open(abort, O_WRONLY); if (fd == -1) { continue; } if (write(fd, abort, 1) < 0) { } close(fd); } closedir(dir); } else { } while (waitpid(-1, status, __WALL) != pid) { } } static void setup_test() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setpgrp(); write_file("/proc/self/oom_score_adj", "1000"); } static void execute_one(void); #define WAIT_FLAGS __WALL static void loop(void) { int iter = 0; for (;; iter++) { int pid = fork(); if (pid < 0) exit(1); if (pid == 0) { setup_test(); execute_one(); exit(0); } int status = 0; uint64_t start = current_time_ms(); for (;;) { if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid) break; sleep_ms(1); if (current_time_ms() - start < 15000) continue; kill_and_wait(pid, &status); break; } } } void execute_one(void) { *(uint32_t*)0x20000200 = 4; *(uint32_t*)0x20000204 = 0xe; *(uint64_t*)0x20000208 = 0x20001a40; memcpy( (void*)0x20001a40, "\xb7\x02\x00\x00\x00\x00\x00\x00\xbf\xa3\x00\x00\x00\x00\x00\x00\x07\x03" "\x00\x00\x00\xfe\xff\xff\x7a\x0a\xf0\xff\xf8\xff\xf0\xff\x79\xa4\xf0\xff" "\x00\x00\x00\x00\xb7\x06\x00\x00\xff\xff\xff\xff\x6d\x64\x05\x00\x00\x00" "\x00\x00\x65\x04\x04\x00\x01\x00\x00\x00\x04\x04\x00\x00\x01\x00\x00\x00" "\xb7\x05\x00\x00\x40\x00\x00\x00\x6a\x0a\x80\xfe\x00\x00\x00\x00\x85\x00" "\x00\x00\x53\x00\x00\x00\xb7\x00\x00\x00\x00\x00\x00\x00\x95\x00\x00\x10" "\x00\x00\x00\x00\x4e\x62\x01\x1c\x30\x34\xfd\xb1\x17\x16\x8b\xd0\x7b\xa0" "\x8a\xf3\x39\xd1\xa1\xee\x35\xfe\x16\x3a\x25\x5c\x33\x28\x20\x44\xb3\x24" "\x95\xef\x8a\xb9\xad\xc6\x7c\xcc\x94\x5f\xf1\x5d\x80\x2f\x51\x32\x14\x3c" "\x0a\x9f\xc7\xa8\x44\x52\x56\x99\x57\xc1\x00\x2e\xd7\xd4\x58\xe1\x7f\x79" "\x1f\x47\x98\xc8\xeb\x48\x4d\xe0\x33\x12\xc6\x9b\x3e\xdf\xf5\xbe\x26\x76" "\x5b\xa5\xf8\xf2\x87\x90\x21\xc2\xea\x53\xac\x54\x7a\x65\x4b\xbd\x2d\xb5" "\x35\x6b\x97\x33\x83\xdd\xf7\x9f\x2b\xe9\x08\x7a\x3e\x7b\x7c\x0e\xfd\x3e" "\x38\xc7\x94\xeb\x06\xb0\xb8\xc3\x92\x90\x4a\xe7\xdd\x5e\x4d\xee\x88\x51" "\x8d\xdf\x12\xdd\xdd\x4b\xfc\x6a\x4d\xd3\xb6\xbe\xba\x51\x07\x42\x29\xb0" "\xd4\xb5\x04\x51\x7c\x4c\x3e\x5d\x1a\xa0\x44\xd8\xd0\x07\x28\x14\x1c\xd6" "\x7b\xcd\x68\xf2\x18\x9b\x8e\x65\x5c\x6b\x34\xe0\x2e\x90\x63\x7e\xf2\xdf" "\x6c\x5c\xb4\x51\xec\x92\x0d\xd5\xb8\x57\xad\xb8\x88\xb9\x9b\x91\x2b\xa7" "\xde\x26\xff\x23\x57\xef\x17\xf9\x5a\x25\x78\x0c\x3a\xe5\x6d\xe7\x05\xb3" "\xb1\x47\x82\x1f\x05\x78\x26\xef\x4e\x91\x2f\x01\xa2\x01\xe6\x94\xe3\x04" "\x9b\x8c\x8f\xe8\xb6\x5d\x8d\x66\xbb\x76\x6f\x7c\x3f\x91\x8c\x86\xa7\x02" "\x52\x23\x68\xd9\xf8\x18\x97\x13\x3a\xf9\x4a\x5a\x4c\xff\x7f\x4d\x8b\x9d" "\x8e\xaf\x30\x2f\x0b\x2e\x0c\x25\x2b\x00\x00\x00\x00\xf6\xff\xff\xff\xed" "\x91\x7b\xca\x48\x85\xbb\xf5\x97\xa1\x4a\xb6\x45\x8e\x62\x72\xd8\x8e\x0c" "\x80\x88\xf4\x04\xf0\x11\x28\x9e\xbc\x56\x23\xfa\xa1\x18\x26\x32\x16\x1e" "\x07\x3a\xf1\xd6\x9a\x2e\x36\xbe\x11\x5b\xe3\xb3\x25\xec\xd2\x01\xd2\xff" "\xb0\xa7\xfa\x4f\x5d\x11\x06\x56\x0c\xdc\xf0\x71\xde\xfd\x0a\x8b\xe3\xb6" "\x9c\xe3\xe4\xf3\x65\xac\xa7\x58\x27\x42\x6d\xde\x87\xfd\xf4\x61\x72\x22" "\x67\x62\x80\xf5\x5e\x98\x10\x74\x50\xc1\x9b\x86\x12\x99\xfc\xd9\xed\x9d" "\x86\x79\x40\x64\x19\x40\x6b\xf0\xc5\x32\x9b\xd5\xb4\x69\x73\x36\x11\x2b" "\x0b\x87\x56\xce\x35\x74\x04\x6b\xf6\x11\xa1\x08\xf8\xdf\x4d\x1a\x88\x59" "\x78\x40\xb7\x12\xb6\xfa\x8e\xdf\xfb\x8f\xaf\x8b\x8e\xc0\x39\xba\xb3\x85" "\xca\xc0\x53\x53\x73\xbb\x8f\xab\x90\x53\x9b\x1a\x65\xdd\xff\x84\x1e\xb6" "\x71\xf7\xfa\xf3\x9a\x43\xa6\x6c\x55\x40\xb8\x76\x2b\x42\x00\x7c\x9e\xc4" "\x31\x93\xcc\xf6\x17\xdb\xf8\xa1\x2b\x4a\x18\x9e\xdb\xf9\xfb\x7c\x42\xb1" "\xf4\x35\xcc\xd4\xb1\x9b\x53\xb6\x03\x22\xaf\x0a\xa6\x6e\x8f\x44\x8e\x1b" "\xd9\x68\x22\xe6\xb7\x0b\x62\x91\x2c\x92\x6d\xbe\x41\x7c\xcc\xd4\xf6\x96" "\xd5\x28\xfa\x8a\x3e\xa8\x47\xf1\x0e\x9b\x11\x06\xf3\xbb\x50\x6f\x1d\x7f" "\xbd\xf8\x01\x00\x00\x00\xc5\xf0\x97\x73\x6c\x02\x8e\xb5\xb5\xa0\x73\xd0" "\xde\x55\x38\xab\x42\xe1\x71\xb3\xba\xae\x34\xc3\x59\x87\xb0\xdd\xa4\x97" "\xac\x3f\x5e\x97\xe6\x0e\xae\xea\x15\xc6\xd5\x5b\xad\xf9\xb8\x6b\x1c\x00" "\x01\x00\x00\x6e\x60\xcd\x06\xc9\xed\x24\x31\x3c\xe6\x07\xd4\x03\xbb\x60" "\x30\xf8\x00\x00\x00\x00\x69\x0d\xb0\x22\x1b\x17\x05\xc5\x01\xf8\x02\xff" "\x59\xb4\xe6\x83\xef\xa4\xb6\xe7\x7e\x04\x20\x72\xec\x9e\xb8\x16\x6f\x6e" "\x28\xb4\x9a\x77\x05\xa1\xbe\xfc\x4d\x31\x58\x78\xf8\x8a\x8f\xb1\xdd\x67" "\x9f\xb4\xc5\x55\x7a\xba\xe6\x84\x99\x17\xdc\x51\xa8\x9d\x47\xb7\x28\x50" "\x2f\x7e\x62\x1f\xc0\xe3\xba\x04\x02\x00\x00\xc1\x49\xee\x66\x01\x72\x8c" "\x75\x09\x30\x51\x93\x39\xb4\x41\x97\xc2\x2d\xa8\x65\x05\x9b\x47\x5a\xfd" "\x96\x18\x7d\x88\x1e\x93\xb4\x2a\x5f\xdf\xd6\x86\xd8\x90\x0c\x44\xc6\x71" "\x33\xee\xb0\x10\x9d\xcb\x60\xdd\xda\xd5\x80\x37\xfd\xa6\x58\x85\xa1\x5a" "\x42\x56\x0e\xe3\x02\x7a\x5e\xbf\x95\x25\x47\x44\xf1\x0f\xd6\x07\xbc\x31" "\x00\xb9\x49\x32\xb8\xd9\x44\x7c\x42\xf6\xe2\x1e\xe0\xe5\x4f\x8b\xe3\x86" "\xbd\xc0\x9d\xec\xec\xe9\x10\xa4\x81\xe6\x48\x01\x00\x00\x00\x00\x00\x00" "\x00\x81\xd9\x2a\xf0\x8a\x06\xf8\x57\x31\x1a\x2f\x14\x32\x6b\x0b\x29\x02" "\x05\xe9\x1a\x68\x2e\x00\xc8\x76\x2c\xbc\x6b\x90\x4c\x98\x0e\xef\x6e\x6a" "\xe0\x0f\x00\x00\x00\x00\x00\x00\x6a\x81\x94\x47\x97\x00\xa0\x2b\x92\xbe" "\xc8\xd0\x5e\xae\x1f\x24\xfd\xd7\xb8\x0d\x3d\xde\x04\xc2\x2f\x68\x95\x94" "\xde\x2e\xbb\x96\x87\x21\x9d\xe8\xd7\x3a\xc8\x38\x23\xfe\xb4\x02\xa2\x41" "\x5a\x98\x50\xd5\xf0\x18\x3e\xc6\x7b\xe9\x6d\xc0\xe4\xac\xd7\xac\xf1\xdf" "\xe7\x9d\x67\x71\x90\x3b\x76\xe2\xae\x47\xd9\x72\x65\x13\x90\xc2\x2d\x64" "\x10\x30\xe1\xdd\xac\x01\x8d\xc3\x11\x6e\x18\x03\xaf\x10\xa5\xf2\xb5\xf7" "\xba\x58\xac\xa5\xbc\xab\xbb\xab\x24\x41\x4a\x38\x10\x78\x8e\x55\x03\xe4" "\xbe\x66\xd6\x83\xda\xac\x5f\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\xba" "\x96\xed\xb9\x5e\xde\x0e\x19\x57\xc2\xa2\x75\x42\x58\xd9\xfd\x02\x80\x96" "\xcc\x15\xa8\xb9\x12\xb4\x94\xd4\xbb\xe6\x01\x03\x1e\xa1\xca\x65\xa5\x48" "\x94\x1d\x5d\x16\x29\x77\x57\x31\x0d\x9d\xae\xbd\x5a\x3d\xab\xbc\xed\x3b" "\x05\x11\x29\xcd\x60\xa3\x7d\x39\x76\x43\x32\x4e\x6f\x0a\xad\xf9\x78\xd6" "\x39\x65\x00\x00\x00\x00\x00\x00\x00\x00\x57\x0b\x0a\xcb\xca\xa1\x96\xe6" "\xa5\x50\xe7\xc2\xd8\xce\xe7\xa2\x78\xce\xe5\x45\xd3\x7d\xc9\xf8\x99\x1a" "\x16\xc0\x8d\x72\x31\x7e\x42\xd2\xac\x91\x26\xac\xd7\x61\x30\xef\x10\x86" "\x01\x66\x97\xe4\xd5\x1c\x4b\x42\xb2\xef\xc8\xed\xab\x88\xd4\x6b\xc3\xd5" "\xd6\xe5\xa6\x34\xc9\x12\xbc\x40\x51\x36\x43\xbf\x44\xcb\x41\x6b\x31\x49" "\x04\x02\x20\xaa\x39\x03\x5a\xe4\x6d\x16\xd8\x79\xfc\x81\x5a\x5c\xb8\x4b" "\x0d\x5c\x8a\xd9\x70\x12\x8a\xfa\xef\x05\xac\xdf\x8d\xec\x11\x71\xe8\x60" "\xb6\xd7\xe6\x31\xd7\x9b\xbe\x60\xca\x54\xce\x5d\x6a\x5a\xa0\x32\x7b\xca" "\x4f\x49\xa7\x10\xbf\x8a\x83\x99\x07\x12\x37\x06\x5d\x76\x4e\x20\x34\x87" "\x3c\x94\xa4\xf2\x12\x87\xf3\xbc\xe3\xee\xb6\x9e\x94\xdf\x2e\x14\xe4\xab" "\x10\xcc\x4e\x34\xb3\x04\xbc\x87\x9b\x80\x25\x59\x91\xdd\x7a\xac\x2a\x92" "\xc9\xe7\xc4\x11\xc0\x19\xd2\x29\xc1\xf1\xe5\x63\x15\x2f\x1c\x5a\xe9\xcd" "\xa3\xe8\x08\x00\x00\x00\xa0\xc7\x79\xd6\x24\xc5\xa2\xb7\x49\x1b\x8f\x73" "\xe7\x67\x38\x9e\xcd\x1d\xee\x95\x13\x53\xbb\x22\xb7\xca\xf8\x94\x68\x87" "\x15\x20\x82\x37\x15\xcf\xeb\xd0\x41\x89\xc6\xc6\xb3\x4b\xd8\xa6\x54\x1f" "\x6b\xc0\x63\x00\x00\x00\x00\x00\xf9\x4e\x85\xf5\x11\x1a\xdd\x3a\x3c\xb5" "\xbc\xac\x54\x02\xc3\x9d\xf8\x35\x75\x4e\xf3\x87\x82\x2c\x00\x1a\x25\x30" "\x4f\x3e\x00\xb4\x46\x75\xd0\xa2\x5a\x21\xdc\x40\x23\xc6\x42\xcc\x6f\x5a" "\x75\xc4\x5a\x29\xab\x93\x36\x00\xac\xf9\xa2\xd4\x71\xb7\x3a\x73\x17\x8c" "\xdf\x30\x9e\x5d\x53\x31\x19\x96\x21\x5b\x44\x29\x5d\xfd\xdc\x1d\xd6\xb8" "\x54\xe7\x00\x00\x36\x6e\x46\x0d\x15\xd3\x66\xe8\xa7\x5a\x43\x01\x42\x55" "\xd9\xea\x73\x3f\x80\x44\x60\xed\x83\x00\xec\x34\xea\xb2\xed\x80\x09\x7b" "\xd3\x2f\xf1\xa6\x14\x3a\xb1\x47\x60\x37\xe4\x74\xca\x87\x61\x87\xc8\x5b" "\xed\x43\x91\x21\x5c\xd7\x7e\x6a\x1f\xd6\x39\x92\x49\x8b\x96\xb9\xb0\xcc" "\xa9\x32\x55\xac\xb0\x8c\x67\xe5\x00\x04\xc5\xaf\x6f\xd5\xb4\xce\x7c\x1e" "\xbc\x92\x02\xbd\x7b\x32\x9a\x4d\x25\x30\x48\x6d\x59\x99\xdd\x7f\x90\xeb" "\xec\xca\x37\xf2\x86\x91\x35\x43\x8f\x05\x40\x80\x1f\xd7\x48\x1d\xaf\x9e" "\x01\x4b\x79\x9c\x12\xe7\x14\xd5\x73\xe2\xa6\x33\x1f\x49\xa7\x3c\x96\x05" "\xa6\x0c\x52\xb2\x02\x6e\xd6\x9b\x2c\x82\xcd\x19\x14\x90\xfa\xbe\x7b\x15" "\x1f\x92\xe5\xd7\x00\xf2\x18\x30\xd6\x13\xfb\xe4\x90\xf3\x05\xb3\x84\x5a" "\x78\x81\x7e\x59\xbf\x7e\xd3\x64\x71\xb8\xca\x01\xd3\x9e\x50\xae\x25\x35" "\x46\x0e\x1d\x2f\x26\x14\x94\x06\x47\x23\x3a\x02\xd5\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\xf7\x0e\x52\xf0\xd5\x6f\x6a\x4d\xcf\x7e\x57\xc0\x3d\x4b" "\x4a\xdd\x05\x00\x00\x00\x00\x00\x00\x00\x32\x03\x04\xd0\xd2\xb3\x08\xc5" "\xed\x39\x56\xea\xe2\x63\x03\x5d\x70\x3f\x86\x22\x24\xe9\x81\x8a\x3d\x7a" "\xc2\x70\x79\x3a\x7b\x72\xaf\x87\x58\x52\x93\x96\x0a\x80\xac\x63\xc5\x4e" "\x55\x06\x3b\xf8\xd2\x46\x39\xe5\x61\x25\x3e\xf0\xca\xf6\xc5\x81\x18\x12" "\x0d\x8a\xce\xcc\x05\x28\xf0\xd8\x1d\x29\x10\x09\xfc\x46\x40\x1b\xaf\x9c" "\x22\xd1\xc4\x52\xa5\xb4\x1b\x7a\x1b\x9a\xdf\xcc\x17\xf5\xad\x99\xdc\xdf" "\x93\x59\x23\x18\x5d\xb7\xb1\x4a\x7f\xa7\xba\xbc\x1f\x53\xdf\x70\x61\x8b" "\xb7\x3a\xa8\x10\xb7\x56\x69\x6f\x26\x65\x3b\x84\xcf\x84\x2a\xe4\x33\xfd" "\xa5\x9f\xbe\x31\x2b\xe1\x1b\xb7\xdf\xec\xdc\x38\xc1\xc1\xf6\x88\xd2\x72" "\x45\x68\xcc\x39\x6f\xca\x7c\x74\x98\x4b\x7f\x7b\xd0\x00\x00\x00\x00\x00" "\x00\x03\xff\x3e\x58\x57\xfc\x65\x98\xc9\x33\x61\xff\xff\xff\xff\x9d\xc8" "\x62\x2b\x07\x22\x25\x9e\x92\x2f\x40\xd7\x86\x2f\x7e\xa7\x2f\x17\x54\xf0" "\x77\x11\xde\x76\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4" "\xcb\x64\x3e\x73\xad\x8a\x45\xf0\xc7\x16\x44\x84\x54\x0e\x66\xe2\x99\x43" "\xaa\x72\x29\x7d\x83\x1c\xe6\xc9\x78\x86\x6a\x55\xed\x53\x13\x0c\x67\x47" "\xf5\x69\xc9\xc9\xab\xe7\x24\xb4\xfc\x64\x7b\x17\x40\x1d\x22\x01\xe8\xc2" "\x01\xe7\xd6\xff\xa1\xfa\x12\x26\x77\xf7\x39\x3e\xd4\xfe\x8a\x93\x30\x6f" "\x04\x8b\x67\x03\xb0\x45\x44\xe4\x2a\x2d\x9f\xc6\xde\x65\x35\x6b\xe9\x2f" "\xd9\x8f\xdb\xe8\x19\x68\x6c\x7b\xd3\xbe\x5b\xd0\xce\x62\x7c\x83\x57\x67" "\x5f\x75\x2c\x73\xa5\x02\xd2\x5c\x31\xc8\x31\x07\x8f\x09\x8c\x34\x29\x5b" "\xfe\x90\xe8\x82\x84\x30\x03\x84\x1f\x4c\x0c\x65\xdc\x18\x10\xa5\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x35\xdd\xbd\xde\xfe\x3a\xef\xa1\x33" "\x55\x15\x85\xe4\x25\xb5\x27\x90\xdb\xcc\xae\xf5\x93\x2d\x80\xcb\x05\x41" "\xbf\x9f\xbc\x42\xad\xf4\x97\x58\x36\x2b\xba\xee\xb1\xa2\x37\xa9\xea\xff" "\xf1\xda\x14\xe2\xb1\xdc\x00\xd9\x57\x3b\xc7\xe7\xbe\x61\x75\x7e\x9c\x64" "\xb8\xb8\xb5\xaf\x6a\x5f\xe8\xbb\x43\x27\xa7\x0d\x4d\xd3\x17\xfa\x9b\x07" "\xa0\x10\x7b\xff\xd6\xb9\x39\xd8\x1f\x45\x18\xdc\x02\xe8\x5f\x3e\x9d\xd9" "\xdb\xc0\x23\xca\x99\x10\x65\x16\x5f\x37\xdd\x90\xb9\x64\x60\x88\x6b\x0e" "\xd5\xbe\xf8\x07\x62\x1e\xd8\xcb\x25\x37\x9e\x5e\x1b\x58\x2c\xbe\x1f\xd7" "\xab\x1f\x77\x52\x2d\x09\x0b\x7e\xd9\x8a\xd6\xa4\xd0\xde\xee\x3a\xb1\xf1" "\xe9\xbe\x69\x0e\x85\x1b\x12\x00\x01\xee\xfb\x81\x5b\x0c\x2b\x4b\x06\x61" "\x04\xab\x74\xa5\xfe\x8c\x07\x53\x15\x6b\xf5\x3e\xb3\x62\x96\x5b\x58\x64" "\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 2393); *(uint64_t*)0x20000210 = 0x20000340; memcpy((void*)0x20000340, "syzkaller\000", 10); *(uint32_t*)0x20000218 = 0; *(uint32_t*)0x2000021c = 0; *(uint64_t*)0x20000220 = 0; *(uint32_t*)0x20000228 = 0; *(uint32_t*)0x2000022c = 0; memset((void*)0x20000230, 0, 16); *(uint32_t*)0x20000240 = 0; *(uint32_t*)0x20000244 = 0; *(uint32_t*)0x20000248 = -1; *(uint32_t*)0x2000024c = 8; *(uint64_t*)0x20000250 = 0; *(uint32_t*)0x20000258 = 0; *(uint32_t*)0x2000025c = 0x10; *(uint64_t*)0x20000260 = 0; *(uint32_t*)0x20000268 = 0; *(uint32_t*)0x2000026c = 0; *(uint32_t*)0x20000270 = -1; *(uint32_t*)0x20000274 = 0; *(uint64_t*)0x20000278 = 0; *(uint64_t*)0x20000280 = 0; *(uint32_t*)0x20000288 = 0x10; *(uint32_t*)0x2000028c = 0; syscall(__NR_bpf, /*cmd=*/5, /*arg=*/0x20000200, /*size=*/0x48); } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000, /*len=*/0x1000, /*prot=*/0, /*flags=*/0x32, /*fd=*/-1, /*offset=*/0); syscall(__NR_mmap, /*addr=*/0x20000000, /*len=*/0x1000000, /*prot=*/7, /*flags=*/0x32, /*fd=*/-1, /*offset=*/0); syscall(__NR_mmap, /*addr=*/0x21000000, /*len=*/0x1000, /*prot=*/0, /*flags=*/0x32, /*fd=*/-1, /*offset=*/0); loop(); return 0; }