// https://syzkaller.appspot.com/bug?id=9d2e4e63237647bde0f67d529aa5a451e61428b1 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #ifndef __NR_bpf #define __NR_bpf 321 #endif uint64_t r[3] = {0xffffffffffffffff, 0x0, 0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); intptr_t res = 0; *(uint32_t*)0x20000140 = 0xb; *(uint32_t*)0x20000144 = 5; *(uint32_t*)0x20000148 = 8; *(uint32_t*)0x2000014c = 5; *(uint32_t*)0x20000150 = 0x81; *(uint32_t*)0x20000154 = 1; *(uint32_t*)0x20000158 = 0; memset((void*)0x2000015c, 0, 16); *(uint32_t*)0x2000016c = 0; *(uint32_t*)0x20000170 = -1; *(uint32_t*)0x20000174 = 0; *(uint32_t*)0x20000178 = 0; *(uint32_t*)0x2000017c = 0; *(uint64_t*)0x20000180 = 0; res = syscall(__NR_bpf, 0ul, 0x20000140ul, 0x48ul); if (res != -1) r[0] = res; *(uint32_t*)0x20000080 = r[0]; *(uint32_t*)0x20000084 = 0x58; *(uint64_t*)0x20000088 = 0x20000000; res = syscall(__NR_bpf, 0xful, 0x20000080ul, 0x10ul); if (res != -1) r[1] = *(uint32_t*)0x20000004; *(uint32_t*)0x200000c0 = r[1]; *(uint32_t*)0x200000c4 = 0; *(uint32_t*)0x200000c8 = 0; res = syscall(__NR_bpf, 0xeul, 0x200000c0ul, 0xcul); if (res != -1) r[2] = res; *(uint32_t*)0x20000440 = r[2]; syscall(__NR_bpf, 0x16ul, 0x20000440ul, 4ul); *(uint32_t*)0x20000440 = r[2]; syscall(__NR_bpf, 0x16ul, 0x20000440ul, 4ul); return 0; }