// https://syzkaller.appspot.com/bug?id=dff959993aab54549f2673720bc00be19226bc01 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #ifndef __NR_bpf #define __NR_bpf 321 #endif uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); intptr_t res = 0; *(uint32_t*)0x20000200 = 4; *(uint32_t*)0x20000204 = 0xe; *(uint64_t*)0x20000208 = 0x200019c0; memcpy( (void*)0x200019c0, "\xb7\x02\x00\x00\x00\x01\x00\x00\xbf\xa3\x00\x00\x00\x00\x00\x00\x07\x03" "\x00\x00\x00\xfe\xff\xff\x7a\x0a\xf0\xff\xf8\xff\xff\xff\x79\xa4\xf0\xff" "\x00\x00\x00\x00\xb7\x06\x00\x00\xff\xff\xff\xff\x6d\x64\x05\x00\x00\x00" "\x00\x00\x65\x04\x04\x00\x01\x00\x00\x00\x04\x04\x00\x00\x01\x00\x00\x00" "\xb7\x05\x00\x00\x40\x00\x00\x00\x6a\x0a\x80\xfe\x00\x00\x00\x00\x85\x00" "\x00\x00\x53\x00\x00\x00\xb7\x00\x00\x00\x00\x00\x00\x00\x95\x00\x00\x10" "\x00\x00\x00\x00\x4e\x62\x01\x1c\x30\x34\xfd\xb1\x17\x16\x8b\xd0\x7b\xa0" "\x8a\xf3\x39\xd1\xa1\xee\x35\xfe\x16\x3a\x25\x5c\x33\x28\x20\x44\xb3\x24" "\x95\xef\x8a\xb9\xad\xc6\x7c\xcc\x94\x5f\xf1\x5d\x80\x2f\x51\x32\x14\x3c" "\x0a\x9f\xc7\xa8\x44\x52\x56\x99\x57\xc1\x00\x2e\xd7\xd4\x58\xe1\x7f\x79" "\x1f\x22\x98\xc8\xeb\x48\x4d\xe0\x33\x12\xc6\x9b\x3e\xdf\xf5\xbe\x26\x76" "\x5b\xa5\xf8\xf2\x87\x90\x21\xc2\xea\x53\xac\x54\x7a\x65\x4b\xbd\x2d\xb5" "\x35\x6b\x97\x1d\x83\xc7\x09\x7a\xac\xd7\xfb\x38\xdd\xf7\x9f\x2b\xe9\x08" "\x7a\x3e\x7b\x7c\x0e\xfd\x3e\x38\xc7\x94\xeb\x06\xb0\xb8\xc3\x92\x90\x4a" "\xe7\xdd\x5e\x4d\xee\x88\x51\x8d\xdf\x12\xdd\xdd\x4b\xfc\x6a\x4d\xd3\xb6" "\xbe\xba\x51\x07\x42\x29\xb0\xd4\xb5\x04\x51\x6c\x4c\x3e\x5d\x1a\xa0\x44" "\xd8\xd0\x07\x28\x14\x1c\xd6\x7b\xcd\x68\xf2\x53\x28\x8e\x65\x5c\x6b\x34" "\xe0\x2e\x90\x63\x7e\xf2\x91\x2b\xa7\xde\x26\xff\x23\x57\xef\x17\xf9\x5a" "\x25\x78\x0c\x3a\x05\x78\x26\xef\x4e\x91\x2f\x01\xa2\x01\xe6\x94\xe3\x04" "\x9b\x8c\x8f\xe8\xb6\x95\x24\xcd\x19\xf7\x52\x5d\x8d\x66\xbb\x76\x6f\x7f" "\x3f\x91\x8c\x86\xa7\x02\x52\x23\x68\xd9\xf8\x18\x97\x13\x3a\xf9\x4a\x5a" "\x4c\xff\x7f\x4d\x8b\x9d\x8e\xaf\x30\x2f\x0b\x2e\x4b\x47\xff\xc2\x0d\x72" "\xea\xa1\x00\x00\x00\xee\x91\x7b\xca\x48\x85\xbb\xf5\x97\xa1\x4a\xb6\x45" "\x8e\x62\x4f\x2f\x7f\x06\xf3\x0b\xef\x08\xec\x48\x04\x1a\x27\x72\xd8\x8e" "\x0c\x80\x88\xf4\x04\xf0\x11\x28\x9e\xbc\x56\x23\xfa\xa1\x18\x26\x32\x12" "\x1e\x07\x3a\xf1\xd6\x9a\x2e\x36\xbe\x11\x5b\xe3\xb3\x25\xec\xd2\x01\xd2" "\xff\xb0\xa7\xfa\x4f\x5d\x11\x06\x56\x0c\xdc\xf0\x71\xde\xfd\x0a\x8b\xe3" "\xb6\x9c\xe3\xe4\xf3\x61\xac\xa7\x58\x27\x42\x6d\xde\x87\xfd\xf4\x61\x32" "\x22\x67\x42\x80\xf5\x5e\x98\x10\x74\x50\xc1\x9b\x86\x12\x99\xfc\xd9\xed" "\x9d\x86\x79\x40\x64\x19\x40\x6b\xf0\xc5\x32\x9b\xd5\xb4\x69\x73\x36\x11" "\x2b\x0b\x87\x56\xce\x35\x74\x04\x6b\xf6\x11\xa1\x08\xf8\xdf\x4d\x34\xc5" "\xbd\x66\x57\xf4\x14\x57\x50\xde\x77\x94\x07\x30\x4b\x0d\x88\x59\x78\x40" "\xb7\x02\xb6\xfa\x8e\xdf\xff\x8f\xaf\x8b\x8e\xc0\x39\xba\xb3\x85\xca\xc0" "\x53\x53\x73\xbb\x8f\xab\x90\x53\x9b\x1a\x65\xdd\xff\x84\x1e\xb6\x71\xf7" "\xfa\xf3\x9a\x43\xa6\x6c\x55\x40\xb8\x76\x2b\x42\x00\x7c\x9e\xc4\x31\x93" "\xcc\xf6\x17\xdb\xf8\xa1\x2b\x4a\x18\x9e\xdb\xf9\xfb\x7c\x42\xb1\xf4\x35" "\xb3\xd4\xb1\x9b\x53\xb6\x03\x22\xaf\x0a\xa6\x6e\x8f\x44\x8e\x1b\xd9\x68" "\x22\xe6\xb7\x0b\x62\x91\x2c\x92\x6d\xbe\x41\x7c\xcc\xc4\xf6\x96\xd5\x28" "\xfa\x8a\x3e\xa8\x47\xf1\x0e\x9b\x11\x06\xf3\xbb\x50\x6f\x1d\x7f\xbd\xf8" "\x01\x00\x00\x00\x00\x00\x00\x00\x6c\x02\x8e\xb5\xb5\xa0\x73\xd0\xde\x55" "\x38\xab\x42\xe1\x71\xb3\xba\xae\x34\xc3\x59\x87\xb0\xdd\xa4\x97\xac\x3f" "\x5e\x97\xe6\x0e\xae\xea\x15\xc6\xd5\x5b\xad\xf9\xb8\x6b\x1c\x00\x01\x00" "\x00\x6e\x60\xcd\x06\xc9\xed\x24\x31\x3c\xe6\x04\x00\x00\x00\x60\x30\xf8" "\x00\x00\x00\x00\x69\x0d\xb0\x22\xc5\x01\xf8\x02\xff\x59\xb4\xe6\x83\xef" "\xa4\xb6\xe7\x7e\x04\x20\x90\xbd\x2a\xc3\x7d\x41\x30\x08\xec\x8c\xb8\x16" "\x6f\x6e\x28\xb4\x9a\x77\xed\x91\xbe\xfc\x4d\x31\x58\x78\xf8\x8a\x8f\xb1" "\xdd\x67\x9f\xb4\xc5\x55\x7a\xba\xe6\x84\x99\x17\xdc\x51\xa8\x9d\x47\xb7" "\x28\x50\x2f\x7e\x62\x1f\xc0\xe3\xba\x04\x02\x00\x00\xc1\x49\xee\x66\x01" "\x72\x8c\x75\x09\x30\x51\x93\x39\xb4\x41\x97\xc2\x2d\xa8\x65\x05\x79\x47" "\x5a\xfd\x96\x18\x7d\x88\x1e\x93\xb4\x2a\x5f\xdf\xd6\x86\xd8\x90\x0c\x44" "\xc6\x71\x33\xee\xb0\x10\x9d\xcb\x60\xdd\xda\xd5\x80\x37\xfd\xa6\x58\x85" "\xa1\x5a\x42\x9e\xdf\xe3\x02\x7a\x5e\xbf\x95\x25\x47\x44\xf1\x0f\xd6\x07" "\xbc\x31\x00\xb9\x49\x32\xb8\xd9\x44\x7c\x42\xf6\xe2\x1e\xe0\xe5\x4f\x8b" "\xe3\x86\xbd\xc0\x9d\xec\xec\xe9\x10\xa4\x81\xe6\x48\xe0\xcb\x07\x45\x36" "\xa2\x5f\xf5\x81\xd9\x2a\xf0\x8a\x06\xf8\x57\x31\x1a\x2f\x14\x32\x6b\x0b" "\x29\x02\x05\xe9\x1a\x68\x2e\x00\xc8\x76\x2c\xbc\x6b\x90\x4c\x98\x0e\xef" "\x6e\x6a\xe0\x0f\x00\x00\x00\x00\x00\x00\x6a\x81\x94\x47\x97\x00\xa0\x2b" "\x92\xbe\xc8\xd0\x5e\xae\x1f\x69\xfd\xd7\xb8\x0d\x3d\xde\x04\xc2\x2f\x68" "\x95\x94\xde\x2e\xbb\x96\xea\x27\x16\x00\x18\x3e\xc6\x7b\xe9\x6d\xc0\xe4" "\xac\xd7\xac\xf1\xdf\xe7\x9d\x67\x71\x90\x3b\x76\xe2\xae\x47\xdd\x72\x65" "\x11\x90\xc2\x2d\x64\x10\x30\xe1\xdd\xba\x58\xac\xa5\xbc\xab\xbb\xab\x24" "\x41\x4a\x38\x10\x78\x8e\x55\x03\xe4\xbe\x66\xd6\x83\xda\xac\x5e\x00\x00" "\x00\x00\x00\x00\x00\x00\x10\x8a\x3c\x87\xb1\x9d\x5b\x9a\x00\xc7\x5d\x84" "\xa9\x2d\x6d\xcf\x00\xba\x96\xed\xb9\x5e\xde\x0e\x19\x57\xc2\xa2\x75\x42" "\x58\xd9\xfd\x02\x80\x96\xcc\x15\xa8\xb9\x12\xb4\x94\xd4\xbb\xe6\x09\x03" "\x1e\xa1\xca\x65\xa5\x48\x94\x1d\x5d\x16\x29\x6d\xd0\x8e\x9e\xdf\xb2\xfb" "\x3e\x67\x89\x77\x57\x31\x0d\x9d\xae\xbd\x5a\x3d\xab\xbc\xed\x3b\x05\x11" "\x29\xcd\x60\xa3\x7d\x39\x76\x43\x32\x4e\x6f\x0a\xad\xf9\x78\xd6\x39\x65" "\x00\x00\x00\x00\x00\x00\x00\x00\x57\x0b\x0a\xcb\xca\xa1\x96\xe6\xa5\x50" "\xe7\xc2\xd8\xce\xe7\xa2\x78\xce\xe5\x91\xf3\x60\xe3\x45\xd3\x7d\xc9\xf8" "\x99\x1a\x16\xc0\x8d\x72\x31\x7c\x42\xd2\xac\xac\xd7\x61\x30\xef\x14\x86" "\x01\x66\x97\xe4\xd5\x1c\x4b\x42\xb2\xef\xc8\xed\xab\x88\xd4\x6b\xc3\xd5" "\xd6\xe5\xa6\x34\x20\xaa\x39\x03\x5a\xe4\x6d\x16\xd8\x79\xfc\x81\x5a\x5c" "\xb8\x4b\x0d\x5c\x8a\xd9\x70\x12\x8a\xdf\x8d\xec\x11\x71\xe8\x60\xca\x54" "\xce\x5d\x6a\x5a\xa0\x32\x7b\xca\x4f\x49\xa7\x10\xbf\x8a\x83\x99\x07\x12" "\x37\xfe\x5d\x76\x4e\x20\x34\x87\x3c\x94\xa4\xf2\x12\x87\xf3\xbc\xe3\xee" "\xb6\x9e\x94\xdf\x2e\x14\xe4\xab\x10\xcc\x78\x34\xb3\x0c\xbc\x87\x9b\x80" "\x25\x59\x91\xdd\x7a\xac\x2e\x92\xc9\xe7\xc4\x11\xc0\x19\xd2\x29\xc1\xf1" "\xe5\x63\x15\x2f\x1c\x5a\xe9\xcd\xa3\xe8\xf4\x96\x6e\xbf\xa0\xc7\x79\xd6" "\x24\xc5\xa2\xb7\x49\x1b\x8f\x73\xe7\x67\x38\x9e\xcd\x1d\xee\x95\x13\x53" "\xbb\x22\xb7\xca\xf8\x94\x68\x87\x15\x20\x82\x37\x15\xcf\xeb\xd0\x41\x89" "\xc6\xc6\xb3\x4b\xdc\xa6\x54\x1f\x6b\xc0\x63\x00\x00\x00\x00\x00\xf9\x4e" "\x85\xf5\x11\x1a\xdd\x3a\x3c\xb5\xbc\xac\xe9\x5f\x38\x46\x54\x02\xc3\x9d" "\xf8\x35\x75\x4e\xf3\x87\x82\x2c\x00\x1a\x25\x30\x4f\x3e\x00\xb4\x46\x75" "\xd0\xa2\x3a\x21\xdc\x40\x23\xc6\x42\xcc\x6f\x5a\x75\xc4\x5a\x29\xab\x17" "\x09\x41\x53\x3b\x93\x36\x00\xac\xf9\xa2\xd4\x71\xb7\x3a\x73\x17\x8c\xdf" "\x30\x9e\x5d\x53\x31\x19\x96\x21\x5b\x44\x29\x5d\xfd\xdc\x1d\xd6\xb8\x11" "\x32\xe9\x99\x36\x6e\x46\x0d\x15\xd3\x66\xe8\x4d\xa0\x2b\x8a\xfc\x40\xc4" "\x5e\x73\x3f\x80\x44\x60\xed\x83\x00\xf1\xa6\x14\x3a\xb1\x47\x60\x37\xe4" "\x74\xca\x87\x61\x87\xc8\x5b\x06\x41\x91\x21\x5c\xd7\x7e\x6a\x1f\xd6\x39" "\x9a\x49\x8b\x96\xb9\xb0\xcc\xa9\x32\x55\xac\xb0\x8c\x67\xe5\x00\x04\xc5" "\xaf\x6f\xd5\xb4\xce\x7c\x1e\xbc\x92\x02\xbd\x7b\x32\x9a\x4d\x25\x30\x48" "\x6d\x59\x99\xdd\x83\xbd\xeb\xec\xca\x17\xf2\x86\x91\x35\x43\x8f\x05\x40" "\x80\x1f\x97\x48\x1d\xaf\x9e\xc9\x4b\x79\x9c\x12\xe7\x14\xd5\x73\xe2\xa6" "\x33\x1f\x49\x62\x54\xf2\x54\xa6\x0c\x52\xb2\x02\x6e\xd6\xa7\x2c\x00\x01" "\x19\x14\x90\xfa\xbe\x7b\x15\x1f\x92\xe5\xd7\x00\xf2\x18\x30\xd6\x13\xfb" "\x8e\x73\xdd\xaa\x62\x1b\x5f\x8e\x78\xd3\x6f\x16\xe4\x90\xf3\x05\xb3\x84" "\x5a\x78\x81\x7e\x59\xbf\x7e\xd3\x64\x71\xdb\xca\x01\xd3\x9e\x50\xae\x25" "\x35\x46\x0e\x1d\x2f\x26\x14\x94\x06\x47\x52\xf0\xd5\x6f\x6a\x4d\xcf\x7e" "\x57\xc0\x3d\x4b\x4a\xdd\x38\x26\x72\x66\x9f\xdc\x1e\x0f\x32\x03\x04\xd0" "\xd2\xb3\x08\xc5\xed\x39\x56\xea\xe2\x63\x03\x5d\x70\x3f\x86\x22\x24\xe9" "\x81\x8a\x3d\x7a\xc2\x70\x79\xbd\x2b\x29\x99\x94\xb4\x8f\x1f\xdc\xfb\x0c" "\x7c\xe9\x3a\x51\x13\xaf\x87\x58\x52\x93\x96\x0a\x80\xac\x63\xc5\x4e\x55" "\x06\x3b\xf8\xd2\x46\x39\xe5\x61\x25\x3e\xf0\xca\xf6\xc5\x81\x18\x12\x0d" "\x80\xce\xcc\x05\x28\xf0\xd8\x1d\x29\x10\x09\xfc\x46\x40\x1b\xaf\x9c\x22" "\xd1\xc4\x52\xa5\xb4\x1b\x7a\x1b\xdc\xdf\x93\x59\x23\x18\x5d\xb7\xb1\x4a" "\x7f\xa7\xba\xbc\x1f\x53\xdf\x70\x61\x8b\xb7\x3a\xa8\x10\xb7\x56\x69\x6f" "\x26\x65\x3b\x84\xcb\x84\x2a\xe4\x33\xfd\xa5\x9f\xbe\x31\xf6\x88\xd2\x72" "\x45\x68\xcc\x39\x6f\xca\x7c\x74\x98\x4b\x7f\x7b\xd0\x33\xc1\xd0\x62\x37" "\x6e\xb4\x5e\x3e\x58\x57\xfc\x65\x98\xc9\x33\x61\x0b\xe3\x74\x90\x65\x17" "\x9d\xc8\x62\x2b\x07\x22\x25\x9e\x92\x2f\x40\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x66\x58\xed\x5b\xb5\xaa\xe7\x69\xac\x60\x3d\xfd\x6b\x9c\xc9" "\x9e\xed\xa3\x16\xcb\xad\x8d\x58\x17\xec\xb3\x36\x4b\x67\x74\x86\x00\xc7" "\xdf\x41\x23\xb5\x70\xce\x3e\xcc\xf4\xc1\x8f\x5e\x4d\x38\x2b\x36\x73\x1e" "\xf2\xc4\xf9\x60\xce\x00\x51\x26\xff\xd9\xe3\xd6\xb0\x1e\x25\x32\x84\xeb" "\x15\xe2\xbf\x70\x76\x2f\xa1\xea\x65\x87\xb7\x27\x0a\x2c\xf0\x0a\x4b\x29" "\xca\xbf\x5a\xdf\x82\xa7\x4e\x97\x4e\xfd\xa8\x97\x1a\x19\x68\xbe\x48\x4f" "\xf8\xbc\x41\xa7\xab\x67\x67\x75\x43\x46\x01\x0c\xad\x6c\xc1\x5f\xcd\x09" "\x94\xa1\x25\xe8\x3b\xfc\x20\x87\x02\x14\xc3\x85\x06\x81\x1a\x6a\x26\x32" "\x80\xfe\xda\x6f\xb2\xab\xac\xd1\x81\xa1\x74\x83\x18\x37\xe6\x11\x4b\x4b" "\xb9\x58\x25\x47\x52\xeb\xeb\xa4\x38\xe1\x07\xb2\x75\xec\xc7\x7e\xb4\x06" "\x6d\x09\xff\xa8\xfe\xd6\xa1\xee\x70\x44\x36\xf3\x4e\xac\x33\x25\x60\xb2" "\x2d\xd8\x0b\x22\x74\x83\xc7\x4e\xcd\xda\x8e\x1d\xe2\xd0\x5d\xae\x17\x79" "\xda\x4b\xd4\x00\x46\x42\x1d\xe1\x06\xd7\xad\x26\xf3\xaf\x1b\xbb\xde\x0e" "\x1f\x13\x9e\xa8\x24\x56\xe5\xdf\x95\x51\x41\x22\x30\x4c\x5b\x8f\xe1\xf5" "\x48\x15\x4b\x15\xc9\x04\x27\x00\xc3\x05\x70\x62\x73\xbe\x55\x5f\x3f\x0a" "\x10\x3e\xed\xe8\xea\x19\xdc\xb2\x67\xfd\xf2\xaf\x85\x9e\x2f\xb9\x54\xcf" "\xa4\x49\x4d\xdd\x69\x2d\x19\xa8\x72\x74\xfe\x24\xab\x36\x1d\xe4\x9d\x56" "\xbf\xc8\x22\xfc\xb2\x7a\x60\xcd\xa2\x42\xd9\x6a\xe4\x5b\x8c\x80\x20\x84" "\x47\x89\x74\x01\xd7\x43\x82\x53\xb5\x73\x9c\xb9\xf8\x02\x82\x6d\xfe\xd2" "\x6a\xdd\x43\x8c\xa9\xba\x47\xea\x39\x66\xcd\x7c\x98\x8f\x4c\xbb\xe6\xbd" "\xe2\x6e\x9e\x41\x70\x32\xe5\xd1\x51\x70\x97\x0d\x7f\xec\x7f\xa6\x99\x25" "\x8c\x2a\x55\x48\x8d\x41\xb1\x6f\xb1\xe0\x1b\x7d\x28\x91\x8a\x65\x54\x8c" "\xae\xef\x4f\xe6\xcc\x80\x29\xdb\xca\xf9\x73\xfe\xd5\x0e\xf9\x3b\x99\x17" "\x5e\x3a\x9a\xf8\xe7\xef\x3c\x57\xaf\x31\xfb\xe1\x37\xf1\xde\x23\xe9\x21" "\x4c\x9e\x15\x13\xf7\x82\xc5\xa6\xce\x80\x21\xfe\xa2\x31\x40\xf8\x76\x87" "\xdf\x4a\xd0\xef\x78\x1e\x8d\x58\x00\xbf\x3d\x70\x94\xa5\x17\xcc\x09\x73" "\xd5\x0e\x45\x66\x5b\x5b\xb9\xfd\x79\xff\xac\x8d\xda\x90\xc8\x4d\x15\x16" "\x1b\xe3\xf5\x80\xcd\xcf\xf5\x42\x2f\x3f\xf4\x37\x81\xb2\xd5\x82\x29\x9a" "\x18\x22\x2e\x1f\x8f\x1f\xca\xd9\xd6\x40\x17\x5a\x54\x58\xc1\x85\xa2\xa6" "\x5f\x07\x15\x15\x5c\x58\xcc\xdf\x16\x49\x73\x1a\x8e\x18\x2c\x46\xcd\xb5" "\xd7\x31\x22\x8b\xf4\x28\x98\x53\x75\xf8\xe2\xf9\xb0\x12\xbd\xdf\x71\x54" "\x0b\xb5\x3c\x30\x59\x67\x30\x3c\xf3\x9a\xe7\x0e\xe6\x7f\xfd\x76\xa2\x95" "\x6b\xd4\x27\x10\x4e\x79\xd9\xe9\xda\x84\x5f\x28\xa1\x8f\xe9\x50\x38\xdf" "\x1d\xec\x7a\x2f\x05\xc2\xc8\x0c\x14\x7d\xbc\x22\x9f\x75\xde\xed\xd2\x54" "\x6c\x5f\x98\x5a\x19\x52\xdf\x27\xd7\x12\x5d\x09\x1a\x80\xcf\xe6\xdf\x1d" "\x35\xa2\x4f\x19\x03\xcc\x01\x44\x14\x74\x3d\xe8\xc3\x64\x7a\x59\x83\x65" "\x4d\x1b\x37\xf6\xbd\xb2\x49\x56\x5f\x08\x66\x53\x5e\x31\x52\xf5\xb4\x63" "\xfd\x62\x26\xcd\x04\x60\x44\x7f\x62\x5e\xdf\x27\x67\x0d\xa5\xb0\x9d\x2f" "\x27\xfc\xa1\x73\xe2\x61\xac\xbe\xec\x1e\x8a\x19\xfa\xcf\xbe\xe7\x3b\x77" "\xf1\xdf\x07\xe0\xf6\xfc\xbc\x26\xdc\xd3\x56\x6f\x3e\x2c\xbd\x24\x5e\xb5" "\x96\x50\x0f\x23\x8c\x2f\xd7\x2e\x15\x0b\xef\x8f\x49\xfa\xb2\x37\x11\xe3" "\xf0\x3b\x11\xe6\x29\x15\x34\xd2\x28\x45\x43\xc8\x0f\x13\x62\xff\x61\xcf" "\x0b\x7d\x50\x66\xc9\x43\x54\x88\x21\xba\x0b\x90\x70\xc9\xec\xef\x86\xcf" "\xec\x7c\x2d\xde\x02\xfa\xaf\xc3\x92\xc8\x81\xff\xd9\xd7\x32\xb3\xb0\x71" "\x43\x3a\x6a\x12\x63\xa2\xbc\xd4\x91\x07\xfe\x3a\xe0\xc3\x05\x86\x1d\x4e" "\x4b\x8b\x77\x09\x03\xd8\x9c\xb0\x09\xc9\xfe\xf3\xe8\x6b\x27\x00\x00\x00" "\xe0\x90\xb7\x7b\xb7\xfb\xa4\x88\x31\x25\x0f\xe1\x23\x3b\x6d\x72\x1c\x6d" "\xd4\xf2\x8e\xbc\x8a\x3b\x01\x98\x00\x00\x00\x00\x00\x00\x48\xfe\x68\x66" "\xe5\xd4\x1a\xe0\x28\x54\x6a\xd1\x30\x17\xeb\x73\x31\xf0\xd9\xdb\x9a\x5f" "\xea\x9d\x6c\xe9\xea\x5a\x5a\xdd\x8f\xd3\x85\xef\xac\x78\x65\x70\xfd\x07" "\xfe\xae\x88\x7c\xc9\x36\x19\x54\x21\x4f\xb2\xe9\x04\x0f\x63\xa4\x74\x68" "\xa7\x57\x42\x61\x54\x87\xe7\x15\x9a\x0a\x30\xda\x26\x6d\x38\x10\xa5\x47" "\xed\x49\x7d\x97\x6d\x1d\x4f\xec\x50\x1b\x69\xfc\x13\x53\x5f\xfb\xee\xf8" "\x70\x24\x77\x05\x2f\x31\xe6\x8b\x18\x79\x3d\x11\xdf\xa9\xec\xe4\x27\x3b" "\x53\x47\xb1\x66\x16\x2d\x72\x4e\x66\xad\x23\x0d\x32\xa2\x27\xcd\x6e\x0a" "\x77\x43\xea\xf4\x0e\x84\xb4\x0e\x2e\x9f\x64\x44\xb1\x54\xf5\xbd\xb7\x3a" "\x04\x26\xe0\xe1\xf6\x40\xdd\x83\x76\x8a\x67\x61\xea\xac\xfc\x01\x15\x76" "\x9d\x01\x9e\xb3\xcf\x61\xfe\x67\xf7\x32\xa1\xa0\x5b\xe5\xd2\x00\xb2\x5e" "\x81\x95\xee\xc9\xa0\xe5\x1f\x38\x9d\xfc\xbb\x1e\x19\x58\x20\x0b\x0c\x52" "\xbf\x31\x64\xda\x4b\x1f\x7c\x52\x62\xd0\x24\xb4\xb6\x21\x02\xdd\x85\xf7" "\x4d\x4f\x8f\xb9\xdf\x9d\x97\x99\x15\xbf\x1a\x89\x5e\x64\x16\x68\xf9\x0b" "\xab\xb1\x91\x69\xce\xc4\x5a\x77\x15\x56\x62\x45\x94\x8e\x6f\xd7\xe5\x9a" "\x0b\x59\x56\xd3\x1f\x75\xea\x18\xe6\xdb\x73\xf4\x89\xca\x57\xe2\xe6\x92" "\x6c\x57\x7f\xe7\x9a\x5a\x7d\x2b\x34\x16\x4f\xb0\xeb\x2b\x37\x24\x2c\xe4" "\x33\x51\x9a\x60\x7f\x20\x59\x3a\x70\x36\x48\x03\xbf\xfb\x5b\x81\xe0\x1c" "\x74\xde\x61\x40\x9c\x29\x0e\x6c\xb7\x84\x90\x44\x9c\xa2\x8b\xca\x8a\x28" "\xa8\x00\x00\x00\x00\x00\x00\x00\x00\x00", 3196); *(uint64_t*)0x20000210 = 0x20000340; memcpy((void*)0x20000340, "syzkaller\000", 10); *(uint32_t*)0x20000218 = 0; *(uint32_t*)0x2000021c = 0; *(uint64_t*)0x20000220 = 0; *(uint32_t*)0x20000228 = 0; *(uint32_t*)0x2000022c = 0; memset((void*)0x20000230, 0, 16); *(uint32_t*)0x20000240 = 0; *(uint32_t*)0x20000244 = 0; *(uint32_t*)0x20000248 = -1; *(uint32_t*)0x2000024c = 8; *(uint64_t*)0x20000250 = 0x20000000; *(uint32_t*)0x20000000 = 0; *(uint32_t*)0x20000004 = 0; *(uint32_t*)0x20000258 = 0; *(uint32_t*)0x2000025c = 0x10; *(uint64_t*)0x20000260 = 0x20000000; *(uint32_t*)0x20000000 = 0; *(uint32_t*)0x20000004 = 0; *(uint32_t*)0x20000008 = 0; *(uint32_t*)0x2000000c = 0; *(uint32_t*)0x20000268 = 0; *(uint32_t*)0x2000026c = 0; *(uint32_t*)0x20000270 = -1; *(uint32_t*)0x20000274 = 0; *(uint64_t*)0x20000278 = 0; res = syscall(__NR_bpf, 5ul, 0x20000200ul, 0x48ul); if (res != -1) r[0] = res; *(uint32_t*)0x20000400 = r[0]; *(uint32_t*)0x20000404 = 2; *(uint32_t*)0x20000408 = 0xe; *(uint32_t*)0x2000040c = 0; *(uint64_t*)0x20000410 = 0x20000080; memcpy((void*)0x20000080, "\x72\xae\xe2\x63\xeb\x25\x07\xc1\x5c\xf8\xfd\xb6\x49\x53", 14); *(uint64_t*)0x20000418 = 0; *(uint32_t*)0x20000420 = 0xf000; *(uint32_t*)0x20000424 = 0; *(uint32_t*)0x20000428 = 0; *(uint32_t*)0x2000042c = 0; *(uint64_t*)0x20000430 = 0; *(uint64_t*)0x20000438 = 0; *(uint32_t*)0x20000440 = 0; *(uint32_t*)0x20000444 = 0; syscall(__NR_bpf, 0xaul, 0x20000400ul, 0x48ul); return 0; }