// https://syzkaller.appspot.com/bug?id=3fd58cb958db34d2a15644e6f5d9649db225c58d // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0x0}; int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=*/7ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); intptr_t res = 0; syscall(__NR_madvise, /*addr=*/0x20a93000ul, /*len=*/0x4000ul, /*advice=*/0xeul); syscall(__NR_mremap, /*addr=*/0x20a96000ul, /*len=*/0x1000ul, /*newlen=*/0x800000ul, /*flags=*/3ul, /*newaddr=*/0x20130000ul); res = syscall(__NR_gettid); if (res != -1) r[0] = res; *(uint64_t*)0x20000000 = 0x208f9f09; *(uint64_t*)0x20000008 = 0xf7; *(uint64_t*)0x20121000 = 0x20217f28; *(uint64_t*)0x20121008 = 0xffffff4e; syscall(__NR_process_vm_writev, /*pid=*/r[0], /*loc_vec=*/0x20000000ul, /*loc_vlen=*/1ul, /*rem_vec=*/0x20121000ul, /*rem_vlen=*/0x23aul, /*flags=*/0ul); syscall(__NR_mremap, /*addr=*/0x20251000ul, /*len=*/0x2000ul, /*newlen=*/0x400000ul, /*flags=*/3ul, /*newaddr=*/0x2082a000ul); syscall(__NR_mbind, /*addr=*/0x20400000ul, /*len=*/0xc00000ul, /*mode=*/4ul, /*nodemask=*/0ul, /*maxnode=*/0ul, /*flags=*/3ul); return 0; }