// https://syzkaller.appspot.com/bug?id=be2e39518462291fd049f665261632ded34b79fd // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void test(); void loop() { while (1) { test(); } } #ifndef __NR_bpf #define __NR_bpf 321 #endif uint64_t procid; void test() { syscall(__NR_mmap, 0x20000000, 0xffb000, 3, 0x32, -1, 0); *(uint32_t*)0x20c47fec = 6; *(uint32_t*)0x20c47ff0 = 4; *(uint32_t*)0x20c47ff4 = 0x64; *(uint32_t*)0x20c47ff8 = 0x80000f; *(uint32_t*)0x20c47ffc = 0; *(uint32_t*)0x20c48000 = 0; *(uint32_t*)0x20c48004 = 0; *(uint8_t*)0x20c48008 = 0; *(uint8_t*)0x20c48009 = 0; *(uint8_t*)0x20c4800a = 0; *(uint8_t*)0x20c4800b = 0; *(uint8_t*)0x20c4800c = 0; *(uint8_t*)0x20c4800d = 0; *(uint8_t*)0x20c4800e = 0; *(uint8_t*)0x20c4800f = 0; *(uint8_t*)0x20c48010 = 0; *(uint8_t*)0x20c48011 = 0; *(uint8_t*)0x20c48012 = 0; *(uint8_t*)0x20c48013 = 0; *(uint8_t*)0x20c48014 = 0; *(uint8_t*)0x20c48015 = 0; *(uint8_t*)0x20c48016 = 0; *(uint8_t*)0x20c48017 = 0; syscall(__NR_bpf, 0, 0x20c47fec, 0x2c); *(uint32_t*)0x20ff9000 = 0; *(uint16_t*)0x20ff9004 = 0xa; *(uint16_t*)0x20ff9006 = htobe16(0x4e23 + procid * 4); *(uint32_t*)0x20ff9008 = 6; *(uint8_t*)0x20ff900c = -1; *(uint8_t*)0x20ff900d = 1; *(uint8_t*)0x20ff900e = 0; *(uint8_t*)0x20ff900f = 0; *(uint8_t*)0x20ff9010 = 0; *(uint8_t*)0x20ff9011 = 0; *(uint8_t*)0x20ff9012 = 0; *(uint8_t*)0x20ff9013 = 0; *(uint8_t*)0x20ff9014 = 0; *(uint8_t*)0x20ff9015 = 0; *(uint8_t*)0x20ff9016 = 0; *(uint8_t*)0x20ff9017 = 0; *(uint8_t*)0x20ff9018 = 0; *(uint8_t*)0x20ff9019 = 0; *(uint8_t*)0x20ff901a = 0; *(uint8_t*)0x20ff901b = 1; *(uint32_t*)0x20ff901c = -1; *(uint64_t*)0x20ff9024 = 0; *(uint64_t*)0x20ff902c = 0; *(uint64_t*)0x20ff9034 = 0; *(uint64_t*)0x20ff903c = 0; *(uint64_t*)0x20ff9044 = 0; *(uint64_t*)0x20ff904c = 0; *(uint64_t*)0x20ff9054 = 0; *(uint64_t*)0x20ff905c = 0; *(uint64_t*)0x20ff9064 = 0; *(uint64_t*)0x20ff906c = 0; *(uint64_t*)0x20ff9074 = 0; *(uint64_t*)0x20ff907c = 0; *(uint32_t*)0x20ff908c = 6; *(uint32_t*)0x20ff9090 = 0x20; *(uint32_t*)0x20ff9094 = 7; *(uint32_t*)0x20ff9098 = 1; *(uint32_t*)0x20ff909c = 5; *(uint32_t*)0x20fc1000 = 0xa0; syscall(__NR_getsockopt, -1, 0x84, 0xf, 0x20ff9000, 0x20fc1000); } int main() { for (procid = 0; procid < 8; procid++) { if (fork() == 0) { for (;;) { loop(); } } } sleep(1000000); return 0; }