// https://syzkaller.appspot.com/bug?id=be2e39518462291fd049f665261632ded34b79fd // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void test(); void loop() { while (1) { test(); } } #ifndef __NR_bpf #define __NR_bpf 357 #endif #ifndef __NR_mmap #define __NR_mmap 192 #endif #undef __NR_mmap #define __NR_mmap __NR_mmap2 uint64_t procid; void test() { syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); *(uint32_t*)0x20c47fec = 6; *(uint32_t*)0x20c47ff0 = 4; *(uint32_t*)0x20c47ff4 = 0x8000; *(uint32_t*)0x20c47ff8 = 0xfc79; *(uint32_t*)0x20c47ffc = 0; *(uint32_t*)0x20c48000 = -1; *(uint32_t*)0x20c48004 = 0; *(uint8_t*)0x20c48008 = 0; *(uint8_t*)0x20c48009 = 0; *(uint8_t*)0x20c4800a = 0; *(uint8_t*)0x20c4800b = 0; *(uint8_t*)0x20c4800c = 0; *(uint8_t*)0x20c4800d = 0; *(uint8_t*)0x20c4800e = 0; *(uint8_t*)0x20c4800f = 0; *(uint8_t*)0x20c48010 = 0; *(uint8_t*)0x20c48011 = 0; *(uint8_t*)0x20c48012 = 0; *(uint8_t*)0x20c48013 = 0; *(uint8_t*)0x20c48014 = 0; *(uint8_t*)0x20c48015 = 0; *(uint8_t*)0x20c48016 = 0; *(uint8_t*)0x20c48017 = 0; syscall(__NR_bpf, 0, 0x20c47fec, 0x2c); } int main() { for (procid = 0; procid < 8; procid++) { if (fork() == 0) { for (;;) { loop(); } } } sleep(1000000); return 0; }