// https://syzkaller.appspot.com/bug?id=c3d7cfef0baf9f39b09cbe420723d461e7875819 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #define __syscall syscall int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x1012ul, -1, 0ul, 0ul); *(uint32_t*)0x20000380 = 2; *(uint64_t*)0x20000388 = 0x20000000; *(uint16_t*)0x20000000 = 0; *(uint8_t*)0x20000002 = 0; *(uint8_t*)0x20000003 = 0; *(uint32_t*)0x20000004 = 2; *(uint16_t*)0x20000008 = 4; *(uint8_t*)0x2000000a = 0; *(uint8_t*)0x2000000b = 0; *(uint32_t*)0x2000000c = 0; syscall(SYS_ioctl, -1, 0x80104277ul, 0x20000380ul); memcpy((void*)0x20000100, "tap", 3); *(uint8_t*)0x20000103 = 0x30; *(uint8_t*)0x20000104 = 0; syscall(SYS_ioctl, -1, 0x8020426cul, 0x20000100ul); *(uint32_t*)0x20000000 = 1; *(uint32_t*)0x20000004 = 0x3e; memcpy((void*)0x20000080, "\x0e\x6e\xd8\x4b", 4); *(uint64_t*)0x200000c0 = 4; syscall(SYS_sysctl, 0x20000000ul, 3ul, 0x20000080ul, 0x200000c0ul, 0x20000100ul, 4ul); syscall(SYS_shmat, 0, 0x20ffa000ul, 0x1000ul); return 0; }