// https://syzkaller.appspot.com/bug?id=660cabc1b8bdb5a0a68e37cc37ed4c9229199e9e // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void execute_one(); extern unsigned long long procid; void loop() { while (1) { execute_one(); } } #ifndef __NR_bpf #define __NR_bpf 321 #endif void execute_one() { *(uint32_t*)0x20008000 = 0; *(uint32_t*)0x20008004 = 0; *(uint64_t*)0x20008008 = 0x20001fe8; *(uint64_t*)0x20008010 = 0x20003ff6; memcpy((void*)0x20003ff6, "syzkaller", 10); *(uint32_t*)0x20008018 = 0; *(uint32_t*)0x2000801c = 0xc3; *(uint64_t*)0x20008020 = 0x20009f3d; *(uint32_t*)0x20008028 = 0; *(uint32_t*)0x2000802c = 0; *(uint8_t*)0x20008030 = 0; *(uint8_t*)0x20008031 = 0; *(uint8_t*)0x20008032 = 0; *(uint8_t*)0x20008033 = 0; *(uint8_t*)0x20008034 = 0; *(uint8_t*)0x20008035 = 0; *(uint8_t*)0x20008036 = 0; *(uint8_t*)0x20008037 = 0; *(uint8_t*)0x20008038 = 0; *(uint8_t*)0x20008039 = 0; *(uint8_t*)0x2000803a = 0; *(uint8_t*)0x2000803b = 0; *(uint8_t*)0x2000803c = 0; *(uint8_t*)0x2000803d = 0; *(uint8_t*)0x2000803e = 0; *(uint8_t*)0x2000803f = 0; *(uint32_t*)0x20008040 = 0; syscall(__NR_bpf, 5, 0x20008000, 0x48); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (;;) { loop(); } }