// https://syzkaller.appspot.com/bug?id=660cabc1b8bdb5a0a68e37cc37ed4c9229199e9e // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void execute_one(); extern unsigned long long procid; void loop() { while (1) { execute_one(); } } void execute_one() { *(uint64_t*)0x20001000 = 0x20001000; *(uint16_t*)0x20001000 = 0x10; *(uint16_t*)0x20001002 = 0; *(uint32_t*)0x20001004 = 0; *(uint32_t*)0x20001008 = 0; *(uint32_t*)0x20001008 = 0xc; *(uint64_t*)0x20001010 = 0x20001000; *(uint64_t*)0x20001000 = 0x20001fd8; *(uint32_t*)0x20001fd8 = 0x20; *(uint16_t*)0x20001fdc = 0x11; *(uint16_t*)0x20001fde = 0; *(uint32_t*)0x20001fe0 = 0; *(uint32_t*)0x20001fe4 = 0; *(uint8_t*)0x20001fe8 = 7; *(uint8_t*)0x20001fe9 = 0; *(uint16_t*)0x20001fea = 0; *(uint32_t*)0x20001fec = 0; *(uint32_t*)0x20001ff0 = 0; *(uint32_t*)0x20001ff4 = 0; *(uint64_t*)0x20001008 = 0x20; *(uint64_t*)0x20001018 = 1; *(uint64_t*)0x20001020 = 0; *(uint64_t*)0x20001028 = 0; *(uint32_t*)0x20001030 = 0; syscall(__NR_sendmsg, -1, 0x20001000, 0); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (;;) { loop(); } }