| // WARNING: suspicious RCU usage in kmem_cache_alloc_trace |
| // https://syzkaller.appspot.com/bug?id=bb2804186606e8b89258f00ae8513d29a675d805 |
| // status:invalid |
| // autogenerated by syzkaller (http://github.com/google/syzkaller) |
| |
| #define _GNU_SOURCE |
| #include <endian.h> |
| #include <stdint.h> |
| #include <string.h> |
| #include <sys/syscall.h> |
| #include <unistd.h> |
| |
| long r[1]; |
| void loop() |
| { |
| memset(r, -1, sizeof(r)); |
| syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); |
| r[0] = syscall(__NR_socket, 0x40000000015, 5, 0); |
| *(uint16_t*)0x208a5ff0 = 2; |
| *(uint16_t*)0x208a5ff2 = 0; |
| *(uint32_t*)0x208a5ff4 = htobe32(0x7f000001); |
| *(uint8_t*)0x208a5ff8 = 0; |
| *(uint8_t*)0x208a5ff9 = 0; |
| *(uint8_t*)0x208a5ffa = 0; |
| *(uint8_t*)0x208a5ffb = 0; |
| *(uint8_t*)0x208a5ffc = 0; |
| *(uint8_t*)0x208a5ffd = 0; |
| *(uint8_t*)0x208a5ffe = 0; |
| *(uint8_t*)0x208a5fff = 0; |
| syscall(__NR_bind, r[0], 0x208a5ff0, 0x10); |
| *(uint16_t*)0x20dfcff0 = 2; |
| *(uint16_t*)0x20dfcff2 = 0; |
| *(uint32_t*)0x20dfcff4 = htobe32(0x7f000001); |
| *(uint8_t*)0x20dfcff8 = 0; |
| *(uint8_t*)0x20dfcff9 = 0; |
| *(uint8_t*)0x20dfcffa = 0; |
| *(uint8_t*)0x20dfcffb = 0; |
| *(uint8_t*)0x20dfcffc = 0; |
| *(uint8_t*)0x20dfcffd = 0; |
| *(uint8_t*)0x20dfcffe = 0; |
| *(uint8_t*)0x20dfcfff = 0; |
| syscall(__NR_sendto, r[0], 0x2056a000, 0, 0, 0x20dfcff0, 0x10); |
| } |
| |
| int main() |
| { |
| loop(); |
| return 0; |
| } |