| // WARNING in wiphy_register |
| // https://syzkaller.appspot.com/bug?id=71d19ff127410a28ebb96c74e20dcc5dd0476fb8 |
| // status:fixed |
| // autogenerated by syzkaller (http://github.com/google/syzkaller) |
| |
| #define _GNU_SOURCE |
| #include <endian.h> |
| #include <stdint.h> |
| #include <string.h> |
| #include <sys/syscall.h> |
| #include <unistd.h> |
| |
| long r[1]; |
| void loop() |
| { |
| memset(r, -1, sizeof(r)); |
| syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); |
| r[0] = syscall(__NR_socket, 0x10, 3, 0x10); |
| *(uint64_t*)0x20b3dfc8 = 0x20d49ff4; |
| *(uint32_t*)0x20b3dfd0 = 0xc; |
| *(uint64_t*)0x20b3dfd8 = 0x20007000; |
| *(uint64_t*)0x20b3dfe0 = 1; |
| *(uint64_t*)0x20b3dfe8 = 0; |
| *(uint64_t*)0x20b3dff0 = 0; |
| *(uint32_t*)0x20b3dff8 = 0; |
| *(uint16_t*)0x20d49ff4 = 0x10; |
| *(uint16_t*)0x20d49ff6 = 0; |
| *(uint32_t*)0x20d49ff8 = 0; |
| *(uint32_t*)0x20d49ffc = 0; |
| *(uint64_t*)0x20007000 = 0x20f7bea4; |
| *(uint64_t*)0x20007008 = 0x24; |
| *(uint32_t*)0x20f7bea4 = 0x24; |
| *(uint16_t*)0x20f7bea8 = 0x1c; |
| *(uint16_t*)0x20f7beaa = 0x109; |
| *(uint32_t*)0x20f7beac = 0; |
| *(uint32_t*)0x20f7beb0 = 0; |
| *(uint8_t*)0x20f7beb4 = 4; |
| *(uint8_t*)0x20f7beb5 = 0; |
| *(uint16_t*)0x20f7beb6 = 0; |
| *(uint16_t*)0x20f7beb8 = 0x10; |
| *(uint16_t*)0x20f7beba = 9; |
| *(uint16_t*)0x20f7bebc = 0xc; |
| *(uint16_t*)0x20f7bebe = 0; |
| *(uint32_t*)0x20f7bec4 = 0; |
| syscall(__NR_sendmsg, r[0], 0x20b3dfc8, 0); |
| } |
| |
| int main() |
| { |
| loop(); |
| return 0; |
| } |
