// autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include uint64_t r[2] = {0xffffffffffffffff, 0xffffffff}; void loop() { long res; memcpy((void*)0x20000040, "/dev/infiniband/rdma_cm", 24); res = syscall(__NR_openat, 0xffffffffffffff9c, 0x20000040, 2, 0); if (res != -1) r[0] = res; *(uint32_t*)0x20001740 = 0; *(uint16_t*)0x20001744 = 0x18; *(uint16_t*)0x20001746 = 0xfa00; *(uint64_t*)0x20001748 = 0; *(uint64_t*)0x20001750 = 0x20001700; *(uint16_t*)0x20001758 = 0x13f; *(uint8_t*)0x2000175a = 0; *(uint8_t*)0x2000175b = 0; *(uint8_t*)0x2000175c = 0; *(uint8_t*)0x2000175d = 0; *(uint8_t*)0x2000175e = 0; *(uint8_t*)0x2000175f = 0; res = syscall(__NR_write, r[0], 0x20001740, 0x20); if (res != -1) r[1] = *(uint32_t*)0x20001700; *(uint32_t*)0x20000080 = 0xb; *(uint16_t*)0x20000084 = 0; *(uint16_t*)0x20000086 = 0xfa00; *(uint64_t*)0x20000088 = 0x20000340; *(uint32_t*)0x20000090 = r[1]; *(uint32_t*)0x20000094 = 2; syscall(__NR_write, r[0], 0x20000080, 0x57); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }