a0908ae19763.c 1.7 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667
  1. #include "../config-host.h"
  2. /* SPDX-License-Identifier: MIT */
  3. // autogenerated by syzkaller (https://github.com/google/syzkaller)
  4. #include <endian.h>
  5. #include <stdint.h>
  6. #include <stdio.h>
  7. #include <stdlib.h>
  8. #include <string.h>
  9. #include <sys/types.h>
  10. #include <sys/mman.h>
  11. #include <unistd.h>
  12. #include "liburing.h"
  13. #include "helpers.h"
  14. #include "../src/syscall.h"
  15. #ifndef CONFIG_USE_SANITIZER
  16. static uint64_t r[1] = {0xffffffffffffffff};
  17. int main(int argc, char *argv[])
  18. {
  19. if (argc > 1)
  20. return T_EXIT_SKIP;
  21. mmap((void *) 0x20000000, 0x1000000, 3, MAP_ANON|MAP_PRIVATE, -1, 0);
  22. intptr_t res = 0;
  23. *(uint32_t*)0x20000080 = 0;
  24. *(uint32_t*)0x20000084 = 0;
  25. *(uint32_t*)0x20000088 = 0;
  26. *(uint32_t*)0x2000008c = 0;
  27. *(uint32_t*)0x20000090 = 0;
  28. *(uint32_t*)0x20000094 = 0;
  29. *(uint32_t*)0x20000098 = 0;
  30. *(uint32_t*)0x2000009c = 0;
  31. *(uint32_t*)0x200000a0 = 0;
  32. *(uint32_t*)0x200000a4 = 0;
  33. *(uint32_t*)0x200000a8 = 0;
  34. *(uint32_t*)0x200000ac = 0;
  35. *(uint32_t*)0x200000b0 = 0;
  36. *(uint32_t*)0x200000b4 = 0;
  37. *(uint32_t*)0x200000b8 = 0;
  38. *(uint32_t*)0x200000bc = 0;
  39. *(uint32_t*)0x200000c0 = 0;
  40. *(uint32_t*)0x200000c4 = 0;
  41. *(uint64_t*)0x200000c8 = 0;
  42. *(uint32_t*)0x200000d0 = 0;
  43. *(uint32_t*)0x200000d4 = 0;
  44. *(uint32_t*)0x200000d8 = 0;
  45. *(uint32_t*)0x200000dc = 0;
  46. *(uint32_t*)0x200000e0 = 0;
  47. *(uint32_t*)0x200000e4 = 0;
  48. *(uint32_t*)0x200000e8 = 0;
  49. *(uint32_t*)0x200000ec = 0;
  50. *(uint64_t*)0x200000f0 = 0;
  51. res = __sys_io_uring_setup(0xa4, (struct io_uring_params *) 0x20000080);
  52. if (res != -1)
  53. r[0] = res;
  54. *(uint32_t*)0x20000280 = -1;
  55. __sys_io_uring_register(r[0], 2, (const void *) 0x20000280, 1);
  56. return T_EXIT_PASS;
  57. }
  58. #else
  59. int main(int argc, char *argv[])
  60. {
  61. return T_EXIT_SKIP;
  62. }
  63. #endif