// https://syzkaller.appspot.com/bug?id=4fe2536d0e707f5117e07ccc49befa896be2dde7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0x10, 3, 0x10); if (res != -1) r[0] = res; *(uint64_t*)0x20000040 = 0x20018ff4; *(uint16_t*)0x20018ff4 = 0x10; *(uint16_t*)0x20018ff6 = 0; *(uint32_t*)0x20018ff8 = 0; *(uint32_t*)0x20018ffc = 0; *(uint32_t*)0x20000048 = 0xc; *(uint64_t*)0x20000050 = 0x20013ff1; *(uint64_t*)0x20013ff1 = 0x20000280; *(uint32_t*)0x20000280 = 0x40; *(uint16_t*)0x20000284 = 0x29; *(uint16_t*)0x20000286 = 1; *(uint32_t*)0x20000288 = 0; *(uint32_t*)0x2000028c = 0; *(uint8_t*)0x20000290 = 2; *(uint8_t*)0x20000291 = 0; *(uint16_t*)0x20000292 = 0; *(uint16_t*)0x20000294 = 0x18; *(uint16_t*)0x20000296 = 0x23; *(uint16_t*)0x20000298 = 0x14; *(uint16_t*)0x2000029a = 0x3e; *(uint8_t*)0x2000029c = 0xfe; *(uint8_t*)0x2000029d = 0x80; *(uint8_t*)0x2000029e = 0; *(uint8_t*)0x2000029f = 0; *(uint8_t*)0x200002a0 = 0; *(uint8_t*)0x200002a1 = 0; *(uint8_t*)0x200002a2 = 0; *(uint8_t*)0x200002a3 = 0; *(uint8_t*)0x200002a4 = 0; *(uint8_t*)0x200002a5 = 0; *(uint8_t*)0x200002a6 = 0; *(uint8_t*)0x200002a7 = 0; *(uint8_t*)0x200002a8 = 0; *(uint8_t*)0x200002a9 = 0; *(uint8_t*)0x200002aa = 0; *(uint8_t*)0x200002ab = 0xd; *(uint16_t*)0x200002ac = 0xc; *(uint16_t*)0x200002ae = 0x6e; *(uint64_t*)0x200002b0 = 0xe0; *(uint16_t*)0x200002b8 = 8; *(uint16_t*)0x200002ba = 0x55; *(uint32_t*)0x200002bc = 0; *(uint64_t*)0x20013ff9 = 0x40; *(uint64_t*)0x20000058 = 1; *(uint64_t*)0x20000060 = 0; *(uint64_t*)0x20000068 = 0; *(uint32_t*)0x20000070 = 0; syscall(__NR_sendmsg, r[0], 0x20000040, 0); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }