// https://syzkaller.appspot.com/bug?id=502c872feb9bbb5ad6494c349c7faa87a9f1777b // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xa000, 3, 0x32, -1, 0); r[0] = syscall(__NR_socket, 0x10, 3, 0x10); *(uint32_t*)0x20002000 = 3; syscall(__NR_setsockopt, r[0], 0x10e, 0xb, 0x20002000, 4); *(uint64_t*)0x20008000 = 0x20000ff4; *(uint32_t*)0x20008008 = 0xc; *(uint64_t*)0x20008010 = 0x20006000; *(uint64_t*)0x20008018 = 1; *(uint64_t*)0x20008020 = 0; *(uint64_t*)0x20008028 = 0; *(uint32_t*)0x20008030 = 0; *(uint16_t*)0x20000ff4 = 0x10; *(uint16_t*)0x20000ff6 = 0; *(uint32_t*)0x20000ff8 = 0; *(uint32_t*)0x20000ffc = 0; *(uint64_t*)0x20006000 = 0x20007000; *(uint64_t*)0x20006008 = 0x14; *(uint32_t*)0x20007000 = 0x14; *(uint16_t*)0x20007004 = 0; *(uint16_t*)0x20007006 = 0x514; *(uint32_t*)0x20007008 = 0; *(uint32_t*)0x2000700c = 0; *(uint8_t*)0x20007010 = 0; *(uint8_t*)0x20007011 = 0; *(uint16_t*)0x20007012 = 0; syscall(__NR_sendmsg, r[0], 0x20008000, 0); } int main() { loop(); return 0; }