// https://syzkaller.appspot.com/bug?id=77d9a62c6781d69dd833adc06ead030abc367218 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0xa, 1, 0); if (res != -1) r[0] = res; syscall(__NR_mmap, 0x2032e000, 0x2000, 0, 0x8811, r[0], 0); res = syscall(__NR_socket, 0xa, 1, 0); if (res != -1) r[1] = res; *(uint16_t*)0x20000f2f = 0xa; *(uint16_t*)0x20000f31 = htobe16(0x4e20); *(uint32_t*)0x20000f33 = 0; *(uint64_t*)0x20000f37 = htobe64(0); *(uint64_t*)0x20000f3f = htobe64(1); *(uint32_t*)0x20000f47 = 0; *(uint16_t*)0x20000faf = 0; *(uint16_t*)0x20000fb1 = 4; *(uint32_t*)0x20000fb3 = 0; memcpy((void*)0x20000fb7, "\x08\xcf\x49\x76\x3f\x46\xe5\x35\xa6\x2f\xdd\xc5\x52\x80\x4d\xbb\xb4" "\x2a\x79\xa4\xcb\x1e\x3b\xb8\xdf\x10\xba\x34\xf4\x8b\x8e\x3c\xa8\xaa" "\x06\xa9\x51\x9f\x88\xac\x72\x22\x7d\xb5\x5f\x50\x4f\x6b\x45\x7d\xef" "\x6b\x68\x7d\x1f\x4a\x41\x6d\x46\x90\x9d\x69\x19\x4d\xa5\xa3\xc8\xe0" "\x79\x96\x4d\xac\xe5\x12\x4f\x2b\x7b\xca\xcf\xfa", 80); syscall(__NR_setsockopt, r[1], 6, 0xe, 0x20000f2f, 0xd8); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }