// https://syzkaller.appspot.com/bug?id=004b0f7b61d4901cbfecfc33de7996e8cbe0a278 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0x2b, 1, 0); if (res != -1) r[0] = res; *(uint64_t*)0x20002cc0 = 0x200002c0; *(uint16_t*)0x200002c0 = 0xa; *(uint16_t*)0x200002c2 = htobe16(0x4e24); *(uint32_t*)0x200002c4 = 0x10000; *(uint8_t*)0x200002c8 = 0xfe; *(uint8_t*)0x200002c9 = 0x80; *(uint8_t*)0x200002ca = 0; *(uint8_t*)0x200002cb = 0; *(uint8_t*)0x200002cc = 0; *(uint8_t*)0x200002cd = 0; *(uint8_t*)0x200002ce = 0; *(uint8_t*)0x200002cf = 0; *(uint8_t*)0x200002d0 = 0; *(uint8_t*)0x200002d1 = 0; *(uint8_t*)0x200002d2 = 0; *(uint8_t*)0x200002d3 = 0; *(uint8_t*)0x200002d4 = 0; *(uint8_t*)0x200002d5 = 0; *(uint8_t*)0x200002d6 = 0; *(uint8_t*)0x200002d7 = 0xbb; *(uint32_t*)0x200002d8 = 8; *(uint32_t*)0x20002cc8 = 0x80; *(uint64_t*)0x20002cd0 = 0x20002840; *(uint64_t*)0x20002840 = 0x20000340; *(uint64_t*)0x20002848 = 0; *(uint64_t*)0x20002850 = 0x20000380; *(uint64_t*)0x20002858 = 0; *(uint64_t*)0x20002860 = 0x20000400; *(uint64_t*)0x20002868 = 0; *(uint64_t*)0x20002870 = 0x20001400; *(uint64_t*)0x20002878 = 0; *(uint64_t*)0x20002880 = 0x20001480; *(uint64_t*)0x20002888 = 0; *(uint64_t*)0x20002890 = 0x20001500; *(uint64_t*)0x20002898 = 0; *(uint64_t*)0x200028a0 = 0x20001540; *(uint64_t*)0x200028a8 = 0; *(uint64_t*)0x200028b0 = 0x20002540; *(uint64_t*)0x200028b8 = 0; *(uint64_t*)0x200028c0 = 0x20002640; *(uint64_t*)0x200028c8 = 0; *(uint64_t*)0x200028d0 = 0x20002740; *(uint64_t*)0x200028d8 = 0; *(uint64_t*)0x20002cd8 = 0xa; *(uint64_t*)0x20002ce0 = 0x20002900; *(uint64_t*)0x20002900 = 0x10; *(uint32_t*)0x20002908 = 0x113; *(uint32_t*)0x2000290c = 0x8001; *(uint64_t*)0x20002910 = 0x10; *(uint32_t*)0x20002918 = 0x3a; *(uint32_t*)0x2000291c = 0xed; *(uint64_t*)0x20002920 = 0x10; *(uint32_t*)0x20002928 = 0x114; *(uint32_t*)0x2000292c = 3; *(uint64_t*)0x20002930 = 0x10; *(uint32_t*)0x20002938 = 0x11; *(uint32_t*)0x2000293c = 0x1f; *(uint64_t*)0x20002940 = 0x10; *(uint32_t*)0x20002948 = 0x13f; *(uint32_t*)0x2000294c = 7; *(uint64_t*)0x20002950 = 0x10; *(uint32_t*)0x20002958 = 0x108; *(uint32_t*)0x2000295c = 3; *(uint64_t*)0x20002960 = 0x10; *(uint32_t*)0x20002968 = 0x114; *(uint32_t*)0x2000296c = 8; *(uint64_t*)0x20002ce8 = 0x70; *(uint32_t*)0x20002cf0 = 0x8d0; syscall(__NR_sendmsg, r[0], 0x20002cc0, 0x20000000); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }