// https://syzkaller.appspot.com/bug?id=004b0f7b61d4901cbfecfc33de7996e8cbe0a278 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0x2b, 0x801, 0); if (res != -1) r[0] = res; *(uint64_t*)0x20003a80 = 0x200023c0; *(uint16_t*)0x200023c0 = 0x2c; *(uint16_t*)0x200023c2 = 2; *(uint32_t*)0x200023c4 = 0; *(uint32_t*)0x200023c8 = 0xd; *(uint32_t*)0x200023cc = -1; *(uint32_t*)0x20003a88 = 0x80; *(uint64_t*)0x20003a90 = 0x200025c0; *(uint64_t*)0x200025c0 = 0x20002440; *(uint64_t*)0x200025c8 = 0; *(uint64_t*)0x200025d0 = 0x200024c0; *(uint64_t*)0x200025d8 = 0; *(uint64_t*)0x20003a98 = 2; *(uint64_t*)0x20003aa0 = 0x20002600; *(uint64_t*)0x20002600 = 0x10; *(uint32_t*)0x20002608 = 0x119; *(uint32_t*)0x2000260c = 0x3f; *(uint64_t*)0x20002610 = 0x10; *(uint32_t*)0x20002618 = 0; *(uint32_t*)0x2000261c = 9; *(uint64_t*)0x20002620 = 0x10; *(uint32_t*)0x20002628 = 0x11f; *(uint32_t*)0x2000262c = 0x10001; *(uint64_t*)0x20002630 = 0x10; *(uint32_t*)0x20002638 = 0; *(uint32_t*)0x2000263c = 2; *(uint64_t*)0x20002640 = 0x10; *(uint32_t*)0x20002648 = 0x107; *(uint32_t*)0x2000264c = 0x80000001; *(uint64_t*)0x20002650 = 0x10; *(uint32_t*)0x20002658 = 1; *(uint32_t*)0x2000265c = 0xe00; *(uint64_t*)0x20002660 = 0x10; *(uint32_t*)0x20002668 = 0x114; *(uint32_t*)0x2000266c = 7; *(uint64_t*)0x20003aa8 = 0x70; *(uint32_t*)0x20003ab0 = 0x80; syscall(__NR_sendmsg, r[0], 0x20003a80, 0x20000000); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }