// https://syzkaller.appspot.com/bug?id=9aa77c5df165b60047a305ea76224bbe6862b47d // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include const int kInitNetNsFd = 239; static long syz_init_net_socket(volatile long domain, volatile long type, volatile long proto) { return syscall(__NR_socket, domain, type, proto); } uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); intptr_t res = 0; res = -1; res = syz_init_net_socket(0x1f, 5, 2); if (res != -1) r[0] = res; *(uint64_t*)0x20001d00 = 0; *(uint32_t*)0x20001d08 = 0; *(uint64_t*)0x20001d10 = 0x20001740; *(uint64_t*)0x20001740 = 0; *(uint64_t*)0x20001748 = 0; *(uint64_t*)0x20001750 = 0; *(uint64_t*)0x20001758 = 0; *(uint64_t*)0x20001760 = 0; *(uint64_t*)0x20001768 = 0; *(uint64_t*)0x20001770 = 0; *(uint64_t*)0x20001778 = 0; *(uint64_t*)0x20001780 = 0; *(uint64_t*)0x20001788 = 0; *(uint64_t*)0x20001790 = 0; *(uint64_t*)0x20001798 = 0; *(uint64_t*)0x200017a0 = 0; *(uint64_t*)0x200017a8 = 0; *(uint64_t*)0x200017b0 = 0; *(uint64_t*)0x200017b8 = 0; *(uint64_t*)0x200017c0 = 0; *(uint64_t*)0x200017c8 = 0xffffff7f; *(uint64_t*)0x20001d18 = 9; *(uint64_t*)0x20001d20 = 0; *(uint64_t*)0x20001d28 = 0; *(uint32_t*)0x20001d30 = 0; *(uint32_t*)0x20001d38 = 0; syscall(__NR_sendmmsg, r[0], 0x20001d00ul, 1ul, 0ul); return 0; }