// https://syzkaller.appspot.com/bug?id=4d2ca25834d9d51851a311dafa0ce9b0380f79c4 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include long r[18]; void loop() { memset(r, -1, sizeof(r)); r[0] = syscall(__NR_mmap, 0x20000000ul, 0xfff000ul, 0x3ul, 0x32ul, 0xfffffffffffffffful, 0x0ul); r[1] = syscall(__NR_socket, 0x10ul, 0x3ul, 0x6ul); *(uint64_t*)0x20517fc8 = (uint64_t)0x20000000; *(uint32_t*)0x20517fd0 = (uint32_t)0x0; *(uint64_t*)0x20517fd8 = (uint64_t)0x204ffff0; *(uint64_t*)0x20517fe0 = (uint64_t)0x1; *(uint64_t*)0x20517fe8 = (uint64_t)0x20007000; *(uint64_t*)0x20517ff0 = (uint64_t)0x0; *(uint32_t*)0x20517ff8 = (uint32_t)0x0; *(uint64_t*)0x204ffff0 = (uint64_t)0x2000ef86; *(uint64_t*)0x204ffff8 = (uint64_t)0x1a; *(uint32_t*)0x2000ef86 = (uint32_t)0x1a; *(uint16_t*)0x2000ef8a = (uint16_t)0x12; *(uint16_t*)0x2000ef8c = (uint16_t)0x101; *(uint32_t*)0x2000ef8e = (uint32_t)0x0; *(uint32_t*)0x2000ef92 = (uint32_t)0x0; memcpy((void*)0x2000ef96, "\x0a\x00\x07\x00\x00\x00\x00\x00\x13\x67", 10); r[17] = syscall(__NR_sendmsg, r[1], 0x20517fc8ul, 0x0ul); } int main() { loop(); return 0; }