// https://syzkaller.appspot.com/bug?id=5886cd692da72fd108c629e4c485f1ae3264d287 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #ifndef SYS_mmap #define SYS_mmap 197 #endif #ifndef SYS_sendmsg #define SYS_sendmsg 28 #endif #ifndef SYS_socket #define SYS_socket 394 #endif uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x1012, -1, 0, 0); long res = 0; res = syscall(SYS_socket, 2, 1, 0); if (res != -1) r[0] = res; *(uint64_t*)0x20000400 = 0; *(uint32_t*)0x20000408 = 0; *(uint64_t*)0x20000410 = 0; *(uint64_t*)0x20000418 = 0; *(uint64_t*)0x20000420 = 0x20000080; *(uint64_t*)0x20000080 = 0x10; *(uint32_t*)0x20000088 = 0x129; *(uint32_t*)0x2000008c = 0x7f; *(uint64_t*)0x20000090 = 0x10; *(uint32_t*)0x20000098 = 0x29; *(uint32_t*)0x2000009c = 0xe8d9; *(uint64_t*)0x200000a0 = 0x10; *(uint32_t*)0x200000a8 = 0x12f; *(uint32_t*)0x200000ac = 3; *(uint64_t*)0x200000b0 = 0x10; *(uint32_t*)0x200000b8 = 0x101; *(uint32_t*)0x200000bc = 0x763; *(uint64_t*)0x200000c0 = 0x10; *(uint32_t*)0x200000c8 = 0x101; *(uint32_t*)0x200000cc = 0; *(uint64_t*)0x200000d0 = 0x10; *(uint32_t*)0x200000d8 = 0; *(uint32_t*)0x200000dc = 3; *(uint64_t*)0x20000428 = 0x60; *(uint32_t*)0x20000430 = 0; syscall(SYS_sendmsg, r[0], 0x20000400, 1); return 0; }