// https://syzkaller.appspot.com/bug?id=e826b4d012da9963d581b16d665db3811588ffbe // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfcc000, 3, 0x32, -1, 0); r[0] = syscall(__NR_socket, 0x40000000015, 5, 0); *(uint16_t*)0x20073ff0 = 2; *(uint16_t*)0x20073ff2 = 0; *(uint32_t*)0x20073ff4 = htobe32(0x7f000001); *(uint8_t*)0x20073ff8 = 0; *(uint8_t*)0x20073ff9 = 0; *(uint8_t*)0x20073ffa = 0; *(uint8_t*)0x20073ffb = 0; *(uint8_t*)0x20073ffc = 0; *(uint8_t*)0x20073ffd = 0; *(uint8_t*)0x20073ffe = 0; *(uint8_t*)0x20073fff = 0; syscall(__NR_bind, r[0], 0x20073ff0, 0x10); *(uint16_t*)0x20fc4000 = 2; *(uint16_t*)0x20fc4002 = 0; *(uint32_t*)0x20fc4004 = htobe32(-1); *(uint8_t*)0x20fc4008 = 0; *(uint8_t*)0x20fc4009 = 0; *(uint8_t*)0x20fc400a = 0; *(uint8_t*)0x20fc400b = 0; *(uint8_t*)0x20fc400c = 0; *(uint8_t*)0x20fc400d = 0; *(uint8_t*)0x20fc400e = 0; *(uint8_t*)0x20fc400f = 0; syscall(__NR_connect, r[0], 0x20fc4000, 0x10); *(uint64_t*)0x20fc5fc8 = 0; *(uint32_t*)0x20fc5fd0 = 0; *(uint64_t*)0x20fc5fd8 = 0x20f50000; *(uint64_t*)0x20fc5fe0 = 0; *(uint64_t*)0x20fc5fe8 = 0x20000fe7; *(uint64_t*)0x20fc5ff0 = 0x18; *(uint32_t*)0x20fc5ff8 = 0; *(uint64_t*)0x20000fe7 = 0x18; *(uint32_t*)0x20000fef = 0x117; *(uint32_t*)0x20000ff3 = 4; *(uint32_t*)0x20000ff7 = 0; syscall(__NR_sendmsg, r[0], 0x20fc5fc8, 0); } int main() { loop(); return 0; }