// https://syzkaller.appspot.com/bug?id=1ab305cca8d64e81becc4d53b88ae15c2c7bf49a // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); long res = 0; res = syscall(__NR_socket, 0xa, 3, 0x31); if (res != -1) r[0] = res; *(uint8_t*)0x200001c0 = 0xac; *(uint8_t*)0x200001c1 = 0x14; *(uint8_t*)0x200001c2 = 0x14; *(uint8_t*)0x200001c3 = 0xbb; *(uint64_t*)0x200001d0 = htobe64(0); *(uint64_t*)0x200001d8 = htobe64(1); *(uint16_t*)0x200001e0 = htobe16(0); *(uint16_t*)0x200001e2 = htobe16(0); *(uint16_t*)0x200001e4 = htobe16(0); *(uint16_t*)0x200001e6 = htobe16(0); *(uint16_t*)0x200001e8 = 0xa; *(uint8_t*)0x200001ea = 0; *(uint8_t*)0x200001eb = 0xfc; *(uint8_t*)0x200001ec = 0; *(uint32_t*)0x200001f0 = 0; *(uint32_t*)0x200001f4 = 0; *(uint64_t*)0x200001f8 = 0; *(uint64_t*)0x20000200 = 0; *(uint64_t*)0x20000208 = 0; *(uint64_t*)0x20000210 = 0; *(uint64_t*)0x20000218 = 0; *(uint64_t*)0x20000220 = 0; *(uint64_t*)0x20000228 = 0; *(uint64_t*)0x20000230 = 0; *(uint64_t*)0x20000238 = 0; *(uint64_t*)0x20000240 = 0; *(uint64_t*)0x20000248 = 0; *(uint64_t*)0x20000250 = 0; *(uint32_t*)0x20000258 = 0; *(uint32_t*)0x2000025c = 0; *(uint8_t*)0x20000260 = 1; *(uint8_t*)0x20000261 = 0; *(uint8_t*)0x20000262 = 0; *(uint8_t*)0x20000263 = 0; *(uint32_t*)0x20000268 = htobe32(0xe0000001); *(uint32_t*)0x20000278 = htobe32(0); *(uint8_t*)0x2000027c = 0x33; *(uint16_t*)0x20000280 = 0; *(uint64_t*)0x20000284 = htobe64(0); *(uint64_t*)0x2000028c = htobe64(1); *(uint32_t*)0x20000294 = 0; *(uint8_t*)0x20000298 = 0; *(uint8_t*)0x20000299 = 0; *(uint8_t*)0x2000029a = 0; *(uint32_t*)0x2000029c = 0; *(uint32_t*)0x200002a0 = 0; *(uint32_t*)0x200002a4 = 0; syscall(__NR_setsockopt, r[0], 0x29, 0x23, 0x200001c0, 0xe8); *(uint16_t*)0x200000c0 = 0xa; *(uint16_t*)0x200000c2 = htobe16(0); *(uint32_t*)0x200000c4 = 0; *(uint8_t*)0x200000c8 = 0; *(uint8_t*)0x200000c9 = 0; *(uint8_t*)0x200000ca = 0; *(uint8_t*)0x200000cb = 0; *(uint8_t*)0x200000cc = 0; *(uint8_t*)0x200000cd = 0; *(uint8_t*)0x200000ce = 0; *(uint8_t*)0x200000cf = 0; *(uint8_t*)0x200000d0 = 0; *(uint8_t*)0x200000d1 = 0; *(uint8_t*)0x200000d2 = 0; *(uint8_t*)0x200000d3 = 0; *(uint8_t*)0x200000d4 = 0; *(uint8_t*)0x200000d5 = 0; *(uint8_t*)0x200000d6 = 0; *(uint8_t*)0x200000d7 = 0; *(uint32_t*)0x200000d8 = 0; syscall(__NR_connect, r[0], 0x200000c0, 0x1c); memcpy((void*)0x200003c0, "syz1", 4); syscall(__NR_write, r[0], 0x200003c0, 4); return 0; }