// https://syzkaller.appspot.com/bug?id=54f4ce6239e6e0d0d5583488421c6fa3ba7ed6b4 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void test(); void loop() { while (1) { test(); } } uint64_t r[1] = {0xffffffffffffffff}; void test() { long res; res = syscall(__NR_socket, 0xf, 3, 2); if (res != -1) r[0] = res; *(uint64_t*)0x20f56000 = 0; *(uint32_t*)0x20f56008 = 0; *(uint64_t*)0x20f56010 = 0x208feff0; *(uint64_t*)0x208feff0 = 0x20da9000; *(uint8_t*)0x20da9000 = 2; *(uint8_t*)0x20da9001 = 3; *(uint8_t*)0x20da9002 = 0; *(uint8_t*)0x20da9003 = 9; *(uint16_t*)0x20da9004 = 0x10; *(uint16_t*)0x20da9006 = 0; *(uint32_t*)0x20da9008 = 0; *(uint32_t*)0x20da900c = 0; *(uint16_t*)0x20da9010 = 2; *(uint16_t*)0x20da9012 = 0x13; *(uint8_t*)0x20da9014 = 2; *(uint8_t*)0x20da9015 = 0; *(uint16_t*)0x20da9016 = 0; *(uint32_t*)0x20da9018 = 0; *(uint32_t*)0x20da901c = 0; *(uint16_t*)0x20da9020 = 5; *(uint16_t*)0x20da9022 = 6; *(uint8_t*)0x20da9024 = 0; *(uint8_t*)0x20da9025 = 0; *(uint16_t*)0x20da9026 = 0; *(uint16_t*)0x20da9028 = 0xa; *(uint16_t*)0x20da902a = htobe16(0); *(uint32_t*)0x20da902c = 0; *(uint8_t*)0x20da9030 = 0; *(uint8_t*)0x20da9031 = 0; *(uint8_t*)0x20da9032 = 0; *(uint8_t*)0x20da9033 = 0; *(uint8_t*)0x20da9034 = 0; *(uint8_t*)0x20da9035 = 0; *(uint8_t*)0x20da9036 = 0; *(uint8_t*)0x20da9037 = 0; *(uint8_t*)0x20da9038 = 0; *(uint8_t*)0x20da9039 = 0; *(uint8_t*)0x20da903a = 0; *(uint8_t*)0x20da903b = 0; *(uint8_t*)0x20da903c = 0; *(uint8_t*)0x20da903d = 0; *(uint8_t*)0x20da903e = 0; *(uint8_t*)0x20da903f = 0; *(uint32_t*)0x20da9040 = 0; *(uint16_t*)0x20da9048 = 2; *(uint16_t*)0x20da904a = 1; *(uint32_t*)0x20da904c = htobe32(0); *(uint8_t*)0x20da9050 = 0; *(uint8_t*)0x20da9051 = 0; *(uint8_t*)0x20da9052 = 0; *(uint8_t*)0x20da9053 = 2; *(uint32_t*)0x20da9054 = 0; *(uint16_t*)0x20da9058 = 5; *(uint16_t*)0x20da905a = 5; *(uint8_t*)0x20da905c = 0; *(uint8_t*)0x20da905d = 0; *(uint16_t*)0x20da905e = 0; *(uint16_t*)0x20da9060 = 0xa; *(uint16_t*)0x20da9062 = htobe16(0); *(uint32_t*)0x20da9064 = 0; *(uint8_t*)0x20da9068 = -1; *(uint8_t*)0x20da9069 = 1; *(uint8_t*)0x20da906a = 0; *(uint8_t*)0x20da906b = 0; *(uint8_t*)0x20da906c = 0; *(uint8_t*)0x20da906d = 0; *(uint8_t*)0x20da906e = 0; *(uint8_t*)0x20da906f = 0; *(uint8_t*)0x20da9070 = 0; *(uint8_t*)0x20da9071 = 0; *(uint8_t*)0x20da9072 = 0; *(uint8_t*)0x20da9073 = 0; *(uint8_t*)0x20da9074 = 0; *(uint8_t*)0x20da9075 = 0; *(uint8_t*)0x20da9076 = 0; *(uint8_t*)0x20da9077 = 1; *(uint32_t*)0x20da9078 = 0; *(uint64_t*)0x208feff8 = 0x80; *(uint64_t*)0x20f56018 = 1; *(uint64_t*)0x20f56020 = 0; *(uint64_t*)0x20f56028 = 0; *(uint32_t*)0x20f56030 = 0; syscall(__NR_sendmsg, r[0], 0x20f56000, 0); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (;;) { loop(); } }