// https://syzkaller.appspot.com/bug?id=77d9a62c6781d69dd833adc06ead030abc367218 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0xa, 1, 0); if (res != -1) r[0] = res; *(uint8_t*)0x200000c0 = 0; *(uint8_t*)0x200000c1 = 0; *(uint8_t*)0x200000c2 = 0; *(uint8_t*)0x200000c3 = 0; *(uint8_t*)0x200000c4 = 0; *(uint8_t*)0x200000c5 = 0; *(uint8_t*)0x200000c6 = 0; *(uint8_t*)0x200000c7 = 0; *(uint8_t*)0x200000c8 = 0; *(uint8_t*)0x200000c9 = 0; *(uint8_t*)0x200000ca = -1; *(uint8_t*)0x200000cb = -1; *(uint8_t*)0x200000cc = 0xac; *(uint8_t*)0x200000cd = 0x14; *(uint8_t*)0x200000ce = 0x14; *(uint8_t*)0x200000cf = 0xbb; *(uint32_t*)0x200000d0 = 0; *(uint8_t*)0x200000d4 = 0; *(uint8_t*)0x200000d5 = 0; *(uint16_t*)0x200000d6 = 0; *(uint16_t*)0x200000d8 = 0; *(uint16_t*)0x200000da = 0; *(uint32_t*)0x200000dc = 0; syscall(__NR_setsockopt, r[0], 0x29, 0x20, 0x200000c0, 0x20); res = syscall(__NR_socket, 0xa, 1, 0); if (res != -1) r[1] = res; syscall(__NR_mmap, 0x20000000, 0x2000, 0, 0x11, r[1], 0); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }