// https://syzkaller.appspot.com/bug?id=1d06e732324171bb1b1748e64b71a5536d745f7f // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 0x3, 0x32, 0xffffffff, 0x0); r[0] = syscall(__NR_socket, 0x40000000015, 0x5, 0x0); *(uint16_t*)0x20fc4000 = 0x2; *(uint16_t*)0x20fc4002 = htobe16(0x4e20); *(uint32_t*)0x20fc4004 = htobe32(0x7f000001); *(uint8_t*)0x20fc4008 = 0x0; *(uint8_t*)0x20fc4009 = 0x0; *(uint8_t*)0x20fc400a = 0x0; *(uint8_t*)0x20fc400b = 0x0; *(uint8_t*)0x20fc400c = 0x0; *(uint8_t*)0x20fc400d = 0x0; *(uint8_t*)0x20fc400e = 0x0; *(uint8_t*)0x20fc400f = 0x0; syscall(__NR_bind, r[0], 0x20fc4000, 0x10); *(uint64_t*)0x2020c000 = 0x2085dff0; *(uint32_t*)0x2020c008 = 0x10; *(uint64_t*)0x2020c010 = 0x2019ffc0; *(uint64_t*)0x2020c018 = 0x4; *(uint64_t*)0x2020c020 = 0x20b6a9f8; *(uint64_t*)0x2020c028 = 0x10; *(uint32_t*)0x2020c030 = 0x0; *(uint32_t*)0x2020c038 = 0x0; *(uint16_t*)0x2085dff0 = 0x2; *(uint16_t*)0x2085dff2 = htobe16(0x4e20); *(uint8_t*)0x2085dff4 = 0xac; *(uint8_t*)0x2085dff5 = 0x14; *(uint8_t*)0x2085dff6 = 0x0; *(uint8_t*)0x2085dff7 = 0xaa; *(uint8_t*)0x2085dff8 = 0x0; *(uint8_t*)0x2085dff9 = 0x0; *(uint8_t*)0x2085dffa = 0x0; *(uint8_t*)0x2085dffb = 0x0; *(uint8_t*)0x2085dffc = 0x0; *(uint8_t*)0x2085dffd = 0x0; *(uint8_t*)0x2085dffe = 0x0; *(uint8_t*)0x2085dfff = 0x0; *(uint64_t*)0x2019ffc0 = 0x20611f04; *(uint64_t*)0x2019ffc8 = 0x0; *(uint64_t*)0x2019ffd0 = 0x201ad000; *(uint64_t*)0x2019ffd8 = 0x0; *(uint64_t*)0x2019ffe0 = 0x20071fae; *(uint64_t*)0x2019ffe8 = 0x0; *(uint64_t*)0x2019fff0 = 0x206a5fc0; *(uint64_t*)0x2019fff8 = 0x0; *(uint64_t*)0x20b6a9f8 = 0x10; *(uint32_t*)0x20b6aa00 = 0x114; *(uint32_t*)0x20b6aa04 = 0x1; syscall(__NR_sendmmsg, r[0], 0x2020c000, 0x1, 0x0); } int main() { loop(); return 0; }