// https://syzkaller.appspot.com/bug?id=cac7a645a844d56d3e663f808ee2942b9dd48341 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); long res = 0; res = syscall(__NR_socket, 0x10, 3, 0x10); if (res != -1) r[0] = res; *(uint64_t*)0x20000080 = 0x20000480; *(uint16_t*)0x20000480 = 0x10; *(uint16_t*)0x20000482 = 0x4e66; *(uint32_t*)0x20000484 = 0; *(uint32_t*)0x20000488 = 0; *(uint32_t*)0x20000088 = 0xc; *(uint64_t*)0x20000090 = 0x20000040; *(uint64_t*)0x20000040 = 0x200019c0; *(uint32_t*)0x200019c0 = 0x74; *(uint16_t*)0x200019c4 = 0x22; *(uint16_t*)0x200019c6 = 1; *(uint32_t*)0x200019c8 = 0; *(uint32_t*)0x200019cc = 0; *(uint8_t*)0x200019d0 = 4; *(uint8_t*)0x200019d1 = 0; *(uint16_t*)0x200019d2 = 0; *(uint16_t*)0x200019d4 = 8; *(uint16_t*)0x200019d6 = 0x30; *(uint32_t*)0x200019d8 = 0; *(uint16_t*)0x200019dc = 0x14; *(uint16_t*)0x200019de = 9; *(uint8_t*)0x200019e0 = 0; *(uint8_t*)0x200019e1 = 0; *(uint8_t*)0x200019e2 = 0; *(uint8_t*)0x200019e3 = 0; *(uint8_t*)0x200019e4 = 0; *(uint8_t*)0x200019e5 = 0; *(uint8_t*)0x200019e6 = 0; *(uint8_t*)0x200019e7 = 0; *(uint8_t*)0x200019e8 = 0; *(uint8_t*)0x200019e9 = 0; *(uint8_t*)0x200019ea = 0; *(uint8_t*)0x200019eb = 0; *(uint8_t*)0x200019ec = 0; *(uint8_t*)0x200019ed = 0; *(uint8_t*)0x200019ee = 0; *(uint8_t*)0x200019ef = 0; *(uint16_t*)0x200019f0 = 0x14; *(uint16_t*)0x200019f2 = 0xf; *(uint8_t*)0x200019f4 = 0xfe; *(uint8_t*)0x200019f5 = 0x80; *(uint8_t*)0x200019f6 = 0; *(uint8_t*)0x200019f7 = 0; *(uint8_t*)0x200019f8 = 0; *(uint8_t*)0x200019f9 = 0; *(uint8_t*)0x200019fa = 0; *(uint8_t*)0x200019fb = 0; *(uint8_t*)0x200019fc = 0; *(uint8_t*)0x200019fd = 0; *(uint8_t*)0x200019fe = 0; *(uint8_t*)0x200019ff = 0; *(uint8_t*)0x20001a00 = 0; *(uint8_t*)0x20001a01 = 0; *(uint8_t*)0x20001a02 = 0; *(uint8_t*)0x20001a03 = 0x13; *(uint16_t*)0x20001a04 = 8; *(uint16_t*)0x20001a06 = 0x73; *(uint32_t*)0x20001a08 = 0; *(uint16_t*)0x20001a0c = 0x28; *(uint16_t*)0x20001a0e = 0x60; *(uint16_t*)0x20001a10 = 0x10; *(uint16_t*)0x20001a12 = 6; memcpy((void*)0x20001a14, "vboxnet1", 9); *(uint16_t*)0x20001a20 = 4; *(uint16_t*)0x20001a22 = 0xb; *(uint16_t*)0x20001a24 = 8; *(uint16_t*)0x20001a26 = 0x6d; *(uint32_t*)0x20001a28 = htobe32(0x7f000001); *(uint16_t*)0x20001a2c = 8; *(uint16_t*)0x20001a2e = 0x4a; *(uint32_t*)0x20001a30 = htobe32(0); *(uint64_t*)0x20000048 = 0x74; *(uint64_t*)0x20000098 = 1; *(uint64_t*)0x200000a0 = 0; *(uint64_t*)0x200000a8 = 0; *(uint32_t*)0x200000b0 = 0; syscall(__NR_sendmsg, r[0], 0x20000080, 0); return 0; }