// https://syzkaller.appspot.com/bug?id=004b0f7b61d4901cbfecfc33de7996e8cbe0a278 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0x2b, 0x801, 0); if (res != -1) r[0] = res; *(uint64_t*)0x20001140 = 0x20000b00; *(uint16_t*)0x20000b00 = 0x1a; *(uint16_t*)0x20000b02 = 0x301; *(uint8_t*)0x20000b04 = 0xed; *(uint8_t*)0x20000b05 = 6; *(uint8_t*)0x20000b06 = -1; *(uint8_t*)0x20000b07 = 0xf9; *(uint8_t*)0x20000b08 = 0xaa; *(uint8_t*)0x20000b09 = 0xaa; *(uint8_t*)0x20000b0a = 0xaa; *(uint8_t*)0x20000b0b = 0xaa; *(uint8_t*)0x20000b0c = 0xaa; *(uint8_t*)0x20000b0d = 0xaa; *(uint32_t*)0x20001148 = 0x80; *(uint64_t*)0x20001150 = 0x20000fc0; *(uint64_t*)0x20000fc0 = 0x20000b80; *(uint64_t*)0x20000fc8 = 0; *(uint64_t*)0x20000fd0 = 0x20000c40; *(uint64_t*)0x20000fd8 = 0; *(uint64_t*)0x20000fe0 = 0x20000d00; *(uint64_t*)0x20000fe8 = 0; *(uint64_t*)0x20000ff0 = 0x20000dc0; *(uint64_t*)0x20000ff8 = 0; *(uint64_t*)0x20001000 = 0x20000ec0; *(uint64_t*)0x20001008 = 0; *(uint64_t*)0x20001158 = 5; *(uint64_t*)0x20001160 = 0x20001040; *(uint64_t*)0x20001040 = 0x10; *(uint32_t*)0x20001048 = 0x110; *(uint32_t*)0x2000104c = 7; *(uint64_t*)0x20001050 = 0x10; *(uint32_t*)0x20001058 = 0x1ff; *(uint32_t*)0x2000105c = 3; *(uint64_t*)0x20001168 = 0x20; *(uint32_t*)0x20001170 = 0x40000; syscall(__NR_sendmsg, r[0], 0x20001140, 0x20000000); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }