// https://syzkaller.appspot.com/bug?id=1665547180092fef185a46d5a4ba5b382d77848e // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include long r[27]; void loop() { memset(r, -1, sizeof(r)); r[0] = syscall(__NR_mmap, 0x20000000ul, 0xfff000ul, 0x3ul, 0x32ul, 0xfffffffffffffffful, 0x0ul); r[1] = syscall(__NR_socket, 0xaul, 0x1ul, 0x8010000000000084ul); memcpy((void*)0x2040a000, "\x17\x32\xfb\xd6\x77\x6e\x71\xf4\x93\x32\x14\x53\x6e\x52\x59" "\x42\x9c\x7d\xed\xa7\xdc\x30\x27\x16\xd7\xec\x0c\x11\x6a\x76" "\x05\xbe\x6a\x78\x21\x91\xc1\xe9\x53\xa0\xaf\x13\x7a\x8e\x59" "\x66\xb7\x1d\xda\xa7\x38\x01\x19\xbe\x69\x50\x2c\x3d\x30\x7b" "\x90\x7c\x2f\x6d\x5f\xea\x7b\x85\xc7\x82\x25\x20\x2d\xfd\x69" "\xa8\x38\x9b\xf0\x7d\xcd\x69\x44\x90\xec\xf5\x06\x51\x96\xab" "\xea\x2e\xb0\xba\x5a\x75\x41\xcf\xfd\x80\x31\x8a\x4c\x28\xa4" "\x26\x4c\x06\x96\x39\x77\x1b\x26\x3f\xa1\x01\x47\x31\x57\x83" "\x66\xd4\xc2\xde\x62\x4d\xd6\x2d\x1f\x39\xd4\x31\x4c\x4a\x03" "\xa4\xcc\x64\x4a\xf8\x37\xa8\xdd\xc1\x75\x1f\xe2\x2c\xdc\x41" "\xcc\xde\xdd\x76\xdc\x92\x30\xc6\xf5\xae\x12\xc9\x31\x6c\x39" "\x9b\x61\x80\x4c\xdb\x61\x93\x75\x49\xb9\x80\x85\xda\x63\xcc" "\x7b\x5e\x01\xed\xb7\xea\x5d\xfc\xd3\x29\xee\xf0\x38\xe9\x9b" "\xbb\x78\x27\xfd\x26\xfa\x19\x69\x14\x35\x6f\x7b\xd6\x9d\xd2" "\xb6\xfe\x12\x5a\x0e\x2a\xcd\x70\xa5", 219); *(uint16_t*)0x20132000 = (uint16_t)0xa; *(uint16_t*)0x20132002 = (uint16_t)0x214e; *(uint32_t*)0x20132004 = (uint32_t)0xb044; *(uint8_t*)0x20132008 = (uint8_t)0xfe; *(uint8_t*)0x20132009 = (uint8_t)0x80; *(uint8_t*)0x2013200a = (uint8_t)0x0; *(uint8_t*)0x2013200b = (uint8_t)0x0; *(uint8_t*)0x2013200c = (uint8_t)0x0; *(uint8_t*)0x2013200d = (uint8_t)0x0; *(uint8_t*)0x2013200e = (uint8_t)0x0; *(uint8_t*)0x2013200f = (uint8_t)0x0; *(uint8_t*)0x20132010 = (uint8_t)0x0; *(uint8_t*)0x20132011 = (uint8_t)0x0; *(uint8_t*)0x20132012 = (uint8_t)0x0; *(uint8_t*)0x20132013 = (uint8_t)0x0; *(uint8_t*)0x20132014 = (uint8_t)0x0; *(uint8_t*)0x20132015 = (uint8_t)0x0; *(uint8_t*)0x20132016 = (uint8_t)0x0; *(uint8_t*)0x20132017 = (uint8_t)0xbb; *(uint32_t*)0x20132018 = (uint32_t)0x1; r[23] = syscall(__NR_sendto, r[1], 0x2040a000ul, 0xdbul, 0x4040ul, 0x20132000ul, 0x1cul); r[24] = syscall(__NR_listen, r[1], 0x2ul); *(uint32_t*)0x207ccffc = (uint32_t)0x1c; r[26] = syscall(__NR_accept, r[1], 0x209ab000ul, 0x207ccffcul); } int main() { loop(); return 0; }