// https://syzkaller.appspot.com/bug?id=d76b65a985a4cbf10165b3cbb882f59a0ab090bd // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xd25000, 0x3, 0x32, 0xffffffff, 0x0); r[0] = syscall(__NR_socket, 0x10, 0x3, 0xc); *(uint64_t*)0x20d24000 = 0x20d21fff; *(uint32_t*)0x20d24008 = 0x0; *(uint64_t*)0x20d24010 = 0x2000d000; *(uint64_t*)0x20d24018 = 0x1; *(uint64_t*)0x20d24020 = 0x20007000; *(uint64_t*)0x20d24028 = 0x0; *(uint32_t*)0x20d24030 = 0x84; *(uint64_t*)0x2000d000 = 0x20d22fec; *(uint64_t*)0x2000d008 = 0x14; *(uint32_t*)0x20d22fec = 0x14; *(uint16_t*)0x20d22ff0 = 0x10; *(uint16_t*)0x20d22ff2 = 0x0; *(uint32_t*)0x20d22ff4 = 0x2; *(uint32_t*)0x20d22ff8 = 0x0; memcpy((void*)0x20d22ffc, "\x07\x00\x00\x00", 4); syscall(__NR_sendmsg, r[0], 0x20d24000, 0x40); } int main() { loop(); return 0; }