// https://syzkaller.appspot.com/bug?id=d77a8bffdcb19176ebd494435f933a70ea36aaf4 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); r[0] = syscall(__NR_socket, 2, 3, 0x2d); *(uint32_t*)0x20b6bf18 = htobe32(0); *(uint8_t*)0x20b6bf28 = 0; *(uint8_t*)0x20b6bf29 = 0; *(uint8_t*)0x20b6bf2a = 0; *(uint8_t*)0x20b6bf2b = 0; *(uint8_t*)0x20b6bf2c = 0; *(uint8_t*)0x20b6bf2d = 0; *(uint8_t*)0x20b6bf2e = 0; *(uint8_t*)0x20b6bf2f = 0; *(uint8_t*)0x20b6bf30 = 0; *(uint8_t*)0x20b6bf31 = 0; *(uint8_t*)0x20b6bf32 = 0; *(uint8_t*)0x20b6bf33 = 0; *(uint8_t*)0x20b6bf34 = 0; *(uint8_t*)0x20b6bf35 = 0; *(uint8_t*)0x20b6bf36 = 0; *(uint8_t*)0x20b6bf37 = 0; *(uint16_t*)0x20b6bf38 = 0; *(uint16_t*)0x20b6bf3a = htobe16(0); *(uint16_t*)0x20b6bf3c = 0; *(uint16_t*)0x20b6bf3e = htobe16(0); *(uint16_t*)0x20b6bf40 = 2; *(uint8_t*)0x20b6bf42 = 0; *(uint8_t*)0x20b6bf43 = 0; *(uint8_t*)0x20b6bf44 = 0; *(uint32_t*)0x20b6bf48 = 0; *(uint32_t*)0x20b6bf4c = 0; *(uint64_t*)0x20b6bf50 = 0; *(uint64_t*)0x20b6bf58 = 0; *(uint64_t*)0x20b6bf60 = 0; *(uint64_t*)0x20b6bf68 = 0; *(uint64_t*)0x20b6bf70 = 0; *(uint64_t*)0x20b6bf78 = 0; *(uint64_t*)0x20b6bf80 = 0; *(uint64_t*)0x20b6bf88 = 0; *(uint64_t*)0x20b6bf90 = 0; *(uint64_t*)0x20b6bf98 = 0; *(uint64_t*)0x20b6bfa0 = 0; *(uint64_t*)0x20b6bfa8 = 0; *(uint32_t*)0x20b6bfb0 = 0; *(uint32_t*)0x20b6bfb4 = 0; *(uint8_t*)0x20b6bfb8 = 1; *(uint8_t*)0x20b6bfb9 = 0; *(uint8_t*)0x20b6bfba = 0; *(uint8_t*)0x20b6bfbb = 0; *(uint32_t*)0x20b6bfc0 = htobe32(0xe0000001); *(uint32_t*)0x20b6bfd0 = 0; *(uint8_t*)0x20b6bfd4 = 0x32; *(uint16_t*)0x20b6bfd8 = 0xa; *(uint32_t*)0x20b6bfdc = htobe32(0xe0000001); *(uint32_t*)0x20b6bfec = 0; *(uint8_t*)0x20b6bff0 = -1; *(uint8_t*)0x20b6bff1 = 0; *(uint8_t*)0x20b6bff2 = 0; *(uint32_t*)0x20b6bff4 = 0; *(uint32_t*)0x20b6bff8 = 0; *(uint32_t*)0x20b6bffc = 0; syscall(__NR_setsockopt, r[0], 0, 0x11, 0x20b6bf18, 0xe8); *(uint16_t*)0x20cf9000 = 2; *(uint16_t*)0x20cf9002 = 0; *(uint32_t*)0x20cf9004 = htobe32(0); *(uint8_t*)0x20cf9008 = 0; *(uint8_t*)0x20cf9009 = 0; *(uint8_t*)0x20cf900a = 0; *(uint8_t*)0x20cf900b = 0; *(uint8_t*)0x20cf900c = 0; *(uint8_t*)0x20cf900d = 0; *(uint8_t*)0x20cf900e = 0; *(uint8_t*)0x20cf900f = 0; syscall(__NR_sendto, r[0], 0x20098000, 0, 0, 0x20cf9000, 0x10); } int main() { loop(); return 0; }