// https://syzkaller.appspot.com/bug?id=5735d842f7ea3ed9220aca64952ac4aba7ba741c // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0x10, 3, 0); if (res != -1) r[0] = res; *(uint64_t*)0x2001bfc8 = 0x20016000; *(uint16_t*)0x20016000 = 0x10; *(uint16_t*)0x20016002 = 0; *(uint32_t*)0x20016004 = 0; *(uint32_t*)0x20016008 = 0; *(uint32_t*)0x2001bfd0 = 0xc; *(uint64_t*)0x2001bfd8 = 0x2000b000; *(uint64_t*)0x2000b000 = 0x2000e000; *(uint32_t*)0x2000e000 = 0x20; *(uint16_t*)0x2000e004 = 0x18; *(uint16_t*)0x2000e006 = 0x501; *(uint32_t*)0x2000e008 = 0; *(uint32_t*)0x2000e00c = 0; *(uint8_t*)0x2000e010 = 0xa; *(uint8_t*)0x2000e011 = 0; *(uint8_t*)0x2000e012 = 0; *(uint8_t*)0x2000e013 = 0; *(uint8_t*)0x2000e014 = 0; *(uint8_t*)0x2000e015 = 0; *(uint8_t*)0x2000e016 = 0; *(uint8_t*)0x2000e017 = 0; *(uint32_t*)0x2000e018 = 0; *(uint16_t*)0x2000e01c = 4; *(uint16_t*)0x2000e01e = 0xf; *(uint64_t*)0x2000b008 = 0x20; *(uint64_t*)0x2001bfe0 = 1; *(uint64_t*)0x2001bfe8 = 0; *(uint64_t*)0x2001bff0 = 0; *(uint32_t*)0x2001bff8 = 0; syscall(__NR_sendmsg, r[0], 0x2001bfc8, 0); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }