// https://syzkaller.appspot.com/bug?id=9fcc32fe46ce159d6a3e64b64ab3402a7ac2e9b8 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include static void test(); void loop() { while (1) { test(); } } long r[105]; void test() { memset(r, -1, sizeof(r)); r[0] = syscall(__NR_mmap, 0x20000000ul, 0xfff000ul, 0x3ul, 0x32ul, 0xfffffffffffffffful, 0x0ul); *(uint32_t*)0x2001d000 = (uint32_t)0x2; *(uint32_t*)0x2001d004 = (uint32_t)0x78; *(uint8_t*)0x2001d008 = (uint8_t)0xde; *(uint8_t*)0x2001d009 = (uint8_t)0x0; *(uint8_t*)0x2001d00a = (uint8_t)0x0; *(uint8_t*)0x2001d00b = (uint8_t)0x0; *(uint32_t*)0x2001d00c = (uint32_t)0x0; *(uint64_t*)0x2001d010 = (uint64_t)0x0; *(uint64_t*)0x2001d018 = (uint64_t)0x0; *(uint64_t*)0x2001d020 = (uint64_t)0x10000000; *(uint8_t*)0x2001d028 = (uint8_t)0xfe; *(uint8_t*)0x2001d029 = (uint8_t)0x0; *(uint8_t*)0x2001d02a = (uint8_t)0x0; *(uint8_t*)0x2001d02b = (uint8_t)0x0; *(uint32_t*)0x2001d02c = (uint32_t)0x0; *(uint32_t*)0x2001d030 = (uint32_t)0x0; *(uint32_t*)0x2001d034 = (uint32_t)0xfffffffffffffffd; *(uint64_t*)0x2001d038 = (uint64_t)0xfffffffffffffff7; *(uint64_t*)0x2001d040 = (uint64_t)0x1; *(uint64_t*)0x2001d048 = (uint64_t)0x10; *(uint64_t*)0x2001d050 = (uint64_t)0x0; *(uint64_t*)0x2001d058 = (uint64_t)0x0; *(uint32_t*)0x2001d060 = (uint32_t)0x0; *(uint64_t*)0x2001d068 = (uint64_t)0x0; *(uint32_t*)0x2001d070 = (uint32_t)0x0; *(uint16_t*)0x2001d074 = (uint16_t)0x1; *(uint16_t*)0x2001d076 = (uint16_t)0x0; r[28] = syscall(__NR_perf_event_open, 0x2001d000ul, 0x0ul, 0xbffffffffffffffful, 0xfffffffffffffffful, 0x0ul); r[29] = syscall(__NR_socket, 0x26ul, 0x5ul, 0x0ul); *(uint16_t*)0x202d0000 = (uint16_t)0x26; memcpy((void*)0x202d0002, "\x72\x6e\x67\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00", 14); *(uint32_t*)0x202d0010 = (uint32_t)0x0; *(uint32_t*)0x202d0014 = (uint32_t)0xb; memcpy((void*)0x202d0018, "\x73\x74\x64\x72\x6e\x67\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00", 64); r[35] = syscall(__NR_bind, r[29], 0x202d0000ul, 0x58ul); r[36] = syscall(__NR_setsockopt, r[29], 0x117ul, 0x1ul, 0x200b1000ul, 0x0ul); *(uint32_t*)0x208a4ff0 = (uint32_t)0x0; *(uint32_t*)0x208a4ff4 = (uint32_t)0x6; *(uint64_t*)0x208a4ff8 = (uint64_t)0x20ee7000; *(uint16_t*)0x20ee7000 = (uint16_t)0xa; *(uint16_t*)0x20ee7002 = (uint16_t)0x224e; *(uint32_t*)0x20ee7004 = (uint32_t)0x80000; *(uint64_t*)0x20ee7008 = (uint64_t)0x0; *(uint64_t*)0x20ee7010 = (uint64_t)0x100000000000000; *(uint32_t*)0x20ee7018 = (uint32_t)0xd1c7; *(uint16_t*)0x20ee701c = (uint16_t)0xa; *(uint16_t*)0x20ee701e = (uint16_t)0x224e; *(uint32_t*)0x20ee7020 = (uint32_t)0x1ff; *(uint64_t*)0x20ee7024 = (uint64_t)0x0; *(uint64_t*)0x20ee702c = (uint64_t)0x100000000000000; *(uint32_t*)0x20ee7034 = (uint32_t)0x8001; *(uint16_t*)0x20ee7038 = (uint16_t)0x2; *(uint16_t*)0x20ee703a = (uint16_t)0x234e; *(uint8_t*)0x20ee703c = (uint8_t)0xac; *(uint8_t*)0x20ee703d = (uint8_t)0x14; *(uint8_t*)0x20ee703e = (uint8_t)0x0; *(uint8_t*)0x20ee703f = (uint8_t)0xaa; *(uint8_t*)0x20ee7040 = (uint8_t)0x0; *(uint8_t*)0x20ee7041 = (uint8_t)0x0; *(uint8_t*)0x20ee7042 = (uint8_t)0x0; *(uint8_t*)0x20ee7043 = (uint8_t)0x0; *(uint8_t*)0x20ee7044 = (uint8_t)0x0; *(uint8_t*)0x20ee7045 = (uint8_t)0x0; *(uint8_t*)0x20ee7046 = (uint8_t)0x0; *(uint8_t*)0x20ee7047 = (uint8_t)0x0; *(uint16_t*)0x20ee7048 = (uint16_t)0x2; *(uint16_t*)0x20ee704a = (uint16_t)0x224e; *(uint32_t*)0x20ee704c = (uint32_t)0x100007f; *(uint8_t*)0x20ee7050 = (uint8_t)0x0; *(uint8_t*)0x20ee7051 = (uint8_t)0x0; *(uint8_t*)0x20ee7052 = (uint8_t)0x0; *(uint8_t*)0x20ee7053 = (uint8_t)0x0; *(uint8_t*)0x20ee7054 = (uint8_t)0x0; *(uint8_t*)0x20ee7055 = (uint8_t)0x0; *(uint8_t*)0x20ee7056 = (uint8_t)0x0; *(uint8_t*)0x20ee7057 = (uint8_t)0x0; *(uint16_t*)0x20ee7058 = (uint16_t)0xa; *(uint16_t*)0x20ee705a = (uint16_t)0x214e; *(uint32_t*)0x20ee705c = (uint32_t)0x10001; *(uint64_t*)0x20ee7060 = (uint64_t)0x0; *(uint64_t*)0x20ee7068 = (uint64_t)0x100000000000000; *(uint32_t*)0x20ee7070 = (uint32_t)0x32; *(uint16_t*)0x20ee7074 = (uint16_t)0xa; *(uint16_t*)0x20ee7076 = (uint16_t)0x224e; *(uint32_t*)0x20ee7078 = (uint32_t)0xe; *(uint8_t*)0x20ee707c = (uint8_t)0xfe; *(uint8_t*)0x20ee707d = (uint8_t)0x80; *(uint8_t*)0x20ee707e = (uint8_t)0x0; *(uint8_t*)0x20ee707f = (uint8_t)0x0; *(uint8_t*)0x20ee7080 = (uint8_t)0x0; *(uint8_t*)0x20ee7081 = (uint8_t)0x0; *(uint8_t*)0x20ee7082 = (uint8_t)0x0; *(uint8_t*)0x20ee7083 = (uint8_t)0x0; *(uint8_t*)0x20ee7084 = (uint8_t)0x0; *(uint8_t*)0x20ee7085 = (uint8_t)0x0; *(uint8_t*)0x20ee7086 = (uint8_t)0x0; *(uint8_t*)0x20ee7087 = (uint8_t)0x0; *(uint8_t*)0x20ee7088 = (uint8_t)0x0; *(uint8_t*)0x20ee7089 = (uint8_t)0x0; *(uint8_t*)0x20ee708a = (uint8_t)0x0; *(uint8_t*)0x20ee708b = (uint8_t)0xbb; *(uint32_t*)0x20ee708c = (uint32_t)0x1f; *(uint32_t*)0x20b36ffc = (uint32_t)0x10; r[104] = syscall(__NR_getsockopt, 0xfffffffffffffffful, 0x84ul, 0x6ful, 0x208a4ff0ul, 0x20b36ffcul); } int main() { loop(); return 0; }