// https://syzkaller.appspot.com/bug?id=924f61f6084bdb25ca671dde359fadfabe976b05 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #ifndef __NR_mmap #define __NR_mmap 192 #endif #ifndef __NR_socket #define __NR_socket 359 #endif #ifndef __NR_ppoll #define __NR_ppoll 309 #endif #undef __NR_mmap #define __NR_mmap __NR_mmap2 uint64_t r[1] = {0xffffffffffffffff}; void loop() { long res = 0; res = syscall(__NR_socket, 0x2b, 1, 0); if (res != -1) r[0] = res; *(uint32_t*)0x200000c0 = r[0]; *(uint16_t*)0x200000c4 = 2; *(uint16_t*)0x200000c6 = 0; *(uint32_t*)0x20000140 = 0; *(uint32_t*)0x20000144 = 0; *(uint64_t*)0x20000180 = 5; syscall(__NR_ppoll, 0x200000c0, 1, 0x20000140, 0x20000180, 8); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }