// https://syzkaller.appspot.com/bug?id=28bc35dd6f026b2878e30804670f6f0c39932f16 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0x1c000, 3, 0x32, -1, 0); r[0] = syscall(__NR_socket, 2, 1, 0); *(uint16_t*)0x20001000 = 2; *(uint16_t*)0x20001002 = htobe16(0x4e20); *(uint32_t*)0x20001004 = htobe32(0); *(uint8_t*)0x20001008 = 0; *(uint8_t*)0x20001009 = 0; *(uint8_t*)0x2000100a = 0; *(uint8_t*)0x2000100b = 0; *(uint8_t*)0x2000100c = 0; *(uint8_t*)0x2000100d = 0; *(uint8_t*)0x2000100e = 0; *(uint8_t*)0x2000100f = 0; syscall(__NR_bind, r[0], 0x20001000, 0x10); memcpy((void*)0x2001bff0, "/dev/sequencer2", 16); syscall(__NR_openat, 0xffffffffffffff9c, 0x2001bff0, 0x8001, 0); *(uint16_t*)0x20015000 = 2; *(uint16_t*)0x20015002 = htobe16(0x4e20); *(uint32_t*)0x20015004 = htobe32(0xe0000002); *(uint8_t*)0x20015008 = 0; *(uint8_t*)0x20015009 = 0; *(uint8_t*)0x2001500a = 0; *(uint8_t*)0x2001500b = 0; *(uint8_t*)0x2001500c = 0; *(uint8_t*)0x2001500d = 0; *(uint8_t*)0x2001500e = 0; *(uint8_t*)0x2001500f = 0; syscall(__NR_bind, -1, 0x20015000, 0x10); } int main() { loop(); return 0; }