// https://syzkaller.appspot.com/bug?id=e826b4d012da9963d581b16d665db3811588ffbe // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); r[0] = syscall(__NR_socket, 0x40000000015, 0x805, 0); *(uint16_t*)0x200a9000 = 2; *(uint16_t*)0x200a9002 = htobe16(0x4e20); *(uint32_t*)0x200a9004 = htobe32(0x7f000001); *(uint8_t*)0x200a9008 = 0; *(uint8_t*)0x200a9009 = 0; *(uint8_t*)0x200a900a = 0; *(uint8_t*)0x200a900b = 0; *(uint8_t*)0x200a900c = 0; *(uint8_t*)0x200a900d = 0; *(uint8_t*)0x200a900e = 0; *(uint8_t*)0x200a900f = 0; syscall(__NR_bind, r[0], 0x200a9000, 0x10); *(uint16_t*)0x20062000 = 2; *(uint16_t*)0x20062002 = 0; *(uint32_t*)0x20062004 = htobe32(0x7f000001); *(uint8_t*)0x20062008 = 0; *(uint8_t*)0x20062009 = 0; *(uint8_t*)0x2006200a = 0; *(uint8_t*)0x2006200b = 0; *(uint8_t*)0x2006200c = 0; *(uint8_t*)0x2006200d = 0; *(uint8_t*)0x2006200e = 0; *(uint8_t*)0x2006200f = 0; syscall(__NR_sendto, r[0], 0x20c15000, 0, 0, 0x20062000, 0x10); } int main() { loop(); return 0; }