// https://syzkaller.appspot.com/bug?id=9fcc32fe46ce159d6a3e64b64ab3402a7ac2e9b8 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include static void test(); void loop() { while (1) { test(); } } long r[57]; void test() { memset(r, -1, sizeof(r)); r[0] = syscall(__NR_mmap, 0x20000000ul, 0xfff000ul, 0x3ul, 0x32ul, 0xfffffffffffffffful, 0x0ul); r[1] = syscall(__NR_socket, 0x26ul, 0x5ul, 0x0ul); *(uint16_t*)0x20297000 = (uint16_t)0x26; memcpy((void*)0x20297002, "\x72\x6e\x67\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 14); *(uint32_t*)0x20297010 = (uint32_t)0x2002; *(uint32_t*)0x20297014 = (uint32_t)0xf; memcpy((void*)0x20297018, "\x73\x74\x64\x72\x6e\x67\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00", 64); r[7] = syscall(__NR_bind, r[1], 0x20297000ul, 0x58ul); r[8] = syscall(__NR_setsockopt, r[1], 0x117ul, 0x1ul, 0x200b1000ul, 0x0ul); *(uint32_t*)0x20519f48 = (uint32_t)0x0; *(uint32_t*)0x20519f4c = (uint32_t)0x4000000000005; *(uint32_t*)0x20519f50 = (uint32_t)0x9; *(uint16_t*)0x20519f54 = (uint16_t)0x8; *(uint16_t*)0x20519f56 = (uint16_t)0x200; *(uint16_t*)0x20519f58 = (uint16_t)0xff; *(uint16_t*)0x20519f5a = (uint16_t)0x131c; *(uint32_t*)0x20519f5c = (uint32_t)0xffffffffffffffff; *(uint32_t*)0x20519f60 = (uint32_t)0x0; *(uint16_t*)0x20519f64 = (uint16_t)0xa; *(uint16_t*)0x20519f66 = (uint16_t)0x204e; *(uint32_t*)0x20519f68 = (uint32_t)0x3; *(uint8_t*)0x20519f6c = (uint8_t)0xfe; *(uint8_t*)0x20519f6d = (uint8_t)0x80; *(uint8_t*)0x20519f6e = (uint8_t)0x0; *(uint8_t*)0x20519f6f = (uint8_t)0x0; *(uint8_t*)0x20519f70 = (uint8_t)0x0; *(uint8_t*)0x20519f71 = (uint8_t)0x0; *(uint8_t*)0x20519f72 = (uint8_t)0x0; *(uint8_t*)0x20519f73 = (uint8_t)0x0; *(uint8_t*)0x20519f74 = (uint8_t)0x0; *(uint8_t*)0x20519f75 = (uint8_t)0x0; *(uint8_t*)0x20519f76 = (uint8_t)0x0; *(uint8_t*)0x20519f77 = (uint8_t)0x0; *(uint8_t*)0x20519f78 = (uint8_t)0x0; *(uint8_t*)0x20519f79 = (uint8_t)0x0; *(uint8_t*)0x20519f7a = (uint8_t)0x0; *(uint8_t*)0x20519f7b = (uint8_t)0xbb; *(uint32_t*)0x20519f7c = (uint32_t)0x2; *(uint64_t*)0x20519f84 = (uint64_t)0x0; *(uint64_t*)0x20519f8c = (uint64_t)0x0; *(uint64_t*)0x20519f94 = (uint64_t)0x0; *(uint64_t*)0x20519f9c = (uint64_t)0x0; *(uint64_t*)0x20519fa4 = (uint64_t)0x0; *(uint64_t*)0x20519fac = (uint64_t)0x0; *(uint64_t*)0x20519fb4 = (uint64_t)0x0; *(uint64_t*)0x20519fbc = (uint64_t)0x0; *(uint64_t*)0x20519fc4 = (uint64_t)0x0; *(uint64_t*)0x20519fcc = (uint64_t)0x0; *(uint64_t*)0x20519fd4 = (uint64_t)0x0; *(uint64_t*)0x20519fdc = (uint64_t)0x0; *(uint32_t*)0x20519fec = (uint32_t)0xeb; *(uint32_t*)0x20519ff0 = (uint32_t)0x8; *(uint32_t*)0x20519ff4 = (uint32_t)0xfffffffffffffff8; *(uint32_t*)0x20519ff8 = (uint32_t)0x6; *(uint32_t*)0x20519ffc = (uint32_t)0xc22e; *(uint32_t*)0x20ef0000 = (uint32_t)0xb8; r[56] = syscall(__NR_getsockopt, 0xfffffffffffffffful, 0x84ul, 0xeul, 0x20519f48ul, 0x20ef0000ul); } int main() { loop(); return 0; }