// https://syzkaller.appspot.com/bug?id=cf86490d75109a7648fc749a4c9a8d59fabe398d // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); long res = 0; res = syscall(__NR_socket, 0x10, 3, 6); if (res != -1) r[0] = res; *(uint64_t*)0x200006c0 = 0; *(uint32_t*)0x200006c8 = 0; *(uint64_t*)0x200006d0 = 0x20000680; *(uint64_t*)0x20000680 = 0x200004c0; *(uint32_t*)0x200004c0 = 0x104; *(uint16_t*)0x200004c4 = 0x16; *(uint16_t*)0x200004c6 = 0x607; *(uint32_t*)0x200004c8 = 0; *(uint32_t*)0x200004cc = 0; *(uint32_t*)0x200004d0 = htobe32(0); *(uint8_t*)0x200004e0 = 0xac; *(uint8_t*)0x200004e1 = 0x14; *(uint8_t*)0x200004e2 = 0x14; *(uint8_t*)0x200004e3 = 0; *(uint16_t*)0x200004f0 = htobe16(0); *(uint16_t*)0x200004f2 = htobe16(0); *(uint16_t*)0x200004f4 = htobe16(0); *(uint16_t*)0x200004f6 = htobe16(0); *(uint16_t*)0x200004f8 = 0; *(uint8_t*)0x200004fa = 0; *(uint8_t*)0x200004fb = 0; *(uint8_t*)0x200004fc = 0; *(uint32_t*)0x20000500 = 0; *(uint32_t*)0x20000504 = 0; *(uint8_t*)0x20000508 = 0xfe; *(uint8_t*)0x20000509 = 0x80; *(uint8_t*)0x2000050a = 0; *(uint8_t*)0x2000050b = 0; *(uint8_t*)0x2000050c = 0; *(uint8_t*)0x2000050d = 0; *(uint8_t*)0x2000050e = 0; *(uint8_t*)0x2000050f = 0; *(uint8_t*)0x20000510 = 0; *(uint8_t*)0x20000511 = 0; *(uint8_t*)0x20000512 = 0; *(uint8_t*)0x20000513 = 0; *(uint8_t*)0x20000514 = 0; *(uint8_t*)0x20000515 = 0; *(uint8_t*)0x20000516 = 0; *(uint8_t*)0x20000517 = 0; *(uint32_t*)0x20000518 = htobe32(0); *(uint8_t*)0x2000051c = 0x33; *(uint8_t*)0x20000520 = 0; *(uint8_t*)0x20000521 = 0; *(uint8_t*)0x20000522 = 0; *(uint8_t*)0x20000523 = 0; *(uint8_t*)0x20000524 = 0; *(uint8_t*)0x20000525 = 0; *(uint8_t*)0x20000526 = 0; *(uint8_t*)0x20000527 = 0; *(uint8_t*)0x20000528 = 0; *(uint8_t*)0x20000529 = 0; *(uint8_t*)0x2000052a = -1; *(uint8_t*)0x2000052b = -1; *(uint32_t*)0x2000052c = htobe32(0); *(uint64_t*)0x20000530 = 0; *(uint64_t*)0x20000538 = 0; *(uint64_t*)0x20000540 = 0; *(uint64_t*)0x20000548 = 0; *(uint64_t*)0x20000550 = 0; *(uint64_t*)0x20000558 = 0; *(uint64_t*)0x20000560 = 0; *(uint64_t*)0x20000568 = 0; *(uint64_t*)0x20000570 = 0; *(uint64_t*)0x20000578 = 0; *(uint64_t*)0x20000580 = 0; *(uint64_t*)0x20000588 = 0; *(uint32_t*)0x20000590 = 0; *(uint32_t*)0x20000594 = 0; *(uint32_t*)0x20000598 = 0; *(uint32_t*)0x2000059c = 0; *(uint32_t*)0x200005a0 = 0; *(uint16_t*)0x200005a4 = 0; *(uint8_t*)0x200005a6 = 0; *(uint8_t*)0x200005a7 = 0; *(uint8_t*)0x200005a8 = 0; *(uint32_t*)0x200005b0 = 0; *(uint32_t*)0x200005b4 = 0xc3b3; *(uint16_t*)0x200005b8 = 0xc; *(uint16_t*)0x200005ba = 0x15; *(uint32_t*)0x200005bc = 0; *(uint32_t*)0x200005c0 = 9; *(uint64_t*)0x20000688 = 0x104; *(uint64_t*)0x200006d8 = 1; *(uint64_t*)0x200006e0 = 0; *(uint64_t*)0x200006e8 = 0; *(uint32_t*)0x200006f0 = 0; syscall(__NR_sendmsg, r[0], 0x200006c0, 0); return 0; }