// https://syzkaller.appspot.com/bug?id=4565b3753fc286b7f5b61f21735bd4690d43288e // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); intptr_t res = 0; res = syscall(__NR_socket, 0x10, 2, 4); if (res != -1) r[0] = res; *(uint64_t*)0x20000040 = 0; *(uint32_t*)0x20000048 = 0; *(uint64_t*)0x20000050 = 0x20000140; *(uint64_t*)0x20000140 = 0x20001540; memcpy((void*)0x20001540, "\x39\x00\x00\x00\x14\x00\x81\xae\x00\x00\xdc\x67" "\x6f\x97\xda\xf0\x1e\x23\x57\x81\x34\x66\x2c\x30" "\x0b\x2c\x00\x05\x00\x01\x87\x01\x54\x6f\xab\xca" "\x1b\x4e\x7d\x06\xa6\x58\x0e\x88\x37\x02\x00\xc5" "\x4c\x19\x60\xb8\x9c\x40\xeb\xb3\x73", 57); *(uint64_t*)0x20000148 = 0x39; *(uint64_t*)0x20000058 = 1; *(uint64_t*)0x20000060 = 0; *(uint64_t*)0x20000068 = 0; *(uint32_t*)0x20000070 = 0; syscall(__NR_sendmsg, r[0], 0x20000040, 0); return 0; }