// https://syzkaller.appspot.com/bug?id=54f4ce6239e6e0d0d5583488421c6fa3ba7ed6b4 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void test(); void loop() { while (1) { test(); } } long r[1]; void test() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); r[0] = syscall(__NR_socket, 0xf, 3, 2); *(uint64_t*)0x205f5000 = 0; *(uint32_t*)0x205f5008 = 0; *(uint64_t*)0x205f5010 = 0x208feff0; *(uint64_t*)0x205f5018 = 1; *(uint64_t*)0x205f5020 = 0; *(uint64_t*)0x205f5028 = 0; *(uint32_t*)0x205f5030 = 0; *(uint64_t*)0x208feff0 = 0x2050df68; *(uint64_t*)0x208feff8 = 0x80; *(uint8_t*)0x2050df68 = 2; *(uint8_t*)0x2050df69 = 3; *(uint8_t*)0x2050df6a = 0; *(uint8_t*)0x2050df6b = 9; *(uint16_t*)0x2050df6c = 0x10; *(uint16_t*)0x2050df6e = 0; *(uint32_t*)0x2050df70 = 0; *(uint32_t*)0x2050df74 = 0; *(uint16_t*)0x2050df78 = 5; *(uint16_t*)0x2050df7a = 6; *(uint8_t*)0x2050df7c = 0; *(uint8_t*)0x2050df7d = 0; *(uint16_t*)0x2050df7e = 0; *(uint16_t*)0x2050df80 = 0xa; *(uint16_t*)0x2050df82 = 0; *(uint32_t*)0x2050df84 = 0; *(uint8_t*)0x2050df88 = 0; *(uint8_t*)0x2050df89 = 0; *(uint8_t*)0x2050df8a = 0; *(uint8_t*)0x2050df8b = 0; *(uint8_t*)0x2050df8c = 0; *(uint8_t*)0x2050df8d = 0; *(uint8_t*)0x2050df8e = 0; *(uint8_t*)0x2050df8f = 0; *(uint8_t*)0x2050df90 = 0; *(uint8_t*)0x2050df91 = 0; *(uint8_t*)0x2050df92 = 0; *(uint8_t*)0x2050df93 = 0; *(uint8_t*)0x2050df94 = 0; *(uint8_t*)0x2050df95 = 0; *(uint8_t*)0x2050df96 = 0; *(uint8_t*)0x2050df97 = 0; *(uint32_t*)0x2050df98 = 0; *(uint16_t*)0x2050dfa0 = 2; *(uint16_t*)0x2050dfa2 = 0x13; *(uint8_t*)0x2050dfa4 = 2; *(uint8_t*)0x2050dfa5 = 0; *(uint16_t*)0x2050dfa6 = 0; *(uint32_t*)0x2050dfa8 = 0; *(uint32_t*)0x2050dfac = 0; *(uint16_t*)0x2050dfb0 = 2; *(uint16_t*)0x2050dfb2 = 1; *(uint32_t*)0x2050dfb4 = 0; *(uint8_t*)0x2050dfb8 = 0xfa; *(uint8_t*)0x2050dfb9 = 0; *(uint8_t*)0x2050dfba = 0; *(uint8_t*)0x2050dfbb = 2; *(uint32_t*)0x2050dfbc = 0; *(uint16_t*)0x2050dfc0 = 5; *(uint16_t*)0x2050dfc2 = 5; *(uint8_t*)0x2050dfc4 = 0; *(uint8_t*)0x2050dfc5 = 0; *(uint16_t*)0x2050dfc6 = 0; *(uint16_t*)0x2050dfc8 = 0xa; *(uint16_t*)0x2050dfca = 0; *(uint32_t*)0x2050dfcc = 0; *(uint8_t*)0x2050dfd0 = 0xfe; *(uint8_t*)0x2050dfd1 = 0x80; *(uint8_t*)0x2050dfd2 = 0; *(uint8_t*)0x2050dfd3 = 0; *(uint8_t*)0x2050dfd4 = 0; *(uint8_t*)0x2050dfd5 = 0; *(uint8_t*)0x2050dfd6 = 0; *(uint8_t*)0x2050dfd7 = 0; *(uint8_t*)0x2050dfd8 = 0; *(uint8_t*)0x2050dfd9 = 0; *(uint8_t*)0x2050dfda = 0; *(uint8_t*)0x2050dfdb = 0; *(uint8_t*)0x2050dfdc = 0; *(uint8_t*)0x2050dfdd = 0; *(uint8_t*)0x2050dfde = 0; *(uint8_t*)0x2050dfdf = 0xaa; *(uint32_t*)0x2050dfe0 = 0; syscall(__NR_sendmsg, r[0], 0x205f5000, 0); } int main() { for (;;) { loop(); } }