// https://syzkaller.appspot.com/bug?id=3b0d2db205f616af8b8926d05b9b1a1dac07d4de // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); intptr_t res = 0; res = syscall(__NR_socketpair, 1ul, 1ul, 0, 0x20000480ul); if (res != -1) { r[0] = *(uint32_t*)0x20000480; r[1] = *(uint32_t*)0x20000484; } *(uint64_t*)0x20000200 = 0; *(uint32_t*)0x20000208 = 0; *(uint64_t*)0x20000210 = 0x200001c0; *(uint64_t*)0x200001c0 = 0x20000580; memset((void*)0x20000580, 4, 1); *(uint64_t*)0x200001c8 = 1; *(uint64_t*)0x20000218 = 1; *(uint64_t*)0x20000220 = 0; *(uint64_t*)0x20000228 = 0; *(uint32_t*)0x20000230 = 0; syscall(__NR_sendmsg, r[0], 0x20000200ul, 0x600480c1ul); *(uint64_t*)0x20001140 = 0; *(uint32_t*)0x20001148 = 0; *(uint64_t*)0x20001150 = 0; *(uint64_t*)0x20001158 = 0; *(uint64_t*)0x20001160 = 0; *(uint64_t*)0x20001168 = 0; *(uint32_t*)0x20001170 = 0; *(uint32_t*)0x20001178 = 0; syscall(__NR_recvmmsg, r[1], 0x20001140ul, 0x700ul, 7ul, 0ul); return 0; }