// https://syzkaller.appspot.com/bug?id=7fed6d584f10a3e20118193cefa19346940df6e6 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x32ul, -1, 0); intptr_t res = 0; res = syscall(__NR_socket, 0x10ul, 3ul, 0xcul); if (res != -1) r[0] = res; *(uint64_t*)0x20000280 = 0; *(uint32_t*)0x20000288 = 0xfffffd83; *(uint64_t*)0x20000290 = 0x20000240; *(uint64_t*)0x20000240 = 0x20000140; *(uint32_t*)0x20000140 = 0x88; *(uint8_t*)0x20000144 = 0; *(uint8_t*)0x20000145 = 1; *(uint16_t*)0x20000146 = 0x519; *(uint32_t*)0x20000148 = 0; *(uint32_t*)0x2000014c = 0; *(uint8_t*)0x20000150 = 0x70; *(uint8_t*)0x20000151 = 0; *(uint16_t*)0x20000152 = htobe16(0); *(uint16_t*)0x20000154 = 0x3c; *(uint16_t*)0x20000156 = 1; *(uint16_t*)0x20000158 = 0x2c; *(uint16_t*)0x2000015a = 1; *(uint16_t*)0x2000015c = 0x14; *(uint16_t*)0x2000015e = 3; *(uint64_t*)0x20000160 = htobe64(0); *(uint64_t*)0x20000168 = htobe64(1); *(uint16_t*)0x20000170 = 0x14; *(uint16_t*)0x20000172 = 4; *(uint8_t*)0x20000174 = 0xfe; *(uint8_t*)0x20000175 = 0x80; *(uint8_t*)0x20000176 = 0; *(uint8_t*)0x20000177 = 0; *(uint8_t*)0x20000178 = 0; *(uint8_t*)0x20000179 = 0; *(uint8_t*)0x2000017a = 0; *(uint8_t*)0x2000017b = 0; *(uint8_t*)0x2000017c = 0; *(uint8_t*)0x2000017d = 0; *(uint8_t*)0x2000017e = 0; *(uint8_t*)0x2000017f = 0; *(uint8_t*)0x20000180 = 0; *(uint8_t*)0x20000181 = 0; *(uint8_t*)0x20000182 = 0; *(uint8_t*)0x20000183 = 0xbb; *(uint16_t*)0x20000184 = 0xc; *(uint16_t*)0x20000186 = 2; *(uint16_t*)0x20000188 = 5; *(uint16_t*)0x2000018a = 1; *(uint8_t*)0x2000018c = 0; *(uint16_t*)0x20000190 = 0x24; *(uint16_t*)0x20000192 = 2; *(uint16_t*)0x20000194 = 0xc; *(uint16_t*)0x20000196 = 2; *(uint16_t*)0x20000198 = 5; *(uint16_t*)0x2000019a = 1; *(uint8_t*)0x2000019c = 0; *(uint16_t*)0x200001a0 = 0x14; *(uint16_t*)0x200001a2 = 1; *(uint16_t*)0x200001a4 = 8; *(uint16_t*)0x200001a6 = 1; *(uint32_t*)0x200001a8 = htobe32(0); *(uint16_t*)0x200001ac = 8; *(uint16_t*)0x200001ae = 2; *(uint32_t*)0x200001b0 = htobe32(0xe0000001); *(uint16_t*)0x200001b4 = 8; *(uint16_t*)0x200001b6 = 7; *(uint32_t*)0x200001b8 = htobe32(0x80); *(uint16_t*)0x200001bc = 0xc; *(uint16_t*)0x200001be = 0xd; *(uint16_t*)0x200001c0 = 8; *(uint16_t*)0x200001c2 = 2; *(uint8_t*)0x200001c4 = 0xac; *(uint8_t*)0x200001c5 = 0x14; *(uint8_t*)0x200001c6 = 0x14; *(uint8_t*)0x200001c7 = 0xbb; *(uint64_t*)0x20000248 = 0x88; *(uint64_t*)0x20000298 = 1; *(uint64_t*)0x200002a0 = 0; *(uint64_t*)0x200002a8 = 0; *(uint32_t*)0x200002b0 = 0x40008080; syscall(__NR_sendmsg, r[0], 0x20000280ul, 0ul); return 0; }