// https://syzkaller.appspot.com/bug?id=e7cb1c0fc7b386dbfedec70619f46fea3ae76480 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include <endian.h> #include <stdint.h> #include <stdio.h> #include <stdlib.h> #include <string.h> #include <sys/syscall.h> #include <sys/types.h> #include <unistd.h> uint64_t r[1] = {0xffffffffffffffff}; int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); long res = 0; res = syscall(__NR_socket, 0xa, 0x400000000001, 0); if (res != -1) r[0] = res; *(uint16_t*)0x20000040 = 0xa; *(uint16_t*)0x20000042 = htobe16(0x4e20); *(uint32_t*)0x20000044 = 0; *(uint64_t*)0x20000048 = htobe64(0); *(uint64_t*)0x20000050 = htobe64(1); *(uint32_t*)0x20000058 = 0; syscall(__NR_bind, r[0], 0x20000040, 0x1c); *(uint16_t*)0x208d4fe4 = 0xa; *(uint16_t*)0x208d4fe6 = htobe16(0x4e20); *(uint32_t*)0x208d4fe8 = 0; *(uint64_t*)0x208d4fec = htobe64(0); *(uint64_t*)0x208d4ff4 = htobe64(1); *(uint32_t*)0x208d4ffc = 0; syscall(__NR_sendto, r[0], 0x20e77fff, 0x2bd, 0x20000008, 0x208d4fe4, 0x1c); syscall(__NR_mprotect, 0x20a00000, 0x600000, 0); return 0; }