blob: 41c1ae1d4d37679d8fe3c6b393fd5ddf565f72fa [file] [log] [blame]
// KMSAN: uninit-value in audit_receive
// https://syzkaller.appspot.com/bug?id=e8a6efe536954168c3f7012e2150ee6dcdeff643
// status:open
// autogenerated by syzkaller (https://github.com/google/syzkaller)
#define _GNU_SOURCE
#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>
#ifndef __NR_mmap
#define __NR_mmap 192
#endif
#ifndef __NR_sendmsg
#define __NR_sendmsg 370
#endif
#ifndef __NR_socket
#define __NR_socket 359
#endif
#undef __NR_mmap
#define __NR_mmap __NR_mmap2
uint64_t r[1] = {0xffffffffffffffff};
int main(void)
{
syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0);
intptr_t res = 0;
res = syscall(__NR_socket, 0x10, 3, 9);
if (res != -1)
r[0] = res;
*(uint32_t*)0x200000c0 = 0;
*(uint32_t*)0x200000c4 = 0;
*(uint32_t*)0x200000c8 = 0x20000080;
*(uint32_t*)0x20000080 = 0x20000040;
*(uint32_t*)0x20000040 = 0x10;
*(uint16_t*)0x20000044 = 0x3fa;
*(uint16_t*)0x20000046 = 0;
*(uint32_t*)0x20000048 = 0;
*(uint32_t*)0x2000004c = 0;
*(uint32_t*)0x20000084 = 0x10;
*(uint32_t*)0x200000cc = 1;
*(uint32_t*)0x200000d0 = 0;
*(uint32_t*)0x200000d4 = 0;
*(uint32_t*)0x200000d8 = 0;
syscall(__NR_sendmsg, (intptr_t)r[0], 0x200000c0, 0);
return 0;
}