// https://syzkaller.appspot.com/bug?id=2bf7b7983c2398ec6f0c4c6c87cb50223e8873f8 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[3]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); memcpy((void*)0x20b78000, "/dev/kvm", 9); r[0] = syscall(__NR_openat, 0xffffffffffffff9c, 0x20b78000, 0, 0); r[1] = syscall(__NR_ioctl, r[0], 0xae01, 0); syscall(__NR_ioctl, r[1], 0xae60); r[2] = syscall(__NR_ioctl, r[1], 0xae41, 0); *(uint32_t*)0x2017a000 = 4; syscall(__NR_ioctl, r[2], 0x4004ae99, 0x2017a000); syscall(__NR_ioctl, r[2], 0xae80, 0); *(uint32_t*)0x20e12ffc = 0xffff; syscall(__NR_ioctl, -1, 0x5420, 0x20e12ffc); } int main() { loop(); return 0; }