// https://syzkaller.appspot.com/bug?id=6a611b805567ae82feb9b5bb2bc8192cc5779c2c // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); memcpy((void*)0x202f0ff1, "/dev/vhost-net", 15); r[0] = syscall(__NR_openat, 0xffffffffffffff9c, 0x202f0ff1, 2, 0); *(uint32_t*)0x20e42000 = 1; *(uint64_t*)0x20e42008 = 0x20572fd7; *(uint64_t*)0x20e42010 = 0x29; *(uint64_t*)0x20e42018 = 0x204a9f11; *(uint8_t*)0x20e42020 = 3; *(uint8_t*)0x20e42021 = 5; *(uint64_t*)0x20e42028 = 0; *(uint64_t*)0x20e42030 = 0; *(uint64_t*)0x20e42038 = 0; *(uint64_t*)0x20e42040 = 0; *(uint64_t*)0x20e42048 = 0; *(uint64_t*)0x20e42050 = 0; *(uint64_t*)0x20e42058 = 0; *(uint64_t*)0x20e42060 = 0; syscall(__NR_write, r[0], 0x20e42000, 0x68); } int main() { loop(); return 0; }