// https://syzkaller.appspot.com/bug?id=6a611b805567ae82feb9b5bb2bc8192cc5779c2c // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include long r[1]; void loop() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); memcpy((void*)0x203f3000, "/dev/vhost-net", 15); r[0] = syscall(__NR_openat, 0xffffffffffffff9c, 0x203f3000, 2, 0); *(uint32_t*)0x209e6f98 = 1; *(uint64_t*)0x209e6fa0 = 0x200bbf6a; *(uint64_t*)0x209e6fa8 = 0x96; *(uint64_t*)0x209e6fb0 = 0x204cdf2f; *(uint8_t*)0x209e6fb8 = 0; *(uint8_t*)0x209e6fb9 = 4; *(uint64_t*)0x209e6fc0 = 0; *(uint64_t*)0x209e6fc8 = 0; *(uint64_t*)0x209e6fd0 = 0; *(uint64_t*)0x209e6fd8 = 0; *(uint64_t*)0x209e6fe0 = 0; *(uint64_t*)0x209e6fe8 = 0; *(uint64_t*)0x209e6ff0 = 0; *(uint64_t*)0x209e6ff8 = 0; syscall(__NR_write, r[0], 0x209e6f98, 0x68); } int main() { loop(); return 0; }