map[SimplifiedCRepro:// autogenerated by syzkaller (https://github.com/google/syzkaller)
#define _GNU_SOURCE
#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/mount.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>
#ifndef __NR_bpf
#define __NR_bpf 321
#endif
#define BITMASK(bf_off,bf_len) (((1ull << (bf_len)) - 1) << (bf_off))
#define STORE_BY_BITMASK(type,htobe,addr,val,bf_off,bf_len) *(type*)(addr) = htobe((htobe(*(type*)(addr)) & ~BITMASK((bf_off), (bf_len))) | (((type)(val) << (bf_off)) & BITMASK((bf_off), (bf_len))))
uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff};
int main(void)
{
syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000ul, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
const char* reason;
(void)reason;
intptr_t res = 0;
if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {}
// socket arguments: [
// domain: socket_domain = 0xa (8 bytes)
// type: socket_type = 0x5 (8 bytes)
// proto: int32 = 0x0 (4 bytes)
// ]
// returns sock
res = syscall(__NR_socket, /*domain=AF_INET6*/0xaul, /*type=SOCK_SEQPACKET*/5ul, /*proto=*/0);
if (res != -1)
r[0] = res;
// bpf$PROG_LOAD arguments: [
// cmd: const = 0x5 (8 bytes)
// arg: ptr[in, bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]]] {
// bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]] {
// type: bpf_prog_type = 0x5 (4 bytes)
// ninsn: bytesize8 = 0x2c (4 bytes)
// insns: ptr[in, bpf_instructions] {
// union bpf_instructions {
// ringbuf: bpf_program_ringbuf {
// initr0: bpf_insn_init_r0 {
// code: const = 0x18 (1 bytes)
// dst: const = 0x0 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: int32 = 0x2 (4 bytes)
// code2: const = 0x0 (1 bytes)
// regs2: const = 0x0 (1 bytes)
// off2: const = 0x0 (2 bytes)
// imm2: int32 = 0x20 (4 bytes)
// }
// reserve: bpf_insn_ringbuf_reserve {
// insn1: bpf_insn_map_fd_t[const[BPF_REG_1, int8:4], ringbuf_map_fd] {
// code: const = 0x18 (1 bytes)
// dst: const = 0x1 (0 bytes)
// src: const = 0x1 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: ringbuf_map_fd (resource)
// code2: const = 0x0 (1 bytes)
// regs2: const = 0x0 (1 bytes)
// off2: const = 0x0 (2 bytes)
// imm2: const = 0x0 (4 bytes)
// }
// insn2: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_2, int8:4], const[0, int8:4], const[0, int16], const[20, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x2 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x14 (4 bytes)
// }
// insn3: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_3, int8:4], const[0, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x3 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn4: bpf_insn_call_helper_t[const[BPF_FUNC_ringbuf_reserve, int32]] {
// code: const = 0x85 (1 bytes)
// regs: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// func: const = 0x83 (4 bytes)
// }
// insn5: bpf_insn_alu_t[BPF_ALU64, BPF_X0, BPF_MOV0, const[BPF_REG_9, int8:4], const[BPF_REG_0, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x1 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x9 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// }
// null_check: bpf_insn_null_check[BPF_REG_9] {
// cond_jump: bpf_insn_not_null_jmp[BPF_REG_9] {
// code_class: const = 0x5 (0 bytes)
// code_s: const = 0x0 (0 bytes)
// code_op: const = 0x5 (1 bytes)
// dst: const = 0x9 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x1 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// exit: bpf_insn_exit {
// code: const = 0x95 (1 bytes)
// regs: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// }
// body: array[bpf_insn] {
// union bpf_insn {
// snprintf: bpf_insn_snprintf {
// insn1: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_8, int8:4], const[0, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x8 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn2: bpf_insn_ldst_t[BPF_STX, BPF_DW0, BPF_MEM0, const[BPF_REG_10, int8:4], const[BPF_REG_8, int8:4], const[-8, int16], const[0, int32]] {
// code_class: int8 = 0x3 (0 bytes)
// code_size: int8 = 0x3 (0 bytes)
// code_mode: int8 = 0x3 (1 bytes)
// dst: const = 0xa (0 bytes)
// src: const = 0x8 (1 bytes)
// off: const = 0xfff8 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn3: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_8, int8:4], const[0, int8:4], const[0, int16], int32] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x8 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: int32 = 0x9 (4 bytes)
// }
// insn4: bpf_insn_ldst_t[BPF_STX, BPF_DW0, BPF_MEM0, const[BPF_REG_10, int8:4], const[BPF_REG_8, int8:4], const[-16, int16], const[0, int32]] {
// code_class: int8 = 0x3 (0 bytes)
// code_size: int8 = 0x3 (0 bytes)
// code_mode: int8 = 0x3 (1 bytes)
// dst: const = 0xa (0 bytes)
// src: const = 0x8 (1 bytes)
// off: const = 0xfff0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn5: bpf_insn_alu_t[BPF_ALU64, BPF_X0, BPF_MOV0, const[BPF_REG_1, int8:4], const[BPF_REG_10, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x1 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x1 (0 bytes)
// src: const = 0xa (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn6: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_ADD0, const[BPF_REG_1, int8:4], const[0, int8:4], const[0, int16], const[-8, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0x0 (1 bytes)
// dst: const = 0x1 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0xfffffff8 (4 bytes)
// }
// insn7: bpf_insn_alu_t[BPF_ALU64, BPF_X0, BPF_MOV0, const[BPF_REG_4, int8:4], const[BPF_REG_10, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x1 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x4 (0 bytes)
// src: const = 0xa (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn8: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_ADD0, const[BPF_REG_4, int8:4], const[0, int8:4], const[0, int16], const[-16, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0x0 (1 bytes)
// dst: const = 0x4 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0xfffffff0 (4 bytes)
// }
// insn9: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_2, int8:4], const[0, int8:4], const[0, int16], const[8, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x2 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x8 (4 bytes)
// }
// insn10: bpf_insn_map_value_t[const[BPF_REG_3, int8:4], bpf_frozen_const_str, const[0, int32]] {
// code: const = 0x18 (1 bytes)
// dst: const = 0x3 (0 bytes)
// src: const = 0x2 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: bpf_frozen_const_str (resource)
// code2: const = 0x0 (1 bytes)
// regs2: const = 0x0 (1 bytes)
// off2: const = 0x0 (2 bytes)
// imm2: const = 0x0 (4 bytes)
// }
// insn11: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_5, int8:4], const[0, int8:4], const[0, int16], const[8, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x5 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x8 (4 bytes)
// }
// insn12: bpf_insn_call_helper_t[const[BPF_FUNC_snprintf, int32]] {
// code: const = 0x85 (1 bytes)
// regs: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// func: const = 0xa5 (4 bytes)
// }
// }
// }
// union bpf_insn {
// alu: bpf_insn_alu_t[bpf_alu_insn, bpf_alu_source, bpf_alu_op, flags[bpf_reg, int8:4], flags[bpf_reg, int8:4], flags[bpf_insn_offsets, int16], flags[bpf_insn_immediates, int32]] {
// code_class: bpf_alu_insn = 0x7 (0 bytes)
// code_s: bpf_alu_source = 0x1 (0 bytes)
// code_op: bpf_alu_op = 0x9 (1 bytes)
// dst: bpf_reg = 0x5 (0 bytes)
// src: bpf_reg = 0x2 (1 bytes)
// off: bpf_insn_offsets = 0xfffffffffffffffc (2 bytes)
// imm: bpf_insn_immediates = 0xfffffffffffffffc (4 bytes)
// }
// }
// union bpf_insn {
// cb_func: bpf_insn_cb_func {
// code: const = 0x18 (1 bytes)
// dst: bpf_reg = 0x4 (0 bytes)
// src: const = 0x4 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: int32 = 0x7 (4 bytes)
// code2: const = 0x0 (1 bytes)
// regs2: const = 0x0 (1 bytes)
// off2: const = 0x0 (2 bytes)
// imm2: const = 0x0 (4 bytes)
// }
// }
// union bpf_insn {
// ringbuf_query: bpf_insn_ringbuf_query {
// insn1: bpf_insn_map_fd_t[const[BPF_REG_1, int8:4], tail_call_map] {
// code: const = 0x18 (1 bytes)
// dst: const = 0x1 (0 bytes)
// src: const = 0x1 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: tail_call_map (resource)
// code2: const = 0x0 (1 bytes)
// regs2: const = 0x0 (1 bytes)
// off2: const = 0x0 (2 bytes)
// imm2: const = 0x0 (4 bytes)
// }
// insn2: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_2, int8:4], const[0, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x2 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn3: bpf_insn_call_helper_t[const[BPF_FUNC_ringbuf_query, int32]] {
// code: const = 0x85 (1 bytes)
// regs: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// func: const = 0x86 (4 bytes)
// }
// }
// }
// union bpf_insn {
// ringbuf_output: bpf_insn_ringbuf_output {
// insn1: bpf_insn_map_fd_t[const[BPF_REG_1, int8:4], tail_call_map] {
// code: const = 0x18 (1 bytes)
// dst: const = 0x1 (0 bytes)
// src: const = 0x1 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: tail_call_map (resource)
// code2: const = 0x0 (1 bytes)
// regs2: const = 0x0 (1 bytes)
// off2: const = 0x0 (2 bytes)
// imm2: const = 0x0 (4 bytes)
// }
// insn2: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_8, int8:4], const[0, int8:4], const[0, int16], int32] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x8 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: int32 = 0x10000 (4 bytes)
// }
// insn3: bpf_insn_ldst_t[BPF_STX, BPF_DW0, BPF_MEM0, const[BPF_REG_10, int8:4], const[BPF_REG_8, int8:4], const[-8, int16], const[0, int32]] {
// code_class: int8 = 0x3 (0 bytes)
// code_size: int8 = 0x3 (0 bytes)
// code_mode: int8 = 0x3 (1 bytes)
// dst: const = 0xa (0 bytes)
// src: const = 0x8 (1 bytes)
// off: const = 0xfff8 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn4: bpf_insn_alu_t[BPF_ALU64, BPF_X0, BPF_MOV0, const[BPF_REG_2, int8:4], const[BPF_REG_10, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x1 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x2 (0 bytes)
// src: const = 0xa (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn5: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_ADD0, const[BPF_REG_2, int8:4], const[0, int8:4], const[0, int16], const[-8, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0x0 (1 bytes)
// dst: const = 0x2 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0xfffffff8 (4 bytes)
// }
// insn6: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_3, int8:4], const[0, int8:4], const[0, int16], const[8, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x3 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x8 (4 bytes)
// }
// insn7: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_4, int8:4], const[0, int8:4], const[0, int16], flags[bpf_ringbuf_wakeup_flags, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x4 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: bpf_ringbuf_wakeup_flags = 0x0 (4 bytes)
// }
// insn8: bpf_insn_call_helper_t[const[BPF_FUNC_ringbuf_output, int32]] {
// code: const = 0x85 (1 bytes)
// regs: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// func: const = 0x82 (4 bytes)
// }
// }
// }
// }
// free: bpf_insn_ringbuf_free {
// insn1: bpf_insn_alu_t[BPF_ALU64, BPF_X0, BPF_MOV0, const[BPF_REG_1, int8:4], const[BPF_REG_9, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x1 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x1 (0 bytes)
// src: const = 0x9 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// insn2: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_2, int8:4], const[0, int8:4], const[0, int16], flags[bpf_ringbuf_wakeup_flags, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x2 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: bpf_ringbuf_wakeup_flags = 0x1 (4 bytes)
// }
// insn3: bpf_insn_call_helper_t[flags[bpf_helpers_ringbuf_free, int32]] {
// code: const = 0x85 (1 bytes)
// regs: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// func: bpf_helpers_ringbuf_free = 0x85 (4 bytes)
// }
// insn4: bpf_insn_alu_t[BPF_ALU64, BPF_K0, BPF_MOV0, const[BPF_REG_0, int8:4], const[0, int8:4], const[0, int16], const[0, int32]] {
// code_class: int8 = 0x7 (0 bytes)
// code_s: int8 = 0x0 (0 bytes)
// code_op: int8 = 0xb (1 bytes)
// dst: const = 0x0 (0 bytes)
// src: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// }
// exit: bpf_insn_exit {
// code: const = 0x95 (1 bytes)
// regs: const = 0x0 (1 bytes)
// off: const = 0x0 (2 bytes)
// imm: const = 0x0 (4 bytes)
// }
// }
// }
// }
// license: nil
// loglev: int32 = 0x8 (4 bytes)
// logsize: len = 0x0 (4 bytes)
// log: nil
// kern_version: bpf_kern_version = 0x41100 (4 bytes)
// flags: bpf_prog_load_flags = 0x2 (4 bytes)
// prog_name: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00} (length 0x10)
// prog_ifindex: ifindex (resource)
// expected_attach_type: union bpf_prog_attach_types {
// fallback: bpf_attach_types = 0x0 (4 bytes)
// }
// btf_fd: fd_btf (resource)
// func_info_rec_size: const = 0x8 (4 bytes)
// func_info: nil
// func_info_cnt: len = 0x0 (4 bytes)
// line_info_rec_size: const = 0x10 (4 bytes)
// line_info: nil
// line_info_cnt: len = 0x0 (4 bytes)
// attach_btf_id: bpf_btf_id (resource)
// attach_prog_fd: fd_bpf_prog (resource)
// core_relo_cnt: len = 0x0 (4 bytes)
// fd_array: nil
// core_relos: nil
// core_relo_rec_size: const = 0x10 (4 bytes)
// log_true_size: int32 = 0x1 (4 bytes)
// prog_token_fd: union _bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]]_prog_token_fd_wrapper {
// void: buffer: {} (length 0x0)
// }
// pad: union _bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]]_pad_wrapper {
// value: const = 0x0 (4 bytes)
// }
// }
// }
// size: len = 0x90 (8 bytes)
// ]
// returns fd_bpf_prog
*(uint32_t*)0x200000000c40 = 5;
*(uint32_t*)0x200000000c44 = 0x2c;
*(uint64_t*)0x200000000c48 = 0x200000000080;
*(uint8_t*)0x200000000080 = 0x18;
STORE_BY_BITMASK(uint8_t, , 0x200000000081, 0, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000081, 0, 4, 4);
*(uint16_t*)0x200000000082 = 0;
*(uint32_t*)0x200000000084 = 2;
*(uint8_t*)0x200000000088 = 0;
*(uint8_t*)0x200000000089 = 0;
*(uint16_t*)0x20000000008a = 0;
*(uint32_t*)0x20000000008c = 0x20;
*(uint8_t*)0x200000000090 = 0x18;
STORE_BY_BITMASK(uint8_t, , 0x200000000091, 1, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000091, 1, 4, 4);
*(uint16_t*)0x200000000092 = 0;
*(uint32_t*)0x200000000094 = -1;
*(uint8_t*)0x200000000098 = 0;
*(uint8_t*)0x200000000099 = 0;
*(uint16_t*)0x20000000009a = 0;
*(uint32_t*)0x20000000009c = 0;
STORE_BY_BITMASK(uint8_t, , 0x2000000000a0, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000a0, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000000a0, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000a1, 2, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000a1, 0, 4, 4);
*(uint16_t*)0x2000000000a2 = 0;
*(uint32_t*)0x2000000000a4 = 0x14;
STORE_BY_BITMASK(uint8_t, , 0x2000000000a8, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000a8, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000000a8, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000a9, 3, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000a9, 0, 4, 4);
*(uint16_t*)0x2000000000aa = 0;
*(uint32_t*)0x2000000000ac = 0;
*(uint8_t*)0x2000000000b0 = 0x85;
*(uint8_t*)0x2000000000b1 = 0;
*(uint16_t*)0x2000000000b2 = 0;
*(uint32_t*)0x2000000000b4 = 0x83;
STORE_BY_BITMASK(uint8_t, , 0x2000000000b8, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000b8, 1, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000000b8, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000b9, 9, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000b9, 0, 4, 4);
*(uint16_t*)0x2000000000ba = 0;
*(uint32_t*)0x2000000000bc = 0;
STORE_BY_BITMASK(uint8_t, , 0x2000000000c0, 5, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000c0, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000000c0, 5, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000c1, 9, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000c1, 0, 4, 4);
*(uint16_t*)0x2000000000c2 = 1;
*(uint32_t*)0x2000000000c4 = 0;
*(uint8_t*)0x2000000000c8 = 0x95;
*(uint8_t*)0x2000000000c9 = 0;
*(uint16_t*)0x2000000000ca = 0;
*(uint32_t*)0x2000000000cc = 0;
STORE_BY_BITMASK(uint8_t, , 0x2000000000d0, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000d0, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000000d0, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000d1, 8, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000d1, 0, 4, 4);
*(uint16_t*)0x2000000000d2 = 0;
*(uint32_t*)0x2000000000d4 = 0;
STORE_BY_BITMASK(uint8_t, , 0x2000000000d8, 3, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000d8, 3, 3, 2);
STORE_BY_BITMASK(uint8_t, , 0x2000000000d8, 3, 5, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000d9, 0xa, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000d9, 8, 4, 4);
*(uint16_t*)0x2000000000da = 0xfff8;
*(uint32_t*)0x2000000000dc = 0;
STORE_BY_BITMASK(uint8_t, , 0x2000000000e0, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000e0, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000000e0, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000e1, 8, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000e1, 0, 4, 4);
*(uint16_t*)0x2000000000e2 = 0;
*(uint32_t*)0x2000000000e4 = 9;
STORE_BY_BITMASK(uint8_t, , 0x2000000000e8, 3, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000e8, 3, 3, 2);
STORE_BY_BITMASK(uint8_t, , 0x2000000000e8, 3, 5, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000e9, 0xa, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000e9, 8, 4, 4);
*(uint16_t*)0x2000000000ea = 0xfff0;
*(uint32_t*)0x2000000000ec = 0;
STORE_BY_BITMASK(uint8_t, , 0x2000000000f0, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000f0, 1, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000000f0, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000f1, 1, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000f1, 0xa, 4, 4);
*(uint16_t*)0x2000000000f2 = 0;
*(uint32_t*)0x2000000000f4 = 0;
STORE_BY_BITMASK(uint8_t, , 0x2000000000f8, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000000f8, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000000f8, 0, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000f9, 1, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000000f9, 0, 4, 4);
*(uint16_t*)0x2000000000fa = 0;
*(uint32_t*)0x2000000000fc = 0xfffffff8;
STORE_BY_BITMASK(uint8_t, , 0x200000000100, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000100, 1, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000100, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000101, 4, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000101, 0xa, 4, 4);
*(uint16_t*)0x200000000102 = 0;
*(uint32_t*)0x200000000104 = 0;
STORE_BY_BITMASK(uint8_t, , 0x200000000108, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000108, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000108, 0, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000109, 4, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000109, 0, 4, 4);
*(uint16_t*)0x20000000010a = 0;
*(uint32_t*)0x20000000010c = 0xfffffff0;
STORE_BY_BITMASK(uint8_t, , 0x200000000110, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000110, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000110, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000111, 2, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000111, 0, 4, 4);
*(uint16_t*)0x200000000112 = 0;
*(uint32_t*)0x200000000114 = 8;
*(uint8_t*)0x200000000118 = 0x18;
STORE_BY_BITMASK(uint8_t, , 0x200000000119, 3, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000119, 2, 4, 4);
*(uint16_t*)0x20000000011a = 0;
*(uint32_t*)0x20000000011c = -1;
*(uint8_t*)0x200000000120 = 0;
*(uint8_t*)0x200000000121 = 0;
*(uint16_t*)0x200000000122 = 0;
*(uint32_t*)0x200000000124 = 0;
STORE_BY_BITMASK(uint8_t, , 0x200000000128, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000128, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000128, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000129, 5, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000129, 0, 4, 4);
*(uint16_t*)0x20000000012a = 0;
*(uint32_t*)0x20000000012c = 8;
*(uint8_t*)0x200000000130 = 0x85;
*(uint8_t*)0x200000000131 = 0;
*(uint16_t*)0x200000000132 = 0;
*(uint32_t*)0x200000000134 = 0xa5;
STORE_BY_BITMASK(uint8_t, , 0x200000000138, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000138, 1, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000138, 9, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000139, 5, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000139, 2, 4, 4);
*(uint16_t*)0x20000000013a = 0xfffc;
*(uint32_t*)0x20000000013c = 0xfffffffc;
*(uint8_t*)0x200000000140 = 0x18;
STORE_BY_BITMASK(uint8_t, , 0x200000000141, 4, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000141, 4, 4, 4);
*(uint16_t*)0x200000000142 = 0;
*(uint32_t*)0x200000000144 = 7;
*(uint8_t*)0x200000000148 = 0;
*(uint8_t*)0x200000000149 = 0;
*(uint16_t*)0x20000000014a = 0;
*(uint32_t*)0x20000000014c = 0;
*(uint8_t*)0x200000000150 = 0x18;
STORE_BY_BITMASK(uint8_t, , 0x200000000151, 1, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000151, 1, 4, 4);
*(uint16_t*)0x200000000152 = 0;
*(uint32_t*)0x200000000154 = -1;
*(uint8_t*)0x200000000158 = 0;
*(uint8_t*)0x200000000159 = 0;
*(uint16_t*)0x20000000015a = 0;
*(uint32_t*)0x20000000015c = 0;
STORE_BY_BITMASK(uint8_t, , 0x200000000160, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000160, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000160, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000161, 2, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000161, 0, 4, 4);
*(uint16_t*)0x200000000162 = 0;
*(uint32_t*)0x200000000164 = 0;
*(uint8_t*)0x200000000168 = 0x85;
*(uint8_t*)0x200000000169 = 0;
*(uint16_t*)0x20000000016a = 0;
*(uint32_t*)0x20000000016c = 0x86;
*(uint8_t*)0x200000000170 = 0x18;
STORE_BY_BITMASK(uint8_t, , 0x200000000171, 1, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000171, 1, 4, 4);
*(uint16_t*)0x200000000172 = 0;
*(uint32_t*)0x200000000174 = -1;
*(uint8_t*)0x200000000178 = 0;
*(uint8_t*)0x200000000179 = 0;
*(uint16_t*)0x20000000017a = 0;
*(uint32_t*)0x20000000017c = 0;
STORE_BY_BITMASK(uint8_t, , 0x200000000180, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000180, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000180, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000181, 8, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000181, 0, 4, 4);
*(uint16_t*)0x200000000182 = 0;
*(uint32_t*)0x200000000184 = 0x10000;
STORE_BY_BITMASK(uint8_t, , 0x200000000188, 3, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000188, 3, 3, 2);
STORE_BY_BITMASK(uint8_t, , 0x200000000188, 3, 5, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000189, 0xa, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000189, 8, 4, 4);
*(uint16_t*)0x20000000018a = 0xfff8;
*(uint32_t*)0x20000000018c = 0;
STORE_BY_BITMASK(uint8_t, , 0x200000000190, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000190, 1, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000190, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000191, 2, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000191, 0xa, 4, 4);
*(uint16_t*)0x200000000192 = 0;
*(uint32_t*)0x200000000194 = 0;
STORE_BY_BITMASK(uint8_t, , 0x200000000198, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x200000000198, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x200000000198, 0, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000199, 2, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x200000000199, 0, 4, 4);
*(uint16_t*)0x20000000019a = 0;
*(uint32_t*)0x20000000019c = 0xfffffff8;
STORE_BY_BITMASK(uint8_t, , 0x2000000001a0, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000001a0, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000001a0, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001a1, 3, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001a1, 0, 4, 4);
*(uint16_t*)0x2000000001a2 = 0;
*(uint32_t*)0x2000000001a4 = 8;
STORE_BY_BITMASK(uint8_t, , 0x2000000001a8, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000001a8, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000001a8, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001a9, 4, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001a9, 0, 4, 4);
*(uint16_t*)0x2000000001aa = 0;
*(uint32_t*)0x2000000001ac = 0;
*(uint8_t*)0x2000000001b0 = 0x85;
*(uint8_t*)0x2000000001b1 = 0;
*(uint16_t*)0x2000000001b2 = 0;
*(uint32_t*)0x2000000001b4 = 0x82;
STORE_BY_BITMASK(uint8_t, , 0x2000000001b8, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000001b8, 1, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000001b8, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001b9, 1, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001b9, 9, 4, 4);
*(uint16_t*)0x2000000001ba = 0;
*(uint32_t*)0x2000000001bc = 0;
STORE_BY_BITMASK(uint8_t, , 0x2000000001c0, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000001c0, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000001c0, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001c1, 2, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001c1, 0, 4, 4);
*(uint16_t*)0x2000000001c2 = 0;
*(uint32_t*)0x2000000001c4 = 1;
*(uint8_t*)0x2000000001c8 = 0x85;
*(uint8_t*)0x2000000001c9 = 0;
*(uint16_t*)0x2000000001ca = 0;
*(uint32_t*)0x2000000001cc = 0x85;
STORE_BY_BITMASK(uint8_t, , 0x2000000001d0, 7, 0, 3);
STORE_BY_BITMASK(uint8_t, , 0x2000000001d0, 0, 3, 1);
STORE_BY_BITMASK(uint8_t, , 0x2000000001d0, 0xb, 4, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001d1, 0, 0, 4);
STORE_BY_BITMASK(uint8_t, , 0x2000000001d1, 0, 4, 4);
*(uint16_t*)0x2000000001d2 = 0;
*(uint32_t*)0x2000000001d4 = 0;
*(uint8_t*)0x2000000001d8 = 0x95;
*(uint8_t*)0x2000000001d9 = 0;
*(uint16_t*)0x2000000001da = 0;
*(uint32_t*)0x2000000001dc = 0;
*(uint64_t*)0x200000000c50 = 0;
*(uint32_t*)0x200000000c58 = 8;
*(uint32_t*)0x200000000c5c = 0;
*(uint64_t*)0x200000000c60 = 0;
*(uint32_t*)0x200000000c68 = 0x41100;
*(uint32_t*)0x200000000c6c = 2;
memset((void*)0x200000000c70, 0, 16);
*(uint32_t*)0x200000000c80 = 0;
*(uint32_t*)0x200000000c84 = 0;
*(uint32_t*)0x200000000c88 = -1;
*(uint32_t*)0x200000000c8c = 8;
*(uint64_t*)0x200000000c90 = 0;
*(uint32_t*)0x200000000c98 = 0;
*(uint32_t*)0x200000000c9c = 0x10;
*(uint64_t*)0x200000000ca0 = 0;
*(uint32_t*)0x200000000ca8 = 0;
*(uint32_t*)0x200000000cac = 0;
*(uint32_t*)0x200000000cb0 = -1;
*(uint32_t*)0x200000000cb4 = 0;
*(uint64_t*)0x200000000cb8 = 0;
*(uint64_t*)0x200000000cc0 = 0;
*(uint32_t*)0x200000000cc8 = 0x10;
*(uint32_t*)0x200000000ccc = 1;
*(uint32_t*)0x200000000cd0 = 0;
syscall(__NR_bpf, /*cmd=*/5ul, /*arg=*/0x200000000c40ul, /*size=*/0x90ul);
// ioctl$ifreq_SIOCGIFINDEX_team arguments: [
// fd: sock (resource)
// cmd: const = 0x8933 (4 bytes)
// arg: ptr[out, ifreq_dev_t["team0", ifindex_team]] {
// ifreq_dev_t["team0", ifindex_team] {
// ifr_ifrn: buffer: {74 65 61 6d 30 00 00 00 00 00 00 00 00 00 00 00} (length 0x10)
// elem: ifindex_team (resource)
// pad = 0x0 (20 bytes)
// }
// }
// ]
memcpy((void*)0x200000000600, "team0\000\000\000\000\000\000\000\000\000\000\000", 16);
syscall(__NR_ioctl, /*fd=*/r[0], /*cmd=*/0x8933, /*arg=*/0x200000000600ul);
// socket$netlink arguments: [
// domain: const = 0x10 (8 bytes)
// type: const = 0x3 (8 bytes)
// proto: netlink_proto = 0x0 (4 bytes)
// ]
// returns sock_netlink
res = syscall(__NR_socket, /*domain=*/0x10ul, /*type=*/3ul, /*proto=*/0);
if (res != -1)
r[1] = res;
// sendmsg$nl_route_sched arguments: [
// fd: sock_nl_route (resource)
// msg: ptr[in, msghdr_netlink[netlink_msg_route_sched]] {
// msghdr_netlink[netlink_msg_route_sched] {
// addr: nil
// addrlen: len = 0x0 (4 bytes)
// pad = 0x0 (4 bytes)
// vec: ptr[in, iovec[in, netlink_msg_route_sched]] {
// iovec[in, netlink_msg_route_sched] {
// addr: ptr[in, netlink_msg_route_sched] {
// union netlink_msg_route_sched {
// newqdisc: netlink_msg_t[const[RTM_NEWQDISC, int16], tcmsg[AF_UNSPEC], rtm_tca_policy] {
// len: len = 0x0 (4 bytes)
// type: const = 0x24 (2 bytes)
// flags: netlink_msg_flags = 0x0 (2 bytes)
// seq: int32 = 0x0 (4 bytes)
// pid: int32 = 0x0 (4 bytes)
// payload: tcmsg[AF_UNSPEC] {
// family: const = 0x0 (1 bytes)
// tcm__pad1: const = 0x0 (1 bytes)
// tcm__pad2: const = 0x0 (2 bytes)
// ifindex: ifindex (resource)
// tcm_handle: tcm_handle {
// minor: tcm_handle_offsets = 0x0 (2 bytes)
// major: tcm_handle_offsets = 0x0 (2 bytes)
// }
// tcm_parent: tcm_handle {
// minor: tcm_handle_offsets = 0x0 (2 bytes)
// major: tcm_handle_offsets = 0x0 (2 bytes)
// }
// tcm_info: tcm_handle {
// minor: tcm_handle_offsets = 0x0 (2 bytes)
// major: tcm_handle_offsets = 0x0 (2 bytes)
// }
// }
// attrs: array[rtm_tca_policy] {
// }
// }
// }
// }
// len: len = 0xa4 (8 bytes)
// }
// }
// vlen: const = 0x1 (8 bytes)
// ctrl: const = 0x0 (8 bytes)
// ctrllen: const = 0x0 (8 bytes)
// f: send_flags = 0x0 (4 bytes)
// pad = 0x0 (4 bytes)
// }
// }
// f: send_flags = 0x0 (8 bytes)
// ]
*(uint64_t*)0x2000000007c0 = 0;
*(uint32_t*)0x2000000007c8 = 0;
*(uint64_t*)0x2000000007d0 = 0x200000000780;
*(uint64_t*)0x200000000780 = 0x200000000000;
*(uint32_t*)0x200000000000 = 0;
*(uint16_t*)0x200000000004 = 0x24;
*(uint16_t*)0x200000000006 = 0;
*(uint32_t*)0x200000000008 = 0;
*(uint32_t*)0x20000000000c = 0;
*(uint8_t*)0x200000000010 = 0;
*(uint8_t*)0x200000000011 = 0;
*(uint16_t*)0x200000000012 = 0;
*(uint32_t*)0x200000000014 = 0;
*(uint16_t*)0x200000000018 = 0;
*(uint16_t*)0x20000000001a = 0;
*(uint16_t*)0x20000000001c = 0;
*(uint16_t*)0x20000000001e = 0;
*(uint16_t*)0x200000000020 = 0;
*(uint16_t*)0x200000000022 = 0;
*(uint64_t*)0x200000000788 = 0xa4;
*(uint64_t*)0x2000000007d8 = 1;
*(uint64_t*)0x2000000007e0 = 0;
*(uint64_t*)0x2000000007e8 = 0;
*(uint32_t*)0x2000000007f0 = 0;
syscall(__NR_sendmsg, /*fd=*/r[1], /*msg=*/0x2000000007c0ul, /*f=*/0ul);
return 0;
}
]