// https://syzkaller.appspot.com/bug?id=c7ac769bd7ee15549b8a2be188bcee07d98a5357 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #define __syscall syscall uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x1012ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x200001c0, "./bus\000", 6); syscall(SYS_mknod, 0x200001c0ul, 0x2000ul, 0x4086334); /* major = 99, minor = 264244 */ *(uint32_t*)0x200000c0 = 6; *(uint64_t*)0x200000c8 = 0x20000080; *(uint16_t*)0x20000080 = 0; *(uint8_t*)0x20000082 = 0; *(uint8_t*)0x20000083 = 0; *(uint32_t*)0x20000084 = 0; *(uint16_t*)0x20000088 = 0; *(uint8_t*)0x2000008a = 0; *(uint8_t*)0x2000008b = 0; *(uint32_t*)0x2000008c = 0; *(uint16_t*)0x20000090 = 0; *(uint8_t*)0x20000092 = 0; *(uint8_t*)0x20000093 = 0; *(uint32_t*)0x20000094 = 0; *(uint16_t*)0x20000098 = 0; *(uint8_t*)0x2000009a = 0; *(uint8_t*)0x2000009b = 0; *(uint32_t*)0x2000009c = 0; *(uint16_t*)0x200000a0 = 0; *(uint8_t*)0x200000a2 = 0; *(uint8_t*)0x200000a3 = 0; *(uint32_t*)0x200000a4 = 0; *(uint16_t*)0x200000a8 = 0x210; *(uint8_t*)0x200000aa = 0; *(uint8_t*)0x200000ab = 0; *(uint32_t*)0x200000ac = 0; syscall(SYS_ioctl, -1, 0x80104277ul, 0x200000c0ul); memcpy((void*)0x20000000, "./bus\000", 6); res = syscall(SYS_open, 0x20000000ul, 0ul, 0ul); if (res != -1) r[0] = res; *(uint64_t*)0x20000180 = 0; *(uint32_t*)0x20000188 = 0; *(uint64_t*)0x20000190 = 0; *(uint64_t*)0x20000198 = 0; *(uint64_t*)0x200001a0 = 0; *(uint64_t*)0x200001a8 = 0x210; *(uint32_t*)0x200001b0 = 0; syscall(SYS_sendmsg, -1, 0x20000180ul, 0ul); memcpy((void*)0x20000040, "\x34\xcf\x36\x2b\x3c\xe9\xc9\x3d\x7f", 9); syscall(SYS_write, -1, 0x20000040ul, 9ul); *(uint64_t*)0x20003580 = 0x20000200; memcpy( (void*)0x20000200, "\x5f\x17\xa1\xa7\xc5\x4d\xbf\xd7\x43\x10\xb1\x07\xf7\x1d\x84\x4e\x27\x9f" "\x94\x38\x85\x02\xc4\x08\x11\xfa\xec\xcb\x58\x34\x20\xaa\x94\x2f\xd1\x2b" "\xa4\xf1\x84\x56\x2b\xc6\xc7\x87\xd9\xe4\xd1\x09\x8f\xe6\xda\x70\x5e\x83" "\x6a\x9b\x67\x2c\xa5\xec\xe4\x2a\x9a\x7f\x33\x0f\x69\xf3\x9c\xb6\xd3\x85" "\xc2\x70\x76\xfc\xdc\x90\x71\x6f\x9a\xfb\xfc\x87\x6c\x22\x76\x28\x33\x62" "\xa3\x7c\x50\x24\xd9\xc4\xab\xff\x64\x29\x8a\xf8\xfe\x36\x90\x21\x0d\xa2" "\x33\x47\x21\x1d\xe8\x21\x65\xa8\xfa\x1d\x3e\x54\x37\x4e\xbc\xd7\x03\xbf" "\x2c\x67\xaa\x27\xe0\x70\x6c\xa2\x5a\x87\x13\x4d\xbd\x60\xa6\xbb\x18\x3a" "\xcb\xd9\x6a\x80\x7e\x1a\x7b\xc9\xd4\xbc\x7e\x9b\x79\xb5\x01\xe4\xfe\x86" "\xc6\x5d\x7f\x62\x62\x6f\xef\x3e\xf7\x4e\xdc\x9b\x8f\x00\x1c\xc3\x31\x24" "\xf9\x92\xc0\x8a\xf2\xe5\xc4\x4c\xb2\x27\x03\x60\x26\x5f\xf7\xf8\xab\x49" "\x2a\x28\xe3\x2a\x41\x98\x23\x79\xd7\xe3\x1c\x80\x7f\xa7\xb7\xed\x3c\xc9" "\xb2\xae\x52\x0a\xd2\x22\x5b\x90\x85\x03\x90\xf1\x94\xfb\x59\x60\xb9\x72" "\x93\x02\xb5\x06\x00\xa0\xde\xae\x73\x2a\xe0\xad\xf6\xf3\x08\x2c\x39\xdd" "\x6d\x8d\x0a\x8b\x7d\x12\x64\xc3\x6a\x65\xe4\x7a\x22\x53\x15\x7c\x68\xdb" "\x4c\xa4\xe2\xb1\x73\xd0\x68\x34\xe8\xf7\xb9\xdf\x65\x93\x13\x5b\xd9\x3e" "\x08\xc8\x5f\x04\xbe\x12\x1f\xf0\x05\xb3\xa9\x63\x14\xbd\x91\x49\xdc\xfe" "\x87\x65\xc6\xb6\x80\x1c\x2b\x35\x8e\x0f\x04\x87\x0b\xea\x98\x4d\x5e\x11" "\x97\x94\x01\xef\x8b\x2f\xc6\xa6\x2b\x22\x0d\x91\x39\x68\x76\x2f\xfe\x57" "\x02\x18\x35\xff\xf7\x5f\x87\xaa\x3b\x85\xa5\xe3\xaa\xd4\x7d\xda\xd1\xd3" "\x89\xdf\x9c\x0a\x07\xea\x27\xb3\x38\x96\x79\x2a\x04\xf6\xa9\x4f\xf2\x9a" "\x02\x3a\xc8\x6a\x23\xa3\x2b\x38\xe0\xe9\x45\x23\x93\xef\x8c\x32\x03\x96" "\xab\x19\x56\xbc\x40\xc4\x9e\xe6\x6d\x56\xef\x3b\xe6\x16\x87\xf5\x6a\xa6" "\x37\xcb\xd8\x13\xf3\xcc\x72\xa6\xc5\xbe\xdd\xb7\xcf\xc4\x68\x10\x66\x7d" "\x92\x8b\xfe\x62\x07\x53\xfe\xbb\x46\x88\x0a\xa6\xaa\xb8\x54\xce\x9b\xac" "\x24\xe5\xfb\xca\x76\x6c\x0d\x93\x4f\xc1\xbb\x89\xc7\xd8\x8e\xec\x0c\xde" "\xd5\xc7\xb5\x03\xc8\x12\xba\xef\x07\x21\xe8\xbd\x6d\x20\xc3\xaa\x46\x74" "\x17\x21\xda\x8e\xa4\x51\x6f\x4f\x9b\x44\x42\x39\xb4\x0c\x4d\xbc\x28\x02" "\xe4\xc5\xad\x0e\x9d\xbe\x0f\xbb\x71\x26\x2d\xd2\x19\x62\xe4\xc0\x63\x62" "\x88\xf3\x98\x87\xdb\x45\x82\x06\xd2\xd9\xaf\x0b\x3b\xd0\x1c\x4e\x8c\xc0" "\xee\xf6\x5c\x06\x69\x6f\xf4\x0d\xc8\xfb\x4f\xee\x65\x79\xfe\xb1\xd6\xd8" "\x89\xbd\x32\x79\x4f\x10\x27\xcc\xb1\x82\x71\x10\x12\x8f\x55\x2a\x05\x6f" "\xd4\xb5\xaa\x31\x47\xfd\xa6\x67\xb3\x74\x68\x20\x12\x1d\x29\xc0\xe1\xbc" "\xa7\xd6\xf5\xd2\xd5\xf9\xa5\xd7\xeb\xff\x82\x1e\x50\x6d\xa9\xda\x0f\x3b" "\x7d\xbe\x2f\x45\x28\xe6\x06\xef\x7c\x0b\xf8\x63\x25\x39\x1c\x2f\xd6\x41" "\xe3\xe2\xce\x75\xaa\xf5\x3e\x28\x95\xbc\xe2\x09\xc2\x1e\x1c\x89\x4c\xd4" "\x15\xba\x22\xdb\x1e\x99\x73\xb2\x8a\x05\xa9\x3e\x6d\xaf\xbf\xfb\x1c\x32" "\x1f\xe7\xc0\x45\x99\x89\xcc\xa9\xb7\x3a\x9d\x41\xdc\xb2\xac\x5c\x12\x63" "\x85\xdc\x15\xd1\xc6\xd4\x9b\x60\xee\xe9\xcf\xf9\x21\x81\x33\x20\xe9\x41" "\xd4\x12\x7d\xf6\xb4\x88\x5b\x05\x8a\x8f\xdc\x53\x2b\x3e\xed\xcb\xd5\x3d" "\xf0\x00\x54\x1e\x03\x3a\x1e\xae\xbb\xca\x6a\x52\x80\xe7\xf1\x72\xff\x6e" "\x5d\x78\x81\x30\x4e\xc9\x50\x85\x72\x61\xab\x1f\x5b\xb4\x96\xd7\xa1\x41" "\xc4\xc2\x3d\xeb\xde\x58\x29\x1d\x07\x71\x33\x99\xcb\x09\x97\x34\x6e\xb0" "\x2b\x18\x41\xdc\x14\x89\xa9\x2d\xbe\x2b\x7f\xa2\x4a\x27\x65\xd9\xec\xd7" "\xa6\x28\xae\x3a\x1b\x9c\xe7\x01\xa4\x7a\xfe\x7e\x22\xd9\x33\x1f\xfb\x5e" "\xe6\xb0\x3a\xc5\xda\x78\x86\xe9\x16\xac\xfa\x04\xc4\x02\x9d\xb7\x84\xd1" "\xd4\x31\x69\x0e\xc1\xc3\x6b\xe4\x0b\x81\x2d\x6a\xf5\x05\x13\xc7\x96\x55" "\xcb\xe4\x1d\x48\xdf\x8a\xdf\x3d\xf1\xae\x93\xed\x51\xd5\xae\x1d\xa8\xa7" "\xd2\x45\x7f\x11\x3b\xd9\x4d\xf8\x4c\xbb\x54\x54\xda\xce\xc3\x32\x1e\x1d" "\xab\x78\x70\x65\xb5\xe9\x24\x8d\x79\x19\x4b\x55\x49\x01\x2c\x84\x3e\xda" "\x41\xf6\x31\xe9\x96\x78\xd9\xbe\xb3\xcf\x71\x71\xba\x69\x6f\x89\xd4\x9d" "\xa6\x78\x0a\xa4\xc9\x26\x62\x29\x83\x0c\x00\xe9\x17\x40\xd3\x6e\x9f\x4a" "\x2a\xe2\xd8\x4a\x09\xce\xd7\xd2\xf2\x42\xd9\xb6\x92\x9f\x59\x11\xb1\xa4" "\xbb\x99\x0d\xc0\x61\xba\xb5\x70\xa9\x18\x3a\xbf\xbc\x58\xd8\xbd\x8b\x3b" "\x0a\x10\xf4\x0d\xa8\xf6\x21\xb9\x7f\x04\x54\x7d\x29\xdf\x8e\xf3\xa9\x11" "\x6f\x00\x76\xd0\xea\x9a\x42\x97\x2a\xaa\xe0\xbe\x60\x15\x6c\xd7\xa4\x31" "\x36\x9e\x54\xcb\xcf\x71\x6b\x34\xdf\xd7\x7a\xdd\x07\xe2\xea\x34\xc7\x8a" "\xa3\x14\xe8\x8a\x80\x1b\xa3\xad\x1d\x92\x2e\x6e\xef\xc6\x24\xc9\x6b\x9f" "\x88\x6d\x6b\x72\xa0\x4c\x82\xbe\x41\xfe\xfb\x59\xd8\xa3\x88\x45\xf1\xdc" "\x46\xfa\x6a\xf5\xe9\x69\xc4\xe2\x74\x75\xee\xb1\x59\xd4\x46\xd8\xdd\xfc" "\x31\xb6\x4d\xed\xd1\x22\x82\x48\x99\x49\x93\x5d\x21\x12\x26\x9f\x90\x41" "\x09\xf4\x20\x6f\x76\xab\x48\x75\xcf\xb8\xa0\x34\x83\x11\x30\xa2\x14\xb1" "\x85\xa5\x10\x3c\x0a\x4b\x1b\xf9\xec\xc4\xfe\x55\x11\x1c\xe1\xea\x5d\x89" "\x63\x2b\xad\xa5\x1f\x2e\x1d\x76\xaa\x69\x47\xd9\x7b\x42\x4b\x36\xd5\x2c" "\xa1\x13\x2a\x73\x73\xc0\x54\x1b\x62\x23\x3f\x50\xf2\xd4\x13\x7c\x7b\x7b" "\x94\x65\xa7\xf3\x79\xa3\xfa\xa8\x07\x2e\xe9\xb9\x3f\x45\x26\x65\x9b\xb6" "\x87\x7a\x04\x5a\xec\x72\xc5\xdc\x44\x8c\xea\x64\xc8\xa7\xbf\x0c\x13\xa8" "\x67\x45\x22\x16\xe1\x5b\x69\x59\x3b\x80\xad\x02\x7e\x56\x74\xc1\xe5\x82" "\xf8\xb7\x94\x37\xa4\x06\x24\x86\xf4\xd1\xa0\x80\x5a\x1e\xa2\x8b\xce\x83" "\xb3\xca\x63\x9f\xcc\xd6\x17\x6b\x15\x3d\x43\xcb\xd9\x6a\x37\x4c\xba\xad" "\x8d\x1d\xc3\xfa\x06\x1f\x0f\x58\x49\x01\x92\x46\xdc\x00\xa6\x20\x5b\x05" "\x60\x70\xdb\xee\xd9\xf1\x0d\xac\x23\x18\x91\xf2\x3b\x00\xb9\x1d\xb4\xb1" "\x09\x62\xea\x92\xfd\xb7\x83\xa2\x9d\xd7\xce\x06\xd3\x03\x80\x6c\xbc\xd9" "\x52\xc7\xa4\x13\xfc\x47\xc5\xcb\x8b\x70\x89\x16\x3c\xec\x5a\x2d\xc2\x8b" "\x7f\x0f\x8a\x02\xc4\xd5\x47\x6a\x51\xb5\x55\x74\xe4\x4c\x2a\xdb\x05\x94" "\xa1\x2d\x82\xa4\x17\xf9\x0d\x2d\xd6\x19\x1f\x3b\x8b\x57\x1f\x5e\xfd\x04" "\xf7\xba\x5f\x10\x65\x54\x08\x41\xb5\xe0\xa9\x3e\x68\xcc\x4c\xc5\xee\x44" "\x2b\xbe\xde\x43\xd1\x90\xdf\x54\x72\x80\xd2\xd9\x9b\xa4\x7e\xbf\x57\xfc" "\x86\x44\x8a\x08\xa6\xac\x24\x42\x08\x50\x95\xa6\xc8\x2d\x89\xb5\x08\x26" "\xaf\x5c\x15\xb8\xc0\x25\x77\x38\xc2\xf1\xd2\xe6\xf4\x13\x81\x5c\xe2\xd4" "\x3f\xe6\x60\xa0\xe6\xd4\x5e\x6e\xa8\x0d\x70\x9d\x84\xb4\x9d\x5d\x8e\x06" "\xef\x7a\xf4\x79\x29\x97\x48\x3e\x48\x74\xfa\xed\x34\xbc\xaa\x47\xb9\xfa" "\xe6\x60\xa1\xb4\x00\x76\x6a\xbc\x29\x2c\x8c\x5a\x9d\x58\x7a\xef\xbc\x2a" "\xaa\x09\x10\x71\xd1\xdf\x8d\xee\x08\x50\x0b\x32\xac\xe2\x76\x8c\x07\x38" "\x03\xa7\x42\x66\x9a\xd4\x10\x87\x40\x86\xf4\xe9\xda\xe9\x44\xe3\x0f\x01" "\x72\x1d\xd6\x10\x29\xc4\xe3\x1e\x60\xe2\xc6\xe9\x4b\xbc\x29\xb5\x4b\xaf" "\xee\x33\xd8\x53\xb3\xb4\xa4\x6b\x91\x66\xbd\xd4\xbd\x4d\x8c\x49\xc0\x1b" "\xd7\x6a\x22\xb2\x7a\x25\x52\xba\x0f\x5c\x60\x28\x12\xd8\x17\xc7\x10\x28" "\x63\xde\x92\xd1\xcb\xf9\x90\x26\x26\x54\xbf\x34\x81\xf8\x17\xb3\xbd\x44" "\xc7\x04\x22\xa9\xba\x6b\xc0\x24\xeb\xb3\x41\xf5\xe6\x8b\x12\x39\x17\xf9" "\x4c\x71\xc9\x81\x05\xfd\x81\x1f\xdc\xf8\x62\x9e\xa4\xc3\x4f\x74\xe1\xa0" "\x7a\xa1\xb2\x15\x4c\x8d\x7e\x54\x1a\x2d\x0b\x20\x7f\x31\xac\xd4\x3e\xed" "\x11\x70\x02\x6c\xbd\xda\x9d\xa9\x33\x68\x9a\x64\x5d\x19\xd3\x05\x99\x68" "\x29\x1b\xdf\xfb\xba\x79\xb9\x00\x81\x6a\x1a\xe5\x4d\xc7\x5d\x16\x1b\x5b" "\xd8\x8a\x6e\x49\xa6\xa9\x15\xe1\x37\x9e\xd8\x53\x33\xdb\xdb\x14\x83\xf8" "\x08\x2b\x4a\x0e\x9f\x01\xd4\x6a\xe5\x8e\x10\xbd\xbf\xf5\x43\x95\xf1\xa7" "\xa8\xa9\xff\xdc\x3f\xf2\xce\x3a\xb4\x29\x29\xa5\xfd\x5d\x19\xe1\x61\xc9" "\x76\xd6\x71\x91\xca\xe8\x8d\x7c\xb9\xb6\xf3\xff\x59\x2d\x6e\xc8\xcb\xee" "\xaf\x11\x45\x0d\x2d\x50\xc1\xc4\xb4\xa1\x6a\x84\xcb\xa0\x98\x53\xd5\xef" "\x2f\x01\xe1\x0b\xd5\x2b\x1f\xd9\x1a\x37\xec\xdb\x3d\x7b\x64\xde\x43\x31" "\x56\xd5\xdd\xb6\xaa\xc1\x75\xf1\x6b\xa2\x2b\x73\x8b\x2e\x2e\x6e\xd3\x0a" "\x10\xb4\x09\x2a\xb4\x86\x55\x31\x0b\x19\x2c\x76\xe9\xb6\x8c\x51\x84\x31" "\x50\xe5\xa2\xcc\x3c\xc2\x32\xd4\x43\xf5\x45\xde\xe0\x13\xf3\x76\x77\xe4" "\x9e\x27\x94\x78\x1c\xd6\x9d\xa5\x64\xc8\x72\xe1\x01\x4c\x52\x45\xf2\x1e" "\xd3\xcc\x9d\x11\x06\xb5\xf0\x96\x6b\x67\x45\x47\xb9\xa2\x66\xc1\x79\xeb" "\x2a\x24\xa5\x6f\x89\x5b\x73\x40\xfd\x3a\x3c\x90\xa9\x6b\x00\x8e\x56\x4d" "\x2b\x65\x42\x17\x79\x80\x1c\x20\x90\xfe\xc1\xd7\x07\x5d\xe8\x23\x44\xa8" "\x1b\x04\xb9\x9d\xe1\x8c\x83\xfa\xc7\xf7\xd6\xf5\xf4\x19\x74\xe7\x1b\x98" "\xdb\xe1\xd2\x7b\xd0\x35\x6f\x9e\xc5\xe3\xdb\x86\xfe\xbb\x13\xd0\x6b\x74" "\x0f\x29\x89\xaf\xa4\x8e\x84\x32\x00\x34\x40\x35\xa2\xd0\x0e\x93\xec\x40" "\x68\x8b\x39\xbd\x0b\xf3\x4d\x08\xcd\x20\x30\xd4\xd3\x3c\x7b\x9e\x39\x14" "\x25\xd0\xfb\x1b\x2a\xd2\xb5\xda\x96\x4d\xf9\x0b\x26\xb0\xea\x88\x65\xbf" "\x8d\x85\x0b\x7e\x27\x07\x37\x92\x16\x17\x31\xc1\xdc\xa2\x5b\x6e\xe5\x2e" "\xed\x43\x27\x72\x03\x18\xf4\x21\x64\x43\x20\x96\x75\xa9\x6a\x2c\x40\x7f" "\x27\x34\x5d\xd8\x0f\x51\xa8\x59\xe0\xbc\x36\xa8\x3e\xdc\x56\x31\xf4\x8d" "\x76\x8c\x6f\x9e\x49\xd7\xa3\xde\x7d\x1f\x39\x24\x9d\x11\xd3\x2c\xe3\x2f" "\xe4\x3e\xc7\x3a\xe1\x95\x85\x52\xde\xcf\x20\xc8\x43\xd7\x80\xf9\x27\x5e" "\x30\x12\x1f\x58\x35\xae\xfe\xe8\xa4\xa9\x61\x4b\x2e\x49\x85\x22\x7a\x8d" "\x4a\x88\x6b\xde\xae\x88\x62\xf6\xbf\xe1\x89\x73\xc9\xe5\xff\xd8\x5d\x7c" "\x09\xd6\x3c\x33\xaf\x63\xfa\x52\x72\x19\x4b\xb7\x17\x34\x7a\x91\xf5\x19" "\x76\x1e\x56\xbb\x8b\x63\x44\x46\xa8\xff\x8a\xbe\x56\x14\xfb\xcb\x1d\x7b" "\xb3\xa8\x07\x3b\xc2\xa2\x40\x8c\x58\x33\xe7\xa1\x27\x24\xb5\x9a\x2f\xb4" "\x1d\xd5\xcf\x42\x58\x78\xd1\x62\x84\x9b\xad\x84\x3c\x9d\xfa\x17\xc3\x2e" "\x53\xdc\xbd\xc6\x94\x14\x70\xb7\xc0\x82\xd7\xdd\xdd\x27\xf7\xc8\x3d\x19" "\xcd\xec\x93\xeb\x22\xeb\x4d\x48\x52\xd4\xa6\xe2\xd4\xba\xd6\x55\xe5\x5b" "\x21\x6a\x95\x83\xb9\x45\xdd\x8a\x25\xf9\xdc\x0c\x0e\x42\x44\xd5\xa8\x38" "\x79\xd7\xbd\x58\x39\x95\x7f\x87\xec\x89\xe0\x30\xb6\x23\x27\x06\xab\xa4" "\x01\x1e\xc0\x0f\xf0\x26\x64\x74\xce\x94\xa8\x32\x73\x0a\x4c\x4a\xec\x01" "\x17\xfb\x0f\x24\xe1\xff\xc6\x37\xf4\xcf\x36\xe7\x3b\x28\xc1\xc0\xb8\x0a" "\x2d\x14\xea\x0d\xc3\x6e\x95\xcf\x47\xec\xee\xd1\x64\xdf\x52\x3e\xb8\x95" "\x24\xc3\xc7\x2b\xb5\x99\x44\x46\x34\xbd\xc0\xdf\xe9\xaf\xfb\x0f\xa3\x9e" "\x15\x70\xab\x9e\xf4\xba\x39\x3a\xc3\xf3\x1a\xaa\xbe\xd0\xda\x89\xe4\xad" "\x49\xe9\x22\xe5\xb3\x8a\xdc\x01\x4e\x96\x3c\x7a\x99\x90\x4d\x0f\x54\x5b" "\x4e\x9a\x67\x64\xc0\x58\xba\xeb\x03\xc6\xd5\x03\x12\xdf\x49\xa6\x9c\xa9" "\x99\xd3\x6e\x75\x79\x67\xa6\x3b\x92\x29\xc0\x45\x24\x5c\x6b\x20\x5f\x2e" "\x17\x4a\x4a\x81\x37\x83\x32\x74\x19\xd0\x98\x2c\x30\xda\xa3\xf9\xe0\x37" "\x8e\x50\x50\xf7\x9e\x4d\x1a\xa2\xb6\x33\x02\xd0\x17\x86\xc9\xbb\x9d\xd2" "\x70\xcc\x59\x82\x9d\x42\x24\x5a\xc4\x24\xa8\x77\xba\x80\x51\xd9\xae\x00" "\xcc\xb4\xc4\xbe\x43\x02\x0d\x4d\xb6\xd6\x79\x3a\x6d\x02\x02\x82\x97\x81" "\x23\xb0\x5a\xcb\x27\xd0\x7c\xcc\x56\x4d\xd7\xa8\x21\xd2\x48\x16\xd2\x50" "\xd5\x01\x7b\xb2\x69\x56\x5a\xc0\xa2\xc6\xae\x6a\xa2\xf8\x11\xc7\xdf\x26" "\x61\x2c\x33\x40\xce\x94\x4e\x2d\xaf\xf4\x6f\x07\x22\xbb\x11\x89\x9e\xf7" "\x3b\x1b\x43\xc7\x02\x9b\x95\xee\xe2\x78\x44\x39\x09\xb7\x5b\xfc\xb9\xf1" "\xd8\x70\x33\x18\x2f\x4f\x5a\x84\xcf\xd4\xca\xe0\x10\x9f\x73\x75\xe5\xcd" "\xb3\x05\x12\xfb\x35\x1a\xe1\x96\xaa\x11\x6d\x81\x00\x13\xa2\x60\xfa\x7d" "\x10\x6d\x6f\xbb\x10\xc1\x36\xdc\x49\x2e\xcf\x9a\x7c\x4d\x65\xf4\x2e\x22" "\x16\xda\x31\x2b\x88\xdc\x5f\xd0\x5d\x94\xa9\xa9\x22\x08\xee\xe6\x43\xdd" "\xa1\xd9\xcf\xad\x2d\x43\x7b\x29\x34\x47\x2d\x8e\x16\x64\xaf\xf7\x69\x5d" "\x61\xfd\xb4\x2e\x57\x9e\x0d\xfe\x34\x11\x1d\xf8\x53\x4c\x90\x82\x7e\x92" "\x7d\x40\x88\x17\xf3\xa7\x9a\x16\x79\x7a\x68\x75\x58\xa4\x84\xeb\x96\x4d" "\xb6\xe4\x81\xf6\x1a\x6b\x4a\x7b\x5b\xb2\x6e\x41\x2f\xc9\x3f\x50\x33\xd9" "\xa7\xde\x1f\x33\xf9\xb1\x43\xcc\x96\x9f\xc4\x30\xc0\x4d\x59\x83\x65\x78" "\x43\xff\xc9\x30\xae\xe2\xf6\x66\x28\x23\x32\x22\xa0\xb1\x4d\xf6\xb3\x01" "\x3d\xa9\x52\x3e\xcd\x10\x75\x5a\x37\x88\xdf\xac\xf0\xef\x59\xc4\xbe\x8e" "\xe6\xdc\xc8\xcb\xb0\xe4\x8a\x7d\xe4\x77\x98\x74\xc8\x8a\x51\x28\x0d\x0a" "\xb9\x13\xdc\x2e\x35\x63\x53\x90\x7b\x10\x5a\xd2\x7a\xcb\x3f\x71\x3a\x6a" "\x3f\xb1\x88\xe6\xc8\xe0\xc5\x0b\x31\x48\x44\x73\x22\xc2\xe4\xdf\x81\xa6" "\x9d\x0f\xaf\xfc\x9d\x1b\xa5\xdf\xc3\x8d\xb7\x1f\x91\x12\x25\x9d\xa3\x7e" "\xe8\x06\x39\x2a\x45\xd9\xfb\x04\x0a\x31\xd9\xb5\x30\xeb\x4a\xa5\x22\x2c" "\xba\xc3\x57\xd9\xfe\xee\x07\x43\x5d\x26\x6c\x53\x4a\xe6\x58\xbe\x6c\xdb" "\xf5\x7a\x05\xfd\xf7\x4f\xeb\xc7\xe4\x5d\xe3\xf4\xd3\xd0\xb9\x3d\x5d\x55" "\x1b\x93\x97\xe5\x6f\xda\x5d\xfb\xe7\xac\x1b\x49\x95\xc0\xa4\x32\x2c\xcf" "\xe5\x09\x14\x95\xa8\x05\x94\x69\x6c\x3d\xe9\xec\x51\x5a\xa3\x00\x72\x72" "\x65\xff\x2c\xa9\xe9\xa3\x00\xbb\x7d\x60\x3c\xec\xa6\x41\xbb\x1b\x77\x45" "\x1b\xc3\xd8\xb2\xfd\x48\xf6\xdc\x57\x95\x26\x1c\x19\x7d\xe6\x03\x43\x78" "\xa6\xcf\x87\x79\xd8\x9b\xa1\xd9\x3c\x24\x04\x40\x5f\xb8\x2b\x51\xae\xf2" "\xda\x10\xda\xf5\x75\x5c\xae\x92\x41\x90\xdb\xeb\xfa\x13\xca\x28\xb1\x19" "\xdb\x20\x63\x47\xc5\x9e\x34\xc1\xc2\x3f\x0c\xc4\xcd\xcb\xf5\x0e\x27\xc6" "\x5e\x59\x3c\xcf\xd2\x12\x84\xf2\x6c\xe1\x7b\x96\xb6\xf7\xf6\x3b\x71\x90" "\x48\xf0\x03\xff\xac\x60\xf8\xe1\xbe\x2d\x77\xc4\xae\x26\xc4\x18\x82\xef" "\x76\x27\xad\x6f\x46\xdf\xff\x4c\xea\x1d\x4c\x18\xe3\xcb\x9f\xd3\x4e\xdc" "\xb4\x5f\xc4\x04\xd5\x31\x5e\x82\x60\x16\xe5\xe0\x49\x11\x27\xe7\x81\x28" "\xe2\x8f\xf4\x54\xe6\x28\x37\x0a\x1e\xa7\x62\x5a\x0e\xda\xd0\xeb\xdd\x4d" "\x6d\x1f\x4a\x3f\x54\x10\xd3\x66\xab\x44\x1b\xdd\x81\xaf\xb6\xac\x9e\xb4" "\xfb\x7d\xed\x5d\x8a\x05\x43\xa1\xe6\x19\x0a\x3d\x4c\xce\x80\x7d\x27\x27" "\x52\xba\x09\xa5\x6e\x74\x04\x19\x0b\xfd\x50\x83\x55\x1e\x0f\x17\x98\xbb" "\xd8\xf2\x44\xfd\x0b\xdc\x1e\x79\x92\xb9\xf8\xa0\x9d\xf4\xb9\xc8\xd9\xd4" "\x81\x86\x54\xb5\xde\xdf\x76\xb8\xa5\x07\xde\x52\x0b\x9d\xf2\x63\x56\xd8" "\x1b\x53\x08\x0f\x10\x99\x2a\xea\xb7\xa2\x1b\x78\xde\x4d\x5a\x16\xfc\xcc" "\xdc\xae\x22\x64\xf1\xa7\x4c\x7a\x96\x5c\xd1\x85\xb7\x3d\xf7\x4a\xa8\x6e" "\xe0\xa3\x49\x03\x63\x30\x23\xfa\xa3\x8f\xbf\x7f\x01\xa6\x19\x2f\x65\x58" "\x95\x2a\x1b\x0f\x57\x08\x84\x8b\xc0\x5d\x8a\xab\xed\x3d\xe8\xaf\x41\x21" "\xc6\xbf\x18\x0f\x31\x81\x3f\x18\xeb\xc4\x44\x40\xd1\x8a\x04\x55\xe2\xe8" "\xb6\xc1\xdd\xd7\xd4\xa4\x44\x2b\xb7\x08\xde\x02\x2e\x31\x7b\x37\xee\x11" "\xa6\xbb\x0b\xa3\xa3\x71\x40\xdb\x29\x37\x31\xf2\x07\x1e\xa3\xce\x5a\xbe" "\xc9\xc5\xbb\x0c\xc7\x72\x9f\x07\x2c\x58\xcf\x4f\x95\x90\x17\xac\xfb\x4e" "\xb6\x44\x42\xdc\x82\xf7\x26\x76\xe3\xab\x79\x14\x17\x22\x89\x9c\x50\xf5" "\xf7\xf7\x82\x19\x17\xd4\x00\xd6\x17\x90\xcf\xdc\x36\x48\x36\xd6\xa6\x80" "\xd0\x67\xcb\x52\x97\xe2\xb3\x1d\x9b\x24\x8f\xb9\x4f\xd4\xf0\x5e\xdd\xeb" "\x10\xf2\x44\x76\x8e\x48\x2f\x04\xd1\x83\x12\x21\x83\x49\xee\xd5\xb4\x48" "\x5e\xec\x33\x84\x03\x4e\x18\x91\x36\xe9\xf8\x8d\xa4\xee\x92\x05\x1b\xad" "\x32\x3e\x9b\x9c\x7f\xfb\x1c\x9c\xee\x44\x16\x35\x37\xe1\xa7\xd7\x1f\xff" "\xa2\xd5\xd8\x8c\xb8\x2d\x6a\x0e\xcb\xc0\x5e\xc7\x34\x99\x16\x62\x76\xf1" "\x52\x5d\x1c\x78\x7a\x74\x63\x5b\x80\x83\xa8\x23\x7e\x11\xf2\xe3\x4b\x51" "\x66\xe8\x93\xc1\x0c\x05\x59\xc5\x78\x06\xb7\xf3\xb2\xec\x19\x4f\x22\x66" "\x24\x05\x6a\xc7\x4f\x65\x4c\xf9\xf1\xc7\x2c\xd0\x5f\xa4\x88\x16\x3c\xc2" "\x34\xfa\xc1\x02\x67\x05\xfc\xa9\x63\x28\x8c\x32\xcf\xef\xaa\x19\xe7\xd2" "\x52\x42\xdd\x43\x20\x55\xfc\xd7\xc2\xfb\x33\x62\x0a\x5f\x03\xaa\x3d\x02" "\x9e\xd9\xc4\x0d\x57\x04\xf4\xed\x21\x2a\x2f\xfa\x81\x84\xd1\xb6\xab\x53" "\xd3\x8f\xea\xe2\xdf\x10\xe3\x03\x29\x6c\x2d\xd7\x2a\x0c\x02\xe2\x14\x18" "\x2b\x08\x51\x0b\x56\x97\xf7\xc1\x85\x6a\x2f\xdd\x72\xaa\x6f\xf9\xd8\xdc" "\x4b\x2f\x0f\x78\x83\x4f\xa0\x50\xc2\x1b\x84\x0a\x72\xd8\x6e\x54\xf2\x5c" "\xae\xd4\xe7\x64\xd8\xfe\xb0\xce\xcb\xf7\x11\x89\x20\x17\xcd\x39\x48\xe3" "\x36\x9e\x61\x8f\x95\x42\x16\x45\x09\x78\x36\x1e\x13\x05\xe1\xfc\x43\x36" "\x3d\xdc\x38\xfa\x0f\x91\x8f\x71\x13\xce\xd7\x1f\x5f\xc7\x80\x48\x4d\xc4" "\x07\x12\xcb\xbe\x03\x18\x65\x4d\x5f\x40\x78\xb7\x11\xdb\x1c\x98\x42\x79" "\x2d\x52\xb8\x50\xe6\xfe\xf7\x8e\xd6\xec\x88\xcc\x92\x84\x54\x81\x20\xfc" "\xe7\xf2\x65\x4e\x19\xf4\x69\x39\xdd\x21\xba\x69\x75\x59\x45\x21\xf7\xa0" "\x68\xba\x92\x39\x77\x26\xb5\xc7\x42\xe3\xd9\xa7\xab\xfb\xde\x87\xb6\x61" "\x57\x50\x6b\x71\xe5\xe4\x44\x62\x24\x69\xdc\x11\xc1\x90\xe6\xf6\xe9\x24" "\x2b\x41\xdf\xb6\xbe\x63\x68\xec\x59\x06\xc1\xcb\x9c\xae\x57\xb3\x5a\x66" "\xf6\xb2\x7b\xd9\x02\xa0\x54\x72\xa2\xee\x0d\xb9\x01\xa7\x86\xd7\xff\xbb" "\xb3\x12\xbc\x0a\xe4\xf8\xbb\xfe\xa3\x56\xed\xbe\xc7\x10\x11\x2c\xc4\xf5" "\x52\x8a\x7c\x34\x36\x96\x93\x0e\x41\xeb\x37\xc9\x99\x0f\x9d\xcb\x87\x35" "\xe6\xce\x4e\x77\x1e\xa9\x62\xe1\xb6\xfc\x32\x8f\xc4\xc3\x01\x46\x1b\x5a" "\xea\x98\xa4\xeb\x65\xdb\xb7\x44\xd5\xe0\x71\xc7\x8c\xf5\x9d\x8a\xba\xa0" "\x7a\x17\xf5\x36\xf3\x54\xb8\x54\xda\xa5\xa6\xa5\x04\x3a\xcb\x50\xaf\x42" "\xf9\x37\x87\x66\xdd\xc6\x67\x07\x30\x2b\x06\xba\x09\xb8\x44\x2c\xbb\x70" "\xab\x89\xbf\x60\xd6\x93\x81\x9d\x60\xb9\x14\x63\x36\x00\xe4\xcf\x12\xa8" "\x6e\xe3\x3e\x69\x35\x07\x4a\xa4\x21\xa6\x1d\x0e\x1d\x8e\x63\xa2\xa3\x03" "\x3f\x74\x3a\xea\xbe\x44\xd2\x1b\x3b\xef\xe9\xaf\x35\x70\xae\x94\xf4\x34" "\x6c\x43\x4f\x45\xe3\x87\x2d\x1c\x47\x2e\x64\x7d\x6c\x58\x34\x5d\xd6\xeb" "\x64\xd3\x19\x83\x16\xf5\x07\x68\xc8\x59\x97\xba\x0c\xca\x5b\xb9\xd0\xd4" "\x69\x26\xa4\x39\x3d\xa5\x5a\xfa\x70\xa4\x9d\xf7\x2b\x37\x94\xde\x7f\xe2" "\xd6\xcf\xf2\x8d\x39\x64\xfe\x89\xd2\xd7\x67\x40\x16\x0e\x4f\x5d\x2c\x66" "\xf2\x05\xc0\x1a\x86\xf6\xec\xf5\x44\x0f\xc3\x78\x05\x64\xa0\x75\x3b\x0f" "\xe1\xc4\x75\xc2\x73\xd9\xa1\x36\x3a\x6b\xd5\x19\xe0\x5f\x17\x1d\x20\x01" "\x4c\x62\x17\x33\x95\x65\x2e\x63\x09\xae", 4096); *(uint64_t*)0x20003588 = 0x1000; *(uint64_t*)0x20003590 = 0; *(uint64_t*)0x20003598 = 0; *(uint64_t*)0x200035a0 = 0; *(uint64_t*)0x200035a8 = 0; *(uint64_t*)0x200035b0 = 0; *(uint64_t*)0x200035b8 = 0; *(uint64_t*)0x200035c0 = 0; *(uint64_t*)0x200035c8 = 0; *(uint64_t*)0x200035d0 = 0; *(uint64_t*)0x200035d8 = 0; *(uint64_t*)0x200035e0 = 0; *(uint64_t*)0x200035e8 = 0; *(uint64_t*)0x200035f0 = 0; *(uint64_t*)0x200035f8 = 0; *(uint64_t*)0x20003600 = 0; *(uint64_t*)0x20003608 = 0; syscall(SYS_pwritev, -1, 0x20003580ul, 9ul, 0x80000001ul); *(uint32_t*)0x20000040 = 1; syscall(SYS_ioctl, r[0], 0x82907003ul, 0x20000040ul); return 0; }