// https://syzkaller.appspot.com/bug?id=912f70e859dfffd2533b7cfcd2c71e0dd6f71e9d // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include static void test(); void loop() { while (1) { test(); } } long r[3]; void test() { memset(r, -1, sizeof(r)); syscall(__NR_mmap, 0x20000000, 0xfff000, 3, 0x32, -1, 0); r[0] = syscall(__NR_socket, 0xa, 2, 0); memcpy((void*)0x20019c48, "\x66\x69\x6c\x74\x65\x72\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00", 32); *(uint32_t*)0x20019c68 = 0xe; *(uint32_t*)0x20019c6c = 4; *(uint32_t*)0x20019c70 = 0x358; *(uint32_t*)0x20019c74 = -1; *(uint32_t*)0x20019c78 = 0; *(uint32_t*)0x20019c7c = 0; *(uint32_t*)0x20019c80 = 0; *(uint32_t*)0x20019c84 = -1; *(uint32_t*)0x20019c88 = -1; *(uint32_t*)0x20019c8c = 0; *(uint32_t*)0x20019c90 = 0; *(uint32_t*)0x20019c94 = 0; *(uint32_t*)0x20019c98 = -1; *(uint32_t*)0x20019c9c = 4; *(uint64_t*)0x20019ca0 = 0x20012000; *(uint8_t*)0x20019ca8 = 0; *(uint8_t*)0x20019ca9 = 0; *(uint8_t*)0x20019caa = 0; *(uint8_t*)0x20019cab = 0; *(uint8_t*)0x20019cac = 0; *(uint8_t*)0x20019cad = 0; *(uint8_t*)0x20019cae = 0; *(uint8_t*)0x20019caf = 0; *(uint8_t*)0x20019cb0 = 0; *(uint8_t*)0x20019cb1 = 0; *(uint8_t*)0x20019cb2 = 0; *(uint8_t*)0x20019cb3 = 0; *(uint8_t*)0x20019cb4 = 0; *(uint8_t*)0x20019cb5 = 0; *(uint8_t*)0x20019cb6 = 0; *(uint8_t*)0x20019cb7 = 0; *(uint8_t*)0x20019cb8 = 0; *(uint8_t*)0x20019cb9 = 0; *(uint8_t*)0x20019cba = 0; *(uint8_t*)0x20019cbb = 0; *(uint8_t*)0x20019cbc = 0; *(uint8_t*)0x20019cbd = 0; *(uint8_t*)0x20019cbe = 0; *(uint8_t*)0x20019cbf = 0; *(uint8_t*)0x20019cc0 = 0; *(uint8_t*)0x20019cc1 = 0; *(uint8_t*)0x20019cc2 = 0; *(uint8_t*)0x20019cc3 = 0; *(uint8_t*)0x20019cc4 = 0; *(uint8_t*)0x20019cc5 = 0; *(uint8_t*)0x20019cc6 = 0; *(uint8_t*)0x20019cc7 = 0; *(uint8_t*)0x20019cc8 = 0; *(uint8_t*)0x20019cc9 = 0; *(uint8_t*)0x20019cca = 0; *(uint8_t*)0x20019ccb = 0; *(uint8_t*)0x20019ccc = 0; *(uint8_t*)0x20019ccd = 0; *(uint8_t*)0x20019cce = 0; *(uint8_t*)0x20019ccf = 0; *(uint8_t*)0x20019cd0 = 0; *(uint8_t*)0x20019cd1 = 0; *(uint8_t*)0x20019cd2 = 0; *(uint8_t*)0x20019cd3 = 0; *(uint8_t*)0x20019cd4 = 0; *(uint8_t*)0x20019cd5 = 0; *(uint8_t*)0x20019cd6 = 0; *(uint8_t*)0x20019cd7 = 0; *(uint8_t*)0x20019cd8 = 0; *(uint8_t*)0x20019cd9 = 0; *(uint8_t*)0x20019cda = 0; *(uint8_t*)0x20019cdb = 0; *(uint8_t*)0x20019cdc = 0; *(uint8_t*)0x20019cdd = 0; *(uint8_t*)0x20019cde = 0; *(uint8_t*)0x20019cdf = 0; *(uint8_t*)0x20019ce0 = 0; *(uint8_t*)0x20019ce1 = 0; *(uint8_t*)0x20019ce2 = 0; *(uint8_t*)0x20019ce3 = 0; *(uint8_t*)0x20019ce4 = 0; *(uint8_t*)0x20019ce5 = 0; *(uint8_t*)0x20019ce6 = 0; *(uint8_t*)0x20019ce7 = 0; *(uint8_t*)0x20019ce8 = 0; *(uint8_t*)0x20019ce9 = 0; *(uint8_t*)0x20019cea = 0; *(uint8_t*)0x20019ceb = 0; *(uint8_t*)0x20019cec = 0; *(uint8_t*)0x20019ced = 0; *(uint8_t*)0x20019cee = 0; *(uint8_t*)0x20019cef = 0; *(uint8_t*)0x20019cf0 = 0; *(uint8_t*)0x20019cf1 = 0; *(uint8_t*)0x20019cf2 = 0; *(uint8_t*)0x20019cf3 = 0; *(uint8_t*)0x20019cf4 = 0; *(uint8_t*)0x20019cf5 = 0; *(uint8_t*)0x20019cf6 = 0; *(uint8_t*)0x20019cf7 = 0; *(uint8_t*)0x20019cf8 = 0; *(uint8_t*)0x20019cf9 = 0; *(uint8_t*)0x20019cfa = 0; *(uint8_t*)0x20019cfb = 0; *(uint8_t*)0x20019cfc = 0; *(uint8_t*)0x20019cfd = 0; *(uint8_t*)0x20019cfe = 0; *(uint8_t*)0x20019cff = 0; *(uint8_t*)0x20019d00 = 0; *(uint8_t*)0x20019d01 = 0; *(uint8_t*)0x20019d02 = 0; *(uint8_t*)0x20019d03 = 0; *(uint8_t*)0x20019d04 = 0; *(uint8_t*)0x20019d05 = 0; *(uint8_t*)0x20019d06 = 0; *(uint8_t*)0x20019d07 = 0; *(uint8_t*)0x20019d08 = 0; *(uint8_t*)0x20019d09 = 0; *(uint8_t*)0x20019d0a = 0; *(uint8_t*)0x20019d0b = 0; *(uint8_t*)0x20019d0c = 0; *(uint8_t*)0x20019d0d = 0; *(uint8_t*)0x20019d0e = 0; *(uint8_t*)0x20019d0f = 0; *(uint8_t*)0x20019d10 = 0; *(uint8_t*)0x20019d11 = 0; *(uint8_t*)0x20019d12 = 0; *(uint8_t*)0x20019d13 = 0; *(uint8_t*)0x20019d14 = 0; *(uint8_t*)0x20019d15 = 0; *(uint8_t*)0x20019d16 = 0; *(uint8_t*)0x20019d17 = 0; *(uint8_t*)0x20019d18 = 0; *(uint8_t*)0x20019d19 = 0; *(uint8_t*)0x20019d1a = 0; *(uint8_t*)0x20019d1b = 0; *(uint8_t*)0x20019d1c = 0; *(uint8_t*)0x20019d1d = 0; *(uint8_t*)0x20019d1e = 0; *(uint8_t*)0x20019d1f = 0; *(uint8_t*)0x20019d20 = 0; *(uint8_t*)0x20019d21 = 0; *(uint8_t*)0x20019d22 = 0; *(uint8_t*)0x20019d23 = 0; *(uint8_t*)0x20019d24 = 0; *(uint8_t*)0x20019d25 = 0; *(uint8_t*)0x20019d26 = 0; *(uint8_t*)0x20019d27 = 0; *(uint8_t*)0x20019d28 = 0; *(uint8_t*)0x20019d29 = 0; *(uint8_t*)0x20019d2a = 0; *(uint8_t*)0x20019d2b = 0; *(uint8_t*)0x20019d2c = 0; *(uint8_t*)0x20019d2d = 0; *(uint8_t*)0x20019d2e = 0; *(uint8_t*)0x20019d2f = 0; *(uint32_t*)0x20019d30 = 0; *(uint16_t*)0x20019d34 = 0xa8; *(uint16_t*)0x20019d36 = 0xd0; *(uint32_t*)0x20019d38 = 0; *(uint64_t*)0x20019d40 = 0; *(uint64_t*)0x20019d48 = 0; *(uint16_t*)0x20019d50 = 0x28; memcpy((void*)0x20019d52, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x20019d6f = 0; *(uint32_t*)0x20019d70 = 0xfffffffe; *(uint8_t*)0x20019d78 = 0; *(uint8_t*)0x20019d79 = 0; *(uint8_t*)0x20019d7a = 0; *(uint8_t*)0x20019d7b = 0; *(uint8_t*)0x20019d7c = 0; *(uint8_t*)0x20019d7d = 0; *(uint8_t*)0x20019d7e = 0; *(uint8_t*)0x20019d7f = 0; *(uint8_t*)0x20019d80 = 0; *(uint8_t*)0x20019d81 = 0; *(uint8_t*)0x20019d82 = 0; *(uint8_t*)0x20019d83 = 0; *(uint8_t*)0x20019d84 = 0; *(uint8_t*)0x20019d85 = 0; *(uint8_t*)0x20019d86 = 0; *(uint8_t*)0x20019d87 = 0; *(uint8_t*)0x20019d88 = 0; *(uint8_t*)0x20019d89 = 0; *(uint8_t*)0x20019d8a = 0; *(uint8_t*)0x20019d8b = 0; *(uint8_t*)0x20019d8c = 0; *(uint8_t*)0x20019d8d = 0; *(uint8_t*)0x20019d8e = 0; *(uint8_t*)0x20019d8f = 0; *(uint8_t*)0x20019d90 = 0; *(uint8_t*)0x20019d91 = 0; *(uint8_t*)0x20019d92 = 0; *(uint8_t*)0x20019d93 = 0; *(uint8_t*)0x20019d94 = 0; *(uint8_t*)0x20019d95 = 0; *(uint8_t*)0x20019d96 = 0; *(uint8_t*)0x20019d97 = 0; *(uint8_t*)0x20019d98 = 0; *(uint8_t*)0x20019d99 = 0; *(uint8_t*)0x20019d9a = 0; *(uint8_t*)0x20019d9b = 0; *(uint8_t*)0x20019d9c = 0; *(uint8_t*)0x20019d9d = 0; *(uint8_t*)0x20019d9e = 0; *(uint8_t*)0x20019d9f = 0; *(uint8_t*)0x20019da0 = 0; *(uint8_t*)0x20019da1 = 0; *(uint8_t*)0x20019da2 = 0; *(uint8_t*)0x20019da3 = 0; *(uint8_t*)0x20019da4 = 0; *(uint8_t*)0x20019da5 = 0; *(uint8_t*)0x20019da6 = 0; *(uint8_t*)0x20019da7 = 0; *(uint8_t*)0x20019da8 = 0; *(uint8_t*)0x20019da9 = 0; *(uint8_t*)0x20019daa = 0; *(uint8_t*)0x20019dab = 0; *(uint8_t*)0x20019dac = 0; *(uint8_t*)0x20019dad = 0; *(uint8_t*)0x20019dae = 0; *(uint8_t*)0x20019daf = 0; *(uint8_t*)0x20019db0 = 0; *(uint8_t*)0x20019db1 = 0; *(uint8_t*)0x20019db2 = 0; *(uint8_t*)0x20019db3 = 0; *(uint8_t*)0x20019db4 = 0; *(uint8_t*)0x20019db5 = 0; *(uint8_t*)0x20019db6 = 0; *(uint8_t*)0x20019db7 = 0; *(uint8_t*)0x20019db8 = 0; *(uint8_t*)0x20019db9 = 0; *(uint8_t*)0x20019dba = 0; *(uint8_t*)0x20019dbb = 0; *(uint8_t*)0x20019dbc = 0; *(uint8_t*)0x20019dbd = 0; *(uint8_t*)0x20019dbe = 0; *(uint8_t*)0x20019dbf = 0; *(uint8_t*)0x20019dc0 = 0; *(uint8_t*)0x20019dc1 = 0; *(uint8_t*)0x20019dc2 = 0; *(uint8_t*)0x20019dc3 = 0; *(uint8_t*)0x20019dc4 = 0xe4; *(uint8_t*)0x20019dc5 = 0; *(uint8_t*)0x20019dc6 = 0; *(uint8_t*)0x20019dc7 = 0; *(uint8_t*)0x20019dc8 = 0; *(uint8_t*)0x20019dc9 = 0; *(uint8_t*)0x20019dca = 0; *(uint8_t*)0x20019dcb = 0; *(uint8_t*)0x20019dcc = 0; *(uint8_t*)0x20019dcd = 0; *(uint8_t*)0x20019dce = 0; *(uint8_t*)0x20019dcf = 0; *(uint8_t*)0x20019dd0 = 0; *(uint8_t*)0x20019dd1 = 0; *(uint8_t*)0x20019dd2 = 0; *(uint8_t*)0x20019dd3 = 0; *(uint8_t*)0x20019dd4 = 0; *(uint8_t*)0x20019dd5 = 0; *(uint8_t*)0x20019dd6 = 0; *(uint8_t*)0x20019dd7 = 0; *(uint8_t*)0x20019dd8 = 0; *(uint8_t*)0x20019dd9 = 0; *(uint8_t*)0x20019dda = 0; *(uint8_t*)0x20019ddb = 0; *(uint8_t*)0x20019ddc = 0; *(uint8_t*)0x20019ddd = 0; *(uint8_t*)0x20019dde = 0; *(uint8_t*)0x20019ddf = 0; *(uint8_t*)0x20019de0 = 0; *(uint8_t*)0x20019de1 = 0; *(uint8_t*)0x20019de2 = 0; *(uint8_t*)0x20019de3 = 0; *(uint8_t*)0x20019de4 = 0; *(uint8_t*)0x20019de5 = 0; *(uint8_t*)0x20019de6 = 0; *(uint8_t*)0x20019de7 = 0; *(uint8_t*)0x20019de8 = 0; *(uint8_t*)0x20019de9 = 0; *(uint8_t*)0x20019dea = 0; *(uint8_t*)0x20019deb = 0; *(uint8_t*)0x20019dec = 0; *(uint8_t*)0x20019ded = 0; *(uint8_t*)0x20019dee = 0; *(uint8_t*)0x20019def = 0; *(uint8_t*)0x20019df0 = 0; *(uint8_t*)0x20019df1 = 0; *(uint8_t*)0x20019df2 = 0; *(uint8_t*)0x20019df3 = 0; *(uint8_t*)0x20019df4 = 0; *(uint8_t*)0x20019df5 = 0; *(uint8_t*)0x20019df6 = 0; *(uint8_t*)0x20019df7 = 0; *(uint8_t*)0x20019df8 = 0; *(uint8_t*)0x20019df9 = 0; *(uint8_t*)0x20019dfa = 0; *(uint8_t*)0x20019dfb = 0; *(uint8_t*)0x20019dfc = 0; *(uint8_t*)0x20019dfd = 0; *(uint8_t*)0x20019dfe = 0; *(uint8_t*)0x20019dff = 0; *(uint32_t*)0x20019e00 = 0; *(uint16_t*)0x20019e04 = 0xa8; *(uint16_t*)0x20019e06 = 0xd0; *(uint32_t*)0x20019e08 = 0; *(uint64_t*)0x20019e0c = 0; *(uint64_t*)0x20019e14 = 0; *(uint16_t*)0x20019e20 = 0x28; memcpy((void*)0x20019e22, "\x52\x45\x4a\x45\x43\x54\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x20019e3f = 0; *(uint32_t*)0x20019e40 = 6; *(uint8_t*)0x20019e48 = 0xfe; *(uint8_t*)0x20019e49 = 0x80; *(uint8_t*)0x20019e4a = 0; *(uint8_t*)0x20019e4b = 0; *(uint8_t*)0x20019e4c = 0; *(uint8_t*)0x20019e4d = 0; *(uint8_t*)0x20019e4e = 0; *(uint8_t*)0x20019e4f = 0; *(uint8_t*)0x20019e50 = 0; *(uint8_t*)0x20019e51 = 0; *(uint8_t*)0x20019e52 = 0; *(uint8_t*)0x20019e53 = 0; *(uint8_t*)0x20019e54 = 0; *(uint8_t*)0x20019e55 = 0; *(uint8_t*)0x20019e56 = 0; *(uint8_t*)0x20019e57 = 0xbb; *(uint8_t*)0x20019e58 = 0; *(uint8_t*)0x20019e59 = 0; *(uint8_t*)0x20019e5a = 0; *(uint8_t*)0x20019e5b = 0; *(uint8_t*)0x20019e5c = 0; *(uint8_t*)0x20019e5d = 0; *(uint8_t*)0x20019e5e = 0; *(uint8_t*)0x20019e5f = 0; *(uint8_t*)0x20019e60 = 0; *(uint8_t*)0x20019e61 = 0; *(uint8_t*)0x20019e62 = 0; *(uint8_t*)0x20019e63 = 0; *(uint8_t*)0x20019e64 = 0; *(uint8_t*)0x20019e65 = 0; *(uint8_t*)0x20019e66 = 0; *(uint8_t*)0x20019e67 = 0; *(uint32_t*)0x20019e68 = htobe32(0); *(uint32_t*)0x20019e6c = htobe32(0); *(uint32_t*)0x20019e70 = htobe32(0); *(uint32_t*)0x20019e74 = htobe32(0); *(uint32_t*)0x20019e78 = htobe32(0); *(uint32_t*)0x20019e7c = htobe32(0); *(uint32_t*)0x20019e80 = htobe32(0); *(uint32_t*)0x20019e84 = htobe32(0); memcpy((void*)0x20019e88, "\x28\x44\x63\x31\x60\x5b\xfe\xfb\x40\xec\x55\xd8\x9c\xce\xfc\xf6", 16); memcpy((void*)0x20019e98, "\x21\xbc\xf3\x5d\x5f\x3f\x02\xf3\x97\xf4\x12\x52\x77\xfa\xaf\x31", 16); *(uint8_t*)0x20019ea8 = 0; *(uint8_t*)0x20019ea9 = 0; *(uint8_t*)0x20019eaa = 0; *(uint8_t*)0x20019eab = 0; *(uint8_t*)0x20019eac = 0; *(uint8_t*)0x20019ead = 0; *(uint8_t*)0x20019eae = 0; *(uint8_t*)0x20019eaf = 0; *(uint8_t*)0x20019eb0 = 0; *(uint8_t*)0x20019eb1 = 0; *(uint8_t*)0x20019eb2 = 0; *(uint8_t*)0x20019eb3 = 0; *(uint8_t*)0x20019eb4 = 0; *(uint8_t*)0x20019eb5 = 0; *(uint8_t*)0x20019eb6 = 0; *(uint8_t*)0x20019eb7 = 0; *(uint8_t*)0x20019eb8 = 0; *(uint8_t*)0x20019eb9 = 0; *(uint8_t*)0x20019eba = 0; *(uint8_t*)0x20019ebb = 0; *(uint8_t*)0x20019ebc = 0; *(uint8_t*)0x20019ebd = 0; *(uint8_t*)0x20019ebe = 0; *(uint8_t*)0x20019ebf = 0; *(uint8_t*)0x20019ec0 = 0; *(uint8_t*)0x20019ec1 = 0; *(uint8_t*)0x20019ec2 = 0; *(uint8_t*)0x20019ec3 = 0; *(uint8_t*)0x20019ec4 = 0; *(uint8_t*)0x20019ec5 = 0; *(uint8_t*)0x20019ec6 = 0; *(uint8_t*)0x20019ec7 = 0; *(uint16_t*)0x20019ec8 = 0; *(uint8_t*)0x20019eca = 0; *(uint8_t*)0x20019ecb = 0; *(uint8_t*)0x20019ecc = 0; *(uint32_t*)0x20019ed0 = 0; *(uint16_t*)0x20019ed4 = 0xa8; *(uint16_t*)0x20019ed6 = 0xe8; *(uint32_t*)0x20019ed8 = 0; *(uint64_t*)0x20019edc = 0; *(uint64_t*)0x20019ee4 = 0; *(uint16_t*)0x20019ef0 = 0x40; memcpy((void*)0x20019ef2, "\x52\x41\x54\x45\x45\x53\x54\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x20019f0f = 0; memcpy((void*)0x20019f10, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16); *(uint8_t*)0x20019f20 = 0; *(uint8_t*)0x20019f21 = 0; *(uint64_t*)0x20019f28 = 0; *(uint8_t*)0x20019f30 = 0xfe; *(uint8_t*)0x20019f31 = 0x80; *(uint8_t*)0x20019f32 = 0; *(uint8_t*)0x20019f33 = 0; *(uint8_t*)0x20019f34 = 0; *(uint8_t*)0x20019f35 = 0; *(uint8_t*)0x20019f36 = 0; *(uint8_t*)0x20019f37 = 0; *(uint8_t*)0x20019f38 = 0; *(uint8_t*)0x20019f39 = 0; *(uint8_t*)0x20019f3a = 0; *(uint8_t*)0x20019f3b = 0; *(uint8_t*)0x20019f3c = 0; *(uint8_t*)0x20019f3d = 0; *(uint8_t*)0x20019f3e = 0; *(uint8_t*)0x20019f3f = 0xbb; *(uint8_t*)0x20019f40 = 0; *(uint8_t*)0x20019f41 = 0; *(uint8_t*)0x20019f42 = 0; *(uint8_t*)0x20019f43 = 0; *(uint8_t*)0x20019f44 = 0; *(uint8_t*)0x20019f45 = 0; *(uint8_t*)0x20019f46 = 0; *(uint8_t*)0x20019f47 = 0; *(uint8_t*)0x20019f48 = 0; *(uint8_t*)0x20019f49 = 0; *(uint8_t*)0x20019f4a = 0; *(uint8_t*)0x20019f4b = 0; *(uint8_t*)0x20019f4c = 0; *(uint8_t*)0x20019f4d = 0; *(uint8_t*)0x20019f4e = 0; *(uint8_t*)0x20019f4f = 0; *(uint32_t*)0x20019f50 = htobe32(0); *(uint32_t*)0x20019f54 = htobe32(0); *(uint32_t*)0x20019f58 = htobe32(0); *(uint32_t*)0x20019f5c = htobe32(0); *(uint32_t*)0x20019f60 = htobe32(0); *(uint32_t*)0x20019f64 = htobe32(0); *(uint32_t*)0x20019f68 = htobe32(0); *(uint32_t*)0x20019f6c = htobe32(0); *(uint8_t*)0x20019f70 = 0x73; *(uint8_t*)0x20019f71 = 0x79; *(uint8_t*)0x20019f72 = 0x7a; *(uint8_t*)0x20019f73 = 0; *(uint8_t*)0x20019f74 = 0; memcpy((void*)0x20019f80, "\xe4\x6a\x92\x2f\x8e\xfd\xf5\x55\xae\xad\xc0\x19\x97\xa6\xf7\xbb", 16); *(uint8_t*)0x20019f90 = 0; *(uint8_t*)0x20019f91 = 0; *(uint8_t*)0x20019f92 = 0; *(uint8_t*)0x20019f93 = 0; *(uint8_t*)0x20019f94 = 0; *(uint8_t*)0x20019f95 = 0; *(uint8_t*)0x20019f96 = 0; *(uint8_t*)0x20019f97 = 0; *(uint8_t*)0x20019f98 = 0; *(uint8_t*)0x20019f99 = 0; *(uint8_t*)0x20019f9a = 0; *(uint8_t*)0x20019f9b = 0; *(uint8_t*)0x20019f9c = 0; *(uint8_t*)0x20019f9d = 0; *(uint8_t*)0x20019f9e = 0; *(uint8_t*)0x20019f9f = 0; *(uint8_t*)0x20019fa0 = 0; *(uint8_t*)0x20019fa1 = 0; *(uint8_t*)0x20019fa2 = 0; *(uint8_t*)0x20019fa3 = 0; *(uint8_t*)0x20019fa4 = 0; *(uint8_t*)0x20019fa5 = 0; *(uint8_t*)0x20019fa6 = 0; *(uint8_t*)0x20019fa7 = 0; *(uint8_t*)0x20019fa8 = 0; *(uint8_t*)0x20019fa9 = 0; *(uint8_t*)0x20019faa = 0; *(uint8_t*)0x20019fab = 0; *(uint8_t*)0x20019fac = 0; *(uint8_t*)0x20019fad = 0; *(uint8_t*)0x20019fae = 0; *(uint8_t*)0x20019faf = 0; *(uint16_t*)0x20019fb0 = 0; *(uint8_t*)0x20019fb2 = 0; *(uint8_t*)0x20019fb3 = 0; *(uint8_t*)0x20019fb4 = 0; *(uint32_t*)0x20019fb8 = 0; *(uint16_t*)0x20019fbc = 0xa8; *(uint16_t*)0x20019fbe = 0xd0; *(uint32_t*)0x20019fc0 = 0; *(uint64_t*)0x20019fc4 = 0; *(uint64_t*)0x20019fcc = 0; *(uint16_t*)0x20019fd8 = 0x28; memcpy((void*)0x20019fda, "\x41\x55\x44\x49\x54\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x20019ff7 = 0; *(uint8_t*)0x20019ff8 = 0; *(uint64_t*)0x20012000 = 0; *(uint64_t*)0x20012008 = 0; *(uint64_t*)0x20012010 = 0; *(uint64_t*)0x20012018 = 0; *(uint64_t*)0x20012020 = 0; *(uint64_t*)0x20012028 = 0; *(uint64_t*)0x20012030 = 0; *(uint64_t*)0x20012038 = 0; syscall(__NR_setsockopt, r[0], 0x29, 0x40, 0x20019c48, 0x3b8); r[1] = syscall(__NR_socket, 0xa, 2, 0); syscall(__NR_setsockopt, r[1], 0x29, 0x14, 0x20121fec, 0); r[2] = syscall(__NR_socket, 2, 0x806, 0); memcpy((void*)0x20004000, "\x66\x69\x6c\x74\x65\x72\x00\x00\x00\x52\x03\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00", 32); *(uint32_t*)0x20004020 = 0xe; *(uint32_t*)0x20004024 = 4; *(uint32_t*)0x20004028 = 0x298; *(uint32_t*)0x2000402c = -1; *(uint32_t*)0x20004030 = 0; *(uint32_t*)0x20004034 = 0; *(uint32_t*)0x20004038 = 0; *(uint32_t*)0x2000403c = -1; *(uint32_t*)0x20004040 = -1; *(uint32_t*)0x20004044 = 0; *(uint32_t*)0x20004048 = 0; *(uint32_t*)0x2000404c = 0; *(uint32_t*)0x20004050 = -1; *(uint32_t*)0x20004054 = 4; *(uint64_t*)0x20004058 = 0x20001000; *(uint8_t*)0x20004060 = 0; *(uint8_t*)0x20004061 = 0; *(uint8_t*)0x20004062 = 0; *(uint8_t*)0x20004063 = 0; *(uint8_t*)0x20004064 = 0; *(uint8_t*)0x20004065 = 0; *(uint8_t*)0x20004066 = 0; *(uint8_t*)0x20004067 = 0; *(uint8_t*)0x20004068 = 0; *(uint8_t*)0x20004069 = 0; *(uint8_t*)0x2000406a = 0; *(uint8_t*)0x2000406b = 0; *(uint8_t*)0x2000406c = 0; *(uint8_t*)0x2000406d = 0; *(uint8_t*)0x2000406e = 0; *(uint8_t*)0x2000406f = 0; *(uint8_t*)0x20004070 = 0; *(uint8_t*)0x20004071 = 0; *(uint8_t*)0x20004072 = 0; *(uint8_t*)0x20004073 = 0; *(uint8_t*)0x20004074 = 0; *(uint8_t*)0x20004075 = 0; *(uint8_t*)0x20004076 = 0; *(uint8_t*)0x20004077 = 0; *(uint8_t*)0x20004078 = 0; *(uint8_t*)0x20004079 = 0; *(uint8_t*)0x2000407a = 0; *(uint8_t*)0x2000407b = 0; *(uint8_t*)0x2000407c = 0; *(uint8_t*)0x2000407d = 0; *(uint8_t*)0x2000407e = 0; *(uint8_t*)0x2000407f = 0; *(uint8_t*)0x20004080 = 0; *(uint8_t*)0x20004081 = 0; *(uint8_t*)0x20004082 = 0; *(uint8_t*)0x20004083 = 0; *(uint8_t*)0x20004084 = 0; *(uint8_t*)0x20004085 = 0; *(uint8_t*)0x20004086 = 0; *(uint8_t*)0x20004087 = 0; *(uint8_t*)0x20004088 = 0; *(uint8_t*)0x20004089 = 0; *(uint8_t*)0x2000408a = 0; *(uint8_t*)0x2000408b = 0; *(uint8_t*)0x2000408c = 0; *(uint8_t*)0x2000408d = 0; *(uint8_t*)0x2000408e = 0; *(uint8_t*)0x2000408f = 0; *(uint8_t*)0x20004090 = 0; *(uint8_t*)0x20004091 = 0; *(uint8_t*)0x20004092 = 0; *(uint8_t*)0x20004093 = 0; *(uint8_t*)0x20004094 = 0; *(uint8_t*)0x20004095 = 0; *(uint8_t*)0x20004096 = 0; *(uint8_t*)0x20004097 = 0; *(uint8_t*)0x20004098 = 0; *(uint8_t*)0x20004099 = 0; *(uint8_t*)0x2000409a = 0; *(uint8_t*)0x2000409b = 0; *(uint8_t*)0x2000409c = 0; *(uint8_t*)0x2000409d = 0; *(uint8_t*)0x2000409e = 0; *(uint8_t*)0x2000409f = 0; *(uint8_t*)0x200040a0 = 0; *(uint8_t*)0x200040a1 = 0; *(uint8_t*)0x200040a2 = 0; *(uint8_t*)0x200040a3 = 0; *(uint8_t*)0x200040a4 = 0; *(uint8_t*)0x200040a5 = 0; *(uint8_t*)0x200040a6 = 0; *(uint8_t*)0x200040a7 = 0; *(uint8_t*)0x200040a8 = 0; *(uint8_t*)0x200040a9 = 0; *(uint8_t*)0x200040aa = 0; *(uint8_t*)0x200040ab = 0; *(uint8_t*)0x200040ac = 0; *(uint8_t*)0x200040ad = 0; *(uint8_t*)0x200040ae = 0; *(uint8_t*)0x200040af = 0; *(uint8_t*)0x200040b0 = 0; *(uint8_t*)0x200040b1 = 0; *(uint8_t*)0x200040b2 = 0; *(uint8_t*)0x200040b3 = 0; *(uint32_t*)0x200040b4 = 0; *(uint16_t*)0x200040b8 = 0x70; *(uint16_t*)0x200040ba = 0x98; *(uint32_t*)0x200040bc = 0; *(uint64_t*)0x200040c0 = 0; *(uint64_t*)0x200040c8 = 0; *(uint16_t*)0x200040d0 = 0x28; memcpy((void*)0x200040d2, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x200040ef = 0; *(uint32_t*)0x200040f0 = 0xfffffffe; *(uint8_t*)0x200040f8 = 0xac; *(uint8_t*)0x200040f9 = 0x14; *(uint8_t*)0x200040fa = 0; *(uint8_t*)0x200040fb = 0xbb; *(uint8_t*)0x200040fc = 0xac; *(uint8_t*)0x200040fd = 0x14; *(uint8_t*)0x200040fe = 0; *(uint8_t*)0x200040ff = 0xaa; *(uint32_t*)0x20004100 = htobe32(0); *(uint32_t*)0x20004104 = htobe32(0); memcpy((void*)0x20004108, "\x24\xfe\x55\xd8\xac\x70\x75\xe0\x23\xe0\x82\x4d\x7a\xd3\x9d\x7e", 16); memcpy((void*)0x20004118, "\x6e\x72\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16); *(uint8_t*)0x20004128 = 0; *(uint8_t*)0x20004129 = 0; *(uint8_t*)0x2000412a = 0; *(uint8_t*)0x2000412b = 0; *(uint8_t*)0x2000412c = 0; *(uint8_t*)0x2000412d = 0; *(uint8_t*)0x2000412e = 0; *(uint8_t*)0x2000412f = 0; *(uint8_t*)0x20004130 = 0; *(uint8_t*)0x20004131 = 0; *(uint8_t*)0x20004132 = 0; *(uint8_t*)0x20004133 = 0; *(uint8_t*)0x20004134 = 0; *(uint8_t*)0x20004135 = 0; *(uint8_t*)0x20004136 = 0; *(uint8_t*)0x20004137 = 0; *(uint8_t*)0x20004138 = 0; *(uint8_t*)0x20004139 = 0; *(uint8_t*)0x2000413a = 0; *(uint8_t*)0x2000413b = 0; *(uint8_t*)0x2000413c = 0; *(uint8_t*)0x2000413d = 0; *(uint8_t*)0x2000413e = 0; *(uint8_t*)0x2000413f = 0; *(uint8_t*)0x20004140 = 0; *(uint8_t*)0x20004141 = 0; *(uint8_t*)0x20004142 = 0; *(uint8_t*)0x20004143 = 0; *(uint8_t*)0x20004144 = 0; *(uint8_t*)0x20004145 = 0; *(uint8_t*)0x20004146 = 0; *(uint8_t*)0x20004147 = 0; *(uint16_t*)0x20004148 = 0; *(uint8_t*)0x2000414a = 0; *(uint8_t*)0x2000414b = 0; *(uint32_t*)0x2000414c = 0; *(uint16_t*)0x20004150 = 0x70; *(uint16_t*)0x20004152 = 0xb8; *(uint32_t*)0x20004154 = 0; *(uint64_t*)0x20004158 = 0; *(uint64_t*)0x20004160 = 0; *(uint16_t*)0x20004168 = 0x48; memcpy((void*)0x2000416a, "\x54\x45\x45\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x20004187 = 1; *(uint64_t*)0x20004188 = htobe64(0); *(uint64_t*)0x20004190 = htobe64(1); *(uint8_t*)0x20004198 = 0x73; *(uint8_t*)0x20004199 = 0x79; *(uint8_t*)0x2000419a = 0x7a; *(uint8_t*)0x2000419b = 0; *(uint8_t*)0x2000419c = 0; *(uint64_t*)0x200041a8 = 0; *(uint32_t*)0x200041b0 = htobe32(0); *(uint32_t*)0x200041b4 = htobe32(0); *(uint32_t*)0x200041b8 = htobe32(0); *(uint32_t*)0x200041bc = htobe32(0); memcpy((void*)0x200041c0, "\x62\x70\x71\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16); memcpy((void*)0x200041d0, "\x69\x72\x6c\x61\x6e\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16); *(uint8_t*)0x200041e0 = 0; *(uint8_t*)0x200041e1 = 0; *(uint8_t*)0x200041e2 = 0; *(uint8_t*)0x200041e3 = 0; *(uint8_t*)0x200041e4 = 0; *(uint8_t*)0x200041e5 = 0; *(uint8_t*)0x200041e6 = 0; *(uint8_t*)0x200041e7 = 0; *(uint8_t*)0x200041e8 = 0; *(uint8_t*)0x200041e9 = 0; *(uint8_t*)0x200041ea = 0; *(uint8_t*)0x200041eb = 0; *(uint8_t*)0x200041ec = 0; *(uint8_t*)0x200041ed = 0; *(uint8_t*)0x200041ee = 0; *(uint8_t*)0x200041ef = 0; *(uint8_t*)0x200041f0 = 0; *(uint8_t*)0x200041f1 = 0; *(uint8_t*)0x200041f2 = 0; *(uint8_t*)0x200041f3 = 0; *(uint8_t*)0x200041f4 = 0; *(uint8_t*)0x200041f5 = 0; *(uint8_t*)0x200041f6 = 0; *(uint8_t*)0x200041f7 = 0; *(uint8_t*)0x200041f8 = 0; *(uint8_t*)0x200041f9 = 0; *(uint8_t*)0x200041fa = 0; *(uint8_t*)0x200041fb = 0; *(uint8_t*)0x200041fc = 0; *(uint8_t*)0x200041fd = 0; *(uint8_t*)0x200041fe = 0; *(uint8_t*)0x200041ff = 0; *(uint16_t*)0x20004200 = 0; *(uint8_t*)0x20004202 = 0; *(uint8_t*)0x20004203 = 0; *(uint32_t*)0x20004204 = 0; *(uint16_t*)0x20004208 = 0x70; *(uint16_t*)0x2000420a = 0x98; *(uint32_t*)0x2000420c = 0; *(uint64_t*)0x20004210 = 0; *(uint64_t*)0x20004218 = 0; *(uint16_t*)0x20004220 = 0x28; memcpy((void*)0x20004222, "\x52\x45\x4a\x45\x43\x54\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x2000423f = 0; *(uint32_t*)0x20004240 = 0; *(uint32_t*)0x20004248 = htobe32(-1); *(uint8_t*)0x2000424c = 0xac; *(uint8_t*)0x2000424d = 0x14; *(uint8_t*)0x2000424e = 0; *(uint8_t*)0x2000424f = 0xbb; *(uint32_t*)0x20004250 = htobe32(0); *(uint32_t*)0x20004254 = htobe32(0); *(uint8_t*)0x20004258 = 0x73; *(uint8_t*)0x20004259 = 0x79; *(uint8_t*)0x2000425a = 0x7a; *(uint8_t*)0x2000425b = 0; *(uint8_t*)0x2000425c = 0; *(uint8_t*)0x20004268 = 0x73; *(uint8_t*)0x20004269 = 0x79; *(uint8_t*)0x2000426a = 0x7a; *(uint8_t*)0x2000426b = 0; *(uint8_t*)0x2000426c = 0; *(uint8_t*)0x20004278 = 0; *(uint8_t*)0x20004279 = 0; *(uint8_t*)0x2000427a = 0; *(uint8_t*)0x2000427b = 0; *(uint8_t*)0x2000427c = 0; *(uint8_t*)0x2000427d = 0; *(uint8_t*)0x2000427e = 0; *(uint8_t*)0x2000427f = 0; *(uint8_t*)0x20004280 = 0; *(uint8_t*)0x20004281 = 0; *(uint8_t*)0x20004282 = 0; *(uint8_t*)0x20004283 = 0; *(uint8_t*)0x20004284 = 0; *(uint8_t*)0x20004285 = 0; *(uint8_t*)0x20004286 = 0; *(uint8_t*)0x20004287 = 0; *(uint8_t*)0x20004288 = 0; *(uint8_t*)0x20004289 = 0; *(uint8_t*)0x2000428a = 0; *(uint8_t*)0x2000428b = 0; *(uint8_t*)0x2000428c = 0; *(uint8_t*)0x2000428d = 0; *(uint8_t*)0x2000428e = 0; *(uint8_t*)0x2000428f = 0; *(uint8_t*)0x20004290 = 0; *(uint8_t*)0x20004291 = 0; *(uint8_t*)0x20004292 = 0; *(uint8_t*)0x20004293 = 0; *(uint8_t*)0x20004294 = 0; *(uint8_t*)0x20004295 = 0; *(uint8_t*)0x20004296 = 0; *(uint8_t*)0x20004297 = 0; *(uint16_t*)0x20004298 = 0; *(uint8_t*)0x2000429a = 0; *(uint8_t*)0x2000429b = 0; *(uint32_t*)0x2000429c = 0; *(uint16_t*)0x200042a0 = 0x70; *(uint16_t*)0x200042a2 = 0xb0; *(uint32_t*)0x200042a4 = 0; *(uint64_t*)0x200042a8 = 0; *(uint64_t*)0x200042b0 = 0; *(uint16_t*)0x200042b8 = 0x40; memcpy((void*)0x200042ba, "\x45\x52\x52\x4f\x52\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x200042d7 = 0; memcpy((void*)0x200042d8, "\x64\x2e\x7b\xaf\x24\x1b\x9d\x10\xd6\xf6\xa3\xe4" "\xbe\xb5\x29\x42\xa8\xf8\xcf\xc4\x0b\x26\xe1\xc8" "\x8c\x67\x92\x8b\x73\x3a", 30); *(uint64_t*)0x20001000 = 0; *(uint64_t*)0x20001008 = 0; *(uint64_t*)0x20001010 = 0; *(uint64_t*)0x20001018 = 0; *(uint64_t*)0x20001020 = 0; *(uint64_t*)0x20001028 = 0; *(uint64_t*)0x20001030 = 0; *(uint64_t*)0x20001038 = 0; syscall(__NR_setsockopt, r[2], 0, 0x40, 0x20004000, 0x2f8); } int main() { for (;;) { loop(); } }