// https://syzkaller.appspot.com/bug?id=c7ac769bd7ee15549b8a2be188bcee07d98a5357 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #define __syscall syscall uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x1012ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x20000140, "./bus\000", 6); syscall(SYS_mknod, 0x20000140ul, 0x2000ul, 0x4086337); /* major = 99, minor = 264247 */ *(uint32_t*)0x200000c0 = 6; *(uint64_t*)0x200000c8 = 0x20000080; *(uint16_t*)0x20000080 = 0; *(uint8_t*)0x20000082 = 0; *(uint8_t*)0x20000083 = 0; *(uint32_t*)0x20000084 = 0; *(uint16_t*)0x20000088 = 0; *(uint8_t*)0x2000008a = 0; *(uint8_t*)0x2000008b = 0; *(uint32_t*)0x2000008c = 0; *(uint16_t*)0x20000090 = 0; *(uint8_t*)0x20000092 = 0; *(uint8_t*)0x20000093 = 0; *(uint32_t*)0x20000094 = 0; *(uint16_t*)0x20000098 = 0; *(uint8_t*)0x2000009a = 0; *(uint8_t*)0x2000009b = 0; *(uint32_t*)0x2000009c = 0; *(uint16_t*)0x200000a0 = 0; *(uint8_t*)0x200000a2 = 0; *(uint8_t*)0x200000a3 = 0; *(uint32_t*)0x200000a4 = 0; *(uint16_t*)0x200000a8 = 0x210; *(uint8_t*)0x200000aa = 0; *(uint8_t*)0x200000ab = 0; *(uint32_t*)0x200000ac = 0; syscall(SYS_ioctl, -1, 0x80104277ul, 0x200000c0ul); memcpy((void*)0x20000100, "./bus\000", 6); res = syscall(SYS_open, 0x20000100ul, 0ul, 0ul); if (res != -1) r[0] = res; *(uint64_t*)0x20001400 = 0x20000240; memcpy( (void*)0x20000240, "\x28\xf6\x53\xb7\xbb\x85\x65\x13\x79\x87\x23\xbe\x8d\xb3\x7a\x46\x5a\x4b" "\x09\xb8\xb4\x6d\xdc\x16\x92\x4c\x6f\xa8\x8f\x79\x8d\x69\x1c\x06\xda\x20" "\xdb\xbe\x56\xbc\x0d\x95\xfd\x36\xd3\xa9\xa1\x28\x77\x0a\x32\xb2\x2b\x87" "\xaf\xad\x7b\x49\x03\x5c\xb4\xbb\xde\x6c\x78\xc1\x36\xd2\x29\x07\x40\xbe" "\x5e\xa3\xc3\xc8\xe9\xa0\x1f\x5f\x85\x6b\x37\x2e\xa8\x80\x65\x37\x6e\x69" "\x2c\x3a\x30\x9a\x1d\xdd\x6a\x08\xb4\x57\xfd\xc3\xda\x22\x03\xb1\x50\x3b" "\x8c\x0d\x8b\x3a\x63\x26\xd1\xc6\xb8\xb2\x08\xa4\x14\x9f\xb9\x8b\x39\x05" "\x94\x2e\x3c\x12\xf5\xf4\x1c\x05\x9c\x58\xc3\x36\x8b\xfe\xb2\xfb\x88\xfc" "\x2a\x1c\x9f\x70\x36\xf0\x71\x85\x00\x5c\x1d\x57\xd6\x3b\xfb\xe5\x68\x6d" "\x6f\x6a\xdf\x90\xcc\x91\x5c\xee\x71\xd7\xae\x81\xd6\x39\xa6\x44\x8a\x84" "\x88\x53\x62\xfb\x2f\x10\xcd\x8c\xe5\xf1\xbd\x2c\x18\x1f\x0f\x8c\x29\x24" "\x03\x87\x0a\x84\x5c\xac\x02\xb4\x24\x85\x1c\xd7\xd6\xd1\x0b\x60\x03\x72" "\xb2\x6a\xa2\x47\x59\xb1\xfc\xd4\xfe\x5f\x4d\x40\x3f\x92\x43\x74\xae\x74" "\xe0\x8d\x55\xea\xcd\xdb\x32\x32\x9e\xa1\xf1\x50\xab\x88\xcb\x72\xe4\xc3" "\xe2\x3e\xcb\x31\xcf\xe2\x7b\x37\xe5\xf1\xf2\x90\xb2\x5e\x24\x1f\x59\x39" "\xa9\x59\x1f\x57\x6d\xe4\xa5\x4a\x72\x38\xb5\xf3\x39\xe0\xd1\x19\x8c\xab" "\xbc\xe1\x49\x73\x82\xf1\x4c\x09\xa4\x37\x84\xdb\xdc\xa6\x35\x2b\x4a\xd4" "\xf3\xbb\x72\x19\x74\x2f\x3a\xde\x14\xc5\x36\x8a\xed\x20\x96\x7e\xb7\xfb" "\x52\x73\xac\x15\x38\x1c\x4b\x89\x0a\xcc\x38\x58\xc0\x1c\x76\x07\x0b\x8f" "\x2c\x94\x8f\xe5\x77\x78\xd9\x9a\x8d\x42\xc9\x6a\xf2\x71\x64\x45\x5b\x70" "\x18\xb4\xe5\xc7\xc8\x0b\x85\xf4\x92\xa1\x93\x59\xa9\x02\x98\xef\xb1\x89" "\x71\x93\x21\xce\xaa\xea\x6e\x79\x36\xc3\x02\x92\x9a\x21\x1f\x97\xb5\x45" "\x80\x0e\xa5\x34\xa5\xad\x7a\xdd\x20\x38\x24\x2c\xaf\xb4\xa9\x82\x65\xdb" "\x97\x36\xd7\x8f\x8a\x20\xdc\xe5\x9b\xba\xdc\xd3\x8b\xd4\xdb\xdc\xb8\xcb" "\x01\x13\x86\x15\x5c\xbd\x14\x39\x20\xc7\x3c\xf4\x97\xcb\x33\x6a\xa8\xca" "\x95\xa4\x3e\xac\x6c\x20\x0d\x10\x9a\x63\x28\xc6\xa4\x7d\xa4\xfa\x9f\xc3" "\x9f\xdc\xe1\x72\xf0\x76\xc2\x0c\x4e\x93\x59\xea\xdb\xfc\xea\x0a\xb8\x6f" "\x0d\x52\x4c\x61\xce\xc8\xe7\x44\x03\xe2\xda\x32\xce\xbe\x9c\x80\xa9\x91" "\xd1\x10\xfa\xc1\xf6\x38\xe2\xd5\x06\xdd\xb9\xd1\xa0\xf1\x8d\xdf\xbd\x75" "\xab\x05\xbb\x75\x63\xed\x10\x8c\x1b\x2b\x29\xa1\xd9\x1d\x26\x81\x8c\xa0" "\xa7\x4a\x0e\xfe\x5b\xc6\xce\x2f\x00\x8a\x5a\xff\x45\x3e\x65\x40\x90\xed" "\xb5\x36\x22\xa3\xab\x15\x63\x18\xc9\x67\xc6\x4d\x74\xe6\x94\x45\x86\xd6" "\x35\x0d\x3f\x52\x89\xd7\x40\x97\x51\x53\x15\x54\x24\x02\x92\x70\x51\x63" "\x76\xbf\x44\x25\x80\x74\x32\x3b\xd8\x28\x2c\x1a\xc6\x61\x4f\x13\xd3\x31" "\x8c\x71\xa3\xa5\x1c\xb2\xa3\x05\x2c\x54\xe0\xe7\x8d\xd3\x23\xa6\xdf\x40" "\x5b\xee\xbc\x87\x5c\x74\x40\x56\x75\xa1\xfb\x6c\xc2\x6f\x17\xff\xbf\xa6" "\x84\xae\xbf\x45\x3d\xc3\xf6\x22\xf5\xa1\x2c\x61\x4b\xb2\x3f\x15\x6a\x23" "\xf3\x69\x01\x5f\x7a\x1e\xf5\xdb\x7f\xa3\xe4\x60\xf6\x83\xd0\x72\x7c\x92" "\x23\x85\x3b\x1d\xa2\x0f\xbe\x33\xa0\x42\x1c\x09\x23\x09\x0e\xbc\x6f\xf9" "\xb9\x22\xd4\xb5\x6b\x83\xd8\x37\xdf\x17\xeb\x71\x03\xc9\x02\x22\x06\x97" "\x90\x7a\x91\x4d\x56\x47\x50\x81\xbf\xc6\x9c\xd3\x69\xbc\xf5\xe0\x90\x99" "\xef\xbb\xc9\x3c\x35\xa5\xa9\x7c\x74\x74\x07\xd7\x90\x84\x07\x7b\x6c\x20" "\xfb\x2a\xf5\x0e\xaf\x69\xb8\xa4\x04\xe2\x29\x6c\x4f\x4a\x9d\xad\x4f\x69" "\x11\x06\x80\x42\xe8\xa8\x43\xcc\x72\x88\x1a\x91\x61\x41\x25\x03\xec\xbd" "\xef\x8a\x01\x91\xf6\x79\xa2\x7b\x0d\x1f\x19\x45\x4f\x2d\x28\xe4\xa2\x83" "\x2e\x8e\x55\xcc\xd0\x2b\xd5\x31\x98\xda\x8f\x04\xfd\x0d\x69\xe8\x86\xbe" "\xf1\x8d\xc1\xb4\x96\x6f\xe4\xea\xa8\xa7\x8d\x77\xdb\xa6\xdb\xca\xd0\x61" "\x20\xb8\x09\xd3\xaf\x30\xa3\x35\x60\x0c\x09\x35\x17\xf8\x93\xf0\x34\x62" "\x52\xcd\x9b\x5c\xb1\x37\xb6\x32\xd3\x56\x5b\x32\x62\xd5\x74\xe6\xb8\xbd" "\xf8\x79\x7c\xff\xa9\x59\x98\x55\x92\x75\x1e\xb8\x00\x9c\xc8\xd7\x46\xa5" "\x98\x2b\x4a\xff\x25\x41\x63\x38\x1a\x76\x81\xbf\x76\xee\x28\x34\x88\x8c" "\x2e\xfa\x85\x99\x73\xf6\xd0\x2a\xe3\x8d\xa1\xad\x9c\x7e\xd5\xf7\xc7\x78" "\x31\xb6\xad\xfe\x35\x39\xb8\x3a\x3a\x6c\xe2\x8b\x33\x10\xf5\x86\x68\x47" "\xeb\x56\x2d\xb0\xc7\x05\x87\x94\x81\x22\x78\xfc\xb3\x35\xbe\x08\xd1\xd7" "\xc7\xf4\xee\x4b\xc4\x68\x0e\x14\x86\x71\x26\x90\xa0\x5c\x04\x24\x97\xac" "\x0d\x75\x11\xc6\x3d\x93\xe0\xf0\x68\x70\x18\x75\x0c\x1c\xe1\x0e\xf1\x9a" "\x8d\x0a\x77\x0f\xf3\xed\x68\xe4\x59\x53\xff\xda\x50\x9f\x0e\x68\x13\x91" "\x9c\x49\x06\x96\xe4\xd2\xe1\x3a\x3d\x94\x80\xbc\xad\x2a\x7f\xd6\x5f\xf9" "\x6b\x63\xa3\x32\xcd\xbc\x37\x7f\x74\x77\x37\x1a\x53\xb0\x35\xa0\xee\x91" "\x23\xf9\xce\x89\xed\x2a\x57\x9b\xf6\x46\x76\xac\xe2\xb9\x21\x31\xa0\x19" "\x5a\x64\x90\x7c\x22\xae\xb6\xac\x27\xc0\x3c\x50\x49\x9d\x57\x49\x6e\x38" "\xb0\x6d\x02\xf5\x6f\x9c\xe6\x64\x2e\x80\x6b\x52\x38\x5f\x88\xd5\x68\xd1" "\x03\xb3\x37\x27\x95\xc2\xa5\x4f\x21\x31\x14\x1d\x82\xb5\x3b\xd3\x6d\xf6" "\xde\x44\xee\x6e\xf8\xc4\xfd\x8b\x55\xdd\xb4\x5f\xf7\x02\x7d\x70\xd4\xcf" "\xac\x86\xec\xf9\x03\xd7\xff\xef\x98\xfd\x96\x23\x63\xd4\xee\x22\x40\x74" "\xed\xa9\xbe\x62\x93\x10\x4c\x9a\x27\xf7\x7e\xa1\x4d\xb7\xcc\xb5\x41\xb1" "\x0c\xc8\x23\x80\x4e\x9b\xee\x98\xf9\x62\x9a\x35\xf1\x17\x6c\xe1\xa4\x55" "\x6c\xf9\xb3\x0a\xdf\xd9\x18\xfc\x9a\x07\x4e\x0d\x9e\x6f\xfc\xd7\xb6\x11" "\x38\x0c\x4d\x17\xaa\x0d\x98\x54\xd9\xab\x3b\x60\x63\xd3\xea\x70\xbc\x1b" "\x7d\x11\x2d\x3c\x96\xe9\xb8\x86\xd7\x26\x13\x46\x17\xab\x3f\x60\xa1\x41" "\xe7\x8d\xce\x02\x16\x3d\x28\x88\x45\x1f\x05\xd3\x94\x0c\xdf\x0e\x7c\x5b" "\x2d\xe6\x75\x0d\xae\x5b\x70\xea\x70\x38\x57\xd6\xe5\x22\x5f\x8c\xbc\xb0" "\x78\xd1\xc4\x3c\x8b\x22\xa0\x07\xdb\xf0\xf6\xac\x8d\x39\xdf\x82\xe0\xea" "\x59\x38\x31\x4a\x7a\x8e\xa3\xd1\x85\x39\xa2\x7b\x0f\xc7\x95\xe5\xfe\x8b" "\xe7\x3f\x13\xe3\xc0\x6a\x5d\x56\xe7\x4c\x7b\x87\xe0\x65\x68\xab\xf5\x56" "\xd7\x4a\x96\xcf\xd9\x98\x53\xb3\x32\xbd\x28\x93\xe1\x37\x7a\x3f\xab\x06" "\xb2\x27\xdc\xb5\x4f\x2c\x61\xbf\xe7\x83\x11\x7d\xea\x7c\x58\xb8\xa2\x70" "\x7e\xac\x9e\x75\x3c\x51\xb8\xf7\x04\xcb\x52\x0d\xee\x04\xa7\x83\x46\x31" "\x4c\x10\x72\xeb\x64\x08\xb3\x48\xf2\x26\x6f\xf7\x61\xe2\xee\x4c\xce\x4d" "\x9b\xaa\x00\x44\x60\x7c\xfe\x00\xe4\x69\xd7\x1e\xbc\x88\xb0\x24\x88\x84" "\x92\x25\x5f\x96\x50\x4c\xd9\x6e\xb7\x27\x64\xf8\x59\x9e\x5a\x56\x8b\x7b" "\xe5\xe5\xe6\x6d\xd5\x2d\xb6\x65\x93\x82\x89\x2d\xc5\xed\x02\x8c\x74\x1e" "\x19\x5b\x87\x3f\x50\x0f\x3d\x41\xaf\x8d\xe3\x53\xc4\x46\x86\x1a\x6f\xa6" "\x31\x4e\x67\xcb\x82\x6b\xcf\xaa\xaa\x61\x2b\x20\x50\xd4\x8c\xad\xd2\x0f" "\xb1\x20\x54\x98\x88\xae\xfc\x0d\xd8\xe1\xbb\x5f\xb2\x42\x40\x9d\x45\xb3" "\x56\x71\x6b\xcb\x1b\x70\xaf\xb3\xbc\xfd\x80\x0d\x97\x37\x89\x41\x0a\x15" "\x47\x34\x95\x67\x53\x57\x98\xe2\x6c\x65\x70\xd9\x80\x42\x2c\x12\xd3\x26" "\x91\x44\x44\xf9\xf4\x3c\x38\x3e\x57\x5e\x10\xac\xc7\xbe\xa1\x7b\x85\xa3" "\xea\xef\xff\xe0\xa9\x57\xdb\x1b\xea\xa8\xf5\x1c\xe6\xaf\xf1\x20\x8e\xd3" "\x79\xde\x7c\x50\xaf\x2b\x59\xcd\x87\x3e\x65\xd8\xe6\x09\x92\x57\x75\x5b" "\x99\x5d\x3b\x31\x9d\x96\xa9\x29\x37\x61\x1b\x46\x4f\xc4\xdc\xe7\xce\x5e" "\x11\x8d\x41\xf0\xbb\x5d\x72\xfd\x57\xe0\x95\x46\x7d\x7d\xe1\x8d\xaf\x26" "\x75\xda\xf0\xf2\x23\xd5\x90\x8f\x02\xed\x97\xf2\x5d\x76\x06\xbc\x8e\x95" "\xae\x9d\xcc\x43\x56\xe9\x97\x47\xc1\xd5\x79\x93\x40\xca\x5c\xf2\x5f\x11" "\xfb\x85\xfa\xc2\x6b\x3d\x94\xaa\x19\x55\x4a\x53\xa1\x87\x8b\xbe\x7d\x20" "\xc0\x6f\xe8\xc0\xa5\xca\xe8\x89\xac\x62\x44\x20\xf9\x67\xab\x90\xc5\xf0" "\x18\x30\xcb\x07\x16\xfb\x8b\x57\xe2\xf1\x39\x01\x78\x67\x72\xb4\x5c\xfb" "\x51\x71\xa9\x6e\x39\x3c\x9f\x47\x11\xba\xb1\x84\x5c\x8f\xda\xb1\x40\x8a" "\xf1\x6e\x95\xc9\x4c\xfd\xee\xe5\x40\xbe\xcc\xeb\xd5\x19\xc9\x0f\x36\x1f" "\xbe\x1f\xa9\xd9\x17\xd2\x3a\xd5\x66\xc8\xc3\x1a\x93\xc7\x28\xd5\xc3\x8f" "\x39\x33\x4b\x50\xd4\x06\x00\x0c\x87\x1c\x95\x60\x52\xed\x06\x4b\x42\x69" "\x1b\x23\x12\xe2\x3c\xe4\x75\xf1\xc7\x95\xba\x22\x76\xa8\xe6\xcd\x5a\xd6" "\x20\x6c\x7b\x6b\xef\x7f\x59\x57\x10\x23\xaf\x14\x79\x8e\xbe\xf4\xfb\x38" "\x65\x3e\x29\xc1\x15\x12\x26\xc1\x03\x1b\x7c\x8c\xe9\xdd\xaa\xb5\xb2\x07" "\x5e\xb7\x5c\xbf\xfd\x81\x23\x43\x37\x38\xdb\x03\x9a\x92\xbf\x5c\x16\x41" "\xb3\xe5\x46\x0a\x96\x92\x07\x82\xb8\x08\xb6\xf4\x12\x93\x18\x13\x01\x68" "\x0a\x6e\x66\xec\x7d\x38\x9d\x49\x97\x51\x7f\x37\xcb\xef\x7f\xae\xc8\x5c" "\x1b\x52\xf7\xfa\x14\x92\x6d\x32\x9d\x25\x75\x00\x79\x7f\x32\x70\x5a\xc7" "\x27\xeb\xeb\x95\xea\x48\xcb\x37\x4f\xff\xf2\xb6\x2c\x51\xdd\xd6\x99\x35" "\x8a\xb3\xc4\x2e\x43\x22\x56\x4c\x74\x0e\xea\xc4\x5c\xfd\x7a\x7e\x3d\xda" "\xeb\xde\xdf\xa7\xf3\xfa\x3e\x90\x47\x41\x42\x4f\xd2\xc3\xcc\x98\xdd\xe8" "\xe2\x7e\xe8\x1c\xfc\x1e\x14\x05\xff\x33\xdb\x28\x23\x85\x12\xeb\x53\xd6" "\xbc\x10\x43\x44\x97\x19\x66\x9a\x1e\x8e\x94\xe0\x08\x4d\x2e\x5d\xd4\x3b" "\x2d\x3e\x8b\xd6\xd7\x6c\xe7\x09\x85\x9f\x0a\xc9\x42\x5e\x10\x35\xaf\x1a" "\x5c\x0f\x8e\x75\x47\x0e\xd2\x70\x71\x94\x2b\xf1\x43\xa8\xff\x79\x35\xfd" "\x03\x79\xf5\xcc\xb5\xd5\x7d\x99\xf4\x03\x99\xfb\x3b\xae\xbc\xda\x2c\x56" "\x5a\x7f\xaa\xca\xb0\xf5\x36\x01\x2b\xfc\x0c\x36\x3b\xeb\x71\xde\x73\x69" "\x39\x2a\x81\xca\xce\xa7\x8b\x40\x53\xe6\x05\xe2\x33\x60\x34\xce\x27\x46" "\xa3\xf7\x45\x3d\x1f\xe4\x20\xc7\x55\x67\x5e\x48\xce\xd3\xfe\x55\xa9\xc5" "\x25\x62\xbb\x1a\xb4\xdd\xcc\x95\xb9\xad\x85\x42\x4d\x23\x38\x30\xfa\x12" "\xb4\xaf\x23\x20\x4a\xb7\xe4\x16\xd4\x33\x95\x8c\x2f\x48\x38\x56\x8d\x0c" "\x50\x3a\xa7\x62\xcd\x77\x99\x45\xf7\x3e\xc5\x1c\xf4\x69\x26\xca\xcf\x28" "\x06\xa3\x77\x06\xfa\xed\x17\xfb\x42\x5e\x52\x2b\xf9\xee\xdf\xf5\xcf\xe1" "\x9c\xb3\x94\xae\x29\x51\x6e\xd1\x51\x5d\x8f\xc4\x5b\x8c\x14\x67\x82\x7b" "\x6c\x43\x5f\xc2\x15\xe0\x75\x92\xe7\x33\x34\x43\x6d\xfb\x52\x9e\xed\x36" "\xdc\xaf\xd8\x42\xbf\x74\xee\x70\x77\x1f\x1d\xf6\x67\xb7\x29\xc2\xb5\xef" "\x6d\x6d\x77\xe4\x6b\x7f\x0f\x59\x94\x1b\xc2\x8d\xc8\x89\xc6\xf0\xc9\x69" "\xd5\xeb\x1e\x7e\xe5\xbd\xd7\xd8\xe3\xc2\x8c\x7e\x9f\x90\x66\x03\x10\x99" "\x9a\x68\xe5\x47\x94\xd5\x29\x79\xf4\x73\xc8\x02\xbf\xcb\x38\x2b\x1f\xb6" "\xff\x97\xa4\x08\x71\xd3\x95\x40\x76\x7e\x00\x36\x85\x43\x22\x0e\xaf\x16" "\x75\xc0\x55\xe5\x6b\x2e\xce\x2e\x3c\xf0\x4e\x50\xfe\xea\x6d\xe5\x1d\xf5" "\x17\xcc\x9e\x6c\x3a\x5c\x4f\x0d\x84\x10\xb2\x6b\x86\xfe\xa4\xd0\xb5\xbe" "\xdc\x62\x4e\x79\xe8\x4d\xb6\xa3\xc0\x55\x4f\x8a\x05\xc3\x02\xdd\x3a\x4c" "\xa0\x61\x1b\x09\xc0\x08\x57\xb2\xac\x48\x9d\x19\xf6\x97\x7c\x1a\x23\xd2" "\x5c\xa9\xd2\xad\x7e\x50\x7b\x07\xca\xd3\xe0\xfc\x16\xa0\x66\x5f\x05\x75" "\x14\x6f\x04\x7b\x44\xdd\x43\xc1\x60\xca\xe4\x2e\x0a\xb5\xf9\xab\xb3\x28" "\xd6\xe6\x63\x60\x5d\x56\x76\x47\x05\x57\x3a\xf3\x77\x2a\x5a\x1e\x2b\x3b" "\xdd\xf5\xe9\x09\xbf\xf4\x92\xe4\xca\xc2\xb0\xf4\x66\xb0\xe3\x55\xae\xdd" "\x77\xf2\x25\xd4\xeb\x6f\xb2\xc3\xe3\x2d\x2d\x68\x9e\x43\xa9\xa2\x96\xab" "\xfa\x89\xfe\x25\x4c\x15\xb6\x27\x73\x8d\xa6\xe8\x9c\x3e\xb2\xd4\xe8\xd0" "\xd6\x8a\x7f\x73\x01\x58\x79\x8a\x63\x6d\x1f\x3f\x7b\x38\x48\x5e\xb2\x3e" "\x55\x23\x21\x0b\x93\xed\xe5\xe4\xff\x41\xc9\xee\xe2\xe9\x79\xb4\x1f\xb1" "\x38\x94\xa0\x24\xeb\x11\x35\x12\x0e\xb5\xae\x7d\xf8\x17\x31\x63\xbf\xaa" "\x25\x66\xe6\x0f\x77\xd0\x0c\xf1\xd2\xa3\xf7\x31\x4e\xb3\xe1\x9e\x72\x2b" "\x26\x5d\x46\x46\xd8\xe7\x58\x44\x96\x61\xd8\x53\x66\xe3\xb4\x6d\x60\x1e" "\x2d\xc4\x1b\x75\xf3\x30\x0e\x8e\xb3\xe1\x1a\x90\xc7\x0a\x60\x42\x2e\x05" "\xfe\x83\x90\x36\x5a\x33\x4d\x43\xaa\x7d\x6a\x58\x4b\xe0\xaa\x12\xd4\x7c" "\x3d\x9d\xc7\x61\x02\x58\x42\x2b\xac\xc6\xd9\x6f\x70\xab\x99\x94\x38\x49" "\xeb\x0c\xbc\x11\xf6\x46\xfa\x04\xb1\x57\x2c\xe1\x46\xa0\x92\xeb\x64\x32" "\xef\xa0\x6c\x51\xac\x6b\xa9\xba\xff\x37\xe2\xf7\x29\x3b\x7c\xc1\x6b\x17" "\x55\x3b\x76\x3f\x6b\x10\xb1\x80\xc9\xb5\x9f\xd4\x34\x1d\x59\x8b\x80\xc7" "\x52\x3e\x68\x2a\xcc\x68\x43\x90\xb7\xab\x15\x2d\x9e\xdd\xea\xbd\x68\x7a" "\x02\x4b\x03\x33\x5d\x48\x52\x8d\xc7\x90\x3a\x73\x88\xd5\x56\x22\xcb\x98" "\x32\x7a\x72\x31\x9f\xab\x16\x39\x92\xeb\xf3\xdd\x40\xe2\x17\xc2\x63\xf4" "\x5a\x7b\xc2\xce\xbc\x93\xb2\x7b\x5e\xef\x7e\x01\x99\xf6\x22\x43\xa0\x7f" "\x4b\x82\x15\xce\xc9\x45\x90\xf5\xc1\xa0\x55\x32\x96\x25\xe3\xf3\x3e\x43" "\x4b\xca\x39\x97\x82\x74\x36\x8c\xdb\xc4\xda\xce\x23\x65\xa2\x76\x98\xa2" "\x05\x8d\x82\x8a\xf1\x2f\xe8\x47\x9d\x4a\x79\x90\x30\x1b\xc0\x58\xd9\x46" "\x44\x34\x3d\x0c\x9a\x1a\x53\xe5\xcb\x5e\x8f\xc0\xda\xd3\xe1\x26\xf5\xa0" "\x13\x61\x9c\x9d\x7d\x63\x3d\x3f\x9f\x82\x07\x4c\x51\x46\xc0\xde\xc8\x20" "\xed\x6f\x77\xc1\xdf\xde\x03\xbb\xba\xd4\x7e\x7c\x4a\xef\x7b\xe5\x89\x46" "\xff\x06\xdd\xe2\x45\x1d\xb4\xf9\xc3\xb3\x46\xba\x17\x05\xc1\x31\x27\x3f" "\xe7\xfd\xf5\x31\x10\x90\x64\xc1\x23\x7b\x56\xcc\x7d\xd8\x07\x14\xb4\x0b" "\x67\xce\x8a\x61\x8a\xbd\x48\x7c\x8a\x1c\x13\x61\x6d\xa1\xa2\x9b\x86\xfe" "\x19\x33\x61\x2c\x90\xba\xa1\xab\x56\x16\x9f\x1c\x2c\xf9\xc3\xc8\xa7\xb6" "\x1e\xba\x24\xd9\x4c\x29\xab\xf2\x0e\x56\x51\x7f\x74\x7c\x37\x82\x96\x41" "\xd9\x36\x6b\x13\x94\xb7\xb4\xd2\x2b\x45\x6d\xf1\xf7\xb6\x8e\xba\xe6\xab" "\xc6\xc0\x2c\xaf\x94\xa0\x4c\x54\xe0\xce\xa8\xea\x63\x96\x1d\x5a\x83\xd5" "\x73\x46\xa0\xfd\x4d\x53\x2d\xb6\x4b\x7d\x99\x98\x60\x08\x4d\x44\x5d\x5c" "\xa0\xa7\xb5\xba\x46\xa6\xfd\xc7\x49\xab\x26\x11\x17\x54\xe7\xfd\x56\x80" "\x9a\x17\xc7\x51\xd9\x4f\xc1\x40\x70\xea\x14\xed\xdc\x33\x28\x80\x2f\xa3" "\xe7\xd1\x27\x16\x8d\xea\x8b\xe9\x25\x1a\xe2\x89\xa1\x51\xc1\x48\x39\x8e" "\xe5\x4a\x66\xe8\xba\xb0\xf2\x90\x73\x92\xe9\x34\xf5\x73\x1a\x2e\x40\x0d" "\x6e\x8f\x6e\xb8\xc2\xe3\xf5\x36\x59\x05\xb9\xb4\x2e\x65\x4a\x5a\x47\xe2" "\x7e\x6f\x2b\x76\xcf\xbb\xdd\xf8\x9c\x85\x9e\x52\xc0\x5c\x6f\x72\x51\x53" "\xcb\xad\x05\xec\xb0\x41\xb0\xc1\xc8\x7c\x6f\xda\x85\xb7\x11\xea\x14\x67" "\xf6\xbe\x58\x0d\xbc\x8c\x60\x3e\x34\xe6\x5d\x83\x5d\x6c\x21\xfe\x15\x39" "\x01\x33\x30\xba\xa1\xed\x63\x5e\x43\x46\x60\x96\xa7\x7c\x2a\xc3\x1f\xdf" "\xfc\x0c\x50\xfe\x30\x63\xb5\xf0\xa0\xfd\xe9\xeb\x3a\x40\x25\x89\x17\x95" "\xcc\x95\x8c\xcd\x14\x7b\xbc\x58\xc5\x02\xed\x85\x1c\x9d\xa0\xbc\x2f\x1e" "\xfb\xf4\xf9\xc8\x38\x8f\x32\x97\x09\x55\x04\xe3\xd3\x8e\x1c\x3c\xdd\x39" "\xdb\xd9\x6c\x86\xfd\x44\x82\x04\x63\x4e\x66\x64\x8f\x59\xfd\xb4\xc8\x85" "\x00\xe1\xaf\x77\x17\x59\x91\xda\x41\xdf\x40\x45\x00\x97\x8b\xcf\xe8\xca" "\xc6\x2c\x8f\x72\x7d\x82\xf4\x77\x8f\xa9\x78\xb6\x94\xee\xd4\xd7\x47\xb9" "\x55\x0f\xdc\x6a\x5c\x55\x8f\x7a\xc3\x56\x52\xc9\x73\x79\x50\x7f\x7f\xb4" "\x65\x99\x10\x51\xc3\xdd\x7e\x78\x2c\xac\xfd\xd8\x65\x17\x38\xdf\x66\x86" "\xc8\x81\x30\xaf\x62\x62\x8a\x15\xc0\xe2\x0b\xf0\xb2\x14\x04\x14\x82\x61" "\xf3\x50\xc7\x78\x36\x5a\xc6\xfa\x92\x0a\x52\xd6\x86\x44\xaf\xb7\x42\xd6" "\xc2\xf3\x88\xcc\x7f\xec\xb9\x5b\xda\x18\x79\xfa\x85\x05\x36\x43\x33\x14" "\x9f\xd7\xd8\x40\x10\x81\xa9\x66\xe0\xc1\xec\xdb\xc8\xea\x1c\xfa\xf4\xf2" "\xe7\x88\xe0\xa7\x71\xdf\xbb\xd3\xa7\x53\x38\x60\x1f\x75\x67\x08\x41\x02" "\x1a\xfd\xae\x93\x08\xd2\x9e\xed\xa7\x20\x96\x0d\x2d\xa1\xb7\x9b\x78\xbb" "\x19\x68\x1e\xcc\x91\xbf\x7a\x7b\xc1\x44\x85\x39\xe7\x73\xf8\x43\x1a\xa7" "\x27\x5c\x1f\x9b\x8e\x57\x4a\x81\xa9\x76\xce\x69\x1e\xd7\x5a\xb2\x01\x05" "\x68\x1a\x51\x87\x6a\x0b\x4a\x5e\x6b\x38\x3d\x4e\x49\xec\x8c\xf9\x80\xe6" "\xd9\xe4\x18\xbe\xa8\x40\x82\x4f\x94\xf4\xc8\x31\x95\xec\xe0\xc9\xc0\x2d" "\xcc\x42\xfa\xff\x54\xc3\x52\x7a\x1d\x8a\x19\x18\x5a\xce\x33\x19\xbb\x88" "\x71\x10\x01\x8b\xfd\xc2\xd9\x85\xfb\x33\x76\xc7\xdd\x5a\x79\x61\xc3\x1c" "\x8a\x89\x75\x1d\x43\x2e\x8f\xa9\x7c\xb8\x3f\x36\x5f\x96\x71\xb9\xc8\x20" "\x00\xf2\xab\x63\x66\x2e\xe9\xd0\xd1\xc6\xfc\x5a\x98\x2b\x00\xde\x8c\xe4" "\x37\x34\x87\x91\xdf\x7e\x43\xba\x93\x0d\x32\x13\x57\xc3\x98\x91\xc6\xcd" "\x80\xb2\xda\xa9\x4f\xd9\x9a\xc5\xf9\xa8\x70\x43\xb7\x7e\x36\x52\x12\x52" "\x67\xb0\x17\x3f\xce\x61\x10\x96\x62\x13\x3f\xf0\x67\xf3\x7e\x3c\xff\xf5" "\x5e\x40\x9e\x0b\x9e\xaf\xdd\x96\x41\xa0\x59\x30\x98\x14\x12\x4c\x56\x10" "\x93\xf4\x54\x0f\xc2\xec\x2d\xec\xb4\xd2\xe6\x0f\x64\xd3\xac\xf0\x01\xa9" "\xe5\x80\xdb\x0c\xa2\xc2\x31\x13\x31\x7c\x1c\xe1\xe1\x1e\xab\x85\x5d\x22" "\xb9\x34\x93\x8d\x8f\x98\xc8\xfd\x46\xb8\x1c\xe8\x2d\x04\x9d\x9b\x59\x79" "\x7e\x6e\xf1\x72\x6d\xd8\x81\xc0\x25\xc5\xd5\x08\x27\x03\xa8\x12\xe9\xc8" "\xfe\xf8\xa0\xc3\xe2\xbe\xed\x4f\xb4\xba\xf4\xfb\xca\x99\x16\x23\xc3\x0b" "\xf3\xb2\xc6\x30\x97\xc1\x61\xf0\xc3\x5b\x49\x7f\x9f\x33\x0c\xa2\xfa\x48" "\x86\xe0\x24\x0e\xca\x75\x41\x06\xac\xa3\x4e\xaa\x2d\xca\x64\xc5\xa6\x82" "\xb6\x23\x8b\x0f\x88\x5a\x95\xfb\x40\x7c\x3e\x3c\x6a\x15\x25\xaa\xcc\x63" "\x7c\x70\x78\x12\x0e\xeb\x76\x38\x02\xff\x0f\x12\xc9\x42\x5d\x6a\x27\x8e" "\xdd\x7f\x74\x4f\x8c\x62\xa2\x5f\xcc\x2f\x66\xac\xd6\x3a\x2b\x59\x5e\xa9" "\x48\xfb\xb8\x0a\x48\xb0\x46\x39\xbc\x06\x0c\xaf\xff\xd8\x34\x05\xb1\xfd" "\x22\x0f\xe8\x9b\x82\xee\xf6\x6e\xd7\x41\x6e\x5b\x93\x33\xf4\x06\x3b\xb0" "\xea\x57\xa7\xc1\x92\x1a\xef\x50\x70\x25\x95\xe1\x72\x37\x70\x46\xf1\xb3" "\xd4\x06\xc9\xf6\x59\x8f\xf6\x62\x4f\xe4\x6e\xaa\xcc\x94\x00\x44\x5d\xda" "\x91\x8e\x6f\x21\x97\xf0\xd5\x11\x28\x2d\x16\xc0\x55\xbf\xca\xa9\x65\xd5" "\x29\xd5\x88\xbf\xa1\x52\xe7\x27\x03\x66\xcc\x1b\x58\xaf\x91\x95\x82\x0e" "\x53\x8c\xbf\xa5\x62\xe7\xfd\x54\xd7\x35\x27\xb4\xdd\x10\x32\xa8\x96\xe1" "\xe0\x23\x1d\x4b\x3f\xe5\x64\x16\xdc\x77\xb5\x89\x8f\xde\xdb\xb6\xd0\x1c" "\x88\x12\xd5\x58\x86\x6b\x6d\xf3\xdd\xb7\x03\x58\xd9\x75\xe0\xff\x44\xb8" "\x94\x93\x2e\xdf\xb9\x8c\x9f\xab\xa8\x0a\x4a\xa8\xac\xdb\x83\xaa\x40\x88" "\x03\x7e\xde\x9b\x05\xff\x91\xb6\x36\xc8\xf8\x05\x5e\x63\x7d\x4d\xc7\x15" "\x74\x98\x36\x2d\x01\xba\x1b\xf8\x17\xf9\xa1\x25\x5e\x67\x12\x4c\x97\xf6" "\x85\x21\xfd\x78\x68\x10\x48\x70\xce\x8e\x3f\x5a\x24\x66\x99\x89\xb0\xb4" "\x01\x16\xe4\x26\xe6\x47\x7b\x2c\xc2\xd1", 4096); *(uint64_t*)0x20001408 = 0x1000; *(uint64_t*)0x20001410 = 0; *(uint64_t*)0x20001418 = 0; *(uint64_t*)0x20001420 = 0; *(uint64_t*)0x20001428 = 0; *(uint64_t*)0x20001430 = 0; *(uint64_t*)0x20001438 = 0; *(uint64_t*)0x20001440 = 0; *(uint64_t*)0x20001448 = 0; syscall(SYS_pwritev, -1, 0x20001400ul, 5ul, 0x1451ul); *(uint64_t*)0x20000180 = 0; *(uint32_t*)0x20000188 = 0; *(uint64_t*)0x20000190 = 0; *(uint64_t*)0x20000198 = 0; *(uint64_t*)0x200001a0 = 0; *(uint64_t*)0x200001a8 = 0x210; *(uint32_t*)0x200001b0 = 0; syscall(SYS_sendmsg, -1, 0x20000180ul, 0ul); *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x80003; *(uint32_t*)0x20000048 = -1; *(uint32_t*)0x2000004c = 0xfffffffc; memcpy((void*)0x20000050, "\x54\x2b\xb6\x97\x75\x41\x1a\xbb\xc9\xec\x01\xe2\x21\x00\x00\x00\x00" "\x00\x00\x00", 20); *(uint32_t*)0x20000064 = 0x80; *(uint32_t*)0x20000068 = 1; syscall(SYS_ioctl, -1, 0x802c7416ul, 0x20000040ul); *(uint32_t*)0x20000040 = 2; syscall(SYS_ioctl, r[0], 0x82907003ul, 0x20000040ul); return 0; }