// https://syzkaller.appspot.com/bug?id=c7ac769bd7ee15549b8a2be188bcee07d98a5357 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #define __syscall syscall uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x1012ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x200001c0, "./bus\000", 6); syscall(SYS_mknod, 0x200001c0ul, 0x2000ul, 0x4086334); /* major = 99, minor = 264244 */ *(uint32_t*)0x200000c0 = 6; *(uint64_t*)0x200000c8 = 0x20000080; *(uint16_t*)0x20000080 = 0; *(uint8_t*)0x20000082 = 0; *(uint8_t*)0x20000083 = 0; *(uint32_t*)0x20000084 = 0; *(uint16_t*)0x20000088 = 0; *(uint8_t*)0x2000008a = 0; *(uint8_t*)0x2000008b = 0; *(uint32_t*)0x2000008c = 0; *(uint16_t*)0x20000090 = 0; *(uint8_t*)0x20000092 = 0; *(uint8_t*)0x20000093 = 0; *(uint32_t*)0x20000094 = 0; *(uint16_t*)0x20000098 = 0; *(uint8_t*)0x2000009a = 0; *(uint8_t*)0x2000009b = 0; *(uint32_t*)0x2000009c = 0; *(uint16_t*)0x200000a0 = 0; *(uint8_t*)0x200000a2 = 0; *(uint8_t*)0x200000a3 = 0; *(uint32_t*)0x200000a4 = 0; *(uint16_t*)0x200000a8 = 0x210; *(uint8_t*)0x200000aa = 0; *(uint8_t*)0x200000ab = 0; *(uint32_t*)0x200000ac = 0; syscall(SYS_ioctl, -1, 0x80104277ul, 0x200000c0ul); memcpy((void*)0x20000000, "./bus\000", 6); res = syscall(SYS_open, 0x20000000ul, 0ul, 0ul); if (res != -1) r[0] = res; *(uint64_t*)0x20000180 = 0; *(uint32_t*)0x20000188 = 0; *(uint64_t*)0x20000190 = 0; *(uint64_t*)0x20000198 = 0; *(uint64_t*)0x200001a0 = 0; *(uint64_t*)0x200001a8 = 0x210; *(uint32_t*)0x200001b0 = 0; syscall(SYS_sendmsg, -1, 0x20000180ul, 0ul); memcpy((void*)0x20000040, "\x34\xcf\x36\x2b\x3c\xe9\xc9\x3d\x7f", 9); syscall(SYS_write, -1, 0x20000040ul, 9ul); *(uint64_t*)0x20000140 = 0x20000200; memcpy( (void*)0x20000200, "\xdd\x78\x59\xef\xdc\x45\x3f\xb6\xda\xd5\xaa\x33\x76\x43\x4d\xe2\xcd\x3c" "\x26\xfa\xda\xd5\x2f\x02\xaf\x11\x95\x24\x38\x51\xe5\x45\x2f\xd0\x1c\xff" "\xac\x37\x67\x53\xf0\x2e\x77\x63\x9a\x27\x33\x90\x0e\xc7\x67\x43\xab\x5f" "\x7f\x5a\x94\x6b\x75\xd5\x3d\x5f\xd2\x0b\xd7\x80\x82\x67\x39\xf2\xa6\xf2" "\x34\x0c\x67\x0a\xc0\xf2\x90\x6c\x03\x82\x15\xbf\x91\xba\xb2\xce\xa7\xbc" "\x90\x1d\x0a\xd5\xcd\x49\xde\x31\x8d\x06\xdd\xe5\x1d\xfb\x61\xc7\x61\x27" "\xf3\xd2\x0f\xea\x5f\x89\x5f\x48\x89\xc4\xa3\xd6\x92\x79\x98\x4c\xd9\x68" "\x4a\xa2\x8f\xad\x1d\x82\x74\x9e\xd3\x79\x0f\xcc\xac\xb2\x13\x3c\x6f\x6e" "\xc3\x27\x51\x75\x3f\x3e\xaf\x99\x8f\xdc\x4e\x21\x96\xd7\x0f\x39\xa1\xdf" "\xaa\x75\xa3\x95\xfc\x5b\x8c\x4c\x83\x68\x2e\x89\xa3\x45\x1d\xc0\x23\x1d" "\x68\x59\xf3\x2c\xb8\xec\xf0\x25\x00\x11\x2c\x7a\xe3\xff\x74\x96\x2b\xec" "\x75\x89\xed\x91\x60\x2f\xb4\x3d\xb2\xc8\x1c\xf7\xd6\x19\xaf\x4f\x4f\x39" "\x20\x29\xbb\xf5\x26\xfc\x41\xa0\x69\x2c\x97\x77\x87\xf1\x0c\xfa\xa1\xf7" "\x01\x1d\xc4\xc7\xe2\x55\xd4\xb6\x6b\xd3\xd6\x82\x9b\x01\xf6\xa5\x8b\x1b" "\x54\x94\x46\x1e\x77\x86\x15\x61\xec\x6f\x42\x0f\x74\x0a\x8c\xec\xfd\xe1" "\x00\x6b\x53\x7a\x91\x1d\x9a\x75\xce\x77\x2c\xed\x7d\x3a\xde\xe2\x87\x2f" "\x85\x1a\x8f\x79\xb3\x99\xc5\x60\xf9\x00\x02\x2b\x47\xc7\x9f\xdc\x43\x79" "\x44\xa1\xb6\xa0\xdc\x31\xf6\xb3\xb9\xac\x5a\xf8\x69\x9b\xc8\x0c\x15\x74" "\x7c\x64\xb9\x58\xa6\x28\x27\x0a\x28\x72\x46\x38\x5d\x19\xa0\xfe\x29\x7a" "\x33\x5d\xc0\x5d\xa0\xf9\x03\xc4\x96\x24\x34\x7c\xf9\xeb\xb0\x3c\x92\xd1" "\x5b\x41\xca\x9d\xe6\x9f\xa6\x19\xdd\x7d\x88\x28\xeb\x7b\x27\x0c\xd0\x6a" "\x82\x9e\x28\xc1\x84\xea\x9e\x5a\x99\x59\xf1\xbf\xd0\x0a\xc3\x23\xcb\x2c" "\xde\x96\x7b\xbc\xe3\x7d\x69\x2f\x02\x15\x52\xa5\x77\x27\x31\x0a\xd5\x18" "\xb9\xc1\xf5\x53\x3b\x81\x69\x08\xda\x25\xd6\x9e\x0a\xdc\xe7\xd0\x57\x59" "\x03\xdd\xc4\x2e\x53\x19\xaf\xb4\x26\x71\xcc\x68\x40\xc5\xdb\x98\x3d\xc8" "\x6d\x1e\x17\x79\xc4\x03\x73\x02\x61\x29\xe8\xae\x3f\x9a\xc7\x30\xc7\xad" "\xdb\x3f\xae\x0e\x1c\xf3\xc9\x2c\x26\x9d\x45\xf7\x80\x7a\xca\x8c\x33\x3a" "\xc6\x47\x86\xd5\xf2\xbf\x00\x1f\x81\x14\xbc\x1b\x86\x01\x0d\x06\x5d\x58" "\x0c\xff\x50\x62\x69\x86\xc6\x30\x02\xbd\x60\x04\xbb\x3b\xbf\x02\xf0\xbb" "\xa9\x22\xf1\x76\x4e\xac\x5a\xf2\xc2\xd3\xda\x1f\x62\x24\x98\x06\xcd\xce" "\x55\xfe\xb6\xbc\x4d\x3a\x97\x66\x1c\x77\xa0\xf9\x39\xbc\xd0\x93\xed\xbe" "\x7d\xf9\x98\x14\x74\x7d\x3f\xc4\x7a\x38\x9f\x52\x6f\x6d\xf6\x89\xe0\x7e" "\x73\x4c\x3e\x51\x94\x50\x0a\xcc\x3a\x85\xcf\x8f\x28\x9d\x35\x9c\x80\xb0" "\x58\x4c\xed\xcd\x34\xef\x47\x89\xb8\x2d\x1e\xd7\x6e\x23\xb0\xb6\x09\x7d" "\x43\x68\x30\x0e\x33\x6a\x90\x16\x3d\x50\xa6\x64\x60\x5a\x76\xd3\xc1\xdf" "\x3e\x41\xe3\xf0\x66\x02\xef\xcc\xe4\xd5\xea\xfa\x7d\x34\x60\x52\xce\x18" "\x3a\x47\xcd\x1c\xc6\x5b\x51\x92\xb2\x06\x9e\x45\xb9\x70\x19\x65\x75\x39" "\xf8\x08\x8b\xb0\xa2\x52\x3c\x65\xe5\xa2\x22\xa8\x08\x86\xb2\xdf\x32\xf1" "\xfd\x66\x85\xbd\x43\x0a\x12\xcc\x3c\x1c\xd7\x82\xe2\x66\xbb\x14\xb1\xb5" "\x1a\x35\x8a\x91\xe4\xa1\x13\x70\x14\x10\x7b\x87\x99\xbf\x3b\x50\xaf\x3a" "\x21\x9c\x11\xf6\xe2\xbb\x50\x57\x7d\x0b\x4f\x3b\x91\x33\x50\xcf\x47\xe4" "\xb3\x3c\x4c\xaf\xb9\xbd\xdb\xc9\xa6\xdc\x69\x96\x0b\x08\x1e\xd1\xf0\x09" "\xcb\xe2\xd4\x55\x24\xd4\xf6\x88\x97\x10\x59\x23\xf3\x66\x91\x2a\x97\x0a" "\x61\xe9\xa5\x90\x67\x7e\xeb\x0d\xcb\xe4\xf1\x25\xda\xc8\x5d\xaf\x67\x78" "\xee\xe1\xe0\xa9\x33\x1e\xf0\x32\xab\xcf\x88\xee\xc0\x4f\xa8\x50\xb5\xf9" "\x36\x81\x0c\x07\xc6\xd3\xb4\x23\x53\x46\xb6\x6c\xb1\xc1\x22\xf4\xb1\xf6" "\x90\x2e\x5f\xe6\x25\x2f\x8b\xfb\x6e\x4c\xbf\x1b\x2f\xa1\x70\x33\x35\xd9" "\xde\xb5\x34\xde\x1f\x15\xd3\x2f\x52\x00\x72\xc6\xa1\x23\x24\x6f\xbc\xac" "\x22\x96\x12\x44\xbc\x30\xdd\xa8\xfa\xd3\x75\xb6\x0f\x1e\x42\xc1\x9d\x41" "\xd4\xa4\xf2\x11\xe0\x5c\xfb\xb1\xa5\x6f\xf8\xc4\x80\x2c\x7e\xf0\xd3\x2a" "\x6d\x86\x40\x38\x41\xe5\x1b\xae\xca\x8e\xa8\x28\x4f\x2f\x9b\x33\xd4\x3c" "\x84\xc5\xcc\xf4\xf4\x28\x15\x2f\xf7\x1a\x9f\xc8\x7a\x1a\xa9\x72\xc9\xc0" "\x8d\x9c\x43\x20\x7a\xd1\xe8\xff\x6c\xdd\x64\x0e\x1d\x56\x06\xc8\xe4\x52" "\xd9\x35\xb5\x94\x8a\xb9\x39\x3d\xf6\xc3\x09\xce\xed\x32\xc4\xac\x04\xa2" "\xb3\x58\xcf\xf8\xb3\x12\xba\xd0\x1c\x3b\x7d\xe4\x7b\xfe\x26\xc1\x80\xbf" "\x3a\x4d\x95\xbb\xf6\x02\xb6\xb3\xc5\x13\x7a\x48\x38\x2d\xd1\x0c\xef\x34" "\x4c\xb0\x14\xb5\x51\x9e\x54\x31\xe4\x0d\xd3\x7c\xf5\x22\x58\x01\x5b\x5a" "\x53\x59\x12\xa5\x07\xaa\xf3\x2e\xb1\xde\x59\xee\x69\x5c\x01\xb7\x95\xe5" "\x43\x46\xbe\x88\x5b\x71\xf9\xa8\x43\xc6\xa5\x09\xad\x5e\x44\xf2\x42\x22" "\xb3\xdb\x7a\x50\x0a\xc9\x57\x73\xb8\xb8\x63\x73\x7d\x64\x2e\x6e\x5e\xc5" "\x44\x7f\x25\x5d\x1f\x51\xff\x47\x4e\x7f\xaf\x87\x81\x7c\xb4\x38\x96\x14" "\xb4\xb2\x16\x12\x43\x1c\x02\xac\x31\x99\x01\xcc\xa4\xcc\x1b\x80\x03\xd9" "\xba\xfb\x09\xe1\x72\x95\xe3\xdb\x50\x92\x32\x42\xbb\x1b\xe8\x92\x9a\x73" "\x1c\x17\x9e\xe4\x6a\xec\x64\x1f\x54\x75\xaf\xc7\xa2\xcb\xb4\xc5\xdb\x90" "\xfb\x34\xa8\xf1\x1c\x93\x0b\x1a\x18\xcb\x45\x93\x2d\x75\xbd\x18\x40\xf2" "\x6d\x13\xef\xe7\xbe\xe0\x8a\xb1\x53\x12\x37\xab\x0d\x1b\x74\x8e\x80\x30" "\x84\xdf\x09\xbf\x4a\x9b\x84\x1d\xc5\x4a\xcb\x78\xca\xf8\x14\x67\xe8\xde" "\x61\x10\x49\x45\xca\x62\xf8\xe9\xf4\x99\xb6\x75\x5b\xa7\x77\x4d\x64\x39" "\x33\x74\x69\x16\x86\x5c\xf8\xea\x13\xb0\x10\xb8\xa2\x47\x0f\xd1\x22\x2b" "\xaf\xf4\x6e\x98\x2e\xb9\xf2\x30\x47\x1a\x23\xeb\x53\xb7\x2c\x49\x1b\xed" "\x1d\xd2\x52\xed\x53\x33\x00\xaf\x72\xd0\x18\x3b\x4d\x73\x51\xc3\xdd\x73" "\x5f\x2c\x99\x31\x53\x37\x5d\x59\x25\x07\x10\x17\xff\xd1\xe2\x7a\xdf\x9b" "\x0c\x6e\x27\x8f\x76\xea\x28\xea\x11\xaf\x43\x63\x93\x73\x24\xf3\xee\xe6" "\x59\xa9\x55\x57\x57\x3a\x10\xf4\x31\x34\xf8\xf2\x01\xc6\xa6\xbe\x55\x27" "\xae\x92\x79\x30\xe7\xca\x8b\x9b\xfc\xa8\x42\xff\x9c\x16\xaf\xc9\x13\xe7" "\x2b\x3a\x8e\xea\x5c\x8e\xf4\x2b\x5a\x1e\x18\x3e\x89\x7a\x69\x55\xd2\xd8" "\x0d\x8c\x9d\x4b\xc2\x6f\x36\x36\x83\x94\xd6\xc8\xa3\x63\xb6\x49\x5c\x82" "\xfe\xef\xe6\x86\xe0\xfa\x06\x4d\x5e\x41\x8b\xb8\x0b\x20\x23\x9b\xc5\x1c" "\xb1\x8a\xa5\xc8\xe6\x27\xd3\x2a\x3c\x0c\x6f\x09\x6e\xe6\x48\xae\xd3\x7b" "\x99\x90\xb4\x4f\x7b\x5e\x5d\xcd\x54\x2e\x0e\xca\xc2\xd6\xc1\x8d\x5c\xe3" "\x48\xcb\xed\xdc\x5f\xaf\x03\xee\x81\xfa\xe5\x89\xeb\x15\x60\x42\xfa\x94" "\xa3\x54\x5f\xd7\xdf\x7c\x85\xeb\xbf\xa8\x8c\x82\xf7\xee\x0e\xdd\x3d\xd0" "\x97\xc5\x87\x5b\xe4\xbe\xfc\xda\x81\x3b\xab\x92\xdb\x8a\x19\x4e\xb9\x58" "\xa9\x60\xea\xd8\xe3\x61\xdb\x06\x89\x76\xda\xe7\xda\x7d\x3e\xe2\x80\x51" "\xb7\x3e\xd9\x7a\x82\x17\xc1\x7d\xe9\x8e\x64\x1b\x57\xa8\xb1\x20\xac\x20" "\x71\x30\x1c\x15\xec\xf2\xb5\xcd\x4e\xaa\x21\x3b\x90\xa5\xd8\x91\x94\xcb" "\x95\xc6\x72\xcb\x09\xfe\x40\x70\x8d\x64\x22\x09\x5a\xea\x4c\xb4\x65\x6d" "\x33\x19\xd8\x02\x31\x30\x5e\x64\x1c\xec\x96\x15\x51\xf6\xbb\x62\x6b\xd7" "\x05\xa9\xb6\x76\xe4\xd3\x3c\xd2\x38\x36\xb6\xb2\xf3\x33\x40\x97\x81\x9c" "\xc0\x0b\xda\x74\xa6\xf4\x79\x1f\xf7\x5c\xa7\xec\xdc\x8f\xb0\xb0\xcb\x00" "\x67\x68\x18\x10\x47\x62\x66\x51\xb1\x4c\x2c\xb6\x78\x6c\x98\x9c\x20\x71" "\x00\xc5\x06\xbe\x6a\xf6\x3a\x2b\xcc\x38\xee\x18\x79\x1a\x0e\x62\xec\x12" "\xbb\x55\x2b\x42\xb5\x8c\x8f\x8d\x59\x4b\x3f\xa0\x63\x3f\x93\x86\x70\x2e" "\x65\x1d\x8f\x69\x42\x08\x3b\x63\x8b\x01\x98\x9a\xd2\xb3\x89\x93\x43\x68" "\x00\xd2\xc2\xe7\x0f\x63\xd6\xfc\xdb\x11\x05\xea\x43\xc3\x7c\xd8\xe8\x04" "\xa9\x5f\x8f\x79\x65\xef\xa9\x04\x7b\x1e\x6e\x85\xd4\x9f\x84\xf5\xf6\xd3" "\xd7\xde\x70\xf4\xe7\x91\x1a\x9a\x97\x6e\x7e\x59\x1b\xa9\x99\x95\xd3\x79" "\xc9\xa1\xef\xec\x3a\x37\x23\x86\x8a\xb0\xa0\x5d\xcb\xa7\xc6\x83\x7c\x35" "\xe1\xc4\x72\xc2\x2b\x30\x6b\x11\xd7\x99\x1e\xc9\x68\x48\xfa\xca\x65\xfd" "\xc2\x0a\x03\x0b\x50\x10\x25\x90\x32\x35\x0c\x6a\xbe\xe8\xfb\x61\x67\xfb" "\xbc\x31\x3d\x37\x7b\xe8\x8d\xb7\xea\xc9\x35\x36\x89\x83\x4c\xd9\xeb\xa3" "\xf3\x8d\xb5\x89\x60\x29\x41\x65\xa5\xb8\xbe\xf2\x9d\x55\x7e\xc3\x01\xd2" "\x11\x5e\x58\x47\xca\xe9\xba\xd4\x78\x6d\x35\x3f\x17\x46\x0a\xc0\x8f\xe9" "\x1c\x5d\x08\x4c\xc4\xda\x62\x38\x8b\x69\x1c\x53\x24\xd4\x85\x46\x20\x93" "\xca\x82\x4b\x33\xdb\xf3\xaf\xf3\x67\xca\xe2\xd5\xd0\x07\x18\x76\xc0\x04" "\xe7\x29\x5a\x8d\x6f\x29\x27\x46\x34\x49\xcc\x91\xe7\x38\x24\x9f\xfc\x0e" "\x86\x49\x5b\x11\x75\x4a\x21\xfe\x6a\x5e\x1f\xba\x1f\x48\xc2\xcf\x72\x66" "\x9d\xfc\x07\xed\x89\x23\x35\xb6\x52\x35\x4c\xae\x72\xee\x32\xdd\x70\x7a" "\x50\xfc\xc9\x61\xc5\xd2\x69\xdf\x1e\xea\x2c\x9f\xe8\xc4\xd4\x60\x9d\xe5" "\x22\x37\x93\x5a\xf1\xdb\x25\x99\xde\x40\x52\xad\xea\x12\x77\xe0\x0f\x3e" "\x48\x1f\x3b\x2c\xf3\x66\x41\x09\x52\x5f\x4e\xd8\xa1\x6d\x74\xba\x25\x65" "\xf0\xfd\x20\x35\x1f\xfc\xad\xf2\xb2\x3d\x36\x5d\x8b\x2f\xe4\xc1\x71\x7f" "\xbd\xa6\xa3\x05\xad\x5f\xf5\xa8\x1d\x6c\x35\x5d\x2b\x39\xed\x7f\xf7\x41" "\xe2\xda\x02\x36\xf3\x81\x8c\xed\x06\x2d\x9f\x34\x7c\x67\x95\x56\x24\x5a" "\x79\x69\xec\x44\x05\xe8\x94\x3c\x25\x85\xd2\x2d\xca\xaf\xbe\x1d\xc0\xda" "\xdd\xed\xe7\x7b\xda\xca\xba\x72\xd6\x9b\x94\x27\x9a\xcd\xfb\x10\xdf\x30" "\x98\xe8\x7d\x75\xc8\x60\x1c\x3b\xb3\x5a\xb3\x5f\x10\x67\x52\x88\x2e\x62" "\x25\xdc\xd9\x9a\xd4\x32\x2e\xa5\x67\xf9\xb6\xf8\xbf\xed\x7e\xf0\xc0\x8c" "\xd7\x50\x67\x05\xeb\x6c\x68\x1b\x82\x13\x59\x37\x8a\x8e\x84\x40\xea\x72" "\x38\xd5\x60\x19\x2d\x6d\x6f\x6b\x99\x87\x85\xfc\x96\x77\x9c\x43\xd2\x22" "\x74\x01\x75\x75\x8d\x7c\x97\xca\x13\x74\xfb\x9a\xb6\xff\xaa\xc0\x3b\x56" "\xd0\x5a\x72\xa3\x35\xf2\x27\xc6\x40\xdc\x60\xd5\x35\x24\x63\xd6\xbe\xa7" "\xa2\xae\x38\xd5\x33\xbe\xa0\x7d\x56\x75\x4d\xd4\xd2\x0d\xba\x4d\x62\xd8" "\xd1\xe9\x9a\x47\x59\x71\x4e\xa2\x61\x1a\x90\xe9\xeb\x94\x07\x01\xd5\x1b" "\xc3\x04\x37\xd4\x83\xc0\x10\x69\x48\xbd\x35\xff\xb2\x52\x73\xf1\xd0\xe2" "\xd7\x49\x6a\x14\x58\x2a\x45\x6c\x81\x50\x6b\x3e\x72\x0a\x2e\xcc\xb0\x29" "\x46\xb5\xf3\x4a\x49\x60\xd5\x83\x3b\x41\x78\x23\x6c\x9b\x7a\x1b\x99\x27" "\xc9\xac\xe3\x48\xa7\x3c\xa0\x80\x12\x7f\x3c\x61\xd4\x36\x30\xee\x21\xfd" "\xe3\xce\x3e\xbd\xec\x08\x21\x36\x45\x08\xc6\xee\x32\x48\x93\x0c\xe0\xfa" "\x46\xcd\x5e\xf5\x87\x5a\xc9\xd9\x87\x19\x32\x1c\x59\xaa\x0b\x3a\xa4\xa5" "\xaf\xda\x74\x75\x5b\x65\xd5\xf6\x73\x53\x08\xa9\x14\x5e\xc9\x8a\xb9\x36" "\x47\x03\xb7\x22\x98\x1d\xd2\x94\x08\xe2\xbf\x30\x90\x95\x24\x83\x29\x7e" "\xb8\x9a\x74\xfc\x76\xf8\x64\x3d\x7b\x29\x6f\xcd\xf7\x79\x03\xc2\xf8\xcf" "\x00\xe5\x1d\x0a\x86\x73\x6f\xaa\x55\x63\x7d\xe9\x0f\x15\x69\xc7\xc5\xff" "\x29\x77\x29\x23\x9f\x96\x4f\xb6\xf1\xbb\x45\x85\x2b\x78\x89\x4b\x01\xfc" "\x6c\x13\x87\x1a\xb9\x33\x68\x2b\xd2\x15\x8d\x14\x47\x0d\xf8\x0e\x47\x75" "\xaa\xf6\x2a\x48\xc8\xa8\xe2\x4c\x38\x31\x87\xd0\xc6\x7c\x33\x3e\x71\x28" "\xb0\x20\xe0\x2d\x18\x55\x29\x57\x93\x25\xc4\x77\x08\x18\x57\x1e\x40\x95" "\x40\x11\xcc\x39\xb3\x7c\x1d\x29\x78\x66\x18\x22\x1e\x78\x12\x46\x22\x77" "\x2a\xfc\x62\xf7\x4d\x03\x65\x6b\xf8\x35\x09\x44\xcc\xbb\x48\x0d\x64\xe8" "\x3b\xf2\xe0\x41\xa7\x89\xcf\x77\x72\x07\x3c\xf3\xb6\x08\x3b\x79\xf7\xb8" "\xf0\xe5\xe0\x99\xeb\x3f\xf8\xbb\x4e\x08\x60\xab\xbb\xc9\x1f\x35\xfd\x40" "\xed\x03\x06\xe8\x97\x0f\xe7\x90\x01\x74\xe0\xb0\x64\x5f\x99\x67\x90\x21" "\xca\x46\x96\xc2\x0e\x90\x6b\xd6\x1a\x99\x17\x54\x46\x0e\x0e\x6e\x75\x87" "\x73\x22\x04\x98\x2d\xad\xcd\x28\xc8\x3d\x94\xad\x7e\x23\x1a\x79\xe0\x2b" "\x36\x51\x98\x62\x18\xab\xd2\xe7\x95\xb9\xb7\xe4\xd3\xc5\x50\xb8\x64\x77" "\xe9\xaf\xdf\x65\x6f\xec\x80\xc4\x56\xbf\x14\xff\x24\xa2\x0a\x93\xcb\x17" "\x05\xb6\x6c\xbe\xc7\x13\x31\xf2\x5f\xf9\x94\x9f\x83\xe8\x36\xe3\xbe\x08" "\xaa\x8d\x0b\x26\x6b\xf0\x38\x50\x23\x2e\xc7\x15\x3e\x5a\xd6\xf6\x91\x43" "\x92\x80\x72\xff\x13\xbe\x4b\x39\x63\x4b\xc6\xd1\xeb\xdd\x6d\xa8\xed\x52" "\xac\x1d\x38\x20\x6e\x3a\x79\xca\x9b\xbb\xb3\x00\x78\xb3\xf1\x20\xa7\xcd" "\x41\x75\x1a\x11\xef\xe1\x41\x87\x95\x61\x3d\xf8\xbe\x5e\x21\x2d\x82\x1f" "\xaa\xda\x43\x32\x34\x39\x65\xa2\xe3\xae\x98\x7d\x98\xfc\x4d\x69\x32\x84" "\x8b\xaf\x01\xd9\x99\x51\x35\x49\xf4\xb9\x6d\x4b\x89\x8d\x23\x94\xed\xa0" "\xc3\xb9\x41\x3e\x71\x5d\x91\x03\x03\x10\x2c\x34\x8b\xda\x9e\x3e\x5e\x7e" "\x00\x8b\xaf\x7c\xce\x41\x17\xdd\xad\x33\x4d\x30\xaf\xde\xa2\xef\xde\x6e" "\x38\x97\x36\x46\x5b\x2e\x6e\xbd\x4c\xb2\x08\xb1\xe1\x32\x94\x55\x11\x79" "\xa7\x4b\xe2\x4e\x1d\x96\xd1\x83\xa4\xef\x91\xd6\x90\xa4\xb4\x9c\x33\x1d" "\x27\xa1\x8b\x12\x04\xcb\xc2\xc1\xe3\xde\xc7\xeb\x7b\xee\x9d\xb0\x23\x66" "\x98\xba\xf3\xf4\x73\x6f\xd7\x9f\xb7\xfc\xf5\x79\x67\xda\x62\x71\x6d\x63" "\xda\xb6\xae\x72\x92\x11\x85\x84\x46\x4c\x02\x2e\xe1\x81\x91\xb6\x0e\xf8" "\xf4\x04\xf7\xfb\x2e\x1b\xc7\x43\x22\xb0\xb3\x77\xbc\xf8\xce\x62\x60\xf6" "\x9b\xec\x4d\x4a\xbe\x32\xad\xfa\x5b\xc4\xff\x40\xf4\xda\x6c\xe2\xdd\xbd" "\x3e\x87\xe1\x32\xa6\x3d\x43\xc4\x9a\x43\x8b\xc7\xd4\x77\xef\xb3\xd0\x32" "\x5b\x66\x39\x06\xd4\x7a\xa9\x28\x1c\x14\xc4\x1d\x82\x0e\xd4\xa2\x00\x06" "\xc5\xc0\xe6\xb4\x00\xf7\x50\xfe\xcf\x9e\x4e\xc5\x39\x6c\x9a\xec\xb0\x67" "\x18\x0c\x0b\xbc\x9f\x89\xde\xe6\x5b\x44\x49\x8e\x30\x3e\xdd\xdb\x68\xa7" "\xa0\xf2\xc9\xff\x3e\xc1\x1c\x43\x4e\xcf\x6a\xa9\xae\xc1\xf5\xc1\x20\xec" "\xff\x81\x3a\x7d\x6b\x46\x5e\xc4\xca\xbf\x95\xf6\xb5\xd9\x5f\x10\xa8\xdd" "\xc8\x56\xcb\x95\xce\xcf\x53\xb8\x6a\x8a\x12\x4a\x85\xd7\x2a\xb6\x22\x66" "\xe6\x41\xcb\x38\xbc\x36\x4c\x94\xbd\x4b\x1b\x1f\x5b\xfd\x51\x8f\x0c\xba" "\x44\x08\xc6\xcb\xbd\xfa\xbe\x64\x46\xc5\xdb\x8d\x48\x49\xc3\xad\x6c\x48" "\xd2\x2e\xa2\x20\xb2\xfb\x70\x3c\x0f\xe4\xc9\xc6\x66\xbc\xd3\xf2\x9b\x01" "\x9f\x99\x89\x20\xd7\x95\x56\xd0\x86\x0b\xce\x47\xc6\x03\xdd\x5c\x30\x45" "\x39\xf2\xde\x0a\xc2\x2f\xe7\x2a\x78\x13\x19\xae\xb5\xe5\x5f\x47\x74\x4d" "\xb1\x66\x1f\x29\xbe\x0e\x1e\x4e\xda\xa5\xba\x44\x8d\xef\x31\xe8\x69\x29" "\xc6\xf6\x88\xf6\x79\xd8\xac\x93\x7b\x60\xab\xb3\xd2\x7d\xbe\x53\xbb\xdc" "\xf3\xcb\xcc\xb5\x85\x65\x9e\x05\x41\xbc\x68\xd0\x4b\x72\x63\xf8\x73\x99" "\x90\xab\xe6\x06\xc5\x75\xe0\x25\x61\x5e\x3e\x7b\x6e\xc1\x19\x6c\xd9\x07" "\x5e\xa2\x19\xf0\x20\xf1\xeb\xa7\x40\xf9\xe1\x80\x8b\xad\xcc\x61\x74\x43" "\x8f\x80\xcb\x1c\x7f\xfb\xb4\x25\x99\x5a\x92\x9b\xb5\x53\x7b\xa5\x2b\x62" "\xff\xe1\x5a\x77\x05\x9f\x5b\x23\x71\x14\xca\x19\x4c\xf4\x1c\x3b\x64\x49" "\xcb\xa0\xf7\xc3\x20\x91\x14\x7c\x1c\xf3\x3a\xe0\x12\xfc\x29\x20\xc0\x08" "\x80\x6b\x26\x63\xcd\x01\x4e\x56\x23\xcc\x6d\xb8\x11\x41\x14\xee\xf9\xcd" "\x4b\x21\xa8\x63\x11\x7f\x96\x47\x82\x45\xd8\x12\x57\x54\xc0\x9f\xe9\x19" "\x97\x64\xed\x7c\xa2\x08\x31\x7b\x94\x6e\xc2\x3f\x6a\xc5\xfa\x9e\x30\x86" "\xc8\x71\x5c\x28\xb6\x5e\x49\x55\xf7\x0b\xcd\x78\x4a\x67\x3d\x49\x23\x5c" "\xff\xa2\x91\xc7\xe8\x10\x6b\x3b\x89\x94\xd0\xfc\x85\x8d\x7f\xa7\xfb\x44" "\x4f\x2d\x05\xa3\xa9\xb6\x54\x63\x6f\xf4\x0f\xe4\x89\xcf\xd3\x75\x7f\xab" "\x9d\x47\x22\xe7\x25\x2c\x3b\x71\x0e\x8a\x1a\x56\x82\x51\x46\xeb\x2c\xba" "\x75\xe3\x0b\xfe\x19\x28\xda\xa0\x41\xb2\xa4\xeb\x1e\x61\x8f\x6f\x3d\x4f" "\x7f\x3a\xac\x6b\xe5\x1a\xcc\x09\x7c\x60\x30\xaf\x7d\xd3\x55\x5d\x8f\xc3" "\x1e\x7e\x9e\xd7\xa9\x94\xa1\x01\x53\x3b\xb6\x64\x23\x01\x8b\x3f\x67\xd6" "\x68\x4b\x39\x47\xa7\xdc\x80\x2c\x50\x43\x97\xce\xc2\x18\x31\x1c\x34\xac" "\x7d\x5e\x8b\xa5\xef\x1c\x1f\x01\x72\x7c\x5e\x4e\xf1\xd6\x85\x82\xa9\xfb" "\x7d\x3b\x86\xb2\x31\x7e\x94\x3c\xf3\x82\x88\xf9\x50\x2d\x88\x03\x9d\x3a" "\xd8\xd9\x5d\x5b\xa6\x5a\xb7\xfa\x7a\xc8\x05\x4e\xd2\x08\xa1\x2d\x27\xc2" "\x79\xa8\x0d\x66\xe4\x82\x8b\xf4\x09\x04\x2f\xec\x25\x96\x47\x4c\x02\xfd" "\x9b\x6a\x31\x9c\x7f\xea\x81\x50\x0f\x22\xf9\x23\xd2\x32\x78\xf7\xf6\x14" "\xe5\x4a\xcc\x1b\xbf\xf6\x29\x4b\xec\x30\x33\x32\xad\xf0\x1e\x63\x10\x5f" "\x29\xc8\x00\xf2\xa8\x37\x0b\xd2\x46\x0f\x56\xfd\x15\x63\x31\x34\xc5\x39" "\x60\x4c\xca\x17\x40\xc6\xd1\x64\x1f\x3e\x17\x17\xf8\xcd\xfa\x85\xe5\xa8" "\x8f\x82\x21\xc9\x61\x26\xbd\x9d\xe9\xcb\x4b\x31\x71\x99\x53\x50\x22\x4e" "\x76\x4f\xfc\xba\xb7\x18\xed\x2f\x8d\x7e\x19\x92\x5b\xf5\x25\x54\x07\x8f" "\xac\xcc\x40\x5b\x93\x3d\x07\x80\x2a\x8d\x00\x1a\x44\x5e\x5f\x48\x1d\x03" "\xe6\xea\x1e\xbc\xa9\xe7\x8b\x61\x72\x9d\x4d\xad\xfb\x77\x1a\xc1\x82\x41" "\x6b\xae\x8b\x8e\x1f\x76\x31\x4b\xd7\x9f\xfb\x18\x62\xcf\x48\x07\xf3\x2c" "\xf3\xe5\x93\xa5\x89\x6c\x1e\x70\x97\x7e\x5e\x84\x80\xef\x56\x01\x0b\x4e" "\x6f\x4e\x01\xe0\x5e\x53\xf6\x5c\xc1\xdf\x74\xc5\x90\x48\x34\xe1\x41\xf0" "\x2b\x52\xfa\x58\x04\x45\xe9\x7c\x0b\x51\xea\xdb\xa6\x25\x44\x7a\xcc\xfe" "\x5b\x55\x8e\xf9\x9b\x31\x66\x03\xfc\x53\x90\xaf\x5f\x7c\xc5\x1d\xe3\x0e" "\x68\x3b\x3f\x1a\x95\xc5\x2c\xf2\xcc\x1b\xf3\xee\x62\x96\xf9\xb9\x0f\x66" "\xa3\x07\xe8\xda\x06\x4b\xe2\x53\x44\xa4\x61\xe2\x0b\x8e\x8f\x3f\x87\x67" "\x3e\xed\xa5\xdb\x64\x12\x1d\x0b\x97\x4d\xb1\x84\x65\x89\xa4\x9d\x4f\xf8" "\xf3\xab\x3a\x7f\xa4\x5e\xb7\x75\x49\xa5\xf0\x18\x93\x33\x14\x08\x68\x24" "\x02\x6c\x82\x9a\xdc\xca\x0c\xf4\x2b\x27\x0d\xab\x58\x22\x9e\x0d\x26\x52" "\xc6\xda\xb6\x7c\x3f\x04\xf7\x53\xc3\xfa\x85\xe0\x46\x97\x82\x1e\x31\xc8" "\x86\x33\xfe\xb3\x4e\x8e\x81\x72\x68\xd1\x8b\xe3\x98\x97\x53\x19\xfd\x64" "\xd0\xb8\x96\xf9\x94\xd5\xcc\x0f\x6c\xae\xcf\x76\x98\xb1\xf6\x49\x72\xc8" "\x5d\x38\x0b\x40\x3a\x03\x9b\xfe\x03\x02\x1f\x5a\x13\xc9\x8c\xa1\x87\x15" "\xa7\x66\x59\xdd\xf6\xec\x34\xf3\x4f\xc8\xaa\x95\xfa\x4c\x4f\x8c\x3e\x02" "\xd1\xee\x7c\xf4\x42\x5c\x8b\xa4\x04\xb1\xf2\xd3\xe4\x4b\x45\x68\x73\xf2" "\xbd\x48\x90\x62\xda\xa2\x8a\x13\x3b\xf1\xe6\x17\x29\xfb\xcc\xa3\xd7\x7c" "\x2e\x47\xc0\x7d\xd9\x1b\x37\xe0\xa5\x3c\x48\xed\x99\xe9\xa8\x9c\x47\x4d" "\x0a\x1c\x90\x6c\x05\x9f\x44\x22\xa7\x78\xec\x49\xa0\x69\x16\x53\x90\x29" "\x94\x98\x07\xd7\xb5\xbe\xa8\x19\x04\xbb\x61\x8b\x16\xae\x2d\xfd\x53\x6f" "\xb2\x84\x0f\xbc\x77\xf5\x7e\xb9\xc7\xb8\x31\x33\xf1\x5b\x39\x9c\xdd\xa1" "\x95\x8f\x93\xf3\x4a\x7f\xa9\xc9\x64\x13", 4096); *(uint64_t*)0x20000148 = 0x1000; *(uint64_t*)0x20000150 = 0; *(uint64_t*)0x20000158 = 0; syscall(SYS_writev, -1, 0x20000140ul, 2ul); *(uint32_t*)0x20000040 = 1; syscall(SYS_ioctl, r[0], 0x82907003ul, 0x20000040ul); return 0; }