// https://syzkaller.appspot.com/bug?id=10c5292d7c48f788a5d730f6cf45f1f654c59322 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #ifndef __NR_bpf #define __NR_bpf 280 #endif #ifndef __NR_mmap #define __NR_mmap 222 #endif static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } static void kill_and_wait(int pid, int* status) { kill(-pid, SIGKILL); kill(pid, SIGKILL); for (int i = 0; i < 100; i++) { if (waitpid(-1, status, WNOHANG | __WALL) == pid) return; usleep(1000); } DIR* dir = opendir("/sys/fs/fuse/connections"); if (dir) { for (;;) { struct dirent* ent = readdir(dir); if (!ent) break; if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0) continue; char abort[300]; snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort", ent->d_name); int fd = open(abort, O_WRONLY); if (fd == -1) { continue; } if (write(fd, abort, 1) < 0) { } close(fd); } closedir(dir); } else { } while (waitpid(-1, status, __WALL) != pid) { } } static void setup_test() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setpgrp(); write_file("/proc/self/oom_score_adj", "1000"); } static void execute_one(void); #define WAIT_FLAGS __WALL static void loop(void) { int iter = 0; for (;; iter++) { int pid = fork(); if (pid < 0) exit(1); if (pid == 0) { setup_test(); execute_one(); exit(0); } int status = 0; uint64_t start = current_time_ms(); for (;;) { sleep_ms(10); if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid) break; if (current_time_ms() - start < 15000) continue; kill_and_wait(pid, &status); break; } } } void execute_one(void) { if (write(1, "executing program\n", sizeof("executing program\n") - 1)) { } // bpf$PROG_LOAD arguments: [ // cmd: const = 0x5 (8 bytes) // arg: ptr[in, bpf_prog_t[flags[bpf_prog_type, int32], // bpf_prog_attach_types, bpf_btf_id[opt], fd_bpf_prog[opt]]] { // bpf_prog_t[flags[bpf_prog_type, int32], bpf_prog_attach_types, // bpf_btf_id[opt], fd_bpf_prog[opt]] { // type: bpf_prog_type = 0x1 (4 bytes) // ninsn: bytesize8 = 0xe (4 bytes) // insns: ptr[inout, array[ANYUNION]] { // array[ANYUNION] { // union ANYUNION { // ANYBLOB: buffer: {b7 00 00 00 ff 00 00 1f bf a3 00 00 00 00 00 // 00 07 03 00 00 f0 ff ff ff 6a 0a f0 ff f8 ff ff ff 61 a4 f0 ff // 00 00 00 00 66 04 02 00 00 00 00 00 e5 00 02 00 00 00 00 00 47 // 04 00 00 01 ed 00 00 62 03 00 00 00 ff ff ff cf 44 00 00 00 00 // 00 00 7a 0a 00 fe 00 ff ff ff c3 03 00 00 f1 00 00 00 b4 00 00 // 00 00 00 00 00 95 00 00 00 00 00 00 00 02 3b c0 65 b5 81 11 c6 // df a0 41 b6 3a f4 a3 91 24 35 f1 a8 64 a7 10 e4 d5 8d b6 a6 93 // 00 2e 7f 3b e3 61 91 7a de f6 ee 1c 8a 2a 4f 8e f1 e5 0b ec b1 // 9b c4 61 e9 1a 71 68 c5 00 00 00 01 90 f3 20 50 e4 36 fe 27 5d // af 51 ef d6 01 b6 bf 01 c8 e8 b1 b5 26 37 5e c4 dd 6f cd 82 e4 // fe e5 be f7 af 9a a0 d7 d6 00 c0 95 19 9f e3 ff 31 28 e5 99 b0 // ea eb bd bd 73 2c 9c c0 0e ec 36 3e 4a 8f 64 56 e2 cc 21 55 7c // 0a fc 64 6c b7 79 8b 3e 64 40 c2 fb db 00 c3 7d fc a3 e3 52 08 // b0 bb 0d 2c d8 29 e6 54 40 0e 24 38 ec 64 9d c7 4a 28 61 06 43 // a9 8d 9e c2 1e ad 2e d5 1b 10 4d 4d 91 af 25 b8 45 d8 a7 92 5c // 31 09 b1 51 b8 b9 f7 5d d0 8d 12 3d ed a8 8c 65 8d 42 ec bf 28 // bf 70 76 c1 5b 46 3b eb aa 2c 59 8b 4f c7 2f 52 6d 8e 8a fc b9 // 13 46 6a aa 7f 6d f7 02 52 e7 91 66 d8 58 fc d0 e0 6d d3 1a f9 // 61 2f 24 60 d0 b1 10 08 e5 9a 59 23 90 6f 88 b5 39 87 ad 17 14 // e7 2b a7 a5 4f 0c 33 d3 90 00 d0 6a 59 ff 61 62 36 fd 9a a5 8f // 24 77 18 4b 6a 89 ad af 17 b0 a6 04 1b de f7 28 d2 36 61 90 74 // d6 eb df d1 f5 08 90 48 dd ff 6d a4 0f 94 11 fe 72 26 31 cb 46 // 76 00 ad e7 00 63 e5 29 15 69 b3 3d 21 da e3 56 e1 c5 1f 03 a8 // 01 be 81 89 67 9a 16 da 18 ec 0a e5 64 16 2a 27 af ea 62 d8 4f // 3a 10 74 64 43 d6 43 8e 95 95 32 e0 61 7d 41 9c 6b c6 ea 9f 2b // ca 44 64 f5 6e 24 e6 d2 10 5b d9 01 20 4a b3 94 90 06 c3 17 21 // 71 65 2d 95 0a d3 19 28 b0 b0 c3 dc 28 69 f4 78 34 1d 02 d0 f5 // ad 94 b0 81 fc d5 07 ac b4 b9 c6 5f ee 9d 5a 17 f4 8a 73 82 f1 // 3d 00 00 00 22 5d 85 ae 49 ce e3 83 dc 50 49 07 6b 98 9b 40 00 // 00 00 00 00 00 da 60 d2 ae 20 cf b9 1d 6a 49 96 47 57 cd f5 38 // f9 ce 2b db 1a b0 62 cd 54 e6 70 11 d3 55 d8 4c e9 7b b0 c6 b4 // a5 95 e4 87 ef bb 2d 71 cd e2 c1 40 95 2f 9a 0f 0b c6 98 0f e7 // 86 83 ac 5c 0c 31 03 25 99 dd d7 10 63 be 92 61 b2 e1 aa b1 67 // 5b 34 a2 20 48 ef 8c 12 6a ee f5 f5 10 a8 f1 ad ed 94 a1 29 e4 // ae c6 f8 d9 ab 06 fa ff c3 a1 5d 96 c2 ea 3e 2e 04 cf e0 31 b2 // 87 53 53 19 3f 82 ad e6 9d 05 40 05 9f e6 c7 fe 7c d8 69 75 02 // c7 59 65 66 d6 74 e4 25 da 5e 87 e5 96 02 a9 f6 59 05 21 d3 1d // 38 04 b3 e0 a1 05 3a bd c3 12 82 df b1 5e b6 84 1b b6 4a 1b 30 // 45 02 dd a7 87 34 3c e3 c9 53 99 2e 4a 98 2f 3c 48 15 3b aa e2 // 44 e7 bf 37 54 8c 7f 1a 4c ad 24 22 ee 96 5a 38 f7 de fb d2 16 // 02 42 b1 04 e2 0d c2 d9 b0 c3 56 08 d4 02 cc dd 90 69 bd 50 b9 // 94 fd a7 a9 de 44 02 8d 61 12 a0 c2 d2 1b 2d c9 88 16 10 6d ec // 28 ea eb 88 34 18 f5 62 ae 00 00 3e a9 6d 10 f1 72 c0 37 4d 6e // ed 82 64 16 05 00 00 00 0b fe 9b 4a 9c 5a 90 ff 59 d5 4d 1f 92 // ec c4 e9 5d d2 d1 56 ae 83 83 11 7c 03 98 62 19 88 99 b2 12 c5 // 53 18 29 42 70 a1 ad 10 c8 0f ef 7c 24 d4 7a fc e8 29 ba 0f 85 // da 6d 88 8f 18 ea 40 ab 95 9f 60 74 ab 2a 40 d8 5d 15 f2 79 b5 // 13 cd c6 c0 e5 7f b1 c1 ca 57 13 80 d7 b4 ea d3 5a 38 5e 0b 4a // 26 b7 02 39 6d f7 e0 c1 e0 2b 6e 41 14 f2 44 a9 bf 93 f0 4b f0 // 72 f0 86 1f 75 80 e6 9d b3 84 ac 7e ee dc f2 ba 1a 95 08 f9 d6 // ab a5 82 a8 96 a9 f1 ff a9 68 ea ce a7 5c af 82 2a 7a 63 ba 34 // 01 5e a5 aa 00 00 00 00 00 00 00 00 83 23 71 fe 5b c6 21 42 6d // 1e d0 a4 a9 97 02 cc 1b 69 2c 3f 0b 15 62 9e af 4c 12 a1 e7 17 // d2 91 35 75 32 08 16 5b 9c db ae 2e d9 dc 73 58 f0 e3 ad de 0b // 72 7f 27 fe eb 74 4d dc c5 36 cb ae 31 5c 7d 1f e1 39 95 62 ba // 68 24 84 0b d2 95 16 80 f6 f2 f9 a6 a8 34 69 62 a3 50 84 5f fa // 0d 82 9e 4f 79 ad c2 87 90 69 43 40 8e 6d f3 c3 bf d0 3a ac 93 // df 88 66 fb 01 0a ec 0e 92 be d1 fe 39 af 16 9d 2a 46 6f 0d b6 // f3 d9 43 6a 7d 55 fc 30 51 1d 00 00 00 00 c9 52 65 b2 bd 83 d6 // 4a 53 28 69 d7 01 72 3f ed cb ad 93 7f 77 8a f0 83 e0 55 f6 13 // 8a 75 7e bd 0e d9 35 17 a6 b2 44 f9 ac f4 1a c5 d7 3a 00 83 64 // e0 60 6a 59 48 07 03 1f c2 f5 2c 87 85 fe 07 21 71 9b 3d 65 40 // 26 c6 ea 08 b8 3b 12 31 45 ab 57 03 da d8 44 ce b2 01 dd eb 6d // c5 f6 a9 03 79 22 83 c4 2e fc 54 fa 84 32 3a fc 4c 10 ef f4 62 // c8 84 31 87 f1 dd 48 ef 3f a2 93 77 4d 58 29 56 ff 0f 40 b1 0c // a9 4f 6f ee b2 89 3c 17 88 8e 1c db a9 4a 6e a8 0c 33 ea d5 72 // 2c 32 93 a4 93 f1 47 95 31 dd 88 26 14 58 f4 0d 31 fe 8d f1 5e // fa ae ea 83 15 55 87 7f 95 38 d6 ee 6b a6 58 93 ff 1f 90 8b a7 // 55 4b a5 83 fe f3 ec 79 32 f5 95 4f 31 a8 78 e2 fa e6 69 1d 1a // ee 1d a0 2b a5 16 46 7d f3 e7 d1 da ac 42 73 80 12 e4 fe e1 8a // 22 da 19 fc db 4c 28 90 cd a1 f9 6b 95 25 11 e3 a6 9d 69 4d 62 // 5e 0b 2f 80 88 90 20 5f 3a 6d a2 81 9d 2f 9e 77 c7 c6 4a ff a5 // 4f ec 01 36 cb af a5 f6 2e 96 75 3b 63 9a 92 45 99 c1 f6 92 19 // 92 7e a5 30 1f ff 0a 60 63 d4 27 f0 68 84 30 75 4c 02 18 0d 61 // 54 2c 25 00 00 00 00 00 00 00 00 05 a7 b5 7f 03 ca 91 a0 1b a2 // e3 0c a9 be 8e bc 15 ec b4 d9 16 75 76 79 99 d1 46 ae f7 79 97 // 38 b2 92 fd 64 0d fe f6 b0 4d 08 6f 73 7a 15 9d 7e 0c 6e 4d 81 // ad 64 a8 bb ca 48 56 83 25 b2 96 9e 2b 15 f3 6b 78 8b ce 5c cd // ba f7 5c 94 cb 93 49 9f 69 47 a9 67 a7 bc e1 4c 6d e4 e7 c0 66 // 0d 80 01 0f 5c 65 3d 22 d4 90 30 a8 c2 a4 ab 59 5b f4 23 8f 18 // ca 42 8d af c7 ac 96 d4 04 60 7a 00 00 00 00 51 a2 10 4f 22 e6 // db 5a 62 b5 08 9c 1b 45 28 2d 38 86 4d aa 3a e8 1d 6b 09 68 d1 // d2 86 7b 91 b7 d1 20 61 7d 12 d9 1d b2 63 3d 68 64 da 40 b5 47 // 83 a1 7a ae b6 73 7c 32 3f 9f 98 e3 54 cc 98 dc fe 23 ad 01 bd // 1c 61 56 3e 69 ff e1 c2 c7 3e 16 61 26 11 73 f3 59 e9 3d 2c 5e // 42 4c 17 99 88 02 00 8f 02 32 b3 95 5e 05 2a 4c ec d8 90 08 f7 // 03 14 a0 bd d4 91 ec 86 a4 55 5d 89 fe 01 20 f6 4c 62 e8 e3 ed // 8b cb 45 20 2c 3d 4b be c8 d7 22 82 4c 0e bc a8 db 1e a4 a0 03 // d2 fb dc 1f 9b e7 85 37 75 6a b5 bb e4 fe 9a f5 d7 85 d0 12 81 // 71 c9 0d 99 00 ce 25 32 b0 f9 d0 1c 4b 45 29 4f bb a4 68 df 3e // 1b 39 3c b4 e6 2e 75 45 98 e4 7d f6 bd 06 43 1c 94 bc 5d 04 78 // 99 fd 21 9f 44 8b f9 18 9c 65 c9 d9 1e d9 2c ac 7c 2c cd 17 d3 // 38 bb da 6b 52 a3 73 80 3a 9e fe 44 f8 69 09 bc 90 ad db 7b 9a // ee 81 3d f5 34 aa c4 b3 09 3c 91 b8 06 8c d8 49 90 45 68 91 66 // 94 d4 61 b7 6a 58 d8 8c f0 f5 20 31 0a 1e 9f dc 18 cd e9 8d 66 // 2e ee 07 75 15 d0 a8 81 19 22 92 8e 00 00 00 ab 3d 13 11 b8 24 // 32 66 d8 70 47 f6 01 fa 88 a0 da 36 b9 f3 02 e8 26 23 95 17 43 // 28 f2 48 2d 14 00 8d e8 30 70 74 4f 14 3f de c9 0b a5 a8 26 68 // d5 fa c1 14 c1 39 55 ad 6d ca 5d b2 23 1d 8b a1 4c 54 c4 7e d0 // 4a 4b 4a ce 17 e3 57 e1 d6 43 23 99 f8 7a 7a 14 24 5b bd 79 6a // 09 31 3b 24 7b 95 d3 7f f4 0a 40 4b da d7 4b d2 00 00 00 00 00 // 00 00 00 00 00 99 fe f7 cd 7a f3 ce 64 a9 2f 95 d8 9d 12 5b 1e // 64 12 40 d7 e5 e2 7a 3d 1f 76 84 44 8c 3e 38 22 d6 17 e2 05 06 // 12 98 b9 39 a1 91 be 4b 48 e1 69 bd e2 ca e3 ac cc 5b d4 0a 29 // 68 b5 9c 93 d3 5f 8e 42 36 6f de f9 a2 ab b8 a9 98 2c e6 8a bf // f2 88 61 aa c8 30 2d 26 85 69 dd 42 e1 94 e3 30 c7 aa a5 4e bb // ce fd 23 f2 1c e8 15 3b 99 26 e1 2e 92 5c b5 61 19 df 72 c7 53 // 3a 48 d0 28 ad 0c 74 e2 a9 47 8f a3 be 18 a1 a2 b6 50 79 cc 1c // 7b c4 6d d1 23 05 a1 ae 9d d1 9e 8d 52 52 06 c0 a7 28 cf d4 21 // 93 ab e8 13 0b 51 d6 c9 b9 4c 55 13 df 2d 85 e8 c0 1a 2d 69 84 // 1f 3d 77 99 ac 04 bd c5 90 bb 1c 89 b9 c6 95 f1 63 e5 73 43 c9 // bf b5 99 09 43 3c 90 01 c5 f8 b2 3e 38 53 4a 53 8f c9 33 ca c6 // c2 a9 2d 03 8d f6 38 a0 f2 26 df 9f b8 57 bd 41 4c 2c d6 99 85 // e8 05 3e 3d fa 41 61 4d 7c 74 d0 4d 8c 24 71 04 1d 17 c7 30 fa // d2 83 95 f8 d4 68 88 98 cd 58 b9 d6 00 c8 51 62 65 29 bb 58 aa // 36 4b 55 e7 3f 05 34 50 66 5e 7b 94 ad 10 12 fd 7a 81 39 56 6f // d5 e5 9c 84 f4 ab 27 9b 1b 99 c0 28 db 4c b9 68 0c 80 35 f9 67 // db 18 de 73 88 44 da 7e 26 0a 83 0c 1f fa 49 f5 af 3c 15 42 3a // 0e 31 5a cb 82 a3 e8 92 18 cb 31 4e 68 fd a4 d9 4a a1 d8 15 ba // bc 13 b9 fd 33 6d 20 5c 59 13 ef 67 00 00 00 00 00 00 00 00 ba // 47 0b fe 62 90 42 13 38 ef 8f 6d 27 11 7c d1 47 1b f3 c0 b6 44 // 16 fb be 95 5d a0 28 1e 7e f7 f7 d5 17 61 50 e8 6c da 98 d0 7f // 7d e2 08 8c b2 ff d1 d4 c7 10 97 63 5c 2b b3 d9 a0 b0 1e 75 72 // 56 ee 42 7f 0a 24 4d 48 68 2b f8 9e 22 79 b3 83 b6 16 b4 0f 11 // 61 72 bc 1b 99 5e b2 c1 22 05 97 af 8d f5 26 46 f1 f0 cb 65 cf // a7 e0 38 e8 bb 5d 4d 52 b8 6a 61 d8 2d c1 4a 4f 5c c7 e6 06 1c // 65 cc db c2 af c3 f3 63 ec f3 4a d0 b2 27 68 7c 3e a8 d6 36 83 // dd d5 91 41 16 ed d9 e0 75 da 9e 36 38 64 71 88 bc 8f 95 10 7c // 92 50 99 5e b6 ca dc d0 f6 5b 85 04 ff 10 30 4f 2c eb a2 75 f9 // d4 85 ed 55 54 d6 40 05 db 87 7f 0f bb 3b eb a5 96 66 ff 66 f1 // 32 d5 07 78 35 82 35 92 d6 d3 92 f5 ff 62 f6 f8 76 eb 10 d8 cb // f0 a7 3f 84 21 b7 4c 89 16 e4 07 7b 88 66 c9 5a d8 8b c7 13 02 // 44 18 3e d2 16 21 0f 10 f6 9b 3e 0e e1 3d 06 e4 eb 24 0c ce 5e // c1 c3 b1 de fe 4c 0f 8b 83 a3 4e f4 f5 f8 f9 ce ef b6 78 ad 29 // d3 68 3e 3c 44 a0 15 49 e5 5f fc a4 1c 0b 06 e0 13 f0 54 25 76 // 46 c5 8b 66 7e c0 70 10 04 c2 39 58 9b 3e 64 ef 5e 1d 5e d2 2b // 5f d5 a9 0f e3 45 33 27 c3 65 2d 5c 97 62 42 8f 0b d0 17 8d 1b // 80 a6 0f 64 34 3a b7 7d 8b aa 0a 38 87 11 c8 d2 d6 d3 e9 04 98 // 14 b1 5b 6e a2 13 87 04 09 89 d6 9c 3a a2 72 56 c5 57 80 f3 3d // 20 82 3d 8e 2e b6 e5 68 50 16 29 69 bf 4c 6c 96 32 a5 5c f5 be // 00 00 00 00 00 00 00 00 00 00} (length 0xb80) // } // } // } // license: ptr[in, buffer] { // buffer: {47 50 4c 00} (length 0x4) // } // loglev: int32 = 0x0 (4 bytes) // logsize: len = 0x0 (4 bytes) // log: nil // kern_version: bpf_kern_version = 0x0 (4 bytes) // flags: bpf_prog_load_flags = 0x0 (4 bytes) // prog_name: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00} // (length 0x10) prog_ifindex: ifindex (resource) expected_attach_type: // union bpf_prog_attach_types { // fallback: bpf_attach_types = 0x0 (4 bytes) // } // btf_fd: fd_btf (resource) // func_info_rec_size: const = 0x8 (4 bytes) // func_info: ptr[in, bpf_func_info] { // bpf_func_info { // insn_off: int32 = 0x0 (4 bytes) // type_id: int32 = 0x0 (4 bytes) // } // } // func_info_cnt: len = 0x0 (4 bytes) // line_info_rec_size: const = 0x10 (4 bytes) // line_info: ptr[in, bpf_line_info] { // bpf_line_info { // insn_off: int32 = 0x0 (4 bytes) // file_name_off: int32 = 0x0 (4 bytes) // line_off: int32 = 0x0 (4 bytes) // line_col: int32 = 0x0 (4 bytes) // } // } // line_info_cnt: len = 0xfffffffffffffd64 (4 bytes) // attach_btf_id: bpf_btf_id (resource) // attach_prog_fd: fd_bpf_prog (resource) // core_relo_cnt: len = 0x0 (4 bytes) // fd_array: nil // core_relos: nil // core_relo_rec_size: const = 0x10 (4 bytes) // log_true_size: int32 = 0x0 (4 bytes) // prog_token_fd: union _bpf_prog_t[flags[bpf_prog_type, int32], // bpf_prog_attach_types, bpf_btf_id[opt], // fd_bpf_prog[opt]]_prog_token_fd_wrapper { // void: buffer: {} (length 0x0) // } // pad: union _bpf_prog_t[flags[bpf_prog_type, int32], // bpf_prog_attach_types, bpf_btf_id[opt], // fd_bpf_prog[opt]]_pad_wrapper { // value: const = 0x0 (4 bytes) // } // } // } // size: len = 0x48 (8 bytes) // ] // returns fd_bpf_prog *(uint32_t*)0x200017c0 = 1; *(uint32_t*)0x200017c4 = 0xe; *(uint64_t*)0x200017c8 = 0x20001880; memcpy( (void*)0x20001880, "\xb7\x00\x00\x00\xff\x00\x00\x1f\xbf\xa3\x00\x00\x00\x00\x00\x00\x07\x03" "\x00\x00\xf0\xff\xff\xff\x6a\x0a\xf0\xff\xf8\xff\xff\xff\x61\xa4\xf0\xff" "\x00\x00\x00\x00\x66\x04\x02\x00\x00\x00\x00\x00\xe5\x00\x02\x00\x00\x00" "\x00\x00\x47\x04\x00\x00\x01\xed\x00\x00\x62\x03\x00\x00\x00\xff\xff\xff" "\xcf\x44\x00\x00\x00\x00\x00\x00\x7a\x0a\x00\xfe\x00\xff\xff\xff\xc3\x03" "\x00\x00\xf1\x00\x00\x00\xb4\x00\x00\x00\x00\x00\x00\x00\x95\x00\x00\x00" "\x00\x00\x00\x00\x02\x3b\xc0\x65\xb5\x81\x11\xc6\xdf\xa0\x41\xb6\x3a\xf4" "\xa3\x91\x24\x35\xf1\xa8\x64\xa7\x10\xe4\xd5\x8d\xb6\xa6\x93\x00\x2e\x7f" "\x3b\xe3\x61\x91\x7a\xde\xf6\xee\x1c\x8a\x2a\x4f\x8e\xf1\xe5\x0b\xec\xb1" "\x9b\xc4\x61\xe9\x1a\x71\x68\xc5\x00\x00\x00\x01\x90\xf3\x20\x50\xe4\x36" "\xfe\x27\x5d\xaf\x51\xef\xd6\x01\xb6\xbf\x01\xc8\xe8\xb1\xb5\x26\x37\x5e" "\xc4\xdd\x6f\xcd\x82\xe4\xfe\xe5\xbe\xf7\xaf\x9a\xa0\xd7\xd6\x00\xc0\x95" "\x19\x9f\xe3\xff\x31\x28\xe5\x99\xb0\xea\xeb\xbd\xbd\x73\x2c\x9c\xc0\x0e" "\xec\x36\x3e\x4a\x8f\x64\x56\xe2\xcc\x21\x55\x7c\x0a\xfc\x64\x6c\xb7\x79" "\x8b\x3e\x64\x40\xc2\xfb\xdb\x00\xc3\x7d\xfc\xa3\xe3\x52\x08\xb0\xbb\x0d" "\x2c\xd8\x29\xe6\x54\x40\x0e\x24\x38\xec\x64\x9d\xc7\x4a\x28\x61\x06\x43" "\xa9\x8d\x9e\xc2\x1e\xad\x2e\xd5\x1b\x10\x4d\x4d\x91\xaf\x25\xb8\x45\xd8" "\xa7\x92\x5c\x31\x09\xb1\x51\xb8\xb9\xf7\x5d\xd0\x8d\x12\x3d\xed\xa8\x8c" "\x65\x8d\x42\xec\xbf\x28\xbf\x70\x76\xc1\x5b\x46\x3b\xeb\xaa\x2c\x59\x8b" "\x4f\xc7\x2f\x52\x6d\x8e\x8a\xfc\xb9\x13\x46\x6a\xaa\x7f\x6d\xf7\x02\x52" "\xe7\x91\x66\xd8\x58\xfc\xd0\xe0\x6d\xd3\x1a\xf9\x61\x2f\x24\x60\xd0\xb1" "\x10\x08\xe5\x9a\x59\x23\x90\x6f\x88\xb5\x39\x87\xad\x17\x14\xe7\x2b\xa7" "\xa5\x4f\x0c\x33\xd3\x90\x00\xd0\x6a\x59\xff\x61\x62\x36\xfd\x9a\xa5\x8f" "\x24\x77\x18\x4b\x6a\x89\xad\xaf\x17\xb0\xa6\x04\x1b\xde\xf7\x28\xd2\x36" "\x61\x90\x74\xd6\xeb\xdf\xd1\xf5\x08\x90\x48\xdd\xff\x6d\xa4\x0f\x94\x11" "\xfe\x72\x26\x31\xcb\x46\x76\x00\xad\xe7\x00\x63\xe5\x29\x15\x69\xb3\x3d" "\x21\xda\xe3\x56\xe1\xc5\x1f\x03\xa8\x01\xbe\x81\x89\x67\x9a\x16\xda\x18" "\xec\x0a\xe5\x64\x16\x2a\x27\xaf\xea\x62\xd8\x4f\x3a\x10\x74\x64\x43\xd6" "\x43\x8e\x95\x95\x32\xe0\x61\x7d\x41\x9c\x6b\xc6\xea\x9f\x2b\xca\x44\x64" "\xf5\x6e\x24\xe6\xd2\x10\x5b\xd9\x01\x20\x4a\xb3\x94\x90\x06\xc3\x17\x21" "\x71\x65\x2d\x95\x0a\xd3\x19\x28\xb0\xb0\xc3\xdc\x28\x69\xf4\x78\x34\x1d" "\x02\xd0\xf5\xad\x94\xb0\x81\xfc\xd5\x07\xac\xb4\xb9\xc6\x5f\xee\x9d\x5a" "\x17\xf4\x8a\x73\x82\xf1\x3d\x00\x00\x00\x22\x5d\x85\xae\x49\xce\xe3\x83" "\xdc\x50\x49\x07\x6b\x98\x9b\x40\x00\x00\x00\x00\x00\x00\xda\x60\xd2\xae" "\x20\xcf\xb9\x1d\x6a\x49\x96\x47\x57\xcd\xf5\x38\xf9\xce\x2b\xdb\x1a\xb0" "\x62\xcd\x54\xe6\x70\x11\xd3\x55\xd8\x4c\xe9\x7b\xb0\xc6\xb4\xa5\x95\xe4" "\x87\xef\xbb\x2d\x71\xcd\xe2\xc1\x40\x95\x2f\x9a\x0f\x0b\xc6\x98\x0f\xe7" "\x86\x83\xac\x5c\x0c\x31\x03\x25\x99\xdd\xd7\x10\x63\xbe\x92\x61\xb2\xe1" "\xaa\xb1\x67\x5b\x34\xa2\x20\x48\xef\x8c\x12\x6a\xee\xf5\xf5\x10\xa8\xf1" "\xad\xed\x94\xa1\x29\xe4\xae\xc6\xf8\xd9\xab\x06\xfa\xff\xc3\xa1\x5d\x96" "\xc2\xea\x3e\x2e\x04\xcf\xe0\x31\xb2\x87\x53\x53\x19\x3f\x82\xad\xe6\x9d" "\x05\x40\x05\x9f\xe6\xc7\xfe\x7c\xd8\x69\x75\x02\xc7\x59\x65\x66\xd6\x74" "\xe4\x25\xda\x5e\x87\xe5\x96\x02\xa9\xf6\x59\x05\x21\xd3\x1d\x38\x04\xb3" "\xe0\xa1\x05\x3a\xbd\xc3\x12\x82\xdf\xb1\x5e\xb6\x84\x1b\xb6\x4a\x1b\x30" "\x45\x02\xdd\xa7\x87\x34\x3c\xe3\xc9\x53\x99\x2e\x4a\x98\x2f\x3c\x48\x15" "\x3b\xaa\xe2\x44\xe7\xbf\x37\x54\x8c\x7f\x1a\x4c\xad\x24\x22\xee\x96\x5a" "\x38\xf7\xde\xfb\xd2\x16\x02\x42\xb1\x04\xe2\x0d\xc2\xd9\xb0\xc3\x56\x08" "\xd4\x02\xcc\xdd\x90\x69\xbd\x50\xb9\x94\xfd\xa7\xa9\xde\x44\x02\x8d\x61" "\x12\xa0\xc2\xd2\x1b\x2d\xc9\x88\x16\x10\x6d\xec\x28\xea\xeb\x88\x34\x18" "\xf5\x62\xae\x00\x00\x3e\xa9\x6d\x10\xf1\x72\xc0\x37\x4d\x6e\xed\x82\x64" "\x16\x05\x00\x00\x00\x0b\xfe\x9b\x4a\x9c\x5a\x90\xff\x59\xd5\x4d\x1f\x92" "\xec\xc4\xe9\x5d\xd2\xd1\x56\xae\x83\x83\x11\x7c\x03\x98\x62\x19\x88\x99" "\xb2\x12\xc5\x53\x18\x29\x42\x70\xa1\xad\x10\xc8\x0f\xef\x7c\x24\xd4\x7a" "\xfc\xe8\x29\xba\x0f\x85\xda\x6d\x88\x8f\x18\xea\x40\xab\x95\x9f\x60\x74" "\xab\x2a\x40\xd8\x5d\x15\xf2\x79\xb5\x13\xcd\xc6\xc0\xe5\x7f\xb1\xc1\xca" "\x57\x13\x80\xd7\xb4\xea\xd3\x5a\x38\x5e\x0b\x4a\x26\xb7\x02\x39\x6d\xf7" "\xe0\xc1\xe0\x2b\x6e\x41\x14\xf2\x44\xa9\xbf\x93\xf0\x4b\xf0\x72\xf0\x86" "\x1f\x75\x80\xe6\x9d\xb3\x84\xac\x7e\xee\xdc\xf2\xba\x1a\x95\x08\xf9\xd6" "\xab\xa5\x82\xa8\x96\xa9\xf1\xff\xa9\x68\xea\xce\xa7\x5c\xaf\x82\x2a\x7a" "\x63\xba\x34\x01\x5e\xa5\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x83\x23\x71" "\xfe\x5b\xc6\x21\x42\x6d\x1e\xd0\xa4\xa9\x97\x02\xcc\x1b\x69\x2c\x3f\x0b" "\x15\x62\x9e\xaf\x4c\x12\xa1\xe7\x17\xd2\x91\x35\x75\x32\x08\x16\x5b\x9c" "\xdb\xae\x2e\xd9\xdc\x73\x58\xf0\xe3\xad\xde\x0b\x72\x7f\x27\xfe\xeb\x74" "\x4d\xdc\xc5\x36\xcb\xae\x31\x5c\x7d\x1f\xe1\x39\x95\x62\xba\x68\x24\x84" "\x0b\xd2\x95\x16\x80\xf6\xf2\xf9\xa6\xa8\x34\x69\x62\xa3\x50\x84\x5f\xfa" "\x0d\x82\x9e\x4f\x79\xad\xc2\x87\x90\x69\x43\x40\x8e\x6d\xf3\xc3\xbf\xd0" "\x3a\xac\x93\xdf\x88\x66\xfb\x01\x0a\xec\x0e\x92\xbe\xd1\xfe\x39\xaf\x16" "\x9d\x2a\x46\x6f\x0d\xb6\xf3\xd9\x43\x6a\x7d\x55\xfc\x30\x51\x1d\x00\x00" "\x00\x00\xc9\x52\x65\xb2\xbd\x83\xd6\x4a\x53\x28\x69\xd7\x01\x72\x3f\xed" "\xcb\xad\x93\x7f\x77\x8a\xf0\x83\xe0\x55\xf6\x13\x8a\x75\x7e\xbd\x0e\xd9" "\x35\x17\xa6\xb2\x44\xf9\xac\xf4\x1a\xc5\xd7\x3a\x00\x83\x64\xe0\x60\x6a" "\x59\x48\x07\x03\x1f\xc2\xf5\x2c\x87\x85\xfe\x07\x21\x71\x9b\x3d\x65\x40" "\x26\xc6\xea\x08\xb8\x3b\x12\x31\x45\xab\x57\x03\xda\xd8\x44\xce\xb2\x01" "\xdd\xeb\x6d\xc5\xf6\xa9\x03\x79\x22\x83\xc4\x2e\xfc\x54\xfa\x84\x32\x3a" "\xfc\x4c\x10\xef\xf4\x62\xc8\x84\x31\x87\xf1\xdd\x48\xef\x3f\xa2\x93\x77" "\x4d\x58\x29\x56\xff\x0f\x40\xb1\x0c\xa9\x4f\x6f\xee\xb2\x89\x3c\x17\x88" "\x8e\x1c\xdb\xa9\x4a\x6e\xa8\x0c\x33\xea\xd5\x72\x2c\x32\x93\xa4\x93\xf1" "\x47\x95\x31\xdd\x88\x26\x14\x58\xf4\x0d\x31\xfe\x8d\xf1\x5e\xfa\xae\xea" "\x83\x15\x55\x87\x7f\x95\x38\xd6\xee\x6b\xa6\x58\x93\xff\x1f\x90\x8b\xa7" "\x55\x4b\xa5\x83\xfe\xf3\xec\x79\x32\xf5\x95\x4f\x31\xa8\x78\xe2\xfa\xe6" "\x69\x1d\x1a\xee\x1d\xa0\x2b\xa5\x16\x46\x7d\xf3\xe7\xd1\xda\xac\x42\x73" "\x80\x12\xe4\xfe\xe1\x8a\x22\xda\x19\xfc\xdb\x4c\x28\x90\xcd\xa1\xf9\x6b" "\x95\x25\x11\xe3\xa6\x9d\x69\x4d\x62\x5e\x0b\x2f\x80\x88\x90\x20\x5f\x3a" "\x6d\xa2\x81\x9d\x2f\x9e\x77\xc7\xc6\x4a\xff\xa5\x4f\xec\x01\x36\xcb\xaf" "\xa5\xf6\x2e\x96\x75\x3b\x63\x9a\x92\x45\x99\xc1\xf6\x92\x19\x92\x7e\xa5" "\x30\x1f\xff\x0a\x60\x63\xd4\x27\xf0\x68\x84\x30\x75\x4c\x02\x18\x0d\x61" "\x54\x2c\x25\x00\x00\x00\x00\x00\x00\x00\x00\x05\xa7\xb5\x7f\x03\xca\x91" "\xa0\x1b\xa2\xe3\x0c\xa9\xbe\x8e\xbc\x15\xec\xb4\xd9\x16\x75\x76\x79\x99" "\xd1\x46\xae\xf7\x79\x97\x38\xb2\x92\xfd\x64\x0d\xfe\xf6\xb0\x4d\x08\x6f" "\x73\x7a\x15\x9d\x7e\x0c\x6e\x4d\x81\xad\x64\xa8\xbb\xca\x48\x56\x83\x25" "\xb2\x96\x9e\x2b\x15\xf3\x6b\x78\x8b\xce\x5c\xcd\xba\xf7\x5c\x94\xcb\x93" "\x49\x9f\x69\x47\xa9\x67\xa7\xbc\xe1\x4c\x6d\xe4\xe7\xc0\x66\x0d\x80\x01" "\x0f\x5c\x65\x3d\x22\xd4\x90\x30\xa8\xc2\xa4\xab\x59\x5b\xf4\x23\x8f\x18" "\xca\x42\x8d\xaf\xc7\xac\x96\xd4\x04\x60\x7a\x00\x00\x00\x00\x51\xa2\x10" "\x4f\x22\xe6\xdb\x5a\x62\xb5\x08\x9c\x1b\x45\x28\x2d\x38\x86\x4d\xaa\x3a" "\xe8\x1d\x6b\x09\x68\xd1\xd2\x86\x7b\x91\xb7\xd1\x20\x61\x7d\x12\xd9\x1d" "\xb2\x63\x3d\x68\x64\xda\x40\xb5\x47\x83\xa1\x7a\xae\xb6\x73\x7c\x32\x3f" "\x9f\x98\xe3\x54\xcc\x98\xdc\xfe\x23\xad\x01\xbd\x1c\x61\x56\x3e\x69\xff" "\xe1\xc2\xc7\x3e\x16\x61\x26\x11\x73\xf3\x59\xe9\x3d\x2c\x5e\x42\x4c\x17" "\x99\x88\x02\x00\x8f\x02\x32\xb3\x95\x5e\x05\x2a\x4c\xec\xd8\x90\x08\xf7" "\x03\x14\xa0\xbd\xd4\x91\xec\x86\xa4\x55\x5d\x89\xfe\x01\x20\xf6\x4c\x62" "\xe8\xe3\xed\x8b\xcb\x45\x20\x2c\x3d\x4b\xbe\xc8\xd7\x22\x82\x4c\x0e\xbc" "\xa8\xdb\x1e\xa4\xa0\x03\xd2\xfb\xdc\x1f\x9b\xe7\x85\x37\x75\x6a\xb5\xbb" "\xe4\xfe\x9a\xf5\xd7\x85\xd0\x12\x81\x71\xc9\x0d\x99\x00\xce\x25\x32\xb0" "\xf9\xd0\x1c\x4b\x45\x29\x4f\xbb\xa4\x68\xdf\x3e\x1b\x39\x3c\xb4\xe6\x2e" "\x75\x45\x98\xe4\x7d\xf6\xbd\x06\x43\x1c\x94\xbc\x5d\x04\x78\x99\xfd\x21" "\x9f\x44\x8b\xf9\x18\x9c\x65\xc9\xd9\x1e\xd9\x2c\xac\x7c\x2c\xcd\x17\xd3" "\x38\xbb\xda\x6b\x52\xa3\x73\x80\x3a\x9e\xfe\x44\xf8\x69\x09\xbc\x90\xad" "\xdb\x7b\x9a\xee\x81\x3d\xf5\x34\xaa\xc4\xb3\x09\x3c\x91\xb8\x06\x8c\xd8" "\x49\x90\x45\x68\x91\x66\x94\xd4\x61\xb7\x6a\x58\xd8\x8c\xf0\xf5\x20\x31" "\x0a\x1e\x9f\xdc\x18\xcd\xe9\x8d\x66\x2e\xee\x07\x75\x15\xd0\xa8\x81\x19" "\x22\x92\x8e\x00\x00\x00\xab\x3d\x13\x11\xb8\x24\x32\x66\xd8\x70\x47\xf6" "\x01\xfa\x88\xa0\xda\x36\xb9\xf3\x02\xe8\x26\x23\x95\x17\x43\x28\xf2\x48" "\x2d\x14\x00\x8d\xe8\x30\x70\x74\x4f\x14\x3f\xde\xc9\x0b\xa5\xa8\x26\x68" "\xd5\xfa\xc1\x14\xc1\x39\x55\xad\x6d\xca\x5d\xb2\x23\x1d\x8b\xa1\x4c\x54" "\xc4\x7e\xd0\x4a\x4b\x4a\xce\x17\xe3\x57\xe1\xd6\x43\x23\x99\xf8\x7a\x7a" "\x14\x24\x5b\xbd\x79\x6a\x09\x31\x3b\x24\x7b\x95\xd3\x7f\xf4\x0a\x40\x4b" "\xda\xd7\x4b\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xfe\xf7\xcd" "\x7a\xf3\xce\x64\xa9\x2f\x95\xd8\x9d\x12\x5b\x1e\x64\x12\x40\xd7\xe5\xe2" "\x7a\x3d\x1f\x76\x84\x44\x8c\x3e\x38\x22\xd6\x17\xe2\x05\x06\x12\x98\xb9" "\x39\xa1\x91\xbe\x4b\x48\xe1\x69\xbd\xe2\xca\xe3\xac\xcc\x5b\xd4\x0a\x29" "\x68\xb5\x9c\x93\xd3\x5f\x8e\x42\x36\x6f\xde\xf9\xa2\xab\xb8\xa9\x98\x2c" "\xe6\x8a\xbf\xf2\x88\x61\xaa\xc8\x30\x2d\x26\x85\x69\xdd\x42\xe1\x94\xe3" "\x30\xc7\xaa\xa5\x4e\xbb\xce\xfd\x23\xf2\x1c\xe8\x15\x3b\x99\x26\xe1\x2e" "\x92\x5c\xb5\x61\x19\xdf\x72\xc7\x53\x3a\x48\xd0\x28\xad\x0c\x74\xe2\xa9" "\x47\x8f\xa3\xbe\x18\xa1\xa2\xb6\x50\x79\xcc\x1c\x7b\xc4\x6d\xd1\x23\x05" "\xa1\xae\x9d\xd1\x9e\x8d\x52\x52\x06\xc0\xa7\x28\xcf\xd4\x21\x93\xab\xe8" "\x13\x0b\x51\xd6\xc9\xb9\x4c\x55\x13\xdf\x2d\x85\xe8\xc0\x1a\x2d\x69\x84" "\x1f\x3d\x77\x99\xac\x04\xbd\xc5\x90\xbb\x1c\x89\xb9\xc6\x95\xf1\x63\xe5" "\x73\x43\xc9\xbf\xb5\x99\x09\x43\x3c\x90\x01\xc5\xf8\xb2\x3e\x38\x53\x4a" "\x53\x8f\xc9\x33\xca\xc6\xc2\xa9\x2d\x03\x8d\xf6\x38\xa0\xf2\x26\xdf\x9f" "\xb8\x57\xbd\x41\x4c\x2c\xd6\x99\x85\xe8\x05\x3e\x3d\xfa\x41\x61\x4d\x7c" "\x74\xd0\x4d\x8c\x24\x71\x04\x1d\x17\xc7\x30\xfa\xd2\x83\x95\xf8\xd4\x68" "\x88\x98\xcd\x58\xb9\xd6\x00\xc8\x51\x62\x65\x29\xbb\x58\xaa\x36\x4b\x55" "\xe7\x3f\x05\x34\x50\x66\x5e\x7b\x94\xad\x10\x12\xfd\x7a\x81\x39\x56\x6f" "\xd5\xe5\x9c\x84\xf4\xab\x27\x9b\x1b\x99\xc0\x28\xdb\x4c\xb9\x68\x0c\x80" "\x35\xf9\x67\xdb\x18\xde\x73\x88\x44\xda\x7e\x26\x0a\x83\x0c\x1f\xfa\x49" "\xf5\xaf\x3c\x15\x42\x3a\x0e\x31\x5a\xcb\x82\xa3\xe8\x92\x18\xcb\x31\x4e" "\x68\xfd\xa4\xd9\x4a\xa1\xd8\x15\xba\xbc\x13\xb9\xfd\x33\x6d\x20\x5c\x59" "\x13\xef\x67\x00\x00\x00\x00\x00\x00\x00\x00\xba\x47\x0b\xfe\x62\x90\x42" "\x13\x38\xef\x8f\x6d\x27\x11\x7c\xd1\x47\x1b\xf3\xc0\xb6\x44\x16\xfb\xbe" "\x95\x5d\xa0\x28\x1e\x7e\xf7\xf7\xd5\x17\x61\x50\xe8\x6c\xda\x98\xd0\x7f" "\x7d\xe2\x08\x8c\xb2\xff\xd1\xd4\xc7\x10\x97\x63\x5c\x2b\xb3\xd9\xa0\xb0" "\x1e\x75\x72\x56\xee\x42\x7f\x0a\x24\x4d\x48\x68\x2b\xf8\x9e\x22\x79\xb3" "\x83\xb6\x16\xb4\x0f\x11\x61\x72\xbc\x1b\x99\x5e\xb2\xc1\x22\x05\x97\xaf" "\x8d\xf5\x26\x46\xf1\xf0\xcb\x65\xcf\xa7\xe0\x38\xe8\xbb\x5d\x4d\x52\xb8" "\x6a\x61\xd8\x2d\xc1\x4a\x4f\x5c\xc7\xe6\x06\x1c\x65\xcc\xdb\xc2\xaf\xc3" "\xf3\x63\xec\xf3\x4a\xd0\xb2\x27\x68\x7c\x3e\xa8\xd6\x36\x83\xdd\xd5\x91" "\x41\x16\xed\xd9\xe0\x75\xda\x9e\x36\x38\x64\x71\x88\xbc\x8f\x95\x10\x7c" "\x92\x50\x99\x5e\xb6\xca\xdc\xd0\xf6\x5b\x85\x04\xff\x10\x30\x4f\x2c\xeb" "\xa2\x75\xf9\xd4\x85\xed\x55\x54\xd6\x40\x05\xdb\x87\x7f\x0f\xbb\x3b\xeb" "\xa5\x96\x66\xff\x66\xf1\x32\xd5\x07\x78\x35\x82\x35\x92\xd6\xd3\x92\xf5" "\xff\x62\xf6\xf8\x76\xeb\x10\xd8\xcb\xf0\xa7\x3f\x84\x21\xb7\x4c\x89\x16" "\xe4\x07\x7b\x88\x66\xc9\x5a\xd8\x8b\xc7\x13\x02\x44\x18\x3e\xd2\x16\x21" "\x0f\x10\xf6\x9b\x3e\x0e\xe1\x3d\x06\xe4\xeb\x24\x0c\xce\x5e\xc1\xc3\xb1" "\xde\xfe\x4c\x0f\x8b\x83\xa3\x4e\xf4\xf5\xf8\xf9\xce\xef\xb6\x78\xad\x29" "\xd3\x68\x3e\x3c\x44\xa0\x15\x49\xe5\x5f\xfc\xa4\x1c\x0b\x06\xe0\x13\xf0" "\x54\x25\x76\x46\xc5\x8b\x66\x7e\xc0\x70\x10\x04\xc2\x39\x58\x9b\x3e\x64" "\xef\x5e\x1d\x5e\xd2\x2b\x5f\xd5\xa9\x0f\xe3\x45\x33\x27\xc3\x65\x2d\x5c" "\x97\x62\x42\x8f\x0b\xd0\x17\x8d\x1b\x80\xa6\x0f\x64\x34\x3a\xb7\x7d\x8b" "\xaa\x0a\x38\x87\x11\xc8\xd2\xd6\xd3\xe9\x04\x98\x14\xb1\x5b\x6e\xa2\x13" "\x87\x04\x09\x89\xd6\x9c\x3a\xa2\x72\x56\xc5\x57\x80\xf3\x3d\x20\x82\x3d" "\x8e\x2e\xb6\xe5\x68\x50\x16\x29\x69\xbf\x4c\x6c\x96\x32\xa5\x5c\xf5\xbe" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 2944); *(uint64_t*)0x200017d0 = 0x200001c0; memcpy((void*)0x200001c0, "GPL\000", 4); *(uint32_t*)0x200017d8 = 0; *(uint32_t*)0x200017dc = 0; *(uint64_t*)0x200017e0 = 0; *(uint32_t*)0x200017e8 = 0; *(uint32_t*)0x200017ec = 0; memset((void*)0x200017f0, 0, 16); *(uint32_t*)0x20001800 = 0; *(uint32_t*)0x20001804 = 0; *(uint32_t*)0x20001808 = -1; *(uint32_t*)0x2000180c = 8; *(uint64_t*)0x20001810 = 0x20000000; *(uint32_t*)0x20000000 = 0; *(uint32_t*)0x20000004 = 0; *(uint32_t*)0x20001818 = 0; *(uint32_t*)0x2000181c = 0x10; *(uint64_t*)0x20001820 = 0x20000000; *(uint32_t*)0x20000000 = 0; *(uint32_t*)0x20000004 = 0; *(uint32_t*)0x20000008 = 0; *(uint32_t*)0x2000000c = 0; *(uint32_t*)0x20001828 = 0xfffffd64; *(uint32_t*)0x2000182c = 0; *(uint32_t*)0x20001830 = -1; *(uint32_t*)0x20001834 = 0; *(uint64_t*)0x20001838 = 0; *(uint64_t*)0x20001840 = 0; *(uint32_t*)0x20001848 = 0x10; *(uint32_t*)0x2000184c = 0; *(uint32_t*)0x20001850 = 0; syscall(__NR_bpf, /*cmd=*/5ul, /*arg=*/0x200017c0ul, /*size=*/0x48ul); } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); const char* reason; (void)reason; loop(); return 0; }