// https://syzkaller.appspot.com/bug?id=8025da1388d1e3d3800ac273d7c4c68f6433bc84 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); intptr_t res = 0; memcpy((void*)0x20000dc0, "/dev/dsp1\000", 10); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000dc0ul, 0x801ul, 0ul); if (res != -1) r[0] = res; *(uint64_t*)0x20000200 = 0x20002640; memcpy( (void*)0x20002640, "\x7c\xf7\x44\x0f\x2e\xc8\xd2\x8b\xf7\x77\xd1\xbe\x48\x4c\xb6\x49\x95\xa0" "\x2a\x0c\xd1\x23\x70\xa2\x34\xec\xb4\xe2\xdc\x79\x7a\x7e\x15\xd3\xee\x8b" "\x77\xff\xc1\x3a\x4b\xa9\x5b\x5c\x2d\x82\x99\x71\xaf\xba\x4c\xd3\xbb\xf7" "\x6f\xcd\x0f\xb5\x57\x7a\x73\x10\xfd\x14\xc7\x97\xbc\xab\x4e\xb7\xf2\x6c" "\x7e\xc2\x6c\x00\x93\x26\x2f\xaa\x98\xc6\xdf\x86\xe5\x32\xb3\x83\x58\xb2" "\x6f\xc4\x85\x32\xd0\xb0\x06\x05\x83\xfd\x23\x9b\x88\xbf\x13\x26\x8c\xab" "\x85\x50\x70\x38\x2c\xc1\x3a\xe0\xcb\xa9\xd1\x8a\xda\x64\x87\x22\x0e\x26" "\x53\xf0\xad\x3c\x9a\x86\x0a\x77\x55\x51\x5f\x6e\xa3\x5f\x7a\x9f\xd2\x0c" "\x7d\x36\x83\x3b\x70\xe7\x86\x30\x33\xfb\x4f\x57\xd2\xab\xf8\xb3\xff\x38" "\x77\x27\xd9\x47\x51\xe2\x8a\xd7\xe7\xe0\x94\x7f\x1b\x70\xbd\x63\x7a\xe1" "\xbb\x5c\x5b\xfa\x84\x29\x93\xa7\x5e\x22\xd0\xce\x7d\x2a\xfc\xf5\x26\xfa" "\x90\xa9\x1b\x17\x16\xa7\xf7\x6a\xda\x3f\x81\xb2\xd0\x10\xd3\xad\x0f\x3f" "\xec\xc0\x34\xb8\x5b\xb4\x5c\x98\x90\xa2\x9f\x33\x2f\x21\x1f\x43\x8e\x88" "\x49\x7a\x81\x1f\xe3\x15\xca\xfd\xce\xe7\x09\xdb\x3a\x59\x60\xc1\x9b\xbd" "\x76\x54\x6e\x14\x54\xbf\xe0\xce\x57\x8a\xff\xc1\x2d\x4c\x77\xff\xfb\xb0" "\x1f\x70\xfd\xc1\x2d\x95\x0f\x4f\xbe\x9c\xd5\x99\xd2\x73\xf4\xff\x9f\x54" "\xcb\x1d\x74\x03\xd8\xfe\xb2\x68\x3d\xb7\x6f\x19\x34\x51\xf1\x99\x75\xde" "\x14\x1a\x60\xa4\x01\x9c\xd6\x55\x6c\x30\x66\x13\x24\xaa\x4a\xdc\x93\x45" "\xb4\x0b\x91\x63\xbf\xd5\xc0\xcd\xce\x5b\x31\x14\x88\xbd\xb7\xe3\xde\x44" "\xa5\x15\xd0\x98\x66\xd9\xdd\x1c\xc0\x46\x25\xd9\x9e\xc6\x47\x67\xca\xc7" "\x6d\x77\x37\x77\x96\xc5\x64\x86\x59\x32\x09\x79\x9a\x99\xdb\x77\x5b\x5b" "\xfc\xb4\x03\x86\x9b\x2b\x07\x8e\x18\xa9\xf4\x27\x8b\x40\x2f\xeb\xf1\x1f" "\x91\x8c\x63\x5f\x83\xc1\xf0\x40\xd1\x04\x52\x7d\x9e\x5c\xf7\x68\xe8\x4f" "\xbf\x6c\xcc\xb6\x37\xd9\x29\xf5\x74\x5c\x9c\x0f\x60\x71\xb8\x73\x8a\x57" "\x07\x65\x7a\xfb\x9e\x7d\x3b\x45\x6b\xd5\x9a\x92\x3f\x73\x11\x55\xe8\x25" "\x26\x8e\x20\x3f\x75\x3b\xcb\x82\x55\x97\x2d\xaa\xd5\xb4\x84\xcc\x61\x22" "\xa0\x5c\xf8\x8e\x53\x5c\x70\x41\x71\x9c\x68\x55\x4e\xb9\x03\x95\x7d\x5d" "\xb5\xea\x89\x5e\xda\x00\xab\x8c\x72\x89\xda\x28\x95\x97\x1b\x8f\xb4\xe2" "\xa3\x05\xb5\xa8\xd3\xfb\x39\x59\xd8\xe4\x11\xe4\x73\xff\xb5\x89\x4b\x5c" "\x71\x87\x51\xd8\xdd\x67\x2c\xf4\x28\x5f\x0d\x33\x3f\xa1\x8d\x4e\xcd\xb5" "\x73\x64\x89\x0a\x7e\xd2\xab\xf9\x95\x5b\x99\x7f\x61\xe2\xe5\x3c\xc6\xe5" "\x42\x91\xc2\x47\xd4\x4e\xd4\xa4\x1e\xd6\x08\x1e\x2c\xd3\xcb\x19\x5f\xdb" "\x81\xd3\x13\x97\xbe\xe9\x4d\xd1\x0f\x30\x74\x07\x60\xc0\x2c\xc3\xa8\x9e" "\x6f\xa4\xab\xca\xbd\x67\xad\x0c\xcd\xcd\xe6\xab\xb1\xd0\x9d\x8d\xa2\x56" "\xaf\x26\x93\x65\x55\xe7\x4f\xe6\x6f\xea\xb7\x09\xff\xb3\x21\x59\x14\xf0" "\x10\x44\x79\x59\x47\xbd\x80\x79\x5b\xd4\x26\x20\xb6\xb7\x29\x36\x9d\xf8" "\x4a\xe6\x53\x62\xd4\xa1\x63\xf5\x9a\xf6\x87\x65\x65\x30\x8e\xa1\x2a\xf6" "\x3f\x6d\x3f\xf7\xc3\x71\xd1\x3f\x0a\x5d\x1e\xce\x74\x75\xed\x8c\x1f\x7d" "\x4d\x1b\x02\x43\xc4\x7e\x26\xfb\x5f\x5c\xc5\x24\x62\xa2\x93\x5d\x95\x54" "\xfb\x4a\x6b\x2e\xf2\x26\x80\xee\xed\x73\x72\x2d\x10\x7a\x5d\xe9\x44\x9b" "\x2f\x4d\xac\x48\x9c\x46\x93\x65\xe8\x08\x2f\x05\x0c\x8a\xe0\xab\xb1\x59" "\x23\x98\x89\x4a\x09\x5b\x67\x29\x56\x69\xea\xc1\xd5\x01\xd9\xf3\xdd\x55" "\x13\xb2\x0f\x75\x2b\x9a\xab\x25\xa0\x07\x80\x97\x63\x30\x56\x34\xde\x02" "\x77\xb8\x43\x96\xcf\x83\x06\x75\x58\x67\xae\x4b\x68\x86\x82\x43\x0a\xcf" "\x56\x78\x0e\x7e\x23\x3f\x1f\xde\x88\x21\x73\xc8\xf7\x3f\x06\x63\x55\x4a" "\xb7\x31\x0f\x04\x81\x18\x6b\xe7\x04\x85\x20\x4b\x90\x4f\xd0\xf3\x88\x33" "\xa1\x06\xec\x13\xdc\xa7\x54\xb9\x3b\x43\x6f\xd1\x0e\x13\x58\x62\x26\xcf" "\x10\x42\x5f\xea\xc0\xed\xf1\xf5\x16\x6f\x9f\x5b\xea\x2d\x64\x6e\x39\x63" "\xdc\x35\x6a\x4d\xa5\x36\x60\x16\x4a\xae\xc5\xe8\x31\x73\x5c\x52\xbf\x6e" "\x9c\x20\x47\xb6\x22\x3a\x8e\x65\xe1\xa9\xb9\x58\x6d\x62\x1e\x24\x7b\xf7" "\xaa\x7c\x8d\xe6\x1e\x3d\x5b\x47\x42\x26\x79\x98\x17\xe0\x33\xc6\xb5\x6f" "\xb6\x54\x34\xc1\x61\xa3\x2a\xe7\xae\x22\x4b\x84\x9d\xd9\x42\x69\xa5\xe4" "\x3a\x3b\x8e\xbb\x9a\xc7\x2a\xe6\xc4\xb4\xe6\xc9\xb0\x3c\xb5\x9d\x91\x24" "\xc0\x4b\x7e\x94\xab\x0d\xf7\x2f\x30\x73\xa5\xc6\x2a\xa6\x29\x06\x89\x18" "\x7b\x00\x45\xb9\x6f\x85\x75\x85\xcb\x1b\x3e\xcc\xda\x29\xa9\xf3\xe9\xaa" "\xf8\x5c\xad\xa7\xf7\x7d\xc5\x70\x7e\x18\x05\x67\x94\xf4\x45\x03\xf3\xc8" "\xfb\x71\xc5\xef\x4f\xc0\x23\x33\x50\xdc\x86\xf2\x79\x4a\x33\x8e\x75\x64" "\x4a\xe5\xba\x8e\xad\xad\xf3\x66\xe0\x16\xfb\x3a\x99\xc0\x0a\x75\x85\x3f" "\x5a\x04\x90\x98\xf8\xb8\xd1\x9a\x05\x5c\x0d\x85\x11\x83\x00\xed\x53\xe4" "\x66\xaa\x2b\x4f\x07\x61\xdb\x93\x81\x91\x7a\xf1\x76\xc2\x82\xfb\xd4\x84" "\xc1\x0b\x34\x40\x8f\xe9\x04\x2c\xa4\xde\x71\xdf\xad\xb5\xe2\xac\xdf\x85" "\xd6\x2b\x38\x57\xae\xc0\x0f\x16\x01\x2c\x9d\x4c\x27\xe2\xd0\xc3\x9d\xa3" "\xbe\x97\x56\x61\x1b\x3c\x51\xec\xe1\x19\x54\x24\xa2\xdf\xfd\x78\x7b\x32" "\x24\xac\xc7\x65\x40\xe9\x1f\x50\x30\xf6\x71\xe3\x2d\x27\xca\x17\xb0\x22" "\x38\x01\xff\x5f\x68\x1c\x05\xf7\xde\xac\x3c\xea\xc8\xe6\x2b\x39\x7c\x7d" "\xff\xfc\xcb\xbe\x14\x4c\xd0\x6b\x0f\x6a\x77\xb7\x2e\xd9\x59\x43\xa4\xdb" "\x65\x25\x13\x62\x1f\xf1\x28\x0f\xb0\xf7\xb5\x95\xce\xfd\x54\x3a\x67\xe4" "\xc0\x55\x0a\xcd\xa0\xe4\xa3\xe9\xad\x9a\xd1\x7c\xbe\xe5\x7d\xd1\x96\xca" "\x8e\xa1\x69\x39\xa5\xc6\x52\x2c\x86\x52\x03\x57\x93\x5b\x7d\x53\xdd\xc7" "\xfe\xd4\xfe\xce\x63\x1a\x5b\xd2\x7a\x0f\x7b\x52\x80\xa3\xfc\x68\xca\xd3" "\xea\x28\x18\x37\x54\x71\x18\xc8\xbc\xcf\xcd\x9c\xe6\x7a\xdc\x81\x80\x64" "\x81\x40\xe4\xfd\xb5\x8a\x6e\x76\xbb\x82\x8f\x16\x01\xe8\x95\x0d\xa7\xc8" "\xe2\x71\xae\xb6\x13\xad\xb4\x2d\x9c\xe1\xda\x52\x44\x0b\xb5\xf7\xaa\x4f" "\x11\xb5\x8d\x06\x4c\x2d\xde\x8c\x1e\xba\xa2\x21\x38\xaf\x2a\x12\xaa\x15" "\xe0\xc3\xa4\x03\xea\x5b\x55\x14\xec\xbb\x3f\x33\xea\x9e\x8a\xff\x0c\x8b" "\x57\x3b\xae\x17\x74\x1e\x02\x65\xeb\xde\x20\x82\x33\x85\x91\xbd\x2b\x0d" "\x46\x8a\xaa\x76\x33\xb9\xee\x12\xf0\x66\x4b\xdf\x2e\x15\x05\x6a\x79\xa0" "\x46\xa3\x19\x17\xfe\x04\xad\x83\xc3\xd4\x30\xeb\xe9\xab\x9c\xb1\x5e\x21" "\xb8\x9a\x10\xad\xcd\x3b\x2d\x38\x28\x26\xb4\x85\x40\x29\x15\x3d\x2c\x4b" "\x2f\x1c\x0a\x3d\x87\x1f\xaa\xf8\x6c\xd5\xeb\x66\xe0\xdd\xf1\xb5\xf9\x07" "\xe1\xd1\x37\x3b\x3f\x3a\x90\x22\x5f\x28\xcd\x35\x3a\x88\xf9\x8d\xc3\x19" "\x30\x95\xd0\x7b\x94\xb3\xbe\x0a\x1e\x8d\x7e\xe9\x5a\x91\xcb\x39\x4b\xf9" "\x70\xc7\xfa\x0a\x03\xd0\xb5\xd1\x58\xff\x3c\x6d\x08\x6d\x9d\x05\x9c\xa0" "\x0c\x24\x30\x70\x4b\x23\x91\x13\x29\x70\x50\x01\x4a\xae\xd3\x20\x41\x9c" "\x91\x38\x0e\x41\xfb\x78\x67\x7a\xfa\x8e\x99\x2f\x7f\x32\xa7\xb5\x65\x5e" "\x0c\xf5\xbb\x98\x4b\x64\xbb\xf1\x4a\x5a\x31\x62\xb4\x08\xd7\x75\x35\x77" "\x48\xab\x4b\x46\xf5\xca\xc7\x65\xc6\x24\x14\x4d\xa7\x4f\x62\x80\x7d\x40" "\x1a\x9e\xf8\x13\xe5\x53\x7c\x3d\x53\xde\x34\x25\xf9\x55\x53\x89\xc5\x24" "\x7d\x1f\xd5\xdc\xd0\xcb\xd3\x26\x56\x88\x7f\x07\x65\x9b\x7e\xe6\x56\x22" "\x90\x6f\x85\x5e\xdb\xa9\x6a\x7e\x50\x9a\x17\xdf\x83\x3b\xa5\xb0\x8e\xda" "\xbf\x30\xbe\xa7\x18\x34\x0a\xee\x68\x35\xf3\x61\x42\x6a\x67\xee\x14\x3f" "\x6b\x1f\x74\x27\xa1\xa5\xb1\xcd\x79\xf8\x88\x76\xa5\xa5\xe3\xbf\xad\xfe" "\x22\x4a\x3b\x4c\x00\x26\x9c\x10\x88\xae\x70\x16\xb8\x96\x96\x15\xfb\xa4" "\x12\x39\xb5\x3a\x2b\x8b\x9f\x44\xfe\xaf\x33\xfc\xab\x75\x91\x75\x6a\xa5" "\x27\x31\x78\xd4\xfa\x7c\x1c\x35\xd5\x8d\xa4\x4b\x5a\xc1\x92\x19\x34\xa0" "\x75\x08\x1e\xe2\xfd\xd4\x87\x66\x1d\x60\xe6\xfc\xcc\x8c\xcd\x90\xe9\x15" "\xca\x15\x05\x11\xaf\x25\x9f\x37\x93\xbb\x83\x9a\xbf\xa2\x96\x22\xf7\x0b" "\x22\x6a\x4a\xa0\xbd\x6c\xee\x31\xf8\x80\xe8\x09\x22\x74\x6e\x07\xcd\x05" "\x21\xa1\x97\xeb\xd1\x6c\x5a\x13\x09\xbd\x4d\xa5\xee\x50\xfe\x16\x6c\xe8" "\x6c\x12\x07\xa1\xa3\x85\xf8\x29\x51\xc0\xbd\x9e\x6a\xfe\x54\x93\x95\xc7" "\xa7\x8d\x6d\xbc\xec\x70\x2e\x19\x61\x10\x2b\xb1\x3e\xf1\xb8\xbe\xd5\x78" "\x5a\xd8\x60\xf6\x45\x1c\xc3\xb4\xaf\x45\x37\x5c\xee\xa2\xee\x11\x89\x07" "\x46\xcf\x6c\xa1\xf1\xfb\x6a\x78\xaf\xfa\x91\x30\xa5\x33\xfa\xf8\x24\xb6" "\xa4\x21\xf6\xf7\x2f\x51\x2f\x51\x6f\xd0\x8f\x21\x5c\x69\x2f\x7d\xd3\xd3" "\x57\x6e\xea\x4d\x3e\x53\xfb\xc2\x24\x47\x00\xd0\xff\x99\x20\x67\x39\x5a" "\x3a\xfc\x50\x7b\xb3\x4d\xbe\x19\x1c\x9f\xfb\x10\xfe\xd6\xd3\xf1\x21\x7a" "\x9c\xc8\x6d\x07\x00\x4f\x79\xe5\xb1\x66\xc5\x23\x48\x99\x2c\x32\xac\x30" "\xec\x8c\x8a\x41\x05\xde\x6e\x38\xd6\xc7\x23\x32\xc3\x51\xda\x5c\x99\x80" "\x70\x50\xb8\xfe\xf5\xf4\x6e\x16\x2a\x29\x43\x0b\x3b\x8b\x38\x59\x8d\x05" "\x93\x6c\x0a\x13\x0f\x98\x56\x2e\x01\xae\xf2\x01\x9b\xeb\xd6\x05\x38\xc5" "\xd2\x23\xb3\x66\x6e\x69\xc1\x2c\xea\x8d\xd1\x96\x01\x2d\xa0\xe6\xa3\xcc" "\x95\x97\x98\x8d\xe9\x35\xfd\x98\xd1\x3c\xe8\xf1\xdc\x3c\x35\xd0\x4f\x64" "\x5e\x25\x43\x4b\x91\xff\x26\xfe\x95\x04\x6e\x24\xcb\x18\x25\x2c\xb2\xf5" "\x27\x78\xfd\x8d\x77\x83\x52\xb1\x4a\x4c\xc9\x03\xc4\x2e\x76\x25\x8b\x3d" "\x50\xfc\x0b\xcc\x3b\xd5\xd7\xdd\x0d\xf2\xb7\x15\xda\xee\x34\x3a\x79\xe9" "\x47\x53\xd1\xc5\x1b\xeb\xa6\x47\x02\xf9\x52\xac\x0a\x9c\x78\x38\xfc\xbb" "\x8e\x8b\x4a\xb3\xd8\x9d\x63\x4d\x8a\x60\xb9\x4b\xe5\x43\x80\x1e\x12\x3a" "\x35\x1b\x1b\x6f\x3f\xbd\xa3\x3c\xa9\x3e\x99\xf0\x97\x23\x69\xb4\x74\xf5" "\x71\x8b\x31\x9e\xaf\x90\x27\xae\x84\xd6\x07\xd4\x2e\x9c\x16\x18\x02\x7a" "\xe1\x8f\xc4\xa1\xc9\x1c\xb0\xf3\x5b\xd3\x37\x59\xbe\x49\x7c\x4a\xdf\x16" "\x32\x00\xc0\x01\x21\x65\xc8\x5b\x9d\x20\x99\x9a\xe0\x16\xae\xf6\xe9\xb8" "\x45\x9d\xb7\xf0\xa7\xa1\x2d\xfa\xa5\xcd\x6f\x77\x8b\x42\x42\x1d\x76\xfc" "\xfe\x7f\x57\x42\x15\x0a\x48\x6a\x79\xed\x1f\x2d\xe9\xb4\xa1\x49\xaf\xb6" "\x06\x04\xfe\xc0\xeb\xd0\xde\x79\x30\x13\xc6\xb8\x04\x03\x3b\xf9\x33\x50" "\x8d\x97\xf4\xfc\xa2\xfd\x74\x52\x03\xbd\x1d\x15\xed\x5d\x20\x0f\x12\x78" "\xab\xe9\x93\x4b\x1c\x3b\xdc\x14\x0f\xa5\xeb\x98\x8b\xf4\xe1\x3c\x7a\xa0" "\x0d\x40\xdd\x1d\x46\x09\xa3\xa1\xcc\x93\xae\xcc\xe0\xfb\x2b\x91\x76\x60" "\x5c\xee\xa8\x5c\xd4\x77\x48\x3c\x75\xb7\x73\x00\xa9\x95\x55\x44\xed\x20" "\xa8\xce\x2a\xfd\x05\xa2\xd9\xd2\x45\xe4\xcb\x7f\xed\x3f\x0c\xe3\x10\x74" "\xf9\x12\xa4\x6e\x5d\xf1\xc9\x07\x61\xa4\x6e\xf7\x07\x81\x2a\xdf\xff\xe3" "\x60\x18\x20\xda\x0e\x55\x60\xdb\x8d\x3c\x6a\xf9\x04\x75\x17\x55\x3d\x36" "\xa4\xeb\xec\x86\x0c\x33\xbc\xfa\x12\xd2\x55\x57\x65\xda\xed\x7d\x2f\x51" "\x8b\x6d\x4e\x3e\xd8\x68\x15\x2e\x0d\xa1\x52\x16\x26\x06\x03\x9e\xc4\x0d" "\x3a\x6d\x1f\xc2\x4c\xef\x3c\x19\x8e\x7c\x42\x19\x9e\xae\x62\x9b\x59\x03" "\x88\x30\x94\x42\x9f\xf0\x53\x07\x0e\x68\xb1\x31\x4b\x92\x32\x1f\x3f\xc1" "\x67\xa2\xca\xe1\x46\xf7\x5d\x10\x07\xb7\x6c\x26\x28\xe0\x69\x4d\xb7\xa0" "\xf2\x53\x31\xf4\x98\x49\x20\x4d\xd4\x27\xf3\xc9\x83\x13\x98\x82\x39\x71" "\x6f\xa5\x4e\x6e\x4f\xe7\x63\x71\x73\x78\xe8\x4c\xc0\x77\x9c\xd4\x01\xe0" "\x9d\xaa\x78\x2a\x4c\xfe\x91\xea\x69\xfe\xe1\x69\x6e\x00\xb5\x54\x7f\xef" "\x47\xf1\x6a\xaa\x37\xef\x0c\xa0\xd3\x48\x44\x24\x38\xb9\xde\x5b\x65\x21" "\x5f\x8c\x5e\x5d\x50\x58\x6e\x64\xd4\x09\x47\xbb\xd6\xd7\x25\x16\x35\xe7" "\x1a\xe8\xd9\xe4\x07\x01\x4f\x0a\x5a\x7e\xfe\x65\x13\x1f\x1d\x99\xfa\x20" "\x86\xe4\x77\x86\x18\xec\x67\x10\x03\x80\x95\x02\xbd\x07\x6c\xb3\xa8\x65" "\xdc\x43\x4e\xaa\x7d\x1d\xff\xa0\x8e\xaf\xd7\x7d\xaa\x9d\xa2\xa0\xa5\x7b" "\x4d\xd2\xa1\xe4\xa0\x76\x05\x5f\x1f\x6a\xee\x04\x71\x03\x8f\xa0\x0f\x13" "\x15\xfc\x7c\x31\x54\x09\xcb\xeb\x91\x95\xac\xdd\xa1\xc8\x1e\x48\xc1\xa8" "\x54\x64\x34\x3a\xef\x5a\xab\xd8\x4c\xe1\x27\xc4\xc7\x7c\xcf\x63\x68\x65" "\x00\x81\x03\xd6\xba\x17\x42\x9d\x97\x8c\x53\x98\xdf\xa3\x13\x31\xd3\x3e" "\x74\x9b\xeb\x48\x60\xd6\xd7\x26\xdd\x70\x54\x07\x65\x89\x6c\x70\x74\x7e" "\x87\x00\x4a\x8b\x29\xe7\xef\xa9\x8d\xcc\x40\x0b\x23\x40\xbd\x95\x45\x0a" "\xbd\xa3\x0f\xf1\x03\x83\x2d\x2b\x3b\xde\x2e\x1a\xf1\xa1\x42\x43\x50\xa9" "\x0a\x5a\xdd\x9c\x91\xca\xe5\x2f\x6c\x8a\x02\x49\x1d\x64\x55\xb5\xb2\x48" "\x12\x61\x20\xf3\x7c\x55\x43\x7e\x84\x79\x89\x75\xf3\xc9\xdc\x85\x18\x65" "\xf1\xb2\xd3\xf8\x7d\xb0\x84\x0a\x47\x0d\x35\x48\x14\x13\x6a\x2e\x02\xd6" "\xba\x47\x4a\xe5\x11\x04\x44\x17\x05\xbb\x97\xbc\x00\x89\xc2\xef\xa9\x86" "\xfc\x92\x1b\x05\x59\xce\xd4\xdb\x9a\xb1\x82\x4b\x06\x45\x3a\x2e\x1a\x3a" "\x20\x7d\x52\x94\xd5\xf9\x11\xf1\xb5\xf0\x53\x0a\x34\x05\x69\x11\xdf\x09" "\x69\xd8\x99\xb6\xf8\x3d\x3f\x1c\xef\xa3\x0a\x36\xd1\x23\x9a\xb1\x03\x0f" "\xb0\x1d\xb8\xdf\x01\x6c\xc0\x6b\x7a\x20\xb0\xa0\x28\x83\x67\x3e\xe9\xbf" "\xdb\x82\x8f\x5c\x77\x8c\x7c\xf3\x7b\x9b\x0f\x1f\x12\x99\xb3\xc0\xb1\x49" "\x05\xb0\xca\xb2\x2c\x6a\xe7\x9b\x99\x0b\xfb\x44\x4f\x21\xd5\xaa\xb3\xb5" "\xe1\x90\x2b\xfe\x35\x04\xf7\x7d\x08\xf6\x08\xcc\x49\x25\xf3\xc0\x09\xe4" "\xc9\x1b\xa7\x3a\x99\xf0\x01\x1c\x39\x01\xcf\x93\xf2\x7a\xd5\x06\x41\x37" "\x45\x66\xce\x56\xa7\x56\x4e\x80\xa7\x00\x4d\xab\x84\x12\x70\x22\x9c\x45" "\xd5\x40\x59\x40\x68\x58\x02\x06\xdd\x54\xb5\x20\x86\x64\x7a\xc5\xd4\x59" "\x14\x3d\xb4\x84\x2e\x5d\x06\xfe\xca\x02\xe5\xf7\x10\xc7\xc9\xc9\x01\x05" "\xcf\x75\x64\x49\x69\x5e\x1b\xa8\x6a\x30\xba\x87\x3f\xe0\x1a\xac\x65\xd7" "\x18\xfc\x2f\xb2\xb7\xd0\xe8\xce\x30\x97\x3c\xb7\x3c\x27\xa2\xa4\xef\x61" "\xa0\xdd\x62\x0c\x1a\x03\xa6\x1a\xdd\x7c\x12\xa6\x87\x0c\x7b\x76\x6c\x6c" "\xff\x1a\x85\x2a\xc9\x42\xb7\x2a\x87\xcf\x9c\xeb\xde\xf5\xb0\x25\x5f\xe6" "\xc1\xfe\xb7\x0c\x3a\xe4\xae\x65\xbd\x5c\x8a\x10\x31\x7e\x5a\x38\xca\xd4" "\xd0\xba\x0e\xcf\xdd\xe1\x6d\x5e\xd4\x23\xf1\xf1\x54\xb3\x8a\x15\x7e\xac" "\x94\xf5\x3a\xe1\x95\x70\xad\xc6\xb7\xd1\xf0\xb5\xac\x2f\xb5\x10\x71\xf3" "\xd2\xd7\x7a\x1f\x66\x3e\xf4\x71\x6e\x92\x51\x27\x3c\xcd\xd2\xa0\x10\xb0" "\x84\x66\xfd\x03\x3a\x26\x9e\xc6\xdf\x41\x10\x2c\x86\xe0\xb7\x96\x58\x23" "\xb0\x8b\xd6\x17\x4e\x64\xa1\x43\x9f\xce\xb6\x81\xe5\xdf\x4c\x50\x70\xdf" "\x05\x31\xb3\x47\xa3\x4a\x1c\xce\xfe\x17\x03\xed\x6d\x8f\xe5\x35\x8c\x03" "\xc3\x8a\x7a\xcc\xd9\xae\xa7\x4c\x99\x67\xf8\x7d\x50\x7a\x10\x0f\x79\x76" "\x94\xf1\x0f\xc3\x11\x6c\xf9\x47\xfc\xc9\xce\x7a\xa1\x31\x4c\xfa\x17\xd0" "\x41\x07\x34\xda\xb2\x5d\xcf\x09\x67\x16\x1c\xd9\xd1\xe7\x75\x8f\x2f\x66" "\x56\x69\x06\xf2\xde\x7d\xa3\x77\x1e\xaf\x53\x2f\x36\x1f\xe6\x6b\x73\xa1" "\x15\xe3\x2c\x94\x3d\xe1\x18\xcd\xc7\x80\xa9\xec\x34\x91\x41\x56\x22\xb7" "\x43\xf1\x2a\xb1\xdc\xd3\xc5\xe9\xa3\x26\x43\xcc\x82\x84\x17\x12\xff\xc8" "\x81\x60\xb6\xa8\x43\xec\x78\x8a\x77\x24\xa1\xde\xc7\x9e\xd0\x6e\xfb\x25" "\x03\x38\xad\x0b\x3e\xc6\xe8\x5f\x88\xc1\xe7\x2a\xde\x8e\xef\x62\x22\xdb" "\x61\x3e\x15\xdc\xef\x58\x4e\x7e\x34\x57\x6f\x18\x39\x26\xa1\xfc\x63\x8a" "\xa5\x55\xd6\x1a\xd7\x73\x24\x92\x94\xb5\x70\x35\x43\xe4\x6e\xaa\xf7\x08" "\x99\xf8\x36\x0a\xe9\x03\xbd\x1b\x89\x12\xb7\x69\xe6\x6b\xcd\x29\x92\x81" "\x0c\xe8\x28\x3b\xc3\xa4\xe9\x32\x5d\xb4\xc0\x57\x7f\x29\x1b\xeb\x8d\x89" "\x94\x40\xcb\x2c\xb6\xdc\x37\x39\x40\x12\xe9\xa6\xcc\x47\x41\x66\x86\xc6" "\x29\xd0\x25\xc2\x72\x5d\x15\x86\x54\xb5\x93\x31\x09\xa6\xfb\x91\x1c\x52" "\x7c\x7f\xdb\x64\x1d\x20\x4a\x56\xde\xf1\x3e\x06\x61\x33\x0f\x65\xb8\xb1" "\xb5\x2a\x25\x38\xd6\xb1\xba\xe5\xaa\xce\x02\x25\x2f\x0d\xf9\x5b\x9d\x67" "\x8a\xb2\xb6\xfd\xb6\x20\xd8\x7f\xbd\x3a\x7c\x8a\x99\x26\x34\x19\x92\x2a" "\x4f\x55\xb8\x22\x7e\x59\x2a\xf2\x2e\xae\x78\x64\xfe\x6b\xda\x12\x30\x1f" "\x01\x7e\xa5\xb3\x1a\xcb\xfd\x69\xfc\xe5\xab\x93\x27\xe3\x5e\x60\x0e\xbf" "\x27\xa2\x96\x38\x27\x93\x1c\x4a\xde\x5a\x80\x5b\x74\xbe\x4e\xe5\xfb\x27" "\x30\x5b\xee\xd3\x08\xb7\xef\x52\x02\xe8\xe8\xad\x71\x38\xeb\xf2\x78\x5d" "\x60\xe5\x36\x0b\x40\x6c\x18\x0c\xdc\xc4\x80\x6b\x01\xcf\x5e\xb4\x6b\xc9" "\xc9\x50\xf3\x50\x4c\x7e\xb5\x1b\x7c\x22\xff\xcc\x02\x24\xce\x3a\x92\x02" "\x4e\x8d\xb2\x28\x8a\xc6\xb6\xa0\x42\xd7\x58\xc1\x3e\x84\xcb\x6e\xd0\x63" "\x2f\x39\x68\x2a\x9a\x2f\x88\x14\x69\xd8\x59\xcd\x4b\x59\xd5\xec\x12\xd1" "\x13\x9a\xc7\x37\x83\x16\x11\x13\xa6\xf1\x89\xae\x9d\x22\x77\x75\x48\xb0" "\x70\x10\x38\x91\xf5\x7f\xb6\x83\x29\x14\xfc\x9f\x6b\xeb\xde\x4f\xc6\x07" "\xca\x82\x3a\xba\xa0\xb2\xed\xb4\x93\x43\x73\x24\xc1\x4e\x63\x28\xd2\x51" "\x98\x05\x21\x62\x9b\xf9\x93\x2c\x6c\xe4\x63\x36\x22\xf1\x05\x2c\x97\xed" "\xe6\xd0\xdc\x92\xfd\x88\xf8\x13\x5b\x2c\xec\x4f\x9e\x04\xbd\x32\x24\xc5" "\x11\xe8\x67\xc5\x9b\x19\x0a\xad\x2b\xda\x4c\xe9\xc3\x74\x94\xc1\x5f\x21" "\x98\x6b\x39\x2b\xc3\x66\x81\x1c\x1d\xdc\xb9\xe3\xd8\x42\x6a\xdb\x37\x61" "\x9f\x73\xe2\xe6\xad\xdc\xd2\x0a\x30\x42\x40\x93\x4f\xbc\x04\xcd\x22\x5c" "\xf8\x10\x6b\x51\xef\x85\xb9\x4b\x7f\x45\x0d\x46\x02\x79\x91\x3f\xe7\x4b" "\xcd\x9e\xa4\x5d\x2f\x9a\xfc\xb1\x0e\xe9\x24\x8d\x01\xcc\xf4\xdc\xb6\xcb" "\x36\x76\x38\x3f\xd4\x64\x67\xfa\xc7\xb2\x64\x6e\xe1\x30\xa9\x3a\x06\x66" "\x93\xa9\xa9\x5a\xfc\x06\x4d\x48\xa0\xf3\xbe\x39\x94\x89\xd2\x17\xeb\x38" "\x85\x52\x3f\x58\x80\x59\xa6\xb6\x84\xa8\xf9\xfa\xc5\x76\xea\xb1\x77\xfd" "\x71\xb2\xe8\xba\x00\x54\x3d\x6d\xf2\x4b\xde\x23\xf0\x25\x88\xbe\x2e\xb7" "\xa2\x62\xa5\x86\x5c\x20\x6e\x8c\x5a\x39\xf0\x3c\x9e\x42\x71\x72\x9c\xa1" "\x6f\x97\xe8\x26\x99\x90\xb8\xe3\xcd\xb9\x56\x92\x69\x13\x26\xc2\xc3\x55" "\x3c\xe6\x80\xdf\x0b\x5e\x95\x2d\x2d\xc1\xc2\xef\xfc\x5b\x28\x2d\xd3\x09" "\x2d\x54\xf6\x2d\xa5\x16\x1b\xde\xc7\xc9\xa4\xec\x91\xf1\x59\x19\xbe\x7b" "\x61\xf8\xf3\x95\x68\xac\x07\xf0\xcf\xad\x03\xdf\x09\xf5\xca\xd7\x61\x3b" "\x70\x7c\x5b\x91\xc7\xe5\x2c\xf5\xbe\x02\xfc\x5e\xe9\x08\xd8\xb1\xbb\x26" "\xd6\x0d\xf7\x6f\x9d\x28\x1c\x1b\x42\x25\x99\xb9\x64\xe0\x29\x8e\xa0\x4b" "\x9e\x96\x5a\xd8\x7e\x23\xd2\x8f\xae\xc2\x83\xa4\xa2\x63\xb3\xfe\x05\xdc" "\x38\x4c\xe7\xf3\x28\x75\x17\xb7\x82\xce\x9c\x4c\x94\xbc\x13\x2b\x20\x22" "\xee\x6c\xb3\xd7\x01\xaa\x58\x50\xb8\xc9\xb1\x38\xf6\xc2\x70\x27\xb1\x68" "\xf0\xa2\x31\x78\x6c\xa6\x83\x5f\xa8\xf6\x0d\xab\x50\xaf\x40\xb8\xc9\xab" "\xfc\x8e\x4b\xf3\xb0\xb4\xca\x6e\x8a\x9c\x13\x5a\xdd\xb4\xc4\x9a\x52\x40" "\x66\x56\xde\x07\x14\xcc\xfd\xa8\x5d\xcf\x6d\x32\x9e\x92\x53\xab\xca\x0d" "\x7d\x52\xbb\xef\xf5\x04\x88\xa6\x00\x9e\x3a\xb5\x73\xd7\x7c\x35\xc5\x9c" "\xbb\x63\xb1\x22\xca\xc9\x31\x9e\x09\x3d\x3c\x80\x16\x82\xbc\x77\x57\x82" "\x8d\x1a\xfc\xaf\x34\x51\xb0\x7d\x23\x63\xcf\xb7\x07\xc9\x61\xe0\x49\x58" "\xda\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 4189); *(uint64_t*)0x20000208 = 0x105d; *(uint64_t*)0x20000210 = 0; *(uint64_t*)0x20000218 = 0; *(uint64_t*)0x20000220 = 0; *(uint64_t*)0x20000228 = 0; *(uint64_t*)0x20000230 = 0; *(uint64_t*)0x20000238 = 0; *(uint64_t*)0x20000240 = 0; *(uint64_t*)0x20000248 = 0; syscall(__NR_writev, r[0], 0x20000200ul, 5ul); return 0; }