// https://syzkaller.appspot.com/bug?id=adaae9205fae97ce893882ebf49c4898fd50dd0b // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i; for (i = 0; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { pthread_mutex_t mu; pthread_cond_t cv; int state; } event_t; static void event_init(event_t* ev) { if (pthread_mutex_init(&ev->mu, 0)) exit(1); if (pthread_cond_init(&ev->cv, 0)) exit(1); ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { pthread_mutex_lock(&ev->mu); if (ev->state) exit(1); ev->state = 1; pthread_mutex_unlock(&ev->mu); pthread_cond_broadcast(&ev->cv); } static void event_wait(event_t* ev) { pthread_mutex_lock(&ev->mu); while (!ev->state) pthread_cond_wait(&ev->cv, &ev->mu); pthread_mutex_unlock(&ev->mu); } static int event_isset(event_t* ev) { pthread_mutex_lock(&ev->mu); int res = ev->state; pthread_mutex_unlock(&ev->mu); return res; } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; pthread_mutex_lock(&ev->mu); for (;;) { if (ev->state) break; uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; pthread_cond_timedwait(&ev->cv, &ev->mu, &ts); now = current_time_ms(); if (now - start > timeout) break; } int res = ev->state; pthread_mutex_unlock(&ev->mu); return res; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 2; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 45); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[1] = {0xffffffffffffffff}; void execute_call(int call) { long res; switch (call) { case 0: memcpy((void*)0x20000000, "/net/log\000", 9); res = syscall(SYS_openat, 0xffffffffffffff9c, 0x20000000, 9, 3, 0); if (res != -1) r[0] = res; break; case 1: memcpy( (void*)0x20000180, "\x36\x76\x46\x2a\xb4\x74\x22\x10\x82\x2b\xde\xdf\x4d\x9e\x28\xf3\x69" "\x67\xbd\xa5\x1e\x73\x25\x73\x0a\x7f\x17\x20\x91\x82\xf8\x2a\x75\x7c" "\x1d\xa9\x40\xd9\xfc\x62\x6b\xfd\x59\x29\x5f\xb1\xa7\xf2\x5b\xf5\x47" "\xde\x3b\x9a\x9b\x69\x7c\x94\xac\x9f\xf2\x53\x19\x07\x07\x45\x6b\xcb" "\xae\x1d\x7e\x0f\x2b\xaa\x54\x01\x63\xa0\xa4\x29\x2a\x26\x19\x50\x79" "\x29\x77\xb2\xa9\xf2\xf8\x09\xa1\x98\x5b\x27\x14\x0f\xdd\xf5\x86\x84" "\x1e\x3f\x93\x31\x63\x6e\x60\x51\x8c\xad\x40\xbb\x09\x8e\xfc\xa3\x1a" "\x25\xcb\x07\x2b\x6c\x9e\x57\xc6\xe6\x1b\xe4\x55\x78\xf5\x03\x56\xce" "\xf6\x1c\x73\x81\x02\x44\xd8\x65\xc9\xc9\xd9\x49\x17\xbd\xd9\xf8\xc6" "\x90\xae\x5b\x90\x88\xd4\x7b\x0c\x4c\xe0\xa2\x00\x69\x42\x55\xba\xa8" "\xe0\xf5\x3f\xd8\x81\x39\x74\x89\x1f\x84\x40\xe8\x74\xf9\x35\x28\xd7" "\x95\xb3\x1a\x9b\x46\x23\x69\x14\xe5\x73\xe3\xea\x53\x46\xd6\xa6\xa5" "\x24\x9a\xe6\x1b\xc5\x46\x08\xb1\xd8\x80\xde\xb7\x0d\x12\x74\xb6\xa4" "\x28\xbf\x43\x20\xee\x2c\x13\x19\xf8\xac\x58\x32\xe3\x1b\xad\x99\x27" "\xc3\x62\xa6\x67\xc0\x99\xd5\x15\x09\xd4\xca\x1b\xf4\xad\x90\xeb\x39" "\x29\x85\xf5\x75\xbc\x24\x27\xfd\x75\xd9\x4c\x08\x2a\x1f\x73\x2b\x2b" "\x91\x55\x2c\xbb\x34\x45\x5a\x57\xeb\x21\x34\xd8\xd9\xd7\x32\xe3\x1c" "\xcb\x08\x13\x36\xc0\xc1\xfb\xbe\xde\x16\x80\xcf\x37\x8d\xc1\xf7\xfb" "\x79\x78\x81\x80\x65\x46\x70\xa1\x47\xda\x0b\xbd\xa9\xdf\xbc\x9a\x80" "\xdd\xf0\x09\xbc\x63\x81\xa8\x70\xd0\x62\x8d\xa8\x7b\x29\xd7\x8c\xd8" "\xf1\x14\x02\x14\xee\x79\x03\x15\x7c\x11\x7e\x71\x5c\xfd\x9a\xb4\x43" "\xde\xac\xd3\xea\xea\x22\x3a\x69\xae\x7e\x1a\xa1\x9f\x06\x36\x92\x98" "\xad\xef\x87\xa8\x4c\x29\xdb\x83\x35\x7b\x13\xd9\xb3\xea\x83\xe7\xf8" "\x17\x66\x7e\xf7\x14\x91\xa2\xb6\xed\xef\xfd\x07\xee\x57\x2d\x16\x95" "\x23\x89\x49\x22\x7c\xe7\xe2\x4b\x9c\x05\x99\xaf\xe2\x3b\x37\x91\x28" "\xae\x6d\x77\x40\x48\x55\xaf\x8d\x6b\x8f\xe9\x91\x90\xe9\x30\x7b\xeb" "\x62\x8c\x56\xb2\xb9\x22\x4c\x45\x9a\xd1\x9c\xa1\xd7\x69\xe1\x88\x23" "\x9c\x68\x56\x88\xde\xa6\xfc\x3e\x74\xd0\x96\xb6\x95\x41\x9e\x8d\x28" "\x67\x0f\x12\x22\x55\x8b\x35\x84\xf4\x5b\xb3\x98\x10\x59\xc2\xec\xae" "\x1a\x9d\x5e\x41\x73\xba\xae\xda\x04\xb8\xf8\xa1\x9e\xad\x33\x04\x75" "\x10\x81\x20\xf1\x74\x34\xb7\x48\x02\x33\x53\x37\xd9\x29\x00\x2f\x48" "\xa2\x71\x73\xd1\x04\x55\x1a\xc3\x84\xbb\xb5\x85\x2b\xa8\xab\x83\x64" "\x8b\x8f\xae\xa7\xff\x3c\x87\x04\xf2\xb0\xe6\x61\x4f\x80\xe5\xb1\x0e" "\x74\xf1\xf2\xbf\x22\xb0\x78\x0f\x11\x71\x28\xcd\x1c\x13\x03\x33\x17" "\xf9\x73\x61\x81\xac\xa5\x57\xf4\x02\x05\x4b\x8d\xfb\xcc\x60\xfb\x67" "\x8a\x49\x8e\x1c\x25\xfa\x63\x1c\x16\x72\x5e\xd1\xdf\xf2\x6f\x02\x40" "\x4c\x13\x24\x85\x40\xcc\x59\x50\xb3\xa4\x04\xe8\xd8\x19\xa3\xb9\x28" "\x68\x51\xb6\x52\x02\x0a\xb4\xbc\x61\xd8\xf4\x97\xbf\x48\x46\x10\x8e" "\xfa\x18\xed\xe0\xd1\xab\xda\x82\x76\x90\x71\x5a\xb7\xef\x85\x1f\x51" "\x74\xac\x12\x1d\xea\x67\xab\xaa\xbe\x32\x5a\xc9\xb6\x0b\xd6\x3c\x42" "\x3f\x77\x8a\xad\xc3\x21\x11\x0c\x71\xb6\x55\x12\xd8\x59\xed\xe1\x84" "\x21\xb7\x0f\x10\x9c\x6f\x69\xbf\x6a\x60\x15\x6e\xb0\xd0\x7c\x62\xdf" "\x59\xc2\xde\xe3\x5f\xf9\xde\x56\xd3\x96\x75\xb6\xc7\xa3\x70\x0d\xf5" "\xc2\xf4\x2e\x3c\xa3\xc2\xfc\x75\x34\x77\x26\x64\xad\xb1\xb4\x20\x90" "\x6d\x40\x74\xdc\xeb\x2e\xd5\x4c\x41\xce\x53\x79\x28\xbf\xb4\x53\x74" "\x83\x95\xa9\xaa\x21\x16\xba\x17\x1d\x5a\x73\xa0\x81\x94\xec\x0c\x86" "\xaf\x85\x0b\x40\x76\xb5\x1d\x2c\x42\x37\x5b\x2b\xcc\x8c\x44\x9b\x75" "\x6c\x0b\x86\x58\x45\xe7\x40\x6d\x09\x5b\x62\x5b\xaa\xc5\x8e\xc6\x49" "\xaa\x93\x40\x86\x28\xdd\xf3\x95\x17\x66\x67\x8a\x8a\x0f\xc3\x06\x9f" "\x3b\x87\x0a\xeb\x6b\x7b\xe2\x5b\x2a\xbf\x0b\x4f\x91\x7f\xba\x6b\xf3" "\xb0\xcf\x88\x6b\x56\x76\xc0\x4b\xa2\x93\xf1\x84\xb7\x81\xc2\xd6\xb8" "\x8c\xb1\x47\x03\xf6\x71\x03\x8d\x3b\x8a\x9d\x8a\x63\x35\x1e\x2a\x36" "\x86\xa6\x6b\x10\xa7\x75\xa4\x32\x28\xe5\x88\x21\xb3\xe0\x2d\xda\x79" "\xe9\x64\x10\x95\x68\x82\xda\xeb\x4a\x23\xcf\xef\x10\x37\xc9\xc7\x75" "\xd5\x6b\xb9\x34\xbb\xdc\x69\x84\x61\x32\x2a\xf1\x38\xa8\xf8\x41\x82" "\xd2\x1d\x1c\xe3\x80\x78\x10\x27\xd3\x96\xbe\x32\xba\xca\x0e\xeb\x2a" "\xbb\x42\x8c\x07\xbe\x42\x92\x6d\x0a\x0c\x6a\x99\xf0\x84\x2c\xd8\xcb" "\xa6\x5b\x21\xbd\x8f\xb7\x11\x08\xc5\xa1\xf3\xad\x1b\x9f\x57\x25\xaf" "\x08\x35\x46\x13\x5f\x73\xd3\x91\x41\x57\x7e\x6d\xce\x2e\x21\x68\x21" "\x87\x64\xaa\x1c\x2b\xa1\xca\xea\xcc\x61\x8d\xbc\x87\x37\xfa\xd7\x9c" "\x77\x4f\x8c\x11\xe1\x85\xdd\xb8\x87\x79\x60\x7c\x27\x96\x37\xf5\x9c" "\xc9\x32\x23\x15\x39\x0b\xa7\x4b\x01\x4e\xd6\x5e\x03\x0e\xea\x9e\xc5" "\xa9\xfb\xca\xa6\x11\x13\x57\xf5\x95\x24\xc0\x7f\xc7\x34\xe2\xcc\x7a" "\x1c\x69\x4a\xfa\x29\xdb\x9e\xd5\xaf\xa8\xe8\x8b\xc3\xb9\xd8\xb1\x1c" "\xd5\xe0\x18\x35\xe1\xdb\x75\x04\xef\xda\x53\x16\xa5\x27\x6d\x05\x79" "\x5a\xea\x62\x0f\xa4\x64\x1c\x81\x08\x5e\xc4\x81\x60\x13\xa0\xab\xe0" "\x28\x68\x17\x8b\x9e\xa9\xad\x9a\x75\xa2\xc3\x39\x26\x28\xf4\x94\xda" "\x0e\xa7\x75\xcc\xbf\xac\xf7\x2e\x35\xe7\x0e\x01\x15\xf2\xe3\xc5\x29" "\x72\x0d\xab\x5e\xc1\x8e\xd6\xf4\xb2\x0e\x97\x97\x95\xa4\xd3\xec\xfd" "\x2a\x61\x74\x21\x07\x91\x50\xf6\xff\x4e\x56\xe6\xe9\x84\x99\x4b\x73" "\x1b\x2c\x5f\xbc\x3a\x06\x6a\x64\x51\xc2\x2e\x92\x7c\x82\x36\x14\x67" "\x7c\x35\x39\x33\x55\xde\x49\xef\x19\x43\x98\xff\x7e\xce\xef\x93\x2b" "\xf7\x14\x93\x40\xab\xc3\x2a\x6a\x87\xae\xc5\x92\x02\x42\x3b\x7f\xda" "\xd6\x5a\x18\x82\x95\x83\x4e\xd0\x50\x0b\xb1\x81\xa8\x33\x8c\x38\xf7" "\x5b\xe2\xb7\xbc\xa4\xd0\xcd\x8b\x80\xc6\x76\xcf\xe2\x7a\x41\x3f\x53" "\x88\x32\x0f\x68\x4e\x86\x6a\x80\xf6\xa3\x9d\xcf\xfc\xff\xc2\xa8\x9a" "\xbd\x88\x5b\xfd\xc7\x37\x97\xb6\x11\x75\x5b\xe4\x9d\xdf\xa5\x47\x92" "\x0b\x32\xf2\x8e\x76\x4f\x79\x58\x1b\x7d\xb1\xb5\xb8\xc6\xed\xcd\xfe" "\xbf\x87\x52\x9e\x3d\x87\xca\x1e\x98\x06\x31\xb6\x41\xbb\x63\x1f\x70" "\x3d\x18\xdf\x7e\x71\x4f\x40\x4c\x87\x64\xc8\x79\xf8\x03\x2e\xb4\x9c" "\x4a\xab\x2c\x59\x04\x35\x55\x9e\xc3\xa3\x2e\xc7\x99\x3b\xd1\x17\x26" "\x8f\x15\x01\x7f\x6a\x17\x05\x9e\x15\xf4\x6b\x4a\x30\xe6\x1f\xe0\x22" "\x95\x45\x94\x5a\xc2\xf9\xd5\x7a\x27\xb9\x3e\x38\xa6\x32\xae\x4d\xd9" "\xc2\x4e\x14\x7f\x27\x22\x07\xa1\xf4\xc4\xad\x57\xac\xa9\x33\x69\xee" "\x07\x66\xa3\xc3\xc5\x28\x19\x61\x03\x76\x15\x36\xd3\x1c\xaf\xbe\x58" "\x78\x0c\xbd\x9e\xe0\x12\xe1\xe2\x75\xb9\xb9\x49\x97\xb8\x0d\x04\xa2" "\xe9\xdc\x77\x02\x4f\x2b\x8b\x21\xe5\x13\x98\xe7\x1f\x2e\xc9\x3a\x0a" "\xd8\x7f\xc2\x74\xbd\xf3\x69\xac\x24\x37\x6e\xce\x85\x25\x39\xff\x3b" "\xa0\x9c\x46\xbc\x25\x34\xe5\xdd\x4b\xb4\x88\x3f\x7b\x66\x52\xd1\xe8" "\x5c\xb0\x46\x63\xa6\x64\x72\x5f\x08\x1a\xd3\x27\x56\x13\xed\xc1\xf3" "\xd3\xc4\x67\x19\xef\xcf\xc2\x05\x34\x79\x08\xf8\xa1\xff\x96\x24\xbf" "\xcb\x99\x59\xe3\xfe\x0d\xb8\x25\x4a\x04\x8e\xc8\x8b\x3e\x8c\xc9\x66" "\xdc\x50\xf6\x66\x09\x32\xd0\x88\x3b\x3e\x4d\x27\x8a\xf9\x00\x62\xd6" "\x49\x1c\x3b\xb7\x2f\x69\xfd\x95\xf7\x72\xa3\x60\xbe\xed\x0c\x00\x2d" "\x71\x92\x18\x93\xf6\xbb\xf4\x98\x4d\xb9\x6f\x53\x3d\xa6\x66\x7f\x4b" "\x11\x07\x03\xab\xe0\xff\x0c\xc7\x83\x81\x3b\x65\xf0\x48\x8f\x40\x96" "\x22\x28\x63\xb4\xd3\x64\xb1\x7d\x34\xfb\x98\xca\x90\xcc\x5e\xe6\x51" "\x31\x37\x60\x03\xce\x40\x76\x08\xad\x00\x93\x30\xf3\x2c\xb1\xc5\xf1" "\x36\xec\x3a\x29\x7e\x83\x78\x9c\xaf\x0a\x86\xb8\x55\x10\x7d\xa8\x76" "\xb5\x60\x23\xc4\x27\x10\xad\xca\x5a\xcc\x75\xc9\x2d\x8c\xc1\x69\x4b" "\xc9\x7d\x6b\x92\x9d\x18\x3e\xbe\x88\x71\x7b\x8f\x90\xbd\x7f\xbe\x62" "\xbc\x95\x8e\xc6\xfd\xa4\x93\x42\xf5\x16\x64\x99\x72\xff\xd0\x98\xa2" "\x4c\x97\x76\xed\xa4\x12\x65\xb2\x4a\xda\xa8\x73\xf5\xc6\xa3\x96\xfa" "\xb7\xcf\xad\xf8\x5b\xcb\xf5\x7e\x9f\x08\xfd\x98\x41\x93\xd0\x97\xc1" "\xc9\x76\x91\xf9\xcb\xbd\xcc\x7a\x82\x1e\xa1\x85\x69\xdd\xda\x74\xd8" "\x79\xad\xa7\x45\xb1\xfd\x4b\x5b\xe3\xa2\x66\x46\x43\x83\x73\xa9\xfc" "\xfa\x3e\x29\xb8\xdb\x1e\x61\x3e\x88\x6a\x8d\x6f\x75\xd7\x38\xc9\x7a" "\x9e\x15\x88\x73\x26\x97\x0d\x37\xf3\x3a\x97\xb9\xc0\xa0\xd2\xcc\x75" "\x2a\x07\xba\x7d\x14\xcf\xc4\xd2\xcb\x77\xbe\x27\xfd\xe5\x12\x83\xf7" "\x59\x97\xed\x8c\xc3\xe1\xeb\xa6\xc9\x84\xaa\x9a\xbb\xa0\xa5\xc9\xa5" "\xfd\x3e\x1e\x99\x59\x6c\x8b\xd7\x13\x8e\xf9\xc2\xdc\x70\xb6\xce\xce" "\xd1\x7c\x87\xf9\x4f\x7d\xcf\x08\xc7\x45\x29\xd6\x23\x79\xa3\x8d\x07" "\xcd\xb9\xdf\x74\x29\x2e\x48\x4f\x5c\xda\x42\x2a\xd6\xc3\xbe\xec\x5c" "\xa1\xab\x8f\x7b\x80\x7f\xf6\x2f\xcf\x9a\xce\x91\xef\x7a\x7e\x4f\x02" "\x78\x01\x0b\xd2\x30\xaf\x39\xba\x58\x12\x29\xf6\xf6\x6e\xef\xfc\x1a" "\xc5\xf5\xad\xaa\x28\xf0\x89\xa6\xce\x89\x80\x12\x14\xd8\xb9\x1a\x6d" "\x80\x1e\x1b\x2e\x36\xcc\xdf\xd8\xfa\x5a\x88\xa1\x1e\xa6\xbf\xfe\x28" "\x7a\xc1\x34\xa4\xba\x68\xef\xc4\x28\x14\xf6\x87\x2f\xb7\x94\x2a\x5b" "\x9c\x21\x11\x9d\xa6\xe3\x4b\x0c\xe5\xf8\x27\x81\x35\x43\xdb\x23\xbe" "\x1c\xbe\x70\xa1\xbc\x09\x23\xa2\x27\xd3\x72\xeb\x9f\xa8\x37\x93\x5d" "\xea\xe2\xd8\x95\x6f\xe0\xf3\x9f\x97\x31\xdd\xf9\xfe\x76\x9a\x79\x55" "\xeb\x5b\x8f\x1c\xfe\x6a\x47\xe2\x14\xf0\xa6\x09\x30\x1f\xfb\x75\xf9" "\x27\x85\x60\x0e\xcb\x74\x05\x81\x6c\x52\xa5\x98\x48\xf4\x9a\xac\x87" "\x6d\x07\xc2\xad\xab\x94\x65\x93\x5c\x2c\x39\xd3\x59\x5c\xe6\x8e\xf2" "\xa9\x10\xe4\x05\x32\x9c\x0f\x40\x39\x1e\x48\xa7\x84\xae\x2c\x75\x29" "\x5c\xcc\xf7\xf5\xa7\x96\x09\x42\xb9\xb6\x46\x9e\x6e\x80\x07\xbe\xb8" "\x74\xbf\x44\x52\x12\x61\x65\x2c\xd6\xaa\xb2\xb9\x8d\x75\xca\x99\xcd" "\xdc\x8a\xa1\xd2\xfd\xdd\x46\x5a\x46\x53\x0e\x90\xb2\x73\x6f\x0a\x97" "\x39\x9e\x42\x1a\xb3\x77\x55\xd3\x49\x5d\x3c\x19\x74\xf3\xff\x76\x1c" "\xc6\x9e\x41\x87\xee\x24\xdf\xb4\x1c\xdb\x9b\xfb\x02\x82\x93\x12\x46" "\xbd\x6d\x9a\x58\x8c\x9f\x03\x76\x60\xbe\x92\x75\x08\xfd\x71\x9b\xdc" "\x1a\xd1\xbd\x30\x2c\x63\x55\x7a\xee\x5e\xc9\x17\x34\x3d\x3b\x6e\xee" "\xd1\x32\x9c\x50\x29\xcf\x96\x70\xa4\x58\x41\xda\xd3\x56\x06\xc2\xcc" "\x69\xf1\xca\xe1\xa5\x4d\x99\xe2\xf0\xd9\xd9\xe8\xbe\x1b\xf1\xbe\xa9" "\xde\x14\xbe\xc0\xa8\x2c\x9c\xa1\x1c\x62\xa1\x9d\x36\x96\x67\x9f\x4a" "\xce\xca\x89\xcb\x6e\x32\xd3\x51\x2f\xe8\x3c\xbd\xb5\x1c\x13\xca\x31" "\x75\x28\xa1\x60\x06\xea\x6f\x84\x5d\x17\xf0\x40\xb6\x93\x04\x60\x77" "\xf9\x7f\x9d\x84\x33\x63\x04\xb9\xe2\xe5\x89\x49\x55\xc8\x95\xe8\x1a" "\x0b\x8d\x37\xaa\xe8\x73\xe8\xfa\x48\x10\xe8\x9f\x4f\x17\xa2\x92\x08" "\x53\x62\x86\x61\xb6\xa8\x2c\xa7\x26\x2d\xc4\xfb\x9c\xd0\xee\xe0\x5a" "\xaf\x76\x8b\x67\x24\xd3\x22\x78\x1e\x14\x92\x21\x21\x31\x55\x72\x26" "\x27\xa8\x28\xda\x97\x0e\xdd\x4c\xc5\x2c\x5f\x42\x98\xac\xa9\xbf\x9a" "\xd6\xd6\xfe\xcd\xbd\xa0\xd1\xda\x03\x0e\x74\x2c\x58\xa2\xfe\x3d\xbf" "\x64\xea\xc2\x94\x0c\x95\x96\x06\xfa\x19\x20\x83\xbb\xba\x2d\xec\x1e" "\x67\xfe\x71\x0d\x91\x72\x9f\x53\xb9\x5b\xe0\x34\x72\x0b\xe0\x8b\x3a" "\xfe\xb1\x44\x0a\x0c\x98\xbe\x9b\x55\xc1\xa5\x40\xf9\x41\xa0\x2c\x6c" "\xb2\x48\x44\xad\xe6\x86\x61\xdf\xe7\x17\x8d\x61\x47\x84\x84\x6b\xea" "\x5a\xe9\xda\x84\x75\x56\x39\x78\xf3\x92\xeb\xd0\xe5\xee\x1d\xb0\x98" "\x1d\x19\x82\xf8\x2a\x6c\xf9\x6c\x33\x63\x45\x9e\x7b\x7e\xe6\x81\x43" "\x4b\x5f\x20\x99\x7b\x73\xdf\x88\x5d\x6f\x29\xdc\x61\xbf\x26\xc4\xee" "\x59\x18\xcf\x16\xd3\xd1\x23\x92\x0f\x0b\x5e\xbc\x63\x2b\x43\x11\xc7" "\x3b\x58\x70\x58\x55\xee\x45\xe8\x29\xe8\x03\xa9\x3e\xd4\x37\x42\x00" "\xfd\x54\x01\x9b\xbb\x8f\x8b\x8e\x2a\x1d\x15\x18\xba\x77\xc7\xa9\x1b" "\xe0\xe9\x43\xc5\x99\x29\xeb\x33\x70\x77\x10\xe4\xe6\x76\xd9\x33\x8e" "\xfd\x57\x99\x1c\xa3\x10\xf5\x1e\x3e\x23\x34\xa6\xbc\x0e\x88\x44\x4f" "\x11\x76\x04\xad\x35\x28\x94\xcb\x4f\x5e\xc0\x21\xe5\x7e\xa8\x83\x4f" "\x3b\xa3\x16\x23\x99\x01\xcd\x20\xef\xb8\x8d\xe7\x0d\x7c\xc1\x72\x71" "\x91\x6e\x8a\x3c\xcb\x3e\x17\x0e\x6b\xc0\xa1\x58\x6a\x1d\x0d\xb8\x8b" "\x0f\xdc\x57\x6b\x1f\x62\x38\x19\xcf\x9e\xbb\xfb\x9a\x60\x65\xac\xe8" "\x54\xca\x7d\x1f\xc1\x46\x68\xf0\x63\xe1\xa8\x12\x2d\xcb\x9e\x33\x1f" "\xba\x76\x3e\xab\x2b\xda\x19\x23\x01\xe5\xd0\x0a\x90\x3e\x03\xd6\x33" "\xd1\x07\xf3\xfe\xc1\x53\x36\x2c\x1b\x5c\x80\x5e\xb5\xb9\x86\xf3\x3f" "\xce\x18\x75\x1b\x57\x99\x3f\xef\x55\xb1\xb0\x5a\x3e\xd2\x26\x56\x68" "\xc7\xa0\x44\x20\xd8\x83\xe7\xec\xeb\x62\x9c\x82\x0a\x83\x31\x37\x63" "\x0f\x73\xed\xcb\x56\x67\x85\x6e\x5f\x33\xd9\x62\x64\x1a\xc0\x6d\x6f" "\x67\x2b\x13\x3d\x75\x17\x6f\xe2\x0a\xf1\x81\x6f\x9a\xcf\x59\x7f\x51" "\x8d\x5c\x8f\x30\xd5\x66\x47\x2b\x8f\x81\xa6\x3b\xd6\x35\xe9\x74\x3e" "\x2a\x90\xd2\x5f\xb6\x1e\x05\x7a\x25\x65\x56\xf2\x7b\x71\x70\x88\x6b" "\xcf\x94\xc4\xa6\xf4\xfc\x69\x5e\xe5\x31\xdf\xe2\x82\xab\x42\xa8\x4e" "\x69\x79\xcc\x33\x9f\x73\x11\xa9\x4f\x62\x35\xb9\xc3\xfb\x35\x9a\xdb" "\xbb\x9a\xf9\xb5\x7e\x44\xad\x2c\xb5\xa5\xc2\x7f\x75\x86\x98\x54\xb2" "\x82\xe4\xc7\x33\x96\x71\xe5\x4a\xe8\x62\x28\xf2\x96\x0e\x20\x09\x89" "\x39\xab\x28\x74\x3a\x89\x41\x84\xb3\xf4\x19\x05\xe1\x8c\x19\x46\xa5" "\xd5\x96\x27\x6d\x21\x54\x88\x6c\xd6\x01\xa8\xbc\x64\xf7\x54\xb7\xa1" "\xff\xf7\xd6\x9f\x7c\x07\x02\x88\x31\x71\x30\xc3\x4e\xfd\xe6\xc7\x62" "\x91\x81\x71\xa4\x4c\x85\x41\x04\xc1\x51\xc1\x02\xc2\xa3\x56\x06\x57" "\xf3\xdd\xef\x5c\xbf\xbe\xfc\x3a\x55\x56\x58\xf7\x32\x38\x67\xdd\x6e" "\x41\xae\x54\xb9\x2b\x21\x95\xcf\xd9\xc5\x1c\x1a\x34\x8b\xb7\x53\xb0" "\xdf\x9f\xf2\x79\x2a\xcb\xc6\x98\x92\x53\xee\x70\xbf\x28\x94\xba\x62" "\xfe\x5e\xa7\x3e\x3a\xf8\x07\xa2\xa6\x19\x4f\xbb\xe9\x08\xf5\x3f\xc9" "\xd5\xaf\xc6\xa6\x26\x36\x9c\xf8\x7a\x40\xbf\x13\x60\x15\x5f\xca\x7a" "\x08\x26\xc6\x68\xff\x1a\x57\x68\x23\xab\x1d\xee\x22\xe2\x14\x06\x66" "\xd7\xee\x3b\x76\x47\x62\xc8\x8e\xb0\x14\xec\x90\x95\xbf\x0f\x6d\xe9" "\x94\x64\x09\xc6\xf1\xa1\xef\xea\x68\x43\x15\xef\x0f\x95\xf3\x69\xb3" "\xd8\xc9\x01\xf8\x09\x39\x9a\xe5\xdd\xcb\xb3\x23\x2e\xe1\xcc\xdb\x24" "\xc2\x48\x01\x29\xa3\xc9\x4f\x73\x69\x75\x26\x23\x12\xdb\xca\x4c\x6e" "\xad\xde\x2d\x09\xc0\xdd\x00\x10\x58\xf9\xb7\x8a\xba\xce\xf7\xf0\xa9" "\xa1\xc7\xcc\xf1\x1c\x99\x1b\x24\x1f\x20\xa4\x29\xef\xeb\x0f\xbb\xc5" "\x18\xc5\x3a\x53\x91\x4f\xa2\xfc\xfc\x7a\x9d\x35\xe5\xca\xcf\xde\xdf" "\xce\xc0\xca\x97\xe4\x32\x39\x6e\xe3\xb0\x35\x37\xb9\xbc\x91\x71\x5b" "\xb1\xf5\x15\x14\xc3\xb0\xae\xbf\x97\xba\xb6\x80\xd4\xc5\x01\x93\xfc" "\x8a\x26\x4d\xc1\x02\x0c\xa7\x26\x83\x69\xd4\x11\x3d\x66\xba\x79\x9f" "\x59\xc0\xfd\xde\x15\x4d\xa5\x09\xb6\x17\xc8\xc9\x88\xa0\xc3\xa3\xa9" "\xac\x58\xbd\xbf\x79\xcd\x7a\x00\xec\xe6\x7d\xa8\x29\x11\xe3\x23\x72" "\x13\x18\xb8\xc2\x17\xe5\xc6\x60\xf8\xf7\xff\xd7\xc4\x8a\xa6\xb3\x7c" "\xa8\x66\x4f\x0a\x20\xe2\x0b\x34\x6e\x45\x4c\x6e\x76\x5f\x47\xa0\x6b" "\xa4\xef\xd2\xc8\x8b\xf7\x41\x2d\x37\x7d\x16\xf2\xe4\x68\x09\x5d\x8c" "\xcd\x3f\x53\xe2\xc5\x7f\x78\x0d\x22\xa9\x9e\x5d\xbc\x3b\x58\x2f\x5d" "\xff\x17\xdd\x91\x27\xf7\xbd\x06\x60\xd6\x6a\x55\x58\x35\x03\x30\x46" "\x6d\x7c\x50\xf4\x28\x8e\x24\xf9\x6e\x9a\x7a\x79\xfe\x82\x82\xbf\xbf" "\x1b\x5e\x37\x61\x2c\xe3\x9b\xff\x00\x9e\x39\x22\x8b\x59\xf5\x09\x51" "\x3b\x32\x2a\x0c\x1a\x25\x38\xe9\x42\xc2\xf5\x78\xb1\x6e\x6a\xfa\x21" "\xd4\xf4\x0a\xbd\x8a\x66\x18\xd7\x45\x41\x6d\xf5\xb5\x4a\xa1\x56\xa6" "\xc8\xa7\x42\xf2\x57\x73\x8b\x96\x95\x90\xa8\x10\xf8\x84\xb0\xb5\xaf" "\xc1\x82\x24\x1f\x84\x70\x32\x24\xa7\x3e\x23\xec\x9e\x5e\x96\x03\x7e" "\x52\xe0\x6a\x19\xfa\x1a\xeb\xfc\x69\x18\x4b\x10\xf3\x54\xb5\x46\xf0" "\x9f\x5e\x21\xca\xb9\x86\x2f\x24\x46\x2f\x0e\x68\x03\xb9\x8d\x35\x2a" "\x6d\x70\x70\x35\x24\x2b\xfe\x3e\x34\xa4\x73\x5e\x4b\xe8\x8e\x2e\xb3" "\x29\x9a\x44\xb0\xd2\x2f\x52\x87\x95\xcf\x5d\x6e\x9e\x1f\xc7\x31\xc5" "\xfe\x35\xc5\x93\xc1\x22\x89\xde\xf7\x41\x9e\x1e\xa8\x21\xe7\x82\xa0" "\x7a\x16\xa0\xe9\x33\x48\xa9\x15\x5e\xde\xbe\x61\x68\x46\xfc\x4a\xff" "\x01\xe9\x6b\x10\x5c\xe2\xe4\xce\xd7\xc5\x4b\xa4\x61\x53\x4e\xa4\x60" "\x29\xa1\x29\x28\x1f\xe3\xef\x73\x65\x9e\x5b\x84\x33\x93\xbc\xc2\x88" "\xad\x62\x0e\x2c\xa7\xe2\x9a\xad\x98\xda\xfd\x4f\x3c\x5b\x2d\xd2\x59" "\x29\xc6\xaf\x6f\xe4\x16\x67\x7c\x2f\xf5\x91\xcd\x53\xb6\xdc\x42\x6a" "\x3e\x74\x1f\xf7\x0d\x78\x49\x0e\x02\x64\xd9\x44\x4f\xad\x49\x28\xe6" "\xf6\xb7\x56\xb1\xa1\xeb\xf6\xfc\x14\x5f\x69\xb3\x2b\xb1\x20\x5e\x08" "\x6b\x93\x9b\x4e\xb8\x38\x13\x5b\xcc\x56\xc9\x5b\x4f\x9f\xaa\xe0\x41" "\x83\x9c\x83\xba\xd1\x77\xf7\xad\x96\x55\xae\x56\x8a\x19\x53\x67\x48" "\x48\xb7\x91\xaa\x35\x6c\x62\x9b\x2c\x89\xf9\x5c\xe9\xc2\x85\xa9\xbe" "\xe9\x5c\x68\x02\xeb\x37\x94\x60\x06\x74\x1a\x48\xaf\xe7\x60\xc0\xa6" "\x47\xa1\x53\xd3\x8f\x20\x3e\xfd\xd7\x34\x64\xb9\xbe\xd2\x82\xbe\x07" "\xcd\xa0\x6f\x79\xc3\x70\x10\xe9\xf2\x3d\x1f\xb8\x09\xca\x85\x7f\x52" "\xc3\x89\x94\x8f\x55\xc9\x54\xee\x2a\x43\x60\x38\x77\x10\x22\xe1\xbf" "\x03\xcb\x96\x41\x2b\x6f\x64\x37\x51\x65\xae\x3c\x3c\x5f\xe9\x5f\x16" "\xf7\x37\xa4\xa8\x44\xf6\x5a\x43\x9b\x89\xb2\xf9\xd0\x9e\x36\xfc\x46" "\x50\x29\xd6\x37\xa4\xe9\xc8\x7e\xda\x60\x72\xba\xeb\x8e\x93\xbd\x4d" "\x0c\xa9\x10\xef\x7a\x30\xf4\x22\x34\x92\x3f\xeb\xfd\x22\x50\x2d\xba" "\xad\xcf\xaa\xdf\x3f\xe8\xad\x78\x14\x29\x42\x04\x31\x8c\x50\x7c\x3c" "\x55\x27\x63\xfb\x13\x25\x8b\xc3\xbe\x7b\xfd\x6f\x62\x54\x14\xef\xe9" "\x3f\xef\x27\xa7\x67\xe4\xed\x2c\x07\xd5\xa8\x0e\x76\xba\x06\xe7\x63" "\x4c\x4a\xa8\x8d\x3c\x5a\xe6\xbf\x6e\x4a\x04\x44\xe9\x3e\x80\x12\xb4" "\xdd\x38\xe4\x8e\x2f\xb8\xdd\xdb\x64\x1e\xbd\xf5\x80\x6b\x04\x02\x23" "\x87\xe4\xa0\xbd\xf8\x56\x95\xcf\x96\x24\x85\x27\x5b\x66\x7d\x3b\x08" "\x38\x40\xa3\xe3\x91\x3c\xcc\x4f\xe3\x9a\x85\xf5\xc3\x06\x6a\x48\x90" "\xd6\x6c\xb1\x00\x45\xb0\xe6\x61\x1e\xae\x48\xb9\x77\x47\xf9\xe6\xd5" "\xa1\x85\x5b\x68\xa0\x24\x5a\x1f\xb9\xfb\x7d\x6b\x83\xe1\x12\x6d\xdb" "\xcb\x80\x8a\x96\x96\x84\x99\xef\x6b\x41\x2e\x86\x8d\xb3\xdc\x3f\x49" "\x6d\xe6\x77\xb5\xbb\x31\x66\xc6\x34\x93\x94\xc6\x80\xb0\x0d\x78\xd6" "\xc6\x4f\x20\x2a\x1f\xfe\xda\x4d\x73\xda\xf9\x0f\xfa\xfa\x35\x42\x66" "\x30\x35\xf0\x3e\x7f\x4f\x5c\x03\x96\xe8\x68\x2c\x8e\x1d\xca\x02", 4096); syscall(SYS_write, r[0], 0x20000180, 0x1000); break; } } int main(void) { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }