// https://syzkaller.appspot.com/bug?id=efaf29ec3ebd3c238b4808bcab20dd684f7eba88 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static unsigned long long procid; static void kill_and_wait(int pid, int* status) { kill(pid, SIGKILL); while (waitpid(-1, status, 0) != pid) { } } static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "./syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static void remove_dir(const char* dir) { DIR* dp; struct dirent* ep; dp = opendir(dir); if (dp == NULL) exit(1); while ((ep = readdir(dp))) { if (strcmp(ep->d_name, ".") == 0 || strcmp(ep->d_name, "..") == 0) continue; char filename[FILENAME_MAX]; snprintf(filename, sizeof(filename), "%s/%s", dir, ep->d_name); struct stat st; if (lstat(filename, &st)) exit(1); if (S_ISDIR(st.st_mode)) { remove_dir(filename); continue; } if (unlink(filename)) exit(1); } closedir(dp); if (rmdir(dir)) exit(1); } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i; for (i = 0; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { pthread_mutex_t mu; pthread_cond_t cv; int state; } event_t; static void event_init(event_t* ev) { if (pthread_mutex_init(&ev->mu, 0)) exit(1); if (pthread_cond_init(&ev->cv, 0)) exit(1); ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { pthread_mutex_lock(&ev->mu); if (ev->state) exit(1); ev->state = 1; pthread_mutex_unlock(&ev->mu); pthread_cond_broadcast(&ev->cv); } static void event_wait(event_t* ev) { pthread_mutex_lock(&ev->mu); while (!ev->state) pthread_cond_wait(&ev->cv, &ev->mu); pthread_mutex_unlock(&ev->mu); } static int event_isset(event_t* ev) { pthread_mutex_lock(&ev->mu); int res = ev->state; pthread_mutex_unlock(&ev->mu); return res; } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; pthread_mutex_lock(&ev->mu); for (;;) { if (ev->state) break; uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; pthread_cond_timedwait(&ev->cv, &ev->mu, &ts); now = current_time_ms(); if (now - start > timeout) break; } int res = ev->state; pthread_mutex_unlock(&ev->mu); return res; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 3; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 45); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); #define WAIT_FLAGS 0 static void loop(void) { int iter; for (iter = 0;; iter++) { char cwdbuf[32]; sprintf(cwdbuf, "./%d", iter); if (mkdir(cwdbuf, 0777)) exit(1); int pid = fork(); if (pid < 0) exit(1); if (pid == 0) { if (chdir(cwdbuf)) exit(1); execute_one(); exit(0); } int status = 0; uint64_t start = current_time_ms(); for (;;) { if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid) break; sleep_ms(1); if (current_time_ms() - start < 5 * 1000) continue; kill_and_wait(pid, &status); break; } remove_dir(cwdbuf); } } uint64_t r[1] = {0xffffffffffffffff}; void execute_call(int call) { intptr_t res; switch (call) { case 0: memcpy((void*)0x20000200, "/dev/pf\000", 8); res = syscall(SYS_openat, 0xffffffffffffff9cul, 0x20000200ul, 2ul, 0ul); if (res != -1) r[0] = res; break; case 1: syscall(SYS_ioctl, r[0], 0xc4704434ul, 0x20000240ul); break; case 2: memcpy( (void*)0x20000640, "\xf7\x7f\xfe\xf7\x7d\xcb\x47\xd7\xb5\xce\xa6\x2c\x6a\xc3\xe6\x2b\xcb" "\x21\x93\xd1\x71\x22\x4d\x6f\xc7\xd1\xd5\x45\x0f\x31\x0a\x04\x0e\x03" "\x5f\xf2\xc5\xff\x9f\x8a\xa4\x15\x71\x47\x24\xbe\xf7\xb1\x90\xfb\x08" "\x08\x51\x77\xb4\xa9\xa5\xb3\x2e\x14\x55\xa6\x1d\xdc\x02\x4c\xef\x6d" "\x07\x95\x4d\xb6\xe7\xe4\x0c\x8f\xef\x70\x5e\x6c\xc2\x42\x34\x56\x46" "\x33\x58\xb9\x50\x2a\x1c\x64\x78\xbf\xd7\x38\xf3\x6b\xd9\x21\xdd\x73" "\x03\xc1\xe3\xfd\xf8\x07\x90\x04\xaf\x67\xa0\x1a\x91\x46\x55\x40\xeb" "\xc9\x08\x29\xe5\xf1\x4d\x55\x29\x37\xb1\x38\x72\xf4\x3b\x3b\x70\xd9" "\x46\x12\xa5\xc5\x3c\x1e\x81\xa6\x39\x34\xbc\x8d\x48\x9f\x3e\xb9\x84" "\x43\x67\x2d\x8b\xfc\xa4\xf2\xdb\xf5\x46\x21\x90\x76\x68\x37\xe0\xe9" "\xf9\x76\xb0\x51\x5c\x01\xc3\x2b\x69\xac\x28\xdd\x34\x91\xac\xf8\x6e" "\x2e\xe3\x9a\x1e\xbc\x21\xd9\x3c\x2a\x7d\xe7\x6a\x85\xb7\x77\x6a\xb5" "\xbb\xe9\x89\x7c\x0a\x2a\x4e\x2f\x32\xb0\x06\xce\x7d\x8e\xa1\x74\x47" "\x27\x12\xe3\x5f\x98\x53\x4e\xa6\xd8\x53\xe9\xb4\x94\x21\x8a\x31\xdf" "\x0a\xa9\x34\x11\xf7\x6f\x7a\x9b\xda\x64\xe1\x8f\x1e\xc5\xf7\xea\x7b" "\x4c\xf3\x7c\xb0\x66\x27\x72\x32\x74\xba\x84\x25\xdf\x34\x03\x2f\xc9" "\x1d\xfc\x2c\x29\xcc\x80\xeb\xdc\x30\xc0\x2b\xd2\x95\xcf\xab\x62\x74" "\x56\x17\xb5\xe1\x84\x1c\x82\xf0\x2d\x83\x4c\x21\xd4\x84\x3e\x04\x6f" "\x7b\xfe\x1d\xf3\xbe\xb4\x5f\x16\xc4\xee\xa2\x43\x12\x1b\xcd\x20\x22" "\x30\x86\x07\x67\xdf\xe3\x00\xc4\x7e\x95\xe0\xf3\xe4\x5c\x44\xe5\xc7" "\xdb\x7a\xf9\x8c\xf9\x4b\xa2\x50\x3e\x87\x1a\x7c\xad\xe8\xc9\x78\x7b" "\xba\x0f\xb8\x4e\x48\x57\xf9\x1d\x58\xa6\xcf\xc1\x83\x5c\xc8\xaf\xf9" "\x5b\x2a\x82\xf9\x78\x98\x0c\x89\xe8\x60\xe1\xa2\x7a\x7e\x95\xb3\x54" "\xd5\xbc\xd7\xed\xc4\x68\xec\xc3\x6f\xe1\x41\xa0\x08\x44\x55\x64\xc7" "\x1d\x7e\xd0\x63\x8c\xee\x76\xba\xa2\xe7\x2f\x45\x87\x20\x60\x22\x60" "\x73\x38\x17\xe1\xc3\xec\xbc\x80\x5a\xa0\x2f\x71\x1b\x3d\x54\x7a\xa4" "\xed\x6c\xec\x57\x53\x3d\x2e\x71\x76\x47\xa9\xf6\x91\xa7\x48\x1e\xfc" "\xa3\x24\x9b\x9f\xe2\x2f\x4a\x79\xc1\xc4\xbb\x9c\x7f\x79\x84\x7c\xbc" "\xde\xaa\xae\xc9\x79\x88\xc9\x7a\x54\x1d\x86\xd6\x5a\xb9\x25\xf4\xc4" "\xe7\xab\x69\xaf\xa9\xc8\xcd\xd4\xd9\x24\x58\xc7\xd5\xc8\x03\xc4\x20" "\xf3\x3b\x80\xcd\xfa\xa8\xf1\x77\xbc\x52\x75\x42\x32\x05\x9b\xc5\x3b" "\x01\x04\xf7\x0f\x5a\x1e\x34\x6f\x04\x9f\x79\x85\x06\x44\x9d\x89\x2e" "\x2e\x9c\x75\x74\x65\xc0\x4c\x4c\xbd\x23\x1b\x2b\xed\x36\x25\xb6\x90" "\xda\x97\x44\x5a\xd2\x4d\x3a\x85\x32\xeb\xb9\x8b\x75\xbd\x13\x61\x65" "\xb5\x21\xe6\xff\xfa\x66\x64\xd5\xc0\x33\x73\x41\x73\xf8\xe4\x10\x52" "\xd7\x3b\x84\x9b\x36\xa4\x79\xd9\xa8\x4e\xc9\xca\xeb\x63\x5a\x3c\x63" "\x93\x23\x51\xae\x5b\xa0\x77\x0c\x14\x25\xb2\xe6\x9d\x40\xb9\x3b\x9a" "\xc8\x29\xd7\x89\x24\x8e\x66\x2a\x28\x5d\xb4\xd3\x20\x75\x22\xc8\x4f" "\x83\x00\x3f\xf4\x40\x9d\x57\x04\x3a\x78\x5b\xea\xab\xcb\xf6\x4a\x5d" "\xfa\x88\xea\xec\x43\x6a\x85\xc9\xc5\xbc\xd0\xaf\xa7\x9e\x92\x0b\x4b" "\xac\x29\x0e\xbf\xd3\xeb\x5b\x39\xfd\xd7\x3e\x76\x79\xe0\xd9\xb0\x4c" "\x7d\xd7\xb0\xd7\xb8\xfc\xdf\x28\x59\x7b\x7d\xa3\x74\xdd\x20\x51\x73" "\xab\x7d\x70\x9b\xbf\xf4\x58\xbf\xb8\xcb\x88\x94\xc0\x9a\xd1\x2d\x10" "\x4a\xf9\x4d\xd2\x51\x1a\xa2\x3e\xb5\xfc\x35\x95\xe3\x92\x1e\x49\xb8" "\xda\x60\x50\xe7\xfe\x36\x15\x11\x1a\x93\xd6\x0a\x19\xc1\xe6\xb0\xf0" "\x69\xd9\x87\x5f\xf6\xcb\x59\x44\x3c\x11\x04\x42\xc0\x4b\x79\x54\x20" "\x21\xb7\x67\xe9\x79\x23\x85\x26\x09\x68\x4a\xe3\x71\x16\x9f\xb9\x82" "\x5d\xda\x40\x22\x8d\x41\x88\xb9\x27\x7b\x0a\x2e\x40\xf0\xcd\x19\x93" "\x58\x7d\xcb\xa7\x25\x6b\x8e\xca\xda\x5f\x98\x63\x52\x00\x19\x85\x4f" "\xe3\x29\x3d\x1d\xae\xbb\x02\xcf\xa6\xbd\x1c\x99\x96\x1f\xf1\x25\x59" "\xd5\x2f\xbc\xc1\x63\xdc\xf5\x82\x9a\xb7\x1e\xee\x8e\x67\x74\x95\x76" "\x7a\x49\x6e\xf8\x56\xbb\xca\x59\x0e\xac\x7d\x92\xe7\xe8\x8f\x84\x09" "\xe4\x7f\x00\x82\x6f\x86\x73\x0d\xdc\xbf\x88\x27\x3c\xb4\xf6\x9a\xbf" "\xb7\x4b\x1a\x04\x0d\x71\xb0\x3b\xaf\x67\x62\x24\x4e\x1f\x92\x16\x87" "\x03\xe2\x16\x03\xe2\xe3\xe0\x69\x20\x08\x99\x7d\x1b\x32\xd3\x5d\x29" "\x40\xfa\x4c\x69\x81\x23\x5e\x6a\x25\x0a\xa2\x98\x8a\x22\x97\x1e\x05" "\x96\x4e\x79\x4d\x46\xee\x67\x08\x21\xc7\x4f\xb9\x30\x89\x98\x28\xf9" "\xa4\x76\xf5\x09\x7e\x88\xbd\x63\x85\x22\x2b\x76\xfe\x9f\x60\x1a\xca" "\x0c\xb8\x07\x59\xfb\xa0\x96\xd3\x3e\x4d\x7f\xdd\x6a\x7c\x72\xbf\xf1" "\x78\x36\xbc\xbd\xb4\x92\xba\xaa\x83\x0b\x61\xfd\xb2\x62\x62\x82\xd5" "\xa7\x51\x1b\xf3\xcf\x2d\x7b\x9d\x32\x7a\xb5\x37\x7d\x52\xd9\xc8\x73" "\xdd\x26\x59\xe1\xff\x25\x3c\x75\x82\x90\x8c\xa8\x2f\x2d\x38\xd1\xa8" "\x5e\x50\x28\xdd\x30\x23\x1a\x17\xce\x51\x87\x47\x87\x95\xb1\x3e\x9b" "\xb1\xa7\x54\x01\xe7\x49\xde\x08\x32\xab\xf8\xc6\x0d\xea\x9e\x97\x93" "\x1b\x22\xf7\x20\xc4\xab\x42\xe8\x83\xff\x53\x5d\x4a\xfe\x6a\xc9\x2e" "\x17\xb1\xfd\x17\x41\x06\x82\xd7\x97\xaa\x81\x3d\x8c\xd2\x9f\xbe\x1f" "\x01\xc6\xa7\x79\x13\xd8\x1f\x28\x87\x36\x7d\x59\xf0\x92\x5f\x84\xef" "\x95\xaf\xb9\x73\x98\xcf\x40\xd0\x9e\xab\x35\xac\xc1\x83\x5d\x04\xe9" "\xc9\x31\xcc\xbd\xa6\x8a\xb1\x61\x43\x01\x76\x18\x02\xd3\xf9\x50\x6c" "\x0d\xf1\xd0\x4c\xf0\xc6\xfd\x25\xf8\xc3\xc9\xc8\xd9\x70\x06\x91\x11" "\xed\x67\xb7\xd7\x37\x55\x25\x54\x61\x04\x18\xeb\x55\x56\xb6\x6e\x94" "\xcd\xba\xd4\xf5\xb7\x4a\xee\x49\xcd\x80\x46\x05\x2c\xad\x74\x46\x79" "\xa6\x0e\x5b\x8d\x73\xf9\xd4\x05\x48\xdb\x03\xea\x82\x59\x60\x22\x4d" "\x88\x0a\xa1\x1e\x67\x33\x5b\xde\xd8\xa7\xea\x7a\xfa\xff\xdf\x54\x5a" "\x67\x63\xbc\x42\xd2\x57\x8b\x42\x9f\x34\x97\xdc\xd7\xf2\x67\x5e\x03" "\x5b\xfd\x00\x82\x79\x85\x41\x62\x48\x15\x17\xad\xa9\xdb\x70\x22\x56" "\xc1\x02\x8b\x19\xcb\x0d\xa4\xf4\x7d\x0b\x2b\x02\xb4\x55\x02\xb1\x81" "\x70\xbc\x4e\xb2\x5d\x7d\xc8\xb1\x52\xa2\xe2\x00\x54\xac\x9e\xd3\x90" "\x9c\xb6\x10\xe0\xa9\xb9\xb8\xda\xb1\xa0\x7e\x97\x91\x81\xe3\x84\x8f" "\xb6\x54\xe5\x0a\xfe\x1c\xde\xc1\x9b\x51\xf5\xb0\xa1\x6d\x3b\x85\x95" "\xc9\x31\x34\x12\xb4\x9b\xb6\x5c\xaa\x6a\xaf\x44\xc6\x23\x86\xc9\xc0" "\xf9\x71\xf6\x39\x29\x46\x48\x43\x23\x11\xff\xa2\x5e\x43\x39\x88\x38" "\x43\x87\xed\xb0\xe2\x5e\xbc\x90\x3e\x27\xf0\xff\xb6\xcb\xd2\x81\x12" "\x31\x1e\x69\xe0\xee\xa2\xfd\x80\xc1\x6b\xc5\xc8\x04\x3e\x4f\x04\x2a" "\x55\x58\xfb\xa6\x1c\x3e\xed\x04\x61\x5d\x86\xc5\xfc\x2b\x11\x17\xfe" "\x28\x10\xc0\x77\x0a\x0d\x60\x93\x44\xea\xe8\x23\x9d\x08\x2c\xc7\xf5" "\xed\xe3\xe9\x52\x8e\x55\x44\xb3\xbc\xd6\x99\x8f\x66\x9f\xc5\xaf\xc4" "\x50\x97\x13\xe3\xa1\x35\xdc\xd5\x32\x5d\x05\x50\xea\xac\xad\xf6\xb5" "\x00\x19\x1c\x37\x4c\xfb\x21\x11\xba\x3f\x75\xc2\xa1\xce\x74\x65\x2f" "\xbe\x38\x45\x51\x86\xc9\x57\xaa\xfe\x6b\xbd\x71\x7e\xdc\x16\xe3\x36" "\x3e\x47\xcd\xdc\x4a\x6b\xd5\xa6\x74\x72\x92\xc1\x1d\xd2\x3f\xd1\xe0" "\x26\xb9\x67\x25\x8c\x1b\x1e\xcc\x84\xe0\x34\x1d\x44\xf7\x55\xbe\x69" "\x44\x28\x0a\xac\xe0\x1a\xc7\xd4\x7d\x16\x34\x25\xa6\x2b\x4a\x0c\x30" "\x0a\x2e\x1f\xd3\xd4\x88\xf3\xc7\x50\xb3\xbd\xac\x0d\x0c\xb4\xf7\xcf" "\x31\x32\x8a\x4e\x2e\x29\x96\x22\x57\x24\x5f\x70\x0f\xc8\x3d\xa1\x39" "\x22\x71\xfe\x69\x15\x5f\x19\x90\x23\xfd\xd4\xcb\x57\xf2\x89\x2f\x55" "\xc3\x45\xcf\x66\x8c\x6a\xd2\x34\xae\x84\x32\x23\x21\xec\x7c\x67\xc9" "\xe6\x36\xe6\x78\xca\xb5\xef\x77\x70\x5b\xe2\xa7\x01\xaf\x6c\x17\xb8" "\x5c\x5d\x9f\xbb\x02\x69\xa6\x44\x26\xf0\x66\x8c\xb1\x5d\x1f\xd3\x68" "\x5b\x0f\x26\x9c\x8c\xe7\x69\x0b\x6b\x5f\x03\x58\xe4\x27\x35\x70\xc9" "\xd6\x97\x40\x7f\xa6\x6f\x9b\x38\x02\xcc\x27\xb5\xdd\xad\x29\x28\x58" "\x05\xab\xe8\x58\x21\x8c\x4a\xed\x65\xe3\xa9\x08\x25\x64\xaf\xa6\xdb" "\xce\x0d\x0b\x71\x89\x0c\xaf\x35\x46\x1b\x5a\x89\x24\x15\x58\x38\x47" "\x94\x90\x68\xb1\x8e\xd6\xe1\x9d\x59\x8f\x62\xee\x19\x1b\x78\x6b\x9c" "\x40\xb1\x7a\x5f\x39\xc2\x13\x23\xe4\xb4\x8f\xe2\xd0\x93\x9e\xc1\x55" "\xf6\xbb\x5d\x3e\x14\x4f\x91\x31\x1a\x05\xfd\xce\x5f\xe5\x94\xed\x1a" "\x8c\x64\x9c\x2e\xe1\x63\x57\x2a\xfd\x2b\xe1\x26\x8f\xd7\xa6\x35\x89" "\x2b\x14\x03\x35\xa6\xd3\x21\x4b\x7a\xf8\x26\xae\xc3\x53\x52\xe3\x31" "\x62\x19\x2e\x53\x88\xe3\x05\x4a\x2e\xde\x38\x81\xad\xb1\xcc\x69\x73" "\x63\x66\x0c\xf8\x7a\xbf\x03\xed\xc7\x2f\x07\x18\x13\x70\xc9\xf7\xc9" "\x26\xbc\x75\x29\x82\xc6\x06\x6e\x15\xbf\x83\x63\xcc\x0d\xc8\xbf\x1a" "\xbf\x64\xd4\x47\x7e\x2c\x0d\xc3\x6c\x94\x20\x2b\x8c\x5a\x7d\xa2\xfa" "\x62\x68\x3a\x4d\x72\xb8\x6c\x87\x8a\xb0\x35\xb4\x93\xde\x3a\x2f\xc4" "\x46\xaf\xe7\x39\x1b\xac\xb6\x43\x24\x0e\x2f\x72\x43\xb8\xbf\x4c\xc1" "\x72\x14\x38\x51\x5b\x81\x01\x37\xc5\x09\x74\xf6\x42\x05\x43\x29\xd2" "\x85\x3a\xd1\xc2\xed\x81\x97\x0a\x78\xa7\xe5\x99\x22\x15\x5b\x48\x24" "\x64\x8d\xf3\xeb\xe9\x56\xb4\x62\x5b\x89\x95\xe8\xae\x4e\xa3\x62\x51" "\x9f\x4d\xef\x0b\x69\x20\x2f\xa9\x30\x9f\x6b\xe1\x4c\xac\x51\x60\x88" "\x3a\x8b\x9d\x49\x99\x79\x0b\x65\x00\x18\x9d\x6c\xba\x42\x7e\x39\x27" "\xea\x91\x11\x2a\x1d\x54\x9f\xe6\xdb\xa8\x94\x8c\x44\x71\x16\x1f\x87" "\xdb\x2e\xb6\xdc\xbd\xc0\x88\x10\x4f\xf6\xcb\x8e\x0b\xe0\x54\x16\xcb" "\x62\x56\x4f\xa2\x28\xfd\x73\x2f\x39\x47\xcc\xf2\xbc\x42\xcf\xe7\x7b" "\x70\xd1\x17\x58\x05\x7b\xf2\xbd\xc9\xc3\xda\xa5\x77\x26\xea\x89\xd6" "\xbe\x07\xea\x35\x93\xab\x23\x0b\xf7\x28\xef\xdb\xae\xdc\x6f\x8a\x30" "\x2c\x84\x2a\xe9\x93\xfd\xa6\xa7\x18\xa2\x43\x67\x40\xe5\xf7\x1e\xef" "\x3d\xbb\x10\x0b\x63\x38\x31\x81\xca\xdd\x12\x3e\x56\x5b\x3e\xa5\x41" "\x34\xfc\x63\xe9\x9b\x15\x87\x23\x40\x55\x90\x63\x89\x85\x75\xee\x4b" "\x36\xde\x31\x58\x28\xb2\x49\x51\xba\xc2\x52\x89\x70\xb4\x65\x2a\x82" "\x15\x2a\x3d\xb8\x63\xa6\xdd\x13\xb2\xd4\xbd\x66\xbe\xc1\xfe\x0e\x04" "\x4d\x3a\x76\x38\xec\xd8\x59\xc3\x50\xd9\x06\xfe\xa3\x76\x42\x0e\x7a" "\xea\x08\x36\x90\x75\xbb\xf1\x11\x00\x03\xab\xae\x18\xb4\x04\xac\x3f" "\x31\x9f\xcb\xf4\xc0\xc2\x4c\xef\xfc\x02\xd6\x3a\x5d\x68\xe5\xc1\xd4" "\x8e\x37\xc1\xa1\x6f\x1c\x7a\xd5\x4e\xd8\xf0\x5f\xce\xe5\x35\x1c\x2d" "\x07\x8e\xc4\x5f\x67\x4c\xc8\x30\x58\x9d\xb7\x24\x3e\xaa\x4c\x0c\x62" "\xf2\xe0\xd0\xc3\x39\xff\x05\xbd\xc2\x1f\xec\x05\xc8\xca\x69\x1a\xc5" "\x0e\x53\x9d\x7d\x8a\x20\xad\x83\x0d\x11\x19\x5e\x62\xdb\xb2\x96\xc5" "\xf7\x77\x66\xb9\xa8\xe4\x75\x65\xbe\x78\x1f\x24\x93\xb6\xc9\xac\x37" "\x58\xac\x44\xb4\x85\xd1\x05\x98\x93\xe9\xed\xa8\xc1\xc9\x4e\x41\x70" "\x88\x1f\x06\x5d\x74\x5f\x04\x16\xd3\x22\xfb\x22\x39\x07\x8f\x9b\x18" "\xad\xa0\xa5\x43\xc5\xf5\x99\x3c\x27\x6f\x94\x8c\x1c\x60\x56\xcf\xc3" "\xf3\x40\xa8\x0f\x9d\x23\xe0\x77\x3a\xb7\x63\x98\x5e\xfc\x42\x35\x32" "\x3e\xcf\xec\x2b\x10\x61\x06\x90\x67\x5e\xca\x2d\xcb\xba\xf7\x6d\x86" "\xa4\x8b\x26\x60\x14\x7c\x3c\x16\xfa\xe7\x8a\x19\x8e\x9e\x89\xaa\x94" "\x1f\x58\x29\xac\x51\x4e\x61\x0d\xa5\x0d\xa5\x83\xec\x8a\xe3\xb9\xb2" "\x66\x1a\x74\x6c\x96\x9c\x27\x8a\xc4\x7f\x3e\x30\xca\x24\xce\xf7\x89" "\xc4\x50\x27\x3d\x68\xf4\xf0\x6c\x34\x19\xd0\xcf\x25\x5f\xeb\x6b\x91" "\x40\xf0\x76\x4b\x4f\xf8\x1e\xbd\x1e\xc8\xc2\xc5\x6d\x7d\x88\x4c\x2b" "\x6c\x3f\x62\x37\x88\xe0\xee\xd8\x49\x7a\xa4\xd0\x9d\xc5\xa2\x32\x33" "\x8d\xfa\xbe\x4b\x52\xa5\xd0\x0d\xb4\x89\x07\xb5\xa6\x7d\xcd\x6e\x37" "\xd9\xbd\xd2\xe9\x6e\x96\xbe\x0b\xe8\x18\xe9\x78\x96\x52\xe2\x9d\x67" "\xe3\xf3\x17\x95\xcd\xae\xf5\x48\xc3\x06\x49\xbe\x8b\x02\x9b\x2b\x08" "\x47\xa6\x5d\x16\x24\x6f\xba\xcf\x99\x68\x5a\x3d\xc2\xef\xcf\x9d\x7f" "\x1b\xab\xd9\xc1\x42\x3e\xcd\x24\xb4\x62\xdb\x71\xc3\xe1\xa5\xd4\x16" "\x58\x87\x55\x74\x53\xf1\xb3\x51\x45\xe4\x4a\x76\xe2\x4c\x67\x97\xda" "\xe9\x93\x85\x06\x76\x11\xcc\xbf\x59\x51\x5b\x23\x0d\xcb\x19\xb9\xb8" "\x6c\x4c\x87\x81\xec\x5a\x81\xde\xae\x3e\x8e\x1b\x67\x4a\x16\x32\x8c" "\x83\x7b\x50\xf7\x06\x69\xb2\xeb\x58\x8f\xcd\x2f\xfb\xb5\x4b\xe4\x5e" "\x30\xb2\xfe\x26\x72\xdd\x54\xc3\xd3\x36\x45\x46\x9e\x9d\xd2\x50\x72" "\x01\x97\x49\xf0\x23\xef\x22\xb3\x3d\xe5\x71\x60\xd8\x96\x88\xbf\x3e" "\x3f\x42\x63\x20\xd5\x41\x2a\x0f\xe9\x14\x98\xd6\xb0\x70\xb4\xcc\x4c" "\xb0\x0c\xc2\x8c\x0e\xda\x03\x68\x70\xbb\x9d\x2d\x6e\x85\x35\xda\x5a" "\xc1\xf5\xd1\xf2\x1b\x7b\x33\x47\xc8\x72\xbf\x12\x04\x21\xc3\xd5\x07" "\xa6\xc8\x14\xb7\xa0\xdf\x5b\xa7\x43\x93\xb7\x0e\xfc\x4b\xaf\xe1\x75" "\xde\xb6\x91\x1d\xfa\xdb\x69\x5e\x8d\xae\xa5\x27\xe5\xc7\x02\x5a\x96" "\xd9\x6a\x0d\x70\x20\x10\x0c\x8e\xcf\xb3\x97\x0c\x02\xe0\xf4\x05\x5b" "\x0f\x32\x80\x22\xc2\x75\x95\x62\x82\x2b\x26\x64\x63\x9f\x88\x72\x12" "\x22\xd5\x04\x18\x99\x79\x5d\x0e\xfc\xc8\xb2\x88\xf0\x2a\xcd\x90\xeb" "\xcb\x94\x95\x5a\x18\xfa\xaa\x17\x37\x7e\x2a\x2f\xcb\xfa\xb1\x71\x0d" "\x9b\x95\x81\x28\x99\x32\x9d\x9b\x09\xe9\x7e\x09\x78\x52\xa6\x05\x3c" "\x62\x20\xb8\xae\x12\x0b\x16\xf1\xfb\x91\xf0\xac\x68\xc3\x1d\x2b\xd1" "\xd9\xef\x51\x47\x26\x63\x17\x95\x89\xc3\x6c\x21\x32\x60\x68\x97\x43" "\xd9\x19\xcf\x94\x93\x05\xb8\xe4\xb9\x60\xd4\x54\x13\xde\xb0\xcf\xdb" "\x71\xf9\xe1\x0e\x70\x25\x8d\x45\xa2\x21\x3c\x04\x87\xa7\xf9\xff\x6a" "\x2f\x35\x4a\x91\x10\x60\x86\x15\x8c\x21\x78\xb5\xce\xbe\xa4\x30\xc4" "\xd2\x06\xae\x1c\x12\x1f\x11\x5c\xbb\xcc\x80\x8a\x0d\x79\x3b\xcc\x85" "\x33\xd9\x7e\x8a\x90\x69\xcd\x46\x70\x40\xe3\x5b\xc9\xf0\x18\xc4\x6a" "\x6f\x91\x84\xfc\x43\x72\x72\x62\x64\xb2\xf1\xd0\x6c\x3d\x72\x60\xeb" "\xbb\xc8\x86\x39\x50\xe5\xa9\xfe\x01\xbf\xdf\x45\xb7\x90\x48\x23\xe9" "\x84\xe2\xde\x0f\x9e\x2b\xf9\xea\x46\xcd\x3e\x4b\x2e\x54\x75\x5b\x33" "\xc3\x3f\xc3\x36\x2b\xa0\x5e\x55\xe8\x71\x68\x58\x8d\x00\x3b\x6e\xf1" "\x32\x01\xf5\xd2\xef\x5e\x41\xd6\xb3\x9e\xaa\x20\xd0\x53\x08\x32\x6d" "\x4f\xff\x9f\xb4\x3c\x92\x45\xbb\xc2\x6e\x96\xb8\xa5\x54\x16\xd4\xc1" "\x0a\x40\x93\x23\xe0\x5c\x3e\xcb\x8c\x85\x15\xde\xf5\x2f\x8d\x05\x19" "\xcc\xb9\x6c\xdf\xd4\xbd\xcb\x48\xdc\xda\xb1\x5d\xbc\xc6\xb8\xfd\xc4" "\xb3\x6c\xa3\x36\xb1\xa1\xe8\x43\x18\xd6\x57\xb5\xe2\x36\x25\x8f\x74" "\xd2\x21\x2c\xa0\xc6\xfb\x83\xac\x43\xde\x2e\x58\x90\x5c\xdb\xb2\xf9" "\x80\xcf\x37\x15\x4e\x6f\x21\xa2\x98\x25\xee\x74\x69\xd8\xbe\x7e\xbb" "\xb3\x93\xe9\x69\xfd\xed\x43\x7b\xd3\x89\xfe\x54\x6f\xbf\xb7\x71\x11" "\x19\x3e\x1d\x95\x70\x4c\x96\x51\x27\x48\xf5\x52\x5d\x0f\xfd\x6e\x53" "\x5b\xe3\x87\x8f\x75\x5a\xd6\x69\x62\xf4\xb9\x52\x9f\x62\x43\xab\xa6" "\xd6\x9f\xc5\x07\x6d\x6d\x42\x1e\x28\xd4\x86\x39\xf7\x5a\x00\xbd\xb9" "\xdf\xb5\xb7\x2c\xc9\x1e\x84\x35\x90\x86\x73\x70\xdf\x45\x40\x0f\xca" "\xd3\x21\x7d\xdc\x8c\x10\xa2\x6d\x17\xaf\x97\x4f\x00\x1e\x3b\x99\xd2" "\xc8\x0f\x8b\x5a\x70\x96\x2b\x47\x9c\xd4\x10\x51\x47\x4e\xd9\x38\x47" "\xd8\xa7\x95\x1b\xf4\x10\x8c\xd2\x80\xcf\x8c\x7d\x8b\x70\xb8\x95\x30" "\x74\xee\x4f\xac\x4b\xc3\x76\x0e\xc5\x9d\x3e\xb4\x09\x9a\xc2\xc8\x7d" "\xcb\x36\x69\x65\x8e\x8d\x8c\xaf\x5c\xe8\x79\x04\xe2\xc6\x25\xfa\x4d" "\xe9\x82\x46\x67\x26\xfb\xa4\x49\xdd\x85\x43\x9e\x5e\x6d\x69\xcd\x75" "\xa1\x66\xe8\xd7\xb7\x98\x6a\x3b\x17\x3b\x66\x8a\xbd\xab\xc1\xaa\x00" "\xf4\x35\x17\xfa\x8e\x7a\xe4\xb1\x0f\xdf\x35\x48\x37\x27\xd4\x29\x1e" "\xd4\xbf\xfb\x73\xe9\x49\xae\xea\x24\x0d\xdc\xb2\xc5\x15\xb6\x48\x51" "\xea\x68\x83\xaf\xcb\xed\x60\xe7\x4c\xcc\x51\x40\x7b\x66\x61\xf3\x4b" "\x72\xdd\xdd\x34\xdd\x01\xf8\x12\xcd\x65\xb6\xda\x40\xfd\x6e\x18\x97" "\xb6\x5e\xaa\x21\xe7\x27\x1c\x0e\x75\x85\xfa\x0b\xf0\x05\x41\xe0\x0b" "\x44\xb6\xd9\x27\x7e\xee\x55\x0f\xa4\xcd\x4e\x32\xb5\x7d\xc7\xab\x80" "\x5e\x72\xd5\x83\x20\x66\x07\x3f\x2c\x7f\x1f\x8b\x2c\x8e\xb3\x8b\xd1" "\x09\xed\x34\x4f\xca\xda\x8f\x74\x7f\x91\x6b\xca\x12\x11\x29\x94\x50" "\xbf\x98\x99\x71\x8d\x9d\x72\x98\x13\x40\x56\x4e\xe2\xd8\x26\x4f\x80" "\xef\x61\x67\x1f\xfd\xc8\x15\x2a\x15\x10\xae\x02\x7f\x35\x68\xcc\xa9" "\x33\x4e\x25\x18\x7c\xe8\x4c\xfa\x06\x40\x04\xd5\x23\x4d\xfc\xf5\x4a" "\x66\xea\x04\x51\xe8\x75\x9a\x9a\x4b\xbc\x9b\x11\xb0\x65\xef\x43\x25" "\x99\x42\x34\xbf\xec\x2f\x1e\x3f\xff\xde\x61\xa8\x24\x9a\x1e\xbf\x0b" "\xf0\x3e\x98\xce\x18\x7f\x5d\xf8\xec\xce\x48\x64\xc0\xaa\x4c\x5e\x4a" "\x32\x92\x81\x48\x27\x06\x41\x5b\xd9\x25\xa8\x2c\x22\x41\x4c\x78\x6c" "\xa0\x9b\x50\x2f\xa4\xf6\xe3\x99\x8f\x8c\x96\x9a\x4d\xfc\x6e\xf7\xd5" "\xa0\x53\x8a\x00\x6b\xf6\xd2\x72\xb1\x4b\x4d\x27\x7a\x39\x1c\xa6\x19" "\x7c\x15\x95\xae\x12\x93\x6a\x7f\x3e\x2c\x3f\x4a\x02\xc4\xb5\x6b\x84" "\xe4\x2f\x23\x45\x1d\x62\xa6\x05\x3c\x62\xa1\x12\x4b\xbc\xf9\x84\xd4" "\xa7\xb1\xa8\x69\xb9\xf2\xdf\xee\x42\x5a\x6b\xcf\xa6\xf9\x6a\x4d\xed" "\x54\x82\xa6\x87\xfc\x99\x85\xd8\xd5\x2e\x82\xbf\xbe\x5c\xa9\x77\x91" "\xad\x2c\xfa\xf2\xfe\xd6\xa4\x38\x45\xc9\x5c\xc2\x04\xd6\xaa\x68\x72" "\x7c\xe2\x1e\x19\x61\x4e\xbe\x97\x9b\x07\x32\x18\x0b\xfb\xc5\xc8\xd9" "\x41\x2b\x90\xcc\x74\xb9\x4f\xf8\x4d\x3d\x10\x27\x7e\xa6\xfa\x93\x92" "\x3e\x02\x13\x6d\xfb\x8b\xf1\xe2\x57\xcb\xb2\x67\x67\x20\xf6\xbb\xc0" "\xcd\x86\xb3\x8e\x68\xf3\x1a\x73\x39\x12\x7e\x02\x5e\x63\xbd\xf8\x42" "\x04\x09\xb7\x87\x0c\x35\x3b\xec\x5c\x4a\xeb\xab\xab\xc2\x13\x03\x63" "\xb8\xa9\x08\x2c\x25\x6f\xae\x91\xf4\x4b\x79\x55\xf1\x65\x1d\x1c\x0c" "\x44\x1e\x77\xc5\x46\x60\x9f\xfe\x84\x40\xee\x2c\x7c\x45\x17\xfb\x4b" "\x1c\x92\xac\xaf\x7d\xb0\xcf\x5d\x16\x27\x68\x1b\x2c\xd0\x36\xa6\xce" "\xe1\x5e\xda\x1d\x1d\x38\x57\x88\xaa\xb3\x5e\xef\x05\xc9\xd7\x68\x6c" "\x7d\x2c\x6d\xd1\xfe\x31\x73\x6f\x09\x47\x22\xc7\x0e\x3c\x4c\x1b\x43" "\x98\x16\x61\x50\x9d\xaa\xaa\xdb\x0d\x73\x13\xcb\xf2\xb0\xa3\x82\x35" "\xa6\x08\xc4\xf1\x96\x8b\x98\x4c\x45\x63\x26\x8c\x33\x84\x0b\x1c\x92" "\x7f\x89\x78\x01\xca\x60\x00\x04\x73\xa5\x30\x17\xb4\xb1\xa5\xd1\x3b" "\x6c\x12\xec\xbf\xa5\x20\x7d\x9c\x99\x03\x05\x6b\xc4\xdc\x11\x65\xdc" "\x68\x38\x33\xb6\x66\x31\xe1\xbd\xff\xa9\x58\xa0\x93\x7e\x57\x1c\x61" "\xdb\x5b\x17\x1e\xff\xda\x89\x69\x4e\xfb\x11\xae\xac\x6d\x5a\x59\x34" "\x60\xdc\xc9\x6b\xe6\xb2\x8f\x3a\xfe\xfc\xfa\x7e\x8a\xe8\xd9\xfa\xa6" "\xda\x3a\x3e\x5d\x32\x2b\x94\x8f\xf6\xbb\x56\xa7\xde\xdc\x50\x1c\x7a" "\xba\x5a\x11\x89\xf2\xf5\x96\xe1\xe8\x99\xab\xbd\xac\x1e\xfa\x1d\x3a" "\xaf\x22\x95\x57\x5c\xb6\x25\xd0\xf0\x01\xbe\xfe\x61\xd0\x38\x40", 4096); syscall(SYS_ioctl, -1, 0xc4704434ul, 0x20000640ul); break; } } int main(void) { syscall(SYS_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x1012ul, -1, 0ul); for (procid = 0; procid < 4; procid++) { if (fork() == 0) { use_temporary_dir(); loop(); } } sleep(1000000); return 0; }