map[SimplifiedCRepro:// autogenerated by syzkaller (https://github.com/google/syzkaller)
#define _GNU_SOURCE
#include <endian.h>
#include <errno.h>
#include <fcntl.h>
#include <setjmp.h>
#include <stdbool.h>
#include <stddef.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/ioctl.h>
#include <sys/mman.h>
#include <sys/mount.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>
#include <linux/loop.h>
#ifndef __NR_memfd_create
#define __NR_memfd_create 319
#endif
static unsigned long long procid;
//% This code is derived from puff.{c,h}, found in the zlib development. The
//% original files come with the following copyright notice:
//% Copyright (C) 2002-2013 Mark Adler, all rights reserved
//% version 2.3, 21 Jan 2013
//% This software is provided 'as-is', without any express or implied
//% warranty. In no event will the author be held liable for any damages
//% arising from the use of this software.
//% Permission is granted to anyone to use this software for any purpose,
//% including commercial applications, and to alter it and redistribute it
//% freely, subject to the following restrictions:
//% 1. The origin of this software must not be misrepresented; you must not
//% claim that you wrote the original software. If you use this software
//% in a product, an acknowledgment in the product documentation would be
//% appreciated but is not required.
//% 2. Altered source versions must be plainly marked as such, and must not be
//% misrepresented as being the original software.
//% 3. This notice may not be removed or altered from any source distribution.
//% Mark Adler madler@alumni.caltech.edu
//% BEGIN CODE DERIVED FROM puff.{c,h}
#define MAXBITS 15
#define MAXLCODES 286
#define MAXDCODES 30
#define MAXCODES (MAXLCODES + MAXDCODES)
#define FIXLCODES 288
struct puff_state {
unsigned char* out;
unsigned long outlen;
unsigned long outcnt;
const unsigned char* in;
unsigned long inlen;
unsigned long incnt;
int bitbuf;
int bitcnt;
jmp_buf env;
};
static int puff_bits(struct puff_state* s, int need)
{
long val = s->bitbuf;
while (s->bitcnt < need) {
if (s->incnt == s->inlen)
longjmp(s->env, 1);
val |= (long)(s->in[s->incnt++]) << s->bitcnt;
s->bitcnt += 8;
}
s->bitbuf = (int)(val >> need);
s->bitcnt -= need;
return (int)(val & ((1L << need) - 1));
}
static int puff_stored(struct puff_state* s)
{
s->bitbuf = 0;
s->bitcnt = 0;
if (s->incnt + 4 > s->inlen)
return 2;
unsigned len = s->in[s->incnt++];
len |= s->in[s->incnt++] << 8;
if (s->in[s->incnt++] != (~len & 0xff) ||
s->in[s->incnt++] != ((~len >> 8) & 0xff))
return -2;
if (s->incnt + len > s->inlen)
return 2;
if (s->outcnt + len > s->outlen)
return 1;
for (; len--; s->outcnt++, s->incnt++) {
if (s->in[s->incnt])
s->out[s->outcnt] = s->in[s->incnt];
}
return 0;
}
struct puff_huffman {
short* count;
short* symbol;
};
static int puff_decode(struct puff_state* s, const struct puff_huffman* h)
{
int first = 0;
int index = 0;
int bitbuf = s->bitbuf;
int left = s->bitcnt;
int code = first = index = 0;
int len = 1;
short* next = h->count + 1;
while (1) {
while (left--) {
code |= bitbuf & 1;
bitbuf >>= 1;
int count = *next++;
if (code - count < first) {
s->bitbuf = bitbuf;
s->bitcnt = (s->bitcnt - len) & 7;
return h->symbol[index + (code - first)];
}
index += count;
first += count;
first <<= 1;
code <<= 1;
len++;
}
left = (MAXBITS + 1) - len;
if (left == 0)
break;
if (s->incnt == s->inlen)
longjmp(s->env, 1);
bitbuf = s->in[s->incnt++];
if (left > 8)
left = 8;
}
return -10;
}
static int puff_construct(struct puff_huffman* h, const short* length, int n)
{
int len;
for (len = 0; len <= MAXBITS; len++)
h->count[len] = 0;
int symbol;
for (symbol = 0; symbol < n; symbol++)
(h->count[length[symbol]])++;
if (h->count[0] == n)
return 0;
int left = 1;
for (len = 1; len <= MAXBITS; len++) {
left <<= 1;
left -= h->count[len];
if (left < 0)
return left;
}
short offs[MAXBITS + 1];
offs[1] = 0;
for (len = 1; len < MAXBITS; len++)
offs[len + 1] = offs[len] + h->count[len];
for (symbol = 0; symbol < n; symbol++)
if (length[symbol] != 0)
h->symbol[offs[length[symbol]]++] = symbol;
return left;
}
static int puff_codes(struct puff_state* s,
const struct puff_huffman* lencode,
const struct puff_huffman* distcode)
{
static const short lens[29] = {
3, 4, 5, 6, 7, 8, 9, 10, 11, 13, 15, 17, 19, 23, 27, 31,
35, 43, 51, 59, 67, 83, 99, 115, 131, 163, 195, 227, 258};
static const short lext[29] = {
0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2,
3, 3, 3, 3, 4, 4, 4, 4, 5, 5, 5, 5, 0};
static const short dists[30] = {
1, 2, 3, 4, 5, 7, 9, 13, 17, 25, 33, 49, 65, 97, 129, 193,
257, 385, 513, 769, 1025, 1537, 2049, 3073, 4097, 6145,
8193, 12289, 16385, 24577};
static const short dext[30] = {
0, 0, 0, 0, 1, 1, 2, 2, 3, 3, 4, 4, 5, 5, 6, 6,
7, 7, 8, 8, 9, 9, 10, 10, 11, 11,
12, 12, 13, 13};
int symbol;
do {
symbol = puff_decode(s, lencode);
if (symbol < 0)
return symbol;
if (symbol < 256) {
if (s->outcnt == s->outlen)
return 1;
if (symbol)
s->out[s->outcnt] = symbol;
s->outcnt++;
} else if (symbol > 256) {
symbol -= 257;
if (symbol >= 29)
return -10;
int len = lens[symbol] + puff_bits(s, lext[symbol]);
symbol = puff_decode(s, distcode);
if (symbol < 0)
return symbol;
unsigned dist = dists[symbol] + puff_bits(s, dext[symbol]);
if (dist > s->outcnt)
return -11;
if (s->outcnt + len > s->outlen)
return 1;
while (len--) {
if (dist <= s->outcnt && s->out[s->outcnt - dist])
s->out[s->outcnt] = s->out[s->outcnt - dist];
s->outcnt++;
}
}
} while (symbol != 256);
return 0;
}
static int puff_fixed(struct puff_state* s)
{
static int virgin = 1;
static short lencnt[MAXBITS + 1], lensym[FIXLCODES];
static short distcnt[MAXBITS + 1], distsym[MAXDCODES];
static struct puff_huffman lencode, distcode;
if (virgin) {
lencode.count = lencnt;
lencode.symbol = lensym;
distcode.count = distcnt;
distcode.symbol = distsym;
short lengths[FIXLCODES];
int symbol;
for (symbol = 0; symbol < 144; symbol++)
lengths[symbol] = 8;
for (; symbol < 256; symbol++)
lengths[symbol] = 9;
for (; symbol < 280; symbol++)
lengths[symbol] = 7;
for (; symbol < FIXLCODES; symbol++)
lengths[symbol] = 8;
puff_construct(&lencode, lengths, FIXLCODES);
for (symbol = 0; symbol < MAXDCODES; symbol++)
lengths[symbol] = 5;
puff_construct(&distcode, lengths, MAXDCODES);
virgin = 0;
}
return puff_codes(s, &lencode, &distcode);
}
static int puff_dynamic(struct puff_state* s)
{
static const short order[19] =
{16, 17, 18, 0, 8, 7, 9, 6, 10, 5, 11, 4, 12, 3, 13, 2, 14, 1, 15};
int nlen = puff_bits(s, 5) + 257;
int ndist = puff_bits(s, 5) + 1;
int ncode = puff_bits(s, 4) + 4;
if (nlen > MAXLCODES || ndist > MAXDCODES)
return -3;
short lengths[MAXCODES];
int index;
for (index = 0; index < ncode; index++)
lengths[order[index]] = puff_bits(s, 3);
for (; index < 19; index++)
lengths[order[index]] = 0;
short lencnt[MAXBITS + 1], lensym[MAXLCODES];
struct puff_huffman lencode = {lencnt, lensym};
int err = puff_construct(&lencode, lengths, 19);
if (err != 0)
return -4;
index = 0;
while (index < nlen + ndist) {
int symbol;
int len;
symbol = puff_decode(s, &lencode);
if (symbol < 0)
return symbol;
if (symbol < 16)
lengths[index++] = symbol;
else {
len = 0;
if (symbol == 16) {
if (index == 0)
return -5;
len = lengths[index - 1];
symbol = 3 + puff_bits(s, 2);
} else if (symbol == 17)
symbol = 3 + puff_bits(s, 3);
else
symbol = 11 + puff_bits(s, 7);
if (index + symbol > nlen + ndist)
return -6;
while (symbol--)
lengths[index++] = len;
}
}
if (lengths[256] == 0)
return -9;
err = puff_construct(&lencode, lengths, nlen);
if (err && (err < 0 || nlen != lencode.count[0] + lencode.count[1]))
return -7;
short distcnt[MAXBITS + 1], distsym[MAXDCODES];
struct puff_huffman distcode = {distcnt, distsym};
err = puff_construct(&distcode, lengths + nlen, ndist);
if (err && (err < 0 || ndist != distcode.count[0] + distcode.count[1]))
return -8;
return puff_codes(s, &lencode, &distcode);
}
static int puff(
unsigned char* dest,
unsigned long* destlen,
const unsigned char* source,
unsigned long sourcelen)
{
struct puff_state s = {
.out = dest,
.outlen = *destlen,
.outcnt = 0,
.in = source,
.inlen = sourcelen,
.incnt = 0,
.bitbuf = 0,
.bitcnt = 0,
};
int err;
if (setjmp(s.env) != 0)
err = 2;
else {
int last;
do {
last = puff_bits(&s, 1);
int type = puff_bits(&s, 2);
err = type == 0 ? puff_stored(&s) : (type == 1 ? puff_fixed(&s) : (type == 2 ? puff_dynamic(&s) : -1));
if (err != 0)
break;
} while (!last);
}
*destlen = s.outcnt;
return err;
}
//% END CODE DERIVED FROM puff.{c,h}
#define ZLIB_HEADER_WIDTH 2
static int puff_zlib_to_file(const unsigned char* source, unsigned long sourcelen, int dest_fd)
{
if (sourcelen < ZLIB_HEADER_WIDTH)
return 0;
source += ZLIB_HEADER_WIDTH;
sourcelen -= ZLIB_HEADER_WIDTH;
const unsigned long max_destlen = 132 << 20;
void* ret = mmap(0, max_destlen, PROT_WRITE | PROT_READ, MAP_PRIVATE | MAP_ANON, -1, 0);
if (ret == MAP_FAILED)
return -1;
unsigned char* dest = (unsigned char*)ret;
unsigned long destlen = max_destlen;
int err = puff(dest, &destlen, source, sourcelen);
if (err) {
munmap(dest, max_destlen);
errno = -err;
return -1;
}
if (write(dest_fd, dest, destlen) != (ssize_t)destlen) {
munmap(dest, max_destlen);
return -1;
}
return munmap(dest, max_destlen);
}
static int setup_loop_device(unsigned char* data, unsigned long size, const char* loopname, int* loopfd_p)
{
int err = 0, loopfd = -1;
int memfd = syscall(__NR_memfd_create, "syzkaller", 0);
if (memfd == -1) {
err = errno;
goto error;
}
if (puff_zlib_to_file(data, size, memfd)) {
err = errno;
goto error_close_memfd;
}
loopfd = open(loopname, O_RDWR);
if (loopfd == -1) {
err = errno;
goto error_close_memfd;
}
if (ioctl(loopfd, LOOP_SET_FD, memfd)) {
if (errno != EBUSY) {
err = errno;
goto error_close_loop;
}
ioctl(loopfd, LOOP_CLR_FD, 0);
usleep(1000);
if (ioctl(loopfd, LOOP_SET_FD, memfd)) {
err = errno;
goto error_close_loop;
}
}
close(memfd);
*loopfd_p = loopfd;
return 0;
error_close_loop:
close(loopfd);
error_close_memfd:
close(memfd);
error:
errno = err;
return -1;
}
static void reset_loop_device(const char* loopname)
{
int loopfd = open(loopname, O_RDWR);
if (loopfd == -1) {
return;
}
if (ioctl(loopfd, LOOP_CLR_FD, 0)) {
}
close(loopfd);
}
static long syz_mount_image(
volatile long fsarg,
volatile long dir,
volatile long flags,
volatile long optsarg,
volatile long change_dir,
volatile unsigned long size,
volatile long image)
{
unsigned char* data = (unsigned char*)image;
int res = -1, err = 0, need_loop_device = !!size;
char* mount_opts = (char*)optsarg;
char* target = (char*)dir;
char* fs = (char*)fsarg;
char* source = NULL;
char loopname[64];
if (need_loop_device) {
int loopfd;
memset(loopname, 0, sizeof(loopname));
snprintf(loopname, sizeof(loopname), "/dev/loop%llu", procid);
if (setup_loop_device(data, size, loopname, &loopfd) == -1)
return -1;
close(loopfd);
source = loopname;
}
mkdir(target, 0777);
char opts[256];
memset(opts, 0, sizeof(opts));
if (strlen(mount_opts) > (sizeof(opts) - 32)) {
}
strncpy(opts, mount_opts, sizeof(opts) - 32);
if (strcmp(fs, "iso9660") == 0) {
flags |= MS_RDONLY;
} else if (strncmp(fs, "ext", 3) == 0) {
bool has_remount_ro = false;
char* remount_ro_start = strstr(opts, "errors=remount-ro");
if (remount_ro_start != NULL) {
char after = *(remount_ro_start + strlen("errors=remount-ro"));
char before = remount_ro_start == opts ? '\0' : *(remount_ro_start - 1);
has_remount_ro = ((before == '\0' || before == ',') && (after == '\0' || after == ','));
}
if (strstr(opts, "errors=panic") || !has_remount_ro)
strcat(opts, ",errors=continue");
} else if (strcmp(fs, "xfs") == 0) {
strcat(opts, ",nouuid");
} else if (strncmp(fs, "gfs2", 4) == 0 && (strstr(opts, "errors=panic") || strstr(opts, "debug"))) {
strcat(opts, ",errors=withdraw");
}
res = mount(source, target, fs, flags, opts);
if (res == -1) {
err = errno;
goto error_clear_loop;
}
res = open(target, O_RDONLY | O_DIRECTORY);
if (res == -1) {
err = errno;
goto error_clear_loop;
}
if (change_dir) {
res = chdir(target);
if (res == -1) {
err = errno;
}
}
error_clear_loop:
if (need_loop_device)
reset_loop_device(loopname);
errno = err;
return res;
}
uint64_t r[5] = {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff};
int main(void)
{
syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000ul, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul);
const char* reason;
(void)reason;
intptr_t res = 0;
if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {}
// syz_mount_image$jfs arguments: [
// fs: ptr[in, buffer] {
// buffer: {6a 66 73 00} (length 0x4)
// }
// dir: ptr[in, buffer] {
// buffer: {2e 2f 66 69 6c 65 32 00} (length 0x8)
// }
// flags: mount_flags = 0x0 (8 bytes)
// opts: ptr[inout, array[ANYUNION]] {
// array[ANYUNION] {
// union ANYUNION {
// ANYBLOB: buffer: {75 69 64 3d} (length 0x4)
// }
// union ANYUNION {
// ANYRESHEX: ANYRES64 (resource)
// }
// union ANYUNION {
// ANYBLOB: buffer: {2c 69 6f 63 68 61 72 73 65 74 3d 63 70 38 36 30 2c 65 72 72 6f 72 73 3d 72 65 6d 6f 75 6e 74 2d 72 6f 2c 69 6e 74 65 67 72 69 74 79 2c 65 72 72 6f 72 73 3d 72 65 6d 6f 75 6e 74 2d 72 6f 2c 67 69 64 3d} (length 0x43)
// }
// union ANYUNION {
// ANYRESHEX: ANYRES64 (resource)
// }
// union ANYUNION {
// ANYRESDEC: ANYRES64 (resource)
// }
// }
// }
// chdir: int8 = 0x1 (1 bytes)
// size: len = 0x61b1 (8 bytes)
// img: ptr[in, buffer] {
// buffer: (compressed buffer with length 0x61b1)
// }
// ]
// returns fd_dir
memcpy((void*)0x200000000200, "jfs\000", 4);
memcpy((void*)0x200000000040, "./file2\000", 8);
memcpy((void*)0x200000000080, "uid=", 4);
sprintf((char*)0x200000000084, "0x%016llx", (long long)0);
memcpy((void*)0x200000000096, ",iocharset=cp860,errors=remount-ro,integrity,errors=remount-ro,gid=", 67);
sprintf((char*)0x2000000000d9, "0x%016llx", (long long)0);
sprintf((char*)0x2000000000eb, "%020llu", (long long)0);
memcpy((void*)0x20000000c780, "... [truncated large byte array] ...", 25009);
syz_mount_image(/*fs=*/0x200000000200, /*dir=*/0x200000000040, /*flags=*/0, /*opts=*/0x200000000080, /*chdir=*/1, /*size=*/0x61b1, /*img=*/0x20000000c780);
// syz_mount_image$msdos arguments: [
// fs: ptr[in, buffer] {
// buffer: {6d 73 64 6f 73 00} (length 0x6)
// }
// dir: ptr[in, buffer] {
// buffer: {2e 00} (length 0x2)
// }
// flags: mount_flags = 0x1b404ad (8 bytes)
// opts: ptr[inout, array[ANYUNION]] {
// array[ANYUNION] {
// }
// }
// chdir: int8 = 0x27 (1 bytes)
// size: len = 0x0 (8 bytes)
// img: ptr[in, buffer] {
// buffer: (compressed buffer with length 0x0)
// }
// ]
// returns fd_dir
memcpy((void*)0x200000000180, "msdos\000", 6);
memcpy((void*)0x200000000000, ".\000", 2);
syz_mount_image(/*fs=*/0x200000000180, /*dir=*/0x200000000000, /*flags=MS_I_VERSION|MS_SHARED|MS_PRIVATE|MS_STRICTATIME|MS_REMOUNT|MS_RELATIME|0x48d*/0x1b404ad, /*opts=*/0x20000001fb80, /*chdir=*/0x27, /*size=*/0, /*img=*/0x200000000000);
// openat$misdntimer arguments: [
// fd: const = 0xffffffffffffff9c (8 bytes)
// file: ptr[in, buffer] {
// buffer: {2f 64 65 76 2f 6d 49 53 44 4e 74 69 6d 65 72 00} (length 0x10)
// }
// flags: open_flags = 0x0 (4 bytes)
// mode: const = 0x0 (2 bytes)
// ]
// returns fd_misdntimer
memcpy((void*)0x200000000040, "/dev/mISDNtimer\000", 16);
res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x200000000040ul, /*flags=*/0, /*mode=*/0);
if (res != -1)
r[0] = res;
// ioctl$BTRFS_IOC_GET_SUBVOL_INFO arguments: [
// fd: fd (resource)
// cmd: const = 0x80044940 (4 bytes)
// arg: ptr[out, btrfs_ioctl_get_subvol_info_args] {
// btrfs_ioctl_get_subvol_info_args {
// treeid: treeid (resource)
// name: buffer: (DirOut)
// parent_id: treeid (resource)
// dirid: dirid (resource)
// generation: transid (resource)
// flags: int64 = 0x0 (8 bytes)
// uuid: buffer: (DirOut)
// parent_uuid: buffer: (DirOut)
// received_uuid: buffer: (DirOut)
// ctransid: transid (resource)
// otransid: transid (resource)
// stransid: transid (resource)
// rtransid: transid (resource)
// ctime: btrfs_ioctl_timespec {
// sec: int64 = 0x0 (8 bytes)
// msec: int32 = 0x0 (4 bytes)
// pad = 0x0 (4 bytes)
// }
// otime: btrfs_ioctl_timespec {
// sec: int64 = 0x0 (8 bytes)
// msec: int32 = 0x0 (4 bytes)
// pad = 0x0 (4 bytes)
// }
// stime: btrfs_ioctl_timespec {
// sec: int64 = 0x0 (8 bytes)
// msec: int32 = 0x0 (4 bytes)
// pad = 0x0 (4 bytes)
// }
// rtime: btrfs_ioctl_timespec {
// sec: int64 = 0x0 (8 bytes)
// msec: int32 = 0x0 (4 bytes)
// pad = 0x0 (4 bytes)
// }
// reserved: buffer: (DirOut)
// }
// }
// ]
res = syscall(__NR_ioctl, /*fd=*/r[0], /*cmd=*/0x80044940, /*arg=*/0x200000001b00ul);
if (res != -1) {
r[1] = *(uint64_t*)0x200000001b00;
r[2] = *(uint64_t*)0x200000001c10;
r[3] = *(uint64_t*)0x200000001c60;
r[4] = *(uint64_t*)0x200000001c70;
}
// syz_mount_image$msdos arguments: [
// fs: ptr[in, buffer] {
// buffer: {6d 73 64 6f 73 00} (length 0x6)
// }
// dir: ptr[in, buffer] {
// buffer: {2e 00} (length 0x2)
// }
// flags: mount_flags = 0x1a4243c (8 bytes)
// opts: ptr[inout, array[ANYUNION]] {
// array[ANYUNION] {
// union ANYUNION {
// ANYRES16: ANYRES16 (resource)
// }
// union ANYUNION {
// ANYRES64: ANYRES64 (resource)
// }
// union ANYUNION {
// ANYBLOB: buffer: {12 a4 09 5a 2a ac 12 f0 bf cb 20 6d 98 2e 44 06 63 81 38 8d 27 f1 40 02 d8 d7 43 1d 39 47 f6 39 9c 7f f9 f5 19 3f c0 39 86 53 e5 a6 7b bb 31 9f 02 bf 4a c6 f6 cc d5 ac bf e1 35 0c c3 a6 d2 d4 8c f6 c0 89 dd f6 71 71 ff b3 b1 59 88 e7 b3 94 c5 da f3 e1 2c a0 5e 4d bd ad 7e dd 45 f1 0c bc 29 6a 53 a5 30 d4 c2 d2 03 ee 65 0d 5f ff 3a 9b 5a ae 78 79 4f e8 43 27 e5 08 17 2c dd 72 ee ff 5a f4 d6 db 93 79 be f2 0d de 8e 64 b9 1d 31 a8 4c e8 a7 59 8b b7 8c c8 51 08 87 48 11 fc 65 0f 05 20 a5} (length 0xa3)
// }
// union ANYUNION {
// ANYRESOCT: ANYRES64 (resource)
// }
// union ANYUNION {
// ANYRESDEC: ANYRES64 (resource)
// }
// union ANYUNION {
// ANYRES16: ANYRES16 (resource)
// }
// union ANYUNION {
// ANYRESDEC: ANYRES64 (resource)
// }
// union ANYUNION {
// ANYBLOB: buffer: {9a 7f 40 ad 4c 71 45 90 3a 86 8b 90 20 e1 e8 89 9e d5 74 7d b2 30 04 fc 9d 24 89 00 ab ca a6 b0 65 cf 08 00 93 0a 71 dc d8 b8 95 5d 93 c7 8b 9d 4e 5e 06 d8 d5 c9 ac 9b 75 d1 77 75 4d 6e ba 23 e6 d2 be 54 6c 0d fe cd f6 1b af 73 29 50 a5 72 9c 01 fb dc 11 e3 6c b4 11 be 20 0a 91 35 65 7a cd 97 d2 1e e4 6a ac 31 3e bd dd d9 26 5a f1 65 58 dd 3e 5b a4 83 66 59 a6 ab fe 08 aa d8 42 76 ac f9 49 bd aa 34 bd f7 f7 b2 df b2 fe 8b 9d 6d 22 5d ce ce be b6 e1 5f 64 99 94 72 88 42 bd 99 fc 94 89 7d 24 31 5a c2 d1 7b f6 c2 ac fb fa 84 64 d8 0f 36 30 4f 88 b9 06 b7 8a b3 59 be 34 79 db 5b 0e 75 55 f0 44 16 80 7c 22 02 d6 55 1f 24 25 44 0b e7 41 db e0 53 e0 bf eb 84 56 23 e7 22 a9 29 38 43 f1 cf 0a 71 11 9d ca df 7e 35 3a f4 da 52 ae d3 08 6d 6e 5a 09 57 74 24 8b e9 a1 b1 41 8d ec 1c 03 a2 cb 0e ce 08 40 eb ea af 7b 67 86 7d a4 59 43 b7 00 e2 d6 da d7 75 ae 6f 33 e5 5a a8 6c a8 4c 33 6c 91 e3 b7 d7 22 4f 7a 9a 10 d5 b4 5a 6c e0 76 9d 87 54 15 be a1 36 b5 50 8e 5e 0a 88 29 07 92 da 3b 11 b2 28 4a 3d 75 7c 30 1c ec 78 b5 5d 3f cf a0 73 61 5c cb 08 9f 66 c5 b9 a5 c8 4f 6c 1b b7 8c 33 70 c4 68 7e ab 26 07 11 fa 05 52 56 87 c7 70 9e 15 cd de a0 61 f7 07 98 cb f9 40 ad 92 9e b8 0f 33 ad 8b b4 fc d3 22 dd 05 58 f1 11 d7 d0 13 51 14 79 76 b4 25 a2 7e 57 34 02 49 00 55 05 4c f3 d8 0b eb de 6a 89 f3 08 61 70 63 37 40 f0 87 80 aa c3 a7 3f 17 ea ed a8 de b6 42 c2 88 79 62 59 6b 4d 78 c0 ff ff b2 8d 0e 64 07 3b 06 41 f8 9c f8 3a 69 af aa ea 03 ba 60 70 83 8f db da cc b8 16 30 a6 fd aa 77 fc 10 14 60 13 b9 fd 79 e9 65 a3 20 da f8 1c 1a 51 f0 32 a3 f4 62 f2 74 0e 57 9e b1 16 ca d8 0b 4e 23 33 26 bf 94 fe a5 21 84 51 7a cc f6 08 b1 fb fb 39 59 42 86 98 41 b9 ca 0f 31 4b ef f6 b2 dc 0a 74 d7 59 90 12 27 4b 24 77 5f 03 82 e7 29 07 c1 f0 c5 71 b9 94 f0 48 c0 26 6f eb 77 5d 89 3f ec 84 e5 73 3c d6 6a 96 cd 45 b6 0f 63 74 3b 17 b0 5d 99 c4 27 a2 d0 0a 27 fe f1 7c ad f1 28 05 9a 2e 22 7b 80 70 17 55 b0 bc 70 6f 32 25 5c 8c d6 19 fa 99 5c c7 64 9f 28 33 73 61 a6 2c ff 46 66 9f a4 cf 09 5a 2d 14 89 87 a9 fa fa 6e 1f b9 f5 9b 5a c5 ff 10 a4 c6 2e 01 87 a3 c7 5a 98 3f 7f 52 11 14 2c 6c 09 17 0a 13 e2 9c 20 44 e5 56 8b da 80 55 ce e4 72 2e 44 5e 83 ea 01 30 7c 42 cb e6 3a 5b c5 29 e1 20 0e 58 74 f7 50 02 75 ab ac d6 cc 0e 3b f8 fd 38 ab 7b ab 39 f5 4d 18 0d 60 89 2e 2e 3a 71 3a 3e 65 4c 89 b8 e9 ba 44 74 90 99 91 84 45 14 c0 4b 65 5c 66 cc d6 f2 a1 7e 29 ff 69 d3 43 eb ac 7a c5 e1 51 0a d4 ff 52 e6 a9 32 a9 7b b0 d8 14 25 9d a6 54 50 22 15 2d d6 3f 06 21 9a 1d 66 ec 22 78 b6 94 87 6e d6 19 5b 05 43 b8 c9 28 9b 84 38 e8 ee 57 dd 38 bc db 04 5a 6f c4 ce de 28 ef fa a0 35 4a fb d4 19 0f cb cc d9 a0 e9 15 08 e4 39 9e 0e 30 a0 bf de dc c1 94 54 b6 dd 7c 27 85 a6 e4 fe 74 a0 ec e1 d6 83 ad 07 d7 6e af ec 02 fb 0d 88 de bf ea cd 35 31 41 31 85 da 0f fa 4f b9 b5 e6 d5 a9 16 f7 bb 5d 51 ef c8 ab 61 e4 95 3f c6 b2 d1 e6 70 76 9f 3c a5 6d 51 b8 04 ce b1 18 27 8a cc 90 42 2e 1f 51 e4 48 a2 7d 2f e4 f9 3c 88 cf 7c 61 48 47 4b f6 50 90 2d d6 dd 96 54 10 44 11 3d 24 4c f9 38 15 0e c4 26 e7 ed 63 e1 f1 53 bb e3 28 f4 23 25 52 b1 04 c8 de e6 0b 0c 4e 4c 25 f2 60 5e 97 cc 6f 42 63 d3 2e 83 40 be 2d 16 71 37 68 23 73 ae 4c d5 01 fd c9 c5 35 9b 40 f5 28 03 a5 e4 c0 e0 4a 5d e0 41 2c 5c bd 4d 05 e6 13 5a 12 09 d4 b2 df f5 0d 39 e4 81 f1 d1 b0 1e d7 10 04 fb 0c 18 e7 36 af 8a b1 76 f8 33 a4 39 a8 5c 91 32 e6 d2 29 6f 66 57 71 c6 a2 84 ea dc 08 c9 4f fa 52 0d cc 37 fd 64 26 c1 52 36 46 99 51 4b 15 d4 df 67 32 ff f3 98 34 e8 ba 29 68 8b 19 db 27 a9 70 d9 d7 fb ee 97 3c 76 be e0 4f b6 16 49 63 96 9e bd e0 f7 85 60 67 81 d6 37 26 73 6d 8b 60 a7 13 d5 f7 22 07 a2 3f 6f 00 42 0f df 24 d1 4c 06 9f 36 a7 e2 36 62 04 81 cc 7a 63 85 7c c1 35 5b ac 8d 4f 9a 3f 32 78 5a d4 d9 d8 17 19 07 7a 81 6b 33 b9 80 06 c3 22 ee 47 3a a9 f8 f8 3f ae 86 a4 d4 21 10 4b 29 8a 9e 42 35 7c 44 b7 73 e3 50 4b 3f 9e b5 b2 93 30 41 1b 77 6b 78 fd b6 dd 97 13 dd 1a ee 0c c9 c7 ee 8b d2 3a 50 d4 c8 ba ba f6 d7 4b c2 53 77 00 9a 8c 57 c9 41 f8 0e 58 ac 08 c9 3a 27 56 56 cb ad 38 64 df 9e 79 13 05 d6 61 03 ab 30 98 3b 07 55 3e de 5b 5d 5b 0a ab 15 7f 80 5e b6 c1 1c 75 dd 7f 29 7c 2c c9 11 05 51 13 1a 79 71 64 de c4 22 b1 37 99 f1 c2 61 46 4c 76 5a 62 c2 01 eb 9c 86 86 ee e9 46 42 d5 9f 42 9c d1 37 cb a0 d1 a8 12 6d cd fc 28 ea 5c 20 15 26 c6 11 64 a8 6f 48 0d fd e0 c6 0f df 6a fd 3c d6 47 19 de 1d 89 b5 a3 62 e0 58 05 4a 9d b7 3a af fa c3 24 b0 4e 89 03 06 0e 1f 14 ca 4a c3 1c 82 18 30 66 e6 d5 81 68 5e fb e3 45 2a 20 a6 65 16 6b 03 80 82 20 77 0d 66 05 19 71 b6 1d 81 14 37 6e 22 a4 51 1c ae 9f df 7b be d6 8b b9 f4 5b 57 ee e1 c1 57 75 73 0e f1 43 47 31 d7 b8 2a 7c bc d6 15 53 96 26 39 84 ed fc ea 62 19 61 89 da 0b a9 90 8d 7d 5e f5 14 d7 5a 3e 1d 4a e4 26 54 36 50 83 87 3f c4 ce 96 9f a4 fa c5 1d 64 0b e8 d9 48 bb 94 64 d1 a7 e4 94 c8 df 98 bd 5a 56 9f f7 fe 1a ca 54 2c 34 61 01 48 a8 f1 dc 9d 60 ff 0f 76 12 70 57 7f 28 6a 36 2f 32 16 41 84 ff ce 3a d1 32 63 7e 9f 03 81 e9 ce 76 a1 1f 29 6f 9d 1e 83 5c dc 44 92 61 04 e1 df 4d 0a 28 2a 84 b9 fb c2 30 64 bf ca b0 d2 21 c6 e3 12 4a e8 ba 60 22 e6 2f 17 0d cc 2d 65 5f 73 b4 0f 83 fd 65 f5 c7 05 bc 1f 9e 8d f1 3a de ad ff 9e 1f e4 66 0a 55 be 7d c9 69 cf ff ae d6 07 19 01 62 dc d0 9d 0c d8 6a 29 7b 22 14 2b 88 f0 eb 28 dd 1a 45 15 2a 4f 4f 2d ca 0d 96 d3 9f a5 94 34 90 40 f4 86 cd 48 6a f6 19 b7 08 32 36 cf 90 32 4c dd c6 f1 ed 0f 6a 10 3c 8d 93 6d 7f 2f 31 d4 20 ef 50 93 18 38 e6 67 21 bf f7 49 46 17 b6 b4 bc 38 5f 3e 51 b3 f8 1c f5 d6 95 3a c7 fd dc 0f 34 66 68 29 11 b3 8b c7 f0 82 e0 c1 8e 3a e0 ba df 7f 3f d3 e1 86 eb c2 ba b7 1f a2 6f 77 bb 14 cd 97 e6 76 1c 93 c8 c2 58 87 c0 ef 1f 3d c1 d8 d8 6c e0 fb 73 19 0f 66 f4 de ca 77 97 7e 8d 60 64 bf ee ac 3f ad 2b c5 04 88 c1 44 e2 a1 a8 2f cc 1e 1c 12 ac 54 bf 3e 2d 46 8e 8f 53 24 1e 4a 6a d9 e4 66 74 6a 45 b0 53 45 2d ed 5c aa 20 46 18 81 d7 8d 82 35 e9 86 ba 8b 77 e8 36 01 65 5d 26 50 bf 1b 64 ce 17 c7 53 14 21 6b 43 bb d1 10 1a 2e 12 e5 75 25 bb 7d 3b 13 6a 70 63 5b da c8 af 24 36 7a 24 ce 2f e2 a7 2e f2 b0 e5 6f f8 dc 62 a8 29 46 f8 6f 9b 6b 14 18 a8 9b 19 71 37 2d fe 7d 5c e2 e6 61 1b ef ff 72 1f 04 a1 9b ce 7f 90 b1 55 1a 4c de ad 13 66 62 c5 05 13 fd de 6f 9d 4a 19 9c 39 07 ed 87 99 f2 31 f5 4d d8 34 7c 71 d8 29 ff 8d dc 5d 96 b5 aa c2 fe 58 65 2c 81 ff 7f 54 e2 56 81 19 df f2 76 3e f4 35 aa 42 06 30 da cc 7e 94 14 34 0e e8 68 8f 46 c7 a8 ab 96 d8 60 93 76 41 04 2b 3c df 68 57 ff 1d 2d 4e 47 ce c1 f2 3e 65 fe 54 1f 38 cb 96 b1 32 66 6f 99 90 02 e8 9c d1 89 6c a5 8c 2e 63 b8 73 82 e1 a6 c1 ee 9a fa 56 cf 3b a9 23 fa 9c 98 9e 20 bf f3 13 f3 72 52 63 2f dc ff 03 fb dd 2d 33 4e e9 3b af 75 c1 bd ae 30 fe aa 81 fb 2a c1 b6 3c 42 dd a0 6f 20 ce 8c 9d 00 3e b3 ef ed 79 31 de f3 42 fb 87 4f ce 92 76 3f 6f 47 7c 7f 58 9b 75 d2 12 94 19 fc 4c b7 a8 89 3a 1d 3f 94 53 3e d9 fd f9 f2 1f c2 54 fd 80 aa 74 75 08 33 d3 90 32 7a 21 07 e7 61 24 09 28 d3 5a 36 c5 ea ca 61 fd 84 81 16 b8 dd 7e c8 15 79 28 bc 2d d8 7f 77 56 aa 51 7c f6 a6 1d 20 09 fd 4b a0 57 9c a3 b3 12 9c fd 54 03 54 6f 5a b6 d0 57 57 99 a0 08 fc 67 da 96 58 42 76 36 d8 f8 06 d9 b8 ca d6 4a ee 43 8d 0a 9b 45 95 7f 31 a5 af e3 ed 89 4a dd 9a ca df d3 47 24 60 99 c6 ff 0b 4e c6 f1 9a c6 15 57 da f8 73 9e 52 81 85 ab 14 68 ca 72 d6 d7 2e 4f 02 6e 37 1e 54 0b 77 4b 65 76 df 30 14 dc c9 e9 1b 2c d1 f0 40 3a 4f ca a6 62 7b 22 68 2b b5 4f 92 15 0c 29 17 ac ae e1 97 2b 2b 03 bc 2b d3 7f db 9e 73 52 c6 54 d9 4e f1 96 b7 22 9e 4d a5 ee 62 b7 d3 95 ec dd 51 77 f2 56 32 42 ea 49 ff 78 15 1a 4a 81 6a 94 e8 9b 03 f4 1c 7e 66 84 f8 be 3e 58 02 e9 33 8e 7c bd 3b 43 f7 08 c0 62 f9 44 a5 9f 31 b0 2c a9 a1 77 e6 b6 81 ac ce e8 78 5d 24 67 d2 d7 86 36 be 43 30 fe ba a3 f6 90 7d b0 79 92 a2 de 74 e4 59 f3 ae 8e e6 ad ae 20 cb c7 5a ab d2 d5 d3 42 4d e0 dd cc 3d dd 98 1c 3a 49 66 c5 7f 8f db 1c 42 db 87 39 5f 0b c8 00 ff 8d db 4c 22 8a 7d 79 3d 8a 99 78 85 49 4a 85 78 f5 43 3d 3f 82 88 6e a5 73 64 1b f1 60 65 ef bc 25 71 8c 88 f7 27 7c e0 4c 94 af 56 0d 8d eb 79 68 49 6f 84 9d 3f ad 78 74 12 72 b0 8b f7 ae c3 f3 c7 77 42 8d 3b 8b 89 73 33 ae 5a fb 68 23 af 63 cb 73 47 60 1e e2 e8 d4 e2 1b 21 a1 2e 6d 42 f6 6a 1a ac 26 d2 96 bc 68 a9 98 d8 ba 17 9e d5 f7 56 c2 ef d8 a7 ac c0 e3 f0 80 93 bb 4a 83 d3 7f 15 b4 fe 07 c9 08 58 05 8a d1 ff 0e 21 bb 7b f4 36 30 79 c5 d4 52 db a5 97 2b 21 c8 f4 1d af 6f 11 a5 1d 32 1d 3c 1d 54 41 90 23 80 36 d9 07 d9 65 ff 46 9c e4 89 5e b7 67 5f 3e 94 a1 5f 83 b8 37 b8 92 a4 03 90 d8 7d 76 e9 b1 5e da 02 36 62 99 d3 dd 93 94 34 66 bc ee b2 f9 e4 65 ad cc c0 8e 1a 02 c3 ac 01 81 59 31 62 7e d3 27 e0 ff be 09 56 32 21 a3 65 b8 8c 4f 24 49 bd 36 34 92 0d 5b fb de 7c dc 92 c4 cb 16 a5 79 f3 5f 07 da fc 87 ce 6c e4 de 7b f9 e8 ff 0e 80 b8 1c da b8 f2 16 4a 25 a0 a6 92 96 79 ce 9a e0 dc 2a c7 ed 41 a7 87 44 66 76 f0 91 59 75 51 dc 2e 8c 05 42 24 ba c6 65 2b ba 5f b6 75 c0 b2 c9 4d 2f aa c1 60 f1 1b 7b 96 fc 96 41 5a ca 8a 47 fa 03 65 8b 8a fa 24 b6 bd 97 f7 db ee ad 9a e5 f7 ec 1c b0 d0 00 05 5f 41 a5 04 3c 6c 4c 97 21 23 98 b1 68 b5 cb 9e e6 50 72 6e ab cc 31 b6 71 2e 81 5f da ae 77 88 53 50 88 4f b3 6d 6d 54 44 d5 e5 50 0a 7d 63 6d 4e ce d1 4b 9d 41 1c 76 5b 36 a4 be 06 ca 9b e2 96 5d 6d 6c 06 c3 b6 bc b3 8b ab eb 29 99 ee 71 29 5d 48 92 6b f6 e3 93 63 fa bf 74 de 5e 57 aa 0b 59 f9 dd de ca 14 2d 0c 50 ab 7f f1 98 19 6c 69 c9 71 e6 ab 59 12 20 f4 e4 2d 65 25 e2 db d9 9b 6c 57 94 9c 85 4e 4e e0 e4 58 1f 9e 3e 16 0b 3f 66 b0 1f 23 f4 d0 47 2c 0a 1f 30 78 37 ac 8d ac 0a 25 7d 09 ab 82 97 51 48 dc d7 64 fe 63 59 a5 f2 1b 9c be 2a e7 b9 b2 77 48 9a 8b 32 85 b8 28 9a 84 ff 85 45 08 b4 48 8f fc f6 8f 47 ec 7a 5c 18 a8 c3 d0 6e 26 b3 2f 75 4a c7 4e a8 e9 3a 55 41 47 fd 3b 3d af 1f be 92 4e 2e 38 9c ac 13 a5 f8 0f 3a 21 db d2 50 d3 91 7f 7b 5a cf c7 39 a6 3f 2b 3d 6b 3f 09 9e fb 4b e7 a8 42 21 5c 89 fc 87 bd 85 50 d1 1b a2 a4 af 0f 11 1a b1 24 50 3b 26 fe ea e3 be 3e e2 41 68 dd 45 53 a2 26 b9 16 8e db 11 c3 e6 1b c8 50 ad f9 95 b4 d6 f1 aa ce 6d b0 b9 1f 80 5c 3d 17 89 a3 e6 b4 70 e5 47 09 68 f4 29 d5 b0 5c 8f 76 ca 29 81 e3 7f 5b de 4a d0 0a 09 75 5c 76 77 4e ad 7d 93 f3 f4 12 55 b1 d5 61 52 e3 69 9b 13 3b 2e 0b 27 74 27 c9 92 32 3d 1b 4d 8c 43 84 34 e9 e9 01 dd d4 37 88 f8 0c b9 a9 75 e9 dd 16 71 ce 16 be 5f f8 03 3d 5d a8 24 f0 0f d7 8b 54 0e db cd 69 a2 e9 af f0 3e 31 af 9a fe fb 80 94 34 f5 2b 4a 12 39 fd d2 41 ed 3a 26 82 58 ad dd e1 9d 17 24 15 5a 1a 4c 87 7b d5 9b 06 59 b7 a7 86 88 6f 6f fc b5 99 9d 1f 9c 00 7d 61 50 20 92 6f 71 65 a9 dd d4 aa a3 c7 b6 31 d3 0c c9 51 e3 28 13 1d 99 28 2a c0 6a 18 f8 83 73 09 23 20 ea 53 08 f0 6c 37 6e 71 1a ec da 4c d1 c2 b6 39 d9 ea 7a 26 13 d4 e9 ea a9 a0 ef 72 77 4f de c6 22 f7 d1 31 b4 51 35 d5 77 89 7b f6 86 b4 60 a3 71 08 30 70 13 9e a5 44 bd a1 50 12 25 1d 6c 8e 71 63 c2 54 12 84 1f ae fb a7 67 65 64 8c a7 cd 1b 42 34 03 a6 54 b6 b5 75 45 88 ae 6c 30 96 21 47 7d b2 0f 7c 92 36 af 1e 42 2e bd 3f b6 d6 a7 12 e7 a6 d0 0d 58 41 6b 7d 65 a5 3a 25 14 bf 51 be df e9 20 7f 16 a4 d7 94 18 60 03 89 b9 8e a8 b9 e0 6b 8d a7 08 a8 6f 19 1e 56 79 25 af 39 a0 9a c9 fd 79 02 e8 f8 e7 75 67 ba f1 b7 5c 05 ba 1e b7 08 9b 42 48 01 40 5a fc 98 2a 8d 79 c8 0f ad a1 84 a1 ab 3b ab 52 6a 3b 0a 5e 20 d2 dc 6b cd d2 c5 cb 7c 49 f7 35 f3 e8 f4 d3 6a 38 8c a8 05 87 6a e0 8f 0e 3a cc a5 dd 86 4c 1f a1 55 20 68 bf 79 90 95 22 14 80 37 4f d2 dc ae dd b7 4b e9 34 70 ef f4 fe 27 8e 19 0f 0a 13 1f 32 34 0a da 9c ca 51 8a f7 69 f4 29 43 87 5f 4c 57 07 be ee 21 79 77 1d a2 1c d6 64 05 b9 97 36 48 bd 04 7a 51 6d 1c f9 02 fa 1f 0f cd cb c3 f4 c1 f2 0f c2 2f 9a 7e 9f 4c 3a 52 57 63 99 60 4c 46 f8 3e de 44 f5 42 d0 6d 54 e6 e8 a1 e6 93 a2 cf cb b1 6c 17 8d 1b ac e9 76 13 3e 72 cc 45 33 bd 02 b1 c4 ec 2c c2 20 97 43 5a ff 5a 68 2c a7 22 74 14 89 54 50 83 15 60 fa 68 24 93 f4 81 4c e8 fb db 19 0f 8c e2 b5 33 ed 95 82 63 85 11 bd a9 3a ea e5 d0 69 0f 74 5b 78 8d b6 22 86 4b a3 fb 60 95 2f 11 94 27 fb e6 67 54 c5 c0 38 c5 fb 2c b8 7c 32 6d 65 86 2e 35 3c 14 95 0b d1 fa 7c 70 e3 63 23 e9 cf 90 c8 1f 62 75 e5 9c 79 26 ac ac 15 60 a0 b6 bb c7 a8 50 81 7f 2e ff a1 9d 48 53 15 a2 19 d4 9e 29 3f 87 12 78 29 4d 02 76 5c f7 2c aa 2f 43 8d e3 33 7e d2 05 bf 68 ff 6d da aa 5e 4b 80 de 5f ba 02 2d fc f9 cf 07 4a 31 96 78 df 11 eb 77 b3 ef 66 e5 12 b6 7b a5 18 22 65 a6 0e af 45 76 91 e9 73 d2 3c ba f6 00 05 37 f8 86 69 50 74 eb b6 16 f9 cd ad 9d e7 c6 fe 9e cf bd 13 d5 37 d6 4c 34 a7 c9 0c a5 6b 50 e6 0d 6a 70 67 e3 91 e6 35 61 79 3e df 6e d3 c2 ee b8 55 59 09 a5 9c e7 3d a1 f0 96 d4 1f b4 2d e4 44 94 12 83 24 a9} (length 0x1000)
// }
// union ANYUNION {
// ANYRES8: ANYRES8 (resource)
// }
// union ANYUNION {
// ANYRES16: ANYRES16 (resource)
// }
// }
// }
// chdir: int8 = 0x0 (1 bytes)
// size: len = 0x0 (8 bytes)
// img: ptr[in, buffer] {
// buffer: (compressed buffer with length 0x0)
// }
// ]
// returns fd_dir
memcpy((void*)0x200000000180, "msdos\000", 6);
memcpy((void*)0x200000000100, ".\000", 2);
*(uint16_t*)0x200000000680 = r[4];
*(uint64_t*)0x200000000682 = r[3];
memcpy((void*)0x20000000068a, "... [truncated large byte array] ...", 163);
sprintf((char*)0x20000000072d, "%023llo", (long long)r[3]);
sprintf((char*)0x200000000744, "%020llu", (long long)r[1]);
*(uint16_t*)0x200000000758 = r[2];
sprintf((char*)0x20000000075a, "%020llu", (long long)0);
memcpy((void*)0x20000000076e, "... [truncated large byte array] ...", 4096);
*(uint8_t*)0x20000000176e = -1;
*(uint16_t*)0x20000000176f = -1;
syz_mount_image(/*fs=*/0x200000000180, /*dir=*/0x200000000100, /*flags=MS_I_VERSION|MS_PRIVATE|MS_SYNCHRONOUS|MS_STRICTATIME|MS_REMOUNT|MS_RELATIME|0x240c*/0x1a4243c, /*opts=*/0x200000000680, /*chdir=*/0, /*size=*/0, /*img=*/0x200000000000);
// statfs arguments: [
// path: ptr[in, buffer] {
// buffer: {2e 2f 66 69 6c 65 32 00} (length 0x8)
// }
// buf: nil
// ]
memcpy((void*)0x2000000003c0, "./file2\000", 8);
syscall(__NR_statfs, /*path=*/0x2000000003c0ul, /*buf=*/0ul);
return 0;
}
]