// https://syzkaller.appspot.com/bug?id=d0f1e8faef2ae55703dc0d3f3d10c89907e2e32b
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <dirent.h>
#include <endian.h>
#include <errno.h>
#include <fcntl.h>
#include <setjmp.h>
#include <signal.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stddef.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/ioctl.h>
#include <sys/mman.h>
#include <sys/mount.h>
#include <sys/prctl.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <time.h>
#include <unistd.h>

#include <linux/loop.h>

#ifndef __NR_memfd_create
#define __NR_memfd_create 319
#endif
#ifndef __NR_renameat2
#define __NR_renameat2 316
#endif

static unsigned long long procid;

static __thread int clone_ongoing;
static __thread int skip_segv;
static __thread jmp_buf segv_env;

static void segv_handler(int sig, siginfo_t* info, void* ctx)
{
  if (__atomic_load_n(&clone_ongoing, __ATOMIC_RELAXED) != 0) {
    exit(sig);
  }
  uintptr_t addr = (uintptr_t)info->si_addr;
  const uintptr_t prog_start = 1 << 20;
  const uintptr_t prog_end = 100 << 20;
  int skip = __atomic_load_n(&skip_segv, __ATOMIC_RELAXED) != 0;
  int valid = addr < prog_start || addr > prog_end;
  if (skip && valid) {
    _longjmp(segv_env, 1);
  }
  exit(sig);
}

static void install_segv_handler(void)
{
  struct sigaction sa;
  memset(&sa, 0, sizeof(sa));
  sa.sa_handler = SIG_IGN;
  syscall(SYS_rt_sigaction, 0x20, &sa, NULL, 8);
  syscall(SYS_rt_sigaction, 0x21, &sa, NULL, 8);
  memset(&sa, 0, sizeof(sa));
  sa.sa_sigaction = segv_handler;
  sa.sa_flags = SA_NODEFER | SA_SIGINFO;
  sigaction(SIGSEGV, &sa, NULL);
  sigaction(SIGBUS, &sa, NULL);
}

#define NONFAILING(...)                                                        \
  ({                                                                           \
    int ok = 1;                                                                \
    __atomic_fetch_add(&skip_segv, 1, __ATOMIC_SEQ_CST);                       \
    if (_setjmp(segv_env) == 0) {                                              \
      __VA_ARGS__;                                                             \
    } else                                                                     \
      ok = 0;                                                                  \
    __atomic_fetch_sub(&skip_segv, 1, __ATOMIC_SEQ_CST);                       \
    ok;                                                                        \
  })

static void sleep_ms(uint64_t ms)
{
  usleep(ms * 1000);
}

static uint64_t current_time_ms(void)
{
  struct timespec ts;
  if (clock_gettime(CLOCK_MONOTONIC, &ts))
    exit(1);
  return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
}

static bool write_file(const char* file, const char* what, ...)
{
  char buf[1024];
  va_list args;
  va_start(args, what);
  vsnprintf(buf, sizeof(buf), what, args);
  va_end(args);
  buf[sizeof(buf) - 1] = 0;
  int len = strlen(buf);
  int fd = open(file, O_WRONLY | O_CLOEXEC);
  if (fd == -1)
    return false;
  if (write(fd, buf, len) != len) {
    int err = errno;
    close(fd);
    errno = err;
    return false;
  }
  close(fd);
  return true;
}

//% This code is derived from puff.{c,h}, found in the zlib development. The
//% original files come with the following copyright notice:

//% Copyright (C) 2002-2013 Mark Adler, all rights reserved
//% version 2.3, 21 Jan 2013
//% This software is provided 'as-is', without any express or implied
//% warranty.  In no event will the author be held liable for any damages
//% arising from the use of this software.
//% Permission is granted to anyone to use this software for any purpose,
//% including commercial applications, and to alter it and redistribute it
//% freely, subject to the following restrictions:
//% 1. The origin of this software must not be misrepresented; you must not
//%    claim that you wrote the original software. If you use this software
//%    in a product, an acknowledgment in the product documentation would be
//%    appreciated but is not required.
//% 2. Altered source versions must be plainly marked as such, and must not be
//%    misrepresented as being the original software.
//% 3. This notice may not be removed or altered from any source distribution.
//% Mark Adler    madler@alumni.caltech.edu

//% BEGIN CODE DERIVED FROM puff.{c,h}

#define MAXBITS 15
#define MAXLCODES 286
#define MAXDCODES 30
#define MAXCODES (MAXLCODES + MAXDCODES)
#define FIXLCODES 288

struct puff_state {
  unsigned char* out;
  unsigned long outlen;
  unsigned long outcnt;
  const unsigned char* in;
  unsigned long inlen;
  unsigned long incnt;
  int bitbuf;
  int bitcnt;
  jmp_buf env;
};
static int puff_bits(struct puff_state* s, int need)
{
  long val = s->bitbuf;
  while (s->bitcnt < need) {
    if (s->incnt == s->inlen)
      longjmp(s->env, 1);
    val |= (long)(s->in[s->incnt++]) << s->bitcnt;
    s->bitcnt += 8;
  }
  s->bitbuf = (int)(val >> need);
  s->bitcnt -= need;
  return (int)(val & ((1L << need) - 1));
}
static int puff_stored(struct puff_state* s)
{
  s->bitbuf = 0;
  s->bitcnt = 0;
  if (s->incnt + 4 > s->inlen)
    return 2;
  unsigned len = s->in[s->incnt++];
  len |= s->in[s->incnt++] << 8;
  if (s->in[s->incnt++] != (~len & 0xff) ||
      s->in[s->incnt++] != ((~len >> 8) & 0xff))
    return -2;
  if (s->incnt + len > s->inlen)
    return 2;
  if (s->outcnt + len > s->outlen)
    return 1;
  for (; len--; s->outcnt++, s->incnt++) {
    if (s->in[s->incnt])
      s->out[s->outcnt] = s->in[s->incnt];
  }
  return 0;
}
struct puff_huffman {
  short* count;
  short* symbol;
};
static int puff_decode(struct puff_state* s, const struct puff_huffman* h)
{
  int first = 0;
  int index = 0;
  int bitbuf = s->bitbuf;
  int left = s->bitcnt;
  int code = first = index = 0;
  int len = 1;
  short* next = h->count + 1;
  while (1) {
    while (left--) {
      code |= bitbuf & 1;
      bitbuf >>= 1;
      int count = *next++;
      if (code - count < first) {
        s->bitbuf = bitbuf;
        s->bitcnt = (s->bitcnt - len) & 7;
        return h->symbol[index + (code - first)];
      }
      index += count;
      first += count;
      first <<= 1;
      code <<= 1;
      len++;
    }
    left = (MAXBITS + 1) - len;
    if (left == 0)
      break;
    if (s->incnt == s->inlen)
      longjmp(s->env, 1);
    bitbuf = s->in[s->incnt++];
    if (left > 8)
      left = 8;
  }
  return -10;
}
static int puff_construct(struct puff_huffman* h, const short* length, int n)
{
  int len;
  for (len = 0; len <= MAXBITS; len++)
    h->count[len] = 0;
  int symbol;
  for (symbol = 0; symbol < n; symbol++)
    (h->count[length[symbol]])++;
  if (h->count[0] == n)
    return 0;
  int left = 1;
  for (len = 1; len <= MAXBITS; len++) {
    left <<= 1;
    left -= h->count[len];
    if (left < 0)
      return left;
  }
  short offs[MAXBITS + 1];
  offs[1] = 0;
  for (len = 1; len < MAXBITS; len++)
    offs[len + 1] = offs[len] + h->count[len];
  for (symbol = 0; symbol < n; symbol++)
    if (length[symbol] != 0)
      h->symbol[offs[length[symbol]]++] = symbol;
  return left;
}
static int puff_codes(struct puff_state* s, const struct puff_huffman* lencode,
                      const struct puff_huffman* distcode)
{
  static const short lens[29] = {3,  4,  5,  6,   7,   8,   9,   10,  11, 13,
                                 15, 17, 19, 23,  27,  31,  35,  43,  51, 59,
                                 67, 83, 99, 115, 131, 163, 195, 227, 258};
  static const short lext[29] = {0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2,
                                 2, 3, 3, 3, 3, 4, 4, 4, 4, 5, 5, 5, 5, 0};
  static const short dists[30] = {
      1,    2,    3,    4,    5,    7,    9,    13,    17,    25,
      33,   49,   65,   97,   129,  193,  257,  385,   513,   769,
      1025, 1537, 2049, 3073, 4097, 6145, 8193, 12289, 16385, 24577};
  static const short dext[30] = {0, 0, 0,  0,  1,  1,  2,  2,  3,  3,
                                 4, 4, 5,  5,  6,  6,  7,  7,  8,  8,
                                 9, 9, 10, 10, 11, 11, 12, 12, 13, 13};
  int symbol;
  do {
    symbol = puff_decode(s, lencode);
    if (symbol < 0)
      return symbol;
    if (symbol < 256) {
      if (s->outcnt == s->outlen)
        return 1;
      if (symbol)
        s->out[s->outcnt] = symbol;
      s->outcnt++;
    } else if (symbol > 256) {
      symbol -= 257;
      if (symbol >= 29)
        return -10;
      int len = lens[symbol] + puff_bits(s, lext[symbol]);
      symbol = puff_decode(s, distcode);
      if (symbol < 0)
        return symbol;
      unsigned dist = dists[symbol] + puff_bits(s, dext[symbol]);
      if (dist > s->outcnt)
        return -11;
      if (s->outcnt + len > s->outlen)
        return 1;
      while (len--) {
        if (dist <= s->outcnt && s->out[s->outcnt - dist])
          s->out[s->outcnt] = s->out[s->outcnt - dist];
        s->outcnt++;
      }
    }
  } while (symbol != 256);
  return 0;
}
static int puff_fixed(struct puff_state* s)
{
  static int virgin = 1;
  static short lencnt[MAXBITS + 1], lensym[FIXLCODES];
  static short distcnt[MAXBITS + 1], distsym[MAXDCODES];
  static struct puff_huffman lencode, distcode;
  if (virgin) {
    lencode.count = lencnt;
    lencode.symbol = lensym;
    distcode.count = distcnt;
    distcode.symbol = distsym;
    short lengths[FIXLCODES];
    int symbol;
    for (symbol = 0; symbol < 144; symbol++)
      lengths[symbol] = 8;
    for (; symbol < 256; symbol++)
      lengths[symbol] = 9;
    for (; symbol < 280; symbol++)
      lengths[symbol] = 7;
    for (; symbol < FIXLCODES; symbol++)
      lengths[symbol] = 8;
    puff_construct(&lencode, lengths, FIXLCODES);
    for (symbol = 0; symbol < MAXDCODES; symbol++)
      lengths[symbol] = 5;
    puff_construct(&distcode, lengths, MAXDCODES);
    virgin = 0;
  }
  return puff_codes(s, &lencode, &distcode);
}
static int puff_dynamic(struct puff_state* s)
{
  static const short order[19] = {16, 17, 18, 0, 8,  7, 9,  6, 10, 5,
                                  11, 4,  12, 3, 13, 2, 14, 1, 15};
  int nlen = puff_bits(s, 5) + 257;
  int ndist = puff_bits(s, 5) + 1;
  int ncode = puff_bits(s, 4) + 4;
  if (nlen > MAXLCODES || ndist > MAXDCODES)
    return -3;
  short lengths[MAXCODES];
  int index;
  for (index = 0; index < ncode; index++)
    lengths[order[index]] = puff_bits(s, 3);
  for (; index < 19; index++)
    lengths[order[index]] = 0;
  short lencnt[MAXBITS + 1], lensym[MAXLCODES];
  struct puff_huffman lencode = {lencnt, lensym};
  int err = puff_construct(&lencode, lengths, 19);
  if (err != 0)
    return -4;
  index = 0;
  while (index < nlen + ndist) {
    int symbol;
    int len;
    symbol = puff_decode(s, &lencode);
    if (symbol < 0)
      return symbol;
    if (symbol < 16)
      lengths[index++] = symbol;
    else {
      len = 0;
      if (symbol == 16) {
        if (index == 0)
          return -5;
        len = lengths[index - 1];
        symbol = 3 + puff_bits(s, 2);
      } else if (symbol == 17)
        symbol = 3 + puff_bits(s, 3);
      else
        symbol = 11 + puff_bits(s, 7);
      if (index + symbol > nlen + ndist)
        return -6;
      while (symbol--)
        lengths[index++] = len;
    }
  }
  if (lengths[256] == 0)
    return -9;
  err = puff_construct(&lencode, lengths, nlen);
  if (err && (err < 0 || nlen != lencode.count[0] + lencode.count[1]))
    return -7;
  short distcnt[MAXBITS + 1], distsym[MAXDCODES];
  struct puff_huffman distcode = {distcnt, distsym};
  err = puff_construct(&distcode, lengths + nlen, ndist);
  if (err && (err < 0 || ndist != distcode.count[0] + distcode.count[1]))
    return -8;
  return puff_codes(s, &lencode, &distcode);
}
static int puff(unsigned char* dest, unsigned long* destlen,
                const unsigned char* source, unsigned long sourcelen)
{
  struct puff_state s = {
      .out = dest,
      .outlen = *destlen,
      .outcnt = 0,
      .in = source,
      .inlen = sourcelen,
      .incnt = 0,
      .bitbuf = 0,
      .bitcnt = 0,
  };
  int err;
  if (setjmp(s.env) != 0)
    err = 2;
  else {
    int last;
    do {
      last = puff_bits(&s, 1);
      int type = puff_bits(&s, 2);
      err = type == 0 ? puff_stored(&s)
                      : (type == 1 ? puff_fixed(&s)
                                   : (type == 2 ? puff_dynamic(&s) : -1));
      if (err != 0)
        break;
    } while (!last);
  }
  *destlen = s.outcnt;
  return err;
}

//% END CODE DERIVED FROM puff.{c,h}

#define ZLIB_HEADER_WIDTH 2

static int puff_zlib_to_file(const unsigned char* source,
                             unsigned long sourcelen, int dest_fd)
{
  if (sourcelen < ZLIB_HEADER_WIDTH)
    return 0;
  source += ZLIB_HEADER_WIDTH;
  sourcelen -= ZLIB_HEADER_WIDTH;
  const unsigned long max_destlen = 132 << 20;
  void* ret = mmap(0, max_destlen, PROT_WRITE | PROT_READ,
                   MAP_PRIVATE | MAP_ANON, -1, 0);
  if (ret == MAP_FAILED)
    return -1;
  unsigned char* dest = (unsigned char*)ret;
  unsigned long destlen = max_destlen;
  int err = puff(dest, &destlen, source, sourcelen);
  if (err) {
    munmap(dest, max_destlen);
    errno = -err;
    return -1;
  }
  if (write(dest_fd, dest, destlen) != (ssize_t)destlen) {
    munmap(dest, max_destlen);
    return -1;
  }
  return munmap(dest, max_destlen);
}

static int setup_loop_device(unsigned char* data, unsigned long size,
                             const char* loopname, int* loopfd_p)
{
  int err = 0, loopfd = -1;
  int memfd = syscall(__NR_memfd_create, "syzkaller", 0);
  if (memfd == -1) {
    err = errno;
    goto error;
  }
  if (puff_zlib_to_file(data, size, memfd)) {
    err = errno;
    goto error_close_memfd;
  }
  loopfd = open(loopname, O_RDWR);
  if (loopfd == -1) {
    err = errno;
    goto error_close_memfd;
  }
  if (ioctl(loopfd, LOOP_SET_FD, memfd)) {
    if (errno != EBUSY) {
      err = errno;
      goto error_close_loop;
    }
    ioctl(loopfd, LOOP_CLR_FD, 0);
    usleep(1000);
    if (ioctl(loopfd, LOOP_SET_FD, memfd)) {
      err = errno;
      goto error_close_loop;
    }
  }
  close(memfd);
  *loopfd_p = loopfd;
  return 0;

error_close_loop:
  close(loopfd);
error_close_memfd:
  close(memfd);
error:
  errno = err;
  return -1;
}

static void reset_loop_device(const char* loopname)
{
  int loopfd = open(loopname, O_RDWR);
  if (loopfd == -1) {
    return;
  }
  if (ioctl(loopfd, LOOP_CLR_FD, 0)) {
  }
  close(loopfd);
}

static long syz_mount_image(volatile long fsarg, volatile long dir,
                            volatile long flags, volatile long optsarg,
                            volatile long change_dir,
                            volatile unsigned long size, volatile long image)
{
  unsigned char* data = (unsigned char*)image;
  int res = -1, err = 0, need_loop_device = !!size;
  char* mount_opts = (char*)optsarg;
  char* target = (char*)dir;
  char* fs = (char*)fsarg;
  char* source = NULL;
  char loopname[64];
  if (need_loop_device) {
    int loopfd;
    memset(loopname, 0, sizeof(loopname));
    snprintf(loopname, sizeof(loopname), "/dev/loop%llu", procid);
    if (setup_loop_device(data, size, loopname, &loopfd) == -1)
      return -1;
    close(loopfd);
    source = loopname;
  }
  mkdir(target, 0777);
  char opts[256];
  memset(opts, 0, sizeof(opts));
  if (strlen(mount_opts) > (sizeof(opts) - 32)) {
  }
  strncpy(opts, mount_opts, sizeof(opts) - 32);
  if (strcmp(fs, "iso9660") == 0) {
    flags |= MS_RDONLY;
  } else if (strncmp(fs, "ext", 3) == 0) {
    bool has_remount_ro = false;
    char* remount_ro_start = strstr(opts, "errors=remount-ro");
    if (remount_ro_start != NULL) {
      char after = *(remount_ro_start + strlen("errors=remount-ro"));
      char before = remount_ro_start == opts ? '\0' : *(remount_ro_start - 1);
      has_remount_ro = ((before == '\0' || before == ',') &&
                        (after == '\0' || after == ','));
    }
    if (strstr(opts, "errors=panic") || !has_remount_ro)
      strcat(opts, ",errors=continue");
  } else if (strcmp(fs, "xfs") == 0) {
    strcat(opts, ",nouuid");
  } else if (strncmp(fs, "gfs2", 4) == 0 &&
             (strstr(opts, "errors=panic") || strstr(opts, "debug"))) {
    strcat(opts, ",errors=withdraw");
  }
  res = mount(source, target, fs, flags, opts);
  if (res == -1) {
    err = errno;
    goto error_clear_loop;
  }
  res = open(target, O_RDONLY | O_DIRECTORY);
  if (res == -1) {
    err = errno;
    goto error_clear_loop;
  }
  if (change_dir) {
    res = chdir(target);
    if (res == -1) {
      err = errno;
    }
  }

error_clear_loop:
  if (need_loop_device)
    reset_loop_device(loopname);
  errno = err;
  return res;
}

static void kill_and_wait(int pid, int* status)
{
  kill(-pid, SIGKILL);
  kill(pid, SIGKILL);
  for (int i = 0; i < 100; i++) {
    if (waitpid(-1, status, WNOHANG | __WALL) == pid)
      return;
    usleep(1000);
  }
  DIR* dir = opendir("/sys/fs/fuse/connections");
  if (dir) {
    for (;;) {
      struct dirent* ent = readdir(dir);
      if (!ent)
        break;
      if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
        continue;
      char abort[300];
      snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort",
               ent->d_name);
      int fd = open(abort, O_WRONLY);
      if (fd == -1) {
        continue;
      }
      if (write(fd, abort, 1) < 0) {
      }
      close(fd);
    }
    closedir(dir);
  } else {
  }
  while (waitpid(-1, status, __WALL) != pid) {
  }
}

static void reset_loop()
{
  char buf[64];
  snprintf(buf, sizeof(buf), "/dev/loop%llu", procid);
  int loopfd = open(buf, O_RDWR);
  if (loopfd != -1) {
    ioctl(loopfd, LOOP_CLR_FD, 0);
    close(loopfd);
  }
}

static void setup_test()
{
  prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
  setpgrp();
  write_file("/proc/self/oom_score_adj", "1000");
}

static void execute_one(void);

#define WAIT_FLAGS __WALL

static void loop(void)
{
  int iter = 0;
  for (;; iter++) {
    reset_loop();
    int pid = fork();
    if (pid < 0)
      exit(1);
    if (pid == 0) {
      setup_test();
      execute_one();
      exit(0);
    }
    int status = 0;
    uint64_t start = current_time_ms();
    for (;;) {
      sleep_ms(10);
      if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid)
        break;
      if (current_time_ms() - start < 5000)
        continue;
      kill_and_wait(pid, &status);
      break;
    }
  }
}

uint64_t r[1] = {0xffffffffffffffff};

void execute_one(void)
{
  intptr_t res = 0;
  if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {
  }
  //  syz_mount_image$exfat arguments: [
  //    fs: ptr[in, buffer] {
  //      buffer: {65 78 66 61 74 00} (length 0x6)
  //    }
  //    dir: ptr[in, buffer] {
  //      buffer: {2e 2f 66 69 6c 65 31 00} (length 0x8)
  //    }
  //    flags: mount_flags = 0x0 (8 bytes)
  //    opts: ptr[inout, array[ANYUNION]] {
  //      array[ANYUNION] {
  //      }
  //    }
  //    chdir: int8 = 0x1 (1 bytes)
  //    size: len = 0x1513 (8 bytes)
  //    img: ptr[in, buffer] {
  //      buffer: (compressed buffer with length 0x1513)
  //    }
  //  ]
  //  returns fd_dir
  NONFAILING(memcpy((void*)0x200000000000, "exfat\000", 6));
  NONFAILING(memcpy((void*)0x200000000240, "./file1\000", 8));
  NONFAILING(memcpy(
      (void*)0x200000002d00,
      "\x78\x9c\xec\xdc\x0b\xb8\x4e\x55\xb7\x38\xf0\x31\xe6\x9c\x4b\x9b\xd0\x9b"
      "\xe4\x3e\xc7\x1c\x8b\x37\xb9\x4c\x92\x24\x97\x84\x44\x92\x24\x49\x92\x5b"
      "\x42\x92\x24\x49\x48\x6c\x72\x4b\x42\x12\x72\x4f\x72\x0f\xc9\x2d\x24\xf7"
      "\xfb\x2d\xf7\x90\x7c\x92\x24\x09\x09\x49\xe6\xff\xd1\xd7\xf7\x77\xbe\xd3"
      "\x77\x4e\x7d\xe7\xeb\x1c\xe7\x39\x7b\xfc\x9e\x67\x3d\x7b\x8e\xbd\xde\x31"
      "\xd6\x58\x7b\xec\xe7\x7d\xd7\x5a\xcf\xb3\xf7\x37\xed\x07\x56\xae\x5b\xa5"
      "\x62\x6d\x66\x86\x7f\x09\xfe\xf5\x4b\x2a\x00\xa4\x00\x40\x1f\x00\xb8\x06"
      "\x00\x22\x00\x28\x91\xa5\x44\x16\xc0\x21\x90\x5e\x63\xea\xbf\x76\x10\xf1"
      "\xe7\x7a\x68\xca\x95\xee\x40\x5c\x49\x32\xff\xb4\x4d\xe6\x9f\xb6\xc9\xfc"
      "\xd3\x36\x99\x7f\xda\x26\xf3\x4f\xdb\x64\xfe\x69\x9b\xcc\x3f\x6d\x93\xf9"
      "\x0b\x91\x96\x6d\x99\x9a\xf3\x5a\xd9\xd2\xee\xf6\x3f\xf7\xfc\x1f\xe4\xf9"
      "\xff\xff\x3a\xf2\xf9\xff\x7f\xc8\xe1\x22\xa3\xbe\x58\x57\xe4\xfa\x0e\xff"
      "\x44\x8a\xcc\x3f\x6d\x93\xf9\xa7\x6d\x32\xff\xb4\x4d\xe6\x9f\xb6\xc9\xfc"
      "\xd3\x36\x99\xff\xff\x71\x11\x40\x85\xff\x64\xb7\xcc\x3f\x6d\x93\xf9\x0b"
      "\x91\x96\x5d\xe9\xe7\xcf\xb2\x5d\xd9\xed\x4a\xff\xfe\x09\x21\x84\x10\x42"
      "\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84"
      "\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08"
      "\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10"
      "\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21"
      "\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42"
      "\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84"
      "\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x48\x1b\xce"
      "\x85\xcb\x0c\x00\xfc\x6d\x7d\xa5\xfb\x12\x42\x08\x21\x84\x10\x42\x08\x21"
      "\xc4\x9f\x27\x5c\x75\xa5\x3b\x10\x42\x08\x21\x84\x10\x42\x08\x21\xc4\x7f"
      "\x3f\x04\x05\x1a\x0c\x44\x90\x0e\xae\x82\x14\x48\x0f\x19\xe0\x6a\xc8\x08"
      "\x99\x20\x33\x5c\x03\x09\xb8\x16\xb2\xc0\x75\x90\x15\xae\x87\x6c\x90\x1d"
      "\x72\x40\x4e\xc8\x05\xb9\x21\x0f\x58\x20\x70\xc0\x10\x43\x5e\xc8\x07\x49"
      "\xb8\x01\xf2\xc3\x8d\x50\x00\x0a\x42\x21\x28\x0c\x1e\x8a\x40\x51\xb8\x09"
      "\x8a\xc1\xcd\x50\x1c\x6e\x81\x12\x70\x2b\x94\x84\xdb\xa0\x14\x94\x86\x32"
      "\x50\x16\x6e\x87\x72\x70\x07\x94\x87\x0a\x50\x11\xee\x84\x4a\x70\x17\x54"
      "\x86\x2a\x70\x37\x54\x85\x7b\xa0\x1a\xdc\x0b\xd5\xe1\x3e\xa8\x01\xf7\x43"
      "\x4d\x78\x00\x6a\xc1\x83\x50\x1b\x1e\x82\x3a\xf0\x30\xd4\x85\x47\xa0\x1e"
      "\x3c\x0a\xf5\xa1\x01\x34\x84\x46\xd0\xf8\xbf\x94\xff\x22\x74\x86\x97\xa0"
      "\x0b\x74\x85\x54\xe8\x06\xdd\xe1\x65\xe8\x01\x3d\xa1\x17\xf4\x86\x3e\xf0"
      "\x0a\xf4\x85\x57\xa1\x1f\xbc\x06\xfd\x61\x00\x0c\x84\xd7\x61\x10\xbc\x01"
      "\x83\xe1\x4d\x18\x02\x43\x61\x18\xbc\x05\xc3\x61\x04\x8c\x84\x51\x30\x1a"
      "\xc6\xc0\x58\x78\x1b\xc6\xc1\x3b\x30\x1e\xde\x85\x09\x30\x11\x26\xc1\x64"
      "\x98\x02\x53\x61\x1a\xbc\x07\xd3\x61\x06\xcc\x84\xf7\x61\x16\x7c\x00\xb3"
      "\x61\x0e\xcc\x85\x79\x30\x1f\x3e\x84\x05\xb0\x10\x16\xc1\x47\xb0\x18\x3e"
      "\x86\x25\xb0\x14\x96\xc1\x72\x58\x01\x2b\x61\x15\xac\x86\x35\xb0\x16\xd6"
      "\xc1\x7a\xd8\x00\x1b\x61\x13\x6c\x86\x2d\xf0\x09\x6c\x85\x6d\xb0\x1d\x76"
      "\xc0\x4e\xd8\x05\xbb\xe1\x53\xd8\x03\x7b\x61\x1f\x7c\x06\xfb\xe1\xf3\x7f"
      "\x32\xff\xec\xbf\xcb\xef\x80\x80\x80\x0a\x15\x1a\x34\x98\x0e\xd3\x61\x0a"
      "\xa6\x60\x06\xcc\x80\x19\x31\x23\x66\xc6\xcc\x98\xc0\x04\x66\xc1\x2c\x98"
      "\x15\xb3\x62\x36\xcc\x86\x39\x30\x07\xe6\xc2\x5c\x98\x07\xf3\x20\x21\x21"
      "\x23\x63\x5e\xcc\x8b\x49\x4c\x62\x7e\xcc\x8f\x05\xb0\x00\x16\xc2\x42\xe8"
      "\xd1\x63\x51\x2c\x8a\xc5\xf0\x66\x2c\x8e\xc5\xb1\x04\x96\xc0\x92\x58\x12"
      "\x4b\x61\x69\x2c\x8d\x65\xb1\x2c\x96\xc3\x72\x58\x1e\xcb\x63\x45\xac\x88"
      "\x95\xb0\x12\x56\xc6\xca\x78\x37\xde\x8d\xf7\x60\x35\xac\x86\xd5\x11\x01"
      "\xa0\x06\xd6\xc4\x9a\x58\x0b\x6b\x61\x6d\xac\x8d\x75\xb0\x0e\xd6\xc5\xba"
      "\x58\x0f\xeb\x61\x7d\xac\x8f\x0d\xb1\x21\x36\xc6\xc6\xd8\x04\x9b\x60\x53"
      "\x6c\x8a\xcd\xb1\x39\xb6\xc0\x16\xd8\x12\x5b\x62\x2b\x6c\x85\xad\xb1\x35"
      "\xb6\xc1\x36\xd8\x16\xdb\x62\x3b\x6c\x87\xed\xb1\x3d\x76\xc0\x8e\xd8\x11"
      "\x5f\xc4\x17\xf1\x25\x7c\x09\xbb\x62\x25\xd5\x0d\xbb\x63\x77\xec\x81\x3d"
      "\xb0\x17\xf6\xc6\xde\xf8\x0a\xf6\xc5\x57\xf1\x55\x7c\x0d\xfb\xe3\x00\x1c"
      "\x88\xaf\xe3\xeb\xf8\x06\x0e\xc6\x33\x38\x04\x87\xe2\x30\x1c\x86\xe5\xd4"
      "\x08\x1c\x89\xa3\x90\xd5\x18\x1c\x8b\x63\x71\x1c\x8e\xc3\xf1\x38\x1e\x27"
      "\xe0\x44\x9c\x88\x93\x71\x0a\x4e\xc5\x69\x38\x0d\xa7\xe3\x0c\x9c\x81\xef"
      "\xe3\x2c\xfc\x00\x3f\xc0\x39\x38\x07\xe7\xe1\x7c\x9c\x8f\x0b\x70\x21\x2e"
      "\xc2\x45\xb8\x18\xcf\xe2\x12\x5c\x8a\xcb\x70\x39\xae\xc0\x95\xb8\x02\x57"
      "\xe3\x1a\x5c\x8d\xeb\x70\x3d\xae\xc3\x8d\xb8\x11\x37\xe3\x66\xfc\x04\x3f"
      "\xc1\x6d\xb8\x0d\x77\xe0\x0e\xdc\x85\xbb\xf0\x53\xfc\x14\xf7\xe2\x5e\xec"
      "\x8f\xfb\x71\x3f\x1e\xc0\x03\x78\x10\x0f\xe2\x21\x3c\x84\x87\xf1\x30\x1e"
      "\xc1\x23\x78\x14\x8f\xe2\x31\x3c\x86\xc7\xf1\x38\x9e\xc0\x93\x78\x0a\x4f"
      "\xe2\x69\x3c\x8d\x67\xf0\x2c\x9e\xc3\x73\x78\x1e\xcf\xe3\x05\x7c\x3e\xd7"
      "\x57\x75\x76\x15\x5c\xdb\x1f\xd4\x25\x46\x19\x95\x4e\xa5\x53\x29\x2a\x45"
      "\x65\x50\x19\x54\x46\x95\x51\x65\x56\x99\x55\x42\x25\x54\x16\x95\x45\x65"
      "\x55\x59\x55\x36\x95\x4d\xe5\x50\x39\x54\x2e\x95\x4b\xe5\x51\x79\x14\x29"
      "\x52\xac\x62\x95\x57\xe5\x55\x49\x95\x54\xf9\x55\x7e\x55\x40\x15\x50\x85"
      "\x54\x21\xe5\x95\x57\x45\x55\x51\x55\x4c\x15\x53\xc5\x55\x71\x55\x42\xdd"
      "\xaa\x4a\xaa\xdb\x54\x29\x55\x5a\x35\xf3\x65\x55\x59\x55\x4e\x35\xf7\xe5"
      "\x55\x05\x55\x51\x55\x54\x95\xd4\x5d\xaa\xb2\xaa\xa2\xaa\xa8\xaa\xaa\xaa"
      "\xaa\xa6\xaa\xa9\xea\xaa\xba\xaa\xa1\x6a\xa8\x9a\xea\x01\x55\x4b\x75\xc3"
      "\x5e\xf8\x90\xba\x34\x99\xba\x6a\x00\xd6\x53\x03\xb1\xbe\x6a\xa0\x1a\xaa"
      "\x46\xea\x0d\x7c\x4c\x35\x51\x83\xb1\xa9\x6a\xa6\x9a\xab\x27\xd4\x50\x1c"
      "\x82\x2d\x55\x13\xdf\x4a\x3d\xad\x5a\xab\x91\xd8\x46\x3d\xab\x46\xe1\x73"
      "\xaa\x9d\x1a\x83\xed\xd5\x0b\xaa\x83\xea\xa8\x3a\xa9\x17\x55\x67\xd5\xd4"
      "\x77\x49\xf7\xeb\x5b\xa0\x9a\x8c\x3d\x54\x4f\xd5\x4b\xf5\x56\x99\xe0\x2e"
      "\x75\x69\x62\x95\xd5\x6b\xaa\xbf\x1a\xa0\x06\xaa\xd7\xd5\x3c\x7c\x43\x0d"
      "\x56\x6f\xaa\x21\x6a\xa8\x1a\xa6\xde\x52\xc3\xd5\x08\x35\x52\x8d\x52\xa3"
      "\xd5\x18\x35\x56\xbd\xad\xc6\xa9\x77\xd4\x78\xf5\xae\x9a\xa0\x26\xaa\x49"
      "\x6a\xb2\x9a\xa2\xa6\xaa\x69\xea\x3d\x35\x5d\xcd\x50\x33\xd5\xfb\x6a\x96"
      "\xfa\x40\xcd\x56\x73\xd4\x5c\x35\x4f\xcd\x57\x1f\xaa\x05\x6a\xa1\x5a\xa4"
      "\x3e\x52\x8b\xd5\xc7\x6a\x89\x5a\xaa\x96\xa9\xe5\x6a\x85\x5a\xa9\x56\xa9"
      "\xd5\x6a\x8d\x5a\xab\xd6\xa9\xf5\x6a\x83\xda\xa8\x36\xa9\xcd\x6a\x8b\xfa"
      "\x44\x6d\x55\xdb\xd4\x76\xb5\x43\xed\x54\xbb\xd4\x6e\xf5\xa9\xda\xa3\xf6"
      "\xaa\x7d\xea\x33\xb5\x5f\x7d\xae\x0e\xa8\xbf\xa8\x83\xea\x0b\x75\x48\x7d"
      "\xa9\x0e\xab\xaf\xd4\x11\xf5\xb5\x3a\xaa\xbe\x51\xc7\xd4\xb7\xea\xb8\xfa"
      "\x4e\x9d\x50\x27\xd5\x29\xf5\xbd\x3a\xad\x7e\x50\x67\xd4\x59\x75\x4e\xfd"
      "\xa8\xce\xab\x9f\xd4\x05\xf5\xb3\xba\xa8\x82\x02\x8d\x5a\x69\xad\x8d\x8e"
      "\x74\x3a\x7d\x95\x4e\xd1\xe9\x75\x06\x7d\xb5\xce\xa8\x33\xe9\xcc\xfa\x1a"
      "\x9d\xd0\xd7\xea\x2c\xfa\x3a\x9d\x55\x5f\xaf\xb3\xe9\xec\x3a\x87\xce\xa9"
      "\x73\xe9\xdc\x3a\x8f\xb6\x9a\xb4\xd3\xac\x63\x9d\x57\xe7\xd3\x49\x7d\x83"
      "\xce\xaf\x6f\xd4\x05\x74\x41\x5d\x48\x17\xd6\x5e\x17\xd1\x45\xf5\x4d\xba"
      "\x98\xbe\x59\x17\xd7\xb7\xe8\x12\xfa\x56\x5d\x52\xdf\xa6\x4b\xe9\xd2\xba"
      "\x8c\x2e\xab\x6f\xd7\xe5\xf4\x1d\xba\xbc\xae\xa0\x2b\xea\x3b\x75\x25\x7d"
      "\x97\xae\xac\xab\xe8\xbb\x75\x55\x7d\x8f\xae\xa6\xef\xd5\xd5\xf5\x7d\xba"
      "\x86\xbe\x5f\xd7\xd4\x0f\xe8\x5a\xfa\x41\x5d\x5b\x3f\xa4\xeb\xe8\x87\x75"
      "\x5d\xfd\x88\xae\xa7\x1f\xd5\xf5\x75\x03\xdd\x50\x37\xd2\x8d\xf5\x63\xba"
      "\x89\x7e\x5c\x37\xd5\xcd\x74\x73\xfd\x84\x6e\xa1\x9f\xd4\x2d\xf5\x53\xba"
      "\x95\x7e\x5a\xb7\xd6\xcf\xe8\x36\xfa\x59\xdd\x56\x3f\xa7\xdb\xe9\xe7\x75"
      "\x7b\xfd\x82\xee\xa0\x3b\xea\x4e\xfa\x67\x7d\x51\x07\xdd\x45\x77\xd5\xa9"
      "\xba\x9b\xee\xae\x5f\xd6\x3d\x74\x4f\xdd\x4b\xf7\xd6\x7d\xf4\x2b\xba\xaf"
      "\x7e\x55\xf7\xd3\xaf\xe9\xfe\x7a\x80\x1e\xa8\x5f\xd7\x83\xf4\x1b\x7a\xb0"
      "\x7e\x53\x0f\xd1\x43\xf5\x30\xfd\x96\x1e\xae\x47\xe8\x91\x7a\x94\x1e\xad"
      "\xc7\xe8\xb1\xfa\x6d\x3d\x4e\xbf\xa3\xc7\xeb\x77\xf5\x04\x3d\x51\x4f\xd2"
      "\x93\xf5\x14\x3d\x55\xf7\xfa\xb5\xd2\xcc\x3f\x90\xff\xce\x3f\xc8\xef\xf7"
      "\xcb\xd1\x37\xeb\x2d\xfa\x13\xbd\x55\x6f\xd3\xdb\xf5\x0e\xbd\x53\xef\xd2"
      "\xbb\xf5\x6e\xbd\x47\xef\xd1\xfb\xf4\x3e\xbd\x5f\xef\xd7\x07\xf4\x01\x7d"
      "\x50\x1f\xd4\x87\xf4\x21\x7d\x58\x1f\xd6\x47\xf4\x11\x7d\x54\x1f\xd5\xc7"
      "\xf4\x31\x7d\x5c\x1f\xd7\x27\xf4\x49\xfd\xa3\xfe\x5e\x9f\xd6\x3f\xe8\x33"
      "\xfa\xac\x3e\xab\x7f\xd4\xe7\xf5\x79\x7d\xe1\xd7\x9f\x01\x18\x34\xca\x68"
      "\x63\x4c\x64\xd2\x99\xab\x4c\x8a\x49\x6f\x32\x98\xab\x4d\x46\x93\xc9\x64"
      "\x36\xd7\x98\x84\xb9\xd6\x64\x31\xd7\x99\xac\xe6\x7a\x93\xcd\x64\x37\x39"
      "\x4c\x4e\x93\xcb\xe4\x36\x79\x8c\x35\x64\x9c\x61\x13\x9b\xbc\x26\x9f\x49"
      "\x9a\x1b\x4c\x7e\x73\xa3\x29\x60\x0a\x9a\x42\xa6\xb0\xf1\xa6\x88\x29\x6a"
      "\x6e\xfa\x97\xf3\x7f\xaf\xbf\xc6\xa6\xb1\x69\x62\x9a\x98\xa6\xa6\xa9\x69"
      "\x6e\x9a\x9b\x16\xa6\x85\x69\x69\x5a\x9a\x56\xa6\x95\x69\x6d\x5a\x9b\x36"
      "\xa6\x8d\x69\x6b\xda\x9a\x76\xa6\x9d\x69\x6f\xda\x9b\x0e\xa6\x83\xe9\x64"
      "\x3a\x99\xce\xa6\xb3\xe9\x62\xba\x98\x54\x93\x6a\xba\x9b\x97\x4d\x0f\xd3"
      "\xd3\xf4\x32\xbd\x4d\x1f\xf3\x8a\xe9\x6b\xfa\x9a\x7e\xa6\x9f\xe9\x6f\xfa"
      "\x9b\x81\x66\xa0\x19\x64\x06\x99\xc1\x66\xb0\x19\x62\x86\x98\x61\x66\x98"
      "\x19\x6e\x86\x9b\x91\x66\xa4\x19\x6d\x46\x9b\xb1\x66\xac\x19\x67\xc6\x99"
      "\xf1\x66\xbc\x99\x60\x26\x98\x49\x66\x92\x99\x62\xa6\x98\x69\x66\x9a\x99"
      "\x6e\xa6\x9b\x99\x66\xa6\x99\x65\x66\x99\xd9\x66\xb6\x99\x6b\xe6\x9a\xf9"
      "\x66\xbe\x59\x60\x16\x98\x45\x66\x91\x59\x6c\x16\x9b\x25\x66\xa9\x59\x6a"
      "\x96\x9b\xe5\x66\xa5\x59\x69\x56\x9b\xd5\x66\xad\x59\x6b\xd6\x9b\xf5\x66"
      "\xa3\xd9\x68\x96\x98\x2d\x66\x8b\xd9\x6a\xb6\x9a\xed\x66\xbb\xd9\x69\x76"
      "\x9a\xdd\x66\xb7\xd9\x63\xf6\x98\x7d\x66\x9f\xd9\x6f\xf6\x9b\x03\xe6\x80"
      "\x39\x68\x0e\x9a\x43\xe6\x90\x39\x6c\x0e\x9b\x23\xe6\x88\x39\x6a\x8e\x9a"
      "\x63\xe6\x98\x39\x6e\x8e\x9b\x13\xe6\x84\x39\x65\x4e\x99\xd3\xe6\xb4\x39"
      "\x63\xce\x98\x73\xe6\x9c\x39\x6f\xce\x9b\x0b\xe6\x82\xb9\x68\x2e\x5e\xba"
      "\xec\x8b\x54\xa4\x22\x13\x99\x28\x5d\x94\x2e\x4a\x89\x52\xa2\x0c\x51\x86"
      "\x28\x63\x94\x31\xca\x1c\x65\x8e\x12\x51\x22\xca\x12\x65\x89\xb2\x46\xd7"
      "\x47\xd9\xa2\xec\x51\x8e\x28\x67\x94\x2b\xca\x1d\xa5\x82\x8d\x28\x72\x11"
      "\x47\x71\x94\x37\xca\x17\x25\xa3\x1b\xa2\xfc\xd1\x8d\x51\x81\xa8\x60\x54"
      "\x28\x2a\x1c\xf9\xa8\x48\x54\x34\xba\x29\x2a\x16\xdd\x1c\x15\x8f\x6e\x89"
      "\x4a\x44\xb7\x46\x25\xa3\xdb\xa2\x52\x51\xe9\xa8\x4c\x54\x36\xba\x3d\x2a"
      "\x17\xdd\x11\x95\x8f\x2a\x44\x15\xa3\x3b\xa3\x4a\xd1\x5d\x51\xe5\xa8\x4a"
      "\x74\x77\x54\x35\xba\x27\xaa\x16\xdd\x1b\x55\x8f\xee\x8b\x6a\x44\xf7\x47"
      "\x35\xa3\x07\xa2\x5a\xd1\x83\x51\xed\xe8\xa1\xa8\x4e\xf4\x70\x54\x37\x7a"
      "\x24\xaa\x17\x3d\x1a\xd5\x8f\x1a\x44\x0d\xa3\x46\x51\xe3\x3f\xb5\x7e\x08"
      "\x67\xb2\x3f\xee\xbb\xd8\xae\x36\xd5\x76\xb3\xdd\xed\xcb\xb6\x87\xed\x69"
      "\x7b\xd9\xde\xb6\x8f\x7d\xc5\xf6\xb5\xaf\xda\x7e\xf6\x35\xdb\xdf\x0e\xb0"
      "\x03\xed\xeb\x76\x90\x7d\xc3\x0e\xb6\x6f\xda\x21\x76\xa8\x1d\x66\xdf\xb2"
      "\xc3\xed\x08\x3b\xd2\x8e\xb2\xa3\xed\x18\x3b\xd6\xbe\x6d\xc7\xd9\x77\xec"
      "\x78\xfb\xae\x9d\x60\x27\xda\x49\x76\xb2\x9d\x62\xa7\xda\x69\xf6\x3d\x3b"
      "\xdd\xce\xb0\x33\xed\xfb\x76\x96\xfd\xc0\xce\xb6\x73\xec\x5c\x3b\xcf\xce"
      "\xb7\x1f\xda\x05\x76\xa1\x5d\x64\x3f\xb2\x8b\xed\xc7\x76\x89\x5d\x6a\x97"
      "\xd9\xe5\x76\x85\x5d\x69\x57\xd9\xd5\x76\x8d\x5d\x6b\xd7\xd9\xf5\x76\x83"
      "\xdd\x68\x37\xd9\xcd\x76\x8b\xfd\xc4\x6e\xb5\xdb\xec\x76\xbb\xc3\xee\xb4"
      "\xbb\xec\x6e\xfb\xa9\xdd\x63\xf7\xda\x7d\xf6\x33\xbb\xdf\x7e\x6e\x0f\xd8"
      "\xbf\xd8\x83\xf6\x0b\x7b\xc8\x7e\x69\x0f\xdb\xaf\xec\x11\xfb\xb5\x3d\x6a"
      "\xbf\xb1\xc7\xec\xb7\xf6\xb8\xfd\xce\x9e\xb0\x27\xed\x29\xfb\xbd\x3d\x6d"
      "\x7f\xb0\x67\xec\x59\x7b\xce\xfe\x68\xcf\xdb\x9f\xec\x05\xfb\xb3\xbd\x68"
      "\xc3\xa5\x8b\xfb\x4b\x1f\xef\x64\xc8\x50\x3a\x4a\x47\x29\x94\x42\x19\x28"
      "\x03\x65\xa4\x8c\x94\x99\x32\x53\x82\x12\x94\x85\xb2\x50\x56\xca\x4a\xd9"
      "\x28\x1b\xe5\xa0\x1c\x94\x8b\x72\x51\x1e\xca\x43\x97\x30\x31\xe5\xa5\xbc"
      "\x94\xa4\x24\xe5\xa7\xfc\x54\x80\x0a\x50\x21\x2a\x44\x9e\x3c\x15\xa5\xa2"
      "\x54\x8c\x8a\x51\x71\x2a\x4e\x25\xa8\x04\x95\xa4\x92\x54\x8a\x4a\x51\x19"
      "\x2a\x43\xb7\xd3\xed\x74\x07\xdd\x41\x15\xa8\x02\xdd\x49\x77\xd2\x5d\x74"
      "\x17\x55\xa1\x2a\x54\x95\xaa\x52\x35\xaa\x46\xd5\xa9\x3a\xd5\xa0\x1a\x54"
      "\x93\x6a\x52\x2d\xaa\x45\xb5\xa9\x36\xd5\xa1\x3a\x54\x97\xea\x52\x3d\xaa"
      "\x47\xf5\xa9\x3e\x35\xa4\x86\xd4\x98\x1a\x53\x13\x6a\x42\x4d\xa9\x29\x35"
      "\xa7\xe6\xd4\x82\x5a\x50\x4b\x6a\x49\xad\xa8\x15\xb5\xa6\xd6\xd4\x86\xda"
      "\x50\x5b\x6a\x4b\xed\xa8\x1d\xb5\xa7\xf6\xd4\x81\x3a\x50\x27\xea\x44\x9d"
      "\xa9\x33\x75\xa1\x2e\x94\x4a\xa9\xd4\x9d\xba\x53\x0f\xea\x41\xbd\xa8\x17"
      "\xf5\xa1\x3e\xd4\x97\xfa\x52\x3f\xea\x47\xfd\xa9\x3f\x0d\xa4\x81\x34\x88"
      "\x06\xd1\x60\x1a\x4c\x43\x68\x28\x0d\xa3\xb7\x68\x38\x8d\xa0\x91\x34\x8a"
      "\x46\xd3\x18\x1a\x4b\x63\x69\x1c\x8d\xa3\xf1\x34\x9e\x26\xd0\x04\x9a\x44"
      "\x93\x68\x0a\x4d\xa1\x69\x34\x8d\xa6\xd3\x74\x9a\x49\x33\x69\x16\xcd\xa2"
      "\xd9\x34\x9b\xe6\xd2\x5c\x9a\x4f\xf3\x69\x01\x2d\xa0\x45\xb4\x88\x16\xd3"
      "\x62\x5a\x42\x4b\x68\x19\x2d\xa3\x15\xb4\x82\x56\xd1\x2a\x5a\x43\x6b\x68"
      "\x1d\xad\xa3\x0d\xb4\x81\x36\xd1\x26\xda\x42\x5b\x68\x2b\x6d\xa5\xed\xb4"
      "\x9d\x76\xd2\x4e\xda\x4d\xbb\x69\x0f\xed\xa1\x7d\xb4\x8f\xf6\xd3\x7e\x3a"
      "\x40\x07\xe8\x20\x1d\xa4\x43\x74\x88\x0e\xd3\x61\x3a\x42\x47\xe8\x28\x1d"
      "\xa5\x63\x74\x8c\x8e\xd3\x71\x3a\x41\x27\xe8\x14\x9d\xa2\xd3\x74\x9a\xce"
      "\xd0\x19\x3a\x47\xe7\xe8\x3c\xfd\x44\x17\xe8\x67\xba\x48\x81\x52\x9c\x82"
      "\x0c\xee\x6a\x97\xd1\x65\x72\x99\xdd\x35\x2e\xc5\xa5\x77\x19\xdc\x5f\x2f"
      "\x98\x2e\xc5\x39\x5c\x4e\x97\xcb\xe5\x76\x79\x9c\x75\xd9\x5c\xf6\xbf\x8b"
      "\xc9\x39\x57\xc0\x15\x74\x85\x5c\x61\xe7\x5d\x11\x57\xd4\xdd\xf4\x9b\xb8"
      "\x94\x2b\xed\xca\xb8\xb2\xee\x76\x57\xce\xdd\xe1\xca\xff\x26\xae\xea\xee"
      "\x71\xd5\xdc\xbd\xae\xba\xbb\xcf\x55\x71\x77\xff\x5d\x5c\xc3\xdd\xef\x6a"
      "\xba\x47\x5c\x2d\xf7\xa8\xab\xed\x1a\xb8\x3a\xae\x91\xab\xeb\x1e\x71\xf5"
      "\xdc\xa3\xae\xbe\x6b\xe0\x1a\xba\x46\xae\x85\x7b\xd2\xb5\x74\x4f\xb9\x56"
      "\xee\x69\xd7\xda\x3d\xf3\x9b\x78\x81\x5b\xe8\xd6\xb8\xb5\x6e\x9d\x5b\xef"
      "\xf6\xb8\xbd\xee\x9c\xfb\xd1\x1d\x75\xdf\xb8\xf3\xee\x27\xd7\xc5\x75\x75"
      "\x7d\xdc\x2b\xae\xaf\x7b\xd5\xf5\x73\xaf\xb9\xfe\x6e\xc0\x6f\xe2\x61\xee"
      "\x2d\x37\xdc\x8d\x70\x23\xdd\x28\x37\xda\x8d\xf9\x4d\x3c\xc9\x4d\x76\x53"
      "\xdc\x54\x37\xcd\xbd\xe7\xa6\xbb\x19\xbf\x89\xe7\xbb\x0f\xdd\x2c\xb7\xc8"
      "\xcd\x76\x73\xdc\x5c\x37\xef\x97\xf8\x52\x4f\x8b\xdc\x47\x6e\xb1\xfb\xd8"
      "\x2d\x71\x4b\xdd\x32\xb7\xdc\xad\x70\x2b\xdd\x2a\xb7\xfa\xff\xf7\xba\xdc"
      "\x6d\x74\x9b\xdc\x66\xb7\xdb\x7d\xea\xb6\xba\x6d\x6e\xbb\xdb\xe1\x76\xba"
      "\x5d\xbf\xc4\x97\xce\x63\x9f\xfb\xcc\xed\x77\x9f\xbb\x23\xee\x6b\x77\xd0"
      "\x7d\xe1\x0e\xb9\x63\xee\xb0\xfb\xea\x97\xf8\xd2\xf9\x1d\x73\xdf\xba\xe3"
      "\xee\x3b\x77\xc2\x9d\x74\xa7\xdc\xf7\xee\xb4\xfb\xc1\x9d\x71\x67\x7f\x39"
      "\xff\x4b\xe7\xfe\xbd\xfb\xd9\x5d\x74\xc1\x01\x23\x2b\xd6\x6c\x38\xe2\x74"
      "\x7c\x15\xa7\x70\x7a\xce\xc0\x57\x73\x46\xce\xc4\x99\xf9\x1a\x4e\xf0\xb5"
      "\x9c\x85\xaf\xe3\xac\x7c\x3d\x67\xe3\xec\x9c\x83\x73\x72\x2e\xce\xcd\x79"
      "\xd8\x32\xb1\x63\xe6\x98\xf3\x72\x3e\x4e\xf2\x0d\x9c\x9f\x6f\xe4\x02\x5c"
      "\x90\x0b\x71\x61\xf6\x5c\x84\x8b\xf2\x4d\x5c\x8c\x6f\xe6\xe2\x7c\x0b\x97"
      "\xe0\x5b\xb9\x24\xdf\xc6\xa5\xb8\x34\x97\xe1\xb2\x7c\x3b\x97\xe3\x3b\xb8"
      "\x3c\x57\xe0\x8a\x7c\x27\x57\x0a\x81\x2b\x73\x15\xbe\x9b\xab\xf2\x3d\x5c"
      "\x8d\xef\xe5\xea\x7c\x1f\xd7\xe0\xfb\xb9\x26\x3f\xc0\xb5\xf8\x41\xae\xcd"
      "\x0f\x71\x1d\x7e\x98\xeb\xf2\x23\x5c\x8f\x1f\xe5\xfa\xdc\x80\x1b\x72\x23"
      "\x6e\xcc\x8f\x71\x13\x7e\x9c\x9b\x72\x33\x6e\xce\x4f\x70\x0b\x7e\x92\x5b"
      "\xf2\x53\xdc\x8a\x9f\xe6\xd6\xfc\x0c\xb7\xe1\x67\xb9\x2d\x3f\xc7\xed\xf8"
      "\x79\x6e\xcf\x2f\x70\x07\xee\xc8\x9d\xf8\x45\xee\xcc\x2f\x71\x17\xee\xca"
      "\xa9\xdc\x8d\xbb\xf3\xcb\xdc\x83\x7b\x72\x2f\xee\xcd\x7d\xf8\x15\xee\xcb"
      "\xaf\x72\x3f\x7e\x8d\xfb\xf3\x00\x1e\xc8\xaf\xf3\x20\x7e\x83\x07\xf3\x9b"
      "\x3c\x84\x87\xf2\x30\x7e\x8b\x87\xf3\x08\x1e\xc9\xa3\x78\x34\x8f\xe1\xb1"
      "\xfc\x36\x8f\xe3\x77\x78\x3c\xbf\xcb\x13\x78\x22\x4f\xe2\xc9\x3c\x85\xa7"
      "\xf2\x34\x7e\x8f\xa7\xf3\x0c\x9e\xc9\xef\xf3\x2c\xfe\x80\x67\xf3\x1c\x9e"
      "\xcb\xf3\x78\x3e\x7f\xc8\x0b\x78\x21\x2f\xe2\x8f\x78\x31\x7f\xcc\x4b\x78"
      "\x29\x2f\xe3\xe5\xbc\x82\x57\xf2\x2a\x5e\xcd\x6b\x78\x2d\xaf\xe3\xf5\xbc"
      "\x81\x37\xf2\x26\xde\xcc\x5b\xf8\x13\xde\xca\xdb\x78\x3b\xef\xe0\x9d\xbc"
      "\x8b\x77\xf3\xa7\xbc\x87\xf7\xf2\x3e\xfe\x8c\xf7\xf3\xe7\x7c\x80\xff\xc2"
      "\x07\xf9\x0b\x3e\xc4\x5f\xf2\x61\xfe\x8a\x8f\xf0\xd7\x7c\x94\xbf\xe1\x63"
      "\xfc\x2d\x1f\xe7\xef\xf8\x04\x9f\xe4\x53\xfc\x3d\x9f\xe6\x1f\xf8\x0c\x9f"
      "\xe5\x73\xfc\x23\x9f\xe7\x9f\xf8\x02\xff\xcc\x17\x39\x30\xc4\x18\xab\x58"
      "\xc7\x26\x8e\xe2\x74\xf1\x55\x71\x4a\x9c\x3e\xce\x10\x5f\x1d\x67\x8c\x33"
      "\xc5\x99\xe3\x6b\xe2\x44\x7c\x6d\x9c\x25\xbe\x2e\xce\x1a\x5f\x1f\x67\x8b"
      "\xb3\xc7\x39\xe2\x9c\x71\xae\x38\x77\x9c\x27\xb6\x31\xc5\x2e\xe6\x38\x8e"
      "\xf3\xc6\xf9\xe2\x64\x7c\x43\x9c\x3f\xbe\x31\x2e\x10\x17\x8c\x0b\xc5\x85"
      "\x63\x1f\x17\x89\x8b\xc6\x37\xc5\xc5\xe2\x9b\xe3\xe2\xf1\x2d\x71\x89\xf8"
      "\xd6\xb8\x64\x7c\x5b\x5c\x2a\x2e\x1d\x3f\x72\x5f\xd9\xf8\xf6\xb8\x5c\x7c"
      "\x47\x5c\x3e\xae\x10\x57\x8c\xef\x8c\x2b\xc5\x77\xc5\x95\xe3\x2a\xf1\xdd"
      "\x71\xd5\xf8\x9e\xb8\x5a\x7c\x6f\x5c\x3d\xbe\x2f\x2e\x1e\xdf\x1f\xd7\x8c"
      "\x1f\x88\x6b\xc5\x0f\xc6\xb5\xe3\x87\xe2\x3a\xf1\xc3\x71\xdd\xf8\x91\xb8"
      "\x5e\xfc\x68\x5c\x3f\x6e\x10\x37\x8c\x1b\xc5\x8d\xe3\xc7\xe2\x26\xf1\xe3"
      "\x71\xd3\xb8\x59\xdc\x3c\x7e\x22\x6e\x11\x3f\x19\xb7\x8c\x9f\x8a\x5b\xc5"
      "\x4f\xc7\xad\xe3\x67\x7e\x77\x7f\x6a\xdc\x2d\xee\x1e\xbf\x1c\xbf\x1c\x87"
      "\x70\xaf\x9e\x9b\x9c\x97\x9c\x9f\xfc\x30\xb9\x20\xb9\x30\xb9\x28\xf9\x51"
      "\x72\x71\xf2\xe3\xe4\x92\xe4\xd2\xe4\xb2\xe4\xf2\xe4\x8a\xe4\xca\xe4\xaa"
      "\xe4\xea\xe4\x9a\xe4\xda\xe4\xba\xe4\xfa\xe4\x86\xe4\xc6\xe4\xa6\xe4\xe6"
      "\x64\x08\x55\xae\x02\x8f\x5e\x79\xed\x8d\x8f\x7c\x3a\x7f\x95\x4f\xf1\xe9"
      "\x7d\x06\x7f\xb5\xcf\xe8\x33\xf9\xcc\xfe\x1a\x9f\xf0\xd7\xfa\x2c\xfe\x3a"
      "\x9f\xd5\x5f\xef\xb3\xf9\xec\x3e\x87\xcf\xe9\x73\xf9\xdc\x3e\x8f\xb7\x9e"
      "\xbc\xf3\xec\x63\x9f\xd7\xe7\xf3\x49\x7f\x83\xcf\xef\x6f\xf4\x05\x7c\x41"
      "\x5f\xc8\x17\xf6\xde\x17\xf1\x45\x7d\x23\xdf\xd8\x37\xf6\x4d\xfc\xe3\xbe"
      "\xa9\x6f\xe6\x9b\xfb\x27\xfc\x13\xfe\x49\xff\xa4\x7f\xca\x3f\xe5\x9f\xf6"
      "\xad\xfd\x33\xbe\x8d\x7f\xd6\xb7\xf5\xcf\xf9\x76\xfe\x79\xff\xbc\x7f\xc1"
      "\x77\xf0\x1d\x7d\x27\xff\xa2\xef\xec\x5f\xf2\x5d\x7c\x57\x9f\xea\x53\x7d"
      "\x77\xdf\xdd\xf7\xf0\x3d\x7c\x2f\xdf\xcb\xf7\xf1\x7d\x7c\x5f\xdf\xd7\xf7"
      "\xf3\xfd\x7c\x7f\xdf\xdf\x0f\xf4\x03\xfd\x20\x3f\xc8\x0f\xf6\x83\xfd\x10"
      "\x3f\xc4\x0f\xf3\xc3\xfc\x70\x3f\xdc\x8f\xf4\x23\xfd\x68\x3f\xda\x8f\xf5"
      "\x63\xfd\x38\x3f\xce\x8f\xf7\xe3\xfd\x04\x3f\xc1\x4f\xf2\x93\xfc\x14\x3f"
      "\xc5\x4f\xf3\xd3\xfc\x74\x3f\xdd\xcf\xf4\x33\xfd\xac\x02\xb3\xfc\x6c\x3f"
      "\xdb\xcf\xf5\x73\xfd\x7c\x3f\xdf\x2f\xf0\x0b\xfc\x22\xbf\xc8\x2f\xf6\x8b"
      "\xfd\x12\xbf\xc4\x2f\xf3\xcb\xfc\x0a\xbf\xc2\xaf\xf2\xab\xfc\x1a\xbf\xc6"
      "\xaf\xf3\xeb\xfc\x06\xbf\xc1\x6f\xf2\x9b\xfc\x16\xbf\xc5\x6f\xf5\x5b\xfd"
      "\x76\xbf\xdd\xef\xf4\x3b\xfd\x6e\xbf\xdb\xef\xf1\x7b\xfc\x3e\xbf\xcf\xef"
      "\xf7\xfb\xfd\x01\x7f\xc0\x1f\xf4\x07\xfd\x21\xff\xa5\x3f\xec\xbf\xf2\x47"
      "\xfc\xd7\xfe\xa8\xff\xc6\x1f\xf3\xdf\xfa\xe3\xfe\x3b\x7f\xc2\x9f\xf4\xa7"
      "\xfc\xf7\xfe\xb4\xff\xc1\x9f\xf1\x67\xfd\x39\xff\xa3\x3f\xef\x7f\xf2\x17"
      "\xfc\xcf\xfe\xa2\x0f\x7e\x6c\xe2\xed\xc4\xb8\xc4\x3b\x89\xf1\x89\x77\x13"
      "\x13\x12\x13\x13\x93\x12\x93\x13\x53\x12\x53\x13\xd3\x12\xef\x25\xa6\x27"
      "\x66\x24\x66\x26\xde\x4f\xcc\x4a\x7c\x90\x98\x9d\x98\x93\x98\x9b\x98\x97"
      "\x98\x9f\xf8\x30\xb1\x20\xb1\x30\xb1\x28\xf1\x51\x62\x71\xe2\xe3\xc4\x92"
      "\xc4\xd2\xc4\xb2\xc4\xf2\xc4\x8a\xc4\xca\x44\x08\xb9\xb7\xc6\x21\x6f\xc8"
      "\x17\x92\xe1\x86\x90\x3f\xdc\x18\x0a\x84\x82\xa1\x50\x28\x1c\x7c\x28\x12"
      "\x8a\x86\x9b\x42\xb1\x70\x73\x28\x1e\x6e\x09\x25\xc2\xad\xa1\x64\xb8\x2d"
      "\x94\x0a\xa5\x43\x99\xf0\x68\xa8\x1f\x1a\x84\x86\xa1\x51\x68\x1c\x1e\x0b"
      "\x4d\xc2\xe3\xa1\x69\x68\x16\x9a\x87\x27\x42\x8b\xf0\x64\x68\x19\x9e\x0a"
      "\xad\xc2\xd3\xa1\x75\x78\x26\xb4\x09\xcf\x86\xb6\xe1\xb9\xd0\x2e\x3c\x1f"
      "\xda\x87\x17\x42\x87\xd0\x31\x74\x0a\x2f\x86\xce\xe1\xa5\xd0\x25\x74\x0d"
      "\xa9\xa1\x5b\xe8\x1e\x5e\x0e\x3d\x42\xcf\xd0\x2b\xf4\x0e\x7d\xc2\x2b\xa1"
      "\x6f\x78\x35\xf4\x0b\xaf\x85\xfe\x61\x40\x18\x18\x5e\x0f\x83\xc2\x1b\x61"
      "\x70\x78\x33\x0c\x09\x43\xc3\xb0\xf0\x56\x18\x1e\x46\x84\x91\x61\x54\x18"
      "\x1d\xc6\x84\xb1\xe1\xed\x30\x2e\xbc\x13\xc6\x87\x77\xc3\x84\x30\x31\x4c"
      "\x0a\x93\xc3\x94\x30\x35\x4c\x0b\xef\x85\xe9\x61\x46\x98\x19\xde\x0f\xb3"
      "\xc2\x07\x61\x76\x98\x13\xe6\x86\x79\x61\x7e\xf8\x30\x2c\x08\x0b\xc3\xa2"
      "\xf0\x51\x58\x1c\x3e\x0e\x4b\xc2\xd2\xb0\x2c\x2c\x0f\x2b\xc2\xca\xb0\x2a"
      "\xac\x0e\x6b\xc2\xda\xb0\x2e\xac\x0f\x1b\xc2\xc6\xb0\x29\x6c\x0e\x5b\xc2"
      "\x27\x61\x6b\xd8\x16\xb6\x87\x1d\x61\x67\xd8\x15\x76\x87\x4f\xc3\x9e\xb0"
      "\x37\xec\x0b\x9f\x85\xfd\xe1\xf3\x70\x20\xfc\x25\x1c\x0c\x5f\x84\x43\xe1"
      "\xcb\x70\x38\x7c\x15\x8e\x84\xaf\xc3\xd1\xf0\x4d\x38\x16\xbe\x0d\xc7\xc3"
      "\x77\xe1\x44\x38\x19\x4e\x85\xef\xc3\xe9\xf0\x43\x38\x13\xce\x86\x73\xe1"
      "\xc7\x70\x3e\xfc\x14\x2e\x84\x9f\xc3\x45\xf9\x9b\x35\x21\x84\x10\x42\x88"
      "\x3f\x44\xff\xce\xfe\x6e\xff\xe0\x7b\xe9\x00\x40\xfd\xba\xee\x0e\x00\x99"
      "\xb6\xe5\x3c\xfc\xef\x6b\x6e\xc8\xf6\xd7\x75\x4f\x95\xab\x45\x02\x00\x9e"
      "\xee\xda\xfe\xa1\xbf\x6d\x95\x2a\xa5\xa6\xa6\xfe\xfa\xda\x25\x1a\xa2\x7c"
      "\x73\x00\x20\xf1\xf7\xf5\xff\x16\x2f\x85\xe6\xf0\x24\xb4\x82\x66\x50\xec"
      "\x1f\xf6\xd7\x53\x75\x3c\xcf\xbf\x53\x3f\x79\x2b\x40\x86\x7f\x93\x93\x02"
      "\x97\xe3\xcb\xf5\x6f\xfe\x0f\xea\x3f\xf6\xc4\xb0\x05\x25\xe3\x73\x59\xfe"
      "\x93\xfa\x73\x00\x0a\xe4\xbb\x9c\x93\x1e\x2e\xc7\x97\xeb\x17\xff\x0f\xea"
      "\x67\x6f\xf2\x3b\xfd\xa7\xff\x62\x2c\x40\xd3\x7f\x93\x93\x11\x2e\xc7\x97"
      "\xeb\x17\x85\xc7\xe1\x19\x68\xf5\x77\xaf\xfc\x03\x03\x16\x42\x08\x21\x84"
      "\x10\x42\x08\x91\x26\xf4\x54\x65\xda\xfe\xde\xfd\xf3\xa5\xfb\xf3\x5c\xe6"
      "\x72\xce\x55\x70\x39\xfe\xbd\xfb\x73\x21\x84\x10\x42\x08\x21\x84\x10\x42"
      "\x5c\x79\xcf\x75\xec\xf4\xd4\x63\xad\x5a\x35\x6b\xfb\xc7\x16\xf8\xeb\x73"
      "\x81\x7f\x2e\xeb\x4f\x5b\xd4\xda\xb6\xf7\xd9\x4b\x87\xbf\x32\x47\x97\xc5"
      "\x7f\x79\x81\x00\xf0\xbf\xa0\x0d\x59\xfc\xf1\xc5\x15\x7e\x63\x12\x42\x08"
      "\x21\x84\x10\x42\xfc\xe9\x2e\x5f\xf4\x5f\xe9\x4e\x84\x10\x42\x08\x21\x84"
      "\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08"
      "\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x88\xb4\xeb\x7f"
      "\xe2\xdf\x89\x5d\xe9\x73\x14\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42"
      "\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84"
      "\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08\x21\x84\x10\x42\x08"
      "\x21\xae\xb4\xff\x17\x00\x00\xff\xff\x75\xa0\x35\x6d",
      5395));
  NONFAILING(syz_mount_image(/*fs=*/0x200000000000, /*dir=*/0x200000000240,
                             /*flags=*/0, /*opts=*/0x2000000000c0, /*chdir=*/1,
                             /*size=*/0x1513, /*img=*/0x200000002d00));
  //  mkdir arguments: [
  //    path: ptr[in, buffer] {
  //      buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8)
  //    }
  //    mode: open_mode = 0x170 (8 bytes)
  //  ]
  NONFAILING(memcpy((void*)0x200000000180, "./file0\000", 8));
  syscall(__NR_mkdir, /*path=*/0x200000000180ul,
          /*mode=S_IWGRP|S_IRGRP|S_IXUSR|S_IRUSR*/ 0x170ul);
  //  mkdir arguments: [
  //    path: ptr[in, buffer] {
  //      buffer: {2e 2f 62 75 73 00} (length 0x6)
  //    }
  //    mode: open_mode = 0x0 (8 bytes)
  //  ]
  NONFAILING(memcpy((void*)0x200000005900, "./bus\000", 6));
  syscall(__NR_mkdir, /*path=*/0x200000005900ul, /*mode=*/0ul);
  //  syz_mount_image$ext4 arguments: [
  //    fs: nil
  //    dir: ptr[in, buffer] {
  //      buffer: {2e 2f 62 75 73 2f 66 69 6c 65 30 00} (length 0xc)
  //    }
  //    flags: mount_flags = 0x80008 (8 bytes)
  //    opts: nil
  //    chdir: int8 = 0x0 (1 bytes)
  //    size: len = 0x0 (8 bytes)
  //    img: ptr[in, buffer] {
  //      buffer: (compressed buffer with length 0x0)
  //    }
  //  ]
  //  returns fd_dir
  NONFAILING(memcpy((void*)0x2000000000c0, "./bus/file0\000", 12));
  NONFAILING(syz_mount_image(/*fs=*/0, /*dir=*/0x2000000000c0,
                             /*flags=MS_SLAVE|MS_NOEXEC*/ 0x80008, /*opts=*/0,
                             /*chdir=*/0, /*size=*/0, /*img=*/0x200000000000));
  //  chdir arguments: [
  //    dir: ptr[in, buffer] {
  //      buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8)
  //    }
  //  ]
  NONFAILING(memcpy((void*)0x200000000400, "./file0\000", 8));
  syscall(__NR_chdir, /*dir=*/0x200000000400ul);
  //  mkdir arguments: [
  //    path: ptr[in, buffer] {
  //      buffer: {2e 2f 62 75 73 00} (length 0x6)
  //    }
  //    mode: open_mode = 0x10b (8 bytes)
  //  ]
  NONFAILING(memcpy((void*)0x200000000040, "./bus\000", 6));
  syscall(__NR_mkdir, /*path=*/0x200000000040ul,
          /*mode=S_IXOTH|S_IWOTH|S_IXGRP|S_IRUSR*/ 0x10bul);
  //  chdir arguments: [
  //    dir: ptr[in, buffer] {
  //      buffer: {2e 2f 62 75 73 00} (length 0x6)
  //    }
  //  ]
  NONFAILING(memcpy((void*)0x2000000003c0, "./bus\000", 6));
  syscall(__NR_chdir, /*dir=*/0x2000000003c0ul);
  //  syz_mount_image$exfat arguments: [
  //    fs: nil
  //    dir: ptr[in, buffer] {
  //      buffer: {2e 2f 62 75 73 00} (length 0x6)
  //    }
  //    flags: mount_flags = 0x104880 (8 bytes)
  //    opts: nil
  //    chdir: int8 = 0x1 (1 bytes)
  //    size: len = 0x0 (8 bytes)
  //    img: ptr[in, buffer] {
  //      buffer: (compressed buffer with length 0x0)
  //    }
  //  ]
  //  returns fd_dir
  NONFAILING(memcpy((void*)0x200000000100, "./bus\000", 6));
  NONFAILING(syz_mount_image(
      /*fs=*/0, /*dir=*/0x200000000100,
      /*flags=MS_SHARED|MS_REC|MS_NODIRATIME|MS_DIRSYNC*/ 0x104880, /*opts=*/0,
      /*chdir=*/1, /*size=*/0, /*img=*/0x200000000200));
  //  syz_mount_image$ext4 arguments: [
  //    fs: nil
  //    dir: ptr[in, buffer] {
  //      buffer: {2e 2f 62 75 73 2f 66 69 6c 65 30 00} (length 0xc)
  //    }
  //    flags: mount_flags = 0x80000 (8 bytes)
  //    opts: nil
  //    chdir: int8 = 0x1 (1 bytes)
  //    size: len = 0x0 (8 bytes)
  //    img: ptr[in, buffer] {
  //      buffer: (compressed buffer with length 0x0)
  //    }
  //  ]
  //  returns fd_dir
  NONFAILING(memcpy((void*)0x2000000000c0, "./bus/file0\000", 12));
  NONFAILING(syz_mount_image(/*fs=*/0, /*dir=*/0x2000000000c0,
                             /*flags=MS_SLAVE*/ 0x80000, /*opts=*/0,
                             /*chdir=*/1, /*size=*/0, /*img=*/0x200000000000));
  //  openat arguments: [
  //    fd: fd_dir (resource)
  //    file: ptr[in, buffer] {
  //      buffer: {2e 00} (length 0x2)
  //    }
  //    flags: open_flags = 0x101800 (4 bytes)
  //    mode: open_mode = 0x145 (2 bytes)
  //  ]
  //  returns fd
  NONFAILING(memcpy((void*)0x200000000000, ".\000", 2));
  res = syscall(__NR_openat, /*fd=*/0xffffff9c, /*file=*/0x200000000000ul,
                /*flags=O_SYNC|O_NONBLOCK*/ 0x101800,
                /*mode=S_IXOTH|S_IROTH|S_IXUSR|S_IRUSR*/ 0x145);
  if (res != -1)
    r[0] = res;
  //  renameat2 arguments: [
  //    oldfd: fd_dir (resource)
  //    old: ptr[in, buffer] {
  //      buffer: {2e 2f 62 75 73 2f 66 69 6c 65 30 00} (length 0xc)
  //    }
  //    newfd: fd_dir (resource)
  //    new: ptr[in, buffer] {
  //      buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8)
  //    }
  //    flags: renameat2_flags = 0x4 (8 bytes)
  //  ]
  NONFAILING(memcpy((void*)0x2000000001c0, "./bus/file0\000", 12));
  NONFAILING(memcpy((void*)0x200000000140, "./file0\000", 8));
  syscall(__NR_renameat2, /*oldfd=*/r[0], /*old=*/0x2000000001c0ul,
          /*newfd=*/r[0], /*new=*/0x200000000140ul,
          /*flags=RENAME_WHITEOUT*/ 4ul);
}
int main(void)
{
  syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000ul,
          /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  const char* reason;
  (void)reason;
  install_segv_handler();
  loop();
  return 0;
}