// https://syzkaller.appspot.com/bug?id=81d64408e8ffdbe2e7685561e34fe5de33877acb
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <dirent.h>
#include <endian.h>
#include <errno.h>
#include <fcntl.h>
#include <signal.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stddef.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/mount.h>
#include <sys/prctl.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <time.h>
#include <unistd.h>

#include <linux/usb/ch9.h>

unsigned long long procid;

static void sleep_ms(uint64_t ms)
{
  usleep(ms * 1000);
}

static uint64_t current_time_ms(void)
{
  struct timespec ts;
  if (clock_gettime(CLOCK_MONOTONIC, &ts))
    exit(1);
  return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
}

static bool write_file(const char* file, const char* what, ...)
{
  char buf[1024];
  va_list args;
  va_start(args, what);
  vsnprintf(buf, sizeof(buf), what, args);
  va_end(args);
  buf[sizeof(buf) - 1] = 0;
  int len = strlen(buf);
  int fd = open(file, O_WRONLY | O_CLOEXEC);
  if (fd == -1)
    return false;
  if (write(fd, buf, len) != len) {
    int err = errno;
    close(fd);
    errno = err;
    return false;
  }
  close(fd);
  return true;
}

#define USB_DEBUG 0

#define USB_MAX_EP_NUM 32

struct usb_device_index {
  struct usb_device_descriptor* dev;
  struct usb_config_descriptor* config;
  unsigned config_length;
  struct usb_interface_descriptor* iface;
  struct usb_endpoint_descriptor* eps[USB_MAX_EP_NUM];
  unsigned eps_num;
};

static bool parse_usb_descriptor(char* buffer, size_t length,
                                 struct usb_device_index* index)
{
  if (length <
      sizeof(*index->dev) + sizeof(*index->config) + sizeof(*index->iface))
    return false;
  index->dev = (struct usb_device_descriptor*)buffer;
  index->config = (struct usb_config_descriptor*)(buffer + sizeof(*index->dev));
  index->config_length = length - sizeof(*index->dev);
  index->iface =
      (struct usb_interface_descriptor*)(buffer + sizeof(*index->dev) +
                                         sizeof(*index->config));
  index->eps_num = 0;
  size_t offset = 0;
  while (true) {
    if (offset + 1 >= length)
      break;
    uint8_t desc_length = buffer[offset];
    uint8_t desc_type = buffer[offset + 1];
    if (desc_length <= 2)
      break;
    if (offset + desc_length > length)
      break;
    if (desc_type == USB_DT_ENDPOINT) {
      index->eps[index->eps_num] =
          (struct usb_endpoint_descriptor*)(buffer + offset);
      index->eps_num++;
    }
    if (index->eps_num == USB_MAX_EP_NUM)
      break;
    offset += desc_length;
  }
  return true;
}

enum usb_fuzzer_event_type {
  USB_FUZZER_EVENT_INVALID,
  USB_FUZZER_EVENT_CONNECT,
  USB_FUZZER_EVENT_DISCONNECT,
  USB_FUZZER_EVENT_SUSPEND,
  USB_FUZZER_EVENT_RESUME,
  USB_FUZZER_EVENT_CONTROL,
};

struct usb_fuzzer_event {
  uint32_t type;
  uint32_t length;
  char data[0];
};

struct usb_fuzzer_init {
  uint64_t speed;
  const char* driver_name;
  const char* device_name;
};

struct usb_fuzzer_ep_io {
  uint16_t ep;
  uint16_t flags;
  uint32_t length;
  char data[0];
};

#define USB_FUZZER_IOCTL_INIT _IOW('U', 0, struct usb_fuzzer_init)
#define USB_FUZZER_IOCTL_RUN _IO('U', 1)
#define USB_FUZZER_IOCTL_EVENT_FETCH _IOR('U', 2, struct usb_fuzzer_event)
#define USB_FUZZER_IOCTL_EP0_WRITE _IOW('U', 3, struct usb_fuzzer_ep_io)
#define USB_FUZZER_IOCTL_EP0_READ _IOWR('U', 4, struct usb_fuzzer_ep_io)
#define USB_FUZZER_IOCTL_EP_ENABLE _IOW('U', 5, struct usb_endpoint_descriptor)
#define USB_FUZZER_IOCTL_EP_WRITE _IOW('U', 7, struct usb_fuzzer_ep_io)
#define USB_FUZZER_IOCTL_EP_READ _IOWR('U', 8, struct usb_fuzzer_ep_io)
#define USB_FUZZER_IOCTL_CONFIGURE _IO('U', 9)
#define USB_FUZZER_IOCTL_VBUS_DRAW _IOW('U', 10, uint32_t)

int usb_fuzzer_open()
{
  return open("/sys/kernel/debug/usb-fuzzer", O_RDWR);
}

int usb_fuzzer_init(int fd, uint32_t speed, const char* driver,
                    const char* device)
{
  struct usb_fuzzer_init arg;
  arg.speed = speed;
  arg.driver_name = driver;
  arg.device_name = device;
  return ioctl(fd, USB_FUZZER_IOCTL_INIT, &arg);
}

int usb_fuzzer_run(int fd)
{
  return ioctl(fd, USB_FUZZER_IOCTL_RUN, 0);
}

int usb_fuzzer_event_fetch(int fd, struct usb_fuzzer_event* event)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EVENT_FETCH, event);
}

int usb_fuzzer_ep0_write(int fd, struct usb_fuzzer_ep_io* io)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP0_WRITE, io);
}

int usb_fuzzer_ep0_read(int fd, struct usb_fuzzer_ep_io* io)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP0_READ, io);
}

int usb_fuzzer_ep_write(int fd, struct usb_fuzzer_ep_io* io)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP_WRITE, io);
}

int usb_fuzzer_ep_read(int fd, struct usb_fuzzer_ep_io* io)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP_READ, io);
}

int usb_fuzzer_ep_enable(int fd, struct usb_endpoint_descriptor* desc)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP_ENABLE, desc);
}

int usb_fuzzer_configure(int fd)
{
  return ioctl(fd, USB_FUZZER_IOCTL_CONFIGURE, 0);
}

int usb_fuzzer_vbus_draw(int fd, uint32_t power)
{
  return ioctl(fd, USB_FUZZER_IOCTL_VBUS_DRAW, power);
}

#define USB_MAX_PACKET_SIZE 1024

struct usb_fuzzer_control_event {
  struct usb_fuzzer_event inner;
  struct usb_ctrlrequest ctrl;
  char data[USB_MAX_PACKET_SIZE];
};

struct usb_fuzzer_ep_io_data {
  struct usb_fuzzer_ep_io inner;
  char data[USB_MAX_PACKET_SIZE];
};

struct vusb_connect_string_descriptor {
  uint32_t len;
  char* str;
} __attribute__((packed));

struct vusb_connect_descriptors {
  uint32_t qual_len;
  char* qual;
  uint32_t bos_len;
  char* bos;
  uint32_t strs_len;
  struct vusb_connect_string_descriptor strs[0];
} __attribute__((packed));

static const char* default_string = "syzkaller";

static bool lookup_connect_response(struct vusb_connect_descriptors* descs,
                                    struct usb_device_index* index,
                                    struct usb_ctrlrequest* ctrl,
                                    char** response_data,
                                    uint32_t* response_length)
{
  uint8_t str_idx;
  switch (ctrl->bRequestType & USB_TYPE_MASK) {
  case USB_TYPE_STANDARD:
    switch (ctrl->bRequest) {
    case USB_REQ_GET_DESCRIPTOR:
      switch (ctrl->wValue >> 8) {
      case USB_DT_DEVICE:
        *response_data = (char*)index->dev;
        *response_length = sizeof(*index->dev);
        return true;
      case USB_DT_CONFIG:
        *response_data = (char*)index->config;
        *response_length = index->config_length;
        return true;
      case USB_DT_STRING:
        str_idx = (uint8_t)ctrl->wValue;
        if (str_idx >= descs->strs_len) {
          *response_data = (char*)default_string;
          *response_length = strlen(default_string);
        } else {
          *response_data = descs->strs[str_idx].str;
          *response_length = descs->strs[str_idx].len;
        }
        return true;
      case USB_DT_BOS:
        *response_data = descs->bos;
        *response_length = descs->bos_len;
        return true;
      case USB_DT_DEVICE_QUALIFIER:
        *response_data = descs->qual;
        *response_length = descs->qual_len;
        return true;
      default:
        exit(1);
        return false;
      }
      break;
    default:
      exit(1);
      return false;
    }
    break;
  default:
    exit(1);
    return false;
  }
  return false;
}

static volatile long syz_usb_connect(volatile long a0, volatile long a1,
                                     volatile long a2, volatile long a3)
{
  uint64_t speed = a0;
  uint64_t dev_len = a1;
  char* dev = (char*)a2;
  struct vusb_connect_descriptors* descs = (struct vusb_connect_descriptors*)a3;
  if (!dev) {
    return -1;
  }
  struct usb_device_index index;
  memset(&index, 0, sizeof(index));
  int rv = 0;
  rv = parse_usb_descriptor(dev, dev_len, &index);
  if (!rv) {
    return rv;
  }
  int fd = usb_fuzzer_open();
  if (fd < 0) {
    return fd;
  }
  char device[32];
  sprintf(&device[0], "dummy_udc.%llu", procid);
  rv = usb_fuzzer_init(fd, speed, "dummy_udc", &device[0]);
  if (rv < 0) {
    return rv;
  }
  rv = usb_fuzzer_run(fd);
  if (rv < 0) {
    return rv;
  }
  bool done = false;
  while (!done) {
    struct usb_fuzzer_control_event event;
    event.inner.type = 0;
    event.inner.length = sizeof(event.ctrl);
    rv = usb_fuzzer_event_fetch(fd, (struct usb_fuzzer_event*)&event);
    if (rv < 0) {
      return rv;
    }
    if (event.inner.type != USB_FUZZER_EVENT_CONTROL)
      continue;
    bool response_found = false;
    char* response_data = NULL;
    uint32_t response_length = 0;
    if (event.ctrl.bRequestType & USB_DIR_IN) {
      response_found = lookup_connect_response(
          descs, &index, &event.ctrl, &response_data, &response_length);
      if (!response_found) {
        return -1;
      }
    } else {
      if ((event.ctrl.bRequestType & USB_TYPE_MASK) != USB_TYPE_STANDARD ||
          event.ctrl.bRequest != USB_REQ_SET_CONFIGURATION) {
        exit(1);
        return -1;
      }
      done = true;
    }
    if (done) {
      rv = usb_fuzzer_vbus_draw(fd, index.config->bMaxPower);
      if (rv < 0) {
        return rv;
      }
      rv = usb_fuzzer_configure(fd);
      if (rv < 0) {
        return rv;
      }
      unsigned ep;
      for (ep = 0; ep < index.eps_num; ep++) {
        rv = usb_fuzzer_ep_enable(fd, index.eps[ep]);
        if (rv < 0) {
        } else {
        }
      }
    }
    struct usb_fuzzer_ep_io_data response;
    response.inner.ep = 0;
    response.inner.flags = 0;
    if (response_length > sizeof(response.data))
      response_length = 0;
    if (event.ctrl.wLength < response_length)
      response_length = event.ctrl.wLength;
    response.inner.length = response_length;
    if (response_data)
      memcpy(&response.data[0], response_data, response_length);
    else
      memset(&response.data[0], 0, response_length);
    if (event.ctrl.bRequestType & USB_DIR_IN)
      rv = usb_fuzzer_ep0_write(fd, (struct usb_fuzzer_ep_io*)&response);
    else
      rv = usb_fuzzer_ep0_read(fd, (struct usb_fuzzer_ep_io*)&response);
    if (rv < 0) {
      return rv;
    }
  }
  sleep_ms(200);
  return fd;
}

static void kill_and_wait(int pid, int* status)
{
  kill(-pid, SIGKILL);
  kill(pid, SIGKILL);
  int i;
  for (i = 0; i < 100; i++) {
    if (waitpid(-1, status, WNOHANG | __WALL) == pid)
      return;
    usleep(1000);
  }
  DIR* dir = opendir("/sys/fs/fuse/connections");
  if (dir) {
    for (;;) {
      struct dirent* ent = readdir(dir);
      if (!ent)
        break;
      if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
        continue;
      char abort[300];
      snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort",
               ent->d_name);
      int fd = open(abort, O_WRONLY);
      if (fd == -1) {
        continue;
      }
      if (write(fd, abort, 1) < 0) {
      }
      close(fd);
    }
    closedir(dir);
  } else {
  }
  while (waitpid(-1, status, __WALL) != pid) {
  }
}

static void setup_test()
{
  prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
  setpgrp();
  write_file("/proc/self/oom_score_adj", "1000");
}

static void execute_one(void);

#define WAIT_FLAGS __WALL

static void loop(void)
{
  int iter;
  for (iter = 0;; iter++) {
    int pid = fork();
    if (pid < 0)
      exit(1);
    if (pid == 0) {
      setup_test();
      execute_one();
      exit(0);
    }
    int status = 0;
    uint64_t start = current_time_ms();
    for (;;) {
      if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid)
        break;
      sleep_ms(1);
      if (current_time_ms() - start < 5 * 1000)
        continue;
      kill_and_wait(pid, &status);
      break;
    }
  }
}

void execute_one(void)
{
  memcpy((void*)0x20002a00,
         "\x12\x01\x50\x02\x5e\xaf\x10\x40\x4f\x17\x31\x59\x04\xad\x03\x00\x1f"
         "\x01\x09\x02\xbc\x00\x01\x73\x01\x20\x06\x09\x04\xbd\x1f\x00\x0e\x01"
         "\x00\xf7\x07\x24\x14\xff\x00\xfa\xff\x04\x24\x02\x03\x0e\x24\x07\x05"
         "\x00\x00\xff\x0f\xdc\xa5\x02\x00\x03\x00\x07\x24\x06\x08\x01\xdf\x06"
         "\x8a\x24\x00\x92\x50\xf6\x3e\x9b\x66\x84\xc6\xbd\x17\x6d\x19\xcb\x7b"
         "\xf9\x53\xf8\xce\xd0\x8a\xad\x5e\x31\x4e\xf4\xa7\x08\xbb\x18\x4a\xe2"
         "\x01\x4c\x59\x00\x00\x00\x80\x00\x00\x00\x00\x3f\xd4\xc5\x59\xda\xd0"
         "\x1c\x2f\xd0\x7a\xde\x85\xcd\x05\x91\x7a\x2b\xf0\x9b\x38\x27\xbb\xb0"
         "\x96\x95\x84\xd0\xe0\x30\xaf\x95\x4f\x63\xf5\x26\xdf\x61\x43\xb4\xa4"
         "\x6f\x13\x98\xb8\x47\x43\x1e\x26\xda\xf2\xce\x96\x11\xa5\x01\x8c\x1e"
         "\xe7\x76\x12\x52\x68\x82\x74\x15\x9d\x54\xfe\x4d\xd9\xd4\x53\x3e\x4e"
         "\x40\x52\x9b\x9d\xd1\x1f\xef\xf1\x23\x36\xa9\x8d\xd3\x95\x41\xb4\x50"
         "\xaf\x6f\x77\x78\xa8\xd3\x93\xe7\xf2\xb5\xa9\xae\x40\x30\xae\xcd\xf7"
         "\x97\xa0\xf7\x1a\xfc\x3f\xda\x5f\x75\xfc\x9a\x09\xab\x8c\xcf\x4e\x40"
         "\xd1\xb6\xc2\x56\x79\x58\x40\xe6\xc8\xef\xac\x57\xae\x00\x82\x04\x42"
         "\xff\xef\xfc\xae\xbe\x0b\x96\xf3\x53\x17\x9b\x2a\x6b\x83\x01\x06\x0d"
         "\x98\x69\xc3\xd2\xa0\xe6\x73\x6c\x05\xd5\xd5\xf8\x1d\xaf\xf1\xa6\x8c"
         "\x21\xbb\xa0\x2c\xf0\x17\xdf\xd8\x08\x30\xc9\x57\x0e\x2c\x09\xc7\x42"
         "\xae\x91\x42\xe8\xe6\x6b\xd1\xa5\x44\x09\xd0\x14\xb8\xec\x07\xc7\x09"
         "\xbf\xa1\xe3\x0b\x0c\xe7\xb7\xa2\x58\x90\xe1\x93\xf0\x8b\x79\x0c\x38"
         "\xb5\xdd\xfd\xdc\xd9\x9e\x81\x17\xf0\x4a\x79\x27\x31\x97\xcb\x36\x4f"
         "\x66\x89\x2b\xba\x50\xcb\x32\x76\x77\x60\xab\xa3\xde\xc7\x8d\x8f\xf7"
         "\x02\xdb\x3a\x42\x8b\xe9\x6f\x7c\x03\x02\xb0\x34\x4f\xb6\x92\x13\xfc"
         "\x10\x65\xf1\x8a\x65\x0c\xf7\xa5\xa0\x97\xa8\xdc\x2b\x07\x57\x72\xa7"
         "\xc4\xd8\xb7\x63\x36\x3e\xae\x3b\x45\xed\x45\x76\x67\x8e",
         422);
  memcpy((void*)0x20000080, "\n\000\000\000", 4);
  *(uint64_t*)0x20000084 = 0x20000000;
  memcpy((void*)0x20000000, "\x0a\x06\x00\x00\x04\x03\xfc\x20\x02\x00", 10);
  memcpy((void*)0x2000008c, "\x8b\x00\x00\x00", 4);
  *(uint64_t*)0x20000090 = 0x20000180;
  memcpy((void*)0x20000180,
         "\x05\x0f\x8b\x00\x06\x35\x10\x03\xdb\x5d\xfb\x93\x89\x29\xf5\x3f\x4b"
         "\x70\x7c\x6a\xd5\xac\xdc\x79\x23\x7d\x7c\x4e\x57\xc1\x04\xa0\x34\xc5"
         "\xe2\xdc\x98\x9f\x31\x36\x1b\x26\xa8\xfb\xcb\x8e\x5b\x4c\x4a\x25\x54"
         "\x90\xa9\x48\xb4\x0b\x5e\x1a\x14\x10\x04\xff\x34\x01\xa3\x16\xc7\x5e"
         "\x12\xf3\xb5\xac\x15\x93\x10\x84\xbd\x4c\x0a\x10\x03\x02\x0d\x00\x01"
         "\x2a\xfc\x0e\x14\x10\x0a\x01\x22\x00\x00\x00\x0f\x00\x01\x80\x30\xc0"
         "\x00\x00\x00\x00\x00\x00\x14\x10\x04\x3a\xc1\xe4\x6a\xbe\xa5\x3f\x64"
         "\xff\x21\x6a\xac\x6d\xeb\xd9\x1c\x83\x0b\x10\x01\x00\x00\x00\x16\x53"
         "\x04\x00\x08",
         139);
  memcpy((void*)0x20000098, "\x09\x00\x00\x00\xed\x00\x00\x00", 8);
  *(uint64_t*)0x200000a0 = 0x20000240;
  memcpy((void*)0x20000240,
         "\xed\x03\x01\x24\x02\x2b\x55\x0d\x3c\x67\x01\xde\x80\x25\x95\x23\xcf"
         "\x80\xca\x18\x09\xc9\x9e\xe9\x1a\x82\x2e\x28\x5c\xe6\x5f\x2e\x5b\x10"
         "\x89\x44\xa0\x02\x16\xa3\xfb\xe4\x16\x58\xd9\x5f\x6d\x82\x33\x54\x50"
         "\x18\xd1\x18\x3a\xe7\xcb\x23\x7e\x9b\x94\x7f\xbd\x90\xb1\x09\xc5\x57"
         "\x56\x44\xd9\x90\xe8\x9e\xad\x42\x0c\x55\x6b\x28\x7f\xe3\xaa\xf1\x9c"
         "\xd6\x03\x55\xc2\x6d\x66\xcd\xd8\x79\x1c\x6b\xe3\x9b\xfa\x4e\x06\x10"
         "\xfc\x25\xf0\x1a\xd6\x3b\xde\xb6\x3e\xd4\x3b\xff\xf7\x15\xed\xfb\x49"
         "\x94\xbc\x77\x69\xef\xf3\xf9\x70\xdc\x8f\x27\x13\x1e\x33\xea\x3c\xdd"
         "\xff\x6d\xab\xd4\x71\xf9\x0a\x4b\x48\x00\xfb\xf4\x29\x4c\x8e\x8e\xcf"
         "\xd1\x4e\xe6\xb8\xa0\xb5\xbc\xa2\x67\x2d\x03\x3c\x23\x8e\x2d\x6a\x77"
         "\xf5\xfb\xef\x12\x3c\xe3\x78\xfe\x81\x3d\x12\x17\xb6\x41\x53\x5a\x05"
         "\x85\xa2\xb5\x44\x9d\x8a\x72\x45\x9d\xd7\xae\x25\xf9\x5e\x2b\x15\xd2"
         "\x88\xe0\x9a\xd5\xd3\x1f\x1b\x2a\x1c\xe2\x12\x04\xbc\x03\xde\x2e\xc3"
         "\xda\x8e\x18\x65\x11\xfb\x89\x8c\x34\xb0\x44\x05\x4f\x06\x37\x8e",
         237);
  memcpy((void*)0x200000a8, "\x17\x00\x00\x00", 4);
  *(uint64_t*)0x200000ac = 0x20000340;
  memcpy((void*)0x20000340, "\x17\x03\x00\x00\xf5\x60\xd2\x68\x74\xf6\x90\xf8"
                            "\x8e\x67\x1c\xfe\x50\x94\x47\x99\x3d\xd2\x88",
         23);
  memcpy((void*)0x200000b4, "\xa1\x00\x00\x00", 4);
  *(uint64_t*)0x200000b8 = 0x20000380;
  memcpy((void*)0x20000380,
         "\xa1\x03\x1e\x0c\x0d\xc7\x57\x9a\xbd\xa1\xbd\x43\x24\xfa\x14\x7b\x3c"
         "\xc7\x38\x5a\xf6\xb2\x53\xa0\xfa\xa8\x9d\xd6\xcf\x2f\x63\x46\x72\xca"
         "\x60\x84\xa2\x10\xc5\xf1\x95\x5a\x24\xd1\xb1\xab\xf2\x5e\xda\x3c\x38"
         "\x3b\xa3\x22\x27\xa2\x67\xe9\xd0\x18\x5c\x59\x0d\xa5\x16\x4c\x31\xe6"
         "\xe7\x40\x04\xc6\xa6\x1a\x56\xa3\x1d\xad\xe4\x26\xec\xed\x94\xa8\xf2"
         "\x3c\x48\x6f\xd4\xcd\x28\xf9\xf8\x82\x7a\x75\x1c\xc7\x6f\x6a\xd0\x08"
         "\x0c\x8c\x29\xcd\xe3\x48\xb8\xfe\x2a\x4f\xca\xe6\xf9\xfe\x77\x22\xd0"
         "\xe7\x15\xc9\x10\x61\xc8\xb5\xca\x3a\x55\x64\x53\xf1\x2f\x75\x53\x2b"
         "\x1d\xaa\xa5\x68\x23\xef\xa1\x0f\xda\xd6\xb6\x79\xc5\x3d\x27\xa5\xfb"
         "\x8e\x7e\x53\x41\xcd\xda\x3f\x4d",
         161);
  memcpy((void*)0x200000c0, "\x04\x10\x00\x00", 4);
  *(uint64_t*)0x200000c4 = 0x20000440;
  memcpy(
      (void*)0x20000440,
      "\x04\x03\x4f\x3c\xfe\x27\x2f\x61\x2f\x5a\xd2\x94\x8e\x44\x73\xff\x9f\xa6"
      "\x7c\x08\xa0\x73\x03\x8b\x78\xae\x95\x2f\xea\x6a\x4f\xfc\xa5\x51\x9c\x53"
      "\xc6\xea\x3c\xa6\x8e\xba\x52\x06\x89\x83\xb1\x9d\x32\x32\x0f\xdf\xc8\xf7"
      "\xa6\x14\x40\xc0\x2b\x47\x89\xdb\x62\xbf\x39\x5a\x3f\x75\x06\xc1\xee\x0a"
      "\x1d\x16\x34\xab\x7b\x6d\x03\x62\xf8\x38\x82\x77\xd0\x1c\x77\x6d\x6d\x8b"
      "\x2d\x48\xcf\xe5\xda\x76\xbe\xad\x89\x81\xd5\xfb\x3e\x95\x8a\x62\xbc\x67"
      "\xb0\x40\xe6\xa4\x3a\x06\x86\xc8\xb0\x5c\x05\x46\x00\x1f\x70\xee\xc2\xec"
      "\xb7\x96\xbd\x5e\xa0\xe8\x02\xd6\xf0\x99\x10\xb3\x5e\xa3\x7d\x07\x06\xe4"
      "\x1f\xeb\xe3\xfb\xdb\xb0\xd4\x89\xb5\x4a\xfd\xe8\x8f\x00\x19\x31\xb7\x16"
      "\xbe\x84\xae\xe8\xdd\x9f\x72\x45\xd1\x58\xac\xe4\xf2\x44\xac\xaf\xa9\x46"
      "\xab\xb1\x59\x15\xe5\x05\x6d\x13\x2a\xcc\xc2\xbc\x12\x87\xde\x97\xc6\xe2"
      "\x12\x04\xa9\x9e\x78\xad\xcf\x98\x2c\x19\x96\xd1\xca\xcf\xfa\xeb\xb4\xe3"
      "\x40\xa7\xa4\x46\x67\x80\xab\x77\x21\x00\xe6\xe2\x4b\x48\x93\xd9\x48\xd6"
      "\xea\xe4\x10\x81\xe1\x7f\x19\x83\x73\xef\x7f\xf9\x0b\x8d\x4e\x51\xe7\x2b"
      "\x22\xa2\x44\x21\xd1\x97\x97\x65\x82\xa8\x03\x3a\x40\x0c\x26\x32\xd8\xd1"
      "\x60\xcb\xd9\x6e\xeb\x8c\x58\x24\x17\x4a\x37\x6b\x38\x88\xd2\x62\x7f\x73"
      "\xf6\xb4\x93\x77\x52\x34\x2f\x7b\xf5\x67\xa1\x8f\x9f\xc7\xf9\x77\x10\xc4"
      "\x84\x87\x90\xa4\xea\xaa\x52\x63\x2c\x4c\x11\xd5\xcc\xb1\x98\x26\x5c\x5b"
      "\x6e\x57\xc7\x77\x63\x27\x79\xcb\xfd\x45\x7e\xca\xec\x3d\x97\x62\x04\x34"
      "\x2b\x66\xff\x18\x05\x46\xe8\x5f\xe5\x01\xe4\x36\x4b\x9a\x2e\x11\x70\xd2"
      "\x72\xf3\x2e\xe3\x8c\x6c\x6f\x4c\xbc\x5b\x84\x37\xa7\xcf\x5a\x6a\xab\x5d"
      "\xea\x9d\x02\x85\x14\x06\xc0\x64\x22\x69\xdb\xb5\x18\x08\x25\x2f\xe3\x4a"
      "\x7d\xdb\x51\xc9\x91\x47\xeb\xd5\x98\x47\xdc\x3f\x9f\x47\x42\xef\x04\x2d"
      "\xda\x61\xf7\x14\x4b\xb6\x63\x50\xa6\x65\x81\x44\xb2\x19\xe7\xe0\x95\x61"
      "\xca\xf4\xe9\x46\x6f\x80\x5f\x66\xa1\xef\x2f\x6f\x65\x74\x3c\x8d\x02\x4e"
      "\x6c\xed\x6b\xa6\xc6\xd5\x51\xac\x3d\xc7\x09\xdc\x1f\x62\xb7\xbb\x25\xb5"
      "\x66\xf5\x46\x59\x77\x73\xff\xfd\x50\xdf\x5e\x1d\xae\xf0\xf6\x9b\x81\xa5"
      "\xde\x12\xbd\x7d\xdf\xdf\xe9\x89\xa8\x4e\xdf\x0a\xd0\xff\x3e\xa4\x56\x39"
      "\xef\x94\x07\xd1\xcc\x50\x86\xa7\x25\x34\xd9\x17\x0c\x2c\xde\x32\x7a\x3c"
      "\xe6\x8f\x1e\x5e\xea\xb4\xf6\x9f\xbf\x91\x5d\x04\x22\x79\x57\x07\x7c\x90"
      "\x03\xe1\xdd\xed\xf4\xa6\x52\x33\x44\x56\x4e\x66\x14\x1e\x64\x36\x00\xf5"
      "\x33\x67\x88\xc0\xc5\xf4\x40\x07\xff\x6a\xd0\x59\xbb\x93\xbf\x15\x1a\x25"
      "\x94\xba\x6a\xed\xaa\x7f\x45\xf9\x85\x28\x1a\xa6\x11\x4e\xfc\x71\xad\x27"
      "\xa5\xaf\x9c\x3c\x31\x06\xc4\x1c\xe4\xdf\x48\x2d\x25\x9e\xaf\x67\x99\x96"
      "\x89\x33\x95\x5b\xc0\xd1\xad\x94\x8a\x5b\x5e\x85\xa8\x61\x3e\xec\x0d\x31"
      "\x9d\xe8\x80\x08\x22\x19\x4d\xdb\x68\x15\x9e\x59\xaf\x4b\x21\xe4\x75\xe8"
      "\x25\xfd\x64\x73\x21\xb3\x23\x46\x39\xcf\x44\xeb\x61\x81\xc9\x59\xc9\x50"
      "\x76\x6d\x26\xe0\x9a\x8b\x23\xd1\xbd\xf2\x96\x86\x51\xf9\x56\xd4\xf3\xbe"
      "\x5d\x08\x8f\xd3\x9a\x7a\x8c\x1b\xd2\xdb\xbd\x13\xf1\xaf\x8c\x81\xff\xc2"
      "\x57\x53\x0e\x53\x76\xbf\x42\xad\x16\xe9\xc8\x5e\x57\xe0\xb0\x4c\x18\x76"
      "\x93\x88\x17\x1c\x49\x70\xec\xc6\xf4\xc2\x9b\x00\xb3\xc1\x73\xdc\xc1\x57"
      "\xa3\x28\x8c\x56\x8f\x56\x0d\xd6\x17\x7c\x04\x57\xc4\x7d\x09\x91\xeb\xd1"
      "\x4b\x55\x2f\x93\x5d\xbb\x66\x6f\xe0\x03\xbb\x5f\x65\x9d\x8f\x7f\xe8\x1c"
      "\x44\xc9\x7e\xc1\xec\xb4\xb5\xbf\x95\x33\x57\xcf\x7a\x85\xc9\x66\x42\xc3"
      "\x38\xe7\x50\x11\x5b\xe0\x1b\xfd\x3c\xd4\x36\x85\x73\x70\x09\xcb\x17\xd0"
      "\xb5\x4b\x29\x2f\xfb\x74\xbe\xbe\x76\x4c\x1f\xf9\x3a\x8f\x0e\xb8\x64\xcb"
      "\xb7\xab\x6d\x54\x67\x6f\xa2\x10\x3d\xd3\xe1\x47\x40\xba\x3e\xcc\x14\xa0"
      "\x94\x34\xa8\x08\xaa\xe9\xe6\xb6\x0c\x94\x4b\x6c\x54\x3c\x48\x56\x6f\xce"
      "\x08\x44\x8c\x27\x57\x9f\x77\x72\x13\xea\x4e\xbc\xb0\xa9\xf8\xff\x0d\x9a"
      "\xf4\xf1\xba\xa1\x7d\xcd\xc7\xf8\x5a\x7f\xf7\x09\xce\x55\x39\x3b\xd9\x91"
      "\x21\x3c\xad\x92\x50\x22\x98\xc1\xe0\x47\x52\x78\xd9\x22\xe0\x3f\xef\x0b"
      "\x8e\xc7\x4c\x51\x4a\x75\x48\xed\x64\xbb\x6d\x95\x2a\xb3\x42\x28\xf8\x2d"
      "\x81\x43\x1c\x74\xb3\xa5\xaa\x87\xc8\xbb\x33\xc1\x26\xc2\xec\x51\x12\x5c"
      "\x1a\xdb\x1d\x42\x09\x74\x09\xe5\x14\xbb\x2d\x42\xad\x30\x06\x1f\x92\x18"
      "\xee\x6e\x0f\x14\xaf\x93\x8a\x1d\x8e\x9c\x18\xc1\x47\xb2\xfc\x59\x65\xc4"
      "\x53\xd8\xda\xb5\xf2\xf2\xd1\x62\x79\x11\xf5\xd8\x0c\x18\xdb\x05\x8a\x05"
      "\x24\xad\x2c\x3c\x6f\x69\x96\x2f\x9d\x4f\xc6\x1c\xa9\xdf\xb8\xbc\x92\x54"
      "\x48\x4e\x21\xf1\xbb\xb0\xd7\x10\xd5\x4d\x4f\x75\x64\x85\x54\x4e\xe4\xfe"
      "\xff\x47\x82\xe6\xb8\xae\x31\x52\x29\xf1\x4c\x97\x81\xc3\xbc\xe5\x2b\x8f"
      "\x3b\x93\x70\x76\xaf\x5a\xee\x7a\x43\xd2\xb9\x61\x8a\x9c\x7b\xb9\xc9\x81"
      "\x3e\x16\xcd\x06\x2b\x87\x4d\xa9\x64\xb4\x5a\xf7\xf2\xfd\x0c\xf7\x0d\xed"
      "\x97\x4d\x55\x5f\xf9\x4c\x5f\x38\x6f\xe1\xb5\x94\x0c\xd1\xdc\x48\x8c\x0a"
      "\x1c\x9a\x47\xba\x69\x82\x20\xb7\x16\xc4\xe9\x86\xd1\x32\xfb\x72\x9a\x32"
      "\x0b\x65\x6e\xc8\xd6\xe9\x2b\x7a\x18\xce\x7a\x90\x7b\x51\x9e\x8e\x96\xec"
      "\xa5\x5f\xce\x39\x47\x09\x08\x92\xeb\x2c\x2e\x5a\x75\x2a\x71\x57\x15\xff"
      "\x30\x19\x99\x20\xa7\x7d\xec\x0b\xb5\x57\xd6\xfb\x6c\xe7\x33\x43\x10\x8b"
      "\xbe\x35\x05\x13\xf0\x66\xf7\x5b\xc4\x45\x5f\x11\xe2\x12\x44\xc6\xef\x74"
      "\x2e\xbd\x49\x65\x22\x65\xa1\xd8\x44\x59\xef\x61\x51\xbc\xf4\xbc\x1d\xac"
      "\x23\xbf\xf0\xa5\x37\x7b\xc8\xb2\xd6\x48\xd2\x21\xed\xca\x2b\x2e\x38\x29"
      "\x39\xe0\xf3\x57\x84\xad\x6d\x5e\xde\xac\x01\x03\x85\x3d\xbf\xab\x26\x1e"
      "\x0d\x89\x0b\x8c\xa7\x1f\xa1\x53\x73\x9b\xbb\x43\x62\x6c\x46\x33\xf9\x75"
      "\x90\xae\xd6\xe1\x9f\xc3\xc3\xc1\x62\xed\x03\x91\x0e\x23\x24\x39\xb2\x53"
      "\x36\x1f\x70\x1a\x2a\xdf\x05\xac\x5f\x64\x91\xd4\x0f\xa6\xc9\x73\xd9\xca"
      "\x0d\x27\xac\x16\x31\x4b\x45\x10\x8e\xe1\x9f\x41\x68\xdf\x20\x99\xe0\x06"
      "\x56\x17\x55\x30\x55\x0c\x76\x62\x1b\x62\x57\x04\x2a\x5c\x8a\x17\xf3\x0a"
      "\x10\xd6\x58\x56\x93\xd1\x5d\xef\x04\x56\x3b\x50\x86\xa5\x4d\x21\x91\x69"
      "\xb2\x73\x5d\x78\x50\x10\xbe\x5e\xea\xee\xb7\x57\xfd\xfa\x5e\x8a\x92\xc9"
      "\xfd\x41\xca\xb2\xcd\x9e\x89\xe3\x07\xe9\x1d\x58\x88\x21\x6d\x21\x44\x56"
      "\x52\xb5\x2f\x47\x3a\xa4\x4d\x49\x59\x35\x45\x30\x9e\x30\xdb\xa4\x81\x99"
      "\x03\x55\xab\x1c\xac\xed\x32\x82\x99\x16\x4b\x4f\xf8\xe5\x05\xe2\x7f\xd8"
      "\xc6\xb7\x0f\x6e\xec\x7a\x68\xe7\x38\x2b\xd7\xca\xf7\x6b\x30\x15\xef\xdd"
      "\x2d\xf6\x41\xca\xca\x50\x7f\x45\xa3\x3f\xb2\x33\x13\x68\x56\x6f\x39\x9c"
      "\x66\x66\xe6\x42\xa7\x98\x22\xd3\x0e\x99\xd7\x51\xf4\xe3\x52\x0c\x5e\x72"
      "\x8a\xe5\xa5\x7d\x3f\xe7\xaf\x05\xd0\x02\xed\xaf\xd9\xf3\x5e\x9a\x5d\x7c"
      "\x51\xd0\xea\x19\x27\x46\xd0\x5d\xd0\x4d\x9e\xce\xb8\x90\xcb\xd2\x8f\x09"
      "\x21\x6e\x0c\x72\x44\x79\x21\xd2\xd2\xe3\x7b\x6c\xc9\x3d\x86\x7e\xe1\xf9"
      "\xd8\xa3\xfc\x58\x69\x09\xa3\xc6\x85\xb0\x12\x75\x49\x1d\x6d\x2b\x66\x2e"
      "\xae\xbc\x39\x4a\xdb\x9d\x5d\xd7\x0f\x0c\xcc\xf2\x7c\x80\x42\x1e\xba\x78"
      "\x06\x64\xe8\x9b\xc4\xc5\xd7\x78\xfe\x42\x6a\xf4\xa6\xf2\x1a\x43\x95\x12"
      "\x8b\xb2\x68\xcf\x29\x4b\x09\x62\x25\x51\x68\xa6\x67\x7c\xb2\x57\x99\xfa"
      "\x80\x89\x39\xad\x26\x1e\x72\x3d\xb0\x16\xac\x97\xab\x83\x9f\xa8\x97\x08"
      "\xd2\x69\x7a\x88\xc1\xac\xed\xb5\x96\x12\xad\xcf\xed\xb7\x9f\x80\xe0\x17"
      "\x39\xc3\x1c\x26\x33\x16\x49\x4f\x62\x46\xc9\x33\x78\x59\xec\xf9\x98\x1c"
      "\x7b\x32\xd1\x96\x88\xe8\xa9\xc5\x41\xc8\x03\x23\xb6\x84\x46\x6c\x36\x07"
      "\x2c\xcf\x43\x67\x0a\x05\x13\x9f\xeb\x3e\x79\xa7\x04\xe3\x9d\x4d\x44\xfe"
      "\x2e\xdf\x10\x35\x99\xc5\x03\xf9\x4b\x45\x30\xc4\x35\xf4\x64\x3f\x25\x99"
      "\x98\x0f\x94\x43\xbb\x2b\x51\x9b\x83\x7b\xb7\x3e\x72\xbd\x99\x81\x30\x2c"
      "\x58\x65\x16\x7e\x35\x60\xd2\x23\xea\xc0\x62\xa5\x86\x7d\xb1\xc2\x1c\x9a"
      "\x16\x66\x04\x76\x12\xd3\xd8\xb4\x12\x20\x5c\xe6\x01\x1e\xc8\x73\x14\x05"
      "\x18\x4a\x88\x07\x28\xc1\x15\x94\x2d\x03\xa1\xe0\xd9\x5c\x04\xbd\xa4\xbc"
      "\x38\x86\x65\xe5\xb3\x6c\x84\x27\x8b\x66\x98\xc2\x57\xaa\x29\x12\xa2\xa9"
      "\xe3\x83\xd1\x1c\xfd\xeb\xba\xbb\xc6\x97\x83\xa3\x5d\x35\x34\x39\xc2\xa4"
      "\xa7\x2e\xe0\x84\x04\x0b\x6c\xc8\x68\x89\x05\x48\x35\x05\xd2\x70\xd7\xc7"
      "\xcc\x28\xd7\xe5\x10\xe9\x9f\x49\x02\x97\x24\x24\x60\x78\x7d\xb2\x7f\xc2"
      "\x62\x36\x65\xff\x4e\x24\x12\x8b\xb8\x4f\x95\x1e\xc7\xf8\x54\x3e\x5d\x52"
      "\x1a\x5d\xbb\xe2\x76\x3c\x3f\x34\x41\x96\x77\x63\x69\xe2\xb7\x1b\x9e\xc9"
      "\x88\x9c\xb4\x32\xcd\x0b\x5c\xd1\x53\xb6\x28\x6f\xdd\xba\xf6\x9a\xcd\xd0"
      "\xcb\x26\x27\xc7\xa5\xbb\x68\x9c\xf6\x69\xe8\x42\x4d\x1f\x4b\xce\x8a\x42"
      "\x06\x0e\x7f\x97\x95\x29\x9a\xb3\x45\x33\xdc\x35\xd2\x13\xfa\x0f\xda\xd9"
      "\x3d\x94\xf7\x31\x26\x7e\xb8\x91\xaa\x61\xc0\x7c\xa8\x2c\x1a\x61\x5b\xee"
      "\x5e\x02\x5d\x18\xcd\xc8\x8d\x97\xbf\x61\x84\xde\x0e\x2d\x06\xff\xa7\x32"
      "\xde\xae\x7d\x9f\xf8\xb2\x9b\x44\x4d\xbe\xbc\xc7\xd2\x0a\xf3\xa2\x04\xd3"
      "\x26\x7e\x76\xb2\x9a\x5c\xae\xd4\x90\xae\xc7\x6b\x59\x65\xfa\x31\x99\x5e"
      "\xb0\x4e\x1c\xaf\x7c\x4f\xc6\x0a\xb8\xdd\x97\x92\xf8\x23\x9e\x11\x8d\xb5"
      "\xed\x7d\xed\x50\x75\x60\xd1\x1f\x2d\x45\xaa\x1d\xe1\xce\xd7\x1a\x27\xce"
      "\x0e\x24\x01\xdc\xc6\x17\x18\xc6\xd4\xdb\x96\xc5\x03\xfe\x29\x3d\xec\xd1"
      "\xab\xc4\x7d\xf2\x1d\xa9\x6d\xf2\xce\x0d\xc8\x24\x09\x0d\x88\x02\xb2\x73"
      "\x21\x71\xa9\x78\x30\xce\x33\xde\xff\xca\x63\xc5\x05\x56\x19\x20\x1f\xfa"
      "\xb6\xa7\x24\x9c\x76\x75\xb3\xc9\x7a\x6b\x1b\x92\xa1\x46\x92\x6d\xea\xc1"
      "\x2b\xa0\x94\x35\x1a\xe1\x6b\x17\x61\x99\x0a\x99\x48\x6d\xc2\xc3\x50\xbe"
      "\x47\x00\x18\x9f\x0d\xcd\x58\xbf\x5a\xac\x60\xa8\xc5\x25\x20\xa3\x2d\x92"
      "\xb9\xfc\xa0\x97\xa8\x80\x24\x49\x8b\x9f\xef\x0e\x2e\x2e\xd3\xc5\x56\xba"
      "\x5f\xa5\x49\xc9\x68\x91\xbb\x4c\xae\x83\xdf\x8b\x7c\x74\xf5\xb5\xef\x74"
      "\x1a\x94\xa4\x2b\x60\xe7\x3d\xfd\xa5\x4d\x0a\xdf\x2d\x5c\xbe\x0c\xc1\x20"
      "\x2d\x4d\x17\xee\xaa\xa3\xc8\xd2\x02\x57\x39\x42\x69\x93\xe6\x22\xb4\xdc"
      "\x0d\x48\xa3\xf4\x15\x0a\xe7\xbb\x7f\x2c\x17\xa0\x78\xbd\xa1\x2a\x53\x3a"
      "\x16\xf0\x82\x40\xf5\x46\xd2\x71\x0c\x88\x3d\xe5\xdb\x38\xfa\xa3\xa0\x7c"
      "\x8a\xad\x98\x67\x46\x7a\xd5\x51\xe1\xf5\x40\xc7\xb5\xf4\x3b\x9c\xcd\x04"
      "\x36\xad\xfd\x9b\x8c\x96\x57\x81\x33\x63\x58\xfd\xdc\xc5\x71\x09\x58\x37"
      "\xd6\x90\xae\x38\xc2\x1d\x15\xab\x55\x36\x5e\x52\xde\x42\x2c\x76\x12\x92"
      "\x46\x79\x69\x92\x9f\xb9\x1a\x39\xd5\xb2\x48\x05\x08\xef\x2a\x1a\x7d\x5e"
      "\x9e\xbe\xf4\x95\x84\xe0\x97\xa3\x26\x1f\xb4\xea\xa8\xde\x8a\x0d\x83\x9a"
      "\xd5\x8a\x28\x34\x91\x06\x5e\x31\xec\xfc\x51\x14\xd0\x7b\x0f\x8e\x5d\x41"
      "\xe2\x34\x8e\xe4\xab\xc6\x7d\x4f\xd2\xb7\x86\x1f\x27\x54\x18\x06\x2b\x46"
      "\xd9\x6f\xe9\xb7\x07\x2d\xf7\x71\x8b\x94\x2a\x03\x42\xed\x1c\x1a\x89\xbf"
      "\xaf\x0b\x7a\x0e\x98\x9c\x42\x6b\x02\x8c\xf9\x1c\x50\x08\xd7\xa5\xaa\x25"
      "\xaf\x99\x5b\x21\x85\xa6\xe0\xdd\x86\xf6\xb9\x62\x66\xbc\x36\x06\x13\xe4"
      "\xaf\xf6\x04\x62\x3c\x6e\xed\xc9\x09\x38\xfe\x2d\x45\x41\xc2\xe1\x73\x43"
      "\xda\x02\x00\xd2\xe4\x39\x4a\x27\xe0\x92\x3b\x02\x9f\x25\x3c\xe9\x3f\x35"
      "\x48\x00\x55\x6f\xe3\x8e\x52\x14\x86\x7f\xee\xa1\x20\xc2\xde\x1e\xc5\xb3"
      "\x2e\x11\xad\x61\xff\xcb\x63\xf2\xc5\xde\x55\x4d\xfd\xe3\xc6\x9f\x84\x47"
      "\xe6\xbb\xd6\x0c\x5a\x6a\x83\x42\x66\x1d\x3f\x97\xca\x43\xf4\x5b\xcf\x8f"
      "\xcc\x3b\x2f\xd0\xe1\x75\x9c\x19\x8d\xcf\x60\xbc\xcf\x7e\x5b\xac\x25\x61"
      "\x1b\x85\x95\xe1\x0e\xbe\x18\x35\xc3\x71\xe2\x8e\x51\xb7\x00\x39\xde\x3f"
      "\xd1\xe6\xcf\x95\xf1\x32\x16\xd1\x4a\x1b\xab\xfc\x68\x3d\x01\x5b\xe2\x25"
      "\x28\xae\xd6\x93\x38\x26\x59\x72\xc3\x0e\xdb\xd9\x85\x6e\x83\x7f\xa2\xc5"
      "\x76\x2c\x32\x2f\x6d\xbc\x01\xde\x45\x91\xd4\xc0\x7d\x65\x39\xc4\x8e\x07"
      "\x5d\x49\xa5\x8e\x68\xbf\xc6\x8a\x29\xfc\x42\x7a\xb1\x3f\x92\xbe\xcc\x85"
      "\xee\x2f\x60\x0f\x79\x38\x01\x8c\x95\x55\x6a\xfa\x86\x95\x43\x28\x31\xdf"
      "\x1e\x44\x0c\xae\x4a\x80\x7d\x0a\x2c\x20\xaf\x77\x65\xd5\xc8\xc0\xdf\x39"
      "\xc3\xf7\xb1\x7e\x18\x42\x32\xa1\xa9\xcb\x6d\xb5\x00\x1b\x8e\xfa\x80\x07"
      "\x73\xde\x03\xae\x64\xbe\xe7\x8b\xfd\xf9\xfe\xa5\xf0\x70\x0a\x8b\x59\xac"
      "\x7b\xc7\xad\x29\x61\x20\xf4\xdd\xb4\x80\x36\xf4\xfa\x2a\xce\xda\x76\xdc"
      "\xc3\xde\x5a\x3b\x9b\x0a\x6b\x2d\xa7\x0c\xeb\x31\x50\x83\x03\xb8\xc5\x4a"
      "\xb6\x97\xf5\xa2\xad\xb6\x17\xa8\xb3\x72\xb8\xb3\x12\xa7\x9d\xc1\x59\x87"
      "\x9f\xea\xfd\xba\xb0\x9d\x6f\x2d\xfa\x37\xb7\x1b\x99\xb5\xf2\x46\xad\x2f"
      "\x31\x40\x93\x95\x3f\xb5\x98\xd6\xdf\x79\xf8\x55\x92\x59\x2b\x6e\x6f\x54"
      "\x43\x0d\x8c\x71\x88\x3a\xaf\x0e\xd1\x5b\x26\x4e\xf0\x8e\x09\xe6\x6c\x06"
      "\x50\xed\x33\x1e\xdd\xcf\x23\x78\x51\xfe\x57\x78\x4d\xf0\xd7\xf5\xab\x15"
      "\x44\xc6\xfa\x51\x12\xe6\x36\x6a\xf0\xb8\xfc\x9e\x55\xc1\xec\xea\x7e\xf6"
      "\xa2\xb5\x96\x35\x36\x14\x79\x13\x5f\x54\x16\x64\x8a\x66\x87\x1e\xd6\xca"
      "\xf9\x77\x17\x58\x22\x73\xf6\x22\xb0\x3c\x7a\x13\x96\x0b\x6d\x7b\x01\xc6"
      "\x5b\xe5\x88\x90\xad\xfe\x8b\x45\x85\x37\x93\x82\x34\x19\x0a\x60\x78\x54"
      "\xdb\xe1\x30\x44\x65\xbf\x61\x58\x7b\x2d\x02\xa8\xe7\xb0\x73\xef\x27\xe3"
      "\xe1\x4b\x18\xf3\xf6\x55\xb3\x52\x6f\xa7\x25\xa9\x7f\x4e\x36\x5a\x6a\x4c"
      "\xa0\x76\xdd\xea\x17\x66\x69\xc0\x21\xbd\xaf\x2d\x66\x43\x40\x28\x4f\x20"
      "\x00\xdf\x39\x60\xda\x55\xc3\x35\x3a\xf7\x19\x5b\x3a\xe0\xd9\x7f\x54\xb5"
      "\x52\xd6\xfb\x4e\x7f\x34\x49\x88\x75\x0d\xe4\xdf\xc6\x10\x63\xe3\xe1\xd6"
      "\x07\x6e\x4e\x4e\x73\x84\x3f\xde\xf8\x87\x47\x31\xcc\x9a\x3c\xcb\x91\x9c"
      "\x54\x07\xb5\xb9\x23\xef\xbf\xfd\xbe\xee\x4e\x5d\x97\x67\x4d\x6d\xc9\x23"
      "\x68\x3a\x65\x25\xe1\xb7\x1d\x16\x59\xa6\x34\x0e\x1b\x66\x11\x9d\x17\x2f"
      "\xb4\x9b\xf8\x3b\x78\x92\xc2\x84\xf7\x5a\xb8\x52\xbc\xd2\x58\x93\x2b\x0f"
      "\xa8\xb9\x7c\x23\x9f\xc8\x74\x28\x60\xec\xf7\x10\x91\x6e\x4f\x46\xfd\xed"
      "\x74\xbf\x1b\xd6\x6d\x21\xbf\xfe\x91\x02\x96\x17\xb2\x86\x89\xfb\x51\xd6"
      "\xc1\x0f\x08\x09\xa4\x50\x9e\x0f\xca\xfc\x0a\x74\x00\xe2\x5a\x2c\xcd\x47"
      "\x55\x02\x39\x08\xd3\xd6\xcc\x00\x57\x6e\x6f\x2e\xe4\xe2\x9f\xba\x36\x68"
      "\x93\x73\xe4\x86\x47\x78\x14\xf1\xf1\x51\xcf\xd5\x9e\x96\x99\x2b\xec\x7c"
      "\x39\x19\xfb\x1e\x57\x6b\x1f\xff\xb5\x8b\x7f\x63\x76\x64\x68\x03\xaf\xfc"
      "\x93\x8f\x26\x26\xfd\xdb\x40\xce\xfc\x62\xb4\x5d\x53\x2b\x56\xbe\x44\xab"
      "\x16\x81\x55\xa5\x59\xf4\xcd\x7c\xc3\x37\xd1\x12\x6d\x9b\xd6\xb2\x7d\xa3"
      "\x16\x6b\x2b\xe6\x08\xb1\xab\x94\xcb\xa2\x85\xb0\xc4\x0d\x77\x0c\xd2\xa9"
      "\xe8\x15\xaa\x29\xdb\x7c\xda\x8c\x94\x55\xf3\x07\x7c\x08\x8a\x9b\xef\x53"
      "\xb8\x55\x41\xe7\x2c\x65\x49\x05\xc9\x8c\xb1\xa6\xec\x02\x23\xd3\xbe\xae"
      "\x64\x5e\xe1\x33\x8f\xfe\xc6\xd9\x5a\x07\x9e\xd8\xc1\x0b\x29\x7e\x19\x55"
      "\x0e\xc4\x3e\xfe\xd3\x23\x6f\x24\x0a\x4e\xf8\x3e\xf6\xc2\x3c\x9b\x15\xb2"
      "\x2c\xb0\xae\x66\x33\x63\xca\xd2\x27\x27\xa1\xb2\x52\xb0\xd6\xc9\x90\x73"
      "\xbe\x0b\x0c\x69\x1b\x2f\x2f\x73\xbc\x91\x5f\x6e\x37\x7b\x31\x17\x0d\xf4"
      "\x9e\x97\x3c\x50\xc5\x67\x54\xf0\x4b\x78\xe0\x25\x36\xae\xa8\x86\x11\xfc"
      "\xfd\x15\x96\x28\x31\xd3\x8a\x7f\xc9\x5c\xbf\xeb\x89\x36\x01\xaf\x40\x39"
      "\x98\xc1\x04\xbc\x46\xbf\x25\x3d\x06\x91\x56\x77\x2b\x3b\xb4\x94\x77\x99"
      "\xe1\x66\x1d\x35\x7b\x31\x5e\x65\x30\xf7\x6e\xc6\xc2\xb2\x3c\x71\x54\x28"
      "\xf5\xe6\x77\x65\xce\x0a\xd5\x38\x07\x1e\xd8\x5e\x58\x1f\xc3\xd2\xb4\x76"
      "\xfb\x0f\xf5\x8b\x17\x53\x97\xa5\x5b\xf6\xf4\x61\xa1\xc3\x29\x71\xb5\x7a"
      "\xea\xe5\x66\x83\x48\x22\xc5\x52\x9c\x2d\xb8\x7b\x59\x56\x12\xe9\x61\x8c"
      "\xd3\xbe\xbf\x75\xd5\x6c\x09\xe4\x5a\x55\x9a\x99\x01\xcb\x8a\x85\xf4\xf8"
      "\x25\x73\xc6\xc6\xa8\xa5\xf9\x9e\xbd\x19\x0f\xcc\x69\xe1\x95\x4d\x9e\x24"
      "\x0a\x5d\xee\x6d\x4d\x3d\xac\x10\x96\xe5\xed\x0d\xaa\xcf\xe9\xac\x4c\xf0"
      "\x5a\x50\xac\x33\x83\x44\x8f\x13\x16\xbd\xf5\xf1\x70\x93\xf1\x05\xf6\x1a"
      "\x28\x72\x01\xd4\x06\x06\xdd\x0e\x4c\xfc\x33\xc4\x54\x3f\x4f\x9e\xf6\x40"
      "\xe4\x82\x15\x2f\x81\xed\x2b\x39\x66\xb0\x4c\x5a\x6e\xf8\x1d\x30\x22\x16"
      "\xf0\xd9\xe7\x67\xa8\xc8\xc2\x6e\x43\xa4\x51\x7c\xdc\xf3\x89\x4e\xfe\x55"
      "\xfd\xd9\xfb\x33\x18\xf1\x48\xe2\x3f\x93\x57\x9d\x67\x66\xdc\x86\xc9\xa4"
      "\x9c\x4c\xd3\x96\x1f\x84\x81\x92\x02\x90\xbb\xdd\x14\x34\x2d\xec\x68\xcc"
      "\x76\xd1\xfa\xbb\x04\xe4\x86\xc9\x3a\xd7\xed\x92\x7f\x28\x25\xef\x5b\xe2"
      "\x66\x5d\x50\xf1\x67\x38\xca\x62\x26\x37\xdb\x1d\xc0\x0b\x12\x24\x77\x2d"
      "\x26\x3a\x1e\xd9\xc0\xd6\x87\x37\x03\xb7\xf9\x5c\x07\x17\x80\x3e\xd5\xdb"
      "\x39\xc9\x50\x55\xd3\x6f\x76\x60\x79\x24\x7f\x04\x0b\x4c\x1d\x73\xf5\x31"
      "\xf4\x74\x74\x8d\x11\x8b\xa2\xc9\xd9\x20\xa0\xad\xcc\xb5\x70\xa9\xcd\xce"
      "\xc2\x54\x8a\xb4\xe2\x70\xf7\x48\x04\x1f\x7e\x6a\x74\x0e\x7d\x92\x5f\xe5"
      "\xbf\x2d\x8d\x2a\x2c\x2f\xa4\xb9\x4e\xa9\x9e\x91\xbe\x2e\x0c\xe6\x51\xd2"
      "\xfe\x09\xea\x17\xc5\x95\x9b\x46\x3c\x92\xca\xa9\x95\x49\xe6\x64\x00\xed"
      "\xb8\xbd\x23\xbf\xe9\x6d\xd0\xc4\xa2\x14\x14\x45\xe1\x80\x9c\xd0\xf6\xe6"
      "\x87\x8d\xbe\x57\xb3\x60\x90\xd6\x70\xe6\xd2\x5a\x69\x0b\x72\xc6\x39\x4b"
      "\xfa\xc4\x96\xec\xa9\xd3\xe6\x74\xa2\xb3\xc0\xc9\xa0\x49\x30\x7f\x25\x57"
      "\x50\xa1\xd5\xb0\x25\x9b\xdf\x46\xfb\xa3\x45\x39\x59\x34\x6f\x19\x22\xf9"
      "\xad\xfd\xa3\x85\x2e\xdb\x6e\x24\xd1\x4d\x09\x33\xf8\x09\xd1\x1e\xdb\xb5"
      "\xb4\x48\x5a\xc7\x66\xad\xda\x05\xf3\x6c\xb5\xfe\x41\xbb\xfc\x48\x9a\x6b"
      "\x84\x8f\x7e\xf6\x54\x72\x6f\xe0\x90\xab\x10\x1b\xe5\xc9\xa2\x52\x32\x00"
      "\x0f\xd7\xf0\x80\x1f\xf2\xfa\xfb\xa6\xc2\x64\x50\x89\x19\x43\x2e\x8e\x59"
      "\x52\x26\xb4\x8e\x84\xf1\xa4\xba\xe8\xa1\x2b\xb6\xaa\x9a\x29\xcd\x74\x2e"
      "\x53\xa7\xa1\xe2\xcb\x7d\x47\xf8\x51\xb9\x4f\x11\xab\x97\xf3\x44\x67\x46"
      "\xa6\x2a\xcc\x85\x42\x30\x7a\x09\x1e\x1e\xe6\x8b\x21\x7c\x1a\xa1\x74\x4f"
      "\x46\x80\xb0\xbd\xd1\x34\x78\x9b\xc2\xa4\x79\x19\x5a\x38\x6f\xd0\x71\xb7"
      "\x69\xf2\x0c\xc8\xe5\xe1\x2c\x0d\xac\xac\xdc\x7c\xb9\x60\xd0\x92\x43\xf8"
      "\xc3\xbd\x4b\xef\x25\xfb\xf1\xee\xe1\xe0\x2a\xa3\xd2\x94\x77\x35\x94\xdb"
      "\xf0\x26\x0a\x05\x27\xc2\x75\x1d\xb5\x5f\x19\xf1\x08\xc5\xb9\x8a\xd4\xfe"
      "\xb7\x97\x93\x14\xb3\x18\x20\x8b\x31\xfa\x36\x57\x8f\xfe\x2a\x48\x03\xe4"
      "\xf2\xbb\x39\x24\xba\x77\xd2\x0c\xb7\xa2\xbf\xd1\x72\xa5",
      4100);
  memcpy((void*)0x200000cc, "G\000\000\000", 4);
  *(uint64_t*)0x200000d0 = 0x20001480;
  memcpy((void*)0x20001480, "\x47\x03\x14\x04\x2f\x54\x19\x31\x86\xab\x9e\x70"
                            "\xf9\x96\xac\xe5\x3d\x66\x0f\xd9\x25\x1e\xf6\x0d"
                            "\xba\xe5\x7d\x8e\x7c\x75\x94\x99\xc7\x4f\x97\x48"
                            "\xa2\xbd\x56\xce\x0a\x43\xe2\x90\x93\xd8\xaa\x57"
                            "\xd1\x1e\x3d\x64\x83\xa4\x3c\x54\x63\x6b\xc9\xcb"
                            "\x05\x4f\xb8\xd6\x41\xcc\x0b\xea\x87\xde\x70",
         71);
  memcpy((void*)0x200000d8,
         "\x96\x17\x55\x35\x9e\x7b\xd6\x0a\x33\xc1\xd5\x3f\xfa\xec\x68\x43\x74"
         "\xbd\x15\xc4\x65\xaa\xf6\x17\x81\x79\xff\xf5\x45\xf2\xdb\xe9\x9e\x57"
         "\x56\xc2\x8f\xf3\x2c\x66\x66\x26\xde\xdc\x6c\xc4\x1c\x16\x2b\xa0\x1e"
         "\xa8\x21\x45\x63\x77\x05\xca\xf4\x4f\x80\x13\xa7\x6b\x39\xe0\xb6\x7c"
         "\x80\x1b\x22\x89\xfb\xc2\xe1\xb9\xd6\xa8\xdb\x00\x00\x00\x00\x00\x00"
         "\x00",
         86);
  *(uint64_t*)0x2000012e = 0x20001500;
  memcpy((void*)0x20001500,
         "\x7e\x03\x25\x04\xd0\x8c\xb1\xba\xa8\xb1\xbe\x7f\x86\xeb\xf5\x9e\xfb"
         "\xf9\x23\x40\x5e\x39\x76\x88\x3d\xda\x8d\xeb\x18\x2b\xc9\xd8\x55\x29"
         "\x71\x80\xeb\xf7\x51\xc7\x96\xcb\x06\x0a\x61\xe5\x2e\x09\xe7\xf6\x28"
         "\x90\xa5\xce\x41\xbe\xbd\x10\x92\x3a\xf8\x80\x33\xe4\x24\x7e\x1b\x5e"
         "\xeb\x5d\x7e\x2e\x12\xc8\xe9\xd8\xa8\xba\x87\x62\x57\x65\xa7\xf6\x86"
         "\xeb\x5d\x5c\x1b\x38\x1e\x86\xfb\x18\x81\x57\x9d\x50\x51\x5c\x9e\x8a"
         "\x1d\x87\xe0\x76\xaa\x2a\xd7\x08\x3c\x1a\x8f\x29\xe7\xe6\xa5\xec\x3e"
         "\x31\x23\xda\x03\xb6\xd7\x39",
         126);
  memcpy((void*)0x20000136, "y\000\000\000", 4);
  *(uint64_t*)0x2000013a = 0x20001580;
  memcpy((void*)0x20001580,
         "\x79\x03\x4d\x04\x44\x4c\x2c\x13\x72\x2d\xb7\xbc\x64\x6d\x22\xe9\x4a"
         "\xa5\x0a\x3b\x6a\x4b\x8a\x0a\x33\x0f\x93\x90\xab\x90\x0d\x65\x7c\x53"
         "\xcb\x16\x77\xc8\x90\xb7\x34\xc2\x80\xcd\x91\x34\xfe\xc9\xf9\xac\x1a"
         "\xb3\x0c\xb9\xfb\x2d\xf6\xdb\xb8\x8f\x2f\x86\x50\x9f\x16\x88\x7f\xff"
         "\xff\xd0\x45\x57\x26\x02\x81\xec\xce\xe6\xd8\x5f\x93\x91\xef\x42\xf8"
         "\x9f\x96\xfd\x02\xfc\xab\x1f\x61\xb1\xc1\xb7\x50\x2e\x63\xf3\x7c\x63"
         "\x4c\x57\xeb\x0f\x80\xb5\x73\x82\xf9\xe3\x1e\x88\xc4\x11\x2f\xa8\xa0"
         "\x3e\x58",
         121);
  memcpy((void*)0x20000142, "\xa0\x00\x00\x00", 4);
  *(uint64_t*)0x20000146 = 0x20001600;
  memcpy((void*)0x20001600,
         "\xa0\x03\xff\x3c\x26\x6e\x5b\x2b\x9d\x7a\x17\x05\xaf\x1d\xca\x1a\x16"
         "\x76\x77\xf1\x2c\x3a\x9a\x2c\xfa\xeb\x27\xd6\x15\xcf\x28\xc0\xa5\xc4"
         "\x96\xd9\x6a\x3c\x01\x7f\xb0\xe1\x71\x4a\xa6\x0d\x11\xd8\xc7\x7c\xda"
         "\x57\x4c\xee\x10\xc8\x9e\xd1\xc9\xc3\x0f\xdc\x7f\xc1\xe4\xbe\x2f\x51"
         "\xf0\xf6\x53\xa8\x47\xb2\x2a\xc5\x91\x7c\xb4\x7c\x7c\x7f\x90\x02\xab"
         "\xdc\xe1\xb2\xf0\x9d\xf3\x59\x94\xe9\xc4\xa0\x51\x04\xa9\x98\xa7\x06"
         "\x5d\xdb\xdd\x7b\x0d\x32\x1a\x2c\xbd\x7c\xd1\xe1\xb6\x93\x7f\xeb\xf8"
         "\xdd\x44\x3c\x6e\xfa\x9c\xcf\x91\xf0\xdd\x46\x46\xd3\x82\x0f\x73\x61"
         "\x6c\x85\xcb\x7c\xe6\x82\x55\x81\x8a\xba\x85\x7f\xd8\x20\xdc\x3f\x71"
         "\x7b\xb8\xd3\xe1\x88\xe9\xaf",
         160);
  memcpy((void*)0x2000014e, "p\000\000\000", 4);
  *(uint64_t*)0x20000152 = 0x200016c0;
  memcpy((void*)0x200016c0,
         "\x70\x03\x2b\x44\x07\x24\xd5\x84\xe2\xd7\x2b\x40\xca\x36\xb0\xcb\x67"
         "\xd8\x1b\x41\xaa\x12\x6c\x31\x50\x3f\x49\x9e\xf0\xd5\xc1\x91\xfb\xdf"
         "\x1a\x65\xa8\x0a\x73\x94\x18\x60\xc1\xc9\x48\x63\xd4\xd3\x6f\x24\xfb"
         "\xc2\x33\x39\x06\x2c\x25\xbf\x62\x5d\x0d\xf3\x6e\x82\x16\x4d\xfd\xc7"
         "\x59\x72\x20\xb1\x0a\x39\x53\xb9\x87\x70\xdb\x03\x62\xaa\x13\xf6\x61"
         "\x0b\x03\x30\x0c\xe7\x6d\xb8\x51\x72\x1c\xb3\x0c\x15\x13\x9a\x5b\x77"
         "\x7d\x65\x73\x8f\x44\xbc\x6f\xeb\xa5\xc4",
         112);
  syz_usb_connect(0, 0xce, 0x20002a00, 0x20000080);
}
int main(void)
{
  syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0);
  loop();
  return 0;
}