// https://syzkaller.appspot.com/bug?id=dca9e53cde5cb0b734ea6f65ae9b2bbfe424a48c
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <arpa/inet.h>
#include <dirent.h>
#include <endian.h>
#include <errno.h>
#include <fcntl.h>
#include <net/if.h>
#include <netinet/in.h>
#include <sched.h>
#include <signal.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/ioctl.h>
#include <sys/mount.h>
#include <sys/prctl.h>
#include <sys/socket.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <time.h>
#include <unistd.h>

#include <linux/genetlink.h>
#include <linux/if_addr.h>
#include <linux/if_link.h>
#include <linux/in6.h>
#include <linux/neighbour.h>
#include <linux/net.h>
#include <linux/netlink.h>
#include <linux/rtnetlink.h>
#include <linux/sched.h>
#include <linux/veth.h>

#ifndef __NR_clone3
#define __NR_clone3 435
#endif

static unsigned long long procid;

static void sleep_ms(uint64_t ms)
{
  usleep(ms * 1000);
}

static uint64_t current_time_ms(void)
{
  struct timespec ts;
  if (clock_gettime(CLOCK_MONOTONIC, &ts))
    exit(1);
  return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
}

static void use_temporary_dir(void)
{
  char tmpdir_template[] = "./syzkaller.XXXXXX";
  char* tmpdir = mkdtemp(tmpdir_template);
  if (!tmpdir)
    exit(1);
  if (chmod(tmpdir, 0777))
    exit(1);
  if (chdir(tmpdir))
    exit(1);
}

#define BITMASK(bf_off, bf_len) (((1ull << (bf_len)) - 1) << (bf_off))
#define STORE_BY_BITMASK(type, htobe, addr, val, bf_off, bf_len)               \
  *(type*)(addr) =                                                             \
      htobe((htobe(*(type*)(addr)) & ~BITMASK((bf_off), (bf_len))) |           \
            (((type)(val) << (bf_off)) & BITMASK((bf_off), (bf_len))))

static bool write_file(const char* file, const char* what, ...)
{
  char buf[1024];
  va_list args;
  va_start(args, what);
  vsnprintf(buf, sizeof(buf), what, args);
  va_end(args);
  buf[sizeof(buf) - 1] = 0;
  int len = strlen(buf);
  int fd = open(file, O_WRONLY | O_CLOEXEC);
  if (fd == -1)
    return false;
  if (write(fd, buf, len) != len) {
    int err = errno;
    close(fd);
    errno = err;
    return false;
  }
  close(fd);
  return true;
}

struct nlmsg {
  char* pos;
  int nesting;
  struct nlattr* nested[8];
  char buf[4096];
};

static void netlink_init(struct nlmsg* nlmsg, int typ, int flags,
                         const void* data, int size)
{
  memset(nlmsg, 0, sizeof(*nlmsg));
  struct nlmsghdr* hdr = (struct nlmsghdr*)nlmsg->buf;
  hdr->nlmsg_type = typ;
  hdr->nlmsg_flags = NLM_F_REQUEST | NLM_F_ACK | flags;
  memcpy(hdr + 1, data, size);
  nlmsg->pos = (char*)(hdr + 1) + NLMSG_ALIGN(size);
}

static void netlink_attr(struct nlmsg* nlmsg, int typ, const void* data,
                         int size)
{
  struct nlattr* attr = (struct nlattr*)nlmsg->pos;
  attr->nla_len = sizeof(*attr) + size;
  attr->nla_type = typ;
  if (size > 0)
    memcpy(attr + 1, data, size);
  nlmsg->pos += NLMSG_ALIGN(attr->nla_len);
}

static int netlink_send_ext(struct nlmsg* nlmsg, int sock, uint16_t reply_type,
                            int* reply_len, bool dofail)
{
  if (nlmsg->pos > nlmsg->buf + sizeof(nlmsg->buf) || nlmsg->nesting)
    exit(1);
  struct nlmsghdr* hdr = (struct nlmsghdr*)nlmsg->buf;
  hdr->nlmsg_len = nlmsg->pos - nlmsg->buf;
  struct sockaddr_nl addr;
  memset(&addr, 0, sizeof(addr));
  addr.nl_family = AF_NETLINK;
  ssize_t n = sendto(sock, nlmsg->buf, hdr->nlmsg_len, 0,
                     (struct sockaddr*)&addr, sizeof(addr));
  if (n != (ssize_t)hdr->nlmsg_len) {
    if (dofail)
      exit(1);
    return -1;
  }
  n = recv(sock, nlmsg->buf, sizeof(nlmsg->buf), 0);
  if (reply_len)
    *reply_len = 0;
  if (n < 0) {
    if (dofail)
      exit(1);
    return -1;
  }
  if (n < (ssize_t)sizeof(struct nlmsghdr)) {
    errno = EINVAL;
    if (dofail)
      exit(1);
    return -1;
  }
  if (hdr->nlmsg_type == NLMSG_DONE)
    return 0;
  if (reply_len && hdr->nlmsg_type == reply_type) {
    *reply_len = n;
    return 0;
  }
  if (n < (ssize_t)(sizeof(struct nlmsghdr) + sizeof(struct nlmsgerr))) {
    errno = EINVAL;
    if (dofail)
      exit(1);
    return -1;
  }
  if (hdr->nlmsg_type != NLMSG_ERROR) {
    errno = EINVAL;
    if (dofail)
      exit(1);
    return -1;
  }
  errno = -((struct nlmsgerr*)(hdr + 1))->error;
  return -errno;
}

static int netlink_query_family_id(struct nlmsg* nlmsg, int sock,
                                   const char* family_name, bool dofail)
{
  struct genlmsghdr genlhdr;
  memset(&genlhdr, 0, sizeof(genlhdr));
  genlhdr.cmd = CTRL_CMD_GETFAMILY;
  netlink_init(nlmsg, GENL_ID_CTRL, 0, &genlhdr, sizeof(genlhdr));
  netlink_attr(nlmsg, CTRL_ATTR_FAMILY_NAME, family_name,
               strnlen(family_name, GENL_NAMSIZ - 1) + 1);
  int n = 0;
  int err = netlink_send_ext(nlmsg, sock, GENL_ID_CTRL, &n, dofail);
  if (err < 0) {
    return -1;
  }
  uint16_t id = 0;
  struct nlattr* attr = (struct nlattr*)(nlmsg->buf + NLMSG_HDRLEN +
                                         NLMSG_ALIGN(sizeof(genlhdr)));
  for (; (char*)attr < nlmsg->buf + n;
       attr = (struct nlattr*)((char*)attr + NLMSG_ALIGN(attr->nla_len))) {
    if (attr->nla_type == CTRL_ATTR_FAMILY_ID) {
      id = *(uint16_t*)(attr + 1);
      break;
    }
  }
  if (!id) {
    errno = EINVAL;
    return -1;
  }
  recv(sock, nlmsg->buf, sizeof(nlmsg->buf), 0);
  return id;
}

static long syz_genetlink_get_family_id(volatile long name,
                                        volatile long sock_arg)
{
  int fd = sock_arg;
  if (fd < 0) {
    fd = socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC);
    if (fd == -1) {
      return -1;
    }
  }
  struct nlmsg nlmsg_tmp;
  int ret = netlink_query_family_id(&nlmsg_tmp, fd, (char*)name, false);
  if ((int)sock_arg < 0)
    close(fd);
  if (ret < 0) {
    return -1;
  }
  return ret;
}

#define FS_IOC_SETFLAGS _IOW('f', 2, long)
static void remove_dir(const char* dir)
{
  int iter = 0;
  DIR* dp = 0;
retry:
  while (umount2(dir, MNT_DETACH | UMOUNT_NOFOLLOW) == 0) {
  }
  dp = opendir(dir);
  if (dp == NULL) {
    if (errno == EMFILE) {
      exit(1);
    }
    exit(1);
  }
  struct dirent* ep = 0;
  while ((ep = readdir(dp))) {
    if (strcmp(ep->d_name, ".") == 0 || strcmp(ep->d_name, "..") == 0)
      continue;
    char filename[FILENAME_MAX];
    snprintf(filename, sizeof(filename), "%s/%s", dir, ep->d_name);
    while (umount2(filename, MNT_DETACH | UMOUNT_NOFOLLOW) == 0) {
    }
    struct stat st;
    if (lstat(filename, &st))
      exit(1);
    if (S_ISDIR(st.st_mode)) {
      remove_dir(filename);
      continue;
    }
    int i;
    for (i = 0;; i++) {
      if (unlink(filename) == 0)
        break;
      if (errno == EPERM) {
        int fd = open(filename, O_RDONLY);
        if (fd != -1) {
          long flags = 0;
          if (ioctl(fd, FS_IOC_SETFLAGS, &flags) == 0) {
          }
          close(fd);
          continue;
        }
      }
      if (errno == EROFS) {
        break;
      }
      if (errno != EBUSY || i > 100)
        exit(1);
      if (umount2(filename, MNT_DETACH | UMOUNT_NOFOLLOW))
        exit(1);
    }
  }
  closedir(dp);
  for (int i = 0;; i++) {
    if (rmdir(dir) == 0)
      break;
    if (i < 100) {
      if (errno == EPERM) {
        int fd = open(dir, O_RDONLY);
        if (fd != -1) {
          long flags = 0;
          if (ioctl(fd, FS_IOC_SETFLAGS, &flags) == 0) {
          }
          close(fd);
          continue;
        }
      }
      if (errno == EROFS) {
        break;
      }
      if (errno == EBUSY) {
        if (umount2(dir, MNT_DETACH | UMOUNT_NOFOLLOW))
          exit(1);
        continue;
      }
      if (errno == ENOTEMPTY) {
        if (iter < 100) {
          iter++;
          goto retry;
        }
      }
    }
    exit(1);
  }
}

static void kill_and_wait(int pid, int* status)
{
  kill(-pid, SIGKILL);
  kill(pid, SIGKILL);
  for (int i = 0; i < 100; i++) {
    if (waitpid(-1, status, WNOHANG | __WALL) == pid)
      return;
    usleep(1000);
  }
  DIR* dir = opendir("/sys/fs/fuse/connections");
  if (dir) {
    for (;;) {
      struct dirent* ent = readdir(dir);
      if (!ent)
        break;
      if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
        continue;
      char abort[300];
      snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort",
               ent->d_name);
      int fd = open(abort, O_WRONLY);
      if (fd == -1) {
        continue;
      }
      if (write(fd, abort, 1) < 0) {
      }
      close(fd);
    }
    closedir(dir);
  } else {
  }
  while (waitpid(-1, status, __WALL) != pid) {
  }
}

static void setup_test()
{
  prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
  setpgrp();
  write_file("/proc/self/oom_score_adj", "1000");
  if (symlink("/dev/binderfs", "./binderfs")) {
  }
}

#define USLEEP_FORKED_CHILD (3 * 50 * 1000)

static long handle_clone_ret(long ret)
{
  if (ret != 0) {
    return ret;
  }
  usleep(USLEEP_FORKED_CHILD);
  syscall(__NR_exit, 0);
  while (1) {
  }
}

static long syz_clone(volatile long flags, volatile long stack,
                      volatile long stack_len, volatile long ptid,
                      volatile long ctid, volatile long tls)
{
  long sp = (stack + stack_len) & ~15;
  long ret = (long)syscall(__NR_clone, flags & ~CLONE_VM, sp, ptid, ctid, tls);
  return handle_clone_ret(ret);
}

#define MAX_CLONE_ARGS_BYTES 256
static long syz_clone3(volatile long a0, volatile long a1)
{
  unsigned long copy_size = a1;
  if (copy_size < sizeof(uint64_t) || copy_size > MAX_CLONE_ARGS_BYTES)
    return -1;
  char clone_args[MAX_CLONE_ARGS_BYTES];
  memcpy(&clone_args, (void*)a0, copy_size);
  uint64_t* flags = (uint64_t*)&clone_args;
  *flags &= ~CLONE_VM;
  return handle_clone_ret((long)syscall(__NR_clone3, &clone_args, copy_size));
}

static void execute_one(void);

#define WAIT_FLAGS __WALL

static void loop(void)
{
  int iter = 0;
  for (;; iter++) {
    char cwdbuf[32];
    sprintf(cwdbuf, "./%d", iter);
    if (mkdir(cwdbuf, 0777))
      exit(1);
    int pid = fork();
    if (pid < 0)
      exit(1);
    if (pid == 0) {
      if (chdir(cwdbuf))
        exit(1);
      setup_test();
      execute_one();
      exit(0);
    }
    int status = 0;
    uint64_t start = current_time_ms();
    for (;;) {
      if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid)
        break;
      sleep_ms(1);
      if (current_time_ms() - start < 5000)
        continue;
      kill_and_wait(pid, &status);
      break;
    }
    remove_dir(cwdbuf);
  }
}

uint64_t r[6] = {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff,
                 0xffffffffffffffff, 0xffffffffffffffff, 0x0};

void execute_one(void)
{
  intptr_t res = 0;
  memcpy((void*)0x20000040, "nl80211\000", 8);
  res = -1;
  res = syz_genetlink_get_family_id(0x20000040, -1);
  if (res != -1)
    r[0] = res;
  res = syscall(__NR_socket, 0x10ul, 3ul, 0x10);
  if (res != -1)
    r[1] = res;
  *(uint64_t*)0x200004c0 = 0;
  *(uint32_t*)0x200004c8 = 0;
  *(uint64_t*)0x200004d0 = 0x20000480;
  *(uint64_t*)0x20000480 = 0x20000280;
  *(uint32_t*)0x20000280 = 0x3c;
  *(uint16_t*)0x20000284 = r[0];
  *(uint16_t*)0x20000286 = 1;
  *(uint32_t*)0x20000288 = 0;
  *(uint32_t*)0x2000028c = 0;
  *(uint8_t*)0x20000290 = 0xf;
  *(uint8_t*)0x20000291 = 0;
  *(uint16_t*)0x20000292 = 0;
  *(uint16_t*)0x20000294 = 0xc;
  *(uint16_t*)0x20000296 = 0x99;
  *(uint32_t*)0x20000298 = 0;
  *(uint32_t*)0x2000029c = 0;
  *(uint16_t*)0x200002a0 = 0x1b;
  *(uint16_t*)0x200002a2 = 0xe;
  *(uint8_t*)0x200002a4 = 0x1c;
  *(uint8_t*)0x200002a5 = 0x15;
  *(uint8_t*)0x200002a6 = 0;
  *(uint8_t*)0x200002a7 = 1;
  STORE_BY_BITMASK(uint8_t, , 0x200002a8, 0, 0, 6);
  STORE_BY_BITMASK(uint8_t, , 0x200002a8, 1, 6, 1);
  STORE_BY_BITMASK(uint8_t, , 0x200002a8, 0, 7, 1);
  memset((void*)0x200002a9, 255, 6);
  *(uint32_t*)0x200002af = 0;
  *(uint8_t*)0x200002b3 = 8;
  *(uint8_t*)0x200002b4 = 2;
  *(uint8_t*)0x200002b5 = 0x11;
  *(uint8_t*)0x200002b6 = 0;
  *(uint8_t*)0x200002b7 = 0;
  *(uint8_t*)0x200002b8 = 0;
  *(uint16_t*)0x200002b9 = 0;
  *(uint64_t*)0x20000488 = 0x3c;
  *(uint64_t*)0x200004d8 = 1;
  *(uint64_t*)0x200004e0 = 0;
  *(uint64_t*)0x200004e8 = 0;
  *(uint32_t*)0x200004f0 = 0;
  syscall(__NR_sendmsg, r[1], 0x200004c0ul, 0ul);
  memcpy((void*)0x20001000, "wlan1\000\000\000\000\000\000\000\000\000\000\000",
         16);
  res = syscall(__NR_ioctl, -1, 0x8933, 0x20001000ul);
  if (res != -1)
    r[2] = *(uint32_t*)0x20001010;
  *(uint64_t*)0x20001200 = 0x20000200;
  *(uint16_t*)0x20000200 = 0x10;
  *(uint16_t*)0x20000202 = 0;
  *(uint32_t*)0x20000204 = 0;
  *(uint32_t*)0x20000208 = 0x20000000;
  *(uint32_t*)0x20001208 = 0xc;
  *(uint64_t*)0x20001210 = 0x200010c0;
  *(uint64_t*)0x200010c0 = 0x20001040;
  *(uint16_t*)0x20001040 = r[0];
  memcpy((void*)0x20001042,
         "\x00\x04\x26\xbd\x70\xbe\xbc\x58\xb2\xce\xe1\x82\x1f\x49\x30\xb8\xe6"
         "\x8a\x36\xbe\x32\xd1\x00\x00\x62\x95\x98\x52\x00\x9d\x43\x9a\xd5\xdb"
         "\xa5\x83\x41\x28\xff\xf8\x17\xcb\x1e\x24",
         44);
  *(uint32_t*)0x2000106e = r[2];
  sprintf((char*)0x20001072, "%020llu", (long long)r[0]);
  *(uint64_t*)0x200010c8 = 0x5c;
  *(uint64_t*)0x20001218 = 1;
  *(uint64_t*)0x20001220 = 0;
  *(uint64_t*)0x20001228 = 0;
  *(uint32_t*)0x20001230 = 0x80;
  syscall(__NR_sendmsg, -1, 0x20001200ul, 0x8c0ul);
  memcpy((void*)0x20000000, "./file0\000", 8);
  syscall(__NR_mkdir, 0x20000000ul, 0x150ul);
  syscall(__NR_munlock, 0x20ffb000ul, 0x2000ul);
  syscall(__NR_setsockopt, -1, 0x29, 0x3b, 0ul, 8ul);
  memcpy((void*)0x20000100, "./file0\000", 8);
  syscall(__NR_mount, 0x20000000ul, 0x20000100ul, 0ul, 0x120100cul, 0ul);
  memcpy((void*)0x20000340, "/dev/null\000", 10);
  syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000340ul, 0x80100ul, 0ul);
  memcpy((void*)0x20000240, "./file0\000", 8);
  memcpy((void*)0x20000280, "./file0\000", 8);
  syscall(__NR_pivot_root, 0x20000240ul, 0x20000280ul);
  *(uint32_t*)0x200002c0 = 0;
  syscall(__NR_accept, -1, 0ul, 0x200002c0ul);
  res = syscall(__NR_socket, 0x10ul, 3ul, 0);
  if (res != -1)
    r[3] = res;
  syscall(__NR_poll, 0ul, 0ul, 0);
  *(uint16_t*)0x20000140 = 1;
  *(uint16_t*)0x20000142 = 0;
  *(uint64_t*)0x20000148 = 0;
  *(uint64_t*)0x20000150 = 0;
  *(uint32_t*)0x20000158 = 0;
  syscall(__NR_fcntl, -1, 6ul, 0x20000140ul);
  res = syscall(__NR_socket, 0x11ul, 2ul, 0x300);
  if (res != -1)
    r[4] = res;
  memcpy((void*)0x20000580, "bridge0\000\000\000\000\000\000\000\000\000", 16);
  res = syscall(__NR_ioctl, r[4], 0x8933, 0x20000580ul);
  if (res != -1)
    r[5] = *(uint32_t*)0x20000590;
  memcpy(
      (void*)0x20000300,
      "\x11\x51\x8d\xc6\x22\xcf\xe1\x0c\xfb\x53\x34\xb2\xce\x6b\xd4\xef\x37\x23"
      "\xa0\x45\x4b\x8e\xdd\x51\x00\xd9\x29\x17\x46\x90\xef\x17\xcf\x09\x5f\x9b"
      "\x2c\xf8\x3b\x18\x3b\x4d\xe0\x8a\xa4\x48\x5b\x34\xaf\xae\x95\x2a\x68\xa6"
      "\x56\xfa\xec\x73\xfe\x7d\x38\x98\x58\x70\x0c\x2c\xc2\xff\xd4\xdc\xb3\x61"
      "\x4d\xc0\xcb\x2e\xe2\x60\x1a\xbe\x0b\x28\x36\x0f\x92\xb6\xe8\x95\x38\xe6"
      "\x39\x53\xd1\x79\x61\x23\xc8\x50\x15\xf7\x2e\x7e\xa0\xcb\x4d\xa2\x07\x3e"
      "\x9f\x5a\x6e\x34\x88\x4e\xd2\x40\xaf\xec\x8b\x71\x8d\x7a\x78\xb9\xc5\xdc"
      "\x53\x81\xb4\xe1\xb4\xad\x9d\x9f\x8f\x2d\x64\x6b\x8b\x81\x9e\x2e\x30\xcc"
      "\x13\x82\x51\x2a\x2b\x82\x08\x7f\x7b\xcd\x65\x3b\xff\x37\x3f\x39\x52\x28"
      "\x35\x51\x3f\x09\x5f\x8c\xb8\xec\x01\xfa\x6d\x30\x9e\x92\x6b\x3d\xa2\x3d"
      "\xd2\x50\xf7\x6e\xe7\xd4\x3e\xbe\xd1\xd4\xcc\x69\x73\x88\x5f\x1d\xee\x59"
      "\xba\x49\x3e\x92\x73\x39\xf6\x15\xa0\x95\xb5\x9a\x5c\xee\xd1\xbd\xaf\xaa"
      "\xc9\x47\x97\x5d\xa5\x5f\x2a\xb4\xb0\xb5\xe2\xc9\xaf\x02\x6d\xd8\xa0\x25"
      "\x57\x9f\x55\x3e\xaa\xbc\x45\x9d\x1a\x7e\xcd\x4f\x90\x9f\xf0\x4a\xfd\x26"
      "\x7d\xaa\x3c\x1b\xa7\x89\xba\x70\x9f\x73\xfe\x15\x78\x8e\xae\xcd\x31\x58"
      "\x3e\x13\xff\xfa\x6f\xbc\x59\x77\x14\x0e\x1f\x7e\x56\xd6\x42\xae\xec\xe1"
      "\x6e\x02\xed\xda\x14\x35\xc9\x59\x07\x50\x92\x34\xd8\x8e\x79\xfd\xed\x3c"
      "\x4b\x5b\x9b\xbe\x2a\xb3\x36\xa8\xd7\x1f\x1b\x04\x7a\xcc\x9d\x36\xd9\x2f"
      "\xdf\x81\x8d\xca\x5a\x5b\x77\x22\x13\x80\x45\x90\x30\xba\xa8\x22\xd0\xb0"
      "\x2b\xbd\x5f\xf6\x38\x8e\xb2\xcc\xa1\x9b\x55\xdd\x96\x13\x13\x9c\x8f\xef"
      "\x14\x92\xc7\x4c\x8f\xa1\x36\x04\x1f\x31\x40\xed\xa0\x4a\xdb\xee\xd3\x4d"
      "\x04\xa4\x4e\xd9\x1c\x5f\x3f\x68\xaf\xb3\xd7\xc9\x04\x36\x03\xbc\x3a\xf4"
      "\xbd\x56\xd8\x92\xb1\x72\xde\x28\xe7\x9d\x31\x24\x00\x97\xfc\x88\xbb\xf2"
      "\x51\x12\x45\x5f\xc4\x35\x49\xbe\xc0\x0c\xde\x33\xd9\xe0\x85\x68\x96\xde"
      "\x45\x86\x60\x68\x17\xc7\xe2\x50\x72\xea\x49\x61\x83\xc0\x01\x90\xe7\x7b"
      "\x2f\x2c\x97\x4f\x93\x52\x57\xa4\xc9\xc4\x49\xb6\x1d\xeb\xfe\xd3\xb0\x57"
      "\x72\x5d\xb3\x5e\x14\x5f\x3c\xb8\x21\x57\x1c\x16\xed\xdc\x24\xf4\x2c\x9b"
      "\x23\x58\xa9\x59\xae\x02\xa4\xb0\x44\x22\x3f\x4e\xa6\x3d\x0a\xd6\xcc\x11"
      "\xea\x1f\xb4\xeb\x1d\x2a\x0d\xdf\x05\xf6\x2f\x46\xe4\xbb\xd7\x75\x00\xe9"
      "\x6d\x19\x6f\x11\x6c\xd1\x29\xa2\x39\x22\x88\x38\xb7\x16\x48\x47\x66\x6f"
      "\x68\x24\x80\x05\x65\xfe\xe6\xd9\xe5\xbb\x4a\x9b\x51\xa3\x0c\xf5\xbd\x34"
      "\x85\x58\x27\xf5\xd4\x76\x5d\x2e\x93\x29\x41\xf3\x19\x9c\xe5\x50\x25\x8b"
      "\x0f\x55\xa3\xca\x00\x39\x56\x0e\x32\x72\x7f\xdb\xba\x24\xfb\xdd\xc1\xd7"
      "\xb3\x84\x5e\xaa\x46\x90\xc0\xa4\x9a\x60\xd9\x07\x2d\x57\xe1\xbe\x80\xcb"
      "\xf1\xb1\xbd\x26\x11\x93\xa9\x07\xf9\x87\xbb\xd9\xbf\xf5\x22\xe1\xa1\xf1"
      "\xed\x90\xc8\x3d\xaa\x0d\xdd\x7f\xb9\x05\x0e\x7f\xcc\x6d\xe6\xdc\x62\x17"
      "\x3b\xb3\xd8\xa8\xec\xa9\x0d\xcc\x0d\xd4\x93\x17\x59\x2e\xc4\xf1\xaa\x02"
      "\x39\x72\x8d\x16\xc7\xe5\xbe\x74\x71\xb2\x05\x9b\xff\x7e\xe5\xcc\xc5\xde"
      "\xe9\xd5\xb0\x5c\x3a\x7b\x6f\x56\xec\x31\x53\xf9\xf3\x18\x86\xab\x59\xe6"
      "\x8b\x5f\x2e\x5b\x7e\x8f\xe6\xb8\x93\x30\xf3\x79\x29\xe9\xbb\xf2\xf4\x8a"
      "\xdf\xb9\xbc\xde\x18\x22\xc0\x21\xcc\xcf\x5e\x8f\xa0\x9c\x37\xd1\xcd\xb2"
      "\x81\x4d\xf6\x01\x8a\x18\xc9\x9f\xe0\xdb\xe7\x52\x23\x30\x99\x3e\x06\x4f"
      "\x76\x34\x1b\x9f\x25\x0e\x95\xad\x39\xe4\xe9\x97\x4a\x74\x9f\xe5\x47\x69"
      "\x63\x84\xfd\xec\x1a\x21\x1c\xbc\xbd\x79\x1c\xa7\x34\x01\x97\xdc\x2a\xbf"
      "\x49\x3f\xa8\x3e\xed\x3c\x7a\xe0\x59\x89\xbf\x27\x7c\x43\x81\xf6\xa8\xbb"
      "\x81\x5d\x85\x08\xba\x35\x9f\xc2\xec\xb7\x97\x95\x65\x13\xe2\xe9\x00\xb2"
      "\x54\xe8\xe8\x36\x0e\x09\xbf\x83\x79\xca\x06\x34\x4f\x98\x92\x6e\xda\x90"
      "\x0c\x6a\x28\x2a\xd4\x71\x1a\x91\xd8\x47\x59\x2f\x99\xfc\x86\xf7\x40\xa3"
      "\x66\x7c\x47\x53\xf8\x5d\xbf\xbe\x1e\x6f\x72\xcb\xb9\x18\x1b\x2c\x52\x51"
      "\x7a\xd9\x42\x05\xbf\xdc\xa5\x68\x6a\xeb\xb6\xe6\x69\x2a\xdc\xac\xcf\x36"
      "\x17\x6b\x4a\xf4\xe0\x5b\x72\x82\x9c\x57\x7d\xa7\x42\x59\xdb\x68\x2b\x10"
      "\x8f\x99\xbf\x13\xd3\xf3\xad\x67\x76\xaa\x02\xe6\x04\x73\x99\xe7\xf9\x1e"
      "\x4d\x21\x24\x4d\xf3\xd3\xa6\xf7\x9f\x67\x96\x41\x63\x30\x58\x5e\x75\x1d"
      "\x5a\x78\xab\x8a\x71\x05\x39\xd1\x8e\x83\xf3\x7c\x20\x67\x8c\xba\x64\x16"
      "\x4d\x90\xeb\xab\x90\x6f\x49\x1f\xda\xc2\xa6\x66\x7d\xf7\x1e\x77\xc2\xd8"
      "\x51\x33\xf3\x8f\x6d\x93\xa8\x1d\x59\xc4\xdd\x07\xc4\x1c\xe6\x79\x2e\xe9"
      "\x43\xab\xdb\x68\xeb\x28\x25\x8b\xaf\xc5\x28\x9b\xcd\x39\x64\x68\x90\x5e"
      "\x73\x4f\x0e\x37\x41\xf9\xd2\xff\xef\x1a\x15\xd0\xc2\x2f\x1e\xab\xdc\xb7"
      "\xad\x2a\xb9\xd5\x6f\x47\x4d\x9e\xe2\x1e\x4d\xa5\xf4\x4c\xd4\xcc\x50\x2a"
      "\x2e\x81\x64\x13\x03\xf1\xf4\x0a\x27\x78\xb3\x09\xe1\x32\x84\x2f\xa1\x95"
      "\x55\xe4\x74\xa2\xb4\xa1\x1f\xa8\x11\xc3\xb6\x18\x53\xbb\xee\x0f\x6c\x90"
      "\xeb\xa5\x62\x98\x0a\x27\x84\xb5\x47\xca\x5a\x46\xdc\xf1\x54\x04\x84\xb0"
      "\x99\xe8\x6f\x12\x61\x57\x71\xb8\x2c\xf2\x06\xd9\x31\xc6\x49\x09\x0e\xf3"
      "\xc8\x6a\x45\x9f\x9f\xd0\x8b\xaf\x73\x07\x06\x85\xde\xdb\xf0\x39\x1d\x80"
      "\x2b\x38\x2b\x60\x95\x8c\xa0\x10\x7f\xb1\x5d\x27\x1f\x3b\x3e\x90\x1f\xb0"
      "\x23\x2d\x64\xab\x94\x8b\xe7\xfa\xf7\x57\xd3\xc1\xe2\x8d\xfc\xe6\x24\xdc"
      "\xa1\x82\x1e\xc1\x0c\x3f\xee\x8d\x18\xa8\x44\x37\x82\xb5\x6a\x62\x1d\xe0"
      "\x77\xb9\xc3\xe7\x82\xfe\x54\x20\x2a\x88\xb5\x20\x32\x88\xf3\x20\x56\x6a"
      "\xf2\x1f\x25\x53\x00\x67\x64\x30\xfa\x5c\xb2\x30\x74\xe0\x0c\xe8\xa5\x36"
      "\xc8\x42\x96\x06\x96\xf9\x2a\x5d\xdc\x2f\xfb\x3c\xd9\xe2\x1a\x56\xa0\x0b"
      "\x21\xd0\xa4\x5e\x08\x86\xa7\xc7\xc2\x6c\x0f\x04\xc6\x17\x7a\x51\x32\xad"
      "\x5e\xed\x5d\xb5\x5e\xe0\x04\xeb\xa7\x0a\x57\x75\xa4\x11\x71\x7d\x95\x9f"
      "\xe4\xff\xb5\x5f\x81\x61\x30\x35\x11\x59\xaa\x49\x00\xa1\x30\xf0\x8a\x9c"
      "\x3b\xc3\x6f\x40\x5a\xac\x4f\x98\x31\x09\x90\xd6\xa8\x2d\x5e\xb0\x2a\xed"
      "\xef\x11\x4c\xfb\x51\xc3\xa2\xa4\x8e\x2c\xdc\xf5\x2b\x34\x57\xd8\x33\x0f"
      "\x48\x6a\x34\x35\xbf\x5b\xf5\xd7\xd2\xb9\xe6\x18\x13\x2d\x4d\x6e\x5a\x13"
      "\x1e\x02\x3d\x25\x89\x4c\x2f\x55\x9c\x24\x9a\x8f\x33\xbd\xcb\xda\xdd\x6f"
      "\x26\xa1\x6d\x57\x62\x8c\xb9\x96\x59\x08\x95\x56\xb1\x50\x18\xd9\x04\x36"
      "\x45\x88\xd3\x21\xf4\x05\xc7\x1b\x13\x0c\xa5\x1b\xc3\x87\xe3\x63\xe4\xab"
      "\x6e\xbc\x42\x18\xef\xc2\xf6\xfb\xa0\x83\xfa\x80\x63\xb1\x0f\x08\x71\x4c"
      "\x9a\xdf\x33\x9d\xf8\x6b\xe0\xe4\x24\x7a\x68\xd2\xe8\xdf\x2c\x0b\xb7\xd1"
      "\x58\x3e\x6d\x79\xc9\x77\xf1\xa5\x3c\x74\x85\x58\x4c\xab\xb3\xc9\x09\x62"
      "\xbf\xdd\x9f\x96\x29\x36\xb3\x3b\x16\x6f\x4d\x7c\xd9\x30\xfa\x75\x8d\xb2"
      "\xfc\xfc\xd2\x5d\x0b\xdc\x3a\x69\x91\x40\xdd\xca\x92\xca\x9b\xbf\xd4\xed"
      "\x43\x18\xb9\x64\x99\x13\xad\xd9\x53\x05\xc5\x08\x3f\x8a\xd6\x99\xf5\xed"
      "\x49\x4d\x72\x97\x7b\xa6\x44\x0c\xfa\x41\xae\xbb\x8b\x5c\x26\xea\x64\x6e"
      "\x24\xd9\xa4\xfe\x54\xf4\xf6\xc1\x10\x5d\x4a\x1d\x28\xb2\xee\x4f\x9c\xe2"
      "\x83\xcf\x70\x72\x82\xa8\xdc\xa1\xc9\xbc\xf0\x76\x6f\xf7\xd9\xec\x4c\xc0"
      "\x5f\xd3\xbb\x15\x86\x15\xa6\xd8\xa4\x6d\x10\xf3\xe1\xe1\x0a\x9c\xbc\xcc"
      "\x44\xd3\x0a\x48\xd5\x29\x02\x15\xdf\x88\x1e\xbd\x15\x20\xa1\x06\x9d\x43"
      "\x00\x59\x9b\xf7\x30\x5c\xd1\x8c\x94\x5a\x40\x62\x17\x5a\x68\x21\x64\x8f"
      "\x67\x2c\x12\x0d\x1c\x53\xf5\x4b\x7b\x4e\x01\x79\xdb\x48\xb9\xed\x92\x3a"
      "\x22\x2a\x0d\x08\xbf\xba\xfc\x57\xd8\x8e\x62\xa9\x33\xc3\xd8\x16\x63\x1b"
      "\xcb\xf9\x41\x6d\x01\x86\x2b\xd5\x37\x4c\x4b\xb5\xa2\xfa\x00\x37\x2a\x97"
      "\x05\x03\x53\x80\x80\xf9\x31\x42\x7d\xe4\x0a\x0d\x13\xe5\x25\xc6\x4a\x19"
      "\x2f\xf6\x01\xe2\xa9\x8d\xe3\xd4\x5c\x34\xe8\xa9\x2b\x02\xba\x57\xf1\x8d"
      "\x62\x28\x8a\x85\x30\x74\x53\xfa\x3e\x3a\xae\x4a\x67\x4d\xc3\x92\x4b\x52"
      "\x9a\x94\x12\x33\xe5\xa5\x1c\x07\x11\xa3\x74\x34\xf0\x79\xb4\x04\x90\x8f"
      "\x02\x2e\xc3\x7b\xad\x2f\x84\x2a\x17\x78\xfa\xb0\xf0\x01\xf7\xf7\x76\x30"
      "\x4b\xbc\xe7\x3b\x6f\x8c\x25\x7b\xa0\xaa\xc0\x77\xe1\x66\x8a\x5e\x4c\xe3"
      "\xd8\xe4\x7b\x62\xf5\xb7\xce\xfd\x5c\xaf\x6e\x17\x21\x25\x75\x4e\x44\xa8"
      "\xe9\xb8\x8e\x4f\x61\x59\x1e\x87\x7c\xe9\xe2\x67\xc7\x3c\x3c\x4e\x06\xee"
      "\xb6\x00\x13\x7e\x2b\x23\xa3\xf7\x88\xe8\x8a\x6f\xf3\xb8\xb8\x05\xfd\x70"
      "\xe6\x76\x1e\x3c\x03\xb7\x52\x60\xf7\xc1\x2e\x44\x78\x31\xc4\x86\x40\x12"
      "\x22\x64\x93\x07\x40\x19\x4d\x9b\x40\x7d\x67\x12\x35\x7d\xaa\x73\xd5\xff"
      "\xe7\xa1\x2e\xa8\x64\xf3\x6c\xd4\x6e\x43\x0a\x2a\xfa\x24\x62\xcc\xba\xe9"
      "\x83\x95\xc4\x79\x86\xbd\x57\x1c\xf5\x25\x3b\x06\xea\x3c\x3d\x4a\x88\x13"
      "\x9a\xe1\xd3\x53\x34\x9d\xdf\x67\xe7\x5b\x08\x03\x7b\x51\xbb\x7f\xbf\x2a"
      "\xd9\x05\xc0\x59\x25\x1e\x62\x2d\xbb\x83\xad\x6b\x5c\x93\x1f\xd6\x30\xbf"
      "\x93\x1f\x6f\xd7\xbd\x39\x98\x94\x26\x7e\xb0\xd7\xf7\x28\x0f\x51\x0a\xae"
      "\x12\x7a\x6f\xcc\x1a\x9c\x71\xdc\x4a\xaf\xae\x39\xa3\x0e\x4a\x98\x5a\x1c"
      "\xe4\xab\x24\xbb\x31\x1f\xdc\xe2\xc4\x6b\xd3\x43\x71\xf4\xd3\x3a\x6f\xb7"
      "\x97\x12\x6d\xae\xa0\xb7\x4e\xa8\x2c\xff\x6b\xf5\x4f\xe3\xf1\x33\x91\xa4"
      "\xc7\x86\x8a\xa3\xb2\xbd\xfb\x11\xe0\x94\x33\x89\xc5\x94\x8f\x24\x9e\xef"
      "\x62\x56\x14\x6f\x36\x50\x0d\x57\x6c\x52\x86\x57\x7b\x18\xb5\x4f\xe0\x54"
      "\xd6\x3e\x88\x15\x58\x00\xbb\x42\x62\x82\xc7\x65\x12\x2e\xf4\xc0\xbc\x9e"
      "\x85\xf8\xe3\xff\x28\xdc\xcb\x3a\x8a\x19\xfc\x0a\x9c\xde\x63\x99\x9a\x47"
      "\x2a\x40\x57\x47\x40\xf1\x48\xbe\xee\x3f\xb6\x5c\xd6\xce\x87\xac\x1d\x51"
      "\x19\xab\x49\x39\x7c\xe3\x45\x43\x42\x29\xf9\xed\xaf\x78\x91\xeb\xc9\x3f"
      "\x2c\x85\x1f\x1c\xa5\x41\xc2\xcb\x76\x73\x86\xa5\xeb\x8b\xeb\xda\x7b\xfe"
      "\x67\xcc\xc1\xf8\xfe\x78\xc5\x8c\xa5\x5a\x24\x0a\x26\x8e\xfa\x6b\x97\xe5"
      "\x74\x96\x8b\x4c\x51\xb4\xef\xf6\xb4\x30\x09\x41\xe6\x9b\xda\xa6\x51\xc3"
      "\x60\x2f\xeb\x3e\x4f\xe4\x47\x16\x7f\xea\x03\xa4\x27\x4d\xd6\x85\x9a\x90"
      "\xa9\xc2\x3f\xb8\x8e\xde\x16\x3b\x3e\x03\x34\x59\xc6\xae\xc4\xf7\x8b\x50"
      "\x33\x02\x4c\x28\x79\xb0\x3a\xd4\x94\x01\xb6\x8b\x0e\x18\x04\x0a\x36\x2c"
      "\xa5\x00\xf9\x8e\xc8\x70\x45\xf6\xe5\x2a\xca\xdd\xea\xd1\x64\xb0\x17\x09"
      "\x53\x56\x74\xbd\x39\x86\x65\x64\xe3\xb4\xf8\x28\x87\x9e\x3c\xb2\x61\xd4"
      "\xc1\x9a\x8d\xcf\x5e\xb9\x63\x43\xb2\x4e\xe0\x56\x96\x70\xf9\xa2\x63\x72"
      "\x2c\xc2\xe6\x44\x6b\x95\xb1\xc5\xa3\x21\xd8\x2a\xae\x62\x80\xc7\x76\x38"
      "\xb2\x82\xc4\xbf\x8b\xfd\x19\x61\x53\xc8\xaf\x5e\xe0\xe9\x80\x05\x9d\xe6"
      "\xc3\x33\x4e\x14\x78\x37\x5f\xc0\x4e\x7e\xd4\xad\xd4\x61\xf9\x24\x61\xda"
      "\x66\xd8\xa6\x96\x9b\x58\x34\x19\x55\x80\x3f\x1a\xa8\xff\x39\x60\x5a\x11"
      "\xc8\x1f\x72\x42\xb8\x51\xf8\x31\xf2\x40\xb6\x64\x70\x01\x19\xbe\x0a\xf7"
      "\x39\x42\xcd\xb9\x55\x09\xb0\x5e\x4a\xcf\xa1\x8f\x0c\xd2\xd1\x2a\xda\x87"
      "\xa2\x98\x3c\x89\x34\x8e\x34\xc6\x67\x38\x1a\xbb\x1c\x6f\x5e\x7a\xda\x4c"
      "\x34\x9a\x86\xe4\xb6\xa3\x5f\xc6\xb5\x02\xdb\xac\x49\xda\x0a\x3a\x0c\x26"
      "\x8e\x3a\xdc\xfd\x7f\x16\xbb\x45\x6d\xa8\xfc\xb2\xa1\xef\xb8\x04\xd8\xdd"
      "\x5e\xa4\x23\x58\xf1\x1a\x83\xc8\x16\x0b\x9c\xbf\xfd\x26\x08\xba\x54\x17"
      "\x9f\xe7\x2c\xea\x3f\xa6\xcb\xc4\x5c\xc0\xae\x13\x03\x1b\xfb\xf5\x56\x28"
      "\xea\xf7\x24\xa1\x45\x57\x53\x74\xd4\x9c\xa1\x4e\xea\x39\x20\xd2\x91\x8a"
      "\xc8\x8d\x48\x9a\x26\x35\x94\xb2\xac\x82\x40\x6d\x3e\x65\xbf\xbd\x24\x98"
      "\x4e\xf6\x71\x3b\xb2\x7c\xc0\xb5\xd8\x20\xe4\xa2\xde\xd1\x2e\x48\xf8\x62"
      "\xd0\xc3\x02\x7d\x1d\x3a\x3a\xba\x4c\x83\x19\xe3\x0e\x73\x76\x06\x48\xb6"
      "\xdc\xfc\x06\x53\x41\x97\x1c\x63\xbe\xc1\x17\xae\xcf\xea\xa5\x1d\x2e\x9b"
      "\x64\xe7\x15\xfc\x31\x73\xf8\x2f\x0b\x63\xfa\xad\xe5\x94\x0a\x04\xa5\xb1"
      "\x24\x79\xc8\x88\x9f\x22\x58\xe9\x2b\x32\xfb\xbd\x36\x6c\xbf\x42\x10\x9a"
      "\xdc\xb0\x82\x92\xd7\x11\x8b\xeb\x3b\x25\x4c\xe7\x24\x06\xa1\x33\xa2\xeb"
      "\x1e\x55\x23\xa9\xb3\xa5\xcc\x7e\xe6\x88\x55\x91\x30\x18\xbb\x84\x71\x4f"
      "\x0f\x17\x4f\xa5\x95\x54\x11\xd0\x21\x66\xad\x2b\x24\x78\xcd\x94\xe7\x2a"
      "\x2a\x96\xc9\x04\x1a\x04\xee\x47\xbc\x29\x87\x23\xd7\x9f\xb3\xff\x6f\x86"
      "\x57\xa6\x87\xbe\xb4\x82\xee\x52\x82\xc3\x5f\x4f\x4a\x05\xec\xa0\x22\x4b"
      "\x2b\x54\xe4\x7d\x7a\x92\x5a\x55\xe5\x42\xf1\x8a\xf9\x15\x5e\xea\x29\x35"
      "\xe8\x1d\x21\xa0\xcd\x1c\x45\xa0\x92\x14\xb3\xdf\x4b\xc9\x44\x1c\x43\xae"
      "\xfc\x16\xe3\x16\x5b\xb2\x8f\x2a\x32\xb6\x9e\xd7\xbf\x15\xdf\xc5\x13\xf9"
      "\x6d\x1b\xb5\x90\x52\x48\xac\x6c\xe5\x4d\xdf\x6c\x81\x15\xe4\x76\x85\x72"
      "\x87\x80\x81\x7d\xbe\x52\xdc\x0d\xd1\x6e\x59\xfe\x46\xa1\x9d\x2a\xa3\x0e"
      "\xa2\x6c\xae\xcd\xe0\x75\xdf\xd9\xc9\x97\x3a\x73\xb1\x8d\x64\x1e\x8a\xbc"
      "\x26\x0e\x9d\x0e\xc7\x36\xd6\xe4\xe9\xfe\xb1\xd7\xd3\x4d\xe5\x5b\x9c\xf0"
      "\xb6\x83\x8a\x70\xfd\xbc\xde\x4f\xaf\x21\x6d\xf5\xed\xbc\xae\xc9\x79\x6d"
      "\x8d\x74\x91\x49\x12\xe0\xda\x1b\x44\x5d\xe0\x22\x6c\x4d\x04\x59\x51\x44"
      "\x8b\x0b\x16\x07\x2e\xc0\xb0\x26\xc1\x95\x9c\x8c\x07\xbd\x57\xc3\x3b\x1d"
      "\xfb\x73\xdd\x8e\xff\x63\xe9\x6e\x81\x85\x8d\x9e\x98\x79\xa9\x0b\x4b\x0d"
      "\xc9\x53\xb1\xc1\x76\xfb\xd4\x61\x08\x4c\x46\x5c\xc1\x07\x13\xf4\xd8\x47"
      "\x82\x8a\xb1\x63\xdf\xfe\x04\x75\x3e\x91\xd5\xbf\x4c\x71\x5e\x72\x8d\x46"
      "\xcb\x46\xea\x79\x15\x9d\xb2\xee\x65\xe8\x6c\x1e\x03\xed\xfc\x7d\x36\x4f"
      "\x57\xa3\x9f\xad\x26\xc7\xd9\x5c\x82\x28\xb3\xdc\xd4\x28\x6f\xbc\x47\xa5"
      "\xf2\x1a\x7c\x1d\x95\x9a\xe2\xea\x94\x73\x14\xef\x39\x2b\xcd\xc7\xce\xb3"
      "\xf4\xda\x93\x32\xed\xc2\x2f\xd9\xef\x17\xca\x6d\x9b\x56\x78\x88\x52\x79"
      "\xaa\x78\x74\x63\x4f\xfd\xd1\x77\x21\xed\xa5\x0d\x03\xd3\x72\x45\xf9\x96"
      "\x69\x73\xc0\x23\x1e\x90\x3c\x9b\x23\xb6\xa6\xf1\x73\x6e\xa7\x5e\x13\x63"
      "\x8d\x40\xb7\xf5\x28\x7d\x2f\x5f\x42\x94\x11\xaa\x4c\xb7\xa2\x69\xf9\x8e"
      "\x44\x26\xd7\xb8\x77\x4b\x8d\xde\x9b\xe8\x94\x1d\xae\xda\x5a\xdd\x77\xa4"
      "\xc5\x55\x81\x83\xcf\x4b\x22\xcb\x51\xd1\xd9\x3f\x27\x9c\xcf\xf8\xef\x2b"
      "\xb3\xef\x64\x8a\x1f\x2b\xbf\xe8\xf6\xfe\x22\x41\xac\x35\x83\x36\x57\xd5"
      "\xfe\x0d\x20\x3a\xf7\xd2\xb7\x51\x45\x99\xd9\x68\xf6\x2e\x19\xde\x88\xb6"
      "\xd5\x11\xf9\x63\x2b\xfa\xaa\x0d\x92\xdf\x6e\xb9\xf7\x6c\x50\x09\x3a\x75"
      "\xfe\x76\xd8\x47\xf7\xf7\x71\x0e\xd7\x60\x74\xca\x3b\x6a\x9a\x9e\xcc\xeb"
      "\xa3\x68\x70\x87\x14\xc9\x70\x46\xe6\x79\x7f\x37\xe7\xaa\x44\xd7\x04\x44"
      "\x67\xd0\x76\x8d\xed\xab\x10\xc4\x93\x0e\x79\xe3\x42\xfa\x38\x15\xf9\xfe"
      "\x95\xe5\x2f\xf7\x79\xe6\x36\x4b\x09\x72\x30\x76\x83\x48\xcf\x86\x80\xd4"
      "\x8e\xc1\x3a\x92\xc9\xec\x94\x4b\xcd\x7a\x90\x24\x13\xd2\x32\xf7\xd2\x22"
      "\x62\x14\x23\xd8\xa3\xd2\xae\xc5\xb3\x9e\x6f\x05\xc3\x23\x07\x88\xd0\x62"
      "\x1b\xe0\x83\x15\x41\x41\x5d\x11\x3b\xfd\x6e\xd6\x41\xf5\x03\x65\x5a",
      3293);
  memcpy((void*)0x20001380,
         "\x75\x78\x56\xdf\x71\x28\x3f\xb5\x17\xb5\x32\x74\x51\x0f\xdd\x52\x0f"
         "\x4d\x23\x15\xd4\x9a\x43\xdc\xd6\x93\x5e\x66\x7c\x7d\x39\x6d\x6e\xe7"
         "\xea\x02\xa2\xf6\xc0\x89\xf2\x52\x5c\x3b\x68\x2a\x61\x5a\x32\x51\x6c"
         "\x1a\x18\x78\x4f\xcd\x7a\x87\x60\xb3\x1e\x29\x15\x51",
         64);
  syz_clone(0x40000000, 0x20000300, 0xcdd, 0x20001300, 0x20001340, 0x20001380);
  *(uint64_t*)0x20001480 = 0;
  *(uint64_t*)0x20001488 = 0x20000040;
  *(uint64_t*)0x20001490 = 0x20000080;
  *(uint64_t*)0x20001498 = 0x200000c0;
  *(uint32_t*)0x200014a0 = 0x2e;
  *(uint64_t*)0x200014a8 = 0;
  *(uint64_t*)0x200014b0 = 0;
  *(uint64_t*)0x200014b8 = 0x20001100;
  *(uint64_t*)0x200014c0 = 0x20001400;
  *(uint32_t*)0x20001400 = 0;
  *(uint32_t*)0x20001404 = -1;
  *(uint32_t*)0x20001408 = -1;
  *(uint32_t*)0x2000140c = -1;
  *(uint32_t*)0x20001410 = 0;
  *(uint64_t*)0x200014c8 = 5;
  *(uint32_t*)0x200014d0 = -1;
  syz_clone3(0x20001480, 0x58);
  *(uint64_t*)0x20000080 = 0;
  *(uint32_t*)0x20000088 = 0;
  *(uint64_t*)0x20000090 = 0x20000140;
  *(uint64_t*)0x20000140 = 0x20000180;
  *(uint32_t*)0x20000180 = 0x20;
  *(uint16_t*)0x20000184 = 0x11;
  *(uint16_t*)0x20000186 = 1;
  *(uint32_t*)0x20000188 = 0;
  *(uint32_t*)0x2000018c = 0x4800;
  *(uint8_t*)0x20000190 = 0;
  *(uint8_t*)0x20000191 = 0;
  *(uint16_t*)0x20000192 = 0;
  *(uint32_t*)0x20000194 = r[5];
  *(uint32_t*)0x20000198 = 0;
  *(uint32_t*)0x2000019c = 8;
  *(uint64_t*)0x20000148 = 0x20;
  *(uint64_t*)0x20000098 = 1;
  *(uint64_t*)0x200000a0 = 0;
  *(uint64_t*)0x200000a8 = 0;
  *(uint32_t*)0x200000b0 = 0;
  syscall(__NR_sendmsg, r[3], 0x20000080ul, 0ul);
}
int main(void)
{
  syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul);
  syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul);
  syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul);
  for (procid = 0; procid < 6; procid++) {
    if (fork() == 0) {
      use_temporary_dir();
      loop();
    }
  }
  sleep(1000000);
  return 0;
}