// https://syzkaller.appspot.com/bug?id=e4d6900f0f05acda38ce163242dc9ff3b106027d
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <dirent.h>
#include <endian.h>
#include <errno.h>
#include <fcntl.h>
#include <signal.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stddef.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/mount.h>
#include <sys/prctl.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <time.h>
#include <unistd.h>

#include <linux/usb/ch9.h>

unsigned long long procid;

static void sleep_ms(uint64_t ms)
{
  usleep(ms * 1000);
}

static uint64_t current_time_ms(void)
{
  struct timespec ts;
  if (clock_gettime(CLOCK_MONOTONIC, &ts))
    exit(1);
  return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
}

static bool write_file(const char* file, const char* what, ...)
{
  char buf[1024];
  va_list args;
  va_start(args, what);
  vsnprintf(buf, sizeof(buf), what, args);
  va_end(args);
  buf[sizeof(buf) - 1] = 0;
  int len = strlen(buf);
  int fd = open(file, O_WRONLY | O_CLOEXEC);
  if (fd == -1)
    return false;
  if (write(fd, buf, len) != len) {
    int err = errno;
    close(fd);
    errno = err;
    return false;
  }
  close(fd);
  return true;
}

#define USB_MAX_EP_NUM 32

struct usb_device_index {
  struct usb_device_descriptor* dev;
  struct usb_config_descriptor* config;
  unsigned config_length;
  struct usb_interface_descriptor* iface;
  struct usb_endpoint_descriptor* eps[USB_MAX_EP_NUM];
  unsigned eps_num;
};

static bool parse_usb_descriptor(char* buffer, size_t length,
                                 struct usb_device_index* index)
{
  if (length <
      sizeof(*index->dev) + sizeof(*index->config) + sizeof(*index->iface))
    return false;
  index->dev = (struct usb_device_descriptor*)buffer;
  index->config = (struct usb_config_descriptor*)(buffer + sizeof(*index->dev));
  index->config_length = length - sizeof(*index->dev);
  index->iface =
      (struct usb_interface_descriptor*)(buffer + sizeof(*index->dev) +
                                         sizeof(*index->config));
  index->eps_num = 0;
  size_t offset = 0;
  while (true) {
    if (offset + 1 >= length)
      break;
    uint8_t desc_length = buffer[offset];
    uint8_t desc_type = buffer[offset + 1];
    if (desc_length <= 2)
      break;
    if (offset + desc_length > length)
      break;
    if (desc_type == USB_DT_ENDPOINT) {
      index->eps[index->eps_num] =
          (struct usb_endpoint_descriptor*)(buffer + offset);
      index->eps_num++;
    }
    if (index->eps_num == USB_MAX_EP_NUM)
      break;
    offset += desc_length;
  }
  return true;
}

enum usb_fuzzer_event_type {
  USB_FUZZER_EVENT_INVALID,
  USB_FUZZER_EVENT_CONNECT,
  USB_FUZZER_EVENT_DISCONNECT,
  USB_FUZZER_EVENT_SUSPEND,
  USB_FUZZER_EVENT_RESUME,
  USB_FUZZER_EVENT_CONTROL,
};

struct usb_fuzzer_event {
  uint32_t type;
  uint32_t length;
  char data[0];
};

struct usb_fuzzer_init {
  uint64_t speed;
  const char* driver_name;
  const char* device_name;
};

struct usb_fuzzer_ep_io {
  uint16_t ep;
  uint16_t flags;
  uint32_t length;
  char data[0];
};

#define USB_FUZZER_IOCTL_INIT _IOW('U', 0, struct usb_fuzzer_init)
#define USB_FUZZER_IOCTL_RUN _IO('U', 1)
#define USB_FUZZER_IOCTL_EVENT_FETCH _IOR('U', 2, struct usb_fuzzer_event)
#define USB_FUZZER_IOCTL_EP0_WRITE _IOW('U', 3, struct usb_fuzzer_ep_io)
#define USB_FUZZER_IOCTL_EP0_READ _IOWR('U', 4, struct usb_fuzzer_ep_io)
#define USB_FUZZER_IOCTL_EP_ENABLE _IOW('U', 5, struct usb_endpoint_descriptor)
#define USB_FUZZER_IOCTL_EP_WRITE _IOW('U', 7, struct usb_fuzzer_ep_io)
#define USB_FUZZER_IOCTL_EP_READ _IOWR('U', 8, struct usb_fuzzer_ep_io)
#define USB_FUZZER_IOCTL_CONFIGURE _IO('U', 9)
#define USB_FUZZER_IOCTL_VBUS_DRAW _IOW('U', 10, uint32_t)

int usb_fuzzer_open()
{
  return open("/sys/kernel/debug/usb-fuzzer", O_RDWR);
}

int usb_fuzzer_init(int fd, uint32_t speed, const char* driver,
                    const char* device)
{
  struct usb_fuzzer_init arg;
  arg.speed = speed;
  arg.driver_name = driver;
  arg.device_name = device;
  return ioctl(fd, USB_FUZZER_IOCTL_INIT, &arg);
}

int usb_fuzzer_run(int fd)
{
  return ioctl(fd, USB_FUZZER_IOCTL_RUN, 0);
}

int usb_fuzzer_event_fetch(int fd, struct usb_fuzzer_event* event)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EVENT_FETCH, event);
}

int usb_fuzzer_ep0_write(int fd, struct usb_fuzzer_ep_io* io)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP0_WRITE, io);
}

int usb_fuzzer_ep0_read(int fd, struct usb_fuzzer_ep_io* io)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP0_READ, io);
}

int usb_fuzzer_ep_write(int fd, struct usb_fuzzer_ep_io* io)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP_WRITE, io);
}

int usb_fuzzer_ep_read(int fd, struct usb_fuzzer_ep_io* io)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP_READ, io);
}

int usb_fuzzer_ep_enable(int fd, struct usb_endpoint_descriptor* desc)
{
  return ioctl(fd, USB_FUZZER_IOCTL_EP_ENABLE, desc);
}

int usb_fuzzer_configure(int fd)
{
  return ioctl(fd, USB_FUZZER_IOCTL_CONFIGURE, 0);
}

int usb_fuzzer_vbus_draw(int fd, uint32_t power)
{
  return ioctl(fd, USB_FUZZER_IOCTL_VBUS_DRAW, power);
}

#define USB_MAX_PACKET_SIZE 1024

struct usb_fuzzer_control_event {
  struct usb_fuzzer_event inner;
  struct usb_ctrlrequest ctrl;
  char data[USB_MAX_PACKET_SIZE];
};

struct usb_fuzzer_ep_io_data {
  struct usb_fuzzer_ep_io inner;
  char data[USB_MAX_PACKET_SIZE];
};

struct vusb_connect_string_descriptor {
  uint32_t len;
  char* str;
} __attribute__((packed));

struct vusb_connect_descriptors {
  uint32_t qual_len;
  char* qual;
  uint32_t bos_len;
  char* bos;
  uint32_t strs_len;
  struct vusb_connect_string_descriptor strs[0];
} __attribute__((packed));

static bool lookup_connect_response(struct vusb_connect_descriptors* descs,
                                    struct usb_device_index* index,
                                    struct usb_ctrlrequest* ctrl,
                                    char** response_data,
                                    uint32_t* response_length)
{
  uint8_t str_idx;
  switch (ctrl->bRequestType & USB_TYPE_MASK) {
  case USB_TYPE_STANDARD:
    switch (ctrl->bRequest) {
    case USB_REQ_GET_DESCRIPTOR:
      switch (ctrl->wValue >> 8) {
      case USB_DT_DEVICE:
        *response_data = (char*)index->dev;
        *response_length = sizeof(*index->dev);
        return true;
      case USB_DT_CONFIG:
        *response_data = (char*)index->config;
        *response_length = index->config_length;
        return true;
      case USB_DT_STRING:
        str_idx = (uint8_t)ctrl->wValue;
        if (str_idx >= descs->strs_len && descs->strs_len > 0) {
          str_idx = descs->strs_len - 1;
        }
        *response_data = descs->strs[str_idx].str;
        *response_length = descs->strs[str_idx].len;
        return true;
      case USB_DT_BOS:
        *response_data = descs->bos;
        *response_length = descs->bos_len;
        return true;
      case USB_DT_DEVICE_QUALIFIER:
        *response_data = descs->qual;
        *response_length = descs->qual_len;
        return true;
      default:
        exit(1);
        return false;
      }
      break;
    default:
      exit(1);
      return false;
    }
    break;
  default:
    exit(1);
    return false;
  }
  return false;
}

static volatile long syz_usb_connect(volatile long a0, volatile long a1,
                                     volatile long a2, volatile long a3)
{
  uint64_t speed = a0;
  uint64_t dev_len = a1;
  char* dev = (char*)a2;
  struct vusb_connect_descriptors* descs = (struct vusb_connect_descriptors*)a3;
  if (!dev) {
    return -1;
  }
  struct usb_device_index index;
  memset(&index, 0, sizeof(index));
  int rv = 0;
  rv = parse_usb_descriptor(dev, dev_len, &index);
  if (!rv) {
    return rv;
  }
  int fd = usb_fuzzer_open();
  if (fd < 0) {
    return fd;
  }
  char device[32];
  sprintf(&device[0], "dummy_udc.%llu", procid);
  rv = usb_fuzzer_init(fd, speed, "dummy_udc", &device[0]);
  if (rv < 0) {
    return rv;
  }
  rv = usb_fuzzer_run(fd);
  if (rv < 0) {
    return rv;
  }
  bool done = false;
  while (!done) {
    struct usb_fuzzer_control_event event;
    event.inner.type = 0;
    event.inner.length = sizeof(event.ctrl);
    rv = usb_fuzzer_event_fetch(fd, (struct usb_fuzzer_event*)&event);
    if (rv < 0) {
      return rv;
    }
    if (event.inner.type != USB_FUZZER_EVENT_CONTROL)
      continue;
    bool response_found = false;
    char* response_data = NULL;
    uint32_t response_length = 0;
    if (event.ctrl.bRequestType & USB_DIR_IN) {
      response_found = lookup_connect_response(
          descs, &index, &event.ctrl, &response_data, &response_length);
      if (!response_found) {
        return -1;
      }
    } else {
      if ((event.ctrl.bRequestType & USB_TYPE_MASK) != USB_TYPE_STANDARD ||
          event.ctrl.bRequest != USB_REQ_SET_CONFIGURATION) {
        exit(1);
        return -1;
      }
      done = true;
    }
    if (done) {
      rv = usb_fuzzer_vbus_draw(fd, index.config->bMaxPower);
      if (rv < 0) {
        return rv;
      }
      rv = usb_fuzzer_configure(fd);
      if (rv < 0) {
        return rv;
      }
      unsigned ep;
      for (ep = 0; ep < index.eps_num; ep++) {
        rv = usb_fuzzer_ep_enable(fd, index.eps[ep]);
        if (rv < 0) {
        } else {
        }
      }
    }
    struct usb_fuzzer_ep_io_data response;
    response.inner.ep = 0;
    response.inner.flags = 0;
    if (response_length > sizeof(response.data))
      response_length = 0;
    if (event.ctrl.wLength < response_length)
      response_length = event.ctrl.wLength;
    response.inner.length = response_length;
    if (response_data)
      memcpy(&response.data[0], response_data, response_length);
    else
      memset(&response.data[0], 0, response_length);
    if (event.ctrl.bRequestType & USB_DIR_IN)
      rv = usb_fuzzer_ep0_write(fd, (struct usb_fuzzer_ep_io*)&response);
    else
      rv = usb_fuzzer_ep0_read(fd, (struct usb_fuzzer_ep_io*)&response);
    if (rv < 0) {
      return rv;
    }
  }
  sleep_ms(200);
  return fd;
}

static void kill_and_wait(int pid, int* status)
{
  kill(-pid, SIGKILL);
  kill(pid, SIGKILL);
  int i;
  for (i = 0; i < 100; i++) {
    if (waitpid(-1, status, WNOHANG | __WALL) == pid)
      return;
    usleep(1000);
  }
  DIR* dir = opendir("/sys/fs/fuse/connections");
  if (dir) {
    for (;;) {
      struct dirent* ent = readdir(dir);
      if (!ent)
        break;
      if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
        continue;
      char abort[300];
      snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort",
               ent->d_name);
      int fd = open(abort, O_WRONLY);
      if (fd == -1) {
        continue;
      }
      if (write(fd, abort, 1) < 0) {
      }
      close(fd);
    }
    closedir(dir);
  } else {
  }
  while (waitpid(-1, status, __WALL) != pid) {
  }
}

static void setup_test()
{
  prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
  setpgrp();
  write_file("/proc/self/oom_score_adj", "1000");
}

static void execute_one(void);

#define WAIT_FLAGS __WALL

static void loop(void)
{
  int iter;
  for (iter = 0;; iter++) {
    int pid = fork();
    if (pid < 0)
      exit(1);
    if (pid == 0) {
      setup_test();
      execute_one();
      exit(0);
    }
    int status = 0;
    uint64_t start = current_time_ms();
    for (;;) {
      if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid)
        break;
      sleep_ms(1);
      if (current_time_ms() - start < 5 * 1000)
        continue;
      kill_and_wait(pid, &status);
      break;
    }
  }
}

void execute_one(void)
{
  memcpy(
      (void*)0x20005740,
      "\x12\x01\x50\x02\x58\xc0\x0a\x40\x64\x11\x02\x06\x19\x13\x01\x08\x53\x01"
      "\x09\x02\xfd\x03\x01\xff\x68\x40\x6d\x09\x04\x6d\x00\x09\x9a\xb5\x63\xca"
      "\x70\x0f\x61\x06\x5e\x46\x6d\xaf\x1d\x6c\x2a\xca\xa2\x38\xac\x20\xb9\xea"
      "\x7f\x74\xdc\x18\xa6\x8f\x76\xfa\xb2\xa0\x8c\xa8\x69\xdf\x90\xd4\x50\xcd"
      "\x22\xc2\xff\xea\x8a\xcc\xce\xe4\xc4\xe8\x69\x0e\xe7\x3b\xb2\x5b\xac\x81"
      "\xc0\x50\xe1\x1a\x4d\x30\xa2\xa3\x3b\xf0\x85\xf3\x05\x75\xd2\x6c\xdb\x17"
      "\x6f\x26\x53\xd0\xca\xf0\x9f\xda\x44\x72\x5f\xf3\xfb\x6d\x60\x1b\xf0\x3f"
      "\x17\xf8\xc4\xd9\xab\x4d\x2e\x7f\xa9\x59\xe3\x28\x2e\xe9\x2e\x0a\x4f\x81"
      "\xf6\xa8\x18\x9b\x09\x05\x0a\x11\x07\x00\x09\x07\x03\x09\x05\x00\x00\x00"
      "\x00\xe1\xff\xff\x09\x05\x07\x00\x02\x00\x80\x05\x06\x09\x05\x01\x00\x06"
      "\x00\x08\x05\x01\x09\x05\x0f\x08\x07\x00\x01\x00\x06\x0b\x3f\xf2\x0c\x8a"
      "\xa0\xcf\xc5\xf5\x92\x56\x09\x05\x05\x13\x09\x00\xff\x06\x00\x9c\x11\xd8"
      "\x4e\x5a\x82\xbd\xd9\x72\x87\x0e\xd0\x22\x03\xe5\x96\x9c\x79\xf3\x5d\x5d"
      "\xb0\x71\x91\xf8\xd2\x08\xee\x8f\xf7\x4a\x44\xde\xdb\x9d\x01\x54\xe8\xd2"
      "\xfe\x0f\xa5\x24\x3d\x78\x9b\x00\x38\x6d\xe9\x40\x94\xd9\x38\x4f\x8b\xc3"
      "\x69\x55\x70\xde\x26\x79\x11\xa5\x16\xe8\x9b\x6a\xad\x04\x28\xde\x4c\xe4"
      "\x24\xcc\x99\x35\xf2\xcd\x76\x92\x82\x55\x8a\xce\x38\x54\xfa\xcd\x9a\x3f"
      "\x5f\xb1\x24\xc8\x81\xa9\x1a\x6e\xb7\xd8\xdb\x42\xf0\xf7\x3c\xaa\xf5\xc5"
      "\x76\xb3\xe2\xb2\x7c\xda\x07\x5a\xd5\x81\x1a\xb6\x60\x62\x86\xd5\x75\xed"
      "\xd3\x64\x5b\xd9\x55\xc3\x93\xeb\x1f\x1b\x54\x0e\x3a\x27\x3e\x88\x2c\x06"
      "\x06\xab\x34\x82\x9c\x54\x83\x0c\x45\xaf\x33\xc0\x2b\xd5\x85\x0e\xb4\x4f"
      "\x09\xc8\x1d\xb8\xbf\x97\xa1\xf7\xb7\x7e\x41\xbb\x59\xca\xf4\x87\x5b\x54"
      "\x1c\x09\x8b\x5b\x95\xae\x59\xd1\xd7\x37\xda\xb6\x73\xdb\x0a\x02\x6a\x2f"
      "\x9e\xae\x3a\xd8\x50\xa6\xbd\x97\xfe\x7b\x36\x77\xc3\xae\x85\xbd\x99\x4e"
      "\xef\x2d\x27\x03\xa3\x04\xaf\x78\x6d\x9e\x69\xb1\xdc\x3e\x3c\xe1\x99\x7b"
      "\x12\xf9\xa3\xad\x8d\xbf\xc2\x66\xcb\x45\x3a\x39\x8c\x88\xe0\x9f\x85\x49"
      "\xd4\xfd\x88\x52\x19\xbb\x03\x27\x2f\xba\x46\xab\xf3\x9d\xeb\x4e\x4d\x78"
      "\x1d\xb1\xe9\x68\x43\xff\xcd\x86\x99\x5a\x3e\xee\x62\x64\x54\x18\xcf\xfe"
      "\x21\xd0\x85\x67\x09\xf2\x87\xab\x2c\x77\xc5\xb4\x94\x9b\xbb\xd1\xfe\x58"
      "\x51\xa3\x25\x48\x4d\x1f\xc1\x13\x9c\xa0\x48\x52\x45\xf7\x63\x1b\x74\x15"
      "\x85\x8f\xcf\x0b\xd3\xeb\xef\x17\x6b\xd2\x34\x00\xb2\x76\x46\x33\x09\x05"
      "\x09\x00\x01\x00\x00\xa9\x09\x09\x05\x0e\x00\x84\x00\x40\xfd\x01\x09\x05"
      "\x0a\x02\x06\x00\x08\x04\x94\x01\x30\xa3\xe4\x1e\xf9\xdb\xfb\x71\xf6\x14"
      "\xa9\x4b\x15\x18\x3a\xaf\xe7\x42\xcc\xd1\x5d\x4d\x77\x2a\xe7\xa0\x63\x43"
      "\xb8\x70\xee\x7e\xc9\x22\xe6\x25\x3f\x87\x73\xb2\xaa\xdd\x32\xce\x6d\xae"
      "\xb2\x2e\x08\x13\xdf\x11\x4c\xaa\x66\x27\x99\xcb\x21\x58\x5c\x10\xf6\xb4"
      "\xa8\xc0\x26\xca\x0b\x61\x53\x24\x04\xa1\x22\xab\x71\x8b\xa4\x8d\x54\xf4"
      "\xaf\xec\x68\x6f\x94\x2d\x83\xc3\x16\x61\x1b\x01\x6e\xcf\x76\xf6\x8a\xcd"
      "\x2e\x30\x4a\x19\x4c\x4b\xe8\x65\xd8\x13\xc8\xd6\xd0\xa2\xc2\xb4\x52\x4d"
      "\x60\x3a\xcc\x31\xd3\xa9\x96\x63\x43\x6d\x21\x8d\xa4\xbb\x81\x57\xf3\x4c"
      "\xbd\x0c\x10\xb8\x36\x6a\xd1\x3e\x34\x6a\x80\xc6\x90\xae\x16\xc8\xb3\x8a"
      "\x6d\xe8\x90\x70\xe4\xd5\xcc\x59\x0e\xd0\x72\x36\x68\xd6\x71\x9c\x83\x22"
      "\xbc\x77\x5b\x00\x08\x25\xfc\x0d\x73\x36\xe1\x0c\xb6\x70\x54\xe3\x10\xee"
      "\x70\xfa\x97\xd8\xf6\xf1\x9d\xe8\x0a\x92\xac\x94\x93\xd5\x01\xcf\xd1\xe3"
      "\xe7\xc5\xb5\x6a\x77\x43\x02\x94\x37\xb1\xa9\x5c\x94\x1a\x4f\xca\x70\x08"
      "\x6d\x81\x55\xc2\xa1\xb3\xb5\x1c\x07\xbb\xa5\xe1\xbc\xee\xcb\xa4\x2a\x08"
      "\xf3\xd5\x45\x41\xb1\x6d\xfc\x8e\x0c\x83\x91\x6e\xd3\x03\x0e\xc0\x61\x9a"
      "\xa1\x4f\xa8\xb5\xd7\xd1\xfd\x3f\x03\x95\x43\xc1\x5d\xa5\x8c\x65\xcb\x81"
      "\x26\x58\x09\x32\xeb\x91\x38\x92\x48\x10\x2f\x2a\xa6\xc1\xa7\xbd\x18\x39"
      "\x8b\xa4\xdf\x2b\xa8\xbc\x9a\x2d\x5b\xd8\x0d\x84\x32\xf6\x62\x59\xcd\xcd"
      "\x82\x16\x4d\x06\x4f\xd4\xd6\x6d\x2d\x45\xff\xa4\xf4\xb1\x93\x02\xf9\x22"
      "\xef\x24\x5c\x4e\xcb\x70\xd1\xc5\xcc\xf8\x31\x80\x3f\xf3\x96\x1c\x12\x67"
      "\xac\xff\x10\x8c\xe5\x01\x04\xd1\xbb\xe6\xf6\xf5\x2b\xca\x13\x93\x58\x89"
      "\xc5\xf9\x72\x1d\x23\x1f\x3f\x8f\x86\xa3\xe1\xd3\x0c\xf2\x52\x01\x88\x38"
      "\x8a\x72\xef\x6b\xa8\x12\x9a\xba\x31\xcf\x12\x61\x54\xd0\x46\x21\x73\xc1"
      "\xaf\x14\x67\xaf\xd8\x6f\xcb\xf3\x2c\xe7\x91\xd5\xe9\x50\x55\x3c\x6b\x0c"
      "\x6d\xd9\x44\xe2\x5d\x1e\x72\xca\xd3\x99\x66\x22\x1d\x1d\x8f\x20\x0e\x0a"
      "\xc4\xd3\x1d\xb9\x0f\x65\x51\x72\x04\x67\xa6\x10\xaf\x43\x45\x75\x43\x89"
      "\xca\x95\xf9\xc7\x76\x05\xf2\x0b\x40\x5f\x3a\x19\xd6\xde\xba\x18\x9c\xea"
      "\x59\x79\x60\x57\xc5\x8d\x2e\x8a\x7f\x60\xf6\x92\x27\x01\x24\x32\xa7\xb3"
      "\x6a\xb9\xfd\xa9\xf9\xa2\xf2\x00\x27\xf7\xe0\x90\x30\x96\xf1\x4a\x65\x13"
      "\xa5\x29\x02\x34\xfe\xda\x4a\x36\x88\x65\x4c\xfe\x8c\xd1\x03\x0e\xdd\xad"
      "\x76\xfb\x84\x50\x51\x99\x3a\xc6\x64\xc1\xf0\xbb\x22\x9d\xb4\x52\xde\x6a"
      "\x26\x1b\xef\x28\xcc\xe0\x64\x5c\x6c\x0f\xd8\x82\x9a\x13\xfc\xfb\xd5\x0d"
      "\xd5\x03\x56\x40\x97\x29\x12\xf3\xc3\x07\x7d\x4c\xa2\xff\x74\x9a\xf5\x4a"
      "\x78\x37\xe0\xc9\xb2\x99\xc8\x14\x4d\xc2\x0f\xae\xf5\xe1\x15\x85\x5d\xb0"
      "\x37\xbb\x54\xf8\x6a\x6e\x9d\x66\xe5\xa1\xeb\xde\x19\xae\x8b\x05\x71\x83"
      "\x33\xb3\x0c\x5b\x7b\xb1\xe0\x07\xe4\x07\x4e\x90\xb5\x53\x44\x0e\x76\x9f"
      "\xed\xc3\x2a\x4f\x07\x38\xda\xd5\xf7\xf9\x18\x1d\xdc\xa8\x6b\xa6\xa0\x28"
      "\xfc\x00\x5c\x5a\x7a\xaf\x58\xe3\x16\x0f\xa4\x45\xd6",
      1255);
  memcpy((void*)0x20003f80, "\n\000\000\000", 4);
  *(uint64_t*)0x20003f84 = 0x20002bc0;
  memcpy((void*)0x20002bc0, "\x0a\x06\x00\x02\x74\xfc\x03\x28\x07\x00", 10);
  memcpy((void*)0x20003f8c, "\x8c\x10\x00\x00", 4);
  *(uint64_t*)0x20003f90 = 0x20002c00;
  memcpy(
      (void*)0x20002c00,
      "\x05\x0f\x8c\x10\x04\x03\x10\x0b\x7a\x10\x0b\xf8\x4a\x46\x61\xc4\x0a\x9b"
      "\x73\xb7\x20\x45\xa3\xc5\x0a\x79\x4f\x83\xae\x0d\x90\x1c\x72\x68\xbc\x3a"
      "\xf7\xba\x66\x16\xfb\xd6\x2a\xcc\x8b\x99\x04\x6c\xae\x8d\x4b\xbb\x31\x72"
      "\xf8\x12\xdb\xc6\x0f\xb2\x94\x51\xa8\x6e\x0d\xd8\xeb\xf3\x44\x5d\x26\x97"
      "\x68\xd7\x3b\xed\xed\x05\x84\x2f\x3c\x51\x9e\x7c\xb4\x1b\x85\xae\xb5\x61"
      "\x82\xf9\x13\x93\xa6\xdd\x41\xe8\xff\x57\xbf\xc2\x84\x7a\x10\xe2\x11\x6b"
      "\x2f\x27\x35\x63\xee\x6f\xb5\x23\x2a\xf7\x2c\x48\x45\xbc\x42\xa9\x65\xc0"
      "\x18\x11\xf0\x53\x03\x10\x04\xec\x90\xcd\xf1\xbd\x8e\xb6\xc1\xe4\x58\x9c"
      "\xb9\x28\x21\x03\xac\xca\x4b\x7b\x9e\xc6\x43\x7b\x57\x9a\x1e\xc3\xa8\xf4"
      "\x4b\xc2\x96\x6c\x21\x9f\x0b\x3c\x2c\x64\x7b\xe0\x94\x56\x25\x03\x6c\x13"
      "\x6b\x9d\x87\x0e\xdc\xa9\xbb\xd8\xe7\xeb\xa1\xfa\x1e\xb2\xb2\x6d\x06\x82"
      "\x67\x34\xd6\xe1\x95\x76\xe0\x6d\x61\xb3\xb1\xac\xd0\x98\x79\xba\x45\xa7"
      "\x89\xe3\x64\x16\x6f\x51\x7b\x1e\x6a\x51\xaf\x08\x29\x10\xf7\x75\x6c\xf4"
      "\x98\xd7\x1f\x7e\x54\xbc\xd2\xe3\x1c\xd5\x4f\x3f\x03\x2d\xdd\x0a\x2e\xfb"
      "\x1e\x38\xde\xbf\x5d\x41\xba\xcd\x05\xe3\xac\x6a\x06\xbd\x55\xb4\x1f\xd9"
      "\xcb\xd7\x30\x33\xf3\xcc\x67\xbb\xb4\x67\xe7\xf3\xe1\x1e\x58\xb6\xa8\x84"
      "\x7d\x49\xcd\xd9\x36\x9b\x0b\x49\x21\x67\x95\xd2\x45\x87\xe9\xac\xbe\xcf"
      "\x2f\x6c\x0f\x72\x8f\xf0\x79\x97\xfc\xa2\x71\xee\x03\x50\xed\x6e\xe6\x8f"
      "\x00\xce\x80\xa8\xcb\xa0\x5f\xf6\xd2\x76\x00\xad\x31\x34\xf6\xca\x22\x25"
      "\x74\x5a\xcc\x5b\xa6\x08\xd4\x12\x55\x22\xac\x3d\x16\xb6\x27\xfd\x5e\x17"
      "\x59\xcb\x10\xd2\xaa\x73\x84\xaa\x5d\xfd\x4b\x28\x4f\xfb\x37\x3a\x1a\x9e"
      "\x1b\xb8\x6e\xf5\x37\x80\xe5\x4d\xd1\xb9\xd3\x06\x5e\xf6\xcd\x4e\x44\xeb"
      "\xc1\xce\x8a\x81\x76\xa4\x4a\xf4\x09\x9b\x4f\xe9\x9b\xbe\x40\xa4\x04\xc8"
      "\x33\x2d\x73\x27\x56\x67\x03\x51\xbf\xfc\x0f\xa1\xc0\x65\x6a\x7b\xf6\x6c"
      "\x8e\x19\xc6\x10\x8e\x8e\x9d\xa1\xdf\xff\xd2\x49\x77\xe3\x8c\x94\x67\xb2"
      "\xe8\x6e\x18\x3d\x58\x6d\x05\xd2\xd4\x86\xeb\x7b\x44\x2a\xc0\x18\x25\xd0"
      "\x90\x25\xc1\xf6\xba\x7a\xc3\x68\x83\xd2\xc0\x63\x3b\xe9\x37\x42\x87\xe5"
      "\x62\x58\x41\x44\x14\x34\x28\xd1\xa6\x4c\x64\x8b\xc4\x70\xb8\x3d\x77\xa6"
      "\x4d\xdc\xbf\x8b\x03\x07\x10\x2a\xa6\x22\x38\x59\x41\x5c\xad\xdd\x72\xbf"
      "\x67\x4c\x6e\xe8\x0c\x77\x25\x80\x5f\xd7\x5c\x26\xf1\xb7\x2e\xda\xda\x0e"
      "\xc3\x85\x2a\x3d\xdb\x97\xd9\x04\x7b\xab\x00\x2a\xaa\x70\xbd\x77\x18\x1f"
      "\x2c\xad\x76\x7a\x62\x25\x9a\x41\x36\xc0\xad\x8e\x06\x4d\x95\x53\x42\x04"
      "\x15\x0a\xb1\x86\xdf\xcc\x6b\xc4\x52\x1b\xa7\x64\x0e\xfa\xe3\x6e\x99\x1e"
      "\xf0\xa7\x80\xf3\x7a\x3d\xf5\x5a\xc4\x2b\x4e\x73\xc5\x27\xea\x8d\x47\xcd"
      "\x6e\x9b\x9c\x6d\xa4\x13\xbd\x6b\x13\x70\x85\x0c\x42\xf1\xe0\xdb\xc0\xa0"
      "\x4d\xe2\xc5\x67\x5b\x2d\x44\x12\x30\xbe\xa1\x17\x63\x61\x23\x26\x26\x04"
      "\xc5\xb4\xa2\x88\x67\xfc\x41\xf2\xb1\x58\x46\xe4\x95\x9a\x16\x10\x8a\x1f"
      "\xf6\xb2\xf9\x99\xb9\x7d\xc5\xd3\xcb\xe1\x5d\xe0\xd6\x3c\xd7\xa0\x42\x6f"
      "\xe1\x56\x66\xb0\xe2\x8f\xac\x04\x1d\x64\xd3\xb8\x10\xa2\x47\x9e\xa6\x53"
      "\x7a\x4e\x2b\x51\x9d\x40\x21\x71\x9f\x08\xd1\x06\x35\x36\x38\xe7\x98\xb0"
      "\xbe\x5f\xde\x31\xb4\xd4\x7f\x02\xd2\xc5\xea\xe6\x76\x3e\x96\x10\x67\x30"
      "\xef\xca\xbc\x21\xf3\xb3\xb4\x49\x31\x85\x4d\xdb\x6f\x7a\x8b\x5d\xed\xe3"
      "\x0d\xd3\x60\x01\x1f\x84\xc0\x6b\xce\x46\x94\x4f\x41\xaf\x4e\x5a\xdc\xda"
      "\xdc\x82\xe2\x7a\x40\x3b\x6c\x98\x5e\x36\x2d\x13\x36\xa4\xf6\xc8\x6a\x8a"
      "\x86\x2d\x97\x4f\x38\x0f\xe3\x2b\x2a\xd7\xed\x65\x59\xc4\x5a\xc7\x99\xc3"
      "\x50\xbb\x7c\x25\x38\xdc\xea\xac\x30\x53\xbe\xc1\x52\x8a\x0d\x0f\x87\x2c"
      "\xc8\x94\x3d\x97\xff\x25\x83\x8c\x35\x91\xb6\xa2\xb5\x45\x65\x26\xcc\xe9"
      "\x0f\x15\xe8\x31\xe0\x00\xc6\xe2\xf9\x48\xce\x81\x16\xc5\x9d\xed\xb9\x41"
      "\xb0\x53\xeb\xf6\x8a\x2d\x5d\x80\xfa\x4b\x0e\xe4\x05\x19\x4b\xf5\x5a\xde"
      "\x59\xaf\x89\x23\x02\x84\x61\x86\x31\x16\x21\xbc\xf4\x03\x56\x0f\xca\x17"
      "\x76\xcb\xea\x6e\x49\x5b\x39\xa0\xb4\x2e\xbf\xef\x8d\xd0\x83\x73\xd4\xb3"
      "\x17\xa0\x9b\xc2\x56\x14\x76\x6b\x4c\x2e\x61\x97\xe7\x46\xb2\x16\x42\xe1"
      "\xb1\xea\x16\xc9\x29\xf9\x47\xeb\xb2\xbb\x9e\xee\x07\xd1\x3a\xa2\x98\x7e"
      "\xa9\x17\x82\x36\x78\x13\xee\xf8\x45\xd3\x02\x7c\x7b\x2d\x83\x20\x74\xf2"
      "\x12\x2b\xfd\xd8\x4b\x77\x79\xed\x3b\x59\xab\xba\xa7\xed\xbf\xa3\x2c\x6f"
      "\x67\x7e\xfe\x8f\x19\xb2\x37\x12\xcb\x4d\x50\x16\xb0\xab\xb5\x01\xbf\x0c"
      "\xb5\xb1\x25\xf8\x66\x0c\x0b\x8e\x72\xf4\xee\x36\x4d\x81\x09\xe2\xa1\xe1"
      "\xc4\xf0\x35\xcc\xd0\x6f\xa2\xdf\xea\x2b\xe6\xc5\xb3\x23\x68\x07\xc0\xdd"
      "\xe9\x79\x7b\xbb\x82\xb5\xc4\xb7\x1e\xf8\x2c\xc5\xe8\x16\x82\x4e\xe1\x4f"
      "\x35\x70\x5c\x5b\xb4\x83\xcb\x7c\x3a\xa3\x43\x50\xa7\x7e\x8a\x1b\xba\x15"
      "\x42\x5d\x2c\xd4\x8d\x3c\x88\x73\xc6\x22\xef\xb8\x38\x21\x19\x93\xce\x21"
      "\x44\xaf\xfd\x6f\xe0\xa2\x22\xc4\x96\x3b\xc9\xac\x37\x04\x7e\x74\xd1\x69"
      "\x2d\xdc\x13\xb6\x37\x21\x8a\x21\x5c\x73\xc0\x6b\x07\x36\xcd\x84\xad\xaa"
      "\x65\xdf\xc2\x0f\x2a\x48\x1d\x7b\xe5\x8c\x5b\xd5\x5a\xd2\x69\x30\x57\x27"
      "\x8d\x34\xe2\xd5\x5a\x8a\x4d\xac\xf4\x1f\xfe\x4a\x35\x4e\x6a\x6b\x7d\xb9"
      "\x34\x64\x58\xad\x8c\x97\xfd\x50\xa8\xcf\xf4\xf7\x33\xd4\xf9\x3f\x57\x62"
      "\x3f\x3f\x78\x69\xbb\x42\x26\x65\x0f\x5a\xd9\xe6\x4c\x51\x3e\x68\x39\x2c"
      "\x53\x37\x3c\x75\x16\x65\x3d\xee\x21\x32\x78\xfa\x89\x0d\x89\xa4\x3f\xdf"
      "\xb6\x56\xe9\xbd\x87\x07\x43\xbb\x04\xcf\xd4\x06\x74\x50\x5e\x41\x94\xdf"
      "\x4e\xb9\x05\x42\xea\x9f\xef\xaf\xd9\x9c\x13\x62\x5d\x71\x6e\x49\x76\x26"
      "\x9f\x6d\x62\x18\xd6\x45\x73\xae\x4c\x4d\x22\x55\x6c\x47\xc9\xaa\x45\x6f"
      "\x7f\x84\xe0\x81\x93\x82\xd9\x3c\x48\xe2\x2f\xb5\x64\xd0\x8c\xb4\x31\xeb"
      "\x71\x4d\xe6\xe2\x55\x08\x85\xe0\x12\xea\x7d\x91\x7e\x61\x13\xdf\x74\x06"
      "\x47\xe2\x4e\x88\x82\x4d\xc2\xb7\xeb\xfc\x9e\xb6\xa9\xeb\x24\xc6\x48\x36"
      "\x23\x61\x52\x08\x35\x46\x42\x2a\xc1\x62\x8d\xa1\xd3\x33\x1b\x64\xa0\x7e"
      "\xce\x6e\x5f\x73\xe2\x79\xb0\xfc\xb6\x14\xd0\xb3\x06\xfc\x8b\x99\x23\x38"
      "\x17\x8f\x8c\x12\xf6\x92\xbe\x21\x52\x71\x1f\x73\x15\xa6\x2f\x1a\x7f\xbf"
      "\xb0\x3d\x02\x8b\x12\x41\xc9\x6e\xc5\x81\xe9\xc7\xfd\x46\x99\x9f\x86\x06"
      "\x93\x90\xd5\x90\xb7\xb0\x74\x84\x0c\x78\x43\x7f\x50\xac\x90\xd6\xf8\xa1"
      "\x0c\x42\xd3\xbd\x87\xa1\x96\xac\x14\x5a\xbc\x7b\x4b\xc7\xdf\x73\xe5\x69"
      "\x91\x01\x45\x69\xf6\x0f\x4f\x41\xdd\x63\x76\x75\xb9\x03\x0c\x1b\x06\xd9"
      "\x3f\x1d\x45\x39\x87\x47\xeb\xd2\x08\xc4\x52\xc9\x9c\x8a\x39\x38\x48\xc8"
      "\x95\x97\xad\x4e\x83\x4b\x59\x1b\x7e\x88\xe4\x7c\x10\xd2\xa9\x12\x30\x8b"
      "\x28\xa0\x66\xe8\x6c\x0b\x79\x7b\x0b\x99\xca\xcf\xe6\x4b\xd2\x5e\xbe\xa8"
      "\x9c\xce\x7f\x02\xe7\xc4\x31\x78\x70\x73\x22\xad\x50\x2b\x02\xf9\x33\xc5"
      "\x5e\xed\x91\xec\x9b\xc3\xb0\xbe\x8b\x26\xc4\x8e\x2f\xd4\x40\x83\x11\xf2"
      "\xa3\x8c\x5a\x31\x40\x7f\x6f\x9b\x54\x14\xdf\xe0\x61\xd8\xcc\xe6\x06\x04"
      "\xc7\x20\xe4\xb7\x20\xe9\x5e\xd1\x35\x09\x01\x86\xdd\x8f\xbc\x7b\x39\x5e"
      "\x56\xed\xf3\x83\x3b\xf9\x43\x2a\x3b\x81\x5a\x18\x6b\x06\x35\xa7\x7a\x3d"
      "\x79\x7f\x48\xef\xaf\xa3\x1f\xe6\xf2\xf7\x2b\x81\x6f\x43\x53\xf9\x2c\x81"
      "\x70\xab\x0d\x40\x63\x4e\xa9\x30\xfa\xb9\xde\x57\xf6\x95\xa3\x3b\xc8\x5b"
      "\x09\xc6\x18\x02\xba\x72\xd7\xaa\xb5\x27\x28\x12\x4e\x08\xed\x91\x62\xb1"
      "\xcf\x43\x77\xce\x36\x2e\x51\xfb\x57\x4b\xbd\xa7\xd1\x1f\x38\x5a\xa2\x4d"
      "\x22\x52\x83\xcd\x33\x19\xe0\x5e\x2e\xff\x9f\xc7\x8e\x85\xdd\x7c\x80\x1e"
      "\x13\x81\x15\xd2\x64\xc2\x75\xc0\xc2\xb0\x40\xe3\x7b\x00\x2b\x49\x36\xbf"
      "\x15\x08\x2d\x27\x3c\x0e\x16\x2d\x14\xce\xb6\xae\xcc\xa4\x51\xcd\xba\x44"
      "\x3c\x91\xfa\x9c\x91\x05\xa5\x8f\x7d\xb9\x56\xb5\x6e\xb7\xa8\x5e\x99\x64"
      "\x80\x65\x43\x7b\x24\x09\x24\xdd\x1e\xc3\x4b\xd6\xaf\x71\xb0\xf3\xa7\x04"
      "\x9c\x7e\x38\x1d\xc0\x64\x32\xa1\x59\xe4\xe7\x89\x52\xff\x34\x3f\xf8\x5e"
      "\xf5\xbb\xf9\x45\x9d\x73\xfa\x1a\x99\x2a\xb7\xc7\xd6\x62\xec\xc8\x95\xbd"
      "\x3c\x5a\x2b\x6d\x47\x6b\xd2\xe8\x14\xee\x26\xc5\x53\x18\xc6\x6c\x49\x56"
      "\xe8\x4e\xe1\xc5\xbe\xd3\x2b\xc9\x8c\xf8\x3f\x93\xf4\x95\x37\x4b\x96\x53"
      "\xee\x4a\xbf\xcb\xef\xb8\xbd\x94\x39\xbc\x12\xca\xe8\x4f\x3f\xe2\xd2\xa7"
      "\x1a\x29\x0e\x2f\x8a\x07\xe5\x99\x6b\xb2\x74\xb1\xa7\xf9\x85\xce\x1e\x0b"
      "\xec\xee\xec\xc5\xcd\x6b\x44\x1b\xea\xe8\x90\x37\x66\xaa\x06\x4f\xc4\xe7"
      "\x7b\x05\xbe\xb8\x8e\x3d\xf5\xc7\x1e\x35\xe4\x2c\xa5\x50\xa5\xdc\x77\xf9"
      "\x43\x4e\x3c\x1b\xb0\x96\x93\x38\xd4\xeb\x89\x29\x2d\x70\xf5\x9c\x91\x70"
      "\xdf\x24\x68\xbb\x3f\x16\x85\xdf\x19\x75\xc1\x9f\x81\xe0\x09\x24\x27\x6d"
      "\xa1\xe5\x78\xe4\xb4\x10\x6f\x07\x4d\xfb\xc3\xcf\x7e\x6e\x36\xed\xf9\xbf"
      "\xf6\x30\x1b\xca\x96\xe5\x86\x6a\xbe\x00\x59\xe5\xe9\x58\x72\x08\x13\x22"
      "\xdc\xf5\xe1\x67\x79\x4c\x9a\x52\xb4\x45\x48\x93\x8e\x66\xec\xce\x30\x64"
      "\x0f\x83\xb2\x02\x13\xe4\x64\x8f\x4c\x3f\x2e\x04\xbf\xea\x46\x44\x47\x5f"
      "\x0e\x0d\xe8\x8c\xdd\x87\xfa\x74\xb5\xb5\xb4\x17\x64\x58\x18\x82\x2f\x38"
      "\x94\x3e\xb1\xb1\xd8\xf4\x99\x0b\x2b\x11\x14\x3f\x4d\x78\x8a\x97\x69\x2a"
      "\x4e\x48\xa0\xd3\x1f\x6f\xba\x57\x77\x06\x35\x9f\x04\xf7\xe4\x1b\x9c\x73"
      "\x0f\x80\x8f\x44\x1e\x7e\x36\xe4\xf5\x0b\x20\x5d\xb7\xbc\x5d\x00\x66\x4a"
      "\xb7\xa3\x72\x67\xd7\xc5\x41\xcf\xa6\xd5\xdc\xbc\x84\x68\x34\x5a\x7d\xa3"
      "\x56\x0f\xcf\xf9\xe4\x8a\x9b\xd5\x03\x8f\xf2\xf8\x65\xaf\x98\x68\x52\x27"
      "\xa6\x03\x1f\x8b\x9c\x30\xdc\xda\x32\xe7\x92\x9e\x78\xd2\x9e\x39\xe5\x21"
      "\x91\xcf\xc9\x78\x14\xb0\x54\xfd\x3f\x85\x9f\xfc\xdb\x34\xc4\xc1\xdb\x46"
      "\xcf\x33\x82\xcf\x1a\x9d\x99\xef\x15\xc2\xad\x25\x3a\xac\x4c\x89\x07\xc5"
      "\xc6\xd6\xca\x79\x57\x3d\xa2\x8e\x26\x4f\xb4\x0d\x4a\xdf\x16\x21\xf3\x30"
      "\x96\xd4\x9a\x1a\xa5\xc2\xd3\xab\x1c\xba\x87\x94\xb3\x3b\x1f\xca\xd0\xb8"
      "\xc7\x46\x54\x93\xdc\xa3\x65\x23\x54\xc3\x00\x79\x7d\x33\x7a\x8b\xae\x99"
      "\x3b\xa3\xf0\xf1\xea\xf9\x22\x8c\x7b\x2a\xa5\x87\x5c\x63\xab\x01\x5a\x2c"
      "\x7b\xeb\xcc\x91\x1c\x0a\x7a\xc7\x55\x87\xe4\x16\xf7\x17\xd6\x05\x35\x22"
      "\xfd\x81\x60\x67\xce\x70\xa9\xe4\x03\x9c\xe9\xef\x8d\x51\x56\x42\xb8\x7a"
      "\x5d\x28\xbe\x3d\x0d\x88\x53\x6b\x0c\xd7\xf1\x35\xd3\xc8\x98\x7a\x2b\x7d"
      "\x45\xa4\xf8\x56\xef\xf2\x94\x54\xf5\xc5\x55\x62\xd1\x29\x48\x7b\x9f\xc7"
      "\xa6\x7f\x58\x62\x17\x57\x81\xeb\x14\x0c\x25\x32\x4b\x72\x30\xff\x94\x76"
      "\x21\x41\x03\x8d\x39\xe6\xfa\x8d\x36\xdf\x43\x8e\x6f\xa1\xc2\xfb\x37\x81"
      "\x09\x8b\x27\xd6\x66\xbd\x3e\x86\x37\xf1\xc2\x4e\xd9\x78\x3b\xbc\x85\xf4"
      "\xbf\xb0\x45\xb0\xf3\xb6\x83\x36\x89\xcf\x15\xfb\xee\xe8\xb3\x5e\xf5\x36"
      "\xdc\x4d\x41\x3f\x2e\xd7\x52\x72\x93\xc8\xa2\xc7\xa5\xcf\xf9\xa3\x40\xe6"
      "\xa5\xb7\x0a\xa6\xbe\xef\x3e\x67\xc8\x1b\x6a\x89\xdb\x88\x4b\xbc\xf9\x83"
      "\x94\x07\x10\x5b\x2c\xc2\x63\x0e\x33\xd1\x3b\xac\x15\x9c\x6f\xfa\x78\x3b"
      "\x42\xc5\x5a\xff\x92\xdd\x44\x40\x8d\xe2\x70\xf8\xf7\xcf\x36\x58\x0e\xa1"
      "\x28\xd9\xc9\x01\x87\x0e\xcb\x4d\xbc\x59\x79\x3b\xc5\x74\x83\x9f\x01\xed"
      "\x36\x14\xd4\xb2\x2f\xe4\xcb\x43\x4e\x6c\x73\x18\xaa\x7c\x7f\x3b\xec\x09"
      "\xc8\xa4\x61\x59\xd9\xd5\x1e\x90\x4a\xc7\x69\xf3\x23\xe9\xd5\x99\x7e\x5c"
      "\x97\xed\x65\x4f\xd6\x55\xba\x4a\x7a\x6f\x64\xe6\xf7\xc3\x3a\x5f\xd3\x16"
      "\x1b\xba\x02\x17\xf7\x22\x06\x50\x51\xb3\x09\x2b\x0a\x8a\xd4\x05\x35\x0b"
      "\x53\x28\x82\xaa\x24\x81\x0c\x8b\xf6\x89\x59\x06\x97\xe7\x66\xee\x92\x2e"
      "\x60\xb1\xe7\x03\xa5\x52\x3c\xd8\x4a\x07\x5d\x08\xe7\x31\x57\xb3\x91\xc1"
      "\xc8\x3a\x19\x5b\xc5\xa0\xf6\xa5\xbd\x6e\xba\x44\x71\x34\xb5\xfe\x75\x43"
      "\xe3\xf9\x05\x6d\x81\x32\x91\xf9\xd1\x41\xd1\x7e\x3f\x51\x9c\x58\x2d\xa0"
      "\x82\x31\xf6\xbf\x40\xdc\xed\xcb\x16\x57\x09\x66\x29\x56\x8c\x8b\x29\x13"
      "\xb1\x1f\x00\xeb\xc2\x5a\xf0\x41\x2e\x0d\xce\xf2\xfa\x63\x44\x8f\xbc\xd2"
      "\xce\xb0\x8e\x54\x53\x77\xdf\x33\xce\x37\x8e\x2f\x3c\xb1\x48\x35\x14\x18"
      "\x22\x77\xca\x9a\xc2\x2b\x03\x75\xab\x9b\x68\x2f\x65\x21\x2d\x4d\xef\x22"
      "\x82\x3b\x52\x3a\xdc\xec\x18\xb0\x2b\x98\x68\xb1\x74\x92\xbc\xe5\x95\x53"
      "\x84\x13\x11\x45\x54\x4d\xf7\xf8\x8c\xdd\xa8\xe0\x09\x16\xfc\x16\x5a\xd3"
      "\x89\xeb\x7b\x5b\xc1\x5c\xa0\xff\xe1\x6a\x86\xa1\x7b\x0b\x0a\x8e\xed\x98"
      "\x50\x56\xeb\x76\x9a\x73\xae\x0a\x19\x8f\x04\x2a\xb2\x42\x4c\x2d\x4b\x99"
      "\xd9\x86\xf9\xde\x66\x0f\x7e\x13\x81\x6a\x19\x51\x8d\x2f\xc9\xed\x63\x2d"
      "\xd6\x20\xea\xbd\x3d\x19\x5d\x20\x35\xd1\x6b\x6e\x9f\xfa\xbb\x92\xdd\xe0"
      "\x22\xa7\xc2\x38\x74\x8a\xab\xaa\x5d\x26\x1b\x21\x6b\xd0\x72\x5f\x1e\xb0"
      "\xa9\x9b\x2e\xa7\xeb\x83\x24\xa1\xb4\x87\x16\xa5\x23\x94\xa9\x88\xd9\x50"
      "\xe8\xb5\xbb\xdb\xdc\x8d\x8b\x02\xb5\xe8\xda\xa5\x33\xd8\xf3\xb4\xc3\x74"
      "\xbd\x0b\x89\x1e\xc2\xfd\x71\xbc\xb8\xcc\xaa\xf3\x91\xb8\xc5\xd2\x9b\x84"
      "\x6e\x1e\x28\xe7\x96\xee\x5c\x0e\x83\xe8\x3b\x8a\xbb\x2f\xa6\xfd\x8f\xa9"
      "\xe1\x81\x0b\x8f\x09\xe7\xf4\x13\xa4\x86\x45\x42\xd4\x4e\x0b\x22\xad\x7c"
      "\x7d\xbe\x68\xa6\xe4\x56\x4d\x94\x84\x38\xbd\xce\xd4\x75\x71\x53\xc6\x5b"
      "\xe6\x3e\xbe\xe2\xbd\xb3\x86\x9f\xea\x0f\x32\x62\xad\xb0\x71\x40\x3e\x81"
      "\x1c\x0f\xa5\x58\x57\x0d\x29\x32\xcc\xc6\x71\xe3\x1c\x72\xba\x8d\xf8\x93"
      "\x0b\x2d\xa8\xb9\x2c\x14\x89\xb6\x65\x53\x6c\xb0\x8c\x27\x62\xb9\x42\xaf"
      "\x9b\x19\x8a\x0e\xe3\x26\x41\x43\x36\xab\x56\x82\x14\x84\x2d\x4a\x56\x2a"
      "\xed\xac\x46\x1c\xb3\x1e\x23\x67\x2c\x99\xa3\x21\x50\x2b\x59\x85\xb1\xc8"
      "\x7e\x2b\x00\x19\x71\x55\x00\x75\xfb\xf9\xc7\x13\x12\x99\x31\xc3\x9e\x78"
      "\xf0\xaf\xa7\x0d\x57\x34\x8a\x7c\xab\xee\x0d\xf9\xa6\x5c\x16\xe8\x2e\x5c"
      "\xca\xa7\x6d\x64\x03\x5b\xb5\x34\xe8\x94\x79\x43\x73\x94\x47\x69\xfb\x42"
      "\xa0\xa9\x2d\xde\x01\x3c\x73\x3a\xff\x2f\x4a\x5e\x14\x51\x36\x3f\x82\xa1"
      "\x44\xe9\xf4\xf8\x07\xa2\xc0\x95\xff\xa3\xdd\xa1\x90\xdf\x49\x84\xee\x82"
      "\x5d\xf7\xe0\x32\x7d\x24\xce\xff\x77\x60\x9b\x33\x44\x71\x92\x98\x28\xca"
      "\x0a\x7d\xbe\x37\x7a\xed\x04\xba\xc1\xac\x1c\x8c\xe3\xc6\xad\x93\xcf\xbc"
      "\xf4\xa2\xd5\xbf\xd2\x31\x12\xa0\x79\x31\x14\xb9\xf3\x8f\xb2\x3e\xda\xca"
      "\x7e\x9c\x34\xd7\x0b\x65\x95\xa0\xcf\x5b\x02\x37\xb5\xa5\xf4\xbc\x52\xb1"
      "\x74\xe9\x54\xc7\xc5\xc5\xae\xcc\x88\xa5\x47\x15\xfa\x85\x09\xee\xd0\x37"
      "\xf3\xbc\x00\xa4\xac\x79\x27\x2f\xe7\x3b\x9d\x5f\x53\x15\x5c\xb3\x1d\xf2"
      "\x72\xd0\x7a\xee\x50\x77\xd6\x96\x5f\xc5\x8b\xfa\x66\xf4\x14\x13\x31\xfb"
      "\x6a\xe5\x5f\x22\x84\xb2\x20\x56\x6b\x15\x41\x8f\x67\x1d\xd0\x8d\x13\x24"
      "\x13\x33\xf1\xca\x26\x59\x00\xdd\x8a\x85\xd2\xf2\x7e\x25\x32\xa2\xd8\x81"
      "\xc2\x35\x5d\xbc\xe4\xd4\x4b\xf0\xd0\x6b\x9c\x40\xb2\xc5\x99\x1a\xc6\x1c"
      "\xb0\xb5\x3d\x2a\xc6\x68\x49\xd7\x77\x2d\xc3\xeb\x1b\x49\x4e\x65\xd4\x0e"
      "\xaf\xb7\x29\x1b\x47\x0f\xbe\xcb\xc6\x46\x61\x41\x41\x92\x0d\xb8\xa2\x6b"
      "\x35\x26\x54\x57\x85\x15\x45\x0c\x71\xb2\x4b\x42\x68\x02\x2e\xee\xef\x08"
      "\xc6\x9c\x42\x81\x13\xb4\x80\x7c\x47\x7d\xc9\xec\xc7\x9b\xb4\xff\xc8\xd0"
      "\xb2\x30\xac\x5d\x79\xf9\x22\xba\xe4\x0c\xc3\x4b\x3c\xb6\x27\x8a\xbd\xb0"
      "\x93\x6d\x95\xde\x62\xfa\x84\x0a\x53\x97\xed\xda\x8e\x72\x54\x2f\x2f\xd0"
      "\xb2\x85\xea\x3f\x4f\x2a\xa6\x1a\xe7\xc0\x4c\x9f\x8d\x3e\x33\xa6\xfe\x22"
      "\x1e\x7b\x67\x51\xc8\xf0\xe0\x3d\x02\x84\xff\x97\xe1\xbd\x54\x22\x36\x9e"
      "\xc1\xfe\x6c\x33\x23\x4b\x7c\x2e\xf9\x3f\x28\xa9\xac\xea\xec\x70\x81\xd0"
      "\x49\xdd\xb3\x29\xd2\x2e\x6c\xf9\x9d\xa2\x81\x4b\x1a\x04\x20\x83\xa3\xcb"
      "\xec\x42\xf3\xac\x89\xab\x97\x3d\x31\xec\x01\x82\xc0\x0b\x7e\x7c\xfd\xf2"
      "\xa1\x7a\x01\xf5\xb8\xb6\x78\x0c\xa6\x7d\x93\xef\x6f\x6c\x7b\x72\x83\x1e"
      "\xfb\x26\x0f\x0e\x6c\xa5\x64\x59\x00\x2b\x79\x18\x91\xbe\x4d\xcf\xc4\xb5"
      "\xe4\x61\xb9\x97\x6b\xae\x99\xfb\xce\x72\x30\x50\xe0\xb8\x30\x3d\x07\xf0"
      "\x56\x5e\x20\xac\x45\x90\x1f\x92\x84\xbc\x30\x0f\xed\xb9\x4f\x58\x1e\xf0"
      "\x28\xef\x4f\x7d\x7b\xaf\x0d\xe3\xda\x04\x65\x6f\xc1\xcf\x18\xc4\x03\x7b"
      "\x79\x5d\xc4\x15\x0a\x95\xcc\xd3\x37\x20\x85\x09\xf6\xfd\x5a\xcc\xa0\xf0"
      "\xdf\xe3\xaf\x6b\xd1\xab\xda\x99\x9a\x73\x57\xc8\xdc\x39\xef\xae\x1e\xe2"
      "\x0d\x13\x70\xf2\x36\xe5\xa3\x63\xe0\xd9\x02\xf9\x45\x47\x17\xc7\xb5\x26"
      "\x54\xc8\x46\xae\x2a\x74\x71\x8c\x92\x54\x7d\x83\x85\xb3\xfa\xe3\xc3\x7e"
      "\xbe\x48\x2c\x3e\x5c\xa3\xd8\x09\x57\x9b\xf2\x82\xf3\xb8\x82\xfb\xd7\x58"
      "\x8a\xe5\x05\x9a\x1a\x63\x83\xc2\xbe\xed\x83\xe3\x03\xec\x48\xba\x1d\x34"
      "\xe2\x71\x5c\x1d\xaa\xb2\xb0\xdd\x42\x16\x7c\x84\x26\x43\x81\xd6\xb5\x5c"
      "\xc4\xf7\x33\xc1\xa1\x49\xd4\xb4\x2a\xc6\xb3\xe8\xc1\x86\xa0\x8d\x1d\x69"
      "\x94\x4f\xd0\xc0\x3e\x4e\x5d\x16\xa0\xff\x92\xc6\x6c\x8b\xc9\xd8\x3c\x9a"
      "\x70\xa8\x85\xad\xee\x0f\x38\x6c\x72\x44\xd1\x00\xa9\xf5\x24\x95\xca\x50"
      "\xae\x0f\x92\x1a\xab\x15\xae\xac\x45\x2b\x4a\x80\x48\x11\x8b\xa4\x44\x86"
      "\xd7\x19\xbf\xca\x81\x11\x46\x21\x4b\x58\x15\x53\xdc\xee\x02\xe6\x86\x13"
      "\x94\x72\x81\x6c\x06\x00\xad\x66\x34\xa2\xea\x9e\xa9\x24\x0d\xe1\x5c\xdc"
      "\xb6\x2e\x1f\x3d\x9a\xbe\x0b\x99\xa6\x7b\x45\xa2\xaf\xa2\xdf\x68\xa7\x9f"
      "\xcf\xf5\x86\x88\xb5\xda\x77\xe1\xa3\x22\xf6\x0b\xff\xcf\x55\x20\xf1\x9d"
      "\x77\x23\xd2\xe5\x73\x06\xa4\x72\xb3\x9c\x61\x4b\x45\x99\x3d\xe8\xc7\x80"
      "\x25\xa1\xce\x69\x69\x81\x5d\x4f\xd0\x0c\x3c\x72\xf5\x1a\xfd\x3a\xf5\xd4"
      "\x83\x6a\xd3\xdd\x7e\x0c\x33\xe8\xab\x3c\x7e\xa6\xf5\xb3\xae\x83\x71\xde"
      "\x30\xfe\xfe\xcc\xf5\x09\x99\x46\xbd\xbf\xf1\x67\x62\x2d\x3a\xae\xce\x41"
      "\xf3\x82\x4a\x85\x8f\x8d\x80\x9d\x36\xe5\xc1\xf9\x07\x28\xa8\x47\x10\x07"
      "\x10\x1c\x65\xfc\x97\x51\xdd\x82\x65\xb2\xb1\xae\xf6\x49\x7f\x45\x6e\x5c"
      "\x6f\x9e\xb1\x2a\xef\x25\x09\x71\x4d\x64\xdc\x0b\xe6\x2f\xb5\xd3\xa1\xfa"
      "\xcf\xd8\x16\xa9\x04\xf7\x0d\xdd\x00\xfb\x3e\xe8\x76\x46\x56\x57\x65\x02"
      "\x88\xa2\x74\xe8\xe7\xbd\x9b\xcc\xc1\xb2\x46\xcf\xd0\x44\x4b\x57\xcb\x19"
      "\x02\xe2\xb4\x58\x69\xd1\x4d\x7c\x4e\x6c\x12\x71\x66\xef\x7c\x10\x47\xed"
      "\x86\xaa\x8d\xb0\x94\x92\xb2\x8d\xd3\x03\xce\x7c\xc9\x0c\x7e\xb5\x44\xaf"
      "\xf0\xc1\xb5\xd1\x59\xe7\x74\x2e\xfc\x32\x91\xcc\x28\x5f\x30\x90\x17\xd4"
      "\x15\xf3\x0c\x32\x15\x03\xb8\x20\x05\xcd\xe9\xd8\x6e\xd6\xe1\x9d\xd0\x96"
      "\x8c\xf4\x1a\xe7\x1b\x20\xc0\x5a\xc9\x89\x15\xa3\x6d\xe7\x1d\xb1\x98\x98"
      "\x1e\x20\xac\x76\x72\x19\x77\x25\x47\xf2\x53\x27\x40\xf2\x32\x0e\xde\xc1"
      "\xc6\x55\xf7\x77\x4f\x4c\xfd\x05\xc4\xf1\x41\x78\x51\x46\xac\xfe\x31\xa9"
      "\x97\x61\x7c\xf4\x14\xff\xba\x4a\x3a\x8d\x8c\xd8\xfd\x92\xd1\x16\xc6\x42"
      "\xcb\x14\x66\x08\x27\x04\xec\x6c\xc6\x82\x40\xc9\x2d\xa6\x96\x44\x30\x29"
      "\x32\x7f\xc1\x0b\x03\x63\x3b\xb7\xd9\xb2\x0a\xc1\x3b\x6b\xc5\x26\x43\x45"
      "\x44\x9a\x15\x2b\xa2\xd0\x8f\x86\x8b\xda\x6a\xd7\xd6\xa0\xdd\xb6\x93\x7a"
      "\xf3\xea\xa1\xaa\x8f\xbc\xc4\x74\x8a\xcc\x30\x84\x95\xbe\xc1\x66\x3c\x07"
      "\x10\x02\x14\x3f\x01\x00",
      4236);
  memcpy((void*)0x20003f98, "\x06\x00\x00\x00\x8d\x00\x00\x00", 8);
  *(uint64_t*)0x20003fa0 = 0x20003cc0;
  memcpy((void*)0x20003cc0,
         "\x8d\x03\x0a\x44\xaa\x07\xc1\xc3\x7a\xfd\x31\xa3\x85\xb2\xfb\x3d\x0c"
         "\xdf\x3e\x67\x6a\xda\x75\x1d\xc7\x98\x0a\xd1\xb4\xd6\xde\x66\xba\x4e"
         "\xdb\xc1\xd0\x38\x3b\x6c\xbe\x95\x37\x6c\xa1\xf5\xe2\xc3\x0d\x26\xc3"
         "\xf7\xca\xc9\xc1\x09\x35\xbb\xd6\x33\x64\x89\x5f\x93\x74\xfd\xcd\x20"
         "\xfe\x18\x63\x1a\x87\x68\xb9\x1a\x6e\x14\xbb\x1a\x9c\x25\x1c\xf8\x20"
         "\x6e\xde\x75\xeb\xb5\xf3\x9e\xf8\x81\x8f\x82\xf9\x42\x68\x59\x81\xf4"
         "\x84\xcf\xad\x09\x03\xfe\x38\xeb\xe8\xc4\x16\xe5\xf0\x94\xd9\xc4\xb3"
         "\x00\x02\xc9\xc6\x47\x45\x64\x4b\xf6\xf6\xbb\x2b\x02\xc9\x8c\x79\x2a"
         "\x41\xff\xbd\xb3\x20",
         141);
  memcpy((void*)0x20003fa8, ">\000\000\000", 4);
  *(uint64_t*)0x20003fac = 0x20003d80;
  memcpy((void*)0x20003d80,
         "\x3e\x03\xff\xf4\xff\xec\x4b\x05\xd6\xea\xd3\xb2\xb2\xff\xde\x0f\xcb"
         "\x04\x66\x93\xbe\x23\xc8\x2b\x97\x6a\x43\x06\x1c\xd0\x6b\xd4\xd1\xdc"
         "\x71\x8f\xac\xaa\xd6\xa6\xcc\xd4\x6d\x22\x0f\xbe\xb3\x2e\x4b\x1f\xa7"
         "\x0b\xd5\xa1\xb8\x16\x02\x33\x90\xd8\xca\x50",
         62);
  memcpy((void*)0x20003fb4, "0\000\000\000", 4);
  *(uint64_t*)0x20003fb8 = 0x20003dc0;
  memcpy((void*)0x20003dc0, "\x30\x03\x2b\x04\xe7\xb7\xf8\x37\x77\x76\xe8\x69"
                            "\xcc\x6e\x52\x5b\x8f\x79\xa4\x0a\x47\x38\xf1\xca"
                            "\xc3\xf7\xdd\x1d\x84\xd6\xc2\xae\x7f\xa0\xb3\xee"
                            "\x68\x9c\x40\x73\x6f\x9d\xd6\x4e\x3e\xf6\x6d\x67",
         48);
  memcpy((void*)0x20003fc0, "\x05\x00\x00\x00", 4);
  *(uint64_t*)0x20003fc4 = 0x20003e00;
  memcpy((void*)0x20003e00, "\x05\x03\x0c\x10\x89", 5);
  memcpy((void*)0x20003fcc, "\x92\x00\x00\x00", 4);
  *(uint64_t*)0x20003fd0 = 0x20003e40;
  memcpy((void*)0x20003e40,
         "\x92\x03\x1f\x34\xc2\x66\x38\x79\x49\xb5\x45\xc4\x82\xc1\x31\x05\x50"
         "\x32\x23\xcd\xd9\x45\x8f\x13\x22\x86\x25\xd8\xb5\x6f\xcd\x4b\x27\xbb"
         "\xe8\x20\x01\x8d\x6f\xc7\x82\xba\xb2\x2c\xf2\xa6\x0a\x52\x1f\xd2\xe8"
         "\x17\x98\x11\x5c\xa7\xd4\xa7\x39\xea\x8f\x78\x2d\x33\x61\x76\x3c\x78"
         "\xf4\xda\xfe\xff\x14\xa2\x03\xfe\xaf\x10\x72\xd3\x17\x43\xbc\x10\x0d"
         "\x03\xb6\xbb\x3a\xa0\x27\x32\x84\xc4\xe2\x44\xd8\x5a\x9b\xfc\x25\x1d"
         "\xb1\xea\xc5\xd1\x4c\xfc\x75\x16\x6f\x9f\xda\x64\xd5\x5d\xd2\x76\x3f"
         "\x67\x75\x48\x92\xb4\x56\x9a\x4a\x13\xe1\x14\x02\x75\x70\x70\xb1\xb9"
         "\x4d\x2f\xfb\x9a\xe7\x31\xe1\x1c\x58\x73",
         146);
  memcpy((void*)0x20003fd8, "o\000\000\000", 4);
  *(uint64_t*)0x20003fdc = 0x20003f00;
  memcpy((void*)0x20003f00,
         "\x6f\x03\xff\xfc\xd3\x04\xab\xf8\xa4\x72\x3d\x74\x5c\xf4\x5e\xb8\x8b"
         "\x84\x2b\x22\x3c\x90\xc6\x9d\x5b\xf1\x15\xfc\x93\xc8\x87\x3f\x64\xf2"
         "\x8d\xce\x86\x31\xcd\xa6\x70\x67\x9a\x5e\xfd\xe1\xab\x49\x11\x12\x51"
         "\x9e\x20\x47\xf9\x34\x5a\x4e\x3e\xf1\xd9\xf8\x70\x88\xbd\x22\xe7\x9a"
         "\x75\x05\xb4\xd7\x83\x8e\xa3\xc5\x91\x72\x7e\x57\x9b\xf4\x70\xef\x9a"
         "\x9d\x04\x7a\x93\x07\xbb\x15\x6c\x88\xac\x39\xf2\xde\x9f\x7b\xe5\x8c"
         "\xb2\x98\xfc\xea\x5e\xc2\x74\x04\xed",
         111);
  syz_usb_connect(7, 0x40f, 0x20005740, 0x20003f80);
}
int main(void)
{
  syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0);
  loop();
  return 0;
}