// https://syzkaller.appspot.com/bug?id=fdb016308237d07dfc4424d53359c3488db38781
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <dirent.h>
#include <endian.h>
#include <errno.h>
#include <fcntl.h>
#include <pthread.h>
#include <sched.h>
#include <signal.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/mount.h>
#include <sys/prctl.h>
#include <sys/resource.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/time.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <time.h>
#include <unistd.h>

#include <linux/capability.h>
#include <linux/futex.h>

static void sleep_ms(uint64_t ms)
{
  usleep(ms * 1000);
}

static uint64_t current_time_ms(void)
{
  struct timespec ts;
  if (clock_gettime(CLOCK_MONOTONIC, &ts))
    exit(1);
  return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
}

static void thread_start(void* (*fn)(void*), void* arg)
{
  pthread_t th;
  pthread_attr_t attr;
  pthread_attr_init(&attr);
  pthread_attr_setstacksize(&attr, 128 << 10);
  int i = 0;
  for (; i < 100; i++) {
    if (pthread_create(&th, &attr, fn, arg) == 0) {
      pthread_attr_destroy(&attr);
      return;
    }
    if (errno == EAGAIN) {
      usleep(50);
      continue;
    }
    break;
  }
  exit(1);
}

typedef struct {
  int state;
} event_t;

static void event_init(event_t* ev)
{
  ev->state = 0;
}

static void event_reset(event_t* ev)
{
  ev->state = 0;
}

static void event_set(event_t* ev)
{
  if (ev->state)
    exit(1);
  __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
  syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000);
}

static void event_wait(event_t* ev)
{
  while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
    syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0);
}

static int event_isset(event_t* ev)
{
  return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
}

static int event_timedwait(event_t* ev, uint64_t timeout)
{
  uint64_t start = current_time_ms();
  uint64_t now = start;
  for (;;) {
    uint64_t remain = timeout - (now - start);
    struct timespec ts;
    ts.tv_sec = remain / 1000;
    ts.tv_nsec = (remain % 1000) * 1000 * 1000;
    syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts);
    if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
      return 1;
    now = current_time_ms();
    if (now - start > timeout)
      return 0;
  }
}

static bool write_file(const char* file, const char* what, ...)
{
  char buf[1024];
  va_list args;
  va_start(args, what);
  vsnprintf(buf, sizeof(buf), what, args);
  va_end(args);
  buf[sizeof(buf) - 1] = 0;
  int len = strlen(buf);
  int fd = open(file, O_WRONLY | O_CLOEXEC);
  if (fd == -1)
    return false;
  if (write(fd, buf, len) != len) {
    int err = errno;
    close(fd);
    errno = err;
    return false;
  }
  close(fd);
  return true;
}

const int kInitNetNsFd = 201;

#define MAX_FDS 30

static long syz_init_net_socket(volatile long domain, volatile long type,
                                volatile long proto)
{
  int netns = open("/proc/self/ns/net", O_RDONLY);
  if (netns == -1)
    return netns;
  if (setns(kInitNetNsFd, 0))
    return -1;
  int sock = syscall(__NR_socket, domain, type, proto);
  int err = errno;
  if (setns(netns, 0))
    exit(1);
  close(netns);
  errno = err;
  return sock;
}

static void setup_common()
{
  if (mount(0, "/sys/fs/fuse/connections", "fusectl", 0, 0)) {
  }
}

static void setup_binderfs()
{
  if (mkdir("/dev/binderfs", 0777)) {
  }
  if (mount("binder", "/dev/binderfs", "binder", 0, NULL)) {
  }
  if (symlink("/dev/binderfs", "./binderfs")) {
  }
}

static void loop();

static void sandbox_common()
{
  prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
  setsid();
  int netns = open("/proc/self/ns/net", O_RDONLY);
  if (netns == -1)
    exit(1);
  if (dup2(netns, kInitNetNsFd) < 0)
    exit(1);
  close(netns);
  struct rlimit rlim;
  rlim.rlim_cur = rlim.rlim_max = (200 << 20);
  setrlimit(RLIMIT_AS, &rlim);
  rlim.rlim_cur = rlim.rlim_max = 32 << 20;
  setrlimit(RLIMIT_MEMLOCK, &rlim);
  rlim.rlim_cur = rlim.rlim_max = 136 << 20;
  setrlimit(RLIMIT_FSIZE, &rlim);
  rlim.rlim_cur = rlim.rlim_max = 1 << 20;
  setrlimit(RLIMIT_STACK, &rlim);
  rlim.rlim_cur = rlim.rlim_max = 128 << 20;
  setrlimit(RLIMIT_CORE, &rlim);
  rlim.rlim_cur = rlim.rlim_max = 256;
  setrlimit(RLIMIT_NOFILE, &rlim);
  if (unshare(CLONE_NEWNS)) {
  }
  if (mount(NULL, "/", NULL, MS_REC | MS_PRIVATE, NULL)) {
  }
  if (unshare(CLONE_NEWIPC)) {
  }
  if (unshare(0x02000000)) {
  }
  if (unshare(CLONE_NEWUTS)) {
  }
  if (unshare(CLONE_SYSVSEM)) {
  }
  typedef struct {
    const char* name;
    const char* value;
  } sysctl_t;
  static const sysctl_t sysctls[] = {
      {"/proc/sys/kernel/shmmax", "16777216"},
      {"/proc/sys/kernel/shmall", "536870912"},
      {"/proc/sys/kernel/shmmni", "1024"},
      {"/proc/sys/kernel/msgmax", "8192"},
      {"/proc/sys/kernel/msgmni", "1024"},
      {"/proc/sys/kernel/msgmnb", "1024"},
      {"/proc/sys/kernel/sem", "1024 1048576 500 1024"},
  };
  unsigned i;
  for (i = 0; i < sizeof(sysctls) / sizeof(sysctls[0]); i++)
    write_file(sysctls[i].name, sysctls[i].value);
}

static int wait_for_loop(int pid)
{
  if (pid < 0)
    exit(1);
  int status = 0;
  while (waitpid(-1, &status, __WALL) != pid) {
  }
  return WEXITSTATUS(status);
}

static void drop_caps(void)
{
  struct __user_cap_header_struct cap_hdr = {};
  struct __user_cap_data_struct cap_data[2] = {};
  cap_hdr.version = _LINUX_CAPABILITY_VERSION_3;
  cap_hdr.pid = getpid();
  if (syscall(SYS_capget, &cap_hdr, &cap_data))
    exit(1);
  const int drop = (1 << CAP_SYS_PTRACE) | (1 << CAP_SYS_NICE);
  cap_data[0].effective &= ~drop;
  cap_data[0].permitted &= ~drop;
  cap_data[0].inheritable &= ~drop;
  if (syscall(SYS_capset, &cap_hdr, &cap_data))
    exit(1);
}

static int do_sandbox_none(void)
{
  if (unshare(CLONE_NEWPID)) {
  }
  int pid = fork();
  if (pid != 0)
    return wait_for_loop(pid);
  setup_common();
  sandbox_common();
  drop_caps();
  if (unshare(CLONE_NEWNET)) {
  }
  write_file("/proc/sys/net/ipv4/ping_group_range", "0 65535");
  setup_binderfs();
  loop();
  exit(1);
}

static void kill_and_wait(int pid, int* status)
{
  kill(-pid, SIGKILL);
  kill(pid, SIGKILL);
  for (int i = 0; i < 100; i++) {
    if (waitpid(-1, status, WNOHANG | __WALL) == pid)
      return;
    usleep(1000);
  }
  DIR* dir = opendir("/sys/fs/fuse/connections");
  if (dir) {
    for (;;) {
      struct dirent* ent = readdir(dir);
      if (!ent)
        break;
      if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
        continue;
      char abort[300];
      snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort",
               ent->d_name);
      int fd = open(abort, O_WRONLY);
      if (fd == -1) {
        continue;
      }
      if (write(fd, abort, 1) < 0) {
      }
      close(fd);
    }
    closedir(dir);
  } else {
  }
  while (waitpid(-1, status, __WALL) != pid) {
  }
}

static void setup_test()
{
  prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
  setpgrp();
  write_file("/proc/self/oom_score_adj", "1000");
}

static void close_fds()
{
  for (int fd = 3; fd < MAX_FDS; fd++)
    close(fd);
}

struct thread_t {
  int created, call;
  event_t ready, done;
};

static struct thread_t threads[16];
static void execute_call(int call);
static int running;

static void* thr(void* arg)
{
  struct thread_t* th = (struct thread_t*)arg;
  for (;;) {
    event_wait(&th->ready);
    event_reset(&th->ready);
    execute_call(th->call);
    __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
    event_set(&th->done);
  }
  return 0;
}

static void execute_one(void)
{
  int i, call, thread;
  for (call = 0; call < 5; call++) {
    for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0]));
         thread++) {
      struct thread_t* th = &threads[thread];
      if (!th->created) {
        th->created = 1;
        event_init(&th->ready);
        event_init(&th->done);
        event_set(&th->done);
        thread_start(thr, th);
      }
      if (!event_isset(&th->done))
        continue;
      event_reset(&th->done);
      th->call = call;
      __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
      event_set(&th->ready);
      event_timedwait(&th->done, 50);
      break;
    }
  }
  for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
    sleep_ms(1);
  close_fds();
}

static void execute_one(void);

#define WAIT_FLAGS __WALL

static void loop(void)
{
  int iter = 0;
  for (;; iter++) {
    int pid = fork();
    if (pid < 0)
      exit(1);
    if (pid == 0) {
      setup_test();
      execute_one();
      exit(0);
    }
    int status = 0;
    uint64_t start = current_time_ms();
    for (;;) {
      if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid)
        break;
      sleep_ms(1);
      if (current_time_ms() - start < 5000)
        continue;
      kill_and_wait(pid, &status);
      break;
    }
  }
}

uint64_t r[3] = {0xffffffffffffffff, 0xffffffffffffffff, 0x0};

void execute_call(int call)
{
  intptr_t res = 0;
  switch (call) {
  case 0:
    res = -1;
    res = syz_init_net_socket(/*domain=*/0x27, /*type=*/2, /*proto=*/1);
    if (res != -1)
      r[0] = res;
    break;
  case 1:
    memcpy((void*)0x20000080, "/dev/virtual_nci\000", 17);
    res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul,
                  /*file=*/0x20000080ul, /*flags=*/2ul, /*mode=*/0ul);
    if (res != -1)
      r[1] = res;
    break;
  case 2:
    res = syscall(__NR_ioctl, /*fd=*/r[1], /*cmd=*/0, /*arg=*/0x20000180ul);
    if (res != -1)
      r[2] = *(uint32_t*)0x20000180;
    break;
  case 3:
    *(uint16_t*)0x20000000 = 0x27;
    *(uint32_t*)0x20000004 = r[2];
    *(uint32_t*)0x20000008 = 0;
    *(uint32_t*)0x2000000c = 0;
    *(uint8_t*)0x20000010 = 0;
    *(uint8_t*)0x20000011 = 0;
    memcpy((void*)0x20000012,
           "\x94\xf7\x0c\x47\xab\xa8\x62\x63\xa1\x46\x84\x73\x93\xee\xe5\x9e"
           "\xde\x0c\x74\x0a\x48\x4c\x39\xa2\xc3\x0c\xef\x77\x5b\x56\x38\xdd"
           "\x7d\x3a\x8c\xe7\x2e\x8f\xe8\xc2\x35\x2d\x16\x5f\xe4\xb0\xc5\x97"
           "\x05\x71\xc5\x56\x0c\x10\x08\x80\xe5\x0d\xed\x8e\xa7\x34\xac",
           63);
    *(uint64_t*)0x20000058 = 0x31;
    syscall(__NR_bind, /*fd=*/r[0], /*addr=*/0x20000000ul, /*addrlen=*/0x60ul);
    break;
  case 4:
    *(uint64_t*)0x200013c0 = 0x20000080;
    *(uint16_t*)0x20000080 = 0x27;
    *(uint32_t*)0x20000084 = 0;
    *(uint32_t*)0x20000088 = 1;
    *(uint32_t*)0x2000008c = 1;
    *(uint8_t*)0x20000090 = 0x1f;
    *(uint8_t*)0x20000091 = 2;
    memcpy((void*)0x20000092,
           "\x57\x74\x85\x79\x78\x5e\xcf\xb9\xb2\xcb\xeb\xd9\xa0\x4e\x45\xc6"
           "\xbf\xcf\x8e\x67\x02\x01\xbf\x4a\x7c\x6e\xd4\xd3\xe1\x30\xa1\x3f"
           "\x84\x53\xbc\x44\x27\x70\x44\x6a\x20\x6a\x60\x99\x6f\xc8\xed\xed"
           "\xee\x09\x90\x45\x5d\x09\x28\xbc\xbe\x15\xad\xbb\x52\xc9\x8a",
           63);
    *(uint64_t*)0x200000d8 = 0x2a;
    *(uint32_t*)0x200013c8 = 0x60;
    *(uint64_t*)0x200013d0 = 0x20000280;
    *(uint64_t*)0x20000280 = 0;
    *(uint64_t*)0x20000288 = 0;
    *(uint64_t*)0x20000290 = 0x20000300;
    memcpy(
        (void*)0x20000300,
        "\x83\x44\xc1\x47\x4f\xf6\x62\x1f\xe9\xf4\x06\x95\x53\x46\x0c\xc5\x4f"
        "\x2a\xad\x35\x4c\xed\xf2\x6f\xcf\x0d\x7c\xfd\x22\x3f\xef\x04\x16\xe5"
        "\x69\x3c\xe1\x20\x31\x51\x0a\xe5\x6b\x6e\xfc\x18\x38\xc0\x36\xd0\x0f"
        "\x96\x46\xc3\xcb\x6e\xaf\xa2\x8c\x30\xec\x9a\x99\xba\x7f\x65\x37\xbd"
        "\xbb\xb8\xae\x0c\xb2\x44\x6d\xb7\x32\x14\x96\x5a\xeb\x4c\x94\xf4\xc2"
        "\xa9\x8b\xda\xdf\x5c\x06\x52\x90\xcf\x1b\xa0\x97\x32\x3a\x3e\xa5\x4a"
        "\xb3\xdd\xe0\x69\x29\xa2\x7b\x92\xb0\x0f\x54\xbe\x26\x17\xff\xd2\x01"
        "\xe0\x1d\x75\x1f\x62\xb6\xe3\xc6\x1f\xcd\xe9\x74\x39\x18\xcb\x61\x68"
        "\xca\xb3\x79\x4b\x38\xe9\xec\x1f\xd3\xae\x40\xbe\xee\xa9\x7d\xee\xd8"
        "\x87\x93\x0d\x74\x4d\x9d\xf5\xdf\x0c\x3f\x01\x3e\x41\xda\xdb\x46\xb0"
        "\xf2\x74\x7b\x77\x0e\xa3\x00\x65\xc9\xb9\x5b\x92\x5a\x4a\xc1\x1f\x74"
        "\x06\x56\x0d\xf9\x1c\x27\x63\xc4\x4c\xa1\xc9\x9d\x62\x74\x89\x3f\xb4"
        "\x38\xce\xf7\xcd\x88\x20\x6e\x40\x2b\x48\x42\x66\xba\xd2\x42\x26\x3c"
        "\xf7\xea\xe2\x06\xf5\x73\xe2\x4c\xe9\xc8\xa6\x91\x64\x4e\x40\xf0\xcb"
        "\x72\x09\x60\xee\xf9\x1f\x72\xa3\x30\xa6\x79\x35\x56\xe8\x7e\x83\x19"
        "\x14\xd4\x7d\xbb\x8f\x3d\xc2\xd6\xca\xa0\xbc\x04\x82\x93\xbd\xbd\x5e"
        "\xbf\x41\x53\x9d\x3c\x8f\xa9\x71\xdd\x65\xf2\x8f\xd5\x00\x09\x77\xe4"
        "\x73\x7a\x6d\x72\xe5\xf1\x35\x1c\x18\x60\x67\x25\x13\xc4\xed\xef\x5b"
        "\xb7\xfc\x8b\x6a\x48\x6f\x86\x6b\xff\x77\x09\x1b\x1e\xef\x37\x57\xbd"
        "\x63\x98\x30\xbd\x86\xd4\x35\x3e\x11\xa2\x6c\xc5\x40\xab\x40\xd2\x80"
        "\x15\x2f\x3e\x27\x85\x10\x14\x26\x6a\xfd\x00\x70\xfb\x3a\x91\x5b\xb3"
        "\x92\x37\xf3\xdd\xe0\x1c\x51\xce\xfe\xa4\xee\x82\xc8\xd3\x79\xc3\xf9"
        "\x07\xf8\x04\x51\xae\x93\xc3\xe6\xf3\x49\x7e\x1c\xab\x13\x06\x09\x63"
        "\x47\x3d\x27\x9e\xdc\x20\xcc\x91\x81\x72\x96\x73\xa7\x57\xf7\xd8\x21"
        "\x4f\x5f\x2f\xd4\x24\xf6\xf6\x61\x3d\x7c\x24\x1a\x21\xef\x05\xbd\x08"
        "\x5e\x13\xa3\x08\xff\x36\x80\x42\xb8\xe2\xe3\xf8\x23\x0e\x49\x7a\x16"
        "\xe6\x17\xa0\xb8\xe2\x40\xb3\x01\xe4\x51\x8e\x68\x4b\xce\xdf\x52\xed"
        "\x01\x3e\x28\x72\x87\x0b\xfa\xee\x84\x1f\x73\x5c\xba\x62\x52\xdc\xae"
        "\x7d\xf6\xf1\x03\x75\x18\x18\xec\xbd\x3f\xda\x48\xaa\xd8\x79\x49\x3f"
        "\x81\x0d\x3d\x57\x07\xc0\xee\xb8\xa6\x1e\x70\xf9\xa5\x7d\xe1\xbb\x90"
        "\x36\x43\xfe\xc9\x2e\x64\x4b\xb6\xbe\x34\x8b\xb8\x34\x28\xeb\x98\x75"
        "\x0c\x9a\xfc\xaf\xff\xea\xda\x41\xf6\xd9\xc3\x13\x17\x35\x73\x44\xaf"
        "\xc1\x50\xa7\xb5\x3d\xb7\xd2\x2d\xba\x2a\x76\x3d\x9a\xcb\x09\xd0\x49"
        "\x2a\x14\x8e\x57\xa2\xce\xc8\xed\xf7\xda\x31\xc2\x2f\xcf\x01\xc1\x84"
        "\x10\xaa\x5a\x57\x71\xf2\xdf\xa4\x0d\x93\xf6\x4d\xd1\x3f\xb4\xf2\xe8"
        "\x68\x8c\xf5\x79\x3d\xa5\xd7\xe9\x89\x7a\x85\x3e\x49\x84\x6c\x88\x22"
        "\x77\x77\x4f\x28\x1b\x8b\xa6\x67\x6d\x76\xc3\x4f\x9a\xa9\x6f\xde\x48"
        "\xa6\x01\x06\x00\x5a\xde\x3e\x90\xbe\x03\xbb\xd4\xec\x04\xb5\x99\xf5"
        "\x4a\x11\xde\x6f\xc0\xab\xac\xfb\xa6\x29\x1a\x8e\xb2\xf1\xd6\xd2\x77"
        "\x12\xea\xc9\x57\x8a\x76\xba\x86\x11\xe6\xa9\x54\x2f\x60\x05\x04\x8a"
        "\x66\xbc\x16\x62\xe9\xba\x51\xe2\xad\xd2\x70\xe7\xc3\xac\xc9\xe5\x19"
        "\x0f\xb0\xa3\x73\x23\x9f\xcd\xb3\x7c\xf7\x88\x2e\xac\x00\xef\xb3\xa4"
        "\xb9\x62\xaa\x51\xc7\x36\xfe\xd9\x19\xe3\x24\x90\x48\x68\x44\xff\xb4"
        "\xa3\xe5\x04\x47\x3f\x70\x80\x34\x07\x50\x80\xdb\x27\x6d\xdb\x9e\x14"
        "\x98\x6a\x15\xc4\xb2\xb5\xd6\x06\x96\x3b\x2d\xb3\xcf\x3d\xe6\xed\x96"
        "\xdc\x76\xed\x4a\x96\x08\xfe\x2f\x93\x81\x64\x20\xeb\x1a\xf9\x59\xca"
        "\x33\x37\xa8\xc7\x82\x8a\xf7\xa5\x01\x80\x53\xff\xbe\x8a\x35\xe5\xb4"
        "\x9c\x70\x5e\x48\x51\xc9\x87\x3d\xb6\x7f\x19\x77\x4c\xe6\x2d\x41\xcc"
        "\xd0\x2f\x91\xd2\xfd\x7f\x1e\x8c\x00\xfc\x50\xb2\x34\x84\xae\x0f\xc6"
        "\xbc\x0d\x61\x77\x1f\x49\x60\x2d\x3c\x38\xca\xfc\x35\x38\x2f\xef\xbb"
        "\xa4\x83\x4d\x8b\xfd\xeb\x28\x36\x8c\x8b\x16\x0f\x61\xa6\xbc\x70\x81"
        "\x26\x2b\x63\xc0\x19\xf9\xa9\x59\x7c\x46\x37\xe4\xfe\x8a\xd7\x0a\xc5"
        "\xb1\x20\xe9\x2d\x8d\x0e\x1b\x7c\x68\x76\xee\xa7\xc3\x15\x16\xe1\xc3"
        "\x39\xdc\x1d\x1f\x61\xc2\x04\x51\x55\xab\xf2\x16\x8b\xe8\x8f\x20\xe1"
        "\x64\xd0\x7c\xdd\xe7\xc9\xc6\xca\xeb\xde\x81\xd7\xf1\x4a\x22\x94\x58"
        "\x4b\x47\x28\xdb\xf9\xf6\x3c\xfa\x32\x51\xb8\x2a\x6a\x5e\x9e\x2d\x89"
        "\x9a\x7a\xe3\x80\x5f\xe9\x2a\x4c\x1d\x3f\x2d\x24\x79\xfb\x9f\xa7\xc6"
        "\x35\x60\x7f\xa2\x17\x11\x21\x95\x87\xf6\xba\x81\x35\xa5\x05\x40\x61"
        "\x38\x7c\x48\x9d\x9a\x46\x52\xa9\xed\x20\xed\x87\xd7\x85\x90\xe2\xdb"
        "\xd5\x70\x76\x85\xb9\xd6\xe4\x28\x8b\xff\x29\xa2\x2b\x86\x9d\xaf\xc2"
        "\x0a\x8f\xcb\x52\x41\xd6\xd0\xf7\xf5\x9c\xf9\x36\x12\xe3\xe0\xee\xec"
        "\xcd\x5d\xb9\xa5\x2c\x7a\x01\x22\x3d\xdd\xfc\x7b\x07\x02\xba\xb1\x3b"
        "\x0a\xe7\x39\x8d\x19\x11\xf2\x42\x74\xe0\xd2\x41\x01\xfc\xb3\xa7\x6c"
        "\xc0\x97\x5f\xe3\x68\xc5\x26\x41\x9f\x09\x5c\xc7\xf5\x42\xd7\x31\xb6"
        "\xe4\xe8\x1c\x4f\x12\xd8\xc8\xc8\x65\x79\x45\x8f\x33\x42\xc2\x05\x16"
        "\x86\xab\xc5\x08\x96\x8f\x42\x06\xab\x1d\xf3\x5a\x33\x79\x37\xf9\x1e"
        "\x20\xef\x3a\x0b\xbf\x88\xa3\x5c\x5e\x78\x24\x8c\x1c\xfb\xa2\x6c\x6f"
        "\x6b\x01\x6d\x59\x9a\xdc\x0c\xc1\x8f\xf0\x8b\xe7\xa5\x4e\x31\x8d\x47"
        "\x7d\x83\x4e\xa4\x57\x03\x4b\xb5\x48\x71\x47\x38\xd1\xd7\xa3\x6d\x84"
        "\x92\x02\xc9\x15\xf9\x92\x85\x33\x21\x57\x6c\x77\x27\x35\x43\xe7\x92"
        "\xd3\x43\x75\x8a\x71\xdd\x16\x97\x09\xa0\xd0\x6a\x40\x7e\x40\x9b\xd1"
        "\xfe\x23\x30\xb1\x56\x7e\x35\x86\x7f\x9e\xda\xda\xa1\xe1\xae\xc6\x49"
        "\x15\x41\xe2\x50\xf7\x23\x39\xc5\xf5\x8c\x1d\x75\xcb\x7a\x01\x9f\x02"
        "\xa5\x74\xf0\x3d\xa5\xd3\xe5\x0e\x9a\x3c\x8f\xaf\xcc\x46\x83\x75\x01"
        "\x0c\xe4\x78\xef\xc7\xb4\xd5\x05\x9b\xc4\xf2\x64\x99\xc1\x4f\xe7\x6d"
        "\x52\x90\xf7\x87\x6c\x63\x2a\x13\x88\x91\x03\xb3\x08\xe8\x9d\xff\x99"
        "\x7d\x5c\x71\x79\x25\xb1\xbe\x94\xa4\xbf\x82\x12\x45\xc2\x86\x54\x11"
        "\x8b\x9b\x10\x36\x9c\xb5\xa8\xae\x23\x2c\x90\xa0\x34\x69\xac\x0b\x79"
        "\x72\x08\xc1\x52\x71\x3d\xa1\x3a\xab\xb9\xdf\x87\xe4\xe6\x01\xfa\xe7"
        "\xdd\x41\xcb\x67\x34\xe9\xa0\x4d\xaf\x7a\xa7\x70\x60\x5f\x58\x9c\xe3"
        "\x6c\xbb\xef\xb3\x8a\x3f\x8c\x98\x05\x4b\x67\xdc\x6c\xaa\x2f\x0c\x9c"
        "\x1f\x85\xdb\x58\x89\xfa\xb0\x2d\x20\xa4\x76\xbd\x8e\x6b\x21\xfe\x7b"
        "\xa9\x17\x95\x3b\x8b\x13\x88\x62\xe7\x94\x5d\xd8\x28\x8d\x5a\xeb\xbe"
        "\x39\xf3\x3e\x23\xd9\xb3\x54\x59\xa7\xbd\x31\x57\xb7\xd5\xe0\x04\x8b"
        "\xc7\x9b\x10\x4e\xa0\xa8\xb6\x7f\x3a\xf6\x81\x0d\xf4\xdf\x39\x1b\x8d"
        "\xcd\xf2\x2f\x05\x4d\xc4\x8f\xba\x6c\x51\x47\x28\x1b\xaa\x83\xce\xe4"
        "\x7d\xfc\x79\x02\x15\x88\xec\x78\x3d\xc6\x10\x51\x91\x6c\xe1\x01\xb4"
        "\xca\xa7\x7d\xad\xf8\x8d\x63\x34\x11\x57\xa9\xa0\x8c\xc1\xcb\xdb\x54"
        "\x57\x30\xbd\x4a\xc7\xe6\xca\xfc\xda\x0b\x6e\xe1\xaf\xa7\x98\x20\x00"
        "\xc4\xa9\xc6\x46\xe8\x97\xea\x71\xf6\x2a\x5d\x71\x14\x9d\xc3\x61\x5c"
        "\xca\xd2\xaf\x63\xcd\x49\x8c\xc6\x50\xbd\x58\x4b\xb0\xe0\xea\x2a\xe0"
        "\x64\x8f\x8a\x29\xd9\x25\x8d\x94\x72\x26\xbe\x8d\x4e\x82\xcb\x1d\x5f"
        "\x82\xa8\xa8\x8e\xb8\x52\xd6\x37\x8f\x43\x67\x48\x48\xa5\x41\x28\x6c"
        "\x23\xad\x31\x97\x2c\x57\x36\xdd\x53\x28\x6d\xf1\xd9\xb0\xb2\x4a\xa6"
        "\xc0\xc5\xb2\xae\x72\x5e\xc4\x79\xc0\x3b\x9c\xbb\x5c\x55\x5d\x86\xb4"
        "\xbd\xc2\x69\x57\x66\x5d\x8b\xcc\xd3\x4c\x2a\x6a\x7b\xef\x2b\xab\xdd"
        "\xb9\x3c\xb3\xe5\x4f\x83\x76\x9e\x7b\xe6\x3a\x53\xa9\xca\x64\xd4\x39"
        "\x16\x21\xa8\x18\x36\x86\x76\xb7\x30\xdb\x55\xb2\xc7\x75\xa4\xaf\x18"
        "\x8d\x9b\x59\x09\x1b\x5e\x54\x89\x5f\x9a\x3b\xca\x99\xc0\xec\x3e\x53"
        "\x83\x5f\x34\xde\x2c\x35\x7b\x49\x9b\x7f\xee\xe7\x3c\xa0\xf2\x2f\x16"
        "\x64\x90\x63\x75\xc8\xe6\x38\xea\xc1\xfc\xfb\x98\x93\x9f\xa5\x41\xb1"
        "\x1d\x0f\xf8\xda\x23\x41\x1e\xc3\x33\xa3\x4a\x66\x48\x0b\xe4\x8e\x8d"
        "\x6d\x21\x58\xd8\x7a\x39\x14\x09\x73\xe0\x33\x80\xbd\x92\xd9\x3a\x9b"
        "\x91\xd7\x68\x0c\x9d\x83\x75\x09\x83\x43\xe4\xf1\x1d\x0f\x0f\x6f\x33"
        "\x58\xa3\xe5\x05\xbc\x0e\x1e\x9c\xd4\x7e\x79\xf2\x73\xb1\x71\xad\x1a"
        "\x93\x49\xdc\xe7\x9d\x55\x0e\x11\xa7\x3a\x11\xef\x45\x57\x12\x4d\xd2"
        "\x39\xe1\x6a\xb9\x03\x9d\xb3\xcc\x44\x91\x58\x2a\x49\xd3\x11\x9c\x80"
        "\x5f\x9a\x15\x0a\xc7\xb4\x00\x2e\x76\x20\xec\x07\xa2\x90\x64\x1b\x15"
        "\x82\xbc\x6d\x9e\x1b\xd6\xc8\xa1\xb2\x91\xe3\x69\xed\xbd\x96\x7e\xcd"
        "\x3f\x09\xbb\xcb\xd4\xbc\x06\x02\x24\xd7\x9d\x6e\xfd\xbd\x28\xa1\x12"
        "\x5b\x95\xca\x4e\x73\x65\xc2\x5d\x3b\x0f\x22\x09\x0d\xec\x4c\xe4\xf3"
        "\x17\xe8\xd5\xf1\xe8\x6a\x11\x93\xb4\x70\x4c\xc3\xe7\xd7\x61\xa4\xd0"
        "\x8f\x77\xd1\x57\xa4\xd1\x96\xbb\x61\x01\x3b\x4c\xdf\x45\xda\x9a\x71"
        "\xef\xbe\xcf\xcb\x45\xc6\x26\xaa\x21\xdd\xe7\xce\x24\xd0\x36\xf6\x20"
        "\x55\x2f\xd6\x04\xc2\xfb\xe5\x39\x70\x60\x94\x23\xa7\xda\x8b\x53\x72"
        "\x3c\x24\xac\xe4\x59\xd4\xa6\xdb\xa8\xf4\x1b\xd1\x53\xf8\x90\xa5\xb9"
        "\x56\xf0\x28\x69\xc1\x2f\xc3\xa4\x94\xf1\x09\x98\xb8\x19\x7a\xfd\xcb"
        "\xac\xcd\x3d\x19\x7f\x9a\xfe\xac\x2e\x55\xa2\xc6\x0f\x5f\xa0\x1f\x1a"
        "\xa1\xf5\x84\x3f\x6c\xd8\x12\x3d\x96\xce\xcb\xf1\xb9\xb0\xd1\xfd\x14"
        "\x4e\xe5\x30\x10\xca\xce\xdb\x2d\xde\x63\x47\x70\xb8\xb9\x1f\x5e\x10"
        "\xdb\x0e\x23\x1f\xfb\x3e\x1b\x13\x7b\x0d\x99\x06\xc0\x66\xe1\x77\xfb"
        "\xde\x22\x04\x48\x39\xe4\x7d\x2a\xbb\x2a\x08\xf5\x6c\x41\xd1\x15\x63"
        "\x5a\x26\x59\xa8\x80\x14\xef\x45\x38\x26\x92\x0d\xf4\xf0\x50\xbf\x95"
        "\x0e\xc2\xce\x27\x61\x71\x54\x8c\xf0\x42\xfc\x41\x5f\xd3\x4d\xaf\xe3"
        "\xfc\x4d\xb9\x48\xa9\x8a\xb8\x77\x49\x4a\xb2\xe3\x2d\x97\x84\xdd\x67"
        "\x65\x29\x7a\xb2\xf5\x31\x2d\x1a\x9f\xe8\x39\xfa\x39\xd0\x6d\x8c\x6e"
        "\x5b\xe7\x5c\x1b\x0b\xcb\xb0\x72\x3e\x25\x39\x02\x6e\x9d\x77\x75\xbe"
        "\x18\xa5\x7c\x48\x18\xa7\xf7\x60\x16\x80\x8e\xac\x46\x8f\x80\xf0\x5d"
        "\x22\x65\xaf\x61\x9a\x0c\x1a\xdf\x61\xa2\x2a\xa7\x6f\x8d\x76\x72\xc6"
        "\xc8\x25\x9c\x23\xf4\xb3\xb8\x00\x5b\xd3\x28\x8e\x8e\xe9\x83\xe5\x69"
        "\x7f\x19\xa8\x96\x3f\x5e\xb6\x42\x8e\xcd\xe7\x49\xe0\x69\x44\xe2\xba"
        "\xd0\xc7\xf0\x80\x31\x84\x3e\x22\xca\xd4\x9f\xf9\x8b\x90\xab\x75\xf5"
        "\x3d\xcc\x8f\xa3\x50\xfb\x82\x6d\x6e\xf8\xc6\x43\xaf\xd9\xc1\x93\x34"
        "\x51\x22\x85\x6d\xf5\xd4\x4d\xc6\x22\xd2\x05\xba\x53\xaa\xb8\xaa\x3b"
        "\x78\xf5\x7f\xe3\xd9\xa8\xa3\xac\xfd\x82\x0c\x1f\x74\x19\xe5\xb0\x29"
        "\x49\xc9\x2f\xcc\x8f\xb8\xb6\x18\xcd\xd0\x93\x5e\xd4\x48\x1c\x95\x26"
        "\xf7\x13\xf8\xe5\x1c\xf7\xd6\xaf\xb2\x20\x4f\x4b\x23\xcf\x5e\xbc\x9b"
        "\x3c\xfd\xe5\x37\xeb\x83\x4b\xc5\x36\xa0\xb9\x96\x62\x8e\x99\xa9\x90"
        "\x9d\x6f\x2f\xcd\x88\xb3\x94\xac\xd8\x12\x60\x2d\x9f\xcc\x59\x5d\x5d"
        "\x19\x83\xcb\x51\x6a\x46\x62\x72\x9c\x00\xb2\x2f\x99\x02\xb9\x53\x6b"
        "\xf1\x1a\xe9\x8d\xc6\x23\x7d\x2b\x29\xba\xf7\xcc\x76\x77\x73\x6c\x7a"
        "\xbc\x74\x3a\x22\xec\x07\x21\x72\x72\xb2\x35\x0c\x34\x1a\x3b\x26\x8f"
        "\x0b\x0f\xb4\xa0\xac\x64\xf5\xf9\x46\x50\xc2\xba\x61\x09\xb2\x81\x3d"
        "\x72\x18\xd4\xf3\x69\x04\xae\x9a\xf0\x7a\x9c\xa4\x2e\x03\xfd\x1e\x0b"
        "\x34\xeb\x07\x61\xf2\x7d\x75\x08\x9d\xf8\x21\xf8\xe6\x79\x49\x41\x47"
        "\x83\xcf\x28\xc0\xfa\x92\x22\xb5\xbd\x84\x74\x3a\xe9\x24\xb4\xd1\x58"
        "\xce\x42\x77\xe3\xa5\x62\x68\xc4\x2f\xdb\xb2\xda\x60\xc8\x3f\x35\xcb"
        "\x24\xe2\x5b\xa5\xf1\x7d\x47\x25\xfa\x2b\x78\x6f\x89\x03\x62\x02\x1a"
        "\xc7\xd3\x88\xf0\xa5\x8b\x47\x62\xb2\x49\x93\x37\x32\x6d\xa8\x8d\xd9"
        "\xfa\x78\xcc\xa6\x4a\xdc\xa3\x72\x96\x58\xc9\x26\x0f\x82\x81\xbd\x6d"
        "\x36\x5e\x2e\xef\x44\x6e\xcb\x4b\x87\x88\xd6\x7f\x5b\x98\xc5\xc9\x09"
        "\xfe\xf0\xa4\xd8\xc0\xab\x8a\x09\x10\x5d\x76\x4d\xb5\xc5\x71\x86\x57"
        "\x55\xba\xb8\x8d\xd6\x26\x90\x8e\xc8\x2d\x1e\x1b\xf7\xf1\x0c\x78\x3b"
        "\x35\x3a\xa9\x13\x8d\x8d\x49\x5a\x25\xd7\xbf\xd3\x37\x58\x12\xd9\x15"
        "\x68\xb0\xac\xc5\x9b\x54\xa5\x4e\x5d\xaa\x0f\x74\x7b\x85\xfd\x6a\x27"
        "\x2b\xf4\xb1\xaa\xb5\xb1\xb6\x1a\x2b\xbc\x5e\xc2\x0a\xa8\x25\xd9\x4f"
        "\xa9\x0c\x2d\x65\x9b\x60\x29\x3d\x91\x0a\x32\xf2\xab\x99\x7b\xbb\xa5"
        "\x5f\x3a\x9e\xf6\x4c\xf5\xfc\x8d\xb3\x43\xc7\x99\x67\x5b\x73\xe3\xa6"
        "\xa4\xfa\x55\xed\xc7\x3e\x72\xea\xea\x96\x0f\x57\xc8\x24\xd7\xda\xe3"
        "\xae\xc7\xa4\xc4\x36\x65\x46\x0d\x6e\x3e\x2a\x7f\xa0\x7b\xbc\x45\xc8"
        "\x96\xec\x62\x50\xab\xa5\x61\xa3\x9f\x21\xd5\x89\x5d\x10\xf3\xfc\x37"
        "\x79\xb0\xea\xc8\xa8\x34\x8d\x5b\x86\x2a\x10\xe2\x96\xd1\x80\xcf\xdd"
        "\x24\x7e\xb5\xb6\x09\xdf\x64\xd7\x61\xa7\x50\x70\xf2\x06\x45\x87\x4d"
        "\x72\x1c\x42\x71\x25\x80\x29\x8e\xb5\x7a\x1b\xd6\x92\xee\xb2\xc3\x9c"
        "\x26\xe1\xb2\xea\x93\xcf\x32\xb7\xf0\x28\xbc\x59\x00\x58\x0a\xcc\x82"
        "\x8d\xb2\x78\x27\x7a\x72\x6b\x32\x5b\x19\x3d\x32\xa5\x29\x2b\x17\xfd"
        "\xcc\xed\xa1\xbd\xbd\x2b\xb7\xab\xb5\xcc\x6b\x91\x50\x23\x89\x46\xfa"
        "\x8d\x3c\x12\x6f\xac\x60\xa5\x15\x9a\xbb\xd3\x6b\x8a\x81\x54\x14\xd7"
        "\x53\xd8\x27\x27\x86\x9c\x69\x3f\x68\x89\xc1\x52\x6c\x19\x76\x79\x6d"
        "\x10\x82\x00\xcb\xe6\x92\x47\x9c\x05\xde\x82\xfb\x4c\x2c\xd7\xf6\xb3"
        "\xbe\x0b\x5d\xa9\x48\xa8\x74\x19\x67\x42\x5a\x39\xbe\x45\xb4\xc9\xfa"
        "\xe0\xe2\x0d\x7e\x7b\x48\x10\x8b\x63\x48\x51\x84\xb9\x1e\xa1\x0a\xf5"
        "\x46\x80\xbb\xe0\x85\xea\xab\x4d\x0c\xf0\xc6\xcd\x2e\xa8\x7f\xb3\xa7"
        "\x29\xaa\x00\xd5\x96\x05\x8b\x5f\x1b\x4d\xed\x57\x37\xd6\x8a\x41\x6c"
        "\x5a\x38\xa7\x2d\xff\x27\x6b\x11\xb7\x43\xf3\x6c\x70\x4c\xf0\x29\x44"
        "\x29\x10\x39\x41\xc4\xe8\x94\xdf\x10\x27\x91\x95\x70\xba\x65\x49\x0c"
        "\xeb\x14\x18\x8b\x0b\xa2\x72\xd8\x1b\x12\x8e\x50\x45\xd1\x4b\x15\xe8"
        "\x3e\x9a\x22\x5c\x7b\xde\x40\xc1\x76\xc1\x51\xa0\xee\xa5\x85\x21\x7b"
        "\x41\x1a\x78\xfb\x07\xcb\x99\xc6\xe0\x14\x29\x8d\xe3\x0b\xda\x38\xf1"
        "\x52\x21\xb7\x32\xec\xc2\x24\x58\x92\xb3\x98\x27\x0a\x7d\xf6\x13\xb6"
        "\x1a\x9b\xea\x4f\xe2\xb5\xc7\x19\x30\x39\x6a\x04\xdd\xcf\x81\xca\xc7"
        "\x15\xaf\x68\x36\xac\xee\xad\x54\x56\x10\xeb\x96\x01\xe7\xa0\x0e\xbd"
        "\x5f\x35\xb1\xd0\x98\x6f\x06\x18\x74\xf4\x01\x37\xb5\x32\x7f\x2e\x37"
        "\x78\xd5\x62\x0c\x9b\x25\xd0\x2e\x18\xfc\xbd\xed\x32\x5d\x0a\x45\xba"
        "\x62\x9b\x3a\xd9\x70\x19\xd4\x9c\xad\x11\x16\x9a\x4d\xe5\xe6\x1d\xc4"
        "\x4a\xb3\xf4\x97\x24\xaf\xb8\x57\x1f\x86\x9b\xef\x31\xab\x5b\xc7\x3a"
        "\x21\x89\x56\xe5\x32\x1f\x28\xd0\xb2\x2d\x0c\x64\x37\xaf\xea\x8d\x8a"
        "\xa5\x6a\xeb\x1d\xdc\xf1\x95\xc5\x50\xd4\xce\xa8\xd9\x74\xd6\x2e\xe1"
        "\x1c\xd6\x0f\x84\x0d\xa4\x05\xa2\x3f\x19\x68\x02\x02\x69\x52\x93\x41"
        "\x34\x72\x05\x25\xac\x56\xd9\xc3\xb8\x2e\x26\x03\xc0\xe7\x83\x50\xdc"
        "\xc1\xff\x87\x05\xd7\x0e\x9c\xe7\x96\xb4\xae\x1a\x98\x65\xfd\x9a\xdf"
        "\xf5\xdf\x2b\x64\xfd\x22\xaa\x9f\x87\x36\x01\xe0\x3f\x7d\xe8\xca\xe5"
        "\x6c\x15\x51\xa9\x96\x3d\x95\x1d\x71\x96\xce\x33\xb0\x80\x70\x41\x62"
        "\xde\x3b\x28\xd6\xa0\x42\x78\xa7\x1c\xea\xa4\xf7\x44\xe9\xfa\x73\xe8"
        "\xba\xb3\x04\x62\x91\x17\x22\x62\xea\xb8\xee\x0c\x3c\xab\xaf\x9f\x6e"
        "\x56\x98\x2f\x25\x70\x16\x41\xc5\xd4\x4e\xf8\x61\xbe\xf7\xe0\x47\xbf"
        "\x5b\x7b\x3f\x89\x71\xb8\x3e\x25\x29\x24\x35\xa2\x7d\x8d\xb9\x4a\x73"
        "\xfb\xa2\x0b\xef\x61\xbc\xd1\x43\x26\xd6\xdf\xc8\xba\x80\x9d\x57\x18"
        "\x9c\xc4\x0c\x12\x77\xe8\xe0\xf8\x1e\xb9\x7c\x4f\xaa\xd2\x75\xf0\x54"
        "\xb7\xa1\x64\x18\x87\xb6\xfb\x63\x1d\xcb\xbf\x5a\x13\x14\x10\xf4\xd9"
        "\x89\x95\x52\x2a\x02\x2d\x73\xd5\xf4\xb7\xdd\x99\x27\xff\x5e\x0e\x97"
        "\x37\xb5\xe6\x50\xb1\x62\xe2\x5e\x80\x4a\x9d\x98\xbc\x1e\x4c\x18\x84"
        "\x66\xd9\x35\x0b\xb1\x9e\xb0\x78\xf4\x3c\x73\x07\xf1\x73\xc1\x59\x3a"
        "\xeb\x4b\x80\x85\xd9\xaf\x5d\x1f\x47\xa5\xe9\xa5\xfc\xb1\x9b\xfe\xb4"
        "\x7e\x85\x16\x77\x0d\xcf\xf7\x72\xbc\xb6\x93\xd6\x12\x85\x6a\x1e\x79"
        "\xd3\x7c\x0f\x0a\x03\x2e\x52\x25\xf0\x8f\x24\xd9\xc1\xcb\x45\x2c\x99"
        "\x85\x35\x19\xef\x48\x32\x48\x5b\x2c\x4b\x7e\xa8\xfa\x7a\x72\x7c\x15"
        "\x27\x06\x6b\x8f\xac\x4e\xa6\x64\xbe\x28\x40\xf6\x26\xc0\x39\xc9\x50"
        "\xcf\x18\x63\x5e\x9a\x5c\x0b\xc4\xc6\xf1\x4a\x75\x5c\x5b\x80\x46\xd8"
        "\x67\x6a\x9b\x44\x23\x8e\x9a\xaf\x7e\xa7\x2b\x11\x51\x7d\x91\x28\x72"
        "\x10\x25\xc5\xbc\xa6\x85\x84\x93\xaf\xdb\xe2\x32\x35\x4c\xe4\xf1\x63"
        "\x57\xeb\x78\x3f\x4d\x02\xac\xb2\x80\x39\x98\x05\x4c\xd2\x0f\x6c\x52"
        "\x61\xce\x53\x5a\x9b\xff\x08\x84\xf6\x75\x3a\x1e\xe1\x18\xb0\x16\xc5"
        "\x52\x3c\x64\x81\xb0\xb2\x5d\xbf\xe9\xac\xf7\x5b\x0a\xd4\xf8\x98\x5e"
        "\xe3\x36\x8a\xed\x26\xa1\x76\xc4\x03\xf9\xf2\x6d\xa2\xcb\x89\xa8\xdc"
        "\x16\xdc\xfa\xf6\xcb\x20\xde\x06\xe1\x13\xde\x76\x74\xaf\xfe\x5f\xd6"
        "\x8e\x51\xaf\x83\x64\x6c\x31\x50\xa5\x76\x82\xa4\xae\xd7\x68\x94\xba"
        "\x85\xe5\x0a\x3d\x61\x9c\xf8\xe3\x46\x21\x58\x5a\xf8\xf1\xd0\x1d\xb0"
        "\xf4\x6d\xf1\xa9\x00\xb2\xd5\x66\xab\x73\x6a\xab\x7f\xc7\xd6\xce\xf4"
        "\x5f\xbb\x79\x99\x82\x96\x9d\x8f\x7d\x51\xea\xa3\x08\x97\xec\x75\x6e"
        "\xce\x52\x22\xc3\x88\x24\x69\x44\x58\xa2\xd3\x58\x20\xc6\x7a\x01\x42"
        "\x28\x8c\xd4\x2e\x90\x9f\x1e\x83\xd1\x4b\x56\x5f\xfb\x4a\x22\x2a\x5f"
        "\xb9\xad\x05\xcc\x1c\x54\x96\x7f\x0a\x16\xd9\x09\x4d\x65\x66\x90\x59"
        "\x07\xbd\xcc\xbb\x64\x7b\xf7\x80\xd8\x95\x57\x22\x13\xfd\xcf\xbd\xd7"
        "\xf5\xd5\xba\xa3\x78\x02\x5e\x0e\x2d\x19\x84\x8b\xaa\xcf\x60\xa6\xf2"
        "\x2f\x40\x2d\x53\x72\x4a\x91\x5a\x97\x01\xf8\x08\xd2\x51\x05\x96\xff"
        "\x81\xac\x0d\x5b\x71\x54\xa0\x1c\xf8\xac\x75\xc1\x28\x15\x78\x49\xee"
        "\x86\x02\x8b\x00\x75\x4e\xe2\xeb\x2f\x68\x04\x7d\x71\x62\x24\xb8\x02"
        "\x90\xf7\xec\xc5\xf0\x6a\x33\xb8\x04\x67\xb6\x9c\xfd\x1d\x40\x87\xb6"
        "\x08\xca\xe4\x80\x6b\x55\xaa\xa2\xa9\xe4\x1f\xe0\x15\xbd\xd9\x5a\x2a"
        "\x75\x06\x98\x75\xa5\x15\xad\xb2\x6f\xb3\x98\x61\xc4\x3b\xfa\xaf\x18"
        "\xf3\x57\xa1\xce\x44\xc4\x81\x9d\xfd\xc2\x5a\x9d\xd2\xf0\xee\x87\xd1"
        "\x8f\xcc\x76\xd9\xa7\x9a\x0f\xae\xde\x5e\xc0\xf6\xa0\x50\xe2\x57\xf6"
        "\x77\x57\x28\x30\x13\x41\x65\xb2\x63\xe3\x78\x71\xf7\xbc\xfe\xe2\x95"
        "\x99\xd5\x65\x10\x62\x7d\x02\x7f\x38\x21\x63\xbe\x63\x21\x2b\xee\x55"
        "\xab\x5a\x1f\x97\x64\x42\xf1\xb0\xa4\x8d\x46\xc3\x2d\x9d\xe9\x17\x77"
        "\x9c\x41\x28\x16\x7b\x66\xbd\x91\x44\xb6\xb0\x6a\x8f\xd5\xac\xcb\xb2"
        "\xa5\x0a\xea\x54\x78\x2e\x38\xda\xa2\x1d\x64\xdb\xc6\xd4\x7f\x2e\xdb"
        "\xfd\x6a\x26\xf9\x08\x90\x5c\x87\xf3\xcc\x70\x13\xf4\x99\xe5\xec\x69"
        "\x08\x64\xdd\x13\x61\x4d\x21\xf4\x32\x74\x93\x0c\xa0\x99\x13\x46\xca"
        "\xa6\xec\x48\x77\x59\x0b\xd9\x71\x93\x97\x37\xfd\x5f\x27\xde\x6a",
        4096);
    *(uint64_t*)0x20000298 = 0x1000;
    *(uint64_t*)0x200002a0 = 0;
    *(uint64_t*)0x200002a8 = 0;
    *(uint64_t*)0x200013d8 = 3;
    *(uint64_t*)0x200013e0 = 0;
    *(uint64_t*)0x200013e8 = 0;
    *(uint32_t*)0x200013f0 = 0x14;
    syscall(__NR_sendmmsg, /*fd=*/r[0], /*mmsg=*/0x200013c0ul, /*vlen=*/1ul,
            /*f=*/0ul);
    {
      int i;
      for (i = 0; i < 64; i++) {
        syscall(__NR_sendmmsg, /*fd=*/r[0], /*mmsg=*/0x200013c0ul, /*vlen=*/1ul,
                /*f=*/0ul);
      }
    }
    break;
  }
}
int main(void)
{
  syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=*/7ul,
          /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul);
  do_sandbox_none();
  return 0;
}