This is not thoroughly tested, as we quickly throw an exception due to out-of-bounds memory and need some RVFI-DII control flow fixup to proceed further.
It doesn't yet pass any set of tests, but tests do run and reduce.