// https://syzkaller.appspot.com/bug?id=b2e1556716a64f70e53256feb878d22a288f483e // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static __thread int clone_ongoing; static __thread int skip_segv; static __thread jmp_buf segv_env; static void segv_handler(int sig, siginfo_t* info, void* ctx) { if (__atomic_load_n(&clone_ongoing, __ATOMIC_RELAXED) != 0) { exit(sig); } uintptr_t addr = (uintptr_t)info->si_addr; const uintptr_t prog_start = 1 << 20; const uintptr_t prog_end = 100 << 20; int skip = __atomic_load_n(&skip_segv, __ATOMIC_RELAXED) != 0; int valid = addr < prog_start || addr > prog_end; if (skip && valid) { _longjmp(segv_env, 1); } exit(sig); } static void install_segv_handler(void) { struct sigaction sa; memset(&sa, 0, sizeof(sa)); sa.sa_handler = SIG_IGN; syscall(SYS_rt_sigaction, 0x20, &sa, NULL, 8); syscall(SYS_rt_sigaction, 0x21, &sa, NULL, 8); memset(&sa, 0, sizeof(sa)); sa.sa_sigaction = segv_handler; sa.sa_flags = SA_NODEFER | SA_SIGINFO; sigaction(SIGSEGV, &sa, NULL); sigaction(SIGBUS, &sa, NULL); } #define NONFAILING(...) \ ({ \ int ok = 1; \ __atomic_fetch_add(&skip_segv, 1, __ATOMIC_SEQ_CST); \ if (_setjmp(segv_env) == 0) { \ __VA_ARGS__; \ } else \ ok = 0; \ __atomic_fetch_sub(&skip_segv, 1, __ATOMIC_SEQ_CST); \ ok; \ }) static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[2] = {0xffffffffffffffff, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: NONFAILING(memcpy((void*)0x20002040, "./file0\000", 8)); syscall(__NR_mkdirat, 0xffffff9c, 0x20002040ul, 0ul); break; case 1: NONFAILING(memcpy((void*)0x20000000, "/dev/fuse\000", 10)); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000000ul, 2ul, 0ul); if (res != -1) r[0] = res; break; case 2: NONFAILING(memcpy((void*)0x200020c0, "./file0\000", 8)); NONFAILING(memcpy((void*)0x20002100, "fuse\000", 5)); NONFAILING(memcpy((void*)0x20000180, "fd=", 3)); NONFAILING(sprintf((char*)0x20000183, "0x%016llx", (long long)r[0])); NONFAILING(memcpy((void*)0x20000195, ",rootmode=00000000000000000040000,user_id=", 42)); NONFAILING(sprintf((char*)0x200001bf, "%020llu", (long long)0)); NONFAILING(memcpy((void*)0x200001d3, ",group_id=", 10)); NONFAILING(sprintf((char*)0x200001dd, "%020llu", (long long)0)); syscall(__NR_mount, 0ul, 0x200020c0ul, 0x20002100ul, 0ul, 0x20000180ul); break; case 3: NONFAILING(memcpy( (void*)0x20004180, "\x0d\x2a\x22\x97\x3e\x84\xfb\x82\x52\xd0\xfc\x1c\xd9\xc6\x0b\xe7\xd6" "\x3c\x4f\x58\x1f\x39\x9d\xd7\x18\xed\x40\xbc\x6d\x81\xf0\x17\x25\x26" "\x61\x2b\xd7\x48\x17\x88\x34\x89\xb5\xf6\x6e\x5a\x78\x7a\x3f\x63\x85" "\x5d\xdc\xb4\x9d\x01\xfb\x2e\x78\x23\xcb\x93\x49\x37\xb6\x80\x97\xa9" "\xfa\x01\xf9\x12\x16\xda\xc5\x2a\xb8\x92\xa4\x96\xe7\xa7\x6d\xc5\xa0" "\x52\x59\xd7\x04\x46\xaa\x26\x22\x8c\x6b\x0e\x4c\xbb\x04\xf5\xc3\x09" "\x56\x00\x0b\x12\xd0\x6d\x74\xb9\x98\x0f\x70\x2d\xd0\xb4\x34\x6c\x98" "\x6a\xd4\x91\x10\x86\x64\xf3\xb9\x8a\xf8\x95\xae\x81\x04\x5d\x45\xd1" "\x87\x93\x4f\x1d\x55\x41\x10\xbc\xf2\x2c\xad\x4f\xc5\x27\x26\x35\x71" "\x72\x8f\x1d\x49\x8a\xf9\x82\x58\x9c\x0d\x76\x65\x66\x52\x36\x72\xe2" "\xa6\xbe\x86\x02\x74\x34\x25\x9d\xbd\x83\x0c\x36\x0f\xad\xba\xdd\x4a" "\xcd\x07\xa3\x3b\xcd\x8b\x9a\x97\xf4\x49\xf9\x1d\xa5\x9b\x5f\xa2\x38" "\xae\x04\x1a\x97\x75\x41\x0f\x91\x4a\xcf\xd0\xa1\x65\x66\x8b\x3c\x27" "\x7f\xc2\xde\xb8\x5b\x99\xdf\x53\xc1\x77\xa6\x7a\xdd\x30\x0b\x3f\x92" "\xed\x5c\x81\x42\x24\xc4\xc6\x99\xcb\x12\xb5\x0a\xa2\xb9\xb7\x5f\x72" "\x0a\x62\x20\x19\xff\x5c\xf4\xa5\xb3\xe3\x55\x3f\x22\x83\xd1\xa4\xd8" "\xf3\x2a\x40\xb7\x43\x09\xb9\xfa\x38\x83\xb8\xaa\xb1\x2a\x35\xac\x6c" "\x3e\x26\x11\x6f\xb7\x5b\xdb\x8f\xec\x58\x1c\x1e\x2f\x43\x9d\x59\x94" "\x25\x06\x36\x96\x64\x46\xd8\xb0\x88\x66\x53\xc9\xf4\x45\x25\x4d\xb6" "\xd8\xfc\x87\xa3\x60\x71\x3d\xe3\xee\xbb\x4f\x77\x1e\x3f\x49\xee\xb0" "\xc7\x4a\x52\xbe\xbe\x44\xda\x0e\x43\x65\xf1\x36\x32\xe9\x61\x40\xf9" "\x05\x5e\x07\x1e\xa4\xf8\x23\x8a\x55\x02\x1c\x97\xad\x9e\x5f\xba\x9f" "\x6e\x7f\x85\xe2\xa2\x9a\x78\x37\xba\x1c\x9b\x89\x20\x73\xe9\x44\x96" "\x7f\xde\x59\xf9\xac\x88\x35\x4c\x32\x80\xcb\x84\x04\x84\xfa\x0d\xe1" "\x54\x7b\x8f\xd5\x0b\xcb\xad\x3f\x73\x71\x70\x6d\xca\x6e\xe3\x14\xf6" "\xdd\x19\x80\xbb\x94\x05\x13\xd4\x7b\x82\x2c\xb9\x3e\x1f\xe7\xd4\x0d" "\x10\xde\xb0\xd9\x27\x13\x71\x11\xc2\x2e\x35\xb2\x7c\x43\x0f\x82\x7f" "\xa2\x39\xea\x3b\xbc\x1d\x59\xb3\x55\xcf\xda\x21\x9c\x0f\xa3\x82\xfc" "\x83\x11\xff\x97\x76\xaa\x73\x5f\xa5\xf7\x93\x6a\xf1\xa9\x55\x12\x9e" "\x1f\x6d\xae\xe3\x29\x67\xb9\x05\x24\xd4\x91\x06\x65\x8d\x4f\x16\x2c" "\x4d\xd4\x4c\x26\x4b\x67\x74\x86\x00\x03\xf5\xee\xc9\x62\xcf\x76\x0b" "\xf2\xd6\x38\xac\xc4\x60\x0f\x67\x32\x84\xe1\xcb\xc8\xd3\x0d\xae\xde" "\x50\x8f\xdc\xe8\x65\xf8\xa8\x2e\xa3\x45\x45\x6a\x5d\x88\x28\x59\x8b" "\x4e\x07\xbe\xf5\x89\x23\x79\xa1\x50\x9a\xf2\x05\x10\xed\x13\xc7\x85" "\x34\xa6\xbf\x42\xc4\xbd\x78\x73\x48\xf4\x93\x2a\x96\x14\xb7\x31\x21" "\x1e\x87\xe4\x8a\x8b\x9c\xcc\x53\x32\x72\x04\xde\x84\x48\x61\xe0\x2c" "\x34\xc2\xcc\xa4\x8f\xbb\x61\xb4\xd4\x4e\x4c\xc8\x73\x81\x41\x80\x7a" "\x97\xdd\x76\xf4\x5e\x60\x66\xa4\x7a\x6d\x28\x42\xf8\xd8\x75\xa7\xd2" "\x27\xa3\x09\x3a\xd9\x10\xf5\xf1\xb2\xf9\x7f\x21\xe7\xfd\x28\x87\x45" "\x92\xae\x56\x7d\xc4\x3f\xd1\x6d\x03\xb3\x17\x75\x7f\x05\x7e\x0c\x24" "\xbc\x1a\xa5\x48\x67\xaf\x62\x95\xe7\xe1\x36\x11\xc0\x23\x46\xe8\x5b" "\xa1\x03\x3c\x0c\x27\xa2\x51\xcf\xd8\x70\x46\x35\x0f\x3f\x2a\xfa\xa4" "\x7a\x84\x98\x49\xe8\x98\x41\x41\xc5\xf7\x9a\xce\x1c\x51\xd4\x1f\x09" "\xe4\x96\xf3\x75\x33\x51\xcb\xdb\xb7\xb2\x14\xac\xa9\x30\x5e\xc1\xd8" "\x3e\x94\xcd\xf1\xc3\x24\xf9\x38\x87\xcb\x2c\x04\xdc\x80\xc6\x9e\x9c" "\x97\xa1\xc5\x4a\xf1\x9f\xcd\x1f\x58\x5b\x46\x74\xad\x24\x13\x52\x8b" "\x60\x73\x71\x09\xa9\x57\x9d\x83\x34\xba\xe0\x3f\xbb\xd0\x06\x0b\x44" "\x97\x8c\x6d\x2d\xf6\xbd\x7e\xb5\x02\x92\x27\x1a\x79\xcc\xed\xa4\x23" "\x20\x60\x21\x26\xb8\x35\x9a\x0d\x95\x2e\x81\x6d\xea\x1f\x67\xe0\xb4" "\x24\x2d\x5b\x80\x6d\x2f\x9d\x56\xd1\x5c\xda\x85\xf3\x6c\x6e\x56\xeb" "\x4a\xfa\x40\x8a\x55\x79\xc7\x1a\x2d\xff\x54\x05\x34\xf8\x34\xd0\x30" "\x7e\x12\x2d\x98\x6d\xe1\xdc\xef\xd6\x04\x16\xdc\xd1\xaf\x88\x19\x24" "\x36\xee\xbd\x05\x27\x48\x65\x13\xde\x0a\xfb\xb8\x06\x99\x93\xb1\x37" "\xd5\x72\x6c\x62\x4c\x7b\x7f\x95\xe7\x18\xc7\xbc\x68\xff\x0e\x0c\x0c" "\x18\x00\x53\x92\xa1\x2d\xd9\xea\x36\xd7\x47\x36\xf9\xe3\x84\xcb\xe7" "\xb7\xcf\x92\x44\x39\x13\xb6\xf0\xac\x4c\xa1\xc8\x3c\xc9\x58\x3d\xcb" "\x69\x96\x28\xe9\xad\x59\xe6\x94\x7e\x49\x21\x30\x17\x1e\x2a\x64\x8c" "\x53\xc5\x8e\x92\x0e\x43\x39\xfe\x6d\x37\x2b\xe5\xa4\x8f\xc4\x0d\x9c" "\x3f\xf3\xbc\x52\x65\x84\x21\x61\xb5\xae\x3b\x31\x4e\xfa\xaa\xce\xcc" "\x92\x1a\xe2\x25\xf5\xff\xd6\xd0\x60\xb2\xc0\xf6\x01\x24\xc0\x33\xcc" "\xa3\xeb\xd4\x40\x63\x34\x92\xc4\xa7\x6b\xdf\x23\xe2\xf6\x01\x81\x32" "\xa1\xab\x76\x41\xcc\x1d\x59\x0c\x3f\x3f\x2f\x54\x84\x8b\xd5\xed\x79" "\x9e\xd1\x84\x34\x38\xdf\x09\x19\xc6\x43\x3d\x60\xe2\xf4\xbb\x42\xc7" "\x61\xf1\x3f\xc3\xfd\xd1\xde\x1a\xc4\xa6\x14\x23\x9e\x8a\xcc\x84\x1b" "\xcd\x94\xc0\xc6\x1e\x4b\xa0\x8b\xb6\xea\x40\x1f\x8c\x57\xcd\x4b\x0a" "\x1b\xde\x32\x80\x54\xff\x36\x03\xe4\x21\x72\x06\xd2\xc7\xb9\x94\xa1" "\x52\xbf\x81\x40\x8e\x4a\x67\x91\x7d\xfc\x76\x60\xf8\x0a\x31\xe1\x94" "\x91\x8e\x79\x5f\x1d\x4e\xac\xa4\xc2\xe4\xb2\xf5\x2d\x61\x8b\x70\x7f" "\x1d\xde\x1d\x61\x4a\x6d\xb3\xc2\x9b\x06\x64\x87\x06\x0e\x57\x88\x3b" "\x5b\x4f\x14\xbd\xfd\x3f\x80\x8f\x82\xfb\xe0\x4d\xf1\x0e\xbe\x51\xd0" "\xc9\x91\x73\x9c\x87\x35\x57\x70\xfe\xed\x09\x69\x54\x81\xc8\x0e\x56" "\x84\x83\x23\xc4\xb7\x3d\xf2\x3b\x38\x0e\x2d\xce\xfc\xff\x96\xfc\xcd" "\x86\xcb\x4b\xfd\x37\xfa\x21\x59\x16\xc0\xc9\x9b\xc7\xf4\x95\x1f\xc2" "\xec\xb9\x6a\x08\xff\x36\x85\x32\xd7\xe3\xdf\xfe\x0d\x47\x99\xfe\xe7" "\xac\x34\xe4\x6e\x4c\xe5\xa5\x08\x5f\xdd\x36\x81\xc3\xfd\x51\x28\x92" "\x0b\x64\x87\xe5\xd9\x0c\x75\x55\xd5\xde\xbf\xe4\xb2\x1b\xca\x08\x9b" "\x7b\x06\x81\xbb\x21\x9a\x45\x52\xe8\xed\x53\x3b\xc4\xe6\x33\x0d\xa8" "\xd4\xf3\x7a\x4e\xb1\x12\x53\x68\x4b\x69\x39\xd4\xce\x09\x24\x1e\xd5" "\x11\xe0\x12\x49\x2b\xd2\xae\x26\x6a\x9b\x62\x47\x44\x78\xe8\x30\x76" "\x18\x2d\xcc\xf7\x76\x12\x7d\x88\x4a\x22\x67\xec\x62\x32\x57\xbe\x48" "\x3f\xc7\xcd\x47\x92\x4a\x50\x7d\x0c\x7c\x88\xdd\xb7\x2e\x1d\x18\x3c" "\xaa\xe9\xfe\x8a\xdb\x9a\x73\xe3\x27\xf8\x73\xfd\x66\x45\x38\xc2\x3e" "\xf8\xf0\x43\xb5\xfb\x6e\x8a\x22\x62\x84\x08\xba\xf7\x85\x78\x5e\xd7" "\x51\x0f\x43\x7c\xf1\x44\x69\x25\x71\xb0\x88\xd5\x16\x8e\x83\xb2\x29" "\xb4\xb7\xec\xb2\x8f\xcc\xda\x9d\xe2\x03\xe7\x18\xac\x34\x69\xd8\xf6" "\x6a\xf9\xa5\xe5\x19\xd7\xc5\x73\xfc\xf0\x51\xcc\x97\xec\x4e\x49\xa6" "\x4a\x91\xab\xa1\x9c\xdb\x3b\x8c\x68\x33\xbe\x3a\xe7\x66\xae\x60\x7b" "\x37\x60\x72\xf9\xc8\xce\x1a\xc3\xeb\xc0\x28\x52\x04\xeb\xbd\x9b\x24" "\x15\xec\xde\x29\x08\x33\xb3\x28\xf3\xa9\x72\x01\x71\x3a\x61\xf7\x6c" "\x3d\x6b\x4f\x52\x21\xc6\xf3\xed\x31\xe6\xef\xeb\x17\x0d\x9b\x2b\x9f" "\x14\x86\x1e\x1b\x46\x93\x1b\x9f\xeb\xe3\xa8\x1d\x38\x93\x8f\x96\x61" "\xa6\xc2\x54\x34\x32\x7b\xd4\xb1\x1f\x2e\x1c\x8b\x4e\x48\x44\xb3\xb6" "\xf5\x61\x9a\xff\x04\x43\xca\x5c\x71\x13\x51\xdf\x8f\x8a\x74\xc5\x1c" "\xeb\x0e\xf2\xe8\x86\xdd\xf8\xf8\xf8\x0f\x77\xd5\x13\xc1\xc5\x77\x84" "\x5a\x33\x42\xc7\xf7\x67\x04\xfc\x21\x15\x6a\x2f\xd9\x5f\x5b\x0e\x25" "\x76\xef\xfd\x2c\xaa\x36\x08\x7f\xac\x0b\x56\x34\x90\x4d\x06\x98\x22" "\x7c\xd1\x8c\x74\xb3\x72\x6d\x32\x74\x0d\xfe\xbb\x7f\x62\xa4\x5e\xe5" "\x5a\x03\xf5\x3d\xca\x0a\xee\xf7\x6f\xfc\xe5\xed\x9c\x38\xca\x6d\xfa" "\x1e\x02\x09\x09\xf8\x39\xcf\x6c\x17\x1d\xc6\xcf\x1c\xe8\xc4\x3b\x5c" "\xa9\x30\x2a\x07\x22\x06\x68\x07\xb0\x3e\x34\xa3\xa3\xaa\x4e\x49\xd0" "\x74\x55\x43\xa3\x9c\xd0\xeb\x67\xf5\xaf\x4e\xf1\x34\x8a\x66\xe9\x2c" "\xf5\xa1\xfc\x89\x07\x8c\xdd\x98\x3a\xb5\x85\xf3\x1f\x57\x6d\x8f\xd7" "\xf1\xb2\x22\x29\x9e\x12\x3c\x33\x96\x9a\x14\x52\xcb\x75\xe0\x0e\x7d" "\xca\xe3\x05\x35\xdd\x7a\xc4\x47\x25\x77\x31\xa7\x6f\xe3\x08\x1e\xe5" "\x92\xc8\xaf\x7a\x30\x6c\xba\xba\x36\x4b\x32\xad\x5c\xc0\x4f\x1e\xf4" "\xac\xbe\xfb\xd1\x4d\x01\x13\xe5\xfc\xf0\x38\xc0\xb5\xa8\x81\x38\xb2" "\xd4\x6b\xf6\x1d\x09\x50\xfc\x6f\x20\xb4\xf2\xff\xa2\xbc\xb6\x53\x4d" "\x9f\x98\xfe\x8c\x42\x60\x49\xd1\xb1\xb5\x2a\xe9\x11\x19\x93\x41\xeb" "\xb1\x16\xbb\xb0\xc0\xce\xdf\x92\x51\x06\x33\x14\xcc\x48\xf4\x7d\xc4" "\x53\x71\x40\xca\xcb\x66\xdb\x06\x3f\x91\x0e\x5e\x82\x48\xa6\x34\xc4" "\x69\xff\x3b\xa1\xa5\x2e\xe8\xc8\xf9\x73\x3d\xfc\x3b\x3d\xe7\x40\xe7" "\x32\xeb\x45\xd3\x0b\x69\x1b\xba\x9a\x77\x13\xf1\xb0\x96\xcf\xc2\xba" "\xbc\xc2\x24\x74\x61\x06\xad\x32\x18\xa7\x1b\xa7\x90\x73\xdd\xf3\x10" "\xf8\xae\x6c\x40\xa7\x03\xde\xbd\x00\x94\x1b\xbb\xff\x7c\x4a\x13\x98" "\xcd\xcc\x29\x73\xa5\x5b\x80\x14\xe5\xff\x4e\x3d\xe8\x4a\xb5\xbc\xb1" "\x6e\x26\xb8\x75\x2a\x8a\xf3\xca\x39\x08\xfc\x7d\xe3\x6b\x77\x96\xdc" "\x1b\xc4\xd3\x4f\x20\x25\xad\xa3\x96\x12\xc8\x8b\x9b\x1d\x89\xf1\xc4" "\xc7\x68\x84\x24\x82\x7b\x8a\x44\xde\x73\x77\xc3\xeb\x0f\x9a\x22\x8b" "\x46\x7b\xd5\x84\xad\xa6\xcd\x33\xb8\x0f\xf9\xec\xa4\xdb\xb8\x5c\xff" "\xc1\x33\x09\x76\xe5\x66\x50\xda\xd6\xa8\x2a\x5a\x5c\x26\xd0\xbb\xae" "\xb1\x6c\x66\x91\x7d\x18\x85\x66\xee\x9f\x23\x28\x17\x55\x66\x35\x38" "\xcc\x71\x32\xf7\xc2\x9f\xcd\xab\xd1\x4b\x39\xdf\x0b\x46\x54\x22\xd4" "\x8e\x10\xf7\x5e\x50\xc7\x8a\xe4\xd6\xce\x14\x6d\x36\x02\x2e\xb0\x1c" "\x1c\xb9\x5b\xea\x4d\x6a\xb2\x4e\xbd\x6e\x50\x4f\xfe\xfe\xf7\xbd\x4a" "\x1f\x64\x3f\xae\x59\x32\xd0\x50\xcd\xb2\xfd\x9f\x52\x38\x98\x46\x9e" "\x8b\x46\x5f\x72\xb0\xbb\x51\xf2\x13\xdb\xbc\xae\x72\x08\x66\xc1\x7b" "\x57\x85\x9e\x27\x85\x4d\x4c\x21\x5b\x88\x09\x9f\xa2\xfe\x91\x1b\x72" "\x62\x07\x9d\x64\x02\x27\xf5\x69\x02\xde\x2a\xca\xe6\x12\x31\xce\xc7" "\xfe\x87\x1e\x95\x87\xb3\xe6\x3c\xbc\x8d\x6c\x38\x93\x9e\x66\xc5\x7a" "\xed\xf0\xa6\x64\x50\x1e\xd9\xf1\x7f\xc6\x0b\xa0\x15\x32\xbf\x12\x0b" "\xff\xd2\xc8\x4a\x89\x0f\x8a\x59\x73\x40\x0e\x74\xb3\xd8\x48\xe1\x66" "\xe8\x76\xa6\x65\x80\x80\xbe\x84\x18\x40\xa1\x1e\xfa\xb4\xf7\xec\x49" "\x4e\x89\xf7\x47\x5d\x1e\xe1\x2d\x05\x3b\x70\xad\xe6\x9e\x13\xc6\xbc" "\xce\xb6\x60\xf4\x21\x67\x69\x27\x7c\xa8\xe0\x72\xe2\xee\x18\xa4\x1b" "\xc5\x15\xe8\xec\xa2\x74\x75\xea\x1c\x7d\x4a\x55\x95\xd5\x06\xc0\x7f" "\x06\x2a\x3a\xba\xb5\x1a\x0a\xf4\x85\x24\xf2\xfb\xce\xb1\x69\x73\x58" "\x7e\x9d\xd4\x5b\x41\xcb\x09\xb9\xf1\x55\x89\x4f\x1e\xb8\x52\xf0\x3c" "\xc4\xa9\x0a\x6d\xac\x47\x92\xec\x03\x3e\xdb\x11\xd0\xbd\x69\x7d\xc0" "\xe7\xca\x43\x8e\xf8\x64\x19\x56\x5a\xb7\xdc\x91\x38\x1a\x07\x64\x8d" "\x97\xe0\x01\x81\x61\x7e\x11\x21\x32\xc6\x8d\x36\xe1\xc7\xad\x71\xee" "\xb7\xda\x1e\x75\xfa\x8c\xdf\x2d\x11\x1c\xd1\xf2\x4c\x10\x33\x69\x94" "\x9f\x9f\x2c\x5c\x62\xe8\x7c\x07\x9b\x95\x13\x6f\x83\xde\xfe\x84\xcb" "\xcb\x54\xf5\xbf\xdb\x77\x4c\xee\xdd\x11\xdb\x57\x3e\x3a\xfc\x1d\x5d" "\xd3\xac\xd9\x4e\x1a\x2d\x10\x06\x83\x96\x20\x16\x7b\xfd\xcd\xe2\x8e" "\x96\xdd\x1a\x6f\x9b\xba\xc8\xb2\x85\xb1\x0a\x31\x8b\x04\xdf\x30\x91" "\xe0\xc8\xf6\xe6\xf5\x5f\x7d\x5c\x39\x26\xfb\xcf\x0a\x15\x6e\x60\xb7" "\x39\xe8\x9a\xc1\xbd\xc7\x0c\xc5\x97\x5a\x81\xf5\xa6\x9e\x1d\x1c\xed" "\xd0\x03\x30\x40\xdc\x94\x72\x6e\x1a\xe7\x03\x5c\xda\xbc\xd9\x6b\x4e" "\x4f\xfc\xbb\x0f\xef\x78\xc5\x71\xa0\xe2\x2f\x80\xa5\x94\x0b\x54\x6e" "\xc0\xad\x74\x61\x88\x3d\x23\x68\xa3\xc7\xbb\x79\x40\xae\x17\x8c\x49" "\x77\x45\x29\xce\xec\xf0\xb1\x5e\x34\xd1\x39\xfc\xc3\xbc\x8e\x7b\xea" "\x09\xf9\xf4\x74\xc3\xb1\x97\xed\x5f\xfd\xbb\xce\x16\x93\x85\xb9\x93" "\x7e\x2c\x40\x6a\x6d\x09\x57\xa5\xd7\x7a\x46\x4d\x17\x86\x3d\x77\x72" "\xb8\x4f\xee\xe8\xe0\x24\x0b\x7e\xfb\x9d\x61\x67\x58\x4c\x93\xee\x2a" "\x67\xb4\xfe\xfb\x9d\xf2\x50\xbe\x31\x12\x13\xdc\x53\x6b\x24\x7e\x49" "\xf4\xe8\xbb\xd7\x29\x8b\xd8\x6e\x48\x02\x81\x3b\xe8\x4e\x2d\x3e\xee" "\x06\x3c\x40\x0c\x15\x1d\xb4\xf6\x83\x77\x51\x0a\xbe\xbe\x42\x2a\x2c" "\x34\x6c\x4a\xfd\xa7\x9c\xc7\x87\x4e\xef\xb8\xe7\xfd\x93\xd6\x5d\xd4" "\x92\x56\x39\xcc\x8e\xf0\xe5\x83\xf0\x0c\xc1\xf8\x73\xf7\x96\xe6\x6a" "\xc8\x85\xfa\x97\xbc\x6a\x7c\x0f\x05\x7a\x54\x6b\x35\xdf\x3d\x7c\x3b" "\xc1\x66\x2e\xe7\x22\x99\x5a\x1a\xeb\x1d\xf8\xa8\xbc\xd2\x64\x51\xe1" "\x4c\x32\xbb\x0a\xc1\xb2\x0d\xef\x64\xa0\xe7\x76\x27\x8f\xb4\x95\xe5" "\x05\x85\x09\xf6\x49\xc7\x66\xaf\xc3\x28\x75\xf4\x58\xae\x3b\x82\x1e" "\x14\xc5\x6d\x33\x1f\x07\x5e\x59\x81\x4c\xb6\xca\x5a\x62\xdb\x6e\xf3" "\x02\x36\x38\x78\x9d\x5c\xb1\x58\x10\x06\xa8\xa9\x6e\x96\x3b\x6f\xa4" "\x8d\x99\x9e\xf3\x27\x93\xdd\x38\x9a\x63\xda\xc6\x79\x12\x76\x62\x16" "\x59\x01\x9f\x9d\x0e\xfb\x64\x64\x36\x7c\xb2\xa0\xe4\x39\x62\xf3\xfc" "\x6b\xc7\x7d\x0d\xb5\x64\xd0\x91\xa1\x57\xe9\x04\x1c\x9f\x8b\xcc\x16" "\xb2\x5f\x5a\x46\xa6\xde\xb7\x3d\x44\xea\x41\x02\x1c\xce\xe7\x31\x98" "\xd9\x21\x76\x6a\x90\xc1\x96\xed\x6c\x14\x41\x7c\x2c\x6e\x34\x80\x91" "\x9f\xdc\x9e\x1a\x78\xe8\x47\xe6\x93\x38\xd3\x92\xe3\x7d\xa6\xde\x33" "\x63\xfe\xdc\x40\xfc\x1b\x86\xa7\x1f\xb2\x76\xda\xba\x86\x23\x88\x80" "\xba\x10\xf6\x32\x61\x9e\x6d\xd2\xaf\xd5\x68\x8e\xce\x68\xc8\xb0\xd7" "\x73\xc7\x58\x4d\x3b\x83\xae\x98\x45\xb7\x6c\x79\xcf\xc8\xd6\x64\x56" "\x39\xac\xac\x93\x83\x6b\x81\x1d\x9d\xf8\x70\x4f\x8f\x54\xf9\x18\x48" "\xe9\xda\xa7\x2c\x5d\x4a\xa1\x5e\xd7\xb2\xec\x42\x22\x0f\xfe\xb2\x77" "\xc8\xa0\x93\x40\x04\xf3\x8c\xa7\x2b\x1e\x87\x8c\x47\x5b\xfe\xc1\xb3" "\xca\xc8\x39\x57\xa0\xd5\x22\x91\xce\x63\x24\xb3\x42\x7c\x84\x73\x71" "\x5c\x52\x73\xe7\x07\x25\x1e\xa4\xea\xc0\x46\xd3\xc7\x04\x88\x89\x9c" "\x4b\x25\xcc\xf0\xca\x40\x1d\xda\x57\x4f\x2e\x45\x61\x38\x7c\x4b\x0a" "\xae\xca\xe8\xbe\x2a\xa7\x8d\x3c\x5d\xef\x37\x39\x8a\x37\x8d\x21\x65" "\x04\x0a\xf6\xd8\x19\x23\x63\xe7\x4e\x08\xc3\x92\xff\x61\xac\x38\x20" "\xdd\x66\xc7\x36\xf7\x8f\xf1\x0b\x02\x54\x99\x9f\x70\xe8\x69\xa2\xd0" "\x90\xdd\x36\x98\xf4\xb8\xc0\xab\x4e\x7a\xc3\x38\x54\x19\x5b\x9b\xbc" "\x8f\x77\xd1\xfa\x29\xd5\x5e\x5c\xd2\x4f\x3e\xaf\xc2\xc9\x42\x48\xb9" "\xd5\xfc\x89\x1a\x31\x4c\x3b\xd6\x9c\x84\xa1\x8b\xf3\x71\x97\x02\x6c" "\x81\x50\x3b\xd3\xeb\xb2\xe4\x0a\xa2\x21\xb3\xbd\x9c\xdc\x72\x1a\xa2" "\xe5\xfb\xeb\x3c\x3e\xb7\xea\x9d\x3b\xa5\x6c\x0a\x58\xe6\xc6\x8e\xf5" "\x8a\x12\xb5\xce\xac\xa8\xeb\x85\x59\xed\x4c\xda\x46\x1e\x56\xb1\x90" "\xfb\x7f\x46\x54\xeb\x9c\xea\x06\xe4\xd8\xa6\x97\xe0\x83\xc6\xd2\x01" "\x48\x8a\x6a\xde\xa6\x97\x48\xd5\x89\xc2\x76\xb9\x43\x78\x0f\xd0\x41" "\xd4\xc1\x48\xf0\x2e\xdf\x85\x89\xac\x04\xf1\xdb\x49\x5f\x50\x0b\xc7" "\x94\x7d\x97\x16\xb8\x56\xfd\x4b\x65\x6e\x49\xb3\xc1\xb4\xa6\xfb\x69" "\x50\x92\x50\x87\x46\x58\xbc\x20\x24\xa4\xc1\xf9\x45\x98\xb6\x50\x02" "\x61\x42\xd6\x64\xf3\xc9\x1e\x92\x9c\x81\xa7\xb0\x9c\x4c\xff\x1f\x46" "\x07\xc7\x35\xd1\x6b\x1e\xab\x53\xba\x94\xcb\x6a\x06\xc7\x67\x63\x6d" "\xa4\x08\xe5\xd3\xdc\x22\x4f\x49\x0f\xc2\x41\x18\x86\xbc\xf2\x98\xe3" "\x18\x11\xf9\x5b\x79\x01\x99\x8b\x77\x02\x9e\xa9\x97\x85\x6b\xa2\x82" "\xe7\x43\x15\x8b\x5f\x6d\x84\x49\xba\x3e\xd6\xb7\xb4\x36\x55\x9c\xc2" "\xd7\xef\x36\xb7\xe4\xab\x83\x1b\x0d\x2a\xe9\xb6\x3a\x8a\x51\xd4\x38" "\x18\x40\xd0\xe2\x01\xd1\x7f\xcd\xf3\x0d\xbe\xe3\x3c\x5c\x68\x35\x70" "\x4d\xb3\x35\x23\x7d\x0c\x12\xb4\xe9\x12\xe6\xb7\xe4\xf5\x11\x35\x11" "\x68\xe6\xb5\x71\x50\x9e\x52\xc8\x43\x04\x15\xaf\x29\x63\x5a\x7f\xd0" "\x06\xb5\x8d\x8d\x93\x28\xbb\x07\x3d\xc6\x72\x83\xbc\xb7\x40\x0d\x34" "\xd4\x41\x4f\xf9\xb9\xee\xab\x08\x53\x40\x1e\xe5\xb4\x67\x94\xc1\x41" "\x52\x92\x6d\xb2\x68\x2c\x18\x16\x74\x19\x58\x38\x36\xbc\x22\xe1\x4b" "\xe9\x90\x70\xfe\x16\x79\x2a\x2b\x52\x2f\xa1\xaa\x1d\x42\x54\x50\xcc" "\x5d\x5a\x69\x68\xa3\xa5\xb9\x3f\x10\xd0\x8d\x72\x96\x59\x56\x83\x6d" "\x66\x02\x4f\x46\xec\x20\xe5\xcc\xb3\x2e\x1e\x21\x27\x89\x0d\xf4\x37" "\xec\xfe\x2a\x95\x3f\xb3\xd1\x8c\xe8\xfb\x08\x17\x32\xf1\x44\x49\xd4" "\x6d\xe3\x5f\x74\x5c\x63\x19\xae\xe6\x95\x99\xf0\x9a\x76\xf4\x2b\x7c" "\x90\xa8\x26\x0c\x84\x58\x61\xce\x63\xb8\x46\x43\x32\xa7\x5b\xa7\x68" "\x61\x30\xb0\x11\xf2\x63\xaf\x97\xa5\x0e\x83\xf5\xe2\x4e\xf6\x4a\x38" "\xb8\x3a\xa3\xc8\xbe\x9d\xb4\xdc\x08\xfc\x76\x10\x05\xea\xf9\x52\xaa" "\xa8\x05\xe8\xff\x4c\xa5\x41\x4b\x4e\x42\xc8\x72\x02\xda\x02\x46\x66" "\x02\xf5\xc9\x8e\x06\x13\xf1\xe4\x53\x89\x75\xf3\x64\x04\x72\x10\xfe" "\xdf\xa5\x7d\x2e\xd2\x38\x0b\x09\x04\x80\x2f\x24\xe7\x46\x52\x41\x4f" "\x93\xb1\x9b\x83\x2c\x40\x9e\x12\x16\x95\x4b\x06\x94\x4a\xbc\x48\x2c" "\xa1\x59\xf1\xb8\xc6\xe9\x3e\xc3\xb1\xad\xa7\xe5\x40\x06\x9a\xf3\x74" "\x88\xc7\x60\xdb\x07\x57\x60\x0f\x20\x98\x61\x2e\x12\x34\x89\x3b\x36" "\x09\x32\x9e\x22\x48\xf8\x9d\x6e\xd1\x95\x88\xd8\xbb\xb0\xf0\xae\xf3" "\x8e\x8d\x69\x09\x36\x09\xb7\x0c\x88\x0c\x1c\xc5\xb9\x87\xf8\xf6\xcc" "\xfe\xce\x9a\x12\x20\xca\x37\xc6\x08\xc4\x4a\x43\x8f\x18\x2d\x91\x8e" "\x84\x47\xf8\xa4\x0d\x0f\xaf\x11\x25\xd7\x5e\x83\xfc\xa8\x0e\x24\x2f" "\x15\x52\x87\xa9\x34\x39\xfa\x2b\xea\x0a\xdf\xaf\x1c\xa7\xcf\x61\xdf" "\xd3\xd6\x04\x0f\x6e\xe6\x4a\xb1\x10\xaf\xce\x0a\x60\xbc\x5c\x23\xef" "\x6b\xb5\xb8\xe9\x36\xd2\x1d\x5d\x26\xf5\x66\xdb\xc4\x5b\xbf\xe4\x5a" "\x5c\x15\x32\xd3\x11\x75\x33\xaa\x2d\xb4\xc3\x0e\xd7\xaf\x3e\x72\x5f" "\xbf\x5e\x7c\x15\x7f\x3c\x17\x70\x4c\x4b\x0a\xec\x45\x74\x9f\x7d\x90" "\x91\x75\x5a\xc8\x6c\x80\x96\xfa\x74\xbe\x4c\x79\x72\x48\xc0\x5d\x46" "\x74\xc6\x97\x85\x81\xf3\x56\xdd\x98\x4e\x61\x0e\x7a\xca\x0f\xd3\xb2" "\x85\xae\x49\x84\x22\xd2\x7d\xf7\xac\xbb\xed\xe2\x98\x6d\xe9\x46\xec" "\x20\x2f\xef\x8d\xf0\x13\x50\x91\xc6\xf7\x18\x12\x3c\xf9\x40\xad\xba" "\x50\x2d\x3d\x12\x86\xca\xe9\x36\x98\x82\x38\xcd\xed\xd8\x60\x48\xa7" "\x9a\x25\xa2\xab\xf6\x9c\xa0\xf2\xf9\x06\x4a\x69\xbd\x30\x3d\x52\xd8" "\x1f\x0c\xe3\x6d\x05\xf1\x0d\x9a\x9a\x71\x6d\x99\x46\x53\x04\x6b\x3c" "\x08\x89\x00\x91\x30\x07\xdb\xda\xcb\x3a\xcb\xf9\x26\x6f\xe6\x14\x2b" "\xff\xa1\x42\x52\x1c\x1d\xc0\x9c\x01\x99\x41\x2d\x2d\xa0\x3c\x6a\x46" "\x6b\x50\x97\xde\x17\x35\x79\x60\x2a\x62\x44\x1a\x49\x44\xa5\xba\x25" "\xb6\x3f\x4e\x35\x6b\x7f\x92\x6b\xc9\x66\xe4\x92\x57\x3d\xf7\x08\xdd" "\x1e\xc1\x5a\xda\xe9\x52\x1f\xae\x93\x7f\xcb\x21\x02\xaf\x14\x81\xc9" "\x0c\xec\xed\x79\x28\xc6\x1e\x81\x6e\x33\x90\x1a\xf4\xf0\x2c\x5a\x39" "\x69\x95\xe0\x0b\x18\xd7\x7d\x3b\x9f\x7b\x46\x33\x38\x1f\xc5\x28\x87" "\xff\x15\x55\x42\xa3\x9e\xe7\xc9\x04\x83\x37\x30\x75\xd9\xff\x85\x5f" "\x80\xa4\x2b\x30\x43\x9e\x5d\x3f\xf9\x59\x3f\x41\xd9\x43\x9f\x35\xbd" "\x44\x62\x01\x43\xc4\x74\x97\xc9\xeb\xb9\x08\x21\xe6\x55\xa7\x35\xb9" "\xaa\x8d\x74\x7e\x1a\x1a\xe3\xf0\x54\x8c\x79\xde\x9f\x22\xf1\x1b\x58" "\x0a\xe6\x7c\xac\x3c\x69\x15\xaf\x9e\x08\x62\x55\x43\xc9\x1d\xfa\x39" "\x4f\xcf\xc6\x94\x9b\x74\x08\x33\xe0\xbc\x41\x50\xca\x76\x9c\x08\x6c" "\x58\x05\x09\x46\x0e\xfd\xda\xef\x20\x91\xd5\xe3\x76\xf3\xc0\x60\x94" "\x4c\xdc\x70\xf1\xee\xbe\x0f\xa3\xcc\xfb\x4d\xb1\x6c\xb2\xfa\xcb\x58" "\xeb\x10\xf1\x37\xf6\x7a\xe5\x72\x9e\x0d\x81\x6b\x78\xec\xd1\x33\x3d" "\x75\x13\x92\x04\x11\x5f\x2b\xc3\x21\x1d\x7b\x1a\x8c\xd7\x0a\x6a\x40" "\x6c\x9d\xb3\x58\xe8\x67\x23\x55\xe7\xbe\xe1\x6e\xce\x86\x92\xf4\x30" "\x30\xa9\x13\x48\x8c\xbf\x1b\xba\x67\xc4\x56\xb8\xa3\x11\xa5\x81\xc2" "\x7c\x16\x4f\x6f\xce\xcc\xae\xa5\x9f\x52\xa2\x1b\x9c\x8a\xdc\x1a\x51" "\xd5\xbc\x2f\x2c\x6f\x72\x2b\xdb\x5f\x84\x2d\xbe\xaf\x8f\x18\x1e\xb8" "\xd3\xc4\xf8\x75\x85\x44\x8c\xd8\x09\x67\x29\x5d\x18\xc2\x8b\x3f\x7a" "\x03\xa0\x5b\xe8\xd0\x63\x1a\x0c\x53\xcc\x0c\xd4\xb7\x80\x17\x6a\x36" "\x97\xae\x27\x7b\x19\x01\x22\xe4\x71\x12\xa8\x67\x46\xc7\x60\xa8\xb9" "\x99\x7a\xd0\x16\x3a\x23\x4e\x7a\xe6\xc8\xba\x1e\x14\xb0\x47\xae\xa3" "\xa3\x8f\x14\x11\xf2\x92\x7f\xf8\x85\x47\xdd\xf7\x8c\x9c\x0e\x91\x6b" "\x8c\xc8\xea\x9b\x73\x81\xf5\xa8\x4c\x14\x70\xd4\x3a\xb5\x55\xc4\x2d" "\xcd\x3d\x91\xaa\x61\x00\x78\xed\x5f\xdd\x7a\xc2\x15\xa2\x45\x33\x7a" "\x76\x66\x40\x13\xdf\xa5\x61\x4d\xa8\x7f\x3a\xd1\xe1\x3f\xd0\x65\x75" "\xec\xef\xff\x7e\x04\x5b\x76\x4c\x37\xe1\xee\x1b\x57\x3c\x8b\x45\xe1" "\x87\xa2\xb9\x08\x3f\x4f\xcd\x89\x6e\xdc\xcf\x00\x36\x1a\xfc\x7e\xed" "\x2b\x69\x08\x9d\xf2\xe4\x5d\x7d\xe0\x88\x53\x6d\x8c\xa8\xdb\x5f\x23" "\x50\xc6\xa5\x59\xfb\x29\x71\x68\xbd\x62\xcb\x35\x6b\xb9\x15\x1c\xf0" "\x0b\x56\xd3\x4c\xdb\x20\x35\x10\x2d\x48\x06\x88\x09\xf4\x29\x3e\xeb" "\xcd\xd0\x9c\x0c\x4e\xd6\x28\xd8\xea\xa4\x16\x2e\xd8\xb0\xf4\x12\x87" "\xb3\x8a\xb1\xe9\xe1\x3b\x66\xf4\xf9\xa4\xbd\xdf\x23\x25\x8a\x6d\x4a" "\x59\xb1\x96\xfa\x66\x3a\x6b\x51\x4a\x46\x99\x59\xbd\x50\xd2\x6b\x3a" "\xd6\x93\x60\xfa\x0f\xc7\x72\xb9\x78\x45\xd1\x70\xc9\x68\x59\x69\x56" "\xb0\x7d\x01\x85\x4b\x14\x7e\x64\x51\xf9\x87\x31\x8b\xf6\xcf\x4c\xd5" "\xb5\x29\x1a\xf1\xe1\xfe\x94\x79\x21\x69\x1b\x85\x85\x07\x22\x3b\x92" "\x0c\xb8\x29\x63\x95\x05\x44\x50\x2a\xfb\x4a\x83\x2b\x00\x9d\xc1\xd7" "\x6a\xc2\x10\x83\x44\x83\xac\x73\xe8\xb1\xa2\x16\x61\x22\x7d\x19\xa9" "\x43\x09\x03\x8a\x16\xb9\xb4\x2e\xc7\x11\x3c\xf8\xd4\x50\x0a\x97\x67" "\xcc\xb5\x07\x96\x2d\x98\x31\xed\xc7\x5e\x62\xda\x43\xb9\xce\x75\x77" "\x19\xd3\xa5\x3a\x6c\x1f\xe6\x3a\x90\x48\xb4\xf8\x15\x44\x41\x13\x29" "\xe9\x84\xb8\xeb\x38\x0d\x7c\x5d\xa2\xdf\x16\xa7\xc6\xe4\xb1\x09\x60" "\xfb\x6b\x93\x0e\x95\xb9\x2d\x6d\xac\x5f\xf8\x27\x0a\x1d\x96\xa9\xbb" "\x56\x41\x18\xa7\xa6\x55\x3a\xa1\x47\xfd\x83\x8d\xbd\x5b\x6f\x6f\xfa" "\x98\x59\xfa\x85\x16\x3c\x7a\x3c\xde\x59\x6a\x38\x8d\x70\xc3\x5b\x2a" "\xee\xe5\x45\xf4\xdd\xb0\x03\xab\x04\xee\xa8\x9a\xd5\xe5\x65\x1b\x2c" "\xaa\xdd\x74\x69\x08\x9c\x87\x94\x8b\xe4\x6f\x6f\x1a\xe9\xa1\x2b\x09" "\x01\x98\xfc\x4f\xf6\x63\xa6\xde\xe0\xca\xd8\xfb\x54\x37\xb8\x8e\x7e" "\xa9\x84\x74\xb7\x18\xe2\x55\xf8\x29\x54\xb0\xd9\xc5\x5a\x04\x2a\x54" "\xa2\xf9\xe9\x48\xb8\xf1\x35\x41\x40\x0b\x3a\x02\xa0\x72\x7c\xa1\xf6" "\x15\xcb\x38\x68\x4a\xa2\xcd\x21\x76\xf6\x7a\x49\xae\xa2\x46\x3e\x1b" "\xa1\x64\xcf\xba\x43\x84\x19\x31\x04\xfd\x84\x6c\x5b\x41\x36\x4e\xab" "\x05\x37\x93\x89\xe8\xc3\xc4\xf4\xe0\x43\x19\x03\x56\xef\xf9\x12\x46" "\x1c\xf6\x9a\x19\xea\x6d\xe0\xc4\x36\x73\xf1\x1c\x1a\x01\x7e\x66\xe9" "\x0c\x5d\x15\x57\x56\x23\x8e\x6b\xaf\xde\x7b\x72\x8f\x83\x78\x85\xb1" "\x69\xee\x99\x79\xa9\xd5\xff\x77\xb4\x28\x06\x1b\x73\xbe\x89\xe4\xb0" "\x9a\x67\x4e\x8c\x03\x26\x3e\xfb\xea\xd8\xf6\x58\x9c\xa4\x59\x52\x06" "\xbb\x69\x7c\x3d\x33\x15\x04\x09\xf9\xb0\x70\x82\x34\x8e\xcf\x4d\x7d" "\xe1\xf1\x13\xdf\x23\x06\x8d\x68\x22\x02\x23\x25\xf5\x48\xaf\x40\x0a" "\xbb\xcf\x2e\x77\x84\x20\x18\x4f\x44\x8c\x31\xfe\x03\x24\x9c\x82\x4f" "\xa0\xf9\xa6\xa2\x04\x51\x0e\x5c\x7c\xaf\xbf\xdf\x24\x7c\x70\x42\x60" "\x86\x64\x32\x7d\xd5\xcb\xcc\x5b\xe8\x8f\x34\x89\x22\x78\x9f\x6d\x5a" "\x7c\x77\x66\xe2\x46\xd8\x9c\xbe\xaf\x87\x62\x5d\x9b\x83\xf1\x3e\x1e" "\xed\x5f\x16\xdd\xd8\x4a\xd1\x32\x86\xbc\x29\xfb\x4c\x1a\xdc\x12\x89" "\xa8\x1b\xed\x31\x1a\xe3\x17\xc0\xb2\x3e\x70\xa1\xe4\x1b\x2e\x50\x05" "\x75\xd7\x0a\x16\x90\xbe\x7a\x3e\x35\x69\x49\x26\xcf\x71\x0f\x89\xf0" "\xcc\x3e\xa4\x22\x0c\x60\xd1\xa6\xd1\x6a\x08\x01\xfc\x38\x53\x30\x1f" "\x56\x07\x58\xc8\x5f\x01\x63\x3d\x57\x8e\x6b\xce\xc5\x0d\xd8\x31\xb5" "\xe5\x71\x88\xdd\xcf\x81\x1c\x82\x44\xb2\xae\x54\xd9\xea\x4f\xf3\x21" "\x0d\x8e\xb0\x13\x5f\xbc\xde\xa9\x2d\x90\xdd\x48\xcd\x97\x03\x04\xb2" "\xfe\x8b\xc2\x67\x50\xdd\x54\x19\x62\x7e\x2b\x50\x28\xb9\x9d\x69\x67" "\xaf\xfd\x68\xbb\xe2\xc4\x5b\x85\x7f\xd7\x63\x99\x28\x2b\xe7\xed\x79" "\xb6\xdf\xb8\x78\x87\x4d\xaa\x69\xfc\x87\x99\xce\xc2\x5e\xb5\xdd\x97" "\x89\x68\xdc\x65\xef\xd5\x2c\x65\x2b\x77\xca\x1a\xc5\x3d\x91\x59\x63" "\x36\x96\x1f\xdb\xf1\x5f\xfe\x61\xb8\x2d\x99\x8b\xf1\xaa\x50\x45\x6e" "\xa2\xec\xbc\xf5\xd6\xe6\xfb\x5b\x09\x12\x02\xa8\x18\xd7\xca\xd6\xee" "\x6e\x87\x34\x37\xea\xb9\x49\x24\xa1\xbd\xc3\xe8\xc9\xa9\x35\x5b\x7a" "\x6d\x02\xc1\xd5\x5d\xec\x73\x92\x40\x9a\x98\x94\x85\x8e\x0b\xad\x03" "\x14\xaa\xe4\x13\x42\x3e\xff\xa7\xdb\x45\x30\x1e\xb4\xdc\x9c\x99\xe4" "\x73\x27\x01\x5d\xdb\x5c\xd8\x8e\x8e\xf5\x2b\x24\x94\xa5\x14\x62\x28" "\xc6\x23\x57\xcc\x8b\x85\x1b\xa5\x30\x75\x99\x9b\x8f\xca\x61\x22\x2e" "\xb6\x79\x83\x0e\x05\x39\x59\x4f\x23\x9a\x84\x76\xd0\xac\xe5\x79\x92" "\x8d\x54\xd3\x30\x07\x7c\xd0\xeb\x8f\x73\x96\x12\x03\x95\x35\xa3\x26" "\x83\xfc\xe6\x39\x93\x37\xfd\xb7\x75\x0f\x1c\xea\x78\x4a\x82\x90\x49" "\x97\x3a\x69\xb1\x32\x7f\x5a\xe2\xdd\x49\xdd\x02\xf6\xd3\xd3\x98\xac" "\x13\x43\xd0\xf0\x1e\x9a\xbe\x7e\x1c\xaa\x31\xd3\x5e\x99\xd0\x6b\x4e" "\x54\xcb\xac\x38\x5d\xcb\x27\x03\xbc\xa8\xbd\x46\xf2\x8c\x88\x57\xad" "\xec\xc9\x2e\x6c\xb9\x66\x30\xb7\xc6\xb6\x25\x0e\x9e\x5f\xbf\x70\xd5" "\x3c\x7a\xd3\x99\xbb\xa1\x51\x01\x58\xf5\x9a\xe0\xea\xb8\xf8\xcf\xc8" "\x04\x6a\x2c\x13\xd9\xe0\xf2\x46\x67\xaa\xde\xb4\x27\x23\x53\xe8\xb0" "\x86\xc5\x01\xcf\xb9\x6c\xd2\x8d\xe4\x30\xb3\x4b\xf4\xe0\x44\xc9\xee" "\x44\xa2\x64\x71\x1d\xdd\x02\x6e\x19\x92\xf6\xb2\x43\x7f\x25\x56\xd9" "\x14\xad\x83\x1e\x10\xe1\x11\xe5\xc9\xfb\x0f\xc9\xa4\x32\x25\x72\x8e" "\x90\x72\x0b\xbb\x86\xce\x6f\xa7\x20\x0f\xe7\x15\x76\x76\xa2\xea\xd0" "\x09\xa1\x12\x07\x15\x65\x63\xf4\xef\x8b\x86\x3b\xd9\x83\x0b\x14\x1d" "\x05\x8b\x77\x45\xea\x0c\x5a\xdc\xb3\x2b\x77\x7b\xc5\x8d\x4c\xb7\x66" "\x79\xd5\x7f\xd3\x7b\x4a\x65\x40\x22\xa1\xb7\xfa\x21\xf3\xfd\xdf\xf8" "\xfa\x82\xd4\x6b\x9e\x39\xc3\x7c\xc7\xc2\x08\xdf\xf2\x48\x13\xc8\xbf" "\x6a\x2a\x12\x82\xb7\x6a\xda\x6b\x6f\x81\xb1\xb4\xff\x63\xab\x12\x7b" "\x71\x54\x2f\x6d\xf5\xbc\x33\x49\xd2\x52\x21\xa6\x92\x93\x37\xb3\xaa" "\x2d\xaf\xfa\x1b\xf0\xa3\x21\x3f\xfe\x0b\x9a\xe3\x77\xce\xdd\xea\x29" "\x6b\x8d\x82\x06\x5a\x67\xc0\x8d\xef\x2c\x33\x22\xa0\x9c\x3e\xf2\x78" "\xaf\x25\x71\x7e\xa3\x65\xcd\x23\x3b\x0f\xd8\xdd\x9c\xfa\xe5\x50\xb7" "\xaf\x4f\x07\x86\xfa\x24\x35\xf6\xc4\x9e\xe7\xdb\xf4\x10\xe8\x9c\x40" "\x56\x59\xfc\x18\x4b\x6a\xf6\x2b\xeb\xa8\xe9\xbc\xee\x79\x69\x0b\x2f" "\x84\xe3\x14\x5a\xa3\xb6\x28\xbf\xde\x6b\xae\x90\xb2\xb2\xe5\xba\x39" "\x8e\xdb\xdf\x64\x4d\xe5\xbd\xfb\x47\x82\x99\x1b\xfb\xf2\x48\xff\xac" "\xb2\xa0\x27\xe3\x48\x81\x76\x2b\x9a\x00\x80\x70\x68\x22\x38\x9e\xde" "\x27\xbe\x16\x7f\xa6\xaa\xb0\xd3\x44\x7f\xd8\xa6\x53\x0c\x0f\x8a\x61" "\x64\xbc\xd8\x37\x32\x50\xe8\x35\xe5\xb2\x69\x4b\x4c\x0d\x96\x7d\xdb" "\x30\x07\x03\xca\x34\xaf\xf0\x55\x9f\x40\xd0\xf5\xdd\xc6\x40\x01\xea" "\x04\x01\xe6\x80\x57\xec\xb4\x72\xb3\x7d\x02\x66\xea\x4d\xc1\x84\xa2" "\x20\xc3\xf9\x21\x90\x3f\x33\x2e\xe9\x57\xfc\x32\x68\x24\xb5\xd3\x3c" "\xe4\x6d\x15\x14\x05\x37\xce\x48\x0a\xd3\x70\x0c\xf3\x9c\x2d\x26\x0a" "\xfd\x69\xd1\xee\xc8\xe8\x88\x8e\x47\x0b\x1a\x96\x27\x27\x64\x09\xed" "\xd8\x49\xe2\xbe\x63\x21\xe1\xc7\xee\xe7\xb4\x4a\x6d\xb5\xeb\x03\x3f" "\x2f\x49\x55\x2b\x91\x8a\x3e\xb0\x0a\x5f\x2d\xc8\x99\xf0\x52\xec\xef" "\x63\xc4\xdc\xa5\xa1\xdf\xde\x91\x39\xd5\xa5\xc5\xb0\xf4\x70\x6e\xf9" "\xf5\x7f\x11\x01\xf1\x39\x78\xd1\xb9\x70\xb2\xff\x60\x99\xe1\x1e\xe3" "\xee\xac\x07\x7c\x95\x17\x0e\xad\x40\x46\x2e\x31\x73\x2e\x79\x9a\xcf" "\xc0\xb1\x3b\xda\x62\x28\x6c\xed\xfe\xbf\x41\x95\xcf\x31\x49\x5a\x2a" "\xc9\x42\x61\x30\x04\xd5\x8a\x87\x59\xae\xd6\xfc\xe5\x7e\x5f\x1e\x17" "\x04\xb5\xde\x9b\x0c\x0b\x2b\xb0\x87\xcf\xda\x47\x07\xc4\x21\xb4\xb8" "\x13\xe3\x57\xed\x9a\x6e\x8f\x15\x8a\x59\x71\x55\xad\xe3\xf6\xd1\x59" "\x80\x79\xbf\x6f\x75\x40\x8a\x9a\x8c\x3d\x4e\xa0\xab\xbd\x39\x23\x64" "\x42\x56\x03\x40\xe1\x10\x05\x10\x58\x38\x9a\x1a\xd2\x12\x0e\x65\x37" "\x48\x03\x95\xe8\xfb\xe7\xfb\xe5\x35\xe3\x09\xbf\x39\x7f\x2b\xb1\x1e" "\xc7\x07\x6f\x00\x13\x4e\x9f\xf8\xf2\xd9\xd4\xdc\x7a\x97\xd0\xe0\x94" "\x84\x32\xa9\xc3\x1c\xa0\x09\xd7\x61\x0f\xc9\x8b\xc3\xda\x30\x70\x59" "\x0a\x54\x15\x35\x24\xed\x4d\x45\xbf\xad\xbe\x41\x15\x95\xae\x34\x3c" "\x70\x61\x5e\xc1\x79\x4f\x23\x61\x12\x52\x1f\x37\x9c\xb3\x9f\xaa\xf3" "\xf9\x32\x26\x96\xe9\xdb\x9d\xa7\x55\x3b\x9f\x1b\xc4\x42\x35\xbf\x7f" "\x8a\x94\x89\x77\xcd\x48\x84\x60\xa4\x07\x3e\x25\xc2\x1c\xc5\xbd\x8a" "\x29\x26\x41\xa4\x68\xaa\xbe\xd0\xd9\x4d\x9e\x65\x30\xda\x07\xf3\x26" "\x64\xcf\xeb\x80\x82\xa3\xee\x77\x34\x65\x82\x2e\x71\xb4\xc9\x4f\x14" "\xa0\x21\xf5\xda\xce\xb7\xbe\xa1\x41\x78\xfa\xd8\x5e\x22\x29\x95\x8a" "\x72\xe1\xf1\x3a\xe5\xfc\x0c\xe4\xbb\xdc\xaa\x6a\x00\x5c\xb3\x50\xb4" "\x92\x8a\xd0\x51\x5d\x38\xf7\x2b\x24\x97\xa1\x4f\xac\x0a\xf0\xde\xc1" "\x7d\xd2\xd9\x1a\xaa\xe5\xe9\xc8\xab\x6d\x1f\x91\xf6\x56\xcc\xa7\xae" "\xdc\x48\xd9\x1b\x8c\x81\x49\x83\x25\x73\xf6\xb1\xac\x07\xe0\x0f\x1d" "\xc3\x76\xa4\xab\x17\x5f\xfd\x78\x14\xf6\x48\x7d\x25\x8e\xd1\x93\xc6" "\x1b\x6b\x16\xe2\xab\x8f\xa1\xb7\xc2\x3e\xf3\xd4\xa9\xae\xf1\x72\xb3" "\x1c\x06\xfe\xdc\x6b\x95\x02\xf6\xd7\x7d\xe2\xb5\x71\xd9\xa7\x0f\xf9" "\xa0\x3d\x32\x09\x00\x93\xbf\x07\x1b\x2b\x78\xb3\x03\x39\xae\x50\x86" "\x3f\x34\x06\xed\x42\xf5\x47\x5c\xe3\x71\x9a\x2b\xef\x7f\xb2\x68\xa2" "\xaa\xf3\x89\xfa\xe8\x8e\x38\x99\x52\x56\x2a\x9a\x72\x1c\x99\x79\x69" "\xec\x61\xb6\xfd\x01\x4a\x44\x01\x28\x52\x53\x09\x3c\x9e\x9a\x1f\x01" "\xe0\xae\xa5\xd9\x13\xeb\x41\x87\xf5\x16\xbf\x41\x3b\x87\x3c\x56\x50" "\xbe\xbe\xc2\x73\xce\xca\x7b\xec\x85\x59\xdb\x7b\x0a\x30\x31\xd9\xc3" "\xc1\xf7\x6e\x4c\x77\xd9\xb6\xb2\x6c\x06\x74\xa9\x63\x99\xab\xf6\xbb" "\x0f\xec\x5e\x32\x8c\x9d\x3a\x16\x9f\x99\x6e\x6f\x06\xbb\x97\x88\xb2" "\x35\x82\xe8\xe4\xc1\x83\x02\x2b\x57\x2d\x7c\x39\x07\xa7\x77\x55\x26" "\x14\xb1\x92\xfb\x9a\x13\xc4\xa5\xd5\x0d\xc9\x9a\xcd\xc5\x39\x59\xf1" "\x94\x70\x1b\x09\x26\x02\xfe\xa8\x20\x94\x05\x9b\x44\x2c\x1b\xf1\xcf" "\xfb\xf5\xa3\x93\x8a\x5d\xe5\x49\x62\x8c\x8c\x02\x7f\xa2\x5e\x48\x3c" "\xc6\xeb\xf6\x1a\x61\xba\xb2\xbd\xb2\x9f\x0d\xc5\x71\x5e\x43\xba\x72" "\x45\x30\x63\xa3\x6b\x58\xf4\xcc\xaa\x5e\x50\x73\x47\x67\xf0\x02\x98" "\x9c\xa5\xf2\x6f\x90\x81\x8c\x86\x36\x22\x5d\x0b\xd9\x5f\x8d\x8c\x7f" "\xbf\x48\xb6\x86\xab\x45\xdc\x0a\xbb\xf8\x32\x9b\xc8\x55\x31\x95\xa9" "\x67\x2f\x53\xbd\x62\x72\xe9\x6c\xea\x11\xfc\xd1\x33\x7d\xf9\x1d\xc6" "\xc7\xc9\xcf\x92\x2a\x90\x95\xf2\x1a\x1d\x95\xfe\x6d\x46\x83\xf2\x49" "\xb3\xaf\x03\xe2\x33\x83\xa8\x0a\xac\x61\xbb\x61\xe2\x75\xb2\x81\x75" "\x50\xe7\x47\xec\xe1\x0a\x09\x7e\x81\x53\x03\x72\xd0\x43\x0d\x9a\x33" "\x50\x7f\xa6\x98\xb3\xe8\xc7\xbc\x1f\xc5\xf7\x54\xc5\x6d\x31\xff\x72" "\xf1\xc7\x95\x24\x82\x98\x55\x3e\xc6\xb5\xc9\x34\x85\x5e\x45\x67\xfd" "\xb1\x0e\x3c\x2e\xf9\x35\x1a\xcb\x47\x1b\x3b\xb0\x19\xc4\xf8\x6d\x6f" "\x0b\x32\x4e\x70\x85\xab\xd5\xd7\xc9\x3e\x43\x62\x69\x39\xe1\x2e\x71" "\x8e\xd3\x29\x3d\x20\x60\x9e\xc6\x6e\x8c\xec\xfb\xc4\x9b\x31\xef\x22" "\x6e\x99\x11\x36\x03\xd9\x39\x87\xc2\x9a\xcb\x54\xc3\xf3\x06\xdd\xc2" "\x9c\x53\x40\xf4\x57\xc4\x68\x2e\x82\x27\x87\x2b\xff\x13\x17\x9c\x74" "\x73\xe9\x6d\xd8\xf8\x0d\x8b\x56\xfe\x2c\xdb\xa0\xa3\xa1\x98\x38\x17" "\xf4\x84\x8c\x37\x93\x5b\x93\x11\xdf\xdc\x34\x98\x37\x53\x4f\x7d\xa0" "\x6e\x51\x15\x1f\x80\x16\xc3\xf5\x29\x5d\xae\x04\x05\xd1\x37\x41\x5f" "\xd0\x94\xd0\x16\x06\x31\xd1\x39\x91\x26\x00\x1e\x88\xab\x39\xa7\x37" "\x65\xa8\x11\x61\xf3\xcb\xd7\xd3\x60\x87\x9f\xe1\x78\x11\x2f\x4c\x21" "\x2a\xb1\xb3\x79\x30\x59\x24\x96\x73\xca\x21\x19\x95\xaa\x22\xa5\x34" "\x25\xc5\x42\xe3\x88\x73\x0e\xbb\x81\xeb\xb0\x5b\x19\xd9\x5c\x65\x9d" "\xd9\x55\x67\xc6\x20\x27\x57\x52\xb8\x9d\xd4\x6f\x7e\xe9\x73\x8e\xec" "\x0a\x53\xde\x1e\x6a\xc3\xc0\x7b\x58\x28\x62\xfd\x13\x0e\x76\x17\x9b" "\xc6\x0f\x86\xc1\xc3\x2b\x9b\xcb\xf6\xcd\x16\x7e\x93\xfa\x73\x1e\x41" "\x68\x38\x24\x79\x96\x1c\xc4\x45\xbe\x79\x1e\x6c\xdf\x79\xe7\x40\x4f" "\x8c\xe9\xa8\x8f\x84\x24\xd0\x8d\xe8\xe0\x95\xa4\x9d\x7b\x7b\xf6\x6e" "\xb9\x4f\x34\x76\xc2\xd9\xb5\x11\x75\x63\x5e\x45\x42\x17\xdf\xbb\x41" "\x5d\xd0\x5a\x1e\x54\xdf\xa2\xd9\x4d\xaa\xe3\x3d\xba\x83\x5e\xa4\xbd" "\xed\xea\x85\x97\x8f\xde\x54\x44\xb7\xf4\x74\x8f\x16\xbb\x62\x52\x55" "\x9b\x52\x05\xad\xfb\xcb\x6d\xcb\xc7\x2d\x1d\x43\x3a\xeb\x71\x4a\x28" "\x11\xae\xff\x0d\x71\x66\x7c\x92\x11\x96\xb4\x8e\xd6\x25\x8a\x7d\xf9" "\x9a\xf6\xb0\xe3\x65\x0f\x95\x9b\xb8\x57\x32\x5a\xad\xe8\xe5\x4b\x17" "\xb3\x33\xf7\xeb\x2d\x49\xb0\x90\xba\x62\xb7\xa0\x98\x75\xec\x41\x67" "\x62\xce\x3c\xf1\xab\x0b\xcc\x15\x65\xad\x18\xcf\x19\x7e\x4f\xcc\x32" "\x94\x4b\xf2\x73\xee\x7f\xce\x57\x75\xbf\xd0\xdc\xa7\x63\x07\x4a\xad" "\xdc\xdd\x6e\x66\x18\x3e\x1e\x96\xf4\xb6\x85\x93\x5f\xc6\x0d\xc5\x11" "\x8d\x1a\x91\xec\x41\xd8\xe6\x56\x22\x71\xee\x49\xf7\xbe\xcb\xcb\xf6" "\x1f\x66\xdb\x9d\xe8\x7e\x32\x30\xb2\x45\x2a\x54\x2f\xc6\xa0\xfa\x3a" "\x32\xe7\x5d\x99\x16\x9c\x5f\x88\xd0\x89\xbd\x0c\x65\x43\x62\x33\x7a" "\x0d\xb0\x7c\x71\xd3\xc0\xfd\xcf\x48\xef\xea\xdc\x46\x5d\xc9\x06\x49" "\xd2\xfd\x2a\x3e\x96\x2b\x1a\x32\x8b\x41\x6c\x68\x20\x8e\x7c\xca\x74" "\xd2\x35\xf4\x54\xf0\x40\x85\xb2\x02\x9a\x62\x0a\xf5\x84\xc2\x68\xd7" "\x79\xc3\xce\xb5\xca\xc6\x4c\x86\x55\x83\xfd\x91\x95\xc1\xbd\x77\x6e" "\x2a\x25\x8c\x79\xe4\x4c\x34\x68\x47\x7e\xa9\x56\x2e\x82\x18\x83\x26" "\x56\x43\x28\x4c\x4d\x59\x13\xda\xa2\xfc\x5b\x72\x40\x24\xf8\x90\x4b" "\x8b\xb6\x1d\x4d\xc9\x36\x7c\x87\x8f\xc0\x9a\x8d\x4e\x6d\x39\xe2\xcf" "\xd4\xe6\x85\xc8\x4c\xb4\xc8\xe5\xcb\xf3\xc4\x26\x1c\xa9\x4f\xc8\x9d" "\x5a\x38\xbc\x1f\x70\x52\x0b\x5a\x37\xea\x46\x55\xc9\x46\xfa\x1b\x4e" "\xf0\xed\xbb\xba\x86\xf8\x9d\x74\x84\xc1\x40\x79\x3c\xeb\xb6\xe1\x98" "\x2c\xca\xfc\xbe\x18\x32\x37\xcc\x29\x7c\x49\x8c\x43\x03\xeb\x27\xc4" "\x3f\x20\xa1\xf1\x9f\xc9\x20\x71\xf8\x0e\xf7\xe7\xd0\x2c\xf0\x3f\xdd" "\x08\x6f\xee\x4e\x42\x4c\xd7\x55\xe9\x44\x33\x25\x02\xb1\xdc\x2d\x45" "\x27\x50\x0f\xbb\x4a\xf0\xdd\xec\x27\x5a\xb2\x4d\x19\x8b\x8f\xe2\xd2" "\x27\xf0\xa0\x6c\xc3\xe8\x9c\xba\xdc\xeb\xed\x61\xb9\xd7\xd8\x01\xed" "\x05\x09\xba\xbe\x20\xb6\x7e\xd7\x99\x00\xd6\xdf\x36\x17\xf6\xdb\x64" "\xd3\x32\x47\xef\x3c\xf5\xda\x93\x7a\x6b\x94\x1f\x01\x0b\x9f\xad\x8f" "\xbd\xe0\xb8\xab\x2a\x47\x87\x33\x0b\xe8\xa7\x0a\x42\x75\xf5\x42\xea" "\x9b\x2a\x87\xad\xf2\xc4\xaf\x04\x9c\x76\x29\x4f\x15\x49\x63\xe1\xd2" "\x9b\x39\x3e\x27\xde\x2d\xc4\x5f\x95\xcb\x9a\x98\x58\xa5\x47\x7f\x3b" "\x9a\xc6\xf1\x82\x47\xfa\xca\xc7\x62\xbb\x9d\xeb\xbe\x66\xa6\x91\x1a" "\x43\x1a\x88\xe7\xc6\x6b\xc6\xf2\x53\x8a\x3d\xab\xfe\x2a\xcd\x87\x14" "\x6f\x5b\x43\x06\x2e\x5e\xda\x19\x03\x0b\xb6\x09\x47\x9e\xa2\xb0\xa5" "\xa9\x8a\xf7\xfb\x2c\xaa\xfa\x0a\xfd\xaa\xae\x06\x83\xed\x03\x6e\x1d" "\x7d\xfc\x12\x0a\xca\x53\x8f\xc5\xdd\x95\x8e\x04\x42\xb3\xcc\x91\xab" "\x2d\x44\x31\x72\xae\xfb\x88\xb3\x2f\xe7\x13\x96\x14\x8e\xf1\x63\xdc" "\x63\x99\x95\xc4\xec\x36\x76\x72\xb7\x9a\xc6\x72\x9d\xf1\x02\xf9\x99" "\x2b\xbc\xb2\xb3\x88\x54\x57\xf6\x97\x82\x8b\xf1\x82\xc7\xdd\xd3\xa4" "\xec\x9e\x0a\xa7\xa6\x74\xa7\x84\x3d\xce\x8f\x4b\xd9\x36\xa9\xc8\x5a" "\x8f\xd8\xe1\xca\x1e\x01\x90\x76\x61\x13\x9c\x1a\xaf\xe8\xc8\x81\x8d" "\xde\xf4\x06\x05\x19\xdb\xb8\xb6\x38\x2b\xb8\x1f\xf6\x04\xca\x4b\xef" "\x6d\xd3\x60\x30\x7d\xf0\x92\x25\x3a\xa1\x4a\x83\xbb\x14\x85\x5d\xf3" "\xa3\xf1\xc8\x3c\xa6\xc1\x89\x3a\x5a\x88\x30\xa6\xac\x1c\x9d\x8c\xee" "\x68\xa3\x37\xdb\x1d\x19\x90\x7f\xf2\xd7\xb3\x9d\x2a\xa8\x50\x93\x2a" "\x69\xcd\x5b\x39\xf3\x1c\x18\xde\xcb\x3c\x70\x64\x82\xfc\xa6\xfc\xf8" "\x6f\xfa\xc2\x0f\xb1\x9c\x39\x29\xa2\xf7\xfe\x14\xa6\x08\x21\xb9\x52" "\xfb\x97\x96\x3a\x72\x31\xd7\x10\x25\x2c\xc2\xe7\xbd\xbc\x91\xe5\x28" "\x45\x5e\x4c\x14\x29\x32\xd3\xe6\x80\xcf\x54\xb1\x7e\x33\x1f\x22\x78" "\x54\xf5\x0e\x45\xa0\x91\x69\xd0\x9e\xc5\x73\x8d\x82\x0a\x6d\x58\x7a" "\x6b\xf5\x10\x4c\x7e\x29\x3c\x90\xcc\xbb\x22\x1c\x31\xa9\x79\x7d\x52" "\x69\xb1\x64\x5a\x89\x74\xa9\xbd\x47\xf5\x19\xb5\x5b\x85\xdc\x18\xde" "\x05\x40\x1e\xd4\x6f\x0a\x6d\xc9\xd8\x27\x77\x5f\x21\xcb\xac\x3e\x2d" "\x12\xe0\x21\x25\x84\x86\xc4\xc4\xe0\xf1\x7d\x96\x46\x84\x77\xcb\x45" "\x4d\xf4\xa2\x7d\xa7\x4d\x7a\x74\xa0\xe6\x4b\x29\x4b\xba\x84\xfc\x44" "\xf6\xf7\xf8\x42\x91\xec\xc9\x70\xca\x38\xe9\xde\x3b\xc6\xf1\x63\x4e" "\x53\x2c\x4c\x65\x8b\x5e\x7b\xcd\x62\x17\xf5\x35\x46\x7a\xe5\x86\x99" "\xc0\x15\xc1\x2f\x82\x63\x68\xfb\xba\x24\x53\x7c\x5e\x16\xa6", 8192)); NONFAILING(*(uint64_t*)0x20000f40 = 0x20000100); NONFAILING(*(uint32_t*)0x20000100 = 0x50); NONFAILING(*(uint32_t*)0x20000104 = 0); NONFAILING(*(uint64_t*)0x20000108 = 0); NONFAILING(*(uint32_t*)0x20000110 = 7); NONFAILING(*(uint32_t*)0x20000114 = 0x26); NONFAILING(*(uint32_t*)0x20000118 = 0); NONFAILING(*(uint32_t*)0x2000011c = 0); NONFAILING(*(uint16_t*)0x20000120 = 0); NONFAILING(*(uint16_t*)0x20000122 = 0); NONFAILING(*(uint32_t*)0x20000124 = 0); NONFAILING(*(uint32_t*)0x20000128 = 0); NONFAILING(*(uint16_t*)0x2000012c = 0); NONFAILING(*(uint16_t*)0x2000012e = 0); NONFAILING(memset((void*)0x20000130, 0, 32)); NONFAILING(*(uint64_t*)0x20000f48 = 0); NONFAILING(*(uint64_t*)0x20000f50 = 0); NONFAILING(*(uint64_t*)0x20000f58 = 0); NONFAILING(*(uint64_t*)0x20000f60 = 0); NONFAILING(*(uint64_t*)0x20000f68 = 0); NONFAILING(*(uint64_t*)0x20000f70 = 0); NONFAILING(*(uint64_t*)0x20000f78 = 0); NONFAILING(*(uint64_t*)0x20000f80 = 0); NONFAILING(*(uint64_t*)0x20000f88 = 0); NONFAILING(*(uint64_t*)0x20000f90 = 0); NONFAILING(*(uint64_t*)0x20000f98 = 0); NONFAILING(*(uint64_t*)0x20000fa0 = 0); NONFAILING(*(uint64_t*)0x20000fa8 = 0); NONFAILING(*(uint64_t*)0x20000fb0 = 0); NONFAILING(*(uint64_t*)0x20000fb8 = 0); NONFAILING(syz_fuse_handle_req(r[0], 0x20004180, 0x2000, 0x20000f40)); break; case 4: NONFAILING(memcpy((void*)0x20000040, "./file0/file0/file0\000", 20)); syscall(__NR_mount, 0ul, 0x20000040ul, 0ul, 0ul, 0ul); break; case 5: res = syscall(__NR_read, r[0], 0x20002140ul, 0x2020ul); if (res != -1) NONFAILING(r[1] = *(uint64_t*)0x20002148); break; case 6: NONFAILING(*(uint32_t*)0x20000200 = 0xa0); NONFAILING(*(uint32_t*)0x20000204 = 0); NONFAILING(*(uint64_t*)0x20000208 = r[1]); NONFAILING(*(uint64_t*)0x20000210 = 0); NONFAILING(*(uint64_t*)0x20000218 = 0); NONFAILING(*(uint64_t*)0x20000220 = 0); NONFAILING(*(uint64_t*)0x20000228 = 0); NONFAILING(*(uint32_t*)0x20000230 = 0); NONFAILING(*(uint32_t*)0x20000234 = 0); NONFAILING(*(uint64_t*)0x20000238 = 0); NONFAILING(*(uint64_t*)0x20000240 = 0); NONFAILING(*(uint64_t*)0x20000248 = 0); NONFAILING(*(uint64_t*)0x20000250 = 0); NONFAILING(*(uint64_t*)0x20000258 = 0); NONFAILING(*(uint64_t*)0x20000260 = 0); NONFAILING(*(uint32_t*)0x20000268 = 0); NONFAILING(*(uint32_t*)0x2000026c = 0); NONFAILING(*(uint32_t*)0x20000270 = 0); NONFAILING(*(uint32_t*)0x20000274 = 0); NONFAILING(*(uint32_t*)0x20000278 = 0); NONFAILING(*(uint32_t*)0x2000027c = 0); NONFAILING(*(uint32_t*)0x20000280 = 0); NONFAILING(*(uint32_t*)0x20000284 = 0); NONFAILING(*(uint32_t*)0x20000288 = 0); NONFAILING(*(uint32_t*)0x2000028c = 0); NONFAILING(*(uint64_t*)0x20000290 = 0); NONFAILING(*(uint32_t*)0x20000298 = 0); NONFAILING(*(uint32_t*)0x2000029c = 0); syscall(__NR_write, r[0], 0x20000200ul, 0xa0ul); break; } } int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); install_segv_handler(); loop(); return 0; }