// https://syzkaller.appspot.com/bug?id=da8d0f300157c342f3922aa936635922202b3260 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 9; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[3] = {0xffffffffffffffff, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000400, "./file0\000", 8); syscall(__NR_mkdir, /*path=*/0x20000400ul, /*mode=*/0ul); break; case 1: memcpy((void*)0x20002080, "/dev/fuse\000", 10); res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20002080ul, /*flags=*/0x42ul, /*mode=*/0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x200020c0, "./file0\000", 8); memcpy((void*)0x20002100, "fuse\000", 5); memcpy((void*)0x20002140, "fd=", 3); sprintf((char*)0x20002143, "0x%016llx", (long long)r[0]); memcpy((void*)0x20002155, ",rootmode=0000000000000000040000,user_id=", 41); sprintf((char*)0x2000217e, "%020llu", (long long)0); memcpy((void*)0x20002192, ",group_id=", 10); sprintf((char*)0x2000219c, "%020llu", (long long)0); syscall(__NR_mount, /*src=*/0ul, /*dst=*/0x200020c0ul, /*type=*/0x20002100ul, /*flags=*/0ul, /*opts=*/0x20002140ul); break; case 3: memcpy((void*)0x20000080, "./file0/../file0/file0\000", 23); syscall(__NR_umount2, /*path=*/0x20000080ul, /*flags=*/4ul); break; case 4: res = syscall(__NR_read, /*fd=*/r[0], /*buf=*/0x20006280ul, /*len=*/0x2020ul); if (res != -1) { r[1] = *(uint64_t*)0x20006288; r[2] = *(uint32_t*)0x20006294; } break; case 5: *(uint32_t*)0x20004200 = 0x50; *(uint32_t*)0x20004204 = 0; *(uint64_t*)0x20004208 = r[1]; *(uint32_t*)0x20004210 = 7; *(uint32_t*)0x20004214 = 0x27; *(uint32_t*)0x20004218 = 0; *(uint32_t*)0x2000421c = 0; *(uint16_t*)0x20004220 = 0; *(uint16_t*)0x20004222 = 0; *(uint32_t*)0x20004224 = 0; *(uint32_t*)0x20004228 = 0; *(uint16_t*)0x2000422c = 0; *(uint16_t*)0x2000422e = 0; memset((void*)0x20004230, 0, 32); syscall(__NR_write, /*fd=*/r[0], /*arg=*/0x20004200ul, /*len=*/0x50ul); break; case 6: memcpy((void*)0x20000100, "./file0/../file0/file0\000", 23); memcpy((void*)0x20000140, "./file0/../file0/file0\000", 23); syscall(__NR_rename, /*old=*/0x20000100ul, /*new=*/0x20000140ul); break; case 7: syz_fuse_handle_req(/*fd=*/r[0], /*buf=*/0, /*len=*/0, /*res=*/0); break; case 8: memcpy( (void*)0x20004280, "\x25\x8e\x0e\xef\x56\xbc\xf4\xec\xb3\x0d\x17\xbe\xe2\x3b\x44\x97\x4b" "\x59\x07\x5d\xbe\x63\x63\x32\x99\x6c\xbc\xfa\xf6\x12\xa2\xfd\x1d\x28" "\xc3\x5a\x24\xac\x24\x25\xcb\x82\x87\xae\x58\x54\x7c\x0d\xed\xde\x04" "\x8a\x8e\x79\x91\x33\xd2\x98\xf9\x09\xa2\x1f\x56\x94\x91\x88\xdf\x5e" "\x15\x6c\x56\xe7\x2d\xc1\x65\x61\xe3\x87\xfd\x07\x7a\x60\x9b\xfa\xbe" "\x7b\x05\x36\x6e\x46\xd8\x32\x10\x5f\x71\x31\xd3\x7d\xdb\x3e\x14\x2e" "\x0a\xfa\x86\x8a\x69\x74\x86\xc3\x8f\x07\x83\xc1\xa8\x6f\x34\xb3\x41" "\x52\xa3\x48\x17\xa6\x65\x70\xbc\x3f\x64\x5f\x9e\xbb\xb5\x3f\xa0\x7d" "\x55\xd3\xe8\xf8\xf5\x45\x3a\x77\x29\x0c\xfd\xe1\x27\x92\x80\x4a\xd6" "\x5d\x10\xda\xe6\xa9\x86\xb9\xb6\x01\x95\x1f\x17\xc0\xde\x33\x64\xbb" "\xe9\x46\x3f\x1c\xdd\x54\x0b\x56\x97\xa7\x59\xec\xaa\x43\xd7\xeb\xb3" "\x83\xe8\xee\x57\x22\x8a\x58\x40\x83\xb6\x0a\x50\xe6\x6e\xcf\x8e\x2d" "\x25\xf6\x32\x44\x79\xce\x18\x64\x36\x95\x46\x2e\x2a\xce\xcd\x99\x18" "\x65\x97\x88\xcc\x22\xf0\x15\xb9\x7d\x8e\xf9\xec\x11\x05\x03\xb0\xf0" "\x64\x6c\x29\xcf\x2d\x80\xfb\xd7\x9f\x3f\x79\xd0\x83\xf5\x29\x9c\xee" "\x24\x18\x01\x21\x59\x5b\xff\x8b\x6f\x62\x45\x47\x5b\x69\x46\x17\x33" "\xd6\x06\xdd\xc3\x62\xb2\x75\x5a\x68\xbc\x3c\xa8\x5a\x2f\xa1\x06\xe3" "\x5d\x4b\xe6\xbc\xda\x66\x65\x8f\x16\xda\x46\x33\xcf\x4c\xc5\x55\x51" "\x37\x6b\xcd\x10\x64\x5a\xea\xf3\x6e\x01\x59\x34\x6b\x74\x2f\x55\x65" "\xad\xfc\xfd\x91\x35\x43\x7f\x18\x47\x3f\x53\x4c\x2c\xaf\x0b\x36\x1e" "\xd7\x05\x4d\xa7\x5d\xfa\x31\xfb\x03\x72\x55\xca\x47\x45\xd0\xba\xb2" "\x9b\x5a\xb8\x14\xf2\x7c\xa2\x69\x5a\x53\xdd\xf4\xbf\x51\xc0\x82\x31" "\x6e\x39\xff\xfe\x15\x7c\x62\xc7\x00\x1f\xc6\x4f\xe6\x32\x40\x9c\x82" "\xcd\x17\x16\x8a\x83\xcd\x0e\x3c\x2f\x0c\xd4\xbb\xa1\x70\x6d\xa0\xe2" "\x74\x03\x6f\x64\x46\x4a\x5b\xeb\x88\x47\x27\xb2\xcd\x4f\x24\x8e\xe9" "\x28\x20\xfe\xf0\xe7\xdb\x9b\x3a\x7e\x23\x48\xe8\x06\xb4\xc0\xc0\xa0" "\x61\x2b\xbb\x29\xb9\xa8\x54\x76\x47\xf3\x2f\xed\x64\x7f\xf3\x17\x99" "\x44\x6c\x17\x1d\x11\x7f\xfc\xae\x44\x3f\x65\x04\x31\x8d\xc6\x14\x7a" "\x6f\xe9\xc8\x89\xc9\x0a\x9a\xc3\xd4\xfa\x5b\x87\xfa\x2f\xec\x99\x70" "\xa7\x08\xf8\x23\xf6\x40\x7b\x44\x94\x09\xd0\x33\x9f\x4e\xe9\x2c\x4f" "\x58\x85\x14\xd1\x03\x61\xca\x1a\x54\x5f\xc2\x81\x34\x79\x90\x44\x12" "\x84\x8d\xd1\xcf\xe4\xcf\x2e\x4e\xb3\xdc\x06\x86\x6e\xec\xf4\x25\x9b" "\xf4\x8c\x63\x8d\x27\x2e\x39\xce\x10\xa0\xfb\x8b\xee\x71\x5e\xcd\xcd" "\xf2\x44\x78\x6f\x81\xac\x43\xc9\x60\xff\x09\x60\x76\x8b\xe8\x8e\xc5" "\x61\x9a\x8c\x69\x2c\x46\x7a\xfe\xf8\xfa\xd6\x81\xc3\x59\xa0\xbb\x07" "\x82\x96\x9c\xfb\x92\x1e\x4d\xc8\x5d\x39\x44\x81\x71\xba\xbd\xfa\x8c" "\xda\xcc\xf2\x01\xb4\x74\xb9\x14\x37\x47\x0a\xa1\x23\x4e\xa2\x8f\x1e" "\x16\xcd\xf3\x24\xd0\xec\x73\xb4\x0b\x58\x71\x06\xb8\x19\x76\x6d\xa6" "\x57\x3a\xbb\x87\xad\x6e\xd1\xde\xd5\xee\xfe\xcb\xd9\x75\xab\xd1\xd0" "\x55\x66\x11\x1f\x2d\xa2\x23\xa3\xce\xb7\xeb\x33\xd1\x0e\xc6\x55\xce" "\xa3\xd9\x64\x52\xec\x44\x51\xd6\x4c\x24\x41\xe5\x2d\xd2\x85\x92\xd5" "\xc2\x5b\x30\x5d\x62\x18\xae\x19\x16\xbc\x38\x77\xf3\x01\x3b\x4a\x29" "\x15\xe8\xee\x4b\x30\x3d\x6a\xfc\xe6\x7b\xa6\x71\x40\x07\xc7\x0b\xbd" "\xff\xb4\x28\x56\x82\x70\x1e\xb8\x64\x83\xdf\xe3\x59\x05\x76\xbe\x0a" "\xc0\xa9\x61\xf2\x96\xc7\xeb\xc1\x56\x55\x45\x31\xe4\x0b\x09\xd2\x43" "\xf7\x60\xbe\xfa\xb8\x15\x58\x3b\x23\xc7\x6d\x8c\x1d\xe5\x8d\x05\x0a" "\xa3\x64\xdc\xac\x78\x5d\x4d\x75\x5e\x2c\x4b\x76\x04\x1d\x68\xe8\x66" "\x9d\xdd\xcd\x55\x86\xee\x1f\x15\xbc\x82\x6a\x33\xac\x65\x1e\x39\x9f" "\x69\x0c\xf1\x9a\x23\x6d\x5c\x63\x9d\xdd\x3a\x13\xf1\x86\xf9\x2a\xf0" "\xbe\x07\xfd\xf5\xfd\x7a\x98\x55\xcf\x63\xaf\xf9\xc5\xe3\xb4\xb7\xbb" "\x46\x5d\x71\x2c\xa9\xa6\x17\xfe\xf3\x22\x96\xc5\xa6\xdc\x5b\xc2\x15" "\x62\x82\x22\x0c\x5e\xd8\x66\xa8\x31\xa4\x51\x78\x57\x77\x98\x81\x5d" "\x3f\x4f\x26\x5a\xbe\xf0\x1c\x13\x43\xd9\x4e\xed\xfe\x6e\x34\x5e\x69" "\x85\x7b\x5c\x09\xff\x17\x20\x42\x01\xd1\xad\xc2\x3d\x23\xe7\x86\xd1" "\x01\x42\x2d\x2a\x88\x06\xa2\x3c\x53\x05\x43\x63\x78\xd6\x72\x3d\x07" "\x13\xd4\x7f\x58\x5f\x80\xef\x50\x53\xd9\xee\x09\x0a\xd6\x5c\x6d\xb3" "\xc8\xd4\xd5\x67\xc5\x41\x0e\x98\x1b\x1d\xdf\xf4\x80\x87\x8a\x9a\x85" "\x52\x64\xc4\x8b\xb0\x3f\x0d\x6d\x6a\xd6\x3f\x6a\xe5\x2d\x01\x3a\x60" "\xa5\x77\xb0\xef\x6b\xf6\x8d\x51\x2e\x27\x18\x29\x3e\x57\x1e\x51\x8f" "\x8b\x0d\xf1\x58\x62\x57\x2c\xc0\x28\xd1\x24\xc1\x58\x5c\x74\xdb\x05" "\x54\x1c\x95\xea\x39\xbe\x79\xb8\x10\x7a\xe4\x2e\x59\x04\x09\xfa\xb9" "\x1e\x93\x9a\x3c\x1d\x01\xfe\x5e\xf0\xe3\x88\x0e\xee\x49\xa1\xb6\xbf" "\xb3\xf8\xda\x23\x9f\xa7\x4a\xb1\xf5\x51\x44\xe4\xba\x70\x34\x86\xf9" "\xe6\x99\x8b\x12\x94\xec\xf2\x50\xa3\x83\x97\xe4\xa3\x96\x2e\xa8\x02" "\xaa\x03\xd0\xc6\x94\x7e\xf4\x57\x93\x89\x77\xaa\xbb\xfa\x7e\x1c\x21" "\x30\x39\x4c\x91\xff\xce\xae\x38\xa3\xb8\x90\xfe\x52\x4a\xf8\x86\xbb" "\x1c\x11\x77\xc6\x8b\x6b\x27\x4c\x78\x84\x66\xa9\x49\x33\xae\x2a\xa6" "\xe4\x91\xd0\xd6\xe8\x64\x5f\xd4\x94\x25\xca\xec\x6c\xe4\xdb\x25\xa8" "\x8c\x79\x1e\x37\xfb\xb9\x7c\x0b\x84\xa2\xa6\x1b\xe0\x43\xe6\xa3\xe0" "\x16\xc9\x45\xbc\x08\x08\x78\x97\xcd\xe9\x60\x73\x24\xd7\xb0\x51\xb2" "\x18\x7c\x41\x26\x24\x5f\x88\x66\x96\xf3\xc1\x4b\xe5\x0f\x73\x6e\xcf" "\x25\x60\x9c\xdc\x92\xa4\x01\x60\x0b\x10\xd4\x7b\xe4\xd7\xc9\x5d\x22" "\x27\x82\xe9\x0d\xaf\xcf\xe2\x31\xe7\xbe\xac\xfd\x0a\x4e\x7b\xaf\x6b" "\x71\xc5\x18\xd0\xe3\x21\x46\xc5\x87\xe1\x44\xe5\xc1\x1f\xe9\x88\xe7" "\xce\x76\x56\x86\xdd\x69\xc1\x67\xc6\xda\xf9\xe8\x7e\xa5\x68\x3e\x7f" "\x31\xaf\xb1\xc0\x10\x4e\x8a\xfd\xce\xef\x27\xf2\x65\x32\xc1\xc6\xc7" "\x49\xa6\xf2\xe2\x0e\x7b\xa3\xa6\x8a\x96\x0d\xba\xf1\xb5\x35\x66\x5c" "\xd2\xcc\xac\xb1\xf9\x56\x79\xf2\x60\x2c\x2e\xb1\x23\xd6\x37\xed\xe6" "\xfd\x1d\xf4\xc1\x9f\x46\x18\x8a\xb9\xbd\x5d\x02\xe4\x6f\x99\x8b\x09" "\x6a\x05\x51\xef\x96\x73\xcf\x4b\x55\x1a\x41\xa2\xa5\x4c\xf7\x20\x3f" "\xc9\x95\xc5\x26\x1b\xd9\xaf\xd9\x62\x9c\x5c\xba\xa2\x1b\xb8\x78\xd5" "\x37\x89\x75\x6f\x59\x6d\x5a\xcc\x1e\x31\xbe\x9b\xa2\xb6\x26\xa4\xfe" "\x18\x69\x87\xd5\xf3\xd6\xe1\x2c\x69\xe1\x6c\xcd\x47\x26\x01\x03\xb1" "\x95\x04\xa7\x8c\x58\x52\x98\x0b\x39\xb3\x5e\x6a\x56\x79\xd5\x75\x48" "\x16\xe8\xdd\xbb\x14\x35\xcd\x6e\x91\x7e\xcc\x97\xd9\xe8\x40\xdc\xa1" "\x5b\xaf\x1e\x14\x20\xb8\x02\x3d\x7a\x82\xa1\x1b\xba\x81\x49\xdc\xfa" "\x58\x30\x7a\x35\x48\xbb\x24\x2e\x43\xf2\xb5\xd7\xad\x67\x32\x7f\xcc" "\xa8\x8b\x08\xcd\x81\xe3\x1c\x59\xd8\xa3\x92\x32\xbb\x33\xfe\x23\x1b" "\x13\x44\x95\x2c\xe6\xfd\xbc\xe0\x9f\x1c\x1d\x16\x83\x86\xab\x84\xae" "\x82\x91\x08\x1a\xa2\x90\xe4\x83\xe9\x6f\x67\x16\xe7\x04\x4d\x13\x10" "\xee\x71\xb3\xaa\x8c\x21\xcd\x3a\x3d\x39\x17\x00\xfb\x53\x24\xc1\x9e" "\xff\x20\xff\x04\x9a\xfe\x58\x95\xd4\x2a\x5d\xda\xbb\x3a\x07\x28\x8c" "\x09\x57\x3f\x0e\xff\xed\x6f\x24\x2e\x15\x30\x92\x0c\x55\x7a\xc0\x17" "\x9c\xdf\x3a\x17\x88\x38\xc0\x5e\x1f\x61\x66\x8e\x57\x9b\x87\x27\x59" "\xdd\x8a\x6f\x23\xe8\xb7\x70\x57\xe2\xd8\x0f\xec\x8d\xf1\x61\xf2\xee" "\x60\x96\xc5\x7a\xc1\xba\x35\x27\xa8\xca\xf6\x47\xf6\xc1\xe2\xe1\x5a" "\xfd\x43\x4e\xd6\xa1\x00\x08\x09\xde\x6b\x97\x16\xd8\x35\xb6\xf5\x96" "\xd7\x35\xe7\x66\x53\xe1\x7b\x49\x15\xc0\xe7\x7e\x4e\x9a\x91\x4a\x44" "\xa6\x63\x1b\x7c\x27\x37\xbb\x9c\x9d\x9e\x67\x66\xb4\xe0\xb2\x13\x97" "\x9d\x87\x55\x4b\x0f\xf0\x37\x3b\xa1\x67\x5c\x60\x14\x59\x49\x9c\x0a" "\xc7\x0b\x40\x70\x45\x8c\xe0\x89\x68\x10\x9a\xee\xc7\x13\x34\xd2\xdc" "\x6f\x09\xe8\xc2\xcd\xb1\xb7\x54\x88\x73\x08\x5d\x38\xcb\xf8\x10\x67" "\x66\x80\x7c\xf3\xb9\xaf\x65\x6e\x61\xf1\x1c\x5b\xbc\x3f\x37\x08\x68" "\x30\x07\x60\x9d\xf3\x4b\xd0\x89\x3d\xb4\xc9\x3b\xbe\x34\x51\x35\x1f" "\xd5\x8f\x4f\x1a\xcf\x8d\x19\x9d\x23\x86\xbf\xfd\x2d\x4c\xcb\x68\x8d" "\xb6\xfb\x28\xd5\x03\x02\x04\x08\x5b\x99\xc0\x1a\x2e\x63\x45\x73\x38" "\x6f\x76\xd8\x4a\x9d\x4d\x6d\xb2\x4a\xb0\xa8\xe7\x25\x5b\xf0\x01\x53" "\x42\x01\x81\x0b\x15\x6e\x7a\x3c\x6c\x9d\x88\x7f\x02\x3d\x23\x15\xd8" "\x5b\xeb\x88\x26\xcc\xab\xeb\x79\x72\xa9\xc4\x9b\x03\xd2\x6e\x4a\xa4" "\x39\xe2\xa4\xc2\xf8\xcc\x1e\x82\x7e\x08\xe9\x4e\x5d\xce\xf2\x0d\x05" "\xc3\x9f\xf1\x36\xfd\xe1\x9f\xef\xfd\x4b\x16\x8e\x1e\x3d\xa3\x21\x02" "\x3c\xea\x93\x94\x6a\xe8\xad\x9b\x59\x69\x90\xbd\x90\x9d\xb3\xc4\xf0" "\xd5\xa1\xe9\xd9\x6d\xae\xba\xf9\xbe\x13\xd2\xf4\xe8\xa5\xe2\x68\xee" "\xec\x50\x28\x47\x92\x82\x93\x9f\x1f\x4d\xad\xce\x7b\x6c\x8f\x53\xe9" "\x8a\xbf\xee\xd4\x39\x85\x39\x9f\x0b\x37\x29\x71\xd0\xb9\x32\xa1\xa9" "\x0b\x6c\xd3\xab\x65\x51\x92\xdc\x87\x99\x88\x9c\x2a\xa9\x1f\x70\xb7" "\xe3\x76\xe4\xa3\x0d\xa2\x46\x82\xa4\x20\x88\x70\x25\x50\x89\xa4\x2c" "\x49\xca\xd6\x06\xf3\x8c\x4c\x5a\x0b\xaf\x18\x07\x75\xa2\x53\xcd\x03" "\x3e\x48\xad\xe5\xd4\x26\x7d\xac\x95\x62\xf4\xce\xf1\xc0\xe6\xc4\x61" "\xbb\xc8\x12\x9a\x51\x51\xb5\x26\x02\x13\x29\x12\x51\xa6\x11\x0d\x4a" "\x55\xa3\xfe\xe0\x98\x9b\x24\xf3\x85\x64\x63\x61\x58\xdd\x6a\xe0\x88" "\x46\xb9\x38\xa3\x58\xa5\x1e\xbe\x89\xa5\x75\xba\x73\x5f\xde\x7a\xbc" "\xf4\x94\xa4\x1b\x3c\x52\x24\x1a\x1a\x7c\x30\x74\x8f\xb1\x64\xbe\x82" "\x37\x5e\x5a\x5a\xae\xa7\xa0\x35\x6f\x6b\xc1\xa3\x92\x46\xd3\x50\xfc" "\xd5\x18\xcc\x28\x42\xe9\xc2\x6e\xff\x1d\x2e\x72\x1e\x95\xda\x88\xed" "\x35\x1d\x66\x8d\x31\x60\xe3\x06\x86\xcb\x1c\xf9\x3c\xcf\x82\x9c\x9a" "\x27\x90\xda\x2e\x70\x15\xe2\x9a\x42\x21\x0c\xb4\x8d\x3f\x3d\xa7\xbb" "\x01\x95\x7f\x68\xbf\xc7\xc3\x69\xd5\x61\x92\x1d\xc7\xe7\xdc\xc2\xc4" "\xdd\x44\xc6\x17\xee\x9d\x40\xc7\x4f\x38\xd4\xe9\x90\xc7\xe0\xf9\xf0" "\x27\xac\xaf\x47\xa9\xf9\x11\xeb\x3b\xa7\x74\x07\xac\x05\xdb\xb3\x3b" "\xa0\xfa\x17\xd0\xac\x48\x71\xc7\x91\x6c\x29\x18\xd1\x66\x7f\xad\x62" "\x64\x41\x94\x7c\x75\x5c\x98\x89\x9d\x6a\x7b\xe2\x9a\x6d\xf8\xf5\x11" "\xb8\xec\x80\xc2\x0e\xa4\xb8\x1f\xb8\x5b\x16\x1e\x47\x5b\x38\xef\xf8" "\x0e\xc4\x13\xeb\xc6\xdb\x0a\x9b\xf4\x9d\xf9\x5c\xae\xd9\xbd\xcf\xf5" "\x3a\xfa\xe4\x4a\x84\x3c\x8c\x31\x8d\x47\x76\x8b\x6b\x78\x15\x31\xd3" "\x51\xf2\x03\xb4\x01\xad\xb2\xc9\x7f\x4b\xaf\x33\xd9\x5c\xe7\x82\x53" "\xd7\x35\x2c\x66\xf1\x33\x89\xec\x06\xb9\x37\x3f\xd0\x62\xc5\x2d\xae" "\x3a\xfd\x0e\xc1\x17\x61\x02\x56\x8a\x81\xb5\xdd\x20\xf4\xdb\xd2\x34" "\x6b\x5a\x02\x06\x0c\x59\xae\xe0\x59\x52\x84\x98\xa5\x96\x11\x02\xb1" "\xcd\x07\xe7\x98\x0e\x78\xe3\x5e\x6a\xc1\xa1\xe0\x79\x22\x95\xee\x1f" "\x89\xee\xb5\xf0\xaf\x02\xe7\xef\xbb\xcb\x85\xbc\x29\x19\xbe\xb0\x8c" "\xef\x39\x25\xc2\x26\xf2\x7b\x12\x6a\xcb\x3f\x55\x69\xb2\xa7\xcc\x3a" "\xe7\x94\x42\x24\xdf\x18\xfc\x08\xf6\x33\x22\x60\xf7\x8e\xc1\x48\xbc" "\x29\x7c\xd1\xec\x05\x48\x47\xc6\xa7\xf8\x76\x6a\x78\xb2\x70\x03\x8f" "\x70\xc9\xbe\x38\xc1\xb2\x39\x44\x99\xbd\x83\x78\x22\x73\x6c\xa3\xf2" "\xbd\x45\x2e\x2d\x50\x92\x47\x6e\xba\x2d\xb5\x7a\xca\x4c\xf6\x11\xb0" "\x1d\x3f\xea\x14\x1c\xc3\xd6\x90\x04\x34\x8e\x2c\x55\xbc\xfa\x14\x17" "\x4b\x12\xdc\xee\xe5\x06\x1a\x28\x26\x51\x2e\x6b\xb8\x3b\x57\xd1\x62" "\xbf\x72\xe6\x3f\xd6\xe1\x98\xa0\xc5\x9a\xc3\x04\x0b\x97\x83\x80\x82" "\x7a\xa1\x63\x33\x39\x74\xaa\x86\x07\x84\xf0\xe2\xe7\x6d\xc7\x92\x09" "\x7a\x74\x99\xf0\x82\xae\xad\x5d\xeb\xc0\xe9\x20\x97\xd8\x4c\xc0\x97" "\x24\xe4\xcf\x8b\x4d\x8a\x4a\xdd\x73\x9e\xbc\x67\x17\x50\x41\x8a\x8f" "\xf5\x1d\xb8\xd1\x87\x79\xa3\xaf\x3d\x8f\x5e\x63\x89\x9a\x38\xcb\x20" "\x3a\x87\x57\x19\x70\x2f\x68\x78\xf8\xdd\x4f\xb8\x1b\x68\xa1\xc1\xa7" "\x5a\xe9\x06\x98\x69\x01\x27\x9f\xa1\x40\x16\xe5\x53\x6e\xa9\xab\x54" "\x03\x83\x2d\xea\xac\x38\x8a\x34\x05\x7c\xcf\xeb\x36\x1d\x20\x76\x87" "\xbb\xae\xe1\x3a\x54\x13\x64\x3f\xcc\x25\xab\x0e\x02\xe2\x52\x62\x08" "\x32\x0e\xf7\xaf\x68\x9c\xad\xef\x71\x48\x46\xfb\x49\xfe\x57\xc2\x09" "\x8c\x0c\xae\x5d\xa0\x0f\x8c\x8b\xb9\x5b\xf2\xa5\x97\x56\xe9\x1b\xf7" "\x64\xca\xb1\x41\x58\xc7\xec\xd9\x0c\x7a\x49\x73\x40\x90\x7e\x99\x45" "\x78\x32\x38\xbd\x56\xef\x25\x58\xda\x74\x46\x70\xad\x40\xda\xfa\xd5" "\x53\xa0\x4b\xb5\xf9\x6c\x8c\x84\x3e\x3c\xca\x4f\xa1\x5a\x26\x25\x81" "\xc6\x00\xda\x2d\x36\x29\x78\x64\xd0\x41\xdc\x49\x2e\xea\x3c\x63\xd4" "\xdf\x0f\x7b\xb1\x4f\x78\x23\xe1\x10\x03\x14\xf3\x49\xfd\x02\x6f\xc0" "\x00\xff\x39\x36\x78\xaa\xca\x29\x68\xa6\x94\xb4\x2c\xb8\x46\xcb\x2a" "\x7b\x8b\x8c\x9e\xda\xad\x7b\x56\x8b\xe2\x37\x2c\x82\xe2\x85\x98\x3e" "\x51\xeb\x3c\x2b\x5c\xab\xc6\x7f\xc4\x6a\x6e\x4c\x84\xd8\x6c\xc8\x36" "\xf3\xbd\x6e\x6d\xf6\xc9\x6d\xe4\x4b\x6b\x94\xcd\x1f\x04\xd0\x03\x99" "\x34\xae\x3d\x71\x2c\x9d\x98\xeb\x0a\x76\x7e\x56\x71\x4d\xad\x24\x91" "\xfc\x45\x22\x4c\xb7\x69\x8c\x16\x51\xb6\xac\x44\xf3\x15\x4d\xec\x45" "\xe3\xe7\x1a\x94\xe0\xe0\x8d\x93\x18\xb6\x71\xea\x37\x46\x72\x5d\xad" "\x02\xb6\x4d\xad\x36\x5c\x6b\x63\x91\xec\xfe\x23\xc2\x6b\x49\x87\x67" "\xba\x45\x9a\xe8\xf4\x8c\x53\x34\xa2\x91\x53\x5a\x49\x00\xf0\x14\x79" "\x69\x34\x64\x82\x30\x1d\x79\xcd\xe3\x4c\x1b\x7a\x67\xa4\x01\x5e\xcf" "\x62\x3b\xed\x08\xaf\x24\xa7\x32\x22\xcb\x5e\xa4\x73\x9e\x3e\x81\x2a" "\x6f\x48\x28\x1c\x02\xf9\xa7\x65\xfc\xa2\x68\x68\xfc\x2f\x46\x6f\x48" "\x48\x60\x21\xf3\x89\xdc\xab\x4f\x72\x98\x24\xd3\x60\xe7\x65\x9d\x21" "\xc7\xce\xb2\xb5\x80\x38\xc2\xf5\x36\xe5\x09\x04\x37\x35\x9d\x4a\x04" "\x9a\xc2\x08\xd0\x60\x59\x89\x6f\xf3\x91\x8a\x99\x73\xaa\xbb\x28\x68" "\x1c\x26\xd5\x23\xaa\xc6\xe3\x9b\x93\x80\x06\xa3\x63\x12\xbb\x3a\x30" "\x72\x39\x43\xd3\xf4\xfb\x23\xed\x9c\xd4\x49\x86\x71\x71\xe7\x74\x1b" "\xbc\xc3\xfa\x47\xcc\x90\x28\x45\xa3\x82\xf4\xe8\x4a\xc2\xcc\x99\xb5" "\x02\x28\x7c\x41\x60\xea\xd8\x1c\x3b\xbf\x7f\x85\x98\x97\xb5\x5b\xae" "\x3c\x0d\xe5\x94\xbf\x24\x34\x25\x1f\xa2\x3d\xf6\x8d\x92\xeb\x10\xd9" "\x7a\xcc\x4f\x02\x0c\xf0\xa2\xa3\x82\x8e\xf7\x00\xd0\x13\xb1\xe1\x5d" "\x05\xa6\xcb\x29\xd1\xa7\x4c\x73\x84\x19\x48\xb5\xbe\x68\xaf\x3d\x6e" "\xf3\x91\x45\x05\x54\xc9\x00\x24\x6b\x65\x77\x09\x0e\x1c\x15\xfd\xab" "\x37\x4c\x94\xc0\x4b\xf2\xc4\x83\xb3\xd2\x77\x8e\x19\xe0\x24\x1b\x0e" "\xe1\x5e\xf4\xd8\x78\x53\xf0\xdc\xcf\xda\x5c\x73\x94\xd0\x58\x0a\x84" "\xa9\xd1\xad\x5d\x5f\x80\xd6\x94\x36\x85\x0d\xc2\xd4\x50\xaa\x99\xc8" "\xd1\x8a\xdb\x8e\x49\xc5\x0a\xfb\xa0\xcb\x76\xb2\xa7\xf6\xcc\x28\x2e" "\x62\xf9\x7d\x2e\x98\xd2\xe4\xdd\x82\x1c\x19\xf0\x23\xab\x11\x81\xc3" "\x5c\xac\xa0\xed\x19\x35\xeb\xae\x32\xc5\xfb\x2c\x05\x6e\xdf\x14\x05" "\xbd\x74\xbd\x23\xfe\xc6\x34\x0c\xf3\x8e\xa8\x12\x91\x43\xe4\xfa\xeb" "\x13\x27\x4e\xc2\x2c\x52\xfe\x21\xc5\xdc\xad\x81\xfe\x3d\x5c\xfc\x81" "\x2f\x08\x00\xe2\x9d\xf3\x39\x23\x2c\x12\x19\x4c\x1c\x95\x4b\x79\x91" "\x20\x98\x92\x1d\x47\x3a\x6c\xd1\x2d\x77\xce\x1e\xd9\x12\xbd\x9c\x6d" "\x88\x48\x47\x38\x83\x97\xdf\xc9\x9f\xc9\xa7\x76\xae\x4a\x9c\xf9\xd0" "\xde\x7a\x8c\x4c\x83\x3c\x34\x07\x07\x77\x22\x53\x65\xa7\x13\x67\xab" "\x27\x5f\xee\xf6\x98\xd3\x17\x7d\x22\x22\x11\xfd\xf6\x8c\xcc\x21\x88" "\x84\x45\xf6\xb7\xa9\xa0\xa4\xce\x5b\xc9\x59\x21\x7c\x5c\xa0\x50\xbb" "\x0b\x81\xfd\x57\x0c\x09\xd4\xcf\x55\x09\xb2\x87\x07\xaa\xa4\xdb\x99" "\x1a\xba\x11\x09\x70\xc2\x15\x85\xfd\xd8\x2d\xad\xfc\xcc\x8a\x83\xf3" "\x74\xa5\x30\xdf\x2c\xe0\xc0\xe3\x88\x84\xd6\x10\xc2\xc7\x1e\x96\x48" "\xac\x79\x49\xff\x4e\xf6\xa9\x62\x29\x7d\xff\xee\x70\xda\xf2\xa5\xc1" "\xee\x35\xe8\xff\x13\x0c\xc4\xc9\xaa\x83\x71\x53\xa6\xbc\x6a\x3e\x79" "\xa8\x5e\x1d\xf4\x45\xbb\xaf\x42\x41\x12\x28\x24\xb4\x5e\x44\x79\x5e" "\x8a\xce\x5d\x0e\x1b\x96\xf5\xa7\x49\xcc\xa3\x81\xaa\x68\x46\xf9\x76" "\x50\xaf\xe1\x42\x7f\x6c\x8f\x34\xae\x22\xd9\x75\x96\x3a\xd3\x61\x45" "\x22\x36\x42\xa1\x70\x1a\x41\x9b\xb0\xf5\xec\x78\x75\xcc\x30\xed\xa9" "\x10\xbb\x59\x70\x8d\x8a\xf6\x71\xc0\x03\x5e\xd7\xf1\x46\x66\x78\xff" "\x7a\xd7\x6d\xfc\x84\x06\x5c\x36\x53\x73\x81\x62\x95\x7c\xb6\x3e\x02" "\x6e\xcc\xe7\x04\xb6\x6b\x0e\xcc\xb8\x93\x14\xf0\xe6\xa8\xc4\x73\x1d" "\xa6\x4a\x3e\x7e\x1d\x8d\x9b\x16\xfe\x3d\x14\xac\x10\x71\x52\x6d\x5a" "\x29\x68\xea\x80\xde\x0d\xd5\xa7\xb1\xc2\xa0\x8b\x6f\x8b\x7d\x36\x11" "\x72\x0a\xfb\x82\x76\x9e\x77\x7b\x90\xde\x5c\x42\x70\x30\xd0\x9f\x15" "\x84\xa7\x32\x93\x8c\xf2\x27\x16\x40\x42\x3d\x74\xdd\x3f\x56\xe7\x1d" "\x4b\x33\xc6\xa0\xd9\x01\xf1\x1e\x91\x21\xa3\x67\x89\x2f\x27\xe6\x3b" "\x84\xf3\xd6\x4c\xc9\xef\x48\xae\x1c\xb2\x33\xdc\xe9\x0a\xb2\x1f\x42" "\x18\xa9\xcb\x50\x81\x6a\xd6\x4d\x76\x73\x94\xb0\x8b\x8f\x16\x20\xa2" "\x38\x4f\x1d\xcc\x8d\x46\xf7\x7a\x75\xdb\x5e\x5c\xf4\x16\xa5\x1c\x76" "\x69\x3a\xa8\x6c\x19\x5b\xc1\x83\x32\x5a\xc0\xdf\x46\x38\x01\x70\x93" "\x43\xa8\x83\x89\x59\xbd\xc4\xbe\x5e\x57\x10\xd3\x5c\x00\xf2\x04\xc5" "\x51\x4e\x51\x11\xe1\x92\x25\x0e\x88\x6e\xe7\xb2\x62\x09\x5d\x1e\x72" "\xc9\x40\x8b\xb0\x1d\xdc\xe0\x24\x05\x06\x2d\x5d\x1e\x68\xe7\x31\xc0" "\xc5\xf9\xcb\x79\x26\x7d\xdc\x16\xec\x5a\x8e\xb4\x49\x00\xa8\xbf\x36" "\x6f\x1a\xb6\xfa\x3b\x04\x3c\x9e\x68\x8c\x2b\x8c\x39\xea\xc3\x94\x10" "\xd2\x5f\xb5\xf0\x18\x9d\xf6\x7f\xe1\x64\xf4\x45\xbf\x41\x1c\xa4\x58" "\x38\x59\x7a\x19\xc9\xb2\x98\x13\x3b\x97\xa8\x19\xad\x5b\x66\xe8\x72" "\xe4\xda\x56\x32\x0c\xc6\x9f\x2c\x5a\xe3\x37\xff\xc0\x38\xbf\x14\x99" "\xad\x28\x89\xaf\x5c\x8b\x8e\xd3\xe5\x0e\xbf\x21\xba\x78\x8c\x5f\xd4" "\x05\xab\x2e\x27\x94\x90\xea\x93\x10\xdc\x57\xee\x63\x08\xc3\xee\xe6" "\x50\xf0\x79\x60\x0a\x5b\x11\x01\x28\xfe\xdf\xab\xfc\x26\x87\x8e\x6b" "\xb4\x2b\xfc\x66\x69\x81\x77\xa0\x68\x2d\x1b\x73\x46\x03\xbc\x73\x69" "\x77\xb9\xfa\xdd\xc4\xeb\x42\xad\x56\x2f\x1a\xde\x04\x49\xf8\xa8\xb7" "\x16\x30\x26\xee\x72\x93\x67\xcd\xda\x42\x94\x1d\x34\xd0\x85\xce\xca" "\x42\xdd\x1d\x79\x96\xe6\x67\x74\xd6\x15\x2c\x19\x67\x75\x14\xfd\x29" "\x7f\x3d\x09\xfe\x75\xcb\xe2\xc9\x2e\xd7\x35\x5a\xfa\x01\x49\x0b\xe0" "\x55\x59\x2d\x80\x61\x87\x6a\xc1\x8b\xe9\xda\x04\x48\x01\x30\xd2\x31" "\xa5\x11\x32\xda\x95\xb7\xa3\xe7\xd6\xa6\x04\x2f\x5e\xdc\x52\x5c\x6d" "\x69\x73\xa2\xb5\x2e\x1c\xcb\x50\xfe\xf7\xab\xef\x4c\x54\x50\xe7\x44" "\xcc\x8a\xc3\x75\xfc\x97\xd1\x83\xd2\x57\x99\x08\x5d\xa7\x1d\x9c\x04" "\xf1\x1f\x5d\xf7\x0c\x63\x28\xf0\xfd\xac\x05\x8a\x17\x08\x48\xd2\xaf" "\xa7\xc7\x06\xff\xbc\xbc\x1f\xa1\xe8\x27\x5e\x6b\x95\x6e\x23\x5f\x23" "\xc4\xc7\x8e\x28\x3c\xa3\x27\x2f\x4d\x0f\xf8\xed\x3c\xe4\x9e\x07\x58" "\x8c\x25\x76\x06\x27\xf9\x3e\x15\xf9\x8a\xd0\xe1\x0f\x7b\x91\x2f\xa2" "\x23\xa4\x9a\x49\xb3\xbb\x63\x7f\x1a\x4b\x86\xbf\x9b\x92\xe5\x88\xe4" "\xdb\x61\xe2\x81\x9b\x16\xf3\x7f\x0f\xc7\x1b\x5a\x5c\x2f\xf0\xc7\xa5" "\x52\x5e\xbd\x31\xf3\x1e\x4b\xf7\xa9\xed\x71\xfc\x51\x47\x64\x05\xac" "\xf8\x4f\x42\xfb\xa3\x7d\x2e\x88\x11\xbb\x9b\x75\x9d\xae\xed\x3c\x52" "\x76\x4d\x60\xab\xa0\x64\x76\xb2\x39\xd3\x65\x2c\x50\x0e\x44\x7a\x1e" "\x56\x8d\xab\xb7\xcc\xcf\xd6\xd8\xfe\xab\xe1\xaa\xa1\xdc\x03\x18\x5a" "\xbc\x69\xf4\x5e\xbc\xd4\x5b\x45\xb4\x2d\xfd\x49\x65\x9a\x3c\xb4\xd6" "\x2a\x71\x5c\x9a\x20\x18\x33\x6b\xf9\x55\xbd\x70\xdf\xed\xd8\x96\xd4" "\xd0\x9e\x07\x49\x33\x95\x63\x54\xcb\x3d\x09\x1d\x1d\xf1\xcc\x80\x54" "\x9c\x7c\x5f\xa8\x4d\x2a\x67\x2f\x76\xec\xc7\xa6\x68\xad\xfa\x1f\xea" "\xb3\x60\xed\x18\x91\x8c\x78\xbf\x67\xa4\x14\x22\x58\x86\xfd\xbd\x00" "\xa0\x8e\x0e\xf5\xd0\xbd\x77\x18\xbb\xd4\xc7\x2d\x4b\x05\x2a\xa6\xf5" "\xc1\xb6\xde\xbc\x4e\x1c\x37\x84\xf1\xf0\xb1\xca\xdb\x65\x5a\x59\xb3" "\x42\xcc\xd6\x8f\x6d\xa4\x6e\x81\xaa\x46\x46\xd0\x35\xd6\xf9\xd4\x7c" "\x00\xa5\xec\x93\x2f\x6a\x00\x46\x97\x35\x40\xb9\xb3\x35\xaf\x17\x2e" "\xd6\x69\x3b\x62\x61\xb5\xae\x87\x15\xa1\x4a\x06\x51\x2a\x31\x8b\x6a" "\xa6\x60\x42\x03\xd5\xdf\x47\x9d\x6a\xde\xe0\x97\x91\xfb\x48\xd6\xa1" "\x82\xd2\xe1\xc4\xe6\x90\x5b\xb2\xc1\x2c\x6b\x73\x93\xb6\xa9\x0a\x91" "\x57\xeb\x71\xf9\xc9\x9b\x38\xf9\x53\x0f\xd5\xe4\xe0\x2c\x9d\x97\x11" "\x73\x97\x7c\x9c\xde\xdb\x7d\xee\xc0\xd0\xd0\x34\x22\xc5\x38\x9d\x99" "\xdd\x05\x21\x45\xba\x60\x86\x31\x2a\xc5\x33\x39\x31\xfc\x3d\x6c\x0f" "\xaf\x41\x20\xbc\x94\x24\xbd\x39\xe0\xc1\x9a\xc8\xfa\x92\x55\x64\x22" "\xb5\xcd\x6a\x1c\x5c\x9b\x7f\x58\x6b\x3b\xbb\x68\xfd\x91\x97\xa3\x1e" "\x58\xa1\x11\xc5\xc8\x3b\x8c\x79\x6f\xb5\xc9\x26\xe8\x98\xe7\xb6\x5a" "\xbf\x13\x4c\x5d\x79\x4d\x74\x67\x9e\xc3\xe5\xc0\x33\x4d\x18\xba\xf2" "\xe8\x03\x4a\x39\xea\xe2\x47\x9c\x00\xfc\xbb\x91\xe9\x46\xcb\x73\xb5" "\xd1\x1b\xd5\xc3\x2e\xbd\xa6\xe0\x35\x7b\xa2\x3d\xa1\x96\x8f\xfb\x32" "\xcc\x82\x58\x3c\xcc\x05\x17\x71\x19\x04\xdf\xa8\x82\xa4\x33\xab\x08" "\x7c\x2c\x77\x69\xa5\x29\x21\x80\x86\x21\xc2\xe3\x70\xed\x97\x34\xee" "\x6b\xe5\xb3\xac\x35\x72\xd3\xcc\x5e\xfd\xa2\xb3\x39\xa8\x78\xaf\x02" "\x98\xcb\xf6\xeb\x8b\xda\x59\x4d\x9a\xe8\x1c\x84\x86\x3e\xf8\x25\x13" "\xc5\xa7\xec\x0e\xb9\xfb\xbe\x0b\x2f\x33\x3e\x4e\xf8\x71\x87\x29\x98" "\xce\xce\x50\x40\xb0\xdb\x69\x5f\xa5\xb2\xb0\x8f\x3e\x58\x01\x47\x93" "\x5d\xa1\x73\xca\xec\x45\xfb\xf1\x20\xe5\x8b\x8f\x38\x5a\x44\xd2\x47" "\x34\x7e\x1a\xbf\x08\xc1\x89\x74\xdd\xf1\x17\x2e\x71\x05\xa2\xa3\xbe" "\x0a\xb1\xad\x75\x27\xae\xbd\x8d\x6a\x52\x00\x72\x58\xc6\x60\x81\x51" "\x54\x41\x84\x3b\x91\x40\x1f\x22\xc4\x10\x4d\x17\x14\x93\xdf\xbf\x07" "\x26\xa2\xc0\x30\x83\xaf\x7f\x1a\x69\xd1\x89\x40\x1b\x58\x50\x87\x57" "\x41\x01\xc5\x14\x0a\xce\x97\xd1\x9f\xd0\x40\x68\x60\x4d\xd3\x92\x47" "\x9c\x86\x2a\x23\x81\x63\xb0\x29\x28\x5d\xf2\x1b\x9c\x35\xf8\x93\x56" "\xbe\x36\xc5\x85\x31\xde\x79\xc5\x76\xe2\x3e\x04\x17\xc0\xf9\xd0\x87" "\xc1\xbe\xdc\x48\xe5\xcc\x8d\xe9\x78\x03\x14\x15\x4d\x53\x3a\x29\x2f" "\x8a\x2c\x60\x89\xf0\x2b\x06\x0c\x7a\x72\x2f\x78\x67\x12\xf3\x2a\x1b" "\x4b\xff\xee\x51\x92\x89\x75\xf6\x5e\xf1\x9a\xb4\x78\x21\xac\x7d\xdf" "\x9d\xe0\x81\x42\xa6\xae\x46\x3e\x71\x53\xa2\x16\x7f\xec\x4c\x40\x82" "\x19\xd2\x15\x2a\x99\xfc\x19\x3c\x7a\x58\x1d\x8d\x67\x9a\x95\x90\x40" "\x8e\x11\x8b\x5d\x90\x9f\xfc\xb2\xd3\x98\xa5\x1d\x25\x15\x4d\xee\xf5" "\xd0\x3d\xbf\xa8\xe2\x81\x28\x09\x11\x5a\xda\x33\x10\xaf\x4f\x43\x78" "\xb5\x06\x53\x42\x30\x61\xa6\x45\xc4\xff\x0c\x63\xd2\x0a\x2f\x90\xb5" "\x37\xcc\x23\x1e\x10\x32\x16\x30\xc7\x1a\xb9\x07\x90\xdd\x47\xd7\x01" "\xb1\x35\xc5\xb2\xf5\x48\x7b\x3d\xaa\x8d\x08\x45\x04\xda\x41\x04\x05" "\x74\xb9\x39\xc3\x17\x71\xb5\x0e\xb7\x9b\xde\x6a\x18\xb8\x09\x63\x57" "\x30\x9c\xde\xef\x1a\x71\xd7\xb0\x1d\x0c\xe6\xef\x99\xe6\x75\xa3\xa6" "\x97\x82\x55\x82\x5c\xef\x22\x12\xd0\x12\xdb\x1a\x97\x07\xca\x49\x50" "\xf3\x79\xfa\x19\x24\xdf\xb2\x78\xfd\x3c\x67\x52\xdc\xf8\xc9\x6f\x71" "\x22\x19\x74\xeb\xf4\x51\x98\xd3\xef\x60\xfb\x8c\xf9\xa1\x57\x3e\x4d" "\xb7\x45\x67\xf0\x4b\x64\x18\xab\xc1\xb4\x4f\x4e\xb3\x58\xe1\xb5\x64" "\xab\x7f\xf8\xbd\x0a\x80\x95\x87\x7b\xce\x67\x37\xcb\x1b\xbe\x56\x86" "\xcb\x09\x85\xcb\xc4\xac\x93\x04\x9d\x11\x15\x4e\xd1\x09\x24\xb8\xf3" "\x57\xd7\x79\x5e\x07\x5b\xb0\x5e\x8e\x46\xa7\xf5\x74\x8b\x6d\x09\xf6" "\x2c\x11\x48\x1f\x06\x8c\x6f\x7a\x8c\x8a\x0d\x95\xfe\x83\x36\x86\x2b" "\x65\x60\x6f\x15\x27\x54\x8d\x02\x82\x45\xcc\xd2\x5e\x82\x6f\x59\xbf" "\xfd\x35\xf1\xc1\xd9\x32\xdc\x9e\x48\x63\x93\xd8\xe9\xa7\x6d\x8a\xbb" "\xfb\xe8\xae\xd9\xac\xc2\x29\xab\xae\x44\x05\xe2\xb0\x3d\x26\xb9\xe9" "\xa1\xd6\x86\xda\x63\xf2\x45\x16\x32\x5c\x34\xfa\xce\xb8\xbe\xdb\xc6" "\x27\x0b\x99\x82\x1b\xb3\xe6\x50\xd9\x40\xca\xbb\xa0\x5b\xd3\x32\x62" "\xdc\x0a\x82\x5f\x9a\x12\xcd\x01\x7b\xa2\xb2\x1c\x0b\xac\xc7\x4f\xbe" "\x00\x32\xc4\x69\xf6\x56\xc0\xae\x80\x3f\xc5\x76\x39\xe7\x09\x49\x13" "\x33\x9a\xfb\x84\xa2\xca\x01\x16\x09\x1e\x54\x7a\x4c\x3b\x5a\x40\x8f" "\xeb\x93\x73\x75\x67\xe8\x7f\x5a\x6c\x14\xe4\x23\x4e\x16\x21\x8a\x52" "\x12\x7c\xed\xd8\x0a\x3c\x0d\x23\x7e\x9f\xe0\x26\x5d\x8d\xa5\x3f\x96" "\x1f\xe0\xa6\xde\x3d\xf4\xc3\xf0\x99\x4f\xe2\x4c\xe0\x3a\x26\x93\xd0" "\x8e\xd7\x67\x2b\x00\x99\x7c\x2d\x3f\xa1\x73\x56\x74\x56\x19\x12\x39" "\x13\x2a\x99\x61\x8e\x93\xc0\xb0\xe0\xcc\x55\xbf\x78\xcd\xe1\xd2\x60" "\x54\x63\xdb\x24\x9c\x04\x15\xf4\x51\x70\xa4\x5c\xea\x57\x34\x47\x39" "\x57\x07\x00\xa1\xbc\xfa\x77\x4c\x94\x87\xd9\xfe\xb4\xaa\x51\xf2\x3a" "\xd5\xa6\xd6\xbe\x02\x44\x90\x86\x3b\x85\x5a\x95\x57\xbd\x5f\x7f\x6b" "\xf8\xf2\x49\xe7\x19\x3c\x6a\xdb\x55\xbc\x6f\xfc\x5c\x8b\xe2\xf9\x4a" "\xea\x04\x41\x6c\x33\x09\xab\x44\xb0\x3b\x8e\xaf\x24\xe8\x96\xbf\x1c" "\x44\x71\xde\x0d\xcb\x47\x77\xa2\xcc\x5a\xc2\xe4\x80\x91\xbe\x69\x60" "\x98\xe8\x14\xf8\x2d\x06\x08\xc5\x02\x7e\x9d\xb6\x13\xa1\xcd\xe9\x74" "\xc2\x41\x47\x13\xdb\x39\x40\x4d\xea\x6e\xd1\x0a\x4a\xb1\xe6\x30\xc3" "\x02\xd8\xbc\x55\xf7\x40\x2f\xf2\x17\xc9\x91\xa8\xec\x48\x6c\x6f\x32" "\x3f\x28\x3c\xd5\xc3\xd0\x8a\xd0\x5d\xcf\x83\x3e\x2b\x3f\x3b\x4b\x7a" "\x75\xd9\xe0\xc0\x84\xae\x2e\xd3\x21\x38\xaf\x09\xb1\x18\x5e\x78\x51" "\xc2\x01\xc3\x3b\x90\x21\xef\x0f\x37\xb4\xec\xe6\xd4\x83\xdb\xd4\x7f" "\x9b\x8d\xb9\x97\x65\x13\x81\x12\xfe\xbf\xa4\xe6\x9a\x16\xc7\x68\x57" "\x07\xd5\xef\x5e\x7a\x1b\x5f\xdc\xa9\xa3\xb3\x39\x7d\x7d\x19\x16\xad" "\x41\x65\x88\x84\x38\xe7\x88\x15\x14\xb4\x44\x19\xee\xf6\xab\x9b\x6f" "\x28\x35\x3c\x6a\x74\x6a\xad\x58\xb7\xab\x16\xa6\xb2\xf2\xc8\xfa\xf7" "\x40\x07\xdb\xd8\x61\x04\x56\xf1\xec\x1b\xdf\x15\x7f\x04\xcc\x1f\x3b" "\x8a\xef\xdb\xef\x02\xb7\x86\x70\xee\xeb\xc6\x27\xb6\xf9\x12\x41\x3e" "\x9f\xee\x51\x98\x72\x51\x93\x44\xdf\x1c\x3b\xbf\x40\xd6\xb5\x1c\x89" "\xeb\x8d\x7a\xc5\xb6\x81\x73\x36\xf7\x13\x13\xf5\xc7\x66\x10\xae\xbd" "\xf7\x7e\x08\xde\x7d\x49\x57\x7c\x4e\xd5\xf4\x81\x06\xfb\x62\xf5\xc6" "\x78\xf4\xcf\x6d\x54\x72\x3c\xeb\x2e\x39\x64\xb9\x11\x91\xd9\xde\x6f" "\xec\x07\x62\xa0\x82\x3b\x9b\x07\x48\x38\x05\xc8\x1b\x74\x10\xe2\x10" "\xc9\x50\x43\xca\x59\xa7\x0b\x9e\xd0\x5a\xc8\x90\x08\x7f\xa2\xa7\x0a" "\xf5\xdf\x77\x05\xb9\x8b\x19\x18\x9a\x85\x53\x4c\xa3\xd5\xf7\x45\x1b" "\xf5\x69\xd4\xea\x1a\xc9\xb3\x3a\x0e\x83\x89\x6c\xe0\x02\xc5\x15\xaf" "\x6c\xba\xef\x12\x1c\xb8\xa9\xfd\x8b\xe0\x14\x76\x31\xbd\xb1\xe1\x94" "\x04\xa8\x51\x9c\x7c\x5a\xdc\x90\x6a\x0b\xe7\x4f\xc2\xdf\x05\x3b\x6f" "\x91\x69\x8f\x35\x3a\x18\x2f\x8d\xbe\xc5\x0e\x63\xe6\xcd\xda\x30\x5f" "\xad\xc8\x83\x6f\x9d\x40\x92\x98\xc4\xb3\xec\xc6\x6c\x18\x79\x9e\xb8" "\x77\x42\x7c\x91\xa3\x8c\x61\xd4\x51\x6e\xf5\xd4\x04\x81\x69\x20\x03" "\x57\xa7\x90\xa9\x7f\x59\x8d\xfc\x6e\xd9\x35\x68\xb8\x2f\xdf\xa0\x05" "\x33\x4e\x2b\x59\x78\x42\x2a\xb4\x7f\x92\x5b\x76\x35\x60\xaa\xab\x5c" "\x2f\x4e\xe0\x74\x3f\xe4\x04\x67\xab\x14\x7e\x96\xb5\x8d\x60\x3e\x42" "\xd7\x1b\x1b\x90\x3a\xe6\xa8\x07\x9a\xf8\x2f\x75\xd2\x6b\x70\x17\xab" "\x1c\xab\x3e\x5a\x91\x0c\x40\xec\x03\xd8\xe6\x74\x4a\x2a\x41\x34\x4b" "\xc2\x0d\x72\x5a\x4f\x22\xa6\x41\xd4\x82\x1c\x2d\xd8\x0e\xfc\x04\xb1" "\xc1\xef\x41\x63\xf4\x2e\x71\xf0\x95\x7f\x2c\x9e\x8e\xb7\x68\x98\xe0" "\xb4\x7d\x8e\x9d\x26\xdd\xd0\xf2\xc4\xa8\xb7\x70\xc0\x0e\xbd\xf8\xfb" "\x4d\x33\x2c\x99\x87\xc9\xa3\x68\x29\xb2\x54\x13\x7b\x0c\xc1\x0e\xdb" "\x13\xa0\x23\x28\x41\x47\x3b\x3d\x01\x31\x44\x6f\x91\x14\xb3\x05\x10" "\x63\x6c\x0c\xa0\x44\xdc\xad\x33\xcc\xcc\xed\xe9\x04\xc8\x16\xbd\x43" "\xb5\x75\x7f\xf1\x91\xba\x6f\xbd\x9e\x59\xca\x88\x38\x72\x05\xc5\xbc" "\xcd\x45\xf6\x3c\x0b\x4d\x65\x27\x41\x51\x3c\xaa\x51\x9b\x9c\x5b\x33" "\xaf\xc0\x5c\xa7\xfe\xcb\xc0\x1c\xd6\x2a\x34\x41\xa3\x0f\x09\xb0\xf3" "\x30\x37\x99\xe1\x3f\x20\x7e\xbe\xd7\xff\xfe\x66\x3c\x45\xf8\x39\x22" "\x66\xa5\x16\x9d\xca\x53\x95\x13\xed\xb0\xe7\x46\x97\x06\x45\xa5\xb1" "\x24\x47\xb6\xc7\x5d\x6b\x3f\x62\x7f\x00\x00\x00\x00\x00\x00\x00\x03" "\x18\xb5\x61\x2a\x18\x1d\x28\xc5\xca\x46\xfb\xb2\x7e\x0a\x4f\x08\x26" "\x78\x8e\x2b\x8a\x18\xf2\x1e\x81\xe5\xc4\x2a\x2b\xd7\x1b\x15\xe4\x76" "\x29\x5f\x31\x2f\x45\x7f\xff\x96\xfd\x45\x94\x9e\x9d\x08\xa7\xdb\x8c" "\x15\xca\x04\xf5\x06\xa7\xb2\xf3\xde\xcb\xd3\xdd\xb5\x52\x05\x1a\x95" "\x4f\x19\xff\x5f\x76\x2e\x38\x25\x45\xa0\xa1\x57\xb8\xc8\xea\xec\x06" "\x68\x47\x5f\x2f\x4e\xba\x55\x27\xea\xa8\xc0\x6a\x3e\x7c\x09\x01\x0b" "\x32\x47\xc1\x6e\xba\x61\x9c\x11\xc9\x7a\xc4\x41\x5c\x4e\x88\x83\xaf" "\x7d\xc0\x6a\x23\xad\x9a\xbe\x6b\xcf\x3a\x61\x11\x0b\xf9\x15\x9f\x8c" "\x24\x6a\x1d\x71\xfd\x36\xc8\x42\x38\x63\x26\x0b\xe7\x86\xe4\x21\x5a" "\x83\xa0\x57\x3a\xda\xa9\x95\xbf\xc5\xa5\xab\x5c\xd6\x0c\x2b\xb6\x40" "\x7f\x51\x7d\xc8\x2a\x96\x82\x8a\x31\xaf\x3b\xdb\x52\x89\xb6\xcf\x1e" "\x63\xd9\xe4\xc6\x97\xd4\xde\x6d\xa6\xe4\xf9\x46\x9f\x30\x12\xa1\x14" "\xbe\xc8\xd9\xf6\x2c\x51\x17\x64\xf1\xce\x70\x50\x36\x0d\xe3\xf4\xca" "\xbc\xe3\x72\xa7\x64\xc8\x8d\x5e\xc0\x9c\x15\xad\xd3\xf6\x35\x0b\x56" "\xda\x10\xa2\xa2\x7d\xde\xc9\xc7\xd0\x9f\x91\x7c\x4b\x40\x57\xe2\x21" "\x0c\x01\xd7\x21\xd3\x44\xba\x01\x41\x85\x86\x1d\x47\x6d\xd6\x1f\xb1" "\x1d\x47\x42\x1f\xef\x27\x80\x0e\x92\xa4\x77\x5a\x60\x46\x8e\xbe\xa6" "\x67\x0b\x26\xef\x3d\x05\xb9\x8b\x9a\x5e\x62\xe3\xa3\x1a\x97\xa6\x87" "\x03\x8b\x34\x82\x9e\x3a\x53\x04\x18\x67\x66\x97\xf6\x45\x98\x51\x5a" "\xe5\xa3\xc6\x72\xcf\x3c\x10\x6b\x23\xbe\x6c\xd8\x10\x03\x7e\x5f\x93" "\xd8\x79\xcd\x7e\xf1\xd1\xa5\x6d\x85\xf0\x4c\xfe\x87\x07\xa9\x5e\x2b" "\xeb\x6d\xaf\x0b\x44\xcd\x50\x0a\xb4\x4a\xe6\x02\x42\x59\x98\x9a\x3b" "\xf1\xda\x4e\x5b\x66\xe9\xd7\x6f\x7c\x3a\x91\x6f\x5e\x08\x8c\xe3\x14" "\xbb\xbd\xad\x6e\xfc\x93\x0f\x09\x96\x11\x6e\xac\xd3\x18\x6c\x70\xef" "\xaf\xca\xac\xf1\xf4\x19\x63\xa1\x51\x35\x68\xd7\xcc\xd7\xc7\x47\x15" "\x88\xf4\x91\xed\xb9\x07\x48\x24\x77\x2e\x3d\x8b\x11\x53\x9b\xc8\xdc" "\x1d\x50\x43\x41\x70\xe2\x07\x43\x98\xef\xa8\x37\x28\x85\xb5\x4f\x57" "\xe7\x07\x42\x0e\x79\xeb\xe7\x59\x79\x68\xf3\xd4\x59\x40\x54\x3a\xe3" "\x5b\xf9\x06\xda\x28\x70\xc1\xa9\x79\xa5\xd4\x80\xb4\xa2\x19\x84\x39" "\xa7\x6a\x17\x3e\x74\x52\xb1\x92\x27\xd6\x5a\x59\x63\x49\x76\x26\x9d" "\x10\x4a\xcd\x41\xfb\x47\x67\x02\x39\xd6\x64\x4d\x4a\x90\x36\x94\xee" "\x6f\x71\x28\x19\x72\x0f\xef\x0b\x9d\xdd\xe0\xb9\xcc\x08\xca\x7d\x1d" "\x7d\xde\x63\x19\x4a\x24\x69\x23\x1e\x9c\x55\x6b\x8b\x98\xdf\x6f\xfd" "\xc7\xe5\xc9\xfe\xef\x3b\x6c\xf5\xd1\x92\x98\x85\x4a\x49\x31\x34\x71" "\xdb\x98\x9f\x22\x33\x85\x81\xeb\x0a\x5e\x0c\x17\xbc\x3d\xfc\x60\xae" "\xc5\x25\x05\x46\xbd\x7d\xf2\x14\xb1\x0c\x35\x71\xf1\xc6\x65\xa8\x77" "\xb0\x00\x3e\x97\xc5\xed\x84\x23\x78\xd5\xf9\x72\x76\x16\x33\x33\x77" "\x1e\x0a\xef\x94\xcf\x6f\xf9\x28\x26\xc9\x2f\x5d\x2c\xa1\x8b\xc7\xdf" "\xba\xf1\x71\x4c\xa1\xfa\x87\x74\x77\x24\x15\x1e\x85\x28\x0c\x82\xe9" "\xbb\x6e\xb1\x8b\x3a\xd0\x71\xc5\x5c\x9c\x2c\x04\xfb\xed\x17\xcc\xe6" "\x1e\xe7\xf0\xf1\x92\x95\x71\x1c\x6a\x3b\x21\x6f\x40\x14\x37\xf7\x96" "\xd0\xdd\x1c\x7b\x95\x7a\x72\x86\xa1\x81\x30\x49\xbe\x58\x15\x09\x82" "\x3e\xba\x61\x0d\xbc\x35\x24\x63\x91\x21\x72\x57\xb4\xe8\xf0\xd9\xfc" "\xf2\xa6\x73\x11\x48\xdb\xfc\xf2\x53\x8f\x08\x80\xf8\xc3\x5d\xc5\x37" "\x19\x24\x3b\x3e\x3e\x4e\x7b\xa9\x2f\x5d\xc6\x2e\x03\x54\xf9\x53\x5e" "\xe2\x3d\x2a\xdd\xe4\x1f\xae\x87\x9e\x52\x8d\x9a\xd9\xb4\xc6\x3f\x51" "\x34\x93\xd4\xfe\xf1\x37\x22\xb9\x8b\xf0\xa5\x83\xb1\x24\x75\xfd\x2b" "\xc2\x4d\xde\xcf\xfe\x6b\x55\x8e\x3c\xaf\x7e\xf5\x77\x95\xe1\xc1\xa9" "\x6f\x95\x43\x55\xe7\xba\x74\x9f\x30\x02\x90\x1f\x28\x6e\x0b\x87\xd4" "\xc6\x54\x44\x89\x9b\x05\xe9\x3f\xeb\x06\x9e\xee\x5f\x5a\xec\xd3\xb2" "\x50\xa4\x60\x70\xc1\xc4\x02\xcc\x2b\x62\x40\x2e\x24\xbe\x15\x1d\x33" "\xf3\x80\x27\x46\xcb\x43\x9a\x39\x82\x88\x2b\xe7\x8f\x38\x09\x85\x97" "\x9f\x30\x0f\xd0\x3c\x3d\x47\xe5\x69\x06\x94\x9f\xd9\x81\x3d\x22\x71" "\x7c\xd7\x96\x89\xf2\x32\x52\x9d\x43\xbd\x70\xb7\x60\xb8\xd5\x0d\x65" "\x1a\x0e\xf5\x8a\xb4\x07\x92\x7d\xba\x0f\x75\x70\x03\x29\xef\x7f\x51" "\x25\xcb\xd9\xd4\x49\xa6\xa9\x82\xc8\xda\xfb\xbf\xdc\x75\xba\x96\xbd" "\xb8\xc3\x54\x76\xe2\xde\x93\xf8\x24\x13\x9a\x4d\x5a\xae\xc3\x42\x3c" "\x63\x21\xe8\xd1\xc6\x7c\x7c\xb4\xe0\x39\x1b\x6b\x3a\x99\xa7\x71\x70" "\x6c\x15\x29\xde\x48\x4e\xa5\x82\x6c\x1e\x04\x86\x12\x72\x95\x5e\xd5" "\x90\x01\xb0\x09\x23\xb7\x87\xd0\x0b\xbf\xff\xf7\x30\xc3\x6f\x4f\xba" "\x51\x7d\xc5\x8c\x74\xa6\x26\x48\x80\xf7\xa5\xdc\xb6\xf8\xe5\xe7\x0d" "\x65\x2a\x61\xa1\x0b\x22\xaa\xbf\xdb\x3a\x1b\x6a\xb8\x29\xf8\x08\xaf" "\x34\x3b\xd6\x6d\xee\x99\x6e\x4a\x3f\x41\x3f\xfd\x6b\xb9\x66\x83\x77" "\x16\xaa\xa6\x58\x37\xf2\x40\xae\xcf\x90\xea\x62\x50\x71\x9b\xbb\xe9" "\x19\x31\x3e\xbc\xfa\xbc\x3b\x28\x41\x49\x86\xc9\xc7\x92\x86\x49\xfb" "\x26\x78\xe6\x6c\x60\xf5\x5f\x4d\x89\x62\x2d\x3b\xff\xa9\x27\x2e\xce" "\xfa\xb8\xa6\x99\x46\x26\x12\x4c\x5d\x62\xf6\x2e\x9d\x95\xe7\x2f\x90" "\x42\xe2\x8c\xc4\x23\xac\xfc\x67\x41\x4c\x05\x49\x65\x6d\x9c\x22\xcf" "\xbb\x08\x54\x2d\x6d\x91\xa8\xd2\x7d\x49\x75\x92\x66\xbf\x4b\x3b\x12" "\xad\xe8\xcc\x67\x1b\x8a\xb7\x9c\xe6\x74\xf2\xe2\x92\xf9\x57\xf7\x40" "\xeb\x9b\xfa\x00\xe8\xc1\x1f\x4f\xbb\xb6\x70\x24\x35\x28\x2e\x35\x3c" "\xcf\x18\xe0\x8b\xe1\x7f\x17\x9a\x48\x2e\x82\x73\x6f\xdc\xb3\x52\x5c" "\xab\x3d\xe6\xcc\x4b\xdb\x51\x0a\x0e\x57\x47\x11\x6c\x65\x9d\x57\x11" "\xab\x5d\x49\x0f\x9b\xf5\xd9\xa9\x55\x6b\x00\xfb\x26\x2b\x0a\xf4\x12" "\x6a\xf4\x8a\xa0\x02\x5d\x6c\x2a\xaa\x78\xa0\xed\x42\x80\x24\x21\x98" "\xa5\x01\xc6\x0c\xa6\x4f\xbc\x83\xbd\x23\x8b\xe6\x15\x17\xb4\x61\xe1" "\x4f\xc2\x9a\x2f\xc7\x96\x15\x67\x5c\xb8\xee\x3b\xad\x94\x14\x61\x7c" "\x87\xd8\xb0\x02\x23\x3c\x6b\x69\x18\xf0\x43\x9e\xa9\x72\x8b\x05\xc4" "\xe4\x58\x9f\x68\x8e\x60\xf1\x23\x33\x2f\x1a\x3c\xef\x12\x2d\x78\xcc" "\x52\x12\x9d\xfa\xe8\x40\x73\x39\x72\x2c\x56\x22\x7c\x75\xac\xda\xf9" "\x38\x95\xda\x6e\x1a\xc1\xea\x3e\x7d\x3b\x9d\xe4\xab\x05\xbd\x63\x2e" "\x1a\xd5\xff\x85\xbf\xee\x90\x38\x01\x4f\xa1\x7f\x6f\x92\x7e\x26\x1f" "\x06\x1c\x71\x32\x8a\xec\xa9\xc3\x70\xd2\x60\x21\xf1\xeb\x74\xb7\x2d" "\xfc\x97\x71\xc8\x73\xa2\xa1\x74\xfd\x23\x0d\xae\xb9\xfa\xb0\xf2\x0a" "\x8a\x30\xa7\x84\x2f\xfd\xb1\xd0\x41\x88\xd1\x4a\x58\xbb\x04\xd4\xd6" "\x18\x97\x27\xb8\x6e\xba\x79\x17\xf7\xd2\x47\xa4\x32\x36\x59\xc8\xb9" "\x05\xed\x67\x26\x62\x28\xef\x44\x0d\xd0\xd4\xa3\x17\xb6\x4f\x75\x01" "\x80\x6a\x51\x62\x13\x0d\x67\xa6\xd3\x51\xb3\x19\x12\xa0\xec\x84\x8e" "\x99\xf3\x22\x50\xd3\xe0\x7b\x2b\x8c\x4c\x7a\xb8\x8d\x43\xfb\x26\x4a" "\x44\xfd\xfa\x8d\xcc\x0b\xad\x39\x62\x2b\x78\x66\x16\x35\x21\x95\xa8" "\x1a\xfd\x72\x44\xb0\x77\xcd\x6f\x54\x9a\xf7\xf2\x13\x0e\x5a\xf8\x6b" "\x3e\x4e\x84\x8f\xe6\xa1\x0f\x98\xf8\x78\xb9\x49\x9f\xd8\x6c\x2a\x43" "\xbf\xe3\xbb\xbe\x43\x62\xe4\x70\x15\x1f\xfa\x2a\x9f\xce\x7c\xe5\x28" "\xf8\x04\x8c\x90\x3c\x3e\xa8\xa5\x02\xc0\x61\xb4\x0a\xbf\x9b\x69\x4e" "\x12\x8a\xda\x0b\x86\x92\xe7\x03\x96\xc9\x8e\xef\xcd\xf0\xc2\x36\x9c" "\x83\xd9\xe3\xa9\xb9\xe7\x37\xa3\xfc\xe1\x7c\x10\x73\xf9\x3a\x39\x4f" "\xa0\x5f\xdd\x5b\x65\xbf\x9d\xa1\x36\x63\x22\xaa\x4a\xd5\x66\x5f\x6f" "\x50\xc5\x94\xdb\xbf\xda\x58\x48\x61\xf9\x58\x51\xb3\xab\x69\xec\x15" "\xb9\x75\x67\xb1\x73\xc9\xe9\x14\x7d\xd7\x56\xd7\x37\x9c\x92\xcd\xef" "\x20\x3c\x46\x40\x59\x5d\x05\xf2\xe5\x98\xdf\xf7\xc8\xeb\x39\x6d\xed" "\xc7\xc5\x59\xe9\xce\xb5\xc6\x78\x63\xc8\xd2\xcc\x70\xd0\xa1\x71\x35" "\xcc\x77\xe4\xb1\x1b\x9c\xf5\x78\xc1\x1f\x01\x16\x9f\xea\xdd\xf3\x0e" "\xdf\x17\x3a\xc5\x88\x59\x57\x8d\xd9\xf5\x00\x64\xe6\xfa\x42\x13\x99" "\xae\x7d\xd1\x93\xaf\x18\x57\xcc\x14\x70\x74\x82\xd5\x1b\xf4\x19\xf1" "\x1f\x41\xc5\xa0\x9a\x48\x72\xe2\xeb\xd7\x87\x8c\x65\x75\x10\x63\x42" "\xd5\xfb\x9a\xe1\x01\xbf\xee\x3f\x32\xba\x23\xb9\x51\xb1\x2f\x21\x7d" "\x69\x3a\x4d\x2d\xfb\x20\x9b\x03\x98\x82\xd0\x34\xc1\x2b\xee\xe5\xda" "\xea\x56\xe9\xcc\xbd\x69\x14\x7e\x75\xac\xca\x15\xf4\xdc\xbe\x39\x76" "\x1f\x11\xee\xca\x15\x8a\x73\x50\xd5\xb2\x76\x0c\xd6\xfc\x18\x8b\x80" "\x1e\xd1\xad\xe2\xfb\x3c\x3a\xce\xd1\x0d\xb4\x74\x1e\xfe\x4a\x3c\x6b" "\xac\x7e\xb5\x85\x83\x26\x80\x29\x84\xba\xea\x26\x95\xcf\xb7\xcf\xdc" "\xeb\x40\x5d\xa1\xcc\x45\xce\x4c\xba\xb0\x43\x5d\x60\x36\x93\x6a\x01" "\xe5\xb5\xc6\x39\x14\x53\xfa\x4a\x35\x4b\xc4\x9f\x31\x23\x86\x69\x82" "\xab\xbb\x2f\xad\xcc\x03\x78\x02\xbb\xed\xff\x1c\x36\x0b\x4a", 8192); *(uint64_t*)0x20000000 = 0; *(uint64_t*)0x20000008 = 0; *(uint64_t*)0x20000010 = 0; *(uint64_t*)0x20000018 = 0; *(uint64_t*)0x20000020 = 0; *(uint64_t*)0x20000028 = 0; *(uint64_t*)0x20000030 = 0; *(uint64_t*)0x20000038 = 0; *(uint64_t*)0x20000040 = 0; *(uint64_t*)0x20000048 = 0; *(uint64_t*)0x20000050 = 0; *(uint64_t*)0x20000058 = 0x20000a40; *(uint32_t*)0x20000a40 = 0xae; *(uint32_t*)0x20000a44 = 0; *(uint64_t*)0x20000a48 = 0; *(uint64_t*)0x20000a50 = 0; *(uint64_t*)0x20000a58 = 0; *(uint64_t*)0x20000a60 = 0; *(uint64_t*)0x20000a68 = 0; *(uint32_t*)0x20000a70 = 0; *(uint32_t*)0x20000a74 = 0; *(uint64_t*)0x20000a78 = 0; *(uint64_t*)0x20000a80 = 1; *(uint64_t*)0x20000a88 = 0; *(uint64_t*)0x20000a90 = 0; *(uint64_t*)0x20000a98 = 0; *(uint64_t*)0x20000aa0 = 0; *(uint32_t*)0x20000aa8 = 0; *(uint32_t*)0x20000aac = 0; *(uint32_t*)0x20000ab0 = 0; *(uint32_t*)0x20000ab4 = 0x1000; *(uint32_t*)0x20000ab8 = 0; *(uint32_t*)0x20000abc = 0; *(uint32_t*)0x20000ac0 = r[2]; *(uint32_t*)0x20000ac4 = 0; *(uint32_t*)0x20000ac8 = 0xfffffffd; *(uint32_t*)0x20000acc = 0; *(uint64_t*)0x20000060 = 0; *(uint64_t*)0x20000068 = 0; *(uint64_t*)0x20000070 = 0; *(uint64_t*)0x20000078 = 0; syz_fuse_handle_req(/*fd=*/r[0], /*buf=*/0x20004280, /*len=*/0x2000, /*res=*/0x20000000); break; } } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=*/7ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); loop(); return 0; }