// https://syzkaller.appspot.com/bug?id=5689aff48689f3ca418d44391fe4a4390a1ac21a // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static unsigned long long procid; static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } struct fs_image_segment { void* data; uintptr_t size; uintptr_t offset; }; #define IMAGE_MAX_SEGMENTS 4096 #define IMAGE_MAX_SIZE (129 << 20) #define sys_memfd_create 319 static unsigned long fs_image_segment_check(unsigned long size, unsigned long nsegs, struct fs_image_segment* segs) { if (nsegs > IMAGE_MAX_SEGMENTS) nsegs = IMAGE_MAX_SEGMENTS; for (size_t i = 0; i < nsegs; i++) { if (segs[i].size > IMAGE_MAX_SIZE) segs[i].size = IMAGE_MAX_SIZE; segs[i].offset %= IMAGE_MAX_SIZE; if (segs[i].offset > IMAGE_MAX_SIZE - segs[i].size) segs[i].offset = IMAGE_MAX_SIZE - segs[i].size; if (size < segs[i].offset + segs[i].offset) size = segs[i].offset + segs[i].offset; } if (size > IMAGE_MAX_SIZE) size = IMAGE_MAX_SIZE; return size; } static int setup_loop_device(long unsigned size, long unsigned nsegs, struct fs_image_segment* segs, const char* loopname, int* memfd_p, int* loopfd_p) { int err = 0, loopfd = -1; size = fs_image_segment_check(size, nsegs, segs); int memfd = syscall(sys_memfd_create, "syzkaller", 0); if (memfd == -1) { err = errno; goto error; } if (ftruncate(memfd, size)) { err = errno; goto error_close_memfd; } for (size_t i = 0; i < nsegs; i++) { if (pwrite(memfd, segs[i].data, segs[i].size, segs[i].offset) < 0) { } } loopfd = open(loopname, O_RDWR); if (loopfd == -1) { err = errno; goto error_close_memfd; } if (ioctl(loopfd, LOOP_SET_FD, memfd)) { if (errno != EBUSY) { err = errno; goto error_close_loop; } ioctl(loopfd, LOOP_CLR_FD, 0); usleep(1000); if (ioctl(loopfd, LOOP_SET_FD, memfd)) { err = errno; goto error_close_loop; } } *memfd_p = memfd; *loopfd_p = loopfd; return 0; error_close_loop: close(loopfd); error_close_memfd: close(memfd); error: errno = err; return -1; } static long syz_mount_image(volatile long fsarg, volatile long dir, volatile unsigned long size, volatile unsigned long nsegs, volatile long segments, volatile long flags, volatile long optsarg) { struct fs_image_segment* segs = (struct fs_image_segment*)segments; int res = -1, err = 0, loopfd = -1, memfd = -1, need_loop_device = !!segs; char* mount_opts = (char*)optsarg; char* target = (char*)dir; char* fs = (char*)fsarg; char* source = NULL; char loopname[64]; if (need_loop_device) { memset(loopname, 0, sizeof(loopname)); snprintf(loopname, sizeof(loopname), "/dev/loop%llu", procid); if (setup_loop_device(size, nsegs, segs, loopname, &memfd, &loopfd) == -1) return -1; source = loopname; } mkdir(target, 0777); char opts[256]; memset(opts, 0, sizeof(opts)); if (strlen(mount_opts) > (sizeof(opts) - 32)) { } strncpy(opts, mount_opts, sizeof(opts) - 32); if (strcmp(fs, "iso9660") == 0) { flags |= MS_RDONLY; } else if (strncmp(fs, "ext", 3) == 0) { if (strstr(opts, "errors=panic") || strstr(opts, "errors=remount-ro") == 0) strcat(opts, ",errors=continue"); } else if (strcmp(fs, "xfs") == 0) { strcat(opts, ",nouuid"); } res = mount(source, target, fs, flags, opts); if (res == -1) { err = errno; goto error_clear_loop; } res = open(target, O_RDONLY | O_DIRECTORY); if (res == -1) { err = errno; } error_clear_loop: if (need_loop_device) { ioctl(loopfd, LOOP_CLR_FD, 0); close(loopfd); close(memfd); } errno = err; return res; } static void kill_and_wait(int pid, int* status) { kill(-pid, SIGKILL); kill(pid, SIGKILL); for (int i = 0; i < 100; i++) { if (waitpid(-1, status, WNOHANG | __WALL) == pid) return; usleep(1000); } DIR* dir = opendir("/sys/fs/fuse/connections"); if (dir) { for (;;) { struct dirent* ent = readdir(dir); if (!ent) break; if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0) continue; char abort[300]; snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort", ent->d_name); int fd = open(abort, O_WRONLY); if (fd == -1) { continue; } if (write(fd, abort, 1) < 0) { } close(fd); } closedir(dir); } else { } while (waitpid(-1, status, __WALL) != pid) { } } static void reset_loop() { char buf[64]; snprintf(buf, sizeof(buf), "/dev/loop%llu", procid); int loopfd = open(buf, O_RDWR); if (loopfd != -1) { ioctl(loopfd, LOOP_CLR_FD, 0); close(loopfd); } } static void setup_test() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setpgrp(); write_file("/proc/self/oom_score_adj", "1000"); } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); #define WAIT_FLAGS __WALL static void loop(void) { int iter = 0; for (;; iter++) { reset_loop(); int pid = fork(); if (pid < 0) exit(1); if (pid == 0) { setup_test(); execute_one(); exit(0); } int status = 0; uint64_t start = current_time_ms(); for (;;) { if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid) break; sleep_ms(1); if (current_time_ms() - start < 5000) { continue; } kill_and_wait(pid, &status); break; } } } uint64_t r[2] = {0xffffffffffffffff, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000400, "./file0\000", 8); syscall(__NR_mkdir, 0x20000400ul, 0ul); break; case 1: memcpy((void*)0x20002080, "/dev/fuse\000", 10); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20002080ul, 0x42ul, 0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x200020c0, "./file0\000", 8); memcpy((void*)0x20002100, "fuse\000", 5); memcpy((void*)0x20002140, "fd=", 3); sprintf((char*)0x20002143, "0x%016llx", (long long)r[0]); memcpy((void*)0x20002155, ",rootmode=00000000000000000040000,user_id=", 42); sprintf((char*)0x2000217f, "%020llu", (long long)0); memcpy((void*)0x20002193, ",group_id=", 10); sprintf((char*)0x2000219d, "%020llu", (long long)0); syscall(__NR_mount, 0ul, 0x200020c0ul, 0x20002100ul, 0ul, 0x20002140ul); break; case 3: res = syscall(__NR_read, r[0], 0x200021c0ul, 0x2020ul); if (res != -1) r[1] = *(uint64_t*)0x200021c8; break; case 4: *(uint32_t*)0x20004200 = 0x50; *(uint32_t*)0x20004204 = 0; *(uint64_t*)0x20004208 = r[1]; *(uint32_t*)0x20004210 = 7; *(uint32_t*)0x20004214 = 0x20; *(uint32_t*)0x20004218 = 0; *(uint32_t*)0x2000421c = 0; *(uint16_t*)0x20004220 = 0; *(uint16_t*)0x20004222 = 0; *(uint32_t*)0x20004224 = 0; *(uint32_t*)0x20004228 = 0; *(uint16_t*)0x2000422c = 0; *(uint16_t*)0x2000422e = 0; *(uint32_t*)0x20004230 = 0; *(uint32_t*)0x20004234 = 0; *(uint32_t*)0x20004238 = 0; *(uint32_t*)0x2000423c = 0; *(uint32_t*)0x20004240 = 0; *(uint32_t*)0x20004244 = 0; *(uint32_t*)0x20004248 = 0; *(uint32_t*)0x2000424c = 0; syscall(__NR_write, r[0], 0x20004200ul, 0x50ul); break; case 5: memcpy((void*)0x20000100, "./file0/../file0/file0\000", 23); syz_mount_image(0, 0x20000100, 0, 0, 0, 0, 0); break; case 6: memcpy( (void*)0x2000a680, "\x96\x31\x68\x57\x18\x7b\x4a\xa1\xe3\x02\xb2\x16\x43\x7a\xcd\x3b\x64" "\x62\x62\x25\x06\xbd\xd1\xa1\x57\x9a\xd8\x33\x2e\xb5\x6e\x4c\x11\xb8" "\x7b\xc1\x05\x1d\xe3\x5e\xf2\x63\x8a\x36\xff\x6e\xf7\x17\xee\x22\x2a" "\x9f\x9d\xb5\x2d\xb9\x7a\x78\xe4\x71\x9d\x15\x87\x64\xff\xb4\x51\xda" "\x5a\x3f\x17\x29\x12\xe2\x1b\x46\xe7\xd0\xc9\x15\x00\x50\xa9\x13\xe6" "\xcf\x9d\x1f\x57\xa9\x82\xad\xbf\xf4\x61\xc8\xb8\xa1\xe5\x80\x84\xa4" "\x68\xd1\x9b\xe9\xfa\x30\xcc\xe5\x1c\x0a\x9b\x77\x68\x5d\x47\xe2\x73" "\x46\x25\x27\x74\x69\x92\x9b\x0c\x8a\x5d\xc0\x4b\x4f\x5d\x55\xa1\x6e" "\x5c\x04\x5f\x44\x18\xad\xcd\xe8\x2f\xcd\x2d\xc3\xa1\x65\xdd\x39\xca" "\x5a\x72\xee\x6a\x60\x2d\xa7\x5f\xc8\x29\xae\x07\xa1\xf7\x28\x53\x86" "\x34\x07\xf6\x26\x02\x7a\xb3\xec\xa7\x2c\xd1\xb9\xb9\x48\x57\xb4\x95" "\xa4\xb5\x76\x81\xb5\x31\x3e\x1f\xf1\x54\x6b\xa1\xb8\x70\x74\xf6\x11" "\x2b\x8c\x8e\x59\x8f\xe5\xea\x0d\x08\x0b\x3d\x39\xaf\x61\xfa\x9e\x96" "\x4d\x12\x8d\x29\x8a\xe0\x7d\xf1\xfb\xb5\x3f\x04\x52\x50\xb3\xca\xc2" "\x5f\x8c\x4c\xe8\xfe\x2d\xa6\xb6\xa0\x0e\x27\x0f\x3c\x40\xec\x01\x80" "\x2f\x80\xfa\xd2\x3c\xb2\xb6\x12\xc0\xca\xc4\x5f\xf5\x37\x58\x73\x1d" "\x78\x19\x1f\x65\xef\x71\xf9\xb0\xf8\x68\xb9\x7d\x15\x7f\xea\xaf\xd5" "\x00\xd2\x69\x66\x9e\x5e\xc1\xa1\xf8\x8c\x5e\x29\x33\xdc\x91\x3f\xb3" "\xf7\xd4\x1b\x5d\x21\xf5\xa4\xd2\x84\x8f\x38\x8b\x2f\x20\xda\x5f\x83" "\x44\xb3\xc8\xa3\xa5\x3b\x30\xb1\x5d\x15\x5e\x63\x19\x56\xf2\xb9\x76" "\xa4\xe3\x5d\x7c\x0c\xde\x64\x26\x17\x03\xe4\x37\xfc\xc8\xf2\xbb\xbf" "\x79\x81\xa5\x56\xa4\xd8\x9e\x83\xcb\xa4\x62\xf9\xd2\xab\x93\x76\x6f" "\xed\x6d\x02\x9b\xb0\x37\xbd\x3b\x7f\x8d\x23\xaf\x5f\xb9\xaa\xf7\x4a" "\xe9\x5b\x70\xf4\x7d\x14\x50\x75\x50\xce\x54\x53\x38\x99\x60\xfe\x66" "\xbf\xcd\xc8\x5a\x20\xeb\x4d\xc4\x6c\xa1\xa2\x65\x54\x93\x90\x41\xd1" "\x79\xd2\xff\x52\xc0\x3e\x2b\x0d\x36\x75\x76\x36\xec\x65\xa8\x3b\x9f" "\x44\x0a\x40\xd4\x27\xbd\x38\xf8\x9c\xac\x3d\x42\x3f\x28\xc0\xfc\xb2" "\xa3\xf2\x66\x54\x02\xed\x86\xa7\x94\x74\x85\x88\x65\x0a\x73\x50\x01" "\x82\x3d\x73\xa0\x22\x4d\x91\xc8\xf2\x88\x5d\xbf\x3b\x8d\x1e\x44\xd8" "\xd4\x0e\x2b\xe0\x52\x53\xce\x0f\x7d\xf1\xc6\x3e\xff\x33\x74\x67\x0b" "\x9c\xeb\x42\x6c\x99\x99\xc9\xe9\x60\x14\x16\x95\xe5\xe5\x3d\xe7\x5d" "\x70\xa1\xaf\x50\x20\xaa\xd4\x17\xec\xfc\x97\xd1\x69\xc4\x56\xe2\xb9" "\xb1\xd2\x62\xec\xf8\x0a\xee\xb3\xde\xdf\x1d\x16\x23\xbb\x81\x05\x66" "\x7d\x54\x2a\x1a\xbd\xf6\xe3\xf5\xfd\x9f\x2a\x5c\x56\xb9\xe2\x33\xa1" "\x79\xfe\xa9\xd3\x6a\xc1\x71\x91\x68\xda\xc1\x82\xf3\x63\x10\x16\x75" "\x2a\xe3\xb9\xc6\x2a\x99\x9a\xf8\x57\x6f\xb4\x90\xfa\x4b\xbe\x4a\xd1" "\xf1\xee\x84\x41\x7e\xbe\xf4\xa8\xa0\xe5\x3f\x48\x99\x5e\xed\xf8\x79" "\x90\x1a\xd8\x3f\x2e\xd7\x06\x54\xf1\x18\xb6\x1a\x74\x93\xb0\xb0\x59" "\xce\xe0\xd0\x8c\xd2\xb0\xa5\xb4\x52\x6d\xaf\x4e\x4e\xfd\x6e\xd8\xb1" "\xc4\x62\x40\xe2\x92\x92\x9b\xb4\x74\x05\x20\x2f\xae\x78\xb0\x8a\x11" "\x49\xdb\x14\xaf\x2b\xe9\x00\x4e\x15\x15\xb5\x89\x34\xf2\xb2\xe7\xeb" "\x54\x26\x91\xf3\xb4\x89\xf7\xcd\xf2\xb6\xfa\x1a\x9e\xbd\x01\x91\x36" "\xd0\x11\xf0\x5c\xde\xc2\x35\xa1\x55\xe4\x8e\xb1\x89\x64\x50\x34\x65" "\x44\x3f\xff\xf0\xb1\xc2\x39\xd6\x05\xe9\x15\xf4\xe4\x69\x6a\xb7\x68" "\xaf\x4f\x25\xa3\x6d\x4f\x11\x32\x2e\xcf\xc1\x27\x19\xad\x7b\x88\xa5" "\x06\x7c\x6d\xf3\x0a\x00\x5a\x70\x07\xa6\x44\x4c\x73\x07\x29\x9b\x69" "\x85\x50\xd8\xe9\x98\x6a\x53\x83\x32\xb8\xc8\xac\x39\x9b\x5c\xbe\x9c" "\x8f\xae\xc1\xa0\xa4\x8c\x4c\x8d\x87\x61\xf2\xa8\xfd\xf5\x53\xaf\x72" "\x9e\x9c\xe0\x6a\xf8\x35\x44\x9e\x14\xd9\x7d\xb3\x64\x36\x49\xab\x8f" "\x46\xfb\x45\x26\xd0\xfd\xfb\x36\x45\xb1\x69\xed\xbb\xe2\x05\xca\x31" "\xce\x1f\xb5\x4a\xe2\x91\xd1\xae\xd1\x54\xdb\x41\xb2\x73\x5e\xe3\x53" "\x28\xe0\xf5\x7a\x91\xee\xf9\x90\x30\xb0\xe3\xd1\x08\x13\x6b\x23\x39" "\x43\xea\x9f\x7d\xaa\x38\x3c\x0a\x27\x8b\x94\x14\x48\x6c\xc7\x54\x96" "\xd7\x52\xbb\xd0\xcc\x8d\x01\x39\x30\x83\x58\x69\x11\x48\xaf\x0e\xd2" "\x4f\x73\xb2\x55\x1c\x0b\x3b\xd5\xd5\x2d\xcd\x33\x92\x02\xc5\x12\x7d" "\xed\xf5\x13\x9d\xf7\xf0\xf6\xb5\x0b\x67\xbe\x96\xd3\x92\xd6\x2c\x97" "\xef\xad\x01\x2c\xb2\x0f\x20\xfc\x16\x07\xd1\x75\x02\xb5\x97\x08\x8c" "\xc3\xf3\xaa\x5d\x98\x16\x82\xc9\x78\x86\x2c\x69\x08\x0b\xc0\x9d\x41" "\x6e\x8e\x4c\x6f\xea\x01\x71\x94\x5a\x00\xdb\xd8\x9a\xe4\xd5\x45\xb1" "\x79\x95\xb4\x4f\xbf\x06\x16\x72\x6f\x65\xe8\x7b\xb4\xb1\x31\xc5\xd7" "\x54\xfd\x14\x92\x45\x0f\xb4\x66\xc5\xbe\x11\x93\xa0\xeb\xad\xce\x49" "\xe3\x32\x89\xa3\x69\x80\x36\x47\xd6\xaf\xe1\xe4\x91\x7e\x47\xfe\xc2" "\x27\xbe\x48\x74\x96\xd6\xad\x92\xab\xf2\xb5\x7b\x4f\x2c\x01\xb1\xc1" "\x89\x16\x56\x55\x14\x2a\x14\xb1\x98\xfa\xb1\xf4\x2b\x3a\x69\xf3\xd1" "\xc0\x2f\x65\xd2\xf3\x55\xf4\x7f\x2c\x33\x1e\x56\x88\x72\x61\x29\xfd" "\xe2\x15\x0a\xc2\x17\x97\x3b\xfa\x69\xb9\x18\x75\x89\xa7\x24\x71\x64" "\xca\x98\x08\x16\x5f\xf8\x26\xb6\x93\x0f\x3c\x39\xb2\x54\x23\xae\x04" "\xfd\xfc\xf7\xe1\x76\x29\xc0\x62\x55\x86\x93\x9c\x83\xdb\x75\x58\x1c" "\x43\x31\x9e\x7e\x5c\xc7\x4e\x60\xc6\xa8\x90\xfb\x91\x9c\x96\xe2\x12" "\x8d\xbb\x47\xb9\x70\xf6\xe9\x57\xf2\x13\xb6\xf9\xe2\x10\xf2\x82\x78" "\x93\xc1\x04\x1a\x2f\xdd\x8d\x2e\x38\xe5\x44\x43\x5d\x75\xbc\x8c\x3d" "\x16\x88\xee\x6b\x0d\xab\x80\xf0\x01\xc9\xb1\x8f\x87\xc2\x16\x18\xab" "\x55\xe3\x55\xa1\x12\xf1\x58\xba\x5b\x04\x00\x4a\x06\x1c\x8e\xd7\x37" "\x63\xca\x47\x9c\x76\x4e\x31\xf7\x5c\x29\x37\x86\x37\xe8\xdc\x4d\x70" "\xf2\x13\x43\x9f\xdd\x99\x4f\xc0\x91\xc9\xd8\x8d\x9d\xfc\x24\xb7\xd7" "\x44\x15\x4a\x29\x54\xdf\x35\xc4\xea\x20\xf0\xf9\xc5\x8f\xc6\xe1\xf0" "\xc1\x54\x4b\x2a\xa7\xfa\x98\xe9\x58\x78\xa6\xfc\xe7\xc7\x7d\xa1\x83" "\xd2\xda\xff\x7c\x5a\x63\x9b\xd5\x05\xd7\x40\x18\xb4\xa2\x6e\xa3\xdc" "\x85\x5d\x5f\x9e\x58\x24\x87\x36\xf6\xfc\x26\x1b\xbf\x8e\x2b\xf2\x63" "\x83\xc3\xec\x5b\x3f\x2a\x1f\xf8\x1b\x02\xb2\x1a\xa4\x7b\x60\x0c\x61" "\x21\xd1\x62\x93\xa2\xb4\x7c\x0e\x2d\xa7\xbc\xc3\x5c\x04\xe0\x55\x33" "\xfd\x3d\x86\x11\x68\x5c\xe4\xaf\x01\x93\x54\x82\xfb\xd9\x7f\x0e\x0a" "\xcf\x1e\x1b\x3a\xce\x27\xa4\x60\x52\xf0\xce\xd8\xc9\x60\x15\xc3\x53" "\x90\x4a\x8a\x7f\x43\x69\xd2\xbd\x57\xa8\x35\x05\x3b\x1f\xbb\xe0\x50" "\x52\x88\xd0\xb2\x57\xda\x7b\xb3\x96\x0f\x53\x1f\x41\x8d\xe2\xbd\xb3" "\x0f\x88\xf1\x8d\x6b\xd9\xe3\xa5\x39\xf8\xde\xe8\xc8\x01\xc6\x3d\x64" "\x0a\x64\x6f\xd6\x6f\x0b\x1e\x3f\xa2\x96\xc8\x98\x6b\x3e\x6b\x36\x1e" "\x2b\x10\x18\x1e\x1b\xf0\x7d\x89\x04\x6d\xed\xea\xd2\x72\x61\x94\xc2" "\xe4\x92\xee\x7c\x2d\xa6\x05\xa1\x27\x23\x58\x96\x22\x58\xd8\x5f\xa3" "\xc4\x65\x03\x78\x1f\xce\xb8\x43\x40\x0c\x37\x09\xd6\xaa\x9b\x31\x69" "\x7b\x2d\xe9\x18\xcd\xaa\xcc\xe2\xc3\x57\xdb\x56\x7b\x92\x10\xc2\xaf" "\xc8\x3b\xcb\x55\x90\x13\x75\x08\x56\xc1\x4c\x87\xe9\x72\x90\xf2\x94" "\x00\xe2\x51\x62\x32\x78\x70\x9a\x9f\xf0\x81\x32\xc0\xda\x71\xdb\x39" "\x9a\x54\xa3\x78\x03\x86\xcd\xa3\xe0\xc5\x75\x82\x86\x43\xee\xde\x8e" "\xdd\xf7\xf1\xba\x9e\x34\xfd\x22\x1b\xcc\x41\xd8\x95\x54\x43\x7a\xb1" "\x69\x99\x35\x5c\xc1\x27\xa6\xd4\xaa\x4d\xc7\x89\x6e\xa2\x90\xf2\x51" "\x70\xd6\x37\x28\x51\xb3\x47\x1d\xfa\xdb\x76\x05\xa6\x8e\x8e\x83\xbe" "\xb4\x34\x85\x5c\xc1\x4a\x40\x75\x2e\x49\x91\x17\xa9\xb9\x21\xf4\xa4" "\xe1\x7d\xb0\xc7\x2c\x84\xa2\xf3\x8c\x53\xa1\x8f\x62\xdf\xb6\x6a\xd8" "\x7e\xa4\xfb\x22\x7a\xf4\x5d\xfd\xf7\xc0\x9b\x07\xc6\x6a\x84\x8e\xd3" "\xa5\x47\x08\xfc\xe6\x75\x30\x03\x25\xf7\x39\x50\x02\x57\x97\xa4\xd4" "\x4a\x4b\x83\x5b\x47\x84\x4e\x6c\x4c\x5d\x6a\x42\xb3\x60\x0a\xdc\x9c" "\x5d\x31\x1b\x03\xe5\xab\x44\xd1\x93\xc5\x45\xcc\x95\x68\x36\x4d\xac" "\x47\xec\x72\x6d\xa4\xae\x8d\x00\x64\x7a\xc5\x09\x2e\x04\x10\xe0\xf1" "\x8a\x33\xf2\xb4\x25\xbd\xa1\x97\x3e\xbe\x06\x6b\x24\xdd\xa0\x92\xcf" "\x9a\xae\xbc\xf6\x8b\xd6\xc7\x9b\x54\x33\x8f\xb0\x9d\x97\xaf\xb6\x61" "\x46\x08\x5c\x21\xfd\x11\xee\x2a\x57\x7f\xe4\x18\x6d\x03\x80\x7b\xcf" "\x5b\x48\x2b\xcd\x1e\x41\xa2\xfc\xcb\x6d\xd9\xf8\xdd\xcd\xc7\x32\x04" "\x85\x59\x9c\xad\x66\x32\xc3\x76\xb7\x2d\xc8\xb9\x96\x8a\x22\x0e\x51" "\x88\xcb\x4b\x00\xa1\x3a\x0d\x05\x8c\xbd\x12\xe5\x74\x9a\x86\x8d\xbc" "\x27\x2d\xb8\x83\x83\x77\xc2\x9b\x1f\x3f\x83\x19\x1c\xab\x9e\x6c\xcf" "\x91\x9e\x5e\x1f\x7c\xb1\x21\x6b\x63\x70\x2e\xb8\x4a\xc3\xee\xba\x9a" "\x4c\x09\xbf\x90\xa0\xf8\xb0\x2f\xe5\x78\x7c\xf9\xd7\x81\x8d\x0b\xdd" "\x22\x4f\x09\x8a\x33\x01\x63\xf5\x17\x9d\xec\x6d\x9d\x07\x19\xbf\x4d" "\xc9\x68\xb3\xa6\xc3\x53\x9f\x62\x82\xb7\x46\x05\x12\x25\xcb\x11\xa9" "\x03\x9d\x9c\x16\x24\x2c\x0f\x02\x79\x58\xcd\xfc\x28\x98\xcd\x18\x30" "\x88\x22\x55\x35\xa4\xa2\x39\x8c\x08\x05\x4c\x6c\x4e\x40\xdd\xa9\x0d" "\x30\x2e\xfb\x85\xee\x9c\x06\x4a\x45\xcc\x6b\x75\x12\xd1\x7c\x44\xab" "\xc4\x01\x91\x6d\xf3\xb3\x84\x0d\x31\xa8\x89\x98\x5d\xe0\xf2\xb5\x90" "\x15\x19\xa9\xca\x15\xda\xb4\xc8\x20\x20\x5a\x15\x5c\xb7\xd5\xc3\x37" "\xcb\x05\xe6\x88\xc4\x78\xdd\xe3\x24\x20\x7b\xb9\x7b\xad\xce\x2d\xfd" "\xa8\x7d\x53\xf5\xef\x69\xbe\x90\x9c\x1a\x70\xf3\xba\x01\x07\x85\x25" "\x6c\x65\x48\xff\xb8\xc6\xa9\x59\x68\xc3\xb5\x02\x44\x7d\x1b\x9f\x96" "\xc0\xd8\xd2\x2f\x3a\x0c\x2c\x75\x6e\x2c\x01\x9b\xdc\x6f\xbb\x44\x5f" "\xab\x8b\xfa\xc4\xd0\xbf\xc9\xe5\xce\x90\x8c\x6b\x7d\xfb\x8d\x9a\x2d" "\x1f\x40\x0f\x8c\x0c\xd9\x44\xe3\xb0\x27\xef\x7c\x60\xa2\x83\x9e\x5b" "\x67\xf4\x0f\x7b\xdb\x5f\xcd\x3d\x2e\x2f\x01\x32\xe1\x57\x76\xf3\xfc" "\xe2\x06\xa7\xb5\xe1\xc9\x39\x0a\xde\xf4\x63\xc2\xb9\x2d\x14\x50\xec" "\x13\xbc\xa4\x5e\x80\x22\x2a\x70\x0a\x57\x53\xb6\x93\x2c\x25\x05\x0e" "\x64\xf0\xf2\xea\x50\xa9\x84\xe9\x38\x06\x7c\x7b\x4b\x94\xf8\xd4\x5e" "\x82\xc7\x8a\xce\x73\x05\x2c\x34\xb7\xc6\x32\xf8\x6e\xac\x5a\x27\xd2" "\xd1\xa9\x71\x47\x63\xec\xb6\x7d\xa5\x09\x4a\x1f\x6d\xff\xcf\xf5\x6a" "\xe4\xd0\x40\x50\x11\x1a\xa8\xdf\x1b\x97\x89\x0b\x21\x82\xc6\x39\x6a" "\x57\x71\xa4\x29\xce\x80\xb3\xb0\x03\x67\xc0\x10\x56\x8f\x81\x43\x71" "\x2f\x67\xf5\x1d\xc1\x95\x42\xe6\xec\xe8\x13\x62\x17\x01\xdb\x14\x2f" "\x85\x73\x17\xa1\x8a\xb0\xe1\x7a\x33\xa5\xae\x2e\xbb\xa3\xbf\xd2\xa9" "\xad\xfc\x09\x0b\x80\xfd\xc9\xe0\x3b\xbc\xc5\x50\x03\xc6\x31\x2a\x74" "\x81\xf7\xea\x9f\x53\x59\xac\x72\xf0\xa7\xf7\x0d\x50\xeb\x1d\x0a\x6a" "\xd1\xb1\x36\xdb\xc5\xfd\x93\x3f\xc1\x9f\x10\x62\x4a\x30\xef\x89\x43" "\x45\x4d\xd9\x37\xa9\xff\x16\x5b\x7a\x7e\x0d\xf3\x25\x0f\x61\x70\x69" "\x1d\x4d\x22\x38\x82\xd6\x2b\xed\xc2\x6e\x23\x5c\x06\x2b\xb7\x84\x25" "\x03\xe7\xdb\x64\xbf\x9b\x89\xe1\x7a\x5f\xdd\x50\xc2\x69\xfe\xa5\x9c" "\x6d\x55\x1f\x67\xfb\xbf\x78\x3a\x41\xaf\xaa\xd1\x8e\x2a\x83\x44\x12" "\x3e\x85\x03\x73\x23\xba\xc1\x17\xd7\xa6\x26\x68\x48\x12\xca\xc2\xb6" "\x1e\xd6\x32\x5c\x8c\x48\xdb\xc0\xfb\x2c\x65\xa5\x3f\x5f\x78\x25\xa7" "\x49\x71\xf5\x7e\xa7\x63\x8e\xf8\x84\xbe\x94\x38\xa2\x79\x4c\x7c\x58" "\xd5\x44\x63\xaa\x0e\xf6\x1e\x48\xdf\x55\x32\x01\x89\x0d\x0b\x7a\xa3" "\x84\xf2\x15\xd5\xb7\x92\xa5\x01\x40\x93\xc3\xe4\x6c\x77\xbe\x60\x96" "\x62\x94\x00\x26\xc8\x8d\x14\x7f\x61\xa8\xa2\x67\x2e\x70\x8c\x51\x6d" "\x6c\xba\x66\xbb\xc6\xbb\xed\x50\xb7\x1d\x26\x0d\xda\xbe\x42\x28\x07" "\xc4\xce\xc9\x78\xd5\x07\x9a\x55\x0c\xb8\xfa\xbc\x65\xb4\x9e\xf2\x39" "\x5c\x94\x76\x90\xf9\x58\xad\x0a\x12\x00\xbd\xdf\xb7\xde\xf9\xf5\x76" "\x4c\xe6\x88\x12\x11\xcd\x6a\x18\x21\x18\x66\xd2\x80\x32\xc2\xb6\x18" "\x10\x88\x41\x30\x6c\xbf\xce\xbe\x44\x6d\xeb\xa2\xd1\x52\x7c\x8a\xfe" "\x1e\x56\xbf\x68\x84\x4f\x96\xf0\x1f\xb3\x54\xa1\x77\x64\xda\xb9\x9e" "\x1d\xf9\x15\xf9\x57\x04\x15\x72\x12\x4f\x41\x44\xbe\x2b\xf5\xea\x34" "\xe2\xfb\x31\x47\x59\xfd\x90\xa6\x9b\x91\x9c\x21\x05\x84\x7e\xad\x73" "\x8f\xc2\x77\x78\x7e\x30\x8f\x44\xe3\x81\xe4\x03\xbd\x28\xb1\xfe\x5d" "\x62\x16\xaf\x88\x2a\xb0\xc2\xbd\xb8\x5c\x4e\x40\x92\x67\xfc\xb3\x7e" "\x1e\x6a\xfb\x72\x9f\x25\x55\x9e\x87\x93\xea\x86\x14\xd3\x0c\x8e\x93" "\x76\xe7\xbb\x01\xed\x19\xb4\x58\xbc\x89\xc6\x93\xc5\x80\x6e\x04\x32" "\x80\x8d\x55\xa5\xa6\x96\xdf\xef\x9a\x08\x5d\xef\xa0\x97\x88\xc8\x58" "\xb7\xa2\x82\x91\xd9\x10\x29\x00\xa0\x56\x49\x2f\xe4\x90\xb5\xc0\x5b" "\x6d\xbe\xfd\xf3\xc9\x1b\x54\x5e\x2e\x55\xe3\xb0\xf7\x29\x1c\x1d\xe1" "\xb8\x8c\x05\x0a\x7d\x1c\x44\xa7\xab\x86\xae\xb1\xcc\x1e\x63\x76\xa2" "\x16\xf0\xa4\x9f\xc2\x42\x36\x39\xe5\xb0\xf1\x84\x90\xa1\x49\x11\x9c" "\x0c\xf0\x03\x80\x3e\x07\x00\x09\x01\x67\xe0\xcc\x8e\x0f\x26\xe5\x56" "\x25\x12\x12\x1b\x99\x44\x77\x1a\x09\xe2\xf5\x27\xc3\x87\x1e\x49\x06" "\x91\xf4\xc6\xa4\xa9\x9a\xd9\x8c\x9a\xe7\x51\xd1\x2a\xf2\xd6\xeb\x84" "\x98\xc4\x38\x45\x97\x2c\xcf\x25\x4d\xc5\xb1\x5c\xd2\x38\x47\x9a\x4c" "\x93\x60\x3d\xab\x50\x98\xb1\xad\xf1\xfb\xc8\x84\x26\xeb\x7b\x7b\x44" "\x4f\xff\x74\x48\x9f\x06\x33\xd1\x16\xd2\x21\xeb\xf1\xba\x34\x01\x6a" "\x32\xac\xdb\x6c\x03\x1e\x4d\x93\x6d\xcc\xbb\x10\xa3\xfc\x6e\x1e\x00" "\xcd\x3b\x34\x68\x1f\x76\x3d\xe0\x2f\x00\x8c\x4f\xd5\x6e\x5e\x8d\xc3" "\x5b\xf5\x56\x70\x27\x3b\x12\x0d\xee\xa8\xe5\x91\x86\xe0\x40\x33\x5d" "\x7d\x35\xc6\x75\xf0\xac\x18\x7a\xae\xe9\x03\x54\xa4\x61\xf6\x45\x10" "\x6a\xa1\xd5\x7e\x70\x10\x75\xbb\x84\x74\x0d\xec\x96\xad\x5b\xd3\xc3" "\xce\x0a\x6e\xcf\x05\x84\xe7\xa2\x58\x99\xad\xf9\x5c\xf5\xb6\xf0\xc3" "\x18\x30\xdd\xc3\x40\x83\xe2\xb7\x2a\x24\x9a\x5c\x6e\x6a\x94\x28\xe3" "\x15\x2f\xd5\xd5\x99\xf0\x83\x9c\x70\xf8\x18\x9a\xce\xce\x5c\x78\xa9" "\x29\x93\x4d\x01\x36\xe3\xc2\x83\x07\x24\xac\x56\xfa\x3d\x14\xe2\x1d" "\x05\xa5\xe9\x29\x5e\x56\x7b\xd9\xb2\x31\x2c\x49\x59\xd4\x04\xf3\x20" "\x92\x2a\x39\xe3\xd6\x71\x09\x8a\x16\x0c\xe2\x84\x51\x81\x24\xfc\x9d" "\xe8\xcb\x13\x52\xae\x5d\x29\xe3\x91\xc8\x42\x8b\x89\x58\x87\x45\x12" "\x94\xa5\x74\x27\x4d\x4c\x02\x07\xfc\x27\x38\xbf\x3e\xe5\x59\x92\xb2" "\x40\x86\x15\xf0\x63\xbe\x3a\xa9\xe3\x90\xee\xb8\x21\xa1\x02\xbf\x70" "\x54\x2e\xb6\x49\x64\x4a\x54\x17\x62\x90\xed\x01\xe0\xba\x61\x0c\x75" "\x9d\xfc\x09\x87\x49\x5c\xe5\xea\xaf\x0f\xc7\x98\x37\xd8\x43\x46\x12" "\x38\x9d\xc4\xfd\x84\x6a\xf1\xce\xc5\x2f\x82\xd4\x21\x2b\x3e\x9f\x8a" "\xc0\x9c\xfa\x78\xd6\x0b\x18\x0f\x32\xac\x8b\x8a\x6d\x2b\x2d\xc6\x12" "\x12\xf2\xe5\x76\x24\x7b\xdc\x8a\x71\xc9\x62\x84\xaf\x7f\xf6\x3a\x8b" "\x62\x93\xa8\xd8\xc5\x32\xf1\xd6\xa6\xa3\xd3\x38\x37\x9f\x93\x3e\x9e" "\x0e\xfa\x47\x70\x10\x0c\x31\x7a\x3f\x03\x21\x81\x7c\x59\x24\xd4\x51" "\xf3\x5e\x4e\x52\x51\xe9\x87\xa4\xca\x09\x98\x0b\x5c\x73\xa4\x3f\x1a" "\x74\xdb\xee\x95\x20\x8e\xc4\x74\x1f\x27\xd8\x18\x7b\xd9\x65\x06\xc8" "\x08\x6b\xcd\x5d\x69\x84\x77\x97\x70\x7d\x86\xab\x11\xb6\x8a\x5d\x66" "\xc2\xde\xec\x09\x8a\xfd\x76\x87\x03\x75\x28\xde\xd6\x87\x93\xba\x88" "\xb4\xe5\x94\x84\x31\xbb\x46\x1b\x70\x3b\xfa\x85\x01\xfc\x57\x95\xcd" "\x30\xbc\x2a\xda\x39\x1f\xa1\xee\x1a\xcb\xcd\x3e\xf1\x10\x7e\x17\xc6" "\xb8\x3c\x29\x42\xa8\x92\x0d\x21\x0d\xad\xe5\x23\x43\x16\x5e\x92\xc2" "\x2f\xd8\x4d\x20\xad\xfb\xfd\xce\x26\x60\x9d\xda\xd6\x2e\x8a\xf8\x54" "\xf5\x76\xc0\xfa\xa0\x55\x43\xca\x4b\x2d\xa2\x8a\xc5\x12\xa4\x82\xfe" "\x77\x54\x37\xb8\xb1\x44\x17\xe3\x27\x89\x75\x43\x27\xf3\xcd\x7c\xa6" "\xb9\x15\x16\x13\x69\x3f\x83\xa9\x72\xce\x59\xce\x29\x2c\x9e\xe7\xf0" "\xad\x11\x29\x5f\xe4\xd6\x3b\x1b\xc0\x9c\x1b\x07\x6c\xe5\x64\x84\x36" "\xb7\x90\xc1\x47\x3e\x87\x68\xea\x47\x7a\x47\xd7\x1d\xce\x68\xd9\x17" "\xaa\xc4\x9f\xd7\x72\xec\x00\x03\x75\xed\x44\xa6\xd3\xaf\xf4\x3f\xd9" "\x91\x95\x64\xbe\xaa\xe6\x1e\xe3\x91\xda\xa5\x3e\x6b\xe3\x7b\xff\x42" "\xbd\x5c\x8d\xb5\x3d\xcb\x1d\xd4\x77\xae\x22\x22\x4e\xb8\x8e\x8d\xf4" "\xc7\x31\x3e\x7e\x53\xdd\x38\x5c\x12\x29\x96\x5b\x67\x51\xca\x15\x66" "\x56\x86\xe8\xdd\x3e\x06\x20\x4a\x55\x5f\x5b\x35\x96\xb0\x9f\xdb\xf7" "\x75\x21\xe6\x7b\x46\x6d\xd8\x1b\xf9\x67\xc3\x97\x15\xb2\x8b\x08\xcd" "\x76\x37\x9a\x70\x7d\x98\xea\x0d\x34\x5f\x49\xec\xad\xe1\xf6\x62\xbf" "\x0c\x9b\x87\xec\x1e\xdf\xb5\xa2\x11\x27\x2b\xbd\x9d\x32\xda\x1a\xd6" "\x50\x13\x74\x55\xff\xd3\x7b\x0f\x59\xaf\xf4\xb1\x54\x20\xe6\x54\xb1" "\xb6\x3c\xd9\x9a\x3a\xc0\x2d\xdc\xef\x69\x26\x8e\x4d\xd7\x63\x5f\xc9" "\xa5\xf1\x5b\x54\x44\x5a\x51\xf7\x0c\x3b\x42\xbb\xe0\x7b\x18\xb3\x56" "\xab\x70\x50\x72\x2c\xcd\x9e\x9d\x9f\x50\x21\xc3\x1d\xf0\x4c\x87\x59" "\x70\x81\xde\x4e\xc4\x93\xc8\x69\x64\x4c\x85\x13\x2b\xf2\x06\x1f\x2b" "\x03\xe3\xf9\xa8\xdc\xac\xca\x0d\x02\xfa\x13\x6c\x62\xcf\xa0\xc5\x34" "\x3c\xb0\x18\x26\x86\x1c\x96\x79\x00\x1a\x2e\xcd\x48\xf3\xfa\x54\xe8" "\xf5\xf2\x39\xa5\xd8\x2d\x40\x8a\x8b\x4a\x3a\xb7\x2c\x4c\x84\xb1\x3d" "\x62\xff\xdc\x02\x67\x5f\xed\xe0\xbd\xd7\xfa\xba\x44\xcf\xb9\x7b\x88" "\x35\x77\x80\x13\xce\x72\x7e\x56\xbb\xd5\x21\xb8\x76\x08\xa8\x78\x84" "\xac\xae\x2b\x53\xe4\xbf\x9f\x3e\x00\xb6\x4d\xad\xe2\xea\xb2\x07\x63" "\x00\xe0\x40\x71\x2a\xde\x67\xa6\x87\x40\xf0\xa8\x6e\x59\x37\x41\x3a" "\xe2\x32\x11\x5a\xa6\xa0\x8a\xd0\xca\x4b\x99\xe6\x98\x2a\x58\x78\xa0" "\x2a\x66\xf7\x8c\x1f\x1a\xa5\x10\xbb\x8c\xa5\x62\xa5\x0f\xfa\xfc\x19" "\xda\xa8\xb2\xd9\x74\x9f\x19\x67\x66\x59\x34\x9b\xe0\x0b\x2f\x48\xb4" "\xa9\x94\x3f\x52\xf6\xb6\xeb\x11\x16\xb6\x67\x46\x31\x78\x21\x70\x3a" "\x65\x15\x88\x93\x7c\xd7\xec\xf6\xe9\xbe\xb5\xbc\xb9\xbf\xed\x43\xbd" "\x35\x2e\xd4\x49\x18\xc1\x6b\x3e\x93\x7a\xc6\x8c\x51\x2c\xc3\x6c\xea" "\xc6\x1c\x78\x5f\xca\x6c\x38\x28\x7e\x9f\xf5\xcb\x6f\xc5\x10\x9c\xe5" "\x12\xf1\x8b\xc1\xae\x26\x52\xa0\x99\xf6\xe6\xee\xf3\xda\x1b\x27\xc1" "\x78\x11\x70\xf9\x19\x92\xd1\xb9\x79\xe3\x64\x4c\xcc\x68\x1c\x48\xc8" "\xbe\x11\x04\x06\x56\xc2\xd0\x0e\x23\x61\x8c\xd6\x9b\x3b\x1d\xc1\x73" "\x30\x3a\x7e\x3f\x86\x23\xf7\x6c\xa8\x8a\x12\x83\xc2\xbf\xb3\xf5\xf4" "\x3d\x38\xbc\x85\xd3\x7a\xb8\x06\x9c\x30\xcd\x38\x2f\x80\x83\x3c\x63" "\x82\x7a\xe2\x04\x8b\xdd\xa3\x14\xd3\x8b\x54\xa0\x74\x59\xe6\xcc\xe5" "\xc7\xb9\x20\xf3\xe2\x27\x40\xa8\x82\x59\xbc\x12\x66\x87\x31\x07\x5c" "\x5b\xe8\xca\xeb\xf0\x00\xc7\x0c\x24\x64\x3b\x84\x64\x72\xac\xfa\x46" "\xeb\x68\xcb\x88\xec\x71\xb6\x85\x74\xf0\x19\x07\x53\x33\xf8\x0e\xb3" "\x26\xe2\x35\x86\x48\xeb\x47\x5d\x7f\xbf\x8a\x72\x77\x2d\x8e\x16\x23" "\x87\x48\x4a\x89\x67\xc4\x58\x11\xf4\x36\x8c\xe7\x1f\x01\x9d\xb0\x39" "\xe4\xf7\x7d\x29\x87\x97\xc2\x67\x1f\xf5\xe7\x28\x62\x11\x4a\xad\x9b" "\x91\xe2\xf0\x52\x7b\x8d\x12\x52\x63\xe0\xcb\xcd\x9c\xb8\x61\xfe\xae" "\x41\x86\x5f\xdd\xf2\xd7\x0d\x83\xa7\x88\x9a\xad\x31\xda\xa5\x69\x89" "\x2a\x0e\x49\xcd\xb0\xdb\x58\x81\xf1\x1f\x82\x94\x03\x88\xc6\x34\xea" "\x82\xb1\x29\xad\xbe\x13\x59\xe6\x09\x75\x02\xb5\xd8\x0b\x4d\xfd\xba" "\xc5\xc8\x93\x9c\xe8\xd9\xe4\xf0\xd2\x73\x11\xbc\x3f\x07\x4e\x70\x26" "\x95\xf4\x21\xc9\xa8\x0d\x43\x25\xda\x5f\x37\x15\x03\x08\x41\xb6\x83" "\x89\xeb\xee\xf4\x6f\x7c\x50\x1e\xe6\x86\xc1\x55\x7c\x8d\x97\x71\x05" "\xcd\x82\x31\x8b\x7a\xc9\xdf\xd7\xe7\xc0\x3e\x69\x2e\x33\x0f\x26\x21" "\xc1\xdb\xd5\x5c\xd5\xf4\x3d\xd6\xf6\xe9\xb7\x26\xa9\xb0\x5e\xd1\x01" "\xf6\x4a\xe3\x46\x50\x11\xf1\xcf\x07\xda\xaa\x7f\xa4\x57\x52\x8f\xa9" "\x92\x92\xc6\x23\xee\xf5\x94\xa3\x78\x23\x1f\xf1\x4f\x16\xa0\x57\x8d" "\x79\xf1\x61\xca\x06\x1f\xce\x0f\xff\x1f\xb8\x23\x79\x56\xac\x51\xd2" "\x74\x2c\xf2\x56\xd2\x26\x28\xe2\xd2\xf8\xa1\x56\x69\x52\x10\xfa\x76" "\x12\x14\xc3\xf3\x5d\x42\xa5\x8b\x2d\x38\x3a\x13\xa7\xee\xae\xa2\xe5" "\x95\x06\x9f\x05\x5e\x89\x7d\xcf\x19\x9c\xaf\x11\x93\xce\x2c\xf0\x94" "\xf9\x84\x36\x7d\xe0\xd4\x44\xa5\x52\xd2\xfc\x4b\x29\x43\x51\xbb\xd7" "\x7a\xf9\x88\x78\x92\x6b\x36\x80\xab\x9b\x21\x05\xb0\xcf\xc9\xbb\xa4" "\x4e\xcb\x56\x2a\x29\x8c\xbe\xa6\xad\xff\x00\x3b\xd7\x98\xd2\x32\x88" "\xa3\xd0\x1e\x04\x5a\x56\x3d\xfd\x90\xeb\x1b\x9b\x6e\xab\x3a\xa0\xa9" "\x8a\x9b\x19\x90\x07\xf2\xae\x39\xf1\x39\xbd\xb6\x5e\x6c\x4b\x9f\xf3" "\x70\xb0\xda\xaa\x52\x50\x20\x16\x68\xf3\xe4\x4c\x22\x54\x8f\xe1\xed" "\xfe\x81\xeb\x0a\x88\x5d\xca\xfd\xe5\xc7\xa3\xf5\x4a\x31\xdd\x8b\xcf" "\x44\xf5\x29\x81\x6e\x35\x08\xa2\x4a\xa9\xf3\xab\x1c\x98\x05\xf6\x3c" "\x72\x06\xab\xb0\x2b\x70\x94\x4f\x9d\xf8\x5d\x23\x7b\x1f\xbf\xd0\xd4" "\x48\x14\x7c\x6e\x53\xbb\xe3\x31\xb0\x11\x10\x78\x9f\xba\x20\x57\xeb" "\x93\xc8\x04\x5d\x29\xb4\x5d\xbd\x38\x23\x23\x73\x3e\xb5\x5b\x58\xe5" "\x6b\x62\xa1\xea\x84\x7a\xcc\x30\xdf\x95\xe4\x92\x22\x89\x95\xe0\xde" "\xb1\x71\x5d\x0a\x55\x18\xa2\x91\xcf\xb2\x15\xac\x60\xb1\x13\x32\x24" "\x4d\x2c\x32\x8f\x87\x9f\x5f\x57\x63\x55\x34\x04\xd8\xe3\x34\x14\x86" "\x54\xb6\x29\x97\x7e\xb1\xe2\x1a\xe4\x14\x05\x20\xda\x61\x0f\xa2\x84" "\x0d\xd6\xae\x21\x5f\x1b\x9b\xe3\x57\x4b\xa4\x0c\x6c\x7b\x98\x18\xe1" "\x95\xc1\x90\x5b\xe1\x1b\x58\xa9\x18\xfe\xcc\x42\x37\x91\x0e\xd9\xa7" "\x49\x31\x7f\xfc\x68\xab\x73\x89\xb4\xa4\xaa\xd4\x2c\x93\x05\x50\x03" "\x90\x96\x29\xd6\xe9\xb3\xfe\x35\xd4\x3c\x16\x24\xc2\x20\xe2\x5c\x99" "\x4d\xfc\xe1\x12\x3b\xe7\x3d\x5c\xff\x2d\x9b\x55\x80\x66\x28\x64\x27" "\x40\x4c\x03\x38\x85\xee\x1b\x11\x4a\x3b\xe6\x59\x48\x40\x5d\x9d\x1b" "\x81\x82\x03\x3d\x8b\x1e\x1d\xbc\xce\xca\xf2\x92\x8d\xa8\xb4\x6d\xd4" "\xc5\x0c\x05\x92\x93\x22\x0a\xfb\xd8\x8b\x31\x2c\x20\x58\x7a\xab\x3c" "\xaa\x9c\x76\x1b\xa0\xf0\xca\x0c\x2a\x11\xde\xde\x2e\xce\xc2\xb3\xb5" "\x50\xcb\xec\xb4\x25\x2d\x25\x6d\x5a\xeb\xf5\x17\xe9\x43\xb3\x5b\xb9" "\xae\x2c\x04\x4f\xe2\x64\x78\x23\x38\xff\x82\x37\x0e\x93\xdb\xea\xff" "\xf9\xd7\xee\xde\xbc\x61\xc9\x60\xc6\x7a\xda\xa7\xfc\x29\xa3\x50\xc7" "\x61\xbc\x81\x87\x71\x45\xd0\x48\xbd\x76\x07\xea\x60\xa4\xbb\x20\x5a" "\xa7\x90\x48\x45\xca\x93\x81\xd1\xc4\xde\xd8\x36\x6e\x3c\x86\x70\x08" "\x19\x8a\x03\x29\x79\x3e\xc6\x08\x08\xc1\x27\x36\xfb\x23\xc7\x7a\x64" "\x97\x45\x86\x30\x72\x29\x31\x87\x71\x37\xa3\xae\xb3\x6d\x28\x32\x90" "\x7a\xa1\x7a\x26\x45\x7e\x0c\xeb\xf9\xf8\xa3\x32\x85\x5d\xdd\x63\x1e" "\x00\x63\xd1\x90\x7a\x9a\x3e\xd2\xff\xc4\x50\x9e\xb6\x63\x84\x65\xac" "\xce\x72\x14\x51\xf5\x0a\x02\xdc\xdb\xc4\x9f\x20\xe7\x40\x56\xf8\xae" "\x46\x36\x21\x56\x0e\x24\xc7\xa6\x24\x82\xde\xfb\xb9\xc9\xbf\xe8\xba" "\x23\xca\xcb\xfb\xaf\xea\xf8\xd1\x2b\x2c\x1e\x30\x4e\x05\x9c\xa6\x44" "\xfc\x84\xf1\x56\x0b\x81\x39\x44\x55\x9c\xf7\xbe\xd4\x42\xc8\xd6\x2f" "\x86\xb8\x03\xaf\xd9\xad\x24\xce\x8c\x98\x85\x97\xe1\x58\xff\xde\x96" "\x60\x83\xb2\xb3\x92\x94\x5d\xe2\x93\xab\xbd\xb9\xd0\xf0\x77\x7f\x06" "\x92\xe7\x9a\x06\x07\xbb\x8c\x38\xb7\x65\xb1\x87\x68\xc9\xe7\x53\xba" "\xa7\xff\x05\xde\xed\xe3\xe4\x83\xda\xa5\x8b\xe9\x88\x99\x1d\x5d\xae" "\x09\xce\x42\x6d\x43\xc7\xb0\x9a\x77\xc8\xe1\x6f\x35\x8f\x7f\xe6\x72" "\x5d\xc3\xd4\xd3\xa6\x5f\x56\x14\x91\xa3\x05\xa9\xeb\xf2\x53\x25\xbe" "\xfd\x6a\x5e\xcb\x31\x64\xf0\xed\xe0\xc3\x6c\x43\x5c\x67\x50\x6b\x4b" "\xcb\x3c\xdf\xe6\x3d\x27\xb7\xfd\xf0\x83\xae\xac\x7f\x83\xb8\xf5\xc3" "\xc3\xfd\xbc\xb4\x3a\x89\xb7\x65\xc3\x29\x19\x13\xc9\xc3\x27\x24\xa4" "\x18\xf4\x02\xbe\x54\x96\x9d\x6f\x3c\xcd\x8f\x88\x19\x16\x0e\x12\xb6" "\x0b\x46\xd1\x59\xbc\x29\x11\x2f\x74\x8f\xd8\x81\xe3\xf7\xbb\xe7\xb9" "\x37\xa3\xf4\xa0\x43\x8f\x47\x9e\x83\x13\xf7\x75\xec\xe3\x96\x14\xec" "\x4c\x2d\xca\x77\xa7\x2a\x0f\xdb\xc0\x10\xd9\x25\x74\x9e\x69\xee\x77" "\x60\x29\x50\x06\x6b\x14\x44\xa2\x07\x34\x25\x63\x08\x90\x77\xe1\x47" "\xd5\xbf\xad\x22\x47\x53\xf6\x65\x4d\xc4\x45\xff\xc6\x0f\x96\xf7\x88" "\x60\x55\x2d\x09\x54\xd7\xc4\x70\xd6\x64\x76\x9e\x08\x05\xc2\xc5\x3f" "\xdb\xf9\x41\xb8\x53\x83\x82\x50\x61\x91\xe8\x89\x27\x77\x82\xd5\xc7" "\x4a\x5f\xb9\x86\xf0\xa9\xb8\x20\x02\x76\x07\x57\x07\xcd\xd2\x89\xbb" "\xed\xd0\x44\x9a\x34\xa3\x10\x0d\x9e\xe0\xca\xd9\xc7\xb4\xcd\x20\xd8" "\xa9\xc3\x11\x50\x19\xd4\x3c\x2d\xc3\x38\x42\xa6\x6a\x0a\x9d\x5b\xe9" "\xcd\x26\x8a\x11\x37\x35\x59\x3e\x43\x2b\x35\xb5\x34\x42\x95\x12\x79" "\x94\x68\xbf\xac\x5e\xd7\x8c\x77\x6c\x0c\x4e\x42\x54\x88\x68\x6e\xc5" "\xaf\xc7\x76\x88\xdd\x0f\x43\x1e\xbb\xa3\x76\x21\x94\x28\x53\x04\x91" "\x79\xf0\xa9\x3a\xd1\x33\x3f\xa0\x40\xa4\xdf\x67\x5b\xab\x87\x07\xd8" "\x27\x3c\x20\xf5\xb3\xbd\xc0\xc5\xf8\x9f\x13\x19\x0c\xa0\xb1\x05\xe1" "\x06\xe2\x55\xc8\x38\x2f\x3d\x9a\x99\xe0\x1d\x57\xe9\xd5\x97\x96\x83" "\xfc\xdb\x8e\x8f\xcf\xc3\x14\x71\xd4\x2f\xaf\x33\x29\x74\x40\x01\xb2" "\x4d\xb9\x74\xb8\x7e\x1b\xc6\xb5\xdb\x0a\x83\xff\x8e\x77\xe7\xbf\x8d" "\x2b\x12\x36\xd2\x38\xcf\x60\x0a\xfe\x88\x8a\x3d\xbc\xb9\x24\x9a\x60" "\xa1\x91\xb0\xc2\x3d\x0e\xc2\xf8\x0f\x2f\x67\xb5\xde\xaa\x0a\x9e\x26" "\xc6\xe2\xaa\xa7\x1b\xeb\x85\x7c\xc2\x2b\x28\x64\xff\x29\xe0\x26\x72" "\x22\x9f\x27\x2d\xce\xa5\x76\x7a\xd4\x5b\xc9\x22\x6d\x7a\x19\x13\xbb" "\x49\xde\xd6\x1d\x7d\xf2\xa4\x69\x91\xb7\x8a\x96\xd0\x5d\x98\xd8\xe4" "\xeb\x11\x05\xdd\x09\xce\xa5\x71\xe9\xc2\x5e\xc1\x7b\xd1\x99\xce\x39" "\xa5\xe6\xa2\x70\xc6\x53\xd3\x5f\x12\x3b\x86\x0f\xd6\x4c\xa6\x23\x2b" "\x5a\xe3\x08\x66\xec\x11\x92\x11\x6f\x8c\x0e\x72\x2d\x22\x0e\x4c\x34" "\x96\xf1\xf4\x16\xa9\xbd\xcc\x3b\x97\x42\x0a\xcb\x16\xb8\xf5\x49\xa5" "\x0d\xf2\x4b\x53\x58\x1c\x90\x5d\x67\xe3\x8c\x54\xd5\x3b\x22\x6f\x75" "\x81\x3b\x00\x2e\xee\x8f\x96\xab\xe8\xa3\xf6\x31\xc9\x93\x2d\x32\xf2" "\x74\x5d\x73\x83\xdf\x5c\x1c\xc7\x3a\x5e\x02\x8d\x70\x29\xee\xf5\x4a" "\x9f\xd8\xd7\x98\xbd\x94\x2d\xf6\x55\x78\x85\x85\x77\xd0\x75\x85\xab" "\x41\x5d\xf6\xe7\x6c\x3e\xd9\x29\x8c\xed\x05\xdb\x54\x54\x34\x63\xc7" "\xe8\xec\xc9\x6f\x52\x3c\x06\x70\xd8\x24\x9b\xfb\xfe\x65\x54\x26\x3f" "\xda\x05\xb6\x65\x3c\x2c\xc8\x45\x38\x93\x00\x46\xc3\x8c\x33\x9b\xfa" "\x17\xe3\x77\xf9\xfc\x52\xe2\x2a\xce\x26\xac\x2f\x56\xb1\xbc\xe3\xef" "\xf7\x3e\x01\xed\x90\xcd\x96\xdc\x0e\x1e\x42\x1d\xc0\x24\x7c\x63\x5a" "\x50\xd7\x11\x1f\x36\xf3\x6c\x69\x73\x7e\x13\xe1\x9b\xa3\x1d\x80\x69" "\x02\x69\x3d\xab\x41\xc5\x1a\x62\x5e\x6a\x70\xb6\x6e\x9a\x44\x90\xbb" "\xe5\x59\xb9\x97\x2d\x56\x18\x19\x08\xfb\xa6\x01\xf6\xf9\xae\x9f\x44" "\xf8\x30\xb3\x0d\x12\x2e\x32\xae\x02\x61\xa3\xa6\x97\x3a\x7f\xbc\x16" "\x8d\x9c\x4b\xef\x34\x0c\x52\x9a\x6f\xa8\x33\x0e\x6f\x2c\x7a\xb0\x78" "\x03\x1e\x53\xdf\xca\x63\xb0\x9a\x16\x32\x52\x4d\x4d\x27\x64\xc7\xa0" "\xb8\x18\x42\x56\xa8\x91\x47\xf4\xb2\x19\x18\xd1\x16\x76\x71\x7b\x39" "\x4e\xc6\x12\x4e\xc9\x5f\x74\x98\x2b\x3a\x6d\x47\x42\xa6\x80\xbd\xa4" "\x18\x91\x49\x9f\x0e\xb9\x69\x5e\x60\xb6\xc3\xcf\xda\x8d\xa4\x7e\x4c" "\xc6\xb1\x8a\x37\xbb\x22\x03\x87\xd2\xd8\xba\xeb\x5b\x97\xb4\xff\x2d" "\x80\xf9\x17\x1a\xc3\xf3\x4a\x62\x39\xeb\x8a\xff\x1a\xdf\x8f\x21\xe4" "\x82\xce\xd4\x63\xf4\xba\x81\x2d\xb1\xf5\x5c\xcb\x8b\x1c\xcb\xbd\x40" "\xd7\x2b\x0b\x84\x13\xc9\x5e\x9b\x99\x2c\x28\x2c\x75\xee\x0e\x8e\xf8" "\x72\x19\xa6\xf7\x09\x1b\x94\x23\xf1\xc0\x9a\xd8\x6e\x00\xac\x29\x4e" "\xb7\xd8\xa9\x70\x98\x0f\x6b\xee\xca\x80\x2c\x8d\x36\x38\x07\x84\x1b" "\x1e\x34\xd9\x9b\xce\xae\x24\x80\xb2\xa5\xb5\xc5\x1a\x9c\xb3\x0b\x33" "\x1e\x64\x49\xe5\x4e\xe6\x26\x96\xde\xb3\x7f\xc5\x2e\x55\x17\xd6\xff" "\x85\xc9\x1f\x18\xb5\xc4\xc5\xa9\xd9\x45\x2a\xfe\xe2\x81\xd1\x17\xc9" "\x8a\x46\x64\xb8\x1f\xb8\x93\xd4\xd3\x2c\x96\x06\xa3\x88\xa9\x70\xdc" "\x52\xbb\x28\xc3\x3d\x79\xe3\x10\x58\x0c\x00\xc9\x6c\x79\xe4\x27\xd7" "\x01\x12\x18\x0e\x1a\x5c\x70\x52\xc3\x50\xcf\xa6\x31\x0e\x54\xa8\x7e" "\x1d\x79\x99\x28\x3a\x94\x85\x1d\x15\x2f\x46\x0d\x97\x2c\xfe\x81\x44" "\x92\x5d\x82\xd4\x0d\x32\x27\x17\x51\x4b\xf2\xfd\xbd\x27\x7b\x4f\x85" "\x08\xf4\x37\xfb\x10\x27\x20\xef\x69\xc4\x09\xa7\xed\x29\x48\xf0\x83" "\xf7\xec\xf1\x5b\xda\x95\xc8\x3f\xaa\x07\xd9\xef\x29\xbe\x95\x0b\x6a" "\x5d\x59\xc2\xfa\xc4\xca\x94\x30\xaa\xe1\x24\xee\x81\x4c\x8c\xcb\xa8" "\xea\x4c\x34\xae\x5d\xcd\xbf\x61\x1a\x2e\x34\x2f\x0d\x0c\x2a\xe2\x79" "\x00\x13\x2b\x3c\x47\x80\x0f\x56\x69\xd4\x64\xd1\x4c\xc6\x1c\xf9\xab" "\xd0\x6d\xd6\xf4\x28\x09\xfb\x27\x2f\xc7\x5f\x1b\xa0\xd2\x62\x92\x6e" "\x54\x8f\xe1\xe1\x55\x0b\xa9\x05\x4d\xe0\xb5\xe5\x78\x47\xd7\x44\xe7" "\xe3\xe4\xcf\xff\xe8\x1e\x95\xe2\xbe\x3f\x05\xd8\xcf\x93\x2f\xee\xf1" "\x5a\xf7\x5d\x65\x88\xd4\x89\x79\xd5\xe6\x08\x7c\xad\x06\x65\x23\x5d" "\x6f\x25\xd5\x22\x09\xea\xe2\x25\xfb\x33\xd9\xbe\xa0\x34\x0b\x7c\x12" "\x2c\x4e\x0f\x57\xac\xb5\x0b\x88\x35\x0d\xe0\x24\x16\xc6\xf8\xcb\x13" "\x1b\x6c\x70\x32\xdf\xcc\xe8\xea\x86\x8f\x10\x85\xfd\xe2\x8a\x96\x00" "\xa9\xe8\x98\x36\xe1\x7f\x97\xa4\x34\xd4\x70\x5b\x19\x43\x8a\x03\x5e" "\xca\x6e\x7c\x8b\x8d\x2d\x3d\x0c\xf5\xe1\xd1\x39\xa9\x9a\x4c\xff\xe9" "\x44\x38\xdc\xf8\x93\xab\x4b\xf4\xb8\x5a\xc0\x01\xf3\xf1\xe5\x95\xaf" "\x9a\xaa\x76\x8a\xcf\xb4\x33\x1e\x10\x00\xea\x36\xf6\xee\xdb\x89\x61" "\xb3\x3a\xa2\x39\x5d\xb3\xcd\xb7\x2a\xe9\x80\x1f\x34\x89\x74\x37\x24" "\x90\x49\x86\x61\x04\x0e\xa4\x38\x6c\x25\xb7\x52\xf2\x48\x11\x74\xd6" "\xcd\x0d\xf4\xd8\x2c\x16\x18\xe2\x57\x0e\xa8\xc4\xa7\x99\x8f\xe2\x73" "\x3a\x32\x40\xe6\xc7\x76\x9f\xd5\xd7\x8b\xaa\x6d\x7e\xd3\x1e\x79\xab" "\xd9\x75\xab\x56\x76\xb4\xc8\x52\xfc\xe9\x91\x09\xea\xde\x10\xbb\x08" "\x65\x39\xcb\x37\xaa\xeb\xd8\xd6\xb5\xd3\x45\xab\xe2\x52\x5d\x9a\x4e" "\x90\x57\x16\xb3\xb9\x0f\xf6\x04\x9d\x01\xdf\xe2\x65\x72\x5e\xf2\x08" "\xda\x2d\x47\x08\xeb\x73\x1d\xaf\xc2\x4e\x61\xe9\x5a\x9d\x67\x92\xe2" "\xac\xdb\x25\x0f\x5b\xe4\x9f\x14\x95\xa0\xa3\x49\x54\xd9\x12\xea\x36" "\x26\xcd\xc0\x6e\x4f\x32\x16\x57\x13\x09\xc1\xd1\x31\xba\xda\x02\x85" "\x2e\xc0\x72\x00\x18\x47\x8e\x7a\x89\xe2\x36\x2f\xdc\xee\x6f\x69\x63" "\x23\x87\x5b\x3a\xb2\x0b\x59\x1e\x22\x8e\x14\x2b\xa3\x32\xbb\x26\x65" "\xae\xce\x69\x4b\xdc\x96\x45\xb1\x40\xe8\xdf\xa3\x79\x7e\x8d\x70\x52" "\x44\xf1\x04\x5a\x3f\x0c\xf3\x6c\x62\x0c\xb8\xd0\xbe\x72\xb9\x65\xb5" "\xae\x0a\xe1\xb5\x3d\xbd\xa9\x2d\x75\x89\x72\x8a\x8c\x39\x55\x9e\xb5" "\x67\x2d\x7f\x49\xb7\x65\xbb\xd7\xa7\xba\x70\xc7\x88\xb1\x17\x9e\xc7" "\xdb\x97\x4a\xfa\x46\x5d\x7d\x3a\x31\x0e\x10\x57\x20\x47\xa1\x83\x52" "\x81\x01\x9c\x4a\xb1\xd4\xb4\xd5\x47\xc0\xcd\x35\x6f\x6b\xe2\x3a\xaf" "\x6a\x53\x2b\x0a\x08\x72\x24\xb0\x0e\x55\x90\xec\x57\x04\x1b\x63\xf0" "\xa5\x62\x4a\x92\x32\xba\x73\x5d\xfc\x53\xda\x2f\x75\x72\x0b\x1a\x89" "\xd3\xf9\x65\x15\x1a\x80\x5c\xb5\x7b\x44\xd9\x15\x00\xd7\xcf\x6c\x96" "\x9d\x2d\x78\x76\x3e\x84\xdb\x02\x94\x4a\xdf\xb0\x08\x3c\x14\x58\x5e" "\x18\x25\x87\xc0\x94\xde\xfe\x78\x51\x2a\xcc\x88\xcd\xb2\xa6\x0d\x50" "\xd6\x99\x8f\x61\x37\x1f\xa3\x2b\xbc\xed\x30\xdb\xea\x6e\xc8\xa4\xd9" "\x63\xbb\x32\x8e\xe4\xc0\xb6\xeb\xdb\xb2\x99\x4f\x19\xc1\xb0\x06\x12" "\x3f\x22\xf5\xef\x36\xae\x4e\xb7\x2a\x76\x9c\x30\x26\xc0\x9b\xbb\x58" "\x91\xd7\xc6\xbf\xe0\xce\x2c\x07\xc1\x60\x27\x1d\x12\xc1\xbe\x6f\x51" "\x82\xb9\x6a\x1a\x7a\xb7\xe3\x29\xb1\x52\x7c\x05\x86\x9b\x90\x21\xaf" "\x39\x38\x47\x3e\x32\xe4\x13\xf3\xb8\xa6\x0b\x3d\x12\x9e\x53\xaf\x79" "\x3c\x27\x16\xff\x8d\x19\xcb\x93\xa1\x6d\x89\xcb\xfc\x0d\x82\x11\x12" "\x6b\xba\x93\x17\xc3\x1e\xe2\xbf\xf3\x6e\x54\x86\xa5\xf8\xa9\x88\x7d" "\x81\x50\x18\x06\xd8\xc7\xea\xb9\xb9\x31\x51\x71\x71\x71\x4a\x4e\x80" "\x46\x72\x3c\x7f\xcf\xb6\xb8\x97\x7d\xbb\x12\x6e\x21\x8f\xc3\x2d\x10" "\x7f\xbf\x0d\x92\x2c\x82\x0d\x5e\x70\x94\xbf\xb6\x7a\xa8\x48\xda\xcd" "\x5a\xb5\x48\xe3\x64\xc9\x74\x18\xa1\xf4\xeb\x40\x86\x02\x7a\xa6\x33" "\xa4\xd9\x80\x5a\x92\x1c\xf0\x69\x4b\xd8\xdc\x3c\xe3\xb0\x14\x45\x78" "\x3d\xa1\xb1\x8f\xfe\x9a\x9f\x90\x3e\xf0\x7c\xfe\xa5\x4a\x5e\x30\x70" "\xa5\x42\x66\xe4\x9b\xf5\xd6\xcd\x4b\xa6\xbf\xb5\x7e\x16\x30\xed\x85" "\x75\x30\x08\xdf\xcf\x3d\xa2\xa6\x12\xe0\x0d\x3f\xc2\xff\xf3\x8d\xd5" "\xc6\x76\x6f\x66\xed\xe1\x8d\x21\xfe\xda\x66\xdc\xb4\x5f\x1a\x1f\x1a" "\x8e\x2b\x0e\x2f\x78\x75\xc9\xa1\xc9\xec\x6d\xa1\xb4\x52\x8d\xe7\xb1" "\xfe\x18\xf8\xaa\xc3\x7c\x59\x30\x09\x88\x10\xea\xc1\x7e\xd6\x4e\x74" "\x68\x87\xdb\x64\xc0\xc0\xb1\x92\x79\x20\x53\x2f\xf7\x40\x08\xc7\x5a" "\xc5\xa0\x68\x2c\x68\xdc\xa1\x3e\xc6\x19\xe4\x5f\xb1\x62\xc1\xa0\x7c" "\x93\xd8\x4d\xdc\xde\xd5\x2e\x68\xcc\xca\x90\x41\x64\xdf\x5e\xc2\xfe" "\xac\x53\x7e\x2a\x09\x4f\xeb\xfc\x4d\x7b\x70\x0e\xf9\xbd\x7f\x82\x29" "\x59\xfa\x34\x1c\xf9\xf9\x4e\xbf\xae\x63\xd7\xb8\xa9\x2d\x54\xe4\x3a" "\x88\xdb\x6e\x3b\x94\xed\xf3\x8e\xeb\x74\x57\xb6\x20\x3f\xda\x95\x2a" "\x17\x8c\x24\x7d\x68\xaf\x59\x31\x15\x0a\x2b\x65\xb3\x12\x93\x1e\x6c" "\x1d\x73\x2c\x70\x9e\xe4\x53\xcc\xd1\x29\xfa\x75\x65\x84\x89\xfe\x18" "\x8a\x04\xe3\xbe\x6d\xd6\x53\x00\x51\xf6\x92\xa0\xa7\xb4\x82\xc4\x5d" "\x98\x5f\xb0\x27\x15\x03\xe4\x79\x1b\x63\x76\xa3\x17\x7b\xfb\x0f\x8b" "\xd5\xba\xdb\xe2\x9e\x0f\xf2\xc0\xd7\xe0\x73\xce\x7f\xa6\xe6\xa8\xe2" "\x44\x59\x18\xae\xa5\x68\x2b\x46\x39\x2d\xe0\x6e\x20\xd1\x41\x3b\xf6" "\xf8\x99\xe1\x17\x35\x5f\x29\xfa\xab\x2e\x44\xfe\xe5\x25\x49\x85\xc0" "\x8f\x3a\xd3\x6b\xb9\xc7\x11\x03\x94\x09\xf5\xef\xb0\xae\xc5\x2f\x3a" "\x9b\xea\xe0\x89\x74\x51\x8b\xc9\x78\x98\x58\x04\x3f\xe2\xcb\x03\x26" "\x35\xd9\x1b\x8c\xf4\xa2\x2c\x62\x6c\x1e\xe0\x6e\x02\xe7\x06\x97\xe3" "\x52\x67\x00\x2d\x8e\x8d\x49\x7e\x44\x20\x2d\xa3\x06\x91\xcf\x6a\xfe" "\x7a\x68\xcb\x24\x1a\x98\xb8\x8b\xad\x8e\xbd\xbd\xc2\x6d\x95\x50\x84" "\x3c\x4a\xc3\x29\x8f\x77\x25\x47\x29\x7d\xd1\xa2\x81\x86\xd5\x4e\xf8" "\xad\xfa\x0a\xa8\xa0\xa5\x80\x11\xbc\xe9\x36\xc9\x9f\xd0\x84\x3f\x63" "\xf8\x86\x01\xf6\x7c\x21\x16\x60\x80\x6c\xd2\x29\x3b\x62\x97\x6e\x5f" "\xf2\x6b\x04\x20\x8d\x11\xf2\x79\x2a\x7c\x95\x06\xef\x59\x87\x19\xc7" "\x0f\x2b\x80\xdc\x23\x73\xec\x6b\xcf\x68\xba\xa5\xa1\xdb\x29\x93\xac" "\x86\xe8\x06\xcd\xdd\x27\xaf\x50\xd9\x53\x3b\x0c\xe0\x1f\x17\xa1\xc1" "\x37\x6d\xc4\xd6\x2c\xc2\x5d\xf9\xf9\xfb\x7e\x0f\x21\xf7\xcd\x88\x9d" "\x24\x83\x19\x6a\x59\x66\x74\x55\xeb\x65\xb1\xf7\xea\x8a\xb8\x7a\xdf" "\x42\x8d\x51\x59\x9e\xb1\x7e\x13\x50\x9b\x0e\x84\x4e\x3e\xb4\x78\xd4" "\x64\x52\xb8\x88\x43\x64\x1f\xa6\xee\x81\x08\xad\xc9\xd5\x1a\x25\x9f" "\xbf\x6c\xb1\x82\x0b\x20\x9f\xb0\xfc\x25\xd4\x77\xa3\xbf\xa6\xa4\x18" "\xdd\x80\xa3\x1f\x44\x95\x04\xf5\xb3\xa9\x4e\x6d\x2d\x51\x60\x54\x2e" "\xd5\x3a\x7b\x1f\x7a\xf0\x50\x30\x13\xd6\xc9\xc9\xa9\x82\x49\xb0\x9f" "\x1c\x0b\xa7\x66\x32\xb4\x58\xaa\x79\x9d\x0c\x66\xe3\x33\xef\xe5\x66" "\x21\xf5\x0e\x12\x0e\x9c\xcd\x0c\x7e\x38\xae\x02\x6a\x7c\x00\x36\x57" "\xe0\x08\x89\xc9\xff\x81\x75\x6d\xeb\xc7\xae\xd8\x4b\xee\x7c\xc4\xc8" "\xf9\x05\xeb\x8c\x16\xfc\x19\xda\x9a\xb7\x64\x82\xa1\x9a\x7e\x7f\x11" "\x74\x06\x2a\x14\x30\xb0\x8f\x41\x90\x92\x38\xab\x32\x27\xac\xe8\x00" "\x24\xa9\x19\x7b\x16\xd0\x51\x0e\xa1\x89\x34\x2d\xee\xdb\xcb\xc4\xd6" "\x3c\x94\xaa\xca\x39\x71\x70\xa4\xdc\xeb\x1c\x11\x9a\xc7\xa7\x64\xf7" "\x9d\x3d\x93\x4c\xa7\xb3\xb5\x50\x4b\x2e\x2a\xb8\x51\xf4\x59\x53\x9d" "\xfb\x71\xe5\x54\x48\x4e\x36\xa9\x0d\x59\xd6\x64\x66\xda\x54\x33\x9b" "\xba\x85\x2c\x72\x3a\x04\x7a\x07\x26\x4d\xe0\xb9\x98\xfc\x66\x08\x1d" "\x8a\x18\x12\x04\xde\xb1\x1d\x95\x95\xc5\xfb\xdc\x0e\x76\xae\x35\xe3" "\x8e\x9b\xbf\x66\x64\xca\x16\x32\x26\xe4\xba\x7a\xa1\xc1\x6a\x24\x17" "\xb9\xb8\x1e\x89\xb2\x3d\xda\x85\x2a\x78\x7f\x21\x38\xcd\xb9\xd8\x92" "\x76\x13\x6d\x03\x79\x9e\xc0\x47\x65\x7f\xea\x32\x10\x03\x6f\xce\xba" "\x1b\xc1\xf9\xbf\x82\xbb\x39\x1c\x70\xae\xb8\xda\x43\xe7\x2d\x43\xf3" "\x3e\xc7\xfb\x53\xff\xee\xbf\xd0\xd7\xf9\x7f\xab\x0e\x03\x9a\xf8\x55" "\x07\x47\x51\xe0\x94\x12\x22\x78\x7c\xbb\xd8\x02\x5e\x7d\x14\x07\x1a" "\xc6\x4b\xef\xb9\x40\x52\x9a\xb2\x31\xc8\xbe\x6e\x92\xa4\x4f\x6c\xef" "\x1f\xf2\x0b\x1e\xd3\xf5\x70\x25\x1c\xb0\xf7\xe8\x73\x36\xce\x06\x38" "\x1a\x85\xcf\x64\x25\x6e\x01\x59\xbd\x66\xbb\x8b\xb8\x7b\xb5\x0a\x74" "\xb3\xa1\x69\x97\x33\x11\x1f\x92\x28\x96\x2a\x1b\xfe\x99\x27\xd9\x77" "\x8d\x6d\x28\x5d\x9c\x44\x74\x57\xa0\x71\xf3\x33\xa8\x56\xa6\xf0\xdf" "\x6f\xf4\x1f\x57\x59\xf6\x2f\x33\x11\x71\x3b\xa0\x4e\xe5\x8a\xd1\xf3" "\x6f\xc2\x85\xbd\xc9\x79\x56\x37\xd6\x20\x7c\x23\x65\x4b\xff\x02\xf3" "\x42\x7c\x83\xa1\x3d\x7f\x17\xd6\x79\x92\x98\x3a\x5d\xed\xdc\x4a\xb0" "\xbc\xd1\xe6\xad\xdf\x0d\x2d\xb5\x69\xbe\xbb\x3f\xac\x04\x01\x86\x95" "\x2e\x7d\x92\x3c\x80\x74\xb8\x0c\xee\x1c\xdf\xc2\xeb\x3a\xf6", 8192); *(uint64_t*)0x20000e00 = 0; *(uint64_t*)0x20000e08 = 0; *(uint64_t*)0x20000e10 = 0; *(uint64_t*)0x20000e18 = 0; *(uint64_t*)0x20000e20 = 0; *(uint64_t*)0x20000e28 = 0; *(uint64_t*)0x20000e30 = 0; *(uint64_t*)0x20000e38 = 0; *(uint64_t*)0x20000e40 = 0; *(uint64_t*)0x20000e48 = 0; *(uint64_t*)0x20000e50 = 0; *(uint64_t*)0x20000e58 = 0x20000640; *(uint32_t*)0x20000640 = 0x90; *(uint32_t*)0x20000644 = 0; *(uint64_t*)0x20000648 = 0; *(uint64_t*)0x20000650 = 1; *(uint64_t*)0x20000658 = 0; *(uint64_t*)0x20000660 = 0; *(uint64_t*)0x20000668 = 0; *(uint32_t*)0x20000670 = 0; *(uint32_t*)0x20000674 = 0; *(uint64_t*)0x20000678 = 0; *(uint64_t*)0x20000680 = 0; *(uint64_t*)0x20000688 = 0; *(uint64_t*)0x20000690 = 0; *(uint64_t*)0x20000698 = 0; *(uint64_t*)0x200006a0 = 0; *(uint32_t*)0x200006a8 = 0; *(uint32_t*)0x200006ac = 0; *(uint32_t*)0x200006b0 = 0; *(uint32_t*)0x200006b4 = 0x8000; *(uint32_t*)0x200006b8 = 0; *(uint32_t*)0x200006bc = 0; *(uint32_t*)0x200006c0 = 0; *(uint32_t*)0x200006c4 = 0; *(uint32_t*)0x200006c8 = 0; *(uint32_t*)0x200006cc = 0; *(uint64_t*)0x20000e60 = 0; *(uint64_t*)0x20000e68 = 0; *(uint64_t*)0x20000e70 = 0; *(uint64_t*)0x20000e78 = 0; syz_fuse_handle_req(r[0], 0x2000a680, 0x2000, 0x20000e00); break; } } int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); loop(); return 0; }