// https://syzkaller.appspot.com/bug?id=75630474080f59df29a1232f4a9e9cc452a9bd0f // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "./syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } #define FS_IOC_SETFLAGS _IOW('f', 2, long) static void remove_dir(const char* dir) { int iter = 0; DIR* dp = 0; retry: while (umount2(dir, MNT_DETACH | UMOUNT_NOFOLLOW) == 0) { } dp = opendir(dir); if (dp == NULL) { if (errno == EMFILE) { exit(1); } exit(1); } struct dirent* ep = 0; while ((ep = readdir(dp))) { if (strcmp(ep->d_name, ".") == 0 || strcmp(ep->d_name, "..") == 0) continue; char filename[FILENAME_MAX]; snprintf(filename, sizeof(filename), "%s/%s", dir, ep->d_name); while (umount2(filename, MNT_DETACH | UMOUNT_NOFOLLOW) == 0) { } struct stat st; if (lstat(filename, &st)) exit(1); if (S_ISDIR(st.st_mode)) { remove_dir(filename); continue; } int i; for (i = 0;; i++) { if (unlink(filename) == 0) break; if (errno == EPERM) { int fd = open(filename, O_RDONLY); if (fd != -1) { long flags = 0; if (ioctl(fd, FS_IOC_SETFLAGS, &flags) == 0) { } close(fd); continue; } } if (errno == EROFS) { break; } if (errno != EBUSY || i > 100) exit(1); if (umount2(filename, MNT_DETACH | UMOUNT_NOFOLLOW)) exit(1); } } closedir(dp); for (int i = 0;; i++) { if (rmdir(dir) == 0) break; if (i < 100) { if (errno == EPERM) { int fd = open(dir, O_RDONLY); if (fd != -1) { long flags = 0; if (ioctl(fd, FS_IOC_SETFLAGS, &flags) == 0) { } close(fd); continue; } } if (errno == EROFS) { break; } if (errno == EBUSY) { if (umount2(dir, MNT_DETACH | UMOUNT_NOFOLLOW)) exit(1); continue; } if (errno == ENOTEMPTY) { if (iter < 100) { iter++; goto retry; } } } exit(1); } } static void kill_and_wait(int pid, int* status) { kill(-pid, SIGKILL); kill(pid, SIGKILL); for (int i = 0; i < 100; i++) { if (waitpid(-1, status, WNOHANG | __WALL) == pid) return; usleep(1000); } DIR* dir = opendir("/sys/fs/fuse/connections"); if (dir) { for (;;) { struct dirent* ent = readdir(dir); if (!ent) break; if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0) continue; char abort[300]; snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort", ent->d_name); int fd = open(abort, O_WRONLY); if (fd == -1) { continue; } if (write(fd, abort, 1) < 0) { } close(fd); } closedir(dir); } else { } while (waitpid(-1, status, __WALL) != pid) { } } static void setup_test() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setpgrp(); write_file("/proc/self/oom_score_adj", "1000"); if (symlink("/dev/binderfs", "./binderfs")) { } } static void setup_sysctl() { char mypid[32]; snprintf(mypid, sizeof(mypid), "%d", getpid()); struct { const char* name; const char* data; } files[] = { {"/sys/kernel/debug/x86/nmi_longest_ns", "10000000000"}, {"/proc/sys/kernel/hung_task_check_interval_secs", "20"}, {"/proc/sys/net/core/bpf_jit_kallsyms", "1"}, {"/proc/sys/net/core/bpf_jit_harden", "0"}, {"/proc/sys/kernel/kptr_restrict", "0"}, {"/proc/sys/kernel/softlockup_all_cpu_backtrace", "1"}, {"/proc/sys/fs/mount-max", "100"}, {"/proc/sys/vm/oom_dump_tasks", "0"}, {"/proc/sys/debug/exception-trace", "0"}, {"/proc/sys/kernel/printk", "7 4 1 3"}, {"/proc/sys/net/ipv4/ping_group_range", "0 65535"}, {"/proc/sys/kernel/keys/gc_delay", "1"}, {"/proc/sys/vm/oom_kill_allocating_task", "1"}, {"/proc/sys/kernel/ctrl-alt-del", "0"}, {"/proc/sys/kernel/cad_pid", mypid}, }; for (size_t i = 0; i < sizeof(files) / sizeof(files[0]); i++) { if (!write_file(files[i].name, files[i].data)) printf("write to %s failed: %s\n", files[i].name, strerror(errno)); } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); #define WAIT_FLAGS __WALL static void loop(void) { int iter = 0; for (;; iter++) { char cwdbuf[32]; sprintf(cwdbuf, "./%d", iter); if (mkdir(cwdbuf, 0777)) exit(1); int pid = fork(); if (pid < 0) exit(1); if (pid == 0) { if (chdir(cwdbuf)) exit(1); setup_test(); execute_one(); exit(0); } int status = 0; uint64_t start = current_time_ms(); for (;;) { if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid) break; sleep_ms(1); if (current_time_ms() - start < 5000) continue; kill_and_wait(pid, &status); break; } remove_dir(cwdbuf); } } uint64_t r[1] = {0xffffffffffffffff}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "./file0\000", 8); syscall(__NR_open, 0x20000000ul, 0x1a7042ul, 0ul); break; case 1: memcpy((void*)0x200001c0, "fd", 2); *(uint8_t*)0x200001c2 = 0x3d; sprintf((char*)0x200001c3, "0x%016llx", (long long)-1); *(uint8_t*)0x200001d5 = 0x2c; memcpy((void*)0x200001d6, "rootmode", 8); *(uint8_t*)0x200001de = 0x3d; sprintf((char*)0x200001df, "%023llo", (long long)0); *(uint8_t*)0x200001f6 = 0x2c; memcpy((void*)0x200001f7, "user_id", 7); *(uint8_t*)0x200001fe = 0x3d; sprintf((char*)0x200001ff, "%020llu", (long long)0); *(uint8_t*)0x20000213 = 0x2c; memcpy((void*)0x20000214, "group_id", 8); *(uint8_t*)0x2000021c = 0x3d; sprintf((char*)0x2000021d, "%020llu", (long long)0); *(uint8_t*)0x20000231 = 0x2c; *(uint8_t*)0x20000232 = 0; syscall(__NR_mount, 0ul, 0ul, 0ul, 0ul, 0x200001c0ul); break; case 2: memcpy((void*)0x20000100, "/dev/fuse\000", 10); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000100ul, 2ul, 0ul); if (res != -1) r[0] = res; break; case 3: memcpy((void*)0x20000140, "./file0\000", 8); memcpy((void*)0x20000040, "fuse\000", 5); memcpy((void*)0x20000180, "fd=", 3); sprintf((char*)0x20000183, "%020llu", (long long)r[0]); memcpy((void*)0x20000197, "\x2c\x72\x6f\x6f\x74\x6d\x6f\x64\x65\x3d\x30\x30\x30\x30\x30\x30" "\x30\x30\x30\x30\x30\x30\x61\x30\xfc\x2a\xef\xed\x2e\x2a\xff\x1f" "\xaa\x63\x75\x73\x65\x72\x5f\x69\x64", 41); syscall(__NR_mount, 0x20000000ul, 0x20000140ul, 0x20000040ul, 0ul, 0x20000180ul); break; case 4: memcpy((void*)0x20002380, "./file0\000", 8); syscall(__NR_newfstatat, 0xffffffffffffff9cul, 0x20002380ul, 0ul, 0ul); break; case 5: memcpy( (void*)0x20000240, "\xd2\x02\x89\xb3\x35\x84\xc2\xd1\xcb\xdd\xeb\xe7\x1a\x04\xd2\x7b\x77" "\x77\x5c\x96\x5c\xd3\x45\x6c\x2b\xc1\xf3\x7b\x12\xbf\x9d\x74\x8b\x7b" "\x9f\xca\xc9\x36\x78\xe4\x30\xed\x6c\x84\x90\xb1\xf8\x8a\x7f\xe2\x42" "\x92\x8d\xf6\x96\xf8\xf9\xdb\xd3\x0e\xc7\x95\xb8\xaf\xb1\xe6\x4a\x96" "\xf7\x43\x2a\x85\x58\x59\xd2\x68\x40\xc1\x45\xf6\xb1\xff\x31\x24\x8d" "\xdd\x81\x4b\xd1\x30\xd2\x69\x7c\xd5\xb6\xdf\x2d\xeb\xb8\x47\x40\xd5" "\xb9\xad\x74\x68\xd9\x2b\x2f\x62\xa8\x14\x78\xba\x1c\xde\xc9\x5d\x38" "\x5d\x5c\xf7\x60\x6d\xd7\xa1\xb7\xb3\x37\xff\x26\x32\x9b\x44\x3e\x84" "\x20\xb7\x74\x0a\x44\x1f\x41\xb8\xf8\x73\xb1\x44\x37\x45\x31\x03\xf8" "\x8f\x9c\xa7\xaa\xea\xc3\x3d\x19\xfd\x42\x66\xbd\x9f\xd2\xca\x9f\x6a" "\x5a\x3d\x1c\x2c\x8c\x2a\xd3\x3b\xb6\x7f\xef\x06\x24\x88\x09\x65\x99" "\xac\x1d\xcd\x0d\xf2\x3a\x67\x8d\x33\x75\x5f\x2b\x42\x3c\x1f\x51\x4e" "\x97\x67\x5e\xf0\x39\xbd\x70\x33\xb8\xdf\x72\xa6\x51\x9e\x6e\x54\xda" "\xcb\x38\xc3\x21\x2d\xa6\xed\x51\x93\x91\x99\x06\xbd\x6d\x76\xbc\x36" "\xfb\x60\xfa\x94\xd2\xd3\x0c\x4f\x10\xe2\x4a\x1b\x42\x4a\x2f\x22\x86" "\x9b\x80\x7c\x97\x88\x25\xbd\x75\x94\xf4\x11\x67\x0c\xb1\x77\xd1\xf2" "\x43\x0b\x2c\xc1\x10\xa2\x5b\x5b\xb3\xbb\x9b\x80\x14\xd6\xc3\x56\x27" "\x9e\x64\x54\xa2\xf6\xb2\xdb\x89\x84\xe0\x2e\x13\x58\x69\x9f\x22\xeb" "\x29\x52\xe8\x06\x40\x83\xf4\x46\xe4\x8d\xde\xf5\x42\x8d\x1a\x47\xc6" "\x56\x53\xfd\x3c\x17\xe9\x73\xc2\x21\xd0\x19\xc0\xc4\xf7\x33\x85\xb6" "\xd3\x24\xf7\x80\x60\x24\x2d\xb5\xdd\xfd\x3a\x85\x95\x81\x8a\xb7\x2a" "\x35\xcc\xdb\x71\x44\x54\xff\x87\xdd\xbd\xce\x5d\x45\x21\x7c\x5e\xab" "\xd1\xe2\x4d\x9d\xbc\x10\xc5\x16\x79\x43\xd2\xd7\xed\xee\xe3\x26\x2b" "\x46\x0f\x99\x78\xdf\xb4\xbe\x80\x60\xd5\x1c\xe4\x90\x81\x09\x96\x6c" "\x0f\xb7\xb0\xe8\x09\xd9\x3a\xfe\x89\xf3\x22\x76\x73\x3f\x1b\x1e\xa8" "\x58\x88\x85\x5d\x71\x9f\x0b\x89\x94\x06\x9a\x15\xdd\xed\xd7\xf5\x12" "\xf1\x40\xe9\xae\x4b\xac\x91\xc2\x73\x85\xcf\x96\x86\xe0\x6c\x31\xc6" "\x08\x81\x2a\xa4\x19\x99\xa3\x65\x4c\x83\x47\xcb\x11\x41\xdc\x49\xd9" "\xc9\x45\xb9\xd4\xe6\xc2\x18\x4a\x19\xf7\x92\x36\xb7\x2b\x93\xc8\xb2" "\x7b\x1a\x67\x34\xbc\x9f\xd0\x6b\x4a\x40\x5e\x15\x1f\x1d\x2d\xd0\x2d" "\xc4\xcd\x17\x29\xb7\xf3\xb0\xa2\x3f\x19\xa7\x5a\x15\x04\x65\xdb\xeb" "\xa7\x56\xbf\xde\x18\x1b\x26\x83\xc1\x46\xb7\x84\x87\x89\xe4\xcf\x33" "\x55\x02\x80\xa7\xe3\x16\xc6\x36\x8d\xaa\x29\xe2\xe9\x8e\xec\x3b\xdc" "\xd1\x55\xe3\x4d\xa9\x0c\x54\xa9\x84\x98\x61\x1c\x4d\x13\x49\x99\xca" "\xcc\x01\x92\xdb\xa0\xd7\x50\x62\xf3\xfb\x91\xc8\x9c\x69\xfc\x29\xe3" "\xba\x0e\xab\x42\xdd\x5f\xbf\x67\x5a\x1d\x63\x78\x92\xc7\x80\xe7\xbb" "\x3a\x96\xf5\xc3\x5e\x4c\x0c\x48\xba\xaf\x78\xb2\xfc\xf1\x18\xe6\x8b" "\x70\xa1\xf7\x9d\x65\xbf\x67\xbf\x25\x51\x49\x49\xfd\x0f\xeb\xb2\xd6" "\x8f\x01\xcf\xba\x21\x4c\xc1\xbd\xa1\xf8\x25\x14\x6a\x7b\xe5\x79\x1e" "\x25\x22\xe2\xa8\x3f\x75\x6d\x6d\x31\x46\x1f\xb3\xdc\xd4\xac\x8e\xef" "\xc6\xe1\x20\xf1\xa9\x4e\xd0\xeb\xfe\xbb\x17\xaf\x53\xf4\x8b\xec\x4e" "\x7a\xc2\x05\x5a\x14\x51\xcc\xf6\x42\xdb\x47\x6f\xce\x8a\x62\x40\xcf" "\x3d\x20\xa3\x92\xc3\xc4\x67\xae\xa1\x3d\xe2\x07\xf3\xe3\xd8\xcd\x9e" "\x9e\xaa\x39\xde\xdb\x19\xbf\xd6\x01\x91\xc1\xcb\xec\xc8\xb5\xe6\x8e" "\xf9\x0b\xfd\xb2\x47\x97\x06\x4f\x8f\x4b\xfa\x8a\xc6\x54\xd3\x3e\xb2" "\x75\xb9\x33\x64\x76\x22\x5d\x6f\x3e\x14\xdf\xc9\x70\x5c\x39\x5a\x5c" "\x58\x98\x08\xcd\xa9\xa6\xfa\xd4\x2b\x49\x7f\x41\x06\x32\xd2\x73\xcd" "\x26\x0f\xe3\xf2\x53\x78\x47\x68\xbf\xe1\x97\x05\x1b\xef\xe8\xd5\x08" "\xf1\xc6\x35\x39\x87\x56\xbc\x17\xd5\xfc\xff\x03\xad\x22\x52\x0e\x68" "\x82\xbe\xa6\x77\xde\x42\x13\x11\x17\xfa\x54\x98\x18\xad\x0d\xdd\x6b" "\x9e\xd9\x51\xa3\xbe\xeb\xf2\x92\xad\x23\x1e\x18\x63\x1c\xe5\x93\xb2" "\x09\x77\x84\x3f\x37\xef\xc7\xcb\x19\xd2\xee\x56\xbb\x9e\xf4\x41\xf7" "\x5d\x96\xf1\xa9\x7f\xf9\xcc\x20\x1e\x7d\x06\xa0\x50\x61\x46\xba\xdc" "\x3d\x4c\x2b\x7c\x7d\x93\xd2\xbf\x29\xc4\x74\x35\x73\x4f\xf8\xf1\xf3" "\x5a\x84\x48\xb3\x48\x00\x42\x04\x4b\xbb\x3f\xec\x6a\xbd\x78\x22\x91" "\x07\x99\xe5\x04\x78\x58\x36\x31\x64\x64\xcb\xd6\x87\x00\xcb\x2d\xef" "\x14\xf3\x97\xfd\xee\xe3\xd3\x65\x6c\x89\x73\x42\xe5\x20\xcf\xfd\x30" "\xa3\x7a\x49\xe3\x18\xe3\xaf\x11\x17\xbe\x3a\xf2\x41\xb0\xd8\xff\xfc" "\xdf\x02\x37\x1d\xd5\x95\x9c\x55\x9c\x85\x63\x0e\x4e\x03\x7c\x50\xac" "\x53\x5c\x2a\x99\xb3\xf8\xfd\x50\x57\x0a\x28\x2d\xdb\xa4\x79\x9e\xef" "\x67\x33\x09\x87\xa5\x6a\x0e\x7a\x8f\xaa\x69\xa3\xe3\x4e\xd9\x31\xaf" "\x51\x80\x42\xc7\x6b\x11\x38\x3a\x5d\x15\x0a\xf1\xba\xb1\x46\xe8\xa6" "\x09\xea\x5b\x7c\x52\x78\x3c\x81\xb5\x97\x7a\x45\x49\x88\x5d\x77\x8d" "\x67\xca\x74\x30\x75\x9b\x43\x58\xa9\x9b\x2a\x71\xcf\x61\xa8\xbc\xbb" "\xcb\x09\x10\x4f\x30\x1a\x8d\x73\x43\x68\xc4\xb1\x7f\xc7\x8a\x86\xcb" "\x08\x52\x2a\xf0\xb7\x3d\x58\x33\x2f\x44\xca\x82\x5d\xe5\xc4\x36\x94" "\x5f\x4e\x7b\x90\xbd\x66\x45\x08\x97\x13\xfe\x0a\xbf\xb9\xdb\xc3\xac" "\xcd\x2f\xfa\x45\x85\xef\x74\x4f\x55\xfd\xa1\x22\xab\xbe\x1e\x9b\x25" "\x0d\x24\xcc\x7f\x54\xa8\xdb\xb6\xaf\x0b\xb8\xe2\x71\xa5\x45\x93\x63" "\xe9\x91\xf6\xaf\x15\xdf\xb0\x1f\xd2\x72\x5d\x3f\x01\x75\xe2\xd4\x92" "\xca\xab\xe6\x3b\xaf\xd9\xc8\xde\x6d\x47\xe5\x23\xa6\x79\x69\xbb\x00" "\xf1\xc6\x01\x3f\x21\xdc\xd1\xc9\xf8\xe5\x4b\x87\x11\x1d\xf5\x8f\x8b" "\x3b\x20\x3c\x51\xac\x67\x96\xd0\x57\x84\x6f\xfe\xb2\x87\x18\x6c\x62" "\xef\x0a\x39\x6e\x34\x62\x2c\xac\x21\x02\x70\x11\x82\x43\x80\x92\x21" "\x49\xa1\xc0\xd8\x15\xfb\xa9\x06\xd0\x82\xff\x81\x33\x71\xe6\x25\x90" "\x22\xc0\xca\x5b\xe0\xd3\xab\xd9\x25\x04\x99\x17\xf3\xbd\xc4\x6b\x47" "\x3e\x37\x1f\x08\x43\xbc\x1a\x62\x6e\x1b\x97\xb8\x1d\xa5\x54\x34\x45" "\x01\x1d\x77\x85\xa3\xb2\x81\x07\xc5\xbf\x56\xd9\x2f\xdb\x54\xd8\xab" "\x6a\x70\x98\xfc\xb9\x35\x80\x30\x64\x8d\x65\x19\xe4\xf4\xc1\x3b\x52" "\xa6\x27\xa0\x75\xc1\x36\x67\x30\x21\x5f\x82\xb9\x6a\xda\x5e\x5a\x04" "\x53\xd2\x59\xa0\x9b\x2b\xa5\x53\xc8\x17\xa6\x77\x27\x38\xfb\xee\xfd" "\xed\x65\xc2\x68\x05\x97\x06\xc8\x90\x69\x9e\x27\xdb\xf5\xee\x92\xdf" "\x3b\x5a\x23\xa7\xd9\x3d\xa7\x4b\x3a\x69\x86\xcb\x30\xce\x9d\xce\x17" "\x24\x15\x97\xb9\x26\x1d\xf4\x90\x3e\x3d\xd2\xaa\x13\x72\xf3\x58\x23" "\x7c\xca\x3b\xa1\x7b\x53\xab\x88\xd9\x01\x19\x21\x65\x30\x4b\xbc\x72" "\xa6\xfd\xa3\x0d\xaa\x69\x77\xc9\xcd\xe0\x50\xc8\xdd\xda\xc7\x85\x93" "\x7d\xbd\x3e\x93\x5f\xcd\xf2\x2b\xfb\x52\xda\x97\x2c\x1d\xfd\xa9\xf3" "\xf0\xb9\x92\x1a\x12\x10\x32\x8c\x67\xed\x27\x42\xe4\xa7\x0f\x9f\x0e" "\x85\x08\x41\x5b\xce\xb3\x07\xe6\x31\x9d\x3f\x4c\x3c\xff\xb2\x94\xea" "\xf6\xc2\xca\x62\x33\xa9\x97\xa0\xfb\x1a\xf4\x63\x6c\x06\x8c\x34\xda" "\x21\x8b\xa5\x0b\x94\x55\xe7\x14\xc4\x49\xa5\x90\x89\xcd\x56\xea\x9e" "\xe8\x58\xf1\x2f\xc0\xac\xa9\x33\xda\xf0\x31\x88\x2b\xe7\x54\xc2\x5a" "\x2b\x11\x9d\x8c\x91\xb6\xff\xff\x82\x3e\x19\xc7\x5b\x98\xef\x37\x4d" "\x28\xb0\x2f\x8e\x43\xde\xa5\xc3\xb7\x9d\xbe\x52\xb9\x32\x12\x71\xae" "\x40\x07\xc5\x35\x82\x1d\x43\xcf\x33\xe1\xde\x11\x6c\x40\x1e\x5b\xef" "\x4b\xa4\x77\xf8\x7f\xe9\x64\x42\xd4\x9a\xfd\x72\x21\x9e\xe4\xe6\x00" "\x6e\x61\x4c\xe9\x4a\x04\xce\x88\xa2\xa2\x48\x56\xc8\xa7\x7b\xc2\x5a" "\x0e\x26\xa0\x1f\x7e\x0f\x89\xc1\x79\xd6\x51\x45\x30\xc5\x50\x6b\xe5" "\x58\x77\xdb\xd8\x3f\x54\x83\xf0\xd4\x98\xe0\x13\x33\xfb\x43\xcd\x44" "\xb2\x68\x6d\x41\x55\x51\x8f\xc3\xf1\xe7\xfa\x8e\x76\x1d\x82\x43\x89" "\x3d\x09\x3e\x7f\x09\x40\x05\x2b\x50\x63\x88\xe4\x29\xb8\x5b\x3b\x74" "\xaf\xfe\x31\xd2\x51\x74\xec\xd4\xae\x92\x17\xe5\x28\x2b\x56\x57\x43" "\xf9\xc2\xc5\xd5\xa7\x5d\xd7\xb1\xe5\xd7\x16\x87\x65\x5b\x17\x43\x2f" "\xe2\x64\x08\xe8\x17\xb4\x33\xde\x4a\x85\x88\x4d\x50\x09\x73\x8e\xf3" "\xb6\x60\xbe\xf0\x66\x87\x95\x79\x8b\x77\x31\xa2\x36\xcd\xf5\x62\xa9" "\xc9\xa6\xe2\x9d\xd5\x90\xe8\x98\x16\xde\xef\x86\x2e\x17\xed\xc8\xe3" "\xb4\xe9\x6a\x12\x52\x79\x79\x8d\x8d\x2e\x05\xa5\x82\x50\xce\x96\x0c" "\x7a\xb9\x21\xea\x14\x0c\x33\xba\x50\xd0\x80\xbd\xc4\x4c\x24\xa5\x6f" "\xc1\xc1\xe2\xf4\x10\x01\xb5\xb2\x87\x9b\xab\x7b\xb7\x66\xd2\x5e\x6c" "\xaf\x55\x5c\x51\x91\xb4\xef\x27\x07\x37\x2f\xe0\x9b\x5a\xf2\xeb\x87" "\xa9\xea\x0e\x96\xb8\x81\x9f\x77\x41\x1a\x07\x6e\x33\x2c\x0a\x7a\x3b" "\xc2\xf6\x7e\x9c\xfc\x19\x01\x58\x00\x98\x06\x45\xb0\x59\xbd\xec\x29" "\xbd\x88\xc3\xbb\x05\xe2\xbc\xec\x2e\xf6\xd6\x8e\x57\xe6\x1e\x00\x66" "\x0c\x90\x2d\x65\xdf\xd4\xe9\xb8\x9d\xce\xaf\xfd\xb0\xa1\x5e\x4d\x25" "\x1b\xd9\xa8\x40\x66\xa4\x6e\x67\xe5\x95\xd4\x33\xba\x5a\x9b\xb8\x8f" "\x7b\x1a\x99\x8e\xa0\xd7\x0a\xfa\x9d\x50\x42\xfe\xe1\x48\x77\x23\xde" "\xb4\xe2\x5c\x06\x96\xaf\xb7\x2c\x63\x4b\x52\x85\xd2\x8e\x7a\xc3\x41" "\x0b\xb6\xc7\xc1\x3b\xf0\x9c\xc7\xca\x9d\x25\xf7\x20\x82\x4e\xfd\x31" "\x80\xa0\x0e\x00\x3f\x2d\x29\x08\x80\x83\xa5\x2d\xab\x7a\xf3\xd1\x6a" "\x4c\xd6\xf4\x47\x26\xea\x5f\x47\x50\x3e\xde\xac\xc9\x1a\x44\x14\x0a" "\x46\x62\xe9\x98\xf2\x80\xa8\xfa\xaa\xd7\x33\xa3\x48\x34\x71\x02\x0c" "\x13\x41\x70\xaf\x7d\x25\x58\xc6\x73\xdd\x63\x82\x04\xeb\x55\x81\x27" "\xb1\xa6\x15\x65\x65\x2d\x10\xa6\xab\x8b\xd7\xf9\x95\x3b\xe3\xe8\xa9" "\x1c\xad\x46\x88\xd7\x3c\x4e\x17\x61\x60\x6f\x8f\x42\xcc\x8d\x7f\x74" "\x22\xc9\xa7\x14\x91\x50\x4e\xf1\xb1\x3a\x30\x96\x72\x7a\x31\x35\x91" "\x16\x46\xf6\x58\x6c\x86\x18\x5b\x2d\x93\x6c\x0a\x01\x26\xff\xfd\x7f" "\xdd\x91\xfe\xd2\xe0\x5d\x11\x28\x44\x98\x05\xa5\x57\x8c\x1e\x39\x3a" "\xe7\x6b\x2a\x58\x8d\x2e\xa1\x2c\x40\x54\x5a\x60\x70\xc2\xf6\x4a\x7e" "\xe0\xbc\x88\x46\xfa\x1e\xaa\x18\x85\x1d\x2e\x24\xb6\x08\x16\xad\x44" "\x44\xb2\x53\xe5\x03\x9d\x26\xa2\xea\xb0\x3f\x5d\x3e\xb7\x66\x93\xcf" "\x42\x5e\xa8\xdc\x21\x44\xb6\xda\xa8\x03\xf0\xc3\x7e\x5f\xd2\x93\x38" "\x79\xdf\x5d\x6d\x29\x9e\x4a\x2b\x98\x81\x36\x42\x6c\x43\x95\x60\x6e" "\xe3\x83\x6b\xfe\xa8\xde\x06\x80\xd4\xdf\x0e\xac\x94\xf9\x2f\x9a\x42" "\x50\x94\x78\x41\x98\x8d\x36\xcc\x8d\x1b\x08\x0a\x4f\x98\x5e\x27\x3c" "\x86\x03\x91\xe2\x98\x20\x41\x5c\x03\xc3\x51\xe9\xe0\x14\xe7\x34\x26" "\xbb\xdb\x9a\xe6\x2e\x20\x78\xd5\x64\xd3\x82\x67\xe9\xd2\x58\xc4\x1e" "\x4a\x4c\x8e\x39\xfb\x7a\x64\xd1\xb2\x05\x13\xa7\x53\x47\x65\x43\x54" "\x81\x00\x16\x1e\x42\x94\x0b\x81\xf1\xc9\x35\xa7\x7b\xc6\xb1\x2b\x28" "\x84\x89\x58\xfb\x3d\x7b\xb4\x75\x02\xc2\xcf\x06\xdb\xfa\x44\xcb\x00" "\x5e\x50\x8c\x91\x0e\x60\x8a\x9f\x20\xd4\xee\x62\x45\xa3\x8b\x7e\xe5" "\xfb\xb7\x43\x33\x8b\xc3\xf2\x84\xbf\xa6\x9c\xda\x60\x19\x5c\xce\x0a" "\x21\xfe\xdf\x0c\x36\x5c\x0c\x47\x73\x1a\x5b\x4f\xbe\xeb\x91\x12\x50" "\xf9\x56\x1f\x8c\x00\xe5\x03\x94\x78\x13\x2f\x11\x20\x11\xad\x08\x4e" "\x46\x1a\x25\x7b\x29\x0e\xec\x65\x78\x64\xfa\xca\x21\x31\xa4\xea\x5a" "\x7f\x95\x6e\x10\xe1\xa5\x9a\x61\x7e\x57\x7c\x9b\xd3\x0c\x65\x68\x3f" "\xf9\x34\xd9\x5b\x1d\x33\x7e\xc2\xfd\xdd\x9b\xc7\x07\x28\xc5\xfd\x4c" "\x50\xe1\xd6\xea\xf6\x28\xb3\xea\x07\xb2\x7d\x2b\x85\x75\xdd\x6f\x90" "\x51\x7a\x38\x5d\x06\x2f\xe3\xfa\x84\x56\x6e\x60\xff\xf5\x06\x50\x66" "\x50\x9f\x6f\x99\xf5\x7f\x6d\x5e\x66\xf3\xe0\x74\xb9\x24\x26\x95\x79" "\x17\x39\x4d\x15\x0f\x47\x8a\xe6\x6d\xeb\x68\x2d\x26\x28\x40\x9e\x8d" "\xe0\xf4\x6b\x76\x77\x6d\x54\xfb\xb6\x9f\x7c\xe0\x65\xfb\xad\x76\xd5" "\xfd\xc6\xd5\x37\x36\x71\x1f\x5a\x1d\xdc\xf6\x61\x1c\xcc\x2f\x5e\x5a" "\xce\x02\x78\xf1\x84\x4d\xff\x37\x60\x2d\xc9\x54\xb2\x0a\x0f\x26\x7f" "\x45\x1d\xc8\xe1\xbc\x67\x8b\x2b\x03\x40\xc6\x66\x27\x1b\xd5\xb1\x6b" "\x55\xad\x92\xd9\x7f\xe2\xa9\x60\xf0\xf5\x93\x39\x53\xb2\xee\x8b\xf2" "\xeb\xbd\x97\xdc\xd0\xec\x0c\x53\xb9\x65\xe9\xf8\xa9\xa8\x8c\x23\x70" "\x65\xa3\xb2\xed\x0b\xbf\x67\x3b\xb8\x30\xa9\xa9\xee\xa1\x89\x0c\x4b" "\x30\x7a\xc4\x52\xea\x9a\xde\x10\x32\xc9\x9b\x82\x01\x65\x01\xf7\x77" "\x7e\x09\xfd\xca\x18\xd8\xdf\x99\xd0\x5b\xfb\xd8\x2e\xcd\x57\x35\xe0" "\x8b\x95\x32\x87\xdb\x98\x9d\x2e\x32\x06\xe3\x6e\xec\xeb\xd9\xb8\x7c" "\xab\xcd\x86\x20\x4a\x12\x3b\x0c\xdc\xb0\x8c\x0d\xb1\x1a\x02\xbe\xd4" "\xc5\x12\x8f\x06\xee\x89\x3d\x7f\xe9\xfd\xda\x1b\xa4\x99\x27\x97\xdd" "\xa9\x62\x09\x1b\x82\xfb\xce\x0a\x76\x25\xec\xb8\x12\xf1\x9f\x36\xfd" "\xbe\xf3\xa6\x78\xb1\x61\x90\x53\xbc\x7b\xa0\xec\x40\xbc\x7d\x4d\x4b" "\x84\xfa\xb7\xf4\xb7\x24\xa3\x23\x66\x7d\xa0\x24\xb8\x6b\x78\x0b\x98" "\x17\x3e\xdc\x37\xc5\x4f\xa5\xc9\x9d\xd4\x7f\x38\x70\x84\xd1\x1c\xc0" "\xd2\x96\xce\x13\x79\x68\x30\xd2\x5a\x89\x33\xb4\x59\x44\x58\x1b\xa0" "\x73\x48\xf2\x6e\xb9\x6d\xb3\x8b\x9d\xb3\x3d\x64\x44\x9f\x37\x2d\x07" "\x39\xd4\x83\x4c\xd1\x92\xfa\x94\x30\x8f\xc7\x0b\xa5\x47\x82\x51\xbf" "\x0d\x7b\xea\x55\xfc\xc5\x72\xdb\xc3\x61\x68\x02\xed\x2b\xad\xb7\x4a" "\x8b\x96\x09\x96\x9d\xd0\xcc\x89\x75\xd8\x2a\xb9\xf5\x2f\x4d\xd4\xba" "\x12\x63\x92\xfc\xb0\x52\x54\xf6\x26\x12\x29\x08\x43\xf5\x36\xc6\x1f" "\xeb\xca\x74\x64\xf2\x1f\x66\xba\x83\x1d\x74\xfe\x2a\xee\xb8\xa8\x4e" "\xe0\x3b\xfc\xb6\x1c\x1f\x41\x5a\xd7\xe4\xf4\xc3\x06\x8b\xbe\xfd\x34" "\xf2\x32\x7f\xff\x8c\xe7\xdf\xbb\x93\x14\x27\xfc\x37\x7e\x59\xe9\x44" "\x41\x15\x35\x53\x5c\xc9\xfb\xe3\xd2\xbd\x84\xc8\x69\xa3\x2e\x0c\x44" "\x3f\x9d\x52\x45\xc7\xe7\xec\x9b\x25\x38\x7e\x97\x2f\xb0\xfa\x0f\xf4" "\x31\xd2\x59\x03\x21\x49\xd9\xfc\x6b\x7a\x10\x2b\x14\xfb\xb8\xb4\x98" "\xc3\xac\xf7\x82\x2e\xb1\x0c\xee\x1c\x23\x2e\x3b\xff\x2d\x16\x1a\x5f" "\x0b\xaa\x58\x1f\xdc\xab\x2b\xb2\x85\x61\x65\xfb\x6c\xd5\x2b\x8d\x2f" "\xf1\x1e\x5c\x36\x4c\x33\xbf\x76\x30\xcc\xe5\xdf\x1e\xec\x44\xd3\x28" "\xcb\x95\x00\xda\x15\x61\x16\xad\xf1\x62\xd2\xcb\x89\x51\x5b\xbb\x12" "\xe9\x86\x80\xd5\xc6\xf7\x94\xb6\x48\x38\xf8\xc3\x05\xd4\x7c\xb5\x21" "\xd0\x56\x42\x77\xc5\x28\xcd\xb3\x80\xa4\x04\xa3\xb5\xe4\x0f\xd1\x23" "\x86\xa6\x32\xe9\x3f\xb1\x07\xb3\xb9\x57\x25\x41\x22\xdf\x94\x98\x60" "\x06\x98\x61\x57\x41\x65\xf3\x98\x04\x04\x00\xf5\xe3\xe1\x97\x23\x2f" "\xb7\xdf\x92\xc0\x35\x19\xb1\x31\x84\x23\x4e\xff\xb7\xbb\x05\x85\x0b" "\x2b\x31\xbd\xb0\xd8\xa7\xb4\x70\xc2\x56\x70\x84\xd6\x46\x6d\x28\x4b" "\x6c\xea\x02\xd4\x92\xbb\x73\x19\xc5\x93\x44\xf3\x43\x47\xb6\x99\x64" "\xb6\x6c\x67\xff\xf7\xe2\x86\x69\x76\xac\x95\x60\x19\xb4\x1d\x97\x7c" "\x17\x9b\x93\x70\xf5\x20\x20\x32\x6e\x82\xa0\x19\xe7\xf4\x15\x36\xb9" "\x30\x4d\x69\xee\xb8\x45\xc2\xa4\x8b\x5f\xe0\xf5\x2e\x0c\x55\x1b\x18" "\x03\xa6\xd9\x0a\x75\x70\x90\xda\x3d\xae\x45\xca\xc7\xaa\x75\x4c\xf9" "\x8f\x10\xe2\x8c\xcc\xbc\xcb\xda\x62\x6c\x72\x87\xa9\x1d\xf8\x82\xcd" "\x71\xa3\x46\xc7\xde\x29\x8a\x3b\xbb\x74\x59\x0e\xc7\x94\x5f\x9d\xf6" "\xf8\xa8\xd9\x8a\x25\xbf\x1a\x17\x9d\x5e\x1a\xe1\xa6\x3a\x5c\x4b\xd8" "\x41\x2c\x2a\x38\xe6\xd8\x41\x71\x91\x32\x8a\xba\xa5\x30\x7c\x4b\xc2" "\xb1\x09\x15\xe9\xd8\xf0\x7c\xbb\x46\x19\xfa\xaf\x75\xec\x5b\x76\x3d" "\x0e\xb7\x91\xf7\xfb\xb2\xaf\xa7\xa7\xe8\x6e\xf5\x82\xf8\x7b\xf5\x67" "\x83\x60\xaa\xff\xf2\x66\x15\x0d\x70\xfe\xf1\x4f\x27\xaf\x9c\x04\x88" "\x47\x29\xca\x99\x67\xe0\xd5\xc0\x1f\x31\x62\xbd\x58\x60\xbc\xcc\x5e" "\xb0\xac\x61\xfe\x2c\xc0\x9d\x63\x1d\xd5\x20\xc0\xc8\x7a\xaf\xaa\x9c" "\x98\xe8\xb2\xed\x49\x68\xce\x0b\x76\xdd\x3e\xef\x72\xff\xae\x74\x3f" "\x78\xdf\xbd\x5b\x63\x15\x0c\xf8\x10\xfa\x83\x78\xbd\xab\xc9\xba\xfa" "\xde\x67\x7f\x33\x64\x5a\xc7\x19\x61\x47\xe4\x03\x01\xbe\x31\x0c\x95" "\x29\x28\x47\x2b\x61\x5f\xe5\x73\x95\x23\x64\xdf\xeb\xb0\xbd\xb3\x34" "\x4c\xe4\x25\x09\x48\x1f\xda\x16\x62\xbb\x56\x5a\x2c\x4a\x87\x12\xe7" "\x0c\x85\x44\x90\x00\xe2\x4d\x05\x99\xc2\x26\xff\xe0\xf9\x81\xba\x0e" "\x37\x6a\x61\x5d\x28\xe9\x6e\xba\xc9\xf5\x56\x93\xab\x03\xa6\x2c\x69" "\x19\xd1\x6a\xba\x70\xc1\x80\xd2\x65\x20\x6a\xa6\x7a\xdc\x9d\xf8\x0f" "\xb4\x50\x5e\xd9\xdc\x06\x25\xc1\xb9\x15\x5d\x9d\x4f\xdd\xc9\xb2\xf9" "\xbf\xf3\x8b\xab\x48\xaa\x88\x83\xbb\xcb\x6a\x5e\x21\x44\x8c\xa2\x13" "\xbf\x2d\xc8\x50\x70\x65\x6f\x71\x21\x8b\x42\x7f\xeb\x77\x89\x80\x6c" "\x0b\x8a\x05\x80\x64\xe8\x1b\x90\xb6\xff\xcd\x93\x73\x22\xe3\xde\xa4" "\xef\x1b\xa5\xad\x1a\x29\xee\xaf\xd4\xbe\x03\xce\x00\x2c\x51\x9a\xd1" "\x13\xae\x12\x2f\x60\x58\x61\x82\xe3\x9b\x8c\x20\x40\x46\x0b\xd3\x50" "\xbc\x06\xa0\xfa\x65\x4c\xc0\xf3\xad\x64\x05\x8b\x89\xee\x61\x96\xe1" "\xbf\xc7\x59\x53\x61\xfe\x8c\x27\xb4\x78\x90\x33\xa9\x4e\xfb\x85\x70" "\x94\x2c\x9e\xfa\x25\x42\x2c\xd4\xdf\xf3\x93\x60\xbf\xc9\x42\x25\x39" "\x67\x45\x92\x3e\xff\x67\xb9\xc1\xdc\x20\xcc\xa7\xfe\x64\xde\xb3\xfa" "\xab\xe5\x1b\x38\x8a\x89\x9b\xea\xf8\xf5\xdf\x45\x0a\x99\x1f\x89\x4d" "\xfa\x1c\xc0\x4b\x2f\x61\x55\xc9\x54\x2c\x46\x93\x97\xcb\x42\x7e\xe9" "\x4e\xfe\x16\xaa\x2c\x96\x1e\x92\xd1\x67\x40\x62\x86\x5e\x08\x37\xea" "\x8e\xc0\xf6\x07\xe6\x71\x67\x24\x4c\x07\xeb\x71\x6c\xcb\xfb\x56\x4c" "\xca\xaa\x84\x26\xf0\x6d\xdd\xb2\x02\x7f\x8e\xbb\x49\x17\x6a\xa6\x23" "\x4b\xa0\x3b\xe1\x66\x05\x21\x9a\x86\x83\xb8\xe6\xbe\x16\x70\x0d\xed" "\x30\xd5\x82\xcc\x5b\x7d\x1f\x0c\xb6\xcf\x4b\x17\xce\x9d\x47\xb8\x6b" "\x3f\x81\x98\x17\x0b\x28\x9f\xb7\x90\x11\xe7\x83\x62\xc8\x1e\x97\x18" "\x83\x50\x08\x06\xfe\xb6\x2f\x37\x1b\x97\xd7\x3c\x0e\xfb\x59\x16\x4c" "\x29\xd7\x65\x67\xed\xd6\x6f\xc5\xae\xaf\x82\x9a\x04\x16\x68\xab\xbc" "\xce\x79\x56\x61\x21\x74\x38\xb5\x44\x34\x5c\xf9\xc6\xa9\x06\xdc\xc0" "\x91\x2d\xc6\xb0\x8e\x7b\x3a\x08\xbc\x3f\xe7\x64\x61\x6d\x71\x43\xba" "\x29\xfd\x78\x31\x2d\xf0\x06\x65\x24\x2a\xaf\xc7\x3d\x92\x03\x4b\x6f" "\xd1\x3c\x83\xa0\x6c\x5b\xae\x01\x13\x10\xee\xce\x42\x60\xdf\xf2\x81" "\x23\x44\xd3\x45\xe2\x94\x37\xae\xcd\x5a\xe9\xfb\xe3\x1f\x74\x41\x18" "\x9f\x7d\x53\x03\x3c\xf0\xb6\xe1\x70\x79\x25\x54\xee\x27\x2f\x77\x1a" "\xdb\x81\xa6\x3a\x6a\xed\x47\xf4\x4b\xb4\xc1\x3e\xf5\xb6\xfa\x1e\xb5" "\x0e\x98\x80\xdd\x21\x50\x22\x1d\x43\x04\xd7\xe3\x2b\x7f\x7e\x2f\xc8" "\x52\x1c\x09\x8d\x88\x6b\x85\x91\x91\x80\xdb\x7f\xda\x65\x1b\x63\x9b" "\x00\x9a\xb9\x07\x01\x6a\xea\x25\xcf\x15\xc2\xe5\x4f\xd3\x4a\x2e\xbb" "\xa6\x91\xc4\xe5\x6e\xd4\x71\xdf\x70\x33\x8c\x24\xe4\x72\x5f\x95\x07" "\x82\x31\x13\xd0\x04\xca\xe5\x0d\x4a\x44\x36\xec\x33\xa2\x3c\x79\x56" "\x0c\x0a\xeb\xe5\x87\xb2\xd7\x4b\x57\x3d\xe1\x32\x23\x53\xe1\xd7\xb9" "\x4e\x8d\x87\x32\xda\x31\x28\x7f\xb0\x11\xcb\xf5\xba\xcd\x29\x7b\xbf" "\x02\xf2\x0a\xd1\xfb\x55\x49\xda\x3a\xc2\xc3\x41\x55\xdf\x66\x14\x86" "\x0e\xaa\xa9\xcb\x88\x57\x7d\xea\xa1\x4c\xa8\x91\x4f\x54\x75\x41\x87" "\xc2\xf3\x3b\x10\x76\x7f\x11\x88\x92\x0e\xe7\x55\xb8\xba\x35\xb1\x25" "\x6a\x1a\xb1\x81\x7b\xf9\xda\x5b\x4d\x48\xe2\xfa\x24\x8f\x36\xc1\xb4" "\x1f\x99\x6e\x99\xbc\x70\x6f\xf2\xdc\xae\xaa\x1c\xd3\xc8\x98\x83\xb0" "\x57\xed\xcc\x39\x9f\x3a\xef\x22\x23\xf6\xee\x92\xbe\x5d\x06\x8c\x0d" "\xab\x11\xf3\xa8\x03\xe5\x63\x38\xda\x1e\xf5\xba\x0e\x92\x32\xa4\xa2" "\x70\x01\xff\x36\x9e\xc8\x11\xf7\x27\x7c\x4c\x75\x11\xf5\xc7\x2a\xdd" "\x67\x9b\x75\x53\x9e\x6f\x78\xd0\xe2\xad\x4b\xa3\xfd\xbd\x10\x4d\x7f" "\xb4\x9a\xbf\x35\x56\xb1\x83\xcb\x6b\x3e\x8a\x47\x77\x58\x1d\x78\x55" "\x0a\x7e\xf0\xe8\x80\x1b\xcb\x45\x5b\xd4\xa6\x15\xe7\x20\xf8\x59\x63" "\x02\xb9\x5c\x96\x27\xcd\x11\xe8\x89\xad\xc8\xbd\x90\x35\xef\x82\xb9" "\x44\x42\x7c\xbc\xda\x4e\x19\x7b\x78\x90\xbc\xd9\x1e\x01\x32\xaa\xc5" "\x69\xd8\xfa\x68\xfd\x4b\x5e\x7c\xd8\x8d\xc3\x20\x3b\x31\xb8\xe6\xa5" "\xec\x2b\x9c\xbd\x4c\xc8\x14\x5d\xa9\x60\x75\xcc\xc1\xe4\x4a\xe8\xbe" "\x2b\xb5\xb2\xd3\x39\xc5\xa2\x95\x4b\xac\x68\x18\xbf\x65\x51\x50\x6b" "\x2d\xdf\xa4\x0c\x51\x8a\x10\x93\xf2\xa5\x68\xe6\x8c\xf5\x1b\x47\x7b" "\x8c\x30\x44\x30\x4e\x40\x3e\x3b\x00\x12\x5a\x95\xc1\x25\xd7\x41\x9d" "\x05\xe2\x00\xf1\xdf\xc2\x96\xe0\x26\xd9\xc6\x52\x95\x3a\x52\x4d\xbd" "\x4e\x0a\xd2\x41\x92\x63\x7c\x3c\x24\x6b\xe0\xfa\x7e\x74\x97\x3c\xbf" "\x6a\x4f\xd0\x8a\x30\x94\xac\x7e\xed\x36\xc4\xf7\x46\xaa\x2d\xff\x70" "\x86\xc7\xb2\x7b\xe9\x21\xd5\xf3\x39\x8b\xa2\xab\x61\x37\xb3\x67\xae" "\x81\xe4\xc7\x37\xdc\x5f\xdf\x2a\xe2\xe1\xfb\xb5\x4c\x3c\x58\xe2\x32" "\x1d\xab\x09\xbb\x76\x85\x2d\x73\x64\x98\xc0\x06\x9f\x0e\x6d\xf9\x57" "\xcd\x6d\x01\x99\x7d\x4e\x37\xb5\x63\xe5\xf8\xba\x74\x39\x40\xb0\xba" "\xdb\x63\x9c\xd3\x45\x44\x80\xc5\x2c\x4b\x31\x0c\x6b\xbc\x2b\x63\x5b" "\xe9\x42\x2c\xbe\x43\x69\x16\xaf\x65\xcf\x16\xbe\xb4\x64\x73\xfb\x96" "\x53\xb9\x9a\xcd\x0f\x4c\x22\x00\x10\xb8\x25\xe3\x98\x11\xdb\x29\xec" "\xa6\x8c\x36\xc7\x70\x9c\x8c\x0f\x32\x73\xaf\x72\xe8\xb7\x82\x10\xcb" "\x15\x8b\xf5\x3e\x6d\xd5\x2f\x8a\xfc\x56\xbd\x8b\x72\x58\x3b\x46\x6e" "\x11\x72\xbc\x2e\x3d\x28\x48\xef\xc3\xc5\xc4\x10\xcc\x5c\x9d\x51\xea" "\x28\x15\xda\x82\xe8\xfc\xaa\xf2\x69\x95\xdb\x23\xbe\x51\x29\x37\xbe" "\x40\x9e\xbe\x15\x40\xdd\xae\xf5\x05\x51\x3b\x70\x69\xbe\x09\xec\x4c" "\x46\x72\x3d\x8f\x75\x85\x2d\x71\xde\x3c\x8b\xb0\xa2\xcb\x11\xbc\xc9" "\x50\xdc\x2e\x58\x2e\xc1\xf5\xba\x34\x08\xb1\x80\xa1\x23\xc1\x84\x27" "\xee\x76\x8a\x82\x53\x5e\x58\x36\x09\x4d\xe7\x9f\xfc\x70\x7f\x69\x38" "\x14\xb4\x2a\x0b\x4c\xf4\xd5\x02\x5e\x54\x4a\x4b\x05\xf1\x54\xf8\x88" "\xc8\x04\xb1\x54\xc7\x91\xb3\x25\x48\xae\xcd\x2a\x6d\x55\x73\xc4\xde" "\x2d\x93\x6c\x5a\x45\xc3\xb5\x97\xe4\x18\x93\x20\x20\x67\xee\xda\x5e" "\x2b\xf7\x07\x57\x04\x58\x80\x52\x02\x9a\x59\x74\x25\x38\x7d\x07\xb5" "\xc8\x3c\x60\xdd\x47\x28\x6b\x0a\x7d\xfb\x69\xa8\x12\x62\x06\x7a\x50" "\xf4\xca\x85\xbf\xca\x33\xd7\x3e\x23\x32\xd8\x3e\xb7\x7c\xaf\xd4\x67" "\x41\x4c\x7b\x07\xdc\x38\x24\x25\x42\x97\x73\xb9\x2f\xb6\x63\xaa\x9a" "\x5f\x65\xb0\xc1\x49\x5b\xc2\x33\xf5\xd7\xe2\x02\x4a\x33\x86\x2f\xc8" "\x5c\x1f\x5c\x18\x74\xbc\x40\x89\xcc\x42\xc1\x2e\x27\x83\x77\xb7\x66" "\x7d\x99\x57\x61\x7d\xf8\x1c\xa7\xe2\x19\xcf\x12\x96\xf0\x49\x23\xc6" "\x8a\xdc\xb8\x17\x02\xe4\x3e\x2f\x0f\xbb\x1f\x27\x13\x85\xb8\x33\x78" "\xb8\x3a\xfd\x64\x2f\xb1\xb9\x3b\x28\x58\x18\x94\x68\x01\xce\xe5\x11" "\x0c\x59\x1a\x37\xa6\xfd\xb7\xcd\xf7\x38\xfc\x00\xd9\x41\xb9\x72\xe9" "\x98\xa4\xee\x16\x1c\x38\xa5\x68\xa3\x97\x23\x31\x9d\xce\x68\xce\x09" "\x91\x65\x3a\xd8\xb8\xa3\x8d\xb6\x9e\x7e\xf0\x70\xac\x56\xd5\x94\xbe" "\xed\x91\x0b\xd5\x2f\xbc\x76\x18\x9b\x5b\x9e\x53\xcd\xdc\x15\x8c\xba" "\xc3\x24\x48\x1c\xb0\xb5\xdb\x62\xf7\x79\x9c\xc6\xd7\x36\x35\x84\x47" "\xc8\x06\x40\xb2\x66\x21\x27\x75\x4a\x1f\xef\x6b\x2f\x4f\x55\x64\xa4" "\xa0\xc4\x73\x93\x34\x0c\x16\x4b\xd2\x37\x65\x50\x6e\x2a\x39\x2f\x6d" "\xc1\xa7\x34\x2b\xc3\xe4\x52\xfe\xc6\x9a\xd7\x19\xdf\x75\x08\x07\x38" "\x49\x74\xbb\x4d\x14\x0b\x1f\xb1\xb4\xab\xfb\xd9\x2f\xd9\x14\x81\x63" "\x72\xca\xbe\xbf\x4b\x6c\xde\x38\x76\xd7\x9a\x86\xbf\x9b\x44\xe6\xb0" "\xc7\x20\x77\x5e\xe8\xd8\xee\x71\x62\x9b\x7a\xa5\xd6\xdb\xc0\x1f\x20" "\x1f\x8d\xd8\x15\x5a\x09\x61\x61\x42\x63\xd0\x3a\xd0\xb8\x35\x20\xad" "\x17\x93\xd4\xbf\xfe\x6d\x76\xb5\xc3\x0d\xf3\x7b\x0a\x8a\x1f\x4a\xfc" "\xaa\xfe\x5f\x83\xac\xae\x04\x88\x63\x0e\x7d\x2b\xfc\xd9\x1d\x07\x67" "\x30\xa1\x8c\x1d\xe7\x18\xa3\xf3\x93\x83\xb7\xb5\x7b\xcc\x20\x85\x42" "\xc5\xdb\x3b\x0e\x1d\x55\x95\x51\x4c\x04\x81\x05\x3a\xf4\x37\x96\x56" "\xae\x98\x69\x4c\xab\x55\x70\x9f\x85\x79\x48\xc7\x15\x65\x37\xf7\xdf" "\xbe\xc7\x2f\xea\x6c\xd9\xc3\x17\xc0\xde\xdd\x92\x42\x0f\x8b\x96\x0c" "\x32\xd9\x54\xfe\x9d\x7c\xb4\x5a\x13\x3c\xcf\xdb\x99\xc1\x31\x57\x7d" "\xba\x97\x84\x75\x6b\x0a\xdf\x35\x6a\xc4\x92\x5d\x93\x6b\x9b\x2b\xcc" "\x97\x71\x1a\x4d\x6d\xec\x25\x44\x20\x01\x65\xe8\x0c\x49\x73\xc5\xfa" "\xcc\xf5\x78\x1e\xee\xf1\xd1\xca\x41\x5b\xdc\xb9\xbb\x0c\x7e\xae\x93" "\x65\x96\x7e\xa7\x9b\xe5\x8c\xb7\x6e\x93\xbb\x8d\x3f\xe5\xb5\xbc\x83" "\xcb\x1a\xdd\x3e\x79\xaa\x84\x4e\x6f\x46\x03\x0f\x2e\x94\x9f\x13\x53" "\x2c\x1e\x76\x19\xa2\x5f\x56\x25\xa3\x09\xa4\x83\xa2\x33\x8b\x68\x48" "\xf5\x25\xef\x06\x6d\x18\x96\x4c\x8d\xe9\x9b\x78\xb4\x53\x08\x9e\x2c" "\x74\x7d\xb8\x5b\x76\x7c\xf9\x0e\xd9\x50\x75\xd8\xd1\xce\xe2\x17\x23" "\x78\x9f\xdf\xdb\xaf\xb4\x7e\x87\x9a\xbf\x6a\x86\x02\x0d\x18\x13\x68" "\xd5\x83\x9e\x52\xbb\x67\x15\x88\x17\xc9\x87\x44\x70\xd5\x10\xdf\x15" "\x30\x82\x3d\x82\xb6\x84\xed\xbb\x04\x12\xe2\xe5\x6d\x49\x54\x25\xe4" "\x9f\x55\xc7\xcf\xb4\x5a\xd1\xd2\xa9\xf7\x2d\x51\x14\xe0\x7d\xe2\xce" "\x9e\x87\x0f\x31\xe6\xff\x58\xdf\x85\xd3\x33\x4a\x61\x59\x51\x50\x0b" "\x12\xee\x22\x35\x8f\x6c\x84\x97\x23\xfc\x30\xaf\x45\xaf\xbc\x98\x75" "\xd8\xdb\x6e\x11\x04\x3c\xec\x5a\x08\x09\x02\xa4\x1c\x1f\xc8\xa3\x99" "\xf1\x70\x08\x64\xb9\xbc\xa4\xc7\xdf\xcb\x70\x48\x94\xd3\xbf\x96\x87" "\x2f\x74\xd2\xac\xcd\x83\x9f\x48\x36\x38\xa9\xa4\x69\xed\x85\xd2\xd1" "\xca\x4e\x3f\x11\x86\x6a\xec\xff\x86\xd9\x73\x4f\x81\xb0\x38\x89\xe1" "\x32\x71\x5e\x1c\xb6\x12\x23\x6e\x98\xa9\x2a\xe6\x4a\x20\x46\x56\x67" "\x36\xf3\x4d\x1d\x26\x8c\x55\x39\x0e\x44\x28\x7a\x7a\xd0\xf1\x8a\xec" "\x3f\x42\x32\x78\x9a\x17\xfd\x51\x2b\x85\xd3\xbd\xd2\x53\xdc\xbb\xc4" "\x08\x07\x80\x6e\x92\x3e\x25\x2e\x5b\xd8\x8e\xeb\x4b\xa9\x74\x3d\xcf" "\x69\x1d\x9a\x39\x26\x5d\x84\xc5\x9c\xe3\x4e\x3f\x19\x78\xc6\x9b\xd2" "\x38\x8a\xc9\x8a\x92\xdc\xcc\x68\x39\x12\x80\xe2\x9a\x78\x03\x0d\xda" "\x08\xcb\x9e\xa5\x76\x87\xce\x5e\xfc\xa2\xc6\xa3\xcf\x77\xc8\x66\x27" "\x73\xf5\x34\x52\xfd\xb6\x41\x45\x62\x2b\x4b\xeb\xb6\x3b\x93\xcf\x2b" "\x81\x0e\xba\xb3\x59\x50\x0a\xad\x57\x48\xf9\x92\xad\x8d\xc0\xb2\x0e" "\xbc\x8e\xc7\x29\x6a\x2f\x00\xa8\xad\x69\x17\x4e\x71\xa1\xb8\x92\x3c" "\xd8\xff\xe9\x51\x94\xb7\x3a\x28\x97\xba\xf4\xe1\x62\xf5\x2e\x11\x4e" "\x78\x89\xa3\xe6\x42\x83\xe8\x8e\x22\x42\x47\x2c\x5a\x44\x0e\x40\x44" "\x23\xdc\x63\xd2\x1f\x82\x67\xe8\x33\x26\x10\x6a\xd5\xbd\xac\xe5\x8a" "\xb1\x94\x63\x9c\xe8\x71\x72\x1f\x93\x00\x51\xb3\x0d\x6f\x0f\xcd\xb3" "\xdc\xc4\xc5\x1f\xb0\x4f\x88\xda\x3c\x6e\xce\x00\x52\x02\x56\xd2\x7e" "\x26\x3a\xee\xc5\x8a\xcf\x31\x02\x64\xbd\xd1\x52\x0d\x48\xdf\x23\xf6" "\xbb\xf6\x89\x1f\xfa\x93\xa4\x65\x7e\x23\x3f\x37\x18\x23\x75\x44\xf3" "\xe3\xea\x4d\x60\x5a\xf5\x68\xef\xfa\x40\x9b\xa6\x35\x11\x54\x66\xf5" "\xf6\x1f\x77\x9c\x3d\x2c\x74\x91\xbd\xc6\xb0\xa0\x55\x44\x6d\x2a\x29" "\xb0\x2e\x4c\xa1\x6f\xf7\x27\x31\x78\xcf\x9e\x88\xb7\x41\x21\x93\x2c" "\xc1\x3b\xe7\xdb\x95\x02\x16\x3f\xd1\x1a\x91\xe1\xa5\xb0\xf7\x6e\x37" "\xb7\xc5\x42\x38\x1e\x4e\x69\x0b\x4e\xee\xcf\x04\xae\xb4\x56\x42\x86" "\x85\x8d\x1a\x0d\xec\x79\x96\xfc\xf2\x9b\xb6\x1a\xcf\xee\xee\xe1\x08" "\x87\xca\x1a\xd8\x5c\xa1\x39\xe3\x79\xed\x94\x93\xe0\xdc\x2a\x99\x3d" "\x44\x18\x5b\x48\x9d\xf5\xc9\xbf\x00\x5f\xe6\x25\x07\x2a\x46\x1c\x29" "\x8a\xb6\x9c\xa0\x7a\xdf\x07\xd2\x77\x8f\x81\x3b\xc6\x10\x81\x94\x42" "\xf1\x57\x86\x83\x11\xff\x3d\x3d\x36\xb0\xce\x5c\xb6\xe5\x93\x81\xcc" "\xb5\x8e\x12\xba\xb0\xca\xc7\x59\x64\x32\x22\x5d\x5c\xdc\x81\x90\xf6" "\xc9\x11\x98\x68\xe4\x02\x67\xd5\x32\x88\x4c\xf5\x09\x2a\x84\x7b\x9a" "\xe5\x83\x66\x0d\x94\x15\xc2\x87\xff\x11\xe2\x20\x51\x95\x7e\x40\xb3" "\xb3\x35\xa4\x4b\xf3\xe4\x99\xea\x34\x8e\xbe\xd9\x13\x41\x25\x8b\x61" "\xea\xab\xd1\x11\xc2\xba\x7e\x77\xb1\x21\x56\x46\x2b\xe9\xb7\xf1\x27" "\x33\xa7\x50\x91\x29\xfd\x38\xc0\x84\x46\xc6\xd9\x28\x89\x2c\xda\xfe" "\xb0\x88\xb1\x2d\x2b\xca\x3d\xfc\xc2\xba\xd6\x23\xd5\xa9\xe4\x01\x33" "\x79\x96\x67\xae\xd5\xe7\xd0\xde\x7e\x43\x99\x81\x6a\xa4\x84\x7e\xb0" "\x93\x9d\x2d\xd2\x7b\xe2\x46\xa8\xe2\xb0\x59\x7f\xba\x29\xa0\x3d\x49" "\x3e\xe4\xa9\x80\x85\xc0\xe8\x61\x60\x18\x70\xf8\x18\x98\xfd\x15\x94" "\xc4\x0d\xfe\x50\x7c\x46\xc9\xe3\xdb\x3f\x79\xbb\x43\xf0\xe6\xce\xdc" "\x9d\x82\xde\x45\x92\xbf\x37\x69\x50\xcf\x57\x7b\x22\xd7\x6f\x5d\x73" "\x47\xac\xf9\x76\xb0\xea\x8d\x85\x8c\xed\x2a\x64\xfd\xfe\x77\x64\xc0" "\x9a\xc8\xde\xf7\x2b\xeb\x35\xe3\x38\xc7\xfb\xb9\x5e\x91\xf3\xd1\xaf" "\x05\x57\x1e\xd6\xb3\xfb\xc2\xa2\x4a\x7b\x9d\x5b\x43\x91\xae\x27\x0a" "\xc9\xbf\xb5\x83\x26\xd7\xa2\x0c\xb5\xfe\x16\xf5\xd0\xac\x1a\xe6\x7f" "\x83\xf6\xd3\x74\xe6\xfb\xb5\x7e\x94\xf7\x02\x4d\xde\x6b\x97\x35\xea" "\x47\xd4\xbe\xef\xb1\xde\x95\x15\x63\xf2\x3a\x5b\xb1\x98\xf2\xae\xe5" "\xc9\xe6\x2c\x14\x76\xab\x64\x34\x29\xb8\xa3\x1f\xf8\x50\x7f\xd0\xd4" "\x6b\xed\x5d\x3c\x06\xe8\xc6\xfc\xdf\x62\xa0\x0c\x52\x9c\xe5\x0b\xce" "\xe4\xd3\x3a\xf3\x54\x09\xe7\xd8\xbb\xc0\x61\x9b\x6a\x07\x4d\x89\x11" "\xaa\x9b\x90\x84\xb7\x3a\x67\x0d\x7e\x30\x2b\x51\x8a\xbc\xed\xc9\xc2" "\x70\x22\xa7\x45\x2d\x7c\x7d\x4b\x6b\xd1\x88\x89\x00\x99\x6e\x04\xb1" "\x82\x02\x70\xa4\x1c\xa3\xe7\x23\xe1\xd4\x15\x17\xa8\xa4\x92\x49\x08" "\x7f\xc5\xa0\x92\x90\x4c\x35\x54\xf1\xc2\xd3\x4f\x3b\xb1\xb2\xbf\x38" "\xdd\xe2\x49\x27\xa4\xc5\xf7\x01\x84\xd6\x5d\x64\xdc\x03\xe5\x5d\x6f" "\x8a\x2c\xfc\xf9\x90\x18\xec\xfe\xf5\x30\xa6\x6e\xb2\x63\x68\x83\x0c" "\x08\x12\x14\x9c\x0b\x42\x5f\x8d\xad\xbd\xf9\x81\x2b\x50\x23\x10\xcc" "\x6b\x6e\xde\x71\x45\x4e\x72\x44\xc7\xae\x80\x56\x25\x38\xe5\x53\xfa" "\xc2\xb0\x07\xb0\x12\xbd\xcd\xda\x93\x2f\x36\x32\x70\x23\xd3\x2b\xef" "\xfd\x6e\x62\x6d\xc4\x82\xff\x71\x56\xa1\xbd\x23\xe1\xd0\xac\xbc\x13" "\x84\x60\xbc\xa8\x1f\xdc\xf2\x72\xfb\xa4\xdf\x1f\x7c\x9a\xc6\xf2\x42" "\x21\xbc\xda\x4c\x62\x7b\x8f\x96\x5a\xbf\x91\x3f\x91\xf7\xc7\xdf\xd2" "\xe0\x10\x93\xbe\x4f\x98\x04\x9c\x3f\xa9\x0e\x64\xe5\x68\x34\x92\x28" "\xc4\xd1\xb8\xa4\xa4\xf7\xe6\x2a\x44\xaa\x4c\xe6\x11\x4f\xd7\x03\xe1" "\xd4\xa8\x2b\x94\xec\xd4\x44\x7c\xe1\x72\xe4\x6c\xc2\xe0\xaf\xa0\xbc" "\x98\xac\x2c\x9e\x26\x77\x67\x44\xb5\x3d\x50\x57\x64\x7b\xa0\xb6\x6e" "\x13\x12\x70\xc2\x0c\x04\x2f\x71\x38\x02\xab\xc5\x36\x0e\x23\xfa\x5e" "\xd8\x33\xa9\xa6\x56\x10\x9c\xce\xe1\xea\x12\x3c\x3c\x35\x3e\xba\xf8" "\x96\x1c\xec\xa4\x32\xda\x7d\xfa\x65\x06\x60\x77\x02\x54\x76\xa4\x0b" "\xc3\xfe\x3d\x52\xb3\xe7\x92\x60\x3d\xa8\xb4\xfb\x83\xe3\x02\x43\xe8" "\x35\x15\xa2\xce\x6e\x6b\x9e\x20\x8a\xb1\xb0\x5c\x14\x64\xb5\x12\x89" "\x39\xc8\x28\xbf\xb4\x66\x3b\xc2\xa7\xda\x31\xd9\xe8\x48\xca\x16\x58" "\xf3\xd9\xf0\x92\xdf\xa5\xc4\xc9\x31\x32\x3c\xa9\x15\xc9\x7e\xf6\x8b" "\xaf\xb1\x17\xc1\x21\x9f\xce\x2d\x6d\x67\xec\xc9\x94\x0a\xe2\x66\xd8" "\xba\xab\x12\x68\xc9\x83\xb6\xe5\x72\x90\x44\xca\xf6\x7e\x22\x24\xa8" "\x36\xc7\x52\x3e\xac\x3d\x3e\x43\x61\x3d\x70\x99\xc1\x63\xaf\xf1\x4e" "\xd3\xbb\xc9\x0c\x77\x76\x58\x14\x49\x6a\x01\x53\x66\x29\x93\x3d\xa3" "\x2c\xae\x41\x67\x39\x8c\xe0\x8c\x94\xd1\x23\x51\xd9\x5a\xd5\xbf\x0b" "\xbe\x15\xf4\xcb\x86\x4b\x51\x62\x2d\x33\x7a\xbd\x69\x3d\x87\x0b\x45" "\x23\x87\x73\x03\x20\x41\x53\x2a\xbc\xf3\xd1\x56\xaf\xd0\x05\x5a\x29" "\xb9\x76\xb5\xe0\x92\x02\xc9\x14\x29\xfb\x58\x63\xef\xb8\xb4\x24\x86" "\xb7\x4d\x2a\xc1\x95\x28\xc5\x46\xb0\x4d\x72\x3b\x9e\x38\x39\x90\x67" "\x4c\xa8\x27\xd3\xb5\x47\x5f\xe0\x09\x2a\xb1\x91\x8f\x1c\x3b\x38\x71" "\x09\x3c\x67\xd2\x5f\xfa\x2f\x95\x1f\x60\xba\xe6\xa7\x2a\x93\x7a\xc0" "\xe0\x5c\x18\xcc\x06\xd3\xe7\xcf\x97\x4a\x12\x2f\x5c\xd5\x8e\x6a\xf8" "\x15\xaa\xd6\xf9\x12\x14\x82\xfd\x68\x8b\x31\xc5\xa5\x1e\x73\x86\xfb" "\x22\x9d\x23\x20\xff\x99\xbc\x29\xdc\x77\x7b\x73\xcc\x36\x0c\xfa\x3f" "\x06\xb7\x13\x93\x91\x3c\xf0\x3b\x5c\x16\xde\xe3\x5c\xea\xb8\x6f\x33" "\xfc\xda\xfd\xd1\x67\xf4\xbc\x6d\x6e\xc3\x7b\x44\x29\xdb\x6a\x10\x87" "\xd8\xe5\x06\x08\x83\xf5\xee\x0a\xdf\x20\x26\x24\xa6\x77\x54\x0a\x0a" "\x9d\xb2\xac\x96\x3e\x26\xe7\x92\xe8\x57\xee\xb4\x55\x23\x7b\x1b\xb4" "\xc0\x23\xc5\x48\x6e\x53\xac\xf0\xa6\xca\xc1\x7c\xa2\xd3\x78\x4b\xfd" "\x91\x32\x49\x77\xc9\x70\xf8\x84\x65\x6c\x7b\xce\xbf\xd5\x08\x05\x83" "\xf2\x9f\xf3\x08\x15\xb9\xe3\x05\xc5\x7a\x24\x1d\x14\x8a\x61\x86\xd1" "\xc9\x8c\xef\x87\xfb\xbc\x7e\xc2\x86\x01\x5f\x6a\xbb\xd8\x9f\xf4\xd0" "\xc8\x23\xf8\xca\xa4\xdd\x65\x34\xfb\x68\xb0\xe4\xdb\x0f\x8d\xad\x7a" "\x06\xab\xe8\xb0\x84\x72\x22\x46\xaf\xef\xed\x9a\x84\xac\x93\x00\x86" "\x02\x46\xe4\x85\x80\x27\x67\x56\x3d\x77\x2d\x45\x1b\xaf\xcc\xf8\xdf" "\x00\x51\x45\x67\x7d\xc4\xab\x45\x49\x3e\xbd\xda\x55\x60\xd5\xe0\xdd" "\x68\xf0\x67\xac\x7c\xab\xe0\x40\xe5\xf7\x63\x9b\xba\x4f\x55\x27\x66" "\x94\x24\xd9\xfa\x3e\xea\x3f\xa9\xaf\x46\xea\xce\xc8\x08\x01\x2c\x90" "\x6f\x7c\xee\x8c\x36\x63\x6c\xe6\x78\x08\x41\x9f\xd9\xb8\x8e\x36\x93" "\x00\x51\x0e\x5b\x23\xab\x5f\xf2\x38\x00\x72\xd9\x4c\xff\xdf\xb2\x51" "\x4f\xa3\x86\xf4\x7e\xa3\x79\x2c\x70\x9a\xd0\xd7\x7a\x79\xd7\x5c\xa2" "\x0e\x79\xd5\x62\xd8\xc8\x6b\xbe\xc1\xe4\x68\x87\x08\x27\x18\xbc\xc3" "\x6e\x6a\x46\x44\xb0\x38\xf0\x72\xed\xe1\x64\x0f\x5a\xbc\x19\x22\x78" "\x75\x3c\xd2\x37\x48\xee\x83\xfb\xf7\x9d\x69\x78\xed\x1d\x4b\x3b\xcf" "\x1b\xfc\xe5\x6d\x22\xa0\x2c\x95\x38\x71\xe0\x19\x6f\x7b\xc4\x0b\x2b" "\xa2\x56\xfc\x7a\xa9\x05\x1a\x0e\x4d\xe4\x62\x07\x7d\x70\xed\xc9\x26" "\x22\xc0\xcc\x61\x70\x01\x83\x78\x10\xa8\xe0\xfd\xd7\xbf\x9c\xc9\x4f" "\x54\x7f\x71\x61\x18\x40\x87\x75\x41\xa8\x25\x08\xa0\x82\x2b\xdd\xa0" "\x0e\x06\x66\x5a\x07\x14\x76\x26\x98\xaa\x5a\xfe\xb8\x96\xd9\x99\x25" "\xf1\x5e\xc0\x31\x1b\x86\xc6\x89\x70\x43\x2d\x91\xc7\x32\xee\xfa\x3a" "\x13\xe2\xd3\x78\x56\xa3\x79\x41\xb1\x13\x36\x38\x04\x30\xa3\x97\x7f" "\x2b\x51\xb3\x72\x9b\xf7\x81\x15\x82\xd0\x49\x03\xfe\xdd\xd4\xd8\x00" "\x1f\xbc\x1b\x24\x9f\x4d\x02\x8f\x11\xeb\x52\x8d\x54\x31\x05\x36\xb9" "\x69\x5e\x39\x02\xf5\x97\x4e\x2f\x62\x63\x6b\x71\x85\x16\x33\xc2\xc2" "\xb9\x34\xc2\x9e\xd9\xa8\x9f\x0b\x1f\xb2\x98\xa8\xec\x82\xdf\x62\xeb" "\xda\x5f\x32\x17\x86\xd5\x3c\xee\x0f\x73\x39\xe3\xe3\x89\x67\xb2\x11" "\x4b\x7f\x39\xa5\x55\x38\x8a\x21\x57\x04\x14\x91\xb7\xd6\x92\xa3\x63" "\x75\xf5\x48\x6c\xad\xea\xf8\xc7\x93\x4f\x4f\x60\x9c\xb2\xfe\x12\xcf" "\xd8\xf0\x68\xae\xcf\xe2\xfd\x96\x90\x61\x68\x60\x31\xf7\xdf\x3a\x22" "\x12\x31\x65\xaf\xaf\xc3\x62\x50\x32\x03\x98\xa8\x7e\xa5\x31\xdf\xcd" "\x0c\x0b\x37\x41\x83\x01\x83\x89\x80\xf1\xe0\x14\x16\x49\x79\x96\x72" "\x20\x5f\xc3\x6b\x3e\x25\x4a\x43\xe9\xb8\xf4\xe9\xdf\x63\x77\xf5\x4d" "\x1c\x11\xcb\xab\x81\x96\x25\x2a\xef\x64\xb2\xea\x9b\x89\x6b\x33\x07" "\x76\x3b\x12\x5a\xb8\x06\xf4\xdc\x98\xbc\xc3\xd9\xc8\xc3\x48\x73\x4c" "\xf3\xba\xf7\x0c\x24\xc8\x90\x18\xfa\x10\xf6\x57\x90\xea\xe0\x50\x63" "\x95\xe9\xe2\x26\x9e\x97\x54\x85\x5e\x78\x48\xb0\x83\x66\x25\xf7\x0f" "\xf4\xf7\xe8\x99\xf2\x7b\xc1\x8d\xcb\x12\x99\x07\x02\x90\x1f\x2b\x93" "\x3b\xa9\x14\x39\x73\xfa\x62\x3d\xee\x22\xc4\x19\xcb\x21\xd6\x9e\x7d" "\xde\x84\xf1\x16\x8d\x4f\x32\xdd\x9f\x9e\x98\xcc\x94\xff\x1a\xb5\xbb" "\x2c\x8b\xa5\xe9\xf2\xe3\x32\xd2\xdc\xf5\x64\xf1\x74\xcc\xfa\xb8\x43" "\xea\x20\x8b\xff\x16\x06\xed\xba\xbb\xeb\xab\x78\xa9\x3d\xc7\x47\xdf" "\xb0\x86\xa4\x7b\x56\x43\xaf\x92\x4f\xe4\x54\x16\x4c\xd4\xf0\x13\x2f" "\xbd\x2b\xc0\x1e\x9c\xb9\xd3\x45\x71\xac\x2b\x7b\x26\xdc\xb0\x8c\xe2" "\x4e\xb5\x9f\xf8\xb2\x98\xb9\xc0\xd0\x95\x7c\xdf\xd0\x19\xa1\x8a\x48" "\x33\x44\xd7\xe0\xb7\x10\x82\xd7\x4f\x1f\x98\xfb\x60\x83\x05\x3a\x5e" "\xcd\x71\x24\x9d\xaf\x21\x9d\xae\x4f\x12\xb6\xe9\xf8\x22\x2b\x26\x5d" "\x70\x86\x38\xa8\xdb\x54\xd8\xfd\x03\x57\x4d\x82\x22\x8f\x1e\xdb\x6f" "\x3b\x8b\x1d\x85\x50\xa6\xac\x52\x6a\x02\x74\xb7\x57\x4a\xa9\xbb\xa6" "\x85\x0c\x83\xb9\x8d\xe5\xa5\x7f\xe6\x09\x87\x2a\x60\xd7\x5c\xa3\x7c" "\xf6\xf9\x37\x0a\xf8\x22\x7e\xe2\xfa\xe3\xf8\x93\xf5\xc5\xa8\xb5\x95" "\xec\x20\x50\x30\x7e\x05\xe2\x00\x94\xbf\x1c\x21\xf9\xe6\xe7\x5a\xfa" "\x69\xaf\xf8\x30\x0a\x00\x9e\xd2\xf6\x4b\x42\x6f\xd3\x44\x33\x87\x67" "\x10\x78\x6f\xf8\x41\xd2\x78\x99\x4c\x68\xdc\xe8\x5c\x81\x02\x81\x43" "\xd3\xc2\x1e\x55\xe2\x98\x03\x02\xc0\x19\x00\x65\x27\xd2\x88\x30\xa6" "\x91\x54\xaa\x89\xc1\xe7\x4e\xea\x74\x79\x38\xbe\xbd\xf2\xc0\x4c\xd1" "\x41\xf2\x14\x16\x2d\x20\x74\xf9\x05\xca\xef\x9f\x05\x57\xa0\x72\x0f" "\xe6\x63\x61\x3c\x13\x4c\x3f\xf2\xeb\x5e\x83\x2a\xa3\xfb\xf1\x39\xe2" "\xd7\x31\x9b\x27\x4c\x9f\x46\xae\x6f\x24\xbd\x54\x35\x08\xef\x15\xb3" "\x7d\xc0\xbb\xd2\x09\xef\x47\x28\x76\x76\xe3\xe5\xe4\x84\x16\xb3\x82" "\x7a\x9c\xe4\x02\x5c\x1e\x0a\x3e\xd6\x03\x58\x3f\x98\x05\xdb\x40\x64" "\xf0\xd2\x50\xf6\x93\x4f\xb9\x6e\x59\x2e\x81\x84\xd5\xbf\xb6\x1d\xc1" "\x34\x09\x60\x34\x11\xe8\x04\x80\x37\xb7\xc4\xc8\x35\x78\x5b", 8192); *(uint64_t*)0x20004ac0 = 0x20002240; *(uint32_t*)0x20002240 = 0x50; *(uint32_t*)0x20002244 = 0; *(uint64_t*)0x20002248 = 0x7f; *(uint32_t*)0x20002250 = 7; *(uint32_t*)0x20002254 = 0x24; *(uint32_t*)0x20002258 = 0xef2; *(uint32_t*)0x2000225c = 0x408840; *(uint16_t*)0x20002260 = 6; *(uint16_t*)0x20002262 = 9; *(uint32_t*)0x20002264 = 5; *(uint32_t*)0x20002268 = 0x7fffffff; *(uint16_t*)0x2000226c = 0; *(uint16_t*)0x2000226e = 0; memset((void*)0x20002270, 0, 32); *(uint64_t*)0x20004ac8 = 0; *(uint64_t*)0x20004ad0 = 0; *(uint64_t*)0x20004ad8 = 0x20002300; *(uint32_t*)0x20002300 = 0x18; *(uint32_t*)0x20002304 = 0xfffffffe; *(uint64_t*)0x20002308 = 7; *(uint32_t*)0x20002310 = 3; *(uint32_t*)0x20002314 = 0; *(uint64_t*)0x20004ae0 = 0x20002340; *(uint32_t*)0x20002340 = 0x18; *(uint32_t*)0x20002344 = 0; *(uint64_t*)0x20002348 = 0x81; *(uint32_t*)0x20002350 = 4; *(uint32_t*)0x20002354 = 0; *(uint64_t*)0x20004ae8 = 0; *(uint64_t*)0x20004af0 = 0; *(uint64_t*)0x20004af8 = 0; *(uint64_t*)0x20004b00 = 0x20002480; *(uint32_t*)0x20002480 = 0x18; *(uint32_t*)0x20002484 = 0; *(uint64_t*)0x20002488 = 2; memcpy((void*)0x20002490, "rootmode", 8); *(uint64_t*)0x20004b08 = 0x200024c0; *(uint32_t*)0x200024c0 = 0x20; *(uint32_t*)0x200024c4 = 0xffffffda; *(uint64_t*)0x200024c8 = 0xc3d; *(uint64_t*)0x200024d0 = 0; *(uint32_t*)0x200024d8 = 3; *(uint32_t*)0x200024dc = 0; *(uint64_t*)0x20004b10 = 0; *(uint64_t*)0x20004b18 = 0; *(uint64_t*)0x20004b20 = 0; *(uint64_t*)0x20004b28 = 0x20004840; *(uint32_t*)0x20004840 = 0x150; *(uint32_t*)0x20004844 = 0xffffffda; *(uint64_t*)0x20004848 = 5; *(uint64_t*)0x20004850 = 3; *(uint64_t*)0x20004858 = 2; *(uint64_t*)0x20004860 = 0x92c; *(uint64_t*)0x20004868 = 0xa00000; *(uint32_t*)0x20004870 = 0xfffffff7; *(uint32_t*)0x20004874 = 7; *(uint64_t*)0x20004878 = 2; *(uint64_t*)0x20004880 = 5; *(uint64_t*)0x20004888 = 0x20; *(uint64_t*)0x20004890 = 0xce; *(uint64_t*)0x20004898 = 0x40; *(uint64_t*)0x200048a0 = 0x40; *(uint32_t*)0x200048a8 = 8; *(uint32_t*)0x200048ac = 9; *(uint32_t*)0x200048b0 = 8; *(uint32_t*)0x200048b4 = 0x1000; *(uint32_t*)0x200048b8 = 0x80; *(uint32_t*)0x200048bc = 0xee01; *(uint32_t*)0x200048c0 = -1; *(uint32_t*)0x200048c4 = 5; *(uint32_t*)0x200048c8 = 0x8001; *(uint32_t*)0x200048cc = 0; *(uint64_t*)0x200048d0 = 0; *(uint64_t*)0x200048d8 = 3; *(uint32_t*)0x200048e0 = 2; *(uint32_t*)0x200048e4 = 0x3f; memcpy((void*)0x200048e8, "fd", 2); *(uint64_t*)0x200048f0 = 3; *(uint64_t*)0x200048f8 = 0; *(uint64_t*)0x20004900 = 0x800; *(uint64_t*)0x20004908 = 0xffffffffffff3125; *(uint32_t*)0x20004910 = 1; *(uint32_t*)0x20004914 = 1; *(uint64_t*)0x20004918 = 1; *(uint64_t*)0x20004920 = 0x80000001; *(uint64_t*)0x20004928 = 6; *(uint64_t*)0x20004930 = 0x100000000; *(uint64_t*)0x20004938 = 2; *(uint64_t*)0x20004940 = 0xb8; *(uint32_t*)0x20004948 = 9; *(uint32_t*)0x2000494c = 0x7c; *(uint32_t*)0x20004950 = 4; *(uint32_t*)0x20004954 = 0x6000; *(uint32_t*)0x20004958 = 6; *(uint32_t*)0x2000495c = 0; *(uint32_t*)0x20004960 = 0; *(uint32_t*)0x20004964 = 0xfff; *(uint32_t*)0x20004968 = 0x3a4d; *(uint32_t*)0x2000496c = 0; *(uint64_t*)0x20004970 = 6; *(uint64_t*)0x20004978 = 5; *(uint32_t*)0x20004980 = 7; *(uint32_t*)0x20004984 = 0x40; memcpy((void*)0x20004988, "user_id", 7); *(uint64_t*)0x20004b30 = 0; *(uint64_t*)0x20004b38 = 0; syz_fuse_handle_req(r[0], 0x20000240, 0x2000, 0x20004ac0); break; case 6: memcpy((void*)0x20000140, "./file0\000", 8); memcpy((void*)0x20000040, "fuse\000", 5); memcpy((void*)0x20000180, "fd=", 3); sprintf((char*)0x20000183, "%020llu", (long long)r[0]); memcpy((void*)0x20000197, "\x2c\x72\x6f\x6f\x74\x6d\x6f\x64\x65\x3d\x30\x30\x30\x30\x30\x30" "\x30\x30\x30\x30\x30\x30\x61\x30\xfc\x2a\xef\xed\x2e\x2a\xff\x1f" "\xaa\x63\x75\x73\x65\x72\x5f\x69\x64", 41); syscall(__NR_mount, 0x20000000ul, 0x20000140ul, 0x20000040ul, 0ul, 0x20000180ul); break; } } int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); setup_sysctl(); use_temporary_dir(); loop(); return 0; }