// https://syzkaller.appspot.com/bug?id=5689aff48689f3ca418d44391fe4a4390a1ac21a // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } static void kill_and_wait(int pid, int* status) { kill(-pid, SIGKILL); kill(pid, SIGKILL); for (int i = 0; i < 100; i++) { if (waitpid(-1, status, WNOHANG | __WALL) == pid) return; usleep(1000); } DIR* dir = opendir("/sys/fs/fuse/connections"); if (dir) { for (;;) { struct dirent* ent = readdir(dir); if (!ent) break; if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0) continue; char abort[300]; snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort", ent->d_name); int fd = open(abort, O_WRONLY); if (fd == -1) { continue; } if (write(fd, abort, 1) < 0) { } close(fd); } closedir(dir); } else { } while (waitpid(-1, status, __WALL) != pid) { } } static void setup_test() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setpgrp(); write_file("/proc/self/oom_score_adj", "1000"); } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 8; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); #define WAIT_FLAGS __WALL static void loop(void) { int iter = 0; for (;; iter++) { int pid = fork(); if (pid < 0) exit(1); if (pid == 0) { setup_test(); execute_one(); exit(0); } int status = 0; uint64_t start = current_time_ms(); for (;;) { if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid) break; sleep_ms(1); if (current_time_ms() - start < 5000) { continue; } kill_and_wait(pid, &status); break; } } } uint64_t r[3] = {0xffffffffffffffff, 0x0, 0xffffffffffffffff}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000400, "./file0\000", 8); syscall(__NR_mkdir, 0x20000400ul, 0ul); break; case 1: memcpy((void*)0x20002080, "/dev/fuse\000", 10); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20002080ul, 0x42ul, 0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x200020c0, "./file0\000", 8); memcpy((void*)0x20002100, "fuse\000", 5); memcpy((void*)0x20002140, "fd=", 3); sprintf((char*)0x20002143, "0x%016llx", (long long)r[0]); memcpy((void*)0x20002155, ",rootmode=00000000000000000040000,user_id=", 42); sprintf((char*)0x2000217f, "%020llu", (long long)0); memcpy((void*)0x20002193, ",group_id=", 10); sprintf((char*)0x2000219d, "%020llu", (long long)0); syscall(__NR_mount, 0ul, 0x200020c0ul, 0x20002100ul, 0ul, 0x20002140ul); break; case 3: res = syscall(__NR_read, r[0], 0x200021c0ul, 0x2020ul); if (res != -1) r[1] = *(uint64_t*)0x200021c8; break; case 4: *(uint32_t*)0x20004200 = 0x50; *(uint32_t*)0x20004204 = 0; *(uint64_t*)0x20004208 = r[1]; *(uint32_t*)0x20004210 = 7; *(uint32_t*)0x20004214 = 0x20; *(uint32_t*)0x20004218 = 0; *(uint32_t*)0x2000421c = 0; *(uint16_t*)0x20004220 = 0; *(uint16_t*)0x20004222 = 0; *(uint32_t*)0x20004224 = 0; *(uint32_t*)0x20004228 = 0; *(uint16_t*)0x2000422c = 0; *(uint16_t*)0x2000422e = 0; *(uint32_t*)0x20004230 = 0; *(uint32_t*)0x20004234 = 0; *(uint32_t*)0x20004238 = 0; *(uint32_t*)0x2000423c = 0; *(uint32_t*)0x20004240 = 0; *(uint32_t*)0x20004244 = 0; *(uint32_t*)0x20004248 = 0; *(uint32_t*)0x2000424c = 0; syscall(__NR_write, r[0], 0x20004200ul, 0x50ul); break; case 5: memcpy( (void*)0x20008680, "\x19\x2e\xec\xc7\x68\x65\x52\x71\x4d\x0a\x00\x31\x91\x57\x0f\xe0\x46" "\x93\xfc\x67\xcd\x93\x3a\xa7\x69\xa5\x25\x55\x01\xa4\x46\x00\xe8\xba" "\x3d\x95\xa0\x63\x30\x9c\x58\x36\x70\x32\xf1\x11\xcc\x4e\x7e\x04\x63" "\x42\x77\xbc\xcb\x54\xa8\xce\xf0\x9a\xad\xe3\x45\x9f\x82\x9c\x1d\x8e" "\x70\xaa\x70\x22\x9c\xf0\x36\x14\xa7\x04\xa3\xb7\x90\x7c\x27\xae\x23" "\xfd\x8a\xdb\xfe\x12\x17\xcf\x01\x71\x6d\x53\x48\x11\x26\x92\xa8\x81" "\x4b\xbc\x9f\x7d\x06\x3a\xf3\x62\x2c\x56\xa7\xe0\xcc\x7a\xb3\xf9\x40" "\x79\x7d\x0f\x90\x29\xe2\xc8\xaf\x5c\x34\x68\x2c\x4e\xb8\x96\xdc\x79" "\x3b\x7a\xa0\xf9\xeb\x24\xb9\xdf\xd2\x73\x45\xc1\xae\x26\x8d\x4a\x1b" "\x04\xb6\x0d\xa9\x8c\x46\xde\x5a\xc2\x66\xce\xb2\xeb\x38\x10\x0a\x3a" "\xa1\x33\x0a\x77\xf0\x6e\x2e\xf8\x8f\x24\x0d\x22\x88\xcd\xe2\x81\x21" "\x91\x79\xb0\x92\xfd\xe6\x8a\xf5\x96\xfc\x7a\x7d\x48\x0c\x47\x8f\x6d" "\xd0\xfd\xe7\x64\x5a\xf4\x39\xef\x2e\xce\x47\xa7\x58\x8b\x8a\x31\x9c" "\x87\xeb\x1e\x04\xd1\xfb\xcb\xdf\x26\x9b\x8a\x89\x48\xb6\x70\x8a\x1e" "\xb7\x12\x1d\x40\x97\x92\x1e\xed\x15\x59\x7a\xd9\x81\xf6\x06\x47\x2b" "\x53\xdf\x5e\xad\x14\xb2\x0d\x8e\x6a\xa8\x55\x7e\x08\xb7\x9e\x1d\xa1" "\xd3\xb5\x82\x06\xe1\xe4\xed\xa8\x46\xab\x5d\xfe\x24\xa2\x47\xa3\x47" "\x71\x01\x47\xee\xa9\xf0\x4e\x48\xd6\x5c\xaa\x93\xea\x61\x11\xe5\xdb" "\x46\x5b\x11\xa8\x38\x2f\xeb\x7b\xae\xbd\xb1\x40\xf9\xd3\xfd\x62\x89" "\x41\x61\xe0\xec\x9d\x47\x24\xba\xcb\x4e\x3f\x21\x41\x66\x94\x3b\xa1" "\xfa\x63\xee\x94\x16\x06\x0b\xba\xb2\x97\xfd\x13\xfb\x78\xa3\x64\x41" "\xe4\xf5\xdb\xf0\x2e\xa9\x75\x4e\x10\xcd\xb5\x1c\x89\x2a\x1e\x55\x96" "\xfd\x98\xc6\xa1\x90\xb7\xdc\x25\x01\x5a\x1d\x1f\xa3\xa3\x32\xb8\xac" "\x71\x03\xf4\x7f\x62\x61\xbd\xd6\xc1\xa4\x99\x43\x17\xa8\x79\x0e\x99" "\x7e\xc0\x18\x13\x4e\xb5\x89\x53\xd5\xee\xfe\xd2\xb4\x65\xde\x06\xa5" "\x5f\x71\x6a\x6a\x81\x30\x60\x75\x91\xff\x9a\x6a\xa7\xf0\x9e\x8a\x0a" "\x9c\x98\x43\x6e\x63\x1f\xb4\xaa\x0c\xc9\xd9\x55\x02\xb5\x58\xde\x00" "\x9f\x58\x57\x25\x56\x66\xe3\xef\xbe\xc8\x5c\xab\x98\x08\x27\xae\xde" "\x21\xe8\x58\xc1\x19\x63\xd0\x2c\x91\x58\x5e\x42\x21\xaf\xfc\x30\xca" "\xac\x66\xd3\xed\x5f\xf1\x91\xf7\x79\x91\xc0\x93\xd2\xb6\xf7\x88\x3a" "\xfc\x43\xac\x7f\x03\x9a\x60\x6d\x83\xa7\xeb\x5a\x34\xe6\x13\x02\x35" "\xd4\x2c\xe1\x25\x9a\xdb\x06\x39\xbf\x54\xed\x49\x90\xf4\xf1\xb4\x39" "\x69\x90\xee\x8a\x58\x16\xec\x63\xe1\x7b\x3d\x88\xcf\xd2\x86\xdb\xba" "\x59\x3d\x45\x9b\x56\xb3\xaa\x4a\x94\xc5\x0d\xc1\x2e\xdd\x9c\xb0\x79" "\x74\x13\x3a\x06\x42\xb1\xd1\x88\x3f\xad\xb2\x48\x0f\x30\xff\x59\x3b" "\xb4\xad\xa4\xb4\xc3\xc5\xaa\xe9\xa9\xfe\x87\xb0\x3a\x70\x52\x5c\xa4" "\x07\x4c\xd4\x3c\x9e\x16\x38\x9d\x11\xc2\x77\x44\xa7\xf7\xdf\x70\xf8" "\x7c\x8c\x5f\x81\x16\x84\xab\x1a\x95\x11\xb5\x6f\x5a\x1e\xca\x81\x86" "\x32\x55\xce\x37\xd3\x81\xc8\xa9\x74\x7f\x5e\x81\x62\x1b\x60\xfe\x0d" "\x54\x40\xf4\x8e\x2d\x45\xa7\x5d\x58\x5e\xc2\x27\xb3\xc1\x19\x9b\xab" "\x8a\xb5\xd4\xbf\x17\xf1\x6c\x1a\xcf\xfd\x9c\x21\xd0\x3e\x41\xdd\x18" "\xbc\x2e\x73\xdc\xd7\xd5\x79\x72\x9b\x24\xa8\x1c\xb6\x63\x90\x1b\x90" "\x45\x90\xfb\x70\xc5\x0a\xff\x81\x24\xbf\xc3\x19\xcf\x80\xc4\xe9\x07" "\xe2\x68\x07\xb3\x59\xbf\x92\x32\xa7\x55\xa5\xd6\xe7\x13\xa9\x20\x9a" "\x03\xdb\xc8\x2b\x35\x5e\x24\x7f\x53\x1f\xa2\x7a\x46\xd8\xbd\xa6\xbc" "\x10\x8a\xc0\x96\x54\x2d\xa3\x7c\x30\x8a\x9b\xfb\x35\x06\xc1\x6e\x78" "\xa9\x2b\x3c\x3c\xa3\x11\xbc\xe8\x3b\x66\x29\x0d\xeb\xae\x97\xa6\x00" "\x1b\x5e\x22\x77\x21\x14\x58\x4f\x45\x06\xe3\x5b\x19\x8e\xdc\x55\x0e" "\x2e\xa3\x7f\x1c\x59\x9f\xbd\x45\xee\x6c\xad\xd9\x0f\xbb\xf1\x8b\xad" "\xb6\x25\x1d\x6b\x36\xe0\x3d\xf3\x01\x05\x50\x2c\x78\x41\xfa\xdd\x47" "\x0c\x92\x01\x50\x60\xbc\x8b\x52\x7f\x46\xf5\xde\x9b\xee\x8e\xad\x6e" "\xed\xc2\x3c\x0e\x5c\x18\x43\xb3\xa0\x48\x1b\x28\x84\xf0\xf2\x59\x3e" "\x88\xf4\xf5\x1a\xe7\xfc\x15\x5c\x3f\x59\x65\xbf\xb5\xa9\x3e\xcd\x19" "\xe9\xcb\xd4\x35\xdd\xc1\x17\x96\x7b\xa6\xf6\x91\xb6\xb5\x30\x72\xb9" "\xb5\x1e\xd1\x7d\xf5\x85\xc2\xc1\x7c\x71\xe2\xe8\xc2\xc3\xfb\x4c\x9c" "\x54\x78\xfa\xbf\xdd\x6c\x67\xe8\xc4\xed\x99\x63\x22\x17\xb0\xad\xb2" "\xb2\x95\x70\x87\x56\x14\x05\x67\x92\x72\x62\xde\x06\xc6\x1a\x32\x0b" "\xc1\x31\x7c\x83\xaa\x8d\xf1\x03\x9c\xb9\x7a\x3f\x19\x4e\x2a\x31\xab" "\x48\x22\xb5\xfd\xca\xe3\x2a\xa3\x24\x57\x78\x6f\x8a\xd2\x74\x43\x4b" "\x69\xa0\x3e\xc9\x58\xf2\x02\xa9\xdb\x21\x64\x3e\x54\xa8\x2b\xbd\x6e" "\x4f\x8d\x2e\x9e\x19\x33\x30\xd8\xe5\x31\x25\x48\xda\xb8\x43\x27\x28" "\xed\x71\xff\x52\x96\xef\x98\x4a\x6d\xce\x14\xa6\x97\xce\x49\x30\xd1" "\x97\x5d\xd5\x49\x05\x7c\x67\xbf\x9d\x94\x44\x29\xad\x43\x05\xbc\xfc" "\x66\xff\x4d\xe0\x40\x7e\xc0\xf0\x57\x6c\xb5\xc2\x7c\x01\xe6\x9d\x6e" "\x71\xfe\xd0\x11\x75\xb7\xe1\xde\xf4\xeb\x9c\x77\x86\x75\x8e\xdf\xea" "\x9e\x48\x1d\x96\xfd\xf6\x74\x10\xa9\xf8\x8d\x8a\x29\xbc\xed\x79\xe1" "\xe2\x6c\x00\x84\xf7\x4c\x16\xbf\x39\x92\x48\x2a\xb2\xc8\xd0\xb3\x47" "\x49\xf4\xfb\xfc\x63\x4a\x61\xd4\xa7\x92\xfc\x55\x91\x14\xdf\x7c\xb2" "\x54\x74\x58\xd7\x96\x25\x84\xe5\x2f\xc6\x35\x20\x19\xf2\xee\xd9\x23" "\xcd\x93\x16\x69\xfb\xea\x83\x45\x73\x18\x56\x6f\x05\xca\xef\x37\xb5" "\x6b\x87\xa6\x11\x2a\xa7\xcd\xd1\xf2\x7b\xca\x1e\x9d\x70\x67\xb0\x10" "\x61\xff\x62\xa4\xbd\x64\x1d\xa2\x58\x17\x49\x3d\x6a\x6f\xec\xec\x4c" "\xc9\xea\x33\x81\x49\xce\x58\xac\x5f\x71\xe3\x5b\x5a\x92\x25\x9b\x49" "\x8f\x6c\x4c\x12\x95\x5f\xfd\x4b\x22\x67\x3a\x00\x72\x6f\x1d\x62\x05" "\x2d\x11\xcb\x29\x7c\x28\x64\x8c\xbe\x84\x55\x85\xc4\xca\xc7\x03\x70" "\x91\x10\xfd\x97\x27\x1a\x1a\xb6\x6b\xf4\xbd\x0f\xc9\x0a\x7c\xeb\xd4" "\x60\xbb\xa7\xfe\x9c\xb6\x55\x00\x17\x26\x0e\x3d\x04\x09\x2b\x1f\xff" "\xfd\x67\xe3\x9b\x76\x3e\x0c\x4f\xae\xfe\xea\xa5\xeb\x28\xc9\xb9\xf5" "\xdc\x97\xde\xf9\x09\xc8\x96\x36\x40\x62\x7d\x4c\x0c\x15\x4b\xb8\x16" "\xbb\xf9\x32\xf5\x35\xe5\x54\xa8\x04\x01\x8c\x4f\xc5\x58\xca\x12\xd2" "\xcd\x96\x7e\x23\x30\x18\x32\x28\xb6\xb2\x91\x58\x87\x11\x36\x24\x34" "\x18\x41\xc5\x4e\x20\x99\xf1\xa9\x16\x6a\x67\x06\x33\x54\xf9\x29\x1c" "\xf2\x9e\x55\x3b\xea\x21\x59\x02\x6d\xd1\x39\x48\x46\x10\xea\x47\xd5" "\x5c\xa2\x43\x40\x02\x46\xa5\x7a\x62\x83\xe8\x0b\x83\x35\x94\xfc\xd6" "\x51\x11\xba\x47\x43\x43\xfe\x93\xa0\x20\x51\xe2\xd7\x3e\x0f\x5a\x10" "\x04\x0b\x86\x17\x6e\x4b\x17\xfc\x86\x6d\xf6\x9e\x7b\x98\xcb\x40\x97" "\x72\xf6\xd9\x25\x57\x20\x85\x68\xc0\x80\x28\x39\x0c\x5f\xac\x76\x0c" "\x29\xa5\xb2\x02\xec\xd9\x8d\xa2\x93\x4b\x71\x87\xc5\x5f\x64\x07\xd3" "\x48\xdf\x47\x73\xdb\xaf\x8d\x0e\x56\x9d\x3f\xfd\x45\x26\x67\x5b\x79" "\x0b\xa7\x02\xc7\xb8\x8b\xf1\xb3\x00\x53\xd9\xf4\xb6\x90\x41\x9a\x57" "\x8a\xf0\xd2\x47\x9b\x5f\x10\x27\x50\xba\xd1\xf1\xda\x3d\xc5\x86\xe0" "\xdd\xf8\xf9\xc2\x84\xc0\x7e\x3c\xcd\x1b\xa1\x6f\xc2\x5e\x7a\x04\x42" "\xe9\x66\x23\x39\x71\xfe\x94\x5b\xc6\x32\x59\x1a\xff\x36\x86\xaf\xc9" "\x8c\xef\x6a\x80\x54\xf0\x7e\x25\x9d\xd8\x30\x96\xed\x0d\xdd\xc6\x84" "\xd8\x06\x3a\x02\x50\x82\x38\x20\x08\xb5\xa5\xc8\xb5\xac\x54\x14\x10" "\x08\xbe\xa3\x0d\x16\x9a\x24\xa9\x50\x2f\xbe\xfb\x9f\x52\x86\x68\x2b" "\x06\xfd\x6f\x63\x55\x55\x60\x0c\xe0\xf9\xd9\xba\x46\xf9\x11\x88\xba" "\x23\xb1\x8c\x32\x1d\x34\x3f\x89\x77\x60\x9a\x39\x9e\x91\x2a\x42\x2f" "\x99\x59\x5e\xf3\xd0\x2e\x4a\x06\x46\x72\x8d\x35\xaf\x45\x5e\xca\x87" "\x54\x1d\x93\x9a\xad\xb8\x09\x22\x7c\x49\x20\x56\x7d\x82\x05\xa5\x71" "\x8d\x33\xef\xaf\x32\xdf\xbb\x84\x09\x2e\xff\x3c\x81\x1f\x5c\xa6\x57" "\x06\x78\x1b\x30\x10\xfc\xd5\x40\xb8\x74\xe6\xd7\x80\xe8\x98\x4f\x38" "\xe3\x88\xb6\x13\xb8\xa0\x4a\x38\x30\x90\x34\x70\x83\x00\x5b\xa8\xd9" "\x57\x8b\x79\x59\x95\xe9\x2e\x1f\xb6\x72\xc7\x23\xdb\x3a\xb8\x3b\x9d" "\xf9\xcc\xc4\x76\x39\x10\xd0\xa6\x00\x44\x77\x62\xca\xd8\x3c\xd0\x56" "\x64\x8e\xec\x76\xe0\x0e\xfb\xf6\x7d\xf0\x8a\x8f\x5f\x3d\x36\x52\xc5" "\xfe\x58\xc1\xc5\xc3\x66\x7d\xad\x98\xb8\x6a\xe1\x53\xd9\x9f\x69\x44" "\x45\xfb\x9b\x51\xd9\xce\xfd\xe8\xac\xb9\x07\xed\x39\xac\x92\xfc\x4d" "\x10\x42\x12\x82\xab\x54\x5a\xef\xee\xeb\xcd\xa2\xa9\x6c\x82\x98\x44" "\x29\x89\x3a\x8d\xe7\x8f\xf1\xf0\x95\xbb\x3a\x36\xc3\xfe\xd8\x07\x43" "\xac\x3d\x93\xf9\x87\xa6\x07\xfc\xeb\xd0\xb8\x16\x5a\xc6\xaa\xeb\x3b" "\x2b\x23\x74\x0e\x01\xd3\xa9\xed\xb3\xcd\x1a\x93\x5c\x5b\xfa\x84\x04" "\xe1\x5b\xfe\x87\x89\x64\x93\x65\x15\x0c\x19\xd8\xb7\xad\xdd\xac\xfe" "\xf9\x2f\x00\x3a\x31\x07\xd9\x2a\xb1\x41\x1a\x8f\x15\x35\x6f\x23\x4c" "\xf8\x2f\x8f\x9e\x55\x4d\x7b\x57\x1c\x91\x2a\xa3\xf1\xa9\x78\x54\x00" "\x6c\xa8\xc5\x97\x9c\x3a\x08\xce\x7a\x47\x5b\xf3\x23\x13\x00\x28\xd5" "\x89\xc0\x5b\xa6\x61\xc4\x38\x43\x96\x3f\x53\x34\x55\xc3\xe4\xab\xc6" "\xf1\xf8\x21\x32\x9a\x78\x02\x09\x94\xb2\x9d\x03\xc9\x1f\x3d\xd4\x39" "\x59\x3d\x8b\x23\xe4\xf1\xe8\x91\x49\x1b\xd8\x0a\xcd\x25\x43\x9b\xab" "\x20\xfc\x06\xdb\xdc\x7d\xf4\xb1\x54\x4b\x6e\x9d\x74\xed\xf4\xff\x7f" "\xe1\xf7\x60\x65\x97\x8b\xf2\xa7\xe5\x10\x9f\x87\x66\xd6\x5f\x54\x3f" "\xa1\x7b\x8a\x73\xe3\xd7\xad\x77\x8e\x48\x31\x21\x01\x56\x17\x5b\xaa" "\xe5\x84\xc0\x82\x45\xec\x9f\x89\x0d\x44\x2e\x76\x0b\xf8\x8c\xa2\x56" "\x1e\xd2\x9d\x2e\x9d\x4a\x56\xc3\x48\x10\xc0\xdb\x36\x18\xf4\x05\xd7" "\xfd\x9e\x50\x69\x20\xea\x51\x9f\x15\x55\x46\x47\xad\x50\x6f\x4a\x50" "\xd0\x1a\x3d\x3b\xe0\xc1\x83\xa7\x80\xd7\x55\x92\xc1\xb3\xd1\x20\xa2" "\xa3\xbd\x65\xe3\xb3\x58\x98\xe2\x39\xb0\x56\x98\xf4\x53\xbf\x6c\x70" "\xfb\xa9\x60\x42\x2a\xa3\x43\x6b\x4c\x2e\xd1\x5d\x7c\xc2\x7e\x33\xf6" "\x03\x76\xb7\xc4\xb9\xe3\x7e\x92\x9c\x9b\xbc\xe3\x65\xa6\x18\x5d\x00" "\xef\x77\x55\x9e\x13\x61\x9d\xc6\x38\x8f\x08\x9e\x68\x1b\x70\x72\x74" "\xce\x30\x50\x98\x54\xfb\x16\x31\x03\x70\xa5\x3b\xac\xaf\x4c\x85\x6a" "\x9a\x91\x52\x16\xc7\x5b\x35\xa7\x21\x01\xaf\x87\xf9\x21\x83\x63\x7e" "\x2b\xea\xcd\x3c\xa0\x3a\x7e\x7e\x3c\xa7\xc7\x0d\x57\x06\x4f\x17\xc8" "\xfa\x30\x81\x99\x92\x35\xb1\xa0\x9b\xbf\xf5\xcc\x9c\x22\x7e\x31\xa4" "\x68\xa3\x44\xd1\x95\x72\x27\x98\xd6\xa7\xe5\x5f\x5e\xea\xb9\xde\x49" "\x64\x29\x1f\x82\x25\xfd\xd3\x71\x34\x59\xf0\xe0\x2b\xa8\xdd\xa3\x31" "\x5e\x9d\x7c\x69\x93\x97\xc7\x73\xc7\x42\xb6\xf6\x8e\xdf\xf1\x8f\x65" "\x3b\x77\xbb\x43\xe7\xca\xae\x2e\x5f\x27\x98\x69\x05\x8a\x0c\x2b\x13" "\x4a\x30\xbc\xf1\x12\x79\x5d\x22\x89\x68\xed\x08\xce\x96\x71\xe5\x37" "\x3f\x4c\xf2\x54\xa1\x64\x6d\x31\xfd\x00\x4c\x5e\xd4\x03\xdd\x6b\x3f" "\xe7\xcd\x45\x50\xad\x98\x4d\x1c\x77\x52\x26\x9d\xab\x3c\x3d\xe5\x2b" "\x5f\xcb\x11\xba\x2c\x6a\x50\xe3\xe5\xb7\x2a\x1a\x90\x19\x75\x96\xe4" "\x08\x20\x6b\xfd\x9c\x1d\x3a\xeb\xbc\xd9\x19\x9b\xde\xef\xee\x11\x45" "\x3e\xf9\x92\x0c\xfb\x32\x91\x7c\x18\xde\x2b\x1f\x6d\xbe\xd5\x01\xdf" "\x4a\x5d\x65\xa6\xb0\x87\x85\x28\xfe\x1f\x33\x00\x0c\xef\xe1\xa5\x45" "\x8f\xe1\x67\xeb\x59\x4e\x97\x61\xc4\x10\x96\x4c\x4b\xa5\xae\x69\xfa" "\x1b\xd6\x2d\x3b\x68\x0c\x12\x70\xf7\xae\x5c\xe0\x67\xcf\x24\x5b\x87" "\x3e\x44\x7e\x05\xe4\xe2\xee\x92\x03\x1b\x86\xb4\x69\x55\x1f\x0a\xed" "\xe2\xbf\x4f\xe2\x48\xb9\x13\x35\x2c\x19\x53\xc6\x07\x87\x07\x89\x48" "\xd0\xd4\x5b\x33\xdb\xac\xc5\xc6\xd6\x0b\xe3\x41\xc4\xcc\xb2\x1d\x86" "\xf2\xe3\xfa\x60\x62\xc0\x16\x18\x41\x4e\xfc\xe6\xcc\x07\xb0\x51\x7a" "\x83\x6c\xf8\x99\xc9\x80\xf0\xf7\x85\x34\x82\xc6\x6a\xec\x04\x83\x05" "\xf6\x97\xe0\x12\xa9\xe7\xcb\x1d\x36\xab\xed\x7d\xe8\x86\x01\x23\x2a" "\xdd\x3e\x81\x50\xf5\x85\xcd\x78\x4e\x9d\xfc\xd2\xc2\x43\x15\x30\x0f" "\x05\x32\xc1\x05\x0c\xeb\x84\x2a\x48\xcd\x04\x99\x28\xca\x9c\x4d\xc2" "\xb4\x33\xfe\x46\xa0\x0f\x02\xe2\x1f\xf2\xff\xcb\x40\xcc\x63\x42\x02" "\xca\xda\x74\x2a\x61\x4c\x20\xb4\xf2\xd7\xa6\x65\x3f\x26\xc6\xb1\xc8" "\x02\x0c\x42\xa0\x03\x5d\x8c\x52\x39\xfc\x12\xd4\x00\x14\xda\xf8\xdb" "\xd0\xa8\xaa\x78\x42\xcb\x94\x45\xe3\x48\x7b\x6f\xb9\xb1\x8d\x1d\xae" "\x90\x94\xbc\xda\x1c\xbc\x0e\xc8\x95\x0c\xe3\x02\x1c\x0b\x0e\x3e\x22" "\xc9\x9c\xfc\x7b\xfb\xf7\xce\x33\x79\x6d\x6a\x84\xd1\x27\x2c\x1d\x85" "\x06\x12\x88\xe8\xc3\xaf\xe0\x59\x15\x95\x31\x39\xef\x08\x0b\x92\x1c" "\x53\xb3\xb8\x67\xec\xbe\xa5\x06\xc3\xb7\x1b\xcc\xdc\x10\x2f\x66\x86" "\x2a\x82\xb0\xca\x34\xb5\x3f\x6a\x54\x82\x4f\x7c\xb7\xdf\x0c\xe4\xc3" "\xd0\x60\x51\xec\x7e\x05\x9d\x78\xdc\x44\x77\x53\xb5\x7e\xdd\xa5\x9c" "\xaa\x6e\x9b\x93\xc2\xe3\x4a\x2d\xe2\x46\x7d\x57\x0f\xf5\x1c\x4a\x71" "\x82\x09\x15\xfe\xd1\x07\xfc\xc2\xc8\x8e\xd4\x67\x81\x5d\x59\xc7\x18" "\xd6\xb9\x14\x19\x9b\x79\x07\xe9\x19\x09\x98\x00\xf2\x54\xb9\x40\x24" "\x3f\x74\x16\x1d\xb9\x70\xf5\x23\x24\x86\xc3\xb6\x78\x19\x08\x9a\xb6" "\x5f\x8f\xdf\x1c\x0f\xea\x52\x6a\x9b\xcc\xce\xa1\x3b\x66\x87\xe7\xc5" "\x82\x2c\xcb\x98\xad\xf2\x4a\xe2\x15\x02\xab\x4d\xfe\x52\xea\x1f\x72" "\xbf\x88\xa5\x33\xa0\x90\xf0\x2e\x8a\xfc\x96\x31\x2a\xdd\x49\xcd\xd6" "\x9a\x92\x4e\x3b\x6d\x18\x43\xae\x93\xe4\x67\x0c\xa1\xb6\xe2\x0a\x99" "\x92\xb1\x3b\xa2\xc7\x9c\xc6\x92\xdc\x46\x28\x26\x1e\x30\xd1\xcb\x0b" "\x55\x2d\xca\x34\xe1\x2f\xd3\x62\xdb\x54\x2d\xb2\xaf\x06\xa3\xe2\xbe" "\x13\xfd\xc6\xba\xdb\x69\x1a\xe2\xcb\x73\x77\x23\xea\xe9\x50\x5f\xec" "\xba\x17\xb9\x74\xcd\x22\x94\x79\x70\xb6\x53\x95\xe3\x9c\x39\xe7\x49" "\xf0\x57\xf6\x6e\x9f\xed\xc9\x70\x72\x8a\x2c\x15\x41\x0f\x73\x08\x2e" "\x3a\x8d\x9e\x74\x40\x06\x5a\x83\xf6\xb2\xc9\x61\x0b\xd5\xa2\x3b\x62" "\xb8\xbc\xfe\xc9\xa9\x5f\xd4\xad\x29\x29\x83\x2e\xc7\x15\x45\xb3\x95" "\x4a\x56\x88\x50\x0b\xb2\x05\xa9\x67\xbd\xea\xbc\xe3\x96\xe6\xc9\xff" "\xea\x42\xcf\x5f\xa4\x59\x30\x95\xd3\x90\xb0\x77\x72\xe5\x23\x58\xb2" "\x7e\x94\x79\x0c\xad\x2d\xe8\x63\x92\xed\xea\x5b\xa5\xc5\xdc\x5f\xab" "\xfb\xc4\x4b\x17\x35\x21\x2e\x70\x3e\x39\x14\x86\xe2\xb1\xa4\x9c\x89" "\xdd\x53\xaa\x42\x36\x0d\x37\xfc\xab\x2b\x0f\x0c\x86\x4c\x75\x3b\x76" "\x62\x25\x55\xb6\x28\xf2\x2c\x17\x37\x4d\xea\x54\x93\x1f\x60\xe7\x49" "\x86\x98\x44\x0c\xe6\xa9\xd9\x17\xe9\xc5\x53\x25\xd0\x6a\x4a\x83\xe8" "\xf2\xaf\x80\x2b\x67\x22\x57\x5a\x1a\x8e\x7f\x9b\x27\xc1\xbd\x5c\x77" "\xbe\x65\xaf\x85\xe7\x5b\x95\x2c\x35\x94\x08\x92\xe9\xe0\x38\x33\xff" "\x1e\x60\x29\x89\x3f\xc4\x6e\x89\xd5\xf2\x76\x38\x2b\x51\xf1\xd6\xd8" "\xf6\xd9\x58\x13\x01\xe5\xc9\xfc\x2d\x78\xa1\xef\x66\xe3\x04\xe9\x82" "\xce\x16\xdf\xe5\xac\xdb\x34\x5a\xaf\x2f\xb5\x7a\xed\xc5\x5e\x7b\xc1" "\x38\xda\xcb\xac\x4c\x74\x87\xd3\xa0\x36\x68\x1b\x98\xf0\xdf\xd9\xeb" "\xa7\x7c\xaa\x30\x6b\xb2\xc1\xca\x85\x4c\x82\x07\xe5\xea\xba\xec\x4a" "\xf9\xce\xd3\x81\xbd\xbb\x76\x14\x34\x84\xcf\x78\xf1\x9f\x92\x7d\x58" "\x1e\xc6\x84\x94\xd6\x8c\x62\xf1\xb9\x38\x68\xa5\xf8\x64\x11\xc0\xae" "\x8c\x18\x8a\x01\xbe\x75\x36\xd7\xd1\x94\xda\x70\xc3\xf6\x1f\xcf\x8c" "\xae\xca\x9b\xe4\xf5\xd5\x92\x1f\x9e\xde\x23\xcd\xca\x26\x9e\x8a\x44" "\x71\x23\x9b\x3d\xc4\xc8\xfa\xc4\x74\xc2\x54\x70\x86\x28\x76\xa7\x93" "\x60\x3a\x2f\x9f\x99\x85\x9e\xe5\x50\x4b\x1d\xd7\x57\x42\x03\x90\x1a" "\x8e\x7b\xcb\x87\x87\xad\x61\xed\x7b\x88\xd1\xac\xb6\xf4\xe7\x08\xfe" "\x5a\xad\x52\x38\xfd\xa5\x4a\x3b\x0c\x54\x98\x5b\xd6\x9d\x34\x5f\xb8" "\x51\x83\x5b\x0d\x9b\xbb\x10\x5a\x75\x42\x8c\x6c\xfc\x89\x7f\x64\x1f" "\x62\xfa\x99\x99\x35\x00\x22\x4a\xae\xd4\xcf\xa3\xdb\x9c\xd7\xda\x16" "\xe8\xb3\x89\xd4\x0b\xab\x11\x0e\x45\x3e\x2f\xbe\xf2\x78\xc0\x55\x43" "\xea\x71\xcb\xc4\x56\x0d\x65\xa9\xef\x5c\xd9\x3c\xba\x58\x1c\x89\x83" "\xca\x40\xbc\x6d\x15\xac\x33\xc7\x4e\x17\x97\x13\xaf\xef\x89\x38\x8a" "\x13\xbe\x45\x6a\xe1\x43\x0c\x5e\x38\xf8\xfd\x8c\x14\x80\x13\x9a\xe9" "\xd9\x7c\x89\x5e\x90\xb3\x81\x29\x8a\x83\x40\x01\xae\x49\x2b\x81\xa1" "\x87\x6e\x0e\x86\x76\x93\xd9\xdf\xfa\x56\x18\x8d\x5d\x13\xb5\xee\xce" "\x7a\xcd\x30\xaf\xd6\xeb\x6e\x25\x1a\xd8\x66\x8e\x8c\xef\x66\x4c\x59" "\xc1\x39\xa9\x50\x07\x4e\xaf\x4d\xda\x0a\x97\x54\x5f\x0f\x1d\x86\x8e" "\xd1\x21\x92\xfa\xb8\x11\x0b\x1a\x74\x0b\x7b\x24\x60\x1b\xec\x8e\x6e" "\x79\x78\x3b\x0d\x6f\x21\xea\xd4\x2f\x12\xe7\x51\x07\x58\xc4\x13\xcb" "\x4a\xcc\xa7\x91\xf0\x8e\x29\x05\x99\x17\xfe\xb6\x28\x43\x27\x3f\x50" "\xf3\x35\xe8\x59\xc9\x1d\xb4\x65\xfb\x95\xfe\xb3\x22\xad\xca\x53\x9b" "\xcd\x94\x24\x33\x44\x71\x6a\x44\x84\x62\x51\xd0\x97\xf9\xc3\x47\xad" "\x57\x8a\x43\x26\xc8\xad\x1d\xbd\x21\x2f\xac\x4a\xd9\x6b\x17\x41\x0c" "\xe6\x39\xe7\xed\xfa\x85\x16\xb6\x20\x52\xa2\x38\x67\xc0\xd5\x97\x99" "\x41\x90\x6b\xd7\xd3\x49\x86\x04\xfb\x53\x70\x58\x81\x2e\x47\x1a\x11" "\x23\x1f\xb0\x34\xff\x1b\xb7\x97\x5b\xba\x7a\xa5\x21\x17\xce\x76\x7d" "\x36\x16\x88\x02\x12\x40\x62\xf9\xc9\x4f\x44\x22\xc3\x53\x9d\x29\x70" "\x2d\xa3\x58\xa5\x32\x69\xd2\x03\x32\x98\x9b\x80\x06\x5e\x6f\xb5\x9f" "\xac\x6b\x18\x5f\xf9\x61\xde\x34\x20\xf5\x55\x74\x4a\x7a\x30\x99\x82" "\x44\x6f\xa8\xbe\xf3\x99\x46\x6a\x0a\xc3\xb6\x40\x20\x0f\x73\xb4\xc0" "\x65\xf5\xf7\xe4\x78\xed\xcb\x05\x31\xec\x2c\xf0\x83\x37\x6b\xc8\xf0" "\xb3\x44\xc9\x5e\x27\x77\xda\xd5\x08\x1f\xc2\xe8\x5d\xa2\xcf\x4c\xf9" "\x34\xf6\x94\x58\x7f\xbd\xc8\x9d\x12\x39\x86\x58\x8d\x3a\xdb\xc9\xd2" "\x03\x58\xf5\x33\x31\x20\x2d\xa3\x0a\x53\xe4\x66\xcc\xdc\xc5\x1c\xf9" "\x21\x3b\x42\xc0\x5a\xf2\x29\xd0\xbe\xe9\xff\x32\x4b\xd6\x2c\x46\xd0" "\x86\xc0\xe0\xdc\x15\xbf\x06\x1a\xa5\x2b\x95\x56\xd5\xef\xc7\xbb\x15" "\xdd\x55\x27\xa1\x91\x31\xc3\xac\xca\x0d\x55\xad\x3f\x3b\x38\xcc\x12" "\x11\x04\x6b\xf6\xc8\x1f\xe1\x2d\x3b\xa4\x31\xde\x7f\x62\x94\xa8\x3d" "\x82\xea\xa9\xe2\x04\xeb\x7a\xe8\xe3\xbf\xba\xf1\xbc\xfd\x06\x54\x05" "\xd4\xe0\xfd\x5c\xaf\x4e\xf5\x9d\xde\x96\xf9\x36\x99\xa2\xf0\x74\x31" "\x1f\xdf\x76\xbb\x23\xf0\x21\xde\x47\xfe\xe3\x8b\xe6\xfc\xfa\xce\xa1" "\xbf\x84\x0c\x2b\xbd\xd0\xc7\x6e\x8b\x43\xc3\x78\xff\xcf\x69\x06\x73" "\x23\x80\x52\x94\x57\xaa\x9c\x39\x96\xfd\xaf\xfd\x74\x46\xae\xaa\xc4" "\x2c\x3d\xfe\xcd\xe8\xbf\xd5\xce\x8d\xb1\xfd\xba\xe2\x00\xf7\x09\xea" "\xa0\xce\xb5\xc7\x34\xc8\x05\xb9\xd1\xf7\xd0\x6b\x5c\xfe\x04\x04\xa4" "\x2d\x56\x7e\xee\xfd\x22\x58\x38\xe3\xca\x19\xfa\x2b\x91\xda\x37\x0a" "\xce\xcb\x9f\xe6\x41\x52\x2a\x85\x5d\x4d\x76\xb0\xbb\xc4\xf3\xd8\xde" "\x9d\xe6\x0b\x17\x75\xbe\x8b\x89\xc4\x91\x57\x4c\xfb\x1b\xe7\x39\x2e" "\x3c\x40\x55\xcc\x51\x7c\x4a\xdd\x1e\x26\xd3\x6f\x32\x09\xc3\x39\x5a" "\x86\x84\x82\x80\xb6\x72\x21\xdb\xed\x35\xd5\x86\xee\x3a\xeb\x4c\x93" "\x8c\xfa\x1a\x3d\x16\x72\x7f\x87\xe4\x73\xd8\xcd\xac\x18\x07\xdb\x1c" "\xbb\xf5\xe5\xfa\xb4\x7c\x4e\x92\x09\x0b\x78\xee\x18\x0f\x98\x17\xc3" "\x63\x8d\xa2\x01\xab\x28\x86\x23\xbc\xe7\x93\xe4\x7e\x61\xce\x32\x84" "\x23\x1c\x1e\xdf\x01\x44\x44\x41\x49\x28\x32\xa0\x57\xf8\x9d\xa2\x17" "\x5f\x6d\xbe\xd8\xf4\xec\x3d\x82\x41\xa8\xd3\x85\x3b\x88\xa4\x98\x45" "\x93\xfe\xe6\x97\x73\xad\x05\x1e\xe0\x05\xd5\x49\x29\xcf\x8b\x49\x3e" "\x4e\xd3\x45\x72\x51\x22\xa4\x43\x8b\x11\x52\x7f\x58\x7b\x21\x2e\x13" "\x13\x29\xc9\x90\x8d\x0f\xa1\x5e\x67\x4f\x8a\x70\xd0\x8a\x12\x8f\xcf" "\x21\x41\x3e\x74\xc4\x03\xf5\x75\xa4\xad\x3e\xbb\xe4\xad\x2e\x9b\xa5" "\x4a\x43\xf4\x1e\x20\x8a\xf8\x3d\x8f\x62\x49\x97\xfb\x73\x6c\xcf\xdc" "\x33\x27\xd3\xb1\x1a\xa4\x20\x87\xe8\x18\x11\xe2\x8f\x7b\xae\x39\x03" "\xbf\xe5\xed\xd9\xa9\x77\xc8\x79\x4f\xb2\x41\x97\x30\x42\x19\xdd\x4a" "\x4b\x30\xc4\x69\x36\x85\x75\xed\xd8\xfa\x77\xe7\xdd\x5f\x1d\x98\x0b" "\x47\x6f\xea\x3e\xb0\x10\x3e\x91\xe8\x34\x47\xf7\xf8\x66\x34\x47\x32" "\x8f\x1b\x75\x75\xc2\xa7\xf1\x95\x58\x4e\xbf\x55\xb4\xa2\xb2\x82\x2d" "\xf3\xcc\xef\x8c\x43\x6d\xb2\x41\xeb\x60\xea\x96\xec\xe4\x31\xcf\xc4" "\x81\x58\x00\x4c\x29\x43\x62\x03\xbe\x4f\x3c\xc9\x80\xf0\xe1\x65\x02" "\x94\x96\xcb\xee\x19\x76\x64\xab\x35\xd9\x58\x72\x22\x0f\xa3\xf1\x97" "\x81\x2c\x2a\xb5\x3b\x31\x81\x13\x5d\x97\xb1\x66\xe7\xd7\x56\x01\x63" "\xa4\x51\xbf\x28\x33\xe6\xab\x10\x1e\x0e\x45\x2b\xc2\x92\x3b\x5e\xfc" "\x09\x89\x3e\x7d\xc2\xf3\x1e\x88\x58\x6d\xee\xa3\x0c\xfc\x68\x80\xae" "\x05\x9a\x18\x8c\xc3\x09\x04\xda\x0e\xa8\xc1\xeb\x27\x7f\xf6\x2c\xda" "\x70\x11\x80\x0f\x7f\xa6\xd0\xe3\x7f\xc4\xde\x64\x90\x5d\xe6\x18\xf6" "\x33\xf5\x57\x05\x34\xbf\xed\x21\xc1\xfb\xf7\xc8\xf3\xba\x33\xf4\x94" "\xbb\x9c\x29\x22\x34\x7e\xf4\xb1\x73\xaa\x02\x44\x90\xc5\xab\x8a\x4b" "\xf4\x40\xe0\xd3\xb4\x19\xc0\x91\xe0\x7f\xd7\x7a\xb6\xda\xea\x27\xf3" "\xcd\x54\x05\x1a\xb0\xfe\x2f\x07\x83\xe2\xe6\xb3\xa2\x14\x88\xda\xf6" "\xd4\x87\x53\x79\x1c\x6c\xf0\xc8\x48\xb8\xb9\xb4\xba\xb1\x94\xae\x34" "\xf4\xe7\x69\x5a\x66\xe5\x83\xe9\x34\x87\xa5\x3b\x13\x1b\x5d\xeb\x81" "\xcb\x1d\x3e\x78\xf0\xad\xca\x21\x92\xe0\x3d\x31\x97\xc7\x1c\xfc\x7b" "\xfb\x95\xd5\x46\x6c\x93\x12\x4e\x93\x5c\x52\x63\x83\x0a\x20\xa1\x7f" "\x4f\x4c\x04\xd3\x57\x5d\x67\xde\xd3\xc6\x98\xf5\x64\xb7\x84\x18\x10" "\x16\xab\xde\x5d\x99\xa0\xf4\x1e\xc8\xb1\x28\x1a\x66\x67\xfc\xf9\xda" "\xc1\x1f\x20\x8f\x80\x71\xc2\x60\xc7\x1c\x12\x86\xae\x63\x64\x70\x43" "\x14\xcb\x09\x48\xdb\x0e\xa1\xb4\x1d\x20\xd1\x0b\xed\x6c\x5a\xd6\xb7" "\xd6\xc6\x2c\xac\x5e\x08\x6d\x99\x4a\x09\x5a\xd9\xb8\xbc\xad\x78\x75" "\x6f\x89\x10\x22\xf1\x9b\xc0\xca\xa0\x60\x49\x0a\x5f\x01\xe2\x63\x34" "\x2a\x53\x2c\x22\x97\x3c\xf7\x1d\xe9\xa7\xc0\x84\x4e\xb4\x22\xf8\xd8" "\x03\xf6\x34\x3c\xf7\x13\x8b\x4f\x45\x4d\xf6\x62\x88\xad\x7b\xc6\x1a" "\x3a\x77\x37\xa0\x2d\x66\x60\x45\x1a\x5e\x9e\x0f\x27\x61\x79\x0c\xe8" "\x80\xf8\x1e\x6b\xca\x07\x03\x30\x3a\x17\x43\x47\xd8\x8e\xab\x43\xfe" "\xf9\xfa\x5e\xc1\xd9\x8a\x63\xea\x60\x6b\xc9\x15\xc9\x89\x20\x5c\x78" "\x15\x71\x98\x91\x2c\x02\x7e\x88\x83\xa5\x10\xfa\xc6\xcc\xde\x18\x68" "\x06\x76\xe6\xba\xc9\xa7\xdd\xc0\x52\x5b\x48\x88\xd5\xfb\xef\x09\x73" "\x38\xe9\x5c\x0d\x08\xa5\xa1\x67\x97\x63\x23\x4b\x85\x56\x10\x7c\x0b" "\x0c\xc3\x5b\xcd\xdb\x39\x44\xc5\x94\xfe\xaf\x1a\x65\xbf\x9a\xcd\x16" "\x20\x1c\x1c\xbd\x5e\x7e\x76\xa2\xca\x42\x95\x56\x23\x68\xf7\xf9\x4a" "\xf7\x17\xc5\x53\x85\x98\xf4\x97\x20\xed\xa4\xe2\x40\x94\x7b\xed\x4f" "\x96\x8c\x99\xb7\x58\x10\x87\xd1\x7d\xe5\x4a\x34\x62\xd5\x52\x3a\xa9" "\xea\xff\xb1\x08\xc3\xc7\x68\xba\xc7\xfc\x64\x45\x15\xca\xd8\xd9\x33" "\xea\x06\x61\x62\x97\x9a\x64\x55\x56\xd0\xa3\xfe\xff\xb9\x5b\xe6\x1a" "\x25\x89\x08\x18\x0d\x48\x9e\x59\x7d\x7c\xd9\x1f\x5a\x11\xbd\xf9\xa2" "\xb8\xd2\x8d\xce\x71\x2d\x64\x41\xbb\x81\xc5\x4b\x9e\xf5\xcc\xd0\x7d" "\xab\x8f\xff\x61\xfb\xef\xae\x19\x2c\x8d\x98\x58\x06\x7a\xdf\xd7\x33" "\x09\x85\x09\x92\xd4\xa8\x79\x73\x26\x9b\x4e\x5a\x06\xd9\x6d\xa4\xf9" "\x01\xe5\x88\x55\xaf\x72\x92\x22\xd7\x55\xbc\x9b\x19\xb0\x9f\xf7\xce" "\xdc\x9f\x81\x77\xd8\xb9\xab\x0f\x2d\xa2\x98\xf1\x4c\x72\xa7\x37\x06" "\x07\xfe\xd4\x6d\x6a\x9a\x75\x8a\x69\x56\x98\xa3\x86\xda\x0a\x2f\xdb" "\x1f\xe6\x55\x17\x55\x0a\x67\x0f\xe6\x69\xbe\x07\x2d\xbc\x23\xe3\x4d" "\x27\xf3\x98\xa7\xb6\xc0\x6f\xd1\x7b\x86\x4f\xdd\x44\x71\x25\x12\x3d" "\xf1\x2d\x9b\xcf\xb8\x0a\xe9\x31\x2c\x43\xed\x6e\x40\xc6\x37\xe3\x30" "\x24\xcc\x55\x3b\x4d\xb2\xb3\xfb\xa0\x7e\x26\xa3\xe7\xb9\xc4\xb4\x7d" "\x15\x50\x23\xa0\xa0\x45\x31\x18\xb6\x52\x1c\x8c\x2b\xaa\xbc\x71\x15" "\xb7\xe7\xdf\x0e\x0c\x3f\x4c\xae\x48\xb4\x9b\xd9\xd6\x27\xfe\xd6\x53" "\x34\x1a\x75\xce\x3e\xfe\x4c\x9a\xed\xdb\xd1\xcb\x00\x7f\x14\xca\x2a" "\x57\xb4\x21\x43\xe8\x01\xf9\x00\x81\xe3\xf8\xe0\x40\xab\x9f\x1e\x46" "\xc6\xfd\x54\xf5\xbf\xea\xfd\xe8\x5f\x77\x71\x22\x4e\x4b\xbe\x2e\x3e" "\x78\x8c\x67\xdb\xde\xa5\x3d\x02\x11\x01\x95\xea\x36\x06\xef\x1a\x93" "\x42\xac\xf0\x56\x80\x9a\x48\xca\xa8\xb8\x7a\x9f\x0d\xbe\x15\x5c\x51" "\xee\x6d\xf0\xc7\x7e\x0e\x76\x5d\x7d\x91\xfe\xdc\x6c\xd2\x84\x28\xb2" "\x42\xaa\x39\x27\xb2\xa5\xb4\x67\xdf\x80\x72\x06\x31\xcd\x06\x1a\x03" "\x01\x6e\x7e\xd3\x5f\x09\x4b\x4b\xdf\x85\xce\x31\x0a\xa2\xc1\xc1\xe8" "\x69\x9c\x69\x21\xd7\x21\xc4\x0a\x11\x0f\x06\xcd\x1b\xa0\x9f\xc9\xcf" "\x43\xfe\x1b\xbe\x14\x2a\x1f\xc4\x3e\x8b\x4e\x70\xa7\x7c\x0f\x47\x27" "\xee\xab\x35\x9a\x64\x4c\x6c\xf0\xbc\x62\x30\xd8\x41\xa5\xf3\xc4\x10" "\xb4\x87\x38\xb2\x05\x54\xd0\x97\x33\xf5\x92\x38\x5e\x3c\x90\x90\xdd" "\x44\xf5\x5e\xd5\xe7\xfb\x52\xc1\xbf\xd8\x86\xeb\x68\x3a\x25\xf8\xbc" "\xba\x87\xb7\xb5\xa7\x17\xc8\x7d\x85\xc0\xdb\x9f\xb9\x59\x52\x56\xe0" "\x80\x93\xd9\xa7\x46\xb1\x40\xf8\xe4\x94\x6b\x84\x93\xa2\x90\x76\x3a" "\xbc\x95\xa8\x32\x69\x55\xc7\x22\xaa\x38\xbe\x0e\x11\xc0\x84\x0c\xde" "\xf8\xd6\x81\x0c\x32\x61\x49\xd2\xf0\xfd\x57\xdc\xd7\xc3\xda\xe1\xa5" "\x64\x9c\x7a\xb5\x42\x98\x1b\x5e\xbf\x1c\xb1\x0f\x00\x5d\xc7\x5d\x7d" "\xc5\x3c\x9f\x1e\x37\x55\x41\x20\x51\x57\x70\xbb\x1a\x65\x11\x12\xb4" "\xd6\x6c\x23\x87\xc8\x82\x87\x7d\x97\x8d\xef\xe4\x81\xc2\xa0\xa6\x73" "\xa4\xc9\x7e\x6e\x3c\xca\xcf\xaa\xa0\xfa\xf2\x24\x8a\x0d\x6f\x1e\x20" "\x18\x57\x28\xb7\xc3\xe3\x54\x8b\x27\x55\x6b\x31\xc7\x72\x33\xe6\xbf" "\x4c\xa7\x00\x90\xf7\x56\xa4\xb4\x21\x3b\x67\x8d\x2b\xba\xd5\x1e\x27" "\x4c\xa0\xc8\xfc\x50\x39\x28\xa6\x5c\x9c\x7e\x71\xea\xdc\x30\x8f\x33" "\x16\xce\xde\x25\xa3\x9c\x6d\x62\xff\xdd\xe0\x83\x78\xab\x9f\x00\xc5" "\xbf\xf1\x18\x48\x4c\xad\x82\x25\x3e\x1d\x63\x82\x7a\x2c\x86\xa1\x1b" "\xd0\x68\x1e\x5c\x36\xb2\xa7\x73\xc9\x29\x06\x29\xd9\x26\x2d\x49\x73" "\x83\x47\xaa\x10\x07\xc2\xf0\xe9\x47\xd2\xec\x61\x14\xfd\xbe\x07\x69" "\x96\xf0\x04\x8b\x78\x7f\xed\x9e\x34\x66\x10\x8d\xf3\x66\x0f\x92\x62" "\x57\x30\x11\x21\x0c\x3f\xba\x4e\x58\x8f\xf0\xb6\xbf\x9f\xae\x69\xab" "\xeb\xe7\xa2\xbf\x10\x04\xb8\x6d\xb4\x07\x77\xb8\xab\x87\x3a\x38\x2d" "\xfb\x2c\x66\x23\xb8\xb9\x32\x0b\x94\xcf\x4a\xfb\x00\x3e\x5c\x54\xc4" "\xe9\xe2\x07\xae\x4f\x1f\xcf\x89\x98\x27\xe0\x88\x00\xa4\x19\x16\x2f" "\x58\x18\x97\x1b\x34\x69\x3b\x03\x18\x84\xd1\x2f\x24\x51\x80\x68\xfe" "\xc3\xf7\x55\x55\x70\x53\xe1\x6c\xcb\x0d\xc8\x86\x72\x01\x45\x20\x1f" "\xf3\x23\x1b\x6c\x3c\x64\x5b\x5e\xa5\x95\x63\x42\x19\x9b\x37\x6f\xe4" "\x71\xf0\x64\x6b\x49\x0d\x95\xcf\x2a\xb4\xc5\x1d\x7c\x3f\x2e\xb3\x06" "\x22\x12\x57\xaa\x9b\xbb\xc3\x94\x37\xc6\x74\xb1\xf8\xc4\xc7\x28\xa5" "\xa9\x4a\x8f\x5f\x07\x68\x79\xf2\x00\xdf\x6a\xa5\x05\xb7\x21\xb0\xfd" "\xcc\x89\xa2\xd9\xfe\xe5\x23\x5e\xac\x4c\xb7\x11\xb3\x96\xcd\x86\x0f" "\xcd\x5e\x98\x86\xdd\x1e\x3c\x7b\x21\x15\x3a\x31\x71\xe5\x9b\x66\x7f" "\xd4\x35\x4e\x95\xd9\x4a\x89\xef\xf8\xc3\x45\x15\xc4\x25\x65\xad\x54" "\xc1\x84\xcf\xfd\xdd\xa8\xb9\xd8\x40\xd0\x43\x0a\x2b\x48\xa5\x01\xa9" "\x7d\xce\x92\x89\x95\xd5\xf3\xfa\x8c\x09\x93\xd5\xcb\xb1\x67\xdf\xdf" "\x8a\x5a\xfa\x16\x9a\x7e\x4c\x08\x3f\xd3\x30\xdf\xd0\xf1\x82\xcd\xa6" "\x8d\x77\xf4\x50\xad\x5b\xb0\x62\xcb\x67\xd7\x18\xa5\x6a\xd4\x48\xcd" "\xf8\x57\xd7\x5f\x21\x41\xdd\xfa\x13\xa8\xcc\x88\x6c\x33\xc0\xec\x3d" "\x82\xcb\xc3\x99\x18\x4a\xf2\x91\x48\x25\x5f\x28\x40\xf5\x9d\x31\x3b" "\xc0\x3c\xa4\xc7\x86\xd6\x0b\x38\xc3\xbd\x20\x9d\x43\x88\x5c\xce\xbe" "\x46\x21\x95\x1d\xdb\x0f\x09\xf4\x5c\x6a\xdb\xb2\xaf\xb8\x2a\x27\xae" "\xaf\x03\xef\x39\xea\xdb\xd7\x74\x0e\x5c\x83\x03\x43\x08\xa9\x77\x89" "\x74\xbb\x46\xc5\xa5\xfa\x72\x6d\x1e\x29\xa1\x42\x3b\xef\x1c\x44\xa1" "\x46\xba\xc3\x55\x68\xa1\xe9\x6d\x93\x05\x96\x6b\x81\x18\xb9\xe4\xf6" "\x9f\x3d\x70\x17\xc6\x4d\xca\xc4\xf2\xfe\x24\xf1\x77\x35\x63\xe5\x5f" "\xfa\xeb\x6b\xe0\xb7\x78\x24\x93\x58\x12\xf2\x1e\x7c\x72\xdb\xa8\x79" "\x80\x53\x07\x3a\x66\xed\xc9\xa4\x21\x4d\xf2\x2a\xb6\x7d\x15\x3b\xc2" "\xda\x9d\x09\x38\x81\xd0\x43\xc6\x88\x91\x33\x5a\x4a\xc9\x0d\x52\x29" "\x62\x28\xc1\x75\xea\x44\x7c\x50\x62\x2b\xaa\x05\x62\x6b\x25\xf6\xa4" "\xaa\x66\x39\xf1\x39\x45\x36\xe4\x92\x15\xee\x6b\x56\xcc\x10\xa1\x51" "\xe2\xa5\x75\xef\x26\x14\x46\xdd\xd7\xbc\x98\xc7\xeb\x99\x90\x8d\x83" "\x7c\xf8\xbd\xfa\xf4\x7a\x02\xc4\xb3\xde\xd4\xf6\x9f\xc1\x09\xca\x1a" "\x54\x0f\x9d\x33\x6d\x10\xdd\x2a\x8e\x51\x09\xf2\xe8\x0e\x89\x31\x7e" "\x80\x9f\xca\xa1\x89\x28\x6b\xb7\x21\x41\xf1\x40\x0b\xb3\xde\xd0\xf4" "\xff\x72\xb5\x0b\x6c\x05\xab\x06\x8e\x07\x2d\xc8\xbe\x30\xfa\x28\xaa" "\xbb\xad\xdb\xd8\x2e\x96\x63\xfe\x9e\xd2\x4f\x82\xf5\x73\x9a\x7d\xdb" "\xfe\x01\x6f\xed\xac\xcc\xc6\xc9\x93\x0b\xd4\x87\x9d\x97\x5b\xe9\x38" "\xb2\x68\x71\xa4\x41\x61\x94\x83\xfb\x49\x94\xb1\xfe\x6f\x6e\xcd\x30" "\x43\xa7\xc7\xda\x95\xf0\xf5\x72\xac\x7b\x7d\x66\x2c\x1d\xf7\xcb\x94" "\xc1\x16\x44\x5c\x7d\x49\x29\xea\x12\xac\x1c\xc6\xc3\x99\xb0\xd5\x18" "\x60\xda\x41\x88\x9c\x97\x7c\xef\x15\x72\x66\x22\xb4\x6e\x8a\xb9\x56" "\xb3\xdc\x57\x36\xed\x80\xff\x96\x94\x9e\x32\x12\x12\x9f\x8d\x48\xe5" "\xdd\xdc\xb1\xac\xcf\xca\x2f\xe3\x3f\x59\xbc\xd7\x9b\xa7\xe2\x80\x85" "\xcf\x70\x6c\x33\xed\x47\xed\xbf\x06\xb6\x44\x3a\x7c\x5c\x20\xb8\xee" "\xe5\x26\xbd\xf8\x3c\x5f\xf6\x74\x15\x29\x54\x50\xaf\xad\xfb\x85\xfd" "\x0c\x24\x58\x39\xd1\xa3\xeb\x3c\x9c\xb3\xc6\xec\x37\xe0\x6f\xea\x9f" "\x36\x05\x04\x21\x3c\xdd\x26\xfa\x74\xa4\x43\xa8\x95\x4a\x31\x16\x6a" "\xa1\xb8\x73\xde\x0f\x2e\xac\x74\xaa\x4e\x45\x53\xca\xd4\x10\x9f\xa4" "\x65\xdd\xff\x95\xf6\xb3\x26\xa1\x4f\xf4\xfe\x5e\xb4\x6d\xde\x87\x0e" "\x27\x3a\x77\x0b\x71\xcd\x32\x97\xff\xc6\x42\x9a\xbd\xda\x46\x68\x66" "\xca\xf3\x6c\x41\x14\x00\xda\x77\xb8\xf6\xe6\x0c\x53\x19\x2a\x10\xc2" "\x28\x08\xb6\x1a\xab\x5f\x76\x34\xf0\x20\xa0\xf6\x0f\x6c\x67\xeb\x2a" "\x36\xae\x63\x3a\x55\x83\xe4\x6b\x34\x68\x54\xa2\x7f\xf4\x6f\xba\x0a" "\x7a\x8f\x62\x84\x4c\x0d\xe9\x00\xb7\xbb\x35\xd1\x33\xca\x33\x08\xe6" "\x7a\x35\x39\x10\xff\xf5\x18\x36\x68\x49\xac\xb8\x26\x68\xc1\xbe\x51" "\x6b\xcd\x4e\x08\x19\x9d\xe7\x6c\x73\x6e\x7b\xda\x0c\xe5\x2f\xcd\xb0" "\x28\x69\xce\x9e\xf2\x77\x49\x2b\xa8\x3f\x9a\x15\xd2\xb8\x5e\xc3\xa3" "\x32\x8a\x51\x66\x93\x71\x83\x42\x9e\x3e\x15\xbc\x86\xce\xe5\x53\xee" "\xdf\x50\x49\xd0\xd6\x71\x0c\x6b\xd2\x5c\x9e\x5d\x1d\x56\x6a\x37\xe9" "\x26\xb9\xdd\xff\x38\x83\xb2\x6f\xd7\xbf\x9a\x3b\xd9\xba\xcc\x38\x7e" "\x3b\xb0\xea\xaf\xf7\x60\x51\x6d\xaa\x79\x0f\xb3\x4b\x9a\x18\xdb\x3c" "\x76\x30\xb7\xb1\x4b\xc3\xc1\x67\xae\x78\x5c\x3f\x6c\x8b\xe8\xa9\x50" "\x8c\x00\xaa\x26\x6e\x2e\x07\xdc\x78\x89\xe0\x06\x83\x32\x54\x6a\x98" "\x3b\xe4\x7f\xfb\x6f\x43\x89\xf6\x3d\xb8\xa1\x6f\xb6\xf2\x96\x86\x8a" "\xe9\xe1\x2e\x62\xc0\xa1\xb8\x89\x0c\x74\xea\xa2\x09\x1b\xa6\xcf\xc0" "\x53\x5d\x1e\x0a\x21\x60\x38\x88\x63\x10\x68\x93\x7c\x63\x4f\x36\x8e" "\x7a\x11\xd1\x44\xfe\xad\xc7\xc6\x10\x48\x83\x6a\x88\x4c\xd6\x24\x04" "\x3d\x2b\xcc\x6a\xf9\x7f\x55\x15\xf5\xfa\xeb\xba\x4a\x1f\x0a\x9a\x58" "\x3a\x13\xd8\xf2\x8c\x5e\x76\xcc\x7a\xbd\x99\xd3\x22\x1f\xbf\x10\x44" "\x32\xe5\x47\x83\xc6\x3e\x4d\xf5\xb4\x95\x8c\x29\xd1\xa5\x7f\x3e\x74" "\xeb\x26\x3c\xc7\x17\x2d\xbe\xd7\x66\x62\x71\x56\x74\xd4\x43\x9a\xed" "\xe8\xce\xcc\xec\xdb\x69\x20\xdd\xdf\x0d\xeb\x56\xd8\x0e\x54\x1c\x7a" "\x7d\xee\x32\x62\xa9\xc6\xfe\xe7\xc2\x03\x29\xd3\xc8\x3a\x29\x03\x04" "\x05\xc6\x0e\x4d\xb0\x27\x22\x82\xb2\x0d\x0b\x46\xff\x2e\x95\xc0\xe8" "\xde\xd5\xc2\xf5\x4b\x53\xd7\x38\x89\xc9\x27\x32\x1f\x33\x9b\xc6\xb4" "\x32\x50\xa3\xf0\xab\x55\x49\x76\x09\x87\x95\xb3\x9b\xb4\xfc\x55\xd4" "\x16\xb7\xa0\x00\x22\x5e\x83\x06\xdc\x34\x32\x66\x66\x28\xf2\x4f\xc9" "\xbd\x75\xc7\x4b\x4f\x7d\xd5\xd4\x06\x3c\xc0\x42\x1c\x49\x3d\x94\x79" "\x1a\xbc\xe3\xea\x7f\x2a\x06\xa3\x83\x5a\x0a\x66\xd6\xf3\x9e\x88\x57" "\xe0\x29\xa3\x85\xb2\xb4\x7e\x05\x53\x5d\x70\x90\x54\xdd\xb0\x8f\xc3" "\xe9\xe0\x56\x44\x8c\x14\xf1\x68\x36\x07\xfa\xe8\xaf\x2d\x74\xe0\xa0" "\x63\x3e\x99\xbb\xbe\xe7\x4d\x6f\x69\xd2\xfa\x08\xca\x82\x68\x71\x72" "\x6b\xa0\x0b\x46\xe8\x42\x56\x5c\x11\x41\x5f\xee\x0c\x41\xbf\xb5\x34" "\x32\xe9\x9f\x77\xb9\x3e\xd3\x20\xea\x06\x99\x90\x20\x28\x1f\x9f\x91" "\x0c\x60\xb4\x28\xe6\x8a\xbd\x2b\x3a\x58\x44\xa7\xfa\x5c\x96\xcb\x82" "\x11\x64\x7c\x46\x4a\x08\xd8\x0a\xcf\xfa\xfd\xf2\xf3\xc5\x11\xc1\x52" "\x75\xc5\x9d\xf5\xbe\xfe\x39\x11\xf0\x91\x72\x34\x7f\x7c\x8a\x5d\x45" "\x4c\x5e\x02\xbc\x0d\x7b\x60\x2f\x49\x47\xf8\x15\x8d\x87\x72\x8f\x71" "\xfe\x62\x5a\x66\xca\xfd\x68\x7e\xdb\x32\xbe\x33\x4d\x58\x9d\xad\x4f" "\x12\xee\xc7\xc5\x09\xe5\xf9\x55\x4c\xe5\x16\xf1\xc1\x34\x67\xa6\xc0" "\xdd\xf7\x0c\x2b\x3f\xf8\x0c\xfe\xa1\x4b\x88\x79\x9d\xec\x82\xa3\xe0" "\x51\x1a\xbc\x16\x5e\x26\x2f\x56\x5b\x38\x55\x45\xdb\x05\x82\x9a\x48" "\x4c\x60\xe3\x48\x40\xbd\x73\x55\xbe\x3b\xf8\xd6\x98\xf1\x7a\x59\xe2" "\x3a\x40\xb8\x66\x89\x65\x3a\x5c\xa2\xec\x8f\xae\x22\x6c\x92\x0e\x6b" "\xea\x27\x28\xb6\x46\x1d\x88\x24\xfa\xed\x91\xf3\x8c\x8f\xd1\x9d\xc0" "\xdb\x93\x98\x7b\x45\x4d\xf0\x57\xc0\x1f\x96\xee\xcc\x05\xc8\x5f\x86" "\x24\x3a\x4e\x00\xbd\x9b\xc8\x3d\x02\x4f\xe3\x36\x5f\xe0\xe4\x25\x2c" "\x63\x25\xa5\x48\x33\x1a\x27\xb9\xfa\x51\x7b\x4a\x95\xca\x2c\x8e\xdf" "\xa1\x73\x7c\x84\xcf\xc9\x48\xd9\x8f\x65\xac\xf8\x29\xf0\xc0\xbb\x25" "\x77\xbc\xdf\xdc\x2f\x5a\xad\x8a\x13\x80\x8c\x23\x7a\x01\x57\x81\x60" "\x32\xc5\xea\xc1\x9d\xd1\x2c\xc6\x46\xe0\x27\x05\xfb\x58\x7b\xa1\xec" "\xe2\x49\xed\xdf\x56\xb2\x9c\x54\x6e\x1e\x30\x8b\x6c\x05\x96\x55\xbf" "\xff\x3c\x8c\xae\x3d\x41\x68\xc2\x5d\xc7\xb6\x77\x71\xab\x49\xf5\x56" "\xc4\xa2\x73\xf8\xb6\xf9\x36\xab\x4f\x53\xe2\x51\x50\xa0\x60\x65\x1b" "\xd0\x75\x2f\xd4\x24\x64\xd1\x8b\x9d\x9b\x42\x02\x65\x33\x9f\x21\x73" "\x8d\x60\xe4\x7b\x5b\x96\x0f\xca\xfa\xcb\x23\x8b\xdc\xe7\x70\x2f\xbe" "\xed\x9b\xce\x72\x8d\xb1\x4f\x80\xd3\xe4\xe5\x75\x61\x6c\xb8\x6e\x7e" "\x4a\x71\xf7\x9c\x24\x4a\x7d\x08\x64\xb0\x54\xcf\xc3\xca\x38\xe5\x43" "\x0f\x4a\x47\xa6\x4c\x69\x91\x3b\x90\xe7\x3e\xfc\xdb\x5e\xff\xc7\x09" "\x0a\x5d\xc2\x6b\x74\x95\xab\x39\x8b\x38\xac\x78\x8d\xf8\x2f\x88\x5a" "\xbe\xc2\x60\xb1\x7f\x6e\x50\xa7\x58\x95\xb4\x46\x26\xdd\x33\xc1\x49" "\x16\x24\x09\xa1\x03\xda\x00\x8c\x0c\xbc\x75\x6a\x05\x84\xa5\xc8\x81" "\xe5\xa7\x40\x2a\x34\xef\x02\x2f\x65\xf4\x9f\xac\xf3\xd4\xa7\x30\x74" "\xaa\x39\xfa\xac\x84\xf4\x5d\x44\x02\x37\xe6\xf5\x65\x51\xae\x16\x0d" "\x0a\xa7\x16\xff\xde\xda\x2f\x1f\xcc\x2d\xed\x03\xd8\x52\x94\x45\x6d" "\xda\xf5\xc1\x32\x3a\x9f\xeb\x02\x67\xc3\x10\x4f\x0d\x5a\x57\x9b\x0d" "\x74\x24\x2d\x20\xc9\x97\xba\xdc\xf3\xba\xc1\xc7\x68\x3a\xf2\x36\x5f" "\xd4\x2f\xb9\x57\xb2\x50\xba\x66\xd7\xd6\x90\xa3\xf7\x0d\x10\xdc\x3e" "\x02\x55\x99\x9d\xef\x9d\x2f\x74\x03\x1d\x7c\xea\xaa\x5a\x4a\xc0\xae" "\x95\x98\xc2\x5d\xff\x50\x89\x56\xd3\x6f\xf3\x73\x5e\xb1\x55\x88\x4b" "\xa6\x8d\xa1\x69\x2d\x69\x0c\xcb\xe8\x34\x67\xc5\x14\xca\xaf\xe5\x6b" "\x7c\x66\x6b\xb3\x76\x58\x88\x03\x90\x0c\x8c\x76\x00\xa2\x85\x66\xed" "\xbc\x26\xad\xbe\x04\x00\xe5\xcf\xfd\x5d\x42\x2a\xc2\xbf\x6f\x75\x7c" "\xf9\xab\xa1\x41\xe4\x1d\x60\x0a\x90\xd7\x40\xc6\xce\x25\x25\x9e\xaf" "\x41\x78\xc8\x23\xd8\x0a\x9c\xde\x93\x2d\x95\x8d\x0f\xca\x26\xc4\xd1" "\xef\x03\xb3\x0f\x51\x8b\x86\x6c\x6e\xf3\xde\x6c\x55\x84\x04\x5b\xc8" "\x52\xcb\xc0\x01\xfd\x08\xe7\xee\x94\xda\x38\x95\x98\x40\x9a\x4a\x20" "\x70\x45\x7b\x65\xda\x58\x20\xdc\x91\x8f\x56\xbd\xb6\x65\x67\xed\x08" "\x3f\x58\xfd\xff\x65\x2c\xc6\x9a\x20\xdf\x4e\x82\xe7\x34\x8d\x0e\xba" "\xd9\xe4\x96\x9d\x99\x14\xa3\x7f\xb1\x95\x46\x51\xdf\x8c\x7a\x64\x5d" "\x2b\x93\xcc\x10\xed\x70\xce\xbc\xaf\x9e\xcb\xae\xde\x6c\xea\x10\x8b" "\xba\xca\x4d\x82\x52\xd0\x8e\xb7\x08\x2f\x23\x96\x73\x47\xa8\x57\x58" "\xa9\x3d\x62\x2f\x70\xad\xcd\x19\xbc\xd8\xe0\xed\x2b\x8e\xe0\x3a\x6a" "\x7a\xfb\xe9\xb3\xa8\x2d\x9b\x4f\x31\x03\x64\x6f\x44\x6a\x89\x95\xac" "\x08\x4b\x2e\x28\x03\x9c\x96\x58\x65\xc4\xd9\xa1\x62\x66\x3a\x27\xef" "\x09\x43\x22\xd5\xde\x8c\x73\x03\x58\x2b\xf0\x53\xa6\x23\x9b\x17\x25" "\x1d\xd3\x53\xe7\x4a\x54\x6e\x07\x24\x64\xd5\x53\xa8\x5d\xb8\x8f\x3c" "\x1e\x18\xbb\xd9\xd2\xa7\xe4\xf5\x08\x26\x62\x4c\x75\x3d\x2f\x33\xa3" "\x2f\x25\xe8\x0b\x85\xba\x78\x57\x7a\x46\x53\x99\xef\x64\x33\x68\x2c" "\x75\x30\x56\xf1\x95\xc6\x6f\xb1\xaa\xf0\x3c\x5c\x96\x43\x54\xfa\xc3" "\x14\x12\x03\x66\xbf\x1b\x0d\x02\x12\x32\x4e\x08\x1b\x6f\xae\xa1\x1f" "\x67\xff\xce\xae\xda\x74\x16\x63\x54\xdf\x22\x9c\x5a\xf1\x52\x77\xe9" "\x79\xa2\x4b\x93\xe6\xe2\x7e\x49\x5b\x4d\x49\xb6\xe0\x09\x38\x36\x6f" "\x6b\xed\x4e\xdf\x16\x2e\x28\xe3\xa7\xca\x74\x9a\xcc\x01\xad", 8192); *(uint64_t*)0x20000b80 = 0; *(uint64_t*)0x20000b88 = 0; *(uint64_t*)0x20000b90 = 0; *(uint64_t*)0x20000b98 = 0; *(uint64_t*)0x20000ba0 = 0; *(uint64_t*)0x20000ba8 = 0; *(uint64_t*)0x20000bb0 = 0; *(uint64_t*)0x20000bb8 = 0; *(uint64_t*)0x20000bc0 = 0; *(uint64_t*)0x20000bc8 = 0; *(uint64_t*)0x20000bd0 = 0; *(uint64_t*)0x20000bd8 = 0x20000500; *(uint32_t*)0x20000500 = 0x90; *(uint32_t*)0x20000504 = 0; *(uint64_t*)0x20000508 = 0; *(uint64_t*)0x20000510 = 1; *(uint64_t*)0x20000518 = 0; *(uint64_t*)0x20000520 = 0; *(uint64_t*)0x20000528 = 0; *(uint32_t*)0x20000530 = 0; *(uint32_t*)0x20000534 = 0; *(uint64_t*)0x20000538 = 0; *(uint64_t*)0x20000540 = 0; *(uint64_t*)0x20000548 = 0; *(uint64_t*)0x20000550 = 0; *(uint64_t*)0x20000558 = 0; *(uint64_t*)0x20000560 = 0; *(uint32_t*)0x20000568 = 0; *(uint32_t*)0x2000056c = 0; *(uint32_t*)0x20000570 = 0; *(uint32_t*)0x20000574 = 0x2000; *(uint32_t*)0x20000578 = 0; *(uint32_t*)0x2000057c = 0; *(uint32_t*)0x20000580 = 0; *(uint32_t*)0x20000584 = 0; *(uint32_t*)0x20000588 = 0; *(uint32_t*)0x2000058c = 0; *(uint64_t*)0x20000be0 = 0; *(uint64_t*)0x20000be8 = 0; *(uint64_t*)0x20000bf0 = 0; *(uint64_t*)0x20000bf8 = 0; syz_fuse_handle_req(r[0], 0x20008680, 0x2000, 0x20000b80); break; case 6: res = syscall(__NR_socketpair, 1ul, 2ul, 0, 0x200000c0ul); if (res != -1) r[2] = *(uint32_t*)0x200000c4; break; case 7: *(uint64_t*)0x20008600 = 0; *(uint32_t*)0x20008608 = 0x7f; *(uint64_t*)0x20008610 = 0x20000000; *(uint64_t*)0x20008618 = 0; *(uint64_t*)0x20008620 = 0; *(uint64_t*)0x20008628 = 0; *(uint32_t*)0x20008630 = 0; *(uint32_t*)0x20008638 = 0; *(uint64_t*)0x20008640 = 0x200072c0; *(uint16_t*)0x200072c0 = 1; memcpy((void*)0x200072c2, "./file0/../file0/" "file0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000", 108); *(uint32_t*)0x20008648 = 0x32; *(uint64_t*)0x20008650 = 0x20007380; *(uint64_t*)0x20008658 = 0; *(uint64_t*)0x20008660 = 0x20000600; *(uint64_t*)0x20008668 = 0; *(uint32_t*)0x20008670 = 0; *(uint32_t*)0x20008678 = 0; syscall(__NR_sendmmsg, r[2], 0x20008600ul, 2ul, 0ul); break; } } int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); loop(); return 0; }