// https://syzkaller.appspot.com/bug?id=75b9434ab41bf479db3f5a7b1624df435fe77ed9 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[2] = {0xffffffffffffffff, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000280, "./file0\000", 8); syscall(__NR_mkdir, /*path=*/0x20000280ul, /*mode=*/0ul); break; case 1: memcpy((void*)0x20002080, "/dev/fuse\000", 10); res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20002080ul, /*flags=*/0x42ul, /*mode=*/0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x20000180, "./file0\000", 8); memcpy((void*)0x200001c0, "fuse\000", 5); memcpy((void*)0x20000000, "fd", 2); *(uint8_t*)0x20000002 = 0x3d; sprintf((char*)0x20000003, "0x%016llx", (long long)r[0]); *(uint8_t*)0x20000015 = 0x2c; memcpy((void*)0x20000016, "rootmode", 8); *(uint8_t*)0x2000001e = 0x3d; sprintf((char*)0x2000001f, "%023llo", (long long)0x4000); *(uint8_t*)0x20000036 = 0x2c; memcpy((void*)0x20000037, "user_id", 7); *(uint8_t*)0x2000003e = 0x3d; sprintf((char*)0x2000003f, "%020llu", (long long)0); *(uint8_t*)0x20000053 = 0x2c; memcpy((void*)0x20000054, "group_id", 8); *(uint8_t*)0x2000005c = 0x3d; sprintf((char*)0x2000005d, "%020llu", (long long)0); *(uint8_t*)0x20000071 = 0x2c; *(uint8_t*)0x20000072 = 0; syscall(__NR_mount, /*src=*/0ul, /*dst=*/0x20000180ul, /*type=*/0x200001c0ul, /*flags=*/0ul, /*opts=*/0x20000000ul); break; case 3: res = syscall(__NR_read, /*fd=*/r[0], /*buf=*/0x200021c0ul, /*len=*/0x2020ul); if (res != -1) r[1] = *(uint64_t*)0x200021c8; break; case 4: memcpy( (void*)0x20004300, "\xf6\xc5\xcd\xd5\x0b\x89\x33\x8e\x6f\x02\x28\xb9\x37\x22\x5c\x21\xa8" "\x70\x72\x40\x7f\xe8\x3d\x5f\xec\xd7\xbc\xca\x9b\x3f\xb6\xc7\x14\xba" "\xa7\xd9\x05\xbd\x76\xd4\xf3\x8e\xba\x0f\xfa\xfc\x06\x7d\xa9\xe5\xb2" "\xa8\x63\xdb\xea\x1f\x11\xe3\x2b\x45\x58\x62\xad\x20\x5d\x1d\xe2\x67" "\xdb\xf9\xed\xb2\x96\xfd\xa4\x80\x92\xe3\x72\xfd\x31\x66\xc9\x1d\x63" "\x6b\x62\x7f\x4c\xe2\x23\xd2\xff\xf7\xdb\x30\xab\xd2\x45\xc1\x74\x81" "\x2a\x8e\xbf\xce\x72\x04\x83\xd7\x4f\x66\x58\xda\xab\xa3\xea\x9e\x45" "\x3d\x78\x9d\x9d\x1d\x8b\x63\xc9\x1f\x02\xb1\x28\x2f\x12\x2d\x58\x47" "\x24\x1f\x30\x5a\x5d\x79\x1a\x71\x88\xc9\x46\xed\x5d\x5e\x53\x43\xc0" "\x49\x68\xe6\x2b\x06\x4a\xea\xde\xaf\xd5\x5d\xdb\x6a\x1b\x72\x4a\x9a" "\xdf\x29\xb1\x5c\x4c\x55\xc9\xaf\xd7\x09\xd1\x9c\xf2\x9d\xf1\x17\xc6" "\x9d\x1f\x85\x5b\x64\x7f\x2d\x6d\xc3\xad\x9c\xc2\xe4\x13\xcd\xa6\x5c" "\xa8\xd3\xfd\x77\x7f\xdf\x88\x82\x74\x28\x72\x3d\x37\xb8\x9a\x73\x30" "\xdd\xdd\x23\x4f\x39\x18\x7d\xb8\xe5\x49\x05\xb8\xeb\x0d\xc8\x51\xf5" "\x1f\xf3\x7b\x5d\xeb\x69\xb6\x4b\xbd\x27\xb7\x28\x81\x26\x7f\x94\xa8" "\x89\x74\xa5\x6b\x1d\x31\x78\xd4\x9c\x20\x9d\x6f\x4e\x97\x4c\x00\xf2" "\x5a\x87\x25\x5c\x38\x04\xb1\x15\x0f\x98\xd4\x64\x37\xf5\x33\x3b\x20" "\x06\x51\xdf\xd1\xae\x93\x91\x25\x48\x3c\xec\x16\x90\xec\xb4\xd4\x49" "\xae\x4f\x2b\xdf\x88\xd5\x03\x82\x44\x0d\xbe\x16\x99\x01\x7f\x21\xc0" "\xf1\xe0\xc8\x5c\xd3\x39\xa9\xf8\x70\x46\xaf\x06\x3b\x54\xb9\x23\xd4" "\xea\xa0\x4f\xc8\xda\xbb\x3b\xb3\xe3\xbc\x83\xf0\x65\x7b\x5a\x3c\x4c" "\xdf\xce\x3c\x32\x5a\xbe\x45\xa3\x9b\x79\x4d\x13\x05\x7e\x3a\x03\x6e" "\xc2\x0c\x4e\xb1\xc1\x8a\x75\x01\xa8\xbf\x38\x99\x62\x6f\xe0\x1b\x2b" "\x9c\x18\xab\x08\xea\xa9\x72\xab\x9f\x8a\x78\x68\x88\x16\x2c\x7f\x77" "\xdb\x75\x1c\x1a\xb8\x8d\xb8\x54\xad\x8a\x99\xc7\x30\x7a\x52\x57\x1f" "\xd4\xd0\xa8\xca\x5a\x6f\x4f\x5e\x46\x39\x6b\xab\x29\xe4\xa5\xbb\x6f" "\x7c\x40\x40\x4b\xe7\x35\x7b\x47\x02\x8a\x1c\xd2\xb7\x80\xab\xbb\xa9" "\xe3\x7d\x18\x28\x66\xa9\x17\x1d\xde\xa5\x43\xa5\x68\x4f\xf6\x44\x5d" "\x4c\x3b\xa6\x1b\x43\x00\xa1\x55\x6e\x85\x51\x83\x01\x86\x2b\x39\x8e" "\x43\xf6\x1d\x46\x10\x54\x46\x9f\x69\x3c\x42\xf9\x95\xa0\x00\xdc\x9b" "\x95\x0b\x27\x7b\xbc\x5a\x9b\xec\x87\x24\x62\xa0\x93\x8e\xf0\xe0\xba" "\x4f\x4d\x2b\xff\x4d\x81\x80\x49\x96\xa9\xf9\x78\x93\xc0\x2b\x2d\xef" "\xf1\xab\xf1\xa6\xcb\x79\x87\xf4\x46\x13\x2f\x55\xa1\x0a\xaf\x53\x7d" "\x93\x42\x2e\xd2\x2f\xa6\x59\xce\xda\x59\x39\xcf\x18\x39\x8f\x86\x32" "\xa2\x57\xab\xbf\x68\xd4\x85\x4e\x45\x2c\xeb\x5a\xcc\x02\xc7\xb6\x5d" "\x67\xb5\x82\xe1\x59\xfb\x50\x39\xec\xfe\x63\x6d\xfd\x00\x21\x8f\x2e" "\x5d\x1e\x2e\xbe\xca\x02\x74\x72\xd6\x3f\xdd\x2b\x61\xd7\xbb\xd9\x25" "\x8a\x3f\xbb\x14\xee\x25\x59\x84\x5a\x63\x8e\x07\xbb\xde\x84\xf8\x7a" "\x42\xb5\x9a\x09\xc1\xbc\x87\x7b\x7e\x51\xa4\xea\x42\xc6\x4b\xcb\x3b" "\x3c\x80\x43\xf1\x60\x4c\x56\x93\x08\xbd\x6d\xdf\x43\x82\x04\xdf\x16" "\x75\x80\xf5\xae\xfe\x2a\x8b\xea\xbb\x77\xa8\xfd\x33\x92\xf9\x9e\x3a" "\x43\xa7\xcf\xa0\xa6\x8b\x1b\x21\xa3\x07\xae\xec\xd5\xb7\xa3\x74\x2d" "\x74\xff\x17\x90\xb1\x3f\x10\x26\xeb\xec\x29\x62\x10\x30\x1d\x48\xd9" "\x35\x46\x46\x38\x2a\x18\xd2\x47\x30\x0b\xfd\x8a\xca\x87\x80\x51\xa2" "\xd6\x67\xad\x2e\xe4\x89\xed\xfe\xb3\xc1\xc9\x12\xcc\x6a\x6c\x57\x3f" "\xd9\x2d\xd4\xcd\x1b\x6d\x2f\xb1\xbb\xdc\x86\xdd\xd8\xbf\x51\x5c\x28" "\xf1\x5e\xba\xfe\x85\x8d\xf7\x8e\x8a\x78\x3b\x29\x3d\xb3\x14\x4c\x44" "\x39\x7c\xba\xee\xad\xea\x44\x65\x5c\x63\x50\x56\x21\x66\xbd\xa3\xac" "\xcf\x7a\x2e\x65\xcf\x3e\xb7\xbe\xac\xe0\x87\x60\x33\x7e\x2d\xff\x8c" "\x96\x11\xfb\x13\x1b\x34\x5f\x44\xdb\xa2\xaa\x2e\xee\x0b\xb4\xec\x71" "\x9c\x59\xa2\x69\xe7\x1f\xfc\x07\x75\xc5\xc1\x93\xe3\x41\xa8\x33\xd3" "\x8e\xdf\x8a\x1f\x01\xf6\x6b\x9f\xd0\x39\xff\x55\xc8\x84\x25\x7e\xc7" "\x33\x0f\x33\x3e\x57\x9e\x66\xac\x67\x09\x7b\xfe\x31\xb2\xb7\x8d\x88" "\xb8\x1b\x64\x03\x51\xda\x3b\xea\x71\x0e\x38\xd8\xb5\x0b\x0a\x63\x81" "\x4f\x46\x38\xdf\x16\x80\xd2\x21\x7d\xfe\x73\x64\xdc\x22\x8e\xa7\x9f" "\x74\xe6\x78\xb3\x38\x10\x53\x91\xe8\xc1\xe0\x41\xca\xe3\xd2\xcc\xb9" "\xd1\xb0\x34\xd9\x6b\x81\x1b\xf0\x65\x15\xb3\xf4\xdd\x02\xcf\x2c\xf9" "\xf9\x88\x4a\x6a\x1a\xf3\x9f\x21\x9f\xde\x0b\x1c\xae\xe2\x06\x55\x36" "\xb8\xe9\x00\xbf\x4f\xe9\xd8\x73\x96\xcb\x08\x54\xff\x28\xdb\x25\x33" "\x82\xa8\xf1\xe6\xc2\xa2\x80\x5b\x5d\x5c\x8b\x75\x66\x40\xa4\x9a\x09" "\x2f\x8f\xbc\x5a\xb8\x7e\x51\x1d\x79\x05\x19\xe9\xe7\x9c\x13\x36\xb2" "\xaf\x28\x8b\x1b\x07\x87\x18\x58\x96\x61\x97\xf6\x59\x19\x00\x9c\x43" "\x5e\x6c\xa5\xbc\x89\xa1\x5f\xae\x0e\x35\x34\xe5\x0c\xba\xcb\x3c\xb2" "\xee\x51\x9a\x98\x94\xf0\x8f\xac\xb4\x53\xa7\xad\xa3\x5c\x0c\xd8\xe6" "\xac\x71\xcf\x9c\xeb\x21\xc1\xb9\x44\xd8\x1a\x16\xa3\x29\x9c\x73\x0f" "\xe1\xdd\xb1\x64\x50\x5e\x2d\xf5\xe4\xdc\x7f\x46\xc3\xfa\x32\x30\xa9" "\xcc\x38\x45\x29\x8d\x4a\xbf\x90\x95\x65\xa6\x7b\xe3\x31\x6c\xa8\x81" "\x54\x0f\x29\x20\xc8\xfb\x6f\xfe\x5f\xfc\x66\xef\x47\x74\x76\xcc\x49" "\x41\xba\x03\x79\x52\x87\xf4\x08\xb6\x17\x5d\xf8\x92\x74\xe1\x89\xbc" "\x2e\x12\xe9\x3f\x5d\x8a\xaa\x53\x24\x00\x94\x6a\x7a\x0c\xb6\xca\xcb" "\x55\xd4\x94\x7d\x0c\x02\xda\x9e\x23\x45\xb4\xd0\xcc\x92\xa5\x70\x01" "\x9a\xc5\x1f\x64\xb2\x9b\x7e\x50\x91\x09\x50\x0f\x9f\xe8\x12\x91\x96" "\xbc\x46\x23\x0a\x18\x48\xad\x7d\xc7\x21\xef\xd9\x7f\x1c\xbe\xe4\x1a" "\x1e\x52\x0d\xa4\xcd\xa9\xfa\x5a\x00\x24\xd7\x86\x5e\x63\x7d\x0f\x17" "\xf2\x40\x64\x7f\x11\xf4\xd4\x1a\x39\xe2\x96\x43\x91\x7f\x6c\xcd\x86" "\x80\xd8\x3c\xfa\xa3\x30\x81\xc3\xdd\x61\x3b\xa2\xeb\xe7\x36\x53\x98" "\x34\xba\x79\x77\xd2\x61\x7b\x85\xb0\x73\xa4\x53\x2c\x8e\x6c\xb3\xdc" "\x3e\xcb\x49\x2f\x23\xb5\x73\xee\x10\x3a\xd6\xc5\x6a\x59\x30\x90\x4e" "\x83\x6e\x93\x90\xa8\xb2\x04\x70\xde\x2c\x7e\x0d\x1b\x52\x00\x03\x66" "\xcb\xc1\x98\xca\xa4\x91\x7b\x59\x33\x34\xa4\x49\x84\x0a\x09\x3b\xbd" "\x70\x9a\x6f\x83\x5e\xb4\x33\x8e\x23\xb1\x2f\x59\xef\xd0\xfe\x6a\x8f" "\x7d\x10\x8e\x6c\x40\xd6\x3b\x06\xb4\x36\x39\xa7\x38\x22\xb4\x31\xb6" "\x36\xc3\xc6\xcf\xa2\xc9\x73\xfd\x43\xaa\xb1\xeb\xb5\x60\xeb\x5b\x55" "\x6b\x98\x75\x85\x83\x19\x51\x90\x65\x1d\x9f\x12\xbe\xc2\xa2\xdb\x9c" "\x87\xf8\x79\xaf\x59\xd9\xe7\x27\x86\xe4\x16\xea\x8f\xa3\x6f\xf4\xa4" "\xf0\x8d\x56\xc5\xe2\x08\xb9\x99\x5f\xd9\xed\x06\x07\xd3\xaf\x20\xb1" "\xeb\x51\xdc\x09\x43\xcd\x96\xbe\xe0\xcc\x78\x87\x5f\xac\x1d\xc4\x71" "\xf8\x06\x64\xef\x9e\xb1\xf1\x46\xd5\xb6\x87\x18\x42\xae\x1c\x51\xe8" "\x35\x23\xf2\x8a\x14\x93\x46\xdf\x30\x7e\xae\x77\x92\x9a\x81\xc2\x35" "\xf5\x59\x3d\x7e\xb3\x05\x81\xb0\x65\x0a\x87\x59\xd5\xa5\x9b\x5c\x26" "\x97\xc4\x61\xe1\x7d\x84\x58\xb1\x3d\xc8\x89\x35\xb8\x78\xf7\x1f\x05" "\x97\xd4\x69\x24\xbc\x84\x71\x4c\xa7\xaf\x2d\xf5\x74\x9b\x1b\x0f\xbe" "\x19\x50\xaa\xde\x8d\x85\x55\x58\x87\x80\x9f\x9d\x4c\xb5\xd8\xd6\xcd" "\xd0\xdd\xed\xe9\x0e\x2f\xd1\x22\xd1\x16\x8f\x0c\x7e\x53\x5a\xef\xe0" "\x38\x5c\xe1\x2a\x5c\xb1\x06\x04\x98\xba\x51\xb2\x8f\xc3\x44\xe6\xc6" "\x09\x4b\x1c\xf6\x26\x30\x07\xe2\x99\xd7\xce\xae\x78\x14\xc6\x64\xf4" "\x3b\xc2\xb8\xe9\x89\x77\x9e\x1a\x2a\x36\xe7\xe2\x09\x17\x5c\x19\x71" "\x17\x96\x69\x25\xce\xd8\xcd\x94\x1f\xb4\xd3\x7d\x05\xa5\xc7\x71\xba" "\x57\x96\x71\xd5\x05\xd6\xaf\x7f\xb7\x0f\xe7\x64\xd9\x06\xfa\x84\xf0" "\x46\xfb\x44\x29\xd8\x2b\xc7\xf4\xed\x72\xf6\x86\xbf\x2f\x92\x3e\xc7" "\xbd\x48\xb1\xbe\x87\x73\xef\x8a\x51\x23\x58\x25\xcb\x6c\x54\xd4\x44" "\x02\x1e\x82\x3b\xa2\x61\x4e\x7d\x93\x92\x0a\x96\xd2\x3f\x19\xd9\xad" "\xfc\xab\xe1\x71\x6f\xea\x49\x79\xef\x4d\x74\xfa\xdc\x6f\xd5\x3e\x8d" "\x6c\x67\x04\xc4\xeb\x04\xa0\x39\xba\x4c\x83\xd1\x5a\xfd\xb1\x95\xa3" "\x6f\x29\x2b\xa9\xa2\x72\x8c\xd8\x53\x11\x07\x6a\xa6\xa4\x84\xc0\x1f" "\xbf\x9f\xad\x61\x7f\x48\x70\xfc\xbd\x1c\xd4\x53\xae\xaa\x39\x19\x68" "\x28\x72\x63\x85\x27\x32\x55\x24\x43\xe3\x38\x8b\xd0\x7d\x97\x5c\xd2" "\xa1\x16\x24\xfa\x2d\x0d\x93\x10\x34\xb9\x40\xc4\xb2\xba\xbe\x26\x27" "\x06\xc6\xcd\x72\x00\x7c\x5f\xd5\x74\x45\x64\xba\xbc\x9f\xc3\x7d\xa4" "\x76\xcb\x38\xed\x0d\xe6\xb5\x30\x86\x4e\x26\xa6\xfe\xbe\xb8\xd9\x01" "\xd4\x0c\x77\x1a\x0c\xf2\xf4\x98\x83\x04\x87\xd8\x33\x68\xff\x3f\x8a" "\xf6\x8a\x0f\xfa\x57\x62\xd3\xf2\xc9\xcf\x2a\x66\xe2\x33\x8d\x3e\x36" "\x55\xb6\x47\x68\x5c\x2d\xca\xcb\xa9\x97\xea\xc4\x20\xd5\x61\x8c\x3d" "\x26\x8b\x85\x79\x5f\xa4\x9e\x37\xee\x50\x45\x21\x01\x74\x39\x58\x1a" "\x6c\x5c\x06\x4f\x01\x84\xe4\xca\xd2\xb8\x13\x4e\x2f\x9b\x9e\xc4\x29" "\x81\xc1\x55\x77\x5d\x7d\x74\x4b\xff\xf7\xad\xb3\xf7\x59\x9f\x15\x9c" "\x7c\xf1\xd7\xd5\x6f\xb7\xcd\xdf\x5b\x4f\x8e\xe8\xa3\xdc\xfb\xc1\x15" "\x1b\x3d\x25\x37\x71\xdb\x09\x87\x9f\x48\xc3\xc0\xcc\x95\x06\xe9\x7c" "\x77\x6f\xa8\x25\x1c\x21\xd5\xfe\xd9\xdb\xa8\xca\x66\x74\xe4\x5a\xc2" "\xa6\xbe\xf8\x6a\xe1\x8b\x17\x5f\xfb\x5d\x28\x1f\x58\x52\x76\x61\xef" "\x7d\x56\x51\xb2\x8d\xb8\x5c\x1b\x7c\xc3\x05\xab\x5b\x34\xfb\x49\xa3" "\x27\x78\x39\x0d\x3b\x6d\x4e\x78\xd0\x6d\x3d\x86\x3e\xff\x86\x43\x5d" "\x36\xbe\x30\x43\x52\x9f\xb9\xb4\xd0\x61\xa7\xa9\x83\xd6\xe2\x87\xfa" "\x83\x92\x5d\xfa\xb1\xb5\x26\xd6\xbf\x51\x0a\x29\xf9\xd6\xad\x49\x3b" "\xbb\x4d\xa5\xfd\xf0\xae\xf4\xf1\x6f\xf5\x07\x99\xb0\x16\xdc\x42\x30" "\xaa\xf8\x7b\x9e\xf8\x95\x3f\x8a\xd5\x22\xab\x4c\x3e\xc3\x20\x9a\x57" "\x85\x2c\xbd\xb5\xe3\x96\x28\xad\x10\x7b\x24\x8d\x6f\x07\xd1\x23\xfb" "\x0e\x68\xd7\xb7\xaa\x85\x58\x47\x8d\xe5\xde\xe8\x80\x32\xde\x6c\xcb" "\xbc\xab\x0e\xcf\xe8\xfc\xcb\x16\x81\x81\x6d\xb8\x94\xfd\xc2\x4a\x9b" "\x6c\xf8\xad\x56\x90\xef\xb0\x1c\x8b\x48\x40\x25\x5a\x5d\x55\x63\xb4" "\xcb\x73\x60\x9f\x0a\x53\x37\x73\x8e\x17\x9f\xd9\x57\x7b\xb7\x95\xeb" "\x5a\x89\xa4\xee\x4e\x2b\x2b\xed\x5f\xc6\x5b\xa1\xef\xb9\x11\x88\x9e" "\x13\x1a\x0b\x01\x0c\x56\x99\xd7\xf6\xb8\x69\xff\xff\x39\x45\x20\x8f" "\xee\xe8\xd2\x45\xeb\x45\x59\x0f\x2c\x67\xb9\x7d\x18\x63\x07\xdb\xee" "\x53\x27\xef\x60\x34\x03\x86\xae\x04\xd4\x5f\x98\x10\x61\xb8\x0d\x33" "\xed\x6d\xb2\xe5\xdc\xd7\x11\xd6\x8f\x8d\x9b\xef\xdc\xa1\x03\x34\xe9" "\x63\x6d\xe1\xa2\xd6\xe6\xde\x28\x88\xd0\x98\x4a\xae\x79\xb6\x36\xeb" "\x05\x76\xf6\xcc\x9f\x45\x03\x20\xb7\xe9\x46\xeb\x82\xe9\xe1\xf8\xb3" "\x47\x7f\x38\x20\x90\xc7\x9a\x95\x24\xa6\x9f\x34\x16\xea\xdb\xa6\x73" "\xff\x24\xcb\x18\x46\x35\x86\x80\xd3\x70\xe6\xae\x98\x23\x02\x56\xeb" "\xad\x48\x26\xf9\x0e\xf8\x18\x9b\x95\xf3\xb6\x27\x59\x50\xc3\x3e\xc2" "\x78\x1b\xf4\x38\xbb\xcc\xe8\xee\x35\x0f\x3c\x14\x75\xb0\x26\xa6\xc1" "\x89\xdb\x51\x01\x98\x1b\x21\xf8\x2b\xa8\xd8\xf6\x2e\x85\x2c\xcc\x51" "\x09\xa2\x78\x0c\x70\xeb\x4a\x0b\x01\x4c\x0c\x06\xef\x46\xff\x50\x6c" "\x48\x1b\x80\x82\x15\x4d\xb6\x87\xb6\x44\xff\x12\x2e\x5f\x35\xaf\x58" "\x82\x21\x28\x34\xa5\xb6\x96\xaf\xda\x43\x22\x41\xf9\x66\xd5\x70\x6f" "\xa7\xc0\x0b\xe4\xa4\x91\x2b\x6a\xdb\x8e\x56\x29\xd0\xe1\x8b\xb2\xed" "\x4e\x2d\x7b\x6d\xbe\x79\x92\x0d\x21\xed\x04\x91\xf7\xa5\x01\x7a\xe5" "\xcc\xde\xe5\xb4\x98\xf6\x1b\xb9\xad\x58\x45\xa6\x26\x8a\xbe\xbf\x80" "\x33\x8c\x20\xc0\x95\x30\x67\x5a\x83\x66\xbf\xd4\xea\x74\x69\x57\xdd" "\x73\x37\xf1\xc1\x18\x47\x51\xb6\x49\xa3\x99\x89\x1a\xd2\xb6\x30\x6b" "\xb0\x62\xb9\xb2\xdc\x8a\x8b\x09\x30\x2e\xa3\x38\x6c\xcd\x78\xd9\xa3" "\xa0\x31\x4c\x3d\xf2\x64\xce\x81\x04\x83\x91\xae\x66\xec\x9e\xed\xa8" "\xc7\x0e\xfe\x95\x14\x62\x05\xd0\xb6\xbe\xd2\xc3\x62\xf2\x92\x06\x15" "\xd4\x1c\x7d\x12\xfc\x39\x91\x00\x0a\x08\x00\x61\xda\xd4\xe3\x45\x87" "\xff\x16\x84\xc6\x75\x6f\x55\xdf\xd2\x49\xd2\xd6\x2b\xef\x74\xb5\xe4" "\xa4\x0a\x63\xa2\xbc\x14\xa4\x73\xcf\x91\x3d\x5a\x4f\xd2\x89\xd1\x79" "\x2f\xc6\x93\xc4\xa5\xf8\x53\x26\xee\xbc\x52\x99\x4a\x34\xe1\x6a\xf8" "\x61\x43\x8f\x22\x63\x3f\xc5\xa4\xce\x0d\x30\xd3\x7a\xc0\xe2\x27\x7e" "\x07\x2f\x78\x37\x5d\x7b\x14\x43\xe1\xaf\x96\x47\xc2\x3d\xec\xfc\x41" "\x1a\x3d\x0d\xef\x78\x1c\xe6\x67\x9d\x92\x87\x2f\xbc\x27\xdb\xd4\xa7" "\xed\xc2\xac\xfe\x56\x51\x03\xd4\x72\xfb\xde\x7a\xc6\x26\x24\x8a\x53" "\x05\xcf\x6e\x1c\x5f\xc8\x1e\x9b\x71\xad\xb2\x52\x38\x39\xb9\x42\x5c" "\x72\xa6\x74\x09\x53\x9d\x61\x12\x40\xff\x5a\xd0\x4e\xa2\xb3\xd0\x63" "\xe1\x97\xf5\x66\x36\x06\xae\xb0\xb7\x6f\xa2\xe1\x12\x1e\x38\x15\x50" "\x6f\xe4\xa9\xac\x09\xd5\x55\xc1\xb8\xd8\xc9\x74\x9f\x5d\xd5\x09\x61" "\x30\xaa\xab\x80\xd9\xb7\x21\xa8\x31\x01\x38\x85\xe3\xa3\x76\xa5\x7f" "\x97\xdb\x4f\x18\x78\x37\x2c\x7a\xc2\x41\xb7\x42\x4b\x86\xd9\x7a\xe5" "\xfa\x3a\x09\x43\xf5\x5c\x64\xcd\xbb\x4a\xa3\x20\x9c\x4f\xbe\xe3\xd9" "\xed\x20\x1e\x2b\xfc\xce\xe0\x1d\x33\xbd\x99\xc0\x16\x89\xe1\xf2\x3b" "\x18\x5a\xcb\x82\xe7\x5c\xd2\xa1\x61\xc3\x16\x33\x4f\x48\x87\xc8\x22" "\x5f\x11\xec\x13\x54\x10\x5e\x31\x80\xd6\x7e\xbb\x3a\x98\xd1\x17\x8c" "\xca\x83\x32\xeb\x73\x55\x5f\x53\xed\x86\xc7\x28\x5f\xc6\xc8\x55\x70" "\xbe\x32\xe7\x4b\xae\xec\xe3\xd6\x10\xcf\xb5\x05\xe1\xca\x6c\x02\xfa" "\xbf\xfb\xd9\xb4\xc8\x02\x74\xdb\x8f\xaa\xb4\xa4\xd2\x9f\x8b\xfa\x6d" "\xb3\x8d\xaf\x4c\xa8\x44\x2a\xad\x66\xe4\x05\x81\xf4\x0a\x63\xe5\x0b" "\x3a\x33\xd9\xa3\xe3\x2f\x44\x40\xb7\x61\xd1\x49\xa8\xd7\x1c\x13\x8f" "\x74\xd5\xb0\xe1\x0d\x92\x66\x78\x84\x99\xa1\x9f\x03\xa1\x77\x26\x22" "\x6e\x27\xc8\x99\xc5\x38\xbf\x4c\x21\x9d\x7a\x03\x5b\xda\xb2\xc5\xb3" "\x47\xbc\xb1\x76\x55\x5f\xa4\x51\x59\x40\x50\xc6\x19\x6a\x22\x36\xe5" "\xb0\x98\x1e\xab\xab\x35\x19\xdd\x10\xed\x1f\xfb\x63\x34\x47\x6c\xbb" "\x06\x05\x93\x84\xf0\x2c\x16\x4f\x27\x8d\x49\x39\x1c\x60\x69\xb9\xad" "\xf2\x5c\x14\x87\x0e\x2f\xe1\xf2\x8a\xbd\xb3\x25\xd3\x10\x1f\xe4\x64" "\xf8\x29\xe9\x71\x06\x7d\xc9\x23\x1f\xc3\xbc\x9d\x0e\x2a\x6c\x8e\x13" "\xdb\x15\xf4\xb6\x9b\x3b\x02\x8a\x58\x7a\x09\x24\x53\x29\x6f\x7f\x79" "\x0a\x54\x7b\xa1\x91\xbc\xa2\xca\x92\x9d\x14\x77\x34\x4d\x7b\xa3\x0b" "\x82\x6a\x10\x15\x25\x80\xe5\xed\x74\x18\xf4\x81\xe4\xb1\x01\x39\xa4" "\xac\xea\x1a\x1c\x42\xf7\x48\xca\xff\xf8\xb0\x21\x5c\x6b\xe5\x0e\x0a" "\xf0\x99\x05\x36\x6f\x04\x03\xc5\x3f\x8c\x74\x6f\xf0\x6e\xc4\x5d\x69" "\xd3\xc4\x03\x9d\x09\x80\xaf\x45\xc8\xa2\xd6\xca\xda\xfe\x47\x7f\xfe" "\x34\x51\xfc\xe3\xbd\xc9\x64\x4f\xaf\x73\xef\x3c\xa3\xe8\x23\x52\x6f" "\xdc\x08\x6d\x82\x96\x7b\x1a\x56\x9c\xdb\x99\xea\x26\xfe\x6d\x06\xa2" "\x1f\xdf\xa7\xa8\x34\x20\x89\x93\x12\x40\x32\x4b\x78\x6f\x6b\xe1\xb9" "\x87\xc8\xfc\x9e\x9e\x60\x2c\xb0\xad\x66\x03\x9a\x01\x47\x31\x9a\x89" "\x61\x34\xcc\x97\xa7\xf5\x0b\x3a\x0c\x04\xc4\xf8\x0b\x8a\x53\xea\x22" "\x2f\x5c\x00\x93\x25\xec\xa6\x66\x8e\x45\x3d\x92\xe1\x57\x77\x12\xaf" "\x02\x97\xff\xbc\x3e\x33\x65\xd5\x04\xeb\xc1\xc7\xe8\x25\xe0\x45\xc3" "\x0c\x0a\xd9\x06\x7f\xce\xa6\xdd\x75\x4c\x17\x9c\x3f\xeb\xce\x85\x18" "\x76\x11\xf7\x86\x34\xc0\x81\x19\x2b\x43\x00\x10\x98\x7a\x85\x28\x37" "\x01\x5a\x3c\x2a\x70\x60\x4e\x18\xc5\xd3\x94\x20\x7f\xa6\x1f\xd3\xc5" "\x1a\x8a\xc5\xab\x26\x3d\x1c\x15\xa9\x91\x8f\x59\x93\x38\xd2\x1b\x89" "\x4e\x60\x16\x33\x7a\x5a\x31\x42\x28\x67\xa7\x75\xa7\xde\xf8\xfb\x7c" "\xc3\xa4\x13\x42\x17\x5e\x05\xc8\x91\xeb\xbd\x73\x18\xbf\x01\x1a\xb2" "\xdc\xd8\x65\xdc\x5e\xfa\x3a\x94\x51\xd9\x73\x95\x1c\x96\x75\x28\x03" "\x66\x55\x67\xc0\x80\x13\x25\x9f\x14\xfd\x70\x4d\x5d\x10\x8c\xef\x5a" "\x38\xb4\xe2\x37\x5a\xa2\x41\xc5\xcf\xa9\x95\x11\xe3\x34\xca\xc9\x66" "\x5a\x06\xf2\x5d\xa7\xd3\xfd\xb4\x97\x36\x3b\x11\x9b\xb4\xd5\x36\xa6" "\x80\x3b\x3a\xed\x59\x14\x36\x55\xef\x6d\xf2\x25\xb5\xa9\x30\x59\x79" "\xf7\x7e\x32\x94\x2f\xfb\x48\xe8\x59\xda\x96\xa3\x09\xab\x57\xb6\x8f" "\xa5\x6a\x9e\x0d\x6e\x53\x65\x0e\x7b\x19\x68\xfe\x5a\xfc\x21\xe5\x63" "\x8c\xd5\x0f\x5c\x41\x5c\x9a\xdd\xd9\x98\xfe\x32\xac\x98\x3a\x9f\x92" "\x66\x59\x09\x67\x78\x2b\x6d\x9b\x70\xf2\x2a\x48\xcc\x14\x30\x1a\xf5" "\xde\x46\xd7\xb7\x1d\x0f\x7c\x0e\xad\x21\xff\x50\x3c\xbe\xd5\xc2\x53" "\x56\x72\x83\x5e\xa0\x21\x6e\xaa\x7f\xed\x72\x39\x0b\x66\xb4\x68\x4b" "\x51\x36\x5d\x19\x23\xae\xc4\xdc\xf4\xdd\x08\xb3\x57\x55\x2c\xfb\x7e" "\x96\xa5\xab\x95\x6a\xc1\x27\x68\x82\xe8\x0a\x79\xd0\x18\xc5\xca\x7f" "\xfb\x33\x67\xd5\x98\x46\x38\x7f\x4a\xf1\xfd\x4b\x60\x98\xcb\x56\x0b" "\xb5\x65\xaf\x3e\xc0\xc3\x93\x4d\xa2\x91\x20\x54\x68\x04\xf3\x80\x0a" "\xab\xa4\x96\x9e\x00\xcb\x83\xd9\xd9\xb0\xcf\x21\x6c\x42\xa8\x72\x20" "\x30\xa6\xfc\x85\xa0\x1b\x97\x48\xbe\xbe\x68\x86\x71\x31\x8a\x2c\xc3" "\x3f\x69\xe0\xbf\x3a\x8a\x37\x79\xc8\x84\x7d\xe9\x58\xb2\x8b\x2e\x80" "\x17\xda\x7f\x74\xd5\x6f\x1a\x75\x13\x4a\x4d\xa0\x94\x4e\x45\xdf\xef" "\xe6\x3f\xf3\x67\x75\x9b\x55\xe1\x65\x98\x70\xe0\xbe\x86\xce\xf2\x78" "\x9e\xc9\x06\x3a\xe6\x09\x36\x93\xc1\xd4\x7c\xfc\x16\x4e\xae\x67\xc9" "\x7e\xfa\x44\x71\x20\xa3\x6b\x39\x56\x1d\x38\x00\x77\xce\xaf\xf4\xbf" "\x0f\x55\xb0\x66\xaf\x44\x1e\x40\x0c\xc3\x99\x66\x33\xab\xf9\x05\xa3" "\x2c\xf0\x25\xbe\xcf\x31\x98\x3d\xc6\xfc\xeb\x6e\x0f\xb5\x06\xbd\x35" "\x0d\x81\xaf\xa6\x42\x11\x15\x93\x9a\xde\xf8\xcd\x68\xab\xbb\xd9\x4f" "\x15\x67\xd9\xe9\xf7\x50\x5a\xf5\x7e\x18\x02\xb8\xd7\x04\xbb\x74\x60" "\xb3\x82\x23\x30\xc4\xa4\xbb\x6f\xf2\xb1\x87\xfb\x9a\x3f\x32\x4b\x0f" "\x41\x5c\x70\x6a\x1d\xe8\xa7\xcf\x67\x47\xc7\x2b\xe3\xb3\x56\xc0\x20" "\x6a\x3c\x0c\x39\xda\xa8\x53\x09\xbf\xf9\xfa\xba\x7b\x68\x17\x81\x08" "\xb2\x61\x08\x6c\xc1\x5a\x0e\x21\xa5\x2a\x37\xc1\x57\x6a\x72\xd2\xd5" "\xda\x5c\x43\x24\x8a\xd7\x60\xd2\x39\x71\x17\x39\xcb\x79\xfc\x79\xb4" "\xca\x2d\xbe\xc2\xe1\x00\xdb\x1c\x53\x5e\xd9\x06\x23\xc6\x7e\xd2\xe3" "\x81\x7e\xbe\xc2\x59\x34\x3b\x17\xef\xdd\x91\x2e\xa0\xfb\xf7\x36\x53" "\x01\x5b\x7f\x8a\x51\xca\xe3\xca\xb1\x9b\xa0\x06\x38\xb8\xc8\xbf\xa8" "\xdb\x48\x1c\xa7\xdc\x7c\xe5\xc2\x54\x0c\x46\xc9\x63\x38\x61\x88\xf7" "\x4d\xec\x08\x85\x52\x33\x0e\x6e\xa0\x67\xb2\x22\xbd\x97\xec\xab\x50" "\x73\xd9\x5d\x58\x14\x59\x9f\x52\x2a\x36\xfc\x80\x63\x6b\xb6\x6e\xe8" "\xdc\xa3\x99\x58\x6f\x90\xf1\xc8\x49\xe3\x0d\x92\x38\x2b\xb0\xe6\x4f" "\x62\x51\x1a\x7f\x10\x44\x56\x01\x75\xd6\x8d\xff\xc0\x3a\x9e\x56\xac" "\x76\x29\xa4\xbc\xf5\x0a\x43\x34\xf2\x9b\x33\x91\xef\x4b\xf0\xf3\x17" "\x4a\x44\xd6\x9e\x14\x34\x37\xcb\x3d\xcb\x38\x71\xc4\xe7\xde\x50\x08" "\x4b\x5e\x50\x33\xc4\x8d\xf3\x64\xa1\xd5\xcf\x92\x5d\x42\xa3\xc8\xe2" "\xb4\x19\x90\x9e\x4a\x2c\xa2\x15\x6c\x13\x97\xeb\x87\x70\x4e\x8f\x8d" "\x6c\xdb\x3a\x4a\x03\x1c\x1b\x54\x68\xa1\xe7\x5a\x92\x3c\xbd\xbd\x38" "\x4c\xd8\xd8\x7c\x2c\x05\xf1\x1f\x1d\xf0\x14\xef\x98\xc1\x3f\xcf\x9f" "\x18\x2f\x6f\xb6\x8d\xc0\xaa\x4a\xdf\x7b\xec\x8a\x17\xca\xed\xd1\x72" "\xf6\x48\x06\xc3\x11\xfc\x10\x6b\x39\xed\xd9\x62\x8a\x01\xd7\x15\x9d" "\x63\x8e\x09\xb3\x9f\xea\xb4\x32\x71\x80\x59\x58\x9d\xc9\x71\x14\x3d" "\xa4\xa8\xe6\x40\xaa\x63\xae\x0c\x2f\xb4\xa7\x11\x29\xd3\x62\xcd\xcf" "\x99\x3a\xdb\xc9\x7b\x4f\x15\x43\x63\x7c\xf1\xac\xbc\x9e\x67\x06\x7f" "\x6c\x6f\x95\xbe\x39\xfd\xd1\x4d\xc6\x47\x8c\x50\x75\x07\xce\xff\x88" "\xc2\xd1\xc5\xe1\x35\x22\x54\x7a\xb1\x49\xda\xd2\x52\x63\x93\x71\x4c" "\x6c\x0a\x22\x1c\x16\x7d\xdf\x10\x84\xb5\x63\xc0\xbf\xcc\x4c\x75\xa9" "\x72\x13\x1c\x62\xdd\xec\x7a\x49\x7b\xd5\x11\x8e\xaa\x12\xab\x25\xbb" "\xbf\x7c\xc6\x2e\xca\x5d\xe5\xea\x50\xba\xb6\x7c\xe6\xff\x2e\x05\xcc" "\x47\xcc\x0b\x0a\x54\x65\xeb\x01\xbb\xc0\x8d\xac\x30\xb8\x52\x2b\xd9" "\x21\x80\xd8\x98\x73\x90\x31\x4e\x19\xeb\x32\x01\xf0\xbe\x2b\x4f\x71" "\xab\xb6\x97\xa7\x51\xfd\x8d\x6a\x32\x51\xca\x8e\xa1\xb2\xf2\x0a\x78" "\x27\xd2\x59\x9d\x62\xe3\x92\xd6\xc0\x65\x18\x3a\x17\x78\x95\x0d\x5e" "\xbe\x04\x18\x00\x47\xee\x8a\x2a\x09\x6e\x5f\x1d\x68\x13\xec\x63\xff" "\x4a\x62\x6c\x72\x5b\x24\xd2\x59\xcb\xd9\xca\x63\x05\x00\x9b\x29\xc6" "\xef\x72\x25\xee\xcf\x90\x78\x82\x4f\x9a\xef\x4d\x3e\x9a\xee\x1e\x96" "\x16\xb2\xb7\xf8\x74\x99\xf8\xab\xab\x6c\x38\xe9\xa3\xe7\x71\x41\x32" "\x85\x0b\x5e\x71\xfa\x67\x16\x97\xe6\xc8\x40\x7a\xc3\xda\xd5\xab\xee" "\xe5\xf7\xb2\xa6\x3a\xa5\x1d\x29\x74\x47\x36\xb0\xc3\x8a\xdc\xcf\x8e" "\x29\xa8\x5b\x81\xf3\xb3\x10\x6d\xae\xd6\x4f\xc7\x86\x18\xe1\x8c\x90" "\x56\xcc\x41\xce\x2f\x50\x37\x9c\xc6\xc2\xc1\x41\x1b\xa2\xc6\x90\xe1" "\x89\x9d\xee\x19\x3f\x0f\x28\x77\x41\x2f\x1c\xbd\x54\xd1\x22\x55\xca" "\x81\xa7\x22\x11\xf9\xa8\xab\x7f\x0b\x7b\xeb\xb6\xc1\x1b\x4b\xd6\xc7" "\x74\x55\xde\xcd\xfd\x7d\xf2\xb2\x01\x43\x95\xba\x69\xf2\x2e\x52\x01" "\x38\xa4\x3e\x1b\x3a\x11\x26\x48\x22\xb1\x43\xad\xca\xd3\x07\xb3\x58" "\x00\x56\x3b\xab\x72\x06\x87\xa8\x98\xa7\x6c\xde\x1f\x0a\x15\xaa\x3f" "\x32\xc0\xd3\x02\xce\x6f\x10\x94\xba\xcf\x5a\x1a\xdd\x93\x58\x84\xbe" "\x02\x9c\x7f\xe1\x8a\x5e\x90\xc6\x96\xe3\x37\x1a\xf0\xf3\xcd\x72\x1a" "\xbd\x7d\xd4\xce\x74\xef\xe3\x53\x10\x5e\xbc\xc4\xb1\x41\x1d\x52\x02" "\x69\x01\x38\x0a\x9c\x7a\x80\x7a\x76\xfa\x61\x76\x67\xad\xea\x8b\x77" "\x34\x82\x2d\xa9\x3d\x93\x96\x96\x41\xa9\x2a\xd2\xaf\x63\x50\xce\xee" "\x54\xe3\xd7\xc7\xc3\x9e\x22\xd6\xc5\xf3\x63\xd2\x01\x57\x2b\x8d\x68" "\xc2\xb9\xc7\x23\x0b\x0b\x85\x80\x1c\xfa\xfb\xc5\x55\x7f\x21\xbc\x44" "\x4e\xa0\x5f\xc6\x12\xe2\xc2\xa8\xd4\xa3\x85\x78\xc6\x9b\xb2\x52\xd8" "\xf4\xd6\x17\xd0\x97\x4f\x95\xb6\xeb\xb4\x16\xd5\xc8\xf3\xfa\x92\x5d" "\x4e\xd4\xf2\x3b\xfc\xe0\x3e\x28\x38\x9c\xa8\xc1\xbe\xce\x1f\xa4\x9e" "\x8d\x66\x38\x7b\xbb\x09\xb3\xc2\x9d\x9e\xd7\x5e\xa5\xa9\xac\x79\x30" "\xcb\x3e\xd0\x5f\x99\x98\x67\xc6\x40\xb3\x43\x59\x62\xfd\xb7\x63\x00" "\x2e\x2f\xb4\x51\xc5\xa1\xb9\xd4\x53\x6e\x49\xba\x50\xfc\xf6\x14\x51" "\x16\x8a\x99\x42\x49\xef\x29\xaf\x51\x69\x4a\x14\x26\xd9\x87\xed\x8c" "\xfe\x09\xf1\x04\x62\xc7\x62\x9c\x4f\xf1\xb1\xcc\x70\x9b\x99\xe9\xe8" "\x7a\x54\xd1\xec\xf5\x4c\xd9\xda\x0c\x2c\x19\xb8\x4b\x2a\x2c\x32\xc0" "\xbd\x12\xd1\x58\xb7\x32\x30\xcf\x61\x06\x45\x04\x8c\xf1\xaf\xbb\x62" "\xaa\x7c\xe6\xfa\xb7\x9b\xec\x3a\xd8\x41\x08\xf3\xd9\x6c\xb9\xfb\x3d" "\x78\xa2\x67\x24\x89\x2a\x6b\xca\x53\x3e\x64\x88\x0c\x7d\x4c\x28\xa6" "\x68\x55\x02\xf4\xcb\x2a\x27\xb1\x32\xc8\x25\x3b\x97\xe8\x85\x83\xfe" "\x07\x66\xd0\x47\x95\x70\x94\x86\x55\x6d\xf9\x9b\x7e\x65\xfb\xf7\x1f" "\xeb\xe2\x4e\x0a\x18\x8e\x2d\xc4\x89\xb8\xfd\xdb\xf9\xd4\xb1\xc9\xef" "\x4b\x55\x8f\x88\x88\x24\x46\x9d\xf9\xb2\x08\x5a\x84\x59\x98\x22\x03" "\x32\xd9\xcb\x69\x34\x72\xff\x2a\xbc\xc1\x07\x84\xc2\x28\x08\x25\xad" "\xfc\xc6\x30\xe3\xa9\x61\xb3\x9a\xb7\x86\xde\xdd\xc5\x3b\x18\xe8\x62" "\xed\xc7\x57\x42\xd6\xeb\x2d\x7c\xc2\x27\xba\x3e\xd7\x70\x85\x17\x18" "\x38\x86\x12\xe4\xe7\xf4\xf2\x57\xa9\x0f\xdf\x09\xe3\xb0\x08\x1d\x74" "\x98\xe2\xd5\xb6\x28\xd9\x13\x2a\xa0\x16\x5f\x32\x3f\x59\xaf\x5e\x9e" "\xa5\x4c\x58\x29\x99\xfb\x52\x7d\x5f\x2f\x3d\xd7\xe4\xf8\x58\x77\x08" "\x05\x26\xf8\x48\x18\x99\xb6\xaf\xc7\x32\xf5\xda\x6a\xf3\x1b\x56\x1d" "\xdc\x36\xa6\xb8\xc7\x23\x08\x7d\x3f\x16\x82\x92\x55\x0d\x89\xb2\x28" "\xf7\xa3\xcc\x13\x1c\x11\x0a\x2d\xab\x2f\x81\xe3\x39\xf2\x4d\x3d\x2b" "\x69\x68\x92\xdc\xd4\xa3\xe8\xf2\xea\xad\xdc\x0d\x78\xe2\xd0\x7c\xb9" "\xdf\x9d\x2f\xe7\x3e\x4c\x55\x56\x2c\x07\x94\x09\x2c\x7d\xab\xd4\x36" "\x4f\x9f\xea\x89\xd6\xcd\xd8\x36\x9d\x5b\xf1\xbc\x88\x63\xb8\xf8\x9a" "\xac\xf0\xfd\x9b\x9b\x38\x09\x47\xbb\x48\x72\x65\x6e\x58\xbc\x87\x52" "\x6e\x18\xfa\x8b\x17\xef\x8a\x72\x19\xad\xf1\xb7\x9d\x1b\xe5\xdd\x82" "\x7e\x7b\xa8\xe4\xed\x50\xa8\x1e\xb7\x56\x2b\x17\x98\x76\xa8\x80\x3d" "\xde\x2e\xa9\x9f\xe7\x44\xe8\xf7\xdf\x17\x04\x0a\xc3\x85\x92\xa3\xbe" "\x7e\xb3\x53\x41\x64\x96\xe8\x67\xd8\xa7\x4c\x7e\xb9\x45\x56\xb1\x62" "\x41\x93\x5d\x71\x8d\xd4\x34\x62\xfe\x08\x55\xcc\x31\xa8\x12\xe0\xac" "\x01\x10\x9d\x1d\x35\x39\xbd\x2f\xd4\xee\xb4\x22\x00\x91\x38\xa9\x23" "\x24\xbd\x07\x2e\xde\xe2\xba\x47\xd6\xca\xcc\x24\x58\x84\x10\xce\x30" "\x56\x5a\x8a\xaa\x5a\xad\x52\xd9\xc5\x53\x68\x37\x27\x15\x71\x7f\xf5" "\xed\x3a\x02\x43\xdd\xaf\xd1\x1a\x70\x59\xc2\x9a\x26\xb9\xea\x93\x74" "\xe8\x43\x4f\x31\xe4\xc1\x5a\x74\x7e\xe6\xd6\x93\x68\xd1\x2b\x96\x12" "\x26\x90\xf8\x43\x56\x9e\x82\xad\x27\xeb\x8f\xb2\x5e\x94\xdd\xe9\x4c" "\xc1\x5e\x69\x0d\xc6\x5f\x6a\x6c\x2a\x63\x93\x82\x11\x68\xa7\x9e\x03" "\xcd\x22\x3c\xe5\x4a\x1d\x5e\x38\xee\xe1\xc1\x2e\x23\x02\x7b\x12\xc6" "\xa8\x09\x4c\x80\x50\x88\x61\x7c\x2f\xb4\xf5\x20\x08\x36\x6f\xaf\x37" "\xfd\xb1\x3b\x3a\x7a\x87\x99\x49\xd1\x36\x44\xda\x36\xdd\x35\xa4\xed" "\xe7\x85\xca\x0a\xc7\xb4\xf1\x54\x72\xe7\x7a\x33\x22\x81\x29\x14\x3f" "\x84\x9e\xe7\x5c\x91\x5d\xf3\x17\x64\xc9\x69\x54\x62\x1a\x01\xe0\x94" "\x1d\x6b\xb5\x81\x25\xf5\x44\x81\x8b\x71\x52\x69\x8f\x3a\xdd\xcd\x0a" "\x68\x4a\xf8\xfc\xdd\x4b\xcd\xf5\x75\x2b\x3f\xaa\x73\x19\x88\x86\x6e" "\xe8\xa6\x64\x85\x09\x89\xd2\x80\x50\x5d\x2a\x4b\x86\x1f\x15\x9d\x47" "\xd2\xd6\x1a\xb3\xde\x86\x6f\xb2\xc8\xf9\x00\x75\xb7\x13\xf6\x1c\xf8" "\x3a\x2e\xd4\x26\xd5\x32\x14\xb7\x03\x85\xb7\xa4\x6e\x56\x20\xc0\x32" "\x48\x6a\x5a\x00\xe0\xe7\x3d\x3e\xa1\x6e\xec\xcf\x57\x31\x50\x79\x03" "\xa2\x56\x85\x46\x6b\x61\x31\x15\x02\xce\x78\x16\x34\xee\x46\x54\x29" "\x57\xa0\xd5\xba\xca\xbb\x8d\x96\x56\x89\x42\x25\x88\xee\x10\x2d\x6a" "\x60\x16\xbf\x11\x58\x9f\xff\x32\xe5\x03\xfe\xef\xcc\xef\xe4\x10\x7d" "\x06\x19\xe7\xa1\x53\x36\xa8\x65\x5e\x2f\x09\x03\x4b\x40\x69\x94\x11" "\x26\xd4\x89\x09\x23\x25\x92\xaa\xc6\xd9\xc2\x31\x28\x5d\xc1\xd0\x38" "\xff\x1f\xa0\x9c\x15\x88\xf5\x43\x30\x46\x59\xca\x33\x4a\xfb\xc4\x2b" "\x5f\x5f\xb8\x13\xb3\x46\x63\xcc\x6f\x4b\x0a\x12\xfc\x3e\xdc\x28\x76" "\x5b\x06\x2e\x7a\x50\xfd\x19\xef\x57\x5b\xe9\x6c\xd1\xd9\xaa\x48\xc1" "\xfe\xf1\xb2\x76\x39\x49\x98\x2a\x47\xbf\x25\xa6\x9c\x8b\x13\x06\xe8" "\xe3\x6c\x91\xd2\x09\x6e\x6a\x6c\xf9\x34\x45\x22\x33\xff\x49\xe9\x1e" "\xe1\x73\xc1\xe2\x88\xb9\xff\x70\xff\x36\x46\x89\xb8\x2e\x24\x67\xa3" "\xd7\x41\x80\x96\x57\xce\x08\x56\x58\x2d\x24\xda\x56\x63\x16\x24\x22" "\xa6\xf1\xed\x1f\xce\x7c\xef\x40\xd9\x0c\xe5\x7c\xb9\x9e\x19\xa0\xb4" "\x36\x5d\x48\x33\x61\xd0\x3d\x0c\xce\xad\xd6\x82\xf3\x33\xbc\xdb\x0a" "\x49\xe2\x4d\x8c\x7d\x00\x4a\xad\x2d\xac\x06\xf4\x83\x9c\xff\xc0\xa7" "\x77\x30\x62\x39\x17\xe5\xf1\x01\xc3\x34\x11\xab\x4e\x0a\x84\x91\xde" "\x9a\x8b\xbd\x5d\xed\xb8\xdf\xeb\x5a\x58\x80\xda\x57\xc7\x4b\xb8\xe1" "\xfd\x8b\x02\xd3\xc2\x20\x87\xbe\x3f\x68\x6a\xee\x26\x98\x8b\x2d\x62" "\xa4\x1d\x45\x93\xff\x0d\xc1\x00\xc3\x1d\xad\x22\x14\x89\xf6\x12\xef" "\x60\xc1\x60\xbd\x6c\x1f\x5a\x00\xea\x6e\xfd\x3a\x5a\xa5\xca\x14\xef" "\xbf\x78\xae\x4e\x5d\x8c\x5d\xb9\xc0\x37\x58\xb8\x1e\x63\x60\x05\xad" "\xe8\xd0\x3a\x11\xf5\xd8\x23\x1c\xfc\x1b\xda\xcd\xb2\x76\x99\x2c\xa8" "\xec\xba\xd3\x37\xfa\x89\xda\xcc\x9e\x9b\xe1\x1d\x39\x8d\x37\x20\x7e" "\x15\xdd\xb4\x55\x66\xe0\xaf\x78\x83\x35\x45\x35\x2d\x30\x43\xb7\x0e" "\x20\x69\x5d\xdd\xda\xcc\xcc\xaa\x93\xee\x5e\x28\x74\xbf\xc7\xf9\x51" "\x05\x41\xa5\x7f\xb3\xcb\x9c\x8d\x6e\x75\x46\x0c\xca\x3c\x4c\xca\x39" "\xa6\x42\xef\xf1\x96\x7d\xda\x07\xa6\x6f\xe6\x7d\x87\x69\x6a\x5f\xe2" "\x2a\x71\x8a\x52\xcd\x9b\xa8\x3e\x34\x8e\xd2\x11\xc1\xdc\x2e\x21\xeb" "\xd7\x97\x45\x5f\x06\x48\xaf\x12\xc1\x03\x21\x24\x00\x58\x85\x76\x32" "\x11\x2a\x75\xad\xfd\xca\x24\x9f\x26\xcf\x8d\x6b\xa0\x5e\xe8\x3d\x00" "\xff\x8d\x64\xd8\xfe\xd0\x69\xda\xe7\x0b\x79\x10\x5c\xcd\x95\xfc\x9d" "\xf3\x44\x26\xd7\x65\x57\x8f\x65\x1a\x4c\xba\x80\x94\xf4\x6e\x0a\x9b" "\x67\x6c\x0c\x0e\xbb\x18\x03\x66\x0a\x70\xf5\xc7\xad\x2d\xe1\xff\x96" "\x67\x6c\x3e\xca\xcd\xc2\x95\x3f\xd2\x35\x85\x62\x28\x55\x6d\xb2\x03" "\x95\xb8\xd5\x48\x19\xb7\xb1\x2f\x56\xe4\xdd\xdf\x6a\x7f\xe4\xf7\xf3" "\xd6\x9d\xff\x02\x2c\x59\xef\xb2\x31\x3a\xe8\x01\xdc\xb0\x2b\x11\x7f" "\x50\xf1\x8e\xb1\x1d\xd5\xa2\x91\xa7\x06\x8c\x82\x0f\xbe\x38\x1b\xd0" "\x69\x75\x66\x90\x9a\x38\xfd\xab\x0a\x0c\x48\x44\x2d\xc9\x35\xab\x84" "\x47\xeb\xec\xb9\x3a\xf8\x79\xa6\xbb\x82\xab\x5f\x24\x52\x74\xd8\x73" "\xb5\xbe\x43\x12\x85\x6f\xe4\xfa\xb8\xed\xc9\x57\x5c\x02\xba\x4c\xdb" "\x34\xb3\x13\x23\xb6\x9c\xfe\xf4\x07\x55\xbf\x96\x27\x94\x60\x64\x0e" "\xd9\xfb\x84\xd5\xc6\x0d\x95\xcf\xd7\x6a\x39\x72\x6c\x29\xf5\x60\x7d" "\x80\x09\x0e\x5e\x3d\xa1\x8f\xd7\x46\x82\x97\x5d\xd9\x8d\x98\xe4\xaf" "\xdf\x44\x60\xe1\xae\xb7\x08\x7a\x18\xde\xd6\x93\x10\xb2\x8f\xa4\x5b" "\x35\x6f\xc2\x8d\x1f\x2b\xef\x4c\x9d\xd5\x09\x09\x07\x6d\xe9\x58\x7f" "\xa0\x7b\x96\x6e\xe1\x43\xec\x58\x9f\x70\xb8\xac\x4d\x13\x20\xca\xc5" "\xba\xfe\xfe\x64\x0e\x44\x59\x22\x09\x0c\x72\x1c\xe7\x9e\x4e\x2c\x54" "\x6c\xfb\x9b\x7f\x05\x89\x32\xe6\xc8\x31\x70\xdd\x27\x85\xe2\x8e\xd8" "\x17\x57\xad\xe6\x1a\xa0\x94\xbd\x04\x24\x11\xaa\xfe\x0b\x75\x15\x60" "\x67\xa5\x79\x0c\x78\xa4\x45\x89\x72\x8f\x11\x90\xac\x0b\xa2\xf9\x30" "\x04\xe0\x66\x02\xf5\x1f\xab\x34\xcc\x56\xa4\x85\x56\x9b\xe1\x1e\x0f" "\xd8\xc8\x9e\xc3\x36\x3e\x05\x3d\xbd\xb6\xcb\xc6\x9b\x68\x6e\x89\xff" "\x37\x30\xdc\xe9\x09\x9d\xaf\xf9\x58\xf3\xbe\x6e\x7f\x9a\xc0\x0b\xdd" "\xf0\xf1\x33\xa6\xf9\x04\x26\x24\x43\x96\x3a\xab\xe8\x4b\x0e\xc9\xab" "\x92\x09\xeb\xb0\xd6\xe8\x1b\x8d\x30\xb2\x95\x9b\xbf\xe5\xb3\x32\x45" "\x93\x10\xbe\x2d\x81\x83\xa9\x3e\xa0\x83\x01\xb8\x16\xd5\xb0\x09\xa9" "\x67\x91\x6d\xd4\x5b\x0f\x54\x1c\x57\x68\x5a\x6c\x7e\xf8\xcf\x71\x5a" "\xe7\xfd\x17\x80\xf0\xa0\xda\x48\x46\x71\x96\xe2\x5e\x26\xfd\x2d\x5a" "\x07\x5a\xd5\xac\xfa\x1e\xbe\xc9\x64\x7d\xa2\x16\x72\xb6\x42\xee\x4a" "\x90\x8f\xbc\xe4\x16\xf4\xed\x36\xab\x5b\x96\xe5\xb4\x7a\x0f\x6c\x7f" "\x28\x01\x19\x56\x7b\x7d\x54\x64\x0c\x65\xce\x5a\x0f\x49\x12\x69\x0c" "\x4a\x3d\x08\x05\xe4\x28\x4f\xb6\x95\xeb\x3a\xf2\x52\x8f\x03\x12\x61" "\x43\x95\x06\xa4\xd3\xf4\xc2\xe1\x8b\x73\x6c\x55\x47\x58\x28\xa0\xfa" "\xf0\x15\x3a\xcf\x0d\xd8\x9b\xf3\xc2\xf6\x52\x5c\xb4\xbf\xcb\x41\x94" "\x21\xc7\x69\x6e\xe9\x3b\xc5\x95\x15\x8a\x9a\x43\xbb\x28\x80\x22\x12" "\x2a\x8c\x45\xa0\xdb\x06\x0f\xe5\xe8\x5b\xcc\x12\x8f\x39\x6f\x7a\xf7" "\x00\x6e\xba\x4e\x0d\x6e\x2f\x08\x02\x62\x53\x42\x79\x9b\xc1\xb9\x83" "\x66\x68\x2d\xb9\x0f\xf1\xbe\x99\x32\x2b\xc0\x67\x2e\x07\x75\x7c\x44" "\x17\x3b\x96\xe6\x59\xff\x64\x5d\x26\x3a\xf2\x55\xd6\xec\xd8\x8b\xd9" "\xa0\x86\x30\x06\xdb\x7f\x67\x4e\x79\xb0\x49\x3d\x41\xa1\x20\x57\xe3" "\x62\x43\x39\x42\x94\xb4\xc7\x85\x0d\x14\xa9\x88\x71\x5d\xe4\xb5\x5e" "\x9f\x83\xc2\xf0\x67\x6a\x84\x86\xef\xcc\x94\x81\x09\x07\x63\x61\x26" "\x7f\x09\x23\x15\xda\xe7\x91\x64\xda\x8f\x83\x2a\xd6\xf3\x5f\x60\x0b" "\x92\xe4\xa8\x22\x8d\x39\xe5\x07\x11\x7c\x1c\x1b\x2a\x4a\x12\xb6\x67" "\x53\x80\x00\x91\x2e\xa6\x7d\xe2\x1b\xd8\x56\x16\xcb\x30\xf9\x55\x73" "\xba\x74\x8a\x75\xd2\xe0\x4b\x49\x38\x65\xa8\x71\x1a\x68\x8e\x33\x22" "\x1b\x26\xf6\x21\xab\x3a\x13\x7c\xf8\x6c\xc9\xdd\x34\x0b\xce\xe7\x2f" "\x19\xe0\x0d\xe0\x6f\x1e\x9a\xbb\xe0\x8b\x4c\xb8\x72\x5c\x9e\x62\x4f" "\x02\xd3\x6c\x4c\x27\x6a\x52\x9b\x6e\x23\x58\x1c\x34\x8b\xb9\x0a\x4f" "\xb1\xf8\x90\x53\xae\xe3\x6c\xac\xa5\x52\x9b\xad\x91\x24\x82\x58\x60" "\xc0\x11\x14\x07\x44\xf2\x45\xcd\x02\xff\xe2\x19\xe4\x36\xbf\xef\x04" "\x55\x17\xe4\xe4\x10\x94\xb2\x5c\xf9\x08\x26\x92\xcd\x8e\x37\xd3\x89" "\x3c\x5a\x90\xc3\x5b\x80\x8a\x17\xa6\x50\x8f\xa7\xae\x74\x37\x40\xbe" "\x0d\x98\x4e\xf5\xea\x80\xce\xe5\x1e\x14\xb9\x99\x7f\x86\xb4\x5b\x97" "\xe5\xac\xf8\x9a\x0a\x6a\xa9\x62\x68\x9c\x4f\x53\xbc\x7b\x65\xe5\x03" "\x7d\xe6\x0f\xa3\x95\xed\x10\x13\x59\x1c\xaa\x79\x41\x21\x08\x22\x4c" "\x02\x0d\x77\x06\x99\x39\x39\x1e\x20\xee\x32\xb8\x61\x39\xfc\xa7\xeb" "\x9c\xa5\xc0\x7f\xa7\x33\x31\x1f\xef\x5d\x55\x94\xb8\x3a\xe3\x4c\x6b" "\xc3\x2f\x03\x7b\x09\x99\x55\x11\xff\x9b\x9b\x61\x1b\xc7\x27\x05\x5a" "\x10\xb8\x08\xeb\xb8\xc8\xe5\xce\x53\x20\x46\xc7\xad\x33\x36\xc3\x8d" "\x50\x6e\x0e\x30\x43\xc4\x41\x3d\xc8\xce\x0a\x9c\xaa\xdb\xef\x27\xd6" "\xf6\x63\xb2\x2b\xf8\xd3\x99\x62\x1e\xe8\x6e\x52\xd9\xab\xd5\x62\x8e" "\x32\x70\x42\x4d\x8a\x06\xa7\x91\x74\xc7\xde\x23\xc4\x31\x22\x4f\xd8" "\xd0\xf4\x28\x53\x51\x06\x00\xf9\xe2\xde\xb8\xa7\xbf\xcd\x32\x4a\x5c" "\x6e\xc1\x9c\xd0\xc9\xca\x81\xc5\x52\xb1\x11\xa2\xac\xc4\x47\x9e\x20" "\x43\x9e\x2e\x3c\xaf\x44\xc9\x20\x26\xb5\xbe\x1a\xd6\x93\x3e\xd8\xd4" "\xde\x15\x75\x21\x6c\x13\x4d\x55\x17\x15\x68\xee\x64\x21\x3f\xc4\xd3" "\x2c\xa5\xcd\x7a\xd0\x4b\x87\x05\xec\xfd\x1b\x88\xd5\x62\x94\xdc\xa6" "\x7e\xfe\x3b\x1b\x37\xc7\xd5\xd1\x70\xce\xf1\x89\x97\xc4\xaf\x07\x4e" "\x97\xa9\x8c\x11\xec\x3c\xdc\x83\xa4\xea\x56\x4e\xbb\x47\xf0\x23\x44" "\xd3\xab\x41\x0e\x25\xa4\xad\x65\x8b\xe9\xbf\x62\x7d\x49\xc1\x06\xc1" "\x09\x8d\xcc\xf7\xff\x62\xff\x9f\x4d\xc9\x97\xa2\x79\xaf\xdc\x56\x30" "\xba\x32\x16\x7a\x68\xed\x7b\xb3\xba\xe2\xa8\xb6\x1f\xca\x67\xb5\xb7" "\xdc\x5b\x3e\xf3\xab\x67\x9b\x60\x27\x64\xda\x9a\xab\xf3\xd0\xca\xa5" "\x6b\x27\x8c\x2a\xb6\xfb\xee\x2c\xfd\xd7\x27\x74\x02\xa1\xf8\x2d\xe1" "\xd9\x78\x07\x82\x9c\x01\x05\x27\x70\x73\x77\x29\x29\xf1\x6d\x79\x58" "\x41\x18\xf3\x1b\x45\xec\x4d\xb2\x9a\xad\x83\x69\x3b\x2d\x9d\xe0\x8f" "\x41\x7b\xea\xa2\xf7\x8d\x55\xa3\x6a\x82\x4a\x94\xd1\xe3\xcf\xeb\x3d" "\x75\xc3\xd4\x1d\xdd\x0e\x31\x7e\x85\xd3\x27\xe9\xb5\xa9\xda\x44\xdc" "\x12\xb6\xfc\x3a\xcf\x6d\x22\x2a\x44\xf5\x95\x20\xfa\x3f\xcd\xc3\x79" "\x03\xec\xa4\xb7\xa9\x1f\xe1\x4c\xf5\x4b\x06\x85\x5d\x20\x4e\xbd\x71" "\x01\x8f\xe7\x67\xa1\x58\xb5\xe3\x89\xb5\xe8\xe1\x36\xfc\x89\x60\x84" "\x0e\xf1\x91\x6d\x8e\x36\xf0\x82\x60\xe5\xfc\x98\x08\x44\x2e\x20\x34" "\xf2\xc7\x61\xae\x05\x1d\x03\xfa\x61\x8a\x5f\x6b\x8b\xa8\xce\xe0\x04" "\x11\xd0\x9a\xaa\x3f\x8f\xe3\x0a\x5d\x29\xd9\x40\x3a\x90\x54\x03\xb5" "\x31\x03\x55\x32\x63\x87\xea\x6e\xa7\x26\x43\xb7\x0f\xcc\x5b\xf7\x67" "\x37\x18\x78\x44\x0d\x07\xbe\x91\x9c\x4a\xd8\xc4\xb8\x95\x2e\xa6\x16" "\x55\xbb\xea\xc5\x00\x25\xf4\xcc\x2e\x85\x9c\x20\xdf\xd4\x40\xa0\xb1" "\xb1\x45\x49\xbc\xca\xf7\x95\x2a\x27\xf1\x22\x66\xc3\xb7\x18\x5d\x9f" "\x37\xab\x40\x5d\x07\x65\x01\x1a\xe6\xdb\xc0\x71\x7f\x58\xec\x6b\xd4" "\x10\x15\x89\xf5\xc6\x05\x4f\xab\xa8\x63\xbd\x2a\xf1\xe8\xb1\x9c\xc2" "\xce\xe9\x8c\x61\x9e\x47\x7a\x47\x49\x78\x96\xc4\x2c\x37\x69\x73\x13" "\x91\x7b\x37\x14\x0a\x77\xa5\xaf\xec\x97\x55\x6f\x06\xe0\xee\x1d\x87" "\xc3\x73\x9b\xd9\xff\x4c\x21\x0d\xdd\x4e\xce\xb6\x57\x01\xe6\x4b\xf4" "\xd6\xcb\xd5\xd4\xb9\x78\x6f\x4d\x45\xac\xd8\x81\xfa\x6e\xb1\xc6\xfd" "\xa5\xf8\x84\x4f\x5a\x16\x35\xd0\x5e\x7b\xb8\x22\x70\x69\x4e\xfe\x06" "\x3d\x44\x29\x6d\x86\xb4\xbb\x8b\x28\xe5\x73\xdd\x7c\xc0\xd3\x79\xb5" "\x44\x9a\xf1\x06\x4f\x10\xab\x8e\x8f\x5f\x17\x77\x13\xa6\x3f\xd7\xea" "\x8b\xb6\x83\x05\x35\x6c\x59\xb5\xb4\x83\x34\xd5\x68\xfc\x6d\x81\x71" "\x3b\xf2\xc1\x43\x8d\xbe\xc4\xc2\xc7\x93\xd5\xbc\xd9\x4c\x45\x9e\xaa" "\xce\x92\x95\xec\x5b\x51\x32\x8f\xce\xa5\xc8\xf9\x84\xd8\xbf\x90\xb2" "\xf9\xfb\x24\x7c\xe7\x22\xa1\xc0\x01\xe6\xff\x17\x95\x24\x41\x7d\x64" "\x7b\x85\x6d\x90\x59\x76\xf6\x23\xb2\xdb\x0f\xac\xf0\x5d\x62\xa8\x76" "\x62\xdd\xc0\xd6\xc3\x1c\xad\xca\x2e\xc2\x62\x43\x9f\xdd\x0f\x5c\xd7" "\x78\x86\x17\xb9\x8b\xbb\x80\x2c\xee\xd7\xf9\x71\xfe\x6d\x43\x2a\x49" "\xdc\x13\x2f\xe5\x47\x5d\xb3\xbc\x61\xd6\xff\x04\x44\x2a\x9a\xfa\x90" "\x78\xbe\x7a\x15\xde\x86\x68\xcd\xf4\x69\x69\x7e\x33\x7e\xb4\xa9\x9b" "\x24\xcd\x89\xda\x2a\x36\xea\xf4\xf7\x25\xcf\xc7\x7f\x5e\x4d\xe3\xdc" "\x01\x0c\x2e\xf1\xf6\xb2\x2d\xc4\x79\x54\x4c\x0c\x4c\x61\x1f\xe1\xc8" "\xef\x5e\xd3\xc2\x3d\xda\xe7\xcd\x01\xae\x18\x74\x21\x7f\x8d\x10\x01" "\xf0\xc5\xf8\xd2\xac\xe0\xec\x72\xef\x3e\xd9\xb9\x5b\x72\x75\x34\x62" "\xfe\xaa\x1f\xf5\xc2\xd2\x3f\x5e\xc1\xcc\xf4\x10\x64\x89\x5d\x69\x44" "\xf3\x8b\xf7\xc4\x1a\x09\x1d\xf7\xb8\xc5\xc5\x02\x1f\xf7\xab\x75\x71" "\x43\x9a\x3d\x5c\x88\x9a\xa5\x7c\x71\x5e\x4a\x55\xec\xd7\x7b\x5c\xb4" "\xf8\xbc\x34\x08\xd9\x5d\x56\x0f\x5e\x8e\xc7\x11\xe8\x1e\xf8\xa7\x51" "\xdf\x5d\x1d\x05\x38\x22\xde\xbf\x02\x95\x57\x4e\xbf\xc5\xf1\xfc\x47" "\xca\xaf\xdf\x8b\x38\x62\xd6\x8f\xb0\x1d\x62\x39\xfa\x13\xc0\x26\x32" "\x0a\xaf\xde\xad\x31\xd0\x03\xd8\xbd\x8b\x46\x84\x26\x87\xb6", 8192); *(uint64_t*)0x200011c0 = 0; *(uint64_t*)0x200011c8 = 0; *(uint64_t*)0x200011d0 = 0; *(uint64_t*)0x200011d8 = 0; *(uint64_t*)0x200011e0 = 0; *(uint64_t*)0x200011e8 = 0; *(uint64_t*)0x200011f0 = 0; *(uint64_t*)0x200011f8 = 0; *(uint64_t*)0x20001200 = 0; *(uint64_t*)0x20001208 = 0; *(uint64_t*)0x20001210 = 0; *(uint64_t*)0x20001218 = 0x20000900; *(uint32_t*)0x20000900 = 0xa9; *(uint32_t*)0x20000904 = 0; *(uint64_t*)0x20000908 = 0x200; *(uint64_t*)0x20000910 = 3; *(uint64_t*)0x20000918 = 0; *(uint64_t*)0x20000920 = 0; *(uint64_t*)0x20000928 = 0; *(uint32_t*)0x20000930 = 0; *(uint32_t*)0x20000934 = 0; *(uint64_t*)0x20000938 = 0; *(uint64_t*)0x20000940 = 0; *(uint64_t*)0x20000948 = 0; *(uint64_t*)0x20000950 = 0; *(uint64_t*)0x20000958 = 0; *(uint64_t*)0x20000960 = 0; *(uint32_t*)0x20000968 = 0; *(uint32_t*)0x2000096c = 0; *(uint32_t*)0x20000970 = 0; *(uint32_t*)0x20000974 = 0x8000; *(uint32_t*)0x20000978 = 0x80; *(uint32_t*)0x2000097c = 0; *(uint32_t*)0x20000980 = 0; *(uint32_t*)0x20000984 = 0; *(uint32_t*)0x20000988 = 0; *(uint32_t*)0x2000098c = 0; *(uint64_t*)0x20001220 = 0; *(uint64_t*)0x20001228 = 0; *(uint64_t*)0x20001230 = 0; *(uint64_t*)0x20001238 = 0; syz_fuse_handle_req(/*fd=*/r[0], /*buf=*/0x20004300, /*len=*/0x2000, /*res=*/0x200011c0); break; case 5: *(uint32_t*)0x20000e00 = 0x50; *(uint32_t*)0x20000e04 = 0; *(uint64_t*)0x20000e08 = r[1]; *(uint32_t*)0x20000e10 = 7; *(uint32_t*)0x20000e14 = 0x27; *(uint32_t*)0x20000e18 = 0; *(uint32_t*)0x20000e1c = 0; *(uint16_t*)0x20000e20 = 0; *(uint16_t*)0x20000e22 = 0; *(uint32_t*)0x20000e24 = 0; *(uint32_t*)0x20000e28 = 0; *(uint16_t*)0x20000e2c = 0; *(uint16_t*)0x20000e2e = 0; memset((void*)0x20000e30, 0, 32); syscall(__NR_write, /*fd=*/r[0], /*arg=*/0x20000e00ul, /*len=*/0x50ul); break; case 6: memcpy((void*)0x20000100, "./file0/file0\000", 14); syscall(__NR_unlink, /*path=*/0x20000100ul); break; } } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1, /*offset=*/0ul); loop(); return 0; }