// https://syzkaller.appspot.com/bug?id=53895c6dc108002886cc914d5a92e641f7679e79 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } static void setup_sysctl() { char mypid[32]; snprintf(mypid, sizeof(mypid), "%d", getpid()); struct { const char* name; const char* data; } files[] = { {"/sys/kernel/debug/x86/nmi_longest_ns", "10000000000"}, {"/proc/sys/kernel/hung_task_check_interval_secs", "20"}, {"/proc/sys/net/core/bpf_jit_kallsyms", "1"}, {"/proc/sys/net/core/bpf_jit_harden", "0"}, {"/proc/sys/kernel/kptr_restrict", "0"}, {"/proc/sys/kernel/softlockup_all_cpu_backtrace", "1"}, {"/proc/sys/fs/mount-max", "100"}, {"/proc/sys/vm/oom_dump_tasks", "0"}, {"/proc/sys/debug/exception-trace", "0"}, {"/proc/sys/kernel/printk", "7 4 1 3"}, {"/proc/sys/kernel/keys/gc_delay", "1"}, {"/proc/sys/vm/oom_kill_allocating_task", "1"}, {"/proc/sys/kernel/ctrl-alt-del", "0"}, {"/proc/sys/kernel/cad_pid", mypid}, }; for (size_t i = 0; i < sizeof(files) / sizeof(files[0]); i++) { if (!write_file(files[i].name, files[i].data)) printf("write to %s failed: %s\n", files[i].name, strerror(errno)); } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[4] = {0xffffffffffffffff, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20002040, "./file0\000", 8); syscall(__NR_mkdirat, /*fd=*/0xffffff9c, /*path=*/0x20002040ul, /*mode=*/0ul); break; case 1: memcpy((void*)0x20002080, "/dev/fuse\000", 10); res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20002080ul, /*flags=*/0x42ul, /*mode=*/0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x200020c0, "./file0\000", 8); memcpy((void*)0x20002100, "fuse\000", 5); memcpy((void*)0x20002140, "fd", 2); *(uint8_t*)0x20002142 = 0x3d; sprintf((char*)0x20002143, "0x%016llx", (long long)r[0]); *(uint8_t*)0x20002155 = 0x2c; memcpy((void*)0x20002156, "rootmode", 8); *(uint8_t*)0x2000215e = 0x3d; sprintf((char*)0x2000215f, "%023llo", (long long)0x4000); *(uint8_t*)0x20002176 = 0x2c; memcpy((void*)0x20002177, "user_id", 7); *(uint8_t*)0x2000217e = 0x3d; sprintf((char*)0x2000217f, "%020llu", (long long)0); *(uint8_t*)0x20002193 = 0x2c; memcpy((void*)0x20002194, "group_id", 8); *(uint8_t*)0x2000219c = 0x3d; sprintf((char*)0x2000219d, "%020llu", (long long)0); *(uint8_t*)0x200021b1 = 0x2c; *(uint8_t*)0x200021b2 = 0; syscall(__NR_mount, /*src=*/0ul, /*dst=*/0x200020c0ul, /*type=*/0x20002100ul, /*flags=*/0ul, /*opts=*/0x20002140ul); break; case 3: res = syscall(__NR_read, /*fd=*/r[0], /*buf=*/0x200021c0ul, /*len=*/0x2020ul); if (res != -1) { r[1] = *(uint64_t*)0x200021c8; r[2] = *(uint32_t*)0x200021d0; r[3] = *(uint32_t*)0x200021d4; } break; case 4: memcpy((void*)0x20000000, "./file0/file0\000", 14); syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20000000ul, /*flags=*/0ul, /*mode=*/0ul); break; case 5: *(uint32_t*)0x20004200 = 0x50; *(uint32_t*)0x20004204 = 0; *(uint64_t*)0x20004208 = r[1]; *(uint32_t*)0x20004210 = 7; *(uint32_t*)0x20004214 = 5; *(uint32_t*)0x20004218 = 0; *(uint32_t*)0x2000421c = 0; *(uint16_t*)0x20004220 = 0; *(uint16_t*)0x20004222 = 0; *(uint32_t*)0x20004224 = 0; *(uint32_t*)0x20004228 = 0; *(uint16_t*)0x2000422c = 0; *(uint16_t*)0x2000422e = 0; memset((void*)0x20004230, 0, 32); syscall(__NR_write, /*fd=*/r[0], /*arg=*/0x20004200ul, /*len=*/0x50ul); break; case 6: memcpy( (void*)0x20000040, "\x5b\xf9\x96\xe6\x26\x54\x58\x1d\x0b\x12\x8c\xdb\x73\x60\x16\xc3\x4e" "\xf0\xc9\xca\x62\xdd\xd7\xd2\x29\x27\x4f\x7c\x14\xad\xf4\xb0\x73\xc8" "\x0d\x3c\x6c\xb6\xc9\x6d\x38\x2f\x82\x96\x96\xc2\xa3\xa4\x32\xc8\x3e" "\x54\xa2\x6e\x68\x0c\x16\xbf\x54\x32\xb4\x41\x99\x51\x9f\xb9\x15\x3e" "\x68\x66\xa3\xfe\xf6\x25\x4a\x94\xce\x8a\x17\x80\x35\xe3\xd8\x8a\x1a" "\x54\x14\x7a\xaa\x4d\x1f\x67\x29\x4c\x1c\x63\x54\x4e\xf1\x08\x7e\xa5" "\x95\xcb\x14\x6e\xef\x0b\x40\xfa\xd2\xe8\x5e\x2a\x0a\x41\xdc\x8b\x5f" "\xb7\xb4\x0a\xcf\xac\x96\x10\xef\x88\x08\xaa\x49\x2c\x8e\x25\xf7\xff" "\x5c\x45\xd6\xe1\xb1\x79\x8a\x41\x62\x1c\x6a\x85\x06\x29\xca\xa2\xa1" "\x32\x59\x8b\xfa\xc1\x75\x12\x23\x74\x49\x65\x81\x94\xac\x8d\xf2\xf2" "\x64\xc9\xf5\x99\x2b\x18\x37\x90\x01\xe5\xaf\xdd\xf9\x2a\x72\xc2\xc1" "\xe7\x5f\x7c\x70\x07\xe7\xad\x0b\x37\x07\x22\x3c\x86\xd8\x35\xe6\xd9" "\xf5\x2d\x7b\xe7\xd1\x08\xef\xe9\xec\x02\xf7\xc7\x63\x70\x11\x9c\x20" "\x09\xe6\x64\x11\x13\x22\xb8\x2c\x86\x95\x14\xad\x62\xbd\x37\xde\xa4" "\x5c\x38\xa4\x6a\x8c\x04\x68\x2a\x4b\xcf\x6e\xf6\x55\x86\x2a\x20\x48" "\x0f\xea\xb3\xf3\xe1\x6d\x36\x2f\x95\xa9\x76\x8c\x29\xcd\x97\xd3\x77" "\xfc\x18\x58\x6e\xb0\xbf\xa8\xcb\x33\xbb\xb0\x72\xd6\x62\x87\x3d\xe2" "\xb1\x37\x81\x32\x12\x87\xc7\x17\x7d\x0f\x00\x66\x9b\xf7\x83\x62\xd7" "\x76\x4d\x48\x15\xaa\x7f\x90\x7d\xcc\x52\x5b\xcf\x45\xed\x9a\xed\x25" "\xbb\x3a\x4c\x1c\x93\x6d\x03\xd5\x84\x1c\xab\xf6\x22\x02\x5e\x06\x13" "\x31\xcd\x07\x0f\xc0\x44\x0f\x92\x3f\x77\x2d\x6b\xbc\x0c\x3c\xc3\xbe" "\xa5\x0d\x88\xc2\x43\x87\x9c\xc5\x9d\x6d\xba\x6b\xa1\xb6\x7f\xfd\xb9" "\x87\x7a\xdf\xdc\xe3\x2e\x80\xb9\xf4\x8e\x99\xb3\xff\x93\x8d\x6e\xa7" "\x87\x69\x1e\xe4\x82\x2b\x5e\xed\x32\x04\x16\xb7\x12\xbf\x45\x11\xfc" "\x2b\x4f\x75\x49\xa8\x22\x6e\xb1\xf1\x7d\xa6\x24\x03\x96\x51\xac\x5a" "\xf6\x49\x92\x5e\xb0\x46\xe8\xab\x92\x12\x8a\xf9\x33\x84\x9a\xab\x0a" "\xb7\x0d\xc8\x9b\x0e\x39\x88\x63\x73\x08\x83\xa1\x0a\x62\xaa\xd0\x41" "\x1d\x90\xa2\x4a\x54\xca\xe8\xa1\x58\x35\x7a\x7d\x9f\x2e\x84\x80\x33" "\x01\x1f\xcb\x60\x1a\xf3\xa3\x31\x74\x8f\xde\x5b\x82\x2e\xe5\x11\x37" "\xe7\x05\xe6\x82\x14\x27\xfd\x95\x3b\xf0\x13\xdc\x2c\xa2\xec\x99\x6d" "\xc7\x88\x4a\x90\x0c\x95\x04\x2f\xb2\x4a\x6c\xcd\xe8\xe5\x9f\x55\xfc" "\xdd\xb1\x7a\x11\x19\x66\x6b\x85\xb4\xaa\x7e\x1e\x96\x4f\xa6\xc0\x29" "\x71\x73\xad\x95\xec\x7e\xed\xfc\xbc\xcd\x2c\x5d\xe6\xb8\x75\x3d\x09" "\x7c\x74\x09\x79\x40\x42\xcc\xe9\x07\x5a\xff\xc2\x46\x5e\x69\xf4\x09" "\x0f\x16\x7f\xc3\xf1\x64\x76\x94\x4a\xc6\x21\x6a\x1f\xd3\x2b\xc4\xb0" "\xf0\x85\x40\x56\xe1\x20\xbf\x4c\x0e\x90\x38\x04\x51\x1b\x99\x45\x2d" "\x67\x89\xeb\x13\x22\x4d\x20\x83\xf3\x56\x3b\x7b\x5c\x86\xd7\x9e\xa0" "\x96\x78\x37\xb0\x11\xbf\x9b\x4a\xb9\x4d\xe0\x82\x78\xdd\x23\x35\xc6" "\x26\xc0\xaa\x61\x73\x7a\xf1\x23\x5d\x26\x56\xd8\x08\xa1\x02\xf6\x7a" "\xbd\x46\xbd\x50\x99\xc4\xc4\xaf\x8c\xec\x1a\x55\x1f\x78\x62\x44\x08" "\x22\x75\xe4\x43\xd4\xbf\xa3\xa4\x94\xca\x07\xc1\x79\x18\x10\xfc\xfa" "\x79\x5e\x72\xde\x7a\x14\x9b\x36\x9d\x9a\x90\x30\x8f\xff\x99\x08\x9b" "\x16\xf7\x08\x9a\x83\x6c\x64\x92\xa5\x50\x93\xe3\x59\xbf\x6c\x79\x7c" "\xd8\x2e\x80\x2b\x52\xfe\x14\x14\x30\x7d\x2d\x7a\xd9\xe4\x04\x66\x31" "\xad\x8b\x61\x2d\x7c\x84\x79\xaa\x5b\x3f\x32\x7f\x8d\xdc\xba\xe0\xd3" "\xad\xf9\x29\x5b\xcb\x7a\xa8\x91\x41\xc8\xe3\x05\x40\xf5\x98\x86\xc5" "\x85\xff\x19\x4c\x75\xbb\x72\xfe\x5a\x25\x0c\x2d\xb5\x47\x61\x0f\x5c" "\xe3\x8b\xbc\xb1\x18\x3b\xa2\xf1\x5e\xea\x90\x57\x14\xc3\xcb\x8d\x91" "\x31\x60\x5c\x99\x98\xe3\x45\x50\x6c\xcd\x6a\x4d\x67\xcc\x1d\x86\x51" "\x2b\x35\xa1\x90\x0e\x55\xf0\x2f\xa7\x3f\x39\xa4\x1e\x7f\x03\xd3\x81" "\x0e\x77\x41\xcb\x93\x60\x5b\xcb\x1b\x75\xe7\x69\x79\x0a\x86\x1e\xa6" "\x1d\x26\xb5\xd6\x00\x57\xad\xe8\x1a\xa6\x64\xb0\x01\x6a\x74\x08\xf6" "\xed\x10\x54\x1f\xcf\xd3\xbf\xf7\xe6\x7b\x94\x1d\x2d\x93\x07\x09\xb1" "\x28\x5d\x90\xb5\xc0\x12\x26\x36\x42\x3d\xb0\xb8\xf8\xc6\x25\x38\xe0" "\x46\xb6\x3d\x76\xb4\xcf\x4a\x36\x11\xf7\x13\x7c\x93\x43\xee\x1e\x89" "\xe8\xc0\x1c\x41\x6d\x44\xbb\xe6\xb2\xeb\xf3\x2d\x86\xed\x80\x72\x05" "\x4d\x32\x08\x24\xba\x01\x2b\x60\xb0\xd0\x8d\xc5\x67\x87\xa1\xd2\x40" "\x81\x16\x23\x10\x4b\x35\x7f\x3c\xed\x1d\x97\x4a\xb8\x0a\xde\x76\xec" "\xca\x96\xb1\xfc\x29\x1d\x20\x63\x25\x33\xbe\x3b\x6a\xc2\xdd\x51\xfc" "\xa7\x36\x1b\xb2\x2f\x69\xb5\x26\xd4\x76\x8f\x2a\xa5\x29\x59\x4e\x0e" "\x54\x1b\x3d\x52\xaa\x23\xa9\x7d\x40\xad\xec\x8d\x76\xd6\x6e\x18\x91" "\x1a\x95\xa5\xbb\x6e\x56\x74\xdc\x15\xdb\x74\xed\xbd\x4d\xbe\x33\x95" "\xfe\x0d\x63\x8c\x55\xf9\x5d\x7d\x60\x05\xf5\x4e\x4b\x45\xea\xab\x63" "\x27\xcb\x2d\x14\xe7\x92\xb9\x41\x1f\xe3\x6b\xc3\x59\x34\x8e\x2c\xa7" "\x85\xd4\x92\xd1\x29\x77\x3e\xc8\x7f\x52\xdf\xa1\x34\x6c\xb3\x9f\x9a" "\x78\x28\xca\xdc\x80\x21\x31\x1d\xd2\x93\xd9\xa6\x6c\xa7\xc9\x93\xe0" "\x17\x12\xa7\xf4\x16\xff\x2d\x43\xb0\xba\xca\xe3\x47\x2a\x84\x98\x37" "\x0c\x89\xac\x6a\x80\x7e\x76\x43\x37\xc0\x66\x8d\x21\x74\x18\x09\xf4" "\x74\xdb\x0d\x10\xec\xfc\x31\xa5\xaf\x5b\xb8\x9d\x9a\xa2\x9d\x81\x4a" "\xf4\xf5\x47\x97\x0f\xbf\xd4\x6d\x95\xac\x31\xb9\xc7\x0f\x46\xe9\x2a" "\x45\xbc\x4a\x88\x3d\xd5\x39\x69\x09\x3c\xbc\xc4\x6c\x19\x83\x45\xff" "\xaa\xa7\x0d\x2a\xd2\xa6\x49\x0d\x02\x4c\x30\x20\x95\x0f\xd9\x94\x94" "\x52\x6e\xb5\xfb\x7b\xf6\x7d\x87\xe6\x87\x6f\x2e\x5c\xdf\xbe\x51\xe4" "\x00\x1c\x61\xdd\x5e\x2c\xb7\xf7\x1a\x11\x53\x5e\x70\x78\xb4\x40\xe9" "\x66\xbb\xba\x0f\x23\x7f\xf5\x28\x05\x27\x29\x39\xf8\xb1\x7f\x2e\xeb" "\xc0\x6c\xe6\xa8\x9f\x4a\xbe\xd5\x9f\x36\xba\x98\x4c\x1a\x0e\x9c\x22" "\xcd\xf7\xbf\xd1\x1d\xb1\xe5\x22\x95\x51\xa9\xe6\x06\xd4\x49\x4d\x93" "\xa5\xb5\xcc\x43\x56\xff\x86\x03\xdb\xaf\xe4\x10\x04\xb5\x56\x59\xb7" "\x02\x62\x9f\x08\xdd\xe8\xdc\xb6\x3c\xcd\x7e\x72\x26\x79\xc6\x15\xfe" "\x62\x3b\xe0\x5d\x92\x14\x0c\x92\x26\x24\x49\x9c\x70\xe4\x95\xbc\xa8" "\x2c\xfe\x7f\xed\x10\x5b\xf6\xcb\xa5\x39\x32\xb2\x4e\x2e\x96\x0e\x6a" "\x15\x21\xba\x0c\xa5\x63\x27\x71\x13\x6a\x19\x9f\x2b\x6b\xc0\x16\x09" "\x9b\x89\x11\x01\x19\x22\x2d\xe2\x8b\x11\xc9\x27\xc6\xd2\xe7\x35\xb0" "\x73\xaf\x7a\x0a\x55\x10\xd6\x8a\x07\x03\x4e\xf7\xbe\x82\xd1\xb1\xa2" "\xd7\xba\x2b\x7a\xde\x56\x49\x98\x72\xcc\xe1\x09\xc9\xcf\x43\x2e\x90" "\x9f\xe4\x24\xee\xd7\x48\x64\xf3\xec\x98\x7f\xb3\xc7\x3f\x50\x11\x7c" "\x8a\xa1\x88\x65\xfd\x24\x3e\xb3\x74\x90\x5b\x63\xe2\x93\xce\x5a\x45" "\x57\x57\x8f\x27\xd1\x36\x57\x4a\x77\x76\x54\x27\x0e\xa6\x64\xf8\x63" "\x67\x11\x66\x9b\x76\x0f\x13\xab\x1a\xee\x91\x20\x56\xb9\x6f\x73\x11" "\xf6\x26\x53\xa3\x1a\x0e\xe4\xb0\xbd\x40\x4a\x34\xa4\x26\xb6\x2a\xf4" "\xb9\xb1\xf2\xcb\x07\x36\xfc\x88\x6b\xf3\x46\xb2\x21\xb9\xcd\xc1\x9b" "\x2f\x7c\x52\x99\x94\x92\x78\x45\xc3\x1f\xa9\xbf\xe5\x7e\x23\x32\x57" "\x23\xf9\x58\x70\xa2\xaa\x77\x4c\xa9\x37\x24\xe9\x67\x1d\xf8\x59\x99" "\xc8\x25\xf2\xba\x61\xee\x49\x3e\x0e\xba\x25\xd1\xda\x9a\x67\x52\x82" "\xd4\x22\xc6\xc5\x3b\x9b\x23\x46\x78\x19\x1f\x7b\x19\x5d\x95\x79\x45" "\x67\x18\x61\xb4\xd3\x21\x3e\xb1\xbc\x80\x72\x57\xf0\x8c\x22\xe8\x67" "\xcc\xd5\x7b\xc0\x9a\xfc\xe8\x6c\xa2\x14\x52\xc4\xcd\xe4\xd3\x51\x7c" "\xc1\x89\xfd\xcf\xe8\x1a\x51\xe5\xbf\xd1\x9e\xaf\x9e\x38\xcf\x4d\x6b" "\x02\xf8\x07\x72\x06\x0e\x71\x78\x28\x75\xbd\x2d\x4e\x91\xff\xfc\x1d" "\x43\x2c\xf1\x9a\xee\xc0\xd4\x2f\xbe\x96\x2f\xf6\x7c\x93\x14\xa3\xdb" "\x19\x16\x83\xaa\xcc\xbe\xf8\x7e\x05\x25\x6c\x7c\x82\xf2\x9a\x20\xae" "\xb1\xd1\x01\xf6\x81\xb0\xef\xd0\x9a\xb6\x2c\x60\xca\xda\xe6\x45\x28" "\x7c\xb8\xe4\x38\x20\xc8\x07\x86\xde\xf8\x29\x92\x6f\x6b\x3f\x38\xda" "\xc3\xcd\x9b\xc7\xe8\x37\xc4\x78\xbf\x8f\x80\x49\x9b\xe9\xb3\x74\xe5" "\x60\x98\xb7\x16\xf6\x2e\xad\xae\x4d\xb8\x6f\xdb\x14\x4c\x00\x07\x83" "\xd1\xca\x93\xe9\x4f\x4c\xc8\xac\xc0\x03\x2a\x75\x79\x60\x71\x3e\x67" "\xc9\xf3\x1b\xfc\x08\xc4\xfb\x68\xa1\xef\x38\x45\x5d\xc8\xc7\xf8\x93" "\x42\x78\x89\x55\xe5\xc5\xb3\x0d\x55\x9c\xb4\x3d\x12\x54\x34\x1e\xad" "\x4e\xa1\x80\x3e\xf8\x11\xd8\xd4\x2c\x67\x89\x08\xe9\x84\x7e\xd6\xb7" "\xc5\x80\x1d\x0d\xcc\xb4\x4c\xb9\xb7\xc2\xfa\x0f\x38\x95\x55\x76\x75" "\x02\xc9\x4a\xcb\xed\x64\xd5\x1c\xf8\xf8\x47\x0a\x3c\x85\x44\x3d\x18" "\x8f\x26\xee\x01\xeb\x8d\xb9\x8b\xcc\xca\x1c\x94\x25\xe8\x4b\xf3\x05" "\x19\xb2\xf7\x11\x11\x44\xe3\xef\x41\xeb\x61\xe5\x69\x82\xb0\x17\xa8" "\x7b\x47\x8d\xd9\x7f\xcc\x2a\x56\x9b\x15\x2a\x56\xb1\x01\xd8\xd7\x2a" "\x54\xde\xaf\x43\x40\x85\x81\x97\xf2\xef\x8b\xbb\x8f\x89\x72\x5d\x8e" "\x31\x4f\xbf\x17\xbe\x37\x5c\x45\x14\x54\x52\xd8\x22\x7b\x12\x02\xb3" "\x37\x10\xe2\x28\xe4\xff\x71\x47\xac\x9b\x34\xd7\x91\xa3\xac\xa7\xc6" "\x12\xd9\x43\x14\x61\x9b\x4f\x1a\x3b\x5b\xcc\x35\xfb\x54\xec\xe8\x5e" "\x4a\xa9\x9b\x70\x4a\xe9\xef\xce\x59\xc5\x2e\xd9\x06\x1f\xe5\x4a\x8d" "\xeb\x9a\x57\xa2\xca\x36\x2f\x83\xfb\x91\x41\x23\x21\x55\x15\x2d\x53" "\x3c\xa9\x31\x2a\xe3\xd8\x38\x76\x7e\x91\xe6\xff\x7b\xf8\x71\xee\xdf" "\xcc\x35\xbd\x80\x82\xcf\x00\x8f\xeb\x10\x15\xa6\x00\x1b\xe8\xd6\x3c" "\x8c\x08\xa6\x8f\x8d\x63\x27\xde\xfc\x6f\x49\x7e\x9c\xb4\x57\xef\xc9" "\xca\x99\xc3\x00\xcb\x3a\xec\xc1\xb3\xb9\x95\x18\xa5\x23\xba\xcf\x95" "\xbc\x62\x4c\x9b\x2c\x89\x31\x2f\x8d\x9c\xdb\x9b\xfe\x10\xd8\x21\xf0" "\xc5\xaa\x30\xda\x4d\x17\xe9\xf0\xdf\x6e\xec\xee\xc8\xe9\x87\x21\x7e" "\xac\xfe\x52\xb6\xbf\x33\x17\xf7\xd6\xc6\xb9\xe3\x3a\xb8\xd8\xdd\xd2" "\xab\x08\x6b\xb1\x21\x94\x4d\x9f\x09\xef\xfd\x74\xb8\x1e\x40\xbc\x95" "\xb0\x90\xfe\xa1\x48\x35\x2e\x4a\x0c\x3a\x44\xfb\xad\x8e\x75\x6b\x78" "\x96\xc4\x86\x9b\x93\xa4\x9d\x04\xf1\x02\x68\xac\x2a\xd3\xc7\x9e\x13" "\xc6\x78\x25\x28\x5d\x5f\x00\x9a\xf5\x87\x68\xd1\x22\xa7\xeb\x26\x31" "\xb0\x70\x01\x7b\x97\x30\x8f\x4d\xd1\x36\x3c\xb9\xa5\xf8\xf6\xd2\x9d" "\xb0\x20\x7d\x84\x3d\x36\xc3\x3e\x2b\x80\xed\xb1\x98\x1a\xa1\x7c\x8f" "\xe0\x64\xbe\x03\xe6\xff\x4a\xed\x53\x0a\xa8\x38\x37\xf4\x5b\x5e\xee" "\x6d\xbb\x22\xc4\xe6\x07\x17\x3d\x60\x59\xc2\x4b\x1d\x32\x10\x7f\x38" "\x4e\xbf\xc9\x16\x39\xf9\x2d\xac\x16\x10\x34\x1d\x3d\x37\xd8\xc0\xfa" "\x11\x34\x27\x36\x4f\x4f\x54\xba\x69\x19\xb1\x95\xb1\x4d\xfa\x67\x70" "\x8f\xbb\x05\x58\x36\xae\x2f\xcb\x6a\xd2\x55\x3d\x22\xb8\xff\x21\xf6" "\x04\x94\x8e\x84\x87\xb6\xf6\x97\x49\x3c\xa8\x23\x41\x69\x50\x1f\xd7" "\x01\x8e\x12\x82\x90\x4c\x83\x87\xab\x67\x2e\x7a\x78\x3e\xdb\xd0\xc6" "\xc4\x6a\x10\x99\x53\x9c\x65\x45\x7b\x8e\xa3\x5e\x6c\xc9\xa3\xc1\x71" "\x3d\x8d\x56\xf0\xde\x77\x8c\x63\x51\x50\xac\x54\xb8\xbb\x04\x84\x29" "\x42\xa8\x67\xf3\xa5\xf8\x79\x74\xbf\x9d\xbe\x4c\x25\xb3\x41\x2d\xc3" "\x97\x5f\x15\xc0\x4e\xd5\xd2\x5f\xf3\x3d\x0e\xaa\xc2\x59\x9e\x7e\xb4" "\xa6\x89\x64\x2b\x09\xd2\x3e\x18\xcf\x8b\x10\xfc\xc0\x2d\xac\x82\x37" "\x2d\xe2\x7d\x3e\x5d\x8d\xb3\xd5\x9a\x46\x79\xde\xae\xf4\x1e\x93\x8b" "\x78\x9b\x94\x1e\x20\xa4\x6a\x3c\x20\x39\xc5\x81\x60\x49\x95\xec\x12" "\xbe\x6a\xfb\xce\x46\xb4\xc5\xb5\x35\x1d\x29\x42\xd3\x57\xef\x07\xe4" "\xe2\x93\x0f\xbe\x70\x9f\x1b\x2d\xc0\xdb\x97\x95\x2d\xdf\xa7\x7a\xfb" "\x5c\x0b\xba\x5a\x19\x10\x56\xfc\xee\x2c\xe2\xd2\x8c\x16\xa3\x9f\x9e" "\x74\xee\x53\x14\xb3\x71\xc2\xa6\xc7\xd2\xb6\x51\x7c\x6d\xf1\x28\x3e" "\x70\xaa\x04\xdd\x6a\x8c\xd1\x4f\x27\x29\x12\xe7\x54\x4d\x1a\x01\xa4" "\xfa\x82\x7b\xd4\xd2\x84\x26\xe6\x5e\x15\xc0\x78\xa8\x8b\x91\x0f\xc9" "\x0c\xdf\xd6\x41\xb3\x03\xe3\x2b\x1f\x56\xba\xb4\x88\xcc\x53\x70\x6c" "\xe0\xf4\x62\xe7\x4a\xb6\x90\xfc\xb6\x2f\x86\x36\x0e\xdc\xc1\xf3\xe9" "\x0e\x31\x11\x0d\x13\xd2\x6f\xa5\xdd\xc0\x95\x81\xb7\x21\x6f\x05\xb3" "\x9e\xfc\xe0\x8e\x2a\x3a\x9c\xe1\x3e\xec\x7c\x83\x2b\xa2\x87\x24\x43" "\x40\x3d\x1d\x42\x01\xf4\x1e\x8c\x7e\x3a\x27\xe9\xe1\xc0\x61\x93\x11" "\x8c\x6a\x86\x63\x63\xef\x76\x15\x29\x17\x8c\x88\x16\xbe\x76\x42\xf9" "\xfd\x84\x21\xc9\x7a\xe4\xed\x77\x83\xae\x0d\xa4\x67\x24\xa6\x39\xab" "\x3e\xd8\xb8\xf2\xc7\xe4\x6d\x3d\x28\xa7\xad\x01\xc2\x6a\x5e\x87\xd0" "\x4e\x16\xd3\x5d\xac\x4a\x7c\x7c\xbf\x22\x67\xf7\x8b\xad\x47\xd4\x52" "\xbf\x8f\x92\x6a\xe4\xda\x88\xa4\xf5\xf8\x16\x97\x2c\x69\xb5\x47\x0d" "\xa7\x0c\x09\x05\xbe\x43\x29\x7e\xd4\x75\xd9\xbf\xf3\x64\x55\x90\x50" "\x1a\x10\xde\x1c\xf9\xb5\x9a\xc9\xbc\x35\x46\x10\x2c\xf1\x66\x42\x0e" "\xa0\xfa\x10\xab\x5c\x81\xbd\x80\xcf\xb6\xcb\xf6\x98\x05\x3b\xcb\xfc" "\xfe\x75\x89\x48\x9c\x1b\x42\xe5\x4e\xb2\xf9\xe7\x01\xed\x6e\x6d\xc0" "\x6f\x00\xf7\xd6\x14\xa7\x46\x76\x47\x1e\xfc\xb0\x98\x74\xca\x9e\x3e" "\xdb\xbd\xc0\xa6\x54\xbf\x35\xbe\x01\xff\x92\x50\x59\x0d\x4a\x94\xf5" "\xc9\x56\xcd\x2a\x4c\x5b\x3b\x1b\x1f\x7b\xb4\xa9\x21\x44\xee\x17\x56" "\x73\xf8\x32\xc3\x40\x0d\x01\xad\x2e\xc7\xaf\xbf\x84\xce\xa5\xd7\x2c" "\xe3\x3b\xde\x27\x1d\x48\xef\xad\xdd\xb6\x80\x8f\x93\xeb\x49\xa6\x55" "\x02\xf3\xb6\x49\xa7\xdc\xd0\x4d\x2f\x38\x54\xed\x12\xe6\xa8\xdf\x5a" "\xf2\x70\x08\x87\x15\x57\x32\x41\x44\x7e\x5b\x1e\xee\x75\x4f\xe6\x1a" "\xc7\x83\x01\xd0\x9f\x0c\x13\xb8\x7f\x79\x37\x64\x8a\xa5\xd0\xf9\xd2" "\x45\x81\x0b\xcc\x31\xa8\x5e\x65\xb6\x5e\x7e\xd3\x69\xd1\x35\x40\x8d" "\x47\xa3\x1d\x34\x80\x6b\x43\xda\x06\xcc\x69\x1e\x3e\x50\xc1\x4e\x65" "\x48\xda\x79\x25\xad\x59\x9f\x34\x37\xc3\xa6\x91\x3a\x33\x14\x3b\x7a" "\x4a\x38\x04\x52\x08\xa3\x26\xad\x57\x36\x26\xd9\x2f\x8c\x7e\x76\x96" "\xe2\x79\x6b\xfd\x42\xcd\xee\xec\xd8\x72\xf4\x8e\x66\x7c\xc8\x81\x99" "\x22\x58\x28\xad\xa8\x09\xb1\x5a\xf7\x68\xb8\x7e\x3d\x0e\x6f\xa4\xa0" "\x9b\x53\xd0\xaa\xf2\xd6\x60\x6b\x75\xed\x49\x57\x6e\x34\x99\x59\xec" "\xa1\x68\xb2\xa9\x81\x61\x9d\xa3\x2f\xe4\x9f\x0c\xa6\x6c\xe8\x3c\xb3" "\x74\x35\xb5\x2d\xf3\x3d\xea\x19\xcd\x37\x25\xe0\x92\x2b\x84\x89\x0f" "\xdd\xf7\xeb\x81\x82\xec\x55\x62\x9d\xa8\x7a\x8d\xac\x64\xc8\xa4\xad" "\x05\x1f\x52\xbc\x56\x2f\x2e\xc8\x31\xc3\x1b\x53\x1d\x0f\x98\x02\xca" "\xc8\x36\x9e\xf9\x95\xf7\x5e\x7e\x1a\x20\xef\xed\x30\x2f\xd3\x83\x41" "\xb8\xb4\x8b\x05\x51\x30\x30\x43\xfa\xf7\xb8\x25\x89\x15\x67\x1d\x78" "\xda\x28\xd9\x14\x5f\x68\x54\x79\xd8\xc0\x47\x1e\xf9\xf2\xbd\xe9\x92" "\x5e\xd6\x9b\x28\xde\xcf\x0b\xbb\x0d\x98\xee\xc7\xff\xe2\xd8\x37\x31" "\xd0\x57\x7f\xb8\xff\x26\x43\x21\x94\x40\x6c\x20\x73\xbb\xb6\xde\x0c" "\xa4\xb5\x26\xe9\x8d\xc6\x29\x15\x87\x25\x64\x32\x72\x65\xb2\xc3\x6b" "\xc8\xe4\x85\x5b\x21\xfd\xee\x6e\x7c\x8d\xf0\xac\x5f\x7c\x6d\x04\x50" "\x5a\x66\x67\xf7\x5f\xd5\x42\x80\xf5\x99\x56\xb8\x1e\xa4\xba\x77\x9e" "\x69\xc1\x4e\x2e\x6a\x94\x2c\x3d\x6c\xcd\x79\x1f\xd7\xb3\xad\x48\xf0" "\x7a\xd0\xf1\xee\xab\x50\x71\x56\x11\x7e\xac\xa0\xcc\x3e\x34\xbb\x48" "\x7e\x8f\x95\x51\x55\x55\x0b\x73\xc5\x55\xef\x88\xcc\x53\xe2\xcd\x50" "\xea\x18\xcf\x8f\xcd\x5a\xcd\xeb\x19\xbd\xc2\x9c\x16\xfd\xc7\x04\x3e" "\xc6\x29\x0c\xa7\xa2\x98\xf9\xca\x0c\xe4\x2c\xac\xb3\xb3\x76\xed\xfb" "\xf7\x9e\xb3\x89\xa2\xcd\xfd\xdd\x7d\x23\xc8\x75\xfb\xa3\x09\xa1\x82" "\xc4\x78\xc0\xa7\xb7\xc9\xfc\x81\x54\x04\xeb\x88\x2e\xa6\x74\x73\x01" "\x2f\xc2\xa0\x22\x72\x21\x25\xc7\xcd\x6d\x8f\x17\x52\x92\x99\xe0\x9e" "\xe6\x0b\x1c\xed\xac\x8f\xdf\x5f\x6b\x88\x8e\xaf\x5c\x30\x27\xa9\x97" "\xe9\xfe\x2b\xd3\x24\x4d\xe1\xc8\xb8\xc5\x96\xf7\x00\x47\xd6\x0e\x72" "\x37\x10\xe7\xda\x14\xf1\xb8\xad\x86\x23\x55\x3d\xe7\x50\xbf\xe7\x35" "\xee\x9a\xf1\xba\xa4\x93\x79\x2c\xff\xfb\xb0\x45\x3b\xf7\x14\x9b\x78" "\x3e\xd2\x04\xae\x80\xae\xe6\xc8\xf0\x39\x17\x99\x03\xaf\x99\xde\xfc" "\x54\x94\x62\x04\xa0\x0d\x56\xbc\x01\xd0\xcb\xba\x34\x65\x1c\xfc\x6b" "\x47\x99\x31\xb4\x94\x75\xea\x01\x55\x24\x6d\x4b\x9f\xcf\x85\xf5\x19" "\xa7\x8c\xa8\xac\x75\xbb\xf3\x31\xf5\x44\x7f\x71\x7f\xa1\xa6\x8a\x17" "\xab\x7c\x79\xce\xa8\xa1\xf9\xb6\xe2\x3d\xc6\x4c\x65\x59\xbf\x79\x79" "\x99\xd9\x35\xa7\x4d\x2a\x23\xda\x28\x46\xbe\x3a\xe8\x6f\x5b\x69\x3c" "\xb3\xc1\x6a\x9c\x1d\xbe\x74\x4a\xc4\x86\xa4\x55\xd0\xa7\xcc\x07\x7a" "\xaa\x89\x4c\x07\x52\x74\xeb\x08\x1f\x2d\xf8\x3c\xe7\x4f\x02\x19\x0d" "\xe1\xed\xd7\x64\xdd\xc8\x72\x28\x56\x8b\x5b\xc2\x8f\x2c\x1e\x73\x30" "\xc8\xe5\x8a\x8c\xfc\x97\x5b\x63\x59\x46\xa5\x62\x97\x53\xcb\xb7\x49" "\x8c\x75\xd2\xb8\x0f\x6f\x48\x39\x8f\xc4\xa8\x8c\x24\x81\x77\x1f\x66" "\xd7\x90\x2e\x16\x10\xbc\x79\x93\xfb\x67\xc6\x7b\xb9\xba\x44\x42\x62" "\x00\x83\xaf\x4b\xd2\x4b\x9b\x85\xcc\x54\xc5\x42\x24\x91\xe6\x54\x9d" "\xd4\xd3\x17\xf9\x0b\x49\x2e\x73\xf3\x3c\x4f\xa5\xd5\xf7\x32\x58\x91" "\x5e\x8c\x72\x85\x83\x8f\x7f\x65\x12\x4e\xc7\x03\x42\x07\xa3\x7c\x3e" "\x65\x1c\x62\x23\x7d\xbf\xe7\x96\x3c\x98\xfe\x7b\x0d\x72\x96\x0e\x31" "\x6f\x9c\x50\x1f\xce\x6f\x9c\x16\xf7\xc3\xbc\x59\x51\xb8\x3a\x9f\x2f" "\x2c\x85\xd7\x5d\xfb\x58\x32\xe0\xd2\x69\xed\x43\x94\x5d\x3f\x31\x5b" "\xd4\x9c\x12\x0a\x74\xdc\x93\xe3\xf3\x12\x0e\xff\xa9\x75\x6a\xad\xd4" "\xe9\xb2\x48\xb5\x44\x63\x83\xf2\x14\xce\x7c\xb1\x42\xd7\x20\x5f\x8a" "\x3d\xee\x9e\x0d\x0e\x15\xc1\x6c\x72\x99\x1b\xd3\xf1\x1a\x7f\xa9\x07" "\x3f\xc2\xef\xbc\xcd\xb2\x5c\x95\x40\xda\x09\x29\x03\xcc\xf4\xb7\x8a" "\x39\xa2\x30\xe6\x2a\x0d\x6b\xd4\xc6\x31\x8b\xf4\xaf\x37\x0e\xc3\x67" "\x4f\xed\x09\x41\xa0\xa8\x2c\x0a\xac\xda\xa4\x96\xa6\xa8\x9e\x30\x84" "\xa2\x0d\x2b\x44\x31\x57\xe8\x49\xdc\x03\xd3\x4c\x3c\x5f\x1e\x0d\x1f" "\x80\x3a\x3b\x9b\x0a\xa9\x37\x27\xa1\x8e\x01\xed\xe1\x27\xe9\x1d\x0c" "\x9f\x97\xe9\x98\x0d\xfe\xf8\x14\x8d\x72\x91\xf9\x76\x3c\x51\x06\xed" "\xc0\xa5\x7b\x47\xd3\xd2\x59\x8f\x90\xc2\x6c\x04\x42\xe2\xc7\xec\xe5" "\xfb\xf9\x4d\xbb\x30\xfe\xf8\x4f\x38\x42\x42\xc1\x39\xc3\x45\x70\xf7" "\x6a\xd2\xb0\x94\x1d\xd4\xbf\x29\x16\xfd\xde\xd1\x69\x4d\xb8\xd9\x0f" "\x5b\x5b\x0d\xc7\x89\x6f\x17\xad\x0c\x87\xc2\xc8\x32\x05\xa7\xc5\xee" "\x5f\x8a\xe4\x2f\x90\x0c\xd7\x39\x29\xd6\x78\x9c\x61\x18\x8e\x83\xbb" "\xc0\x4e\xfc\xbc\xa8\x5d\x1f\xf9\x47\x1f\x6d\x53\x42\x4f\xe4\x0e\xc3" "\x7d\x0e\x4d\x8f\x23\x91\x4f\x33\x27\xa9\x77\x5f\x7b\xa4\x44\x1a\x46" "\x4d\x8d\x4a\x99\x2e\xc9\x19\x7b\x33\xb3\xf9\x44\xed\x43\x67\x25\x51" "\x67\x62\xdf\x48\xb1\xf5\xa9\xbe\xe9\x28\x69\xf4\xef\x14\xdc\xcf\xdf" "\x39\x23\xb6\x8f\x47\x26\xae\xc5\x1b\x0c\x77\x18\x28\x85\x7d\x83\x49" "\x14\x96\x7f\xf0\x8d\x99\x6c\x91\xfb\x5d\xd7\x75\x71\x9c\xfe\xa8\x4c" "\x00\x24\xa3\x85\x0b\x97\x58\x0a\xa3\x4b\x27\xa4\x9c\x3c\xdf\xba\x39" "\x22\x43\x1e\xff\x86\x20\x1a\xab\xac\x53\x64\xbb\x42\x22\x22\x6c\xd8" "\x25\x9b\xc4\x0d\x81\xf8\xa3\x4d\xa2\x9c\x7d\x4c\xe5\x15\x95\xc5\x5b" "\x4a\xa4\x15\x63\xe1\xc9\xe4\x1f\x97\xfd\xf7\x3e\xa1\xa2\x91\x85\x3a" "\xca\x13\xe1\xad\x1f\xb2\x54\xc8\xbb\x59\x7a\x0c\xa3\x00\x89\x59\x58" "\x61\xac\xad\x9b\x75\xcb\x0e\x41\xdf\x93\xdc\x79\xe6\x2f\xba\x2b\xca" "\xad\x6d\x22\xa4\x47\x8c\xc0\x88\x7c\x57\xb5\x73\x89\x1f\x4d\xd1\x6c" "\x8f\xc6\x36\x0a\xda\xc2\x36\x57\x7d\xe2\xb4\x28\x5d\xdf\x20\x70\xe9" "\x7f\xa3\x95\x9d\x8c\x32\xfb\x3c\x2f\x83\xa7\x28\xa0\xc2\x34\xbe\xd5" "\xab\xd8\x1d\xdf\x97\x57\x88\x90\xf4\x6e\x18\xdb\x9d\xe5\xc8\xda\x56" "\x06\x5c\xd4\xc8\x10\x6e\x9f\x44\x8b\x2e\x74\x0a\x28\x15\x67\xdd\x1a" "\x0d\xab\x81\x41\xcc\x72\x36\x24\x2b\x5a\x01\x08\xbe\x08\x17\xca\x9d" "\xd5\xcc\xf2\x5c\xe7\xf5\xcc\x5c\x82\xd7\x2f\x37\xa9\x0a\xa5\x8b\xa3" "\x11\x4e\xf8\x1c\xe0\xaf\x70\xb6\x31\x7f\x37\x9a\x64\x8c\x65\xfb\x9d" "\x4f\xd5\x3a\xae\x52\x03\x7f\xff\x7e\x56\xac\xa6\x44\xad\x5c\xda\x7f" "\xa1\x47\x76\x52\x59\x7a\xdd\x01\xef\x3a\x8f\x32\x49\x0d\xae\x09\x1d" "\x28\x94\x08\x97\x97\x1a\x96\x02\x80\x0e\xf9\xfb\x8e\x4e\x84\x94\xff" "\x9d\xa6\x35\x32\xcd\x03\xd1\x5c\x83\xcd\xb2\xef\xf9\x30\xc1\x2f\x7a" "\xed\xe7\x07\x37\xa6\x9d\xcc\x94\x68\x22\x45\x84\x8c\xa8\x04\x52\x93" "\x0e\xa7\x3a\x55\x3e\xeb\xf3\xe7\xec\x8b\xb5\x82\x78\x43\xd2\x78\xb0" "\x48\x35\xe7\xa8\xdf\xaa\xa6\x03\x00\xca\x1d\xe1\x5c\x91\x0a\xca\xf9" "\x01\x8d\xb6\x5a\x75\x19\x62\xb5\xe9\x7d\xc3\x60\x1b\xf4\x5a\xfe\x5d" "\x21\x96\xb6\xff\xa7\x1a\xd8\xfd\xe7\x9a\x65\xd5\xf3\xc3\x5a\xe9\xdc" "\x16\xc6\xed\xd8\x98\xdc\xb0\x17\x7f\x66\xff\xc1\xc7\xf5\xc8\xb8\x7e" "\xe8\x77\xb7\x22\x10\x1d\x2b\x72\x78\x81\x89\x94\xe9\x45\x3e\x7c\x91" "\xa7\x04\x68\xae\xa2\x03\x5c\xca\x73\xbb\x5a\xfd\xd6\x96\x33\x83\x0b" "\x54\xff\xac\x0d\x0a\x53\x2f\xd8\x07\xd0\x9e\x6c\x75\xfa\xc6\xfc\xfb" "\xee\xcd\xd4\x98\x3f\xab\x44\x9f\x71\xe3\x34\x11\x64\x19\x15\xdf\x53" "\x0d\xed\x7a\xff\xe3\xaa\xbe\xff\x62\x2a\x9c\x1e\x97\x33\xee\xd5\x1b" "\xaf\xe8\x87\x22\xf2\x58\x4c\xd2\xcf\xbf\x03\xf2\x5b\xb3\x89\x21\xa3" "\xfb\x6f\xcf\x82\xce\xc0\x57\xc2\x4f\x62\x65\x6f\x23\x52\xfb\xec\xfd" "\x10\xf1\x7b\x9e\xfc\xd1\xda\x58\xa6\x33\x54\xd5\x80\xd7\x57\x47\x37" "\xe7\x41\x0f\x3c\x4a\x91\x5e\x84\x45\xe8\x34\x4a\x63\xf0\x2e\xcc\x45" "\xf4\x46\x64\x1e\x5b\x37\xf7\xc1\x71\x5f\x9c\x92\x28\x1c\xe6\x50\x76" "\xa1\x9b\xad\x23\x43\x1e\xb5\xf4\x19\xe5\xa6\x8e\x99\x22\x28\xf5\xdf" "\x2c\x7a\x38\x35\xb2\x15\x61\x64\x83\xea\x34\x01\x82\x9c\xe7\x58\x83" "\x47\xa1\x40\x8b\xf4\x07\x4f\x42\x40\xdf\x84\x57\x04\x9f\xaf\x0a\x51" "\x1a\x1b\x39\x62\xad\xda\xd5\xa4\xd8\x0c\xe9\x9c\x86\xb6\xb9\x68\x7f" "\x56\xc4\xe4\x59\x9b\x25\x66\xbe\x12\x7d\x60\xc0\x20\x98\xd8\xbe\xcb" "\xa6\xfa\xe6\x85\xd5\x90\x1a\x52\xba\x10\xec\x3a\x8c\xdb\xd7\x76\xd7" "\x30\x3c\x40\x73\x7c\x8a\x2a\xcf\x73\x01\xda\xe2\xf5\x95\xf2\xda\xf1" "\x5c\xb6\x45\x47\x41\x7f\x7c\x43\xfa\x2d\xe7\x24\xab\x43\xb9\xd7\xca" "\x97\x15\x88\x28\x65\xc0\xc6\xb8\xf7\x55\xa2\x0a\xfb\x3b\x31\xd0\xd7" "\xbe\x25\x24\x51\x7a\xf4\xd3\xa2\x7e\x91\x54\x1e\x91\x07\xaf\xb3\x6b" "\x85\x09\x29\xaa\x83\x8a\xd3\x5e\xc2\x96\xe8\x71\xca\x70\x51\xce\x6d" "\x73\x38\x79\x7b\x91\x0b\x34\xe9\xb8\x97\x99\x59\xf9\xb8\x88\x51\x32" "\x11\x9a\xb3\x5a\xb0\x42\xcb\x7f\xd7\xb7\x40\x7f\x7d\xcf\xd4\x3c\xb9" "\x70\x46\x15\xa6\xf9\xfd\xda\x99\x60\xbd\xfd\xf2\xaa\x4d\xca\xb4\x2f" "\x2c\xb3\x9e\x92\x13\x7a\xc8\x07\x8f\xeb\x73\xd7\x5c\xb2\xe9\x4b\xad" "\xf5\x65\xfd\x95\x9e\x92\xd2\x5c\x4e\xd6\x5a\x39\xe1\xfe\x57\x95\xa3" "\x7a\x20\x9b\x2b\x79\xef\xc5\xfa\xa2\x76\xc0\x25\x30\xe1\x98\x7a\x4f" "\x5a\x09\x7c\x27\x6f\x41\x48\xab\x72\x31\xf3\x52\x29\x16\xa5\x7e\xf0" "\x9e\xde\xa3\xc0\x9a\xed\x02\xdd\x91\xc5\x74\x84\xf4\xaa\xd4\xe2\xd7" "\x54\xec\x77\xbc\x30\x60\xc9\xcf\xd4\x99\x3c\x64\x89\x6d\xbe\xf0\x0f" "\x1c\x22\x58\x4c\x7c\xe0\xa9\xf3\x66\x17\xcf\xf3\xce\xc7\xd2\x2e\xfd" "\xb6\x99\xe1\xd3\x10\x8b\x12\x92\x95\x8d\x88\x9c\x82\xc1\xc3\x7f\x55" "\x82\xd7\x40\x40\x3d\x9a\x6c\x86\x61\x7d\xcc\xd4\xe3\x82\x4c\x4d\x50" "\x0b\xbe\x6b\x2f\xc5\x05\xe0\x98\x37\x54\x2b\x44\x46\x42\xfa\xb8\x7f" "\xe5\x70\x13\x6f\xc2\xca\x96\xb9\x7c\x52\x3e\x7e\x21\xc2\x29\x09\x69" "\xb3\x6e\x3c\xa3\xb8\x79\xb5\x9a\x97\x47\x4a\xd3\x06\x09\xbf\xd1\xc3" "\x89\xb1\x7c\xa1\x2b\x0d\x1e\xbc\xa3\x01\x13\x79\x19\xcf\xd8\xff\x71" "\x70\xcf\x02\xec\x37\xeb\x09\x0a\x7f\xeb\x1b\xa5\xae\xf9\x64\x95\x5c" "\x85\x40\x73\xbb\x2a\x4e\xae\x40\x7a\x9d\xb3\x3b\x6d\x4a\xa3\x6c\x7b" "\x64\xb4\xe6\x87\x8a\x2d\x0f\x3e\xb3\x76\x9c\x51\x00\x97\xc7\xc9\x97" "\xd9\xeb\xb3\x00\xbd\xaf\x99\x60\x3b\x7e\xc1\x8e\x87\x44\x3a\x0b\x3e" "\x05\x41\x37\xcc\x55\xa1\x85\x2d\x0f\xd7\xf8\xfe\x34\x50\xcd\xd9\x63" "\x63\xd2\xe2\xeb\x8d\xde\x5f\xe9\x4d\x9d\x62\xbd\x36\x21\x5c\x37\x76" "\x20\x34\x61\x22\x5b\xc4\x17\xc8\x82\xca\x79\x2a\x39\x6b\x26\xe1\xc9" "\x81\xfc\x62\xe9\xa9\xce\x38\x66\xcd\xc0\x92\xba\x79\x3a\x0f\xf3\x3e" "\x0f\x4c\xae\xe9\x1b\xcc\xf2\xf2\xeb\xbb\xea\xb3\x05\x25\x1b\xe1\x33" "\x2d\xd2\x17\x72\x31\x22\x6f\x42\x15\x8e\x0c\xae\x1f\x49\xff\x07\xe1" "\x12\x18\xfe\x64\xbd\x45\x8c\x94\x2f\x7c\xe5\x0c\xe3\x24\x02\x4e\x73" "\x5c\xd1\x1a\x80\x20\xc2\xf1\x70\x25\x10\x87\x1e\xee\xfe\xbb\xaf\xfb" "\x2b\xe1\x63\x43\x3c\xae\xa1\x66\x4f\xf0\xbd\xab\x9a\x0a\x26\x54\x53" "\xa4\x4c\x2e\x26\xed\x22\x8a\xb6\x52\x55\x11\x09\x24\x1b\xa8\xae\xde" "\xf9\xce\xc0\xf7\xb4\xa5\xb4\x41\x76\x6e\xbd\x21\x04\x42\x49\x32\x4e" "\x4e\xb3\x81\xef\xa3\x06\xef\x14\x52\x96\xdb\x04\xd6\xd0\x14\x20\x41" "\xf0\xed\x12\xfc\x1a\x1e\x10\xb5\x4e\x39\xc3\xe6\x3c\xc3\x81\x8c\xfa" "\x1d\x4b\xf9\x6b\x10\xcc\x59\xa9\x7c\xab\x6e\x8a\xfa\x92\x6f\xf5\xe6" "\x6f\x38\x57\x65\x19\xde\x4b\xa0\x46\x62\x2a\x08\xd7\x09\xc0\x71\x4d" "\x22\xad\x49\x75\x96\xa5\x21\x64\xd0\x8c\x4d\x2e\x02\xbf\xbe\xb5\x9c" "\x49\x3a\x2a\xef\x64\xef\xfa\x7e\xe6\x97\x29\x2b\x0f\xcf\x04\x27\x8a" "\xa5\x2e\x51\xba\xa2\xcd\x5e\xdd\xb8\x21\xda\x1c\x2e\x7d\x37\x02\x30" "\x74\xfa\xce\xc2\xe0\x59\xb7\xc2\x15\x4c\x7e\xa8\x57\xed\x09\xb8\xf5" "\x44\x49\x04\xf2\xd4\x1c\xa5\x94\x18\xb7\x0b\x3f\xaf\xde\x37\xa5\x91" "\xd0\xe1\xa8\xfc\xc0\x76\x06\xd3\xf0\x43\x50\x8e\x2d\x26\xc1\x46\x5b" "\x23\xf2\xcc\xb9\xe8\xf1\x48\x9f\x23\xae\x09\x5b\x08\x28\xc6\x27\x77" "\x23\x5b\xc3\x70\x96\xb1\x98\xb6\xab\xd4\xfa\xd6\xaa\xc1\xc7\xc3\xe9" "\x61\x5f\xae\xac\x45\x94\x46\xe5\x1b\xfa\xf3\x5f\x72\xdb\x76\x78\xdf" "\x5b\xf4\xb0\x37\xdd\x78\x13\x2b\xd4\x0d\xe1\xcc\xc8\xbd\x63\x73\xd0" "\x34\x4e\x3f\x94\x3d\xbc\x16\x59\x7d\x24\x84\x0e\xc0\xbe\xfc\x7c\xbf" "\x69\x0c\x61\x56\x85\x3d\x41\x37\x03\x39\xee\x13\xa3\xdb\x83\x8a\x70" "\xe8\xba\x39\xe2\x6c\x6f\xda\xd3\x96\x9e\xe4\x2c\x10\x95\x3b\x44\xe6" "\x46\xd0\x86\x4a\x51\x46\x63\x56\xf7\x49\xf1\x42\xcb\xac\xd7\xf0\x4f" "\xc5\xb3\x05\x76\xbd\x4f\x4b\x7b\x6b\xa6\xb5\xd7\x3e\x69\xcf\x13\xae" "\x60\x24\xd3\xee\xac\x63\xb2\x52\xa9\x05\x34\xed\x91\x88\x85\x62\x9d" "\x5a\x41\x69\xed\x76\xa9\x1f\x3b\x33\xa9\x8b\xbe\x9f\xd1\xc2\xaa\xed" "\x88\x53\x45\xaa\xdb\x80\x94\xa8\x77\x4b\x2d\x85\xb1\x4f\x42\xbf\x52" "\xd9\x54\x6f\xcc\x58\x55\x09\xcb\x28\x5c\x8e\x55\x81\xe3\x63\xbf\x8c" "\x5d\x83\x39\x81\x39\x7d\xaa\xb7\x59\xdd\x16\x15\x82\x42\xa0\x09\x75" "\xa5\xdd\xa9\x3f\x70\x95\xab\x2c\xd9\x52\xc3\x4a\x45\xf0\x16\x04\xfb" "\x32\x56\x0e\xb8\xd3\xb8\x74\x3b\x24\xbe\x1d\xb3\xf2\xff\x09\xac\xd4" "\x3a\x82\xdb\x19\x57\x4b\xaf\x7e\xc1\x80\xe5\x80\x7c\x3d\x8a\xe8\x82" "\x3c\x3a\x23\x45\x3b\x10\xdc\xd1\x21\xd1\xb6\xc3\x57\xa7\x24\xb0\x6c" "\xb7\x99\xc5\x7c\x6c\xd8\x4e\xbf\x20\x2a\xed\x31\x6e\xbf\x89\x60\x94" "\xab\x4d\xe7\x9c\xf2\xc8\x2b\x18\x51\xef\xef\x14\xf9\x9a\xd4\xd6\xa4" "\xf3\xa3\x90\x55\x23\x4a\x6a\x35\xa2\x7d\x2c\x65\x20\xd8\xbc\x61\x39" "\x05\xf6\xa1\x91\xd3\x6b\x4a\x25\x5b\x05\x88\x62\x70\x75\xf5\x03\xaa" "\x32\xda\x2b\x5f\xf3\xf4\x8d\xc9\xd1\x52\x4e\xdf\x57\xf1\xf8\x7f\x80" "\x94\xe7\x37\xd5\x3a\x0f\xf1\xfe\x61\x1e\x9d\x45\xe7\x18\xdb\xfd\xdd" "\x71\x4f\x6a\x58\xcb\xcf\x58\x70\x96\x14\x55\x93\xd1\x0d\x2a\xc6\xc8" "\x53\x15\x66\x49\x5d\x6a\x85\xb6\x95\xf3\x37\x82\x3c\x44\x0a\x74\x05" "\xa3\x4a\x55\xbc\x84\x52\xae\xf5\x0b\x48\xca\xcc\xaf\x8d\xe4\xbf\xc5" "\x0c\x99\x08\x93\xe3\x9f\x66\xd1\x6c\xf8\xd7\x28\xa3\xfd\x49\xad\xcf" "\x1f\x33\xfd\xec\x78\xc7\xe0\x03\x5e\x97\x52\x75\xc4\xb9\x3a\xc8\xd9" "\x6b\xa9\x24\x7f\xe3\x63\x85\x81\xc0\x1a\x4f\x63\x38\x2f\x8c\x15\xa0" "\x1b\xc6\x41\x7a\xcb\xbd\xc4\xad\xec\x97\x08\x60\x94\x7f\x1a\x06\x69" "\xea\x2d\xd4\xf5\x50\xfc\xe4\x84\x0a\x28\xe5\xa7\x59\x21\x51\xc3\x4e" "\xa1\x98\x5f\x93\x3a\x31\x68\xde\xfc\xf9\x82\x16\xf4\x77\x0b\x4d\xc9" "\xdb\xf3\xfc\x39\x92\xb9\xb9\x33\xbe\x2b\x8a\xab\x07\xa1\xab\x17\x85" "\x88\x5c\x2d\xdd\x34\x78\x17\xfe\x9d\x58\xd0\x7f\x02\x4f\x68\x85\x20" "\x0a\xb1\x21\xd8\xdf\x43\x56\x59\x3e\x12\x35\x4b\x38\xec\x66\x8e\xbe" "\x96\x3b\x43\xb4\x03\x2c\xa6\x73\x5e\x68\xa4\xa4\x88\x7b\x9c\x2d\xf8" "\xeb\x9e\xac\x4c\x65\xce\x41\xf5\xe7\x22\xc9\x71\xc4\xcf\x24\xa2\x49" "\x3f\x78\xc0\x46\x59\xe7\x53\x00\xa4\x48\xca\x2d\x3a\x4c\xa2\x30\x5d" "\xf9\xa8\x13\x0b\xe2\x1c\xdb\xb9\xbb\xc4\x91\x6d\x79\x35\x57\x70\x3a" "\x9a\x88\xa9\xe8\x7c\x4f\xdd\x19\x2e\x93\x90\x14\xfd\xdd\x6e\x80\x4c" "\x05\x95\x4c\x69\x82\x4c\x7d\x29\x91\x18\x7e\xa7\x6b\xf6\x7d\xed\xe1" "\x74\x7e\x1d\xeb\x5b\x68\x7e\xbe\x8b\x47\x8c\xb0\x13\x80\x13\x2e\x10" "\x0b\x70\xef\x00\xdc\xd5\xe1\x32\x7e\x44\xe9\x26\xed\x57\x02\xbf\x6b" "\x1e\x6b\xae\x69\x92\x2d\x9e\x1e\x6c\x2d\xab\x00\xd5\xe9\x8c\x28\x75" "\x3c\x1d\xfb\xce\x84\x17\x51\x16\x0a\x46\x7d\xed\xbd\x79\x99\x79\x8c" "\x4a\x3a\x02\x75\x23\x57\x7c\x63\x7f\xae\x42\xf5\xe8\xe7\xc4\xc5\xe1" "\xe9\x7f\xd6\x4b\x40\x7d\x82\x95\xd4\x4c\xe7\x38\x81\xad\x90\x1e\x1c" "\xa4\xab\x64\x88\xf0\xc8\x87\xe9\xc1\x5f\xb9\x0f\x74\x78\xb0\x8c\x86" "\x46\x86\xaa\x56\x17\xa8\xcf\x3b\x76\x5f\x34\x00\x51\xe5\x4b\xea\x87" "\x1b\x34\x89\x07\x30\xf7\xc2\x5c\xef\xb4\x5c\xcb\xb2\x58\x5e\x20\x59" "\xd9\x7f\xec\x45\x96\xfd\xf7\x48\x59\x47\xbe\x09\x85\xbb\xc7\x7f\xe5" "\x0a\x46\xba\x04\x35\xe9\xac\x22\xb1\xe9\x51\x26\xe0\xc3\x9f\xe2\x68" "\x09\xc7\x6f\xce\x1e\x1c\x92\x98\x9c\x0c\xd3\x36\x28\x5d\x95\xa1\x0e" "\x21\x8e\x37\xe0\x71\x47\x18\xc2\xbf\x2e\xa8\x5e\xd9\x88\x33\x3e\x23" "\x25\x24\xc0\x64\xfb\xd2\x31\xd5\x54\x8f\x9a\x36\x60\x1d\xc6\xac\x93" "\x85\x05\xbd\x4b\x65\xa9\xb5\xfe\xf2\xea\xf4\xca\x1a\xf3\x7e\xff\x53" "\xb7\x4f\xba\xa7\x6f\x0a\xaf\xed\x9e\x87\x1b\x29\xd9\x45\x22\xdd\xe0" "\xd5\x02\x48\xee\x3d\xa9\x47\xd5\xb0\x83\xc7\x0d\x45\xfb\xb7\xe8\x69" "\x20\xfc\x6e\x50\x1e\x79\x1a\xc8\x4a\x59\x41\xc7\x98\x3d\xc1\x5b\x8b" "\x3a\x77\xdb\x44\x7d\xe7\xc1\x6f\x2b\x96\xf4\x73\x54\xeb\x4f\xd5\x86" "\xdf\xc2\xd3\x90\xc2\xbc\x9a\x8d\x5a\x15\xbb\x82\x91\x07\xce\x55\xfd" "\xde\xf8\x30\x0d\xbd\xee\x24\x2b\xf1\x63\x6d\x07\x02\x81\xef\x58\xa8" "\x80\x50\x50\x43\x44\x18\xa5\x26\x92\x1d\xfa\xb7\x58\xb4\xab\x7c\x97" "\xe3\x84\xaf\xc2\x1f\x42\x3d\x4c\xa2\xfb\x28\x92\x7b\x1d\x9d\x2f\x70" "\xe9\xcb\x08\x6b\x71\x67\x0b\x07\x6b\x02\x74\xd5\x1c\x17\x27\xc5\xb6" "\x45\xdf\xe1\x75\x9e\x38\x57\x56\xdc\x0a\xba\xc6\xb6\xe0\x2d\x54\x70" "\x55\xbd\x03\xf7\x6d\x7c\xa4\x50\x69\xab\x0b\x0d\xab\x1e\x1b\x5b\xba" "\x17\x72\x25\xb6\xfe\xb7\xff\xa1\x99\xbc\x36\x1a\x02\xd4\xc0\xd9\x74" "\x21\xc2\xfb\x2e\xf9\xa9\xc8\x9a\x39\x47\x23\x59\xbe\x85\x8b\x73\xd5" "\x87\x39\x8c\xd5\x39\x42\xc7\x1b\x11\x27\xb3\xc8\x69\x8b\xa9\x0b\x1e" "\x66\x7c\x7d\xff\x76\x30\x1d\x69\xc1\xba\x1d\x59\xcc\x9c\x60\x7b\xb0" "\xc0\x2b\x78\x1c\xb4\x09\x4e\x3e\x7a\x8e\x18\xed\xb5\xb8\xa0\xcb\x65" "\x22\xf8\x44\xa2\xca\x38\x7c\x73\xbd\xc3\x29\x65\x68\x52\x05\x68\x37" "\xc7\x29\x02\xed\x37\x08\xd7\x81\x21\x52\xb4\x24\x06\xed\x0e\xc3\xcb" "\x85\xfb\xb6\x2a\x15\xaf\xe7\x94\xfe\xa2\xc9\x7c\x61\x20\xe6\xa9\xd7" "\xdb\x18\x91\x09\xd7\x0e\xfc\xbf\x4d\x9a\x17\x40\x79\xe9\x37\xb9\x58" "\xd2\x5d\xeb\x65\xa8\x40\x64\x06\x84\xd8\x02\x9d\xf7\x0f\x25\xba\xb1" "\x66\x5d\xb7\xbc\x55\x4a\x9e\x37\xab\x04\x92\x7e\x12\x72\x71\xef\x34" "\x7d\x62\x82\xcf\x87\x2d\x3e\x93\x7d\x95\xdd\x66\xd6\xc3\x62\x14\x0f" "\xc5\x81\xa3\x1c\xf0\xcb\x43\x13\x35\x2f\x24\x9e\xce\x98\x19\x6b\xb4" "\x88\x3a\xe1\x12\xb2\xee\x54\xc9\x80\x05\x7c\x01\x1f\x56\x1a\x9c\xe9" "\x0e\xc2\x43\x60\x23\xe0\x2e\x3f\x3d\xa0\xcf\x9c\xb0\x35\xb6\x78\x94" "\xed\xd8\x52\xd7\x44\x55\xb4\x25\xfe\xfa\xc9\x27\xb1\x57\x83\xa3\x4c" "\x83\x9e\x5b\xe6\x16\xb7\xc7\x74\x1a\x4a\x49\xbc\x60\x88\x7f\x16\xf0" "\x1d\xf1\xfe\x71\x8d\x2e\xa9\x19\x7f\x84\x32\xab\x74\xf3\x0f\x92\xa3" "\xcc\x49\x95\x7b\x89\x95\x0d\x79\x73\x70\x48\x0d\xa2\xe9\x78\xef\xa1" "\x1b\x5e\xc4\xd7\x47\x35\x3a\xa3\x24\x89\x3a\x03\x64\x13\x56\x65\xb0" "\x9a\x6d\x4e\x29\x05\x05\x30\x2f\x01\x1a\x70\x80\xf6\x7d\x28\x6e\xe9" "\x82\xb4\x90\xe1\xae\x9e\x6f\xa4\xd0\x52\x64\x38\x86\xf7\x89\xe6\xda" "\x7e\xe0\xeb\xc2\x1b\xe0\x66\xb1\x09\x55\x90\xd7\x4a\x2b\xad\x72\xbe" "\x9d\xb6\xd0\x0a\xba\xb0\xe5\x47\xb2\xc4\x4e\x5d\x01\x66\xde\x32\x0f" "\x81\x90\x16\x83\xf4\xcc\xd9\x17\xb3\xcc\x9a\x6b\xf7\xc9\xa4\xde\x29" "\x63\x82\x4b\x8a\xed\xc4\x6a\x3e\x4b\xa6\xb5\xe2\x72\xf9\x57\x14\xf8" "\x5a\xad\x33\x67\x40\x1c\x57\xe3\x32\x63\xec\xfb\x9e\x0f\xe1\xc2\x0d" "\xae\x98\x2b\xcd\x28\xc8\xf4\xd7\xd1\x3f\xf0\x68\xa0\x4e\x9e\xa7\x92" "\xf6\x87\xf1\xcf\xb3\xe5\x3f\x97\xff\x85\x04\xab\x7e\x91\x6c\xaa\x2e" "\x71\x22\xc8\x3c\x27\x6e\x70\xe5\xd1\x4f\x5b\x7a\xdf\x18\x87\x27\x5a" "\xd7\x32\xed\x34\xc4\x91\xe7\x30\xc1\x2d\xf8\x77\x1d\x00\x86\xfa\xbd" "\xac\x93\xfe\xe5\xf5\x3e\x0c\x0c\xda\xa9\x76\x61\x0a\x36\x06\x46\xc3" "\x8e\xc1\xea\xfe\xe2\x3f\x49\x42\x92\xb7\x7a\xba\xa6\x2b\x90\xeb\x87" "\x58\x28\xf8\x69\x74\x02\x03\xc5\x31\xa7\x4a\xe9\xf1\x53\xd4\x84\x31" "\xdb\x23\xa0\x71\x85\x43\x5c\xc4\x5a\xa0\xc4\xb8\x63\x5f\xec\x6f\x5c" "\x1d\xc0\xaf\x2e\x82\x52\x43\xe6\xc2\x3f\xe5\xf5\x1a\xd6\x39\x0d\x63" "\x67\x9a\x0e\xe8\xe6\x3b\x20\x32\x03\xc1\xf3\xe5\xa2\xb8\x78\x57\x67" "\x92\x4a\x4e\xca\x29\xd1\xf7\x2d\x2a\x5c\xc6\x3a\xbf\xbf\x83\x5f\x1f" "\x1c\x46\xfb\xfd\xea\xcf\xa9\xd0\x3c\xb3\x60\xaf\x3e\xc6\xa9\xad\xe9" "\xef\xba\x20\x92\xc5\xd8\x0a\xb2\xe3\x12\x3f\xff\x1e\x2c\xdf\xfa\xe6" "\x19\xcf\xce\x90\x11\x0c\xba\x8f\xcf\x53\x97\xff\x8d\xf0\x0e\x46\xa9" "\x62\xdf\xf5\x08\x4e\x17\x29\xd3\x90\x51\x0e\xec\xaa\x9b\xfc\x44\x4b" "\x00\x32\x2f\x54\xb9\xf4\x41\x5e\xd1\x41\x26\xb7\x81\x99\xc5\x0c\xd7" "\xbd\x95\x2c\x29\x6f\xf2\x44\x56\xf8\xb7\xe9\xc8\x43\xb8\xdf\xa8\x7f" "\xa1\xf3\x46\x3f\x69\xca\x26\xb8\x80\x36\x3f\x5c\x7e\xdb\x7c\xd2\x53" "\x6f\xd5\x28\x4c\x14\x2a\x0b\x68\xf5\xf6\x09\x0c\xe0\x3d\xcf\x43\x7c" "\xa4\x75\x6a\x99\x38\x56\x0f\xfa\xa3\x33\x1d\x2d\xf4\x7f\x83\x55\x81" "\xea\xeb\x27\x7c\x7a\xd2\xa4\xe2\xd0\x3c\xbe\x85\x26\x8c\xda\x22\x36" "\x8e\xd1\xd5\x20\x2d\x07\xde\x18\xdb\xab\x23\x2e\x42\xe1\x0d\xa3\x9d" "\x75\xac\xf2\x79\x6f\xf0\x03\x23\x1c\x4b\x44\x33\xf7\xb3\x96\x35\xa8" "\x11\x0a\x63\xde\x12\x54\xdf\x0c\xfa\x10\x19\x59\xa6\x3b\xb2\xc4\xb3" "\xb2\xd2\xe6\xad\x28\x4c\x79\xf4\x3d\x45\xe3\x31\x78\xb9\x32\x20\x24" "\x1b\x2f\x0e\x29\x32\x30\xf8\x80\xba\x82\xd8\xe4\x02\x93\xb7\xea\xe4" "\x95\x3c\x63\xce\x4f\x5b\x7c\x6b\x21\x39\xef\x69\x06\x09\x55\xff\xe8" "\xb5\x2a\xc0\x6f\x6d\x32\xdc\x4b\xb9\xb5\xa2\x02\xca\x9c\x8b\x80\xf4" "\x1f\x29\x5e\x44\x1b\xff\xdc\x6e\xc6\x3a\x78\xef\x99\x8b\x7a\x09\x00" "\xec\x49\xfe\xd0\xaa\x82\x8d\xb0\x0c\xf8\xc2\x81\x81\x41\x80\xef\xf4" "\x47\xd1\x84\xc5\x5b\xb2\x4f\xb0\xca\x1a\x38\xe9\x6b\x8a\x86\xbe\x60" "\x2b\x66\xe3\x38\xaa\x4a\xcb\x8c\x89\x7e\xb4\xe5\x55\x38\x6a\xd0\xc6" "\x88\xa2\xdc\xdf\xee\xbe\x50\x45\xbd\xd6\xea\xf8\x49\xd4\xcf\x62\x9c" "\x4b\x7a\x0a\xf9\x0b\x03\x36\x1d\x82\x25\x14\x68\xc0\x00\x26\x07\xbf" "\x18\xd9\x13\x74\xf2\xca\x0c\x7d\x61\x4d\x0a\x01\x66\x8d\x70\x36\x83" "\x99\xfb\x59\x9d\xfd\x25\x52\xad\x09\x85\xf5\x2b\xdb\x8d\xab\x50\x7e" "\x4a\xdf\xc3\xf8\xbb\x6a\x3b\x45\x30\x6e\xe4\x51\x7c\xad\x7d\xa9\xd5" "\x1c\xce\x69\xd4\xa6\x32\xb3\x5c\xa9\x48\x56\x51\xa0\x65\xa9\x49\xcb" "\x0b\xe6\x92\xc4\xc9\xca\x6a\xe3\x3b\xa4\x73\x9e\x0a\x29\xa0\xcb\xfa" "\x39\xf9\x3a\x25\x0c\x0b\xcc\xfc\x0c\x80\x0a\xd7\x05\x3a\x3a\x97\xb9" "\xf2\xbe\xdf\xc0\x57\x9f\xad\x84\x2b\x44\x8c\xa6\xbf\x3a\xa4\x30\x03" "\x63\x64\x71\xa0\xe0\xac\xeb\x9f\xac\x4b\x6d\x5f\x3c\x2b\x8b\x21\x5e" "\xe7\x99\x02\x95\x76\x99\x44\x6e\xbe\xf5\xbe\x20\x45\x2a\xa9\xc7\x85" "\x2c\x11\xef\x1a\x10\x32\xeb\x3f\xaa\xa5\x24\xff\x20\x8b\x4b\xb9\x02" "\x46\x62\x10\x20\x84\x00\xf4\xf6\x44\xff\x47\xdb\x57\x34\x9a\x62\xf0" "\x3c\x0d\x7b\x01\x91\x9e\x67\x2f\x69\x85\x4f\x29\x14\xcc\x90\x4b\x18" "\xc6\x3e\xff\xae\x22\x21\xec\x0e\x70\x4d\x79\x58\x06\xb2\x86\x83\xa8" "\x2f\xd4\x36\x20\xec\x0a\xf9\x0a\x52\x32\x2c\x9d\xd4\x10\x58\xfc\x95" "\x9f\x92\x54\xc0\xf1\x2d\xbd\x6e\x72\x9c\xd1\xd0\x11\x19\xa3\x5f\x74" "\xa8\x05\x09\xda\x4d\xa2\x03\xc3\x0d\x90\x6b\xbe\xca\x9f\xf5\x2e\x55" "\xd6\x41\xac\xa4\xc6\x01\xb7\xb7\x19\x5d\x92\x56\x01\x98\xbc\xc5\xf0" "\x78\xda\x5a\x2a\xde\x23\xdd\xd4\x47\xcf\x91\xcd\xe8\x71\xb9\xd5\xc0" "\x71\x8f\x35\xbb\xb0\xa4\x33\x7e\xfe\x0f\x16\x63\xf2\x6f\xf4\xbc\x13" "\xa0\x42\x87\xea\x0a\xe5\x8f\x31\x37\x26\x1a\xa9\xc0\x75\x8e\xf6\x5e" "\xf5\x17\x4e\x88\xba\xd2\xd6\x4a\x20\x0a\xe8\xf0\x42\x80\x93\x3a\x03" "\x51\x49\xf4\xde\x58\x29\x38\xc1\x7c\x90\xd6\x8c\xc1\xf1\x62\xb6\x11" "\x8c\x97\xa0\xaf\xfd\x16\x25\xd4\x10\x05\x67\xc2\x35\x91\x0f", 8192); *(uint64_t*)0x20004bc0 = 0; *(uint64_t*)0x20004bc8 = 0; *(uint64_t*)0x20004bd0 = 0; *(uint64_t*)0x20004bd8 = 0; *(uint64_t*)0x20004be0 = 0; *(uint64_t*)0x20004be8 = 0; *(uint64_t*)0x20004bf0 = 0; *(uint64_t*)0x20004bf8 = 0; *(uint64_t*)0x20004c00 = 0; *(uint64_t*)0x20004c08 = 0; *(uint64_t*)0x20004c10 = 0; *(uint64_t*)0x20004c18 = 0x20004600; *(uint32_t*)0x20004600 = 0x90; *(uint32_t*)0x20004604 = 0; *(uint64_t*)0x20004608 = 0x7fffffff; *(uint64_t*)0x20004610 = 3; *(uint64_t*)0x20004618 = 1; *(uint64_t*)0x20004620 = 6; *(uint64_t*)0x20004628 = -1; *(uint32_t*)0x20004630 = 0x80000001; *(uint32_t*)0x20004634 = 9; *(uint64_t*)0x20004638 = 5; *(uint64_t*)0x20004640 = 0x401; *(uint64_t*)0x20004648 = 4; *(uint64_t*)0x20004650 = 8; *(uint64_t*)0x20004658 = 6; *(uint64_t*)0x20004660 = 7; *(uint32_t*)0x20004668 = 5; *(uint32_t*)0x2000466c = 9; *(uint32_t*)0x20004670 = 2; *(uint32_t*)0x20004674 = 0x4000; *(uint32_t*)0x20004678 = 0x7f; *(uint32_t*)0x2000467c = r[2]; *(uint32_t*)0x20004680 = r[3]; *(uint32_t*)0x20004684 = 0; *(uint32_t*)0x20004688 = 9; *(uint32_t*)0x2000468c = 0; *(uint64_t*)0x20004c20 = 0; *(uint64_t*)0x20004c28 = 0; *(uint64_t*)0x20004c30 = 0; *(uint64_t*)0x20004c38 = 0; syz_fuse_handle_req(/*fd=*/r[0], /*buf=*/0x20000040, /*len=*/0x2000, /*res=*/0x20004bc0); break; } } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=*/7ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); setup_sysctl(); loop(); return 0; }