// https://syzkaller.appspot.com/bug?id=53895c6dc108002886cc914d5a92e641f7679e79 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[2] = {0xffffffffffffffff, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "./file0\000", 8); syscall(__NR_mkdirat, 0xffffff9c, 0x20000000ul, 0ul); break; case 1: memcpy((void*)0x20000180, "/dev/fuse\000", 10); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000180ul, 0x42ul, 0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x200020c0, "./file0\000", 8); memcpy((void*)0x20002100, "fuse\000", 5); memcpy((void*)0x20002140, "fd=", 3); sprintf((char*)0x20002143, "0x%016llx", (long long)r[0]); memcpy((void*)0x20002155, ",rootmode=00000000000000000040000,user_id=", 42); sprintf((char*)0x2000217f, "%020llu", (long long)0); memcpy((void*)0x20002193, ",group_id=", 10); sprintf((char*)0x2000219d, "%020llu", (long long)0); syscall(__NR_mount, 0ul, 0x200020c0ul, 0x20002100ul, 0ul, 0x20002140ul); break; case 3: res = syscall(__NR_read, r[0], 0x200021c0ul, 0x2020ul); if (res != -1) r[1] = *(uint64_t*)0x200021c8; break; case 4: memcpy( (void*)0x20004200, "\x0f\x08\x65\x7e\x53\x21\x94\x1d\x9e\x73\x82\x1e\x99\xbd\x38\xd1\x6a" "\xc8\xdc\x09\xbd\xcc\x24\x74\x59\x22\xcd\x80\x1b\xda\xd1\x3c\x91\x00" "\x06\x7a\x76\xff\x63\x63\x46\x25\xd1\x48\xe2\x0c\xb7\x87\x08\xdb\xbf" "\x61\xef\x32\xc4\xff\xae\x6f\x5e\x1c\x54\xd0\x01\x89\x90\x30\x69\xb9" "\x3e\x34\xa4\x30\x63\xb4\x8e\xe5\x65\xe8\xfa\x19\x71\xdc\xd3\xc6\x18" "\x30\x22\xa2\xba\x79\xe0\xaa\x23\xde\x4e\xe3\x57\xca\xb6\xc8\xc2\xd9" "\x65\x06\x7f\xe8\x6e\x1a\x68\xc2\xe9\xe7\x6a\x98\xfe\xf1\x02\xe4\x95" "\x36\xcf\xdd\x65\xbd\x6e\x75\xf5\x97\x19\x6f\xab\xfd\x31\x97\x72\xdc" "\xf3\x29\x62\x00\x49\x9d\x1f\xf4\xba\xf7\xcf\x9b\x60\x3a\x5a\xf8\xbe" "\x97\x86\x01\xab\x02\xf7\x8c\xcf\xb1\xa4\xf2\xf7\x35\xb0\x51\x7a\x2b" "\x9e\xf5\xd1\xe7\x35\xf7\xf2\x5f\xf9\x96\xbb\xe0\x87\x14\x44\xad\xf0" "\x89\x2f\x78\x1d\x05\x89\xf3\xd9\xcc\x60\xd6\x2f\x63\xbc\x89\x14\xd7" "\x4b\x03\x76\xa3\x75\xd8\xe1\xf2\x6b\x68\xe5\xa1\x83\x0e\x86\xf4\xaa" "\xe6\xb7\x6c\x9f\x5d\x61\x5a\xcf\x8f\x2d\x64\x2e\x0c\x02\xdb\x85\x0e" "\x1f\xee\x05\x33\xcc\x62\xf7\xaf\x57\xa5\x9c\x1d\x2f\x7a\xd0\x43\xcc" "\xcc\x1d\x4e\x8b\x3f\x4a\x19\x8a\xb1\x67\x93\x89\x24\x25\xe1\xe5\x32" "\x33\x3d\x06\x99\xb1\xb1\x68\x94\x34\x46\x5f\xef\x38\xc1\xa4\x06\xff" "\xa3\xb6\x10\xe3\xfd\xc0\xdb\x3d\x84\xb8\x9c\xf7\x33\x89\x16\x94\x87" "\xb7\x5d\xe4\x08\x9a\xf8\x94\x2d\xfd\xa4\x80\xfa\x7f\x3d\x03\x4d\x0e" "\xcc\xc1\x91\xaf\x4c\xb5\x1a\x1c\x20\xcd\x67\x26\xf8\xdb\x99\xe4\x65" "\x56\x1f\x4d\xe2\xa4\x36\xf1\x58\xa1\x11\xed\x12\xcd\xb8\xa3\xdd\x40" "\xcd\x03\xf0\x24\x23\x43\x5e\x97\x65\xaf\x80\x5b\x04\x01\x18\x09\x4d" "\xbf\x24\xd0\x4f\xf0\x54\x18\xec\x7f\x41\x0a\xa5\xa2\x3e\x88\x39\x00" "\xa0\xf4\xd2\xf5\xa3\xc3\x47\x26\x9d\x40\xd3\x7c\x47\xf7\x38\x6a\x03" "\x59\xe3\xd2\x5e\xfb\xc6\x52\xab\xd7\xc5\x07\x5e\x56\x46\xb1\x31\xb4" "\x1e\xaf\x60\x1b\xc7\xb7\x97\xa7\xaf\x7a\x21\xa8\xbc\x1f\x22\xc9\x60" "\xa0\x9d\xaf\x4a\xc1\x75\x3b\x46\xbe\x69\x3a\x9b\x92\xe7\x52\xe2\x10" "\x07\x96\x1e\xe8\x92\x19\x96\x2c\x95\x75\xb2\x5d\x7c\x53\x83\x8d\x01" "\xde\x50\x98\x0c\xb2\x58\xe2\x9f\x13\x04\xe3\x6a\x42\x5f\x1c\x0c\x31" "\xda\xa9\x22\xae\x79\x53\xd7\x0b\x6d\x7b\x78\xb9\x47\xb6\x03\xed\x78" "\x32\x18\x42\x28\x74\xd3\x5f\xa1\xb4\x5d\x72\x0f\xe2\x1a\xcf\x76\x31" "\xef\x97\x0a\xce\x6d\xf4\xd5\x5a\xdd\x89\x0f\x26\x54\xb3\xb3\xd0\x74" "\x66\xd5\xa6\x80\x01\x54\xce\xce\xca\x67\x09\xda\x02\x41\xca\xb8\x2d" "\x55\x47\x48\x1b\x7c\x19\x6e\x83\x89\xe8\xc2\xb1\x22\x8e\xc0\x2b\x39" "\x96\x42\xf2\x5d\x78\x13\xd9\x04\xe6\xfa\xed\xc2\x84\xc3\xcf\x79\x2c" "\xa6\xa4\x92\x45\xd6\x59\xe6\x28\x83\x12\xe5\x5d\x36\x00\x41\x18\x37" "\x87\xeb\x3d\xeb\x56\x27\x55\x8a\x16\xd9\xe2\x57\xda\xa9\xc1\x60\xaa" "\x65\x41\x5d\x13\xf2\xa3\x5e\x39\x69\xa2\x40\x80\x61\x7e\x78\x17\x6d" "\xb0\x06\x49\xa1\x97\xd3\x60\xcf\x73\x87\x1d\xca\x06\x92\x70\x4d\x38" "\xae\x0f\x53\xee\x4a\x73\xc4\xd0\xb7\xce\xa9\x8c\xbb\x7c\x9b\x68\xce" "\xb7\xe7\xc9\x38\x46\xf5\xdf\xc3\x88\xab\x8c\x20\x8f\x78\xe9\x6b\xaa" "\x94\xc8\xd2\x3e\x6a\xab\x0e\x62\x5e\x77\x3c\xfa\x0e\xc3\x9f\x0b\x37" "\x7a\x08\x5f\x98\x31\x2b\x0d\x3a\x37\xc1\x4d\xd0\xd1\x62\xc5\xb7\x9f" "\x7e\x7d\x8c\xb5\x01\x02\xc5\x94\x5d\x2d\xe8\x8e\x51\xa6\xb6\x83\xd7" "\x9f\xfd\x45\x53\x03\x81\xf3\x43\xd9\x6e\xfc\xa1\x01\xc8\x61\xc8\x0e" "\x28\x67\x79\xd3\x52\x6b\x4b\x0c\xbb\xbe\xf5\xa4\x58\x3c\x88\xea\x23" "\x6f\x25\x78\x3c\xbe\x2f\xb3\xe6\xb6\xf9\x0a\x62\x99\x12\x93\xec\x7b" "\xba\xe2\x71\xd6\x2f\x43\x24\x39\x16\x66\x9e\xe7\x72\x58\x2a\x57\x45" "\x4c\x47\xc7\x12\xe8\xe7\xf6\x52\xdc\x51\x5b\xb4\xc0\xba\xae\x69\x15" "\x8e\xaf\x17\xd8\x49\xe0\x47\x7b\x85\x64\x6e\xd0\xd1\x11\x93\xf3\xf7" "\x9c\x8d\xf1\x4a\x02\x14\x31\x08\x7e\xb7\x3d\xba\x8f\xa1\x11\x5a\xb8" "\x77\xbf\x2e\x44\xad\x69\xe2\x0b\x4d\x65\xf8\x18\x91\x74\x07\xda\xc9" "\xe9\xef\x7f\x71\x32\xb5\x16\x8e\x4c\xba\xe0\xe2\xfb\x91\xb9\xa4\x5e" "\x6a\x40\x7f\xe1\xcb\x8e\x9a\x92\xc3\x7f\x36\xc7\x37\xbe\x62\x80\xb1" "\x65\x44\x34\x47\x46\x17\xce\xe0\x0d\x77\xd4\x2b\x97\xc7\x23\x20\x99" "\xee\xc9\x2b\x74\xbc\xb2\x99\xbc\xac\x51\xb2\x0f\xe3\xdb\xca\x7e\x0d" "\x05\xa8\x40\x6a\x49\x34\x08\xac\x7b\x2b\x88\xcd\xed\x93\x69\x0d\x8e" "\xee\xf3\x60\x38\xed\xea\x06\x12\x63\x76\x80\x8a\xba\x32\x93\xee\xfc" "\x8c\x93\xf5\xde\xda\x3c\xd1\xb0\x78\xbf\xfb\x4e\x70\xc6\x34\xbb\x5a" "\x62\xc6\xa3\x2a\xf5\xd5\x7f\x0d\x8b\x96\x97\xec\xe7\x35\x78\x15\x7f" "\x9d\xf1\xa9\x1d\x18\x0b\xe0\x4a\x89\x8a\xa0\xb1\xbf\xb1\x28\x7c\x8f" "\xc5\xc0\x0e\x28\x4e\x74\x14\x07\x2c\xde\x88\x56\x45\xf5\xeb\xd2\xac" "\x98\xab\x6b\x37\xa6\xf9\xcb\x45\xce\x08\xdc\x1b\x6a\x30\x31\x7b\x7f" "\x95\x51\x0f\x06\x4c\xe2\xa1\xa0\x8d\x99\xf4\xa0\xc5\xc2\xf1\x36\x09" "\x9e\x2e\xe7\xdb\x17\xcb\x51\x38\xb2\xf9\x5d\x8c\x8e\x6a\xdc\x5c\xe3" "\x69\x66\xbb\x84\x53\xc2\x9a\x8e\x31\x89\x52\xe6\x03\xea\x53\xbc\x68" "\xca\xfb\x2f\xa5\xa7\x74\x24\x14\x23\x4e\x2d\x6f\xa9\x26\xac\xe0\xc8" "\xad\x4d\x1a\x0c\xcd\xbc\x90\x37\xbe\x01\x35\x6c\x7f\x66\x1b\x87\xdc" "\x1e\xb7\xbe\x49\xd9\x3b\x90\x19\xcf\x16\x72\x0d\x37\x42\xd9\xd5\x21" "\x77\xd8\xc4\x08\xca\x8d\x40\xbd\x20\x83\xaa\x70\x5d\x79\xb1\xbf\xf8" "\xc5\x3e\x49\x1a\x41\x33\xd9\x52\xa3\xdc\xf0\x01\xd2\x3b\x5a\x69\xf6" "\xf2\xd4\xf2\xaf\x86\xa1\x10\xd0\xbd\xed\x69\xea\x96\xce\x19\xb6\xd4" "\x34\x5a\x33\x57\x44\x2c\x8b\xe2\x56\x3c\x8b\x33\x32\x2f\xf0\x7c\x00" "\x32\x4c\x2d\xca\xdb\x2e\x6a\x67\x90\xdb\x8d\xed\x3a\xc0\x7b\x35\x86" "\xcf\xec\x63\x68\x65\xf7\x07\xd7\x42\xe9\x0d\x34\xfd\x80\x19\x23\x06" "\xce\x27\x97\x5b\xf8\x9f\x62\x3b\x8a\x27\xff\x66\xa3\xcf\xfe\xb0\x5b" "\x75\x7d\xb4\x31\xc8\xa4\x2c\x70\xc2\x73\xf6\x4a\x46\x88\x84\x67\xe6" "\x3a\xd4\x22\x6d\xa0\x8b\x6e\x22\xcb\xcc\xe9\xbf\xd0\x4e\x55\x84\x04" "\xd7\xa6\xe5\xa2\xf8\xf4\xc9\x9c\xa8\x94\xc0\x7c\x9a\xe7\xbc\xe6\x7d" "\x82\x5a\xe5\x6d\x33\x35\x71\xf3\x46\x44\x1d\xcc\x3f\xc3\x07\x44\x3a" "\x8b\x91\x71\xc0\x49\x13\x6d\x53\x01\x13\xc1\x6c\xb5\xf5\xe3\xb0\xaf" "\x4f\xb4\x73\x76\x42\x49\x67\xf2\xcb\xba\x74\x75\x56\x28\x62\x90\x7b" "\x97\x7e\xe2\xe5\x9e\xb2\xd7\xbe\x26\xb6\x3b\xa8\x29\x8c\x97\x83\x0f" "\x0b\xd2\x86\x31\x73\x6b\xa4\x02\x90\xe8\x58\x7b\xb8\xc6\x2e\x2d\x70" "\xc4\x14\x0a\x9a\x9a\x34\xef\x50\xd3\x7d\x80\x88\x9c\xe7\x59\xb2\x1e" "\x01\xbe\x54\x49\x6c\x38\x5d\x12\xce\xb4\x77\xa2\x0c\xeb\x6a\xfb\xc2" "\x0d\xf6\x47\xc8\xd1\x7f\xed\x69\xf4\xb5\x37\xa9\x78\x92\x6a\x9e\x16" "\x60\xd5\xe0\x40\x14\x7e\xba\xa2\x44\xc4\xc8\x33\xd3\x86\x4d\x8a\xe8" "\x8a\x4b\xe8\x80\x12\x24\x0e\x87\x73\x0f\xe1\xea\x9d\x73\xae\xd1\x47" "\x8f\xcd\xdf\xf0\x49\x11\xf5\xa2\x26\xf3\x5c\x3f\x53\x7f\xf5\xc2\x7b" "\x9d\x9d\xcd\x70\xe0\x3a\x23\x9e\x9f\x66\x0a\xa6\x22\xc7\xac\x8d\xdf" "\xb8\x68\xe3\x44\xac\xaa\xaf\x45\x16\x54\xa6\x0c\x6b\x4c\x10\x68\xfa" "\x8f\x7d\x2a\x30\x5d\x51\x71\x19\x03\x2c\x81\x85\x39\x3a\xe9\xbd\x55" "\xd1\x41\xe6\x86\xe3\x21\x15\x28\x54\x5f\xba\xe5\x4c\x64\x43\x34\x5e" "\x41\xa8\x57\x5e\x62\xf4\x42\x39\x62\xdc\x50\x1a\xde\x61\x8b\xe6\xdc" "\x52\x02\x68\x71\x03\xcb\x21\x59\x28\xbf\x59\x9c\x69\x31\x6c\x25\x5c" "\x45\x6c\xdb\xfb\x4b\xe9\xc5\x2c\x04\x2a\x90\x51\x31\x8c\x20\x0e\x01" "\x93\x99\x36\x74\x62\xc4\xb1\xed\x7b\xce\x41\xee\x58\x32\xbb\x3e\x7b" "\x9b\x9e\xd0\xf1\xad\x72\x13\xca\x68\x0c\x6a\xc5\x81\x1f\x62\x19\xe7" "\xae\x09\x44\x3c\x15\x4d\xbc\x93\xf8\xc1\x7e\xbb\xb0\xda\x63\xf2\x02" "\xa2\xdd\x05\xe1\x9c\x4d\x86\xd3\xbe\x1e\x61\xfc\x22\x70\xdf\x6d\x08" "\x1a\x10\xa3\x36\x31\x0a\x6b\x17\xfe\xee\x97\x8f\xa1\x95\xff\x57\xc6" "\xac\x76\x6b\xd3\xf0\x0c\x9f\x41\x4a\xea\x39\x09\x5f\x4b\xa4\x52\x8b" "\x44\x96\x63\x24\x1a\x64\xb7\x97\x85\x32\x46\xc9\x4d\xe5\x02\x61\x76" "\x37\xb7\x9b\xd4\xd0\x8a\x00\x74\xf4\x82\x53\x1c\xd7\xb2\x55\x04\x92" "\xc9\x0f\x04\xaf\x77\xf0\x71\x4d\xd0\x3c\xf6\xd9\xf9\xd0\x00\x99\xf7" "\xb9\x5b\x14\x81\xc9\x38\xa1\x31\x16\x95\x46\x13\x2f\x0b\x7b\x41\xc5" "\x80\x67\xad\x26\x1b\x5f\x80\x6d\xe9\x84\xa4\x49\xf3\xa8\x81\xb7\x86" "\x67\xb3\x98\x83\x3c\xa9\x77\x62\x70\x0f\x50\xe9\xcf\x94\x41\xb5\x39" "\xc7\xac\x99\x56\x48\x80\x9a\x48\x6f\x28\x40\xba\x7c\xff\x56\xe9\x06" "\xf9\xe6\xde\x7c\xb4\x3d\xf2\x99\x02\x32\xc5\x28\x26\x70\xb4\x11\xe6" "\xe6\x9e\xed\x01\x71\xdc\x9e\x6e\x41\x34\x0b\xb4\x89\x92\x77\x8b\x06" "\x98\x71\xac\x89\x92\x85\x87\x6b\x3e\x8a\x70\xfa\x3d\x3a\x91\xf8\xb5" "\xe7\x36\x91\x2a\x3d\xff\x6c\x45\xad\xf7\x68\x29\xab\x3f\xaf\x3d\x99" "\x60\x09\xd2\x06\x62\xa0\xb9\x58\xe7\x34\x4b\x2d\xcd\xc5\x59\xed\xaa" "\x58\x6f\x53\x58\xa9\x68\x4f\xd0\x54\x64\x76\x74\x9e\x61\x8a\xb2\xa7" "\x75\x19\x20\x4f\x48\x8f\x18\x40\x47\x34\x75\x89\x5e\xb2\xeb\x77\xec" "\xeb\x00\xaf\x55\x0e\xef\x31\x21\x52\xa7\x17\x23\x27\x24\xa4\x0b\x29" "\x4c\xdd\xea\xd7\x78\xf3\x9d\x88\x9a\xc5\xa3\x00\x37\x8d\xbc\x68\x66" "\x95\xdf\x31\x98\x14\x6b\x38\x35\x17\x0d\xce\x2e\x23\xff\x04\x04\x20" "\xca\x81\x23\xd4\x32\xe2\x59\xb5\xeb\x97\x8e\x3e\x87\xd3\x75\x62\xfa" "\xd9\x92\xe1\x83\x9d\xe0\xe4\x26\x84\x7a\xb5\x88\x44\x97\xe7\x61\x6e" "\xd7\xfa\x70\x92\x3b\x6b\x7c\x65\xf9\x49\x69\xcd\x60\xba\xf3\x05\x8d" "\xae\x00\x79\xd1\x34\xa3\xd3\x90\x4e\xd3\x22\x18\xf8\xc5\xf0\x11\x84" "\x65\x58\xfd\xaa\x79\xde\xcf\x6a\xbe\xb0\x62\xcf\xde\x92\x10\xdf\x53" "\x06\x38\x8c\xd4\x79\xe6\x1f\x00\x52\x16\x4a\x07\x66\x0a\xdf\x0f\x51" "\xe9\x3d\x93\x89\x2b\xf9\x53\x47\x3f\x0f\x9d\x11\x39\x8f\x6a\x44\x8e" "\x11\x16\xfb\x3f\x73\x8b\xe0\xca\xef\xc6\x6e\x45\x9d\x46\xe7\x48\xcd" "\xec\x1e\x55\xcd\x9f\xbb\xd9\xe7\x26\x24\xd7\xd5\x3e\x71\x99\xd2\xa1" "\x0d\x45\x98\x85\x6d\x77\x61\x49\x96\xc8\xd6\xca\xb4\x91\x1b\x02\x3f" "\x01\xd2\x0c\x9e\x28\xbb\xc8\x79\xb1\x84\x9d\x7c\x9a\xf2\x22\x9f\x5a" "\x86\x54\xba\x3d\x1d\xd6\x6d\x79\x61\xa5\x96\xec\x79\xaa\x5f\xae\x16" "\x63\x15\x6e\xeb\xee\xf4\x77\xcf\xcd\x68\x43\x76\x1d\xf7\xe9\x60\xda" "\xb0\x9c\xee\x2a\x24\x4f\xde\x89\x53\x0d\xe5\x93\xbf\xc6\xf5\x96\xb8" "\x9c\x60\xa8\x52\xe3\xe2\xb8\x1e\xa7\xfc\xde\x8a\xae\x41\xd1\xf8\x7e" "\xb4\x52\x72\x2a\x59\x92\x27\xe9\x10\x7b\x00\xd1\xd1\x01\x05\xe5\xa0" "\x6e\x50\x55\xe2\xf3\x94\xde\x7c\x26\xca\x04\x97\x59\x97\x76\xac\x94" "\x04\x44\xa9\xe0\x71\x34\x70\x85\xbc\x84\xd1\x7b\x35\xba\x03\xba\x52" "\x7b\x77\x3c\xba\x7d\x74\x74\xdc\xb1\x9e\x9b\xf4\x12\xf7\x1e\x18\x20" "\xf2\x65\x98\xfe\x04\x7b\x6c\x21\x75\x51\x35\x98\x50\xaf\x61\xc5\xe1" "\x0f\x65\xcc\xf2\x2c\xcd\xfa\xa7\x1d\x13\xb4\xf4\x99\xee\x96\xc0\x56" "\x43\x77\x85\x5d\x11\x70\xc0\x19\xd0\x52\xaf\x42\xc1\xc1\x1e\x60\xd9" "\x89\x8a\x6e\xa9\x1f\x71\x0d\x83\x52\xba\x51\x63\x92\xa0\x3c\x90\x60" "\xed\x91\x83\xe4\xc4\x18\xd5\xd4\x73\x71\x7e\xf4\xac\x50\xdf\x6b\x84" "\x76\x64\x80\xc6\xdc\xef\xa5\xa9\x7c\x68\xda\x10\x9c\xea\x0b\xef\x1b" "\x22\xa7\x8d\x08\xae\xad\x31\xdd\x49\xed\xb1\xdc\xc3\x9b\x70\x97\xb6" "\x7c\xf4\x6b\x0f\xd0\xed\xe4\xef\xe9\x66\x95\x84\x63\x38\xe0\x23\x11" "\x36\x25\xc3\xfc\x72\x28\x8b\xf7\x0b\xd8\x31\x9c\x85\xea\x57\xe9\x40" "\x9b\xeb\x81\xad\x76\x5f\xef\xb5\x09\x5e\x61\xf8\x5d\x53\x89\x13\x9d" "\xd9\x1d\xe2\x9c\x21\x8c\x78\x89\xc8\x03\x4a\x7f\xf4\xc9\x99\xfb\xf9" "\x58\x55\xb8\x90\x86\x2f\x10\x85\xe4\x01\xea\x89\xe3\x1d\x94\x2a\xa2" "\xe6\x03\x23\xc7\x8e\xd0\x07\xc6\x4a\x9a\x2e\xa7\x46\xea\x21\x54\x2d" "\x2f\x87\x91\x9d\x17\x68\x1d\x3d\x2e\x11\x41\xf1\x83\x5a\x47\xcc\xba" "\x84\x36\x66\xfb\x88\x89\x58\x98\xaa\x60\x8f\xfb\xc8\x13\xa5\xdb\x33" "\x45\x18\xff\xd6\x80\x20\x74\xab\x69\x6d\x07\x02\x8a\xf1\x29\xb6\x2c" "\x8c\x2a\x9b\xaf\x0c\xd3\xa9\x8f\x21\x79\x55\x56\x62\xd2\xd3\x35\xf7" "\xc3\x68\x1b\xb7\x89\xbb\x0c\x81\x7a\x92\x76\xae\xce\x2b\xcf\x19\x5d" "\x37\x28\x9e\x0a\xd7\xc6\xf8\x04\xb1\xb7\xb4\x1e\x1a\xbb\x32\xb1\x9c" "\x44\x06\xf0\x68\xf2\x88\x3e\x6d\x3d\x46\xc0\xdf\x11\x92\x1a\x0e\xc5" "\x03\xc1\x21\xd2\xb8\xe6\x30\xcd\x99\x63\x82\x03\x59\x04\x4e\x89\xe5" "\x63\x46\xce\x3f\x76\x3f\xbf\x83\x3b\x8d\x47\x2d\x16\xd5\x77\xe0\x69" "\x01\x42\xa7\xdf\x1e\xf9\xb5\x97\xe8\x28\xfd\x03\xc5\x00\x2e\xf9\xc3" "\xb0\xd0\x3b\xab\x1f\x6e\xff\x1d\x7e\x54\xaa\x23\x95\x79\x34\x1f\x96" "\x9d\x16\xf0\xb3\xc3\xe0\x6d\x28\x3d\xf3\x21\xfe\x89\xa4\x40\x24\x88" "\xfc\x75\xd3\xa7\xd1\x4d\x34\x2d\x26\xa3\x31\x02\x06\xa3\xec\x0f\x80" "\x15\x3b\x66\x78\x64\xf7\x56\x2d\x1b\xe4\x05\x8a\x80\xc6\xd6\x37\x24" "\xb5\x21\xcf\x6a\x14\x24\xac\xab\x78\x06\xa0\x44\x10\x37\xd7\xd1\x47" "\x78\x54\x7d\x84\x6c\x25\xbd\x80\x70\xaa\x49\x44\x0b\x5b\x58\x0d\x43" "\x22\xa7\x56\x5e\x05\x5a\xde\x3a\x35\x18\x72\x1b\xa1\x20\x48\x71\xf0" "\x09\x62\xbf\xba\x09\x6e\x1c\x18\x5e\xa0\xf7\x47\x97\x29\xbb\xf7\xbe" "\x16\xfe\x37\xa6\xd3\x5e\xaa\x22\xec\x3b\x66\x85\xb7\xdc\x63\x53\x0f" "\xbf\xb4\x14\xac\x2b\x0d\xa4\x7a\x91\x26\x5e\xf6\xc4\xb3\x27\xb6\x28" "\x8c\xa2\xe4\x41\x82\x8e\x52\x66\x19\xf1\x3e\x0b\xb3\x13\xd5\xb0\x8b" "\x92\xa8\xae\x5a\x8e\xa9\x42\x2e\xbf\xb4\x72\x06\x99\x91\xf8\xed\x2e" "\x10\xb8\xe3\xa1\x06\x8e\x7c\x50\x65\x5b\x5e\xe1\xd1\x77\x2b\x19\x13" "\x41\x70\xe2\x96\x23\xed\x7e\x81\x7d\xfb\x28\x64\x12\xbf\xd1\x40\xb5" "\xb2\x5d\xed\xec\x53\x2a\x33\x58\x72\xd2\x4d\x9e\x71\x8e\x5b\xd4\xf1" "\xd9\xc2\x5b\x78\x32\xce\x3b\x76\x59\x06\x89\xd6\x8c\x50\x6f\xd7\x18" "\x34\xbd\x53\x8e\x65\x71\xd1\x91\xbe\xbb\xe5\x0b\x11\x27\xfd\x18\xe3" "\xae\x72\xea\x63\x24\x41\xd4\x1a\x79\x1d\x5e\xa6\x74\xee\x25\x06\x01" "\x77\xa1\x1e\x4f\x10\xab\x5d\xd1\x17\x32\x92\x4c\x25\xad\x31\xf4\xbd" "\x2e\x46\x19\xaf\x65\x16\xd3\x1a\xc8\x8b\x7c\xbc\x07\x75\x32\xe5\x08" "\x12\x99\x10\xb8\xd0\xa9\xa9\x0f\xe4\x58\x29\xb2\x7b\x35\xfb\xd4\x43" "\x70\x03\x4b\x88\x5d\x9e\xc1\x42\x6b\xc8\x94\x8a\xe0\xf7\xdd\x06\x83" "\xa3\x11\x5c\x60\xbc\x67\x53\x3c\x8e\xbf\x2b\x10\xf5\xbf\x02\xe5\x93" "\x7d\x82\xec\x88\xbd\x54\xed\x10\xe1\xf7\x9c\xf0\xa0\xed\xe1\x4c\x7d" "\xee\x27\x84\x1b\xa8\xbe\xe8\x8d\x40\x81\x65\x09\x6c\xba\xff\x2a\xe2" "\xdf\xc6\x7a\x5e\x47\x5a\xb4\xeb\x65\xb2\x7b\x8c\x26\x4b\x44\xc5\xcd" "\x90\xa9\xdf\x13\x53\xc3\x7f\xd6\xc0\x60\xbd\xf8\x8f\xea\x79\xd1\x38" "\x14\xeb\x40\x58\xbb\x1d\xa4\x0a\x41\x64\x8f\xa5\x4c\xb2\x90\xce\x6d" "\x4e\x85\x64\x4c\x0f\x0d\x90\x06\x41\x8e\x12\x8a\x6e\xfc\x13\xdb\x26" "\xe6\xea\x00\x04\x10\x79\x43\xe1\x54\x50\x31\x20\x27\x7a\xda\x88\xc9" "\x70\xbe\xdf\x68\x7e\xc9\xd9\x02\x84\x41\xec\xab\xd5\x99\x2c\x65\xac" "\xb8\xd2\xc6\x0c\x30\xe6\xec\x56\x32\x8c\xb7\x25\x1a\x93\x40\xd7\xc9" "\xa1\x73\x2b\x90\xd4\x26\x50\xe3\x24\xd9\xca\xaa\x0e\xd3\x48\xcf\xd1" "\xca\xdf\x40\x84\xc7\xa7\x44\x2e\x1f\xc7\xa6\x43\x09\xba\xbc\x64\x7c" "\x40\x37\x25\x5a\xdc\x57\xd9\x74\xa6\x8e\x12\xfb\x4d\x67\x55\x10\x12" "\xb7\xe3\xde\x01\xd8\x62\x19\x99\x1a\xf6\x85\x3f\x6c\xd7\xb1\xdd\x05" "\x76\x11\xb7\x8f\x0d\x7a\xcd\x3f\x89\x18\x77\xc0\x4f\x92\x26\xae\x97" "\x24\xdd\x2c\x89\x7b\x7e\x9c\x4b\xe6\xab\xec\x1c\x86\x55\xca\x84\xd7" "\xd1\xd7\x3e\x82\x03\xed\x6a\x59\xdf\x7a\xce\xac\x25\x30\x25\x7b\x4a" "\x8a\xd4\xaf\x07\x6d\xc3\xde\x6e\xd6\xb7\x2f\xc0\xa6\xc1\xbc\x4b\x60" "\xa2\x9a\xd2\xfc\x21\x49\x03\xf8\xc5\x17\x53\xad\x81\xc0\x37\x84\x97" "\x07\x9c\x47\xeb\x09\x90\x9e\xc0\x47\xbd\xc0\xbf\xae\xcd\xa1\xa3\xca" "\x27\x6f\xe4\x15\x2b\xc5\xdf\x21\xf6\x09\xd2\xad\x02\xf2\xaa\x33\xda" "\xa6\x30\x03\x9f\xf9\xb2\x65\x3c\x33\xfc\x5c\x4e\xbc\x4a\xe9\x37\xa2" "\xcc\xf8\xa7\x51\x88\x76\x93\x47\xe3\xa5\xe2\x22\x4a\x22\x10\xbf\x06" "\x33\x8a\x65\x91\x2a\x6f\x70\x07\x95\x7b\x06\x5a\xac\xca\x5f\x1c\x0a" "\x58\xc3\x24\xf8\x59\xbd\xd5\x8d\x15\x5a\xf1\x77\x3e\x7e\x47\x86\xf4" "\x56\xfb\x00\x86\xc1\xa3\xed\x86\xe7\x2a\x79\xe5\x36\xd3\x76\xe2\xde" "\x57\x1d\xc4\x90\xec\x32\x07\x21\x5a\x4f\xf3\xdd\xeb\x7e\xb6\xdf\xf3" "\xbe\x49\x61\xbd\x80\xf0\x0b\x57\xee\xf0\x08\x5c\xf6\x67\xa8\xa9\xb7" "\xa6\x74\x8f\x97\x2d\x29\xf5\x4a\x02\x01\x63\x04\xd5\x0f\xc2\xce\x43" "\xe0\xf2\x5a\x38\x07\x61\x39\xa6\xea\x89\xcd\x9e\x74\x2a\x2a\x3f\x42" "\x77\x48\xa3\x76\x4b\xf2\x85\xde\x66\x86\x31\x5b\x6f\xc1\x7c\x89\xd3" "\xd9\xf8\xf8\xa6\xa6\xda\x25\x11\x39\x0b\xb1\xed\x94\x27\x74\x19\x95" "\x83\x2e\xa9\x56\xb5\x96\x39\x8f\x06\x10\x6e\x8c\xda\x6c\x49\xd5\xe1" "\x60\x5e\xee\x78\x93\xe9\x7f\xe5\xe3\x09\x9d\x37\xd2\x3f\xd2\x74\x1b" "\x0a\x4b\xaa\xb6\x54\x4b\xfb\x7e\x2e\xc0\xec\x96\x1d\x85\x0c\xc0\xe1" "\x35\xc8\xdf\xb2\xb3\x9d\x1a\x7e\xb7\x24\xc4\x44\x62\xc0\x29\x02\x5f" "\x32\x7a\xac\x73\xd4\x57\xd5\xd4\xe0\xf8\xee\x65\x2a\x85\xde\x33\xf1" "\x2f\x93\x41\xe5\x97\x95\xa3\x05\x29\x15\x48\xd9\x3c\xe3\xcf\x05\xe0" "\x60\xb4\x86\xe7\xd2\xed\x7f\xff\x02\xe3\xd0\xc4\x01\x11\x9c\x6f\x06" "\x60\xe8\x75\xca\x44\xa6\xfb\x96\x53\xda\x41\xd3\xeb\x56\xaa\x73\x6f" "\xce\xd7\x99\xe5\x59\x16\xb6\x65\x77\x8e\x2b\x2a\x8b\x29\xbe\xa0\x42" "\x12\xfa\x06\x41\xea\x51\x49\x39\x39\x78\xf9\xe6\x33\xbb\x37\xc3\xf2" "\xec\xe8\x24\x06\x1f\xfe\xbd\x75\x1e\x6e\x2a\x19\xc3\xd6\x7e\xba\xef" "\x6d\x02\x2a\xb5\x0e\xb1\x10\x33\xd1\xc8\x79\xd1\xcc\xb4\x47\x10\x27" "\x81\x7f\x76\x14\xd9\x19\xd5\xcb\xe3\x2f\x67\x10\xbd\xa8\xd6\xcf\xfe" "\x2a\xcd\x48\x8c\xc4\xbf\x87\x53\x39\x2b\x61\x97\x3f\xe8\x56\xbb\x14" "\x68\xc7\x2b\xc7\x4f\x16\x9d\x94\xb1\xaf\x55\x02\x25\x4f\x01\x01\x51" "\x7a\x1e\x26\x17\x6e\x4d\x1e\x2f\xcc\xf6\x70\x2d\x2e\xcb\x4c\xce\xf6" "\xec\x5c\xa2\x4f\xe5\xc8\x91\x87\xf6\x5c\x21\x81\x43\xbe\x4a\x4a\xad" "\x44\x7a\xf8\x08\x6e\x18\x29\xec\xbd\x94\xe6\xa3\xad\xe4\xf7\x61\x82" "\x96\xd7\x8b\x33\xce\xcc\x0c\x4a\x11\x54\x6e\x83\xbb\xfb\xb1\x96\x3c" "\x60\xd2\x14\xc6\x5e\x9f\xba\xa1\xd4\x82\xa9\x9b\x15\x3a\xff\xac\x05" "\x4d\x9c\xd3\x8b\xed\xa3\x04\xfa\x04\x06\x74\x38\xf0\xfe\x34\xe6\xa0" "\xb4\x0e\x01\x18\x9d\xc6\x56\x49\xc7\xe5\x61\xa9\x7c\xd7\xb5\xcb\x26" "\x29\x63\xad\x4b\xff\x25\x9a\x01\xc0\x3a\x67\x67\xcb\x9e\x58\x87\x78" "\x96\xff\xa8\xbc\x88\x04\x65\xaa\x64\xf5\x7d\x0c\xfb\x5b\x3a\xbf\x9f" "\x34\xad\xf8\x90\xee\x2b\xc4\xb8\x57\x21\xc2\x06\xd0\xbc\x2d\x5e\x99" "\xf4\x77\x36\x3a\x3e\x46\x9f\x05\x84\x23\xb0\x9b\xb3\x2c\x63\x89\x4b" "\x68\x7f\x30\x08\xab\x02\x21\x07\x98\x2e\x2d\x31\x4d\x4e\x3b\x0f\xe4" "\x5e\xdd\x09\xc0\x31\x14\x0c\xbd\xfd\x31\xe4\x84\x29\x90\xd8\x40\x6a" "\xe5\x56\x0d\x8b\x6e\xcb\x90\x13\x49\x2b\xb6\x5b\x66\xb9\xa8\x5c\x91" "\xa2\x17\x53\x30\xb7\x3d\xa5\xbd\x27\xb0\x0d\x3f\xef\x5d\xac\xe7\xa7" "\x47\x70\xe9\x86\x17\x42\xf3\x89\x12\x67\x8e\x49\xc0\x6f\xb0\xbe\x81" "\x41\x86\x75\x14\x08\x76\xa9\x14\x96\x75\x9f\x27\xd4\xa2\x5b\xe4\xfb" "\x20\xe1\xa6\xa5\x51\x49\xcd\x67\x97\xb9\x2a\x65\x62\x36\x18\x83\x52" "\x0f\x7d\x21\xe2\x91\x3c\xb7\x9e\x17\xe7\xd3\x29\x1a\xf5\x87\x6d\xad" "\x74\x1c\xb6\xf1\xb9\xff\x28\x7c\x0c\x8e\xde\x41\x5d\xb3\xf3\x58\x3c" "\x16\x85\xe4\x4d\xd1\x0f\x8d\x4f\xc8\x48\x9c\x3e\x1f\x44\xe4\x55\x62" "\x9b\x87\x2b\xda\x9c\x5c\x2f\xdf\x66\x4e\xdb\x55\x99\x4e\xed\xac\x79" "\x8a\x33\xf3\xe4\x21\x3a\xfd\x29\x89\x99\x5a\x7d\xb3\xc8\x81\x6b\x20" "\x72\x24\xe2\xdc\x0c\xec\xbc\xb7\x86\xcc\xfa\x48\x9d\x94\x7e\x0b\x3a" "\x16\xb1\x7e\x60\xe0\x4c\x48\xc8\x6a\x8e\xf7\xdd\x3e\x75\x07\xae\x93" "\xf6\x09\x82\xd9\x88\xdc\x90\xee\x3d\x36\x55\xb3\x35\x63\xfd\x13\xf5" "\x2f\x98\x7d\x5f\x50\x87\x20\xdc\xe8\x53\x28\x91\xfb\x67\xb3\x4b\x5b" "\x38\xe8\x7f\x32\xeb\x7b\xc6\x22\x19\x34\x9d\x33\x91\x35\xc3\x05\x53" "\x8a\x5a\x74\x5d\x9a\x72\xe8\xf7\x13\xa7\xa4\x54\x52\x01\x2a\xbd\x99" "\x80\x9b\xbc\x84\x1a\x99\xf5\x1b\x3d\x08\xcb\xf8\x6e\x61\xbf\xea\x47" "\xe2\xeb\x51\x8c\xa9\xb1\x24\xd9\x78\x5f\x73\x00\x2c\xd7\x82\xb2\x06" "\xa6\x04\xe5\x08\xf4\x42\x5c\xb7\x5f\x91\x21\x7d\xb6\xc2\x99\x65\xcd" "\x33\x51\xba\x46\xdd\x81\x48\x76\xc8\xde\x85\xc7\xa9\x54\x18\x6f\xbd" "\x14\xf5\xad\x8a\xd4\xb9\x59\x8a\x0f\x6e\x89\x29\x8f\x2f\x7f\xa5\x47" "\x11\x96\xd0\x5b\x0d\xf3\xd4\xf6\x86\x6d\xa2\xe8\x91\xe2\x21\x4f\xbc" "\xc3\x11\xb0\x67\xa1\x0f\x02\x4e\xcb\x0d\x8f\x2f\xbc\x7b\xda\x0b\xc6" "\x89\x34\xb5\xb1\x43\x42\x3d\xbc\x1b\x15\x17\x92\x2a\x7b\xe7\x33\x3b" "\x2a\x2d\x0e\x21\x37\xbe\xdd\x73\x9d\xb1\x98\x89\x99\x13\x47\xf5\x1b" "\x91\xb3\x1f\xb1\x79\x07\xde\xab\x0d\x80\xfb\xdc\x14\x8b\x53\xb5\x3a" "\xed\x7e\x6f\xf3\x31\x7b\x6f\x77\xb3\x38\x62\x37\xa9\x70\xa8\x44\x69" "\xda\xd0\x52\x52\xe2\x8a\xe7\x5e\x03\x69\x3a\xfc\x2a\xda\x49\x93\x9b" "\x36\xfb\x04\x86\xdf\xfc\x14\x80\xed\x72\x1c\xf5\x67\x43\x65\x15\xb0" "\xbb\x85\xe2\x45\x45\xb1\x30\x9d\xb3\x9d\x1f\x4f\xba\x5f\x15\xff\x4b" "\x81\xd3\xe9\x3f\x6c\x52\xe3\x92\xc1\x71\xbb\x16\xca\x91\xde\x80\x8e" "\x58\xf0\x04\xd8\x52\x17\x7e\xe4\x52\x4e\x66\x43\x88\x00\xfa\xba\xac" "\xc4\x44\x54\x13\xa6\xdc\xa0\xc5\xd8\x6b\x66\x65\xed\xe6\x97\xfa\x29" "\x8d\x81\xf0\xd5\xb0\x5a\x4c\xd7\x05\xdc\xe8\xbe\x68\xac\x07\x8a\x5d" "\x09\xc7\x0c\x7e\x36\x22\x73\xaa\x06\x9b\xa0\x06\xdc\x94\xcc\x59\x96" "\xe1\x3f\x0f\xb7\x78\xc2\x05\x71\x06\xa1\x1e\xef\xac\x00\x61\xa4\xde" "\x88\xa5\x09\xf6\xb5\x8a\x15\xbf\x44\xb8\xca\x1a\xcb\xa6\x83\xb0\x5c" "\x85\xb7\x53\xf8\x0b\x1b\x32\xc3\x54\x32\x54\x4a\x2f\x02\xcc\xa7\x66" "\xff\xb7\x9a\xc3\xcf\x2f\x59\xc3\xbd\x7b\xcc\x11\x71\x43\xf0\xef\x13" "\x3d\x33\x48\x4b\x26\xe2\x6a\x12\x5e\x76\xf9\x13\xb3\x0c\x22\x8c\x85" "\x84\xf7\x95\xa6\xda\x61\x23\x40\xaa\xb5\x34\xeb\x98\x16\x35\x29\x87" "\x58\x48\x51\x37\x98\x4c\x30\xf8\xa1\x94\xed\xa9\x50\x30\x41\x45\x6f" "\x3a\x15\xfa\x7b\x81\x0f\xbd\xcd\x2b\xa6\x91\x9f\x4d\x2e\x54\xf5\x16" "\x79\x68\x20\x1b\x9b\x7e\xc8\x07\xa2\xe7\xbf\x9c\x98\xb1\x05\x24\x30" "\xf7\x66\xda\x6b\xd4\xba\x52\xae\xcf\xda\x1f\x96\x7f\x9b\x37\x49\x37" "\xeb\xb9\xae\x6b\xde\x9f\x2f\xe4\x65\x35\x09\x3f\xc1\xdf\x42\xf1\x0b" "\x37\x3e\x8b\x70\x0c\x67\x9a\x81\x26\x3f\x7c\xf6\x2c\x7c\x10\x3e\x61" "\xda\xa1\xb9\x6f\x66\x4a\xf4\xbc\x59\x59\xfc\xfa\x3a\x91\x82\xd3\x43" "\x88\x54\x33\x91\x4a\xfb\x8f\xd5\x29\xd5\x7e\x5b\x95\x85\x63\xf7\x4a" "\xb0\xae\x5d\xd9\x29\xd8\xeb\x48\x3f\xb9\x27\x44\xf7\x50\x2b\x3a\x75" "\xd9\xcf\xea\x25\xb2\xd4\x56\x05\xdf\xca\xa1\xf4\x91\x37\x08\x2a\xf4" "\x08\xca\x36\x22\x5f\x1c\x16\x58\x72\x31\x5f\xb7\x70\x48\xbc\xe6\xbe" "\x78\x7d\xc0\x46\xfe\x80\x82\x83\x20\x03\xa3\x11\xfc\xb7\xf8\x10\x5a" "\x0d\xa9\x90\xcc\x57\x7e\x1b\x5f\x9b\xd6\xe4\x5b\xf1\x33\xe8\xd4\x9c" "\xa9\x5c\x6f\xfa\x54\xf1\xad\x0f\x86\x57\xe1\x99\x44\xc3\xfd\x37\xcd" "\x95\x85\xa9\x11\x2a\xac\xaa\x13\x66\x77\xe6\xb7\x28\xa8\xb9\xac\x61" "\x3e\xdd\x82\xa4\x14\x63\x8b\xb2\x6f\x29\x5b\x7c\xfc\x2e\xe7\x90\x37" "\x7a\x2c\x3f\xd8\xa4\x3b\x34\xc2\xdb\xc2\xe4\xaa\x6c\x62\xe1\xa9\xe6" "\x7f\x3c\x63\xc6\x88\x11\x3f\x7a\x48\x05\xb2\x58\x29\x82\xe3\x06\x39" "\x58\xb7\x24\x3b\x31\xb2\x11\xf3\x82\x8a\x1b\xfb\xc7\xc6\xc0\x26\x5b" "\xee\xd5\xd9\x78\x1c\x6d\x43\xeb\xc2\x16\xd0\x3a\x28\x33\xbb\xe8\xc2" "\x3f\xc9\x64\xbc\xec\xda\x7b\x43\x6f\xb9\xeb\x43\x2c\x40\x4e\x35\x23" "\x87\xa7\xb6\x3e\xa8\x6f\x9f\x43\xf1\xcf\x84\xe6\xd1\xfd\xce\x62\x21" "\xeb\xc2\xff\xbd\xd9\xa1\x46\x1f\x96\xa3\xec\x98\x30\x35\x95\x09\xb2" "\x40\x9d\xd5\x21\x04\x66\xf1\xf7\x19\x8e\xeb\x2e\x16\x1a\x67\xa8\x3c" "\xfb\xe1\x4b\x11\x77\x48\x27\xa6\xa8\x54\xb8\x73\xc5\xca\x3a\x6b\xa7" "\xc7\xbd\x61\xac\x97\x6e\xea\x20\x96\xbe\x4a\x2f\x4c\x82\x3b\xe0\x7c" "\x0b\x86\xae\x89\x71\xc6\x60\x9e\x58\x6c\xeb\x0b\x7b\xb5\x9c\xd0\x8d" "\x9b\x18\x43\x99\xb1\x65\xe6\x6f\x69\xb8\xfe\xcc\x9f\x7d\xa8\xcd\xc0" "\xb4\x5a\x81\x96\xa9\x3f\x3d\x84\x0b\xa2\x60\x42\x64\xb9\x40\x66\x0b" "\xbe\x1c\x06\x75\x96\xf5\xf8\x8a\xa4\x52\xb1\x77\x7b\x84\xd2\xb5\xaf" "\x8f\x9b\xf7\xb0\xb2\x48\x9b\x56\x14\xc8\x1b\xc4\x3f\xcd\xb2\xb0\x62" "\xec\x54\x9d\xc6\x5d\xdf\x7e\x57\x59\xf3\xda\xb8\x01\xb4\x82\xdf\x9c" "\x52\xad\xef\x93\x0a\xf8\x86\x63\xc5\xa8\x6a\x4b\xaa\x24\xfd\xa5\x78" "\x16\xd8\xff\x20\x42\x55\x22\xb0\xbd\x39\xf5\xc5\x95\x5c\xcb\x2f\x2c" "\x1c\xc2\xc9\x83\xb2\x2b\xc5\xc4\xff\xa5\x16\xa1\x7f\xbe\x5b\x67\x01" "\xbd\x12\x15\x84\x2e\x51\x58\xdc\x01\xf7\x40\x57\x92\x71\x85\xf2\x81" "\x0f\x70\xc2\x05\x51\xda\x83\xcc\x74\xb0\xfe\x5a\x7d\x42\x3b\xc9\xb7" "\x32\x44\x74\xe1\xe5\x39\x0e\xec\x72\x46\xc5\x9a\x5f\x39\x1d\xea\xfe" "\xa0\xb4\xc9\xa2\xa5\x98\x3e\xdf\xd0\x9b\xc8\x1c\x8f\x96\x10\x00\xde" "\x6d\x92\x4c\xa4\xfc\x23\xfc\x71\x92\x51\xd8\x23\x19\xd0\xc9\xd3\x87" "\xdb\x2b\xc5\xb1\x46\x80\x88\xe9\x85\xea\x46\xc3\xaa\x04\x56\xaa\x77" "\x0f\x62\x3e\x88\xec\x14\x64\x17\x9c\xa6\xfc\xac\x0a\xed\x3b\xab\x46" "\xc6\x00\x42\x08\xe2\x6d\xc0\x9a\x30\xdb\x40\x2f\x94\xd0\xe8\x2e\x1a" "\x89\x2a\xee\x6c\x6f\x30\xc0\x7b\xf5\xcd\xb0\x48\x7d\x4e\xdb\x81\xf7" "\x98\xa0\xa3\xc0\x4f\xd0\x83\x34\xd5\x37\xdd\xd6\x1c\x34\xa4\x66\x18" "\xdf\x15\x21\xe6\x3f\x37\xe9\x89\xc1\xac\x7d\xa5\x80\x46\xbb\xf4\x15" "\xcc\xa6\xf3\x6a\xe1\x12\xff\x0c\x9e\xd0\xaf\xda\x3d\xbd\x8e\xf9\xaf" "\xe2\x6f\xd7\xbd\xca\x01\xf1\x7a\x0e\x51\x03\x34\xc6\xab\x44\x4f\x36" "\x1b\x6e\x0c\x8a\x6a\xef\x54\x77\x97\xad\x7c\x07\xf4\x06\x93\xf8\xf9" "\x6a\xc3\xe8\x85\x77\x23\xef\x67\x73\xbb\x70\xc2\x5a\x1b\x05\xdc\x59" "\xd8\xc6\xd6\x30\xfb\x99\xe2\xee\x6d\xb9\x52\x78\xe0\x5d\x40\x00\x7c" "\x65\x48\xc5\x85\xad\x89\xcd\x55\x0a\xe8\x88\x77\xd2\xbf\xb0\x5d\x96" "\xbc\x44\x32\x9d\xc8\x35\x85\xf0\x2e\x55\x5a\xe5\xd9\xb9\xa5\x01\x52" "\xc9\x72\xbe\xbd\xe7\x97\x91\x37\x6e\x56\x4c\xfe\xf2\x17\x5e\x59\x1b" "\xb1\xb1\xa7\x4c\x2c\xc0\x93\x05\xa5\x91\xc2\x23\x0b\x65\x70\x88\x1d" "\x4c\xb1\x7e\x0e\xbb\xcc\x5e\x24\xa4\x4d\x39\x9b\x62\xe3\x34\x86\xc0" "\x62\x57\x6e\x35\x6a\x31\xc4\xb5\x29\xd3\x20\x69\x4b\x51\xba\x94\x53" "\xe6\xae\xa6\x30\x57\x70\xfa\x36\x15\x6b\x09\x1e\x97\xcc\xed\xf9\x84" "\xe7\x0d\x1f\xd9\xac\xcf\x06\xf1\xd0\xc6\xe5\xf2\x70\x32\xa6\x09\x32" "\x80\x7a\x22\x07\xfb\x5a\x5e\xd7\x96\x5d\x76\xed\x44\x5f\x99\xec\xf8" "\x3f\xc0\x46\x4b\x15\x07\x43\x49\xff\x0f\xa2\x84\x9e\xd9\x96\x50\xfd" "\x87\xca\x35\xb8\xa4\x8a\x67\x36\x0b\xfc\x8c\xfa\xb1\x07\xf5\x44\x66" "\xdb\x2c\x45\x4c\xd7\xcd\x1e\x7b\xc1\x3a\xa1\x3c\x75\x55\x00\x27\xab" "\x14\xc9\xdf\x41\x76\xc8\xcd\x90\xf8\xb6\x1f\xc4\xe8\x20\x2c\xda\xf8" "\x75\x59\xf2\x18\x2d\xca\x32\xb8\x31\xd8\x13\x88\xc5\x10\x0c\x08\x8e" "\xee\x62\x4d\x8c\xd8\x28\x9b\x6a\xec\x46\x71\x20\x52\xf6\x12\xb5\x8f" "\xa2\x74\x1c\xea\xf8\x17\x5e\x22\xbb\x1f\x6a\xb4\x64\x34\xfa\x07\x5d" "\x5b\xe3\xa0\x1e\x79\x87\x41\xcf\x09\x8d\xc8\x24\xca\x80\xae\x44\x68" "\x8f\x42\xa8\xf7\x45\x32\x80\x2f\x14\x2c\xfa\xd3\xfb\xb2\xb9\xc6\x43" "\xa7\xec\x23\x7c\xf6\xdc\x5c\x27\x94\x39\x86\x79\x1a\xb5\xe0\xe1\x0c" "\x46\x77\x76\xa6\xf2\x43\x62\x13\xc4\x00\xf8\xc4\xe1\x1d\x7b\xf4\xb6" "\x6f\xa4\x8d\x7f\x05\xfb\x24\xf1\x95\x2a\x3f\xbb\xab\xd2\xa5\x3a\xd7" "\x9a\xe6\x23\xe2\xe6\x68\x8c\x41\xf7\x64\x9d\xd7\x9c\x8f\xc6\x9b\x79" "\x8c\xf5\x9a\x19\x77\x1d\x0a\x5a\x6f\x33\x55\x08\xbe\x4c\x96\x8f\x9e" "\x1c\x26\xed\xf0\x74\x74\xec\x95\x88\xe0\xc7\xc3\x60\x02\x7e\x4b\x06" "\x56\x7d\xec\xb4\x58\xd3\x7e\x78\xa7\x60\x31\xfe\xc9\x6f\x25\x4a\x33" "\x79\xc8\xa9\xcc\x35\x5c\xcb\xee\x4d\x56\xb9\x19\x93\x01\x18\x1e\x3c" "\x12\xec\xe2\xd2\x5f\xa1\x36\x71\x24\x47\xa7\xd3\xc0\xb1\x49\xfd\x27" "\xd4\x9c\xc7\x76\x28\x17\xfc\xb3\x4c\xaa\x68\xbb\xc6\xa0\x43\x6d\x96" "\xdb\xd5\x44\xd4\x0e\x26\x10\x4b\xde\xd3\x38\x16\x5d\x89\xc3\xed\x29" "\xc8\xf9\x8d\xc8\x4f\x0a\xa0\x4e\xed\xd5\x3e\x2c\x67\xda\x32\xf2\x48" "\xc5\xd8\xec\x0e\x38\x55\xce\x1b\xb1\xa7\x3b\x86\xec\xf8\xe9\x7c\x97" "\xa1\xa1\x80\xbb\xbb\xa8\xf1\x9b\xdf\x49\x19\x19\x97\xd3\x0b\xb8\xd1" "\x5e\x4c\x5e\xae\x70\x7d\xbc\x07\x7a\x4e\xdc\xfe\x40\x38\x8d\x39\xae" "\x57\xe3\xba\x40\xa5\xc2\x39\x75\x35\xa7\x24\xf4\x3d\xbe\x9a\x3e\x3e" "\x67\x97\x53\x97\x37\x66\x9f\xb7\x42\x9a\x16\xe0\x51\xe0\x8b\x11\xdc" "\xa6\x28\x65\xe4\x60\x44\xbb\x42\x70\x04\x00\x74\x29\x2a\xe2\x00\xa2" "\x3f\x3c\xfa\x98\x68\x8e\x72\xf7\xb0\x46\x88\xd6\x77\xef\x05\x42\x02" "\x0c\x1f\xd6\x51\x38\x40\x4e\x66\xfb\x9c\x66\xef\xa0\x0e\x4d\x83\x83" "\x10\x1e\x2c\x09\x70\xc4\x1b\xfd\x71\xce\x8c\x70\xb9\x70\xf3\xe3\xbc" "\x5f\xb0\x2b\x92\x82\x36\x97\xf7\xfb\xf9\x69\xe5\x0f\x11\x80\x8d\x06" "\xd2\xb5\xa2\x90\x02\x92\x6f\xe0\x5b\xdb\xe6\xf1\x60\x20\xde\x5a\xb5" "\x65\x3d\x7d\xd3\xa0\x55\xc5\x16\x40\x07\xea\x0d\xff\x41\xa8\x49\x76" "\xad\x0c\x22\xf7\x3d\x69\xbf\xce\x3d\x11\x40\x2b\xbb\xce\xd1\x23\xaa" "\xf6\xda\x8d\x97\x3d\x0d\x0a\x6c\xe5\xf2\xb4\x9b\x3c\x41\xc3\x4b\x68" "\xf1\x39\xac\xdb\x32\x84\x13\x55\xab\x78\xc0\x30\x56\x1d\xd0\x0e\x02" "\x31\x0c\x42\x8d\xd7\xf1\x8f\x3f\x28\x83\x25\x3c\xb3\x32\x10\xeb\x97" "\xd2\x2c\x0f\xf7\x0b\xc5\x4f\x7f\x22\xa6\xeb\xa1\x62\x19\x3e\x36\x53" "\x64\xc0\x1d\x42\xf6\x5c\xe4\x67\xf0\xe0\x70\xc4\x2e\x60\xb2\x4c\x2f" "\x99\x2c\xdd\x56\x65\x90\x41\xa5\x28\xa6\x28\xd4\x74\x99\x2b\xa5\x66" "\x79\x89\x9c\xeb\x18\xb8\x4a\xff\x86\x42\xb0\xb2\xe3\xa0\x0c\x27\x17" "\x66\x02\x01\x40\xdd\xa9\x87\xf1\xad\x54\x50\xa5\x82\xc5\xfd\x76\x0a" "\xf3\x04\x4a\x20\x04\xca\xf8\x20\x76\x6b\x0c\x5e\xd0\x0d\xca\x01\x79" "\x2a\x81\x0b\x03\x25\x30\xb3\x3d\x77\x5f\x8a\xf0\x65\xba\x98\xfd\x88" "\x34\x8d\x4f\xea\x7e\x32\x13\x49\x18\xb4\x62\xaa\x97\x8d\x32\xca\x79" "\x60\x6d\x45\xc1\x43\xf7\x3d\x35\xb2\x52\xb0\x99\xb7\x30\xe7\x99\xd5" "\xff\xc1\xc3\xef\x93\x7b\xfb\x79\x15\x76\xed\x1f\x54\xb4\x9f\x00\x92" "\x01\xf7\xa6\x38\xbb\x41\x4d\x1a\xb3\x01\x15\xbd\x8c\x46\x43\xc0\x40" "\x1d\xf2\x7e\x74\x38\x3d\x2d\x62\xa5\x06\xa3\x64\x99\xf4\xdc\xc1\xc0" "\x93\xb7\x67\x92\x2a\x93\x71\x7e\x1a\xd4\xa1\xde\x48\xe1\xbc\xc2\x97" "\x1e\xe2\x70\x16\x77\x04\xd0\x6a\x6f\x64\x3d\xba\xf1\xb9\x2d\x77\xa4" "\x3c\x6f\xb2\x54\x3b\x63\x82\xdc\xc4\xd0\xc3\xf4\xa9\x1e\xc6\x9c\x44" "\x5e\xfd\xfb\x90\xe3\x91\x0a\x22\x40\x41\xa2\x62\x4e\x9f\x14\xe3\x4b" "\x39\x09\x9d\x33\x3f\xb3\x99\x10\x31\x6c\xa4\x13\x75\xfe\xe0\xb4\x5e" "\x6b\x61\x73\x69\xec\x5f\x17\xab\x08\x34\x4d\x06\x9f\x03\xa5\x87\x5b" "\x55\xaa\x78\xbc\x2a\x9d\xa6\x9e\x2e\xeb\x94\x52\x9d\x6d\x27\xf3\xf5" "\x71\x1a\xd8\x89\xc0\x57\xe4\xb2\xda\xb9\x35\xf9\x78\xbb\x8c\x1a\x60" "\x6c\x35\x1d\xb3\xe7\x18\x30\x74\xe9\x97\xd1\xe7\x47\x24\x46\xb9\x31" "\xb2\xe5\xa0\x2a\x69\x1d\xe3\x8f\xf4\x82\x24\xdd\xbd\x1c\x6c\x78\x72" "\xf7\xe6\x88\x86\x51\x01\x2f\xf3\x76\x04\x98\x39\x47\x49\x74\xd8\xa2" "\x4b\x6d\x03\x84\x92\xa2\x26\x50\x08\xb3\xf3\xa0\x11\x2e\xe1\xc9\x02" "\xe0\xff\x25\x87\x5b\x59\xd8\x8e\x16\x3e\x63\x8d\x3f\xdf\x96\xcb\xf9" "\x19\xbb\x03\x34\xf4\x94\xf0\x24\xa3\xf7\x76\x90\x5f\x91\xae\x37\x69" "\x20\x74\xee\x57\x7f\x43\x18\xc5\x0a\xb8\x44\x18\xca\xac\x1c\x95\xf8" "\x81\x6c\x58\x7a\x10\x9e\x2d\xce\x71\xf3\x8a\x26\x75\xb8\x21\xe5\x32" "\x85\xaf\xb5\xd8\x60\xb7\x04\x2b\xee\x0d\xb7\x5d\x3e\xf8\x0d\x4e\x44" "\xce\xb6\xda\x6b\x0f\xe1\xea\xe0\x7c\xf0\xf1\x43\x8d\xa6\x5c\xbe\x7a" "\x37\xab\x4f\x0e\x30\x21\x55\xe3\xfd\xa2\x2b\x78\x59\xe7\x9b\x99\x3c" "\x9a\x24\x13\x3b\x98\xce\x9e\x0a\x63\xe8\x8b\x19\x0f\x5b\xc1\x0b\x21" "\xb4\xf8\xd7\xdb\x44\x7f\xde\x54\xdf\x03\x8f\x4e\x09\x50\x8c\x78\xf1" "\x6b\x75\xce\x58\x5b\xa0\xfa\x53\xec\xcb\x80\xb6\xf8\xd9\xb0\x80\xb9" "\xdf\x69\xff\x23\x34\xeb\xce\xfd\xbb\xfe\xfa\x97\x84\xaa\xb0\xb4\xcb" "\xe6\x00\x59\x01\x0d\xe6\x93\x98\xe4\xea\xa4\xcc\xcc\xa5\xca\x83\x26" "\x26\xbc\xb4\x3f\x59\xd3\xba\x92\x8d\x27\xcd\x24\x4c\x07\x41\x88\xaf" "\x8e\x97\x4c\x91\x0a\xda\xe1\x12\xf0\xa6\xcf\x53\x77\xe9\xfa\xc2\xde" "\x02\x38\x8b\xb0\x2d\x7a\xd5\xa3\x8c\xa1\xa9\xff\xb2\xd1\xe5\x60\xf1" "\x5a\x95\x6d\x89\xc6\x43\x55\x0a\xf1\x14\xda\x0a\x07\x13\x30\x21\xa6" "\xab\x68\xf0\xd2\xdc\xab\xff\x5a\x54\x14\xb4\x6e\x81\x44\x2a\xb6\xcf" "\xc4\x12\xdc\x7a\xa0\x00\xf2\xc0\x32\x6d\xf9\xf0\xba\xe0\x9d\xb2\x5c" "\x99\xd3\xb2\x65\xb6\x09\x33\x7d\x80\xa2\xb5\xcc\x4c\x58\xfb\x07\x13" "\x2b\x94\xb5\x70\x2f\x73\x48\xc4\x5b\xa3\xbd\x04\x87\xe2\xfd\xe3\x29" "\x29\xc2\xe5\x67\x2b\x10\x50\xbb\x5c\xd5\xa7\x8c\x5d\xff\xbc\xfc\xe2" "\xbf\xc9\x2f\xef\xe1\xfd\x00\x3e\x95\x1b\xf0\x84\x45\x84\x4d\x95\x79" "\xbc\x85\xc5\x03\x0f\x46\xde\xe2\x29\x40\x63\x6c\x96\x4b\x65\x0f\xd1" "\x79\xc7\x87\xb9\x41\x3c\x32\x38\xff\x40\xaa\x4c\xad\xc7\xc2\x53\x35" "\xb4\x26\x76\xf1\xb0\xe6\x5e\x27\x36\x9b\xc5\x27\x6c\xec\xc0\xa2\xf0" "\xf6\x3c\xdf\x3e\xbd\x98\x5a\xec\x0d\x19\x42\x24\xf2\x67\x8b\x04\xbb" "\x1d\x62\x46\xc4\xf3\xf8\xdf\x78\x1b\x82\x9b\x3e\xf6\x81\xa5\x40\x98" "\x5d\xf1\x22\x99\x43\xaf\x48\xe2\x37\xf8\xce\xf0\x05\xd5\x43\xfe\xc3" "\xd9\xbf\xcd\xe5\xac\xfd\xe6\x2f\x91\x6e\xdc\x2c\x8f\xad\x7a\xaa\x74" "\x0f\xa5\x42\x55\xc5\x58\xd6\xba\x9c\xc1\xcc\x72\x10\xb3\x95\x9e\x70" "\xcc\xaa\x6f\x20\x48\x3f\x47\x47\x42\xfb\x3c\xcd\xc5\x7d\x2f\x3b\x77" "\x3c\x30\xe3\x08\xbf\xdb\xdc\xda\x6a\xad\x92\x46\x7f\x9a\xcd\xe6\x20" "\x66\xe4\x55\x20\xec\xa7\xa1\xd0\xfd\xc4\xde\xaf\xdd\x9e\xe5\x6b\xe7" "\xa1\x69\x23\x04\x5d\xc9\xc7\x28\x6a\x4f\x43\x7b\xc6\xf4\x7b\x57\x17" "\xba\x5b\x80\x99\xb5\x52\xe5\xbe\x24\x22\x14\x5a\xf3\x3c\x6c\xc0\xe4" "\x86\x07\x85\x3e\x83\x01\x51\xfb\xa6\x8e\x9d\x8f\x9b\xf2\xa0\xa1\xa6" "\x19\x03\xf1\xf0\x76\xaf\xee\xd2\xe7\x57\x8d\x60\xcf\x43\x52\x59\xa5" "\xba\x73\xa5\x14\xbd\xd4\x4a\xcf\xbb\x53\x5e\xa9\x8e\x46\xd5\x5b\xed" "\x02\xa4\xe0\x20\x70\xa6\x96\xf8\xad\xcb\x63\xa7\xf0\x21\x26\xdc\xd1" "\x5c\x7c\x9b\xb4\xec\xb8\x51\x65\xff\x67\x44\x9c\x20\x43\xea\x0a\xf5" "\x22\xc7\x2b\xb1\xd1\xe0\x1d\x5c\x2e\xaf\xdb\xe7\x93\x6a\xd8\xbc\x5b" "\x9d\xb7\x9a\x34\xdc\x72\x45\x43\x66\x1e\x70\x39\x5f\xb7\x1c\xd7\xd8" "\x1a\x94\xe0\xd9\x67\xfb\xfc\x86\x81\xce\xc8\x58\x3d\xf9\x03\xef\xa5" "\xfe\xac\x1f\x42\x43\xb8\x14\xac\xe8\x3b\x4c\xf0\x80\x1d\xe7\xcd\x97" "\x05\x7c\xd3\x05\x14\x0a\xf9\x2f\x20\x46\x0e\xd9\x59\xc6\x15\xe7\x0a" "\x12\x22\x85\xeb\xd8\x4b\xa6\x92\xb8\x96\x58\x51\x1c\xc1\x68\x61\x85" "\x71\x25\xac\x7c\x07\xdc\xd7\x2c\x32\xe7\xc8\x08\x73\x90\x01\x55\x61" "\x33\xf1\x70\x3d\xdb\x79\x6d\x6a\x02\x38\xd2\xdf\x4d\xc1\x22\x7d\x74" "\xb7\xb3\x75\x60\xfa\xcd\xb9\x92\x77\xcc\x17\x56\x99\xd7\x61\xc4\x6e" "\x20\x2c\x1a\x50\x7e\x33\x6c\x54\xca\x14\x4e\xf5\x4d\xac\x55\x6d\xb2" "\xad\x27\xe4\x47\xdd\x0b\x5c\xd6\xd2\xff\x2d\x1c\x6d\x24\x5d\x13\x6b" "\x4c\x76\xda\x62\xe9\x82\x5c\xa5\x0f\x5b\xfc\x1e\xd4\xc5\xa9\x70\x65" "\xb8\xf6\x7d\x91\xf1\x69\x70\x21\x3f\xe0\x48\x48\x41\x6d\xf6\xaf\xf3" "\x79\x6c\xd9\x5c\x1d\xf0\x51\xca\x72\x70\x20\xaa\x01\x8a\x4e\xe9\x87" "\x82\xb8\x14\x0f\x94\xb9\x6b\xf1\x9b\x6b\xcf\xea\x8a\xee\x04\x4f\x06" "\x93\x41\xe3\xc6\xc4\x3c\x74\xae\x3b\xa6\xf3\xa2\x9c\xdc\x3f\xcc\xc9" "\xbf\x52\xb6\x0c\xae\xd2\x1f\xb2\x77\x1f\x33\x21\x6c\xe0\xff\x51\x79" "\xe0\x62\xba\xa9\x7b\xbb\x54\x6f\x84\xca\x8a\x07\x85\xc5\xc7\xee\x51" "\xa0\xa2\x4e\x22\x15\x9a\x34\xfb\xc7\x2b\x1a\x75\x1f\x00\x4d\x39\xa3" "\xcb\x75\x9e\xcf\x29\xa2\xdf\x4a\x48\xae\x62\xb8\xdc\x40\xbf\xd7\xc3" "\xd4\xe5\xba\x91\x9e\x6f\xf7\x07\x48\x63\x6a\x00\x40\xe5\xcb\xd0\x04" "\x6c\x58\xe6\x78\xe3\xb8\xc4\xc2\x14\x54\xd5\x4e\xd2\xc2\x02\x01\xbe" "\x77\x94\xbe\xef\x2c\x4f\xbe\x0f\x24\x00\xd7\xce\xdd\xb6\x8e\xc4\x2f" "\x21\x00\xd7\x1d\x3b\xc2\xa9\xfe\xd9\xde\x64\x61\x8d\xc8\x6b\x96\x8c" "\x1a\xfa\x08\x3b\xb8\xdb\x4e\xcf\x27\xa5\xf7\xc0\x78\xfb\x8e\x4e\x40" "\x17\xf6\xe7\xb6\x11\x4b\xa5\x7d\x07\x5f\xb3\xbf\xc1\xf7\x1c\x76\xb6" "\xf2\xf5\x6e\x27\x43\x19\xd8\x22\x53\x02\x3a\xa4\x59\x9e\x08\x66\xd3" "\x46\x29\x51\x45\x0f\x7c\xc9\xdc\x3f\xdd\x41\x1d\x85\xb8\x1b\xc9\x5c" "\x0d\x5a\xc6\x7a\x55\xcf\x18\x4d\xbf\x25\x4c\x30\xea\xaa\x90\xfa\x0c" "\xbc\x40\x94\x43\xab\x61\x6c\x18\xbf\xee\xc8\x38\x64\x5c\x0a\xe7\x9e" "\xd9\x67\x76\x39\x32\xa9\x13\x5f\x2e\x08\x2b\xb4\x70\x91\x74\x43\xd2" "\x08\xe4\x3d\x8a\x55\x62\xcc\x0f\xa0\xdb\x48\x99\xbb\x9f\xcd\x30\x43" "\x79\xae\x24\x9e\x64\x3c\x32\xef\xf6\xca\x79\xd8\xdb\xdf\x85\x13\x0e" "\x4d\x2b\x32\x75\xfd\xd9\x64\xe3\xb6\x59\x25\x78\x09\x29\xa6\xe7\x5e" "\xf8\x36\x9a\xfb\xee\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192); *(uint64_t*)0x200001c0 = 0; *(uint64_t*)0x200001c8 = 0; *(uint64_t*)0x200001d0 = 0; *(uint64_t*)0x200001d8 = 0; *(uint64_t*)0x200001e0 = 0; *(uint64_t*)0x200001e8 = 0; *(uint64_t*)0x200001f0 = 0; *(uint64_t*)0x200001f8 = 0; *(uint64_t*)0x20000200 = 0; *(uint64_t*)0x20000208 = 0; *(uint64_t*)0x20000210 = 0; *(uint64_t*)0x20000218 = 0x20000600; *(uint32_t*)0x20000600 = 0x94; *(uint32_t*)0x20000604 = 0; *(uint64_t*)0x20000608 = 4; *(uint64_t*)0x20000610 = 1; *(uint64_t*)0x20000618 = 0; *(uint64_t*)0x20000620 = 0xfffffffffffffffc; *(uint64_t*)0x20000628 = 0; *(uint32_t*)0x20000630 = 1; *(uint32_t*)0x20000634 = 0; *(uint64_t*)0x20000638 = 0; *(uint64_t*)0x20000640 = 0; *(uint64_t*)0x20000648 = 0; *(uint64_t*)0x20000650 = 0xfffffffffffffffc; *(uint64_t*)0x20000658 = 0; *(uint64_t*)0x20000660 = 0; *(uint32_t*)0x20000668 = 0; *(uint32_t*)0x2000066c = 0; *(uint32_t*)0x20000670 = 3; *(uint32_t*)0x20000674 = 0x6000; *(uint32_t*)0x20000678 = 0x800; *(uint32_t*)0x2000067c = 0; *(uint32_t*)0x20000680 = 0; *(uint32_t*)0x20000684 = 0; *(uint32_t*)0x20000688 = 0; *(uint32_t*)0x2000068c = 0; *(uint64_t*)0x20000220 = 0; *(uint64_t*)0x20000228 = 0; *(uint64_t*)0x20000230 = 0; *(uint64_t*)0x20000238 = 0; syz_fuse_handle_req(r[0], 0x20004200, 0x2000, 0x200001c0); break; case 5: *(uint32_t*)0x20000080 = 0x50; *(uint32_t*)0x20000084 = 0; *(uint64_t*)0x20000088 = r[1]; *(uint32_t*)0x20000090 = 7; *(uint32_t*)0x20000094 = 0x1f; *(uint32_t*)0x20000098 = 0; *(uint32_t*)0x2000009c = 0x40092; *(uint16_t*)0x200000a0 = 0; *(uint16_t*)0x200000a2 = 0; *(uint32_t*)0x200000a4 = 0; *(uint32_t*)0x200000a8 = 0; *(uint16_t*)0x200000ac = 0; *(uint16_t*)0x200000ae = 0; memset((void*)0x200000b0, 0, 32); syscall(__NR_write, r[0], 0x20000080ul, 0x50ul); break; case 6: memcpy((void*)0x20000040, "./file0/file0\000", 14); syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000040ul, 0ul, 0ul); break; } } int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); loop(); return 0; }