// https://syzkaller.appspot.com/bug?id=75630474080f59df29a1232f4a9e9cc452a9bd0f // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static __thread int clone_ongoing; static __thread int skip_segv; static __thread jmp_buf segv_env; static void segv_handler(int sig, siginfo_t* info, void* ctx) { if (__atomic_load_n(&clone_ongoing, __ATOMIC_RELAXED) != 0) { exit(sig); } uintptr_t addr = (uintptr_t)info->si_addr; const uintptr_t prog_start = 1 << 20; const uintptr_t prog_end = 100 << 20; int skip = __atomic_load_n(&skip_segv, __ATOMIC_RELAXED) != 0; int valid = addr < prog_start || addr > prog_end; if (skip && valid) { _longjmp(segv_env, 1); } exit(sig); } static void install_segv_handler(void) { struct sigaction sa; memset(&sa, 0, sizeof(sa)); sa.sa_handler = SIG_IGN; syscall(SYS_rt_sigaction, 0x20, &sa, NULL, 8); syscall(SYS_rt_sigaction, 0x21, &sa, NULL, 8); memset(&sa, 0, sizeof(sa)); sa.sa_sigaction = segv_handler; sa.sa_flags = SA_NODEFER | SA_SIGINFO; sigaction(SIGSEGV, &sa, NULL); sigaction(SIGBUS, &sa, NULL); } #define NONFAILING(...) \ ({ \ int ok = 1; \ __atomic_fetch_add(&skip_segv, 1, __ATOMIC_SEQ_CST); \ if (_setjmp(segv_env) == 0) { \ __VA_ARGS__; \ } else \ ok = 0; \ __atomic_fetch_sub(&skip_segv, 1, __ATOMIC_SEQ_CST); \ ok; \ }) static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 8; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 5 || call == 6) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[1] = {0xffffffffffffffff}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: NONFAILING(memcpy((void*)0x20000100, "/dev/fuse\000", 10)); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000100ul, 2ul, 0ul); if (res != -1) r[0] = res; break; case 1: NONFAILING(memcpy((void*)0x200001c0, "fd", 2)); NONFAILING(*(uint8_t*)0x200001c2 = 0x3d); NONFAILING(sprintf((char*)0x200001c3, "0x%016llx", (long long)-1)); NONFAILING(*(uint8_t*)0x200001d5 = 0x2c); NONFAILING(memcpy((void*)0x200001d6, "rootmode", 8)); NONFAILING(*(uint8_t*)0x200001de = 0x3d); NONFAILING(sprintf((char*)0x200001df, "%023llo", (long long)0)); NONFAILING(*(uint8_t*)0x200001f6 = 0x2c); NONFAILING(memcpy((void*)0x200001f7, "user_id", 7)); NONFAILING(*(uint8_t*)0x200001fe = 0x3d); NONFAILING(sprintf((char*)0x200001ff, "%020llu", (long long)0xee00)); NONFAILING(*(uint8_t*)0x20000213 = 0x2c); NONFAILING(memcpy((void*)0x20000214, "group_id", 8)); NONFAILING(*(uint8_t*)0x2000021c = 0x3d); NONFAILING(sprintf((char*)0x2000021d, "%020llu", (long long)0xee00)); NONFAILING(*(uint8_t*)0x20000231 = 0x2c); NONFAILING(*(uint8_t*)0x20000232 = 0); syscall(__NR_mount, 0ul, 0ul, 0ul, 0ul, 0x200001c0ul); break; case 2: NONFAILING(memcpy((void*)0x20000080, "./file0\000", 8)); syscall(__NR_creat, 0x20000080ul, 0ul); break; case 3: NONFAILING(memcpy((void*)0x20000140, "./file0\000", 8)); NONFAILING(memcpy((void*)0x20000040, "fuse\000", 5)); NONFAILING(memcpy((void*)0x20000180, "fd=", 3)); NONFAILING(sprintf((char*)0x20000183, "%020llu", (long long)r[0])); NONFAILING(memcpy((void*)0x20000197, "\x2c\x72\x6f\x6f\x74\x6d\x6f\x64\x65\x3d\x30\x30\x30\x30" "\x30\x30\x30\x30\x30\x30\x30\x30\x61\x30\xfc\x2a\xef\xed" "\x2e\x2a\xff\x1f\xaa\x63\x75\x73\x65\x72\x5f\x69\x64", 41)); syscall(__NR_mount, 0x20000000ul, 0x20000140ul, 0x20000040ul, 0ul, 0x20000180ul); break; case 4: NONFAILING(memcpy( (void*)0x20000240, "\x35\xa1\x34\x71\x75\x79\x2d\x3e\xde\x90\x6a\xe2\x21\xdf\x94\x66\x95" "\x33\x12\x17\xef\xf5\x72\x51\x80\x28\x29\x92\xb5\x2c\xf5\x09\xfc\x5e" "\x53\x87\x12\x35\xc2\x8d\x56\x70\x3a\x4d\x0d\x11\xc4\x59\x6d\x0a\xc7" "\xdb\x51\xa4\x7e\x04\x6f\x95\xf7\xca\xd3\x84\xe1\xbc\x8a\x8f\x58\xd3" "\x6b\xe2\x9d\x34\x21\x24\x6e\xcb\x5f\x8d\x50\xc2\xa0\x69\x5f\xc5\x94" "\x69\xfa\x8f\xc2\xca\x9d\xd5\xad\xad\x8f\x2f\x9e\x49\xfa\xa1\x8e\x7e" "\x88\xac\xb0\xda\xec\x63\x1c\x07\xea\xcd\x70\x9f\x77\x66\x55\x2f\x9f" "\x25\xb8\xed\x46\x84\x39\x74\xa9\xa5\x71\x26\xa2\x72\xe7\xe6\x44\xd0" "\xeb\xe9\xf5\x8d\xe3\xb5\xfc\x12\xdd\xbd\x2f\x54\x2c\x14\x23\xfc\xea" "\xc0\xc1\xe5\xc7\xe2\x3f\x9c\x37\x4f\x29\xef\x98\x10\x78\x7d\x27\x2a" "\x74\x73\x1b\xae\xae\xdc\x26\x17\x60\x6a\x3a\x15\x49\xe7\xb5\x45\xc7" "\x26\xc3\x4d\x2a\x5e\x12\x86\x6e\x39\xc0\x7d\xe6\x43\x25\x70\x94\x68" "\x11\xc0\x35\xdd\x20\x25\x49\x8f\x9d\x83\xbc\x7e\xc7\x62\xe5\x24\xb4" "\x7d\xd5\x3d\x20\x76\x43\xf0\xe6\xf7\x13\x16\x4f\x01\xea\x03\x56\xe6" "\x86\x76\x83\x18\xa5\x15\xcb\x05\xd3\xb2\x79\xf8\x65\x52\xdb\x0b\x94" "\x63\x8e\x2f\xfd\x34\xf9\x0b\x8d\xca\xc5\x72\xa6\x90\xcc\xb9\xba\x57" "\xdf\xe6\xcb\x4e\x6a\x01\x4c\x73\x89\x65\x53\x59\xda\x0d\xb5\xc9\x84" "\x65\xf2\x36\x09\x3b\xcc\xc1\xa6\x87\x5f\x23\x90\x1c\xfe\x0f\x4e\xe6" "\xa9\xff\x1b\x9c\x8f\xd9\xad\xd9\xa6\x7e\x29\x59\x6c\xaa\x59\x9e\x76" "\xb5\xba\x8c\xd6\x1f\xc5\xe2\x21\xd7\x59\x7c\x46\x15\xd1\xea\xe0\x83" "\x51\x22\xd0\x13\x1a\xad\x97\x4f\x9e\x4c\xfd\xf6\xf3\xf6\xb0\x0e\x44" "\xbd\xc4\x44\x46\x6e\xf3\x73\x10\x0c\x00\x6c\x4c\x38\xe7\x14\x49\xf1" "\x29\xe1\xb2\xc7\x9e\x30\xc5\x02\x3e\xc6\xfe\xb5\xfc\x2f\xd4\x3f\x5a" "\x40\x94\xd3\x1a\x05\x16\x2b\x76\x9a\x23\x68\x67\xe6\x3f\x14\xe1\x88" "\x88\xf8\xe5\x98\x59\xbb\x02\xd6\x7f\x43\x35\x98\xd1\xf4\x3c\x24\xd4" "\x3e\xad\x43\x76\x5f\x47\x43\xbe\x74\x2a\x34\x6d\xc2\xba\x90\x7e\x37" "\xf9\x10\xe7\x60\x54\x05\xfa\x1e\x08\x13\x78\xed\x5f\xc9\x9d\x25\xe2" "\x28\xd3\xd8\x61\x1d\x46\x3d\xbb\x84\x1c\xdf\x83\xd2\x29\x9c\x2d\x7d" "\x46\x34\xfe\x2f\xd9\xdc\x46\x9b\x58\xb0\x72\x29\xa4\xd7\x19\xf0\x9a" "\xda\xcc\xd3\xb5\x71\x69\xca\xd8\xc4\xce\x03\x2e\x70\x18\x1b\x8a\x28" "\x7c\x5d\x5a\x4e\xb6\x4b\xfe\xb8\x94\x61\x31\xd4\xb6\x4b\xcc\x18\x53" "\x1d\xe0\x61\x51\x4a\x6c\x86\x50\x44\xe5\x43\x29\x42\xc9\x01\x72\xe8" "\xf8\x64\x0f\x79\x87\x32\x79\x47\x74\x17\x1d\x66\xfe\x2b\x52\x8e\xdd" "\xfe\x74\xdf\x6c\x56\x64\x6e\xee\xf5\x2a\x0f\x6f\x62\xc7\xda\x51\xd3" "\x9c\xd1\x01\x27\x57\x32\x6e\xb4\x07\xa1\x84\x00\x45\xe8\x82\x75\x6f" "\xbd\x38\xc2\x94\xbe\x55\x5e\x79\xe7\xe4\x35\xc2\x7b\xb7\x05\x5b\x55" "\xfd\x7f\x60\xaf\xa3\x85\x8f\xb8\x2f\x32\xb2\x92\x2a\x06\x0d\xa0\x03" "\xb6\x0e\x44\x6c\x6f\x01\xa9\x9f\x06\x15\xfc\xcb\xa0\xbf\xfa\x4a\x0b" "\x7f\x80\x52\xec\x14\xab\x41\x89\x5c\xac\xd1\xc5\x91\x4d\xd3\x53\x43" "\xc9\xd6\x8c\x9d\xed\x89\xf7\xe8\x01\x29\x7b\x3b\xd2\xc9\xdd\x49\x03" "\xad\xf7\xc4\x44\x25\xaa\x7e\xa2\x40\xdf\x09\xca\x02\xcc\x83\xff\xef" "\x72\x14\x5a\xf1\x05\x8f\xe5\x8d\xb9\x15\xb8\xb3\xf5\x6e\x6a\x6b\x6a" "\x9b\x15\x17\xd2\x2d\xc4\xa5\x72\x84\x5d\x43\x18\x13\x17\xb6\xe4\xaa" "\x1c\x9d\x7d\x7e\xd2\x43\xe9\xaf\xa3\x6a\x60\xaf\x6e\xbc\x1e\x29\x10" "\x33\x43\x47\xdc\xec\x08\x31\x72\xaf\x7c\xac\x5d\xe9\x65\xbc\xe1\xd2" "\xda\x77\x03\x22\xde\x60\x02\xdb\x51\x42\xf5\x2d\xa2\xe3\x33\xca\x39" "\x04\xa3\x75\xbb\xb9\xf1\x61\x47\xa0\x4a\xa7\xf8\xfb\x79\x98\xf7\x77" "\x66\xa4\x4e\x9b\x12\xc7\x53\xca\x76\xb4\x79\xac\x3b\x02\xfe\xde\x93" "\x0d\x42\xf3\xad\xfd\x43\xb1\x41\xaa\x59\x3c\xd1\xe4\xd3\x68\x72\x04" "\x20\xef\x5a\xd6\x80\x6d\xb3\x6f\xd8\xf8\x81\xf6\xf5\xd9\x4b\xf3\xf7" "\xe8\x68\xd6\xd5\xda\xd0\x2b\xd3\x07\xe3\xad\x19\x63\xd4\x18\x7f\xa9" "\x68\xc9\xc6\x8c\x5a\x31\xfc\xef\x45\xa0\x9f\x8c\xa1\x61\x82\x54\xc6" "\x57\x49\xf2\xea\x14\xf6\xdf\x6a\xc5\xe4\xfc\x36\xf7\x1d\x3c\x17\xdb" "\xd0\x78\xb5\xcc\xcb\x92\x91\xc5\x9e\x15\x64\xe3\x75\xa0\xdb\x96\xd9" "\xe5\x2c\x59\xf8\x6b\x3d\x05\xae\x34\xb5\x4a\x48\x7b\x4c\xda\xaa\x72" "\x09\xac\xf8\x64\xf7\x69\xcf\x0d\xb9\xeb\x0a\xff\x8d\xf5\x9a\xf0\x63" "\xb0\x44\x46\x62\x90\x23\xa1\x71\x99\xf1\xed\x4e\x87\xc7\x10\xca\x6d" "\xe2\xe6\x25\x67\xf2\x72\xdc\x1d\x75\xcd\x5e\xaa\xdc\xd7\x21\x31\x09" "\x9a\x60\x18\x56\x99\x2c\x7a\xa1\xa1\x59\x9c\x9e\x59\xa8\xeb\xd1\xea" "\xc0\x48\x13\x17\xa1\x3b\xaa\xd0\xef\xb7\x4b\xe9\x38\x67\xa1\xb7\x82" "\xcc\x36\x1a\xc7\x20\x22\xa1\x02\x67\xec\xa0\x81\x9c\x97\xa9\x32\x41" "\x19\x1d\x36\x77\x4d\x13\xce\xc4\x95\xe1\xc0\x2c\x27\xb3\xcb\x94\x1f" "\x3f\xff\xc1\x7d\xcf\x31\xdf\xc0\x10\x3e\x6f\x8a\x21\xce\x52\xfa\x14" "\xbd\xa3\x5f\xd2\xb7\xf1\x4a\x26\xf3\x12\xe1\xf7\xf3\x6f\x00\x2e\xb7" "\x6f\x53\xdd\x4c\x5d\x70\x6c\x55\x18\xc3\x49\xd7\xac\xb1\xa7\x1e\xe3" "\x6e\xeb\xc7\x1f\xa4\x83\x9c\x23\x88\xf4\x83\xaa\x73\x52\x34\x99\xa9" "\x42\xe7\x21\x6a\x37\x0b\xa5\xe2\x1e\xd4\xfb\x01\x37\x43\x35\x6a\xca" "\x16\xef\x1a\x0a\x71\x9e\x5a\x3e\xb9\x47\x13\x88\x85\x06\x70\xfc\xdb" "\xf9\xd0\x91\x66\x02\x31\x5d\xdd\x95\x18\x73\xda\x35\x6c\xfc\xa9\x6e" "\x40\x3e\x66\xaa\xf6\xdb\x01\xf4\x8d\x78\x67\x37\x80\x46\xa1\x02\xed" "\x0c\x53\xe1\x61\x9a\xf0\x3e\x4a\x96\xb6\x2b\xba\x05\xb4\x0e\x6e\x69" "\xc7\x68\x25\xdf\x48\x2c\x2c\x4a\xc4\xbf\x47\x60\xfc\x0c\x55\x49\x94" "\xe9\x3f\xfd\x76\x94\x43\xb5\xcc\x78\xa7\x91\xf1\x04\x96\x0c\x7d\x39" "\x6e\x8c\x86\x2b\x7d\xef\x3e\x7c\xdd\x6f\x17\x6a\x29\x5d\x29\x0e\x46" "\xb4\xdc\xea\x75\x02\x6a\xf2\x0b\xef\x75\xac\xe0\x68\x2f\x34\x88\xbf" "\x73\xb7\x30\x14\x41\x1d\x77\x7c\x99\xcc\x00\x4e\x96\x2f\x2b\xe6\xdc" "\x2d\x4a\xd9\x5a\xa6\x2a\xec\xa4\xce\xea\xec\x90\xf4\xb0\xf2\x9b\x38" "\xd0\xff\xab\xef\x8c\x06\xc6\xc4\x33\x00\x4d\x2a\xc7\x3d\xcb\x9e\xc1" "\xe4\xe4\x72\x46\xda\x12\x4a\xf3\xd8\xc7\x23\x19\xa7\xbe\x4b\xd1\xcd" "\x57\xa7\x53\x02\x3d\x18\xa1\xb8\xe2\x12\x3b\xf2\x2b\x36\xb7\xdc\x1b" "\xc0\xa1\xc6\x8d\xc8\x0a\xcd\x56\xbb\xd5\xa4\x1c\xb1\x24\xb4\xc9\xfc" "\x44\x70\xc6\x19\x61\x99\xb1\x3f\x07\xbb\xbf\xbd\xaf\x16\xc7\xf0\x53" "\x9b\xa4\x2e\xc1\xb5\xde\x03\xa0\x5c\xb7\xcc\x72\x67\xdb\x92\xd0\x7c" "\x91\x69\xb9\x90\xbe\xeb\x4a\x95\x41\xb7\x26\xa7\x95\xc7\xf9\x1e\xf9" "\x1e\xaa\x12\x3b\xc0\x3e\x03\x42\xb1\xfe\x8b\x77\xfa\x25\xc7\xd3\x29" "\xdc\xf3\xae\x3f\xa3\x78\xd2\xf7\xce\xd8\x6c\x5e\x20\xe9\x1c\x76\xdd" "\xbd\x38\x27\xe9\x44\x48\x0a\xa2\x1e\xae\x36\xd5\x23\xce\x7a\x9b\xc8" "\x9a\xc4\x57\x6b\x80\xe8\xb9\xcd\xab\x46\x13\x0e\xb7\x45\xff\x40\x5e" "\x8a\xc8\xaa\xc2\x5b\x91\x7a\xad\xea\xb5\xbe\x6d\xc1\x7c\x4b\xd8\x48" "\xcc\x00\x51\x24\x41\xe1\xd3\xb3\x1d\xb8\x06\xf1\x4f\x56\xb6\x22\x7a" "\x84\xb9\x8a\x1e\x2b\x4d\xb2\x6d\x57\xc9\x1f\x1e\xe9\x14\x27\x98\x7f" "\x29\x43\xc5\xea\x00\x4c\x1c\x04\x71\x33\xbd\x64\xff\xdb\x76\x8d\x77" "\x00\xcf\xbc\x72\x4c\x94\x78\x73\x6b\xdf\xb5\x59\x73\xda\xd6\x59\x8d" "\xaa\xad\x1c\x20\xbc\xeb\xb0\xa3\x9b\x54\x32\x56\xc4\x28\x56\x21\x37" "\xee\x5f\x86\x14\x9f\x77\xb0\xa3\x9b\xc3\x98\x0d\xda\xef\xd2\x63\x72" "\x08\x01\x77\x42\xba\x88\x01\xd9\x1f\x83\xc9\xbe\xbe\x61\x50\x7e\xfc" "\x3d\x62\xa3\x2d\x7a\x69\x8b\x69\xed\x64\x08\xe5\x36\xce\x5a\x2b\x17" "\x0f\x12\x34\x5b\xfb\x22\xc6\xd8\xf2\xd3\x50\xde\xfd\xaf\xd8\x45\xbf" "\x85\x7a\x64\x3f\x00\x24\x69\x24\x6f\xae\xb2\xe0\x30\x0b\x3b\x65\x87" "\x6d\xdb\x8f\xad\xa2\xa0\xe3\x3e\x05\x41\xe6\xdd\x17\xe9\xa5\x46\x7c" "\x69\x8b\xff\x2b\xff\x0a\x15\xb0\xf3\x58\x1c\x6f\xe5\xe5\xec\xe7\x77" "\xac\x78\x17\x36\x34\x27\x23\x45\x4a\x03\x72\x15\xa1\x07\x0a\x87\xad" "\xe8\x63\x1a\x45\xbe\x40\x4a\x41\xe6\x54\x18\x00\xeb\x12\xe9\x84\x0c" "\x67\xf4\x02\x10\xb2\x94\x70\x3e\xd3\x1c\x43\xef\x07\x88\xd7\x66\x42" "\x90\xe8\xa6\x3f\xdb\xce\x6b\xb0\x19\xe7\x5e\x2d\xad\x00\xe3\xf6\xcf" "\x24\xce\xf5\xdf\x9d\xa8\x18\x53\xf9\xbe\xbb\xf4\xfd\xa3\x37\x18\xbc" "\x6a\xc2\x04\x20\xd5\x56\x08\xb8\x21\x66\x38\x88\xe6\x51\x39\x07\xe0" "\xac\x55\x8d\x89\xaa\x47\xac\x18\x11\xc7\x7d\x51\x4d\x3e\xd8\xed\x22" "\xba\xb5\x9b\x34\x19\xdd\x85\x7c\x0a\x78\x5c\xef\xc8\xff\x60\x02\xd6" "\x7c\xe8\x2a\xfa\x8f\xd4\x55\xd9\x00\xc5\x63\x78\x0a\xa0\x12\xcb\x24" "\xa1\xe0\x6a\x75\x89\x4c\x57\x18\xd2\xcf\x4c\x57\x80\x91\x20\xe7\xa4" "\x90\x7f\x7e\x10\x0f\xbb\xd7\x98\x09\x4b\x6a\xa6\xeb\x09\x3b\xab\x25" "\x26\x2a\x06\x72\x18\x66\xf9\x7f\x1a\xdf\x00\x40\xb6\x35\x79\x49\xb8" "\x1d\xd6\xd7\x68\x5c\x48\x4c\x8e\x16\xbd\x71\x11\xc3\xe1\x22\x1f\x1f" "\xd1\xcf\x6d\x3d\x06\x23\x3e\x10\xe3\xba\x80\x7f\x38\xd7\x5f\x3e\xa2" "\xa0\x0e\x94\x72\xc0\xdd\x92\x0e\x74\xbc\x1e\x01\x9e\xb8\xb0\x33\x0e" "\x86\x37\xe1\xbb\x00\xa4\x26\xc6\xd4\xa7\x22\x19\xb3\x56\xac\x06\x49" "\x11\x5e\xb7\x1f\xf2\xf3\xe5\xd2\x5c\x12\xf3\xc5\xb1\x45\x35\xcb\x3c" "\x8c\xec\x03\x77\xfd\x8a\xb3\xb1\x1d\x78\x25\x95\x91\x54\xcc\x79\x43" "\xf8\xb1\x89\x43\xc8\xd8\x3b\x06\x06\xcd\x3b\x3c\x0e\xb2\x9b\x12\x26" "\x81\x94\x2a\x57\x3e\x66\x46\x66\xd5\xe1\xba\x88\x0a\xa1\xae\x22\x9a" "\x48\xf6\xc5\xc3\xb7\x09\x07\x38\x3c\x16\x34\x98\xb2\x35\xca\x21\x5c" "\x04\x74\x64\x23\xcf\x0b\x2b\x2b\x87\x9b\x01\x01\x22\xaa\xa9\xa5\x88" "\xc9\x65\x22\x39\xd0\xbe\x56\x64\x5e\x11\x08\xdb\xdb\x16\xe8\x9b\x48" "\xb3\x34\x62\x85\xe9\xd8\x4b\x47\xf9\x56\x50\xa5\xbb\xc9\x51\x85\x43" "\xb8\x50\x9b\x47\xb3\x96\xc5\xa5\x2f\xb7\xe7\xdd\xfc\xc4\x2a\x30\xf7" "\x72\x54\x4e\xc2\x3e\xa8\x6b\x41\x2d\xfa\x67\xcb\x80\xc4\x57\x0b\xe7" "\xf0\xac\x84\xf0\x44\xcc\x20\xd6\x74\x80\xd8\xe1\xa6\xba\xc5\xad\xf7" "\xba\x9e\x9e\x72\x51\xcd\xc0\x6c\x5a\xf0\x39\x8d\xea\x64\x52\x9a\x06" "\xa3\xcd\x79\x72\xbc\x8e\x9e\x11\xb7\x6c\xdf\xa8\x00\x22\x67\x36\xbe" "\x96\x82\x72\x09\x00\x9f\x30\x18\x00\xb5\x1d\xf2\x87\x3a\x4f\xa2\xf9" "\x2b\xa2\xe8\xb4\xf6\x89\x9b\x51\x70\xc5\x3b\x1b\x3f\x01\x5c\xdd\xad" "\x77\x11\xa1\xcf\x20\x09\x89\x5d\x95\x2e\xd3\x39\x28\xc6\x8b\x08\x01" "\x6b\xd8\x36\xaa\xf2\x42\xd2\xe2\x82\x35\x57\xb2\x4a\x2c\xa9\x75\xcb" "\x61\xf5\x11\x72\x25\xaf\x6a\xe4\xbd\x58\xde\xac\x02\x6d\xe4\x7a\x1b" "\xe3\xdb\xef\x8f\x85\xaf\xb6\x52\xef\xab\x13\xb7\xa6\x9a\xb1\xc6\x11" "\x30\x97\x44\x1e\xb0\x5a\xd5\x2b\x4c\xc2\xc8\x32\x34\x82\xb8\xe5\x57" "\xc1\x6b\x3c\x10\xc7\x29\x1f\xa8\x3f\x47\x9e\xe2\x81\x15\x50\x10\xdf" "\x9c\x4e\xb5\x4a\x77\xe8\x0b\x17\x3d\x70\x20\x0e\x68\x17\xad\xba\x57" "\x1c\x39\xa4\xf6\x56\x13\xad\x5d\xed\x35\x77\x4b\x6c\xc4\xbc\x28\x76" "\x17\x1f\xe4\x7c\x6c\x47\x06\xf9\x47\xdd\x4c\x1f\xc9\x8a\xbe\x30\x23" "\xec\xd0\xa3\x95\x05\x6e\x8a\xc3\x48\x67\xcf\xa4\x47\xbe\xc8\x4b\x05" "\x4e\x7a\x0c\x70\x28\x76\x31\x52\x93\x67\x02\x48\x78\xd5\x51\xe1\xb5" "\x2f\x9d\xc5\x95\xb8\xc1\x1d\x6e\x15\x4d\x6e\xfb\x9b\x5c\x56\xf9\xc7" "\xd5\x40\x1b\xa8\xea\xad\xbc\x88\x6c\xba\xf3\x10\x0a\xd3\x8e\x4d\x29" "\xda\xf9\xa7\x79\x37\x1f\x06\xa9\xb2\xc9\x38\x03\x4a\xe1\x8d\xdd\xc0" "\x0b\xee\x9b\x45\xd8\x4c\xf6\xb1\xaa\x21\x9c\xc2\x82\x07\xb8\x60\xb1" "\xb5\x03\x3a\xf2\xff\x60\x30\x87\x5a\xab\x70\x61\x42\x69\x08\xce\xf6" "\x13\x71\x91\xbb\xaf\x20\x49\x40\x93\x0f\x78\x8c\x56\xff\x9d\xf3\x64" "\x49\xb8\x67\x4d\x68\x63\x54\x96\xc4\xa4\x54\x76\x84\x1a\x9a\xe6\x7c" "\xef\x9f\x06\xf4\x2d\xa6\x2f\xa2\xbc\x1d\x97\x80\x4d\x11\x02\x56\x3a" "\xf9\x76\xea\x64\x4b\xa4\xb0\x55\x0a\x9f\xde\x22\x3e\xdd\x7b\x6c\xc6" "\xb5\x57\x5e\x18\xc6\xd2\x73\x89\x82\xf8\xc8\x12\x44\x93\x3a\xd7\xd8" "\x4a\xa6\x3e\x99\x22\xba\xef\xd0\xed\x75\x12\xda\x6e\x6e\x18\xc7\x0d" "\x69\x50\x00\xd3\xc3\x9c\x7d\x9d\x6b\x0a\xe9\x63\x06\x19\xa1\xf0\x83" "\x30\x57\x3f\xaa\xc4\x91\x50\xbc\x0f\x88\x48\x9d\xcc\x00\xee\x14\x66" "\xdd\x5d\x86\xba\x5e\x26\xcf\x10\x9a\xf6\xff\xe6\x67\xc0\x4f\x82\xe7" "\x2c\xf4\x08\xe0\xab\x3a\x07\x3c\xf9\x13\x89\x2b\xa8\xbc\x23\xeb\x1a" "\x11\x7a\xa5\x93\x0c\x2a\x77\x53\xfd\x3c\x0c\x8a\x11\xde\xf8\x8b\xb1" "\x73\x85\x02\x23\xa7\xc0\x9d\xf9\x84\xfe\xe8\xb6\xae\xd0\xbe\xdb\xe3" "\xa0\x20\x87\x15\xfe\x3b\x52\x78\x52\xbd\x40\x36\xc8\x5a\x6f\xd6\x00" "\xbf\xa0\x9e\xd6\x31\x1e\xfd\x03\x6d\xdd\xfa\x2f\x75\x9e\x2f\x50\x1b" "\x69\x76\x2f\xc9\x40\x40\x18\x76\x75\x01\x2d\x84\xb3\x2f\x8b\xa9\xa4" "\x7e\xd5\xd9\xaf\x73\xd8\x41\xd7\x42\x20\x58\x68\x1b\xe1\x07\x7b\x20" "\xc3\xd3\xde\xeb\xac\xe9\xae\x34\xa4\xe5\xa9\x7e\x2f\x24\x78\x10\xaf" "\xf2\xe7\xc9\x1e\xb9\x47\x0c\x54\xb8\x2c\xdb\x13\x0d\x07\x8d\xa3\xe7" "\x1b\x20\xb8\x07\xaa\x4a\x99\xb7\xdd\x0b\xbf\x91\xac\xef\xfa\xb6\x4d" "\xc4\x94\xc7\x5a\x29\x87\xbf\xef\x57\x66\x7d\x8c\x9a\x50\x7e\x4b\x8c" "\xcf\x3f\xb4\xf4\x47\x99\x0c\x9c\x4f\x0d\x00\xc9\x7d\x1c\xca\xe5\xca" "\x1a\x1d\x89\xc0\xcf\x79\x6d\x3a\xfd\x97\xea\xde\x3c\x64\x7f\x8b\xed" "\xbd\xd4\x34\xbe\x2b\xa1\x49\x7f\x0b\x50\x84\x04\x46\xe2\x09\x30\x76" "\x32\xe6\xa9\x2f\x56\xd8\x49\xf7\x56\xc1\x4e\x59\xce\x64\x44\x0d\xc4" "\xc1\xb2\x89\xd2\x7c\x27\x59\x04\x93\x53\xdc\x56\xa8\xd3\xfd\x60\x49" "\x11\x4c\x9c\x48\x27\x49\x1d\x89\x51\x49\x23\x68\xc8\xf7\x72\x6e\x63" "\x02\x1d\x91\xe3\x04\x2c\x38\xdf\x6b\xaa\xf7\x64\xa6\x4b\x82\xef\xe2" "\xc5\x21\xe3\xef\x59\x1e\x0c\x09\xbd\x41\x27\x5f\xce\xce\xb5\x3b\x48" "\x2a\xa6\x19\xcf\xf2\x4a\x5b\x1c\x02\x10\xee\x63\x23\x99\xfe\x04\xdc" "\x6f\x49\x63\xe7\x3e\x00\xc2\x45\xc2\x36\x28\x00\x7e\xf0\xab\xa0\x79" "\x92\x9a\xc8\xc2\x30\x42\x88\x90\x4c\xc7\xe2\xe2\xb3\x50\xf4\x21\x62" "\x66\x9c\x44\xef\xfc\xe1\xd3\xdd\x33\x98\x1a\x20\x3d\x5b\xfd\xaf\x66" "\xcd\x80\x5c\x4b\xa6\x9f\xf9\xb9\x08\x33\x32\xd3\x58\x29\xcb\xf2\x47" "\xcf\xf9\x90\x7b\xe7\xf2\x4b\x56\x35\x45\x09\x9b\x1e\xfc\xa3\xd2\x7b" "\x34\x11\xd1\x62\x29\x46\x0d\x1c\xbe\x95\x6b\x71\x46\xaf\x29\xec\xb6" "\xad\xf5\x1c\x22\x06\x9a\xe8\x01\x58\x5f\x35\x73\x9f\x0b\xe1\x3a\xfa" "\xad\x19\x80\x48\x03\xbf\x26\x62\x9c\xed\x00\x65\x12\x35\x84\x17\x4d" "\x2d\x6f\xb3\x4d\x65\x23\xf0\xf1\x54\x97\x7e\x67\xce\xdb\x6b\x74\xb8" "\x93\xed\x77\xf0\xdc\xc3\x22\x96\x91\x0d\xa7\xbe\xfd\xbc\xcd\x6e\x7c" "\x1a\xe3\x3c\xb4\xcf\x35\xfa\x87\xd5\xd2\x2e\x15\x0f\x26\xc2\x5c\xd3" "\x97\x35\x3b\x0b\xcb\x44\x39\x9d\x97\xce\x2b\xb4\xa1\x4f\x11\x96\x82" "\x03\x00\x1d\x8a\xbd\x3a\x24\x8c\xf7\x69\x11\x31\xd2\x19\xf8\x45\x31" "\x00\x80\xbb\xfd\xed\xed\x8f\x3f\xf9\x0c\x9b\x7a\x94\xfd\x8b\x2d\xb4" "\x74\x16\xdd\xf2\x78\xa1\xbc\xd8\x0a\xac\x55\x8d\x3c\x2c\x55\x6f\x99" "\x6f\xfa\xb6\xb4\xc6\xf2\x31\xc3\xdc\x52\x93\xd5\x90\x17\xa2\xdf\xaf" "\x17\x76\x86\x5c\xfa\xc7\x2c\x6b\x01\xe5\x22\x43\x11\xf8\x95\x3f\xac" "\xa3\x0a\xee\xc5\xff\x3c\xcc\x9a\x6f\x44\x53\x94\x56\x39\x52\x17\xc8" "\x23\x04\x95\xc8\xed\xe5\x98\x82\xae\xf2\x74\xfd\xc0\x5d\xe3\x12\xad" "\xa1\x20\xf9\xaf\x08\xe6\xd6\xc2\x14\x77\x09\x33\x93\xf9\xc8\xa2\x23" "\x66\xcd\xfc\xfe\x59\xe2\x22\xc1\xf5\x65\x95\x25\x04\x95\x2b\x6c\x12" "\xbc\x4c\x88\x47\x63\x56\xca\xc0\x4b\x4a\x3f\x10\xef\x1c\x89\xd9\x60" "\x8e\xef\xcc\x5e\x43\x5e\x02\x04\xe3\x60\xdb\x55\x37\x73\xea\xcd\xe6" "\xe3\x5b\x4d\x25\x2d\xad\x3d\x55\x87\x14\xfd\xb0\x57\xfa\xff\xa2\xd0" "\x95\x3a\xc3\x6b\x79\x40\x37\xfd\xf8\xe1\x3a\x66\x82\xee\x93\x73\x1e" "\x03\x2c\xa4\x54\xfc\x9b\x54\xce\x86\x8b\xc3\xf4\x83\x92\x84\x27\x97" "\x03\xda\xd2\x93\x1a\x4c\xc1\x95\xd7\x54\x1d\xbb\xe5\x4f\xdb\xb7\xa4" "\x6d\xa3\xd1\x8b\x18\xcc\x0e\xb7\xba\x62\xb3\xf5\xce\xbe\xd8\xd2\x66" "\xfb\x70\x3a\x1a\x22\xa8\x19\x60\xf1\x77\xf4\xff\xee\xa6\x4d\xb7\x71" "\xd3\x49\xff\xc6\x4d\x72\xf2\xd6\x21\x03\x3c\x11\xad\x7b\xa7\xba\x83" "\x8c\xbd\x0d\x34\xb4\xc6\xfb\x8b\x3d\x4e\xb9\x1a\x4f\xee\xb5\x28\xec" "\xc0\xc8\xff\x4a\x08\xa2\x49\xd9\x96\xd9\xb2\xdc\xe7\xdd\xb4\xea\x07" "\xf9\x34\xff\xd7\xa6\x1d\x30\xf4\x63\x74\x54\x85\x46\x2f\x89\x79\x43" "\xd9\xdb\xea\x59\x70\xf7\xa1\x73\xe6\xf1\x34\x35\x59\x77\x1c\x42\x70" "\xe7\x2f\x0e\x53\x09\x14\x44\x66\x50\x64\x2e\xbc\x28\x66\x77\xb2\x05" "\xf8\xfd\x3c\xfb\xbf\xf7\x4a\xf9\x5c\x12\x7b\xe5\xa2\xdd\x5c\xaf\xe0" "\x23\x29\x12\xbe\x34\x81\xe2\xa0\xb1\xa0\x06\x0f\xb7\x9f\x5e\xee\x9c" "\x55\x45\xdd\xd5\x0f\x46\x38\x7e\x11\x3f\x6b\xa1\x76\x8c\x60\x78\xd5" "\x41\x61\xcd\x00\xf6\x5d\x7f\x3f\x5f\xe0\x0f\x41\x23\xb8\xd0\x35\x73" "\x85\xdd\x14\x55\x59\x60\x81\x96\x7f\x52\x07\x45\x80\x50\x8a\x7b\x8a" "\xc2\xe0\x90\xf9\xb1\x82\xdc\x56\xfa\x9c\xb4\xb6\x9a\x94\xc0\xf6\x9c" "\x65\x10\x48\x62\xea\x67\x0c\x9a\x7d\xaf\x78\x79\xa1\x78\xaf\xa7\x2d" "\x32\xec\xdc\x2b\xf3\x50\xbf\x61\xa1\xb9\x8e\x18\x68\xfe\xd0\x23\xbb" "\x63\x93\x06\x6d\x78\x19\x32\x21\xec\x3e\x79\x01\x23\x3e\x72\x26\x37" "\x89\xeb\x62\x8f\xb1\xa1\x0f\xe7\x3c\x5c\xeb\xac\x92\xdc\x1e\x3e\x93" "\x34\xf5\xe0\x91\xd3\xf4\x31\xf0\x93\xee\x71\xb8\x2c\x90\xb8\x5b\x89" "\xb9\x87\x45\xe2\x06\xe2\xdc\x0a\xb1\x00\xab\x8d\xb1\x84\x2a\xc1\xf3" "\x31\xfa\x66\x97\x18\x33\x56\xea\x29\xa8\x70\x34\xe0\xe8\xfa\x3e\xa7" "\x42\x1d\xc0\xf6\x40\xb8\x4e\x02\x0d\x5c\xb9\x85\x86\xc6\xea\x86\x67" "\x30\x69\x1b\xe4\x65\x0b\x71\x36\x70\x71\x1e\xe8\xa9\x70\x55\x0e\xba" "\x12\xa3\x08\x18\x00\x5f\xa2\x81\x92\xa5\xd4\xc7\x2b\x22\x1d\x2c\x79" "\xf7\x2a\xc0\x19\x4e\x52\xcc\xda\x11\xfe\xf2\x2b\xfc\x18\x63\xb9\xaa" "\xa8\x4f\x95\x14\xa4\x56\xc5\xf4\x99\x47\xdf\xb3\xb2\xc2\x8d\x24\xee" "\xd9\x21\xe0\x4c\x1a\x62\xda\x8f\xb7\x64\x57\x34\xc4\x7a\x21\x29\x66" "\xba\xda\xe3\x7b\xf2\x6a\x5a\x3f\x9d\x43\xf3\xbd\xe3\x44\xb1\x7f\x3e" "\x5a\x5c\xa0\x28\xcd\x62\x93\x15\x8f\x47\xf4\x2a\xac\x4d\x4d\x88\xd4" "\x6c\xe5\xa2\x85\x5f\x47\xa8\xe1\xeb\x25\x08\xc7\x72\xe7\x1d\x08\x5a" "\xf2\x30\xd0\x94\xac\x2a\x77\xfc\xb7\x07\x89\xd9\x08\x91\x44\x0d\xea" "\x8c\x34\xf1\xbf\x8c\xce\xa5\xf7\xd5\x8b\x86\x75\xfb\xc4\x4c\xf6\x51" "\x68\xa1\xe9\x8d\x82\x76\xc9\x89\x1b\xec\xe1\x4a\x96\x5d\x02\xdd\x9f" "\x78\xc1\xe9\x5b\x71\xec\x07\x91\xd6\xcf\xcf\x0a\xb0\xbf\x80\x72\x3a" "\x2f\x89\xc4\x66\x1c\x97\xe8\xb4\x83\x18\x16\x09\xbc\x06\x63\x4b\x76" "\xd6\x7a\x1c\x1d\x36\x23\x9d\xc1\x5a\x8d\xb7\x4f\xfa\x54\x56\xb5\xd9" "\xc0\x3f\xb1\x20\xf9\xcb\x29\x25\xa9\x01\x7a\xd6\x30\x50\x23\x15\x60" "\x4f\x5b\x7e\xb1\x6d\x35\xb7\x3d\xa9\x5b\x14\x2a\x59\xd0\xc6\xb0\xd4" "\xd9\x23\x3f\x3d\xe7\xa2\x1d\x1f\xb2\x18\x2c\xa2\x74\x67\x7d\x89\xc2" "\x81\x0d\x2f\x45\x67\xba\x79\xf2\x6f\x48\xce\xc0\x88\xf4\x21\x67\x34" "\x1b\x41\x03\x57\xf3\x00\x2f\xb4\xb7\xc5\xe8\xf9\x25\x31\x18\x3a\x60" "\xc7\xd8\x44\xf9\x88\xf8\xdc\x0b\x23\x22\xc0\x23\x8c\x8e\xac\xe7\x94" "\xe5\x7a\x94\xc6\x3e\x4e\x98\x34\x07\xd3\xa6\xc8\x1b\xf3\x89\x75\x33" "\x7b\xfe\x41\x34\xdf\x20\x27\x82\xa6\x15\xf6\xf8\xb6\xe0\x80\xad\x3f" "\x35\xa4\x55\xfc\x3b\x49\x48\x36\xf2\xec\xf6\xd5\x4e\xd5\x60\x0c\xbd" "\x56\x4f\x85\x53\x25\x66\x56\x5f\x80\x4a\x14\xa4\x1c\xb7\xc4\xf2\x17" "\xa0\x2b\xae\xe2\xd3\x18\xcb\xee\x88\x17\x7f\x5e\x1a\x69\x5e\x44\x04" "\x48\x0b\x74\x51\x9f\x9b\x0f\xc8\xaf\xa5\xc0\xfa\xfb\xd9\xd9\xa2\x4f" "\xb1\xea\x38\x68\xe0\x89\xbc\x4a\xda\xa6\x67\x6c\x0d\x77\xee\xfc\x8f" "\x22\x55\x17\xe3\xf7\x25\xa3\xa1\x26\x96\xc5\x6c\x6f\xc0\x08\xe2\x5d" "\xa1\x3c\x24\x42\x16\x95\x11\x8a\x2c\x32\xbf\x44\x3b\xa9\xe2\x8e\x3e" "\xc6\x96\xdc\xbd\xd6\xc5\x3b\x06\xbf\x2b\xb0\x72\xb3\x8d\x5b\xc3\x2e" "\xf3\xf2\x60\x9e\x5f\x72\xcc\x4d\x63\x1b\x27\xb2\x60\x1c\xb3\xb2\xc7" "\x01\x5f\x43\xba\x0e\x59\xe2\x4a\x19\xc7\x99\xa8\x5f\x4f\xb1\x57\x84" "\xc9\x0b\x13\xd3\x2c\x59\x5b\x49\xaf\x6a\x73\xb6\x5b\xfc\xad\x60\x8f" "\xa5\x5d\x17\xe0\x45\x12\x47\x2a\x76\x9a\x09\xc1\xf1\x82\x5a\xb9\x7f" "\x67\x71\x2c\x2d\xff\x63\x35\x0f\x9c\xb2\x03\x90\x3b\x43\xf2\x0f\x7b" "\x18\x16\xda\x52\x56\x41\x7e\x62\xd2\x0d\xa9\x28\x54\xf5\xa9\x90\x4d" "\xa0\x57\xb0\x05\x38\x5d\x36\x42\xa5\x5c\xe2\x61\xda\xbf\xfc\xa1\x75" "\x92\x1d\x80\xd4\xda\xb3\xe8\x53\xa5\xc3\x41\x6f\xf0\xe0\xa1\x9a\xfb" "\x92\x02\x7f\x66\xfb\x2d\x74\x45\x4e\x56\xa6\xa1\x7d\x9e\x6b\x74\xb0" "\x13\x1b\x43\x1e\x9a\x05\x19\x09\x21\x0e\x6e\x02\x7d\x3e\x97\x11\x0c" "\x7a\x7b\xbb\x65\x46\x2b\x4d\x90\x69\xaa\x40\xe5\x18\xf5\x4c\xd9\x37" "\x6f\xa2\x4b\x11\x94\x93\x59\xf2\x0c\x61\x25\xff\x54\x57\x7a\x02\x6f" "\xb2\x45\xff\xc8\xaf\xd5\xb4\x68\x97\x27\x2f\x3c\xd8\xf2\x19\x73\x5b" "\xd7\xca\x36\x03\x09\xff\xec\x15\x88\x43\x9e\x20\x5f\x9f\x91\x9c\x8f" "\x87\x19\x39\xdb\x49\x9f\x6e\x19\x1b\x71\x3f\xaa\xd0\x70\x9a\xa1\x1a" "\x0c\x6c\x8d\xb1\x49\x5d\x3a\x37\xcb\x0c\x21\x01\xdb\x54\x76\xe8\x46" "\xa4\xbc\x7c\x7c\x8a\x40\xbc\x63\xab\x65\xf9\xc7\x2b\x21\x06\x0e\x23" "\xb3\x09\xf1\x19\x8a\xde\x63\x92\x0a\x9a\x3a\xd4\xd7\xe9\x13\x17\x74" "\x1c\xb2\xbf\x97\xeb\x42\x63\x18\x4f\x12\xb5\xe9\x8d\xd6\x19\xca\x97" "\xb3\x43\x1f\x72\x6e\xfd\x62\x41\x7f\xcc\x4f\xe3\x82\x30\x34\x7a\xb2" "\x4a\x91\x96\xd6\x2e\x7a\x3a\x66\x60\xbf\xc7\x64\xe0\x97\xc1\xa4\x7c" "\xb1\xd0\x54\x83\xae\x6a\x6c\xd8\x32\x98\xbe\x7e\x02\x77\x35\xe7\x78" "\xef\xbd\x76\x62\x1d\x65\xff\xab\xaa\x22\xe6\xa4\xe2\xe7\xef\x41\x08" "\x2f\x0b\x0f\xf0\x1c\xa8\x74\x71\x47\xc7\x2a\x75\x8a\x31\xe4\xf8\x8d" "\xfb\xc1\xb6\x37\x2c\xe3\x27\x9a\x76\x67\x91\x06\x68\x55\xe3\x64\xfc" "\xa9\xf0\x27\x67\x41\x5b\x28\xa5\x97\xce\xf6\x03\xe8\xf8\xd3\x5e\x4f" "\x5b\x13\xb0\xc2\x39\xec\xf4\x68\x84\xf2\x1f\x74\x60\x17\x36\x80\xb9" "\x57\x96\x25\xf1\x26\x8a\x8b\x10\xd3\x8d\x0e\x65\x34\xf9\xad\x76\x3d" "\xb8\xfa\x7b\xf2\xb4\xa6\xab\x03\x3e\xf8\x34\xec\x92\x27\x77\x6d\x99" "\xc1\x2d\x2a\xb7\x4d\x1e\xa4\x08\xcd\x4d\x36\xb6\xc0\x8a\x4e\x73\x70" "\xa8\x52\x08\xc1\xf2\xc8\xfe\x89\x83\x79\xb6\x43\xf2\xdc\xe4\xeb\x41" "\xb6\x1c\x34\x3d\x57\x0a\x57\x35\x11\xa4\xae\x70\xb3\xc6\x8d\xdf\xc9" "\xd0\x60\x06\x57\x22\xf1\xad\xc9\xdb\x99\x61\x89\xea\x81\x39\xea\x05" "\x49\x56\xab\x17\xb0\x50\x4a\xd3\x52\x13\x7d\x97\x76\x13\x0d\x55\x2e" "\x09\x2e\x3c\xec\xc9\xab\x87\x9f\xc1\x32\xa1\xf4\xb0\x23\xb3\xd7\xa1" "\x5c\xef\x49\xde\x9d\x1e\x70\x15\xcf\xda\x90\x7d\xd6\x75\x91\xd2\xda" "\x25\x17\xde\xfa\xf2\x56\x2d\x9b\x82\x13\x72\x8e\x66\x3f\xdb\x7b\xb2" "\xd6\x93\x1b\x6e\x4b\x47\x13\xcc\x27\xe3\xef\x43\x47\x0d\x8b\x09\x13" "\xd2\x4a\x07\x26\xcc\x91\x1b\x5b\xa8\x57\x83\x76\x49\x40\xff\xd0\x87" "\x1b\x77\x36\x86\x8a\x26\x6a\x65\xf3\xa1\x80\xaa\xdd\xfb\x5e\x11\xf8" "\xf1\x31\xd1\x53\xe9\x30\x74\x63\xdd\x68\x76\x0d\x1f\x7f\x30\x35\xbb" "\x3e\x28\x53\xf9\x74\xeb\x83\x7c\x9b\x41\x5f\x43\xa3\x3f\xa8\xd8\x96" "\xac\x91\x55\x55\x1f\x1b\x4e\xce\x28\x80\x94\x95\x06\x7e\x97\x0b\x5b" "\x6d\x40\xe9\xca\xb4\x67\xf9\x7c\xf0\x74\x28\x09\xf7\x36\x79\x13\x71" "\x6b\x2d\x40\xca\x49\x5a\x47\x28\xa1\xa9\x6c\xe4\x00\xae\x6b\x96\x08" "\x9f\xdb\x37\x4c\xc6\xbc\x21\x22\x46\x65\x5f\x43\x31\x3b\x46\xb4\xb9" "\x9c\xf5\xe3\x71\x6c\x33\xae\x17\x7f\xcf\x53\xed\xb2\x95\x27\xf6\x7f" "\xd4\x10\x0f\x41\x9f\x7d\x09\xac\x8d\x8b\xa6\x1e\x22\xf9\xc6\x55\x8e" "\x9e\x84\xc9\x9e\x7e\x51\x2d\x85\xbb\xf5\x0c\xbd\x60\xb5\xb8\x3c\xf4" "\x05\x35\x6c\x33\x5b\x4f\x70\xa9\x73\xe4\xb0\x0c\x1e\x8f\x4c\xe8\x9f" "\xce\x78\x48\x58\x5e\x08\x56\x58\x0f\x5c\xd3\xbc\x01\x1c\xb1\x64\x20" "\xfe\x96\x26\x14\xeb\xbe\x20\x4c\x6a\x46\xc3\xd6\x22\x92\xf2\x0d\x5c" "\x1b\xe2\x7b\x89\x5f\xeb\x1e\x59\xbc\x88\x22\x96\x42\x70\x30\xf5\x05" "\x90\x39\x25\x25\x08\x85\x1b\xea\xb5\x3a\xfb\x64\x60\xf9\xcd\x22\xf5" "\x56\x35\x63\x56\x38\x82\x7b\xa8\x32\xc1\x21\x1a\x2a\x8d\x5f\x72\x3e" "\x85\x7e\xb9\xb5\x52\xda\x09\xec\x96\x28\x1c\x32\xf5\x6e\x92\x34\x40" "\x73\x2c\x97\x31\x12\xb1\x94\x54\xfa\x9e\x0c\xf3\xbe\xef\xd4\xb4\xe3" "\x25\xaa\x00\x86\x92\x33\x69\x85\xf4\xd1\x28\xd7\x33\x61\xb6\x0b\xf6" "\xfb\xac\x3d\xff\x78\x06\xc0\x31\xb6\x18\xc2\x9c\xc5\x12\x8e\x87\x28" "\x03\xe2\xb1\x30\x91\xdf\xdd\x83\xae\xd5\x6d\xb6\x05\xb9\xed\xb0\x40" "\x55\x93\xc7\xb6\x31\xdb\x61\xb0\x7e\x85\x0e\x68\x8e\xf0\xd5\xd2\xd7" "\x63\xc7\x81\xce\x1a\xbc\xbf\x09\x1a\x1a\xc4\xae\x9e\x44\xec\x08\xed" "\xa6\x90\x5e\x68\x64\x8c\xa7\x0f\x2e\xb6\x50\x0d\x45\x49\xba\x18\x1d" "\x0a\x60\x20\xe3\xcf\xad\xe2\x3d\xa6\x3a\x02\xe3\xd6\x1d\x74\xb9\x0a" "\x35\x49\x88\x07\x96\xb3\x3d\xc0\xad\x33\x62\xa6\x7f\x8e\xe0\x6f\x89" "\x12\xaa\x3e\x3a\x81\x91\x05\x30\x34\xc1\x57\x21\xb5\x71\x98\x0e\xdb" "\x68\xcc\x02\xcb\xd2\x15\x4c\x48\x35\xf4\x47\x14\x73\x1e\x51\xef\xbc" "\x2a\x56\xcc\x38\xb8\x99\x2f\xd3\x12\xf7\x25\x8c\xa6\x83\x99\x49\x2f" "\x4e\xc8\xab\x56\x23\xc1\x75\x09\xda\xf6\x72\x28\xdf\x98\x1b\x48\xa5" "\x55\xda\x0d\x78\x38\x85\x1d\x91\xfe\xc2\x90\x2a\x6e\x8f\x36\xb9\xeb" "\xa0\xdd\xd4\x24\x88\xd9\x77\x2b\xcc\xe5\x98\xc2\x76\x19\xd6\x3e\x0f" "\x5c\xf5\x94\x89\x90\xe2\x57\xdf\x62\x28\xfa\xf6\x58\x0c\x4d\x8c\x26" "\x97\xa1\xc7\x19\x45\x84\x3f\xfb\x94\xd6\x19\xbf\xc9\x51\x0a\x42\xff" "\x2b\x38\x77\x27\x69\x81\x77\xb1\x93\x7f\xdb\x3b\xaa\x7e\x68\xdc\xd8" "\x88\x17\x08\xe5\x57\xfb\x7c\x09\x71\xb5\xe8\x4a\xb8\x3c\x48\x14\x12" "\x4e\x6d\x48\xa5\xd2\x11\x89\xba\x7f\x0c\xe7\x66\xa7\x37\x8a\x40\x9a" "\x70\xca\xf6\xa5\x1f\xa7\xe8\x80\x30\xaf\xba\xc9\xa7\xb6\x43\xcf\x47" "\xc3\xe7\x44\x1d\x0f\x79\x00\x63\x49\xc3\xf2\x5b\x5b\x30\x9a\x41\x28" "\x08\xf4\x5f\x87\xe9\xf8\x22\xae\x8d\xc6\xc1\xab\x7b\x86\x32\x84\xcd" "\x84\x03\xdc\x11\x58\xf8\xb7\xda\x74\x1f\x4e\x73\x4f\x04\x5d\x3f\x02" "\x65\x7c\x72\x29\xb1\x03\x97\x3e\x6e\x18\xc9\x6a\x45\x5a\xc5\x2c\x36" "\x46\x33\xcc\x85\xa0\xe0\xd4\x37\x6c\x7a\x75\x11\xbd\xaa\x55\x0a\x7b" "\x0f\x16\xe4\x81\x9b\x26\x03\xff\xdd\x5c\xea\xc7\xe9\x83\x2d\x93\x8e" "\x39\x33\x03\x59\xc3\x5f\xb7\x52\xcd\xd8\x4d\xb4\x2b\x2b\x4c\x38\xc8" "\x81\x7c\x4d\x67\x4b\x30\x7e\xd6\xbe\x92\x32\x66\x2d\x14\x05\x4f\xa3" "\xf5\xc5\x84\x80\x5c\xe8\x92\x3b\x21\x4b\xaa\x2f\xf9\xe6\xd8\x8f\x18" "\xf4\xf6\x35\xe4\x80\x5c\x95\x78\x48\x7d\x4a\xb8\xc0\x0d\x40\xeb\x2a" "\xce\x7c\x41\xfe\xcf\x54\xb9\x7a\x72\x54\x35\x56\x12\x3a\x87\xd7\xec" "\x12\xb5\xfa\x84\xa2\x67\x1a\x81\x6b\xc5\xcb\x1f\x50\x02\x77\x2f\x4b" "\x85\x47\x23\x2c\x62\x65\xe6\xd8\xaa\x60\xa1\xd0\x91\xe0\xe1\xbe\x14" "\x5a\x03\xc0\x3a\xa6\x78\x15\xa7\x96\xd1\x27\x26\xcf\x36\xf6\xfe\x67" "\xec\x58\x5a\xde\xcd\xef\x44\x7e\x28\x12\x40\x27\xd9\xd3\xce\xbc\x52" "\x4b\x05\x1e\xf1\x43\x2c\x9a\xa6\x6f\x04\x63\x9e\xef\x51\xb7\xc9\x61" "\x7b\x2c\x6d\x38\xee\x38\x51\x33\xc4\xff\xce\xe9\x57\x07\x6d\x9a\xb9" "\x2e\xc8\x25\x15\x9f\xab\x95\xe7\xc0\x1c\x4e\xe9\xaf\x5d\x37\x63\x15" "\xad\x61\x87\x8a\xe6\xc5\xae\xbd\x94\x61\xd0\x8e\xc9\xe2\xcc\x14\x71" "\xdd\xc6\x2d\xf1\xae\xbf\x6b\x26\x2e\x43\xeb\xa1\xce\x0d\xdb\x94\x46" "\xf3\x05\x3d\xe6\x9f\x64\x8f\x73\x7c\x58\x83\x63\xb7\x4e\x09\xbd\x6e" "\x07\xb6\x25\x13\x37\xec\x33\x48\x48\x98\x75\x07\xd1\x49\xa4\x10\x62" "\x3c\x1c\x71\xa9\x93\xc5\x43\x8e\x6f\x41\x91\x57\xea\x75\xb3\x53\xce" "\x7b\xbf\x3c\xfb\x9b\xae\xd6\xfd\x65\x9e\x02\xbc\x79\xd7\x52\x3f\xd0" "\x35\xfb\xf6\xb8\x42\xb4\x0a\x47\xad\xba\x5a\x86\x98\xc6\xe9\xa4\x61" "\x2d\x40\x3f\x6a\xd9\xc8\x71\x09\x97\x99\x6c\x06\xe3\x17\xd9\x78\xa4" "\xc3\xfe\x50\x53\xf6\xf5\xe0\x5f\xfd\x0c\x9d\x65\xa5\xda\xe6\xde\xfa" "\xad\x87\xbe\xd5\x7a\x15\x8f\xfa\x1a\x86\x0d\x71\x75\x2a\x10\xef\x68" "\xd1\xa2\xd9\x22\xef\xf3\x90\x54\x68\xe1\x1a\x8d\x70\x6f\xb5\x05\x47" "\xee\xd2\x2f\x8c\x1f\x3f\x3b\x8c\xc0\x6d\x10\x37\x83\xc5\xca\x7f\x8f" "\x49\x44\x38\xbc\x07\xc7\xe6\x9c\x8b\x76\x9f\x66\xbe\x7a\x9b\xe8\x01" "\xd7\x8b\x00\xb3\xc7\x5d\xeb\x64\xf7\x7a\x47\x63\xca\x28\xc8\xdf\x33" "\xe3\xf3\xde\x00\xb8\xca\x73\xfb\xb2\x2c\xdc\xa6\x71\x6e\x0f\x52\xf1" "\xb4\xab\xd2\x97\xca\x87\xf5\x4d\x24\x09\x30\x60\x38\x1c\xa5\xdc\x36" "\x27\x36\x1c\x07\x97\xcd\x2c\x55\xf4\x1f\xa1\x6b\xfe\x93\xd9\x71\x33" "\x18\xc5\x46\x5d\xa0\x69\x89\x13\xdd\x72\x13\x32\x64\xb6\x51\xf8\xa4" "\xc0\xf3\x69\x86\xa9\x92\xbf\xeb\xa3\x16\x9a\xab\x6b\xac\xad\x90\xa6" "\x67\x29\x65\xb3\xd9\xf9\x98\xaf\xce\x7b\x1c\x43\x8c\xd5\x26\xb5\x68" "\x5a\xf3\xf6\xe5\xc9\xe1\x39\x92\x92\xcd\x81\x94\xbc\x66\xe7\xdd\x04" "\xd1\x13\xfd\xab\x14\x64\x18\x1c\x58\x2b\xcb\x38\x02\xac\xa3\xd8\xe0" "\xb1\x0a\x32\x63\x32\xb8\xc5\xc7\xf2\x02\xc4\xd5\x95\xae\xaa\x6a\x40" "\x87\x30\x40\x1c\xc7\xc3\x90\x5a\x8c\xc4\x2c\xfb\x40\x16\x1a\x33\x3b" "\x03\x7b\x50\x1d\x2c\x43\xaa\x0c\x8b\x49\x44\x65\xe6\x21\x28\x4d\x29" "\x2a\x2b\x5e\x7d\x67\xac\x7b\xbc\x0e\x1f\xd5\xb1\x66\x3a\xaf\x90\x4c" "\x51\x63\xde\xfb\x6e\x99\x23\x89\x3b\x40\x70\x32\x81\x67\xa5\x99\x86" "\xa4\x84\x4b\x77\x0a\x6a\xf7\xfc\x99\x01\x59\x3a\x06\x00\x06\xc9\x4f" "\xe3\x03\xbe\xab\x11\x3d\x1e\xf8\xd6\x13\x4d\x8b\x78\x74\x75\x1f\x8b" "\x69\xf2\x0d\x6c\x78\x93\x7d\x3b\x66\x6e\xaa\x92\xe9\x12\x4c\xf5\x42" "\x99\xc9\xcc\x89\x60\x5a\x9a\x05\xdb\x93\xeb\xf0\x01\x75\x2e\x4a\xf9" "\x6a\xca\x52\x69\x69\xf2\xad\xc5\x84\x1b\x08\x98\x4c\x90\x77\x84\xaa" "\x25\x6b\xb5\x45\x19\xd7\xf5\x05\x29\xc3\xdb\xf4\xb7\x03\xb2\xca\xb5" "\x60\xb3\x6c\xb6\x61\x04\x08\x79\x64\x94\x3b\x74\xae\x91\x23\x8a\xe7" "\xdc\x12\x27\x2d\x86\x78\x7b\x16\xf2\x10\xb1\x53\xd9\x34\xd2\xc2\x2f" "\x52\xfd\x11\x26\xcf\x28\xe2\x47\x0c\x06\xde\x32\xf0\xee\x5d\xb1\x9c" "\x2e\x08\xb0\x8a\x46\x9a\x70\x02\x75\x5f\xe1\xf2\x72\x83\x93\xd8\x8c" "\xc4\x3d\x39\x2b\xef\xff\x06\xe7\x29\x33\xbf\x12\x2c\x08\xea\x8a\x77" "\x44\x41\x7d\xae\xbb\xb5\x1b\x7d\x15\xfb\xbf\x33\xdd\x4c\xd4\xbd\xa2" "\x2c\xbb\x79\x88\xb4\x3d\xcb\x62\xa4\x30\xd5\x8f\x37\x5c\x87\xc3\xc7" "\x01\x46\x09\xc0\x5f\xbe\x9b\x94\x81\x3f\x9d\x13\xe0\xa6\x5e\x24\xe9" "\xd8\x00\x29\xc3\x1c\x6a\x69\xf4\x94\x61\x5f\xa6\xe7\x61\x31\x67\xd3" "\x01\x5b\xab\x8b\xb5\xc8\x20\xbb\x50\x24\xe5\xd2\x60\xc2\xa6\x10\x72" "\x4f\x15\x8d\xe2\x10\x77\x70\xda\x13\x73\x79\xfd\xfe\x05\x50\x5a\xbf" "\x44\xc4\x63\xbc\xb8\xaf\xa2\xc3\xd2\xbd\xf2\x47\x38\x00\x32\x4a\x99" "\xa0\xf8\xec\x27\xf2\x86\x04\xf2\x66\x77\x5e\x13\x63\x8c\xeb\x6e\xe4" "\x35\x2a\x1d\x34\x6a\x7b\xe7\x0b\x74\x90\x99\x33\xdf\xd3\xa4\xbb\x6a" "\x38\xa5\x57\x13\xd7\x7a\x2a\x30\x8a\x4e\x9a\x98\xe2\x91\xc9\x34\x8b" "\x71\x0b\x08\x41\xbb\xb8\x3e\xb3\x80\xc4\xac\xdd\xcc\x42\x04\x65\x92" "\x12\x4c\x17\x63\x31\xa8\x67\xd3\xa2\x2d\x74\x6f\x57\xa1\x6f\x24\x42" "\xb1\x4f\x0d\xd9\x5a\x62\x1e\xed\x85\x02\x63\xa3\x08\x85\x07\x69\x8d" "\xb6\x48\x4b\x35\x2f\xff\x89\x1b\x64\xb2\xe3\x14\x59\x27\x0b\x64\x48" "\x6a\x5a\x5e\xa5\xa9\xe8\x05\x6e\x96\x4e\xd0\x15\x0b\x38\xca\xf1\x79" "\xf6\x4e\x50\x16\x9d\x02\x32\x6a\x9d\x7b\x2c\x64\xd2\x20\x71\x71\x34" "\x09\x04\x2c\x21\xc5\x55\x61\x87\x2a\xc2\x8b\x66\x9a\x06\xb1\x87\x97" "\x9b\xc5\x6a\x48\x03\xd1\x81\x58\x37\xca\xe6\x3e\xea\x2a\x53\x6d\x8d" "\xa9\x3a\xd9\x9c\x8d\xe1\x52\x57\xfb\x69\x1c\xa2\xe5\xf3\xa3\x09\x38" "\x4d\xf1\x1c\x81\xef\xe7\xa3\x6b\xa1\x38\x39\x3f\x58\xf1\x94\x94\x9a" "\x8b\xc6\x23\x9e\x8d\x7a\x9e\xb5\x69\xfa\x8f\x25\x59\x91\x03\xc3\xd8" "\x36\xdf\x70\x1a\xa6\x3c\x72\xb1\xf1\x2d\xa7\xb5\x01\x79\x55\x6e\x87" "\x03\xef\xd0\xee\x06\xfc\x14\x89\xe4\xfb\x0b\x1c\x71\x63\x5e\xb0\xb2" "\x46\x1c\xb5\xfb\x47\xc8\x37\x6b\x2d\x15\x07\xab\x64\xc7\x6a\xe7\xdd" "\x7e\x58\xb4\x58\x75\xdb\xad\x69\x72\x1a\x2a\x1f\xd7\x64\x1e\x1b\xc5" "\xd4\x30\xa1\xf0\x14\x30\xb5\x31\x30\x91\x18\xe9\x7b\xe5\x4f\x74\x45" "\xc9\x90\x03\xdf\x55\x08\x43\xb7\x27\xf5\xe3\x38\x46\xbf\x4f\x70\xde" "\x26\x8f\x88\x7e\xd2\xdb\x3b\x51\xe5\xee\x23\xb6\x08\x20\x6d\xf8\x85" "\x9c\x4c\x55\xe9\x6d\x46\x53\x20\x62\xb4\x4d\x5d\x0d\xd3\xd7\x70\xd3" "\x7f\x64\x0d\xcf\x50\x38\x98\xd6\xac\xdc\x36\x8d\x3a\xc5\xdd\x50\x7e" "\x20\x5f\x60\x88\x69\x85\xdc\xbc\x72\x49\x19\x86\x75\xbf\xa4\x80\x52" "\x7d\xff\xc8\xb5\xab\xd9\x76\xe0\xfb\xc1\x05\x14\x40\xe5\x47\x9f\xf7" "\xac\x85\x1b\x1f\x32\x77\xa9\x3a\xbb\xfc\x85\xbb\xb8\x97\x17\xd7\x56" "\xbf\x7e\x0d\x77\x4e\xe2\x03\x71\x47\x94\x7c\x82\x6c\xf2\xdb\xdd\xb3" "\x27\x19\x3d\x4e\xfb\x6e\xd3\xc5\xda\x8f\x41\xa8\x67\x23\x2d\xce\xf8" "\x38\x53\xd8\x46\xb5\xaf\xfa\xcf\x73\x8c\xc3\xb1\x84\x99\x6f\x42\x50" "\x4f\xa6\x44\x38\x99\x4d\xad\x7b\x01\x3e\xb8\x31\x52\x15\x0a\x8b\x78" "\x15\x02\x41\x14\x4a\x7c\xcc\xa9\x0d\x79\xf1\x6e\xb6\x48\x83\x15\xce" "\x45\x9e\x83\x51\x2d\xa4\x10\xf5\x2f\x43\x1f\xf4\xf4\x71\x8d\x22\xcc" "\x1c\xaf\x10\x49\x5d\xa6\x6f\x1e\xcc\x5e\x7d\xdb\xac\xc0\x73\xf5\x9c" "\xa6\x9e\x13\x04\x7d\x5a\xad\x0e\x2c\x19\x2a\x9d\x6e\xed\xf1\x00\x2b" "\x3d\x45\x0b\xb4\x64\x8d\x2e\xb3\x36\x81\xeb\xd7\x2e\x3f\x48\x0c\x2c" "\xf4\x6c\x53\xd6\x9c\x47\x4f\x7c\xb8\x5a\x40\x7d\xd8\x3e\xab\x77\x63" "\x64\x2a\x82\xee\xf6\x31\xee\x9f\xdd\xd1\x5d\x07\xeb\x32\x3e\xa1\x62" "\x00\x83\x57\xca\x7a\x06\x7a\x32\xf3\x06\x6f\xb7\x95\xb3\x2a\xeb\x48" "\x4e\xaa\x95\x98\x1e\xeb\xd0\x7a\x67\x75\x10\xc2\xff\x45\xcd\x1e\x0b" "\x37\x5f\x13\xe0\x4c\x15\x62\xa8\xff\x76\xae\xac\x99\xc1\xd7\x08\xb2" "\xfb\xe4\xd2\x6a\xe3\x20\x48\xce\x81\x6a\xe5\x47\xc6\x90\xf2\x21\xfa" "\x5a\xcb\x72\xa0\x22\x95\x1a\xb2\xc0\xc2\x66\x12\x72\x00\xe2\x4d\x07" "\x56\x48\x99\x72\x29\x32\xf7\x5c\x99\x52\xf9\xc4\xed\xc7\x51\x81\x87" "\x9b\x2c\x88\xd3\x9d\xcc\x83\xde\xfd\xa4\x80\xbb\x9f\xb5\x74\x44\x6c" "\xfa\x6a\xbe\x76\xc1\xe2\x13\xcd\xef\xe5\xfd\xf7\xba\x88\xc5\x90\x08" "\xa6\xb0\x2d\x6e\xfb\x25\xb3\x47\x82\xb2\xc5\x4f\xcc\x17\x7f\x53\x8f" "\x49\x96\x5b\x79\xdf\x31\xba\xb6\xd4\x60\xe6\x7e\x17\xf0\x21\x1f\xa2" "\xaf\x98\xf6\x7e\xbb\x4a\x46\xf6\xe9\xd3\x4c\x57\x42\xe5\x8e\x0e\x11" "\xb4\xbf\x1b\xb2\x82\x97\xe6\xc7\x10\x60\xf2\x17\x66\x73\xe3\x11\x83" "\x16\x44\x53\x7d\xff\x0c\x7f\x06\x9f\x2f\xdc\x02\xd4\x4e\x5d\x0c\xa7" "\x68\xaf\xf6\xfd\xe2\x0b\x43\x2f\x2d\x8b\xf0\x73\xdb\x1d\x10\x37\x12" "\x29\x09\xf6\x38\xd1\xa7\x63\xc0\xe0\x16\x0b\xf2\xc3\xf4\xf3\xa7\xbe" "\x2c\x9b\x95\xaf\x04\xfe\xdd\x53\x67\x47\xb8\x3a\x85\x44\xe7\x97\x16" "\x3d\xad\xed\xca\xe4\xa5\x25\x51\x97\x12\x21\x35\x8b\xc6\x54\x1b\xff" "\x78\x03\xdb\xc6\x29\x36\xd4\x4c\x5f\xb7\xea\x56\x8b\x8f\x49\xac\x74" "\x13\x7b\x16\x3b\xd6\x30\x4d\xa8\x67\x4f\xe7\x8d\xd2\x28\x49\x55\xda" "\x8d\x37\x36\xb8\x58\x06\xd6\x51\xef\xef\x62\x6b\xe4\x12\xe5\xdc\x8e" "\x41\xad\xeb\xd5\x55\x6f\xf2\x28\x85\x98\x33\x39\x92\xd6\x0e\xb2\x9e" "\x40\xee\x1e\x45\x4e\x5f\xbf\x31\x22\x76\xa2\x77\xe5\x4c\x27\xd9\xea" "\x0c\x78\xe9\xfb\x1c\xb7\x52\xf8\x9e\xa1\x25\xd3\x38\x9e\x7e\x2a\xef" "\x45\x71\x4b\xb9\x37\xc6\xf6\x53\xb2\x37\x85\xf5\xa4\x40\xa4\xe5\xc2" "\x7f\x4f\xeb\xe9\x6b\x80\xe0\x6b\xdf\x9a\x8a\x1b\x0e\x4b\x25\xf6\xa2" "\x72\x4d\x08\xa2\x0e\x5b\xb3\x26\xa9\xb0\x3e\x9a\xa6\x31\x2d\x70\x1b" "\x11\x82\x5d\xd1\x0d\xfd\xf3\xad\x19\x16\xa1\x44\x90\x96\xbd\xd4\xc4" "\xc1\xae\x8e\x8e\x3e\x45\x48\x6a\x61\x7f\xa3\x43\x67\x0c\xb8\x1c\xab" "\xd0\xc4\xc0\x55\xbb\xb7\x3e\xd1\x1c\xa9\xbb\x55\x18\xd7\x90\x72\x56" "\x24\x34\x59\x04\x76\xd3\x7a\xf9\x77\xb1\xa1\xbe\xb8\x7a\xa0\x62\x64" "\xb6\x3a\xff\x26\x7b\xf1\x9b\x57\x32\x6d\x39\xd7\x0e\x73\x05\x3d\x04" "\x65\x9b\xba\x62\x0d\x82\xd9\x89\x13\xdb\x3d\x55\xe0\x24\x58\xeb\x14" "\x71\xea\xbb\x19\xe4\x0e\x43\x94\x3f\x88\x13\x4d\x73\xd1\xd1\x09\x80" "\x8d\xa6\xb7\x11\x47\x15\x0e\x03\x8c\xa8\xc3\x17\x4b\xf7\xe3\x20\x49" "\xbb\x62\xf7\xce\x96\x16\xad\x26\xe7\x13\xc6\x4a\xf1\xfd\xab\x38\x4b" "\x0c\x7c\xd7\x13\x89\xb6\x0d\xc2\x84\x2d\x90\xc5\x6b\x68\x6a\xaf\x57" "\x94\xbb\xe0\xdf\xdc\xc5\x26\x88\xdb\xb0\x83\x7b\x87\x3c\x6c\xa6\xd0" "\x8a\x10\x68\x86\xbb\x5e\x22\xbf\x76\xef\x95\xad\xae\x44\x60\x08\x26" "\x00\x6f\x20\xe8\x71\xcb\x64\xeb\xba\x75\xa9\xd7\xcf\x1d\x71\xe8\x0d" "\x0f\x8e\x3f\xcd\x24\x1d\x0d\xbd\xe4\xa5\x58\x7f\x4f\x6f\xb3\x45\x07" "\x58\x99\x02\xac\xac\xd1\x93\x53\x6c\xc2\xe8\x91\x71\x57\xe4\x97\x1f" "\xd4\x69\xaa\xa1\xf5\x07\x20\xa1\xee\xfa\x31\xc5\x35\xd2\xba\x01\x0e" "\xe7\x95\x61\x5b\x76\x8d\xb8\x92\x63\x8e\x5a\x0e\x3f\xfb\x54\x34\x96" "\xa6\xd4\x7b\x7d\x74\x3c\x3c\x03\xf3\x27\x10\xab\xe9\x18\x3a\x27\x18" "\xd1\x83\x0b\x42\x08\x81\x06\x0a\xe9\x9b\xfc\x4a\x9e\xae\x32\x09\x51" "\x88\xde\xea\x2e\x64\x5d\x52\x92\xea\x99\xd0\x44\x6d\x51\x70\x1f\x1d" "\xae\xfd\x30\xe9\xf9\xc8\x48\xde\x3c\xc1\x7b\x4b\x8c\xcd\x8e\xb8\xbf" "\x9b\x4b\x63\xca\xc2\x00\x99\x3f\xfd\xf7\xec\xc0\x6c\x25\x78\xd5\xea" "\x21\xf0\xf1\x5b\x48\xc0\x10\x17\xe3\x9c\x94\xba\xb5\x22\xc7", 8192)); NONFAILING(*(uint64_t*)0x20002e40 = 0x20002240); NONFAILING(*(uint32_t*)0x20002240 = 0x50); NONFAILING(*(uint32_t*)0x20002244 = 0); NONFAILING(*(uint64_t*)0x20002248 = 0x1f); NONFAILING(*(uint32_t*)0x20002250 = 7); NONFAILING(*(uint32_t*)0x20002254 = 0x24); NONFAILING(*(uint32_t*)0x20002258 = 0x10000); NONFAILING(*(uint32_t*)0x2000225c = 0x42000); NONFAILING(*(uint16_t*)0x20002260 = 0x85d); NONFAILING(*(uint16_t*)0x20002262 = 0xc2ef); NONFAILING(*(uint32_t*)0x20002264 = 0); NONFAILING(*(uint32_t*)0x20002268 = 0xbaf); NONFAILING(*(uint16_t*)0x2000226c = 0); NONFAILING(*(uint16_t*)0x2000226e = 0); NONFAILING(memset((void*)0x20002270, 0, 32)); NONFAILING(*(uint64_t*)0x20002e48 = 0); NONFAILING(*(uint64_t*)0x20002e50 = 0); NONFAILING(*(uint64_t*)0x20002e58 = 0); NONFAILING(*(uint64_t*)0x20002e60 = 0); NONFAILING(*(uint64_t*)0x20002e68 = 0); NONFAILING(*(uint64_t*)0x20002e70 = 0); NONFAILING(*(uint64_t*)0x20002e78 = 0); NONFAILING(*(uint64_t*)0x20002e80 = 0); NONFAILING(*(uint64_t*)0x20002e88 = 0); NONFAILING(*(uint64_t*)0x20002e90 = 0); NONFAILING(*(uint64_t*)0x20002e98 = 0); NONFAILING(*(uint64_t*)0x20002ea0 = 0); NONFAILING(*(uint64_t*)0x20002ea8 = 0); NONFAILING(*(uint64_t*)0x20002eb0 = 0); NONFAILING(*(uint64_t*)0x20002eb8 = 0); NONFAILING(syz_fuse_handle_req(r[0], 0x20000240, 0x2000, 0x20002e40)); break; case 5: syscall(__NR_mount, 0ul, 0ul, 0ul, 0ul, 0ul); break; case 6: NONFAILING(memcpy((void*)0x20000140, "./file0\000", 8)); NONFAILING(memcpy((void*)0x20000040, "fuse\000", 5)); NONFAILING(memcpy((void*)0x20000180, "fd=", 3)); NONFAILING(sprintf((char*)0x20000183, "%020llu", (long long)r[0])); NONFAILING(memcpy((void*)0x20000197, "\x2c\x72\x6f\x6f\x74\x6d\x6f\x64\x65\x3d\x30\x30\x30\x30" "\x30\x30\x30\x30\x30\x30\x30\x30\x61\x30\xfc\x2a\xef\xed" "\x2e\x2a\xff\x1f\xaa\x63\x75\x73\x65\x72\x5f\x69\x64", 41)); syscall(__NR_mount, 0x20000000ul, 0x20000140ul, 0x20000040ul, 0ul, 0x20000180ul); break; case 7: NONFAILING(memcpy((void*)0x20000080, "./file0\000", 8)); syscall(__NR_fchownat, 0xffffff9c, 0x20000080ul, 0xee00, 0, 0x1000ul); break; } } int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); install_segv_handler(); loop(); return 0; }