// https://syzkaller.appspot.com/bug?id=0e634623108ac273135510bb2ec155416d178137 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } #define MAX_FDS 30 static void setup_common() { if (mount(0, "/sys/fs/fuse/connections", "fusectl", 0, 0)) { } } static void setup_binderfs() { if (mkdir("/dev/binderfs", 0777)) { } if (mount("binder", "/dev/binderfs", "binder", 0, NULL)) { } if (symlink("/dev/binderfs", "./binderfs")) { } } static void loop(); static void sandbox_common() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setsid(); struct rlimit rlim; rlim.rlim_cur = rlim.rlim_max = (200 << 20); setrlimit(RLIMIT_AS, &rlim); rlim.rlim_cur = rlim.rlim_max = 32 << 20; setrlimit(RLIMIT_MEMLOCK, &rlim); rlim.rlim_cur = rlim.rlim_max = 136 << 20; setrlimit(RLIMIT_FSIZE, &rlim); rlim.rlim_cur = rlim.rlim_max = 1 << 20; setrlimit(RLIMIT_STACK, &rlim); rlim.rlim_cur = rlim.rlim_max = 0; setrlimit(RLIMIT_CORE, &rlim); rlim.rlim_cur = rlim.rlim_max = 256; setrlimit(RLIMIT_NOFILE, &rlim); if (unshare(CLONE_NEWNS)) { } if (mount(NULL, "/", NULL, MS_REC | MS_PRIVATE, NULL)) { } if (unshare(CLONE_NEWIPC)) { } if (unshare(0x02000000)) { } if (unshare(CLONE_NEWUTS)) { } if (unshare(CLONE_SYSVSEM)) { } typedef struct { const char* name; const char* value; } sysctl_t; static const sysctl_t sysctls[] = { {"/proc/sys/kernel/shmmax", "16777216"}, {"/proc/sys/kernel/shmall", "536870912"}, {"/proc/sys/kernel/shmmni", "1024"}, {"/proc/sys/kernel/msgmax", "8192"}, {"/proc/sys/kernel/msgmni", "1024"}, {"/proc/sys/kernel/msgmnb", "1024"}, {"/proc/sys/kernel/sem", "1024 1048576 500 1024"}, }; unsigned i; for (i = 0; i < sizeof(sysctls) / sizeof(sysctls[0]); i++) write_file(sysctls[i].name, sysctls[i].value); } static int wait_for_loop(int pid) { if (pid < 0) exit(1); int status = 0; while (waitpid(-1, &status, __WALL) != pid) { } return WEXITSTATUS(status); } static void drop_caps(void) { struct __user_cap_header_struct cap_hdr = {}; struct __user_cap_data_struct cap_data[2] = {}; cap_hdr.version = _LINUX_CAPABILITY_VERSION_3; cap_hdr.pid = getpid(); if (syscall(SYS_capget, &cap_hdr, &cap_data)) exit(1); const int drop = (1 << CAP_SYS_PTRACE) | (1 << CAP_SYS_NICE); cap_data[0].effective &= ~drop; cap_data[0].permitted &= ~drop; cap_data[0].inheritable &= ~drop; if (syscall(SYS_capset, &cap_hdr, &cap_data)) exit(1); } static int do_sandbox_none(void) { if (unshare(CLONE_NEWPID)) { } int pid = fork(); if (pid != 0) return wait_for_loop(pid); setup_common(); sandbox_common(); drop_caps(); if (unshare(CLONE_NEWNET)) { } setup_binderfs(); loop(); exit(1); } static void close_fds() { for (int fd = 3; fd < MAX_FDS; fd++) close(fd); } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 9; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); close_fds(); } uint64_t r[1] = {0xffffffffffffffff}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x200007c0, "./file0\000", 8); syscall(__NR_mknodat, 0xffffff9c, 0x200007c0ul, 0ul, 0); break; case 1: memcpy((void*)0x20000100, "/dev/fuse\000", 10); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000100ul, 2ul, 0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x200001c0, "fd", 2); *(uint8_t*)0x200001c2 = 0x3d; sprintf((char*)0x200001c3, "0x%016llx", (long long)-1); *(uint8_t*)0x200001d5 = 0x2c; memcpy((void*)0x200001d6, "rootmode", 8); *(uint8_t*)0x200001de = 0x3d; sprintf((char*)0x200001df, "%023llo", (long long)0); *(uint8_t*)0x200001f6 = 0x2c; memcpy((void*)0x200001f7, "user_id", 7); *(uint8_t*)0x200001fe = 0x3d; sprintf((char*)0x200001ff, "%020llu", (long long)0); *(uint8_t*)0x20000213 = 0x2c; memcpy((void*)0x20000214, "group_id", 8); *(uint8_t*)0x2000021c = 0x3d; sprintf((char*)0x2000021d, "%020llu", (long long)0); *(uint8_t*)0x20000231 = 0x2c; *(uint8_t*)0x20000232 = 0; syscall(__NR_mount, 0ul, 0ul, 0ul, 0ul, 0x200001c0ul); break; case 3: memcpy((void*)0x20000140, "./file0\000", 8); memcpy((void*)0x20000040, "fuse\000", 5); memcpy((void*)0x20000180, "fd=", 3); sprintf((char*)0x20000183, "%020llu", (long long)r[0]); memcpy((void*)0x20000197, "\x2c\x72\x6f\x6f\x74\x6d\x6f\x64\x65\x3d\x30\x30\x30\x30\x30\x30" "\x30\x30\x30\x30\x30\x30\x61\x30\xfc\x2a\xef\xed\x2e\x2a\xff\x1f" "\xaa\x63\x75\x73\x65\x72\x5f\x69\x64", 41); syscall(__NR_mount, 0x20000000ul, 0x20000140ul, 0x20000040ul, 0ul, 0x20000180ul); break; case 4: memcpy((void*)0x20000100, "./file0/file0\000", 14); syscall(__NR_newfstatat, 0xffffffffffffff9cul, 0x20000100ul, 0ul, 0ul); break; case 5: memcpy((void*)0x20000100, "./file0/file0\000", 14); syscall(__NR_newfstatat, 0xffffffffffffff9cul, 0x20000100ul, 0ul, 0ul); break; case 6: memcpy( (void*)0x20000800, "\xba\x52\xb0\x93\x77\x1c\x43\xd9\x98\x59\x14\xa7\xcd\x59\xe1\x65\x0c" "\x7f\x33\xaa\xc1\x02\x93\x51\x0c\xf6\x20\xd4\xf2\x4f\xe2\xca\x2c\xdb" "\x6b\x28\x84\xe7\x01\x1e\xab\xeb\x25\x4e\x8e\xdb\xd1\x58\x2a\x22\x90" "\xde\x91\x8e\x19\x4d\x20\x6a\x8c\x39\x21\x26\x20\x14\xa3\x31\x75\x6d" "\x6e\x0a\x47\xa6\x2b\x37\x69\x15\x78\x45\x28\x0b\x72\xcb\x82\x67\x30" "\xee\x66\xc1\xff\x9c\xa6\x9e\xe0\xd6\xa5\xa2\x30\x5b\x5d\x22\xfc\x24" "\x5e\x53\x61\xb2\x2a\x56\x61\xbb\x56\xc0\x36\xa2\x5b\x75\x5b\x5c\x8a" "\x0d\xb9\x1c\x8c\x94\xbe\x83\xeb\x92\x66\xd1\x1c\xc8\x3f\x5e\xb3\x32" "\xb4\xe8\xdb\x5c\xfb\x47\x99\x06\xc0\xe9\x77\x0b\xfb\x69\xd7\x88\x7f" "\x7c\x45\x0c\xbd\xc5\x51\xcd\x5c\xef\x8e\x94\x8b\x4f\x89\x38\xdf\xb2" "\x6e\x77\x50\x11\x39\xa8\x48\x89\x5c\x99\xd7\xb5\x34\xb2\x13\x15\x31" "\x7d\x02\x3f\x47\x14\xb4\xf7\x10\x20\x08\x9e\xea\x23\x58\x89\xff\xb8" "\x3b\x71\x4a\x3c\x9f\xb1\x5a\x5f\x5c\x35\xb6\xe8\xfd\xb9\x47\xf1\x62" "\x90\xba\xd2\x27\x92\xf3\xe5\xda\x97\x0a\xdf\xd8\xa1\xa0\x26\x3e\x38" "\x74\xf2\x02\x42\x10\x28\x8f\xa5\x50\x2b\x9d\xc4\x2f\x70\x23\xf1\xe9" "\xf4\xd8\x54\xb4\xd2\x0b\x59\xc9\x9a\x1f\x78\xd0\xf4\x34\x55\xe6\x72" "\x9a\x8f\x94\x49\x5c\x4e\xdb\x9f\xeb\xab\x4d\x91\x55\x4f\xf5\xbf\xf7" "\xe3\xaa\x8b\x21\x26\x79\x0d\xc6\x35\x25\xde\x5f\x67\x84\x01\xf7\x0c" "\x36\x67\x5d\xa9\xad\x42\x5c\xb1\x9d\x64\x45\x70\xb3\x00\xef\xb4\xf7" "\x73\xf4\x55\x5a\x4b\x56\xf7\x32\x67\xe8\x84\xe4\x33\xa4\xf3\x33\xc7" "\xd6\xa8\x25\x4b\xcd\xcf\xd0\x76\xa3\xc6\x02\x61\xd9\x6d\x3e\x10\xbe" "\xa9\xca\x73\xeb\xf7\x75\x12\xbc\xbb\x06\xa8\xb2\xc3\x3a\x16\xb8\xe7" "\xcc\x00\xb1\x26\x0e\x7f\xd4\x32\x33\xb0\xde\x83\xdb\x9f\xc7\xcb\xfd" "\xa9\x3a\x95\x05\x8e\x8d\xc6\xfb\x30\x9f\x2a\x46\x7f\x67\x7a\x79\x1f" "\x3e\x02\x53\xb5\x30\x1a\xfe\x6e\x64\x3b\xfe\x2c\x12\xf2\x03\xd1\xf3" "\x06\xb4\x45\x66\x7f\x19\x3a\xf1\xea\x97\xa6\x89\x91\x2e\x50\x7d\xc5" "\xaa\x11\x04\x92\x61\xef\xfd\x0b\x3c\x7c\xf6\xac\x76\x13\x71\x33\x6a" "\x15\x08\xe8\x37\xe1\x6e\x8a\xc6\x31\x2b\x74\x60\xd4\x2f\x5c\x87\x32" "\x11\x2f\x61\xf8\xa8\xab\xf7\xf4\xb9\x48\xc2\x0c\x64\xea\x13\xd9\xca" "\x37\x8c\x57\x7a\x8a\x3d\xfd\x30\xeb\xff\x92\x4f\xe2\xdf\x34\x0d\xa4" "\xd0\xc0\x4a\x99\x10\xf6\xa6\xf5\x88\x70\x3a\x9e\x33\x98\xc7\xfb\x0e" "\x1e\x59\xc9\xff\x2f\x21\x93\xc4\x41\x37\x08\x43\xce\x88\xa1\xd6\x6e" "\xd1\x63\xa8\xfe\x0a\x24\x7a\xcb\xb5\xd2\xe5\x9a\xc9\x96\x40\xc7\x91" "\x70\x99\xa1\x80\xba\xab\x7e\x33\xb5\x1b\xe6\xa2\x23\x62\x3b\xeb\xbb" "\x61\x52\xe1\x41\xb7\x6c\x04\xd9\xf8\xca\x33\x37\x2d\xf0\x0b\x76\xe5" "\xd0\xdd\xc0\xd6\xc8\x4c\xb2\x5f\xf0\xb8\x0a\xdd\x9e\x86\x54\x87\xab" "\xe4\x1a\x82\xbd\xa5\xe1\x77\x9e\xd0\x84\x2c\x0f\xe1\x0c\x17\x00\x13" "\x52\xfb\xd7\x69\x0b\xcc\x67\x62\x9f\x86\x32\x84\x1d\xec\xbe\xfd\xb9" "\x06\x78\xeb\xd6\x74\x9c\x5a\xa6\x8a\x5e\xd3\x6e\x62\x6d\x2d\xe0\x18" "\x1e\x13\xc6\xcf\x27\xb4\xad\xdb\x9e\x61\x14\x98\xb4\x89\xaf\x21\xa4" "\x57\xa7\x18\xcc\xfb\x59\x26\x70\x3a\xe6\xa2\x2e\x1b\x78\xb4\x03\x6d" "\x9a\xa5\x94\x1c\x0b\x21\x4a\x96\x4e\x0d\x93\xcb\xe8\xe4\x90\x02\xa8" "\x1b\x0c\xcd\x5b\x53\x97\x92\x58\x80\x98\xd8\x80\xb9\x2f\x2f\xfd\xc7" "\x28\x98\xf4\x7b\x9d\xb3\x8a\x52\x06\x8f\xde\xa7\x14\xbd\x0a\xb9\x82" "\x7a\xaa\x35\x22\xe2\x20\xb7\xf2\x5d\x90\xd1\x42\x89\xa9\xf7\xd0\x9e" "\x1b\x04\xe8\x46\x08\x1f\xc9\x4c\xba\x23\xde\x44\xbd\x5a\x30\x46\x47" "\x4c\x19\x4a\xa6\x33\xe7\xac\xda\xa8\x9b\x85\x6c\x1b\x35\xd8\x0e\x10" "\xc2\x15\x69\xea\x07\xcd\x0c\xb6\x1c\xca\x36\xc0\x7e\x3f\xd3\xdd\x76" "\x1f\x2b\xc2\x04\x33\xc1\x0c\x78\x84\xfd\xc4\x48\x2b\x84\x69\x68\x59" "\x84\x56\x74\x38\x8a\x9a\x84\x20\xd4\xdb\x59\x1f\x16\x15\x65\x7d\xfc" "\xe3\xf1\xf8\x32\x6c\x55\x31\x34\x49\x1b\xbb\x1d\x2c\x05\x45\xbf\x48" "\xf0\x2a\xa7\x5b\xf6\x41\x1d\xa7\x93\x45\x9e\x7c\x78\x2e\x1b\x9e\xe3" "\xfa\xc0\xb9\x6d\x68\xf2\x73\xcc\xed\xc5\x44\x23\xf2\x8c\x98\x39\x26" "\x8c\x5f\xc1\x0d\x8f\xea\x2b\xcf\xe6\xa0\x7d\x3f\xba\x84\x4a\x68\xab" "\xfc\x63\x29\x89\x3b\xba\x0d\x0e\xa6\x7a\x12\xca\xe2\x57\xc3\x88\x2b" "\x6e\x16\x46\x2e\xb7\xac\x99\xe1\x7f\x92\x95\xdc\x6f\x5d\xaf\xfb\xee" "\x74\x28\x1e\xbb\x93\xfd\xbb\xff\xdd\x79\xf7\x60\xd8\xe5\xeb\x9f\xfb" "\xe2\xac\x62\x50\x22\xb4\xd4\x0d\xd0\x64\xc5\x7b\x97\xe8\x96\xb6\x10" "\x28\xf0\x3e\x01\x0b\x31\x1b\x6e\xf8\x48\x63\xd6\x2a\xf4\xc5\x35\x8c" "\x55\xef\x94\x24\x1b\xc8\xf9\x0a\xba\x80\x09\xfe\xe5\x17\x11\xbf\xe9" "\x9d\x78\x18\x9a\x5d\xe0\x4d\xc9\xe5\x61\x61\xc5\x49\x3d\xee\x5e\x50" "\xb8\x55\xf6\xd2\xdd\xaf\xa9\x5a\x7b\x0a\xa1\xa4\xef\xcf\x5e\xc2\xa7" "\x36\x4a\x24\x87\x22\x29\x93\x22\xee\x1a\xcf\xef\x81\x23\x1e\x0f\xf0" "\x7e\x4d\xdb\x9a\x15\x7c\x2e\xe0\xe5\x79\x52\x69\xd1\xad\xa0\xcb\x86" "\x22\x16\x20\x7b\x4d\xf6\xcd\x70\x63\x97\xd6\x8e\x7f\xb7\xdb\xe3\xf3" "\x97\x82\x86\x60\x37\x1d\xe9\x66\xff\x09\xe9\xfe\xf0\xd7\x5f\xff\x8d" "\xf3\x8a\xe7\x81\xa2\xa7\xf3\x64\xcc\x11\x17\xca\x3b\x85\xcf\x44\xef" "\x69\x83\xef\xe8\x92\xff\x84\xeb\x30\x35\x1c\x0c\x4e\xdb\xd6\x19\xa9" "\x07\x75\x8b\x6f\x40\x4e\x8d\x3c\x63\x2e\x8c\xd5\x94\x8b\x2d\x18\xf4" "\xd2\x0b\x93\x76\x28\x75\x8d\x4e\x32\x21\x8b\x39\xa1\x0d\x66\x8b\x1f" "\x18\x00\x3c\x21\x53\x6e\xf1\x3a\xff\xb2\xf0\xf8\x9b\xc0\x17\x99\x51" "\x78\x21\x75\x36\xe7\xc1\x8a\x38\x68\xd4\x19\x40\xc0\x89\xe0\x6c\xa0" "\xcf\xeb\xc6\xee\x40\xc0\x0c\x9c\x0c\xf5\x79\x0a\xb3\xd3\xbd\x55\xab" "\xc7\x49\x0e\x01\xd6\x55\x38\xf1\xfa\x8f\x62\x7f\x82\x0f\xd3\x6d\x2b" "\xad\x82\x96\xc9\x5f\xde\xa0\x7d\xdb\x26\x29\x7c\xf4\x3d\xba\x94\x5d" "\x41\x03\xca\x32\x85\x2f\x61\xae\x94\x69\xa1\xad\x55\x8d\x2f\xdd\xba" "\x42\xc3\xe9\x52\x80\x00\x0f\x68\x41\x99\x64\xcf\x5f\xee\xd2\x0a\x69" "\x72\x02\xec\x44\xdf\x71\x7a\x91\x3f\x0b\x0d\x49\xc0\xfb\x9d\xb9\x16" "\x3f\xc9\xa2\xa5\x1f\xfa\xaa\x4d\x52\x1e\x18\x97\x18\x19\x17\x99\xad" "\xa3\x09\xa0\xe1\x2a\xf3\x23\x43\x9e\xf0\x32\xd4\xe3\x7c\xe3\xc3\xad" "\xa7\xd9\x09\x7d\x0b\x1e\x38\x56\x19\x5b\x68\x74\xa9\x84\xa0\x22\xec" "\x12\x60\xce\x41\x84\x16\x61\xa7\xc0\x30\x4f\x30\x4b\x09\x21\x05\x32" "\x75\x9f\x65\x8f\x1d\x27\x13\x0e\x9a\xa4\x20\x27\x8d\x51\xef\xb9\x4b" "\xbd\x75\x3a\x0b\xb3\xc9\xc0\x03\x2b\x03\x13\x92\x2c\x79\x9e\xdb\x4d" "\x6a\x13\xed\x0f\x6d\x04\x96\xb8\xc1\xcc\x97\xe6\x5a\xea\x00\x66\xa2" "\x8e\x56\x2b\x67\x52\x82\x95\xa3\x63\x97\x9e\x88\x1d\x92\x05\x99\xf7" "\x74\x4a\x34\x86\x3c\x0f\x8c\x1d\x40\x44\x72\x38\xe8\xc6\x67\x72\x90" "\x92\x95\xc9\x09\x7b\x85\x3e\x03\x66\x83\x72\xfd\x3a\x81\x43\x4e\xd5" "\x93\x43\xb7\xb3\xb3\x84\xe4\xff\x29\xa4\x2e\xa0\x97\x12\x95\xcb\xe4" "\x96\xf2\x18\xf5\xa2\x54\x94\xf3\x76\x44\xf7\x0d\x7b\xe6\x38\x5d\xa8" "\xe5\xbb\x91\x3d\x43\x72\xa9\x83\xd4\x9f\xae\x54\xeb\x0b\x83\xe9\x4b" "\x0a\xda\xe4\x49\xc5\x1a\x0c\xd0\x0b\x43\x64\x8f\x22\x7d\xab\xeb\x71" "\xb8\xfd\xc3\xc7\xcb\x77\x60\xe7\x4e\x2d\x39\x60\xb1\x0c\x50\x23\x2d" "\x1e\x46\x10\xbc\xa8\xa5\xed\x11\x7a\xd6\xc1\x1d\x71\xb0\x39\x9e\xc5" "\x47\x5a\x37\x9b\xed\x83\xd0\xd5\x41\x18\x53\xa4\xec\x07\xae\x3b\xb4" "\x76\x9d\x13\x5a\x62\x33\xf1\x09\x5b\xaf\xb0\x1b\x72\x5c\x94\x7d\x20" "\x8e\xf5\xa2\xee\xde\x6d\xe3\x81\x94\x08\xb9\xb9\x2d\xff\x7a\x72\x00" "\x9b\xbc\xbb\x49\x4b\x25\xba\x51\x77\x1f\xf2\xf6\x67\x95\x2d\xa8\x27" "\x5c\x08\xc1\x53\xaa\xec\x17\x95\x32\xb8\xb4\x10\xa6\xda\x2c\x8a\xce" "\xc8\xec\x56\x20\x84\x05\x32\x91\xb1\xcb\xcf\x99\xb5\x43\x9a\x19\x28" "\x43\x37\x84\x51\xa7\x43\x93\x15\x70\x9d\xb0\x8a\x7d\xdc\x71\x61\x9e" "\xbf\x78\xbd\x2a\x70\x3c\x81\x85\x7a\xc3\x96\x2c\x7b\xa7\x79\x86\x3b" "\x9f\x67\xaf\x01\x98\x54\xd9\xc7\xa3\x0f\x88\x61\xa2\x6c\xb5\x50\x05" "\x8f\x16\x80\xf9\x3e\x97\x92\x8c\xdf\x3c\x9c\x1b\x04\xb0\x0c\xb3\x8e" "\x23\x20\x7f\x1b\xe2\x40\x5a\x78\x8a\x57\xbd\x23\x72\xa2\xa5\x0b\xf4" "\x5a\x23\x41\x4a\x16\x2e\x8d\x36\x00\xdd\xcf\x16\x26\x7c\x22\x5a\xb0" "\x17\xd7\xf5\x90\xf0\x34\x6a\x45\x43\xeb\x39\xff\xcd\x0c\x81\xb9\xd0" "\x0d\x94\x13\x4c\x1e\xdf\x5b\xcd\x5a\xeb\xaf\x05\x5f\x0d\x43\x99\x2c" "\x32\xc5\x9a\xd0\xbc\x45\x81\x13\xbb\x0c\x82\xe4\x27\xfb\x1a\x52\xfa" "\x82\x56\x37\x0a\x4b\x0a\x25\x6f\x21\x4e\x43\xec\xcb\xf4\x47\x02\xfe" "\xa4\xe8\xd7\x13\xc1\x16\xff\xc5\x12\xfc\xac\xb1\xe6\xef\xd2\xe1\xc1" "\xe4\xd7\x4b\xa7\xc3\x03\xe1\x47\x96\x8b\x8d\x6a\x5e\x36\x46\xe7\xfe" "\x20\x9d\x5d\xe4\x88\x43\x3c\x42\x70\x66\x13\x23\x2b\x2f\xeb\xbe\x52" "\x72\x15\x4d\xfb\x55\x58\x6e\x7b\x4c\x15\xd9\x09\x35\x31\x38\xd3\xc8" "\x22\x07\x56\x14\x71\xc2\x83\x2f\xaf\x49\x52\x62\xb4\xaf\x7a\x0e\xb5" "\xc1\xeb\x2f\xf5\x11\xb7\xda\x16\x0e\x95\x8f\x7d\x41\x8e\x4c\x17\x25" "\x46\x7c\x8e\x9e\xac\x10\xb8\x3d\x99\x10\xbf\x9c\x9d\xde\xab\xb2\xe5" "\xb4\x21\x1f\x7e\x5b\xc0\x6d\xcd\x8f\x9c\xc8\xc9\xa1\x1a\x0c\x09\xa4" "\x63\xb3\x76\x49\xa6\xb8\x7b\x66\x18\x92\xc8\xd4\x1e\x18\xa7\xc1\x04" "\xce\x4f\x19\xab\xfd\x51\x2a\xbe\x06\x7d\x17\xea\x86\x18\x9d\x1c\x20" "\x93\xb9\xd9\x41\xe7\x79\x27\xb4\x63\x8b\xbd\x60\xb1\xc9\xcd\x0d\x5e" "\x77\xef\xc6\xa5\xe2\xb5\xb6\xab\xc8\x05\x76\xc7\x8b\x70\xb1\xa9\x97" "\xbf\xa3\xf5\x35\xd5\x62\x6c\x53\x0c\xab\x5e\xc9\x92\x62\xd6\x8a\x35" "\x55\x4b\x98\x7a\xcf\x91\xdc\x96\x4e\x9e\x39\x85\x98\xa2\xc5\xf7\x4d" "\xb1\x16\xc4\xc4\x74\xeb\xe5\x19\x26\x50\xd7\x66\x7a\x1a\x14\x0f\xf4" "\x4f\x17\x49\xae\x4e\x43\x18\xa1\x55\x5a\xab\xeb\xd1\x86\x86\x85\x46" "\x70\x4e\x6b\xac\xb2\x70\x6b\xea\xd1\x96\xe5\xf8\xbb\xc0\xd4\x1c\xa6" "\xdc\xf1\xa8\x57\xea\x28\x93\x03\xc4\x42\x76\xfe\x23\x5c\xf9\x0d\xb3" "\x76\x81\x85\xac\x12\xc1\xa3\xee\x4e\xc0\x8a\x41\x41\x71\x3f\xa8\x67" "\xf8\x5f\x27\xc8\xd1\x16\x76\xe0\x2b\x85\xb4\x9e\x51\x90\x68\xd3\xc0" "\x4c\xf3\xdc\x97\x2c\xc5\x67\x70\x37\x5d\x85\x07\xd8\x51\xc3\xd4\x70" "\xe9\xb3\xf5\x8b\xa4\xc1\xd2\x4d\x73\xa3\x13\xaf\x0b\x36\x31\x3b\xf5" "\x93\x29\xfd\x22\xa7\x66\xc9\xe5\x3c\x14\x83\xc0\x37\x59\x99\xf5\xfe" "\x0a\x6f\x72\x97\x9d\x4e\xb7\xd4\x62\xbc\x45\xf0\x26\xaa\xdb\x5f\xb3" "\x90\x7a\x48\xa8\x01\x5a\xc9\x21\x40\x45\x1c\x97\x9c\x0a\x6f\xc8\x46" "\x0a\x00\xe1\xcb\x77\xcc\xeb\xdf\x02\xa0\x97\x3f\x2e\xbd\x9d\xef\xc4" "\x64\x26\xcf\x4a\xde\x97\x03\xa4\x90\xd5\xec\x5b\x20\x29\x86\xf8\x7e" "\x9a\xf8\x75\x41\x68\x79\xe1\x31\x52\x41\x8c\xb1\x66\xf2\x1f\xb2\x41" "\xeb\x99\x6b\x98\x45\x5d\xc4\x0f\xbf\xc2\xfb\x63\x58\xa8\xe2\xcf\xc9" "\xcc\xe8\xd7\x77\xb6\x6c\xad\xe1\x46\x5b\x52\xc8\xa8\xb9\x22\xe0\xd9" "\x8e\x0b\x8f\x4f\x1b\x32\x0e\x58\xbb\xcc\x5c\xcb\xc1\x9e\x5c\x5f\x26" "\x22\xdc\x4d\x4a\x8b\x1d\x59\x3e\x1e\x78\xb4\x5c\x02\xa8\x7c\x17\x75" "\x7a\xdb\x93\xaf\x97\xeb\x70\x38\xf7\x52\x50\xb5\x05\x50\xd4\x20\x3a" "\x86\x37\xbe\x03\x43\x9a\x2e\xf3\x11\x08\xdc\xa3\x30\xe9\xf7\xca\xc9" "\xf9\xf8\x95\x40\xb8\x94\xa5\xcb\xea\x69\x13\x84\xc4\x98\xa9\x49\xf3" "\x71\x1e\xcf\x48\x16\x14\x02\x41\xd4\x73\x88\xb2\x43\x39\x67\x7c\x95" "\xd7\x4b\xb9\xef\x94\xd8\x76\x4d\x5f\x09\x3e\x47\xeb\xb0\x9c\x6a\x98" "\x74\xca\xfa\x8c\x16\x31\x2c\x31\x83\xb9\x8b\x11\xd0\xa9\x94\x16\xc3" "\x39\xd0\x6c\x6d\x89\xbb\x8a\xf5\x15\x28\xd2\xd6\x32\x4d\xa7\x94\x4a" "\x56\x79\xea\xbf\xac\x76\x57\xed\x05\x9b\x90\x0d\x13\x2d\x00\xf0\xd0" "\x75\x14\xaa\xf7\xf2\x54\xbd\x7d\xd1\xbb\x54\xd1\x59\x88\x3a\x64\xd9" "\xfd\xe4\x16\xef\x60\x06\x49\x2d\x6d\x4e\xb7\xbc\x86\xaa\x4b\x3b\x9c" "\xd4\x1d\x64\x69\x5b\x9e\x34\xa1\x83\x3b\x87\xd1\x10\x42\x49\x04\x53" "\x3e\x07\xc5\x04\xdd\x31\x42\x83\x4b\x5e\x4a\x30\x14\x19\x68\x68\x59" "\xf9\x66\xff\x84\x2b\x0e\x32\xe2\x28\x67\x83\xff\x32\xa8\xc2\x8e\xcc" "\x1a\xf6\xa7\xde\xf4\xce\x57\x33\xfa\xe4\x77\x73\x5c\x62\x93\x63\xc8" "\x53\xb5\xc0\xf2\xdb\xd9\x92\xc0\x22\x88\xda\xba\x42\xb0\x65\x01\x42" "\xdb\xd9\x87\x16\x4f\x02\xe4\xe4\xae\xcf\x21\x4b\x1b\xa6\x9e\xb2\xec" "\xd8\xe7\x2e\xa0\x5a\xf6\xb4\x02\x9a\xcd\xdd\x85\x0b\x51\xe8\x4e\xf0" "\xcb\x63\xce\x0d\xa1\x7c\x20\xc7\x95\xd6\x00\x2a\x54\x47\xad\xbb\x3e" "\xb5\xde\x11\xbc\x91\x8f\xfb\x20\xe5\xff\x79\x08\xd3\xdc\xe2\x58\x97" "\x37\x8a\xc0\x25\xa2\xc1\x00\xd4\xc8\x5a\xf8\xcf\x23\x91\xa5\x13\x2e" "\x05\x43\x36\x8a\x85\x79\xd1\x31\x0e\x33\x25\xe5\x23\xdc\x58\xf4\x55" "\xc1\x08\xce\xbf\xce\x8d\x30\x4f\x8d\x7d\xc6\x3e\x88\x51\x2e\x40\x28" "\x84\xdc\xbe\xbb\x2e\x13\xfc\xcb\x66\x54\xd1\x3a\xcf\x92\x74\x6f\x66" "\x60\xcd\x59\x16\x45\x60\x15\xa8\x7d\x6e\x6f\x50\x59\x06\x0a\x98\x1c" "\x95\xdd\x84\xe2\x54\x77\x5b\x95\xcf\x94\x90\xc5\xba\x0c\x7d\xc6\x08" "\x9a\xd0\x31\x89\x93\x73\xb6\x55\x63\x9f\x8a\xad\x4f\xb0\xa8\x6e\xe2" "\x02\x9e\x03\xa0\x7d\xde\x5e\x6b\xfb\x1d\x31\x86\xdc\x7f\xb4\xe0\xa2" "\xa1\xf6\xdc\x28\xc1\x22\x21\x68\x2d\x27\xbe\xfd\xc1\x8f\x61\x11\x6a" "\xb3\xc2\x88\x40\xc9\x48\xa5\xce\xed\x97\x2f\xca\x09\x32\x8a\x8d\x05" "\x99\x06\xd5\xa9\x7e\x8b\x0e\x85\xf1\x97\xd3\x3b\xd7\x82\x32\xde\x42" "\x60\x57\x5a\x50\xc7\xc7\x34\xb2\xe9\xa9\x80\x58\x55\x3a\x26\xa6\x6a" "\xbb\xbd\x0a\xda\x57\xdc\xb3\x4b\xd7\xcd\x82\x63\x36\xb5\x11\x36\xf7" "\x4a\x9c\xf6\xee\x62\x56\x5a\x0d\xaa\x7d\x9d\xa6\x51\xf3\x29\x5f\x05" "\x5d\x79\x45\x14\x68\xf4\x45\xc9\x81\xb8\xb7\xda\xb8\x60\xd6\xfd\xd6" "\x71\xc3\x37\xcc\x88\xed\x5a\xbc\xbf\x42\x5f\xa0\x2b\xb0\x2a\x2c\xe4" "\xb5\x90\xc8\xde\x9d\x57\x1d\x03\x7d\x44\x72\x6e\x49\xff\x25\x54\xab" "\x1a\x75\x7c\x2e\xdd\xd6\x2f\xd7\x82\xe2\x54\x60\x6b\x5b\x9b\x5c\x37" "\xf0\xf0\xfb\xdf\xc7\xab\x30\x60\x38\x84\x47\x90\x37\x80\xe6\x6f\xf9" "\xbd\x2a\xa7\xa9\x24\x42\x98\xc0\x64\x10\x9e\xc5\xac\xee\x61\xbc\x85" "\x7a\x63\x0f\x2e\x89\xcd\x13\x58\xe1\xe5\xeb\x04\x28\xa5\xc0\xf9\x2c" "\xf5\x0c\x2a\xe4\xec\x93\xbe\x46\x45\x6c\xff\x28\x39\x85\x07\x0a\xdc" "\x3a\xc6\x02\xb5\x43\x1e\x85\x86\xfe\xf8\xb5\x4d\xe6\x1f\x1c\x16\xf7" "\x9e\x8c\x93\x18\xc9\x50\xb5\x91\xb8\xa2\xb2\x7b\xdc\x55\x6a\x73\x8d" "\x18\xf8\xe3\xe2\xc4\x51\x30\x35\x96\x2e\x17\x8f\x73\xd6\x3a\x59\x03" "\xbe\x71\x40\x5a\xfb\x1e\x19\xfe\x57\x28\xfc\x08\xc8\xee\x49\x79\xee" "\x0c\xe3\x33\x43\xf8\x36\x48\x94\x2f\x3c\xd3\x70\x10\xf5\xe6\x9c\x39" "\xe0\x94\xf8\xdd\x8c\x4f\x99\x44\xf4\x33\xad\xd4\x97\x5d\x00\x2b\x84" "\x9b\xfe\x41\x56\x39\xa1\x0d\xc8\x65\x40\x36\xdb\x5d\x9d\xb4\x95\x62" "\x05\x7c\x7f\x1f\x55\xe5\x56\x8c\xb6\x6d\x0b\x69\xc1\x48\x9a\x07\x54" "\xd3\xb4\xac\x3f\xf9\xe0\x67\xa1\x2c\x14\x1c\x7f\x2d\x6d\x20\xc9\xd8" "\xaf\x03\x83\x59\x55\x62\xa8\x9d\x6d\x24\x43\xa1\x7c\x04\x38\x40\x7c" "\xe6\x9a\x75\x77\xad\xbf\xa2\x39\xa9\x1b\xf7\x5e\x46\x30\x2d\xc5\xaf" "\xa2\xcf\x77\x17\xfc\xba\x5b\x3a\x28\x6a\x30\x45\x2c\xce\x29\xa8\xfe" "\xb4\x10\xb7\x91\xb6\xc7\xd5\x85\xa8\xe6\x40\x86\x45\x16\x91\xa2\x00" "\x89\xb9\x4a\x8d\xa9\x9e\x4a\x6b\x9d\x47\x68\x35\xfc\x36\xae\x86\x5f" "\x47\x7a\x37\xd7\x89\x82\x9c\x37\xe9\x87\xf8\x19\x0a\x6b\xdc\x4b\x7f" "\xa6\xc6\x3e\x38\x18\x12\x78\xe2\x23\x9e\x60\x55\xea\x41\x54\xc6\xd8" "\x6a\x6a\x16\x8f\x32\x09\x5c\x0d\xd7\x2d\x39\xde\xd2\xc2\xde\xd7\x45" "\x0b\x9a\x58\xfa\x6d\x9a\x8b\x84\x23\x2c\x12\x18\xdb\xaa\xaf\x80\xb9" "\xee\x2d\xa0\x60\x51\x33\xa2\x8a\x3c\xa0\xc6\x33\x24\x50\x5b\x1c\xae" "\x7a\x19\x06\x0f\xef\x8b\xe3\xd4\x0b\xd5\xee\x05\xa3\x99\x20\xd3\x0c" "\x61\xc2\x38\x97\xe3\x82\xe3\x98\x44\xd8\xab\xb6\x72\xae\xf8\x87\x1a" "\x17\x3f\xff\xf3\xfa\xbd\xd5\x76\xc4\xa9\x13\x50\x75\x8d\x39\x29\xed" "\xa7\xbd\x67\x6e\x7d\xf7\x9f\xce\x58\xc7\x51\xa0\x8f\x20\x26\xf5\x5f" "\xaa\xab\x4b\x6c\xb6\x85\xb0\x5f\xbf\x40\xfb\x11\x03\xc7\x1d\x44\x85" "\xe0\xe2\x3a\x9d\xd7\xcd\x1b\x3e\x24\x5e\xf3\x5e\xe0\x84\xc8\x71\x91" "\xa0\xe4\xb6\x6d\x03\xd6\xbb\xfd\xd8\x94\xca\xae\x5d\x39\x0e\x12\x98" "\x58\x9a\xe5\x4d\x45\x30\x22\xd9\xee\xba\x52\xee\xa8\xe2\x27\x1c\x27" "\x05\xfc\xdd\x22\x94\x99\x60\xad\x2e\x52\xca\x36\xa2\xa5\x13\x3e\x11" "\xf2\xf9\xd9\x38\x49\x6e\xa2\x8d\xe6\x7f\xe3\x16\xf7\x08\x4e\x5e\x2b" "\xed\xe3\x75\x09\xcf\x08\x3e\x75\x1b\xc7\x74\x4c\xeb\x8c\xff\x8c\x24" "\xb6\x64\x7e\xb4\x1c\xfb\xf0\xe6\x36\x0e\xdb\xa4\x34\x80\xe7\x0b\x28" "\x55\xd5\x9d\xc0\x1a\x6c\x72\xe3\x3d\xbf\xfa\x97\x46\xda\x3d\x34\x8e" "\x83\x9b\xcb\x4e\x14\x79\x99\x94\x8d\xbe\x9d\x32\x9c\xfc\x6a\x88\xfc" "\x87\xa3\x5b\xbd\x0a\x0b\x5f\x37\x72\x84\xe9\x98\x92\x3e\xb9\xde\x0a" "\x86\x01\x85\x82\x45\x3c\x38\xca\x30\xfc\x9a\xf3\x29\x31\x7a\x3f\x08" "\x41\x39\x60\x4c\x7b\xef\xb4\x1d\x5a\x12\xdf\xcb\x3f\x69\x9b\xd6\x16" "\x2a\xe7\x48\x37\x8f\x99\xd0\xc9\xb7\x61\xee\xa3\x54\xff\x41\x11\x51" "\x6b\xcd\xd0\xb8\x96\xac\x39\xb2\xcb\x2e\x1d\xa1\x68\x6e\x70\x1c\xed" "\x3f\xd8\xf2\xfd\x9d\x94\x86\x13\xa5\x92\x20\x54\x5f\x00\x60\x80\xf0" "\x7d\xc3\xa9\xa2\x95\xb3\x8d\x78\x4e\x09\xba\xe9\x1e\xe6\xfb\x61\x3c" "\xbc\x29\x76\x6a\xda\xaa\x3d\x2c\x34\x0b\xfa\x2c\x3f\x74\x7d\xa5\xfe" "\xe1\x39\x29\xab\xa0\xb0\xaa\x53\x5a\xd9\xc0\x4f\x49\x5b\x7a\x65\x4b" "\x3a\x66\x62\x4b\x8d\x7b\x0b\x80\x76\xa3\x50\xb4\xf4\x25\x61\x47\x72" "\x0d\x5b\x89\x93\x90\xa0\x03\x22\xf5\xc9\x59\x1f\x09\x57\x51\x53\x37" "\xf1\x59\x9b\x06\x4d\x66\xed\xcf\xfb\x06\x48\xbb\xc6\xfb\x8c\xa8\xb3" "\x8e\x96\x81\xe3\x2e\x13\xaa\xba\x79\x54\x08\xf0\x33\x85\x02\x76\x3a" "\xe3\x58\x9d\x27\xd0\x14\x5a\x37\x17\x64\xd3\x8b\x47\x03\xf8\xfe\x07" "\xe3\xb1\x10\xc6\x2b\x4b\xb1\x9e\xb2\x67\x67\xf9\x4b\x57\x91\xce\xea" "\x56\x59\x20\x73\x34\x54\xff\xde\xab\x1f\x61\x9d\xbb\x55\x47\xf7\x31" "\x9b\xd1\x0e\xf9\x04\x73\x41\x5b\x6d\x21\x0a\x48\xdf\x0d\x76\x91\x67" "\x8d\x23\x38\x6f\x09\x3e\x56\x43\x36\x0d\x47\x1a\x99\xef\x6f\xb3\x57" "\x1b\xb9\x1c\x84\xeb\xdc\x44\x9f\x5f\xae\xd9\xb7\x35\xaa\x7f\x2a\x08" "\x20\x87\xf4\x1f\x64\xc9\x77\xa2\x8c\x96\x38\x33\xae\xef\x58\x3c\x7e" "\xec\xf6\x51\xf3\xe5\xa9\xc5\x14\x5d\x7b\xaf\xd6\x8f\x96\x0e\xd1\x6d" "\x21\xe1\x62\x2e\x9e\x63\xc8\xab\x63\x00\xaf\xce\xcf\x79\x07\x70\x70" "\x7c\x60\x98\xb4\x77\x84\xb8\x30\x11\x6f\xdd\xc7\x4b\xe0\x1e\x92\x44" "\xbf\x9f\xc1\xbb\x42\x85\x60\xaf\xdb\x2c\x93\x15\x44\x7e\x74\x70\xa0" "\xbc\xb6\xaf\xee\x55\xb4\x01\x20\xe1\x94\x02\xad\xf6\x06\xc2\xe9\xe2" "\x43\xd9\x34\xbb\x12\xdf\x1c\x9a\xa0\x9c\x98\xaf\x5e\x9f\x71\xce\xfd" "\xf7\xbd\xbb\x49\xd4\x8b\xb2\x06\xe9\x13\x0d\xdf\x00\xeb\x91\xee\x2a" "\x04\x0c\x98\xbf\x64\x40\xc5\xce\x53\xc3\x78\xd9\x5b\xab\xb2\xfa\xab" "\x89\x4a\x93\x59\x77\xf9\xc1\x07\xf4\x88\x66\xa0\x49\xcd\x6b\x4f\xbb" "\x6a\x06\x31\x8c\xe2\x22\x02\x03\x1a\x3f\x80\xfa\x90\x43\xe1\x1b\x93" "\xa1\x43\x5e\x3e\x18\xf6\x81\x54\x43\xc6\xa5\x78\xeb\x45\x31\xca\x18" "\x58\xf8\xe7\x06\xf2\x18\x6b\xf7\xe7\xf9\x7e\x8c\x8b\x9f\xca\x51\xc7" "\x3a\xda\x46\x2a\xc0\x78\xc0\x2c\xe8\x6c\xad\x2e\xff\x44\x8b\x2b\xae" "\x63\x7e\x0a\x6e\x7d\xe5\xe2\x8a\xc3\x1e\x18\x70\x6f\x6e\x8d\x2f\xcd" "\xc4\x8d\x9d\x59\x43\xe6\x73\x8b\x79\x9c\xe2\x68\x3b\xd0\x75\xce\x3f" "\x82\xba\x1c\x82\xde\x02\xfc\x13\x9f\xf7\x1e\x35\xba\x52\x4a\x15\x46" "\x89\x4c\x2d\xc4\x78\xce\x41\x57\x53\x16\x59\xba\x5d\x90\x1c\x91\x16" "\xa9\x5a\xac\x93\x2a\x39\x56\xf1\xdc\xde\x3f\xb8\x10\x09\xd9\x53\xec" "\x5f\x31\x7d\xf2\xc7\x56\x4f\xf8\x9a\xac\x45\xf3\xf2\x32\x28\x56\x22" "\xdd\x8f\x69\x78\x1d\x30\x29\xb5\xaf\x1c\x3e\xe4\x80\x11\x4e\x2c\x07" "\x4d\xf5\x69\x7b\x1c\x73\x56\x6a\x8e\x52\xb1\xf0\xec\xce\xf9\xc0\x86" "\x77\xc9\xec\xd9\x4d\x32\x34\x7b\x9b\x01\x1d\x89\x2d\x22\x49\x13\x64" "\xb1\x85\x36\x0a\x52\x8f\x75\xd0\xed\xe4\x74\x49\x9b\x29\x62\xfb\xc9" "\xd5\x42\x39\xcc\xca\x5f\x6d\x04\x42\xd0\x69\x77\xbb\x95\xd5\x5d\x9a" "\x5c\x34\x9d\xee\x32\x38\x48\x0a\x62\x6f\xed\xb2\xda\xaf\x30\xb7\xdd" "\x36\x76\x86\xa8\x2f\x32\xd6\xf7\x28\x7b\x86\xf2\x08\xec\xcd\x74\xab" "\x34\xa4\x65\x54\x07\x71\x16\x8b\xab\x95\x19\xdd\x69\x44\xe0\x37\x17" "\x7e\x46\xc8\xe2\x0d\x3b\xd3\x32\xf2\x74\xa1\x31\x1a\x21\x21\xae\x7f" "\xda\xe4\x95\xbf\x7e\xc9\x68\xf3\xb2\xeb\xe3\xe8\x12\x58\xe2\xb2\xfb" "\xc2\xbd\xb5\x21\xd2\x51\x70\x2a\x8e\xbb\x1d\x1f\x53\x21\x7e\x53\x5b" "\x19\x76\x2c\x50\xc1\xab\xdf\xbf\xe2\x0b\x6a\xcd\xbf\x94\xf1\xe9\x02" "\x94\x82\x98\xc7\xa2\x3f\x9f\xb7\x68\xe6\xee\x50\xd0\x8b\x61\x43\x19" "\xb9\xcb\xa8\x9b\xe5\x83\x17\x21\x65\xca\xa8\xc0\x47\x81\xc9\x8b\x9a" "\x54\xff\x9d\xe3\xa0\x72\x53\xf0\xe1\x4c\x91\x97\xd3\xca\x25\x5e\x3f" "\xc8\xa4\xd0\xdc\xa1\xa1\x0e\x85\xa2\x19\xd7\x4e\x14\x7a\x26\x48\xbb" "\xec\x55\x32\xf6\x0f\x56\x64\xd8\xa4\x07\x59\xbc\xd1\x76\x63\x42\x12" "\xb0\x12\x0a\xc6\xf6\xcc\x49\xe5\x00\x9d\x23\x1e\x11\xce\x31\x27\x5f" "\xea\x3f\x75\x50\xda\xfd\x01\x04\xf4\xa2\x71\x8d\x06\x8d\xba\xfe\x8b" "\xe8\x69\xb5\x48\x79\x2f\x56\xc0\xb1\x0c\x77\xb9\x09\x3b\xea\x1e\x3d" "\x4f\x36\xf1\x14\xf9\x5d\x74\xb1\x83\xb6\x41\x09\x33\x71\x44\xc3\xb3" "\x4f\x5d\x54\x7f\x83\x35\xe5\x3f\x11\x25\x58\xcf\xf5\xb4\xe4\xeb\xc9" "\xbc\x53\x10\x27\x45\xc8\xe2\x34\x97\x9a\x4a\x84\xe9\xc6\xa7\x16\x49" "\x37\xe6\xab\x4f\x68\x14\x51\x16\x77\x3c\x84\x44\xe2\x76\xdd\xa0\x9b" "\x58\x44\x14\x1b\xa6\x86\x15\x2f\xde\xa5\x6e\x4d\xbb\x65\xb5\x7a\x26" "\x78\x9b\xeb\x89\x47\xe5\x69\xb2\xc0\x1e\x3a\x9e\x53\x18\x8a\x6e\x95" "\x1d\xc5\xc0\xcf\x60\x53\x4c\x00\x6e\x6f\xd6\xb0\xc0\x96\x80\xbd\x6c" "\x51\x9b\xcb\x70\x16\x66\x24\xca\x04\x13\xd5\x83\x25\xb7\x7c\xf8\xdc" "\x1a\x00\x79\x80\xc0\x20\xcb\x2b\x57\x33\x38\xb6\x8a\xab\xd2\x8c\x04" "\x92\x7a\xf7\x90\x07\x93\xb2\x16\x65\xf0\xf5\x56\x24\xc5\x8b\x38\x09" "\x7f\x37\x8a\x60\x01\xb8\xe2\xc3\x5e\x6e\x7c\x5f\x5c\x60\x67\x7f\xa1" "\x25\x3b\x2f\x49\x79\x83\x09\x4a\x56\x18\xe7\x17\xd0\xce\x96\xa9\x26" "\xbd\xe8\x68\xd1\xed\x2d\x8b\x1f\x2a\xef\x1d\x9f\x46\x1d\xa3\x27\xba" "\xe0\xf2\x6a\x5e\xdd\x4f\x86\xa7\x76\x1d\x2e\x3a\xc8\x6c\x7b\xc5\x52" "\x98\x41\x31\x52\x2e\x19\xb5\x11\x0d\xce\xf6\x5d\xec\x37\x0b\xad\xc6" "\xe2\x38\x61\x4f\xf5\xbf\x23\x49\xf3\xda\x62\x9a\x97\x98\xa4\x63\x3b" "\x6e\x78\xeb\xa1\x31\x37\x42\xf5\xc3\xd2\xe3\x49\x57\x29\xdb\xc0\xdf" "\x26\xa5\xc7\xe3\xd2\x34\x25\xd2\x0e\x0a\xe5\xdf\x46\xbf\xa1\xbe\x39" "\xfb\xf1\xce\xac\x28\x62\x51\x0f\x57\xe1\xad\xaf\x35\x6e\xfc\xb1\x69" "\xd8\xac\xb7\x99\x34\xdd\x5e\xed\x40\xda\x38\x4d\x19\x24\xb0\xa9\x6a" "\xfb\xc5\x49\x57\xec\x10\xfd\xd0\xc4\xb3\x02\x09\xa9\xef\x03\xa3\xad" "\x5e\xc1\xa6\x4e\xf9\x35\x97\x43\x61\xf0\xd5\x17\xd5\xca\x9f\x32\x9e" "\xc8\xf3\xbd\xe9\x4b\xe7\x45\x54\xed\x3b\xe4\x82\xe5\x65\xfc\xd4\xc4" "\xde\x68\x26\x76\x05\x30\x44\x8e\x0f\xe4\x4a\xed\x02\x6c\x7f\x5e\x06" "\x17\xee\x32\x6c\xf5\x62\x51\xe6\x4c\x78\xe2\xb7\x90\x6f\x40\x91\x0b" "\xcd\xfb\x6d\xaa\x7b\xeb\x7c\xc4\x6e\x48\xa3\xf0\x19\xe1\x7a\xac\x0b" "\x5a\xef\x61\x18\x1c\x1f\xd8\x35\xe4\xdd\xc2\xd7\x79\xd3\x8d\xb8\x41" "\x4d\x04\xfb\x12\x55\xe4\x50\xc8\xdf\x48\x02\xea\xab\x52\x67\x5d\x4b" "\x66\x5c\xa0\xd1\xb8\xdc\x7e\x5c\xab\x8b\x32\x37\x59\x11\xc5\x3f\x0d" "\x3d\xf8\x13\xcf\x29\x86\x10\xcd\x28\x3f\xa9\xc9\x8e\xc8\x09\x5f\x65" "\xc4\xec\x31\x12\x9e\xc0\xb1\x88\xdb\x33\x2c\x35\x25\x91\x08\xe8\x4e" "\x67\xf0\xbe\x04\x69\xcd\x0d\x37\xc3\x1a\x22\x1d\x86\xec\xcb\x9a\x72" "\x91\xd3\x50\x8f\xa9\x8a\xf4\x13\x6b\x26\x14\xf6\xf9\x69\x34\xa2\xb7" "\xac\x6f\x8b\xc8\x81\xf5\x53\x37\xa1\x3f\x32\x44\xc9\x86\x34\xf1\x98" "\x36\xfc\xf5\xc3\x4e\x99\xf0\x58\x9d\x12\xe0\x39\x98\x9f\x24\x44\x2b" "\x99\x2f\x6d\x68\xa5\xac\x96\x67\x28\x2a\xf8\x76\x9c\x4f\x16\xc4\xa2" "\xc8\x70\x77\xcc\x0e\x2e\x1a\x31\x42\x09\x76\xb6\x59\x07\x43\x82\x27" "\xe2\x43\x00\xb8\x73\x52\x04\x8d\xf8\x45\xdb\x9e\xd4\x28\xda\xc6\x77" "\x67\xaa\x28\x55\x83\x96\x6b\x2f\x1a\x94\x52\x2d\xb9\xcc\x11\x4c\x3c" "\xd8\x2f\x7e\x9e\xb3\x8a\x75\x26\x05\xec\x84\xe6\x46\x46\x81\x9b\x05" "\x8c\x2d\x1d\x10\x11\x63\xaf\x0c\x4b\x01\xf3\x08\x30\x2c\x5a\xca\xd9" "\xf0\x37\xad\x2d\xc8\xb6\x8a\xcf\xdd\xf8\xb6\x38\x0d\xdf\xa2\x4a\x0d" "\x5e\xa6\xf0\xcf\x87\xf3\xcf\x99\xcc\x65\x9a\x2e\x29\x14\x9e\xfd\xcf" "\xa8\x71\xcf\xff\x25\x2a\x67\x76\x80\x5b\x40\xde\x05\xab\xcc\xe7\x1e" "\x6b\x31\x88\xf7\x05\xf0\x92\x08\x07\x7d\x18\x37\xc9\xd3\x09\x56\x46" "\xa0\xef\x0e\x79\xbf\x1e\xdc\x35\x93\xb3\x78\xb3\x49\xc6\x52\x6a\x61" "\x1e\xa6\xaf\x90\x81\x1a\x1f\x0d\xe8\x43\xb3\xce\x5b\x61\xc0\x52\x62" "\xd2\x70\x3a\x15\x1d\x51\xe4\xdd\x05\x5a\xc3\x49\xda\x6f\x55\x9d\x87" "\xa0\x1d\xf2\x7a\x7e\xc6\x2a\x3b\x30\x0f\x4e\xce\xd6\xeb\xd3\x93\x7f" "\x07\x32\x17\x01\xe6\xaf\x2f\x1b\xa3\x1c\x05\x84\xdc\x0b\xb8\x87\x20" "\xb1\xeb\x0e\x03\x91\x44\xf7\xdd\x8f\xa9\xbf\xa6\x1b\xd0\x01\x74\x3a" "\xea\xbc\x78\x60\x42\x07\x46\x2d\x00\xcc\x8e\x34\xe5\x14\x3b\xb7\xf5" "\xda\x0b\x65\x3b\x9e\xf2\x77\x71\x5b\x1d\xc9\x56\xdc\xfe\xce\x27\x54" "\x5c\x08\x16\x0e\xc2\x58\x31\x4b\x4c\x99\x04\x15\x9a\xc6\xf7\x87\xee" "\xda\xb8\xba\x7f\x36\x31\x45\xa1\x9e\x16\x46\xbb\x06\x66\x83\xab\x81" "\x1a\x37\x1d\xbe\x78\xec\xd7\x8f\x4b\xb5\x96\xef\xe2\x0b\x90\xd8\x88" "\x15\x89\xfd\xe1\xc3\x14\x6d\x59\xfb\x4e\xa5\xa1\x66\xf1\xd2\xa9\xc3" "\x0e\x88\x7b\x0f\x1d\x9d\xce\x5f\x99\x7c\x2b\x55\x01\x01\x9c\x8b\x95" "\xf4\xa4\xfb\xde\x0b\x6b\x75\xb5\xff\xc9\x39\x5f\x0d\x91\x3b\x15\x03" "\x00\xec\xff\xdf\xe4\x70\x18\x69\xe3\x00\xba\x46\xf6\xf4\xde\x38\xdd" "\x81\xbd\x18\xd4\x70\xe7\xa8\x22\x77\x48\x0e\x23\x05\xc4\x40\xb3\xd2" "\x32\x1c\xb3\x7d\xc1\x63\x0f\xf6\x16\x0e\x5f\x83\x0d\x39\x28\x6a\x87" "\x80\xf7\xdc\x94\x6d\x43\xf2\x98\xe0\x76\xfb\xf4\x1b\x60\x5c\xd3\xa7" "\x46\x23\x39\x19\x5d\x1f\x3c\x90\x30\x6d\xb7\x0e\xaf\x37\x0f\x27\x55" "\x63\x1e\x7a\x9d\x06\xb1\xfd\x83\x4d\xf6\x4e\x5b\x0c\xcf\xff\xa3\xbc" "\x05\x17\x00\x3f\x41\x8f\x79\xbe\xe3\xad\x7c\x6b\x48\xc9\x3c\xca\x25" "\xe0\x62\x74\xe9\x37\xbe\x7a\x1d\x6e\x98\x92\x0e\x0e\x0c\x8f\x05\xde" "\x07\xf7\xf4\x3c\x7b\x65\x25\xcd\x1a\xcb\x67\x00\xc6\xb8\x65\xca\x61" "\x80\xcf\x1e\xd1\x62\xb3\xe8\x71\xdb\x8f\xc0\x80\x02\x4c\x89\x97\xa8" "\x4a\xaf\x3f\xb7\x4e\xf4\x9d\xfb\xd2\x81\x8a\x9c\x4b\x97\xbb\xba\xd5" "\x88\xca\x11\x58\x91\x16\x6a\xdd\x40\xc3\x5b\x72\x54\x35\xd4\xec\x50" "\x2d\xb0\x9e\x45\xe9\x71\x62\x74\xde\x61\x79\x39\xb8\x52\x83\x5c\xe6" "\xb7\x2f\xbb\x40\xeb\x39\xca\xc6\x60\x3f\xd1\xcd\x83\xaa\xf2\x8a\x1c" "\x15\x13\x16\x73\x55\xf9\x3c\xa3\x88\x74\x43\xa2\xbc\xab\x2a\xf1\x0f" "\x2c\x60\xd4\x15\x73\x5d\x99\x2f\x81\x11\x15\x76\x37\x3d\x10\xd9\xc8" "\x8d\x75\x13\x04\xcb\x69\x57\x5e\xb0\x64\x9c\xbf\xd3\x24\x11\xef\x4a" "\x41\x30\xc9\x63\xd6\x64\xef\xd8\x4e\xd2\x12\xe8\x13\x3c\x72\x6e\x7c" "\x88\xbc\xec\x91\x76\x78\x9c\x1c\xd5\xb9\x58\x6d\xe1\xb4\x2a\xf7\xf2" "\x7a\x4f\x90\xa8\xf9\x08\x72\x1b\xad\x7e\x73\xcb\x9c\x8c\x2f\x5c\xf8" "\xd2\xae\x99\xb9\x74\x9e\xfe\x41\x3c\xfc\x55\xd6\x7a\xe1\xbf\x07\x2c" "\x46\xf5\x26\x81\x1a\x1e\xe9\xc7\x57\x56\x4c\x95\xfc\xfb\xde\x78\x63" "\xda\xe2\x4d\x93\xf2\xb9\x42\xc2\x85\x35\x17\xdd\x89\xef\x78\xcc\x4b" "\x40\x00\x70\x5d\x2d\xeb\x8c\xd5\x7e\x2f\xea\xf4\xe1\x7e\x46\xa5\x23" "\x2f\xec\xd4\xfa\x96\x3e\xaf\xff\x3c\x6f\x68\xef\xa0\xe4\xab\xdf\x49" "\x27\xaa\x0a\x4f\xe1\xb0\x82\xbf\x5d\xae\x23\x40\x87\x34\x63\x8b\x7d" "\x58\x7a\xca\xe3\xd4\x53\x79\x79\x06\x8a\x09\xab\x4e\x37\xa5\xbf\x4c" "\x1a\x7f\xa7\xa1\x01\x51\xbd\x86\xae\x41\x38\x96\x5c\x11\xae\x35\x2f" "\x57\x74\xde\x9e\x12\x77\xa6\x47\x89\x1a\x19\x6f\x13\xc3\xb8\xbe\xfb" "\xd8\x2f\xa1\x16\x5e\xb4\x8f\xa6\xc5\x2f\x66\x26\x29\x8c\xc0\x00\x4d" "\x75\x47\x5f\x63\x0c\x59\x0e\xd6\x69\x80\xfb\x32\x7d\x75\x66\xaa\x28" "\x41\x71\x01\x72\x2c\xba\x19\x9f\x95\x04\xbc\x97\x90\x6f\x5a\xce\x52" "\xb4\x65\x04\x5e\xb9\x61\x58\x39\x6a\x40\x3c\x25\xd5\x5d\x22\xf3\xb2" "\x5e\xae\x8a\xc5\xb2\x7c\x05\x56\xca\x21\x7c\xd6\xf6\x9c\xb7\x81\x8c" "\x1a\x57\x1b\x86\x0e\xa1\xcd\x9d\x1e\x71\x45\xee\x62\x86\xaf\x08\x03" "\x5e\xef\x04\x8f\x71\x33\x67\x80\xad\xe8\x93\x77\xcb\x89\x8c\x0f\x40" "\x69\xea\x18\x7c\xba\x2f\xe4\xf5\x35\x1a\x35\x32\x57\x37\xf9\x94\x77" "\x13\xef\x18\x9e\xca\x29\x41\xee\x8c\x98\x0a\x1f\xc7\x19\xaf\x5b\x3a" "\xc6\xe9\xd9\x63\xa1\x52\x3c\x50\xfb\xad\xa0\x9e\x5d\x81\xcb\x0d\x39" "\x8f\x32\x99\x50\xd3\x29\xdf\xa7\x35\xdb\x02\x91\x3b\x04\xb8\x60\x02" "\x42\x6b\x7c\x04\x67\x4e\x4d\x5f\x37\x4b\x96\xbe\x53\xbf\x5e\x48\xe6" "\xfb\x25\x2e\x57\x46\x2f\x0c\x8e\x8e\x5c\x52\xdf\x45\x9f\x35\xa2\xcc" "\x0d\xd1\x38\xae\x90\x50\xbf\xc2\x43\x42\x55\x2f\x8b\xb1\xab\x8f\xf6" "\x0a\x94\x9c\x15\x39\x94\x60\xcb\x92\x3e\x47\x16\x9d\x54\x05\xeb\xb0" "\x95\x7c\x42\xf8\x69\x79\x78\x6c\xff\xee\xe4\x7a\xf0\xe2\xe2\x8a\x20" "\xae\xc1\xa1\x7c\xa6\x1e\x35\x92\xf2\x4e\xc6\x0e\x70\xd9\xcb\x78\x4f" "\x42\x12\x43\x31\xe5\x97\xf5\x5a\x6d\x25\x3b\xd1\xba\x47\x86\xbe\x3b" "\x3f\xab\x4f\x42\x36\x88\x2c\x6e\xd5\x69\xf1\x0c\xc4\x41\x0d\x9f\xb8" "\xc3\x17\xda\xe3\xbf\x33\x9a\x11\x8c\xee\x9d\x23\xdc\x05\x18\x62\xde" "\xec\x29\x74\xeb\x05\x83\x49\x89\x00\xbc\xab\x98\xec\x0a\xb2\x2a\xd7" "\x85\x56\xfa\xa4\xfb\x51\x44\x8a\x49\x48\x63\x54\x1a\xc2\x5a\xc5\x7b" "\x60\xf7\x1e\x86\xa1\x87\xa9\x9f\xbd\xbd\xc2\x5c\x05\x41\x9c\x90\xda" "\xa9\xc0\x49\xc8\xe1\x56\xee\xb8\x19\x47\x09\x7f\x73\x88\x00\x5d\x6a" "\xdc\x03\xc8\x67\x71\xdd\x12\x55\x2a\xff\x06\x86\xa8\x83\x06\x40\xd2" "\xb2\x62\x06\xae\x1d\xfa\xbf\x1e\x05\x25\xa5\x93\x19\xad\x11\x74\x06" "\x42\x02\x4e\x46\xcf\x46\xf4\x7c\x34\x65\x38\xfb\x63\xe9\x9e\x72\xd5" "\xa1\x40\xad\xb8\x01\xbc\x24\xc7\x41\xf7\x53\xc3\x04\x48\xe6\xdf\x63" "\x05\xe4\xed\x85\xae\x93\xc5\x09\x89\x6c\xd5\xb5\xba\x28\xec\xc8\x95" "\x85\x50\x93\xbe\xe4\xa8\x2d\x49\xb1\xbb\x0f\xa1\x6f\x8c\x21\x08\xbc" "\xe1\x97\x6a\x1b\x45\x23\x88\x42\x4a\xd9\xe3\x6a\x46\x89\x29\xff\x81" "\xee\x45\x7c\x7e\x68\xd2\x69\x19\x50\xaa\xce\x2e\xa2\x9a\xed\x32\x6b" "\xd1\x31\x80\xfe\x2b\xc9\x5e\xbc\xc7\x56\xd9\x44\x66\xea\xa4\xae\x4c" "\xa2\xbb\x8c\x4a\xbc\xee\x42\x44\x92\x13\xe4\x87\xeb\x39\xef\x27\xc0" "\x8d\xfc\x32\xfe\x83\x6e\x1e\x89\x7f\x84\x9e\x20\x64\x39\x1f\xac\xb2" "\x2f\x6a\x5e\x63\xfd\xd8\xa3\xae\xd5\x45\xad\x99\xfc\x0c\xa6\x2e\xc0" "\x93\x7c\xd0\x39\x1a\x6c\xaa\x73\x15\xc1\xbd\xf9\x0d\x34\x69\x15\x36" "\x30\x94\x2d\x63\x25\xf7\x83\xc1\xff\xaf\xf2\x8b\x95\x8b\xc4\xcc\xf1" "\x35\x7a\x97\xb4\x8a\x5d\x1e\x3a\x0e\x17\x8b\x14\x11\x6b\x46\xfb\x4a" "\x3c\x02\xf9\xb4\x09\x1e\x7b\xc3\x15\x3b\x3b\xbc\xde\x21\x12\xc6\x0f" "\xe7\xe1\x5a\x92\x88\xee\xb3\x09\xf2\xe1\x80\x93\xa0\xff\x9f\x8c\x4e" "\x74\x80\x00\x25\x20\x62\xe8\x22\xa4\xb5\x2d\xa8\xf1\x09\xb2\xa1\xe6" "\x3a\xaa\x82\xfb\x2f\x62\xbe\xbf\x06\xc0\x74\x78\x64\x4e\x01\x1b\x2c" "\x04\x86\x36\xe3\xd3\x36\xef\x7b\xfe\x3b\x8b\xca\xd7\xf4\x61\x84\xaa" "\x8d\x47\xd2\x79\x1d\xb8\xb2\x8d\x22\x38\xc8\x0f\x7c\xa4\x02\x50\x6a" "\xe8\xc2\xa1\x8f\x6b\x85\x47\x8a\xca\x7d\xc8\x49\x30\xa2\x25\x72\xdb" "\xe5\xc1\x3e\x9f\xf7\x47\xb4\xc3\x47\x02\x3a\xe6\xad\xb1\x06\x2e\x67" "\xd0\x3b\xa5\xb4\xca\xfe\x90\xbc\xd8\xaf\xf3\xb4\x29\xc8\xc8\x45\x78" "\x9b\xde\xbf\x0e\x5a\x7d\xa9\xa4\x5c\xfc\xf8\xa6\x51\x38\x23\x52\x3f" "\x9d\x61\x7d\xcf\x8d\x11\x1d\xce\xf5\x3d\xa2\xda\x92\x7f\xd6\x05\x60" "\x54\xee\xc7\xc4\x3c\xcb\x84\xbb\xdd\x85\x6f\x4e\xb6\xe1\x7b\x18\x16" "\x2c\xa8\xd6\x5e\x51\xe2\x53\x93\x91\xb7\xcf\xcd\x48\xbd\xad\x22\xd5" "\xde\xc8\x0e\xc2\x88\xe1\x7b\x1a\x4c\xe1\x39\x0c\x3b\x20\x77\x9b\xfa" "\xce\x26\xef\x9b\x88\x60\xc8\x3e\x09\x86\x6e\x2e\xca\x41\xdb\x07\x03" "\x79\x61\xe8\x6d\x1d\x7c\x69\xe3\x7c\x1c\xb7\x44\xd8\x28\x45\x29\xba" "\x7e\xd6\x13\x86\xa2\xa7\x42\x58\xc9\x2d\x9d\x19\xa9\x07\x96\xfd\xcc" "\x93\x31\x6a\x5a\x4f\x34\x86\xa0\x13\xa4\x0c\x57\x19\xf7\xf9\x44\x88" "\xa0\xb8\x0a\x49\x6e\x84\xb6\x02\xe5\xfe\x7a\xa8\x09\xe9\x27\x38\x42" "\x6d\xe4\x49\x40\xb8\xf2\xbf\xc3\x01\xa3\x51\x4f\x22\x24\x98\xc9\xfd" "\x82\xf3\x3e\x4f\x2a\xdd\xb6\x62\x03\xff\x98\xf6\xa7\xda\xbc\xc8\xf6" "\x87\x9f\x9d\xfc\x78\x24\x3e\x5a\x10\x28\x79\x9a\xc1\xde\xab\xb0\x6d" "\x64\xa8\xe1\xa6\xb4\x10\x18\x60\x38\xdb\xf2\xcf\x8b\x33\xf0\x6c\x41" "\x22\xda\x3e\x73\x05\x2f\x42\x18\xad\xe5\x75\x0f\x87\xee\x5f\xbf\x2f" "\x23\xf4\x03\xe6\xac\x1e\xc1\x95\x05\xbe\x8e\x57\xba\x0d\xb5\x4e\xf3" "\x0c\x60\xe7\x48\x7a\x30\x32\x63\xcd\x49\xc5\x8e\x2c\xa1\xcb\xe1\x36" "\xe7\xca\xab\x2f\x8b\x9c\xb2\x8d\x5a\x17\x46\x5f\xbc\x29\xe9\xf1\x4a" "\x83\xdd\x30\x12\x9e\x20\x35\xca\x45\x06\x85\xf1\x3d\xfb\x5e\xfa\x80" "\xe8\x95\xc1\x27\x09\x20\x11\xf5\x2e\x7e\xea\x3a\x9f\x79\x3d\xac\x4d" "\x9e\x3c\x85\xd5\x19\x62\x25\xe2\x05\xf0\x90\x86\xaf\xf7\xac\xc1\x57" "\xe8\x10\x6a\x81\xae\x6d\xe7\xb4\x77\xf8\xae\x2e\xbc\xc7\x73\xd9\x8a" "\x71\x98\xea\x68\xf1\xbc\x9d\xce\x1c\x9c\xc8\x6a\x73\x42\x86\xa8\x27" "\x93\x21\x85\xe8\xcb\x4f\x40\x3e\x65\x6f\x5c\x5d\xad\x25\xd7\xd0\x18" "\x38\x3e\xa4\x80\x1c\x0c\x2d\x94\xd4\x7d\xba\x43\x88\xad\x24\x5d\x69" "\x7f\x24\x7a\x0a\xf9\x61\x10\x4c\x8e\xa9\xcb\x6c\xde\x84\x80\xdc\xc3" "\x9f\x8c\x1e\x58\x58\x44\x07\xd0\x2e\x47\x9e\x9b\x8b\x24\x1e\x4c\xd3" "\x1b\xfe\xb7\x53\x8a\x65\x9a\x94\x84\x16\xc6\xa8\xde\x88\x34\x4e\x51" "\xe4\x3b\xa8\x8f\xde\xf9\xb7\xdf\x5a\xb0\xb5\xc8\x0e\x41\xde\xd0\xd1" "\xcf\x4c\xca\x85\x5c\xe2\xb9\x09\x69\xea\x7d\xd8\x09\x35\xb6\xeb\x9c" "\xa4\xe1\x9a\x45\x33\x7a\xa8\xa7\x66\xae\x01\xa1\x14\x0d\x24\x42\x92" "\x65\x13\x6f\x02\x21\x38\xe8\x98\x89\x66\x43\x39\xe5\x01\xe0\x2e\x6c" "\xac\xbe\xed\x0a\x81\x43\x3f\xae\x08\xcf\x99\x2f\x76\xee\x42\x5b\x4d" "\xbc\x2e\x55\x75\xad\x54\xe5\xe3\x2f\x80\x89\x21\x45\x7e\x68\x89\xe8" "\x92\x38\xa1\x77\x14\xd8\x06\xe2\x7c\x4b\x34\xec\xc1\x79\xa0\x12\xc5" "\x7f\x78\x51\x9a\xd6\xfd\xd5\x3b\xbd\xf6\xc3\x63\xd5\x7d\x38\x4c\x07" "\xca\x47\xe1\xe2\xd1\x12\x08\x77\x1a\x29\x42\xcf\x23\x10\x75\x7b\x4e" "\x68\x06\xde\x60\xbe\x51\x48\x7a\x33\x4e\xfd\x0e\x83\xab\x8f\x38\x15" "\x56\xf6\x54\xc7\xed\x60\x0b\x53\xaf\x97\xb4\xde\x96\x1c\x19\xe4\xfa" "\x0a\xe6\xb5\x16\xa0\x9a\x1d\x88\xfc\x12\x91\x31\x3c\x76\x34\x9a\x59" "\xfa\xb3\x58\xf0\x61\x55\x18\x69\xb4\x4c\x18\xb4\x11\xae\x9c\xc0\xe6" "\xc9\x47\x62\x83\x91\x67\x90\xdb\x8e\x69\xb0\xce\xe6\x40\x6c\xed\xfa" "\x3f\x09\x6f\x9a\x74\x10\x88\xdf\xf8\x73\x71\x58\x19\x62\x38\xa4\xef" "\x7a\x5d\x56\x80\x80\x28\x7f\x43\x9c\x1b\x13\x92\x3c\x0f\xf3\x8f\x9e" "\x85\x6b\xdb\xbc\x33\xea\x51\xd0\xd6\x54\xf4\x3d\x69\xc7\x4c\x28\x3f" "\x56\x86\x4f\xaf\x84\xd7\x8b\xc2\xf2\x91\x22\xbf\x46\xed\x7f\xf6\xa3" "\x8e\x63\xa4\x9b\xe8\x84\xc9\xca\xcb\xfe\x78\xfe\x24\x07\x4b\x73\x6c" "\x70\x1c\x75\x73\x01\xba\x2e\x90\x73\x45\x2f\x3a\xc0\x84\x9e\xdc\xa7" "\x90\xea\x19\xfe\x33\xfb\xde\x00\x8d\xb3\x80\x07\x94\x1e\xcf\xe9\x0f" "\x5d\xd4\x8e\x8e\x51\x9f\x23\x70\x16\x1f\xec\xcb\x44\x1f\xbc\xdb\x8f" "\x18\xd5\x50\x4e\x5d\x89\xe8\x8d\xd1\xdb\x0a\x63\x10\xb6\x7c\x87\xbe" "\xe3\x40\x0d\x56\x58\x65\x54\x8f\x48\x72\x45\xb7\x6f\x36\x65\x81\xc7" "\x37\xfd\xab\xae\x2b\x96\xa0\x34\x19\xe6\x0a\x79\xb6\xee\xbc\xa5\x06" "\xeb\x1b\x93\x39\x77\x04\xb1\x04\xa4\x1d\x3f\x48\x92\x61\xdb\xa1\xd6" "\x36\x8b\xc1\x99\xce\x73\x52\x48\x4f\x0d\x92\x34\xc6\x2b\xdd\x41\xee" "\x1a\x1c\xdc\xe4\x95\x8a\xd4\xbd\x01\x3a\xbe\xdf\xd0\x78\xfb\x09\xb3" "\xbc\x1f\x95\x5e\xe1\xf1\xdc\xc7\x60\x61\x0e\x6f\x9d\x21\x19\x1d\x6f" "\x53\xb1\xfc\xda\x7c\x3f\x96\x4c\xa2\x01\x42\x3b\x40\x7e\x2a\xd5\xde" "\xb6\xdc\xd7\x8c\x36\x3d\x7a\xfc\x22\x7f\x1c\x99\xec\x3b\xe7\x21\x70" "\x3f\xba\x9c\xbb\xef\xdd\x86\x2d\x69\x74\xec\x2c\xca\x7a\xb3\x73\xab" "\xaa\xb2\x00\xb0\x39\xed\x2d\xd9\x7e\xfb\xb2\x5d\xbc\x8d\x41\x57\x21" "\xa0\x66\xd3\xdd\x59\x50\x43\x69\x46\x73\x6d\xe5\x5f\xd2\x0c\xd7\x4f" "\xe8\x95\x33\xd3\xe2\x86\x20\x55\xef\xea\x4b\x4b\x1a\x22\xbf\x9e\xfe" "\xd2\x0a\xb0\xfa\x89\xc8\x63\x0d\x18\xa8\x94\x80\x1f\xfb\x2d\x2d\xba" "\xa0\x48\xca\x74\xae\xe8\xc3\xed\x42\x6c\x84\x51\xd7\xe0\xe8\x55\x45" "\xf1\x17\xdd\xf8\x78\xce\x78\x2d\xa6\xcd\x0b\x88\x6f\x25\xba\x01\x0e" "\x09\xc0\x7c\xb6\xfc\x5f\x2b\xfc\x9b\xf5\x1d\x9d\xc9\x23\x26\x7e\xa9" "\xf6\xcc\xd9\x96\xbd\x9c\x9e\x3a\x90\x28\xa1\xb1\x63\x2e\x23\x6f\x02" "\x0a\x76\xac\xb3\x7d\xc4\xc6\x17\x23\x5b\x41\x57\x36\xe5\x43\x31\x52" "\x5a\xd0\xfe\xc2\xb9\x01\x26\xf7\x82\x0c\xa7\x28\xda\xcb\x02\x53\xb5" "\xae\x3c\x6e\x3e\xe5\x02\x5f\x14\xc2\xef\x20\x57\xb3\x3f\x7d", 8192); *(uint64_t*)0x20002a80 = 0x20000240; *(uint32_t*)0x20000240 = 0x50; *(uint32_t*)0x20000244 = 0; *(uint64_t*)0x20000248 = 0x7fffffff; *(uint32_t*)0x20000250 = 7; *(uint32_t*)0x20000254 = 0x24; *(uint32_t*)0x20000258 = 0x80000000; *(uint32_t*)0x2000025c = 0x4000000; *(uint16_t*)0x20000260 = 2; *(uint16_t*)0x20000262 = 0xff; *(uint32_t*)0x20000264 = 0x1f; *(uint32_t*)0x20000268 = 0; *(uint16_t*)0x2000026c = 0; *(uint16_t*)0x2000026e = 0; memset((void*)0x20000270, 0, 32); *(uint64_t*)0x20002a88 = 0; *(uint64_t*)0x20002a90 = 0; *(uint64_t*)0x20002a98 = 0; *(uint64_t*)0x20002aa0 = 0; *(uint64_t*)0x20002aa8 = 0; *(uint64_t*)0x20002ab0 = 0; *(uint64_t*)0x20002ab8 = 0; *(uint64_t*)0x20002ac0 = 0; *(uint64_t*)0x20002ac8 = 0; *(uint64_t*)0x20002ad0 = 0; *(uint64_t*)0x20002ad8 = 0; *(uint64_t*)0x20002ae0 = 0; *(uint64_t*)0x20002ae8 = 0; *(uint64_t*)0x20002af0 = 0; *(uint64_t*)0x20002af8 = 0; syz_fuse_handle_req(r[0], 0x20000800, 0x2000, 0x20002a80); break; case 7: syscall(__NR_mount, 0ul, 0ul, 0ul, 0ul, 0ul); break; case 8: memcpy((void*)0x20000140, "./file0\000", 8); memcpy((void*)0x20000040, "fuse\000", 5); memcpy((void*)0x20000180, "fd=", 3); sprintf((char*)0x20000183, "%020llu", (long long)r[0]); memcpy((void*)0x20000197, "\x2c\x72\x6f\x6f\x74\x6d\x6f\x64\x65\x3d\x30\x30\x30\x30\x30\x30" "\x30\x30\x30\x30\x30\x30\x61\x30\xfc\x2a\xef\xed\x2e\x2a\xff\x1f" "\xaa\x63\x75\x73\x65\x72\x5f\x69\x64", 41); syscall(__NR_mount, 0x20000000ul, 0x20000140ul, 0x20000040ul, 0ul, 0x20000180ul); break; } } int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); do_sandbox_none(); return 0; }