// https://syzkaller.appspot.com/bug?id=58f3e48af1b6a437c63831453dc4551bf819a5cf // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[3] = {0xffffffffffffffff, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20002040, "./file0\000", 8); syscall(__NR_mkdirat, /*fd=*/0xffffff9c, /*path=*/0x20002040ul, /*mode=*/0ul); break; case 1: memcpy((void*)0x20002080, "/dev/fuse\000", 10); res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20002080ul, /*flags=*/0x42ul, /*mode=*/0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x200020c0, "./file0\000", 8); memcpy((void*)0x20002100, "fuse\000", 5); memcpy((void*)0x20002140, "fd", 2); *(uint8_t*)0x20002142 = 0x3d; sprintf((char*)0x20002143, "0x%016llx", (long long)r[0]); *(uint8_t*)0x20002155 = 0x2c; memcpy((void*)0x20002156, "rootmode", 8); *(uint8_t*)0x2000215e = 0x3d; sprintf((char*)0x2000215f, "%023llo", (long long)0x4000); *(uint8_t*)0x20002176 = 0x2c; memcpy((void*)0x20002177, "user_id", 7); *(uint8_t*)0x2000217e = 0x3d; sprintf((char*)0x2000217f, "%020llu", (long long)0); *(uint8_t*)0x20002193 = 0x2c; memcpy((void*)0x20002194, "group_id", 8); *(uint8_t*)0x2000219c = 0x3d; sprintf((char*)0x2000219d, "%020llu", (long long)0); *(uint8_t*)0x200021b1 = 0x2c; *(uint8_t*)0x200021b2 = 0; syscall(__NR_mount, /*src=*/0ul, /*dst=*/0x200020c0ul, /*type=*/0x20002100ul, /*flags=*/0ul, /*opts=*/0x20002140ul); break; case 3: res = syscall(__NR_read, /*fd=*/r[0], /*buf=*/0x2000cb00ul, /*len=*/0x2020ul); if (res != -1) { r[1] = *(uint64_t*)0x2000cb08; r[2] = *(uint32_t*)0x2000cb10; } break; case 4: *(uint32_t*)0x200066c0 = 0x50; *(uint32_t*)0x200066c4 = 0; *(uint64_t*)0x200066c8 = r[1]; *(uint32_t*)0x200066d0 = 7; *(uint32_t*)0x200066d4 = 0x21; *(uint32_t*)0x200066d8 = 0; *(uint32_t*)0x200066dc = 0; *(uint16_t*)0x200066e0 = 0; *(uint16_t*)0x200066e2 = 0; *(uint32_t*)0x200066e4 = 0; *(uint32_t*)0x200066e8 = 0; *(uint16_t*)0x200066ec = 0; *(uint16_t*)0x200066ee = 0; memset((void*)0x200066f0, 0, 32); syscall(__NR_write, /*fd=*/r[0], /*arg=*/0x200066c0ul, /*len=*/0x50ul); break; case 5: memcpy( (void*)0x20004300, "\x18\x27\xda\xcb\x7c\xd5\x3e\x01\xb4\x85\x2d\xe2\xd7\x48\xe2\x1f\xa0" "\x33\x07\x1a\xcb\x84\x1f\x44\x9e\xfc\x23\xd4\x52\x10\x18\x07\xae\x5c" "\x48\x55\x96\x33\x8a\x6d\x31\x38\x84\x44\xae\x8a\xde\x7b\x60\xa8\x5a" "\x37\xd3\xdb\x29\xef\x19\xae\x4c\x4d\x4d\xb9\xc2\xc8\x2c\x79\x08\xde" "\xbb\x2e\x2b\x5e\xbe\xf3\x36\xaa\xd7\x7b\xef\x94\x2d\x06\x49\x55\x07" "\x9a\xf4\xe9\x14\xf3\x72\xce\xc8\xed\x04\x40\xf6\xee\x0b\xde\xd3\xc5" "\x65\x28\x3b\xdb\x75\x12\x40\x11\x22\x77\x12\xd5\xf0\x1e\x8c\x1e\xb8" "\x6c\xf6\x92\x05\xa8\xb5\xb3\x74\xed\xee\x58\xeb\xaf\x09\xd6\x21\x91" "\xcf\x41\x19\x02\x60\xc3\x0a\x71\x9b\xbc\x9b\xc2\x9b\xe0\xd6\x0c\x67" "\x87\x91\xde\x6b\x23\x6c\x9b\x5a\x05\x72\x47\xc2\x81\x93\x7c\x2b\x2a" "\xe7\x47\xc8\x58\x53\x21\x13\xe0\xa1\xe7\xaf\x49\x29\x8e\xf5\x4f\x15" "\x57\x23\x01\xd3\xc9\x07\xb0\x25\x29\xbc\x47\x0b\xea\xb8\xf9\x20\x8c" "\xf9\x2b\x17\xa9\xdf\x99\xce\xff\x90\xa1\xe3\x84\xd6\xbd\xa3\xfe\x82" "\x3d\x8e\xff\x0e\x22\x29\xa4\x3c\x31\x78\x19\x35\xde\x69\x46\x6b\x10" "\x82\xc0\xf8\x8d\x37\xdc\x8f\x34\xe1\xd6\xe1\x7e\x13\x60\xf6\x62\x1e" "\x68\x6d\x66\x1a\xf2\x0e\xaf\x08\xcc\x97\xc2\x61\x59\x0a\xc3\x29\x16" "\x67\xa8\x7b\xbf\x66\xf8\x6d\x90\x05\xf0\x34\xea\x55\x17\xb2\x18\x7b" "\x6d\xfe\xce\xbc\x1c\xb8\xfc\x4d\xab\x51\x1a\x28\x90\xa6\x8e\xd1\x85" "\x48\x3c\x54\x81\x68\x80\x3f\x35\x35\x20\xcc\x6f\x82\x0d\x13\x49\xac" "\x98\x5e\x12\xa3\xff\x6e\x8a\x78\xb2\x9e\xd9\x72\x13\x96\xaf\xca\x3b" "\xa7\xd0\x4d\x1a\xb4\xdb\xcf\xe9\x3a\x88\x83\x1f\x78\x4e\xd2\x78\xd0" "\x79\xeb\x3e\x2e\x69\xd3\x16\x16\x00\xfc\x7b\x0d\xae\x82\x5b\x51\x0a" "\x59\xc1\x43\x15\xfc\x6c\xa0\xce\x68\xda\xfd\x08\x8f\x02\xa9\x2a\xe0" "\xab\x3f\x15\xca\x1a\x86\x3b\x64\x0e\x8e\x4a\x89\x40\x7a\x8b\x8d\x75" "\x28\x92\xe1\xf8\xb0\xe7\x93\xd4\x30\xc3\xec\x46\xcb\xe2\xb6\xa4\xbd" "\xad\x72\x8c\x34\xe7\x34\x86\x4a\xea\xc2\xb6\xb2\xeb\x51\xc3\xa2\xf9" "\xe6\x77\x3c\x58\x34\x16\x65\x11\x08\x6d\xc3\x58\x47\xcf\xa1\x79\x74" "\x88\x97\x95\xed\x30\x53\x53\xd4\x1c\x93\x99\xbb\x95\x93\x6a\x3c\x1b" "\xe1\x09\x9f\x21\x79\x5c\xfc\x04\xd9\x69\x99\x29\xec\xa6\x5a\x0e\xdc" "\xae\x5d\x4e\x56\x44\x04\xe5\x29\x2d\xc1\x5f\x40\xd7\x8d\x94\xbe\x9e" "\x8d\xca\x92\x98\x3b\xc7\x17\x29\xab\x30\xa7\x04\x55\xbb\xfd\x5a\x98" "\xd9\x7c\xab\x97\x78\xd9\xb7\xb6\x9f\xb2\x00\x19\xe7\xe7\xc7\xbc\x17" "\xc8\x4d\xa1\xda\xb5\x3a\x18\x7a\x11\x6a\xc2\x29\xe0\x03\x12\xc9\x5b" "\x10\x74\xaf\xff\x18\xa8\x77\x1a\x4a\xb4\x7b\xe2\x20\x57\x45\x83\x6d" "\xc3\xcc\x1c\xe5\x31\xfe\x69\x7e\x9a\x73\x46\x98\xfb\x23\x43\xb3\x31" "\xad\x9f\x13\x21\x4d\x1d\x7d\x51\x1d\xc6\x46\xfb\x8b\x3b\x70\xfb\x46" "\x11\xe6\xd1\x02\xa0\xe2\xbd\xa6\x31\x1c\xa8\x24\x53\x7f\x69\x9e\xfd" "\xef\xbd\x8a\x3a\x52\x3e\x26\x27\x2f\x07\xab\xd7\x55\x04\x18\x8e\xdc" "\x78\x8a\xf9\xc7\x5a\xab\xf7\x7f\x4a\xc8\x83\x57\x3f\x63\xde\xd3\x19" "\xfa\x5a\x8b\x63\x17\xd4\x49\x03\x91\x87\x96\x29\x44\x6f\xa5\xea\x4c" "\x69\x5f\x3d\xb9\x73\x9f\x7b\xc1\xda\x7a\x19\xf3\xe1\xc0\xcc\xca\x98" "\x30\x7b\x3a\x7a\x38\x27\x2b\x74\x55\xc8\x95\x7b\x17\x13\x8c\x9e\x17" "\x0c\x27\x89\x5f\xcf\x47\xeb\x55\x30\x94\x8b\x7c\xc4\x3d\x61\xa6\x21" "\x29\x3b\x0c\x83\xdc\x89\x3f\x02\xde\xf2\xb4\x2a\x8b\xd7\xad\x6c\x9c" "\xdf\xeb\x7a\x3b\xde\x14\x1e\x98\xe5\xaf\x75\x00\xb0\x7d\x85\xc6\x31" "\x49\x49\xb7\x54\xc8\x8c\xc6\x66\xbd\xaa\xec\x89\x27\x1f\x56\xec\x11" "\xbf\xa0\xaa\x33\x7f\xeb\x11\x40\xb8\xa0\x7f\xbd\x5c\x79\xbd\xd0\x23" "\x9f\x8a\xa1\xd4\x54\xc0\xe5\xa1\x6e\x99\xd3\x8d\x12\x12\xff\x70\x9b" "\xb1\x96\x4c\x31\x7c\x98\xbf\xef\x37\xb5\x69\x44\x66\x6f\x03\x20\xec" "\x85\xb5\xb1\xe0\x77\x31\xde\x55\x84\x90\x1f\x8c\x65\xe1\x4f\xd2\xba" "\x83\xb5\x00\xfd\xbb\x13\x7c\x7c\xdf\x91\xd6\x64\x00\x68\x8a\x5d\xa6" "\x40\x5c\xa7\xe0\xb8\x10\x7e\xd6\x5b\xe0\xef\x5c\x62\x34\xb6\x2f\x61" "\x3e\x7e\x76\xd6\xf3\xd5\xcc\x12\xbd\xe4\x34\x23\x91\x52\x4e\x25\xba" "\xb6\xec\x0a\x35\x8c\x6c\x66\xb7\xcd\xbd\xd9\x30\x1f\x91\x58\x9a\xf6" "\x5c\xb7\xc0\x2f\xe8\x27\x1a\x79\x8c\x5e\x12\x2f\xef\x9e\x75\x81\xd2" "\x88\x84\xd3\x3d\x01\xf0\x47\x5c\x9a\xc0\x52\xd2\xd0\x14\xbd\xc0\x9e" "\x27\x38\x48\x77\x42\xf7\xbf\xf4\x0f\xac\xf2\xe9\x6d\xcd\xfe\xfa\x33" "\x6c\x46\x92\x3b\x77\xb3\x34\xda\xf7\xb0\x1a\x9f\xd5\xd9\x57\xa2\x9b" "\x83\xad\xf6\xf2\x3a\xcc\x50\x7a\x58\xca\xbe\x6b\x28\x04\x53\x2b\xc1" "\xa8\x65\xa0\x1b\x11\x26\x12\x7f\x7c\x6a\x80\x29\x53\x1d\xb8\xa5\x1d" "\x84\x72\xc0\xab\xff\xca\x5b\xe9\x7b\x9b\x54\x33\xad\x22\x0a\xb9\xad" "\x65\xcf\x94\xa1\x16\x7f\x3f\xb2\xb8\x80\x4c\xe6\x6f\x9f\x5c\xae\x21" "\x27\x24\xb2\xb3\xa0\x43\x43\x58\x0f\x59\x19\xf4\x46\xf4\x0e\xaa\x01" "\x77\xf2\x5e\xbe\x68\xee\x7c\x7a\x35\xd9\xd5\xef\x6e\x1c\xb2\x20\xea" "\xf8\xad\x9b\x26\x9b\x15\xc2\xab\x96\x92\xc3\x45\xf3\xc3\xbd\x59\x65" "\xf0\x6a\xdf\xdf\xa2\xd6\x72\xb5\xe3\x18\x4e\xbe\x19\x2f\x73\xe7\x0e" "\x82\x9a\xdf\xac\x2e\x63\x18\xd2\x38\xdc\xeb\x6e\x3d\x7d\x14\x22\xd5" "\x7f\xf7\x12\x47\x93\xb9\x29\x66\xbd\x22\x9c\x07\x25\xb0\xd5\x91\xe5" "\x9c\x57\xf9\x88\x41\xb5\xff\xad\x16\xd0\xae\x90\x34\x06\x01\x4d\x3e" "\x63\x2d\x06\x54\xe9\x08\x4f\x87\x0e\x12\x40\x46\xf3\xeb\xae\x3e\xcb" "\xf5\xc5\x36\x5a\xa3\x2e\xbf\x16\x9c\xcf\x12\x43\xdc\x8f\xb2\x96\xce" "\xf0\x06\xd5\xf0\x04\x47\xec\xd2\x98\x0a\xbb\x98\xe3\xb6\xe6\xbf\x61" "\x81\xe5\xdf\x79\x94\xea\x1c\x12\x73\x78\x4a\xf0\xd9\x2a\x57\x39\x4c" "\x71\x92\x6d\xc1\x43\x22\x8a\x8a\xde\x10\x3f\xf6\x18\x60\xd2\x1f\xfd" "\x46\x7b\x2c\x41\xbb\xbd\x24\x90\xdd\x36\xad\xd8\x65\x82\x8f\xb6\x43" "\x96\xf1\x68\x31\xa3\xa7\x4f\x57\xee\x22\x54\xcc\x93\xb2\x5b\x72\x19" "\xbc\x00\x33\x9a\x25\x18\xbe\x3c\xaa\x47\x65\xed\x63\x29\x5c\x84\xf1" "\xd5\x91\x44\xe9\x6a\xac\xfb\x57\xc6\x44\x1f\x64\xf2\x97\x29\xbb\x7d" "\x68\x12\x7a\xe2\x47\x2b\xbf\x08\x95\x70\x00\x3b\x1e\x82\x01\x91\x87" "\x8a\xb6\xf5\x3d\xb0\x1c\x18\x07\x51\xe3\x46\x72\xcf\x5a\x96\xed\xfe" "\xfe\x16\x45\x80\xd6\x10\x16\x72\x28\x1b\x59\xf5\x8f\x3c\x7b\x12\x22" "\xf2\xb6\xd1\x9c\x8a\x8e\x5f\x9a\xd5\x39\x04\x5f\x7d\xba\xda\xa7\x67" "\xf9\x93\xda\x97\x4d\xae\x20\x74\x4b\xf5\xad\x0e\x0e\xc7\x1e\xe9\x76" "\x96\x65\x99\x81\xe0\x67\x46\x3c\x78\xbd\x93\x37\xb8\xbc\xfc\x07\x0e" "\x7e\x5b\x47\x30\x3e\xaa\xf9\x65\x1c\x19\xf1\x9a\x15\xea\xb8\xe2\xc4" "\x70\x41\x82\x8b\xe5\x09\x94\xb5\x69\x5e\xe5\xfb\xc9\xa9\xec\xac\xf9" "\xde\x71\x42\x15\xeb\x79\x92\xc0\x7f\x26\x2d\xb8\x84\x39\x37\x93\x4f" "\xdf\x6f\xdd\x31\xd0\xf3\xa4\x4f\x07\x4f\x3a\x1d\xd6\x62\x2d\xbd\xb3" "\x36\x4d\xf7\x9d\x5e\xc9\x0e\xad\x64\xc2\x9e\x05\xa6\xc5\x35\x8c\xc6" "\xb9\xd8\x49\x3b\x7e\x1c\x53\xa9\x1c\x37\xaa\x36\x53\xcf\x20\x02\x07" "\x24\x61\xf4\xb9\x9f\xcd\xec\x14\x2e\x53\xb8\x7f\x61\xea\x55\xcd\xb8" "\x34\xdd\x4e\x03\xf2\xf5\x7a\x20\x6c\xab\xe2\xf3\xf3\xcb\xfa\xd3\xb4" "\x11\x7b\xf4\x43\x47\x18\x02\x2b\x09\xa8\x41\x99\x59\xa9\xbb\x97\xfb" "\xa5\x0a\x6b\x3b\x9a\x84\x4c\xd1\x30\x1d\xe7\xba\xe8\x9f\x8d\x1b\xf5" "\x49\xb8\x8d\xd2\xbd\x06\x97\xe7\x0c\xe8\x9c\xc2\xe3\x83\x22\x1c\xa2" "\xae\x9d\x36\x71\xa7\x30\x46\x6c\x25\x0a\x89\x63\xf6\x41\x1a\x42\xec" "\xc8\x5a\x00\xc0\x1b\x2b\x43\xc3\x94\x32\xd5\x06\x5a\x5f\xd1\x1c\x29" "\xa2\x31\x69\x89\x1c\xd6\x74\xcf\x3a\x31\xe8\x25\x87\xa2\x6c\x8d\x48" "\xaa\x3d\xeb\xea\xf0\x67\xa2\x66\x69\x59\x9f\xae\x85\x01\x26\xdd\x51" "\x65\x12\xe0\xcf\x5a\xb5\x56\xb5\x58\x2a\xdd\x7d\x2f\x66\x57\x23\xa2" "\x24\x40\x07\xdd\xc3\x02\xf0\xec\x29\xda\x73\x57\x8a\x80\xc9\x98\x84" "\x9b\xe2\xf7\x66\xa3\x34\xc7\xad\xe4\xdd\x46\xf3\x7d\x64\x88\x99\xda" "\x5c\xf7\x43\x7a\xf2\xd6\xe8\xd0\x3d\x93\x49\x03\x38\x7c\x4c\x7e\x26" "\x09\x09\xd5\x9b\x54\x6d\xfa\xc9\xff\xdc\xe1\x1f\xb9\x2e\x5b\xb6\xff" "\x68\x36\xfa\x0e\x6d\x0c\x59\x42\xb4\x66\x0f\xdd\x68\xd3\xcc\x8a\x76" "\xce\x09\x60\x58\x4d\xbf\x63\x46\x95\xca\x75\x75\x2b\x19\x06\x7b\xa5" "\x35\xe4\x77\x91\x89\xb1\x11\xc9\xa3\xe0\xea\x87\x70\x67\xc0\x46\xd1" "\x00\x21\xb0\xe6\x0e\xae\x8d\x5d\xd7\x53\x6b\x44\x74\xd8\xab\x74\x67" "\x9e\x2d\x8e\x68\xbc\x92\x08\xdb\x55\x61\xe2\x8d\x0b\xec\x17\x7c\xda" "\x1e\x2f\x94\x4a\x4c\xd9\x7b\x64\x32\x03\x3c\xe4\x00\x63\xcb\xce\xd6" "\xb3\x6e\x48\x6b\x09\x6a\xdf\xfd\x69\x9c\x9f\xdf\x58\xd5\xec\x54\xbf" "\x4a\xfd\xf5\x24\x93\xfb\xfc\xd9\x1e\x80\x7d\xa3\x1f\xf6\x75\xb5\x67" "\x05\x86\x97\xaa\x08\x81\x18\xa6\xec\xf1\xb7\xc7\xdc\xeb\xa3\xba\x87" "\xd5\x9d\x88\x2f\xce\x3b\x3b\x67\x67\x63\xed\x65\x8e\x99\x1c\x4f\xd5" "\x74\x69\x46\x81\x5a\xf0\xa2\xc1\xe9\x6a\xeb\x27\x38\x3c\xf6\x63\x8d" "\x6d\x7e\x19\x32\xb3\xa0\x28\x25\x0f\xee\x18\xdb\x7c\x46\xac\xd7\xfa" "\xb3\x3a\xb2\x2f\xf9\x1c\xf7\x80\x29\xa4\xed\x96\x49\x41\x51\x65\x22" "\x13\xfb\x7d\xcc\xa0\xa8\x94\x45\x68\xbf\x84\xad\xed\x11\x3e\x20\xe6" "\x89\x7d\x6b\x8f\x6f\x9f\xe5\xf6\x97\x5c\x7c\xbf\x99\x9d\x15\xce\x5f" "\x8d\x50\x45\x4d\x58\xe7\xa5\xb2\x85\xfc\xe4\xef\x9d\x14\x75\x8c\xf4" "\xa9\x61\x9b\x17\x27\x5f\xa6\x6f\x2c\x6c\x48\xd4\x4d\xa9\x56\x57\x70" "\x80\x62\xbe\xc9\xb6\x33\xba\x2d\xf0\x82\x76\x6f\x54\x9c\x5c\x1b\x66" "\x1f\xc8\xa5\xf7\xb8\xb6\x69\x95\x03\xda\x73\x3a\x66\xdf\x44\xf1\x16" "\xc4\xa4\x70\xb7\x36\x48\xcb\x64\xbf\x04\x10\x1e\x7b\xc1\xd0\x48\xd2" "\x30\xad\xdb\xf2\x2a\x5b\x98\xae\xa0\x8b\xed\xa8\x47\xe3\x35\x52\xfa" "\xf7\x71\xd9\xb1\x81\xf6\x10\xce\x34\x53\x05\x43\x09\x62\x57\x85\x6e" "\xa3\xa0\x82\x76\xbe\xc1\xea\x40\xe7\xbf\x69\x01\x14\x36\x23\xef\x47" "\xb5\xc4\x1e\x61\xd0\x76\xee\xf0\xa5\x19\x54\x31\xb4\x9b\xea\xb9\xfd" "\x7f\x07\xb1\xa1\x53\x49\x1a\x72\x50\xa8\x89\xb2\x6c\xe6\x57\xdf\x55" "\x0b\x22\x6f\xb9\x4c\xb5\xf5\x23\x06\xf4\x7e\xe3\xaf\x46\x27\xef\x0c" "\xdc\x0c\x50\x53\x6a\xf7\xb3\x86\x44\x0b\x87\x8e\xd5\xd6\x72\x67\x0a" "\xbd\xb3\xea\x3e\x3c\x3c\x03\x1e\x67\x29\x31\x04\xa4\xd6\x47\x6c\xf3" "\x25\xf6\xfe\x47\x62\xce\x23\x51\xdf\xfa\xc1\x16\x38\x7b\xaa\xdb\x82" "\xf9\x87\xca\xb7\xfe\x88\xce\x1b\xe7\xd4\x4c\xcd\x57\x2b\xfd\x29\x11" "\x4d\x2c\xe4\xd5\xe9\x0f\x4d\x6b\xf7\xbe\x39\xce\x25\xab\x7d\xe5\x28" "\x15\xe4\x05\x9d\x78\x35\x64\xd5\x18\xdd\x20\x87\x14\xde\x1c\x52\x4f" "\xf6\x9a\x4e\xc5\xf2\x9b\xb6\x31\xef\xf6\x05\xcc\x6f\x30\xa0\xbc\xfb" "\xa4\x48\x10\xa3\xa6\xfc\x26\x38\x91\x79\x1b\x51\xcb\x4b\xe0\xd6\x0d" "\x3d\x07\x98\xe3\x8b\x01\xb9\xa2\x11\x50\x58\x9a\x43\x6f\xb4\xdf\x45" "\x84\xbf\x6e\x70\x94\x17\x68\x84\x92\x1b\xbb\x0f\x87\xb1\xbc\xdf\xb6" "\xdf\x8a\xef\x8f\x58\x39\x38\x00\x81\x6c\x15\x64\x76\x50\x44\x8d\xa0" "\xba\x5b\xb7\x6f\x7b\xf7\x6c\x3b\xe8\x3a\xce\xab\x79\xee\xda\xe8\x0e" "\x1f\xb4\x6a\x25\x57\xa9\x48\x5a\xa7\xa8\x05\x3a\x58\x35\xe6\x09\xfd" "\xf5\x42\x22\xf5\xb4\x3c\xba\x63\xc9\x50\x8d\xbb\xd0\xe2\x29\x53\x76" "\x8f\x88\xe2\x07\x02\x36\xd7\x25\x5f\x68\x24\x64\xd0\x9c\x7b\xa1\x2b" "\x2e\x87\x87\xa1\xbc\x88\x9a\xf6\x86\xd2\xc3\x55\x96\x1d\x8f\x92\xf8" "\x77\xbb\x09\xba\xef\x09\xd7\x0b\x5b\x30\x60\x47\xd8\xd3\xcb\x97\xfb" "\x06\xba\x8d\x09\xbf\xba\xe0\x23\x14\xdd\xdf\x98\x09\x2b\x6e\xf2\x75" "\x74\x3e\x9d\xeb\x39\x19\x95\x00\x3d\x83\xb5\x49\xec\xd6\x04\xda\xa9" "\xbd\x34\xef\x31\x1a\xec\xed\x5d\xb5\x04\x24\x22\x41\xc0\x71\x7f\x83" "\x02\xef\xed\xcd\x3f\xd4\x36\x86\xa7\xee\x21\xc7\x3b\xa3\xc5\xaf\x98" "\xc9\x3d\x09\x15\x8c\x90\x11\xe1\x1b\xc4\xb5\x1a\x3a\x4e\x90\x4c\x4b" "\x6c\xed\x1a\x78\x6a\xdf\x31\x00\x73\x40\x5c\x27\xdf\x6a\xae\x6d\x5d" "\xa4\x39\x8d\x78\x62\x2b\xa9\x14\x4a\xd0\x99\x02\xda\x49\xb7\x70\x46" "\xad\x22\xfd\x30\x3f\x07\xc1\x53\x3f\x27\x1e\xb8\x27\x94\xb4\x02\x38" "\x2d\x29\x71\xf4\x6c\x79\x07\x06\x99\x07\xa7\xaf\xb9\xe9\x4d\xd4\x07" "\x16\x85\xf9\x1c\xfc\xa1\x0d\x86\xaa\xd7\xc3\x85\xe4\xd9\x0f\x0d\x44" "\xd3\x75\x88\xa8\xf1\xf2\x67\xc1\xd8\x44\x56\x34\xca\x41\x94\xd1\xa0" "\xc5\x89\x4a\x6d\x00\xca\xe3\xaf\x3a\xec\x99\x1c\xfe\xfd\xa5\x9e\x3f" "\x46\xc0\xa6\xe2\xfa\xc5\x5b\x35\x25\x9a\x99\x60\xec\x7d\xbd\x1c\x7d" "\xd1\x28\x36\x83\x93\xf0\xde\x1e\x09\x94\xba\x1f\x5b\x41\x76\x2c\x22" "\x21\x3f\x56\xbb\xf4\xc2\xcc\xa4\x58\xdd\x57\x31\xf9\x37\x9f\x06\x51" "\xba\x61\xfb\xf1\x7a\x58\x61\xeb\x41\x7e\x20\xa7\xfc\x9d\xf1\x2c\x67" "\x71\xf5\xab\x32\x22\x13\xec\x95\xbe\xff\x96\xdc\x18\x11\xdd\x0f\x45" "\xbe\x8f\xb1\xed\x93\xc2\xcc\x01\xe6\x94\x62\x0b\x55\x0e\x45\xbd\x26" "\x5f\xb3\x57\xf5\x26\x99\xcf\x9c\xa3\xdd\xf3\x31\xfe\x4d\x11\xc5\xe9" "\x7b\xb5\x76\x31\xd9\xc7\x62\x0b\x5c\x19\x56\x2c\x85\xef\x8e\x04\xec" "\xd5\xcd\x5b\x71\x3f\xbd\x94\xb6\xb7\x63\x31\xa8\x3f\x30\x4c\xd8\xae" "\x1a\x90\x3f\xfa\x72\x2c\xf5\x69\x7b\x1e\x1b\xde\x20\x67\x35\x65\x6c" "\xe5\x72\x54\x74\x4d\xaf\xf8\x01\x3f\x47\xf9\xaa\x4f\x06\x2d\x8c\x59" "\x56\xfa\x8d\xf5\xee\x79\xd6\xe6\xff\xbc\x0c\x47\xcd\x0c\x99\x51\x7a" "\x6d\x92\xfe\x8a\xd1\x8c\x00\x1b\xe4\xb5\x5a\xf7\xa6\x53\x37\x12\xc6" "\xa2\xcc\xb7\xe8\x13\x01\x6e\x7c\xb7\x4a\x94\xbf\x2a\x2c\xe9\xb3\xb4" "\x40\xfa\xae\x19\x21\x0d\x43\x32\x0c\xb8\x1a\x64\x72\xd1\xda\x77\x5c" "\xa2\x7f\x2b\x5b\xbe\x59\x64\x27\x1e\xef\xcc\xdf\xa0\xbd\x6b\x16\x33" "\x57\xaf\x45\x39\xfd\xb5\xd5\xe2\xe7\xe1\x79\x50\x40\x77\x6d\x4d\x75" "\xb7\x09\x28\xb8\xef\xa9\x54\x55\x6f\x4d\x22\x5b\xd9\xb6\xf9\xe5\xa7" "\x1a\x8e\x7a\x3e\xf5\xc3\x6d\x45\x92\x33\xc6\x66\x50\xad\xa1\xc5\x5d" "\xfa\x02\xbc\xa3\x99\x7f\x93\xb9\x20\x28\x88\x1d\x9c\x3e\xc0\xe7\xe1" "\xa4\x2c\x58\x74\x82\xb0\xcf\xbc\x77\xe8\x52\x0c\x6c\xa0\xf3\xe5\x12" "\x7c\x96\xb4\x10\x56\xb7\x27\x9d\x9e\x62\x35\x8e\x39\xdc\x95\xe7\x79" "\xaf\xfa\xaa\xdd\xc8\xe9\xee\x66\xba\x33\x6f\xec\xa8\xb9\x57\xcc\xb4" "\xf3\x52\xc0\xd1\x62\x39\x0e\x3b\xde\x27\xb1\x51\x32\x40\x7c\x97\xc3" "\xa6\xb5\xf1\x70\x4e\x1e\x55\x9e\xe1\x26\x55\xa7\x1d\x7d\xce\x37\x11" "\xc8\xaf\x90\x7d\x7d\x28\x75\xe2\x40\x7f\xf8\xc5\x9c\x54\x57\x67\x80" "\x58\xd3\xd0\x0a\x79\x71\xd2\x39\xc1\xb1\xc6\x7d\xac\x3f\xf3\xfb\xcc" "\x2d\x8c\x80\x35\xe3\x10\x40\x11\x8a\xc4\x6b\xa5\x11\x0a\x16\xae\xdd" "\x0b\x7f\x73\x1a\x4f\x86\xa6\x3a\x69\x75\x01\xa6\x64\x94\x6e\xaf\x7d" "\xa6\xd3\xcc\x2a\x29\x6f\x29\x4e\xe7\x65\xb8\xf2\x63\x63\xba\x61\x16" "\xe0\xea\x0e\xf8\xea\xbb\x0f\x1e\x7c\xc4\x29\x61\x11\x94\xcf\x0b\xb6" "\x64\x63\xd2\x6a\x82\xdd\x11\x8c\xbb\xd3\xf1\x04\x0d\xca\x2f\x5f\x82" "\xac\x5e\xb5\xdf\x41\xa4\x65\x8f\xcb\x34\xb6\x80\x66\xc5\x70\x8a\x4a" "\x16\xc4\x8f\xd2\x90\xb3\x2e\x39\x2e\x7f\x5b\x66\x2f\x4e\x3f\xa2\xd7" "\x9a\x81\x4f\x52\x82\x4c\xf7\x37\x87\x26\x04\x67\x2b\xda\xf8\x0f\xc5" "\x27\xde\xb1\xf6\x90\x33\x9c\x92\xb6\xc6\xc6\xc8\x63\x5d\xe5\xa2\xe1" "\xa7\xff\x61\x7d\x0f\x1c\x11\xbc\x3a\x35\x04\xd0\xde\x94\xd7\x76\x78" "\x02\x5a\xb5\xbe\xa5\x11\xd7\x83\xdf\x14\x8e\x58\xb0\x79\x32\x51\xdb" "\x3b\x7b\x9e\x03\xbb\x20\x1b\xe8\xbc\x59\x39\xc0\xa6\x0a\xb5\x48\x46" "\x0d\x54\x3d\x01\x50\x82\xe0\x0a\xd9\xd0\x54\x18\xc3\x27\xeb\xaf\xba" "\xd7\x92\x4a\xaf\x70\xe5\xfa\x6e\xb0\xbe\x35\x9b\x65\xac\x2f\xbb\xca" "\xd4\x95\xb1\x77\x12\xe0\x33\xcb\xf1\x85\x3d\x1e\x24\x50\xac\x4c\x8d" "\x19\x28\x70\x74\xe7\x6c\xa3\xd0\x87\xd3\x76\xb0\xf8\x61\xb5\x25\xd4" "\x94\x90\x98\xdd\x4e\x3a\x3c\xc5\x01\x18\xc8\x58\x7a\xdf\x65\x87\xed" "\x9a\xa0\x35\x2b\x7d\x81\x2f\xe6\x6b\xb6\x4e\xb0\xc0\xf4\xd4\x68\x22" "\xaa\x9c\x3d\x48\x48\x45\x4d\x49\xb6\x1c\xca\x24\xd7\xd6\xb8\x2f\xaf" "\xc5\xd8\xeb\x4e\x40\xe3\x66\x5f\x24\xa9\x51\x82\xb7\x0b\x22\xc5\xf9" "\x30\x3a\x49\xd1\x27\x8f\x25\xde\x98\x55\x24\x6c\x72\x9f\xc8\xba\x30" "\x0f\xad\x79\x9a\x94\x9b\x9b\x0c\xe3\x03\x47\x7d\x22\x33\x7d\x59\x9d" "\x4c\x84\x41\x46\x1d\x25\x72\x59\x65\x18\x32\x10\xa7\x29\xfc\x59\xc4" "\xe5\xdd\xb4\x5c\x0b\x9d\xb0\x6a\x09\x61\x9e\x60\x09\xaa\x06\x53\xcd" "\x1e\x8b\x06\xd0\xe5\x5c\x13\x3d\x50\x22\xdc\xf9\x1f\x12\xa2\x1e\x9f" "\x97\x7d\xe2\x48\x5f\x88\x6c\x51\x33\xa8\x83\x79\x87\xe7\xbc\x90\x66" "\x21\x56\xb0\x25\x0c\xc7\x6c\xb0\x3a\xd9\xfa\x36\x73\x3e\xf3\x71\x47" "\x9e\xa9\xc1\x31\x36\x82\x86\x6b\x96\x3f\x1f\x96\xbb\xa8\xc6\x58\xe2" "\xc6\xa1\x0e\x5e\x29\xd8\xa0\x7d\x49\x99\xb7\x35\xbd\xef\x7f\x60\x32" "\x6a\xa6\x4f\xc1\x98\xc3\xf2\x67\x0f\xa4\xa4\x47\x17\xfc\x61\x3f\x12" "\x82\xfc\x32\x4f\xd9\x47\x6e\x6d\xa7\x86\x6c\xb6\xce\x1e\xfa\x8a\x15" "\x77\x08\x8f\x2a\xa7\x57\x58\x4b\x8a\xde\x9f\x2b\xa3\x4a\x22\x87\x87" "\x0d\xa2\xcc\x77\x04\x00\x8b\x6e\x05\x7e\xaf\x8b\xfe\x2f\xd0\xd6\xd6" "\x0c\xf0\x3e\x17\x51\xd2\x28\x4c\x64\x39\xee\x60\x79\x70\x84\x51\xe6" "\x4b\x1f\x7e\x7d\xc8\x40\x0a\xe9\x9e\x0d\x83\x4a\x7d\xab\xa6\xc3\xa8" "\x21\x98\x12\xad\xff\x07\x60\x12\x9e\x18\xa4\x1e\xb0\x44\x8c\x57\xa9" "\x09\x71\x4c\xd3\x95\x93\x34\x36\xe9\xae\x04\x02\x77\xf2\x13\xe3\x0a" "\xb7\xb6\xe7\xe3\x10\x96\x42\xff\xa0\x51\xb3\xc4\x23\xf6\xff\xa7\x83" "\x0c\x75\xd2\x29\xac\xd6\x17\xd6\xbc\x1f\x79\x48\xf0\x92\x38\xf5\x43" "\x7f\xf4\xfb\x30\x20\x34\xfe\xc1\xfe\xd9\x6c\x55\xc4\x6c\x7d\x70\xd6" "\xab\x30\x18\xc1\xa3\xd7\x61\x20\x07\x7f\x81\x5f\xa6\x7e\xc8\x81\x5f" "\x44\xfd\x0c\xae\x7d\x15\x09\xd2\x17\xa4\x32\xce\x90\x4c\x77\x8f\x20" "\x1a\x50\x8f\xde\xa4\x67\x2e\x9c\xff\x79\x7b\xd1\xd0\xf5\x8d\x46\xf3" "\x93\x96\xe1\x48\x57\x3a\xe9\xb2\x46\x8e\x4e\xe5\xbd\x9a\x5a\xbc\xe8" "\x16\x63\x33\xc5\x24\xf0\xa1\x04\xda\x2e\x3c\x99\xdd\xbc\x51\xfc\x6f" "\x4e\x7c\x62\x8a\xf7\x9c\x93\xd0\xfb\xe6\x1b\x1c\x4a\x72\xb1\x1f\xe4" "\x23\x59\x7f\x12\x64\x67\xa0\x1e\xe6\xda\xd8\x48\xf2\x4a\xbd\xfe\x45" "\x35\x92\xf0\x2c\x84\xe0\x17\xfe\x55\x3f\x27\xe6\x39\xf8\x88\x24\xd7" "\x0a\xee\xac\xa5\x47\x58\x18\x4f\x95\xf1\x2d\x69\x62\x91\x79\x80\x46" "\xbb\x07\x5f\xef\xd6\x87\x6e\x8e\xf8\x93\xf5\xb9\x34\x0e\x21\xfc\x63" "\xc6\x7f\xeb\x6f\x03\x05\x5f\x2f\x39\x4a\x59\x11\x64\xa6\x1b\x1a\xab" "\x14\xc4\x68\x99\x81\x75\xb7\x59\x74\x54\x3e\x79\xb2\x41\xdc\x69\xa6" "\xe3\x46\x37\x4d\xec\x5e\xeb\xae\x15\x4e\x36\xf2\x9d\x17\x27\x3e\x60" "\x8c\xe6\x9d\x53\x9a\x5e\x47\x02\xf4\x74\xba\xd6\x6f\xbf\x33\x48\xf0" "\xc8\x59\xbf\x88\x45\x76\xfa\xee\xac\x75\x4e\x29\x0e\xc9\x7e\x86\x35" "\x26\xe5\x54\x20\xda\x72\xb6\xb6\xcd\x20\x9e\x66\x85\xff\xb6\x4e\x98" "\x65\xd0\x0e\xb0\x17\xc8\x43\xd3\xc0\xcf\x3a\xb2\x6f\x53\xf7\x63\x16" "\xfb\xe0\x09\xf0\xb2\xc4\x93\x2b\x06\x94\xfe\xcf\x1a\x14\x8d\xbe\xad" "\x45\x8c\xa9\xf5\xf6\xd6\x78\xd6\xc6\xfb\xd2\x3f\xb6\xae\xa9\xe9\x51" "\x91\x43\x00\xea\xaa\xf6\x9b\xf3\x5d\x4c\xe1\x1c\x03\x49\xa0\x2a\xa1" "\x45\x29\xa0\x83\xe7\x01\xea\xc0\x17\x7d\x4d\xdb\x30\x5a\x9f\x9a\x5c" "\xf8\xba\xcd\x96\x32\x7a\x16\x1b\xb8\xb8\x77\x81\x3e\xa0\x22\xd6\x2b" "\xac\x8f\x0a\xb9\xeb\x5e\x9d\x14\x5d\xda\x4b\x1f\xe7\x9c\x0b\xee\x34" "\xc8\xbb\xfe\x86\x6b\xa3\x76\xd3\xa7\x1b\x98\x09\xad\xda\x06\xe6\x4e" "\xaf\xaa\x6c\xf5\x3f\xff\x8e\xd6\x3e\x15\x52\x5f\xd4\x09\xe1\x3b\x18" "\x09\xae\x6e\x6e\x93\x7a\xcf\x85\x8a\x59\xd2\x07\x3b\x30\x41\x71\xd5" "\xab\x35\xec\x92\xf6\x6f\xbb\x2d\x4e\x34\xd4\x6e\x88\x6c\x35\x46\xc1" "\x02\x6d\x0f\xf2\x78\x21\xa1\x5a\xa3\x97\xdb\xc6\x86\x54\x0d\x54\x6e" "\xa6\x6f\xb4\x3d\xcb\x9b\xea\xea\xdd\xe6\x25\x0c\xfe\x8e\x56\x3f\x90" "\x33\xb4\x32\x01\x8c\x88\xbe\xc0\x72\x79\xc6\xa0\x22\x8f\x3e\xb1\x10" "\x31\xd3\x43\x5d\x95\xc9\xc1\x78\x9a\x53\x38\xf7\x4a\xa6\xdb\x2c\x85" "\x3c\x87\xf8\xf2\x39\x7f\x90\x67\xfa\x59\x77\x47\x70\xf6\x4b\x8a\xe4" "\x2b\x9a\x07\xf8\x5f\x1b\xca\xbb\xc6\xd3\xb3\x45\x6a\x25\x3b\xdb\x73" "\xad\x3d\xe0\xaa\x41\x65\x89\xb7\x22\x05\x3c\x81\xdb\x90\xe7\xb6\x6a" "\x83\x5d\x63\x66\x15\x70\x1e\x68\x69\xfe\xf0\x16\xbf\xab\xa9\xda\x0a" "\x86\x90\x05\xff\xc3\x17\x4b\x60\x5f\xda\xbd\xb8\xc7\x34\x62\x62\xce" "\x78\xa6\x4a\xa7\x03\x69\x60\x91\x3e\xdf\xff\xad\x20\x2d\x66\x4d\x17" "\x71\x01\x8d\xe4\x3b\x65\x48\xa6\x67\x2f\x48\x97\x9b\x8e\x30\x01\x7a" "\x93\xda\x2c\x09\x32\x66\x30\x6e\x09\xeb\x20\x3f\xb3\x7d\x7d\x54\x46" "\x6f\xb2\x6d\x44\x14\xba\x88\x34\x6d\x02\xd8\x81\x1f\x10\x0d\xcb\x0a" "\x3e\x50\xae\x46\x24\x7b\x98\x6b\x92\x8f\x12\xc1\xad\x50\x6c\x6b\x33" "\xb4\x9d\x7e\x69\x55\xae\x96\x19\xf7\x3c\x79\xb7\x2a\x95\xb0\x53\xd5" "\x3c\x4c\x54\xd3\x6d\xce\xb8\xae\x78\x0b\x32\x1a\xa4\x1b\x5d\x61\xca" "\xa2\x1a\x6c\x65\x32\x9f\x08\xda\x52\x2b\xbb\xb3\xd0\x75\x01\xb3\x9c" "\xc6\xbf\xbe\x4a\x2e\xf8\x05\x4d\x7c\x57\x66\x6b\xc8\x05\xed\x45\x15" "\x17\xa1\x43\x2b\x95\x81\x41\xf3\xce\x94\x75\x2a\x67\xa1\x7a\xad\xb4" "\x15\x90\x03\x7d\xa8\xef\xdb\x25\x1e\xb5\x6d\xe3\x0b\x0e\x0e\x75\xad" "\xfb\xf4\xe0\x6d\x47\x77\xf8\x43\xa8\xd7\xc3\x1e\x2a\xb6\x2d\x98\x76" "\x42\x17\x49\x1d\x46\x96\x0d\x67\xd3\xee\x12\x13\xd1\x50\xc2\x8e\x75" "\xd1\xf4\x40\xd4\x1f\xfc\x3c\xf8\x76\x55\x4e\x2d\x4a\x35\x4f\x70\xfc" "\xe1\x7e\x4c\x0f\xdc\x64\x99\x2c\x32\xe7\x85\x26\x3c\xa4\xff\xca\xb5" "\x7d\x3d\x46\xd2\x20\x62\x7e\xd0\x5f\x16\x28\x55\x1e\x98\x43\x13\x79" "\x96\xbc\x7a\x0b\x77\x3e\x1c\xcf\xe5\x36\x42\x16\xa8\x00\x37\x57\xff" "\xdc\x05\x2d\x93\x79\x3a\x34\x63\xba\xf4\xee\xf5\xdd\x28\x38\x26\xf8" "\x51\x0b\xb1\xf2\x05\x05\xa6\xe6\x1c\xb3\xd5\x71\xd0\xf7\x7e\x67\xff" "\x3c\x0a\xa5\xca\x91\xf6\xd6\x8c\x7e\x0d\x2d\x79\xc6\x49\xb0\x91\xb3" "\x0b\x29\x11\xc5\xc4\x71\x57\xc9\xc5\x31\x29\x6e\xba\x68\x1e\x03\x9e" "\xae\xca\xb8\x37\x22\xcc\x2f\xd5\xb9\x19\x13\xa4\x63\xba\x9f\x69\x3e" "\x34\xda\x60\xb1\xad\xb8\xee\x9f\x4a\x83\xfa\x67\xe2\x5f\x19\xe4\xcd" "\x6e\x19\xed\x13\x81\xcb\xa8\xb5\xb4\x59\x11\x09\x63\x7a\xe1\xf7\xf2" "\x9b\x54\x95\xfc\x5f\x80\x57\xda\x56\x5d\x93\x7e\x75\x77\x73\x5b\xd9" "\x8f\xe6\x26\xce\x85\x68\x89\x7d\x24\x0f\x05\x4a\xd6\x9c\x8e\x0c\xa4" "\x24\xd1\xbe\x51\xb1\x7d\x5e\x63\x92\x53\xfb\x2f\xe6\x79\x1e\x01\xed" "\xcf\x9c\x4f\x84\x04\x23\x3d\x7f\x98\xb5\x2c\x31\xc4\x99\x6b\x6b\x63" "\x11\x2d\x01\x26\x03\x6c\xa2\x0c\xf5\x2a\x2d\xa2\x47\x86\x83\xc4\x1b" "\xfd\x8f\xb5\xb3\x4d\xe5\x9d\x5e\x87\xb5\x07\x5e\x5e\x1d\x78\xad\x06" "\xc6\xa2\xf6\xe6\x62\x14\x5b\xe3\xd3\x0d\x14\x0b\x62\xc4\x9d\xf2\x03" "\x35\x0e\xa4\x41\x2c\x97\xaa\xee\xc7\xaa\xa0\x0d\x81\xb8\x9f\x3b\x72" "\x95\x60\x78\x40\xde\x2a\x83\x86\xf5\x20\x12\xb5\xc4\xe6\xe0\xe1\x98" "\x65\x65\xbc\x4f\x99\xb6\xbc\x10\xf3\xa2\xab\x59\x78\x3a\x8b\x9f\x3c" "\x69\x6f\x74\x1a\xf0\xf5\x1b\x65\x92\xc6\x8d\xdf\xf8\x61\xfc\x7d\x2b" "\x16\x87\x6b\x05\xa5\x4e\xae\x9e\xc0\xe1\x70\xfb\xf2\x6d\x93\x58\x94" "\x1c\x6c\xba\x50\xa5\xc4\x1e\x77\xf7\x2c\x7f\x41\xe0\xbb\xf6\x02\x3f" "\x04\xf7\x70\x1f\x67\x6a\x64\xcb\x63\xea\x1a\x8d\x37\x3e\xe6\xa9\x9b" "\xa5\x64\x49\x69\x9c\xcd\xf8\xa1\x1d\xc7\xd8\x40\xd6\x95\xcd\x5e\xf9" "\x87\xf7\x4e\x5b\x16\x59\x4c\xc8\xc6\xc2\x25\x1c\x47\xb4\x29\x28\x1b" "\x6e\x34\xc0\x28\x8c\x72\x42\x05\x2a\xc3\xa1\x57\x32\x13\xf6\xdd\xb0" "\x87\x26\x00\x1e\x0a\xfe\x1f\xb3\x12\xd4\x63\xdb\x87\x22\xf1\x61\x79" "\x72\xdc\x7f\x36\x5d\xe4\x98\x02\x7e\xf0\xb5\xc6\xd1\x00\xe5\x83\x34" "\x8c\xd7\x77\xa2\xaf\xbf\xd6\x0e\xf5\x99\x69\xc8\xf8\x83\x58\xb6\x99" "\x5c\x17\x7a\x7d\x7e\x69\xd8\x6b\x11\xe3\x6f\x42\xba\xe8\xc9\xaf\x59" "\x9d\x3f\x82\x84\x47\xc3\x10\x04\x00\x01\x63\xbb\x74\xef\x20\xf6\x56" "\xf6\xa1\xc8\x15\x9b\xd0\xf8\x67\xf2\xe2\x83\xc1\x06\x56\xa4\x0a\x39" "\x7b\x2e\x51\x4c\x19\xef\xb5\xd5\xa5\xf5\x43\x16\x50\x98\x01\xbd\x82" "\x08\xa2\xc8\x4b\x2e\xf1\x3e\x54\xd7\xb8\xaf\x87\x87\xb8\x26\xb5\x00" "\x95\xa1\x5e\x33\xa5\xe8\xe3\x06\x45\x43\x12\xa8\x3a\xf7\x86\x9b\x7b" "\xa0\x03\x9c\xa6\x01\x75\x1b\x58\x0a\x91\x90\x43\x5d\x35\xa8\xce\x9d" "\x8e\x95\x58\xca\x1b\xce\xa3\xcc\x36\x04\xf4\xe9\x91\xae\xe7\x9f\xd0" "\xd2\x39\x3b\x9f\x87\xe8\xda\xc7\x78\x2e\x83\x7e\x1d\xe5\xe8\x8a\x7c" "\x79\x38\x5a\x2b\x14\x55\x60\x41\xf4\x9c\x11\x13\xdf\x43\xef\xd8\xae" "\xa1\x4c\x4b\x65\x1d\x71\x3f\xc9\x98\x9b\x2f\xd7\x7c\xe1\x3a\x98\xef" "\xef\x5e\x83\xcc\x68\x43\xd3\x13\x11\x77\x53\xd8\x28\x70\xc5\xef\xec" "\x8c\xc6\xfd\x85\x5a\xb6\xe0\xfc\x6d\x48\xc6\x68\x74\xfd\xcb\x2d\x00" "\x7d\xb7\xfb\xb9\x37\x1d\xa3\x83\x6e\xb2\x3d\xa1\x10\x62\x83\xa2\x0e" "\x32\x61\x7b\xca\xba\x57\x4b\x7b\x62\x98\xd4\x83\x34\xea\xee\xf9\x05" "\xff\x34\x8c\x2b\xfb\xc1\xc8\x3a\x88\xd6\x91\x5b\x64\x4d\x18\x54\x16" "\x1a\xb4\xf1\xd1\xdb\x12\xe7\x4d\xe2\x85\x3e\x48\xd1\xa1\x0f\x98\x35" "\xc2\x26\xbc\xa6\x94\x4d\x0d\xe6\xa1\x8e\x0e\x07\xdf\x45\xad\x72\xa7" "\xd3\x54\x04\x5a\x69\x97\xff\xde\xe0\x10\xe3\x70\x91\xa3\xa5\x28\x0e" "\x5d\xb8\xae\xea\x02\x45\x21\x7a\x6f\x11\x60\xa6\x28\x7d\x9a\x28\xc0" "\xee\xab\xae\xbe\x75\x5b\x94\x85\xda\x5b\x7c\xcb\x85\x16\x6e\xd9\x02" "\xe6\x32\x00\xe5\xe8\xac\x46\x41\x24\xbe\xf0\x19\x6e\xdd\xee\x6c\xfe" "\x90\xfc\xe7\x70\xb4\x16\x81\x7e\x1c\xa7\x84\x94\x78\x6b\xda\xea\xfa" "\x35\x38\x84\x1f\x74\xbb\xdb\x25\x85\xd6\x3f\x66\x7e\xf2\x27\x28\x7e" "\xfa\x56\xc0\x30\xc0\x99\x9e\x9e\xad\x59\x0f\x1c\xe3\x83\xa1\x38\x23" "\x32\x35\x49\x4e\xce\xc0\xae\xd9\x7c\x80\x3b\x4d\x7c\x4f\xb8\x0a\xc9" "\xa3\xbc\xb1\xdd\x2b\xab\x51\x38\x2a\x94\x19\x5b\xee\x03\x4c\x3f\x3d" "\x3d\x9e\xfc\x44\xad\xd8\x3e\xc5\x80\xa5\xcf\xe8\xf5\x94\x2b\x16\x94" "\xb0\xab\x3e\xf4\xb2\xd9\xf7\xc0\xb8\x63\x4b\x05\x6c\x6b\x6e\xeb\x94" "\x6b\xe1\x82\x5f\xa4\x52\xab\xdb\xc1\x54\x5c\xd9\x47\x74\xab\xed\x3f" "\xdc\x2b\x03\x99\x92\x92\x98\x22\x10\x30\xf6\xcd\x0a\x2b\x38\x49\x0f" "\x5e\x4b\xfd\x53\xee\x20\xde\x10\xee\xb2\xff\xac\xca\x98\x0d\x40\xe0" "\x88\x5c\xb9\x1c\x94\xa4\xd8\x1a\x61\xd8\x63\xef\xd0\xf7\xa1\x2d\xa2" "\x33\xe1\xda\xcf\x7a\xf7\x28\x95\x08\x92\xef\x88\x7a\xbc\xc5\xe4\xd0" "\x8c\x6b\x57\x83\x4a\x1e\x5d\xd1\xdf\xc6\x94\x18\xfc\x68\x1b\x47\xd8" "\xcd\x34\xc6\xa3\x84\x6b\x0e\x1a\xfd\xc7\xc7\xf9\x03\x3f\xf8\x17\xa7" "\x2a\xc6\x17\xc0\xa1\xe5\x9e\x4e\x6e\xa4\x0b\xd6\x68\xc4\x99\xf2\x21" "\xc5\xf6\x37\x00\xe7\x4b\x68\xba\x30\x45\xb4\x46\x0f\x0f\xa6\x03\x08" "\xcf\x89\x64\xd9\x52\x37\xd8\x88\xd5\xc1\xb1\xbe\x0f\xa7\xbd\x27\x03" "\xea\xeb\x0d\x29\x14\xb8\xd2\x2c\xbd\x86\x93\xc1\x6f\x21\xbb\x72\x56" "\x6f\x38\xaa\x97\xe8\x6f\x21\x25\x57\xd4\x0e\x10\xb2\x85\xe1\xd4\xde" "\x0b\x15\x3c\x8f\x91\xe1\x68\xe9\xd0\x03\x1b\xb7\xee\x7f\xec\x5f\x0c" "\x3f\xbf\x15\xbc\x6f\xbc\xee\xae\x6d\xd3\x63\xb7\xe9\x83\x5b\x17\x5b" "\x0b\xe1\x6a\x33\x48\xa2\xc2\xd0\x74\x68\x44\x9f\xbb\x2f\xcf\xca\x9e" "\x7d\x8b\x72\xb6\x23\x35\x57\x15\xa6\xa1\xed\xc8\x7e\xa4\xc6\x99\xff" "\xea\xcb\x22\x77\xfb\xb5\x65\x8a\x1e\xb1\x2d\x0a\x7a\x93\xbf\x10\x0a" "\xb1\x1c\xf4\x9b\x35\xc1\x6a\x14\x04\x4a\xc8\xe5\xbd\x69\xaf\x05\xb2" "\x52\x32\x5f\x0e\xca\x41\xf9\x06\x81\xb4\xa1\xec\x39\x90\x96\x93\x9a" "\x96\x68\x59\x26\x65\x5a\x0c\x4d\x17\x2d\x06\x64\x6c\x87\xf3\x5b\x65" "\xc0\xd7\x65\x48\x82\xb7\x98\x38\xf7\x8c\x35\xfe\xbb\xdb\x37\x8f\x9f" "\x28\xd7\xe6\xba\x1c\x1f\xa1\x91\xbb\xcd\xbf\x99\x17\x31\xf5\x46\x43" "\x9a\x96\x6e\x4f\x7a\x15\xc7\x73\x67\x16\x1b\xde\x14\xb7\x31\xc9\xf2" "\xb9\x11\x14\xfa\x46\xe0\x2e\x70\xf0\x7d\x3c\x40\x98\x8e\x81\x40\x86" "\x6e\xd3\xdc\xd9\x8e\xf5\x52\x47\x00\xde\xb7\x5c\x1a\x64\x14\x01\x6d" "\xa0\xce\x68\x45\xe9\x36\xa8\x69\x2b\x7b\xea\xc0\x1b\xc8\x55\xa7\x2a" "\x49\x0c\x66\x7c\x3b\x75\x5f\xfa\xaa\x57\xaf\x54\xaf\x1b\xd0\x7a\xe7" "\xb2\x03\xbe\x85\xf3\x65\x3a\xa6\x3c\xc5\xae\x10\xf6\xe5\x85\xc7\xbd" "\x8a\x52\x57\x60\x4e\x82\xfa\xd6\xc7\xbe\x6f\x1a\x47\xeb\x66\x5c\x14" "\x22\xc0\x3d\x32\x63\xf3\x51\x67\x1a\x48\xbd\x5e\xed\x22\x07\x7b\x8c" "\x16\xe7\x06\xf0\x09\x88\x09\x41\xc2\x9b\x90\xc2\x9a\x11\xef\x00\x8a" "\x37\x1b\x29\x20\x0f\x32\x52\x3b\x98\x47\xd9\x11\xfa\xb4\xee\x14\x68" "\xbf\x98\xa4\x9f\xf7\x37\x03\xe2\xd9\xd7\xbb\xf6\xae\x37\x45\x9c\x3c" "\xb5\x02\x54\x1f\x30\x4e\x1d\x59\x18\x51\x8a\x06\x22\x5b\x65\xf3\xb3" "\x8b\x91\xf8\xe0\xb4\x9a\x29\xef\x9a\xac\xca\x36\x9c\xe5\xcf\x8b\x45" "\x73\x8e\x29\x11\x8a\xb0\x60\x78\xb8\x85\x18\x9a\xcf\x4d\x0a\x52\x00" "\xb8\x6c\xb2\x26\x9d\xde\x90\xdf\xad\xa2\x79\x75\xdb\xe6\xde\xd1\x22" "\x32\xc0\xfa\xf7\xea\x12\xec\xac\xbd\xf4\x16\xcf\xf8\x63\x2e\x48\x34" "\x64\x78\xa7\x5c\x02\x79\xc1\x92\x0b\x75\x56\xfc\x66\x70\x70\x4d\x5d" "\x97\x91\x2c\x75\xd3\xa9\xcf\xfe\x68\x91\xab\xdf\x74\x7a\x68\x50\xba" "\x7d\x96\x68\xe5\x6c\x7e\x7e\xcc\x03\xc5\xc3\x88\xe8\x86\xbc\x98\x4c" "\x8b\xfd\x9f\x47\x0b\x7e\x4e\xa4\xd1\x46\xc3\xc2\x8e\x4f\x8f\xf8\x2b" "\x95\x58\x26\x63\x43\x03\x6e\x62\x39\xa2\x6f\x56\x7f\x76\x33\x91\x1c" "\xcc\x51\x52\x2c\x29\xff\x3c\xa3\x6a\xd5\xb8\xcf\xd6\xec\x1c\x86\xae" "\x08\xf3\x0d\x87\xa5\x03\xc9\x09\xe6\x6d\xc2\x78\xe9\xd1\x4f\x3f\xae" "\x4b\xfa\x48\x13\xf3\x15\xb1\x61\x0e\xd7\x6f\xc1\x49\xd9\x2f\x31\x90" "\x44\xe8\x13\xc3\x76\x9d\x49\x78\x63\x7e\x0e\xe7\x32\xd3\xbb\x86\xe9" "\xfa\x58\x41\x81\xf4\x1d\x43\x04\xc0\x7a\x1c\xb7\x1d\x10\xf0\x7d\xa6" "\x49\x28\x82\x75\xa2\x13\xef\xf1\x61\xc5\x36\xc7\x36\x6d\x4c\x01\x0c" "\xf9\xa4\xb1\xc2\xf2\x94\x06\x07\xdc\x74\x68\xe5\x12\x04\xc6\x98\x3c" "\x55\x4d\x61\x6d\x48\xf9\x3a\xe5\x1e\x6a\x77\x69\xb3\x28\x57\x85\xae" "\x7b\xcb\xa3\xcf\xb2\x78\x79\xdf\x1d\x7f\x1f\x18\x84\x9a\x70\x81\x4e" "\xb5\x1d\xf6\xd1\xd8\xcb\xe8\x0b\x73\x6c\xb3\x83\x26\xf7\xdb\x7a\x06" "\xe4\x9c\xd4\xfe\x41\xb3\xf7\xa9\x15\x6c\xfa\xc9\x22\x2a\xc2\x3d\x13" "\x76\x5e\x7f\x29\x10\xa3\x65\xfb\x23\xa2\x08\xf1\x92\xcf\xca\x97\xb2" "\xb8\xa3\xde\x44\xa2\xd9\x0d\x3c\x86\x5b\xec\x10\x9f\x4b\xdf\xb1\xd3" "\x72\x16\xcf\x5f\x71\xa2\x7c\x39\xa8\x3b\x55\x62\xb0\xc0\x6d\x76\xb4" "\x6b\x2d\x8f\x5b\x15\xcb\x17\x65\xd6\xc7\x8d\x06\x5d\x24\xbe\xdf\x72" "\x40\x5d\xcb\x8e\x79\x5f\xe1\x83\x19\x6a\x6b\x62\x0f\x91\x8a\x2d\xd7" "\xfd\xfa\xc1\x42\xaa\x65\x3f\xd4\x31\xec\x15\x3e\x3d\xaa\xc8\xf6\x15" "\xa4\x5b\x3a\x0d\x66\x5d\x5f\xe3\x6e\xfb\x6e\x2f\x18\xb8\x39\x94\x29" "\xe4\xf3\x63\x74\x8e\xdd\xd5\xcd\x2a\x63\x7e\x9a\x0a\x55\x3f\xac\x6d" "\x05\xa3\xe2\xbd\x1b\x26\xf2\xf9\x94\x33\xf8\xf5\x9a\x36\x91\x41\x7a" "\x4f\x35\xff\x7d\x46\xa2\x2e\x39\xe9\x46\x41\xd9\x42\x70\x68\x50\xcb" "\x28\x43\xff\x4a\x34\x12\x2e\x37\xdc\xc8\x22\x4a\xe9\xf6\xab\x7f\x64" "\xff\x4a\x0b\xcb\x0a\xaf\xf2\xf4\x29\xe4\xf0\xf5\xfc\xf9\x0a\xb6\xa2" "\xc4\x5e\x8f\x24\x08\xd9\xbb\xd4\xf6\x0d\x6b\x01\xa0\xcf\x52\x78\x95" "\xe1\xcd\x06\x3b\x17\x8b\x89\x73\x93\x0b\x94\x88\xd8\x1d\x3f\x0f\x79" "\x85\xb9\x00\xd0\xa8\x94\xc2\x96\x42\xb8\x09\xef\x39\x29\x4b\xfa\xaa" "\x54\x01\xf5\xed\x50\xcb\xb9\x1a\x04\x7b\x60\xad\x54\xb3\x23\xa2\xf2" "\xad\xa0\x4d\x19\xd6\xdb\xda\x02\xe0\xf2\x2d\x4d\x65\x20\xf9\xdb\x22" "\x63\x18\x1c\x97\xc9\xbb\x74\xdd\x8a\x90\xad\xed\xc8\x0b\xfd\x06\x4e" "\xb1\x03\xf6\x7d\x02\xea\x17\x57\x1f\x87\x0c\x77\x94\x70\xbb\x64\x60" "\xc6\x58\xda\x4c\x50\x2b\x9a\x10\xc8\x05\x0f\xc2\x6a\xd5\xcc\x1a\xe1" "\xeb\x02\xf0\xd7\x03\xd0\x5b\x48\xf4\x8a\xb8\xc9\xf9\xa1\xbd\x00\x01" "\x81\xcc\xf9\x29\xd4\x55\x44\xb4\x4e\x9a\x3c\xd0\xbc\xd4\x12\xad\x63" "\x93\x23\x28\x3e\xd2\x29\xe5\x48\x6a\x2a\x93\xba\xbb\x16\x58\x80\xa0" "\xa7\x32\x98\x34\xbb\x51\xa0\x63\x1c\xba\x5c\xaa\x30\x63\x7c\xa3\xf0" "\x70\x74\x05\x1c\x60\x8b\x7c\x71\x70\xc8\xc4\x15\xc2\xeb\x88\xbd\x6a" "\x79\x8b\xd8\x69\x53\xff\x71\x05\x25\x06\xcc\xf0\xe2\x35\x7d\xef\xf6" "\xce\xf2\x4d\xe5\xb7\xf6\x8a\x17\x08\x2c\x08\xd0\x96\xe4\x3f\xbe\x72" "\x7a\xb0\xab\x1a\xa2\x7a\x70\x3c\xcd\x58\x16\x80\x39\xe5\x0d\xce\x2d" "\x40\x0e\xd7\xf2\xa2\x17\xc1\xee\xa7\xb2\x94\x55\xfb\xf9\x10\xd3\x6d" "\xb3\x24\xd1\xc6\xb5\x33\x43\xa7\x84\x84\x88\x3a\xd1\x00\xa0\xb5\xb2" "\x8c\x74\xab\x62\x96\xdf\x5b\xf8\x04\x8f\xb9\x16\xe8\xdd\xda\x0d\xed" "\x3f\x5b\x08\xd2\x62\xb9\xb1\xcb\x1e\xcb\x14\x9c\x02\xa2\x14\x90\xeb" "\xeb\xe8\x85\x6c\x84\x4d\x44\x8d\x2a\x38\x78\xdc\xc9\x30\xc3\xc8\x8d" "\x9a\xdd\xf7\x39\x17\xe9\xd3\xf8\x78\xfb\x12\xfb\xa3\xe6\x02\xcf\xde" "\x19\x9a\x0e\x69\xea\xb5\x6e\x3d\x4f\xfa\x01\x13\x5b\x31\x45\xba\xa6" "\x13\xbe\x01\xf0\xb9\x4a\xf5\xbd\x3b\x8b\x43\x23\x39\xc9\x54\xf5\x2b" "\x85\x51\xfd\x13\x79\x0b\xc1\xee\x18\xbe\x22\x6b\x81\x9d\x80\x01\xa3" "\xda\x8e\x09\x7f\x84\xc1\x66\xe4\x00\x2e\x4c\x10\x43\xd3\xa3\x72\x1f" "\x05\x10\x5c\xd1\x7a\x27\x8b\x95\x09\xd7\xa0\x48\x26\xe8\xa5\xb4\x95" "\x6b\xbf\x97\x6f\xfb\x48\x57\xfd\x88\xda\x99\xcf\xea\x8d\x2e\x0a\x1c" "\x4f\x52\xf7\x1f\x87\xcb\xee\x8c\x02\xfb\xf5\x9b\x12\xbd\xac\xcb\x67" "\xd0\xb9\x5f\x0a\x56\x69\x3e\xaf\xaf\xee\xfc\xe1\x95\x3d\x70\x8b\x56" "\x53\x2e\xd5\xbb\xe1\x26\x26\xa3\xd0\x41\xc0\x31\xb4\x8a\x47\xb3\x4c" "\x50\x4f\x7d\xd5\x7e\x21\x14\x7b\x92\x0c\x05\x83\x85\xdd\xc8\xcb\xea" "\x53\x32\x08\x6c\x26\x9b\x0d\x5c\x24\x39\xf3\x0f\xa4\x31\xf8\x8d\x1a" "\x10\xe2\x5e\xba\x0d\xf7\x0d\x86\x17\xec\xd5\x54\x63\x14\xff\xea\xe9" "\xc4\xba\xab\x87\x2a\xb8\x2a\x45\xee\xaf\x0e\x1e\x15\x33\xe8\xa6\x18" "\x9c\x32\x4f\x31\xb6\x52\xae\xad\xc5\x29\x81\xb6\x61\x61\x31\x39\x99" "\xc5\xa7\xbd\x7c\x79\xef\x4e\xe5\x5c\x7c\xb0\x0e\xbd\x96\x37\xff\xe0" "\x19\x24\x50\x8a\x44\xab\x72\xab\x16\xb7\x0b\x8b\x81\x5c\xe7\xd2\x77" "\x72\xdb\x31\x51\x22\xf4\xa5\xa7\x67\x9a\xf5\xac\x68\x5c\x26\x32\x0a" "\x71\xcd\xd8\x06\x6b\x19\xf7\x49\x70\x5e\x2e\x35\xd1\xd9\x16\x6e\xcb" "\x06\x60\x53\xdd\x05\xa7\x59\x27\x0e\x11\x99\x44\xcf\x99\xb9\x18\xcb" "\x5e\x4e\x6c\x93\x10\x31\xae\x2e\xef\xfe\x34\x9a\xc2\x46\xc9\x21\x74" "\x09\x1c\x68\x7c\x58\x87\x9e\x1f\x05\xc4\x3b\x01\x0f\x7e\xc3\xf2\x04" "\xc1\x06\xcf\x60\x74\x0b\x0b\xc2\xd3\x55\xf5\x7b\xba\xec\x7d\x06\x0d" "\xed\xab\x9a\xeb\xaa\x40\x94\xe7\x2e\xbf\xfb\xf6\x1c\xdf\xb7\xd6\x9f" "\xbd\x14\x6d\xae\xa5\x93\x39\xfa\x83\xc1\x9c\x5f\x75\xb8\x66\xaf\x5e" "\x7f\x38\x77\x40\xe6\x75\xe1\xe2\xba\x29\xc2\x61\xd9\xe7\x23\x7c\x6e" "\x9e\xf1\xb3\x9a\x8f\xda\xcb\x44\xde\x0e\xaf\xf5\xf4\xf9\xe3\xe4\x2b" "\x75\xd0\xa3\x78\x34\xea\xb0\xcf\x47\xac\xf6\x5e\x88\x2f\x09\x62\xe0" "\x19\x82\xe7\x83\xc0\xda\xe7\xef\xbc\x95\xdc\xcb\x23\x55\x62\xe5\xa2" "\xe0\x4f\xd2\xb4\xb4\x33\x88\xc0\x29\x2e\x6e\x81\x98\xc6\xdf\x03\x48" "\x92\x0d\x6e\x1c\x8a\xcd\xd2\xe8\x92\xd3\xf7\xae\xf7\x70\x38\x24\xdb" "\xb0\x86\x95\x64\x2f\x0e\x44\x4a\xde\x6c\x4f\x1e\xc1\xe2\x67\xfe\xb5" "\x13\x5c\xcc\xd5\x0f\xcd\xe6\x43\xac\xb6\x6d\xbd\x18\xf5\x07\x49\x69" "\x57\xce\xd4\x35\xe0\xdb\x0a\x8e\x84\x41\xa8\xe2\xeb\xc3\x65\xf9\x95" "\xc3\x23\x99\xf7\xd1\x80\xb6\xfa\xeb\x85\xee\x19\x21\xb9\x5f\x82\xf3" "\x19\x4b\xed\x7d\x15\x7e\x84\x22\x57\xd2\xda\x26\xdf\xac\x90\xf3\x2f" "\xb5\x31\x47\xe4\x8e\x23\x2d\x51\x15\xf1\xcd\x12\xb4\x5c\x55\x33\x0b" "\x29\x77\x5a\xb7\x76\x59\x9a\xfa\x50\x4b\x7f\xe1\x14\xcd\x7f\xb3\xab" "\x4e\xb6\xc3\x0b\xec\xb8\x2f\x44\x8b\x28\x4b\x20\x01\x0b\xea\x91\x80" "\x19\xaf\x99\xb2\xa9\xcc\xab\x15\x85\xae\xc1\x9f\xd1\xab\xe8\x36\x5a" "\x60\x23\xf9\x6d\xdd\xf1\xa3\x7c\xce\x27\x34\xbb\x65\x85\x14\x37\x29" "\x85\x0b\xcd\x81\x17\x87\xbd\x07\xcb\x5f\xdd\x57\xcc\x98\x7f\x92\x78" "\xb7\xf5\xef\x3c\x75\x29\xa9\xb6\xd2\x0d\x18\xcc\x44\x46\xf1\x03\x6c" "\xf7\x63\x5d\xa6\x73\x29\x82\x5e\x75\xcb\x78\x5e\x2e\x42\x8f\x14\xb8" "\x49\x57\x31\x97\x72\xbd\xbb\x7d\x2d\x2d\x20\x32\x1e\x52\x2b\x1e\xc6" "\xc8\x07\xf3\xa3\xf5\x75\x64\x3d\x4b\x71\xe1\xbb\xd1\xe8\x43\xb5\x81" "\x6a\xa6\x89\x00\x29\x8f\x50\x58\xc6\x5a\x9f\xe1\x02\x29\x78\xa4\x4a" "\x77\xbd\xe2\xb9\x9e\x22\x1d\xe9\x7c\xd7\xfa\x6a\x2e\xa4\x40\x22\x0b" "\xac\x20\xe3\xe4\xc1\xe4\x22\x49\x58\xac\xa1\x56\x81\xd3\xa1\x8f\x74" "\x21\x81\x14\xc3\xe5\xee\xfa\x1f\xc1\x6d\xe8\xc0\x7f\x1d\x12\x97\xb0" "\xe7\x72\xd0\x5f\x20\x53\x37\x17\x5c\x1d\xbe\x88\xdf\xc8\x76\xdc\xfc" "\xe3\x67\x30\x4a\xfa\xc6\x8c\x41\xb9\x8e\xd2\xba\x3f\x04\xfd\x1b\x37" "\xdb\x27\xdd\x5d\x9c\x9a\xaf\xae\xad\xfc\xc4\x45\x85\x90\x8e\xa6\x55" "\xff\xce\x1f\xc2\x51\x6b\x06\x02\x56\x77\x7e\x89\x53\xe2\xa6\x86\x1e" "\xc4\x46\x00\x34\x69\x1a\xed\x00\x1e\xa2\x97\x16\x27\x61\x5f\xc7\x97" "\x27\x73\xd6\xa8\xc3\x43\x11\x7b\xae\x3f\xc6\x8c\xfd\x1f\x18\x7c\x47" "\x8c\x0f\x52\xe8\x6b\x11\x8c\x65\xc3\x98\x48\xa8\xc5\x82\xed\x90\x8f" "\xb1\x24\x2a\xd3\x45\x52\x88\xcc\x85\x8e\x52\xe1\x19\xd3\x68\xe0\x07" "\x83\xc2\xb8\xc2\x91\x6b\xa5\x64\xa3\x50\x13\x26\xba\xef\xe1\xdc\xad" "\xac\x8b\x4b\x8b\x66\x6f\x20\xa3\xa2\x45\xca\x17\x1b\x43\xaf", 8192); *(uint64_t*)0x20006d00 = 0; *(uint64_t*)0x20006d08 = 0; *(uint64_t*)0x20006d10 = 0; *(uint64_t*)0x20006d18 = 0; *(uint64_t*)0x20006d20 = 0; *(uint64_t*)0x20006d28 = 0; *(uint64_t*)0x20006d30 = 0; *(uint64_t*)0x20006d38 = 0; *(uint64_t*)0x20006d40 = 0; *(uint64_t*)0x20006d48 = 0; *(uint64_t*)0x20006d50 = 0; *(uint64_t*)0x20006d58 = 0x20002200; *(uint32_t*)0x20002200 = 0x99; *(uint32_t*)0x20002204 = 0; *(uint64_t*)0x20002208 = 0; *(uint64_t*)0x20002210 = 0; *(uint64_t*)0x20002218 = 0; *(uint64_t*)0x20002220 = 0; *(uint64_t*)0x20002228 = 0; *(uint32_t*)0x20002230 = 0; *(uint32_t*)0x20002234 = 4; *(uint64_t*)0x20002238 = 0; *(uint64_t*)0x20002240 = 4; *(uint64_t*)0x20002248 = 0; *(uint64_t*)0x20002250 = 0; *(uint64_t*)0x20002258 = 2; *(uint64_t*)0x20002260 = 0; *(uint32_t*)0x20002268 = 0; *(uint32_t*)0x2000226c = 0; *(uint32_t*)0x20002270 = 0; *(uint32_t*)0x20002274 = 0; *(uint32_t*)0x20002278 = 0; *(uint32_t*)0x2000227c = r[2]; *(uint32_t*)0x20002280 = 0; *(uint32_t*)0x20002284 = 1; *(uint32_t*)0x20002288 = 0xe9; *(uint32_t*)0x2000228c = 0; *(uint64_t*)0x20006d60 = 0; *(uint64_t*)0x20006d68 = 0; *(uint64_t*)0x20006d70 = 0; *(uint64_t*)0x20006d78 = 0; syz_fuse_handle_req(/*fd=*/r[0], /*buf=*/0x20004300, /*len=*/0x2000, /*res=*/0x20006d00); break; case 6: memcpy((void*)0x20000000, "./file0/file0\000", 14); syscall(__NR_creat, /*file=*/0x20000000ul, /*mode=*/0ul); break; } } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=*/7ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); loop(); return 0; }