// https://syzkaller.appspot.com/bug?id=69ea7f9a2380266520503e687e82d7def78b6a56 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } #define MAX_FDS 30 static void setup_gadgetfs(); static void setup_binderfs(); static void setup_fusectl(); static void sandbox_common_mount_tmpfs(void) { write_file("/proc/sys/fs/mount-max", "100000"); if (mkdir("./syz-tmp", 0777)) exit(1); if (mount("", "./syz-tmp", "tmpfs", 0, NULL)) exit(1); if (mkdir("./syz-tmp/newroot", 0777)) exit(1); if (mkdir("./syz-tmp/newroot/dev", 0700)) exit(1); unsigned bind_mount_flags = MS_BIND | MS_REC | MS_PRIVATE; if (mount("/dev", "./syz-tmp/newroot/dev", NULL, bind_mount_flags, NULL)) exit(1); if (mkdir("./syz-tmp/newroot/proc", 0700)) exit(1); if (mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL)) exit(1); if (mkdir("./syz-tmp/newroot/selinux", 0700)) exit(1); const char* selinux_path = "./syz-tmp/newroot/selinux"; if (mount("/selinux", selinux_path, NULL, bind_mount_flags, NULL)) { if (errno != ENOENT) exit(1); if (mount("/sys/fs/selinux", selinux_path, NULL, bind_mount_flags, NULL) && errno != ENOENT) exit(1); } if (mkdir("./syz-tmp/newroot/sys", 0700)) exit(1); if (mount("/sys", "./syz-tmp/newroot/sys", 0, bind_mount_flags, NULL)) exit(1); if (mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, bind_mount_flags, NULL) && errno != ENOENT) exit(1); if (mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, bind_mount_flags, NULL) && errno != ENOENT) exit(1); if (mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, bind_mount_flags, NULL) && errno != ENOENT) exit(1); if (mkdir("./syz-tmp/newroot/syz-inputs", 0700)) exit(1); if (mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, bind_mount_flags | MS_RDONLY, NULL) && errno != ENOENT) exit(1); if (mkdir("./syz-tmp/pivot", 0777)) exit(1); if (syscall(SYS_pivot_root, "./syz-tmp", "./syz-tmp/pivot")) { if (chdir("./syz-tmp")) exit(1); } else { if (chdir("/")) exit(1); if (umount2("./pivot", MNT_DETACH)) exit(1); } if (chroot("./newroot")) exit(1); if (chdir("/")) exit(1); setup_gadgetfs(); setup_binderfs(); setup_fusectl(); } static void setup_gadgetfs() { if (mkdir("/dev/gadgetfs", 0777)) { } if (mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL)) { } } static void setup_fusectl() { if (mount(0, "/sys/fs/fuse/connections", "fusectl", 0, 0)) { } } static void setup_binderfs() { if (mkdir("/dev/binderfs", 0777)) { } if (mount("binder", "/dev/binderfs", "binder", 0, NULL)) { } if (symlink("/dev/binderfs", "./binderfs")) { } } static void loop(); static void sandbox_common() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); if (getppid() == 1) exit(1); struct rlimit rlim; rlim.rlim_cur = rlim.rlim_max = (200 << 20); setrlimit(RLIMIT_AS, &rlim); rlim.rlim_cur = rlim.rlim_max = 32 << 20; setrlimit(RLIMIT_MEMLOCK, &rlim); rlim.rlim_cur = rlim.rlim_max = 136 << 20; setrlimit(RLIMIT_FSIZE, &rlim); rlim.rlim_cur = rlim.rlim_max = 1 << 20; setrlimit(RLIMIT_STACK, &rlim); rlim.rlim_cur = rlim.rlim_max = 128 << 20; setrlimit(RLIMIT_CORE, &rlim); rlim.rlim_cur = rlim.rlim_max = 256; setrlimit(RLIMIT_NOFILE, &rlim); if (unshare(CLONE_NEWNS)) { } if (mount(NULL, "/", NULL, MS_REC | MS_PRIVATE, NULL)) { } if (unshare(CLONE_NEWIPC)) { } if (unshare(0x02000000)) { } if (unshare(CLONE_NEWUTS)) { } if (unshare(CLONE_SYSVSEM)) { } typedef struct { const char* name; const char* value; } sysctl_t; static const sysctl_t sysctls[] = { {"/proc/sys/kernel/shmmax", "16777216"}, {"/proc/sys/kernel/shmall", "536870912"}, {"/proc/sys/kernel/shmmni", "1024"}, {"/proc/sys/kernel/msgmax", "8192"}, {"/proc/sys/kernel/msgmni", "1024"}, {"/proc/sys/kernel/msgmnb", "1024"}, {"/proc/sys/kernel/sem", "1024 1048576 500 1024"}, }; unsigned i; for (i = 0; i < sizeof(sysctls) / sizeof(sysctls[0]); i++) write_file(sysctls[i].name, sysctls[i].value); } static int wait_for_loop(int pid) { if (pid < 0) exit(1); int status = 0; while (waitpid(-1, &status, __WALL) != pid) { } return WEXITSTATUS(status); } static void drop_caps(void) { struct __user_cap_header_struct cap_hdr = {}; struct __user_cap_data_struct cap_data[2] = {}; cap_hdr.version = _LINUX_CAPABILITY_VERSION_3; cap_hdr.pid = getpid(); if (syscall(SYS_capget, &cap_hdr, &cap_data)) exit(1); const int drop = (1 << CAP_SYS_PTRACE) | (1 << CAP_SYS_NICE); cap_data[0].effective &= ~drop; cap_data[0].permitted &= ~drop; cap_data[0].inheritable &= ~drop; if (syscall(SYS_capset, &cap_hdr, &cap_data)) exit(1); } static int do_sandbox_none(void) { if (unshare(CLONE_NEWPID)) { } int pid = fork(); if (pid != 0) return wait_for_loop(pid); sandbox_common(); drop_caps(); if (unshare(CLONE_NEWNET)) { } write_file("/proc/sys/net/ipv4/ping_group_range", "0 65535"); sandbox_common_mount_tmpfs(); loop(); exit(1); } static void close_fds() { for (int fd = 3; fd < MAX_FDS; fd++) close(fd); } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, FUSE_SYNCFS = 50, FUSE_TMPFILE = 51, FUSE_STATX = 52, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; struct fuse_out_header* statx; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; case FUSE_STATX: out_hdr = req_out->statx; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { if (write(1, "executing program\n", sizeof("executing program\n") - 1)) { } int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); close_fds(); } uint64_t r[2] = {0xffffffffffffffff, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: // openat arguments: [ // fd: fd_dir (resource) // file: ptr[in, buffer] { // buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8) // } // flags: open_flags = 0x181942 (4 bytes) // mode: open_mode = 0x0 (2 bytes) // ] // returns fd memcpy((void*)0x200000000080, "./file0\000", 8); syscall(__NR_openat, /*fd=*/0xffffff9c, /*file=*/0x200000000080ul, /*flags=O_SYNC|O_NONBLOCK|O_NOCTTY|O_CREAT|O_CLOEXEC|0x2*/ 0x181942, /*mode=*/0); break; case 1: // openat$fuse arguments: [ // fd: const = 0xffffffffffffff9c (8 bytes) // file: ptr[in, buffer] { // buffer: {2f 64 65 76 2f 66 75 73 65 00} (length 0xa) // } // flags: const = 0x2 (4 bytes) // mode: const = 0x0 (2 bytes) // ] // returns fd_fuse memcpy((void*)0x200000001180, "/dev/fuse\000", 10); res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x200000001180ul, /*flags=*/2, /*mode=*/0); if (res != -1) r[0] = res; break; case 2: // mount$fuse arguments: [ // src: const = 0x0 (8 bytes) // dst: ptr[in, buffer] { // buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8) // } // type: ptr[in, buffer] { // buffer: {66 75 73 65 00} (length 0x5) // } // flags: mount_flags = 0x0 (8 bytes) // opts: ptr[in, fuse_options] { // fuse_options { // fd: fs_opt["fd", fmt[hex, fd_fuse]] { // name: buffer: {66 64} (length 0x2) // eq: const = 0x3d (1 bytes) // val: fd_fuse (resource) // } // comma0: const = 0x2c (1 bytes) // rootmode: fs_opt["rootmode", fmt[oct, flags[fuse_mode]]] { // name: buffer: {72 6f 6f 74 6d 6f 64 65} (length 0x8) // eq: const = 0x3d (1 bytes) // val: fuse_mode = 0x8000 (23 bytes) // } // comma1: const = 0x2c (1 bytes) // user_id: fs_opt["user_id", fmt[dec, uid]] { // name: buffer: {75 73 65 72 5f 69 64} (length 0x7) // eq: const = 0x3d (1 bytes) // val: uid (resource) // } // comma2: const = 0x2c (1 bytes) // group_id: fs_opt["group_id", fmt[dec, gid]] { // name: buffer: {67 72 6f 75 70 5f 69 64} (length 0x8) // eq: const = 0x3d (1 bytes) // val: gid (resource) // } // comma3: const = 0x2c (1 bytes) // opts: fs_options[fuse_opts] { // elems: array[fs_opt_elem[fuse_opts]] { // } // common: array[fs_opt_elem[fs_options_common]] { // } // null: const = 0x0 (1 bytes) // } // } // } // ] memcpy((void*)0x2000000020c0, "./file0\000", 8); memcpy((void*)0x200000000080, "fuse\000", 5); memcpy((void*)0x200000002140, "fd", 2); *(uint8_t*)0x200000002142 = 0x3d; sprintf((char*)0x200000002143, "0x%016llx", (long long)r[0]); *(uint8_t*)0x200000002155 = 0x2c; memcpy((void*)0x200000002156, "rootmode", 8); *(uint8_t*)0x20000000215e = 0x3d; sprintf((char*)0x20000000215f, "%023llo", (long long)0x8000); *(uint8_t*)0x200000002176 = 0x2c; memcpy((void*)0x200000002177, "user_id", 7); *(uint8_t*)0x20000000217e = 0x3d; sprintf((char*)0x20000000217f, "%020llu", (long long)0); *(uint8_t*)0x200000002193 = 0x2c; memcpy((void*)0x200000002194, "group_id", 8); *(uint8_t*)0x20000000219c = 0x3d; sprintf((char*)0x20000000219d, "%020llu", (long long)0); *(uint8_t*)0x2000000021b1 = 0x2c; *(uint8_t*)0x2000000021b2 = 0; syscall(__NR_mount, /*src=*/0ul, /*dst=*/0x2000000020c0ul, /*type=*/0x200000000080ul, /*flags=*/0ul, /*opts=*/0x200000002140ul); break; case 3: // read$FUSE arguments: [ // fd: fd_fuse (resource) // buf: ptr[out, fuse_in[read_buffer]] { // fuse_in[read_buffer] { // len: len = 0x2020 (4 bytes) // opcode: int32 = 0x0 (4 bytes) // unique: fuse_unique (resource) // uid: uid (resource) // gid: gid (resource) // pid: pid (resource) // padding: int32 = 0x0 (4 bytes) // payload: buffer: (DirOut) // } // } // len: bytesize = 0xffe7 (8 bytes) // ] res = syscall(__NR_read, /*fd=*/r[0], /*buf=*/0x200000004280ul, /*len=*/0xffe7ul); if (res != -1) r[1] = *(uint64_t*)0x200000004288; break; case 4: // syz_fuse_handle_req arguments: [ // fd: fd_fuse (resource) // buf: ptr[in, buffer] { // buffer: {23 db 50 37 80 5f 17 7d 13 61 15 e6 a1 a5 90 34 69 af 39 c1 // fb 9c b3 82 15 fe 64 cf f9 f2 f0 44 4a 57 e2 2b 0c c5 cb 4f 74 c9 79 // 23 65 40 0d 9e 1c 68 53 9e a5 ef f0 a5 ed 08 64 81 4d 39 25 1b ee 8d // fe a6 9a a0 52 d9 00 bc 0c 79 2e 1c 97 52 b7 d3 a3 22 2f 6a 1a d3 e4 // 4c 1f 65 61 7b 12 8a ea 51 91 18 61 ca 36 ba 7c 96 b9 6b 2f ba 0f da // a4 9f fb 26 12 f3 e8 1f e5 65 32 7d d9 96 5a 60 04 64 42 c9 dc d0 d5 // 52 c6 a0 03 88 be 3b 43 8a 08 88 3c 73 49 76 15 31 88 02 94 ad 98 87 // db 97 d8 c2 f7 49 21 c5 79 10 cf 1f 5c c5 28 e1 7b d5 c3 74 6b 62 02 // f2 6d 62 15 35 aa c5 f7 87 2c 2c b3 29 5e 42 52 4b 5a cb 24 9b 2d 1a // c1 b5 3a 4e 31 27 1d ec fc a3 fa d2 e2 f7 40 76 8a df 00 87 5c 18 cb // 7d 11 51 50 f8 3c eb 73 f7 7a 1f 61 f1 66 6c 2b b9 f6 bd 9f 0f b5 5b // 3a 61 94 46 e3 2b ae 2a 1d 99 aa 49 e5 f3 82 2e 04 8f 8b e4 4b 70 7f // 2d b1 0d 79 16 ec 9a 10 a6 95 d5 73 d8 71 cf 24 95 9c 3d 15 e6 13 44 // a6 83 09 d1 86 95 65 37 c6 ea 85 32 fc 2e 1c 76 49 f8 40 9d 8d cd e4 // c8 ee 15 30 47 0a c9 c8 70 f9 f1 83 75 74 e4 44 ba 6a dd f5 dd b2 de // c6 7c 0e 76 df 79 f2 65 b4 03 81 8d dd b4 ef c2 7c 90 98 5e d6 9a 48 // b1 20 56 e5 48 f9 c9 9e df 80 d2 b1 95 d2 6a cb 11 27 66 17 27 a0 60 // 02 57 f4 b2 54 65 13 d0 39 30 a0 63 8a 71 bd 32 23 e5 1f bb 75 c8 32 // ef 73 79 07 f2 f4 d3 f0 50 5f 43 1e a0 27 83 c7 98 b5 c4 57 9c 99 96 // 1f b7 3d c6 23 a0 d9 9c 1b 30 64 35 46 4d 41 3b 53 7d 42 c6 44 48 51 // b3 64 82 59 71 40 b2 2f bc 0e bc 7e 79 5b 2f 96 73 9b f1 39 f5 82 3b // c8 69 ed e5 47 da 4f 39 4f a1 b1 78 78 36 09 5e 10 13 26 40 42 e5 3d // 50 06 ea 05 9d 04 88 cb 2f 5c cd 44 b3 0d 25 ea 53 c2 dd a7 1d 11 2d // 7d 44 1d bf c9 f8 46 2c 99 c0 98 b1 95 8c 80 b2 37 d8 3c 32 f2 75 9c // 9a 9c 08 1d 7d 76 66 a4 77 cf da 59 35 43 09 b0 9f 2a 8b 9f 6c 30 77 // b0 df 1e 8d 0c 71 ac 07 23 2d e4 f4 37 10 7c b0 eb 9b 47 b2 26 7e fe // 31 93 8a 33 7c f1 1c ad ad 72 ce d5 68 95 bb 14 76 3c ca 5b da dd 24 // 5d 80 1e 82 9a 1e b3 bb 4e d8 51 a3 45 91 8e fd 2d cf 8d 38 f6 6b ad // c7 73 06 8e 6a 2e f5 9b 2b b8 38 ab d8 b0 43 cf 6a c5 45 50 f3 fd e1 // bb b9 e7 61 09 5e 4b 8e f1 89 17 57 d3 76 be 1f 77 81 42 61 0c 0a cb // bf c6 97 f5 1f bb 7a 16 02 ed 46 e8 28 13 c7 4f 41 ee 2b ae 81 81 74 // 80 9f 36 92 08 4b ea 73 10 eb ec 3d 61 66 70 2a e6 2a ad 84 31 3e 19 // b4 d1 45 16 71 85 ea 8d 53 cb 21 d0 99 fb 59 2d 7d 7f 8b c3 05 dd 37 // 5b 5c 0c d7 3b e4 4f 49 ff 53 ce e2 20 08 5d 47 06 bb f5 0c 6f 63 b0 // 2e 7e 80 5e 8f a4 c7 30 46 a5 7a 87 00 88 6d a2 9e a5 3e 5a 31 6e 7b // 01 1c 44 a0 f7 be 5c c5 cb 56 41 ba 00 69 ff 59 1e ee 18 96 6c 7f 00 // 5e f4 00 46 a5 fe 2b f3 25 b2 54 5b 00 98 67 76 12 64 aa 96 11 d1 84 // fa 37 2b a3 c5 c3 3d 9a 50 71 72 10 f7 ce c7 f6 dc 44 18 a8 7a 79 7e // b6 aa f6 ab 38 92 bd 3f 55 95 47 c8 8d 8c 29 64 6c 81 73 fa d1 58 8f // 52 be b3 4f f8 63 be 65 e7 ec 15 98 cf b4 65 f2 70 bd 55 32 fa 70 35 // aa e0 77 ee db c8 46 05 8f a1 9f 58 ff b1 cf 0f 18 63 f6 d3 3f 2e 5c // 45 4d 18 b6 6b e7 66 ca 36 9a f2 cc 96 56 fa 34 c6 c1 0e 4d 4d a4 4c // e5 e2 37 0a af 60 c4 e1 30 da 33 1d 34 89 e8 f4 4c 60 02 46 32 34 09 // fd d3 5d 11 da 27 12 8c 9d 64 be 65 dd 3a 90 c1 54 6a 6e b9 18 5c b6 // d3 a4 a9 cf ad 0e 41 ea 03 89 6f d2 34 6f 74 5e b3 56 3d 7a 79 fd 34 // 5b 03 7c 04 0e 56 f0 67 78 40 bf 9b 0d 29 5b cf a9 8b 93 14 64 c5 ce // 9f ca f7 45 72 0d ea c2 d8 b4 ed ef fc 0f e6 f0 89 ed 7c 38 80 95 9f // cf 8e 31 f7 b7 05 4b c4 f5 c9 d3 ed 3f 66 c9 68 d0 bc 20 b2 d6 6c 37 // 4f 03 0f 3f 19 65 f4 3a 98 51 9e 52 7c af 69 33 62 41 2d 52 3e eb 38 // c8 b0 16 ff 77 f7 8f 83 3d 75 13 e4 b5 a5 3d 5e d5 14 39 16 67 3f 82 // 2c ea c9 96 7b 87 88 bc 64 28 28 31 81 ea f8 d9 9e 48 28 6a ac f4 f6 // 58 a9 03 e9 f0 86 59 45 0f 7f 94 83 80 7c 2e 01 3a 1d 9d 19 9f 18 88 // 6a 8c b4 e1 4d 41 c7 1e 57 31 45 5a 43 94 55 12 81 ec a1 2a 1b b6 ae // 71 7f 5d a2 94 91 75 d0 f1 f3 d7 18 b7 61 df c1 09 9c 7d 9d 89 28 c8 // 99 ac 8e 93 6e 69 d1 9f cb fc fd ee 83 b6 8e f8 e1 5e ed 41 a8 ac 0d // 54 aa 92 d7 d2 ee 58 bb 47 99 f3 78 22 5e c9 ba 47 09 e5 ce 2b 77 20 // 8e cc 85 c2 2c 64 96 7a 9e f3 36 0c 54 d3 11 b8 91 7c eb 7b 43 2c 90 // cc 5e 98 de 93 27 c1 40 0f 8e c8 92 61 b1 d7 7d 88 74 b0 bb dd 2c 5e // b5 9d f4 15 70 5d e5 2b 08 b0 e1 2c 07 fb 73 67 c6 d4 61 c1 9f 28 2d // 51 e4 82 cb 4f b9 ce b0 24 9a c2 d6 40 0c a1 70 fb d6 c0 06 32 24 17 // 9c 61 6b b0 30 a5 c1 01 02 aa 2e ea 92 f1 e6 f5 82 85 90 b2 50 b0 9e // 6d 1a 95 35 c2 98 a6 81 60 b7 c2 81 fe cd d2 95 dc 33 96 c4 e6 eb 33 // 95 d5 a6 77 d5 fa 95 a7 32 df de f8 1f 43 46 54 5d d1 a7 4b b3 aa 9b // 51 66 99 bd f0 a5 91 65 07 7a b4 59 a5 ff e0 db b3 ef 8a fa 7a 83 82 // a8 44 1e 0c 36 ff ab be d8 f9 3f 4b be b9 7e 5f 6a 70 4b f6 3a 0d e9 // cc f8 fe f6 43 eb c5 30 a8 09 20 93 10 02 00 3b 02 70 14 de 31 7c 42 // f8 61 d9 8e f4 fe f6 6d 23 2d 97 06 e6 bd 26 33 47 38 4d ad ad aa 43 // a7 e1 06 bb b2 1b d8 22 d4 68 ac e1 71 b3 f0 4b 99 61 12 13 5b 63 dc // bd 61 2b 58 88 ec 40 da 58 3a b5 49 c3 40 dd af 5d 74 06 c3 e9 93 22 // c6 88 74 21 43 56 c1 fd 9b 5f 84 34 8e 62 9c c3 48 7a 90 1d 1b 7a 2f // a5 31 b1 50 9a c1 c9 3d e3 da 9f 1c 37 73 e3 a2 ab a2 b2 9d 24 19 f2 // 40 ae 6d 24 ed 9f 14 bf 0b 9b 0f 1e 74 0a 2d b0 6d ab 64 d6 38 6f 95 // 0b ff 4e 4c 94 16 0e f4 b8 32 bb de 3a f4 93 7b 75 28 65 8b 5c 16 a5 // 1c b2 21 93 fe 99 38 57 21 ce 5b 04 8d 93 38 e2 89 dc b4 06 83 14 0c // 41 3e ca 52 c8 e4 b6 4b 30 6f 47 56 94 77 37 9c 86 4c fb 3a a3 e3 49 // 26 24 07 d3 93 5a b9 a0 91 6e b0 f6 db 2b e7 1a 7e b8 f9 96 8d fa c4 // 49 95 d5 bf f8 ef 61 7f ce ea a4 48 f5 e5 f8 d4 b3 9e 35 12 fe 7a e9 // ee 1d 8a 0d 59 12 b6 14 89 69 ab 03 25 f3 f7 6e 23 40 fb d6 7c e1 56 // bd f6 38 14 0b 3c cd b0 8e 50 49 db 15 95 79 15 cb 05 db 89 01 24 9b // 10 c5 9c c5 c3 ff 83 62 90 e3 33 4e ee 2d f3 87 e4 4c 57 b4 d6 19 8c // 37 49 f5 dc 57 f6 c3 de 11 5c ed 6b 43 cb dd d7 62 b5 8f 1f b4 0b 2b // af 3b 38 1f eb dc 07 31 42 e3 0d 2e 9a 1a 69 e8 d8 63 14 22 1e 54 0f // 19 55 09 d2 23 b2 06 17 3d c5 40 68 65 d8 06 48 17 c3 0c 28 4c 03 40 // 35 a6 31 90 ab 86 df 3b ae 41 68 c5 8e 01 d2 25 17 48 fd 5d 9d 61 00 // 24 12 9e 83 a5 73 0f e8 3c f0 91 87 90 e6 85 4a b7 65 c7 86 49 b9 1c // 06 65 5f 0c b9 e2 6d 84 32 df 78 bb ad d9 95 83 b6 a8 af cf 17 7e d6 // f3 39 e0 8c 0b 36 a1 6c 6d 31 d8 a2 4c b6 f2 bc 3b a5 8d 77 11 b6 f8 // b9 88 dc 3e 31 44 be 61 95 48 45 7d 4f 40 50 9f 17 ee b1 86 cb 93 a2 // 92 8e cb 95 15 93 d1 90 7c 8b bb 9f 4c 89 99 ca ba 30 59 c8 e7 3d ce // 54 ad 6f 87 bc d5 1d 55 9f 77 59 90 2b 14 e6 8d 3b 84 5c 0b 17 9b 38 // f4 e6 f0 bd 3a 89 cb cd 5e be d9 97 21 02 04 86 47 da 1e da 5c 84 56 // 44 23 69 f4 ae 87 1d 40 37 ba 26 f2 7d 27 37 1c e5 7e 23 ad ca 5a f8 // dc 93 f9 34 f2 ef 8d 69 ad 3b 2d b6 66 57 b3 86 8d d8 39 c2 b5 22 f5 // 46 1f 24 40 7e f0 91 b7 72 42 fc 70 a4 8b 7e ec 45 f3 bc bc fb c6 bd // c3 6e 4b 67 29 50 20 a3 45 23 3a 32 a0 a0 af 4d 03 a5 3e f6 7e 69 71 // 6d 5a e3 53 42 72 2a fb e7 55 89 46 47 5a 9e bf 5b 39 c1 85 58 a0 01 // 1f 68 bc 8a 78 59 0b 0c b6 36 18 37 9a 51 27 90 c4 2d 94 bb 23 9d d3 // ef 5b 8d 10 36 cf 03 91 ad ed 88 02 a7 a4 47 c3 8f 23 1a e6 11 ae ea // b9 bb a4 4c d1 43 69 47 37 58 b6 41 08 d0 bc 9b 6b c9 e9 b4 97 c2 d1 // d2 ac ba e7 c6 20 a5 5c 22 6c f3 71 33 16 88 ea dd ec 61 fe 96 1c 5f // ce f7 1d ad 45 82 0e d0 ac 8d c7 64 1d 82 15 0f 13 18 ac 15 aa 41 e7 // be 58 5b 6a 50 da 1b 3c d9 52 39 ee 61 cf de 15 ab a8 0a e8 eb c2 1b // a4 54 08 83 c6 f4 4c d3 5b 6b 97 da 46 40 c9 7f 5a 2b 6e fa 8d 18 4f // ec 82 3a bc 75 4a b8 a0 db 6c 45 c2 29 3e 90 d9 c1 54 c4 a3 e0 b9 ec // 2b 61 13 ce 65 83 b8 0f 0d 23 4d ec 9a 98 15 06 72 44 73 3e 21 34 b9 // ba 93 bb 96 92 fb 44 20 0b b5 50 1b b1 09 f2 40 1e 8b aa f0 11 5d 79 // 5b b0 34 6d fa fa f9 53 be d8 e9 a5 2a 5b 9b 02 d4 90 c5 5f d8 9d af // 31 1a d5 e0 8b 07 0a 95 71 f6 96 d6 df 47 15 c8 b6 9b 84 0e 4e 03 d6 // f3 61 32 6e 20 d9 54 6c 47 b3 a6 31 63 e7 df 9b d2 60 62 13 58 c1 66 // 17 7e e7 c6 9e d6 3a 8c 43 dd 4a 78 54 3a a9 f9 22 c0 ef 52 7f 4a a6 // 1f f6 5b b1 45 95 f5 18 41 2c e2 5a 1e 10 3d f8 9c d4 b3 63 59 3d a1 // 6c 11 d8 0a 23 a9 b5 ad 8e 3a 7b e8 f6 97 ce cf 82 c8 fb d8 89 a4 f7 // 43 c8 39 b6 7f 7b a5 45 3b 10 bb f5 9b 1e 4f 4e 82 18 72 c0 61 a4 12 // 5c 0c 15 c1 ca 51 64 ef e6 1a 58 bb 54 dc ed c8 49 80 0a 60 21 a4 48 // d4 66 0c 3b 85 e2 36 2b 7c d8 ce 95 15 6f bf 40 8a 09 a3 0a 8c cf c3 // 55 40 04 e9 f9 a3 53 82 90 7e ec 00 61 7e 2a e1 f8 80 31 46 bc 8c 28 // b4 f3 bf 3c 6b 18 3a e9 24 8e 7f 05 c4 ad ce 3e 0b 7f f2 92 52 b5 be // 9b 19 43 1e 3f e6 12 d4 71 f5 2c 5c 34 cc 12 c8 30 49 18 9f 4d 2e 5c // a5 16 df 78 76 6b a3 44 9d 07 ef 94 36 c6 80 52 c9 86 d9 dd e8 80 2c // 93 11 94 e2 ce 34 ac b8 cc 26 66 3a 09 34 8b 15 c6 c1 45 d2 63 06 bd // ed 0d 1f 48 28 03 ae 6d ee 26 56 2b 03 fc b1 83 b6 9e e4 a0 49 1e 87 // 76 ec da df ca 39 5c b4 ea c2 94 8d 4d 64 32 1a 4e 66 9f 2f 66 3e b5 // 4f 05 f1 2e d9 c6 85 83 5c 3e 79 f9 82 15 2d be 70 10 73 b9 a4 ab 29 // 32 b4 6e e2 42 4a 5e 18 bb e5 f2 5c e0 b8 98 ff 69 37 92 7f 46 70 de // fe 43 0a c8 60 21 22 6a e0 55 da f3 9b 53 5c dc 08 99 fc c9 9d 15 e6 // 7d 66 bd 2d d8 9b b2 1b 8d 26 89 a8 af 10 a1 b0 bd 44 10 3c 46 99 22 // c3 6f c0 22 8d 7b 6f eb f5 e3 66 dc ee cf 8b b1 db 38 5c 8a b9 5d 86 // ff 09 b7 6c 2f a6 28 2d e8 1f d6 86 4c 49 5a 4c 82 95 df 61 a2 54 8e // 1b 81 c3 e3 f3 0d 7a 41 21 68 01 d6 c2 d1 74 3f 66 ae 20 55 75 60 83 // e8 bf 40 3d 43 6b 82 44 ac 21 4f 4d 84 a6 93 d1 3f 29 9b a2 67 40 1d // 09 4f 2d f7 08 40 e8 a9 80 62 27 94 21 2f 09 92 ec f5 a4 79 80 ab 2c // f7 d5 a6 f1 2b 0a 48 9a f3 c3 c8 47 ac 59 bc 89 f3 6f bb 0e 08 bf 28 // 3b 68 21 3a 17 de 38 b3 a4 5e ad e6 f0 b1 98 de f4 08 f7 71 1c 16 36 // 7b cc 0d ed 79 4a 9a 32 3c 7e 7f 07 fa d9 6e a9 c4 d7 34 4c 26 e4 38 // 44 a2 7c 21 07 6b 8d 7c d0 76 77 60 2d 91 ea c8 25 eb 5f d0 63 17 55 // c2 dd 1d bf 7b ce 3e b3 c3 f7 37 7f c6 08 0e cd 0b 89 4e 29 76 98 45 // 72 59 43 e2 59 32 d4 24 9a bb 4a b7 8d 4e 2f f2 e2 df 42 c8 d8 84 cd // 6b d1 38 86 ce f0 80 c6 49 1c 21 7a ba e0 ee c6 e9 d4 d4 9e ab 66 57 // f1 5c fd 38 e6 cd 6d 0b d3 31 98 c4 68 5a b3 02 d0 f4 6e 42 f4 a5 d5 // bb 7d 28 40 a0 a8 81 7b 98 a8 56 70 0d 4d e7 43 51 89 6f e7 d7 d5 a0 // d1 bc 57 fb 4c 82 8a a5 1f 96 37 80 7a eb 90 57 80 f2 39 52 7e d4 af // fd 83 f6 8b e8 b7 ad 1e 10 d9 e7 97 ba 39 cd ee 24 f7 be 0a 0a b0 ac // 22 ea 39 68 da c6 1e b4 bd d5 22 c9 ce 57 0e df 63 a4 39 ab fd 99 54 // bf 6a 16 c8 8d 86 15 7d 05 47 72 00 a8 32 55 cd e2 79 b4 54 97 9c ee // 4d e0 0e 81 cb 44 ac dc 42 95 c8 77 56 6a 74 9a b5 b9 1d 25 0f 03 d4 // 6e cc 14 21 0c 19 67 00 33 8e ea 02 8c 93 0c e1 04 f2 0a 9e 7f ab b0 // ad 1d 31 4e c1 a2 d9 7d 1d 1b 9e 09 11 4d ee 0e 3e 51 3e ac ed e0 19 // 71 ff 85 dc 98 63 41 56 07 3d f4 e8 ac d6 c3 aa dd 61 5a da ff a7 a8 // 15 73 81 3b c4 ca 21 88 6d dd 53 20 21 bb a5 c8 4b 34 c3 46 65 53 4d // b4 8d 61 90 3a 03 c1 cc a4 ed 95 5c a9 2c 1e 33 b7 66 4b 49 4e 3d b6 // d1 e6 37 a4 9e 53 78 08 a2 66 9e be ca 30 16 91 ac d4 fa b0 af 19 7b // 9c 7d b0 1b 78 62 46 6b 56 8a b3 a4 71 2a 25 21 02 64 fb 29 7a 6b 67 // 9d fc 3f ce b6 5b dd d1 a2 3d 5b 50 7a 0d 6d a8 3d 73 b7 16 d9 71 c5 // 17 9a 92 e5 7b 9b 93 45 1e b9 43 84 5a 54 9d e7 37 f2 d0 82 a8 36 82 // c3 26 49 b4 94 1e 78 77 58 ea d9 d2 c2 56 b2 b4 ed 1e 02 55 95 2c e8 // 3c cc ec c3 9e 5b bd d3 84 90 f1 96 0b 26 e5 37 99 43 be 3d 9a 64 b5 // 14 9c 84 d5 77 e5 fd 09 95 60 ba a2 92 be fa 06 ce 90 65 fb 03 ed 43 // 2a 9e 05 5c a4 ad 0e 95 2f 83 68 b3 d2 30 fd 52 39 72 6f 79 f4 c9 8a // 0b 4a 96 48 38 2b 24 5d 32 4c b6 10 49 56 2f 76 5f 92 3f c6 57 ef 36 // 74 76 58 49 4d 78 59 0a 1e 27 a2 d0 98 56 ac f5 0c 3b 26 27 1c 6d 5a // a9 6e 8f f9 bd b9 04 38 59 66 5e 21 ea 53 a0 50 c3 35 ca c4 14 bb f2 // 7b 03 28 ac 2c 74 50 ac b2 6b 09 3b f2 32 35 8a fd 11 35 ee 50 ac 3f // b2 6b 5f 02 56 cc dd 37 03 3c 8a 59 74 06 07 cf d5 49 d4 c6 54 0a fe // 4a 6b 44 25 ae 1f 63 38 72 dc fb 5d a8 d0 54 7c f0 c4 88 88 17 b7 1f // bc 7c 45 b2 a6 41 e9 c1 a7 6b 6a 6b e1 24 40 24 22 ad a3 5e dc 02 ed // 99 7d 6b 87 b3 61 ae e9 5a 16 d2 c5 28 d8 9a 52 fe 40 df d8 34 34 96 // 9b d8 6f 02 e6 3f c1 ae 72 94 12 09 af 39 a0 8c fb b4 c3 20 bc 47 d8 // 53 f5 db af 0c d6 0e c5 46 08 aa db c3 82 fa 6b 5c ab 3e 9c ac 57 be // a2 66 09 f4 c7 9f 6a 6b 4e b4 a9 33 6f a9 57 83 b0 c0 c3 66 f3 6d 5d // 6b 83 10 b3 cf db 80 02 07 91 9a 13 1b c7 f9 84 f7 fa 11 fd 0b f2 c8 // 9e 06 0e 9d 12 86 e4 53 fe 97 36 3e f7 2b d6 eb a2 9a 85 ff ec cd c3 // be e7 2e 12 28 43 33 a5 a4 06 22 c0 16 19 55 8d 27 50 fc 45 ab fa 22 // 05 9e bd f7 43 f8 e5 0a d2 97 70 d1 9f 84 d8 a3 42 32 d6 91 85 14 76 // 9b 3b b2 a1 ea 5e 59 e9 55 63 32 ba 66 96 75 76 44 58 e9 34 9a 18 35 // c5 01 a9 3e 91 dd 3b 31 01 89 79 88 0a 99 13 f5 4e c1 e8 52 6b 8c ff // cb 77 6b 97 fb b9 42 4f aa 5c 5e b6 0d 2a c7 49 55 bb a4 b5 18 25 71 // d0 d9 f8 4f 0d f1 ba a7 22 b2 0a 78 c9 c0 01 1c 66 7f 68 8b 58 48 9c // 9e 45 0d 83 e4 0a c5 eb 41 c5 56 4b 6d 76 a2 26 44 8a be 4a 3f 49 99 // 27 07 41 25 aa 9c 0e 7e 70 4c 36 df 5b b1 10 a0 f1 5f 84 33 a4 70 e8 // 1d b4 14 82 7d 5c e2 1c a1 da 1c 8d 51 d7 46 d1 e1 ca 11 01 27 c1 5e // 92 af d7 5d 3c d0 5c e0 b6 32 cf a0 37 45 de 3c dd 4b 57 37 3d 46 67 // 65 83 c8 9f 04 5c 26 c6 fc 57 93 e5 48 95 55 ce d0 8f 83 ba 35 11 35 // 83 4a 20 28 11 3c 31 9a f3 0c c8 5b c0 1a 7f 82 08 82 2d 7d 60 7a ed // 0d 2e 12 c8 0a a0 09 10 04 41 b7 5b ea cc fe 0a db da 7e 8b b8 70 ed // f4 96 31 58 79 4c 8c 3a 5b aa cf 6e ec 7b 5e fa ef b7 60 2d ab 84 09 // d1 61 be eb 28 1c ba 21 f1 da 0c cd c0 92 d0 43 3f b9 40 d7 96 99 ff // eb 87 ea 77 58 29 a6 e7 e3 b3 08 a2 ee 0b 7a ec 8a c5 f3 5e ed 61 be // 37 4c 7c 77 19 6f 71 19 a8 88 2d ef f6 82 30 f4 61 cb 91 7b 0c cb 2b // 85 97 ef cb dd 10 03 b7 b7 7b 2c 60 1e bd 4b 45 c3 5b 84 26 f7 b9 13 // 8a b3 df 0e c0 08 19 60 4a b8 e1 e6 4c f2 aa 22 82 b1 26 95 85 af 12 // 7a 26 8c d2 07 f9 64 ed ff 17 2e 55 53 98 a1 6d f4 4b dc 52 88 95 38 // c3 a2 7f 8f bf ff b6 1f 7a eb 55 b2 59 95 2b bf ea 81 d7 30 58 d8 b0 // f7 8e ce 9d c0 8e 66 04 37 d2 1d 4e 3e c3 8b 19 e5 af da 7a 6e 33 02 // 3f 91 58 db 8a 1c 14 da bd 9b 8b 30 7d dc 66 92 7f 7b 19 df 5e 0d a2 // 23 7d 98 dd d8 90 b8 1f 19 63 80 89 77 d0 21 98 e8 ae 2e 97 41 9d bb // 1f 8e 51 ca d3 6a 34 24 b9 55 50 0f bd aa b6 ff 8d bf 02 87 08 b1 f9 // 51 fe 43 86 4b 59 b6 c2 36 8b 81 6c 98 02 3d 44 80 a9 1b 3f 10 59 e9 // c2 14 bf 55 a7 f8 c7 da 90 7f 79 ff 55 68 fd 78 7d 3a a0 22 ab 9d 03 // cd e5 51 f7 e3 29 5f 02 c4 f3 aa 37 e4 ce bd d9 68 c0 f8 2f 09 eb 00 // 4f bd b1 a4 ef 3a 0d 42 66 91 bd e3 96 4c 29 ea 65 62 2f 5d 3f fd 85 // 40 53 54 5b a1 ec 16 44 95 e4 be f4 84 54 39 c0 58 f9 43 8d 13 be 79 // 22 b6 56 db 49 9c 24 6e e6 17 6a 15 b9 7e 6a 68 e4 2f 0c 70 30 33 b6 // 99 50 4e 1f 92 b4 30 54 c7 23 71 99 bd 01 3d 96 fa ab 47 43 3b 6b 3f // 91 dc 66 36 87 06 43 9d 4e f7 da 39 42 ce 8b 9c 1c 9a 9d 06 43 fc 45 // 40 e7 d3 f1 c3 82 12 67 e8 66 ca cd 3e 90 4b e9 f9 df 80 38 1e ec 09 // eb 2b 0d 74 5f f0 3f fb 19 9b 91 7a 14 fd d8 fb fb ff e8 bf b0 cf 70 // 23 aa 71 83 30 1a 8a 41 e7 09 7f f9 f5 24 7f 8b 78 f7 d0 8b bf c5 96 // a8 10 47 80 7c f0 92 96 77 22 2e 7e 9e 92 1b 29 4e 04 08 8c 37 46 d8 // dc 19 29 46 45 f1 c0 93 a2 1b 4c 5e 6d 92 e5 4d d9 04 65 b1 1d d5 d9 // d4 2a f8 49 07 0e df f4 ec 63 97 0f 40 88 da aa 33 af de bb 28 d0 1d // f5 ee 04 3a 81 50 ab 1b 25 d8 64 ef 31 e2 0c 84 69 65 96 cf be a9 2d // 02 ea 29 c4 a3 93 3c 41 ec 68 ae e7 d6 8d 7e ea 7f 30 d8 92 0e 14 e6 // 2b e4 2b cf 85 6d 7a 58 f4 6f db 24 38 b0 23 e9 74 f7 72 81 c5 a4 62 // 55 36 27 e9 61 45 04 cb d3 f1 ca e6 e0 fd 9f 7e 89 d9 bc e4 89 46 d0 // 50 86 16 fb e5 42 30 3d c5 42 98 2c 61 d7 bb 4a fb f3 e7 6b f1 fb 23 // 81 cd c9 9f 21 75 ef 94 4d cd 82 6a ab dc a2 b7 67 8d b5 26 27 33 c6 // 9c e5 04 c3 8e 7d eb 7a df b9 b6 d8 bb 00 d8 e4 25 1e 04 38 41 7e a6 // 15 cd e5 8b d7 6c 24 27 b3 d7 a0 57 8b bb ff 9f de 2a bb c5 d6 03 07 // af f0 05 0b 18 17 61 58 aa ed b3 4e 28 38 86 37 8f f7 98 b4 f7 4e 0a // 0c 95 d6 42 71 f1 91 62 80 dd 24 73 04 d9 20 1c 67 f5 e2 64 0d 97 06 // ad d8 70 3c ac 81 79 5a 01 90 10 7e 2b b2 94 1e d1 37 38 59 5d a1 c8 // 6b a0 f6 8e 22 83 a4 35 cb 5f 16 2c 74 07 1a 13 df e2 26 6d 05 ab ae // f0 80 dd 6b 1d ad e1 15 e8 83 e0 4f 0b b4 be 4d 91 f5 35 ae 6f 82 2b // 02 e8 14 e6 5d 2b 78 07 d1 99 a2 3d 3f 26 20 9f 6c 9f 93 60 2a 3a 93 // cc fd eb b5 f8 16 1b 79 28 05 96 74 e1 58 20 d1 84 8a 98 0c 8d 1a f5 // a7 3a ad c5 c4 02 fb b6 e7 30 ba 51 22 79 13 ca 27 f0 d7 8d 33 1d 63 // 25 d0 a7 92 6c 23 82 96 b2 a2 2b 10 a6 9c df fe b0 87 df e1 75 51 1e // d8 e2 cd e8 d7 da e1 40 e4 ce 92 f8 92 b1 29 d9 94 0e 4a 30 b1 9f 82 // 2e f7 61 1b 87 50 ea ea 8e 55 50 26 04 b7 d2 35 8c 09 a2 17 af 8b e6 // c8 6d 67 cf 6f f6 13 0c 97 1c 97 65 d5 66 31 fe 62 24 fb e1 e8 33 d4 // 97 b5 34 fb f6 b0 30 af 93 69 1f 59 29 52 79 aa 1b df b5 d5 d9 d4 66 // 8d 5a ea 70 e2 b8 fc 11 7d f0 04 2e 91 c7 e6 22 5f 27 32 97 27 ed 6e // 14 a8 7c 79 43 c0 40 df ee 4e 5c 06 a2 02 51 c3 9a 45 ab 48 65 95 1b // 0d ae fb 9c 05 57 1f dc c2 1d 17 61 94 5b d2 b8 04 7c ce dd 6f 1e 70 // 86 46 fb e6 1e 75 bb 27 28 e8 ce e8 93 d7 e6 f6 42 11 9e 78 61 55 a6 // cb ab 05 7d 6d 83 b7 77 16 14 51 19 e9 74 ad 73 55 17 9d 2a dc 3d 74 // 8f a2 49 cb 58 e3 2e 67 91 d6 46 24 0c 05 da 44 27 b2 f3 59 97 6c 8f // d1 48 6c 60 4c b7 ee 64 7e 24 63 3d 8f ca 83 14 cf 1f 85 11 0c a6 35 // 11 56 a2 b2 6e 44 b0 40 f7 d2 81 0a cd 36 f4 5a 39 69 c1 fa fd 1a 7e // 0b c1 4f d9 b2 65 93 37 5b e8 e7 50 c3 f6 53 4f fb 85 90 4d 15 d7 5f // ba 05 da c4 a6 73 de 97 f7 54 3e e9 31 72 4c d3 54 74 cd 7f f5 cf 3e // 8a ba f2 06 f3 03 0e 92 89 56 33 fa 9d 84 99 ea 76 36 01 56 02 60 10 // 9d ad 18 bd 64 b9 90 53 1f c5 37 7e 6e aa 5d a0 50 b9 8e 1c 65 15 ea // 48 c7 de 1a 15 b6 32 83 d4 a6 94 cb ad 37 93 56 bf da c5 0e 6c 34 38 // 79 e2 9f 6b 9a b4 25 60 0d 51 f2 57 ce b3 5d 0c a0 0f 83 cf 5b d7 34 // 22 3d e7 16 74 76 14 66 6b a1 f1 a8 fa 75 6e 5f 3f f0 fc 94 fa 4b d4 // 07 3b dd b0 09 8c f5 65 ee 40 af 57 32 ee 92 18 d2 62 e5 b6 4a d6 b8 // 11 8c 54 ee af 70 72 f2 e1 55 14 a4 01 77 9b 42 5f a8 9d 8a bb 17 50 // e5 6c c3 10 8d ff dc f2 d3 fd 86 b8 af 45 60 d5 6f 7f f0 70 21 54 21 // 1f 99 49 e3 99 2d 93 e6 68 92 b2 97 fa 2d 4b fe 18 de 3f d7 4e 96 c9 // d3 0e b1 4f d4 58 fd bc 9e 9a 34 e0 0f 32 80 dd 73 25 20 14 7f a2 a8 // fa 83 e9 1d d0 68 75 01 46 6a 30 00 15 bf 88 8c 03 fc 08 19 0c 27 53 // d7 71 9a cf 6f 84 88 5c 4c 56 42 f4 66 c1 98 4f 15 a7 71 6a 9b 60 8e // e5 f1 b3 95 72 6b cc 85 19 76 66 67 d2 4d 11 e3 96 e6 2e a3 96 40 c9 // e7 3e 4e 9e 9e 50 76 d7 01 9c a1 be bb d7 09 78 07 f4 6b 3b 6f cb 96 // ed 4b 43 3b 25 ec 55 1f b1 76 a5 fa 25 2e d1 d8 1b 03 50 cf df b8 06 // 9c 99 16 49 5b ef 3a 26 2b 66 68 91 08 96 c0 b3 7e ee 40 54 7c 66 3a // 90 1e 92 f4 1b 41 7a c5 0e 88 d0 58 d0 21 a8 f9 a5 78 3b d9 36 cc a4 // 96 2b ec 1c 98 86 68 9c c5 47 97 0f 92 15 23 25 96 39 25 15 18 2e 56 // 3f 72 0b b7 9d 29 ba aa bf 0e 26 97 de 65 00 bc 67 7e 34 68 47 01 1e // e3 45 03 58 c0 b1 6c a5 28 36 8b 5c bb 8d f5 ab 97 4a 3c ef 07 2d 20 // c9 90 6f a5 85 e0 f3 08 3e c6 d8 50 7b 85 61 f6 4e 65 aa 1a ec f8 25 // fc 47 ad 14 59 c8 77 71 54 9f d5 c9 a9 cc 09 4e 7b 11 79 ee 1e 90 ef // f7 15 8f 28 f5 9f 02 9d 90 e7 08 f4 ec 50 b4 f6 7d 8b 4b b7 14 00 65 // 52 83 54 a7 e2 5d 63 e9 29 77 18 3a 02 84 ec 22 aa 92 32 10 f0 bf ea // 89 cc a5 35 47 13 73 81 e5 de 0f 60 bc 48 4b c2 da f1 29 b0 38 02 44 // f1 ed 4b fb 67 4e b2 79 1e 76 dc e3 3c ae 68 4a d3 66 20 d5 d6 7c b5 // 87 f8 40 ca ed 31 6b 74 39 b0 e8 c3 de 0e 06 5e 62 68 0f 39 97 36 9b // e3 46 66 70 27 81 68 c9 a1 a6 44 d8 70 e3 a8 d0 a7 9b 2b 72 0e 8c 3c // 51 bb 91 33 53 2b ee e6 43 19 e9 87 14 bb 2e 6d 5c 0b 72 39 62 d9 23 // b0 ef 45 43 61 d4 b3 cb 47 0b f8 c3 90 31 ed 4a 75 26 7f 49 97 41 be // 15 aa ca c9 2d 8e 6a fd cb 01 a2 e7 d2 db f5 49 ce b2 a2 10 8c 40 79 // c6 20 f0 5c a1 bd 31 d6 31 c2 c8 d3 5c a0 d7 31 55 f5 6e d0 20 c2 5e // 38 9d b3 56 ed f5 10 ae 08 8d 11 b5 e4 fe d5 1d 0d ce 4d 3a a0 49 24 // b0 9c 28 20 0e de 5b ec 1a 8f 38 cc 5f 08 10 55 e0 f2 8d 75 af c4 d5 // 88 ca 0e 82 8d 00 08 5d 15 0b ea fd da 17 b8 df 9e 7d 92 18 ea 7d 81 // f2 e0 76 41 29 01 c5 ae 04 d6 92 9d 71 7f ea 2f cc 8e 5a 1e 69 db d7 // b5 25 87 99 a2 fa 5e b1 08 b6 cc 35 df ab 59 9f b2 7e 6d 75 f1 03 0b // 83 f4 52 af 81 37 83 03 37 14 1f 03 19 42 eb a8 31 23 d3 f8 7b 5f 01 // 62 3d 46 13 e5 a4 4b 49 52 c3 00 ba f3 d4 d3 db bf b0 ad 02 4a 19 b3 // 81 0a 17 4e f8 45 3d 85 a2 58 22 f6 6e 45 eb a2 49 0f 29 de 10 77 68 // 3c cc 32 e3 51 7f 88 b5 1e 01 06 72 a9 82 f7 c8 59 14 50 c9 ab 15 73 // 14 3a ef b6 1c 17 eb b0 c9 2d cb 04 94 d1 16 b9 70 c2 a8 27 a6 b3 60 // 8a e1 0d 58 3d 1f 7d 09 22 63 fa 87 3d e9 f3 1c d5 9b c9 49 1f f0 12 // 05 9b 63 a9 12 0a f8 94 77 f2 cc c3 4e ee 7b d6 6d e6 0a f6 47 30 c8 // 79 12 8b 49 d3 1d a6 40 0c 24 71 e0 d5 ab f7 07 e5 60 57 4b 47 7b 8e // 20 ca 45 d9 21 82 d6 39 eb 43 4e 14 ae a1 a3 f9 1a d8 fb 60 e4 85 9b // 77 38 97 53 99 05 13 18 1e a3 a8 28 84 23 5e 85 20 29 43 59 43 5c fb // a2 20 50 2b 59 1f c2 8a c3 6e c6 97 44 26 57 d2 90 bd 7a ad 7f ce 53 // a3 f1 76 6f 2b f7 d5 5c 24 d7 c0 e9 c7 a7 1d 6f 12 82 ea 14 78 e0 a3 // 63 78 b5 0e 4f ee 28 1f 68 6b c5 3f 50 13 80 36 e2 a5 d6 19 9d 40 ca // ff 08 4f de 7b 63 b3 c0 a4 7d a0 79 11 07 c3 21 83 30 f7 c2 e2 c7 60 // 9a ba 20 2f ae 52 90 24 3b 60 33 37 9e b1 5e dc 57 2e ee 45 20 08 e0 // 4c 9b 53 ef d5 f3 d8 83 27 31 7b 38 93 47 45 bc 3d e4 c5 5b d8 18 fe // bc 7a 79 53 bf 03 c4 02 9f 77 17 7c 2a 97 43 10 f0 48 5a a4 62 52 f1 // 00 0d c7 19 34 94 72 87 c3 8e a5 85 4f 29 c7 b8 2f 63 0a fb 8c af 1f // d8 80 67 03 07 b1 55 a6 e7 fe dd c0 19 cf bb bd c1 8f 3b c0 3d a3 bd // 37 1d 93 cc bf 56 bc b3 9e ea 55 c2 d1 13 ef c1 48 12 7c 30 08 9d 21 // ce 6a 50 88 db fb cf 8f 8d 75 c1 94 56 bc 96 2c 37 15 48 63 4a 95 38 // 2a cb 5a 08 86 ef c4 6a 87 bd c1 11 dc 0d 1e 54 08 4c ea 0d 58 05 4f // 00 76 2c 91 d7 fe 0f 0f bc f4 c2 80 f2 9f 9c d5 99 9a 5e 8c 6f 50 7f // 80 80 d7 c7 ea 9a 86 85 be 50 72 2c f1 a0 82 f3 72 8d ec 8d 61 52 cd // c7 2f 8d a6 b1 80 56 43 c0 42 f4 f6 78 0b a7 9c c8 a2 16 5d 9d 7a ce // c8 ab 2f 42 1b c3 e7 7b 51 c6 2c 4b bb 26 2b 56 74 ea 7d 2d cf 9a cb // 89 4d 05 0e 91 b0 52 36 43 22 a5 b0 8b d9 66 72 49 57 1c 00 4f b4 95 // da 7e 24 fc 56 20 ad da 3a f6 84 8c cf 23 89 11 a5 2b db ff 76 6e 4e // 27 9a c2 74 af a2 c2 30 2f ab a2 5b 5f e9 8d 97 2a 04 aa 13 f7 7c 0c // 05 d7 dd 82 b0 a1 9f 1d ed 8c f5 f9 9c 80 e3 92 b0 aa b1 26 4a 29 e9 // fb cf 0b 69 f6 b0 a9 f2 33 2e 09 ab 74 de a7 27 71 06 d0 88 3b b2 64 // e2 79 c6 7e 5b c6 90 09 22 5b f4 fd 1a 85 32 f9 39 2a 01 1b 55 a7 3a // 7c f8 d1 6a 59 d6 95 b2 a6 5b 57 fa d6 4a 20 41 f8 c2 88 04 ee 1a 48 // 84 5c 5d ab 75 7d 04 f1 d9 55 20 aa 9d db 69 90 4d 65 29 c0 e1 4b d7 // 89 df e3 70 67 07 3b 3e 0e 13 6a e2 ae bb 1c 34 c5 5b 94 ce 94 2f 78 // 6b e4 b4 5f 80 1f 35 f7 c7 68 d9 1a 46 0b 92 ff a5 7f f6 75 f0 b4 b0 // 04 37 a0 7f 87 1a 86 50 f2 1b 2b f7 c7 22 c1 d9 e8 60 e8 95 5f ef 56 // 99 ee 53 a5 f6 fe 46 fb 9e 5e 17 a1 c6 9f e2 53 8a f4 71 8b 72 15 ad // 2c 00 c3 d4 20 58 9a 86 53 ee 51 1b 80 99 45 45 1f b8 20 5b 19 ce 37 // 7c 8d 02 53 b0 54 93 c5 57 cf 2b d8 ef 20 8e 8f c0 1b ec ee a1 ac ca // 38 d0 25 f3 28 f2 8d 69 bc fa a3 ad c6 d9 57 3a 38 32 dc 3f 3c 75 8f // e0 8c f9 cd 0c 32 ac fd da e8 1b 36 82 86 9e 8a a9 72 5b 64 33 62 52 // ae b2 ee 8e b7 8f 07 21 aa 31 58 21 7a 30 09 94 8a db 29 7c 5e a4 5e // c2 6c b6 d9 63 c7 be 47 ee 1b 93 fa 13 6e be 73 a2 19 36 df 01 48 fa // 31 12 06 f8 bc a2 e8 07 19 ae ca 87 45 ff 74 dd aa d5 18 26 44 76 2c // 66 33 3f 94 2d 9a 93 c4 67 d5 f9 fd 5d 0d bb e5 74 80 36 2d 4b b0 f7 // 60 29 4f 4e ba 3e 1b 08 04 7d 25 6d bd a1 57 63 5d 21 a4 3a ff 3a 71 // f6 ad 57 4b 40 2b b3 6e 52 70 d7 ed 08 2c 6f ba e0 77 71 72 15 13 ae // 9d db 22 d2 3b 00 73 30 46 c8 98 ee 6a c0 5e f8 a5 1c e4 19 19 e1 f2 // 41 cb 98 e0 59 2a ce 68 21 46 20 ba 1a 74 8e f8 11 31 66 1f 58 f1 63 // 57 13 ca 28 73 e1 50 a3 e8 48 c8 d2 eb d0 39 76 9f da 11 2b 73 05 0e // fa 4d 1c 35 db b4 6c a5 a7 b7 cc be d1 dc de d3 6a f2 72 f6 83 8b 4c // 1e 7e 67 78 e7 e9 ca 3d 79 4f 27 5d 49 c9 e3 2e 76 80 97 34 91 18 d2 // 33 7e 7c 03 1a da 38 d0 cc 5c 04 c2 86 ff 93 08 3f 6d 58 d7 3a 82 11 // 18 c9 34 32 fd a9 a8 c7 6f a2 cb cc 09 3a 7d ec ac 8e 4f 00 1e cc 9f // 67 fa f1 c2 f1 02 12 0f 06 18 46 9c f6 53 bb d5 fc ef d4 ef 2b ae 86 // dc 4f 53 93 b8 40 f9 f4 71 40 cf 7f 46 a1 86 c2 18 78 a4 36 12 a7 1d // 3b 54 0b 99 94 f0 10 ab 62 3f 87 82 64 cf 46 c7 36 6d 0b ec 5d 43 d4 // 81 b4 78 46 09 1f d3 cd a7 3a 9a 28 ce b7 f8 39 ec a6 95 c9 f0 84 a1 // 6c 81 24 75 f6 57 5e f2 36 8c 88 cc 66 55 f4 76 63 ef 69 ce 47 79 fe // 3c cc 4d d8 5a 07 a9 e4 c6 f3 9f 42 69 0d 23 1f 57 27 f4 5c 24 7a 53 // fd 8d f0 29 fc ef da 4f 32 86 58 43 58 92 51 9c 17 20 5a 3c 71 5a d6 // bb 73 87 d0 9a 5e 38 7c 83 f0 08 da f6 26 f5 97 7c 66 20 3a f1 14 3e // f7 b5 9c cd 8e 3c 17 bb 15 6b ca 31 78 61 f0 b9 f2 22 ea 63 c0 44 07 // 5a 3a 74 be af 05 c2 3d 0a 75 ca a6 03 97 d8 31 bb e5 07 23 4f ff 15 // 49 60 fa f0 f0 27 76 d3 f9 03 8c 95 5b f0 c1 ec 9c 92 52 3c f0 b8 55 // c1 8d 6a c3 b3 5d 43 77 96 42 0b a3 df d5 81 dc 6a da c6 43 15 c1 cb // 1a 2c 3a 45 ec 46 55 bb 2b d6 e0 b4 a3 08 22 81 ed 06 97 a2 13 d1 d9 // 31 42 e9 6b 4f d5 74 31 d2 f4 54 74 51 d0 08 ab 58 bc d9 76 5c cf 3c // a3 29 7b ec d5 de 9e 2b e0 26 3c fc a0 99 35 c9 33 4b 5e 68 7b c7 e7 // 05 7d c2 ed 03 87 3b e2 22 00 c9 fe 32 a9 49 7d d0 0a 33 6c f4 c7 23 // ea d3 02 34 0b 5c d1 fe f8 cd 88 33 0a 90 89 fc 93 af 4e f7 39 29 5b // 94 40 7b 29 1b f3 3f 4f 39 c9 36 73 6e 11 66 10 64 28 f8 79 6a 4b 92 // 80 5f 4d fc f4 6d 86 92 b5 4e 40 a9 e8 58 4c 0e aa c4 ca ad a8 7b b3 // 3f 55 3e af ee f5 05 1b 88 94 02 17 6a b7 66 93 6a 38 dd d7 e5 20 5d // 2c 87 e1 33 a0 2e 84 ab 24 ba 2d 88 9a 4c 4d b8 cb e1 8b 27 14 55 e8 // 4d a7 16 f4 a3 2a cd bc 0a 5a ab a2 5a 2e c7 57 c7 38 47 dd 1c 4c cb // 29 67 c6 51 e5 25 76 92 a4 55 3d de 22 78 46 bf e2 97 70 21 80 5f 46 // a2 87 c8 35 ea 8d c5} (length 0x2000) // } // len: bytesize = 0x2000 (8 bytes) // res: ptr[in, syz_fuse_req_out] { // syz_fuse_req_out { // init: nil // lseek: nil // bmap: nil // poll: nil // getxattr: nil // lk: nil // statfs: nil // write: nil // read: nil // open: ptr[in, fuse_out_t[int64, fuse_open_out]] { // fuse_out_t[int64, fuse_open_out] { // len: len = 0x10 (4 bytes) // err: fuse_errors = 0xffffffffffffffda (4 bytes) // unique: int64 = 0x3ff (8 bytes) // payload: fuse_open_out { // fh: const = 0x0 (8 bytes) // open_flags: fuse_open_flags = 0xb (4 bytes) // padding: const = 0x0 (4 bytes) // } // } // } // attr: nil // entry: nil // dirent: nil // direntplus: nil // create_open: nil // ioctl: nil // statx: nil // } // } // ] memcpy( (void*)0x2000000062c0, "\x23\xdb\x50\x37\x80\x5f\x17\x7d\x13\x61\x15\xe6\xa1\xa5\x90\x34\x69" "\xaf\x39\xc1\xfb\x9c\xb3\x82\x15\xfe\x64\xcf\xf9\xf2\xf0\x44\x4a\x57" "\xe2\x2b\x0c\xc5\xcb\x4f\x74\xc9\x79\x23\x65\x40\x0d\x9e\x1c\x68\x53" "\x9e\xa5\xef\xf0\xa5\xed\x08\x64\x81\x4d\x39\x25\x1b\xee\x8d\xfe\xa6" "\x9a\xa0\x52\xd9\x00\xbc\x0c\x79\x2e\x1c\x97\x52\xb7\xd3\xa3\x22\x2f" "\x6a\x1a\xd3\xe4\x4c\x1f\x65\x61\x7b\x12\x8a\xea\x51\x91\x18\x61\xca" "\x36\xba\x7c\x96\xb9\x6b\x2f\xba\x0f\xda\xa4\x9f\xfb\x26\x12\xf3\xe8" "\x1f\xe5\x65\x32\x7d\xd9\x96\x5a\x60\x04\x64\x42\xc9\xdc\xd0\xd5\x52" "\xc6\xa0\x03\x88\xbe\x3b\x43\x8a\x08\x88\x3c\x73\x49\x76\x15\x31\x88" "\x02\x94\xad\x98\x87\xdb\x97\xd8\xc2\xf7\x49\x21\xc5\x79\x10\xcf\x1f" "\x5c\xc5\x28\xe1\x7b\xd5\xc3\x74\x6b\x62\x02\xf2\x6d\x62\x15\x35\xaa" "\xc5\xf7\x87\x2c\x2c\xb3\x29\x5e\x42\x52\x4b\x5a\xcb\x24\x9b\x2d\x1a" "\xc1\xb5\x3a\x4e\x31\x27\x1d\xec\xfc\xa3\xfa\xd2\xe2\xf7\x40\x76\x8a" "\xdf\x00\x87\x5c\x18\xcb\x7d\x11\x51\x50\xf8\x3c\xeb\x73\xf7\x7a\x1f" "\x61\xf1\x66\x6c\x2b\xb9\xf6\xbd\x9f\x0f\xb5\x5b\x3a\x61\x94\x46\xe3" "\x2b\xae\x2a\x1d\x99\xaa\x49\xe5\xf3\x82\x2e\x04\x8f\x8b\xe4\x4b\x70" "\x7f\x2d\xb1\x0d\x79\x16\xec\x9a\x10\xa6\x95\xd5\x73\xd8\x71\xcf\x24" "\x95\x9c\x3d\x15\xe6\x13\x44\xa6\x83\x09\xd1\x86\x95\x65\x37\xc6\xea" "\x85\x32\xfc\x2e\x1c\x76\x49\xf8\x40\x9d\x8d\xcd\xe4\xc8\xee\x15\x30" "\x47\x0a\xc9\xc8\x70\xf9\xf1\x83\x75\x74\xe4\x44\xba\x6a\xdd\xf5\xdd" "\xb2\xde\xc6\x7c\x0e\x76\xdf\x79\xf2\x65\xb4\x03\x81\x8d\xdd\xb4\xef" "\xc2\x7c\x90\x98\x5e\xd6\x9a\x48\xb1\x20\x56\xe5\x48\xf9\xc9\x9e\xdf" "\x80\xd2\xb1\x95\xd2\x6a\xcb\x11\x27\x66\x17\x27\xa0\x60\x02\x57\xf4" "\xb2\x54\x65\x13\xd0\x39\x30\xa0\x63\x8a\x71\xbd\x32\x23\xe5\x1f\xbb" "\x75\xc8\x32\xef\x73\x79\x07\xf2\xf4\xd3\xf0\x50\x5f\x43\x1e\xa0\x27" "\x83\xc7\x98\xb5\xc4\x57\x9c\x99\x96\x1f\xb7\x3d\xc6\x23\xa0\xd9\x9c" "\x1b\x30\x64\x35\x46\x4d\x41\x3b\x53\x7d\x42\xc6\x44\x48\x51\xb3\x64" "\x82\x59\x71\x40\xb2\x2f\xbc\x0e\xbc\x7e\x79\x5b\x2f\x96\x73\x9b\xf1" "\x39\xf5\x82\x3b\xc8\x69\xed\xe5\x47\xda\x4f\x39\x4f\xa1\xb1\x78\x78" "\x36\x09\x5e\x10\x13\x26\x40\x42\xe5\x3d\x50\x06\xea\x05\x9d\x04\x88" "\xcb\x2f\x5c\xcd\x44\xb3\x0d\x25\xea\x53\xc2\xdd\xa7\x1d\x11\x2d\x7d" "\x44\x1d\xbf\xc9\xf8\x46\x2c\x99\xc0\x98\xb1\x95\x8c\x80\xb2\x37\xd8" "\x3c\x32\xf2\x75\x9c\x9a\x9c\x08\x1d\x7d\x76\x66\xa4\x77\xcf\xda\x59" "\x35\x43\x09\xb0\x9f\x2a\x8b\x9f\x6c\x30\x77\xb0\xdf\x1e\x8d\x0c\x71" "\xac\x07\x23\x2d\xe4\xf4\x37\x10\x7c\xb0\xeb\x9b\x47\xb2\x26\x7e\xfe" "\x31\x93\x8a\x33\x7c\xf1\x1c\xad\xad\x72\xce\xd5\x68\x95\xbb\x14\x76" "\x3c\xca\x5b\xda\xdd\x24\x5d\x80\x1e\x82\x9a\x1e\xb3\xbb\x4e\xd8\x51" "\xa3\x45\x91\x8e\xfd\x2d\xcf\x8d\x38\xf6\x6b\xad\xc7\x73\x06\x8e\x6a" "\x2e\xf5\x9b\x2b\xb8\x38\xab\xd8\xb0\x43\xcf\x6a\xc5\x45\x50\xf3\xfd" "\xe1\xbb\xb9\xe7\x61\x09\x5e\x4b\x8e\xf1\x89\x17\x57\xd3\x76\xbe\x1f" "\x77\x81\x42\x61\x0c\x0a\xcb\xbf\xc6\x97\xf5\x1f\xbb\x7a\x16\x02\xed" "\x46\xe8\x28\x13\xc7\x4f\x41\xee\x2b\xae\x81\x81\x74\x80\x9f\x36\x92" "\x08\x4b\xea\x73\x10\xeb\xec\x3d\x61\x66\x70\x2a\xe6\x2a\xad\x84\x31" "\x3e\x19\xb4\xd1\x45\x16\x71\x85\xea\x8d\x53\xcb\x21\xd0\x99\xfb\x59" "\x2d\x7d\x7f\x8b\xc3\x05\xdd\x37\x5b\x5c\x0c\xd7\x3b\xe4\x4f\x49\xff" "\x53\xce\xe2\x20\x08\x5d\x47\x06\xbb\xf5\x0c\x6f\x63\xb0\x2e\x7e\x80" "\x5e\x8f\xa4\xc7\x30\x46\xa5\x7a\x87\x00\x88\x6d\xa2\x9e\xa5\x3e\x5a" "\x31\x6e\x7b\x01\x1c\x44\xa0\xf7\xbe\x5c\xc5\xcb\x56\x41\xba\x00\x69" "\xff\x59\x1e\xee\x18\x96\x6c\x7f\x00\x5e\xf4\x00\x46\xa5\xfe\x2b\xf3" "\x25\xb2\x54\x5b\x00\x98\x67\x76\x12\x64\xaa\x96\x11\xd1\x84\xfa\x37" "\x2b\xa3\xc5\xc3\x3d\x9a\x50\x71\x72\x10\xf7\xce\xc7\xf6\xdc\x44\x18" "\xa8\x7a\x79\x7e\xb6\xaa\xf6\xab\x38\x92\xbd\x3f\x55\x95\x47\xc8\x8d" "\x8c\x29\x64\x6c\x81\x73\xfa\xd1\x58\x8f\x52\xbe\xb3\x4f\xf8\x63\xbe" "\x65\xe7\xec\x15\x98\xcf\xb4\x65\xf2\x70\xbd\x55\x32\xfa\x70\x35\xaa" "\xe0\x77\xee\xdb\xc8\x46\x05\x8f\xa1\x9f\x58\xff\xb1\xcf\x0f\x18\x63" "\xf6\xd3\x3f\x2e\x5c\x45\x4d\x18\xb6\x6b\xe7\x66\xca\x36\x9a\xf2\xcc" "\x96\x56\xfa\x34\xc6\xc1\x0e\x4d\x4d\xa4\x4c\xe5\xe2\x37\x0a\xaf\x60" "\xc4\xe1\x30\xda\x33\x1d\x34\x89\xe8\xf4\x4c\x60\x02\x46\x32\x34\x09" "\xfd\xd3\x5d\x11\xda\x27\x12\x8c\x9d\x64\xbe\x65\xdd\x3a\x90\xc1\x54" "\x6a\x6e\xb9\x18\x5c\xb6\xd3\xa4\xa9\xcf\xad\x0e\x41\xea\x03\x89\x6f" "\xd2\x34\x6f\x74\x5e\xb3\x56\x3d\x7a\x79\xfd\x34\x5b\x03\x7c\x04\x0e" "\x56\xf0\x67\x78\x40\xbf\x9b\x0d\x29\x5b\xcf\xa9\x8b\x93\x14\x64\xc5" "\xce\x9f\xca\xf7\x45\x72\x0d\xea\xc2\xd8\xb4\xed\xef\xfc\x0f\xe6\xf0" "\x89\xed\x7c\x38\x80\x95\x9f\xcf\x8e\x31\xf7\xb7\x05\x4b\xc4\xf5\xc9" "\xd3\xed\x3f\x66\xc9\x68\xd0\xbc\x20\xb2\xd6\x6c\x37\x4f\x03\x0f\x3f" "\x19\x65\xf4\x3a\x98\x51\x9e\x52\x7c\xaf\x69\x33\x62\x41\x2d\x52\x3e" "\xeb\x38\xc8\xb0\x16\xff\x77\xf7\x8f\x83\x3d\x75\x13\xe4\xb5\xa5\x3d" "\x5e\xd5\x14\x39\x16\x67\x3f\x82\x2c\xea\xc9\x96\x7b\x87\x88\xbc\x64" "\x28\x28\x31\x81\xea\xf8\xd9\x9e\x48\x28\x6a\xac\xf4\xf6\x58\xa9\x03" "\xe9\xf0\x86\x59\x45\x0f\x7f\x94\x83\x80\x7c\x2e\x01\x3a\x1d\x9d\x19" "\x9f\x18\x88\x6a\x8c\xb4\xe1\x4d\x41\xc7\x1e\x57\x31\x45\x5a\x43\x94" "\x55\x12\x81\xec\xa1\x2a\x1b\xb6\xae\x71\x7f\x5d\xa2\x94\x91\x75\xd0" "\xf1\xf3\xd7\x18\xb7\x61\xdf\xc1\x09\x9c\x7d\x9d\x89\x28\xc8\x99\xac" "\x8e\x93\x6e\x69\xd1\x9f\xcb\xfc\xfd\xee\x83\xb6\x8e\xf8\xe1\x5e\xed" "\x41\xa8\xac\x0d\x54\xaa\x92\xd7\xd2\xee\x58\xbb\x47\x99\xf3\x78\x22" "\x5e\xc9\xba\x47\x09\xe5\xce\x2b\x77\x20\x8e\xcc\x85\xc2\x2c\x64\x96" "\x7a\x9e\xf3\x36\x0c\x54\xd3\x11\xb8\x91\x7c\xeb\x7b\x43\x2c\x90\xcc" "\x5e\x98\xde\x93\x27\xc1\x40\x0f\x8e\xc8\x92\x61\xb1\xd7\x7d\x88\x74" "\xb0\xbb\xdd\x2c\x5e\xb5\x9d\xf4\x15\x70\x5d\xe5\x2b\x08\xb0\xe1\x2c" "\x07\xfb\x73\x67\xc6\xd4\x61\xc1\x9f\x28\x2d\x51\xe4\x82\xcb\x4f\xb9" "\xce\xb0\x24\x9a\xc2\xd6\x40\x0c\xa1\x70\xfb\xd6\xc0\x06\x32\x24\x17" "\x9c\x61\x6b\xb0\x30\xa5\xc1\x01\x02\xaa\x2e\xea\x92\xf1\xe6\xf5\x82" "\x85\x90\xb2\x50\xb0\x9e\x6d\x1a\x95\x35\xc2\x98\xa6\x81\x60\xb7\xc2" "\x81\xfe\xcd\xd2\x95\xdc\x33\x96\xc4\xe6\xeb\x33\x95\xd5\xa6\x77\xd5" "\xfa\x95\xa7\x32\xdf\xde\xf8\x1f\x43\x46\x54\x5d\xd1\xa7\x4b\xb3\xaa" "\x9b\x51\x66\x99\xbd\xf0\xa5\x91\x65\x07\x7a\xb4\x59\xa5\xff\xe0\xdb" "\xb3\xef\x8a\xfa\x7a\x83\x82\xa8\x44\x1e\x0c\x36\xff\xab\xbe\xd8\xf9" "\x3f\x4b\xbe\xb9\x7e\x5f\x6a\x70\x4b\xf6\x3a\x0d\xe9\xcc\xf8\xfe\xf6" "\x43\xeb\xc5\x30\xa8\x09\x20\x93\x10\x02\x00\x3b\x02\x70\x14\xde\x31" "\x7c\x42\xf8\x61\xd9\x8e\xf4\xfe\xf6\x6d\x23\x2d\x97\x06\xe6\xbd\x26" "\x33\x47\x38\x4d\xad\xad\xaa\x43\xa7\xe1\x06\xbb\xb2\x1b\xd8\x22\xd4" "\x68\xac\xe1\x71\xb3\xf0\x4b\x99\x61\x12\x13\x5b\x63\xdc\xbd\x61\x2b" "\x58\x88\xec\x40\xda\x58\x3a\xb5\x49\xc3\x40\xdd\xaf\x5d\x74\x06\xc3" "\xe9\x93\x22\xc6\x88\x74\x21\x43\x56\xc1\xfd\x9b\x5f\x84\x34\x8e\x62" "\x9c\xc3\x48\x7a\x90\x1d\x1b\x7a\x2f\xa5\x31\xb1\x50\x9a\xc1\xc9\x3d" "\xe3\xda\x9f\x1c\x37\x73\xe3\xa2\xab\xa2\xb2\x9d\x24\x19\xf2\x40\xae" "\x6d\x24\xed\x9f\x14\xbf\x0b\x9b\x0f\x1e\x74\x0a\x2d\xb0\x6d\xab\x64" "\xd6\x38\x6f\x95\x0b\xff\x4e\x4c\x94\x16\x0e\xf4\xb8\x32\xbb\xde\x3a" "\xf4\x93\x7b\x75\x28\x65\x8b\x5c\x16\xa5\x1c\xb2\x21\x93\xfe\x99\x38" "\x57\x21\xce\x5b\x04\x8d\x93\x38\xe2\x89\xdc\xb4\x06\x83\x14\x0c\x41" "\x3e\xca\x52\xc8\xe4\xb6\x4b\x30\x6f\x47\x56\x94\x77\x37\x9c\x86\x4c" "\xfb\x3a\xa3\xe3\x49\x26\x24\x07\xd3\x93\x5a\xb9\xa0\x91\x6e\xb0\xf6" "\xdb\x2b\xe7\x1a\x7e\xb8\xf9\x96\x8d\xfa\xc4\x49\x95\xd5\xbf\xf8\xef" "\x61\x7f\xce\xea\xa4\x48\xf5\xe5\xf8\xd4\xb3\x9e\x35\x12\xfe\x7a\xe9" "\xee\x1d\x8a\x0d\x59\x12\xb6\x14\x89\x69\xab\x03\x25\xf3\xf7\x6e\x23" "\x40\xfb\xd6\x7c\xe1\x56\xbd\xf6\x38\x14\x0b\x3c\xcd\xb0\x8e\x50\x49" "\xdb\x15\x95\x79\x15\xcb\x05\xdb\x89\x01\x24\x9b\x10\xc5\x9c\xc5\xc3" "\xff\x83\x62\x90\xe3\x33\x4e\xee\x2d\xf3\x87\xe4\x4c\x57\xb4\xd6\x19" "\x8c\x37\x49\xf5\xdc\x57\xf6\xc3\xde\x11\x5c\xed\x6b\x43\xcb\xdd\xd7" "\x62\xb5\x8f\x1f\xb4\x0b\x2b\xaf\x3b\x38\x1f\xeb\xdc\x07\x31\x42\xe3" "\x0d\x2e\x9a\x1a\x69\xe8\xd8\x63\x14\x22\x1e\x54\x0f\x19\x55\x09\xd2" "\x23\xb2\x06\x17\x3d\xc5\x40\x68\x65\xd8\x06\x48\x17\xc3\x0c\x28\x4c" "\x03\x40\x35\xa6\x31\x90\xab\x86\xdf\x3b\xae\x41\x68\xc5\x8e\x01\xd2" "\x25\x17\x48\xfd\x5d\x9d\x61\x00\x24\x12\x9e\x83\xa5\x73\x0f\xe8\x3c" "\xf0\x91\x87\x90\xe6\x85\x4a\xb7\x65\xc7\x86\x49\xb9\x1c\x06\x65\x5f" "\x0c\xb9\xe2\x6d\x84\x32\xdf\x78\xbb\xad\xd9\x95\x83\xb6\xa8\xaf\xcf" "\x17\x7e\xd6\xf3\x39\xe0\x8c\x0b\x36\xa1\x6c\x6d\x31\xd8\xa2\x4c\xb6" "\xf2\xbc\x3b\xa5\x8d\x77\x11\xb6\xf8\xb9\x88\xdc\x3e\x31\x44\xbe\x61" "\x95\x48\x45\x7d\x4f\x40\x50\x9f\x17\xee\xb1\x86\xcb\x93\xa2\x92\x8e" "\xcb\x95\x15\x93\xd1\x90\x7c\x8b\xbb\x9f\x4c\x89\x99\xca\xba\x30\x59" "\xc8\xe7\x3d\xce\x54\xad\x6f\x87\xbc\xd5\x1d\x55\x9f\x77\x59\x90\x2b" "\x14\xe6\x8d\x3b\x84\x5c\x0b\x17\x9b\x38\xf4\xe6\xf0\xbd\x3a\x89\xcb" "\xcd\x5e\xbe\xd9\x97\x21\x02\x04\x86\x47\xda\x1e\xda\x5c\x84\x56\x44" "\x23\x69\xf4\xae\x87\x1d\x40\x37\xba\x26\xf2\x7d\x27\x37\x1c\xe5\x7e" "\x23\xad\xca\x5a\xf8\xdc\x93\xf9\x34\xf2\xef\x8d\x69\xad\x3b\x2d\xb6" "\x66\x57\xb3\x86\x8d\xd8\x39\xc2\xb5\x22\xf5\x46\x1f\x24\x40\x7e\xf0" "\x91\xb7\x72\x42\xfc\x70\xa4\x8b\x7e\xec\x45\xf3\xbc\xbc\xfb\xc6\xbd" "\xc3\x6e\x4b\x67\x29\x50\x20\xa3\x45\x23\x3a\x32\xa0\xa0\xaf\x4d\x03" "\xa5\x3e\xf6\x7e\x69\x71\x6d\x5a\xe3\x53\x42\x72\x2a\xfb\xe7\x55\x89" "\x46\x47\x5a\x9e\xbf\x5b\x39\xc1\x85\x58\xa0\x01\x1f\x68\xbc\x8a\x78" "\x59\x0b\x0c\xb6\x36\x18\x37\x9a\x51\x27\x90\xc4\x2d\x94\xbb\x23\x9d" "\xd3\xef\x5b\x8d\x10\x36\xcf\x03\x91\xad\xed\x88\x02\xa7\xa4\x47\xc3" "\x8f\x23\x1a\xe6\x11\xae\xea\xb9\xbb\xa4\x4c\xd1\x43\x69\x47\x37\x58" "\xb6\x41\x08\xd0\xbc\x9b\x6b\xc9\xe9\xb4\x97\xc2\xd1\xd2\xac\xba\xe7" "\xc6\x20\xa5\x5c\x22\x6c\xf3\x71\x33\x16\x88\xea\xdd\xec\x61\xfe\x96" "\x1c\x5f\xce\xf7\x1d\xad\x45\x82\x0e\xd0\xac\x8d\xc7\x64\x1d\x82\x15" "\x0f\x13\x18\xac\x15\xaa\x41\xe7\xbe\x58\x5b\x6a\x50\xda\x1b\x3c\xd9" "\x52\x39\xee\x61\xcf\xde\x15\xab\xa8\x0a\xe8\xeb\xc2\x1b\xa4\x54\x08" "\x83\xc6\xf4\x4c\xd3\x5b\x6b\x97\xda\x46\x40\xc9\x7f\x5a\x2b\x6e\xfa" "\x8d\x18\x4f\xec\x82\x3a\xbc\x75\x4a\xb8\xa0\xdb\x6c\x45\xc2\x29\x3e" "\x90\xd9\xc1\x54\xc4\xa3\xe0\xb9\xec\x2b\x61\x13\xce\x65\x83\xb8\x0f" "\x0d\x23\x4d\xec\x9a\x98\x15\x06\x72\x44\x73\x3e\x21\x34\xb9\xba\x93" "\xbb\x96\x92\xfb\x44\x20\x0b\xb5\x50\x1b\xb1\x09\xf2\x40\x1e\x8b\xaa" "\xf0\x11\x5d\x79\x5b\xb0\x34\x6d\xfa\xfa\xf9\x53\xbe\xd8\xe9\xa5\x2a" "\x5b\x9b\x02\xd4\x90\xc5\x5f\xd8\x9d\xaf\x31\x1a\xd5\xe0\x8b\x07\x0a" "\x95\x71\xf6\x96\xd6\xdf\x47\x15\xc8\xb6\x9b\x84\x0e\x4e\x03\xd6\xf3" "\x61\x32\x6e\x20\xd9\x54\x6c\x47\xb3\xa6\x31\x63\xe7\xdf\x9b\xd2\x60" "\x62\x13\x58\xc1\x66\x17\x7e\xe7\xc6\x9e\xd6\x3a\x8c\x43\xdd\x4a\x78" "\x54\x3a\xa9\xf9\x22\xc0\xef\x52\x7f\x4a\xa6\x1f\xf6\x5b\xb1\x45\x95" "\xf5\x18\x41\x2c\xe2\x5a\x1e\x10\x3d\xf8\x9c\xd4\xb3\x63\x59\x3d\xa1" "\x6c\x11\xd8\x0a\x23\xa9\xb5\xad\x8e\x3a\x7b\xe8\xf6\x97\xce\xcf\x82" "\xc8\xfb\xd8\x89\xa4\xf7\x43\xc8\x39\xb6\x7f\x7b\xa5\x45\x3b\x10\xbb" "\xf5\x9b\x1e\x4f\x4e\x82\x18\x72\xc0\x61\xa4\x12\x5c\x0c\x15\xc1\xca" "\x51\x64\xef\xe6\x1a\x58\xbb\x54\xdc\xed\xc8\x49\x80\x0a\x60\x21\xa4" "\x48\xd4\x66\x0c\x3b\x85\xe2\x36\x2b\x7c\xd8\xce\x95\x15\x6f\xbf\x40" "\x8a\x09\xa3\x0a\x8c\xcf\xc3\x55\x40\x04\xe9\xf9\xa3\x53\x82\x90\x7e" "\xec\x00\x61\x7e\x2a\xe1\xf8\x80\x31\x46\xbc\x8c\x28\xb4\xf3\xbf\x3c" "\x6b\x18\x3a\xe9\x24\x8e\x7f\x05\xc4\xad\xce\x3e\x0b\x7f\xf2\x92\x52" "\xb5\xbe\x9b\x19\x43\x1e\x3f\xe6\x12\xd4\x71\xf5\x2c\x5c\x34\xcc\x12" "\xc8\x30\x49\x18\x9f\x4d\x2e\x5c\xa5\x16\xdf\x78\x76\x6b\xa3\x44\x9d" "\x07\xef\x94\x36\xc6\x80\x52\xc9\x86\xd9\xdd\xe8\x80\x2c\x93\x11\x94" "\xe2\xce\x34\xac\xb8\xcc\x26\x66\x3a\x09\x34\x8b\x15\xc6\xc1\x45\xd2" "\x63\x06\xbd\xed\x0d\x1f\x48\x28\x03\xae\x6d\xee\x26\x56\x2b\x03\xfc" "\xb1\x83\xb6\x9e\xe4\xa0\x49\x1e\x87\x76\xec\xda\xdf\xca\x39\x5c\xb4" "\xea\xc2\x94\x8d\x4d\x64\x32\x1a\x4e\x66\x9f\x2f\x66\x3e\xb5\x4f\x05" "\xf1\x2e\xd9\xc6\x85\x83\x5c\x3e\x79\xf9\x82\x15\x2d\xbe\x70\x10\x73" "\xb9\xa4\xab\x29\x32\xb4\x6e\xe2\x42\x4a\x5e\x18\xbb\xe5\xf2\x5c\xe0" "\xb8\x98\xff\x69\x37\x92\x7f\x46\x70\xde\xfe\x43\x0a\xc8\x60\x21\x22" "\x6a\xe0\x55\xda\xf3\x9b\x53\x5c\xdc\x08\x99\xfc\xc9\x9d\x15\xe6\x7d" "\x66\xbd\x2d\xd8\x9b\xb2\x1b\x8d\x26\x89\xa8\xaf\x10\xa1\xb0\xbd\x44" "\x10\x3c\x46\x99\x22\xc3\x6f\xc0\x22\x8d\x7b\x6f\xeb\xf5\xe3\x66\xdc" "\xee\xcf\x8b\xb1\xdb\x38\x5c\x8a\xb9\x5d\x86\xff\x09\xb7\x6c\x2f\xa6" "\x28\x2d\xe8\x1f\xd6\x86\x4c\x49\x5a\x4c\x82\x95\xdf\x61\xa2\x54\x8e" "\x1b\x81\xc3\xe3\xf3\x0d\x7a\x41\x21\x68\x01\xd6\xc2\xd1\x74\x3f\x66" "\xae\x20\x55\x75\x60\x83\xe8\xbf\x40\x3d\x43\x6b\x82\x44\xac\x21\x4f" "\x4d\x84\xa6\x93\xd1\x3f\x29\x9b\xa2\x67\x40\x1d\x09\x4f\x2d\xf7\x08" "\x40\xe8\xa9\x80\x62\x27\x94\x21\x2f\x09\x92\xec\xf5\xa4\x79\x80\xab" "\x2c\xf7\xd5\xa6\xf1\x2b\x0a\x48\x9a\xf3\xc3\xc8\x47\xac\x59\xbc\x89" "\xf3\x6f\xbb\x0e\x08\xbf\x28\x3b\x68\x21\x3a\x17\xde\x38\xb3\xa4\x5e" "\xad\xe6\xf0\xb1\x98\xde\xf4\x08\xf7\x71\x1c\x16\x36\x7b\xcc\x0d\xed" "\x79\x4a\x9a\x32\x3c\x7e\x7f\x07\xfa\xd9\x6e\xa9\xc4\xd7\x34\x4c\x26" "\xe4\x38\x44\xa2\x7c\x21\x07\x6b\x8d\x7c\xd0\x76\x77\x60\x2d\x91\xea" "\xc8\x25\xeb\x5f\xd0\x63\x17\x55\xc2\xdd\x1d\xbf\x7b\xce\x3e\xb3\xc3" "\xf7\x37\x7f\xc6\x08\x0e\xcd\x0b\x89\x4e\x29\x76\x98\x45\x72\x59\x43" "\xe2\x59\x32\xd4\x24\x9a\xbb\x4a\xb7\x8d\x4e\x2f\xf2\xe2\xdf\x42\xc8" "\xd8\x84\xcd\x6b\xd1\x38\x86\xce\xf0\x80\xc6\x49\x1c\x21\x7a\xba\xe0" "\xee\xc6\xe9\xd4\xd4\x9e\xab\x66\x57\xf1\x5c\xfd\x38\xe6\xcd\x6d\x0b" "\xd3\x31\x98\xc4\x68\x5a\xb3\x02\xd0\xf4\x6e\x42\xf4\xa5\xd5\xbb\x7d" "\x28\x40\xa0\xa8\x81\x7b\x98\xa8\x56\x70\x0d\x4d\xe7\x43\x51\x89\x6f" "\xe7\xd7\xd5\xa0\xd1\xbc\x57\xfb\x4c\x82\x8a\xa5\x1f\x96\x37\x80\x7a" "\xeb\x90\x57\x80\xf2\x39\x52\x7e\xd4\xaf\xfd\x83\xf6\x8b\xe8\xb7\xad" "\x1e\x10\xd9\xe7\x97\xba\x39\xcd\xee\x24\xf7\xbe\x0a\x0a\xb0\xac\x22" "\xea\x39\x68\xda\xc6\x1e\xb4\xbd\xd5\x22\xc9\xce\x57\x0e\xdf\x63\xa4" "\x39\xab\xfd\x99\x54\xbf\x6a\x16\xc8\x8d\x86\x15\x7d\x05\x47\x72\x00" "\xa8\x32\x55\xcd\xe2\x79\xb4\x54\x97\x9c\xee\x4d\xe0\x0e\x81\xcb\x44" "\xac\xdc\x42\x95\xc8\x77\x56\x6a\x74\x9a\xb5\xb9\x1d\x25\x0f\x03\xd4" "\x6e\xcc\x14\x21\x0c\x19\x67\x00\x33\x8e\xea\x02\x8c\x93\x0c\xe1\x04" "\xf2\x0a\x9e\x7f\xab\xb0\xad\x1d\x31\x4e\xc1\xa2\xd9\x7d\x1d\x1b\x9e" "\x09\x11\x4d\xee\x0e\x3e\x51\x3e\xac\xed\xe0\x19\x71\xff\x85\xdc\x98" "\x63\x41\x56\x07\x3d\xf4\xe8\xac\xd6\xc3\xaa\xdd\x61\x5a\xda\xff\xa7" "\xa8\x15\x73\x81\x3b\xc4\xca\x21\x88\x6d\xdd\x53\x20\x21\xbb\xa5\xc8" "\x4b\x34\xc3\x46\x65\x53\x4d\xb4\x8d\x61\x90\x3a\x03\xc1\xcc\xa4\xed" "\x95\x5c\xa9\x2c\x1e\x33\xb7\x66\x4b\x49\x4e\x3d\xb6\xd1\xe6\x37\xa4" "\x9e\x53\x78\x08\xa2\x66\x9e\xbe\xca\x30\x16\x91\xac\xd4\xfa\xb0\xaf" "\x19\x7b\x9c\x7d\xb0\x1b\x78\x62\x46\x6b\x56\x8a\xb3\xa4\x71\x2a\x25" "\x21\x02\x64\xfb\x29\x7a\x6b\x67\x9d\xfc\x3f\xce\xb6\x5b\xdd\xd1\xa2" "\x3d\x5b\x50\x7a\x0d\x6d\xa8\x3d\x73\xb7\x16\xd9\x71\xc5\x17\x9a\x92" "\xe5\x7b\x9b\x93\x45\x1e\xb9\x43\x84\x5a\x54\x9d\xe7\x37\xf2\xd0\x82" "\xa8\x36\x82\xc3\x26\x49\xb4\x94\x1e\x78\x77\x58\xea\xd9\xd2\xc2\x56" "\xb2\xb4\xed\x1e\x02\x55\x95\x2c\xe8\x3c\xcc\xec\xc3\x9e\x5b\xbd\xd3" "\x84\x90\xf1\x96\x0b\x26\xe5\x37\x99\x43\xbe\x3d\x9a\x64\xb5\x14\x9c" "\x84\xd5\x77\xe5\xfd\x09\x95\x60\xba\xa2\x92\xbe\xfa\x06\xce\x90\x65" "\xfb\x03\xed\x43\x2a\x9e\x05\x5c\xa4\xad\x0e\x95\x2f\x83\x68\xb3\xd2" "\x30\xfd\x52\x39\x72\x6f\x79\xf4\xc9\x8a\x0b\x4a\x96\x48\x38\x2b\x24" "\x5d\x32\x4c\xb6\x10\x49\x56\x2f\x76\x5f\x92\x3f\xc6\x57\xef\x36\x74" "\x76\x58\x49\x4d\x78\x59\x0a\x1e\x27\xa2\xd0\x98\x56\xac\xf5\x0c\x3b" "\x26\x27\x1c\x6d\x5a\xa9\x6e\x8f\xf9\xbd\xb9\x04\x38\x59\x66\x5e\x21" "\xea\x53\xa0\x50\xc3\x35\xca\xc4\x14\xbb\xf2\x7b\x03\x28\xac\x2c\x74" "\x50\xac\xb2\x6b\x09\x3b\xf2\x32\x35\x8a\xfd\x11\x35\xee\x50\xac\x3f" "\xb2\x6b\x5f\x02\x56\xcc\xdd\x37\x03\x3c\x8a\x59\x74\x06\x07\xcf\xd5" "\x49\xd4\xc6\x54\x0a\xfe\x4a\x6b\x44\x25\xae\x1f\x63\x38\x72\xdc\xfb" "\x5d\xa8\xd0\x54\x7c\xf0\xc4\x88\x88\x17\xb7\x1f\xbc\x7c\x45\xb2\xa6" "\x41\xe9\xc1\xa7\x6b\x6a\x6b\xe1\x24\x40\x24\x22\xad\xa3\x5e\xdc\x02" "\xed\x99\x7d\x6b\x87\xb3\x61\xae\xe9\x5a\x16\xd2\xc5\x28\xd8\x9a\x52" "\xfe\x40\xdf\xd8\x34\x34\x96\x9b\xd8\x6f\x02\xe6\x3f\xc1\xae\x72\x94" "\x12\x09\xaf\x39\xa0\x8c\xfb\xb4\xc3\x20\xbc\x47\xd8\x53\xf5\xdb\xaf" "\x0c\xd6\x0e\xc5\x46\x08\xaa\xdb\xc3\x82\xfa\x6b\x5c\xab\x3e\x9c\xac" "\x57\xbe\xa2\x66\x09\xf4\xc7\x9f\x6a\x6b\x4e\xb4\xa9\x33\x6f\xa9\x57" "\x83\xb0\xc0\xc3\x66\xf3\x6d\x5d\x6b\x83\x10\xb3\xcf\xdb\x80\x02\x07" "\x91\x9a\x13\x1b\xc7\xf9\x84\xf7\xfa\x11\xfd\x0b\xf2\xc8\x9e\x06\x0e" "\x9d\x12\x86\xe4\x53\xfe\x97\x36\x3e\xf7\x2b\xd6\xeb\xa2\x9a\x85\xff" "\xec\xcd\xc3\xbe\xe7\x2e\x12\x28\x43\x33\xa5\xa4\x06\x22\xc0\x16\x19" "\x55\x8d\x27\x50\xfc\x45\xab\xfa\x22\x05\x9e\xbd\xf7\x43\xf8\xe5\x0a" "\xd2\x97\x70\xd1\x9f\x84\xd8\xa3\x42\x32\xd6\x91\x85\x14\x76\x9b\x3b" "\xb2\xa1\xea\x5e\x59\xe9\x55\x63\x32\xba\x66\x96\x75\x76\x44\x58\xe9" "\x34\x9a\x18\x35\xc5\x01\xa9\x3e\x91\xdd\x3b\x31\x01\x89\x79\x88\x0a" "\x99\x13\xf5\x4e\xc1\xe8\x52\x6b\x8c\xff\xcb\x77\x6b\x97\xfb\xb9\x42" "\x4f\xaa\x5c\x5e\xb6\x0d\x2a\xc7\x49\x55\xbb\xa4\xb5\x18\x25\x71\xd0" "\xd9\xf8\x4f\x0d\xf1\xba\xa7\x22\xb2\x0a\x78\xc9\xc0\x01\x1c\x66\x7f" "\x68\x8b\x58\x48\x9c\x9e\x45\x0d\x83\xe4\x0a\xc5\xeb\x41\xc5\x56\x4b" "\x6d\x76\xa2\x26\x44\x8a\xbe\x4a\x3f\x49\x99\x27\x07\x41\x25\xaa\x9c" "\x0e\x7e\x70\x4c\x36\xdf\x5b\xb1\x10\xa0\xf1\x5f\x84\x33\xa4\x70\xe8" "\x1d\xb4\x14\x82\x7d\x5c\xe2\x1c\xa1\xda\x1c\x8d\x51\xd7\x46\xd1\xe1" "\xca\x11\x01\x27\xc1\x5e\x92\xaf\xd7\x5d\x3c\xd0\x5c\xe0\xb6\x32\xcf" "\xa0\x37\x45\xde\x3c\xdd\x4b\x57\x37\x3d\x46\x67\x65\x83\xc8\x9f\x04" "\x5c\x26\xc6\xfc\x57\x93\xe5\x48\x95\x55\xce\xd0\x8f\x83\xba\x35\x11" "\x35\x83\x4a\x20\x28\x11\x3c\x31\x9a\xf3\x0c\xc8\x5b\xc0\x1a\x7f\x82" "\x08\x82\x2d\x7d\x60\x7a\xed\x0d\x2e\x12\xc8\x0a\xa0\x09\x10\x04\x41" "\xb7\x5b\xea\xcc\xfe\x0a\xdb\xda\x7e\x8b\xb8\x70\xed\xf4\x96\x31\x58" "\x79\x4c\x8c\x3a\x5b\xaa\xcf\x6e\xec\x7b\x5e\xfa\xef\xb7\x60\x2d\xab" "\x84\x09\xd1\x61\xbe\xeb\x28\x1c\xba\x21\xf1\xda\x0c\xcd\xc0\x92\xd0" "\x43\x3f\xb9\x40\xd7\x96\x99\xff\xeb\x87\xea\x77\x58\x29\xa6\xe7\xe3" "\xb3\x08\xa2\xee\x0b\x7a\xec\x8a\xc5\xf3\x5e\xed\x61\xbe\x37\x4c\x7c" "\x77\x19\x6f\x71\x19\xa8\x88\x2d\xef\xf6\x82\x30\xf4\x61\xcb\x91\x7b" "\x0c\xcb\x2b\x85\x97\xef\xcb\xdd\x10\x03\xb7\xb7\x7b\x2c\x60\x1e\xbd" "\x4b\x45\xc3\x5b\x84\x26\xf7\xb9\x13\x8a\xb3\xdf\x0e\xc0\x08\x19\x60" "\x4a\xb8\xe1\xe6\x4c\xf2\xaa\x22\x82\xb1\x26\x95\x85\xaf\x12\x7a\x26" "\x8c\xd2\x07\xf9\x64\xed\xff\x17\x2e\x55\x53\x98\xa1\x6d\xf4\x4b\xdc" "\x52\x88\x95\x38\xc3\xa2\x7f\x8f\xbf\xff\xb6\x1f\x7a\xeb\x55\xb2\x59" "\x95\x2b\xbf\xea\x81\xd7\x30\x58\xd8\xb0\xf7\x8e\xce\x9d\xc0\x8e\x66" "\x04\x37\xd2\x1d\x4e\x3e\xc3\x8b\x19\xe5\xaf\xda\x7a\x6e\x33\x02\x3f" "\x91\x58\xdb\x8a\x1c\x14\xda\xbd\x9b\x8b\x30\x7d\xdc\x66\x92\x7f\x7b" "\x19\xdf\x5e\x0d\xa2\x23\x7d\x98\xdd\xd8\x90\xb8\x1f\x19\x63\x80\x89" "\x77\xd0\x21\x98\xe8\xae\x2e\x97\x41\x9d\xbb\x1f\x8e\x51\xca\xd3\x6a" "\x34\x24\xb9\x55\x50\x0f\xbd\xaa\xb6\xff\x8d\xbf\x02\x87\x08\xb1\xf9" "\x51\xfe\x43\x86\x4b\x59\xb6\xc2\x36\x8b\x81\x6c\x98\x02\x3d\x44\x80" "\xa9\x1b\x3f\x10\x59\xe9\xc2\x14\xbf\x55\xa7\xf8\xc7\xda\x90\x7f\x79" "\xff\x55\x68\xfd\x78\x7d\x3a\xa0\x22\xab\x9d\x03\xcd\xe5\x51\xf7\xe3" "\x29\x5f\x02\xc4\xf3\xaa\x37\xe4\xce\xbd\xd9\x68\xc0\xf8\x2f\x09\xeb" "\x00\x4f\xbd\xb1\xa4\xef\x3a\x0d\x42\x66\x91\xbd\xe3\x96\x4c\x29\xea" "\x65\x62\x2f\x5d\x3f\xfd\x85\x40\x53\x54\x5b\xa1\xec\x16\x44\x95\xe4" "\xbe\xf4\x84\x54\x39\xc0\x58\xf9\x43\x8d\x13\xbe\x79\x22\xb6\x56\xdb" "\x49\x9c\x24\x6e\xe6\x17\x6a\x15\xb9\x7e\x6a\x68\xe4\x2f\x0c\x70\x30" "\x33\xb6\x99\x50\x4e\x1f\x92\xb4\x30\x54\xc7\x23\x71\x99\xbd\x01\x3d" "\x96\xfa\xab\x47\x43\x3b\x6b\x3f\x91\xdc\x66\x36\x87\x06\x43\x9d\x4e" "\xf7\xda\x39\x42\xce\x8b\x9c\x1c\x9a\x9d\x06\x43\xfc\x45\x40\xe7\xd3" "\xf1\xc3\x82\x12\x67\xe8\x66\xca\xcd\x3e\x90\x4b\xe9\xf9\xdf\x80\x38" "\x1e\xec\x09\xeb\x2b\x0d\x74\x5f\xf0\x3f\xfb\x19\x9b\x91\x7a\x14\xfd" "\xd8\xfb\xfb\xff\xe8\xbf\xb0\xcf\x70\x23\xaa\x71\x83\x30\x1a\x8a\x41" "\xe7\x09\x7f\xf9\xf5\x24\x7f\x8b\x78\xf7\xd0\x8b\xbf\xc5\x96\xa8\x10" "\x47\x80\x7c\xf0\x92\x96\x77\x22\x2e\x7e\x9e\x92\x1b\x29\x4e\x04\x08" "\x8c\x37\x46\xd8\xdc\x19\x29\x46\x45\xf1\xc0\x93\xa2\x1b\x4c\x5e\x6d" "\x92\xe5\x4d\xd9\x04\x65\xb1\x1d\xd5\xd9\xd4\x2a\xf8\x49\x07\x0e\xdf" "\xf4\xec\x63\x97\x0f\x40\x88\xda\xaa\x33\xaf\xde\xbb\x28\xd0\x1d\xf5" "\xee\x04\x3a\x81\x50\xab\x1b\x25\xd8\x64\xef\x31\xe2\x0c\x84\x69\x65" "\x96\xcf\xbe\xa9\x2d\x02\xea\x29\xc4\xa3\x93\x3c\x41\xec\x68\xae\xe7" "\xd6\x8d\x7e\xea\x7f\x30\xd8\x92\x0e\x14\xe6\x2b\xe4\x2b\xcf\x85\x6d" "\x7a\x58\xf4\x6f\xdb\x24\x38\xb0\x23\xe9\x74\xf7\x72\x81\xc5\xa4\x62" "\x55\x36\x27\xe9\x61\x45\x04\xcb\xd3\xf1\xca\xe6\xe0\xfd\x9f\x7e\x89" "\xd9\xbc\xe4\x89\x46\xd0\x50\x86\x16\xfb\xe5\x42\x30\x3d\xc5\x42\x98" "\x2c\x61\xd7\xbb\x4a\xfb\xf3\xe7\x6b\xf1\xfb\x23\x81\xcd\xc9\x9f\x21" "\x75\xef\x94\x4d\xcd\x82\x6a\xab\xdc\xa2\xb7\x67\x8d\xb5\x26\x27\x33" "\xc6\x9c\xe5\x04\xc3\x8e\x7d\xeb\x7a\xdf\xb9\xb6\xd8\xbb\x00\xd8\xe4" "\x25\x1e\x04\x38\x41\x7e\xa6\x15\xcd\xe5\x8b\xd7\x6c\x24\x27\xb3\xd7" "\xa0\x57\x8b\xbb\xff\x9f\xde\x2a\xbb\xc5\xd6\x03\x07\xaf\xf0\x05\x0b" "\x18\x17\x61\x58\xaa\xed\xb3\x4e\x28\x38\x86\x37\x8f\xf7\x98\xb4\xf7" "\x4e\x0a\x0c\x95\xd6\x42\x71\xf1\x91\x62\x80\xdd\x24\x73\x04\xd9\x20" "\x1c\x67\xf5\xe2\x64\x0d\x97\x06\xad\xd8\x70\x3c\xac\x81\x79\x5a\x01" "\x90\x10\x7e\x2b\xb2\x94\x1e\xd1\x37\x38\x59\x5d\xa1\xc8\x6b\xa0\xf6" "\x8e\x22\x83\xa4\x35\xcb\x5f\x16\x2c\x74\x07\x1a\x13\xdf\xe2\x26\x6d" "\x05\xab\xae\xf0\x80\xdd\x6b\x1d\xad\xe1\x15\xe8\x83\xe0\x4f\x0b\xb4" "\xbe\x4d\x91\xf5\x35\xae\x6f\x82\x2b\x02\xe8\x14\xe6\x5d\x2b\x78\x07" "\xd1\x99\xa2\x3d\x3f\x26\x20\x9f\x6c\x9f\x93\x60\x2a\x3a\x93\xcc\xfd" "\xeb\xb5\xf8\x16\x1b\x79\x28\x05\x96\x74\xe1\x58\x20\xd1\x84\x8a\x98" "\x0c\x8d\x1a\xf5\xa7\x3a\xad\xc5\xc4\x02\xfb\xb6\xe7\x30\xba\x51\x22" "\x79\x13\xca\x27\xf0\xd7\x8d\x33\x1d\x63\x25\xd0\xa7\x92\x6c\x23\x82" "\x96\xb2\xa2\x2b\x10\xa6\x9c\xdf\xfe\xb0\x87\xdf\xe1\x75\x51\x1e\xd8" "\xe2\xcd\xe8\xd7\xda\xe1\x40\xe4\xce\x92\xf8\x92\xb1\x29\xd9\x94\x0e" "\x4a\x30\xb1\x9f\x82\x2e\xf7\x61\x1b\x87\x50\xea\xea\x8e\x55\x50\x26" "\x04\xb7\xd2\x35\x8c\x09\xa2\x17\xaf\x8b\xe6\xc8\x6d\x67\xcf\x6f\xf6" "\x13\x0c\x97\x1c\x97\x65\xd5\x66\x31\xfe\x62\x24\xfb\xe1\xe8\x33\xd4" "\x97\xb5\x34\xfb\xf6\xb0\x30\xaf\x93\x69\x1f\x59\x29\x52\x79\xaa\x1b" "\xdf\xb5\xd5\xd9\xd4\x66\x8d\x5a\xea\x70\xe2\xb8\xfc\x11\x7d\xf0\x04" "\x2e\x91\xc7\xe6\x22\x5f\x27\x32\x97\x27\xed\x6e\x14\xa8\x7c\x79\x43" "\xc0\x40\xdf\xee\x4e\x5c\x06\xa2\x02\x51\xc3\x9a\x45\xab\x48\x65\x95" "\x1b\x0d\xae\xfb\x9c\x05\x57\x1f\xdc\xc2\x1d\x17\x61\x94\x5b\xd2\xb8" "\x04\x7c\xce\xdd\x6f\x1e\x70\x86\x46\xfb\xe6\x1e\x75\xbb\x27\x28\xe8" "\xce\xe8\x93\xd7\xe6\xf6\x42\x11\x9e\x78\x61\x55\xa6\xcb\xab\x05\x7d" "\x6d\x83\xb7\x77\x16\x14\x51\x19\xe9\x74\xad\x73\x55\x17\x9d\x2a\xdc" "\x3d\x74\x8f\xa2\x49\xcb\x58\xe3\x2e\x67\x91\xd6\x46\x24\x0c\x05\xda" "\x44\x27\xb2\xf3\x59\x97\x6c\x8f\xd1\x48\x6c\x60\x4c\xb7\xee\x64\x7e" "\x24\x63\x3d\x8f\xca\x83\x14\xcf\x1f\x85\x11\x0c\xa6\x35\x11\x56\xa2" "\xb2\x6e\x44\xb0\x40\xf7\xd2\x81\x0a\xcd\x36\xf4\x5a\x39\x69\xc1\xfa" "\xfd\x1a\x7e\x0b\xc1\x4f\xd9\xb2\x65\x93\x37\x5b\xe8\xe7\x50\xc3\xf6" "\x53\x4f\xfb\x85\x90\x4d\x15\xd7\x5f\xba\x05\xda\xc4\xa6\x73\xde\x97" "\xf7\x54\x3e\xe9\x31\x72\x4c\xd3\x54\x74\xcd\x7f\xf5\xcf\x3e\x8a\xba" "\xf2\x06\xf3\x03\x0e\x92\x89\x56\x33\xfa\x9d\x84\x99\xea\x76\x36\x01" "\x56\x02\x60\x10\x9d\xad\x18\xbd\x64\xb9\x90\x53\x1f\xc5\x37\x7e\x6e" "\xaa\x5d\xa0\x50\xb9\x8e\x1c\x65\x15\xea\x48\xc7\xde\x1a\x15\xb6\x32" "\x83\xd4\xa6\x94\xcb\xad\x37\x93\x56\xbf\xda\xc5\x0e\x6c\x34\x38\x79" "\xe2\x9f\x6b\x9a\xb4\x25\x60\x0d\x51\xf2\x57\xce\xb3\x5d\x0c\xa0\x0f" "\x83\xcf\x5b\xd7\x34\x22\x3d\xe7\x16\x74\x76\x14\x66\x6b\xa1\xf1\xa8" "\xfa\x75\x6e\x5f\x3f\xf0\xfc\x94\xfa\x4b\xd4\x07\x3b\xdd\xb0\x09\x8c" "\xf5\x65\xee\x40\xaf\x57\x32\xee\x92\x18\xd2\x62\xe5\xb6\x4a\xd6\xb8" "\x11\x8c\x54\xee\xaf\x70\x72\xf2\xe1\x55\x14\xa4\x01\x77\x9b\x42\x5f" "\xa8\x9d\x8a\xbb\x17\x50\xe5\x6c\xc3\x10\x8d\xff\xdc\xf2\xd3\xfd\x86" "\xb8\xaf\x45\x60\xd5\x6f\x7f\xf0\x70\x21\x54\x21\x1f\x99\x49\xe3\x99" "\x2d\x93\xe6\x68\x92\xb2\x97\xfa\x2d\x4b\xfe\x18\xde\x3f\xd7\x4e\x96" "\xc9\xd3\x0e\xb1\x4f\xd4\x58\xfd\xbc\x9e\x9a\x34\xe0\x0f\x32\x80\xdd" "\x73\x25\x20\x14\x7f\xa2\xa8\xfa\x83\xe9\x1d\xd0\x68\x75\x01\x46\x6a" "\x30\x00\x15\xbf\x88\x8c\x03\xfc\x08\x19\x0c\x27\x53\xd7\x71\x9a\xcf" "\x6f\x84\x88\x5c\x4c\x56\x42\xf4\x66\xc1\x98\x4f\x15\xa7\x71\x6a\x9b" "\x60\x8e\xe5\xf1\xb3\x95\x72\x6b\xcc\x85\x19\x76\x66\x67\xd2\x4d\x11" "\xe3\x96\xe6\x2e\xa3\x96\x40\xc9\xe7\x3e\x4e\x9e\x9e\x50\x76\xd7\x01" "\x9c\xa1\xbe\xbb\xd7\x09\x78\x07\xf4\x6b\x3b\x6f\xcb\x96\xed\x4b\x43" "\x3b\x25\xec\x55\x1f\xb1\x76\xa5\xfa\x25\x2e\xd1\xd8\x1b\x03\x50\xcf" "\xdf\xb8\x06\x9c\x99\x16\x49\x5b\xef\x3a\x26\x2b\x66\x68\x91\x08\x96" "\xc0\xb3\x7e\xee\x40\x54\x7c\x66\x3a\x90\x1e\x92\xf4\x1b\x41\x7a\xc5" "\x0e\x88\xd0\x58\xd0\x21\xa8\xf9\xa5\x78\x3b\xd9\x36\xcc\xa4\x96\x2b" "\xec\x1c\x98\x86\x68\x9c\xc5\x47\x97\x0f\x92\x15\x23\x25\x96\x39\x25" "\x15\x18\x2e\x56\x3f\x72\x0b\xb7\x9d\x29\xba\xaa\xbf\x0e\x26\x97\xde" "\x65\x00\xbc\x67\x7e\x34\x68\x47\x01\x1e\xe3\x45\x03\x58\xc0\xb1\x6c" "\xa5\x28\x36\x8b\x5c\xbb\x8d\xf5\xab\x97\x4a\x3c\xef\x07\x2d\x20\xc9" "\x90\x6f\xa5\x85\xe0\xf3\x08\x3e\xc6\xd8\x50\x7b\x85\x61\xf6\x4e\x65" "\xaa\x1a\xec\xf8\x25\xfc\x47\xad\x14\x59\xc8\x77\x71\x54\x9f\xd5\xc9" "\xa9\xcc\x09\x4e\x7b\x11\x79\xee\x1e\x90\xef\xf7\x15\x8f\x28\xf5\x9f" "\x02\x9d\x90\xe7\x08\xf4\xec\x50\xb4\xf6\x7d\x8b\x4b\xb7\x14\x00\x65" "\x52\x83\x54\xa7\xe2\x5d\x63\xe9\x29\x77\x18\x3a\x02\x84\xec\x22\xaa" "\x92\x32\x10\xf0\xbf\xea\x89\xcc\xa5\x35\x47\x13\x73\x81\xe5\xde\x0f" "\x60\xbc\x48\x4b\xc2\xda\xf1\x29\xb0\x38\x02\x44\xf1\xed\x4b\xfb\x67" "\x4e\xb2\x79\x1e\x76\xdc\xe3\x3c\xae\x68\x4a\xd3\x66\x20\xd5\xd6\x7c" "\xb5\x87\xf8\x40\xca\xed\x31\x6b\x74\x39\xb0\xe8\xc3\xde\x0e\x06\x5e" "\x62\x68\x0f\x39\x97\x36\x9b\xe3\x46\x66\x70\x27\x81\x68\xc9\xa1\xa6" "\x44\xd8\x70\xe3\xa8\xd0\xa7\x9b\x2b\x72\x0e\x8c\x3c\x51\xbb\x91\x33" "\x53\x2b\xee\xe6\x43\x19\xe9\x87\x14\xbb\x2e\x6d\x5c\x0b\x72\x39\x62" "\xd9\x23\xb0\xef\x45\x43\x61\xd4\xb3\xcb\x47\x0b\xf8\xc3\x90\x31\xed" "\x4a\x75\x26\x7f\x49\x97\x41\xbe\x15\xaa\xca\xc9\x2d\x8e\x6a\xfd\xcb" "\x01\xa2\xe7\xd2\xdb\xf5\x49\xce\xb2\xa2\x10\x8c\x40\x79\xc6\x20\xf0" "\x5c\xa1\xbd\x31\xd6\x31\xc2\xc8\xd3\x5c\xa0\xd7\x31\x55\xf5\x6e\xd0" "\x20\xc2\x5e\x38\x9d\xb3\x56\xed\xf5\x10\xae\x08\x8d\x11\xb5\xe4\xfe" "\xd5\x1d\x0d\xce\x4d\x3a\xa0\x49\x24\xb0\x9c\x28\x20\x0e\xde\x5b\xec" "\x1a\x8f\x38\xcc\x5f\x08\x10\x55\xe0\xf2\x8d\x75\xaf\xc4\xd5\x88\xca" "\x0e\x82\x8d\x00\x08\x5d\x15\x0b\xea\xfd\xda\x17\xb8\xdf\x9e\x7d\x92" "\x18\xea\x7d\x81\xf2\xe0\x76\x41\x29\x01\xc5\xae\x04\xd6\x92\x9d\x71" "\x7f\xea\x2f\xcc\x8e\x5a\x1e\x69\xdb\xd7\xb5\x25\x87\x99\xa2\xfa\x5e" "\xb1\x08\xb6\xcc\x35\xdf\xab\x59\x9f\xb2\x7e\x6d\x75\xf1\x03\x0b\x83" "\xf4\x52\xaf\x81\x37\x83\x03\x37\x14\x1f\x03\x19\x42\xeb\xa8\x31\x23" "\xd3\xf8\x7b\x5f\x01\x62\x3d\x46\x13\xe5\xa4\x4b\x49\x52\xc3\x00\xba" "\xf3\xd4\xd3\xdb\xbf\xb0\xad\x02\x4a\x19\xb3\x81\x0a\x17\x4e\xf8\x45" "\x3d\x85\xa2\x58\x22\xf6\x6e\x45\xeb\xa2\x49\x0f\x29\xde\x10\x77\x68" "\x3c\xcc\x32\xe3\x51\x7f\x88\xb5\x1e\x01\x06\x72\xa9\x82\xf7\xc8\x59" "\x14\x50\xc9\xab\x15\x73\x14\x3a\xef\xb6\x1c\x17\xeb\xb0\xc9\x2d\xcb" "\x04\x94\xd1\x16\xb9\x70\xc2\xa8\x27\xa6\xb3\x60\x8a\xe1\x0d\x58\x3d" "\x1f\x7d\x09\x22\x63\xfa\x87\x3d\xe9\xf3\x1c\xd5\x9b\xc9\x49\x1f\xf0" "\x12\x05\x9b\x63\xa9\x12\x0a\xf8\x94\x77\xf2\xcc\xc3\x4e\xee\x7b\xd6" "\x6d\xe6\x0a\xf6\x47\x30\xc8\x79\x12\x8b\x49\xd3\x1d\xa6\x40\x0c\x24" "\x71\xe0\xd5\xab\xf7\x07\xe5\x60\x57\x4b\x47\x7b\x8e\x20\xca\x45\xd9" "\x21\x82\xd6\x39\xeb\x43\x4e\x14\xae\xa1\xa3\xf9\x1a\xd8\xfb\x60\xe4" "\x85\x9b\x77\x38\x97\x53\x99\x05\x13\x18\x1e\xa3\xa8\x28\x84\x23\x5e" "\x85\x20\x29\x43\x59\x43\x5c\xfb\xa2\x20\x50\x2b\x59\x1f\xc2\x8a\xc3" "\x6e\xc6\x97\x44\x26\x57\xd2\x90\xbd\x7a\xad\x7f\xce\x53\xa3\xf1\x76" "\x6f\x2b\xf7\xd5\x5c\x24\xd7\xc0\xe9\xc7\xa7\x1d\x6f\x12\x82\xea\x14" "\x78\xe0\xa3\x63\x78\xb5\x0e\x4f\xee\x28\x1f\x68\x6b\xc5\x3f\x50\x13" "\x80\x36\xe2\xa5\xd6\x19\x9d\x40\xca\xff\x08\x4f\xde\x7b\x63\xb3\xc0" "\xa4\x7d\xa0\x79\x11\x07\xc3\x21\x83\x30\xf7\xc2\xe2\xc7\x60\x9a\xba" "\x20\x2f\xae\x52\x90\x24\x3b\x60\x33\x37\x9e\xb1\x5e\xdc\x57\x2e\xee" "\x45\x20\x08\xe0\x4c\x9b\x53\xef\xd5\xf3\xd8\x83\x27\x31\x7b\x38\x93" "\x47\x45\xbc\x3d\xe4\xc5\x5b\xd8\x18\xfe\xbc\x7a\x79\x53\xbf\x03\xc4" "\x02\x9f\x77\x17\x7c\x2a\x97\x43\x10\xf0\x48\x5a\xa4\x62\x52\xf1\x00" "\x0d\xc7\x19\x34\x94\x72\x87\xc3\x8e\xa5\x85\x4f\x29\xc7\xb8\x2f\x63" "\x0a\xfb\x8c\xaf\x1f\xd8\x80\x67\x03\x07\xb1\x55\xa6\xe7\xfe\xdd\xc0" "\x19\xcf\xbb\xbd\xc1\x8f\x3b\xc0\x3d\xa3\xbd\x37\x1d\x93\xcc\xbf\x56" "\xbc\xb3\x9e\xea\x55\xc2\xd1\x13\xef\xc1\x48\x12\x7c\x30\x08\x9d\x21" "\xce\x6a\x50\x88\xdb\xfb\xcf\x8f\x8d\x75\xc1\x94\x56\xbc\x96\x2c\x37" "\x15\x48\x63\x4a\x95\x38\x2a\xcb\x5a\x08\x86\xef\xc4\x6a\x87\xbd\xc1" "\x11\xdc\x0d\x1e\x54\x08\x4c\xea\x0d\x58\x05\x4f\x00\x76\x2c\x91\xd7" "\xfe\x0f\x0f\xbc\xf4\xc2\x80\xf2\x9f\x9c\xd5\x99\x9a\x5e\x8c\x6f\x50" "\x7f\x80\x80\xd7\xc7\xea\x9a\x86\x85\xbe\x50\x72\x2c\xf1\xa0\x82\xf3" "\x72\x8d\xec\x8d\x61\x52\xcd\xc7\x2f\x8d\xa6\xb1\x80\x56\x43\xc0\x42" "\xf4\xf6\x78\x0b\xa7\x9c\xc8\xa2\x16\x5d\x9d\x7a\xce\xc8\xab\x2f\x42" "\x1b\xc3\xe7\x7b\x51\xc6\x2c\x4b\xbb\x26\x2b\x56\x74\xea\x7d\x2d\xcf" "\x9a\xcb\x89\x4d\x05\x0e\x91\xb0\x52\x36\x43\x22\xa5\xb0\x8b\xd9\x66" "\x72\x49\x57\x1c\x00\x4f\xb4\x95\xda\x7e\x24\xfc\x56\x20\xad\xda\x3a" "\xf6\x84\x8c\xcf\x23\x89\x11\xa5\x2b\xdb\xff\x76\x6e\x4e\x27\x9a\xc2" "\x74\xaf\xa2\xc2\x30\x2f\xab\xa2\x5b\x5f\xe9\x8d\x97\x2a\x04\xaa\x13" "\xf7\x7c\x0c\x05\xd7\xdd\x82\xb0\xa1\x9f\x1d\xed\x8c\xf5\xf9\x9c\x80" "\xe3\x92\xb0\xaa\xb1\x26\x4a\x29\xe9\xfb\xcf\x0b\x69\xf6\xb0\xa9\xf2" "\x33\x2e\x09\xab\x74\xde\xa7\x27\x71\x06\xd0\x88\x3b\xb2\x64\xe2\x79" "\xc6\x7e\x5b\xc6\x90\x09\x22\x5b\xf4\xfd\x1a\x85\x32\xf9\x39\x2a\x01" "\x1b\x55\xa7\x3a\x7c\xf8\xd1\x6a\x59\xd6\x95\xb2\xa6\x5b\x57\xfa\xd6" "\x4a\x20\x41\xf8\xc2\x88\x04\xee\x1a\x48\x84\x5c\x5d\xab\x75\x7d\x04" "\xf1\xd9\x55\x20\xaa\x9d\xdb\x69\x90\x4d\x65\x29\xc0\xe1\x4b\xd7\x89" "\xdf\xe3\x70\x67\x07\x3b\x3e\x0e\x13\x6a\xe2\xae\xbb\x1c\x34\xc5\x5b" "\x94\xce\x94\x2f\x78\x6b\xe4\xb4\x5f\x80\x1f\x35\xf7\xc7\x68\xd9\x1a" "\x46\x0b\x92\xff\xa5\x7f\xf6\x75\xf0\xb4\xb0\x04\x37\xa0\x7f\x87\x1a" "\x86\x50\xf2\x1b\x2b\xf7\xc7\x22\xc1\xd9\xe8\x60\xe8\x95\x5f\xef\x56" "\x99\xee\x53\xa5\xf6\xfe\x46\xfb\x9e\x5e\x17\xa1\xc6\x9f\xe2\x53\x8a" "\xf4\x71\x8b\x72\x15\xad\x2c\x00\xc3\xd4\x20\x58\x9a\x86\x53\xee\x51" "\x1b\x80\x99\x45\x45\x1f\xb8\x20\x5b\x19\xce\x37\x7c\x8d\x02\x53\xb0" "\x54\x93\xc5\x57\xcf\x2b\xd8\xef\x20\x8e\x8f\xc0\x1b\xec\xee\xa1\xac" "\xca\x38\xd0\x25\xf3\x28\xf2\x8d\x69\xbc\xfa\xa3\xad\xc6\xd9\x57\x3a" "\x38\x32\xdc\x3f\x3c\x75\x8f\xe0\x8c\xf9\xcd\x0c\x32\xac\xfd\xda\xe8" "\x1b\x36\x82\x86\x9e\x8a\xa9\x72\x5b\x64\x33\x62\x52\xae\xb2\xee\x8e" "\xb7\x8f\x07\x21\xaa\x31\x58\x21\x7a\x30\x09\x94\x8a\xdb\x29\x7c\x5e" "\xa4\x5e\xc2\x6c\xb6\xd9\x63\xc7\xbe\x47\xee\x1b\x93\xfa\x13\x6e\xbe" "\x73\xa2\x19\x36\xdf\x01\x48\xfa\x31\x12\x06\xf8\xbc\xa2\xe8\x07\x19" "\xae\xca\x87\x45\xff\x74\xdd\xaa\xd5\x18\x26\x44\x76\x2c\x66\x33\x3f" "\x94\x2d\x9a\x93\xc4\x67\xd5\xf9\xfd\x5d\x0d\xbb\xe5\x74\x80\x36\x2d" "\x4b\xb0\xf7\x60\x29\x4f\x4e\xba\x3e\x1b\x08\x04\x7d\x25\x6d\xbd\xa1" "\x57\x63\x5d\x21\xa4\x3a\xff\x3a\x71\xf6\xad\x57\x4b\x40\x2b\xb3\x6e" "\x52\x70\xd7\xed\x08\x2c\x6f\xba\xe0\x77\x71\x72\x15\x13\xae\x9d\xdb" "\x22\xd2\x3b\x00\x73\x30\x46\xc8\x98\xee\x6a\xc0\x5e\xf8\xa5\x1c\xe4" "\x19\x19\xe1\xf2\x41\xcb\x98\xe0\x59\x2a\xce\x68\x21\x46\x20\xba\x1a" "\x74\x8e\xf8\x11\x31\x66\x1f\x58\xf1\x63\x57\x13\xca\x28\x73\xe1\x50" "\xa3\xe8\x48\xc8\xd2\xeb\xd0\x39\x76\x9f\xda\x11\x2b\x73\x05\x0e\xfa" "\x4d\x1c\x35\xdb\xb4\x6c\xa5\xa7\xb7\xcc\xbe\xd1\xdc\xde\xd3\x6a\xf2" "\x72\xf6\x83\x8b\x4c\x1e\x7e\x67\x78\xe7\xe9\xca\x3d\x79\x4f\x27\x5d" "\x49\xc9\xe3\x2e\x76\x80\x97\x34\x91\x18\xd2\x33\x7e\x7c\x03\x1a\xda" "\x38\xd0\xcc\x5c\x04\xc2\x86\xff\x93\x08\x3f\x6d\x58\xd7\x3a\x82\x11" "\x18\xc9\x34\x32\xfd\xa9\xa8\xc7\x6f\xa2\xcb\xcc\x09\x3a\x7d\xec\xac" "\x8e\x4f\x00\x1e\xcc\x9f\x67\xfa\xf1\xc2\xf1\x02\x12\x0f\x06\x18\x46" "\x9c\xf6\x53\xbb\xd5\xfc\xef\xd4\xef\x2b\xae\x86\xdc\x4f\x53\x93\xb8" "\x40\xf9\xf4\x71\x40\xcf\x7f\x46\xa1\x86\xc2\x18\x78\xa4\x36\x12\xa7" "\x1d\x3b\x54\x0b\x99\x94\xf0\x10\xab\x62\x3f\x87\x82\x64\xcf\x46\xc7" "\x36\x6d\x0b\xec\x5d\x43\xd4\x81\xb4\x78\x46\x09\x1f\xd3\xcd\xa7\x3a" "\x9a\x28\xce\xb7\xf8\x39\xec\xa6\x95\xc9\xf0\x84\xa1\x6c\x81\x24\x75" "\xf6\x57\x5e\xf2\x36\x8c\x88\xcc\x66\x55\xf4\x76\x63\xef\x69\xce\x47" "\x79\xfe\x3c\xcc\x4d\xd8\x5a\x07\xa9\xe4\xc6\xf3\x9f\x42\x69\x0d\x23" "\x1f\x57\x27\xf4\x5c\x24\x7a\x53\xfd\x8d\xf0\x29\xfc\xef\xda\x4f\x32" "\x86\x58\x43\x58\x92\x51\x9c\x17\x20\x5a\x3c\x71\x5a\xd6\xbb\x73\x87" "\xd0\x9a\x5e\x38\x7c\x83\xf0\x08\xda\xf6\x26\xf5\x97\x7c\x66\x20\x3a" "\xf1\x14\x3e\xf7\xb5\x9c\xcd\x8e\x3c\x17\xbb\x15\x6b\xca\x31\x78\x61" "\xf0\xb9\xf2\x22\xea\x63\xc0\x44\x07\x5a\x3a\x74\xbe\xaf\x05\xc2\x3d" "\x0a\x75\xca\xa6\x03\x97\xd8\x31\xbb\xe5\x07\x23\x4f\xff\x15\x49\x60" "\xfa\xf0\xf0\x27\x76\xd3\xf9\x03\x8c\x95\x5b\xf0\xc1\xec\x9c\x92\x52" "\x3c\xf0\xb8\x55\xc1\x8d\x6a\xc3\xb3\x5d\x43\x77\x96\x42\x0b\xa3\xdf" "\xd5\x81\xdc\x6a\xda\xc6\x43\x15\xc1\xcb\x1a\x2c\x3a\x45\xec\x46\x55" "\xbb\x2b\xd6\xe0\xb4\xa3\x08\x22\x81\xed\x06\x97\xa2\x13\xd1\xd9\x31" "\x42\xe9\x6b\x4f\xd5\x74\x31\xd2\xf4\x54\x74\x51\xd0\x08\xab\x58\xbc" "\xd9\x76\x5c\xcf\x3c\xa3\x29\x7b\xec\xd5\xde\x9e\x2b\xe0\x26\x3c\xfc" "\xa0\x99\x35\xc9\x33\x4b\x5e\x68\x7b\xc7\xe7\x05\x7d\xc2\xed\x03\x87" "\x3b\xe2\x22\x00\xc9\xfe\x32\xa9\x49\x7d\xd0\x0a\x33\x6c\xf4\xc7\x23" "\xea\xd3\x02\x34\x0b\x5c\xd1\xfe\xf8\xcd\x88\x33\x0a\x90\x89\xfc\x93" "\xaf\x4e\xf7\x39\x29\x5b\x94\x40\x7b\x29\x1b\xf3\x3f\x4f\x39\xc9\x36" "\x73\x6e\x11\x66\x10\x64\x28\xf8\x79\x6a\x4b\x92\x80\x5f\x4d\xfc\xf4" "\x6d\x86\x92\xb5\x4e\x40\xa9\xe8\x58\x4c\x0e\xaa\xc4\xca\xad\xa8\x7b" "\xb3\x3f\x55\x3e\xaf\xee\xf5\x05\x1b\x88\x94\x02\x17\x6a\xb7\x66\x93" "\x6a\x38\xdd\xd7\xe5\x20\x5d\x2c\x87\xe1\x33\xa0\x2e\x84\xab\x24\xba" "\x2d\x88\x9a\x4c\x4d\xb8\xcb\xe1\x8b\x27\x14\x55\xe8\x4d\xa7\x16\xf4" "\xa3\x2a\xcd\xbc\x0a\x5a\xab\xa2\x5a\x2e\xc7\x57\xc7\x38\x47\xdd\x1c" "\x4c\xcb\x29\x67\xc6\x51\xe5\x25\x76\x92\xa4\x55\x3d\xde\x22\x78\x46" "\xbf\xe2\x97\x70\x21\x80\x5f\x46\xa2\x87\xc8\x35\xea\x8d\xc5", 8192); *(uint64_t*)0x2000000015c0 = 0; *(uint64_t*)0x2000000015c8 = 0; *(uint64_t*)0x2000000015d0 = 0; *(uint64_t*)0x2000000015d8 = 0; *(uint64_t*)0x2000000015e0 = 0; *(uint64_t*)0x2000000015e8 = 0; *(uint64_t*)0x2000000015f0 = 0; *(uint64_t*)0x2000000015f8 = 0; *(uint64_t*)0x200000001600 = 0; *(uint64_t*)0x200000001608 = 0x200000000440; *(uint32_t*)0x200000000440 = 0x10; *(uint32_t*)0x200000000444 = 0xffffffda; *(uint64_t*)0x200000000448 = 0x3ff; *(uint64_t*)0x200000000450 = 0; *(uint32_t*)0x200000000458 = 0xb; *(uint32_t*)0x20000000045c = 0; *(uint64_t*)0x200000001610 = 0; *(uint64_t*)0x200000001618 = 0; *(uint64_t*)0x200000001620 = 0; *(uint64_t*)0x200000001628 = 0; *(uint64_t*)0x200000001630 = 0; *(uint64_t*)0x200000001638 = 0; *(uint64_t*)0x200000001640 = 0; syz_fuse_handle_req(/*fd=*/r[0], /*buf=*/0x2000000062c0, /*len=*/0x2000, /*res=*/0x2000000015c0); break; case 5: // write$FUSE_INIT arguments: [ // fd: fd_fuse (resource) // arg: ptr[in, fuse_out_t[fuse_unique, fuse_init_out]] { // fuse_out_t[fuse_unique, fuse_init_out] { // len: len = 0x50 (4 bytes) // err: fuse_errors = 0x0 (4 bytes) // unique: fuse_unique (resource) // payload: fuse_init_out { // major: const = 0x7 (4 bytes) // minor: const = 0x2b (4 bytes) // max_readahead: int32 = 0x0 (4 bytes) // flags: fuse_init_flags = 0x10004004 (4 bytes) // max_background: int16 = 0x0 (2 bytes) // congestion_threshold: int16 = 0xfffe (2 bytes) // max_write: int32 = 0x0 (4 bytes) // time_gran: int32 = 0x2 (4 bytes) // max_pages: const = 0x0 (2 bytes) // map_alignment: const = 0x0 (2 bytes) // flags2: fuse_init_flags2 = 0x100 (4 bytes) // max_stack_depth: int32 = 0x0 (4 bytes) // unused: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 // 00 00 00 00 00 00 00 00} (length 0x18) // } // } // } // len: bytesize = 0x50 (8 bytes) // ] *(uint32_t*)0x200000004200 = 0x50; *(uint32_t*)0x200000004204 = 0; *(uint64_t*)0x200000004208 = r[1]; *(uint32_t*)0x200000004210 = 7; *(uint32_t*)0x200000004214 = 0x2b; *(uint32_t*)0x200000004218 = 0; *(uint32_t*)0x20000000421c = 0x10004004; *(uint16_t*)0x200000004220 = 0; *(uint16_t*)0x200000004222 = 0xfffe; *(uint32_t*)0x200000004224 = 0; *(uint32_t*)0x200000004228 = 2; *(uint16_t*)0x20000000422c = 0; *(uint16_t*)0x20000000422e = 0; *(uint32_t*)0x200000004230 = 0x100; *(uint32_t*)0x200000004234 = 0; memset((void*)0x200000004238, 0, 24); syscall(__NR_write, /*fd=*/r[0], /*arg=*/0x200000004200ul, /*len=*/0x50ul); break; case 6: // openat arguments: [ // fd: fd_dir (resource) // file: ptr[in, buffer] { // buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8) // } // flags: open_flags = 0x0 (4 bytes) // mode: open_mode = 0x42 (2 bytes) // ] // returns fd memcpy((void*)0x200000000140, "./file0\000", 8); syscall(__NR_openat, /*fd=*/0xffffff9c, /*file=*/0x200000000140ul, /*flags=*/0, /*mode=S_IWOTH|S_IXUSR*/ 0x42); break; } } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000ul, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); const char* reason; (void)reason; do_sandbox_none(); return 0; }