// https://syzkaller.appspot.com/bug?id=5689aff48689f3ca418d44391fe4a4390a1ac21a // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } static void kill_and_wait(int pid, int* status) { kill(-pid, SIGKILL); kill(pid, SIGKILL); for (int i = 0; i < 100; i++) { if (waitpid(-1, status, WNOHANG | __WALL) == pid) return; usleep(1000); } DIR* dir = opendir("/sys/fs/fuse/connections"); if (dir) { for (;;) { struct dirent* ent = readdir(dir); if (!ent) break; if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0) continue; char abort[300]; snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort", ent->d_name); int fd = open(abort, O_WRONLY); if (fd == -1) { continue; } if (write(fd, abort, 1) < 0) { } close(fd); } closedir(dir); } else { } while (waitpid(-1, status, __WALL) != pid) { } } static void setup_test() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setpgrp(); write_file("/proc/self/oom_score_adj", "1000"); } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 8; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); #define WAIT_FLAGS __WALL static void loop(void) { int iter = 0; for (;; iter++) { int pid = fork(); if (pid < 0) exit(1); if (pid == 0) { setup_test(); execute_one(); exit(0); } int status = 0; uint64_t start = current_time_ms(); for (;;) { if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid) break; sleep_ms(1); if (current_time_ms() - start < 5000) { continue; } kill_and_wait(pid, &status); break; } } } uint64_t r[3] = {0xffffffffffffffff, 0x0, 0xffffffffffffffff}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000400, "./file0\000", 8); syscall(__NR_mkdir, 0x20000400ul, 0ul); break; case 1: memcpy((void*)0x20002080, "/dev/fuse\000", 10); res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20002080ul, 0x42ul, 0ul); if (res != -1) r[0] = res; break; case 2: memcpy((void*)0x200020c0, "./file0\000", 8); memcpy((void*)0x20002100, "fuse\000", 5); memcpy((void*)0x20002140, "fd=", 3); sprintf((char*)0x20002143, "0x%016llx", (long long)r[0]); memcpy((void*)0x20002155, ",rootmode=00000000000000000040000,user_id=", 42); sprintf((char*)0x2000217f, "%020llu", (long long)0); memcpy((void*)0x20002193, ",group_id=", 10); sprintf((char*)0x2000219d, "%020llu", (long long)0); syscall(__NR_mount, 0ul, 0x200020c0ul, 0x20002100ul, 0ul, 0x20002140ul); break; case 3: res = syscall(__NR_read, r[0], 0x200021c0ul, 0x2020ul); if (res != -1) r[1] = *(uint64_t*)0x200021c8; break; case 4: *(uint32_t*)0x20004200 = 0x50; *(uint32_t*)0x20004204 = 0; *(uint64_t*)0x20004208 = r[1]; *(uint32_t*)0x20004210 = 7; *(uint32_t*)0x20004214 = 0x20; *(uint32_t*)0x20004218 = 0; *(uint32_t*)0x2000421c = 0; *(uint16_t*)0x20004220 = 0; *(uint16_t*)0x20004222 = 0; *(uint32_t*)0x20004224 = 0; *(uint32_t*)0x20004228 = 0; *(uint16_t*)0x2000422c = 0; *(uint16_t*)0x2000422e = 0; *(uint32_t*)0x20004230 = 0; *(uint32_t*)0x20004234 = 0; *(uint32_t*)0x20004238 = 0; *(uint32_t*)0x2000423c = 0; *(uint32_t*)0x20004240 = 0; *(uint32_t*)0x20004244 = 0; *(uint32_t*)0x20004248 = 0; *(uint32_t*)0x2000424c = 0; syscall(__NR_write, r[0], 0x20004200ul, 0x50ul); break; case 5: memcpy( (void*)0x2000a680, "\x34\xb2\x5b\x61\x8f\xbf\x04\x3c\xe2\x6f\xb3\x95\x63\x03\x92\x9b\x6a" "\x42\x69\x67\xa8\x7f\x87\x57\x24\x32\x45\x37\xa5\x79\x40\x72\xbe\x9f" "\x86\x33\x69\x4b\xe0\xf6\x85\x9e\x7b\x2c\x48\xfa\xd3\xce\xf3\xd9\x2c" "\xb7\x25\x40\xa1\xaf\x06\x02\xc5\x6f\x9c\xe0\x53\xb0\x27\xf5\x22\xa4" "\x0b\xa9\x48\xa9\xe3\xaf\xab\xbb\xec\x50\x79\xdd\x6e\xd7\x4b\x5e\x15" "\xe5\xd2\xb8\xf5\x2b\xb1\x2b\x66\xfe\x26\x33\x89\x7d\x46\xb8\xb2\x02" "\x49\xd1\x58\xa0\xc2\xa3\x23\xe3\xdf\xee\x4c\x84\x8f\x31\xaf\xf2\x5e" "\xf6\x54\xf3\xa1\x59\x22\x2e\x03\x2a\x10\xdf\x3a\x75\x20\xfb\x89\xfd" "\x5f\x2e\x8a\xe5\xf9\x6d\x36\x99\x43\x61\xa4\xcc\xc9\x00\xbc\x78\xb7" "\x81\x8d\x60\x94\xce\x0b\xd5\xe5\x7e\x3d\xb6\x49\xb6\xec\x2b\x3f\x62" "\x59\x27\xa1\x0c\x2c\xa0\x4f\x89\xb9\x11\x2b\x88\x57\x61\xdf\x70\x48" "\xba\x48\xf7\xca\x2b\xe4\x5c\x83\x5c\x9b\xc8\x7b\x39\xb6\x1d\x10\x33" "\x37\x5e\x3b\x1b\xc7\x6b\x61\x00\x59\xf8\xa3\x99\x65\x39\x98\xd7\x0e" "\x71\xf4\xc7\x40\xbf\x38\x0a\x80\xab\x47\x31\x16\xef\xf9\x59\x2d\xf5" "\xd0\xe8\x31\xdc\x37\x65\x86\x43\xc6\xff\x53\x2f\x2c\x58\xab\x77\x4f" "\xd0\x47\xc1\xb1\x09\xac\x22\x9d\x16\x33\x94\xf6\xab\x9f\x03\x56\x1d" "\x54\xc3\x2b\x94\x29\x93\xe2\x03\x22\x1a\x2e\xad\x1d\x4f\xbe\xad\xb2" "\x9d\xef\x57\x0c\x12\xde\x6d\xfa\xc2\x1d\x43\x2f\xd0\x08\xf3\x45\xdd" "\x3c\x93\x66\x39\xe4\x5a\xb8\xbb\xac\x18\x8b\x2e\x44\xc6\xd7\x52\xd9" "\x3e\x8c\xa8\xe2\x6b\xac\x0e\x76\xac\xf4\x29\xcd\xf8\xcf\x48\x99\x77" "\x1f\xfd\x27\xa1\x21\x05\xc1\xe8\xa1\x0f\x70\x8b\x94\x01\x63\x88\x7d" "\x6b\x4f\xd3\x92\x63\x75\xf1\x4d\x2f\x62\x5d\x63\x14\xe8\x9d\x39\x5f" "\xd5\xc3\xc9\xa5\x66\x33\x31\xe1\x34\x35\xe3\x6b\x61\x88\x92\x44\x58" "\x3c\x3b\xb5\x86\x39\x4f\x66\xa7\x76\xb8\x48\x03\xdf\xb0\xef\x56\x96" "\x4c\x76\xe8\x78\x97\x9b\xdb\x9d\x9d\x7f\x60\x2e\x99\xd5\x6a\x99\xea" "\x0a\x0f\x6d\xa6\x5a\x6d\xc6\x22\xc3\x57\xa4\xfb\x03\xd0\x6b\xf9\x28" "\x1b\xcd\x6f\xf1\x1f\xe3\xf3\x6d\xf7\x1b\x48\xb4\x92\xd4\xcb\x73\xc0" "\x12\x63\xa9\xb4\x7e\x7c\x66\x15\x90\xb7\xab\x2a\xff\x72\x76\x51\x61" "\xd3\xcc\xf4\x39\x6c\xa6\x7a\x23\x19\x02\x68\x41\x25\x2e\x21\x81\x0b" "\x40\x80\x6c\xfd\x8a\x25\x1d\x36\x2b\xe7\x4e\x41\x11\xa2\xd0\xd6\x47" "\x27\xbf\x3b\x9b\x46\xec\x55\xdd\x1d\x54\x19\x5b\xdc\xf2\xc2\xf9\xae" "\x26\xec\xe6\x29\x00\x67\xe8\x8b\x18\x4d\xc1\x25\x16\x91\xcc\x55\x79" "\x5f\x40\xef\xb1\xdd\xc8\x9d\xc9\x07\x7b\x43\x35\x1f\x52\xe0\xdc\x59" "\x61\xb1\x48\x8a\x1d\x92\x6c\x3f\x42\xf9\xfa\x27\x35\xc2\x91\x90\xf5" "\x67\x8c\x61\x51\x8b\x19\x09\x86\x19\xb3\x46\x75\x79\xd1\x61\x64\x59" "\x01\xde\x82\xa2\x54\x5c\xc6\xbd\xf5\x4e\x5e\xcc\x01\xab\x2a\xa9\x28" "\x36\x23\x3a\x0a\x10\xd4\x9a\x24\xeb\x33\xaa\xdb\xcd\xfd\x68\x0c\x07" "\x05\xc2\x74\x06\xd7\x9b\x1b\x6a\x8e\xa1\x21\xfd\xe9\x48\x52\xe8\x19" "\x55\x5a\x61\x44\xd1\xae\x2e\x05\xb0\x27\x0e\x10\x23\x87\xc8\x33\xf4" "\x5f\x3f\x00\x24\x22\x1a\xa2\x16\xcf\x6c\xda\xec\x0f\x89\xf8\x98\x3a" "\x46\xf8\x32\xd5\xc8\x11\x78\x4a\x74\xe8\xdd\x75\x13\x6b\x8e\x5f\xc4" "\x9b\x35\x76\x6c\xcd\x8d\xf6\x43\x69\x7c\x0a\xa6\x45\xd4\x29\x0c\xbc" "\xcc\x3f\xb0\x4f\xdf\x6b\x68\x83\x9e\xa7\x0d\xa7\xaa\xe6\xc8\x6d\xcc" "\xe3\x40\x67\xd3\xc4\x5d\xb6\xdc\x35\x8b\x41\xa8\x8a\x2d\xfc\x5b\x4a" "\xcf\x0a\x66\x38\x9a\x11\x73\x44\x23\xd5\x7b\x1f\xc3\xb2\x8f\xb5\x4f" "\x17\x15\x66\xea\x3b\x41\x6e\xd3\x23\x57\x27\xb0\x9b\x38\x43\xdc\x03" "\xe8\x77\x49\xf4\xac\x71\x74\xad\x3e\xfd\xc4\x61\x16\x25\xe9\x8c\x24" "\x92\x83\x6f\x42\xc5\xc9\xe3\x21\x42\x35\x5d\xf4\x5d\x75\xcc\xe8\x1c" "\xe5\xc0\x40\x48\xa9\x80\x61\x02\x03\xa0\x52\x51\xa6\x14\x19\x20\x9b" "\x92\x6c\x31\xf4\xd1\x4e\xa9\x5c\x39\x9b\x27\xef\xf8\x1d\xf3\x6e\xc7" "\x5a\xee\xd0\x27\x50\xde\x48\x35\xdf\xc5\x2a\x96\x45\xc0\x92\x13\x6e" "\x05\x24\x7c\x98\xd6\xe8\x52\x71\x5c\xf9\xa4\x7b\x21\xc5\xd6\xbf\xd2" "\xbc\x19\x27\x5d\x25\x3f\x82\xb8\x73\xa9\xe1\x5c\x78\xbd\x55\x74\x1e" "\xe6\x72\xbd\x36\x23\x1a\xca\xeb\x73\x82\xe7\xfe\x3a\x7c\xae\x8c\xcc" "\x74\x0e\x15\x0d\x5d\x5d\xdd\x72\xcb\x88\x7a\xe8\x4f\xaf\x30\xab\x9e" "\xa1\x6e\xb6\xac\x18\x4c\xe7\x9b\xe6\x17\x05\x51\x0b\x0c\xb0\x9a\xba" "\x3f\x07\xe0\xd4\xe5\x39\x9d\x0d\x4b\xd8\x71\x5b\xe1\x62\x3f\x21\xc3" "\x3a\x8d\x83\xa6\xce\x2b\xf0\x0b\x2c\x06\xb5\x69\x7c\x08\x9d\xce\x72" "\xef\xfd\x21\xe5\x84\xc2\xd6\xc9\x0b\x31\xec\x66\xe4\xe5\x9c\x4e\xa6" "\x1b\x49\xe8\xdd\x8b\x0c\x61\x96\x8d\x24\xe2\xd7\xf5\x01\x16\x75\xf3" "\xe6\xaa\xa7\x03\xb7\xfb\x3f\x0c\x19\x8e\x6f\x65\x2a\xd2\x20\x35\x10" "\xbc\xdd\x38\x29\x42\xdf\x3c\x71\xa4\x8e\x51\x4f\xcc\x68\xa7\x34\xfc" "\xe7\xdc\xe5\x40\x10\xf5\x25\x06\x81\x0a\x70\x84\x74\x7a\xce\x9e\x0a" "\xa0\xf9\x99\xff\xfa\x70\xf4\xe2\x93\xb8\x86\xbe\xc7\x29\x6a\x05\x54" "\xc3\x60\xe4\x59\x4b\x11\xc2\x87\x31\x24\x21\x5e\x91\x27\x81\x16\xab" "\xc1\xaf\xa2\x5c\xdb\x1f\x90\xba\xff\x09\x72\x6f\x17\xb8\x59\x8e\xb4" "\xb4\xb0\xcb\xed\x7b\x69\x3a\x24\x28\xa1\xbe\xd8\xbd\x32\xa7\xbb\x14" "\xd5\xed\xaf\x94\xe6\x97\x0e\x69\x02\x29\x4e\x1e\xdb\x61\xb5\x87\x9c" "\x9b\x59\xe2\x2e\xd8\x68\x75\xa2\x0a\x54\x85\x3a\xbe\x29\x06\xe0\x91" "\xb1\x52\xb2\xff\x30\x1e\x42\xff\xae\x05\x12\xdd\x66\xc6\xdd\xff\x17" "\xe5\x7d\x94\x2f\xc0\xa4\xd2\x57\x44\x2d\xec\xd4\xe9\x2e\x32\xd2\x00" "\xfb\x67\x2b\xab\xfb\x76\x18\xe9\x46\x11\xc1\x2e\x87\x2f\x47\xbb\xab" "\x8e\xda\x2b\xcc\x08\x8f\x14\x6b\x0a\xb3\xe4\x79\x60\xa3\xd7\x45\xf8" "\x5e\x56\xf7\x11\x48\xef\x28\xd9\x53\x7e\xee\xcf\xbe\xd6\x69\xe2\xa0" "\x21\x1d\x02\xd1\x0c\x93\xd3\xf9\x50\xd3\x64\xe1\xc5\x23\xe6\xc0\x71" "\xc1\xbe\x5f\xb7\x49\x65\xf9\x70\x1f\x86\xbd\x1c\x1d\xed\x33\xeb\x3e" "\x05\x5f\xf5\x1c\xec\x95\x71\x53\x77\xa8\xee\x34\x01\x5f\x49\x8c\x03" "\x9d\xb3\x21\xa1\xa5\x4c\x86\x81\x46\xcd\x9a\x0d\x1b\x0b\x19\xf6\x14" "\x67\x4f\x5f\x84\xe8\x1d\x9d\xd0\xed\x49\x78\x3d\x67\xb4\xe1\xa2\x62" "\x68\x57\xd6\xce\x8b\x3b\x18\x7e\x10\x90\x14\xd1\x8e\xd1\x90\xa2\xa0" "\x66\x36\xa4\x08\x2f\xc6\x31\x85\x3a\xc0\xda\x70\x76\xa6\x8d\x6c\x52" "\xec\x2f\x83\xc5\xb4\x02\xd0\x2b\xf3\x42\xe6\x75\x57\x8f\x02\x4e\x3b" "\x26\x28\x5d\x0a\xeb\x40\xcb\x51\x49\x11\x2d\xe2\x6b\x40\xa2\xea\x80" "\xde\xb8\x0f\xf2\xca\x43\x8b\x6b\xde\xcf\x11\x6b\x03\x9c\xa1\xfd\x31" "\x1d\xfc\x5b\xe6\xcf\x2b\xb9\x1b\xb6\x24\x75\x21\xcd\x2a\x5b\xfa\xb1" "\xe0\x5b\xae\xeb\x9a\x57\x0d\x3b\x1d\xa1\x73\xda\x37\x54\x97\x05\x4f" "\xf5\x2e\xb3\x73\xf4\xeb\x3a\x18\x18\xd6\x41\x5a\xd9\x0d\xaa\xcb\xa9" "\xe8\x4e\xd9\x88\xa4\xa0\xf2\x39\xaf\x1d\xd0\x94\xea\xa1\x56\xa5\xe0" "\xea\x11\x92\x9f\x75\xe9\xec\x8d\x28\x60\x28\x02\x5f\xd3\x60\x0d\x68" "\x13\x29\x41\x6b\x94\x2f\xee\x62\x56\x01\x0a\xbb\x43\xcc\xec\x76\x40" "\xfd\xfe\x90\xce\x59\x87\x7b\x23\xa9\x80\x7f\x03\x82\x33\xd9\x92\xd8" "\xbd\xa8\x59\x46\xcf\x4e\xb7\x05\x7d\xd0\x20\x77\x5c\x25\xce\x07\xd0" "\x77\xa2\x6c\x40\xf4\x5d\xf0\x52\xb5\xb6\xc9\xb1\x6e\x8e\xe2\xef\x5b" "\x2e\x8e\xbe\x4d\xa7\x5b\xb5\x02\x89\xe4\x9c\x0c\xfc\x19\x2d\xfe\x7b" "\xd6\x3e\x18\x6a\xb5\xd4\x84\x81\xb5\x89\x98\x1f\x58\xb1\x9d\xbe\x2d" "\x6f\xc9\xed\x63\xf3\x6e\x13\x0d\x80\x26\x05\x07\xb8\x38\x79\x94\x59" "\x9c\xa5\x42\xbe\x96\x9e\x2c\x5b\x58\x5a\xf6\xea\x2d\x53\xdf\xb7\xae" "\x31\x29\xa1\x27\x54\x05\x52\x9d\x94\x9b\x77\xe2\x5c\x33\x74\x42\x5e" "\x30\x4c\x2e\xdf\x15\x5c\xc5\x3f\xcb\x17\xaf\x37\x82\x65\xda\xa1\xe4" "\xf1\xd2\x9b\xa3\xaa\x51\x02\x53\x95\x48\xd5\x65\x2f\x64\x81\xfa\x48" "\x43\xdf\x84\x8c\x0a\xf1\x89\x4b\x43\x38\x3a\x20\xe2\x7c\xcd\xb7\xd6" "\xd1\x70\x16\xad\xf5\x0c\xc7\x25\xf4\x76\x30\x28\x8e\xe8\x1f\x84\x80" "\xb9\x30\x52\xdb\x14\xb3\xc4\xf7\x4b\xbf\x91\x56\x30\xc7\xbd\x3e\xb1" "\x41\xf6\xb7\xdc\xb1\xf3\xbe\xce\x9a\x64\xa5\x6d\x2f\x43\x84\x85\x7d" "\x48\x60\xb3\x9d\xf3\xfb\x24\xab\xb6\x2f\x40\xba\xb3\xb1\x85\x60\x3e" "\x86\x56\x28\xf0\x70\xa7\x0c\x54\x29\x33\x01\x21\xa1\xc0\x61\x1b\x37" "\xe4\xd0\x56\xd4\xfc\x46\x5b\x65\x51\xdc\x53\x7f\xfe\xea\x5f\x85\x8e" "\x4f\xd5\x92\xa0\x57\x91\x7c\x3f\x34\xc5\x8b\xcb\x06\x36\x50\x9b\x0f" "\x60\x8c\x0d\x76\xf4\xd8\xd7\x51\xf6\x8d\xfb\xc2\x10\xc4\x86\xf4\x37" "\x4b\x56\x68\x12\xcb\x96\x2b\x74\xd9\xf3\xc6\x3c\x2d\x1a\x1c\xfe\x0b" "\x0f\xaa\x37\x69\x3e\x1a\xb5\x49\xa4\x9b\x49\x09\xe0\x16\x11\x55\x08" "\x93\x69\x3a\x0c\xe9\xb1\x8a\x31\xfb\xb3\x12\x43\x0c\x17\x2d\x95\x81" "\xee\x0e\xf8\xba\x66\x85\xd2\x2d\xbb\xa1\xe7\xf9\x87\xe0\x74\x80\x5d" "\xfb\xb7\xab\xe8\xf5\xee\x12\x6d\xa9\xae\x92\x8b\x4a\xab\x92\xf8\x2b" "\x7c\xcd\x1c\x1c\x29\x8d\x99\x2d\xf4\xac\xb9\x12\xa0\xd9\x3b\xa8\x2d" "\x20\x09\x51\xab\x33\xbf\x22\x90\x25\x25\xea\x75\xcb\x65\x08\x89\x29" "\x0f\x74\x65\xbe\x4d\xe4\x62\xff\xf2\xd0\xa5\x8d\x0d\x12\x00\x92\x6c" "\xd9\xa2\x9c\x09\xf0\xdc\x82\x1e\xb4\xf6\xc4\x6b\x4e\xb7\x46\x2a\x6f" "\xc1\x84\x81\x9c\xed\x41\x96\x30\x38\xed\xa9\x12\x34\xe8\xd7\xaf\x09" "\xf4\xcc\x62\x95\xab\xc2\x5f\xc2\x6b\x3b\x61\xd6\x8b\x2c\x9f\x6a\x55" "\xa8\x02\x7b\x69\xc1\x68\x1d\xf1\xd6\x11\x2a\xf2\x9a\x0e\x60\x71\xfa" "\x96\x94\x91\x46\x92\xe3\x82\x44\xa8\xc0\x38\x51\x17\xcf\x74\xd4\x10" "\x23\x1e\xe9\x6e\xab\x3d\xa1\x35\x72\xfb\xa7\xfd\x68\x4d\xc3\xe8\x29" "\x2e\x42\x0f\x41\xbd\x28\x25\x67\xe0\x8b\x6a\x6b\xb6\x17\xc9\xef\x11" "\xf9\x4d\x1a\x36\xd7\x1c\xdb\x36\x24\x57\x9a\x64\xd6\x39\x06\xf1\x88" "\x67\x39\xb9\xbe\x14\xd6\x52\x6e\x41\xc5\x6a\x06\x39\x2c\xab\xea\x58" "\x92\x8b\xcd\xe1\xea\xbd\x1e\x38\x7d\x7e\x2e\x22\xc7\x88\x70\x57\x25" "\x56\x4b\x6e\xb7\xdc\x09\x28\xe7\x56\xca\xbb\xe3\xbb\xaf\x83\x6e\x8a" "\xdf\xdf\x61\xae\x70\x30\x37\x41\xbc\x9d\x91\x43\x27\x15\x9f\xc1\x28" "\xb8\xb0\xba\x34\xcc\x91\xfb\x0f\x86\xd6\xac\x0e\x62\x88\xc4\xfc\xae" "\x00\x00\x4f\xd2\xa6\xc1\xac\xf2\xde\x92\x6b\xe7\x81\x6a\xc7\x9e\x9c" "\x9b\x34\x17\xd1\xd2\x38\xc7\xdb\xc9\x9e\xba\x44\x12\x71\xa8\xc6\x20" "\xc8\x3b\xd0\xbd\x18\x43\xce\x90\x53\xd1\x87\x54\xbe\x37\xb3\x27\xe7" "\x71\x2b\x3f\x31\xa5\x68\xbf\xde\x52\x28\x39\x23\x9c\x9b\xe6\x26\x3f" "\xcb\x86\xc4\x4c\xb3\x9d\x79\x19\x95\x12\x8f\x8e\x03\x06\x84\x7a\x5a" "\x5a\xf7\x20\xf7\xde\x81\x28\x8e\x26\xec\x36\xaa\x1a\x6b\xb0\x2c\x74" "\x46\x32\x4d\xbf\xa2\xfc\x89\xff\x6e\xa3\xc9\x00\xc3\x0b\x25\x0e\x66" "\x07\x5d\xb9\x85\xbc\xc2\x0b\x11\x2d\xc8\x45\xb9\x0a\x47\x22\x4f\xe9" "\xc4\xe8\x16\x34\x2d\x3d\x94\xd1\xfc\x2f\x3a\x58\x3e\x5f\x04\x9f\x99" "\x1d\xec\x10\xa9\xa5\x62\x95\x55\xaa\x64\x10\xe8\xb4\x16\xca\x67\xe3" "\x0c\x1e\xf8\xd1\x65\x17\xd6\x8f\xe8\xaa\xb7\xd9\xeb\x2c\x62\xf6\x61" "\x30\x73\x8e\xe2\xf1\x15\xf7\xf3\x2f\xa2\xe1\xa2\xeb\x0a\x82\x80\xe7" "\x9f\xee\xf0\x1f\xbd\x3e\x3c\x1d\x22\xdd\x03\xbc\x72\x9d\x1a\x10\xaf" "\xb6\xd3\x8a\xa3\x7d\x67\xd4\x2f\x1d\xa7\x66\xcb\x43\x47\xbc\xfa\x62" "\x63\xb6\x30\x57\x3b\x6c\xf2\x47\x06\x42\x92\xc8\x8e\x7d\x7e\xb1\x8d" "\xbf\xe3\x25\x93\x28\x92\xcd\x29\x2a\xa2\xd5\xb8\x1d\x0d\xc0\x2d\x3a" "\xc9\xb5\x4a\xf4\x6e\xef\xcb\x8c\x09\xef\xe7\x73\x7b\xea\xa4\xd3\x87" "\x4d\x26\x66\x13\x85\xe4\x7c\xd3\xf2\xf7\x34\x3b\x32\x20\x6a\x63\x2d" "\xa5\x9a\x69\x8b\x5f\x00\x3c\x56\x70\xc8\x52\xe4\x4f\x76\xe2\x9c\x1d" "\xd5\x84\x99\xe8\xdf\x37\xf4\x09\x89\xe5\x21\x64\x9f\x6a\xb8\x02\x4f" "\xcc\x65\xb3\xb8\xf9\x6d\xaf\x1a\xf3\xd0\xbb\xbd\xaf\x0d\x57\x2f\xad" "\x19\x7d\x87\x45\x1c\xc8\xf6\xf4\xf4\x2e\x76\x5f\xba\x8e\xd0\x6f\x79" "\x59\xa9\x32\x40\x8f\x47\x89\x97\x12\x6e\x36\x36\xd9\x65\xa8\x2e\xff" "\x42\x89\x7b\x6d\x7b\x81\x2e\x5a\xc8\x73\xf2\xb5\x7a\x8f\xc8\xbe\x3c" "\x2a\x5a\x18\x4e\x22\xd7\x4f\xc8\xba\xd3\xdf\x44\x4d\x0b\xc1\x9a\x4b" "\x5c\x7d\xae\x7b\xe5\x07\x39\x20\x82\x4a\xcf\x65\x91\xb6\x92\x34\x29" "\x4b\x2a\x0f\xce\xe2\x8f\x09\x71\x9e\x49\x1b\xb2\x6f\x7f\xbd\xa8\x89" "\x45\xb2\xb8\x37\xa3\x2a\x66\x0f\xc3\xa3\x77\xf2\xc5\x09\xf3\xf1\x2b" "\x24\x40\x23\x63\x1a\x64\x3b\xa5\x6a\xe5\xc5\x2d\xeb\xb4\xac\x5c\xce" "\xd7\xdc\x3a\x6b\x2e\xe7\xd2\x8a\x47\xe7\x97\x77\xc4\x91\x61\xf2\xd1" "\x7f\x3e\xec\x54\xae\xd6\xd1\xc8\x81\x0c\x33\x1b\x2f\xc8\x36\x3c\xc5" "\x63\x11\x52\x66\x59\x92\x99\x07\x56\xd6\x8d\x2d\x4a\xa8\xdb\xa1\x18" "\xf8\xe7\xee\xc7\x72\x9d\x12\x92\x15\x79\x47\x0d\xca\xc6\x59\x5c\xaf" "\x91\x76\x0e\xbd\xde\x40\xc7\x37\x82\x75\x65\xbe\x1a\x12\x81\x18\xd4" "\x5d\xdc\xdc\x25\x29\xf0\x43\x63\x6c\x10\x89\x7a\x9d\x00\x30\x17\x68" "\xae\xd1\x94\x20\xbe\x8b\x46\x57\x91\x4e\xe1\xd0\x64\x9f\xb9\x8a\xa8" "\x10\x79\x57\x92\x4b\x64\x55\x31\x84\xba\x6f\x57\x59\xe3\x25\x29\x02" "\xe6\xe0\x58\x51\xe4\xd6\x0d\x09\x65\x9d\xf5\x97\x28\xf6\x5f\x8d\x87" "\xbc\x28\x39\x85\x11\x17\x9b\x48\xce\xc6\x96\x1d\xa7\x05\xa5\xd9\xd4" "\x68\x02\x68\xce\x96\xb5\xa4\xca\xf6\xae\x99\x31\x81\x01\x53\x15\x72" "\xd9\xa4\x73\xad\x60\xb1\x65\x53\xcf\x3e\x4d\x39\x9e\x44\x2b\xb8\x78" "\xcc\x84\x0b\xd4\x68\x1b\xb1\x53\x8b\x33\x76\x43\xac\xc3\x04\x51\xd7" "\x25\xd5\x29\x7e\x71\xac\x90\xcd\x7d\xc3\x57\x82\xba\xcc\x39\x43\x65" "\x4b\x51\xc3\xe5\xff\xe8\xe4\x71\x56\xe5\xf3\x60\xb6\xad\x1f\x28\x1e" "\x69\xb9\x12\x1f\x93\x55\xbd\x79\x04\x6e\x85\x5e\x4b\xd7\xc4\x55\x01" "\x31\x6d\x31\xe5\xcf\x3f\xcf\x87\xa1\x12\x4e\x7a\x84\xe2\x89\x32\x58" "\xe9\x56\xcd\xd4\xff\x66\xaf\xbc\xf4\xe3\x03\x95\x4b\xa3\x57\x19\x2e" "\xdb\x5b\x05\x81\x09\x3a\x34\x84\x11\xd9\x57\x74\xcd\x39\x99\xfa\x5f" "\x56\x35\x04\x10\xa4\x76\x5a\x84\x2f\x30\x89\xf6\xc3\x9d\x50\xfc\xd9" "\x16\x65\xa5\x2b\x64\x44\x0b\x0b\x7f\x3f\x70\xc8\x21\xd0\x42\xd9\x54" "\x40\x50\x24\xe2\x68\xbb\xb8\xd2\xe1\xea\xc2\x17\x3a\x81\x25\xc4\x3f" "\xfb\x7c\xfa\xbf\xc3\x93\x44\x63\x64\x51\x7c\x1c\x99\x1a\xe9\xad\xf9" "\x98\xdc\x06\x60\x81\x33\xd8\xd0\x1c\x28\x8d\xf6\xa5\x80\x4a\x38\xae" "\xe6\x62\xb4\x4a\x48\x18\x12\x3f\x2a\xd0\x00\x23\x3d\xc2\x5f\xea\xed" "\x88\xf9\x7f\xaa\x4d\x64\xfc\xea\xbe\xb0\x62\xb3\xf3\x2c\x9f\x8d\xb8" "\x0b\x5c\x0b\xf2\xb3\xb8\x19\x44\x35\xae\xb1\xe9\xfe\xe6\xb5\x0c\x0e" "\xe0\x89\xbf\x66\x7e\x1c\x6e\x14\x61\x27\x6d\xfb\x53\x1b\xcc\x71\xd5" "\x41\xc3\x79\x00\x03\xdf\x7a\x6c\xe2\x5c\xa2\xef\x9d\x55\xf6\x44\xe0" "\x1e\xaf\x6c\x3c\xec\xa8\xe2\x6a\x33\x25\xf1\x57\xc5\x44\x48\xa6\xbf" "\xe7\x7a\xab\x8c\x59\xf1\x9d\x5f\x00\x1f\xa4\x30\x8a\x11\xc6\x6e\x4a" "\xf6\xb9\x81\xcc\xf3\x72\x9a\x0a\x84\xc6\x08\xd1\xbb\xc8\x86\x40\x3b" "\x08\x6a\x8e\xb4\x2f\x9e\xa4\x60\x3d\x33\x46\x77\xc6\xae\xf2\x58\x15" "\xe7\xf3\xc7\x6b\x1d\x1a\x18\x1f\x3b\xb2\x8b\x8c\xda\xfe\x5c\x8e\xbc" "\x58\x42\x6b\xc8\x25\x80\x2d\xfa\x8e\x05\xca\x83\x99\x0e\x5c\xfc\x15" "\xc4\x91\xda\x6e\xf6\x6a\xa3\x45\x38\xdc\x8c\x58\xce\xa0\xd7\xbb\x2b" "\xc1\xe9\xf0\xed\x13\xfc\xbc\xd0\x9c\xe0\x31\x42\x47\x60\xbd\x97\x88" "\x2b\x11\x18\xa5\xee\x9c\xd7\xe8\x9a\x18\x26\x88\x7b\x4b\xd3\x8c\x1d" "\xd1\x95\x84\x51\x95\x51\xc1\x8e\x0c\x3f\xf3\x94\x15\x81\x08\xb1\x20" "\x96\xaa\x6f\x1b\xda\xc8\x40\xa2\x97\x75\x85\x3c\x87\x1c\x8e\x07\x17" "\xee\xae\x9a\x37\xc0\xae\xd7\x2c\x51\xab\xe9\xd4\x80\x1a\x9f\x85\x14" "\xdd\xcb\x5d\xec\xba\xd7\xde\x99\xeb\xef\xc7\xca\x62\xc4\xc0\xbf\x4c" "\x44\x51\xb3\x9d\x40\x95\x88\x7e\xe3\xee\x39\x59\xfa\x77\x3d\x47\x57" "\x73\x35\xba\x43\x20\xed\x74\xc7\xf8\x86\x50\x70\xe2\x34\x73\x1e\x55" "\xac\x4e\xcc\xdf\x9d\xf9\x76\xa3\x62\x41\xea\x2a\xac\xc6\x8f\x7b\x56" "\xf8\xba\xf7\x3b\x02\x83\xc5\x8a\x6f\xd8\xff\xc5\xbf\xc7\xac\x16\x3d" "\x74\x8b\x44\xa1\x3a\xf3\x23\x1e\x60\x53\x34\x16\x09\x2f\x85\x73\xcf" "\xfb\x5b\x0c\x50\x0a\x41\xac\x38\x4f\xb0\x7e\x81\x9d\x40\xd3\x5a\xa9" "\x56\xb9\xbe\x1a\xe7\xa5\xe2\x51\x24\x42\x84\x1e\x9d\x9b\xd8\x71\xca" "\xc2\x77\xc1\x45\x2e\x75\x9c\xd3\xeb\x75\xf6\xf0\xd8\x2b\xc1\x41\x8d" "\xa4\x3d\xb3\xc2\xae\x18\xe0\xe4\xa7\xae\x2d\xe9\xec\x52\x20\x7c\x90" "\x6a\x81\x0b\xde\xdd\x7b\xc9\xee\x1c\xfd\x31\x8d\x89\x3b\xd1\xbc\x8b" "\x6a\x90\x70\x92\xff\x61\x76\x40\xb3\x26\x13\x89\x2b\x9d\x2e\x91\x96" "\xee\xdb\xce\x0d\x88\xf2\x31\x22\x8c\xf1\x31\x55\x63\xd7\x51\x55\x95" "\x58\x06\x19\x96\x2a\xed\xc5\x8f\xc7\xa6\x39\x52\xeb\x4a\x85\x18\x56" "\x96\xf0\x2f\x9e\x4c\x64\xbf\x04\x3f\xe7\x72\x5f\x53\xed\xc2\xba\x6c" "\x5b\xfa\xba\x19\x76\x30\x76\xf9\xfd\x94\x85\x3d\x15\xd0\x3e\x81\xed" "\xd0\x96\x9e\x3f\xd6\x7c\xef\x18\x1a\x10\xb3\x07\xc5\xdf\xbf\x80\x83" "\xe0\x88\xb5\x18\xef\xbc\xb2\x22\x98\xcd\x9c\x32\xf2\xd6\x7d\x9e\xc9" "\x8a\x4b\x06\xd7\x6c\xae\xe4\x19\x47\x42\xbf\xfe\x56\x45\xe8\xbd\x66" "\x6e\xbe\x8e\xf7\xaf\x9d\x1c\xb4\x65\xc2\x2c\xd7\xb2\xa6\x45\x39\xc9" "\xba\xf4\xa5\xb6\xec\x64\x37\xb8\xb7\x0f\x66\xb7\xd1\x1c\xd2\x9e\xca" "\xf5\x8e\xd0\x79\x50\xeb\xdc\x22\x05\x16\x60\x43\xf6\x93\xee\xec\xf2" "\xeb\x6a\x6f\x6e\x77\x78\x3d\xff\x53\x1c\x21\x53\xc2\x61\xb9\xd3\x5e" "\x89\xd1\x26\xa1\x76\x89\x95\x80\xa6\x1a\x87\x65\x3d\x4d\x08\x14\x5d" "\x72\xa5\xe1\xf4\x6a\x20\xcd\x61\x17\x33\x1b\xb6\xd7\x52\xd7\x4d\x9b" "\x7f\x42\x9c\xb3\xe2\x52\x48\x6b\xf5\x6e\x1c\x77\xdf\xa5\xd4\xed\x6f" "\x02\x05\x8c\x90\xa5\xe5\x4c\x84\xb7\xa2\x3e\x6c\x96\xf4\xca\x85\xec" "\x2a\x0f\xf1\xae\xc5\x46\xd9\x3d\xee\xa6\x7e\x29\x71\x1f\x65\x99\xaf" "\xb1\x07\xfa\x09\xc0\x14\x7f\x0b\x20\xe8\x7f\xed\xad\xa5\x42\x1a\x7a" "\x15\x86\x00\xa8\x9b\xf4\x70\x5f\x9d\x24\xa3\x4e\x16\x7d\x24\xf4\x0e" "\xc0\x3a\x35\x68\x7b\xd9\xbc\x8d\xa4\x17\xa3\x9e\x20\x3d\xde\xaf\xcd" "\x68\x17\xcb\x57\xf9\xa8\x72\xbd\x59\xba\x2b\x0d\x69\x27\xe9\xe3\x70" "\x89\xa7\x7e\x38\x57\xfd\x04\x6a\x64\xee\x9c\xd1\xd8\x5a\x64\x10\x15" "\xd4\xa2\x17\xc2\x58\xe2\x51\xc7\xa3\xa0\x7f\xbc\xc9\x9d\x45\x99\x78" "\x92\xcb\xed\x9d\x4c\xf1\xea\x6c\x35\xd6\x4a\xd6\xed\x05\xdf\x20\x7d" "\x15\x45\xea\xe0\xa2\x98\x72\x9c\xce\x05\x47\x41\xb4\x7e\x03\x31\xf3" "\xa1\x99\x8d\x90\xa5\xb3\x2f\x9a\x7c\x78\xcf\xb3\xfc\x23\xd0\x6f\xdf" "\x5f\x7e\x0c\xb4\x68\x89\x45\xd6\x99\x43\x5d\xb7\xb6\x2c\x4e\x32\x0c" "\xe0\x60\x32\x68\xf4\xc8\xe9\x1f\x34\xc6\x3a\x76\x00\x10\x2e\x98\x71" "\x58\xff\x74\x88\xe3\x61\xb3\x42\x46\x35\x96\xde\x5d\xf7\x45\x43\x16" "\xe1\x37\x30\x51\xcd\x69\xe6\x8d\x28\xc3\x4a\x59\x2a\x63\x97\x79\x88" "\x8e\xa3\x60\xfd\x07\x17\x69\x52\x9a\x7b\xe1\xec\x73\x3a\xb2\x25\xf8" "\xb1\xaf\x3d\xdb\x40\x23\x66\xea\xc4\x8a\xfd\xe8\xc3\x50\xb2\xe4\x6c" "\x92\x0d\x60\x15\xf1\x49\x64\x77\xd8\xc7\x17\x48\xeb\xe9\xe0\xaa\xc8" "\x25\x4e\xda\xe5\x7e\xb7\x05\x57\x37\xe2\x2a\x0d\x92\xeb\x59\x05\xc8" "\x93\xf5\x6a\xa7\x56\xc8\xde\x5c\xb2\xbe\xa0\x33\xb9\x98\x88\x03\xd1" "\x8a\x89\x29\x52\x66\xac\x67\x45\xc9\x76\xd4\x2f\x08\xb1\xae\x70\xae" "\x2f\xdf\x58\x7f\x7d\x0d\x32\x9e\x5b\x87\x4c\xc2\xfb\x44\xf5\xf7\x6c" "\x62\xbb\xc9\x0b\x2a\x89\x52\x68\x42\xb5\x43\x32\x2a\xde\x74\xfa\x3a" "\x03\x9a\x31\xdf\x68\x92\x34\x3c\x11\x28\xb9\xd6\x53\xb9\xcc\xe4\xe5" "\xdc\x51\xcf\x2d\x85\xbf\x51\x3e\x5a\xf7\x90\xb6\x32\xe8\xbf\xf8\x97" "\xae\x8b\x3f\xe8\x74\x28\xd5\x88\x6d\x0c\x86\x35\x11\x4b\x1c\x42\x08" "\x70\x90\xb2\xa8\xa1\x59\xbb\xf4\x79\x3b\xf8\x52\x93\x85\xd9\xe9\x5e" "\x9b\x11\xa0\xa4\x82\x05\xbb\x37\xad\x17\xe1\x26\x42\x01\x32\x25\x9e" "\xbb\xc4\x79\x7a\xaa\xb3\xc7\x3f\x64\x1c\x84\xa1\xe4\xbe\x9f\x25\x47" "\x0f\x74\xb3\xda\x4b\x0f\x38\x65\xe8\x8b\x6f\x5f\x99\x51\x9d\xfb\x2f" "\x7b\x18\xf0\xe7\x60\x34\x21\xb8\xa9\xfb\x62\x14\x4e\xb8\x33\x11\xc9" "\x74\x6b\xc5\x66\x13\x67\x5a\x5f\xe5\x89\x67\xd4\xd8\xdd\xaa\x20\x9d" "\x71\xee\xaf\x90\xf7\x61\x77\x29\x4b\x7e\x5e\x5c\x71\x94\x76\x53\x5b" "\xf6\x27\x8d\x07\x2f\x78\xaf\xa1\xc4\xe1\xdb\x75\xba\x91\xca\xd5\x15" "\xe9\xf2\xb0\xf1\x19\x9a\x6d\xdd\xaa\x0e\x30\xc5\x8c\xd4\x87\x0d\xe7" "\x1b\xdc\x60\x60\x16\x73\x3f\xbd\x02\x87\xac\x10\x36\xbe\x24\x19\xa8" "\xb7\xd7\x0e\xe0\xf5\xa5\x19\xfd\x39\x93\xfc\xc0\x5a\x17\xa2\x5d\x36" "\xf4\x09\x1c\x47\x25\xfb\x36\xa4\xbd\xc0\x21\xfb\x73\x02\x3e\xff\xb7" "\x81\xe2\xc6\xea\xf3\xaa\x77\x00\x0e\x85\xd0\xbe\x47\xb0\xdf\x1d\x95" "\x2f\x73\xfa\xcf\x04\x0b\xe0\x4b\xb9\x36\x1d\xc8\x97\x8e\xef\x35\x5f" "\xbe\x99\xdf\x73\x44\x29\x5d\x71\x7b\x38\xa7\x5d\x1f\x4a\xb4\x17\xf2" "\x40\x20\x49\x98\xa2\xa0\x35\x3e\xaf\x56\xf0\xf6\xbf\xb8\xca\x55\x9a" "\x06\x75\xfb\x17\x97\x3e\x2b\x94\x4f\xdd\x4c\x0e\x27\x36\x9d\x9b\x41" "\x41\xed\xd9\x43\x45\x01\xc2\x84\xd4\xf2\xb0\x5a\xb8\x0d\xee\xd0\x71" "\x90\xa6\x31\xaf\x50\xf4\x89\xb4\x45\x43\x3d\x02\xb6\x2a\xa9\x7f\xc8" "\xdf\x81\x11\x81\xdf\x92\x51\xed\xe4\xec\xbd\x63\x00\x32\xdf\x2d\xa1" "\xe3\xaa\xb2\x6c\x5f\x2f\xe7\x1e\xdc\x7a\x6b\x41\x74\xcd\xc5\xe8\x79" "\x52\xb9\x41\x5e\xa9\x71\x1f\x10\x8b\x33\xbb\x74\xb4\x38\x10\x12\x15" "\x65\x5a\x0e\xe3\x57\x32\xd8\x77\x3a\x79\x17\xd0\xb4\x71\x08\xfe\x36" "\xbc\xa9\x6a\xd4\x3d\xc5\x56\x0c\x98\x0a\x25\xf1\x56\xf2\xc1\x1c\xa3" "\x7f\xcf\x7f\xd9\xb5\x64\xf4\x97\x41\x41\x88\xb8\x54\x30\x35\x85\x14" "\xfe\x84\x2e\xfb\xdb\xf7\x60\xb2\xf8\xb4\xac\xa4\xc1\xe5\xfc\x00\x59" "\xcc\x1e\xc2\xd3\x6b\xf2\x8d\xdd\x4d\xec\x78\x69\x52\x67\x78\xb7\x4e" "\x7f\x58\x80\xf5\x0e\x3d\x44\x22\x8d\x9e\x6b\xea\x20\xc1\xdd\x23\x7e" "\x6f\x86\x3a\xfe\xcc\x1d\xb8\x09\xec\x67\x8a\x99\x52\x3d\x1b\x86\x74" "\x5d\x0d\xd0\xad\x8d\xa4\x3f\x9a\xe3\x42\x3a\xee\x52\x21\xb7\x42\x9b" "\x0c\x25\xde\xa8\xe9\x18\x58\x66\x22\x2a\xa9\x55\x8c\xff\xa2\x33\x94" "\xff\x73\xbf\xa4\x20\xee\x62\x30\x83\xa5\x4e\x5d\x59\x7a\x81\xd5\x7f" "\x23\x59\xdd\x3e\xcd\xdb\x70\x55\x72\xc4\xd7\x86\x11\xc2\x67\x7c\x04" "\xd3\x76\x29\xea\x6b\xfe\xd7\x15\x3e\xa1\xd7\x96\x37\x0a\xdc\x1c\x55" "\x31\xe1\xe4\x8b\xa7\xe0\xab\xbc\x9d\x05\x3c\xd4\xb0\x42\x69\x91\xf3" "\xf0\xb5\x0a\x7e\x8e\x65\xc8\x62\x38\x00\x2e\xc5\xd3\x91\xe5\x88\xcf" "\xfb\x9e\x9f\x2c\xa8\x57\x82\x7b\xa3\xb5\x63\xca\xdd\x85\x6d\x69\x6a" "\x7f\x0e\xf1\xef\x76\x8b\x97\x62\x12\xbe\x58\x5a\x2f\x78\xb1\x8a\xbd" "\xc8\x2c\x9a\x73\x00\xdb\xd3\xbd\x36\xd9\x9f\x5e\xdf\x28\x24\xe3\x4a" "\x46\xf5\x0f\x52\x60\xac\x25\xf0\x5e\x35\x05\x55\x6c\x6f\xe2\xa9\x7c" "\xd7\xa0\x88\x29\xd4\x17\x79\x43\x50\x75\x52\x51\x2d\xbf\xf5\x9b\x98" "\x7c\x58\xe4\x14\x85\x43\xcc\x38\x90\xa2\xd5\x49\x15\xb0\x94\x8c\xf8" "\xbb\x43\x48\x0e\x51\xca\x4f\xfe\x71\xc3\x3f\xd4\x5f\x7a\xf5\x7f\xe7" "\xc7\x2e\xfa\x45\xd6\xe9\xb2\xff\xb4\x58\x74\x80\xd3\x12\x71\xcf\x3d" "\x19\xdc\x64\xe4\x0d\xfc\xe3\x45\xde\x74\x74\x72\xb4\x2e\x9e\x7b\x9c" "\xe7\x9d\xca\xd3\x34\x39\xb4\x75\x59\x07\x5b\xe2\xa6\x2a\x2f\x98\x37" "\x40\x26\x22\x18\x3c\xe5\xd9\xb3\x7e\xc5\x87\xdf\x4a\x96\x1b\xe9\x59" "\x90\x36\x17\x7d\x65\x42\xe9\xd6\x33\xc1\xa4\x06\xde\x3b\x41\x6c\xc9" "\x2a\x9a\x59\xeb\xc3\x9d\x99\xb8\x06\x51\xe1\x6d\xb5\x84\xbc\x37\x80" "\x10\xb4\xc1\xe3\x21\x88\xc6\x6f\xa3\x2e\xd6\x36\x55\xd0\xe9\x50\x60" "\x7f\x8f\x53\x60\xc4\x4e\x3e\xca\x06\x51\x1c\x2e\x14\xd0\x8b\x02\x33" "\x94\x25\xf4\xba\xd5\x7e\x5c\x87\x1a\x02\x55\xc9\xcb\x49\x8d\xfc\x1f" "\x0d\x27\x32\xee\x0a\xf5\x65\xaa\xb2\x40\x51\xa5\x0b\xca\x5e\xb0\xae" "\x6b\x41\x92\xc6\xe1\x26\xe5\x50\x70\x01\x8e\xca\xeb\xd5\xaa\x61\xdb" "\xb1\x52\xe1\xdf\xb6\x3d\xde\x89\xe8\xdf\x58\x67\x3e\x61\x39\xa6\xc2" "\xdc\x97\xe2\xf3\x3e\x1d\x0f\x26\x22\x3e\x63\xa7\x39\x16\x22\x4f\x08" "\xac\xbf\xbe\x64\xa3\x3f\x59\xed\x10\x16\x5d\xcc\xa4\xe7\x01\x54\x44" "\x0a\x9c\x69\x6f\x47\x41\xb7\x80\x70\xa1\xb5\xea\xae\x70\xbe\x77\xe4" "\x2a\x93\xbb\x82\x87\x69\x9a\x03\x6f\x7a\xc2\x76\x91\x08\xe4\xc9\xbc" "\xad\x1e\x3b\x92\x4f\xfc\xdb\x09\xf1\x76\x74\x17\xff\xa3\x92\x4a\x84" "\xa2\x0d\x74\xa5\x26\x95\xb5\x37\x75\x13\xf9\x89\x70\x39\x5c\x9a\x57" "\x94\x48\x50\xc2\x88\xe0\xde\x76\x5b\x55\x08\xb4\xaf\xc5\xec\x02\x03" "\x2a\xce\x03\x70\x04\xb5\x4e\x2b\x1a\xf6\x7c\xd6\x5f\xa3\x16\x11\xf7" "\x96\xd4\x59\xa4\x1b\xd0\x2c\x0a\x98\x10\xe5\x23\x75\x65\x76\x3f\x38" "\xe6\xe2\xa3\x46\x52\x4e\x36\xec\xf5\x21\xd8\x55\xca\xc3\x55\x69\xc5" "\x25\x4f\x4f\xa4\x25\x5b\x77\x19\x90\x5b\x71\x72\x43\x7b\xaf\x92\x39" "\x79\xd8\xf5\x76\x8a\x6d\xa4\xcb\xca\xa8\x85\xb0\x2e\x87\x90\x30\x23" "\x22\xf6\x56\x78\x5f\x24\xdc\xb6\x01\x9c\xd7\xd5\xec\x24\x26\xcb\xc9" "\xfb\x7e\x7d\xa5\xb3\xe2\x7b\x77\x6c\x1a\xbd\x55\x79\x81\xf3\x49\x1c" "\xad\x43\x56\xd1\x67\xb8\xbc\x1d\x5a\x4d\x1d\xe4\xfc\xcc\xb9\x35\x09" "\xbb\x5d\x0e\x7f\xe5\xf3\x11\x8e\xcb\x51\x70\x4c\x57\xf4\x6b\xb8\x35" "\x28\xa5\xfa\x1b\xf3\x6d\xe3\xe3\xb7\x08\xc6\x33\xa3\xd8\xb5\x4e\xf8" "\x60\x2f\x3b\x62\x19\x07\x0a\x36\x73\x7d\x7f\xc7\x4b\xb2\xd8\xf0\xca" "\xcf\xa1\xff\x7c\x2e\xa0\x9b\xe6\xf9\x22\x2c\x72\xb3\xdb\x0a\x31\x77" "\xc0\xfd\x51\xf1\x5b\x27\xc7\x7a\x2b\x94\x5d\x0c\xbd\x86\x17\x37\x29" "\x69\xd2\x0e\x99\xc8\x55\x51\x48\x78\xd4\x1f\xf1\xef\xa0\x2b\xbb\x1f" "\x9c\x1b\x50\xc5\x1a\x78\xe6\xe3\xf7\x6a\xaf\x92\x06\xc9\x1d\x70\x1f" "\x9a\x61\x80\xe1\x65\x5d\x29\xf4\x27\xef\xe2\x00\x70\xf3\x0d\xfb\x54" "\xcd\x79\xcc\x74\x33\x44\x8a\xad\xa6\x10\x75\x64\x9d\x8e\x9d\x5b\xe8" "\xe0\x48\xd3\x0e\xfc\x90\x50\x00\x1c\x0a\xdf\x23\x3c\x51\xc9\x5a\x4c" "\x35\xca\x27\x81\xba\xc7\xc0\xeb\x1a\x94\x9d\x75\x3d\x67\x8d\x28\x9d" "\xff\xda\xc5\xa8\xac\x80\x3e\x1e\x44\xbf\xf3\xa8\xb2\x69\x9e\xc7\xcf" "\x1f\x52\x8b\x73\x3b\x12\x4d\xef\x61\xe6\x91\xde\x41\x64\x9f\x0d\x95" "\x65\x0c\xcd\x89\x39\x04\x2a\xba\xf2\x42\x08\xa0\x00\x86\x7e\x12\x8e" "\x67\x95\x37\x83\xf7\x95\x4f\x31\xfb\x29\x51\x3e\x66\x2e\x43\xd6\x6a" "\xa5\x74\xb2\xfa\x00\x3d\xef\x12\xed\x43\x9d\x7d\x63\x8b\x20\x1a\xf9" "\x58\xfa\x28\x14\xd0\x01\x21\x26\x5f\x57\x54\xa4\xe1\x7d\xe9\x25\x8e" "\xb4\x84\x2c\x14\x1d\x49\x37\xae\x2d\x45\x04\xe6\x40\xcb\x0b\xa4\x59" "\xed\xc5\xd9\xed\xa3\x6b\xac\x15\x00\xd2\x2d\x2e\x33\x8d\x44\x9e\xd2" "\xf0\xb5\xf1\x6f\x7d\xbc\x6b\x86\xbb\xa3\x83\x07\x24\x05\xbd\xea\xe8" "\xb5\x9e\x87\x39\xd1\xb4\x8e\x06\xdb\x65\x3b\x1f\xe9\x55\x69\x0b\x76" "\x47\x79\xf8\x31\xd7\x2c\xfd\x8a\x5f\x9a\x23\x27\x9e\xaf\x5e\x90\x5f" "\x5f\xf5\x08\x60\xdb\x77\x45\x8b\xca\xf8\xbf\xf3\x9c\xa3\x33\x8d\xb8" "\x61\x51\xe1\xf0\x82\x1b\x48\xd8\x64\xe5\x67\xc6\x2a\x03\xae\x8f\x83" "\xbd\x68\x7c\x3c\xef\xf5\xba\x1b\xb6\x8a\xd9\x32\x11\xbb\xc9\x30\xab" "\xe4\xbc\x51\xc5\x84\x71\xa7\x50\xa3\xaf\x54\x64\xc5\x49\xc6\x6e\x80" "\xe1\xeb\x01\x9d\x95\xb3\x50\x31\x24\x77\x2e\xf4\x0a\x85\xb8\x50\xb1" "\x7e\xdd\x50\x20\xfe\xb5\x35\xed\xe3\x31\xc2\xf7\xd3\x80\x6c\x0e\xcb" "\x84\x6e\x7e\xa5\x6a\xb7\xe8\xac\x92\x77\xf7\x89\x74\x16\xbe\x43\x29" "\x65\x92\x16\x65\x9a\x1f\x27\x9f\x1f\x68\x81\x41\x87\xe2\x2a\xc4\x65" "\xdd\x9e\x81\x2d\xa5\xd0\xeb\x1a\xf4\x51\x92\x16\x63\xb5\x7d\xe8\xfc" "\xc6\x1c\x8d\x43\x56\x71\xb0\x32\x8d\x9d\xd6\xd7\xf7\x3b\x80\x96\xa5" "\x67\xfc\xc5\xf2\xbd\x55\xb2\x4f\xae\xef\x87\x77\xc6\xd7\xd3\x61\x84" "\xb2\x90\x3a\x2d\xb0\xf5\x1e\x23\xd3\x53\x10\xce\xe1\xbf\x48\xb0\x58" "\x3c\x69\x3c\x45\x07\x60\xc0\x26\x97\xf4\x1b\x49\xdc\x77\xe3\x16\x06" "\x8a\xad\xd2\x4c\xbc\x9a\xa0\x67\x53\x75\xd8\x8d\xc3\x81\x14\x3c\xd0" "\xdb\xc7\x2c\x52\x8b\x42\x01\xe6\xfb\x46\x1e\x70\x47\x8e\x4f\x84\xfe" "\xe4\x2a\x5d\xb0\x39\x9e\x5f\xa0\x63\x15\xe9\x1b\x87\xcd\xea\xc1\xaa" "\x66\x69\x2c\x7b\xde\x5b\x3f\x91\x3d\xa3\xe9\x89\xc3\x3d\xa2\xaf\xbb" "\x59\xfd\x38\xda\x12\xae\x8e\xfb\xb4\x6f\x17\xdf\x87\x28\x54\xa0\xeb" "\xaa\x85\xe2\xa8\xd0\x4c\x02\x78\xa1\xce\xc2\x03\x9c\xe3\xca\x62\xf9" "\x00\x36\x04\xca\x99\xa3\x62\x96\xf0\xcf\x6a\x74\x00\xe0\x9a\x8b\x89" "\xf9\xc8\xcf\xf8\x07\x44\x45\x57\xfa\x41\xe8\x4e\x8f\x6b\x06\x99\xb6" "\x0e\xa8\xd2\x77\x0f\xe0\xb5\xa5\xe0\xf0\x2c\x17\xc4\x4d\x4d\xe1\x41" "\x0f\x0e\x1c\x24\xb5\xe0\x1b\x85\x3a\x2f\xd3\xdf\x69\xbd\xea\xcc\x40" "\xb9\xb6\x92\x33\x6f\x7a\x42\x63\xf1\xe9\xc2\xce\x77\x51\x0a\xac\x7f" "\x2c\x9d\x89\x9b\xc1\x42\x46\x28\x82\x82\x7a\x30\x15\x3d\x7a\x26\x95" "\x7c\x04\x3b\xd1\x02\x4a\x1a\x62\x9b\x2b\x64\xa5\xf6\x49\xc6\xf4\xd1" "\xb7\xb5\xeb\x26\xd8\x4e\x34\xf4\xb4\x4d\xfc\x1d\xdd\xd2\xa5\x5d\x9b" "\x89\xdc\x4a\x2c\x70\xb9\x96\x1f\xaa\x52\x66\x9f\x36\x76\xf6\xcc\xa8" "\xed\x8c\x9a\x38\x6e\x59\x9e\x26\x54\xda\xcb\x86\xef\x50\x2a\xde\x16" "\x43\x7a\xbf\xc0\x8f\x59\x18\x04\xf3\x73\x8f\xd2\xe5\xbd\xa9\x29\x0d" "\xd1\xfd\xed\x8b\xaa\xdf\xe6\xe2\x63\xe5\x6c\xad\x24\xcc\xba\x64\xa1" "\x48\x1b\xd9\x8a\xf6\x3d\x85\xa0\x6b\x6e\xba\x42\x09\x4d\xa6\xd8\x64" "\x15\x13\x7f\x2c\x4e\x0b\x89\x72\x1e\x82\x42\xbb\x7a\x79\x2f\x11\x2c" "\x77\xc5\x83\xf4\x7e\x96\xb5\xb2\x01\x71\x5a\x00\x94\x25\xaf\x8e\x72" "\x9f\x38\x8c\xbd\x0e\x0c\x6c\xeb\xcd\x0a\xd9\x38\x4a\x15\xdc\xfb\x3a" "\x25\xfd\xc1\x63\x64\xbc\xcb\x00\x45\x4f\x5f\xc9\xd3\xf6\xe9\xfa\x66" "\x01\x3f\x53\x99\xf1\xc7\x38\xe2\xfa\x2d\xce\xa0\xaf\xe0\x4d\xf6\x1b" "\xd1\x57\x81\x36\x5d\x77\xa7\xe0\xa9\x8e\x7f\xaf\xd5\x2d\xca\x89\xd0" "\x37\xca\x2a\xd2\xaf\x8f\x12\x2d\x41\x04\x60\x7e\xc4\x26\x0f\xaf\x50" "\xb2\x60\x06\x36\xe2\xc4\xdf\x07\xad\xb7\x58\x43\xb0\x63\x53\xa7\x42" "\x32\x7d\xcf\xad\x12\xef\x37\x51\xae\x3a\xd2\x2b\xaf\xf3\x8e\x9a\x24" "\x4a\xb2\xf1\x1e\x02\xc5\x41\xed\xe3\x08\x39\x30\x2a\x64\xc8\x6c\x5e" "\x88\x9f\x61\x7e\x9e\xcf\xd7\xa8\x0a\x73\x91\x26\x83\x6f\xe9\x0a\xf8" "\xba\xb0\x7c\x6a\x94\xf2\xfa\x1d\x01\xd5\x17\xcb\x7c\xd4\xf8\x23\x72" "\x79\xd9\xa6\x8f\x8a\x01\x6f\x01\xdc\xd1\xc2\xc7\x4c\x0b\xdd\x6d\x35" "\x87\xf3\xac\x4c\x5e\x65\x30\x0f\x3f\x74\x09\x34\x3a\xe2\x82\x9c\xe6" "\x63\x84\x4d\x9c\x7b\x32\x57\xad\xba\x36\x46\xf1\x5f\xb5\x06\xe8\x14" "\x97\x67\x3e\xad\xde\x06\x0c\x66\x60\xb4\x1f\x12\x7e\x73\x8a\xec\xe0" "\xc4\xd6\x39\x17\x21\x69\x55\x65\xe9\x02\x98\x48\x46\x28\x4c\x7b\xcd" "\xc7\x18\x2c\xd7\x69\x57\x24\x78\x34\x16\xad\x2a\xdc\x5b\x52\x02\x19" "\xb4\xa0\x1e\x88\x04\x2d\x7d\xb3\x79\x1d\x8f\xd8\x1c\x74\x72\x8d\x34" "\xd9\x85\x9e\x24\x78\x4d\xd8\x53\xce\x30\x10\x0a\x30\x3d\x22\x65\xd9" "\xc1\x40\xd1\x91\x3c\xdb\x50\xfc\x20\x9c\xdd\x8a\xfa\xac\x19\x28\x09" "\xc9\x60\x52\x35\xa6\x75\x56\x2e\x08\xfe\x2f\x6a\x59\x5b\x0f\x72\x5a" "\x1d\x39\x42\xcb\xa1\x72\x92\xae\x10\x0c\x67\x59\x7f\xfa\x2a\xd9\x48" "\xf4\x14\xf7\xf7\x05\x4d\x38\xe0\xe7\x48\x43\xe1\x3d\x79\x32\x4c\xaf" "\x86\x78\xd4\xc9\xef\xfa\x3d\xc6\xbd\xb4\xd3\x89\x3a\x57\xc5\x06\xaa" "\x05\xff\x58\xd1\x0e\x2e\xdc\x06\x3a\x31\xea\x7b\x40\x39\x80\xed\x22" "\x3e\xa4\x25\x9c\xae\x71\xaf\x41\x66\xf4\x40\xd2\xdf\x39\x01\x1c\x79" "\x73\xfc\x14\x6d\x53\x57\xc0\x71\x6f\x0c\x82\x96\xf8\x1a\x5d\x93\xe5" "\xb4\xc0\x02\x29\x11\x04\x32\x85\x3f\x57\xf8\x58\x44\x50\x47\xaf\x6f" "\x7f\xa1\x56\x48\x78\xc2\x0b\x27\x59\x06\x68\xda\xec\xef\xce\xa9\x74" "\x35\x97\x78\x02\xea\x78\x4f\x34\x80\x5f\x94\xe1\x7a\x3c\x00\x32\x59" "\xcd\x2d\x86\xe9\xff\x44\xa5\x42\xdd\x56\x80\xc7\x00\x0a\x0d\xc3\x5b" "\x39\x63\xfd\x8d\xf1\xec\xf0\x44\xb5\x13\xe1\xaf\x8c\xc1\xe8\x0c\x0b" "\x27\xe0\x1c\x20\x4b\xf9\x2a\x09\x36\xde\x3f\xbb\xfc\xd9\x49\xde\xac" "\xf9\x9b\x83\x81\x6d\x71\xda\xa2\x7f\x34\x81\x31\x20\x37\x4d\xfc\x83" "\x72\x5e\x25\x0a\x92\x32\x90\xe2\xa1\x75\x09\x75\x1f\x44\xbd\x4f\xb3" "\xe4\x4b\xb3\xef\x13\x7e\x96\xcb\x75\x4f\xad\x0a\x01\xbf\x30\x0d\xa6" "\xa0\x7f\x12\x54\xa7\x00\x75\xeb\x54\xb7\x8c\xa1\x0a\x91\xe7\xcd\x81" "\x66\x89\x24\x10\xd6\x7a\xaa\xdd\xc4\xed\x07\xa1\x7f\x7c\xbb\x8d\x3d" "\x05\xbf\x15\x3d\x46\x65\x16\x0c\xd6\xd0\x43\xa9\xe3\x7c\xcd\xcb\x3e" "\x76\xbf\x5a\xcf\xf7\xbe\x9b\xed\xa7\x0a\xab\xef\x5b\x91\xd8\xfc\x64" "\x22\xac\xdf\x01\x60\x8e\xdd\xb2\x33\x04\xbb\xbb\xb2\x0a\x63\x53\x9c" "\xb1\x51\xd1\x67\xa0\x0e\xf0\x73\x68\x75\xa3\x90\x84\x40\x40\x37\xff" "\x3e\x52\x03\xc2\x25\xac\x9b\x71\xd5\xc3\xb4\xc4\xc9\x75\xe9\x0b\xa6" "\xd5\xec\x11\xb0\x63\xe4\x30\xe1\x79\xcd\xf2\x1c\xa2\xf6\x42\x65\xb1" "\x35\xc0\x8f\x3a\x51\xb1\xf3\x35\x8c\x21\x72\xc7\x63\x8c\x51\x4c\x47" "\x44\x0d\x40\x83\x75\x7b\x9e\xd2\xa4\x6a\x6a\x8c\x9b\x2b\xb8\x6a\xc7" "\x4b\xc8\x4b\x88\xbe\x17\x0f\x22\x17\xd5\x7a\xf2\x41\xd9\xb1\x9d\x4e" "\x5d\xa9\x65\xd9\x5f\xb4\xb3\x3d\x50\x93\x81\x17\x36\x80\x6d\x35\x6a" "\x71\x58\xf0\x5c\x94\x55\x2e\x64\xec\xb9\x7a\x26\x1e\x80\x27\xe6\x59" "\xde\x50\x48\x3d\xb8\xb3\x62\x39\x57\x86\x1d\x96\xc8\x87\x76\xfa\xda" "\x8a\x7f\xc5\x85\xbf\xb1\x44\x0e\x55\x2b\x62\xe9\x39\xf5\x7d\xd4\x71" "\x1d\x3a\xb1\x9d\xf2\xac\xc7\xdd\xf3\xc1\xcb\x7b\xd1\x19\xec\x07\x76" "\xfe\xc4\xf8\x47\x6a\x55\x2a\x51\x47\xa7\xb9\xa6\x56\xab\xb0\x70\xd2" "\xae\xe4\x3d\x9e\x2d\x65\x53\xc7\x51\x36\x7b\x3c\x7b\x04\x1b\xdf\x05" "\x8b\xde\x12\xe3\x6e\x56\x6f\x47\x4a\xf9\x35\x1c\x6b\x23\x4e\x5e\x08" "\x19\xc7\xbb\x7a\x6b\xd5\x48\x96\x99\xc0\x32\xb5\xb8\xbb\xe3\x0e\xa2" "\xd9\x78\xdb\xe7\xff\x90\xf9\x36\x0d\x43\x77\x15\xd8\xec\x4d\x2f\xf4" "\x0e\x44\x00\xe2\x74\x07\x67\x6f\x6e\x92\x4e\xec\x84\x99\x37\x37\x3d" "\x4c\x76\x32\xeb\x0a\x68\x8d\xd8\xea\x07\x0f\x64\x4b\x41\x4a\xb3\xfb" "\xa1\x13\xb3\xce\x65\x37\x6e\x6a\x39\x3e\xd4\x9c\x22\xa1\x4e\x13\x74" "\xe0\x11\xc7\xca\x6c\x3b\x2c\x33\x6e\x0d\x0f\x94\x06\x08\xb1\xed\xfb" "\xb9\xf4\x4f\xa6\x77\xb6\x4e\x7d\x0c\xa5\x86\xe3\xff\x97\x3f\x26\xbe" "\x1f\x0c\x3a\xbb\x94\x41\xae\x07\x3d\x74\x69\x60\xa7\x01\xdb\xda\xaf" "\x52\x8f\x2e\xa4\x31\x57\x0c\xf7\x8d\x97\x42\xf0\x96\xd8\xd7\xb6\xad" "\x2d\x7d\x80\x4a\x62\xfd\x30\x1a\x53\xba\x62\xef\x5b\xb5\xf9\x29\xd0" "\xd1\x2e\x85\xc9\x9d\x4c\x95\xdd\x76\x57\xb9\x76\x64\xf6\x0d\x60\xfa" "\x1f\x30\xc2\xa2\xdc\x3f\x79\x45\x19\x63\xef\xbd\x22\x9d\xf2\x0b\xc6" "\x5d\x0d\x7f\x67\xb1\xd4\x5b\x53\x9e\xdc\xce\xd7\xa3\xb2\x36\x0c\x53" "\x70\x28\xce\x2e\x25\xaa\x10\x26\x2a\x90\x85\x66\x9f\xf1\x2e\x31\xdd" "\x43\x88\x86\xbd\xd2\xaf\x97\x73\xff\x9f\x33\xfe\xaf\xd9\x29\x26\x72" "\x38\x1b\xc1\xb3\x58\x77\xcb\x8e\x8b\x07\x49\xe9\x00\xb7\xd7\x3e\x71" "\x87\xb0\x93\x30\xca\x19\xdf\x4a\x55\xc9\xcd\xd9\x55\x38\xce\x38\xb6" "\xa3\x4e\x64\x30\x9f\x8c\x31\x03\xc8\xf5\x11\xf8\x7c\x62\x10\x5d\x05" "\x6f\xb9\x21\xc4\xd0\x7b\xa9\xe7\xec\x29\x1f\x8b\xf2\x44\xae\x75\x7e" "\xa3\x63\x83\x09\xbc\x4d\x12\x70\x55\xb7\xd3\x4e\xdb\x0a\x9c\x19\xab" "\xb9\x3c\x00\x5b\xd9\x11\x26\xc9\xfb\x12\x3b\x38\xbe\xce\x81\x50\x74" "\x02\xbe\xc3\xfa\xcf\x27\xf6\xdf\x3e\xd2\x60\xab\x46\x58\xda\x19\x8e" "\x09\xa9\x67\xb7\x1c\x1b\x46\xd2\xbe\x4d\xdd\x85\x21\x52\x9b\x02\x4c" "\x6a\xba\x7d\x0f\x7e\x48\x05\x77\x7d\x27\x80\x0f\x35\x94\x13\x8c\x3e" "\x93\x83\x71\xa7\x72\x23\x74\xaf\xee\xd0\xfd\xf4\x25\x57\x68\x11\x07" "\x5e\x20\xb2\x0c\x6c\xd5\xc4\x93\xa6\xa4\x07\xaa\x34\x68\xf6\x7c\x9f" "\x4c\x6f\x01\x29\x33\x07\xd9\x31\x08\x2f\xc2\x80\xc2\x2c\x41\x95\x1f" "\x12\x2e\x52\xd9\x78\x57\x32\xba\x1f\xcb\x00\x3d\x1a\xcb\x02\xcc\x6b" "\x7b\x11\x4a\xd0\xfa\x32\xeb\x92\xd3\x0c\x11\x39\x48\xfc\xa3\x92\xa0" "\xa8\x9e\x8c\xba\xe8\xa0\xd0\x2e\xa7\x51\x77\xde\x45\xf0\x3a\x6c\xea" "\x91\xa6\xc2\xdd\x43\xf0\x45\x5f\xfb\x75\x99\x0d\x88\x2e\x9e\xaf\xe5" "\x23\x7d\x2a\x16\xdf\xba\x60\x05\x84\x09\xdb\xba\x06\x3b\x68\x75\x30" "\x1e\x4e\x8e\x87\xf2\x95\x95\xb1\x64\x41\xd1\x44\xd7\x19\x30\x15\xa3" "\x0b\xcd\x9f\xab\xd7\x58\x33\x87\xae\x78\x65\xe3\xa7\x60\x9f\xaf\x8b" "\x6b\xc2\x80\x72\xfa\x4b\xb8\x24\xeb\x08\x09\x25\x17\xd1\x56\x92\xe3" "\xd5\x12\xaa\xcd\x03\xf2\x69\x7e\x94\xa3\x15\xdb\x67\xa2\xc5\x16\x85" "\x80\x02\xd3\x99\x1b\x0c\xc6\xdf\x85\xdf\x21\xdd\x11\x37\xaa\x68\x50" "\x04\xfb\xf4\xd1\x3e\x47\x3d\xcf\xcb\x8b\x01\x55\xba\x8a\x58\xbc\x8d" "\x96\x71\x19\xd6\x49\x6a\x08\xcb\x6b\xf5\x85\x1a\xd2\x98\x85\x86\x0c" "\xb4\xf8\x93\x67\x16\x8e\xad\x50\xb9\xc8\xdb\x7b\xb0\x48\x47\xe2\xf2" "\x75\x02\xed\xaa\xe6\x46\xc0\x96\x50\x3c\xe3\x71\xd4\x37\x1e\x32\x7e" "\x42\x8b\x54\x21\x19\x7b\x69\xcb\x9c\x58\x92\x02\x63\x28\xb7\x9c\xf4" "\x55\x9a\xed\x0e\xcf\xba\xeb\xd9\xc9\x48\x55\x80\xa0\xce\x67\xfc\x2a" "\x60\xc0\x36\x90\x4d\xe1\xb7\xda\xbc\xfa\xa5\xb0\x90\xaa\xfa\xa6\xfd" "\xc3\x88\x08\xd8\x67\x3c\x23\x82\x6a\xaa\xc2\xbe\x67\xc5\x7c\xed\xf4" "\x9d\xd8\xb9\xe0\x75\x4a\x90\x2b\xe4\xa0\x7b\x47\xaf\x73\x76\x03\x09" "\x37\x26\x83\x38\x35\xfd\x67\xa9\x55\x08\xd6\x94\x2c\xb8\xf0\x41\x8c" "\x25\x9d\xc2\x44\x7a\xce\x78\x83\xa3\x76\x14\xa2\x18\x13\xba\xcf\x26" "\x05\x79\xa2\x2d\x63\xc0\x6d\x39\x63\x9a\x4e\x24\xb5\x00\xe8\x5f\x3b" "\x4d\x1c\xf4\xca\x3c\x5c\xbe\xd2\x79\xdd\xaa\x42\x27\x2f\xe7", 8192); *(uint64_t*)0x20000f80 = 0; *(uint64_t*)0x20000f88 = 0; *(uint64_t*)0x20000f90 = 0; *(uint64_t*)0x20000f98 = 0; *(uint64_t*)0x20000fa0 = 0; *(uint64_t*)0x20000fa8 = 0; *(uint64_t*)0x20000fb0 = 0; *(uint64_t*)0x20000fb8 = 0; *(uint64_t*)0x20000fc0 = 0; *(uint64_t*)0x20000fc8 = 0; *(uint64_t*)0x20000fd0 = 0; *(uint64_t*)0x20000fd8 = 0x20000580; *(uint32_t*)0x20000580 = 0x90; *(uint32_t*)0x20000584 = 0; *(uint64_t*)0x20000588 = 0; *(uint64_t*)0x20000590 = 1; *(uint64_t*)0x20000598 = 0; *(uint64_t*)0x200005a0 = 0; *(uint64_t*)0x200005a8 = 0; *(uint32_t*)0x200005b0 = 0; *(uint32_t*)0x200005b4 = 0; *(uint64_t*)0x200005b8 = 0; *(uint64_t*)0x200005c0 = 0; *(uint64_t*)0x200005c8 = 0; *(uint64_t*)0x200005d0 = 0; *(uint64_t*)0x200005d8 = 0; *(uint64_t*)0x200005e0 = 0; *(uint32_t*)0x200005e8 = 0; *(uint32_t*)0x200005ec = 0; *(uint32_t*)0x200005f0 = 0; *(uint32_t*)0x200005f4 = 0x2000; *(uint32_t*)0x200005f8 = 0; *(uint32_t*)0x200005fc = 0; *(uint32_t*)0x20000600 = 0; *(uint32_t*)0x20000604 = 0; *(uint32_t*)0x20000608 = 0; *(uint32_t*)0x2000060c = 0; *(uint64_t*)0x20000fe0 = 0; *(uint64_t*)0x20000fe8 = 0; *(uint64_t*)0x20000ff0 = 0; *(uint64_t*)0x20000ff8 = 0; syz_fuse_handle_req(r[0], 0x2000a680, 0x2000, 0x20000f80); break; case 6: res = syscall(__NR_socketpair, 1ul, 2ul, 0, 0x200000c0ul); if (res != -1) r[2] = *(uint32_t*)0x200000c4; break; case 7: *(uint64_t*)0x20008600 = 0; *(uint32_t*)0x20008608 = 0x7f; *(uint64_t*)0x20008610 = 0x20000000; *(uint64_t*)0x20008618 = 0; *(uint64_t*)0x20008620 = 0; *(uint64_t*)0x20008628 = 0; *(uint32_t*)0x20008630 = 0; *(uint32_t*)0x20008638 = 0; *(uint64_t*)0x20008640 = 0x200072c0; *(uint16_t*)0x200072c0 = 1; memcpy((void*)0x200072c2, "./file0/../file0/" "file0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" "\000\000\000\000\000\000\000", 108); *(uint32_t*)0x20008648 = 0x32; *(uint64_t*)0x20008650 = 0x20007380; *(uint64_t*)0x20008658 = 0; *(uint64_t*)0x20008660 = 0x20000600; *(uint64_t*)0x20008668 = 0; *(uint32_t*)0x20008670 = 0; *(uint32_t*)0x20008678 = 0; syscall(__NR_sendmmsg, r[2], 0x20008600ul, 2ul, 0ul); break; } } int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); loop(); return 0; }