// https://syzkaller.appspot.com/bug?id=e0946105ebfd712b431d84ac456eb04cb1e22a7a // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &ev->state, FUTEX_WAKE | FUTEX_PRIVATE_FLAG, 1000000); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, 0); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout) { uint64_t start = current_time_ms(); uint64_t now = start; for (;;) { uint64_t remain = timeout - (now - start); struct timespec ts; ts.tv_sec = remain / 1000; ts.tv_nsec = (remain % 1000) * 1000 * 1000; syscall(SYS_futex, &ev->state, FUTEX_WAIT | FUTEX_PRIVATE_FLAG, 0, &ts); if (__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) return 1; now = current_time_ms(); if (now - start > timeout) return 0; } } #define FUSE_MIN_READ_BUFFER 8192 enum fuse_opcode { FUSE_LOOKUP = 1, FUSE_FORGET = 2, FUSE_GETATTR = 3, FUSE_SETATTR = 4, FUSE_READLINK = 5, FUSE_SYMLINK = 6, FUSE_MKNOD = 8, FUSE_MKDIR = 9, FUSE_UNLINK = 10, FUSE_RMDIR = 11, FUSE_RENAME = 12, FUSE_LINK = 13, FUSE_OPEN = 14, FUSE_READ = 15, FUSE_WRITE = 16, FUSE_STATFS = 17, FUSE_RELEASE = 18, FUSE_FSYNC = 20, FUSE_SETXATTR = 21, FUSE_GETXATTR = 22, FUSE_LISTXATTR = 23, FUSE_REMOVEXATTR = 24, FUSE_FLUSH = 25, FUSE_INIT = 26, FUSE_OPENDIR = 27, FUSE_READDIR = 28, FUSE_RELEASEDIR = 29, FUSE_FSYNCDIR = 30, FUSE_GETLK = 31, FUSE_SETLK = 32, FUSE_SETLKW = 33, FUSE_ACCESS = 34, FUSE_CREATE = 35, FUSE_INTERRUPT = 36, FUSE_BMAP = 37, FUSE_DESTROY = 38, FUSE_IOCTL = 39, FUSE_POLL = 40, FUSE_NOTIFY_REPLY = 41, FUSE_BATCH_FORGET = 42, FUSE_FALLOCATE = 43, FUSE_READDIRPLUS = 44, FUSE_RENAME2 = 45, FUSE_LSEEK = 46, FUSE_COPY_FILE_RANGE = 47, FUSE_SETUPMAPPING = 48, FUSE_REMOVEMAPPING = 49, FUSE_SYNCFS = 50, FUSE_TMPFILE = 51, FUSE_STATX = 52, CUSE_INIT = 4096, CUSE_INIT_BSWAP_RESERVED = 1048576, FUSE_INIT_BSWAP_RESERVED = 436207616, }; struct fuse_in_header { uint32_t len; uint32_t opcode; uint64_t unique; uint64_t nodeid; uint32_t uid; uint32_t gid; uint32_t pid; uint32_t padding; }; struct fuse_out_header { uint32_t len; uint32_t error; uint64_t unique; }; struct syz_fuse_req_out { struct fuse_out_header* init; struct fuse_out_header* lseek; struct fuse_out_header* bmap; struct fuse_out_header* poll; struct fuse_out_header* getxattr; struct fuse_out_header* lk; struct fuse_out_header* statfs; struct fuse_out_header* write; struct fuse_out_header* read; struct fuse_out_header* open; struct fuse_out_header* attr; struct fuse_out_header* entry; struct fuse_out_header* dirent; struct fuse_out_header* direntplus; struct fuse_out_header* create_open; struct fuse_out_header* ioctl; struct fuse_out_header* statx; }; static int fuse_send_response(int fd, const struct fuse_in_header* in_hdr, struct fuse_out_header* out_hdr) { if (!out_hdr) { return -1; } out_hdr->unique = in_hdr->unique; if (write(fd, out_hdr, out_hdr->len) == -1) { return -1; } return 0; } static volatile long syz_fuse_handle_req(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { struct syz_fuse_req_out* req_out = (struct syz_fuse_req_out*)a3; struct fuse_out_header* out_hdr = NULL; char* buf = (char*)a1; int buf_len = (int)a2; int fd = (int)a0; if (!req_out) { return -1; } if (buf_len < FUSE_MIN_READ_BUFFER) { return -1; } int ret = read(fd, buf, buf_len); if (ret == -1) { return -1; } if ((size_t)ret < sizeof(struct fuse_in_header)) { return -1; } const struct fuse_in_header* in_hdr = (const struct fuse_in_header*)buf; if (in_hdr->len > (uint32_t)ret) { return -1; } switch (in_hdr->opcode) { case FUSE_GETATTR: case FUSE_SETATTR: out_hdr = req_out->attr; break; case FUSE_LOOKUP: case FUSE_SYMLINK: case FUSE_LINK: case FUSE_MKNOD: case FUSE_MKDIR: out_hdr = req_out->entry; break; case FUSE_OPEN: case FUSE_OPENDIR: out_hdr = req_out->open; break; case FUSE_STATFS: out_hdr = req_out->statfs; break; case FUSE_RMDIR: case FUSE_RENAME: case FUSE_RENAME2: case FUSE_FALLOCATE: case FUSE_SETXATTR: case FUSE_REMOVEXATTR: case FUSE_FSYNCDIR: case FUSE_FSYNC: case FUSE_SETLKW: case FUSE_SETLK: case FUSE_ACCESS: case FUSE_FLUSH: case FUSE_RELEASE: case FUSE_RELEASEDIR: case FUSE_UNLINK: case FUSE_DESTROY: out_hdr = req_out->init; if (!out_hdr) { return -1; } out_hdr->len = sizeof(struct fuse_out_header); break; case FUSE_READ: out_hdr = req_out->read; break; case FUSE_READDIR: out_hdr = req_out->dirent; break; case FUSE_READDIRPLUS: out_hdr = req_out->direntplus; break; case FUSE_INIT: out_hdr = req_out->init; break; case FUSE_LSEEK: out_hdr = req_out->lseek; break; case FUSE_GETLK: out_hdr = req_out->lk; break; case FUSE_BMAP: out_hdr = req_out->bmap; break; case FUSE_POLL: out_hdr = req_out->poll; break; case FUSE_GETXATTR: case FUSE_LISTXATTR: out_hdr = req_out->getxattr; break; case FUSE_WRITE: case FUSE_COPY_FILE_RANGE: out_hdr = req_out->write; break; case FUSE_FORGET: case FUSE_BATCH_FORGET: return 0; case FUSE_CREATE: out_hdr = req_out->create_open; break; case FUSE_IOCTL: out_hdr = req_out->ioctl; break; case FUSE_STATX: out_hdr = req_out->statx; break; default: return -1; } return fuse_send_response(fd, in_hdr, out_hdr); } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { if (write(1, "executing program\n", sizeof("executing program\n") - 1)) { } int i, call, thread; for (call = 0; call < 7; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[4] = {0xffffffffffffffff, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: // mkdirat arguments: [ // fd: fd_dir (resource) // path: ptr[in, buffer] { // buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8) // } // mode: open_mode = 0x0 (8 bytes) // ] memcpy((void*)0x200000000000, "./file0\000", 8); syscall(__NR_mkdirat, /*fd=*/0xffffff9c, /*path=*/0x200000000000ul, /*mode=*/0ul); break; case 1: // openat$fuse arguments: [ // fd: const = 0xffffffffffffff9c (8 bytes) // file: ptr[in, buffer] { // buffer: {2f 64 65 76 2f 66 75 73 65 00} (length 0xa) // } // flags: const = 0x2 (4 bytes) // mode: const = 0x0 (2 bytes) // ] // returns fd_fuse memcpy((void*)0x200000000300, "/dev/fuse\000", 10); res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x200000000300ul, /*flags=*/2, /*mode=*/0); if (res != -1) r[0] = res; break; case 2: // mount$fuse arguments: [ // src: const = 0x0 (8 bytes) // dst: ptr[in, buffer] { // buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8) // } // type: ptr[in, buffer] { // buffer: {66 75 73 65 00} (length 0x5) // } // flags: mount_flags = 0x0 (8 bytes) // opts: ptr[inout, array[ANYUNION]] { // array[ANYUNION] { // union ANYUNION { // ANYBLOB: buffer: {66 64 3d} (length 0x3) // } // union ANYUNION { // ANYRESHEX: ANYRES64 (resource) // } // union ANYUNION { // ANYBLOB: buffer: {2c 72 6f 6f 74 6d 6f 64 65 3d 30 30 30 30 30 // 30 30 30 30 30 30 30 30 30 30 30 30 30 34 30 30 30 30 2c 75 73 // 65 72 5f 69 64 3d} (length 0x2a) // } // union ANYUNION { // ANYRESDEC: ANYRES64 (resource) // } // union ANYUNION { // ANYBLOB: buffer: {2c 67 72 6f 75 70 5f 69 64 3d} (length 0xa) // } // union ANYUNION { // ANYRESDEC: ANYRES64 (resource) // } // } // } // ] memcpy((void*)0x2000000020c0, "./file0\000", 8); memcpy((void*)0x200000002100, "fuse\000", 5); memcpy((void*)0x2000000003c0, "fd=", 3); sprintf((char*)0x2000000003c3, "0x%016llx", (long long)r[0]); memcpy((void*)0x2000000003d5, ",rootmode=00000000000000000040000,user_id=", 42); sprintf((char*)0x2000000003ff, "%020llu", (long long)0); memcpy((void*)0x200000000413, ",group_id=", 10); sprintf((char*)0x20000000041d, "%020llu", (long long)0); syscall(__NR_mount, /*src=*/0ul, /*dst=*/0x2000000020c0ul, /*type=*/0x200000002100ul, /*flags=*/0ul, /*opts=*/0x2000000003c0ul); break; case 3: // read$FUSE arguments: [ // fd: fd_fuse (resource) // buf: ptr[out, fuse_in[read_buffer]] { // fuse_in[read_buffer] { // len: len = 0x2020 (4 bytes) // opcode: int32 = 0x0 (4 bytes) // unique: fuse_unique (resource) // uid: uid (resource) // gid: gid (resource) // pid: pid (resource) // padding: int32 = 0x0 (4 bytes) // payload: buffer: (DirOut) // } // } // len: bytesize = 0x2020 (8 bytes) // ] res = syscall(__NR_read, /*fd=*/r[0], /*buf=*/0x200000002140ul, /*len=*/0x2020ul); if (res != -1) { r[1] = *(uint64_t*)0x200000002148; r[2] = *(uint32_t*)0x200000002150; r[3] = *(uint32_t*)0x200000002154; } break; case 4: // syz_fuse_handle_req arguments: [ // fd: fd_fuse (resource) // buf: ptr[in, buffer] { // buffer: {92 75 6f 43 b3 1f fe 54 27 88 ef 58 6b 7c 5a 34 44 24 e3 ac // ac 25 90 be 6b be 37 ad fa ce 4a 8f 2e 53 4f fe 76 a8 3a 93 f0 b3 68 // 0a 72 fd df de 83 f9 6d 01 98 23 84 e8 d6 89 21 9c b9 66 9b 14 db aa // 1b 79 9f 82 ea 1f c9 26 12 6a 41 63 61 8e 16 d4 f9 41 43 a4 e0 f2 7c // 44 fc ef 39 20 a0 b3 80 5e d4 e7 80 98 d8 68 9c c7 79 1b d8 66 48 07 // 07 18 d2 38 66 43 32 94 8d 87 86 6c 8d 25 90 fc 0f 01 7f 98 53 ab d9 // ed 60 b9 9f 1a a6 ae 2d bd 24 ab 6d bc eb db 05 52 46 81 5a ce 14 7c // c5 0f a3 b2 86 11 48 fc da 37 4d 5b 20 3e 51 d7 2c 45 e4 dd e3 e9 ee // 9a 47 ff e4 58 ba f7 bb 49 03 51 35 a8 19 4a a1 f0 a8 3f a2 ab ed 56 // 39 8f 90 da ff 67 96 34 61 94 53 f5 33 f2 25 83 a6 e0 a4 dc 09 e9 de // 46 68 4d 5e 01 36 e2 29 51 0f 37 02 cf 3a 4c d0 06 5d 3e 5d 3c 41 9e // 38 a8 0b 07 0c a5 50 10 e0 82 a9 c5 10 fd 18 cc 0b 26 bb 5e 8e 45 9e // 74 7b ef bc 5c 6b 60 ac e8 0b f4 14 17 b7 b7 8c f5 7e 5b 39 84 f0 cd // dd c6 15 c5 e0 00 04 54 d3 f4 a1 96 fb 6d 18 aa 62 9c f0 b0 24 5f 95 // ba 95 8d 86 dc 17 56 16 f8 cd 3a c4 73 05 7d c3 a5 ff 71 07 97 33 26 // 35 01 07 f4 46 8e 7e cd 48 d6 89 b8 2c 12 d2 2a e5 f1 85 83 02 a1 b4 // cf de 8f d3 47 a9 9d dc de 40 d1 c4 9d 9b 50 99 fb cc f0 9e 78 22 12 // be 4b 2c e3 6a 2b c3 c9 ee 79 4a bf fe 72 a5 50 1e 6c 4f 3f 7f 68 b7 // 47 61 ff d6 62 06 09 22 4a 3b f1 1f 65 5d ad b5 c8 a5 81 3b 02 fb 46 // 83 0e 9a c6 82 5f 5d 0e 89 91 03 52 eb 3a 58 c0 dd 82 d0 94 f9 4d d2 // c8 56 66 f6 84 a8 f4 37 bb d0 e6 6b 9f 4d 36 61 17 b6 7a 05 4d 21 2c // 4f bc 28 78 48 cb 05 78 39 13 35 d5 d6 16 b1 4d 99 a2 e3 df 8e 8a 15 // 2d 5d e9 9b ce fc aa b5 bb 5c c7 1f 3d dd 66 b3 79 c1 04 64 8e 19 0e // 0b 28 a1 80 d3 ae cc 54 23 57 5d 4b a7 db f3 12 15 c7 17 da 7b 87 dd // 45 4b 6e fc d3 6c 91 aa a6 31 12 7f 5b d8 87 23 d2 21 75 2f 10 2b c0 // c7 ac 6c 5c 7a 1a d6 74 7a f4 0d 01 b6 d3 9e ab 7b 0e 12 92 b4 46 83 // c5 86 38 6a d0 0a cf 60 fb 8f 9b ac 55 1a 6e b5 ba b7 31 7b 5d 89 f6 // 4d b1 0b d9 01 8d fa 6d 65 d9 38 62 e8 51 af bc 30 fd 70 fe 5f 0d e3 // 22 46 20 45 17 72 31 85 2c a8 0e 4e 78 da 4f ea 0c 79 ba 35 43 33 02 // 6c 8b c7 7d 30 8a 8d 25 6a 19 ec 45 d2 08 8c 19 66 91 d3 f9 aa c2 8d // ed 36 00 4a 65 ee 1c e4 9b a9 59 9c ee e8 45 34 bb 61 d0 2d 04 a6 73 // 2f 1e 27 d7 29 62 f7 4b 59 f3 52 2b f8 44 c5 02 29 86 d5 59 34 e4 8b // 86 81 b7 f5 b7 53 23 91 44 8c ae ef 00 31 5d 28 32 0a 46 d8 bd 78 13 // 54 4e 1e 4b f9 94 e1 4a 51 9c 26 54 ff 20 b4 2b db 69 c2 62 89 7e 28 // ec a5 28 f0 99 98 40 b0 0e d8 25 65 97 d2 7c fc 20 d7 1d 5f 40 d0 bb // ca 75 9f 75 94 c6 03 4a a1 e1 6a 84 ed 15 2f ad 0f dc 1c 30 3a 7f 61 // 22 57 12 71 4f 82 3a fc 5e a2 41 d4 82 d3 58 57 59 62 3a f8 c9 7c a6 // a8 4a 20 33 b3 d7 31 4e a0 ef 7b a9 b2 88 b3 62 a2 94 c9 2c 8b 97 36 // 82 9c 16 f6 1c 5a 1e e0 4a ca 96 5d 71 16 22 92 27 45 95 ea 62 c9 c2 // 91 8e 82 79 c9 9f 5d 28 30 c6 17 c5 82 11 fd 74 52 33 01 84 b9 42 8d // 5e c1 d5 cd 75 dd cc 6d e3 32 6f dc 70 e8 91 10 4b 3b 01 3c 30 ff cc // fa f3 30 8d 96 71 b0 1f 6b 08 0a 93 0d ac 20 52 c6 f3 98 17 a6 62 12 // 1d 90 d4 0d 6a 1f ac fb 50 be c7 d4 08 03 0b 6d 0a e3 e7 44 f3 bc c3 // 27 c3 5d c4 3c f8 6b 74 3d b7 8f f2 e5 93 b1 99 23 23 5e d6 46 7f 29 // 9b 08 71 8f e1 84 0c 16 a7 48 93 5d ff 94 11 50 fb 08 b3 05 73 b3 7b // f9 af 5c 86 cc 8d 9e 22 9a 83 2e 4e f2 5e c9 1f 71 12 0f 2b 3e 90 62 // 48 59 76 c2 80 a2 d1 72 38 60 29 e2 f2 a4 80 11 97 fc a0 a1 35 14 ed // ac f5 dd ba c5 a6 2e 8b b1 3d d1 57 26 57 a8 21 a8 73 92 97 f7 2e 29 // 23 9d 1c dd df 3e 30 cb e9 af 31 41 f2 27 5e e4 ae 85 d8 6e c8 88 fe // 9a 67 51 f2 52 05 7e 95 b8 be b0 55 e2 76 43 95 81 af ee 93 cd 44 f1 // e9 2f 70 e5 f7 25 45 1d 3a b6 62 91 8f fb b1 26 95 09 fb d5 11 e9 5a // 00 ec 71 7f 9d 60 d6 43 86 4a bd 6a d1 cc 4d d7 f9 33 37 9a 60 78 a8 // 6c 21 58 db 80 76 e7 b6 60 36 6f ca 7b 1c 46 d0 9d 2c 8e 67 a6 49 4b // fb 4c 2c 67 50 e7 65 93 89 5b 5e 2b 2b c7 80 93 84 0c 3c 4a 80 78 26 // bc 27 50 a9 6b 4e 1d d5 b8 2b 49 2b b2 21 55 18 c9 20 64 d1 76 3c 37 // 13 26 04 e5 2e 73 fa c3 f4 51 1f 79 17 53 ae ec fb b1 98 16 e0 da 7a // 1b fb ea 9e ea a0 f2 56 ea ed cb 11 9a 61 f7 d0 ea 0f 5c d4 96 9d 45 // cb 01 48 00 f2 c8 88 d5 c2 21 7c f0 f6 9a 75 07 77 98 83 b5 73 52 bb // 88 83 cc 58 48 91 95 0d 6e 79 25 37 07 4f 4f c4 33 7a a1 9b 9b f6 0e // 18 ed d9 39 d2 89 fb 4a 6b 7a a6 c6 6d a2 07 74 e2 49 ca 4f 77 9d 3c // 91 0b 1a 9a 8e 4c 38 af 6a de cc 87 d5 48 1d 18 1f d6 60 23 ff ff 24 // 6f 4e 25 56 b2 18 fe 81 10 ac eb e2 0b 16 75 f1 de 6f 26 5b 6d 1d 85 // 14 a5 35 22 39 6b f0 e2 f2 b1 53 c4 98 e4 8b 36 d1 6f 8b 9b d5 6f 45 // d7 f5 b9 39 7d 7f 13 39 11 7a 17 6d 0b ad 0b 68 e8 00 68 24 16 d3 e1 // 8f e2 19 7c 7f 8d c2 06 00 fe b9 5c c6 ba 86 ad 47 f1 13 e1 59 bd 43 // 89 e3 0e ab 28 74 bd 27 ee bc 56 02 0c 4d ab 99 73 b1 3f 3e 82 aa 62 // a7 e0 a1 51 d7 3d e4 8c b8 11 e3 2b e6 3f fd 30 3f 5a 6e a6 f0 97 ed // 76 3f bf 36 c4 30 82 1e 45 11 46 de 79 92 23 48 35 4c e2 85 af 09 97 // bf 3c 66 e6 ef 02 94 2e 24 b8 f1 cc dd 54 2f 09 cf e6 5c 0d a0 09 4c // 0b 5f d2 6b bc 06 15 38 b4 1e 5e d2 cb b3 90 ee 29 b1 0a 4b 7a 69 60 // 09 e1 b5 b8 6c 44 c0 a5 61 a2 57 c1 54 15 fe ae b1 43 3e a2 75 ed 6e // 4b 22 85 03 fe 71 ee 59 42 66 51 64 fa ae d6 69 71 12 20 6b e0 fe 78 // 63 ae bd 4b be 95 1d 5d ea 1d a2 94 db a0 79 31 96 38 5f 4d 51 41 c9 // d6 c4 b0 fa 22 b2 e2 00 cf b7 0b 52 ac a3 16 55 e7 1e 5a 57 6c cb 8c // cb 5b 13 64 74 8a a9 81 ed bb 81 a8 13 b1 ae bc 67 be 1f 76 19 e7 e1 // 97 62 2d 98 12 80 42 9f 6c a5 14 5c 5b 3b 05 e6 ba ce 91 91 e5 c5 8f // bf 14 0f 71 f5 94 cb fd 4d b0 e9 f6 92 3f 17 58 ff 94 64 a6 1a 72 0a // 5d 4f 09 c6 22 c3 ce 3f 5d 0d 3a 1d 19 11 11 16 81 08 f4 1f 12 b1 6e // 9e af 36 17 c3 53 71 5c d3 52 60 56 0c bf d0 55 5d 51 ce 5c 40 bb db // 7c 95 ce ae ad ad b8 90 29 74 de 50 b0 86 33 48 18 38 64 f5 ea 68 2e // 67 82 86 a0 6a 6f 39 6a f2 9a 7c 7f b3 3a 35 79 e2 58 35 96 36 12 f3 // c0 d4 cf 36 9d 85 95 9a 0a de da 94 d3 58 24 05 0e 6f ba 7f 83 f9 08 // 67 58 3f 71 3d 77 83 32 3c 70 10 e9 4c 9b e3 31 f8 60 db 39 5d bd e6 // fa ce 5b fd b6 16 fc ef a9 c6 b0 1f 69 63 da a8 40 a3 1f f5 54 a4 58 // c0 c5 0c b5 e0 9f 91 f5 4f 63 23 45 89 de ca f4 5b bf ba ef 0d cb ff // 4a e6 e6 5c a2 6a 53 02 61 c4 91 ef 8e b9 a8 55 a1 d7 46 33 91 c9 b6 // 6b e9 6c f2 4c 3c 32 1e e5 a5 bd c8 57 f6 0b 58 26 83 c6 ae 1e 37 75 // b6 2a 9f 19 ff 8f a5 13 80 ca 8a 2a 3c 6d e7 90 12 f5 72 7b a1 20 25 // e7 e6 72 3a 23 a8 1e 06 7c a6 e5 4c 7b 38 ff 64 88 0d 23 5d 21 e7 ee // 52 58 95 3d cb f9 e2 a9 62 f0 06 ca 4f fe 87 08 59 24 2c 85 0c ba e4 // 22 2b 3b 72 c4 f8 69 34 37 9b a2 ea d1 dc de 90 62 41 b9 94 d9 5c 88 // 35 5a f5 a9 a3 0a ce 9c 93 3a 69 42 f3 41 ad 22 1d d8 25 84 6a 8f d4 // 4c 03 e2 ea a9 31 1c 26 e1 5a 1b d7 cb ba 96 1a 22 ef 23 d7 eb ba 0e // 34 ce c5 ef 09 b1 ce 72 81 4a 97 e3 3b d2 9f 3d 9e c8 0a 4f 45 d1 d2 // 94 86 ac cf 15 c1 1f 1a 80 0b d8 49 18 e7 62 6f 67 82 75 d7 c7 ac b0 // 2c c0 e6 e3 4b b7 66 ba 6b 75 c3 ad 14 fc a9 35 2e 09 c3 b6 93 90 c0 // 45 cf c8 42 ff 9a de 8c a6 93 c0 7f ad c7 04 7a 94 6e 6e 57 0c 3a fc // 5b 50 1c 96 41 03 39 7f 5d da dc 2d 59 a0 48 34 8d d4 2f 07 cf e3 1b // c9 b5 ae 45 3f 50 86 bb 41 bb a4 c8 a3 e5 18 e3 0b 08 55 18 4b 05 3f // 92 30 25 dd 72 ce 1b cb f4 12 31 97 8b 34 a8 54 7c 71 d7 31 39 92 16 // 50 78 90 3c 61 d3 12 b0 d9 46 94 13 c9 fd 97 cc df 0e a2 70 fb 6c 47 // ec 88 61 a1 c8 d9 09 ee ac e7 61 b5 a0 6b a4 6e 25 78 5f f8 7f 86 77 // 77 ab b2 37 c6 c9 80 68 79 91 f1 ed 01 57 d5 84 92 26 0c 71 2c ec 34 // c1 fc 09 62 10 39 55 db 4d 50 90 b6 e8 40 9c f3 c3 c7 9d 0e 69 1c f4 // fb c0 b2 25 1a 01 6d cd 45 69 69 cd 32 e5 42 95 33 bf 0d 6f 8b da 84 // c0 5f 0e 20 40 de 8b 53 bf b8 67 6e ec 4b 76 c3 df 6f 46 b1 e4 37 32 // 03 5d da 57 7e 75 f6 40 77 7f 6a e9 0f d2 f1 af 42 ba 46 2d ac 73 20 // 19 c5 99 bf ef 01 ac d6 a0 d4 d1 79 6b cb 8f 58 51 9d 6f 9a d9 a3 20 // 67 04 a9 4d 47 25 16 b9 88 14 1f 44 ec d2 e6 f2 8a 49 aa 0c 44 9d b8 // 79 72 fc 99 5a 97 37 99 14 54 6e a4 31 43 ea 2c f7 79 a9 cb e8 1f 11 // 1f e8 91 29 db 36 10 49 21 64 ab 25 98 ec a7 e6 0d 9a 69 63 d8 ba 03 // a8 67 29 db 86 e4 20 fd 96 d6 1b 8f b1 1e dc 2b 33 9b 57 a7 40 07 4a // e5 b7 75 ea f6 0c d8 5d c9 34 e6 04 bf 2b 4b d5 8e e0 12 05 b4 df 57 // ac 20 ff 8d b4 5a 05 98 2b 57 96 43 88 24 07 05 0c 00 51 02 a2 e7 1f // 1e 56 dc 76 db f5 33 11 12 e8 3e 48 bf b5 cf 2a 78 a8 93 19 0d 78 42 // 61 75 c1 62 ff aa 72 78 a4 3b 99 32 31 8f c1 7f b8 cb 0d fa c6 10 b1 // ad 23 5b 91 f9 cb 76 23 b1 55 11 7e 07 f7 b8 76 a3 c3 76 27 aa 31 ea // fe d1 41 cc 0c 54 91 c4 f6 21 a6 6b 6d 83 7a 14 4d 78 71 9c 46 51 1c // 04 a0 93 cf 65 fc e9 fa be 5b d6 d4 99 ec eb 63 53 8e ce 3c f1 90 53 // 55 0a 23 9b f9 78 c0 8c 87 9f 99 54 48 5a 4e 3e 0d 5b ed b8 4b 40 7c // ed 85 c4 df c4 d7 5a f1 16 81 59 92 c2 9f 0b c9 27 c4 a9 90 c3 8a e4 // fc c9 fe b9 0f ec 1b 1b 55 5e 04 d0 10 42 30 10 85 53 94 d5 cc fc 8e // d2 11 64 19 0c d8 f8 3b e5 de bb 70 29 0c 35 47 f0 7e 4d c4 28 14 f1 // e0 01 79 8e 6c ee e2 55 8b 0c 6f f8 c1 75 9f 90 26 9e e2 26 13 11 16 // 33 2b 99 ac 8d d1 04 c9 20 88 e1 f9 1a ce 31 98 c0 f5 9b fb 75 c4 e4 // a6 97 66 0e ed 43 a2 9c 83 1a 55 2d e3 7f ce 6d ce 96 fa 51 b6 e2 11 // 1f 30 71 a4 e9 44 22 d1 5e 10 2e 5f 67 da 7c a6 ca e6 be d7 74 3e bf // fa cb 8a 81 1a 14 36 05 79 1d 17 23 21 81 a5 17 e8 72 f7 12 62 c3 c7 // 36 68 f0 ef 83 aa d4 98 f6 7f a2 6b ae 69 8c f7 8f 24 c2 db ec d3 99 // a1 90 e6 b8 d0 68 4e 92 9f 2e 80 83 76 5e b2 c6 77 93 a1 ad bb 89 d3 // 6b 58 bf b1 97 cd c5 f3 c8 94 ac 9d 88 6e 8f 3b 09 36 fa bd 23 3c 09 // de 8f ab 80 99 f7 2a 74 d9 08 ba 5c 5e 4d 39 79 0b 0b f9 e4 5b 71 0f // 55 87 b7 c9 37 c7 66 90 c5 c5 fc e6 21 a5 3a 9f d0 3b 0a 4e e6 d8 d1 // ab be 2e d5 61 82 0a 77 f1 2a 08 ca d0 75 55 40 ab 6d d1 60 4b 7c 30 // a8 65 29 95 ab 80 b8 5e 91 90 11 de 94 38 a4 63 7e b0 29 11 24 ed 4b // 74 5e 78 2c ff 98 51 0c b0 3b e7 9c 2a 81 35 1a bf 27 65 84 d7 5c dd // 96 b9 c9 7e 73 eb 71 00 0b 3a b7 c3 c1 9c 2c ab 44 97 29 8f cb 30 52 // b5 d4 50 3d 05 e7 f3 10 31 8b e6 f8 48 54 7b 1a 4f 4d b8 2c ae e1 90 // 80 14 78 be 28 06 50 36 aa 4d 91 f2 90 c1 f3 96 34 3e 73 a5 fe 8b b5 // cc f0 a3 17 17 7e d1 f7 7a cd a1 a4 a4 9d cc fc ab 8d 1b 5d 79 f0 15 // f7 88 b6 d5 e9 f8 22 8a 8b cd c0 69 6e 6b 19 f5 ed ff bc d7 e9 50 9c // 87 fb e1 f7 26 b9 3b f8 c6 d8 d3 74 28 76 3e 14 25 60 c4 6c 9e 89 4f // 73 17 85 90 00 c2 5a bc 4f 36 91 eb cd 02 01 71 e0 d4 91 1b 5d 97 a2 // 38 10 9a ed eb 00 b2 eb 47 5c 1e 7b 45 17 5f 8a a8 51 93 b5 c0 f4 3b // 43 4c 15 de 01 61 0c 4d 02 26 46 cd 6e 36 37 f3 49 a4 34 a7 7f 57 1a // c1 c5 d6 98 45 2d 1b 99 1e 26 7f 78 dc a5 e5 92 ec d3 1c ca fc ad 84 // e4 e9 8d 13 4b 4a dc 52 5b 81 bd 68 43 42 88 83 02 3a 6e a4 07 20 17 // 38 c8 bf 16 b5 41 ff 72 80 27 4a 34 d4 cf 14 81 9f 2d ba e1 67 ca 0c // ae 84 71 c4 95 e0 06 b4 51 94 ad 91 c4 51 6f 21 cb b1 0e 0d 26 fd 5d // 73 4c d7 72 5d f5 b3 fb e9 29 55 f4 a9 bb 3b 9b 81 3a ee ff 79 d6 ed // 5d b9 2d ef 19 d0 60 a2 08 c3 ec 8c 42 c1 10 78 6f 1e 14 96 c5 0a 72 // 49 b0 3f c7 92 76 43 66 89 4a 35 32 0b 99 d0 be f9 fd 0b 6a 24 6c 36 // a3 57 c6 b9 85 dc 83 a3 7a 8d 9b 8b 9a d6 43 de a9 48 60 cb e7 63 bb // 73 cc 84 22 b6 9d 4d 12 33 22 42 c8 95 40 75 fb 71 17 a6 67 96 38 07 // 36 17 ab cd b4 61 98 55 b2 03 6a f1 60 64 7f 66 b3 53 16 45 a3 bf 04 // 7a e2 90 d6 ae 22 49 f1 14 e7 a8 46 42 78 ba e1 48 60 22 bc c7 c3 73 // 90 c8 d9 a0 ef b0 e1 cf a0 da 8e f7 a5 e0 72 f9 9a 47 ec c7 5e 4e 44 // 28 80 37 51 93 db 49 bb 82 ba 34 90 12 86 ca 47 3e d5 b6 3e 40 48 db // 4d c4 55 e7 4b 3f dd 2e 78 98 ca 3f 4c 3a 02 d4 35 cd e6 14 1e ea 64 // 50 55 12 3a 7d cf 0d 22 05 7f 8d 42 57 01 af c5 58 59 f5 14 79 54 e7 // 19 d5 8c 74 86 b1 e0 2a c1 6c b7 99 b7 76 32 c6 6b b7 8e 6e 52 e1 10 // 17 c1 73 64 24 fa 4d 43 3f 1e 19 b4 c8 81 d2 3f 0b 2a 12 d5 fa e3 ae // 24 33 90 88 08 8d 9b 49 6a d9 7b d9 f6 e2 0a 85 97 d1 45 2a 0c 72 dc // f4 3d bb da 8f 18 16 65 85 c0 6d 21 fb ff e5 fe 7b 55 f7 1c 9b 9f 1b // 34 a0 2b d0 5c a6 3c 7c 1b 1b eb bb 9d d2 4f b1 02 91 b0 4c 66 5d 45 // 15 4d d2 8b 85 d8 21 ce 7e 61 31 19 12 89 96 78 5e 10 06 a8 da bc 48 // 99 b1 0d 26 71 10 7d 5a 06 58 ed 36 3b 9d 4b 39 d0 2f 8c c5 e3 50 fb // f0 a3 10 48 ad ec d1 f9 e2 ca 74 9b d8 6f 19 5e b4 8e 9b 46 05 f0 50 // de 03 d6 42 94 0d 79 18 46 18 f7 f8 8a 9a 0a 46 83 ad 84 d6 13 4e 39 // 53 05 bc 1d 4d 9d 17 cc 33 4b 97 65 35 29 d6 68 2a 87 a5 fa c8 0a 6d // 46 d6 e7 2f c2 2e 58 be 7b 8f 86 17 b3 37 2e f2 62 21 10 ab 1e c4 48 // 71 71 18 b2 57 ac ff e5 5d 18 c7 85 5e 9e 87 10 ad 97 7a 67 92 b2 31 // 5a 18 9e b4 46 8c 68 64 1e 9b 60 c0 da b7 01 6a c1 ad 63 cd 80 04 b6 // ec a8 fc 88 b1 e4 26 3a cc 00 49 92 55 c1 6b 11 48 7a 0a f8 58 07 5f // 9c 89 2d c8 04 4c 41 46 e5 a5 67 7c 4a 2c b2 4b de 5e 07 89 85 02 0d // 4a b1 e4 c8 74 92 e7 6b 7e 6f 4b bd 71 d8 4b ab 18 85 c9 70 28 49 e7 // 0c f7 28 77 6b 1a 94 c2 a8 fb 8c 7c a0 1b 61 11 ef 6f 20 32 a2 90 94 // 9b fe 47 3f e2 15 27 3b 8b 5b 3a d5 40 f1 87 49 0f 63 07 7d cc bc a6 // f6 2f 0a 7a 66 71 7c 59 6c de f4 12 f2 56 0b 10 68 5e de 96 7b 3e e6 // 8b 8c 95 19 59 ae b1 d7 56 4c 3b 9d 80 6b 2c e8 58 38 13 93 a7 99 16 // b7 8f 7e 90 be ad ae 30 ff c0 b2 b6 14 38 0f 1c 2c c5 51 a4 45 65 20 // 9d b3 51 6b e3 79 ef 56 6a b0 0c 67 3f d8 aa ee ec dc f1 16 8c 19 60 // e9 a4 77 b9 e1 37 57 49 8a 44 ff 08 93 51 d1 f2 7a bf 9f d7 68 16 f9 // 24 50 46 47 d1 24 77 15 ca 86 1e be 62 41 72 c3 22 14 6d 66 eb 2b 24 // 7f 8e cb 3e 1b 5d dc a8 9b 28 7c 57 51 0c ec 40 fc f8 9d 80 2c f4 36 // 8a 86 1a f3 20 e0 1e 34 f7 a6 17 7d 4b c5 49 18 1b 5e 87 ec df e0 2f // 78 c9 a5 9a 3b f9 1e bb 63 64 02 3e c0 64 10 e7 b4 47 6e c4 e3 68 5b // fa 3b fe 9e f9 ec c1 2d cd 89 9a be 0f 3c 7f 16 b4 68 68 01 c0 c0 a9 // 49 aa 26 be d5 7d f5 6f 2b c5 4e f1 9a f7 fc bc 7b 0d 69 10 75 f4 2a // 4a 67 ac f9 80 b5 68 ac b2 34 2f 42 24 9f 7c 1e e3 52 7c 13 18 2b 09 // 60 64 ec d2 50 88 7a 94 2d 26 f6 37 e1 c4 04 1b 13 96 59 d2 46 2a 68 // 68 0b b0 43 87 a3 b3 99 e3 96 b9 fe 74 de 10 35 61 25 fa 47 d0 a2 08 // 27 37 0c bf 36 a7 9b 6f ff ad e9 1c 43 9d d6 cf ff 4b be 0d d3 ef ef // b6 1c 49 1e e3 2f 93 5d 62 30 7c ba 36 9a c8 c2 0f 6f e3 d4 85 7c e6 // d2 40 ec e5 e4 d1 49 f0 58 71 55 a8 35 0f cc 18 ef ae 2f f1 1c db e1 // 52 18 a8 24 99 a1 99 6d f8 b5 46 2e e1 70 b2 84 32 1e 76 bb e5 c3 f4 // 15 83 87 64 4d 95 f0 87 c5 98 e3 d4 6f be 27 f6 3f a7 84 bd a2 39 51 // 21 13 42 40 45 a2 c5 db c6 bc 36 62 ca 73 0a 86 d1 3c f8 f6 fe 27 43 // 22 4c a7 b5 35 ca f6 b4 70 1a 7d ae 9c fa d3 d7 29 01 04 bb ba 15 b6 // a0 64 ae 6e 90 9a 09 9f 75 fb e4 7c 9e 65 4d 8e 3b 8d c0 f3 db ff e8 // 29 e6 c5 6f 7a 24 1e 56 51 36 81 2a 85 7f 59 ab 56 5a 99 91 c6 b1 d8 // ab cc 94 c6 b3 3b ba 31 4f 6e 50 60 e6 57 e4 64 7f 96 9a 55 1d d6 c5 // 1d fc a0 ff 5d 9e 4f 40 1f ed bc 2c 92 7e b1 ed 95 ef 25 f4 e5 ac cb // a4 99 93 22 ba 15 39 49 93 10 dd 58 75 43 3a 22 83 5c fd 42 fd 77 fd // 46 80 b7 fe 76 7d 7a a5 c3 3a cd e0 4a 65 bd 3a 66 3f cd e4 c8 0e 9f // 2a f4 98 f1 3b f9 ab ba a1 c1 26 5e dc 69 1e 94 ab dc c9 22 70 c0 58 // 11 cd 2a 81 04 eb 18 ef bf ec 9e 4b a9 ae 5c de 21 1b 9b 93 08 2c e0 // 34 b6 cd 5f be 9c fb ac 4f 7e 24 04 ef 15 97 66 12 4f 73 01 7c c3 60 // 0f 3c 81 cd 78 db 25 fc 34 59 62 9e af 20 df db 06 2c 7e 50 2a a6 94 // 12 38 1d 84 7a 9d 25 4d 5b ef c4 51 cd a3 60 6f 0b c8 ae 62 e0 ae e9 // 28 f9 ed 0b 21 d7 05 a8 d3 1b 89 9e 16 44 5e e0 64 56 3d 32 f7 b6 bb // 5a d1 97 02 3c f5 28 d9 b3 29 ec 67 81 5c 6d df 27 d2 a6 ff a7 32 8b // b9 93 40 7c de 3d 16 61 59 fd 49 fe 46 92 54 b8 4c 29 16 da ea 8d f9 // d6 9b ef 01 9f 13 51 b9 bc e1 93 e3 02 78 83 5b 82 ea 5f 60 dc 0b dd // 7f 74 52 b7 a8 20 ae 7c d6 dc 29 d7 ac 6a 6c 1b 64 11 71 1a 96 33 8b // 1e 76 91 46 b2 a3 85 d2 82 bf aa e6 1b 04 11 66 ef af ab 2d 89 a4 56 // 7b 94 60 cc 22 d7 52 f8 e9 aa ca aa 0d b7 c8 48 79 f5 35 96 62 d5 5d // f6 57 0d 42 14 74 08 51 c7 45 74 ce d7 33 80 7c bb 54 57 11 10 41 08 // 92 39 4c 3d ea 07 bd 41 54 d0 e5 68 9d 57 c3 36 02 07 da c9 51 f9 6a // 35 8e 9c 46 6a 5c 51 13 f3 a6 32 e1 84 f5 7f 07 5e de f4 dc c9 72 1b // 96 3b eb 95 df 09 de df 84 82 60 cb c1 eb fd c7 40 82 18 ea ba 6d 2c // 51 92 8c d3 7c 4c 0c 9f 32 1f bb 09 94 a5 69 47 cf d9 64 30 56 db 5d // be a6 0a 24 1f 8f 00 4c 93 2b c8 e6 45 b2 ec 2e b9 bc 4e 9e 2f 41 56 // 29 32 34 d0 5e 70 cb 26 b8 a3 70 b0 20 6c 75 6b da 6d ef c1 1c 5e b3 // 86 64 0f 53 5a 4f fb 71 41 68 de fc 6d 82 f4 0d 8f 5b a8 76 85 37 ea // d5 77 3c 53 bd 77 9c a8 99 a2 dd 31 c9 13 85 69 ff 51 07 c2 fb 12 b8 // 04 37 5c 3b 3d c9 b8 28 bf d5 50 32 8a df 35 8f 71 e8 6a 0c 49 fb 11 // 9f 5e f9 e0 6c 13 85 5c bf c7 d1 a6 2c a2 ea 65 5e d9 12 a6 dc 7b b8 // b1 86 56 e8 92 3f c7 a1 70 2a b3 69 47 d7 93 84 d6 81 c3 19 23 e9 8c // f4 02 09 f7 76 bc 2b 21 9a 7c cd 13 9e 75 6a 90 5a a3 51 e6 ea ae 90 // 77 0c 8a 19 3f 96 cd 5c 66 e4 d7 7a 35 79 85 55 6e 14 33 37 16 d8 02 // 04 a5 c3 90 e0 d7 6f 40 81 af e9 17 f9 9a d8 a0 97 6b 33 42 f5 18 54 // b3 74 b4 ba a9 a7 f2 21 24 d2 b8 27 49 44 6e 30 d9 79 5a cb 9c 3c 3a // 30 5a 6d 27 3a c5 28 e8 e9 c9 5c 37 a7 8e 76 5f dd a5 59 82 c2 96 1f // bc 85 a1 4f c0 95 a7 8b 46 54 ee 6d fc 32 98 74 9a 63 9a b9 c8 e1 55 // af 3a 77 f8 a4 09 ce 17 45 32 a4 92 ef 55 0a 14 0f 77 4d 77 d7 32 b3 // b4 ca 5b c4 1f a4 48 8c e5 95 7c e2 19 b0 32 ae 1f 58 52 73 74 8d 81 // b1 9e dc f3 e6 cb 9a 93 ec 24 e4 1c 6b 3c 47 2f 9b af 3c a4 6c b8 b9 // a9 1d f1 8a ce be 7d 83 bd 44 73 75 0c 4f 26 80 6d a2 f9 5b 9e a4 8b // 34 24 60 af 72 9a b1 5e 9f 03 3e da 67 fe ec 64 5f 98 5d 4b 94 89 cf // 6c ee c1 b1 00 d0 07 bf 46 c7 4b e5 3c 7e a1 72 96 f9 c5 b5 cb ae 73 // 64 91 21 3c 93 b5 13 00 9e bd ec fc d6 0d 46 d7 b8 6c 6e 3b 5e 28 8f // 2b a5 86 7c 07 93 6e 7b d1 b0 0d e5 21 91 eb 86 30 ff 82 cc af b2 7a // 59 29 51 64 75 18 11 bf 74 ef f1 e5 e2 ab df 3c 93 bc 5d c9 81 4b e8 // 3b 25 62 47 79 35 e2 fa 30 db 7e bb 6e c3 80 17 0c f1 0c 1f 98 f8 c5 // eb 71 c7 30 c2 b3 1b 55 a1 dd 1c 12 a6 48 02 ab 95 b6 3c 52 9e 0a 96 // ce c8 f3 86 80 22 1d 60 89 92 6d 83 09 79 6c 79 99 4d 63 b6 7b fb 62 // f6 6b 4a 50 2f 30 ed 12 be 41 e8 96 e8 8b c4 5a 16 0a 52 6f bd 5f 00 // 2e 67 73 22 f1 16 ec 57 40 d7 56 3c d2 3e e8 53 c0 08 b8 49 98 e3 8f // df 15 85 56 e2 8a 53 25 73 95 6e 7c 00 f9 1f 08 ca 24 5c 29 5a 3d 5e // 00 3a 99 ea 72 7f 61 d1 28 93 b4 35 d4 c8 f2 f5 cc e0 0c 6a 30 91 e2 // a4 7f 29 0c 07 16 89 75 c5 3d 75 29 b7 1d 10 fa f4 2d 2b ac 9d b8 d5 // 36 69 cf 59 c7 09 c2 5e 9e 40 b5 fe ae d4 c3 7d de 8b 84 c4 96 1c 00 // 71 23 26 fb 6a aa 06 e8 0d 76 6b 40 b7 24 80 f3 97 1d ef 61 d1 d1 29 // 67 6d f2 47 8e 77 8d 89 9e d3 17 42 6e c3 3e 49 6d 1f dd 2e c2 71 28 // f8 fa ee 92 82 8e 13 da 72 d6 ae e8 33 0a 79 88 ea 1c c8 b6 4e c4 d8 // b2 09 90 86 4c 16 c5 2c 4b e6 d0 0b 30 4b 87 d9 7b ff dd 9c 66 a7 40 // b5 17 22 30 89 d9 f3 f4 14 ab ed c5 3c 76 8d ab 92 20 b9 80 e6 c1 8d // 5f 20 ba 89 94 cc 88 86 d7 bd ee 21 34 42 f4 56 d7 9f ce 1b 1e b4 8f // bf 60 0a 66 6c 8a de 24 d1 18 e6 32 82 51 cf 7b 57 a6 28 5c 65 0e 01 // 98 50 f3 92 b1 c2 9a ec 5c 8f c4 89 a3 81 9d 60 d5 de 37 7d 4c 11 b8 // ee 56 25 b7 c0 2c 5d 50 d2 af 33 97 00 6f 2e 2a 41 a0 6f 03 92 29 ee // f5 87 8e d9 1f 9f 6b e7 e9 88 92 4d ba eb 84 55 f6 16 27 5e 86 98 d9 // 3f b5 36 e2 c8 39 b2 03 aa 69 bc ec ed db f9 c5 3f 8a dd ba 53 d5 0c // a0 f7 a4 72 9a 42 ac 6e b7 57 f1 b4 08 ad 4a 01 47 54 61 73 e6 2f 76 // 21 eb 18 a9 e1 68 15 10 cc eb 48 e0 a3 0a b7 a1 bf 71 d5 67 42 d5 f0 // 34 f2 d7 25 e7 ea 68 a0 11 db b1 00 fa 6e ef e4 ee 09 38 73 de 36 6d // 34 f4 24 0c a0 27 a2 5c 5b 97 9c 9a c4 7d d1 dc b6 ed 82 c4 ae e0 9d // cc 23 cf 32 9a 86 44 f8 9b 5c f0 0e 56 83 93 4b 18 37 57 4e 9b 39 b3 // 1b 10 09 f2 76 e1 5a a0 40 95 9f df 10 08 38 ca 3f 5a b1 7e 45 03 66 // 68 d0 60 44 e3 a1 3f 3a 0a 6f 68 57 9e 50 d5 b0 16 4f 90 0d 7b cf cd // e7 83 96 cf 30 f0 b1 df f7 6d c3 97 ab 1a 5a 44 b2 07 eb 1e aa f7 3b // 94 5c 57 50 29 ae 2d ce 20 72 49 91 e6 55 01 55 de d6 a4 26 72 60 9f // 24 39 c5 aa b4 88 2b 2f fa f7 da 78 7b 71 d0 5d 15 51 6b d6 8c 6f 1a // 9d 79 b6 75 39 58 45 f2 4e e8 53 f8 77 e7 2c 14 b6 c6 70 2f 7b 87 75 // ca 1b fa bb bc f4 01 9f 7b cc f0 7f 1c 21 15 31 df c6 6a 7a 1d f7 9e // 92 a2 0d d1 cb e1 b2 2e 12 09 e7 e3 ec b9 d3 c2 45 0f c2 2a 57 bf e0 // 9b d7 35 f6 1c 36 1c da c2 48 8a e0 ad c7 88 5e dc 07 12 65 5d aa f5 // 35 e1 de 96 cc be 78 69 d5 31 d8 bf 3d b5 12 fb d1 7c 77 23 32 a3 f8 // cf 1e 05 2e e0 20 2e b9 9a 36 a0 f8 d7 21 98 88 ac bb 57 09 0c da f3 // b2 8e 1e 62 e8 fc 2e c2 37 bd f1 85 92 a7 af e4 d8 39 0d cb 5e 7f cc // 31 bf 4f 79 7e 6f 57 10 07 09 02 26 5c c2 e8 c4 59 b7 da 14 51 04 6a // bd 6c 8c 5b 02 c0 be 2d 2f 50 5a 65 37 62 66 56 3a c7 b5 9e f3 b4 e2 // 57 0a 6c b0 bd 94 d4 6a d8 61 31 7c 74 3c e1 de 12 bf a2 29 5a 98 cd // de d4 41 4d 87 a1 58 0b 1e 46 75 bb df 73 a2 2c ac 4a 1d 8d 45 6d 08 // 9e 0b 60 cb fd 16 15 8f 07 3b d1 da c4 81 db 49 fa 5d 88 01 d0 fb 08 // 44 b4 af ec 1b ab 4e 61 fa 0f 38 1f a6 67 88 0a 1c d8 16 39 53 be 7b // 59 1c c9 df d7 f9 19 02 37 0b 78 3a e8 a0 f3 c7 cb ef a7 d2 29 a3 7c // 00 f5 23 52 9e 15 9b 11 d2 e2 40 62 9b 64 af 2d 11 40 47 73 e9 91 20 // 7a 72 2c 32 02 21 ce 23 ba ed 7c be 40 a4 40 c5 68 08 14 b1 22 cf ba // 90 92 fe 03 47 8f 85 ad cb de ac b7 6d 6c bf 24 91 ea fa e9 83 27 b2 // 78 e2 67 82 1a 0e 1c d0 6e f9 0c b0 32 8e 24 6c 19 d8 c6 3b 93 32 29 // 1a 89 bc 9f 98 9e ff c6 75 c7 9a 87 0a c0 24 75 6c 6f 0d d0 fa de 7d // 70 ad 9b 07 57 30 0a 2d de 77 ab af f4 f6 3a 03 03 85 35 89 d4 4e fa // 96 8e 10 d3 65 61 f0 44 08 ad 0c c2 27 fc 6b 2f 90 4c ea d1 89 a0 fc // ca 9b 2e 6c bd e5 49 86 52 e0 b3 bc 9d 8b 79 21 47 44 03 71 8f eb 5c // c7 50 dc 70 f5 a9 b1 a0 ae 2c 64 20 15 b6 a1 a8 ab 05 72 18 2b 4e 39 // e0 c8 69 cb dc 60 c9 46 5f 5d 56 4d 18 ba 2f 5b 3b c3 e0 5a 45 87 44 // 07 74 30 c5 ea 03 1e e0 2d d8 f0 a6 5d 7d d8 d9 0d d9 b8 71 7f 77 d2 // 02 23 9a 57 78 71 94 23 fb 2a ec 7c a8 6e b0 7c 39 de 65 a3 4b 98 8d // 65 37 7a 74 73 e9 14 5f 16 d7 95 93 e9 69 03 33 0b bf 3a 80 24 fc 15 // 51 9d 9b aa 0f ae 20 18 78 6f 4b 18 46 fc a3 55 ff 0f cc f6 5c cc ad // 18 96 30 9a 5c cf 20 56 dd 54 2c 92 98 50 cc 91 cd 65 59 62 36 0f e3 // 16 55 7a b3 fb 37 83 28 f7 7a 07 d9 da 24 44 7d 3f a2 02 0b 38 2e d2 // e8 08 ec 95 29 a0 12 73 43 4c 64 b0 b7 c3 5a 06 a0 19 e4 ab 51 cd c9 // c0 f2 66 ab 25 b6 98 43 38 a0 ba 91 0d 10 60 28 3b 63 6c 5d 7e 8a 3f // 96 9c 1e e1 c9 9b 54 bb a7 ff 36 79 fb ee cb b7 03 49 f0 76 48 0a 86 // 7c c4 ee 4c ac ae a3 9c 80 f6 42 53 35 99 48 6d 2f fb 77 b8 c9 10 9a // 9d 25 fa 0b 06 e5 8e ca 76 4f 7d 56 46 9e b9 54 70 36 bb ea 9d 5c 3d // 35 b4 c1 fb c3 d3 9a 37 2c 2b 7a d1 84 96 5c ad 38 19 c8 92 8f 15 88 // d0 09 49 94 9c 0c 4c 93 d3 0a c7 f6 66 52 47 c0 10 8b d8 9d ff 3a af // e7 80 ac 66 fe bf ac c8 c6 a3 cc 38 7d 09 da 6d e7 00 48 7a 80 e2 c8 // d5 6d f9 4d 7e bd 3e 1d 9e 06 41 1a 6c 5f 7e b6 da 41 c6 f5 29 97 b5 // ad 47 ba 98 52 61 10 3f df 12 eb 4a 28 28 b2 48 f6 52 ef 00 b6 ab cc // ab 2e b1 61 b8 78 b9 db c0 aa 91 14 05 b6 f6 7a dd a8 3c 16 18 77 48 // d7 b5 24 ff e6 38 1f 48 9f 43 2d 59 2e 61 71 bd 9c cb 2c d5 2f 97 71 // 43 f5 7f bf 2a b0 b8 23 d4 49 ae 55 f0 24 40 97 23 34 34 4c da 01 83 // 7b 93 af a4 f4 6a 2f de fe 27 e9 27 64 cf 95 96 78 08 46 de 2e 3b 1e // a8 3e 62 ee 43 b1 c0 5a ee 67 5e 25 36 35 04 ad df aa 68 e7 c5 3e d6 // 85 41 3f 5b a9 51 f1 20 d0 a6 46 e4 74 87 2c 81 e5 a8 87 46 4c 19 f8 // 46 0a e8 14 ff ff 24 cb 51 dd 2d ca 28 d5 97 ab 2e a6 09 49 f8 db be // 67 f2 63 e7 22 fd b5 1b ce 4e 32 8a 19 f5 ff 12 18 e1 f6 3b 8d a6 d4 // 0d bd 54 90 96 44 99 b2 52 2e a3 23 31 06 34 89 3e ad 66 14 07 96 62 // 07 a6 6a b1 3a df cf 1a 72 5e d1 43 39 c4 60 11 c0 e0 40 1f 23 86 b4 // 7c d9 f9 02 fd f8 4b c8 5e 74 d3 ae 7c c5 44 e4 d6 56 70 a5 54 a5 37 // 71 2c 6e e9 f7 51 91 63 1d 2a 4c 4d a0 6f c3 84 23 b1 d5 b8 28 d7 20 // 12 35 b2 97 41 64 f5 2a a1 6b ee 70 ee 50 92 50 75 2f 4f dd 6b 9f 8d // 02 19 43 df 83 20 68 2a 6f 80 ff 0d 67 ab 7a 4c ee a8 07 bd 5b 3b 7b // 63 80 b0 c7 f0 ca a6 7b 02 08 ba 71 31 7f 03 55 a3 b7 55 af 0e 2c 00 // 71 86 38 94 38 61 5d f8 0b 7b 25 10 4a 73 3f c9 06 25 b6 26 82 19 87 // 33 c0 f1 62 5d fa a0 8c f8 1e 3d f0 43 09 4b 7b 5a 09 8b 3b 36 f8 03 // b5 b0 f1 0a 05 7b f8 14 ae 35 79 93 2c 0a 5f 20 89 85 ba b3 d8 17 f9 // 75 28 3b 88 38 ae 5c b7 09 be 72 b5 8d f7 42 5e 05 9f db f4 e0 ee 51 // b3 da 01 fe 0b 44 96 3c 11 96 ba ee 5e c5 90 9a d8 0d 9d 16 60 f3 ed // d9 03 74 95 2a 0b f8 b3 be ce 2c 2f 94 45 93 f4 de 7d e5 e0 5d ed 09 // 6b 8f 4f 05 d6 5d fc 2e 80 6f 78 22 0d 84 b3 db 56 4f b1 2f 4e 5e 8f // 5e ab 31 65 91 f0 04 e9 37 4c ce 8e 78 72 63 bc 38 27 af fe 67 93 c1 // 30 b8 62 1d 3b bb 2a 86 fd 87 f0 70 ea 21 71 82 81 ee 7a ec 4b b3 bb // 71 af 4b f5 72 1c ec d1 39 c4 be 8c 9d f4 ec 8d fb 09 a5 cf 1d 86 a2 // 5d 39 fa a9 f0 64 a9 97 c2 14 f3 34 e4 41 09 17 fc 3b 4d 67 ad a8 d8 // 7a 38 c0 f8 6b 02 bf 65 3d dd ae b5 b7 5b 30 0f 8b cf d7 92 85 8b ef // 8a b2 3e 06 34 21 93 9c 59 21 29 64 c9 ed 5d d5 6e 21 5d b5 8c ef 53 // d3 1a 96 6b b8 ce 4e d5 62 87 fe cb 3a 85 ba 43 5e 0b 41 b2 0b a1 16 // 4b 9c 9f 2c 49 fa 0f 7b 17 a8 9e 0e c4 7e ef e9 92 d6 3e e2 9c 8c 0a // 1e ce 26 64 fe e8 ed ad d4 36 36 a5 4c 48 51 9b 4f cf 55 b0 d9 10 36 // 02 b9 24 41 a5 f8 5c f8 c5 e4 06 d0 f5 81 5f 8f 37 30 99 34 bd 78 fb // c2 ac f0 a0 3b 05 1b 45 28 db 4f 7c 09 de 7d 0a ab af ca 37 36 b8 25 // 9c 81 8c a3 38 ca 67 54 e0 74 77 17 c2 79 4d 66 4a 1c ac c1 e9 c5 27 // 64 a3 08 e6 df 73 d9 75 63 86 30 b7 4c ce 6c 49 b1 ba c1 64 54 e9 68 // 52 c4 f9 d8 ed 11 8e 86 d2 f1 c8 dc 33 bc cd 4a 07 be 12 8d b5 e8 0f // 56 84 dd cc 11 58 e7 44 41 1a cd e5 90 f9 02 f0 98 7c fb 75 0b b5 bf // ee d5 3b ff 07 68 68 98 6b 56 6d 77 01 f4 8d df ca cb d3 25 c8 d9 30 // bc ef 26 71 3b f6 05 85 d5 c9 91 e2 a6 cc 33 cc bc 27 f7 dd fb a1 8f // 99 84 97 c2 eb 37 8c c8 f2 cc 07 a1 b4 f1 41 c5 e0 fb 6f 52 e1 82 42 // e5 05 bc f6 dd 20 e3 3a 46 9d 05 6a 0b 4f d5 e7 2d 0d a9 d0 bc ce 1e // 2f 9e 9d c7 d1 c7 b6 cb 0f 36 04 28 7e ca 00 00 00 00 00 00 00 00 00 // 00 00 00 00 00 00 00} (length 0x2000) // } // len: bytesize = 0x2000 (8 bytes) // res: ptr[in, syz_fuse_req_out] { // syz_fuse_req_out { // init: nil // lseek: nil // bmap: nil // poll: nil // getxattr: nil // lk: nil // statfs: nil // write: nil // read: nil // open: nil // attr: nil // entry: ptr[in, fuse_out_t[int64, fuse_entry_out]] { // fuse_out_t[int64, fuse_entry_out] { // len: len = 0x9a (4 bytes) // err: fuse_errors = 0x0 (4 bytes) // unique: int64 = 0x6 (8 bytes) // payload: fuse_entry_out { // nodeid: int64 = 0x1 (8 bytes) // generation: int64 = 0x10000002 (8 bytes) // entry_valid: int64 = 0x0 (8 bytes) // attr_valid: int64 = 0x0 (8 bytes) // entry_valid_nsec: int32 = 0x0 (4 bytes) // attr_valid_nsec: int32 = 0xfffffffb (4 bytes) // attr: fuse_attr { // ino: int64 = 0x4 (8 bytes) // size: int64 = 0x2 (8 bytes) // blocks: int64 = 0xfffffffffffffffd (8 bytes) // atime: int64 = 0xffff (8 bytes) // mtime: int64 = 0x8000000000000000 (8 bytes) // ctime: int64 = 0x0 (8 bytes) // atimensec: int32 = 0x0 (4 bytes) // mtimensec: int32 = 0x1 (4 bytes) // ctimensec: int32 = 0x7fffffff (4 bytes) // mode: fuse_mode = 0x6000 (4 bytes) // nlink: int32 = 0x1400 (4 bytes) // uid: uid (resource) // gid: gid (resource) // rdev: int32 = 0x80000902 (4 bytes) // blksize: int32 = 0x101 (4 bytes) // padding: const = 0x0 (4 bytes) // } // } // } // } // dirent: nil // direntplus: nil // create_open: nil // ioctl: nil // statx: nil // } // } // ] memcpy( (void*)0x200000008400, "\x92\x75\x6f\x43\xb3\x1f\xfe\x54\x27\x88\xef\x58\x6b\x7c\x5a\x34\x44" "\x24\xe3\xac\xac\x25\x90\xbe\x6b\xbe\x37\xad\xfa\xce\x4a\x8f\x2e\x53" "\x4f\xfe\x76\xa8\x3a\x93\xf0\xb3\x68\x0a\x72\xfd\xdf\xde\x83\xf9\x6d" "\x01\x98\x23\x84\xe8\xd6\x89\x21\x9c\xb9\x66\x9b\x14\xdb\xaa\x1b\x79" "\x9f\x82\xea\x1f\xc9\x26\x12\x6a\x41\x63\x61\x8e\x16\xd4\xf9\x41\x43" "\xa4\xe0\xf2\x7c\x44\xfc\xef\x39\x20\xa0\xb3\x80\x5e\xd4\xe7\x80\x98" "\xd8\x68\x9c\xc7\x79\x1b\xd8\x66\x48\x07\x07\x18\xd2\x38\x66\x43\x32" "\x94\x8d\x87\x86\x6c\x8d\x25\x90\xfc\x0f\x01\x7f\x98\x53\xab\xd9\xed" "\x60\xb9\x9f\x1a\xa6\xae\x2d\xbd\x24\xab\x6d\xbc\xeb\xdb\x05\x52\x46" "\x81\x5a\xce\x14\x7c\xc5\x0f\xa3\xb2\x86\x11\x48\xfc\xda\x37\x4d\x5b" "\x20\x3e\x51\xd7\x2c\x45\xe4\xdd\xe3\xe9\xee\x9a\x47\xff\xe4\x58\xba" "\xf7\xbb\x49\x03\x51\x35\xa8\x19\x4a\xa1\xf0\xa8\x3f\xa2\xab\xed\x56" "\x39\x8f\x90\xda\xff\x67\x96\x34\x61\x94\x53\xf5\x33\xf2\x25\x83\xa6" "\xe0\xa4\xdc\x09\xe9\xde\x46\x68\x4d\x5e\x01\x36\xe2\x29\x51\x0f\x37" "\x02\xcf\x3a\x4c\xd0\x06\x5d\x3e\x5d\x3c\x41\x9e\x38\xa8\x0b\x07\x0c" "\xa5\x50\x10\xe0\x82\xa9\xc5\x10\xfd\x18\xcc\x0b\x26\xbb\x5e\x8e\x45" "\x9e\x74\x7b\xef\xbc\x5c\x6b\x60\xac\xe8\x0b\xf4\x14\x17\xb7\xb7\x8c" "\xf5\x7e\x5b\x39\x84\xf0\xcd\xdd\xc6\x15\xc5\xe0\x00\x04\x54\xd3\xf4" "\xa1\x96\xfb\x6d\x18\xaa\x62\x9c\xf0\xb0\x24\x5f\x95\xba\x95\x8d\x86" "\xdc\x17\x56\x16\xf8\xcd\x3a\xc4\x73\x05\x7d\xc3\xa5\xff\x71\x07\x97" "\x33\x26\x35\x01\x07\xf4\x46\x8e\x7e\xcd\x48\xd6\x89\xb8\x2c\x12\xd2" "\x2a\xe5\xf1\x85\x83\x02\xa1\xb4\xcf\xde\x8f\xd3\x47\xa9\x9d\xdc\xde" "\x40\xd1\xc4\x9d\x9b\x50\x99\xfb\xcc\xf0\x9e\x78\x22\x12\xbe\x4b\x2c" "\xe3\x6a\x2b\xc3\xc9\xee\x79\x4a\xbf\xfe\x72\xa5\x50\x1e\x6c\x4f\x3f" "\x7f\x68\xb7\x47\x61\xff\xd6\x62\x06\x09\x22\x4a\x3b\xf1\x1f\x65\x5d" "\xad\xb5\xc8\xa5\x81\x3b\x02\xfb\x46\x83\x0e\x9a\xc6\x82\x5f\x5d\x0e" "\x89\x91\x03\x52\xeb\x3a\x58\xc0\xdd\x82\xd0\x94\xf9\x4d\xd2\xc8\x56" "\x66\xf6\x84\xa8\xf4\x37\xbb\xd0\xe6\x6b\x9f\x4d\x36\x61\x17\xb6\x7a" "\x05\x4d\x21\x2c\x4f\xbc\x28\x78\x48\xcb\x05\x78\x39\x13\x35\xd5\xd6" "\x16\xb1\x4d\x99\xa2\xe3\xdf\x8e\x8a\x15\x2d\x5d\xe9\x9b\xce\xfc\xaa" "\xb5\xbb\x5c\xc7\x1f\x3d\xdd\x66\xb3\x79\xc1\x04\x64\x8e\x19\x0e\x0b" "\x28\xa1\x80\xd3\xae\xcc\x54\x23\x57\x5d\x4b\xa7\xdb\xf3\x12\x15\xc7" "\x17\xda\x7b\x87\xdd\x45\x4b\x6e\xfc\xd3\x6c\x91\xaa\xa6\x31\x12\x7f" "\x5b\xd8\x87\x23\xd2\x21\x75\x2f\x10\x2b\xc0\xc7\xac\x6c\x5c\x7a\x1a" "\xd6\x74\x7a\xf4\x0d\x01\xb6\xd3\x9e\xab\x7b\x0e\x12\x92\xb4\x46\x83" "\xc5\x86\x38\x6a\xd0\x0a\xcf\x60\xfb\x8f\x9b\xac\x55\x1a\x6e\xb5\xba" "\xb7\x31\x7b\x5d\x89\xf6\x4d\xb1\x0b\xd9\x01\x8d\xfa\x6d\x65\xd9\x38" "\x62\xe8\x51\xaf\xbc\x30\xfd\x70\xfe\x5f\x0d\xe3\x22\x46\x20\x45\x17" "\x72\x31\x85\x2c\xa8\x0e\x4e\x78\xda\x4f\xea\x0c\x79\xba\x35\x43\x33" "\x02\x6c\x8b\xc7\x7d\x30\x8a\x8d\x25\x6a\x19\xec\x45\xd2\x08\x8c\x19" "\x66\x91\xd3\xf9\xaa\xc2\x8d\xed\x36\x00\x4a\x65\xee\x1c\xe4\x9b\xa9" "\x59\x9c\xee\xe8\x45\x34\xbb\x61\xd0\x2d\x04\xa6\x73\x2f\x1e\x27\xd7" "\x29\x62\xf7\x4b\x59\xf3\x52\x2b\xf8\x44\xc5\x02\x29\x86\xd5\x59\x34" "\xe4\x8b\x86\x81\xb7\xf5\xb7\x53\x23\x91\x44\x8c\xae\xef\x00\x31\x5d" "\x28\x32\x0a\x46\xd8\xbd\x78\x13\x54\x4e\x1e\x4b\xf9\x94\xe1\x4a\x51" "\x9c\x26\x54\xff\x20\xb4\x2b\xdb\x69\xc2\x62\x89\x7e\x28\xec\xa5\x28" "\xf0\x99\x98\x40\xb0\x0e\xd8\x25\x65\x97\xd2\x7c\xfc\x20\xd7\x1d\x5f" "\x40\xd0\xbb\xca\x75\x9f\x75\x94\xc6\x03\x4a\xa1\xe1\x6a\x84\xed\x15" "\x2f\xad\x0f\xdc\x1c\x30\x3a\x7f\x61\x22\x57\x12\x71\x4f\x82\x3a\xfc" "\x5e\xa2\x41\xd4\x82\xd3\x58\x57\x59\x62\x3a\xf8\xc9\x7c\xa6\xa8\x4a" "\x20\x33\xb3\xd7\x31\x4e\xa0\xef\x7b\xa9\xb2\x88\xb3\x62\xa2\x94\xc9" "\x2c\x8b\x97\x36\x82\x9c\x16\xf6\x1c\x5a\x1e\xe0\x4a\xca\x96\x5d\x71" "\x16\x22\x92\x27\x45\x95\xea\x62\xc9\xc2\x91\x8e\x82\x79\xc9\x9f\x5d" "\x28\x30\xc6\x17\xc5\x82\x11\xfd\x74\x52\x33\x01\x84\xb9\x42\x8d\x5e" "\xc1\xd5\xcd\x75\xdd\xcc\x6d\xe3\x32\x6f\xdc\x70\xe8\x91\x10\x4b\x3b" "\x01\x3c\x30\xff\xcc\xfa\xf3\x30\x8d\x96\x71\xb0\x1f\x6b\x08\x0a\x93" "\x0d\xac\x20\x52\xc6\xf3\x98\x17\xa6\x62\x12\x1d\x90\xd4\x0d\x6a\x1f" "\xac\xfb\x50\xbe\xc7\xd4\x08\x03\x0b\x6d\x0a\xe3\xe7\x44\xf3\xbc\xc3" "\x27\xc3\x5d\xc4\x3c\xf8\x6b\x74\x3d\xb7\x8f\xf2\xe5\x93\xb1\x99\x23" "\x23\x5e\xd6\x46\x7f\x29\x9b\x08\x71\x8f\xe1\x84\x0c\x16\xa7\x48\x93" "\x5d\xff\x94\x11\x50\xfb\x08\xb3\x05\x73\xb3\x7b\xf9\xaf\x5c\x86\xcc" "\x8d\x9e\x22\x9a\x83\x2e\x4e\xf2\x5e\xc9\x1f\x71\x12\x0f\x2b\x3e\x90" "\x62\x48\x59\x76\xc2\x80\xa2\xd1\x72\x38\x60\x29\xe2\xf2\xa4\x80\x11" "\x97\xfc\xa0\xa1\x35\x14\xed\xac\xf5\xdd\xba\xc5\xa6\x2e\x8b\xb1\x3d" "\xd1\x57\x26\x57\xa8\x21\xa8\x73\x92\x97\xf7\x2e\x29\x23\x9d\x1c\xdd" "\xdf\x3e\x30\xcb\xe9\xaf\x31\x41\xf2\x27\x5e\xe4\xae\x85\xd8\x6e\xc8" "\x88\xfe\x9a\x67\x51\xf2\x52\x05\x7e\x95\xb8\xbe\xb0\x55\xe2\x76\x43" "\x95\x81\xaf\xee\x93\xcd\x44\xf1\xe9\x2f\x70\xe5\xf7\x25\x45\x1d\x3a" "\xb6\x62\x91\x8f\xfb\xb1\x26\x95\x09\xfb\xd5\x11\xe9\x5a\x00\xec\x71" "\x7f\x9d\x60\xd6\x43\x86\x4a\xbd\x6a\xd1\xcc\x4d\xd7\xf9\x33\x37\x9a" "\x60\x78\xa8\x6c\x21\x58\xdb\x80\x76\xe7\xb6\x60\x36\x6f\xca\x7b\x1c" "\x46\xd0\x9d\x2c\x8e\x67\xa6\x49\x4b\xfb\x4c\x2c\x67\x50\xe7\x65\x93" "\x89\x5b\x5e\x2b\x2b\xc7\x80\x93\x84\x0c\x3c\x4a\x80\x78\x26\xbc\x27" "\x50\xa9\x6b\x4e\x1d\xd5\xb8\x2b\x49\x2b\xb2\x21\x55\x18\xc9\x20\x64" "\xd1\x76\x3c\x37\x13\x26\x04\xe5\x2e\x73\xfa\xc3\xf4\x51\x1f\x79\x17" "\x53\xae\xec\xfb\xb1\x98\x16\xe0\xda\x7a\x1b\xfb\xea\x9e\xea\xa0\xf2" "\x56\xea\xed\xcb\x11\x9a\x61\xf7\xd0\xea\x0f\x5c\xd4\x96\x9d\x45\xcb" "\x01\x48\x00\xf2\xc8\x88\xd5\xc2\x21\x7c\xf0\xf6\x9a\x75\x07\x77\x98" "\x83\xb5\x73\x52\xbb\x88\x83\xcc\x58\x48\x91\x95\x0d\x6e\x79\x25\x37" "\x07\x4f\x4f\xc4\x33\x7a\xa1\x9b\x9b\xf6\x0e\x18\xed\xd9\x39\xd2\x89" "\xfb\x4a\x6b\x7a\xa6\xc6\x6d\xa2\x07\x74\xe2\x49\xca\x4f\x77\x9d\x3c" "\x91\x0b\x1a\x9a\x8e\x4c\x38\xaf\x6a\xde\xcc\x87\xd5\x48\x1d\x18\x1f" "\xd6\x60\x23\xff\xff\x24\x6f\x4e\x25\x56\xb2\x18\xfe\x81\x10\xac\xeb" "\xe2\x0b\x16\x75\xf1\xde\x6f\x26\x5b\x6d\x1d\x85\x14\xa5\x35\x22\x39" "\x6b\xf0\xe2\xf2\xb1\x53\xc4\x98\xe4\x8b\x36\xd1\x6f\x8b\x9b\xd5\x6f" "\x45\xd7\xf5\xb9\x39\x7d\x7f\x13\x39\x11\x7a\x17\x6d\x0b\xad\x0b\x68" "\xe8\x00\x68\x24\x16\xd3\xe1\x8f\xe2\x19\x7c\x7f\x8d\xc2\x06\x00\xfe" "\xb9\x5c\xc6\xba\x86\xad\x47\xf1\x13\xe1\x59\xbd\x43\x89\xe3\x0e\xab" "\x28\x74\xbd\x27\xee\xbc\x56\x02\x0c\x4d\xab\x99\x73\xb1\x3f\x3e\x82" "\xaa\x62\xa7\xe0\xa1\x51\xd7\x3d\xe4\x8c\xb8\x11\xe3\x2b\xe6\x3f\xfd" "\x30\x3f\x5a\x6e\xa6\xf0\x97\xed\x76\x3f\xbf\x36\xc4\x30\x82\x1e\x45" "\x11\x46\xde\x79\x92\x23\x48\x35\x4c\xe2\x85\xaf\x09\x97\xbf\x3c\x66" "\xe6\xef\x02\x94\x2e\x24\xb8\xf1\xcc\xdd\x54\x2f\x09\xcf\xe6\x5c\x0d" "\xa0\x09\x4c\x0b\x5f\xd2\x6b\xbc\x06\x15\x38\xb4\x1e\x5e\xd2\xcb\xb3" "\x90\xee\x29\xb1\x0a\x4b\x7a\x69\x60\x09\xe1\xb5\xb8\x6c\x44\xc0\xa5" "\x61\xa2\x57\xc1\x54\x15\xfe\xae\xb1\x43\x3e\xa2\x75\xed\x6e\x4b\x22" "\x85\x03\xfe\x71\xee\x59\x42\x66\x51\x64\xfa\xae\xd6\x69\x71\x12\x20" "\x6b\xe0\xfe\x78\x63\xae\xbd\x4b\xbe\x95\x1d\x5d\xea\x1d\xa2\x94\xdb" "\xa0\x79\x31\x96\x38\x5f\x4d\x51\x41\xc9\xd6\xc4\xb0\xfa\x22\xb2\xe2" "\x00\xcf\xb7\x0b\x52\xac\xa3\x16\x55\xe7\x1e\x5a\x57\x6c\xcb\x8c\xcb" "\x5b\x13\x64\x74\x8a\xa9\x81\xed\xbb\x81\xa8\x13\xb1\xae\xbc\x67\xbe" "\x1f\x76\x19\xe7\xe1\x97\x62\x2d\x98\x12\x80\x42\x9f\x6c\xa5\x14\x5c" "\x5b\x3b\x05\xe6\xba\xce\x91\x91\xe5\xc5\x8f\xbf\x14\x0f\x71\xf5\x94" "\xcb\xfd\x4d\xb0\xe9\xf6\x92\x3f\x17\x58\xff\x94\x64\xa6\x1a\x72\x0a" "\x5d\x4f\x09\xc6\x22\xc3\xce\x3f\x5d\x0d\x3a\x1d\x19\x11\x11\x16\x81" "\x08\xf4\x1f\x12\xb1\x6e\x9e\xaf\x36\x17\xc3\x53\x71\x5c\xd3\x52\x60" "\x56\x0c\xbf\xd0\x55\x5d\x51\xce\x5c\x40\xbb\xdb\x7c\x95\xce\xae\xad" "\xad\xb8\x90\x29\x74\xde\x50\xb0\x86\x33\x48\x18\x38\x64\xf5\xea\x68" "\x2e\x67\x82\x86\xa0\x6a\x6f\x39\x6a\xf2\x9a\x7c\x7f\xb3\x3a\x35\x79" "\xe2\x58\x35\x96\x36\x12\xf3\xc0\xd4\xcf\x36\x9d\x85\x95\x9a\x0a\xde" "\xda\x94\xd3\x58\x24\x05\x0e\x6f\xba\x7f\x83\xf9\x08\x67\x58\x3f\x71" "\x3d\x77\x83\x32\x3c\x70\x10\xe9\x4c\x9b\xe3\x31\xf8\x60\xdb\x39\x5d" "\xbd\xe6\xfa\xce\x5b\xfd\xb6\x16\xfc\xef\xa9\xc6\xb0\x1f\x69\x63\xda" "\xa8\x40\xa3\x1f\xf5\x54\xa4\x58\xc0\xc5\x0c\xb5\xe0\x9f\x91\xf5\x4f" "\x63\x23\x45\x89\xde\xca\xf4\x5b\xbf\xba\xef\x0d\xcb\xff\x4a\xe6\xe6" "\x5c\xa2\x6a\x53\x02\x61\xc4\x91\xef\x8e\xb9\xa8\x55\xa1\xd7\x46\x33" "\x91\xc9\xb6\x6b\xe9\x6c\xf2\x4c\x3c\x32\x1e\xe5\xa5\xbd\xc8\x57\xf6" "\x0b\x58\x26\x83\xc6\xae\x1e\x37\x75\xb6\x2a\x9f\x19\xff\x8f\xa5\x13" "\x80\xca\x8a\x2a\x3c\x6d\xe7\x90\x12\xf5\x72\x7b\xa1\x20\x25\xe7\xe6" "\x72\x3a\x23\xa8\x1e\x06\x7c\xa6\xe5\x4c\x7b\x38\xff\x64\x88\x0d\x23" "\x5d\x21\xe7\xee\x52\x58\x95\x3d\xcb\xf9\xe2\xa9\x62\xf0\x06\xca\x4f" "\xfe\x87\x08\x59\x24\x2c\x85\x0c\xba\xe4\x22\x2b\x3b\x72\xc4\xf8\x69" "\x34\x37\x9b\xa2\xea\xd1\xdc\xde\x90\x62\x41\xb9\x94\xd9\x5c\x88\x35" "\x5a\xf5\xa9\xa3\x0a\xce\x9c\x93\x3a\x69\x42\xf3\x41\xad\x22\x1d\xd8" "\x25\x84\x6a\x8f\xd4\x4c\x03\xe2\xea\xa9\x31\x1c\x26\xe1\x5a\x1b\xd7" "\xcb\xba\x96\x1a\x22\xef\x23\xd7\xeb\xba\x0e\x34\xce\xc5\xef\x09\xb1" "\xce\x72\x81\x4a\x97\xe3\x3b\xd2\x9f\x3d\x9e\xc8\x0a\x4f\x45\xd1\xd2" "\x94\x86\xac\xcf\x15\xc1\x1f\x1a\x80\x0b\xd8\x49\x18\xe7\x62\x6f\x67" "\x82\x75\xd7\xc7\xac\xb0\x2c\xc0\xe6\xe3\x4b\xb7\x66\xba\x6b\x75\xc3" "\xad\x14\xfc\xa9\x35\x2e\x09\xc3\xb6\x93\x90\xc0\x45\xcf\xc8\x42\xff" "\x9a\xde\x8c\xa6\x93\xc0\x7f\xad\xc7\x04\x7a\x94\x6e\x6e\x57\x0c\x3a" "\xfc\x5b\x50\x1c\x96\x41\x03\x39\x7f\x5d\xda\xdc\x2d\x59\xa0\x48\x34" "\x8d\xd4\x2f\x07\xcf\xe3\x1b\xc9\xb5\xae\x45\x3f\x50\x86\xbb\x41\xbb" "\xa4\xc8\xa3\xe5\x18\xe3\x0b\x08\x55\x18\x4b\x05\x3f\x92\x30\x25\xdd" "\x72\xce\x1b\xcb\xf4\x12\x31\x97\x8b\x34\xa8\x54\x7c\x71\xd7\x31\x39" "\x92\x16\x50\x78\x90\x3c\x61\xd3\x12\xb0\xd9\x46\x94\x13\xc9\xfd\x97" "\xcc\xdf\x0e\xa2\x70\xfb\x6c\x47\xec\x88\x61\xa1\xc8\xd9\x09\xee\xac" "\xe7\x61\xb5\xa0\x6b\xa4\x6e\x25\x78\x5f\xf8\x7f\x86\x77\x77\xab\xb2" "\x37\xc6\xc9\x80\x68\x79\x91\xf1\xed\x01\x57\xd5\x84\x92\x26\x0c\x71" "\x2c\xec\x34\xc1\xfc\x09\x62\x10\x39\x55\xdb\x4d\x50\x90\xb6\xe8\x40" "\x9c\xf3\xc3\xc7\x9d\x0e\x69\x1c\xf4\xfb\xc0\xb2\x25\x1a\x01\x6d\xcd" "\x45\x69\x69\xcd\x32\xe5\x42\x95\x33\xbf\x0d\x6f\x8b\xda\x84\xc0\x5f" "\x0e\x20\x40\xde\x8b\x53\xbf\xb8\x67\x6e\xec\x4b\x76\xc3\xdf\x6f\x46" "\xb1\xe4\x37\x32\x03\x5d\xda\x57\x7e\x75\xf6\x40\x77\x7f\x6a\xe9\x0f" "\xd2\xf1\xaf\x42\xba\x46\x2d\xac\x73\x20\x19\xc5\x99\xbf\xef\x01\xac" "\xd6\xa0\xd4\xd1\x79\x6b\xcb\x8f\x58\x51\x9d\x6f\x9a\xd9\xa3\x20\x67" "\x04\xa9\x4d\x47\x25\x16\xb9\x88\x14\x1f\x44\xec\xd2\xe6\xf2\x8a\x49" "\xaa\x0c\x44\x9d\xb8\x79\x72\xfc\x99\x5a\x97\x37\x99\x14\x54\x6e\xa4" "\x31\x43\xea\x2c\xf7\x79\xa9\xcb\xe8\x1f\x11\x1f\xe8\x91\x29\xdb\x36" "\x10\x49\x21\x64\xab\x25\x98\xec\xa7\xe6\x0d\x9a\x69\x63\xd8\xba\x03" "\xa8\x67\x29\xdb\x86\xe4\x20\xfd\x96\xd6\x1b\x8f\xb1\x1e\xdc\x2b\x33" "\x9b\x57\xa7\x40\x07\x4a\xe5\xb7\x75\xea\xf6\x0c\xd8\x5d\xc9\x34\xe6" "\x04\xbf\x2b\x4b\xd5\x8e\xe0\x12\x05\xb4\xdf\x57\xac\x20\xff\x8d\xb4" "\x5a\x05\x98\x2b\x57\x96\x43\x88\x24\x07\x05\x0c\x00\x51\x02\xa2\xe7" "\x1f\x1e\x56\xdc\x76\xdb\xf5\x33\x11\x12\xe8\x3e\x48\xbf\xb5\xcf\x2a" "\x78\xa8\x93\x19\x0d\x78\x42\x61\x75\xc1\x62\xff\xaa\x72\x78\xa4\x3b" "\x99\x32\x31\x8f\xc1\x7f\xb8\xcb\x0d\xfa\xc6\x10\xb1\xad\x23\x5b\x91" "\xf9\xcb\x76\x23\xb1\x55\x11\x7e\x07\xf7\xb8\x76\xa3\xc3\x76\x27\xaa" "\x31\xea\xfe\xd1\x41\xcc\x0c\x54\x91\xc4\xf6\x21\xa6\x6b\x6d\x83\x7a" "\x14\x4d\x78\x71\x9c\x46\x51\x1c\x04\xa0\x93\xcf\x65\xfc\xe9\xfa\xbe" "\x5b\xd6\xd4\x99\xec\xeb\x63\x53\x8e\xce\x3c\xf1\x90\x53\x55\x0a\x23" "\x9b\xf9\x78\xc0\x8c\x87\x9f\x99\x54\x48\x5a\x4e\x3e\x0d\x5b\xed\xb8" "\x4b\x40\x7c\xed\x85\xc4\xdf\xc4\xd7\x5a\xf1\x16\x81\x59\x92\xc2\x9f" "\x0b\xc9\x27\xc4\xa9\x90\xc3\x8a\xe4\xfc\xc9\xfe\xb9\x0f\xec\x1b\x1b" "\x55\x5e\x04\xd0\x10\x42\x30\x10\x85\x53\x94\xd5\xcc\xfc\x8e\xd2\x11" "\x64\x19\x0c\xd8\xf8\x3b\xe5\xde\xbb\x70\x29\x0c\x35\x47\xf0\x7e\x4d" "\xc4\x28\x14\xf1\xe0\x01\x79\x8e\x6c\xee\xe2\x55\x8b\x0c\x6f\xf8\xc1" "\x75\x9f\x90\x26\x9e\xe2\x26\x13\x11\x16\x33\x2b\x99\xac\x8d\xd1\x04" "\xc9\x20\x88\xe1\xf9\x1a\xce\x31\x98\xc0\xf5\x9b\xfb\x75\xc4\xe4\xa6" "\x97\x66\x0e\xed\x43\xa2\x9c\x83\x1a\x55\x2d\xe3\x7f\xce\x6d\xce\x96" "\xfa\x51\xb6\xe2\x11\x1f\x30\x71\xa4\xe9\x44\x22\xd1\x5e\x10\x2e\x5f" "\x67\xda\x7c\xa6\xca\xe6\xbe\xd7\x74\x3e\xbf\xfa\xcb\x8a\x81\x1a\x14" "\x36\x05\x79\x1d\x17\x23\x21\x81\xa5\x17\xe8\x72\xf7\x12\x62\xc3\xc7" "\x36\x68\xf0\xef\x83\xaa\xd4\x98\xf6\x7f\xa2\x6b\xae\x69\x8c\xf7\x8f" "\x24\xc2\xdb\xec\xd3\x99\xa1\x90\xe6\xb8\xd0\x68\x4e\x92\x9f\x2e\x80" "\x83\x76\x5e\xb2\xc6\x77\x93\xa1\xad\xbb\x89\xd3\x6b\x58\xbf\xb1\x97" "\xcd\xc5\xf3\xc8\x94\xac\x9d\x88\x6e\x8f\x3b\x09\x36\xfa\xbd\x23\x3c" "\x09\xde\x8f\xab\x80\x99\xf7\x2a\x74\xd9\x08\xba\x5c\x5e\x4d\x39\x79" "\x0b\x0b\xf9\xe4\x5b\x71\x0f\x55\x87\xb7\xc9\x37\xc7\x66\x90\xc5\xc5" "\xfc\xe6\x21\xa5\x3a\x9f\xd0\x3b\x0a\x4e\xe6\xd8\xd1\xab\xbe\x2e\xd5" "\x61\x82\x0a\x77\xf1\x2a\x08\xca\xd0\x75\x55\x40\xab\x6d\xd1\x60\x4b" "\x7c\x30\xa8\x65\x29\x95\xab\x80\xb8\x5e\x91\x90\x11\xde\x94\x38\xa4" "\x63\x7e\xb0\x29\x11\x24\xed\x4b\x74\x5e\x78\x2c\xff\x98\x51\x0c\xb0" "\x3b\xe7\x9c\x2a\x81\x35\x1a\xbf\x27\x65\x84\xd7\x5c\xdd\x96\xb9\xc9" "\x7e\x73\xeb\x71\x00\x0b\x3a\xb7\xc3\xc1\x9c\x2c\xab\x44\x97\x29\x8f" "\xcb\x30\x52\xb5\xd4\x50\x3d\x05\xe7\xf3\x10\x31\x8b\xe6\xf8\x48\x54" "\x7b\x1a\x4f\x4d\xb8\x2c\xae\xe1\x90\x80\x14\x78\xbe\x28\x06\x50\x36" "\xaa\x4d\x91\xf2\x90\xc1\xf3\x96\x34\x3e\x73\xa5\xfe\x8b\xb5\xcc\xf0" "\xa3\x17\x17\x7e\xd1\xf7\x7a\xcd\xa1\xa4\xa4\x9d\xcc\xfc\xab\x8d\x1b" "\x5d\x79\xf0\x15\xf7\x88\xb6\xd5\xe9\xf8\x22\x8a\x8b\xcd\xc0\x69\x6e" "\x6b\x19\xf5\xed\xff\xbc\xd7\xe9\x50\x9c\x87\xfb\xe1\xf7\x26\xb9\x3b" "\xf8\xc6\xd8\xd3\x74\x28\x76\x3e\x14\x25\x60\xc4\x6c\x9e\x89\x4f\x73" "\x17\x85\x90\x00\xc2\x5a\xbc\x4f\x36\x91\xeb\xcd\x02\x01\x71\xe0\xd4" "\x91\x1b\x5d\x97\xa2\x38\x10\x9a\xed\xeb\x00\xb2\xeb\x47\x5c\x1e\x7b" "\x45\x17\x5f\x8a\xa8\x51\x93\xb5\xc0\xf4\x3b\x43\x4c\x15\xde\x01\x61" "\x0c\x4d\x02\x26\x46\xcd\x6e\x36\x37\xf3\x49\xa4\x34\xa7\x7f\x57\x1a" "\xc1\xc5\xd6\x98\x45\x2d\x1b\x99\x1e\x26\x7f\x78\xdc\xa5\xe5\x92\xec" "\xd3\x1c\xca\xfc\xad\x84\xe4\xe9\x8d\x13\x4b\x4a\xdc\x52\x5b\x81\xbd" "\x68\x43\x42\x88\x83\x02\x3a\x6e\xa4\x07\x20\x17\x38\xc8\xbf\x16\xb5" "\x41\xff\x72\x80\x27\x4a\x34\xd4\xcf\x14\x81\x9f\x2d\xba\xe1\x67\xca" "\x0c\xae\x84\x71\xc4\x95\xe0\x06\xb4\x51\x94\xad\x91\xc4\x51\x6f\x21" "\xcb\xb1\x0e\x0d\x26\xfd\x5d\x73\x4c\xd7\x72\x5d\xf5\xb3\xfb\xe9\x29" "\x55\xf4\xa9\xbb\x3b\x9b\x81\x3a\xee\xff\x79\xd6\xed\x5d\xb9\x2d\xef" "\x19\xd0\x60\xa2\x08\xc3\xec\x8c\x42\xc1\x10\x78\x6f\x1e\x14\x96\xc5" "\x0a\x72\x49\xb0\x3f\xc7\x92\x76\x43\x66\x89\x4a\x35\x32\x0b\x99\xd0" "\xbe\xf9\xfd\x0b\x6a\x24\x6c\x36\xa3\x57\xc6\xb9\x85\xdc\x83\xa3\x7a" "\x8d\x9b\x8b\x9a\xd6\x43\xde\xa9\x48\x60\xcb\xe7\x63\xbb\x73\xcc\x84" "\x22\xb6\x9d\x4d\x12\x33\x22\x42\xc8\x95\x40\x75\xfb\x71\x17\xa6\x67" "\x96\x38\x07\x36\x17\xab\xcd\xb4\x61\x98\x55\xb2\x03\x6a\xf1\x60\x64" "\x7f\x66\xb3\x53\x16\x45\xa3\xbf\x04\x7a\xe2\x90\xd6\xae\x22\x49\xf1" "\x14\xe7\xa8\x46\x42\x78\xba\xe1\x48\x60\x22\xbc\xc7\xc3\x73\x90\xc8" "\xd9\xa0\xef\xb0\xe1\xcf\xa0\xda\x8e\xf7\xa5\xe0\x72\xf9\x9a\x47\xec" "\xc7\x5e\x4e\x44\x28\x80\x37\x51\x93\xdb\x49\xbb\x82\xba\x34\x90\x12" "\x86\xca\x47\x3e\xd5\xb6\x3e\x40\x48\xdb\x4d\xc4\x55\xe7\x4b\x3f\xdd" "\x2e\x78\x98\xca\x3f\x4c\x3a\x02\xd4\x35\xcd\xe6\x14\x1e\xea\x64\x50" "\x55\x12\x3a\x7d\xcf\x0d\x22\x05\x7f\x8d\x42\x57\x01\xaf\xc5\x58\x59" "\xf5\x14\x79\x54\xe7\x19\xd5\x8c\x74\x86\xb1\xe0\x2a\xc1\x6c\xb7\x99" "\xb7\x76\x32\xc6\x6b\xb7\x8e\x6e\x52\xe1\x10\x17\xc1\x73\x64\x24\xfa" "\x4d\x43\x3f\x1e\x19\xb4\xc8\x81\xd2\x3f\x0b\x2a\x12\xd5\xfa\xe3\xae" "\x24\x33\x90\x88\x08\x8d\x9b\x49\x6a\xd9\x7b\xd9\xf6\xe2\x0a\x85\x97" "\xd1\x45\x2a\x0c\x72\xdc\xf4\x3d\xbb\xda\x8f\x18\x16\x65\x85\xc0\x6d" "\x21\xfb\xff\xe5\xfe\x7b\x55\xf7\x1c\x9b\x9f\x1b\x34\xa0\x2b\xd0\x5c" "\xa6\x3c\x7c\x1b\x1b\xeb\xbb\x9d\xd2\x4f\xb1\x02\x91\xb0\x4c\x66\x5d" "\x45\x15\x4d\xd2\x8b\x85\xd8\x21\xce\x7e\x61\x31\x19\x12\x89\x96\x78" "\x5e\x10\x06\xa8\xda\xbc\x48\x99\xb1\x0d\x26\x71\x10\x7d\x5a\x06\x58" "\xed\x36\x3b\x9d\x4b\x39\xd0\x2f\x8c\xc5\xe3\x50\xfb\xf0\xa3\x10\x48" "\xad\xec\xd1\xf9\xe2\xca\x74\x9b\xd8\x6f\x19\x5e\xb4\x8e\x9b\x46\x05" "\xf0\x50\xde\x03\xd6\x42\x94\x0d\x79\x18\x46\x18\xf7\xf8\x8a\x9a\x0a" "\x46\x83\xad\x84\xd6\x13\x4e\x39\x53\x05\xbc\x1d\x4d\x9d\x17\xcc\x33" "\x4b\x97\x65\x35\x29\xd6\x68\x2a\x87\xa5\xfa\xc8\x0a\x6d\x46\xd6\xe7" "\x2f\xc2\x2e\x58\xbe\x7b\x8f\x86\x17\xb3\x37\x2e\xf2\x62\x21\x10\xab" "\x1e\xc4\x48\x71\x71\x18\xb2\x57\xac\xff\xe5\x5d\x18\xc7\x85\x5e\x9e" "\x87\x10\xad\x97\x7a\x67\x92\xb2\x31\x5a\x18\x9e\xb4\x46\x8c\x68\x64" "\x1e\x9b\x60\xc0\xda\xb7\x01\x6a\xc1\xad\x63\xcd\x80\x04\xb6\xec\xa8" "\xfc\x88\xb1\xe4\x26\x3a\xcc\x00\x49\x92\x55\xc1\x6b\x11\x48\x7a\x0a" "\xf8\x58\x07\x5f\x9c\x89\x2d\xc8\x04\x4c\x41\x46\xe5\xa5\x67\x7c\x4a" "\x2c\xb2\x4b\xde\x5e\x07\x89\x85\x02\x0d\x4a\xb1\xe4\xc8\x74\x92\xe7" "\x6b\x7e\x6f\x4b\xbd\x71\xd8\x4b\xab\x18\x85\xc9\x70\x28\x49\xe7\x0c" "\xf7\x28\x77\x6b\x1a\x94\xc2\xa8\xfb\x8c\x7c\xa0\x1b\x61\x11\xef\x6f" "\x20\x32\xa2\x90\x94\x9b\xfe\x47\x3f\xe2\x15\x27\x3b\x8b\x5b\x3a\xd5" "\x40\xf1\x87\x49\x0f\x63\x07\x7d\xcc\xbc\xa6\xf6\x2f\x0a\x7a\x66\x71" "\x7c\x59\x6c\xde\xf4\x12\xf2\x56\x0b\x10\x68\x5e\xde\x96\x7b\x3e\xe6" "\x8b\x8c\x95\x19\x59\xae\xb1\xd7\x56\x4c\x3b\x9d\x80\x6b\x2c\xe8\x58" "\x38\x13\x93\xa7\x99\x16\xb7\x8f\x7e\x90\xbe\xad\xae\x30\xff\xc0\xb2" "\xb6\x14\x38\x0f\x1c\x2c\xc5\x51\xa4\x45\x65\x20\x9d\xb3\x51\x6b\xe3" "\x79\xef\x56\x6a\xb0\x0c\x67\x3f\xd8\xaa\xee\xec\xdc\xf1\x16\x8c\x19" "\x60\xe9\xa4\x77\xb9\xe1\x37\x57\x49\x8a\x44\xff\x08\x93\x51\xd1\xf2" "\x7a\xbf\x9f\xd7\x68\x16\xf9\x24\x50\x46\x47\xd1\x24\x77\x15\xca\x86" "\x1e\xbe\x62\x41\x72\xc3\x22\x14\x6d\x66\xeb\x2b\x24\x7f\x8e\xcb\x3e" "\x1b\x5d\xdc\xa8\x9b\x28\x7c\x57\x51\x0c\xec\x40\xfc\xf8\x9d\x80\x2c" "\xf4\x36\x8a\x86\x1a\xf3\x20\xe0\x1e\x34\xf7\xa6\x17\x7d\x4b\xc5\x49" "\x18\x1b\x5e\x87\xec\xdf\xe0\x2f\x78\xc9\xa5\x9a\x3b\xf9\x1e\xbb\x63" "\x64\x02\x3e\xc0\x64\x10\xe7\xb4\x47\x6e\xc4\xe3\x68\x5b\xfa\x3b\xfe" "\x9e\xf9\xec\xc1\x2d\xcd\x89\x9a\xbe\x0f\x3c\x7f\x16\xb4\x68\x68\x01" "\xc0\xc0\xa9\x49\xaa\x26\xbe\xd5\x7d\xf5\x6f\x2b\xc5\x4e\xf1\x9a\xf7" "\xfc\xbc\x7b\x0d\x69\x10\x75\xf4\x2a\x4a\x67\xac\xf9\x80\xb5\x68\xac" "\xb2\x34\x2f\x42\x24\x9f\x7c\x1e\xe3\x52\x7c\x13\x18\x2b\x09\x60\x64" "\xec\xd2\x50\x88\x7a\x94\x2d\x26\xf6\x37\xe1\xc4\x04\x1b\x13\x96\x59" "\xd2\x46\x2a\x68\x68\x0b\xb0\x43\x87\xa3\xb3\x99\xe3\x96\xb9\xfe\x74" "\xde\x10\x35\x61\x25\xfa\x47\xd0\xa2\x08\x27\x37\x0c\xbf\x36\xa7\x9b" "\x6f\xff\xad\xe9\x1c\x43\x9d\xd6\xcf\xff\x4b\xbe\x0d\xd3\xef\xef\xb6" "\x1c\x49\x1e\xe3\x2f\x93\x5d\x62\x30\x7c\xba\x36\x9a\xc8\xc2\x0f\x6f" "\xe3\xd4\x85\x7c\xe6\xd2\x40\xec\xe5\xe4\xd1\x49\xf0\x58\x71\x55\xa8" "\x35\x0f\xcc\x18\xef\xae\x2f\xf1\x1c\xdb\xe1\x52\x18\xa8\x24\x99\xa1" "\x99\x6d\xf8\xb5\x46\x2e\xe1\x70\xb2\x84\x32\x1e\x76\xbb\xe5\xc3\xf4" "\x15\x83\x87\x64\x4d\x95\xf0\x87\xc5\x98\xe3\xd4\x6f\xbe\x27\xf6\x3f" "\xa7\x84\xbd\xa2\x39\x51\x21\x13\x42\x40\x45\xa2\xc5\xdb\xc6\xbc\x36" "\x62\xca\x73\x0a\x86\xd1\x3c\xf8\xf6\xfe\x27\x43\x22\x4c\xa7\xb5\x35" "\xca\xf6\xb4\x70\x1a\x7d\xae\x9c\xfa\xd3\xd7\x29\x01\x04\xbb\xba\x15" "\xb6\xa0\x64\xae\x6e\x90\x9a\x09\x9f\x75\xfb\xe4\x7c\x9e\x65\x4d\x8e" "\x3b\x8d\xc0\xf3\xdb\xff\xe8\x29\xe6\xc5\x6f\x7a\x24\x1e\x56\x51\x36" "\x81\x2a\x85\x7f\x59\xab\x56\x5a\x99\x91\xc6\xb1\xd8\xab\xcc\x94\xc6" "\xb3\x3b\xba\x31\x4f\x6e\x50\x60\xe6\x57\xe4\x64\x7f\x96\x9a\x55\x1d" "\xd6\xc5\x1d\xfc\xa0\xff\x5d\x9e\x4f\x40\x1f\xed\xbc\x2c\x92\x7e\xb1" "\xed\x95\xef\x25\xf4\xe5\xac\xcb\xa4\x99\x93\x22\xba\x15\x39\x49\x93" "\x10\xdd\x58\x75\x43\x3a\x22\x83\x5c\xfd\x42\xfd\x77\xfd\x46\x80\xb7" "\xfe\x76\x7d\x7a\xa5\xc3\x3a\xcd\xe0\x4a\x65\xbd\x3a\x66\x3f\xcd\xe4" "\xc8\x0e\x9f\x2a\xf4\x98\xf1\x3b\xf9\xab\xba\xa1\xc1\x26\x5e\xdc\x69" "\x1e\x94\xab\xdc\xc9\x22\x70\xc0\x58\x11\xcd\x2a\x81\x04\xeb\x18\xef" "\xbf\xec\x9e\x4b\xa9\xae\x5c\xde\x21\x1b\x9b\x93\x08\x2c\xe0\x34\xb6" "\xcd\x5f\xbe\x9c\xfb\xac\x4f\x7e\x24\x04\xef\x15\x97\x66\x12\x4f\x73" "\x01\x7c\xc3\x60\x0f\x3c\x81\xcd\x78\xdb\x25\xfc\x34\x59\x62\x9e\xaf" "\x20\xdf\xdb\x06\x2c\x7e\x50\x2a\xa6\x94\x12\x38\x1d\x84\x7a\x9d\x25" "\x4d\x5b\xef\xc4\x51\xcd\xa3\x60\x6f\x0b\xc8\xae\x62\xe0\xae\xe9\x28" "\xf9\xed\x0b\x21\xd7\x05\xa8\xd3\x1b\x89\x9e\x16\x44\x5e\xe0\x64\x56" "\x3d\x32\xf7\xb6\xbb\x5a\xd1\x97\x02\x3c\xf5\x28\xd9\xb3\x29\xec\x67" "\x81\x5c\x6d\xdf\x27\xd2\xa6\xff\xa7\x32\x8b\xb9\x93\x40\x7c\xde\x3d" "\x16\x61\x59\xfd\x49\xfe\x46\x92\x54\xb8\x4c\x29\x16\xda\xea\x8d\xf9" "\xd6\x9b\xef\x01\x9f\x13\x51\xb9\xbc\xe1\x93\xe3\x02\x78\x83\x5b\x82" "\xea\x5f\x60\xdc\x0b\xdd\x7f\x74\x52\xb7\xa8\x20\xae\x7c\xd6\xdc\x29" "\xd7\xac\x6a\x6c\x1b\x64\x11\x71\x1a\x96\x33\x8b\x1e\x76\x91\x46\xb2" "\xa3\x85\xd2\x82\xbf\xaa\xe6\x1b\x04\x11\x66\xef\xaf\xab\x2d\x89\xa4" "\x56\x7b\x94\x60\xcc\x22\xd7\x52\xf8\xe9\xaa\xca\xaa\x0d\xb7\xc8\x48" "\x79\xf5\x35\x96\x62\xd5\x5d\xf6\x57\x0d\x42\x14\x74\x08\x51\xc7\x45" "\x74\xce\xd7\x33\x80\x7c\xbb\x54\x57\x11\x10\x41\x08\x92\x39\x4c\x3d" "\xea\x07\xbd\x41\x54\xd0\xe5\x68\x9d\x57\xc3\x36\x02\x07\xda\xc9\x51" "\xf9\x6a\x35\x8e\x9c\x46\x6a\x5c\x51\x13\xf3\xa6\x32\xe1\x84\xf5\x7f" "\x07\x5e\xde\xf4\xdc\xc9\x72\x1b\x96\x3b\xeb\x95\xdf\x09\xde\xdf\x84" "\x82\x60\xcb\xc1\xeb\xfd\xc7\x40\x82\x18\xea\xba\x6d\x2c\x51\x92\x8c" "\xd3\x7c\x4c\x0c\x9f\x32\x1f\xbb\x09\x94\xa5\x69\x47\xcf\xd9\x64\x30" "\x56\xdb\x5d\xbe\xa6\x0a\x24\x1f\x8f\x00\x4c\x93\x2b\xc8\xe6\x45\xb2" "\xec\x2e\xb9\xbc\x4e\x9e\x2f\x41\x56\x29\x32\x34\xd0\x5e\x70\xcb\x26" "\xb8\xa3\x70\xb0\x20\x6c\x75\x6b\xda\x6d\xef\xc1\x1c\x5e\xb3\x86\x64" "\x0f\x53\x5a\x4f\xfb\x71\x41\x68\xde\xfc\x6d\x82\xf4\x0d\x8f\x5b\xa8" "\x76\x85\x37\xea\xd5\x77\x3c\x53\xbd\x77\x9c\xa8\x99\xa2\xdd\x31\xc9" "\x13\x85\x69\xff\x51\x07\xc2\xfb\x12\xb8\x04\x37\x5c\x3b\x3d\xc9\xb8" "\x28\xbf\xd5\x50\x32\x8a\xdf\x35\x8f\x71\xe8\x6a\x0c\x49\xfb\x11\x9f" "\x5e\xf9\xe0\x6c\x13\x85\x5c\xbf\xc7\xd1\xa6\x2c\xa2\xea\x65\x5e\xd9" "\x12\xa6\xdc\x7b\xb8\xb1\x86\x56\xe8\x92\x3f\xc7\xa1\x70\x2a\xb3\x69" "\x47\xd7\x93\x84\xd6\x81\xc3\x19\x23\xe9\x8c\xf4\x02\x09\xf7\x76\xbc" "\x2b\x21\x9a\x7c\xcd\x13\x9e\x75\x6a\x90\x5a\xa3\x51\xe6\xea\xae\x90" "\x77\x0c\x8a\x19\x3f\x96\xcd\x5c\x66\xe4\xd7\x7a\x35\x79\x85\x55\x6e" "\x14\x33\x37\x16\xd8\x02\x04\xa5\xc3\x90\xe0\xd7\x6f\x40\x81\xaf\xe9" "\x17\xf9\x9a\xd8\xa0\x97\x6b\x33\x42\xf5\x18\x54\xb3\x74\xb4\xba\xa9" "\xa7\xf2\x21\x24\xd2\xb8\x27\x49\x44\x6e\x30\xd9\x79\x5a\xcb\x9c\x3c" "\x3a\x30\x5a\x6d\x27\x3a\xc5\x28\xe8\xe9\xc9\x5c\x37\xa7\x8e\x76\x5f" "\xdd\xa5\x59\x82\xc2\x96\x1f\xbc\x85\xa1\x4f\xc0\x95\xa7\x8b\x46\x54" "\xee\x6d\xfc\x32\x98\x74\x9a\x63\x9a\xb9\xc8\xe1\x55\xaf\x3a\x77\xf8" "\xa4\x09\xce\x17\x45\x32\xa4\x92\xef\x55\x0a\x14\x0f\x77\x4d\x77\xd7" "\x32\xb3\xb4\xca\x5b\xc4\x1f\xa4\x48\x8c\xe5\x95\x7c\xe2\x19\xb0\x32" "\xae\x1f\x58\x52\x73\x74\x8d\x81\xb1\x9e\xdc\xf3\xe6\xcb\x9a\x93\xec" "\x24\xe4\x1c\x6b\x3c\x47\x2f\x9b\xaf\x3c\xa4\x6c\xb8\xb9\xa9\x1d\xf1" "\x8a\xce\xbe\x7d\x83\xbd\x44\x73\x75\x0c\x4f\x26\x80\x6d\xa2\xf9\x5b" "\x9e\xa4\x8b\x34\x24\x60\xaf\x72\x9a\xb1\x5e\x9f\x03\x3e\xda\x67\xfe" "\xec\x64\x5f\x98\x5d\x4b\x94\x89\xcf\x6c\xee\xc1\xb1\x00\xd0\x07\xbf" "\x46\xc7\x4b\xe5\x3c\x7e\xa1\x72\x96\xf9\xc5\xb5\xcb\xae\x73\x64\x91" "\x21\x3c\x93\xb5\x13\x00\x9e\xbd\xec\xfc\xd6\x0d\x46\xd7\xb8\x6c\x6e" "\x3b\x5e\x28\x8f\x2b\xa5\x86\x7c\x07\x93\x6e\x7b\xd1\xb0\x0d\xe5\x21" "\x91\xeb\x86\x30\xff\x82\xcc\xaf\xb2\x7a\x59\x29\x51\x64\x75\x18\x11" "\xbf\x74\xef\xf1\xe5\xe2\xab\xdf\x3c\x93\xbc\x5d\xc9\x81\x4b\xe8\x3b" "\x25\x62\x47\x79\x35\xe2\xfa\x30\xdb\x7e\xbb\x6e\xc3\x80\x17\x0c\xf1" "\x0c\x1f\x98\xf8\xc5\xeb\x71\xc7\x30\xc2\xb3\x1b\x55\xa1\xdd\x1c\x12" "\xa6\x48\x02\xab\x95\xb6\x3c\x52\x9e\x0a\x96\xce\xc8\xf3\x86\x80\x22" "\x1d\x60\x89\x92\x6d\x83\x09\x79\x6c\x79\x99\x4d\x63\xb6\x7b\xfb\x62" "\xf6\x6b\x4a\x50\x2f\x30\xed\x12\xbe\x41\xe8\x96\xe8\x8b\xc4\x5a\x16" "\x0a\x52\x6f\xbd\x5f\x00\x2e\x67\x73\x22\xf1\x16\xec\x57\x40\xd7\x56" "\x3c\xd2\x3e\xe8\x53\xc0\x08\xb8\x49\x98\xe3\x8f\xdf\x15\x85\x56\xe2" "\x8a\x53\x25\x73\x95\x6e\x7c\x00\xf9\x1f\x08\xca\x24\x5c\x29\x5a\x3d" "\x5e\x00\x3a\x99\xea\x72\x7f\x61\xd1\x28\x93\xb4\x35\xd4\xc8\xf2\xf5" "\xcc\xe0\x0c\x6a\x30\x91\xe2\xa4\x7f\x29\x0c\x07\x16\x89\x75\xc5\x3d" "\x75\x29\xb7\x1d\x10\xfa\xf4\x2d\x2b\xac\x9d\xb8\xd5\x36\x69\xcf\x59" "\xc7\x09\xc2\x5e\x9e\x40\xb5\xfe\xae\xd4\xc3\x7d\xde\x8b\x84\xc4\x96" "\x1c\x00\x71\x23\x26\xfb\x6a\xaa\x06\xe8\x0d\x76\x6b\x40\xb7\x24\x80" "\xf3\x97\x1d\xef\x61\xd1\xd1\x29\x67\x6d\xf2\x47\x8e\x77\x8d\x89\x9e" "\xd3\x17\x42\x6e\xc3\x3e\x49\x6d\x1f\xdd\x2e\xc2\x71\x28\xf8\xfa\xee" "\x92\x82\x8e\x13\xda\x72\xd6\xae\xe8\x33\x0a\x79\x88\xea\x1c\xc8\xb6" "\x4e\xc4\xd8\xb2\x09\x90\x86\x4c\x16\xc5\x2c\x4b\xe6\xd0\x0b\x30\x4b" "\x87\xd9\x7b\xff\xdd\x9c\x66\xa7\x40\xb5\x17\x22\x30\x89\xd9\xf3\xf4" "\x14\xab\xed\xc5\x3c\x76\x8d\xab\x92\x20\xb9\x80\xe6\xc1\x8d\x5f\x20" "\xba\x89\x94\xcc\x88\x86\xd7\xbd\xee\x21\x34\x42\xf4\x56\xd7\x9f\xce" "\x1b\x1e\xb4\x8f\xbf\x60\x0a\x66\x6c\x8a\xde\x24\xd1\x18\xe6\x32\x82" "\x51\xcf\x7b\x57\xa6\x28\x5c\x65\x0e\x01\x98\x50\xf3\x92\xb1\xc2\x9a" "\xec\x5c\x8f\xc4\x89\xa3\x81\x9d\x60\xd5\xde\x37\x7d\x4c\x11\xb8\xee" "\x56\x25\xb7\xc0\x2c\x5d\x50\xd2\xaf\x33\x97\x00\x6f\x2e\x2a\x41\xa0" "\x6f\x03\x92\x29\xee\xf5\x87\x8e\xd9\x1f\x9f\x6b\xe7\xe9\x88\x92\x4d" "\xba\xeb\x84\x55\xf6\x16\x27\x5e\x86\x98\xd9\x3f\xb5\x36\xe2\xc8\x39" "\xb2\x03\xaa\x69\xbc\xec\xed\xdb\xf9\xc5\x3f\x8a\xdd\xba\x53\xd5\x0c" "\xa0\xf7\xa4\x72\x9a\x42\xac\x6e\xb7\x57\xf1\xb4\x08\xad\x4a\x01\x47" "\x54\x61\x73\xe6\x2f\x76\x21\xeb\x18\xa9\xe1\x68\x15\x10\xcc\xeb\x48" "\xe0\xa3\x0a\xb7\xa1\xbf\x71\xd5\x67\x42\xd5\xf0\x34\xf2\xd7\x25\xe7" "\xea\x68\xa0\x11\xdb\xb1\x00\xfa\x6e\xef\xe4\xee\x09\x38\x73\xde\x36" "\x6d\x34\xf4\x24\x0c\xa0\x27\xa2\x5c\x5b\x97\x9c\x9a\xc4\x7d\xd1\xdc" "\xb6\xed\x82\xc4\xae\xe0\x9d\xcc\x23\xcf\x32\x9a\x86\x44\xf8\x9b\x5c" "\xf0\x0e\x56\x83\x93\x4b\x18\x37\x57\x4e\x9b\x39\xb3\x1b\x10\x09\xf2" "\x76\xe1\x5a\xa0\x40\x95\x9f\xdf\x10\x08\x38\xca\x3f\x5a\xb1\x7e\x45" "\x03\x66\x68\xd0\x60\x44\xe3\xa1\x3f\x3a\x0a\x6f\x68\x57\x9e\x50\xd5" "\xb0\x16\x4f\x90\x0d\x7b\xcf\xcd\xe7\x83\x96\xcf\x30\xf0\xb1\xdf\xf7" "\x6d\xc3\x97\xab\x1a\x5a\x44\xb2\x07\xeb\x1e\xaa\xf7\x3b\x94\x5c\x57" "\x50\x29\xae\x2d\xce\x20\x72\x49\x91\xe6\x55\x01\x55\xde\xd6\xa4\x26" "\x72\x60\x9f\x24\x39\xc5\xaa\xb4\x88\x2b\x2f\xfa\xf7\xda\x78\x7b\x71" "\xd0\x5d\x15\x51\x6b\xd6\x8c\x6f\x1a\x9d\x79\xb6\x75\x39\x58\x45\xf2" "\x4e\xe8\x53\xf8\x77\xe7\x2c\x14\xb6\xc6\x70\x2f\x7b\x87\x75\xca\x1b" "\xfa\xbb\xbc\xf4\x01\x9f\x7b\xcc\xf0\x7f\x1c\x21\x15\x31\xdf\xc6\x6a" "\x7a\x1d\xf7\x9e\x92\xa2\x0d\xd1\xcb\xe1\xb2\x2e\x12\x09\xe7\xe3\xec" "\xb9\xd3\xc2\x45\x0f\xc2\x2a\x57\xbf\xe0\x9b\xd7\x35\xf6\x1c\x36\x1c" "\xda\xc2\x48\x8a\xe0\xad\xc7\x88\x5e\xdc\x07\x12\x65\x5d\xaa\xf5\x35" "\xe1\xde\x96\xcc\xbe\x78\x69\xd5\x31\xd8\xbf\x3d\xb5\x12\xfb\xd1\x7c" "\x77\x23\x32\xa3\xf8\xcf\x1e\x05\x2e\xe0\x20\x2e\xb9\x9a\x36\xa0\xf8" "\xd7\x21\x98\x88\xac\xbb\x57\x09\x0c\xda\xf3\xb2\x8e\x1e\x62\xe8\xfc" "\x2e\xc2\x37\xbd\xf1\x85\x92\xa7\xaf\xe4\xd8\x39\x0d\xcb\x5e\x7f\xcc" "\x31\xbf\x4f\x79\x7e\x6f\x57\x10\x07\x09\x02\x26\x5c\xc2\xe8\xc4\x59" "\xb7\xda\x14\x51\x04\x6a\xbd\x6c\x8c\x5b\x02\xc0\xbe\x2d\x2f\x50\x5a" "\x65\x37\x62\x66\x56\x3a\xc7\xb5\x9e\xf3\xb4\xe2\x57\x0a\x6c\xb0\xbd" "\x94\xd4\x6a\xd8\x61\x31\x7c\x74\x3c\xe1\xde\x12\xbf\xa2\x29\x5a\x98" "\xcd\xde\xd4\x41\x4d\x87\xa1\x58\x0b\x1e\x46\x75\xbb\xdf\x73\xa2\x2c" "\xac\x4a\x1d\x8d\x45\x6d\x08\x9e\x0b\x60\xcb\xfd\x16\x15\x8f\x07\x3b" "\xd1\xda\xc4\x81\xdb\x49\xfa\x5d\x88\x01\xd0\xfb\x08\x44\xb4\xaf\xec" "\x1b\xab\x4e\x61\xfa\x0f\x38\x1f\xa6\x67\x88\x0a\x1c\xd8\x16\x39\x53" "\xbe\x7b\x59\x1c\xc9\xdf\xd7\xf9\x19\x02\x37\x0b\x78\x3a\xe8\xa0\xf3" "\xc7\xcb\xef\xa7\xd2\x29\xa3\x7c\x00\xf5\x23\x52\x9e\x15\x9b\x11\xd2" "\xe2\x40\x62\x9b\x64\xaf\x2d\x11\x40\x47\x73\xe9\x91\x20\x7a\x72\x2c" "\x32\x02\x21\xce\x23\xba\xed\x7c\xbe\x40\xa4\x40\xc5\x68\x08\x14\xb1" "\x22\xcf\xba\x90\x92\xfe\x03\x47\x8f\x85\xad\xcb\xde\xac\xb7\x6d\x6c" "\xbf\x24\x91\xea\xfa\xe9\x83\x27\xb2\x78\xe2\x67\x82\x1a\x0e\x1c\xd0" "\x6e\xf9\x0c\xb0\x32\x8e\x24\x6c\x19\xd8\xc6\x3b\x93\x32\x29\x1a\x89" "\xbc\x9f\x98\x9e\xff\xc6\x75\xc7\x9a\x87\x0a\xc0\x24\x75\x6c\x6f\x0d" "\xd0\xfa\xde\x7d\x70\xad\x9b\x07\x57\x30\x0a\x2d\xde\x77\xab\xaf\xf4" "\xf6\x3a\x03\x03\x85\x35\x89\xd4\x4e\xfa\x96\x8e\x10\xd3\x65\x61\xf0" "\x44\x08\xad\x0c\xc2\x27\xfc\x6b\x2f\x90\x4c\xea\xd1\x89\xa0\xfc\xca" "\x9b\x2e\x6c\xbd\xe5\x49\x86\x52\xe0\xb3\xbc\x9d\x8b\x79\x21\x47\x44" "\x03\x71\x8f\xeb\x5c\xc7\x50\xdc\x70\xf5\xa9\xb1\xa0\xae\x2c\x64\x20" "\x15\xb6\xa1\xa8\xab\x05\x72\x18\x2b\x4e\x39\xe0\xc8\x69\xcb\xdc\x60" "\xc9\x46\x5f\x5d\x56\x4d\x18\xba\x2f\x5b\x3b\xc3\xe0\x5a\x45\x87\x44" "\x07\x74\x30\xc5\xea\x03\x1e\xe0\x2d\xd8\xf0\xa6\x5d\x7d\xd8\xd9\x0d" "\xd9\xb8\x71\x7f\x77\xd2\x02\x23\x9a\x57\x78\x71\x94\x23\xfb\x2a\xec" "\x7c\xa8\x6e\xb0\x7c\x39\xde\x65\xa3\x4b\x98\x8d\x65\x37\x7a\x74\x73" "\xe9\x14\x5f\x16\xd7\x95\x93\xe9\x69\x03\x33\x0b\xbf\x3a\x80\x24\xfc" "\x15\x51\x9d\x9b\xaa\x0f\xae\x20\x18\x78\x6f\x4b\x18\x46\xfc\xa3\x55" "\xff\x0f\xcc\xf6\x5c\xcc\xad\x18\x96\x30\x9a\x5c\xcf\x20\x56\xdd\x54" "\x2c\x92\x98\x50\xcc\x91\xcd\x65\x59\x62\x36\x0f\xe3\x16\x55\x7a\xb3" "\xfb\x37\x83\x28\xf7\x7a\x07\xd9\xda\x24\x44\x7d\x3f\xa2\x02\x0b\x38" "\x2e\xd2\xe8\x08\xec\x95\x29\xa0\x12\x73\x43\x4c\x64\xb0\xb7\xc3\x5a" "\x06\xa0\x19\xe4\xab\x51\xcd\xc9\xc0\xf2\x66\xab\x25\xb6\x98\x43\x38" "\xa0\xba\x91\x0d\x10\x60\x28\x3b\x63\x6c\x5d\x7e\x8a\x3f\x96\x9c\x1e" "\xe1\xc9\x9b\x54\xbb\xa7\xff\x36\x79\xfb\xee\xcb\xb7\x03\x49\xf0\x76" "\x48\x0a\x86\x7c\xc4\xee\x4c\xac\xae\xa3\x9c\x80\xf6\x42\x53\x35\x99" "\x48\x6d\x2f\xfb\x77\xb8\xc9\x10\x9a\x9d\x25\xfa\x0b\x06\xe5\x8e\xca" "\x76\x4f\x7d\x56\x46\x9e\xb9\x54\x70\x36\xbb\xea\x9d\x5c\x3d\x35\xb4" "\xc1\xfb\xc3\xd3\x9a\x37\x2c\x2b\x7a\xd1\x84\x96\x5c\xad\x38\x19\xc8" "\x92\x8f\x15\x88\xd0\x09\x49\x94\x9c\x0c\x4c\x93\xd3\x0a\xc7\xf6\x66" "\x52\x47\xc0\x10\x8b\xd8\x9d\xff\x3a\xaf\xe7\x80\xac\x66\xfe\xbf\xac" "\xc8\xc6\xa3\xcc\x38\x7d\x09\xda\x6d\xe7\x00\x48\x7a\x80\xe2\xc8\xd5" "\x6d\xf9\x4d\x7e\xbd\x3e\x1d\x9e\x06\x41\x1a\x6c\x5f\x7e\xb6\xda\x41" "\xc6\xf5\x29\x97\xb5\xad\x47\xba\x98\x52\x61\x10\x3f\xdf\x12\xeb\x4a" "\x28\x28\xb2\x48\xf6\x52\xef\x00\xb6\xab\xcc\xab\x2e\xb1\x61\xb8\x78" "\xb9\xdb\xc0\xaa\x91\x14\x05\xb6\xf6\x7a\xdd\xa8\x3c\x16\x18\x77\x48" "\xd7\xb5\x24\xff\xe6\x38\x1f\x48\x9f\x43\x2d\x59\x2e\x61\x71\xbd\x9c" "\xcb\x2c\xd5\x2f\x97\x71\x43\xf5\x7f\xbf\x2a\xb0\xb8\x23\xd4\x49\xae" "\x55\xf0\x24\x40\x97\x23\x34\x34\x4c\xda\x01\x83\x7b\x93\xaf\xa4\xf4" "\x6a\x2f\xde\xfe\x27\xe9\x27\x64\xcf\x95\x96\x78\x08\x46\xde\x2e\x3b" "\x1e\xa8\x3e\x62\xee\x43\xb1\xc0\x5a\xee\x67\x5e\x25\x36\x35\x04\xad" "\xdf\xaa\x68\xe7\xc5\x3e\xd6\x85\x41\x3f\x5b\xa9\x51\xf1\x20\xd0\xa6" "\x46\xe4\x74\x87\x2c\x81\xe5\xa8\x87\x46\x4c\x19\xf8\x46\x0a\xe8\x14" "\xff\xff\x24\xcb\x51\xdd\x2d\xca\x28\xd5\x97\xab\x2e\xa6\x09\x49\xf8" "\xdb\xbe\x67\xf2\x63\xe7\x22\xfd\xb5\x1b\xce\x4e\x32\x8a\x19\xf5\xff" "\x12\x18\xe1\xf6\x3b\x8d\xa6\xd4\x0d\xbd\x54\x90\x96\x44\x99\xb2\x52" "\x2e\xa3\x23\x31\x06\x34\x89\x3e\xad\x66\x14\x07\x96\x62\x07\xa6\x6a" "\xb1\x3a\xdf\xcf\x1a\x72\x5e\xd1\x43\x39\xc4\x60\x11\xc0\xe0\x40\x1f" "\x23\x86\xb4\x7c\xd9\xf9\x02\xfd\xf8\x4b\xc8\x5e\x74\xd3\xae\x7c\xc5" "\x44\xe4\xd6\x56\x70\xa5\x54\xa5\x37\x71\x2c\x6e\xe9\xf7\x51\x91\x63" "\x1d\x2a\x4c\x4d\xa0\x6f\xc3\x84\x23\xb1\xd5\xb8\x28\xd7\x20\x12\x35" "\xb2\x97\x41\x64\xf5\x2a\xa1\x6b\xee\x70\xee\x50\x92\x50\x75\x2f\x4f" "\xdd\x6b\x9f\x8d\x02\x19\x43\xdf\x83\x20\x68\x2a\x6f\x80\xff\x0d\x67" "\xab\x7a\x4c\xee\xa8\x07\xbd\x5b\x3b\x7b\x63\x80\xb0\xc7\xf0\xca\xa6" "\x7b\x02\x08\xba\x71\x31\x7f\x03\x55\xa3\xb7\x55\xaf\x0e\x2c\x00\x71" "\x86\x38\x94\x38\x61\x5d\xf8\x0b\x7b\x25\x10\x4a\x73\x3f\xc9\x06\x25" "\xb6\x26\x82\x19\x87\x33\xc0\xf1\x62\x5d\xfa\xa0\x8c\xf8\x1e\x3d\xf0" "\x43\x09\x4b\x7b\x5a\x09\x8b\x3b\x36\xf8\x03\xb5\xb0\xf1\x0a\x05\x7b" "\xf8\x14\xae\x35\x79\x93\x2c\x0a\x5f\x20\x89\x85\xba\xb3\xd8\x17\xf9" "\x75\x28\x3b\x88\x38\xae\x5c\xb7\x09\xbe\x72\xb5\x8d\xf7\x42\x5e\x05" "\x9f\xdb\xf4\xe0\xee\x51\xb3\xda\x01\xfe\x0b\x44\x96\x3c\x11\x96\xba" "\xee\x5e\xc5\x90\x9a\xd8\x0d\x9d\x16\x60\xf3\xed\xd9\x03\x74\x95\x2a" "\x0b\xf8\xb3\xbe\xce\x2c\x2f\x94\x45\x93\xf4\xde\x7d\xe5\xe0\x5d\xed" "\x09\x6b\x8f\x4f\x05\xd6\x5d\xfc\x2e\x80\x6f\x78\x22\x0d\x84\xb3\xdb" "\x56\x4f\xb1\x2f\x4e\x5e\x8f\x5e\xab\x31\x65\x91\xf0\x04\xe9\x37\x4c" "\xce\x8e\x78\x72\x63\xbc\x38\x27\xaf\xfe\x67\x93\xc1\x30\xb8\x62\x1d" "\x3b\xbb\x2a\x86\xfd\x87\xf0\x70\xea\x21\x71\x82\x81\xee\x7a\xec\x4b" "\xb3\xbb\x71\xaf\x4b\xf5\x72\x1c\xec\xd1\x39\xc4\xbe\x8c\x9d\xf4\xec" "\x8d\xfb\x09\xa5\xcf\x1d\x86\xa2\x5d\x39\xfa\xa9\xf0\x64\xa9\x97\xc2" "\x14\xf3\x34\xe4\x41\x09\x17\xfc\x3b\x4d\x67\xad\xa8\xd8\x7a\x38\xc0" "\xf8\x6b\x02\xbf\x65\x3d\xdd\xae\xb5\xb7\x5b\x30\x0f\x8b\xcf\xd7\x92" "\x85\x8b\xef\x8a\xb2\x3e\x06\x34\x21\x93\x9c\x59\x21\x29\x64\xc9\xed" "\x5d\xd5\x6e\x21\x5d\xb5\x8c\xef\x53\xd3\x1a\x96\x6b\xb8\xce\x4e\xd5" "\x62\x87\xfe\xcb\x3a\x85\xba\x43\x5e\x0b\x41\xb2\x0b\xa1\x16\x4b\x9c" "\x9f\x2c\x49\xfa\x0f\x7b\x17\xa8\x9e\x0e\xc4\x7e\xef\xe9\x92\xd6\x3e" "\xe2\x9c\x8c\x0a\x1e\xce\x26\x64\xfe\xe8\xed\xad\xd4\x36\x36\xa5\x4c" "\x48\x51\x9b\x4f\xcf\x55\xb0\xd9\x10\x36\x02\xb9\x24\x41\xa5\xf8\x5c" "\xf8\xc5\xe4\x06\xd0\xf5\x81\x5f\x8f\x37\x30\x99\x34\xbd\x78\xfb\xc2" "\xac\xf0\xa0\x3b\x05\x1b\x45\x28\xdb\x4f\x7c\x09\xde\x7d\x0a\xab\xaf" "\xca\x37\x36\xb8\x25\x9c\x81\x8c\xa3\x38\xca\x67\x54\xe0\x74\x77\x17" "\xc2\x79\x4d\x66\x4a\x1c\xac\xc1\xe9\xc5\x27\x64\xa3\x08\xe6\xdf\x73" "\xd9\x75\x63\x86\x30\xb7\x4c\xce\x6c\x49\xb1\xba\xc1\x64\x54\xe9\x68" "\x52\xc4\xf9\xd8\xed\x11\x8e\x86\xd2\xf1\xc8\xdc\x33\xbc\xcd\x4a\x07" "\xbe\x12\x8d\xb5\xe8\x0f\x56\x84\xdd\xcc\x11\x58\xe7\x44\x41\x1a\xcd" "\xe5\x90\xf9\x02\xf0\x98\x7c\xfb\x75\x0b\xb5\xbf\xee\xd5\x3b\xff\x07" "\x68\x68\x98\x6b\x56\x6d\x77\x01\xf4\x8d\xdf\xca\xcb\xd3\x25\xc8\xd9" "\x30\xbc\xef\x26\x71\x3b\xf6\x05\x85\xd5\xc9\x91\xe2\xa6\xcc\x33\xcc" "\xbc\x27\xf7\xdd\xfb\xa1\x8f\x99\x84\x97\xc2\xeb\x37\x8c\xc8\xf2\xcc" "\x07\xa1\xb4\xf1\x41\xc5\xe0\xfb\x6f\x52\xe1\x82\x42\xe5\x05\xbc\xf6" "\xdd\x20\xe3\x3a\x46\x9d\x05\x6a\x0b\x4f\xd5\xe7\x2d\x0d\xa9\xd0\xbc" "\xce\x1e\x2f\x9e\x9d\xc7\xd1\xc7\xb6\xcb\x0f\x36\x04\x28\x7e\xca\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192); *(uint64_t*)0x200000000640 = 0; *(uint64_t*)0x200000000648 = 0; *(uint64_t*)0x200000000650 = 0; *(uint64_t*)0x200000000658 = 0; *(uint64_t*)0x200000000660 = 0; *(uint64_t*)0x200000000668 = 0; *(uint64_t*)0x200000000670 = 0; *(uint64_t*)0x200000000678 = 0; *(uint64_t*)0x200000000680 = 0; *(uint64_t*)0x200000000688 = 0; *(uint64_t*)0x200000000690 = 0; *(uint64_t*)0x200000000698 = 0x200000000200; *(uint32_t*)0x200000000200 = 0x9a; *(uint32_t*)0x200000000204 = 0; *(uint64_t*)0x200000000208 = 6; *(uint64_t*)0x200000000210 = 1; *(uint64_t*)0x200000000218 = 0x10000002; *(uint64_t*)0x200000000220 = 0; *(uint64_t*)0x200000000228 = 0; *(uint32_t*)0x200000000230 = 0; *(uint32_t*)0x200000000234 = 0xfffffffb; *(uint64_t*)0x200000000238 = 4; *(uint64_t*)0x200000000240 = 2; *(uint64_t*)0x200000000248 = 0xfffffffffffffffd; *(uint64_t*)0x200000000250 = 0xffff; *(uint64_t*)0x200000000258 = 0x8000000000000000; *(uint64_t*)0x200000000260 = 0; *(uint32_t*)0x200000000268 = 0; *(uint32_t*)0x20000000026c = 1; *(uint32_t*)0x200000000270 = 0x7fffffff; *(uint32_t*)0x200000000274 = 0x6000; *(uint32_t*)0x200000000278 = 0x1400; *(uint32_t*)0x20000000027c = r[2]; *(uint32_t*)0x200000000280 = r[3]; *(uint32_t*)0x200000000284 = 0x80000902; *(uint32_t*)0x200000000288 = 0x101; *(uint32_t*)0x20000000028c = 0; *(uint64_t*)0x2000000006a0 = 0; *(uint64_t*)0x2000000006a8 = 0; *(uint64_t*)0x2000000006b0 = 0; *(uint64_t*)0x2000000006b8 = 0; *(uint64_t*)0x2000000006c0 = 0; syz_fuse_handle_req(/*fd=*/r[0], /*buf=*/0x200000008400, /*len=*/0x2000, /*res=*/0x200000000640); break; case 5: // write$FUSE_INIT arguments: [ // fd: fd_fuse (resource) // arg: ptr[in, fuse_out_t[fuse_unique, fuse_init_out]] { // fuse_out_t[fuse_unique, fuse_init_out] { // len: len = 0x50 (4 bytes) // err: fuse_errors = 0x0 (4 bytes) // unique: fuse_unique (resource) // payload: fuse_init_out { // major: const = 0x7 (4 bytes) // minor: const = 0x2b (4 bytes) // max_readahead: int32 = 0x0 (4 bytes) // flags: fuse_init_flags = 0x800000 (4 bytes) // max_background: int16 = 0x3 (2 bytes) // congestion_threshold: int16 = 0x0 (2 bytes) // max_write: int32 = 0x0 (4 bytes) // time_gran: int32 = 0xfffffffd (4 bytes) // max_pages: const = 0x0 (2 bytes) // map_alignment: const = 0x0 (2 bytes) // flags2: fuse_init_flags2 = 0x20 (4 bytes) // max_stack_depth: int32 = 0x0 (4 bytes) // unused: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 // 00 00 00 00 00 00 00 00} (length 0x18) // } // } // } // len: bytesize = 0x50 (8 bytes) // ] *(uint32_t*)0x200000000440 = 0x50; *(uint32_t*)0x200000000444 = 0; *(uint64_t*)0x200000000448 = r[1]; *(uint32_t*)0x200000000450 = 7; *(uint32_t*)0x200000000454 = 0x2b; *(uint32_t*)0x200000000458 = 0; *(uint32_t*)0x20000000045c = 0x800000; *(uint16_t*)0x200000000460 = 3; *(uint16_t*)0x200000000462 = 0; *(uint32_t*)0x200000000464 = 0; *(uint32_t*)0x200000000468 = 0xfffffffd; *(uint16_t*)0x20000000046c = 0; *(uint16_t*)0x20000000046e = 0; *(uint32_t*)0x200000000470 = 0x20; *(uint32_t*)0x200000000474 = 0; memset((void*)0x200000000478, 0, 24); syscall(__NR_write, /*fd=*/r[0], /*arg=*/0x200000000440ul, /*len=*/0x50ul); break; case 6: // openat arguments: [ // fd: fd_dir (resource) // file: ptr[in, buffer] { // buffer: {2e 2f 66 69 6c 65 30 2f 66 69 6c 65 30 00} (length 0xe) // } // flags: open_flags = 0x0 (4 bytes) // mode: open_mode = 0x1 (2 bytes) // ] // returns fd memcpy((void*)0x200000000a80, "./file0/file0\000", 14); syscall(__NR_openat, /*fd=*/0xffffff9c, /*file=*/0x200000000a80ul, /*flags=*/0, /*mode=S_IXOTH*/ 1); break; } } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000ul, /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/(intptr_t)-1, /*offset=*/0ul); const char* reason; (void)reason; loop(); return 0; }