// https://syzkaller.appspot.com/bug?id=170bf10d2326559d3f99ec9c46b51a8aae78b5fe // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include unsigned long long procid; static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } #define USB_DEBUG 0 #define USB_MAX_EP_NUM 32 struct usb_device_index { struct usb_device_descriptor* dev; struct usb_config_descriptor* config; unsigned config_length; struct usb_interface_descriptor* iface; struct usb_endpoint_descriptor* eps[USB_MAX_EP_NUM]; unsigned eps_num; }; static bool parse_usb_descriptor(char* buffer, size_t length, struct usb_device_index* index) { if (length < sizeof(*index->dev) + sizeof(*index->config) + sizeof(*index->iface)) return false; index->dev = (struct usb_device_descriptor*)buffer; index->config = (struct usb_config_descriptor*)(buffer + sizeof(*index->dev)); index->config_length = length - sizeof(*index->dev); index->iface = (struct usb_interface_descriptor*)(buffer + sizeof(*index->dev) + sizeof(*index->config)); index->eps_num = 0; size_t offset = 0; while (true) { if (offset + 1 >= length) break; uint8_t desc_length = buffer[offset]; uint8_t desc_type = buffer[offset + 1]; if (desc_length <= 2) break; if (offset + desc_length > length) break; if (desc_type == USB_DT_ENDPOINT) { index->eps[index->eps_num] = (struct usb_endpoint_descriptor*)(buffer + offset); index->eps_num++; } if (index->eps_num == USB_MAX_EP_NUM) break; offset += desc_length; } return true; } enum usb_fuzzer_event_type { USB_FUZZER_EVENT_INVALID, USB_FUZZER_EVENT_CONNECT, USB_FUZZER_EVENT_DISCONNECT, USB_FUZZER_EVENT_SUSPEND, USB_FUZZER_EVENT_RESUME, USB_FUZZER_EVENT_CONTROL, }; struct usb_fuzzer_event { uint32_t type; uint32_t length; char data[0]; }; struct usb_fuzzer_init { uint64_t speed; const char* driver_name; const char* device_name; }; struct usb_fuzzer_ep_io { uint16_t ep; uint16_t flags; uint32_t length; char data[0]; }; #define USB_FUZZER_IOCTL_INIT _IOW('U', 0, struct usb_fuzzer_init) #define USB_FUZZER_IOCTL_RUN _IO('U', 1) #define USB_FUZZER_IOCTL_EVENT_FETCH _IOR('U', 2, struct usb_fuzzer_event) #define USB_FUZZER_IOCTL_EP0_WRITE _IOW('U', 3, struct usb_fuzzer_ep_io) #define USB_FUZZER_IOCTL_EP0_READ _IOWR('U', 4, struct usb_fuzzer_ep_io) #define USB_FUZZER_IOCTL_EP_ENABLE _IOW('U', 5, struct usb_endpoint_descriptor) #define USB_FUZZER_IOCTL_EP_WRITE _IOW('U', 7, struct usb_fuzzer_ep_io) #define USB_FUZZER_IOCTL_EP_READ _IOWR('U', 8, struct usb_fuzzer_ep_io) #define USB_FUZZER_IOCTL_CONFIGURE _IO('U', 9) #define USB_FUZZER_IOCTL_VBUS_DRAW _IOW('U', 10, uint32_t) int usb_fuzzer_open() { return open("/sys/kernel/debug/usb-fuzzer", O_RDWR); } int usb_fuzzer_init(int fd, uint32_t speed, const char* driver, const char* device) { struct usb_fuzzer_init arg; arg.speed = speed; arg.driver_name = driver; arg.device_name = device; return ioctl(fd, USB_FUZZER_IOCTL_INIT, &arg); } int usb_fuzzer_run(int fd) { return ioctl(fd, USB_FUZZER_IOCTL_RUN, 0); } int usb_fuzzer_event_fetch(int fd, struct usb_fuzzer_event* event) { return ioctl(fd, USB_FUZZER_IOCTL_EVENT_FETCH, event); } int usb_fuzzer_ep0_write(int fd, struct usb_fuzzer_ep_io* io) { return ioctl(fd, USB_FUZZER_IOCTL_EP0_WRITE, io); } int usb_fuzzer_ep0_read(int fd, struct usb_fuzzer_ep_io* io) { return ioctl(fd, USB_FUZZER_IOCTL_EP0_READ, io); } int usb_fuzzer_ep_write(int fd, struct usb_fuzzer_ep_io* io) { return ioctl(fd, USB_FUZZER_IOCTL_EP_WRITE, io); } int usb_fuzzer_ep_read(int fd, struct usb_fuzzer_ep_io* io) { return ioctl(fd, USB_FUZZER_IOCTL_EP_READ, io); } int usb_fuzzer_ep_enable(int fd, struct usb_endpoint_descriptor* desc) { return ioctl(fd, USB_FUZZER_IOCTL_EP_ENABLE, desc); } int usb_fuzzer_configure(int fd) { return ioctl(fd, USB_FUZZER_IOCTL_CONFIGURE, 0); } int usb_fuzzer_vbus_draw(int fd, uint32_t power) { return ioctl(fd, USB_FUZZER_IOCTL_VBUS_DRAW, power); } #define USB_MAX_PACKET_SIZE 1024 struct usb_fuzzer_control_event { struct usb_fuzzer_event inner; struct usb_ctrlrequest ctrl; char data[USB_MAX_PACKET_SIZE]; }; struct usb_fuzzer_ep_io_data { struct usb_fuzzer_ep_io inner; char data[USB_MAX_PACKET_SIZE]; }; struct vusb_connect_string_descriptor { uint32_t len; char* str; } __attribute__((packed)); struct vusb_connect_descriptors { uint32_t qual_len; char* qual; uint32_t bos_len; char* bos; uint32_t strs_len; struct vusb_connect_string_descriptor strs[0]; } __attribute__((packed)); static const char* default_string = "syzkaller"; static bool lookup_connect_response(struct vusb_connect_descriptors* descs, struct usb_device_index* index, struct usb_ctrlrequest* ctrl, char** response_data, uint32_t* response_length) { uint8_t str_idx; switch (ctrl->bRequestType & USB_TYPE_MASK) { case USB_TYPE_STANDARD: switch (ctrl->bRequest) { case USB_REQ_GET_DESCRIPTOR: switch (ctrl->wValue >> 8) { case USB_DT_DEVICE: *response_data = (char*)index->dev; *response_length = sizeof(*index->dev); return true; case USB_DT_CONFIG: *response_data = (char*)index->config; *response_length = index->config_length; return true; case USB_DT_STRING: str_idx = (uint8_t)ctrl->wValue; if (str_idx >= descs->strs_len) { *response_data = (char*)default_string; *response_length = strlen(default_string); } else { *response_data = descs->strs[str_idx].str; *response_length = descs->strs[str_idx].len; } return true; case USB_DT_BOS: *response_data = descs->bos; *response_length = descs->bos_len; return true; case USB_DT_DEVICE_QUALIFIER: *response_data = descs->qual; *response_length = descs->qual_len; return true; default: exit(1); return false; } break; default: exit(1); return false; } break; default: exit(1); return false; } return false; } static volatile long syz_usb_connect(volatile long a0, volatile long a1, volatile long a2, volatile long a3) { uint64_t speed = a0; uint64_t dev_len = a1; char* dev = (char*)a2; struct vusb_connect_descriptors* descs = (struct vusb_connect_descriptors*)a3; if (!dev) { return -1; } struct usb_device_index index; memset(&index, 0, sizeof(index)); int rv = 0; rv = parse_usb_descriptor(dev, dev_len, &index); if (!rv) { return rv; } int fd = usb_fuzzer_open(); if (fd < 0) { return fd; } char device[32]; sprintf(&device[0], "dummy_udc.%llu", procid); rv = usb_fuzzer_init(fd, speed, "dummy_udc", &device[0]); if (rv < 0) { return rv; } rv = usb_fuzzer_run(fd); if (rv < 0) { return rv; } bool done = false; while (!done) { struct usb_fuzzer_control_event event; event.inner.type = 0; event.inner.length = sizeof(event.ctrl); rv = usb_fuzzer_event_fetch(fd, (struct usb_fuzzer_event*)&event); if (rv < 0) { return rv; } if (event.inner.type != USB_FUZZER_EVENT_CONTROL) continue; bool response_found = false; char* response_data = NULL; uint32_t response_length = 0; if (event.ctrl.bRequestType & USB_DIR_IN) { response_found = lookup_connect_response( descs, &index, &event.ctrl, &response_data, &response_length); if (!response_found) { return -1; } } else { if ((event.ctrl.bRequestType & USB_TYPE_MASK) != USB_TYPE_STANDARD || event.ctrl.bRequest != USB_REQ_SET_CONFIGURATION) { exit(1); return -1; } done = true; } if (done) { rv = usb_fuzzer_vbus_draw(fd, index.config->bMaxPower); if (rv < 0) { return rv; } rv = usb_fuzzer_configure(fd); if (rv < 0) { return rv; } unsigned ep; for (ep = 0; ep < index.eps_num; ep++) { rv = usb_fuzzer_ep_enable(fd, index.eps[ep]); if (rv < 0) { } else { } } } struct usb_fuzzer_ep_io_data response; response.inner.ep = 0; response.inner.flags = 0; if (response_length > sizeof(response.data)) response_length = 0; if (event.ctrl.wLength < response_length) response_length = event.ctrl.wLength; response.inner.length = response_length; if (response_data) memcpy(&response.data[0], response_data, response_length); else memset(&response.data[0], 0, response_length); if (event.ctrl.bRequestType & USB_DIR_IN) rv = usb_fuzzer_ep0_write(fd, (struct usb_fuzzer_ep_io*)&response); else rv = usb_fuzzer_ep0_read(fd, (struct usb_fuzzer_ep_io*)&response); if (rv < 0) { return rv; } } sleep_ms(200); return fd; } static long syz_open_dev(volatile long a0, volatile long a1, volatile long a2) { if (a0 == 0xc || a0 == 0xb) { char buf[128]; sprintf(buf, "/dev/%s/%d:%d", a0 == 0xc ? "char" : "block", (uint8_t)a1, (uint8_t)a2); return open(buf, O_RDWR, 0); } else { char buf[1024]; char* hash; strncpy(buf, (char*)a0, sizeof(buf) - 1); buf[sizeof(buf) - 1] = 0; while ((hash = strchr(buf, '#'))) { *hash = '0' + (char)(a1 % 10); a1 /= 10; } return open(buf, a2, 0); } } static void kill_and_wait(int pid, int* status) { kill(-pid, SIGKILL); kill(pid, SIGKILL); int i; for (i = 0; i < 100; i++) { if (waitpid(-1, status, WNOHANG | __WALL) == pid) return; usleep(1000); } DIR* dir = opendir("/sys/fs/fuse/connections"); if (dir) { for (;;) { struct dirent* ent = readdir(dir); if (!ent) break; if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0) continue; char abort[300]; snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort", ent->d_name); int fd = open(abort, O_WRONLY); if (fd == -1) { continue; } if (write(fd, abort, 1) < 0) { } close(fd); } closedir(dir); } else { } while (waitpid(-1, status, __WALL) != pid) { } } static void setup_test() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setpgrp(); write_file("/proc/self/oom_score_adj", "1000"); } static void execute_one(void); #define WAIT_FLAGS __WALL static void loop(void) { int iter; for (iter = 0;; iter++) { int pid = fork(); if (pid < 0) exit(1); if (pid == 0) { setup_test(); execute_one(); exit(0); } int status = 0; uint64_t start = current_time_ms(); for (;;) { if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid) break; sleep_ms(1); if (current_time_ms() - start < 5 * 1000) continue; kill_and_wait(pid, &status); break; } } } void execute_one(void) { memcpy( (void*)0x20004a00, "\x12\x01\x00\x00\x12\x09\x1f\x08\xc0\x07\x01\x15\xa0\x74\x00\x00\x00\x01" "\x09\x02\x1b\x00\x03\x00\x00\x00\x00\x09\x04\xec\x00\x01\x50\x6d\x30\x00" "\x07\x05\x81\x8a\x7c\x29\x84\x63\x89\x56\xd3\x2d\x01\xd3\xb0\xf0\x96\x58" "\x85\xfc\xec\x09\xba\x0e\x36\x54\xbb\xa6\x49\x2e\x7c\xa6\xfa\xc3\x13\x6c" "\x3b\x2e\x10\x75\xed\xf8\xd5\x47\xec\x1b\x71\x59\xb2\x29\x1f\xdb\x69\x9f" "\x0c\xbf\x95\x71\x03\x33\xa1\x72\xe5\xe1\x6f\xff\xfb\xe2\x16\x71\x93\x87" "\xfa\x36\x13\x78\x5b\x28\x24\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xd9\x02\x94\x2a\xa4\x2a\x2d\x0a\xca" "\xf3\xb8\x43\xfd\x3c\xeb\xb0\x28\x4c\x68\x04\xe1\x00\x3b\x25\xbb\x66\x62" "\x04\xf7\x28\xd2\x2c\x4c\xcf\x6b\xbc\x17\x07\x3a\x1f\x00\x00\x00\xae\xb1" "\x5e\xf1\xbe\xe1\x60\x19\xd7\xdc\xa8\xfb\x7d\xdc\x07\x25\xc6\x68\x24\x2c" "\x2a\x18\xa9\x05\x68\x72\x98\x10\xef\xb8\x52\x4a\x3b\x51\x43\xe5\x66\x73" "\xc4\x27\xe1\x4c\x0a\xb0\xbe\x41\xf1\x6c\x9d\x54\x7c\xfe\xdb\x3e\x3f\xcb" "\x1e\xa4\xd0\xc3\x1c\x3c\xd9\x93\xfc\x4e\x13\x34\x8c\x42\xe1\xb2\x08\x00" "\x00\x00\x3b\x52\xe2\x12\xf4\x59\xa4\xca\xb3\xa1\x19\x0b\x8a\x94\x4a\x07" "\xc4\xba\x5c\x3d\x2d\xef\x05\x5f\x97\xce\xfb\xe1\x6f\xed\xbf\xbe\xa5\xc1" "\x92\x0e\x96\xef\xb4\x93\x2a\xd9\x71\xfd\x3f\x42\x9c\xdd\x75\x95\xa4\x76" "\xc7\x72\x54\x4b\xa8\xa5\xf2\x0d\x14\xf6\x6a\x07\x9d\x94\xed\x38\x44\xc7" "\x36\x04\xbd\x09\xb0\x2f\xe1\x94\x75\x00\x00\x00\x00\x00\x00\x00\x19\x67" "\x11\xea\xe7\x47\x86\x65\xf0\x86\xb2\x65\xf3\x0e\x57\x1e\xfa\xdf\xf0\xd1" "\x60\xba\x67\xdf\x4c\xc3\xb2\x21\x21\x25\x35\xee\xcb\x6a\xc6\x18\xf2\xd2" "\x04\xb7\xac\xec\x54\xcd\x67\xa0\x06\x2a\x14\x46\xf8\xff\xff\xff\x57\xe1" "\xf6\x15\xa3\xaf\x4e\x38\x89\x23\x78\x3f\x70\x7e\x63\x9a\xa7\xee\xc3\x12" "\x96\x34\x91\x0b\xf3\x09\xb6\x9b\xb5\xdf\x6c\x2e\x4c\xe4\xbe\x41\xec\xce" "\x5d\x57\x64\x57\xa1\xb1\x8a\xdd\x7f\xc1\x7e\x5a\xab\x45\xea\x89\xb3\xcf" "\xac\xac\xde\x3d\x2b\xab\xcf\x10\xb1\xf6\x7a\x1c\x8d\xb1\x71\x53\x18\xd4" "\xb6\x50\xca\xff\x54\x06\x64\xe1\x67\x9c\x53\x55\x49\xbb\xc1\xbf\x82\xa3" "\xb6\x01\xb5\x54\xba\x06\x12\xc1\x90\x97\x71\xfd\xf4\x55\x7e\xe4\xa5\x38" "\xb1\xa2\xe5\x0e\x32\x21\x30\x9a\xc9\x82\xd7\x79\xb9\x6a\x6a\xb1\x5d\x5d" "\x35\xb5\xd7\x88\x9c\xfa\x4f\xf5\xe4\x71\x96\x28\x14\x32\x56\x3b\xa3\x88" "\x1d\xfd\x4b\xb6\x51\x7d\x91\x7d\xf8\x34\x35\xf0\x08\x6e\xb4\x23\x5a\xe4" "\x6a\xb3\xc3\x61\xb6\x0f\x29\x06\x25\x2c\x7d\x28\x0c\x95\xdb\x70\x4e\xb6" "\x08\x1f\xdb\xea\xd5\xea\x50\x33\x07\x00\x00\x00\x00\x00\x23\x04\x00\x00" "\x00\x00\x00\x00\xa9\x61\xe5\x3a\x15\x1f\x14\x9e\xa0\x7a\x4b\x06\x6e\xca" "\x42\x0b\x33\x88\x35\xdf\x8a\xae\x0c\x1c\x3e\x86\x9f\x37\x75\xc6\x9b\xd1" "\x03\xff\x9a\x0f\x85\xfb\x97\xe0\x2f\x81\xa1\x7d\x15\x7a\x6a\x40\x34\x81" "\xd5\x1a\x01\x54\x2b\x94\xa9\x13\x6d\x7c\x93\x50\xad\x81\x04\x87\xeb\x57" "\x19\xac\xb9\x43\x39\x2e\x4f\x24\x79\xdc\xac\xc2\x2a\xfa\xea\x57\x8c\xc8" "\xd1\x23\x04\x00\x00\x68\xcb\x62\xff\x1f\xa1\xde\x36\x5b\xf4\x1f\x73\xff" "\xf0\x4b\x0c\xd9\x7a\x36\x7f\x3f\x0d\x9c\x04\xff\x99\x47\x86\x99\x11\xcd" "\x50\xf4\x4c\x5c\xf2\xbe\xcb\x7c\x5c\xf2\x7d\x66\xe6\x03\x7a\x38\xbd\x38" "\xcf\x1c\xc9\xf4\xd5\x1d\x03\x46\xde\x05\x68\x49\x89\xff\x50\xf3\x7a\x88" "\x21\xda\xce\x1e\xd0\x7b\x6b\xb5\xb2\x54\x7b\x75\x5c\x36\xf3\xd1\x67\x22" "\xa7\x15\x61\x71\xf1\x84\xe7\x86\x94\x42\x7f\xb7\x93\xa3\xdb\x2b\x58\xc9" "\xe3\xe2\x60\xde\x7f\x23\xdd\xc6\x79\x4c\x7e\x30\xd2\xac\xea\x7c\x9f\x06" "\xbe\xd6\x1f\x06\xb3\xd6\xab\xe8\x63\x4c\x5b\x69\xa9\x34\x51\x32\xc1\xa8" "\xe2\x13\xe4\x55\xdd\xbd\x7b\xcc\x51\x81\xcd\x25\xdf\x5b\x43\x8d\x07\xd9" "\x38\x0c\x50\x8f\xd4\x4b\xd1\x9c\xce\x9c\x66\x01\x45\xbf\x21\x93\xf5\x9f" "\xb2\x1f\x04\xb7\xa9\x00\x35\x4f\x0d\xa4\x5c\x7b\xee\x3c\x07\x46\x84\xfe" "\x79\x35\x49\xc2\xad\x92\x1a\x3f\x67\x24\xd3\x45\x19\x2f\xe5\x1b\xb5\xb4" "\x0e\xa8\xff\x9b\xc8\x07\x91\x82\xf5\x91\x78\x43\x5d\x86\xee\xf8\x85\x11" "\x1b\x1f\xbb\x35\x53\xe6\x60\xbf\xa3\xb9\x45\x05\xc2\x99\x43\xf7\xd8\x03" "\x91\x42\x50\xcc\x6d\x3e\xd6\xd6\xa1\x60\x36\xa1\xc8\x1e\x44\x50\xc8\x73" "\x6c\x25\xd5\x00\xa3\xc9\x17\xcf\x30\x11\xfa\xa9\xe3\xb9\xc5\x77\xa6\xb3" "\xbd\xf4\x03\xfc\x20\x08\xcf\x21\x19\x52\x6d\x49\x0c\xe8\xb2\x7c\x2a\xde" "\xe8\x67\x32\xfb\x51\xd5\x3e\x94\x9e\x47\x55\x89\xb3\xa9\x31\xe3\xdd\x2b" "\xa3\xfb", 1010); syz_usb_connect(1, 0x2d, 0x20004a00, 0); syz_open_dev(0xc, 0xb4, 0); syz_open_dev(0, 0x3575, 0x181080); syz_usb_connect(0x4edae02fb3f7bbdf, 0, 0, 0); memcpy( (void*)0x20003240, "\x12\x01\x00\x03\xb6\xf0\x0d\x48\xc7\x1b\x36\x00\x80\x59\x3b\x86\x08\x01" "\x09\x02\x5c\x17\x01\x07\x03\x20\xb7\x09\x04\xe7\x00\x0a\x02\x0d\x00\x01" "\x07\x24\x06\x00\x00\xa7\x60\x05\x24\x00\x00\x01\x0d\x24\x0f\x01\x01\x00" "\x00\x00\x7f\x00\x81\x00\x05\x05\x24\x01\x01\x03\x15\x24\x13\x03\x8b\x5d" "\x76\x83\xb7\x93\x66\x22\xdf\x43\x2e\x73\xd4\x65\xae\x5c\xd6\x06\x24\x1a" "\x08\x00\x03\x07\x24\x14\x00\x00\x18\x0d\xca\x24\x13\x00\x50\x2a\x1c\x9e" "\xc2\x82\xe0\x64\x18\xef\x9c\x68\x31\x36\xe9\x51\x8d\x9e\xc4\xec\xda\xbe" "\x9c\xb3\xc5\x10\x79\xf9\x94\x56\xa3\xcb\x97\x1b\x54\xd0\x88\x53\xca\x7b" "\xf4\xab\xbc\x6d\xc0\x8e\x01\x8a\x35\xbf\x3f\x04\x97\xdb\xd5\x73\xa1\xf6" "\x1e\xa9\xd3\x88\x66\xb5\x4f\x53\x48\x22\x30\x46\xf4\xfd\xa0\xf9\x49\xaf" "\x05\x11\x0e\xaf\x6e\xe3\xf3\x09\x02\xf3\x9e\x46\xc4\xa7\x1c\xc7\xee\xdb" "\xc2\x25\x8b\x24\xda\x7d\xfa\x45\x01\x5e\x26\x09\xcd\x9d\x44\x46\x50\x63" "\xc6\x27\xd4\x10\x37\xd6\xe9\x6e\xc3\x3a\x2c\x34\xbc\x42\xf3\xaa\x02\x95" "\x8f\x63\x11\xfc\x6e\x84\xcd\x4e\x72\xca\x2a\x76\xf0\xdc\x83\x9b\xde\xb5" "\x0e\xf4\xa1\x75\x6a\xe1\x4c\xc2\x58\xf2\x17\x5d\x49\xc8\x0d\xed\xe3\xea" "\xac\x3e\xf2\x88\x1c\x3c\x33\x4e\xd8\xf6\x8c\xe8\x3c\xd5\xd2\x49\xda\xc1" "\xad\xf4\xb5\x07\x2e\x3f\x91\x2e\x3d\xec\xba\xcf\x39\x37\x79\x11\x7e\xed" "\x48\xd0\xdb\xe0\xee\x30\xe9\xb4\x4f\x65\xa7\xe7\x61\xe6\xc3\x95\xd8\x52" "\x91\x90\x5f\x61\x9e\x6e\xa9\x03\x6c\x9a\xd1\x33\xf4\xc9\xd9\x46\x06\xa1" "\xec\xb1\x80\xae\x92\x55\x17\x5a\xfb\xf0\xc9\xdd\xb2\x68\x49\xb5\xa0\xf5" "\xcb\xb8\xd6\x29\x7e\xf7\x55\x97\xb5\x86\x4d\x1e\xdd\xd6\xe8\x78\x62\x9c" "\x29\x4e\x1d\x08\x41\xb7\x40\x17\x86\x35\xd7\x33\xcf\xf0\x00\x60\x03\xc7" "\x09\x5d\x8c\x61\x89\xe7\x8a\x7e\x63\x65\x77\xa9\xdf\x55\x0e\x99\xef\xb2" "\x4e\xc8\x46\xe1\xdf\xde\x27\x04\x8c\x09\x05\x02\x02\x4d\x00\xed\x08\x1f" "\xc8\x00\x1f\xd7\xb8\xa0\xb8\x21\x6c\x65\xee\xf2\x3c\x71\xdd\x0e\x6c\xbc" "\x0b\x1d\x44\x4f\xe0\x47\xa8\x40\x9b\x48\xf9\x0b\x99\x7d\x6d\x06\xcb\x58" "\x39\xde\x10\xf6\x6a\x74\xe2\xcd\x9d\xe8\xb4\x3b\xcd\x45\xd6\x89\xee\x48" "\xe0\xef\x70\x5f\x6b\xd7\x72\x44\x56\x1b\xab\x26\x52\x90\x4e\x08\x77\x12" "\x5d\x23\xfc\x09\x59\x29\x3d\x21\x02\x64\x5f\x10\x5a\x67\x29\x4e\x36\x30" "\x4a\x2f\x2d\x17\x3b\x02\xb2\x4e\x1d\xe8\x33\xda\xa7\xe1\xad\xb3\x8a\x6a" "\xb5\xd4\xf8\xf2\x4d\xd4\x4c\x16\xf0\x99\x13\x83\xd3\x06\x29\x1d\x8d\xfb" "\x2d\x4f\x9d\x61\xe0\x6f\xce\x69\x29\xf0\xba\x66\x3b\x86\x48\xd3\x6c\x2c" "\x58\x2e\xa8\x71\x69\x52\x54\xab\xac\x26\xcc\x94\x11\x44\xe2\x80\x05\x71" "\xf1\xfa\xb6\x17\xdf\x11\xbf\x3e\x05\x25\xe9\x73\x5d\xd2\xc8\xcd\x51\x09" "\xa1\xb7\x5a\x5b\x15\xe3\x81\x70\x20\x5a\xea\x40\x5f\xa1\xa0\xd0\xbc\x00" "\x28\x12\x68\x0f\x83\xe3\x0b\x38\xd0\x60\xc6\x38\x43\x60\x43\xf7\x26\x5b" "\x25\x77\xb1\xd2\x1a\x6e\x24\xe2\xd1\x80\xc2\x58\xb7\x98\x6a\x6f\x87\x5d" "\xa6\x20\x6d\x85\xfd\xdb\x06\xfe\xec\x37\x78\x03\xf1\x8d\xd7\x13\xea\xed" "\x5e\x39\xa9\x09\x7a\x32\x9c\xa8\x20\xd6\x4b\xcf\x27\x74\x37\x64\x91\x5b" "\xc0\xb3\x2d\x5b\x6c\x50\x3c\xc0\x36\x77\x45\x07\xec\xd1\xb9\x28\x2a\xcb" "\xac\x45\xd9\x16\x07\xe7\x44\x33\x24\xcf\x7e\x3b\x74\x8c\xb0\x9f\x09\x05" "\x00\x01\x50\x01\x1f\xff\x01\x09\x05\x0d\x03\xca\x01\x7f\x00\x05\x9d\x0b" "\x67\x23\x58\xc6\x41\xbf\x9e\x76\x8c\xe1\x76\x97\x1f\xb1\xbb\x38\x12\x2f" "\x71\x97\x30\xea\x24\x39\x61\xe6\xc7\x72\xb9\xc8\x53\x1f\x70\xf5\x11\x5e" "\xb5\x74\x6b\xdc\xbf\x41\x49\xe0\x93\xe9\xfc\x9f\xdd\xec\x05\x90\x74\xbb" "\x79\x1f\x39\x48\x46\x1c\xfe\x79\x0d\x3e\x5d\x63\xee\xfb\x82\x3c\x45\xd0" "\xf7\xe9\x87\x36\x3c\x03\x13\x6b\x25\x70\xbf\x92\x27\xc0\x88\x64\x65\x95" "\x52\xb9\xa3\xf2\xb0\x54\xf4\x2d\x69\xef\x7d\xdc\x6b\xc5\x29\x9f\x7f\x4a" "\x02\x30\xa9\xa7\x09\xb8\xcc\xc8\x2d\x15\x5e\xed\xbf\x84\xe9\x0c\x0e\x57" "\x8e\x35\x28\x5d\x86\x24\x18\xc3\x1d\xb3\x61\x54\x1c\xc9\x0d\x60\x7b\x54" "\x29\x00\x62\x07\xf6\x9f\xf0\xea\x21\x01\x68\x09\x05\x09\x00\x01\x03\x09" "\x5b\x00\x09\x05\x0a\x00\xb2\x03\x00\x07\xfd\xb0\x0f\xc8\xcd\x41\xf2\x6a" "\x92\x6c\xe2\xe2\xa0\xa6\xe1\x24\x32\x9a\x68\x25\x2a\xdd\x68\x2c\x69\xf3" "\x20\x35\xed\x46\xf3\x38\xf2\x72\x2f\x11\x53\x3a\x8d\x9f\x94\xf3\x05\x07" "\x38\xbc\xb8\x3b\x1d\xef\x1e\x58\x09\xb4\x84\x1b\x5f\x25\x0b\x17\x48\x8d" "\xbf\x6d\xd0\xe7\xf6\x8b\x89\x2e\x7c\x68\x4a\x1d\xbe\x82\x7a\x73\x41\xd9" "\xf9\x25\x95\xb6\xd1\xad\x48\xae\x16\x13\xc3\x14\x85\xc6\x43\xe8\x90\x7f" "\x10\xdd\x18\x29\xb6\x18\xee\xb8\xde\x91\xa3\xad\xf9\xe0\x29\xf3\xd0\x88" "\xe4\xc3\x12\x56\x55\x3c\xd0\xcf\x53\x36\x6a\x0b\x6d\x5a\x3c\x65\x21\xa1" "\x66\x52\xbf\x5d\xf3\x07\x2f\x57\xce\x8e\x85\x0c\x20\xde\x78\xf8\x28\x60" "\x59\xc2\x1e\x25\x4d\xd4\x17\x7e\x4b\x2b\x70\xce\xc5\xba\xeb\xec\x38\xd2" "\x3a\x1e\x0f\x15\x05\x9f\x95\x09\x05\x0d\x04\xfb\x01\x0c\x1f\x07\x7b\x11" "\x92\x7e\x83\x82\xde\x18\x1e\xc8\xdc\x0f\x8f\x8c\x7d\x26\xbb\x4a\xa8\xea" "\xc3\xf1\x70\xe4\xdb\x99\x84\x03\xc9\x00\x1f\xb9\x2f\x2a\x17\x76\x50\x23" "\xb0\xfe\x66\x7e\xa4\xa2\xe0\xdd\x82\xd5\x5f\xbb\x3f\x16\xd5\x71\xc1\x5e" "\x9f\xe2\xfa\x98\xf4\xb6\x29\xce\x23\xc8\xa3\x95\xce\x02\x4e\x74\x6e\x5a" "\x9e\x9c\x70\xe4\x54\xfd\x23\x1c\x4a\x01\x9a\x8c\xcd\x4e\xfa\x5a\x73\x44" "\x78\x09\x0b\xdb\x08\x80\xb5\xa7\x18\x5c\x4c\x9b\x67\xa2\xb4\x6a\x1c\x46" "\x69\x70\x93\x3c\x01\xf2\xe3\x8a\xb8\xbc\xa3\x4b\x5f\x09\x05\x80\x03\x45" "\x02\x00\x04\x01\x09\x05\x00\x00\x00\x03\x01\x09\x04\x02\x34\x9d\x33\xd0" "\xd7\xea\xef\x47\x18\x40\x91\x3d\x95\x01\x3f\xd4\x74\xfd\xe9\xed\x39\xbf" "\x0e\x36\x89\x01\x0d\x16\x60\x5f\xdf\x14\x6c\x6e\xa2\xa6\xf1\x66\xad\x8d" "\xb3\x3d\x49\x5d\x4b\xbb\x94\x21\x58\x51\xda\xda\x97\x81\xb2\x8b\x37\x3b" "\xc4\xa8\xf1\xf1\xec\x35\xc0\xfa\xf6\x0c\x6e\xa6\x68\x82\x32\xfb\xd5\x42" "\x3d\x03\xb6\xed\x72\xe6\x6a\x77\x1c\xa2\x8b\x23\xe4\x57\xa8\x23\x01\x28" "\x1a\x4f\x71\x84\x19\x47\x59\x46\x54\xd0\xa9\x95\xaa\x47\xda\x7c\xf2\x33" "\x28\xba\x2c\x27\x87\x44\xd1\xf2\x48\xcb\xd8\xa5\x3f\x7a\x0b\xc7\xfa\xf8" "\xcb\xe1\x3f\x8a\xcc\xfe\xab\x2a\x37\xd6\xda\x35\x3a\x8f\xa9\x46\xc8\x20" "\xf2\x6b\x90\x41\x85\xed\x2f\x86\xdc\x1e\x2a\x22\xc5\xb3\x69\xc4\x85\x31" "\x81\x2b\x0e\xbb\xaf\x25\xaf\xce\x68\x8e\x9c\x17\xbe\x11\xcb\xb1\xf5\xa4" "\xca\xda\x6b\xe0\x4a\xc8\x4e\x7c\xab\x7e\x02\x05\x47\xec\x06\xa0\x96\x3f" "\x18\x98\x09\xc3\x6b\x6c\x18\xa1\xec\xbe\xd1\x73\x67\xf0\x86\x53\xa5\x0a" "\xb6\x09\x45\x55\x88\x14\x15\x4c\x72\xc4\x33\x76\xd1\x0b\xac\x15\x63\x80" "\x07\x17\xde\x8c\xec\xbe\xd4\x30\x1c\x32\xd0\x1e\x23\x09\xf2\x6d\xa9\xf8" "\x39\x9b\xa8\x67\x46\x91\x28\xae\x44\xfc\x05\x4d\xe8\xc8\x99\x17\x96\x26" "\x1a\x9c\x1b\xf4\xa8\x72\xc2\x8b\x82\x6b\x36\xba\x97\xf5\xa6\x21\x45\x98" "\x04\x4d\x83\x23\xbc\x4f\x44\xf6\xa6\xe0\x6f\xbc\x2d\x96\x24\xbb\x94\xaa" "\x5b\x3e\x30\x60\x37\x2a\x86\x3f\x8c\x1c\x05\x1b\x64\x31\x30\xd3\x52\x81" "\xde\x6d\xa5\xcf\x15\x4c\x2e\x51\x56\x61\x61\x49\xcb\xcc\x9a\x6f\xb2\x89" "\xca\x64\xc8\x4a\x24\x94\x66\x6b\x0e\xcb\xd1\xde\xc1\xb1\x71\xb9\x6f\x26" "\x6e\x2d\x99\xe9\x14\x2c\x70\x05\x80\x2b\x80\x72\xe0\xbe\x9a\x49\xdd\x83" "\xc7\x05\xb0\xa0\x62\xb2\x57\xd5\x37\x3b\xbf\x06\x35\x93\x55\x71\x27\x9a" "\x98\x96\xa7\xdf\x22\x01\x33\x63\x6e\x59\x15\x81\xea\xd5\xf8\xcb\x05\xf3" "\xf8\x7c\x2e\x39\xe4\x22\xc0\x09\x70\x0e\x9f\xfa\xe6\x07\x32\x54\x40\xe7" "\xea\x40\x7c\x29\x16\xd1\xad\x1f\x0a\x8b\x68\xed\x92\x66\x18\xde\xca\xfb" "\xdc\x0c\x1a\x1b\xfe\x1c\xde\xb0\x47\xf3\x1e\x8b\x5b\x84\xdb\xa6\xa7\x45" "\xb7\x6b\xb1\xda\xf7\xa8\xa5\x65\x04\x0d\x57\x16\x8d\xf5\x3c\x0a\x85\x54" "\x56\xf3\x7f\x24\x64\xe3\xf1\xf8\xf9\x6a\x4a\x96\xe1\x7d\x78\x6c\x97\x79" "\x63\x5e\xda\x7b\x5b\x57\x96\xf8\x9a\xdd\xb0\xd1\xd9\xe9\x7a\x70\xa4\x5a" "\x0f\x5d\x63\x55\xe1\x12\xd7\xd9\xcd\x29\xa1\x27\x87\xbd\x09\x8c\x14\xf8" "\x11\xea\x66\x21\x21\x29\xda\x55\x36\xa9\x0f\xf1\x48\x66\x18\xce\xa2\xc6" "\x2a\x16\xaa\x45\x31\x48\xdc\x98\xc0\x52\xce\xac\x6b\xc1\x1c\x4c\xd6\x61" "\xd2\xbf\x42\xbd\xaa\xff\x35\xb5\xb5\x26\x6f\x73\x41\x51\x02\xd0\x4d\xc7" "\xcf\xc1\xc7\xbf\x85\x87\x71\xa1\x59\x26\xef\x8a\x32\x38\x34\xbb\x13\xb3" "\xb0\x43\xc6\x5f\x66\x07\x1e\x98\x92\x4f\x59\x48\x8b\xe0\x15\x4a\xb3\x7e" "\xcf\xd0\x86\x4e\x42\x06\x57\xb6\xd2\x61\x82\x2d\xb9\x34\xb0\x2a\x1b\xe6" "\x05\x71\xa5\x20\x57\x8b\x7a\xfa\x34\x09\x61\x6f\x77\x83\xae\x27\x85\x42" "\xa6\xe8\x95\x8f\xa2\x15\x86\x8a\x83\x65\x5f\x44\x9b\x52\x85\xa0\xc3\x6a" "\xb2\x70\x6b\x15\x1f\xba\x5d\xc9\x7a\x69\x2c\x72\x36\xb9\x49\x58\x8c\x4b" "\x9c\x9a\x2d\x3e\x11\x25\xbf\xc0\x19\x88\x9c\xfc\xbe\x90\xa7\xbe\x8d\x9f" "\x22\x9c\xed\x24\xd7\xf2\xc0\x3d\x97\xea\x77\x41\xec\xea\x6c\x9b\x0e\xe7" "\xa5\x53\x70\xef\x41\x8b\x10\x31\x38\x4e\xab\xcd\x2d\x4a\x81\x1e\x37\xc2" "\xf7\xb5\xdb\x32\x12\xaa\x47\x29\x97\x5b\xbc\x7f\x9c\xcb\xc1\xef\x39\x27" "\x91\x47\x48\xcc\xec\x76\x92\x19\x68\x62\xaa\x8f\x81\x7a\xac\x45\xc9\xc4" "\x38\xf3\xd7\xbb\xdb\x66\x5b\x29\xfe\xdd\x7a\x63\x69\xba\xc0\x90\x80\x75" "\xf8\x2d\x9a\xfd\xa9\x38\x95\x88\x1a\x60\xa9\xdb\xb3\xc5\xfb\x8d\xbb\xa0" "\xe3\xb8\x13\x9d\xda\xdd\xbb\x03\x53\x88\xae\x24\xd2\xd5\xc3\x4a\x4e\x09" "\x0b\xab\x92\xef\xf1\x12\xdb\xcd\x08\x28\x23\x5e\x1f\xa8\x0e\xea\xb8\x49" "\x62\x76\x76\x14\xbd\xcc\x0c\x6e\x50\x0a\xb9\xef\x4d\x0a\x26\x4d\x2d\xdd" "\x2e\xd6\x3e\x32\xaf\xfd\x1a\xfd\xfd\xc5\xba\xd8\xe7\x5d\x96\x0e\x03\xd1" "\x9a\xf7\x75\x76\xb0\xf5\x0b\x6f\x9c\x7c\x72\x67\x0c\xde\x6c\xea\x95\xe7" "\x54\xa2\x26\x91\x8e\xab\x3c\xbc\xbc\xab\xce\x86\x8b\x40\xdc\x1d\x53\xc3" "\x74\xb4\x94\xfd\x49\xf6\xd9\x6e\xe2\x21\xf9\x35\xee\x29\xa9\x64\x9c\xa9" "\x35\x29\xd6\xc1\x3c\x3c\xf3\xe0\x6c\xce\x83\xe9\x90\x9b\x9f\xd0\xa3\x5d" "\x84\xfc\x51\x1d\xc5\xae\xb1\xf2\xe4\x5a\x0a\xf6\x0b\x63\x02\x6f\x30\x0a" "\x71\xe5\x75\x5a\xd8\xad\x2b\x0d\x86\x15\xaf\xbf\x85\x10\xd8\x93\xc9\x8e" "\x9d\x42\x0a\x13\xac\x85\x70\x2b\x61\x08\xfc\x3e\x42\xa4\x49\x5c\x84\x65" "\x41\xf8\xcb\x68\xc4\x7a\x2d\xf8\xb2\x79\x7e\xd8\x42\xa7\xc0\x18\xf4\xd7" "\xc1\xe6\x46\x9b\xd2\xb0\xb9\x7e\xdc\xab\xf7\x33\x5d\x86\x9c\x9c\x95\xaa" "\x61\xa7\x75\x7f\xe6\xf6\x46\x37\xeb\x36\xcf\xa6\x23\x31\xcf\x1a\x95\xb7" "\x38\x26\xda\xfd\x3a\xf1\x13\x36\x2d\xd2\x92\xa0\xb5\xff\xcf\x33\xe9\x5f" "\x70\xad\x99\xdc\x22\x5d\x33\xbb\x5b\x34\x6f\xeb\x02\x11\x82\xac\x51\x1f" "\xa1\xe4\x02\xa5\x88\x42\xc0\xca\xfb\x55\x3e\xad\x82\x33\xbb\x83\xfe\xf0" "\xfd\x8f\x22\x30\x9f\x17\x3b\x44\x89\x16\xfa\x64\x03\xcb\xd9\xb4\x2b\x47" "\x77\x07\x32\x64\x7f\x4d\x24\xf7\x63\x32\xcc\x9f\x8c\xe5\xee\x92\xa2\xc7" "\x56\xe0\x6a\x5a\x4a\x43\x22\x1c\xb7\x27\xbb\x72\xde\x45\x27\x4e\x9b\x16" "\xe9\xcb\x9d\x09\xc9\x95\x05\xd0\xfc\x3e\x8d\x0a\x73\x9d\x48\x52\xff\x62" "\xa4\xc4\x65\xcd\xdb\x83\x87\x7b\x2f\x0d\x29\xf5\xd4\xaa\x79\xb5\x88\x0f" "\x6b\xbb\x42\xc7\x79\x2f\x09\xc8\x1d\x09\x2a\x1f\x4d\x53\xb9\x16\xe9\xe1" "\xd6\xfa\x14\x56\x5e\xd3\x4b\x7f\xe3\x61\x1c\x00\x40\x0f\x67\xb0\x83\x59" "\xfb\xab\x04\xa5\xee\xd6\xc9\x4f\x30\xd9\x35\x0c\x57\x55\xa7\x1a\x9f\x7b" "\xa9\x4f\x18\x20\x00\x00\x00\x00\x00\x00\x00\x04\x73\xaf\xaf\xad\xba\x68" "\x17\xe2\x2f\xbb\x61\xf7\xda\xfb\x34\x77\x50\x3e\xc5\x1a\x72\x6f\xe5\xd2" "\x3d\xb4\x98\xda\x6e\xe2\x98\x91\x41\x61\x3d\x6a\x4a\x1a\xd0\x4a\xab\x73" "\x8f\x56\xe8\xf9\x91\xec\xc1\xd3\xe0\xb2\xd3\xfa\xdd\x75\xf9\x93\x21\x10" "\xa6\xa6\xe8\x71\x74\x86\xca\x68\x3c\x95\x54\x65\x94\x8a\x56\x90\x32\xe1" "\xdd\x31\x88\x08\x08\x56\x5b\xbe\x29\xf5\xab\x94\x5b\x01\x32\x4b\xde\x6e" "\x22\xe3\x39\x09\x47\xac\x34\x09\xbd\x6d\x0f\xc5\x1a\x77\xa0\x59\xee\x97" "\xe9\x59\x19\xfc\x6d\x9d\x93\x08\xd2\xfb\xd5\x09\x8b\xf3\x91\x9d\xc9\x82" "\xec\xc1\xcf\x91\x68\xdc\x40\x33\x12\x1f\x84\x1f\xd3\xaf\x58\x9f\x83\xc8" "\x70\x5e\xcb\xaa\x68\x18\x7f\x1c\x19\xe6\x67\x06\x31\xc7\x1e\x70\x34\x18" "\x61\x76\xe4\xf1\xf3\xc1\x67\xe9\x3d\x13\xba\xb4\x87\xef\x80\xea\xb1\x05" "\x1f\x0b\xd1\xf5\xcf\x1f\xbd\x28\x8e\xad\xc9\x5c\xea\x58\xcc\x12\xdd\x28" "\xb2\xa3\x0d\x68\x81\xfd\x9f\x61\x8c\x9f\xd7\x21\xda\xc5\x17\xc2\xc9\x6a" "\x0c\xf4\x51\x73\x77\x86\xbe\x6a\xb1\xb7\x69\x78\x49\x71\xa2\x66\xa1\xf6" "\x5c\xbf\x16\xb8\x57\xd2\x2c\x7a\x16\xa6\x6c\x84\x9d\xaa\xc0\xec\x52\xf1" "\x11\x78\xe9\x8b\x71\x12\x56\x97\x93\x01\xac\x75\xa0\x02\x4e\x49\x70\xeb" "\xea\xae\x48\x83\xb0\xb2\xa5\xf1\x92\x79\xcb\xd7\xd4\xd5\x3a\x16\x38\x38" "\x1d\x97\xc4\x21\x0e\xa2\xd1\x7a\x46\x9a\x00\x71\x6b\xae\x4f\xc0\x74\xa8" "\xf8\xd6\x81\x15\x6c\x97\xb8\x16\xfc\x99\x66\xa9\x41\x70\x3c\xe7\x88\xa6" "\x19\x92\x3c\x07\xaf\xe5\xaf\xb7\x2b\x13\xc5\xc0\xfa\x95\x5d\x5f\xf2\x1a" "\x0a\x5f\xda\x8f\xab\x06\xe0\x4a\xfd\x1c\xd6\x1d\xcc\x6c\x7b\xa2\x9d\x05" "\xfb\x97\xed\xff\x8e\x30\x3d\xa4\x33\xd0\xa6\x53\x17\x71\x6c\x90\xf7\x87" "\x4f\x34\xcf\xd5\x8f\xe9\xa2\x91\xcf\x63\x22\x67\xb3\x0e\x2f\x66\xf0\xcc" "\x8f\xdc\xb9\x1a\x93\x62\x31\x1d\xdb\x0f\x66\xfc\x7f\xf5\xcc\x6d\x8b\x7b" "\xfd\xb6\x84\xcc\x92\x3a\x95\x6b\x2a\x01\xc9\x6a\x06\x08\xeb\x34\x6c\xa6" "\xb3\xf5\xe3\x5d\xcc\x23\x9e\x75\xf4\x23\x6c\x3c\x04\xb7\x44\xaa\x1f\x20" "\x02\xed\x4a\xa8\x22\xcb\x59\xd3\xea\x96\xdd\xba\xf5\x40\x63\x1d\xbd\x4b" "\x5f\x01\x1f\x16\xd6\xd9\x08\x0d\xe2\x8e\xf3\x2f\x67\x2d\x01\x44\x20\x61" "\x06\xec\x86\xc3\x1c\x0c\xe6\x55\xcb\xe5\xb9\x4d\xce\x52\x43\xe7\x7a\x6c" "\xfc\xa7\xc6\x58\xfe\xa3\xc3\xcb\x70\x74\xcd\x16\x08\x11\x48\x03\x78\x9b" "\x6f\xd9\x6c\x40\x86\x13\x81\x45\xbc\xcf\x4c\x1b\x11\x18\x31\xe2\xca\xc8" "\x79\x7a\xb4\x08\xb7\x73\xa3\xfe\x05\x5e\x07\x7c\x5b\xa2\xd1\xe9\x2b\x99" "\xe9\x83\xb7\x00\xf8\xe1\x21\x4e\xb2\x39\x2b\xc9\xf4\xfc\x1d\x6f\x54\x3e" "\x97\x3e\xf8\x28\xb0\xb7\x22\xc4\xed\x60\x31\x9c\x15\x10\xf9\x59\x91\xe5" "\x51\xe1\xee\xf2\x88\x09\x2c\x22\x95\x5e\x65\xe5\x7c\xdd\xa3\x2a\x51\xbe" "\x57\xcc\x15\x3e\xd3\x2b\xcd\x70\x21\x52\xba\xe3\xee\x14\xd2\x65\x47\xea" "\x85\x35\x96\x3d\xf8\x2b\x6a\xd9\x4b\x0d\xef\xde\x44\x35\xa9\x00\x6b\xfe" "\x7c\xb8\x5a\x30\xe7\xa3\xcf\x6c\x5e\x9b\x24\xf0\x73\xc9\x0d\x9c\x7f\xa4" "\xec\xba\x35\xcc\x72\x0e\x7f\x28\xec\x87\xad\x0e\xf1\x44\x2d\x07\xfd\xd5" "\xc3\xe7\x39\x26\xab\x2f\x61\xee\x3b\xc7\xb6\x08\x70\xec\x4e\x3f\x12\x32" "\xe0\xa0\xb0\x71\x62\xf2\x22\xe7\x9a\x3f\xcf\xe2\xba\x56\x95\x1d\xb3\xb2" "\x48\xb3\x28\xd4\xe9\x20\xb2\xad\xbf\xeb\x71\xb4\x19\xc9\x7b\xc5\xd1\xcc" "\xf9\xfd\x7e\x71\x21\xa4\x35\xaa\x89\x61\xad\x65\x57\x64\x8e\x32\xd8\x69" "\x5d\x9f\x7e\x1f\xd3\xed\xca\x4d\xd3\x04\xc5\x00\xfe\x1a\xc3\xb2\x44\x37" "\xa8\xe1\x55\x3a\xbb\x80\x0d\x86\x93\x43\xb5\x21\x7a\xec\x21\xd9\x06\x18" "\x22\x35\xc4\xfe\x87\x35\x9c\x71\x6b\x4d\x57\x99\xf8\xff\xbf\x1f\x81\xb2" "\xe0\x6a\x29\x05\x1a\x8b\x29\x91\x39\xbb\xc0\xcf\xc8\x13\x71\xac\x15\x49" "\x70\xea\x04\x9b\x3a\x20\x79\x41\x52\xc4\xb5\x54\x2f\x87\x89\x0a\xb4\x74" "\x41\x81\xb8\xae\xe4\x65\xad\x4d\x61\xe2\xb0\x40\x51\x42\x15\xfe\x9b\x6a" "\x6b\xe7\x7c\xe4\xe2\x9b\x67\x29\x0c\x7b\x6c\x05\x4a\x50\x93\xc4\x60\x53" "\xdc\xf6\xaf\xea\x46\xe1\x15\xac\x00\x08\x86\x59\x8a\xd7\x7a\xb3\x36\xe0" "\x07\x18\x64\xcb\xcf\x97\xaf\x64\xda\xb9\x9a\xc0\xb6\xe7\xb4\xc6\x4b\x15" "\x98\x23\x15\x79\x52\xc1\xd9\x28\x13\x0c\x54\xe7\x42\x3e\x82\xb0\xd0\xbc" "\x81\x2f\x5c\x18\xce\xfa\x8d\x6d\xa3\xdc\x87\xdf\xa2\xb7\x6e\xcb\xd3\xd8" "\x0e\xdd\x1f\xc0\x03\x10\x44\x78\x9c\xdc\x90\xd8\xcc\xb2\xa0\x5e\xeb\xdd" "\x70\x4f\xd6\x14\x71\x56\xc4\x7a\x64\x8f\x77\x91\xc6\x1f\x17\x8a\x2c\x25" "\x06\x56\x43\x17\x16\x4b\x3b\x9c\x2e\xe2\x13\xaf\xb8\x00\x90\xd2\xe3\x0f" "\x27\x03\xe9\xd5\x0d\xe5\x6e\xa0\x99\x02\x17\x14\xdc\xaa\x1c\xdb\x30\x20" "\x6d\x6d\xd4\x87\xa1\x47\x8a\xd9\xf6\xb5\x81\x40\xaa\x79\xf5\xe1\x77\x8f" "\xd6\xe2\xad\x9c\x05\xc2\x76\xbf\x38\x52\x31\xb2\x63\xb7\x0f\xc5\x94\x43" "\xa5\x60\xec\x0d\xcb\xa1\xb8\x7d\x76\x00\x8e\x28\x99\xb7\x9b\x17\x16\x95" "\xf8\x89\xc0\xc2\xf8\x1d\x35\x81\xb9\x2a\xd6\x59\x1c\xc6\xbb\x4f\xd7\x8d" "\xb9\xfb\x9e\x3c\xd0\xbd\xe8\x09\x72\xbd\x28\xcd\x30\xb1\x65\xf4\xf3\xba" "\x0d\x89\xde\xdc\xf6\x86\xc4\xed\x77\xf6\x50\xd9\x7e\x1f\x1a\xbd\x83\x9b" "\x11\x1d\xb0\x28\xb7\xc8\x00\xf4\xb3\x99\x0c\xd6\x43\xe5\x7f\xfe\x58\x4b" "\x38\x04\x51\xe2\x54\xb7\x66\xa1\x83\xe7\x95\x2c\xa2\x70\xdd\x41\xd8\x73" "\x94\x58\x2f\xba\x51\x8f\x95\xc3\x93\xcc\xd3\x2f\xf7\x31\xfe\xaf\x10\x64" "\x7d\x6d\xd9\x85\x84\x47\x16\x67\xd1\xd3\x81\xa5\xf1\xa6\xc8\x31\x30\x0b" "\xba\xfc\xdf\x16\x8d\xc1\xfd\x4a\xd7\x30\x97\xf5\x9b\xdf\xac\xb7\xf6\x45" "\xf7\xa1\x48\x30\x30\xd9\xa4\xf2\x25\x16\xdd\xe3\xc6\x15\x0e\x63\xef\x99" "\x89\x55\xb6\xbb\x5d\xc6\xf2\xb5\x8b\x6e\x7a\xcf\x8d\xf4\x4a\x20\x4f\xfe" "\x2d\xfb\x92\x65\xf2\x68\x08\x8a\x14\x49\x38\xad\x87\x00\x6a\xed\xcc\x03" "\xe0\x62\x37\x14\x8a\x96\xe3\xfe\x29\x9b\xa8\x96\xd7\xdb\xfc\x16\xd0\xc8" "\x0b\x91\x0f\xa8\x35\x8b\x8f\x11\x33\xd8\x18\x09\xe7\x62\xe0\x5a\xea\x57" "\xd4\x99\x76\x70\x21\x7d\x7f\xc0\x19\x0c\xdc\xec\x04\x79\x65\x8c\x8b\xf8" "\xe5\x47\xf1\x65\x4b\xdd\xc1\xe5\x6a\x33\x42\x47\xcc\x88\x26\x18\x29\xbc" "\xbb\x4c\x40\x81\xea\x6d\x28\x4f\x82\xc3\xb4\x91\x94\x33\xf9\x9b\xe6\x8e" "\x3d\xa1\xdb\x8d\xff\x64\x3c\xce\xd7\xac\xbc\xb6\xf4\xd1\xaf\x86\xec\xb7" "\x76\xed\x0e\x41\xbb\xf5\xd3\x71\x72\xe6\xc7\x7d\x0e\x73\x0e\x42\x1e\xa1" "\xf3\x1f\x0d\x7d\x6b\x07\xc2\xaf\xc8\xc0\x13\x34\x4c\xec\x41\x6d\xeb\x99" "\x89\x81\xdc\x71\xbf\x12\xb1\x1d\xca\xd7\x4d\x98\x30\x05\x16\xa6\x0c\x18" "\x62\x52\xb5\xe7\x1c\xe4\x0f\x80\x16\x1e\xce\x47\x41\x15\xb0\xb0\xe0\xe2" "\x14\xbd\xb2\xdf\x50\x89\xc6\xd5\x89\x2c\x66\x6d\x3e\xed\x8d\x6e\x8b\xab" "\xcc\x98\x34\xc6\x77\x4c\x1c\xd8\x11\x91\x0f\x38\x83\x74\xeb\x4b\xc9\xf2" "\x99\x0b\xf1\xf8\xaa\xcf\x8a\xbb\xb1\x1e\xa5\x5c\xf6\xe5\xfc\x2a\xe0\xde" "\xfa\x9e\xfd\x63\x0f\x51\x7b\x13\xad\xa7\x7b\xd6\x84\x13\xf3\xa3\x6e\x9d" "\xe2\x29\x27\x41\x08\xe7\x4c\x34\xa6\x8b\x3a\xe5\x06\xba\xdc\xe3\x18\x38" "\xe8\x59\x70\x84\x3f\xbe\xf3\x2d\x4e\x51\xca\xfd\x74\xb7\x74\xf7\x9c\x00" "\x26\x15\x41\xa7\x6e\x9f\x81\x02\x3d\x30\x6f\x1f\xb5\x88\x58\xbe\x76\x52" "\xb0\xaf\xd1\x38\x28\xee\x02\xe8\x9c\x96\x4a\x45\x32\xe3\x42\x47\x91\x7c" "\xd8\xc7\x94\x14\x75\x6a\xd8\x55\x91\xeb\x61\x7a\xfa\x79\x9b\x2d\x84\x6d" "\xc2\xc3\x29\x05\x14\x04\x5e\x52\xb8\x4e\x42\x69\x4b\xb5\x5d\x33\xfd\x97" "\x5d\x55\x4e\x58\x96\xc7\x18\x45\x2b\xb2\xe4\x21\xff\x69\xbb\x9a\xe2\x70" "\x67\x34\x56\x5d\xcd\xaa\xdd\x31\xaf\x4e\x3c\x92\x99\xa2\x6d\xb4\x48\x62" "\x76\xae\x3f\x3f\xf3\x1f\xad\xe2\x36\x07\x2a\x6c\xde\xfa\x81\xda\xe4\xd6" "\x1e\x69\x20\x9b\xa6\x04\xbf\x5d\xc7\xdf\x56\x0c\xbe\x0c\xae\x3a\x8b\x20" "\x1b\x42\xac\xb3\xcb\xdc\xd8\x6d\x6d\xa1\x65\x07\x94\xcf\x42\xe7\x63\xf4" "\x21\xd5\x0f\xde\xb4\x4d\x96\x0b\x76\xf6\xa6\x7c\xbf\x81\xc7\xa7\x36\xa4" "\xcf\x8b\xb3\x03\xb8\xce\xa9\xe0\x93\x0c\xc7\x78\x8a\xee\x16\x44\x36\x8c" "\x9f\x7f\x32\x41\x9d\xbb\x32\x9b\xd6\x6a\xdc\x48\x3d\xd5\x56\x40\x02\x30" "\x94\x1c\xf3\x86\x24\x4c\x3f\x67\xfd\x8a\x91\x3a\xb4\x25\xa0\x4e\xba\x76" "\xa1\x8e\x6b\xd0\x92\x06\x82\x79\xc2\xbd\x0c\xf9\x43\x5d\x99\x77\xea\x84" "\x05\xb3\xfc\xa9\xe6\xfa\x8d\x15\x65\xd7\x97\xf5\xe1\xe5\xd1\x6a\xa4\x16" "\x83\xc0\x89\x07\x79\xdb\x9e\x9f\xe5\x45\x96\xc2\x9e\xbd\xe7\xa5\xd0\x40" "\xf2\x4c\x2b\x1e\x8b\x34\xb5\x8f\x66\x2c\xc9\xf8\x74\x6c\x44\xb6\x85\x69" "\x07\x3c\x1d\x4c\x08\xb6\xe2\x4d\x09\xec\x95\x78\x40\xc4\x49\x34\xaf\x9a" "\x06\xec\x10\xcd\xc1\xb0\x06\x7e\xf1\x2a\x55\x99\xb1\x7a\x7d\xd6\x4c\x41" "\x32\x27\x32\x05\xec\x26\x33\x93\xdd\xe9\x0d\x36\x44\xf3\xca\x34\xf4\x4a" "\xab\x15\x49\x80\x3d\x3e\xbf\xae\x04\xc8\x88\x83\xe7\xb3\x03\xbb\x1f\xec" "\x74\x62\x6f\x53\x9a\x43\xb9\x59\xab\x38\xdb\x1c\x4e\x1b\xd2\x29\x58\x43" "\xbf\x4f\x09\x61\xb1\xec\x24\xcc\x1c\xe8\x19\x82\x2b\x96\x8e\xa9\x7a\xd7" "\x89\x0d\xe4\xd0\xd4\x40\xe6\xc4\x77\xbf\xfb\xab\x42\x40\x94\x93\x34\x7e" "\xb5\x3a\xa1\xdd\x8b\x04\xaf\x64\xd3\x83\xc2\xec\xe3\xb4\xbd\x7a\x77\x9b" "\x18\xa8\x8b\x97\x09\xc2\x77\xc7\x11\xc7\x82\x86\x2c\xd5\xf5\xf5\xf6\xd8" "\xf3\xff\x4c\xb3\xb4\x7e\x2d\xde\x28\x1d\x35\x60\xec\xb9\xba\xfc\xe8\x08" "\x5e\xcc\x08\xe1\xb5\x24\x8c\x3b\xf2\x4b\x7f\x5f\xdc\x47\x21\xd1\x0a\xaf" "\xcf\xd1\x94\x70\xd6\xad\xe6\x43\xb7\x63\x5c\xd7\x7b\xbf\xd8\x94\xe7\x5f" "\x4d\x74\xb0\x6b\x20\x3b\x97\x73\x68\x19\xc1\x31\x70\xcc\xbb\x59\x31\xed" "\x43\xb6\xa8\x93\xf8\x0d\x7b\x65\x26\x67\x91\x7e\x50\x88\xba\x49\x8c\x72" "\x60\x82\x5f\x97\xa8\x21\x04\x87\x5f\x96\x6d\x60\xcb\xc6\x5c\x84\xbd\xbf" "\xca\x32\x11\x83\x12\xa1\x60\xfb\x59\x50\xea\xeb\x15\xbc\xb9\x49\xab\x96" "\x68\x55\x26\x41\xd2\x17\x88\x9e\x93\x1f\xb7\xd9\x84\xc5\x1d\xf1\x39\x71" "\x03\x9b\x92\xfc\x24\xa7\xbd\x61\x1d\xd0\x93\x04\xfe\x4e\xdd\xb2\x92\x4c" "\x37\x31\x7a\x1b\x34\xfe\x09\x96\xfd\x36\x00\xb5\x77\x5a\xbc\x10\xa1\x05" "\xa3\xbc\x83\xbe\xa7\xa1\x37\xdd\x8a\x4b\xd5\x84\x00\x6f\x30\x78\x21\xe6" "\x2d\xb6\x96\x77\x9d\x4c\xca\xfc\xa2\x82\x00\x1a\x7f\x77\xd8\x7a\xee\x25" "\x70\x93\x1c\xb4\xbf\xc8\xf2\xd3\xa9\xa2\x5e\x59\x2f\x63\xdf\x99\x9e\x61" "\x3e\x11\xaf\x64\x88\xdd\x6f\x25\xa7\x1c\x18\x1c\xe5\x38\x9b\x22\xf4\xb0" "\x99\x24\x7e\x4f\xb0\xb5\x04\xe7\xbd\xf8\xa1\xf5\x9e\xa1\xf0\x4c\x70\x9c" "\xfa\xb5\x35\xba\xde\xa2\xbf\x72\x8a\xdc\x18\xb3\x3e\x50\xa3\x98\x6c\x85" "\xd8\xc0\x75\xcb\x6e\x6e\xe9\x49\xf3\xcf\x22\x56\x40\xa0\x34\xec\x25\xd6" "\x1e\xa1\xba\x45\xc7\x3a\xec\x95\x2f\xae\xea\xee\x07\x2c\x63\x2e\xc2\x91" "\x62\x91\x3f\xe0\x81\x78\xe4\xab\x2a\xad\xb8\x9f\xa5\x61\xb1\xa2\x0d\x59" "\x14\x63\x89\x19\x20\x84\xdb\x36\xe3\xd1\xa5\x29\x98\x25\x9b\x44\x0f\xde" "\x95\xcc\xd9\x5e\x0c\xf1\xd1\x5c\x47\xa4\xd5\x1a\x0c\x0f\xee\x37\x97\xee" "\x8a\x40\x39\x8d\xf0\x1e\x7c\x56\xff\xf9\x73\x44\xd4\xf0\x9e\x12\x66\xa0" "\x43\x39\xab\xce\x2d\xbd\x36\xb3\xfc\x59\x09\x38\x35\x3b\x99\x0e\xcd\x97" "\xcc\xd7\x10\xe8\xe0\x29\xbe\xc2\x64\xa5\x06\xee\x10\x86\x50\x2a\x6d\x69" "\xe7\x48\xdb\x9d\x5d\x44\x14\xa9\x6b\x4d\x4c\x82\xa0\x07\xf1\x95\xa7\xc4" "\xc6\x83\x53\xac\xa8\x18\x36\xe8\x65\x80\x11\x39\xe5\xdc\x71\x11\x3d\xf2" "\x29\x27\x65\x1f\xe1\xeb\x10\x4e\xc6\x48\xd2\xef\xc3\x32\x41\xb2\x7d\xc4" "\xa0\x22\xb8\x4d\x7c\x29\xeb\x03\xbb\xbc\x07\x9d\xed\x0a\x6f\x78\xe4\x1c" "\xd8\x5e\x0f\x42\xda\x38\xe7\x70\x90\x72\xe0\xc6\x09\x8c\x7e\x55\x8c\x35" "\x66\xae\x0a\x45\x5d\x59\x6c\xff\xd1\xd6\x11\x15\x3c\x61\x45\xa7\x02\xa1" "\x39\x95\x69\x16\x9d\x4f\x3d\x09\x39\x4d\x1c\x05\xb3\xa2\xc1\x22\x20\x77" "\xd9\x53\x49\x4f\x7f\x70\x77\xb1\xae\x7d\xdd\x27\x4d\xd7\x90\xe1\x7e\xc0" "\xf1\xd4\x3a\xf2\x24\x7d\x31\xab\xef\xaa\x10\xa6\x4a\x03\x97\x93\xc3\x6d" "\xf0\x39\x58\x74\x59\xc1\x67\xae\x4d\xda\xa1\x20\x85\xab\x9e\xf2\x14\x66" "\x20\x3a\x38\x3d\x81\xbf\x7a\x0c\x3e\x95\x32\xcb\xda\x04\xf5\xa0\x07\x50" "\x68\x9c\x1a\x88\x18\x59\xbd\xe9\x38\xf3\x2d\x52\x54\xa5\xeb\xa0\x80\xc4" "\xe4\x7e\x32\x42\xa3\x96\x64\x6b\xdd\x54\xea\xe7\x58\xc0\xb8\x85\x5c\xbf" "\x4e\xfd\x13\xab\x53\x6c\xff\x9e\x89\xf2\x0d\x2e\x47\x4c\xee\xde\xce\x92" "\x1c\x48\xfd\xf3\x3f\xa2\x66\x31\xb1\x79\x0b\xf1\x17\x67\x71\x70\x1e\xf9" "\x4b\x71\xf0\x46\xde\x49\xfe\x29\x0a\x70\x2d\x29\x0d\x16\xb5\xb2\x8b\x03" "\x36\x07\xbf\x20\xd3\x3e\x98\xbe\xd5\xf0\x31\x11\x16\x7a\x8f\x0b\x1d\x43" "\x28\xc5\x91\xbc\x46\x1d\xf9\x65\xb1\x2e\x3f\xff\xb9\xd5\x8b\x56\x2f\x65" "\x59\x3a\x25\xbe\xf2\x4c\x51\x7b\x78\xc8\xb6\x4e\x08\x3f\xce\x68\x25\xa3" "\x77\xed\xb2\xd5\x94\x83\x23\x31\x78\x84\x83\x8c\x4b\x26\xf6\xc3\x13\xf0" "\xf9\xe0\xc9\x5d\xc9\x9d\x77\xf2\xbc\x3f\xcb\xd2\xd9\xe2\xf4\xcd\x9d\xdc" "\x17\x69\x31\x1d\xc6\x16\x84\x27\x72\x8c\x98\xcf\x57\x80\xea\x12\x4a\x82" "\xf5\xa7\xa9\xaf\xd4\x56\x4a\x4c\xde\x1b\x39\xfd\x3c\x19\xbe\xee\xe5\x98" "\xf0\x53\x0f\x0a\xb5\xcd\xce\xe4\x5a\xaa\xca\xc8\x52\x47\x48\xc7\x55\xae" "\x32\xfa\x6a\xf7\x63\x57\xfa\xbe\x76\x9b\xd6\xbb\x66\x7d\x95\xd3\xd8\xab" "\x16\x50\xf1\xc0\x0f\x1d\xa5\xab\x1a\x0b\x8c\x4f\xd0\x64\x0e\xf0\x9a\x5c" "\x6b\x3c\xde\x58\xfa\xf1\xd6\x5d\xca\x4c\x09\x05\x06\x03\xbb\x03\x05\x06" "\x08\x42\x08\x96\x4b\x22\x91\xd1\x66\x0f\x63\xa9\xc8\xff\x1a\xa3\x1c\xd7" "\xc8\x01\x76\xc0\x57\xa1\xbd\xf1\xc5\x7e\x61\xef\x56\x93\x16\xc6\x60\xea" "\x59\xed\x60\xa2\x5f\xb8\x6a\x47\xa3\xa5\xd0\x07\x5a\x36\x01\x33\x64\xa8" "\x2e\x37\xd1\x3b\x90\x74\x4a\xc2\x48\xbd\xc9\x54\xf6\x76\x1f\x7e\xc6\x0c" "\xd7\xca\xbd\x6b\x80\xee\x28\xbd\xdf\x2c\xad\x03\xd2\xa2\xa5\xe5\x31\x9d" "\x96\xe4\xdd\x2c\xac\x3a\x4c\xe3\x3b\xff\x58\x35\x17\xe9\xe6\x3b\x68\x48" "\xb5\xcb\x31\x2b\xa5\x82\x0e\x5c\x43\x24\x2a\xdf\xbc\x3a\x6e\x07\x8f\xa0" "\x1a\x36\x28\x81\x53\x69\x4b\x9c\x22\x5f\xac\xbd\xea\x31\xbb\x15\x70\xcb" "\xda\x9b\x72\xcf\x43\xda\x25\x49\x2b\xda\x14\xf9\x42\x84\xa5\xcf\x52\x20" "\xe2\xb2\x18\x27\xb8\x72\x22\xab\xee\x5e\x14\x35\x24\x8a\x4f\x60\xc6\x5f" "\xf9\xdf\x8e\x5f\x41\x03\x34\x92\x65\xef\x27\x22\x09\x05\x02\x13\xa0\x00" "\x03\x09\xff\xbf\x0c\x6e\x78\x84\xb8\x14\x6f\x3a\x78\xb2\xc7\x31\x05\x3e" "\x18\x8c\x1c\x5e\xcb\x16\x6a\xba\x76\x20\xc7\x3e\x86\x35\x8b\xda\x3e\xc1" "\xd2\x59\x07\xe8\x4b\x1a\x0c\x99\x2f\x77\xe9\xeb\xe2\x17\x61\xd1\x84\x5f" "\x13\x90\xe0\x1c\xa1\x3f\xfb\xca\xf4\xa7\x12\x78\xd0\x52\xdf\x5d\x71\x2a" "\xd5\x4a\x83\x67\x9a\xe3\x83\xe5\x6a\x6b\x4c\x8b\xd9\xb1\x44\x20\x91\xfa" "\x0d\xdd\x08\x11\xad\x5c\x44\x1d\x59\xf3\x1d\x2e\x8a\xf7\x1f\x38\xa4\x20" "\x9e\x2e\x48\x5b\x52\x47\x04\x52\x66\xe6\xe4\x5a\x26\x25\x90\xc7\xc3\x00" "\x16\x6c\x24\x9d\x31\x67\x34\xae\xf7\x93\x1e\x73\xf0\x9b\xf1\x57\x22\xe4" "\x75\x2e\xdb\x55\xb6\xaa\x7a\x0c\x48\x15\x0d\xe7\xa2\xed\x1d\x43\x28\x68" "\x89\x09\xc9\xe9\x7a\x72\x3f\x6d\x5a\x9e\xba\xeb\xda\x7d\x97\xcc\x20\x5d" "\x60\x3f\xb4\x75\xfd\xf4\x71\xbb\xcf\x45\x56\x31\xcb\xd8\x79\x23\x2b\x8f" "\x72\x0b\x3a\xf4\xd8\x91\xef\x4a\xd7\xbb\x9f\xa6\x25\xf8\x40\xfe\x56\x65" "\xc9\xc8\x0b\x81\xd9\x4a\xe2\x86\x2b\xb4\x56\x05\x16\x25\x8b\x45\xb9\x85" "\xeb\x5c\xbd\x0c\x5a\xa6\x8f\x40\x35\x91\x93\x32\x97\x10\x6b\x48\xe3\x91" "\xd1\xba\x0b\xf6\x94\x81\x49\x99\x4b\x33\xcd\x43\xdf\x01\xf4\x0c\x04\xbb" "\x94\x9d\x5f\x0a\x4d\x94\xbe\xb5\x50\x89\xf9\x66\x97\x60\x22\x58\x4e\x22" "\x41\xe9\x2d\xaf\x71\x14\x84\x3f\x72\x0e\x87\xf8\xda\xef\xa7\xd4\x56\x4b" "\x30\xd3\x07\x76\x79\x0f\x53\xa1\x37\x37\xbf\x11\x17\xb5\xa2\x7e\xa8\x06" "\x27\x60\xe3\x20\x36\x95\x54\xbf\xb0\xb3\x3b\x6a\x26\xaf\x60\xbc\xff\xec" "\x4a\x71\xad\xbc\x83\x8f\x2a\x3a\x5d\x5d\xb9\x2d\x6a\x48\x58\xbc\xbf\xaf" "\x45\xf7\xa6\x20\x02\x20\xa3\xd9\x0a", 6075); *(uint32_t*)0x20000200 = 0; *(uint64_t*)0x20000204 = 0; *(uint32_t*)0x2000020c = 0; *(uint64_t*)0x20000210 = 0; *(uint32_t*)0x20000218 = 2; *(uint32_t*)0x2000021c = 0; *(uint64_t*)0x20000220 = 0; *(uint32_t*)0x20000228 = 4; *(uint64_t*)0x2000022c = 0x200001c0; *(uint8_t*)0x200001c0 = 4; *(uint8_t*)0x200001c1 = 3; *(uint16_t*)0x200001c2 = 0x42d; syz_usb_connect(0, 1, 0x20003240, 0x20000200); } int main(void) { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); for (procid = 0; procid < 6; procid++) { if (fork() == 0) { loop(); } } sleep(1000000); return 0; }