Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
MIME-Version: 1.0
From:   Hao Sun <sunhao.th@gmail.com>
Date:   Sun, 11 Apr 2021 11:08:13 +0800
Message-ID: <CACkBjsb4Ad60ZTyaaObBj2DKxSv1avmTSo3WUrnvH+amuDuhrA@mail.gmail.com>
Subject: BUG: unable to handle kernel NULL pointer dereference in io_uring_cancel_task_requests
To:     axboe@kernel.dk, io-uring@vger.kernel.org
Cc:     asml.silence@gmail.com, linux-kernel@vger.kernel.org
Content-Type: multipart/mixed; boundary="0000000000005dcefe05bfa9b5df"
Precedence: bulk

--0000000000005dcefe05bfa9b5df
Content-Type: text/plain; charset="UTF-8"

Hi

When using Healer(https://github.com/SunHao-0/healer/tree/dev) to fuzz
the Linux kernel, I found a null-ptr-deref bug in
io_uring_cancel_task_requests under fault injection condition, but I'm
not sure about this.
Sorry, I do not have a reproducing program for this bug.
I hope that the stack trace information in the crash log can help you
locate the problem.

Here is the details:
commit:   3b9cdafb5358eb9f3790de2f728f765fef100731
version:   linux 5.11
git tree:    upstream
Full log can be found in the attachment.

Fault injection log:
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 9161 Comm: executor Not tainted 5.11.0+ #5
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x137/0x194 lib/dump_stack.c:120
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x23e/0x250 lib/fault-inject.c:146
 should_fail_usercopy+0x16/0x20 lib/fault-inject-usercopy.c:37
 _copy_from_user+0x1c/0xd0 lib/usercopy.c:14
 copy_from_user include/linux/uaccess.h:192 [inline]
 set_user_sigmask+0x4b/0x110 kernel/signal.c:3015
 io_cqring_wait+0x2e3/0x8b0 fs/io_uring.c:7250
 __do_sys_io_uring_enter fs/io_uring.c:9480 [inline]
 __se_sys_io_uring_enter+0x8fc/0xb70 fs/io_uring.c:9397
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:9397
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x46a379
Code: f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 48 89 f8 48
89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d
01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f046fa19c58 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
RAX: ffffffffffffffda RBX: 000000000078c080 RCX: 000000000046a379
RDX: 00000000000066ab RSI: 0000000000000001 RDI: 0000000000000003
RBP: 00007f046fa19c90 R08: 0000000020000040 R09: 0000000000000008
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 000000000078c080 R15: 00007fff769deef0

Crash log:
BUG: kernel NULL pointer dereference, address: 0000000000000040
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 49954067 P4D 49954067 PUD 45f92067 PMD 0
Oops: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 9161 Comm: executor Not tainted 5.11.0+ #5
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
RIP: 0010:io_uring_cancel_task_requests+0x3f/0x990 fs/io_uring.c:9045
Code: 48 8b 04 25 28 00 00 00 48 89 44 24 68 e8 89 e6 c5 ff 65 4c 8b
34 25 00 6d 01 00 49 8d 7c 24 40 48 89 7c 24 30 e8 81 97 d6 ff <41> 8b
5c 24 40 89 de 83 e6 02 31 ff e8 70 ea c5 ff 83 e3 02 48 89
RSP: 0018:ffffc90002a97b48 EFLAGS: 00010246
RAX: ffff88804b8e0d38 RBX: ffff88804b8ad700 RCX: 0000000000000764
RDX: 0000000000000040 RSI: ffff8880409d5140 RDI: 0000000000000040
RBP: ffff8880409d5140 R08: 0000000000000000 R09: 0000000000000043
R10: 0001ffffffffffff R11: ffff88804b8e0280 R12: 0000000000000000
R13: ffff8880409d5140 R14: ffff88804b8e0280 R15: ffff8880481c1800
FS:  00007f046fa1a700(0000) GS:ffff88807ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000040 CR3: 00000000479a5000 CR4: 0000000000750ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
PKRU: 55555554
Call Trace:
 __io_uring_files_cancel+0x9b/0x200 fs/io_uring.c:9140
 io_uring_files_cancel include/linux/io_uring.h:65 [inline]
 do_exit+0x1a8/0x16d0 kernel/exit.c:780
 do_group_exit+0xc5/0x180 kernel/exit.c:922
 get_signal+0xd90/0x1470 kernel/signal.c:2773
 arch_do_signal_or_restart+0x2a/0x260 arch/x86/kernel/signal.c:811
 handle_signal_work kernel/entry/common.c:147 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x109/0x1a0 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:301
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x46a379
Code: f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 48 89 f8 48
89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d
01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f046fa19cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000078c080 RCX: 000000000046a379
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c088
RBP: 000000000078c088 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c08c
R13: 0000000000000000 R14: 000000000078c080 R15: 00007fff769deef0
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
CR2: 0000000000000040
---[ end trace 613db1a25ecf6443 ]---
RIP: 0010:io_uring_cancel_task_requests+0x3f/0x990 fs/io_uring.c:9045
Code: 48 8b 04 25 28 00 00 00 48 89 44 24 68 e8 89 e6 c5 ff 65 4c 8b
34 25 00 6d 01 00 49 8d 7c 24 40 48 89 7c 24 30 e8 81 97 d6 ff <41> 8b
5c 24 40 89 de 83 e6 02 31 ff e8 70 ea c5 ff 83 e3 02 48 89
RSP: 0018:ffffc90002a97b48 EFLAGS: 00010246
RAX: ffff88804b8e0d38 RBX: ffff88804b8ad700 RCX: 0000000000000764
RDX: 0000000000000040 RSI: ffff8880409d5140 RDI: 0000000000000040
RBP: ffff8880409d5140 R08: 0000000000000000 R09: 0000000000000043
R10: 0001ffffffffffff R11: ffff88804b8e0280 R12: 0000000000000000
R13: ffff8880409d5140 R14: ffff88804b8e0280 R15: ffff8880481c1800
FS:  00007f046fa1a700(0000) GS:ffff88807ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000040 CR3: 00000000479a5000 CR4: 0000000000750ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
PKRU: 55555554

--0000000000005dcefe05bfa9b5df
Content-Type: application/octet-stream; name=log
Content-Disposition: attachment; filename=log
Content-Transfer-Encoding: base64
Content-ID: <f_kncl4j7e0>
X-Attachment-Id: f_kncl4j7e0

WyAgIDgwLjE5NDMxMF1bIFQ5MTYxXSBGQVVMVF9JTkpFQ1RJT046IGZvcmNpbmcgYSBmYWlsdXJl
Lg0KWyAgIDgwLjE5NDMxMF1bIFQ5MTYxXSBuYW1lIGZhaWxfdXNlcmNvcHksIGludGVydmFsIDEs
IHByb2JhYmlsaXR5IDAsIHNwYWNlIDAsIHRpbWVzIDANClsgICA4MC4yMDA3ODldWyBUOTE2MV0g
Q1BVOiAxIFBJRDogOTE2MSBDb21tOiBleGVjdXRvciBOb3QgdGFpbnRlZCA1LjExLjArICM1DQpb
ICAgODAuMjAyNTk5XVsgVDkxNjFdIEhhcmR3YXJlIG5hbWU6IFFFTVUgU3RhbmRhcmQgUEMgKGk0
NDBGWCArIFBJSVgsIDE5OTYpLCBCSU9TIHJlbC0xLjEyLjAtNTktZ2M5YmE1Mjc2ZTMyMS1wcmVi
dWlsdC5xZW11Lm9yZyAwNC8wMS8yMDE0DQpbICAgODAuMjA1NDUxXVsgVDkxNjFdIENhbGwgVHJh
Y2U6DQpbICAgODAuMjA2MTcyXVsgVDkxNjFdICBkdW1wX3N0YWNrKzB4MTM3LzB4MTk0DQpbICAg
ODAuMjA3MTkwXVsgVDkxNjFdICBzaG91bGRfZmFpbCsweDIzZS8weDI1MA0KWyAgIDgwLjIwODI2
OF1bIFQ5MTYxXSAgc2hvdWxkX2ZhaWxfdXNlcmNvcHkrMHgxNi8weDIwDQpbICAgODAuMjA5NDc3
XVsgVDkxNjFdICBfY29weV9mcm9tX3VzZXIrMHgxYy8weGQwDQpbICAgODAuMjEwNDY3XVsgVDkx
NjFdICBzZXRfdXNlcl9zaWdtYXNrKzB4NGIvMHgxMTANClsgICA4MC4yMTE1ODZdWyBUOTE2MV0g
IGlvX2NxcmluZ193YWl0KzB4MmUzLzB4OGIwDQpbICAgODAuMjEyNzA1XVsgVDkxNjFdICA/IF9y
YXdfc3Bpbl91bmxvY2tfaXJxcmVzdG9yZSsweDI3LzB4NTANClsgICA4MC4yMTQwNTRdWyBUOTE2
MV0gID8gaW9fcmVxX2RlZmVyKzB4NmQwLzB4NmQwDQpbICAgODAuMjE1MTgyXVsgVDkxNjFdICBf
X3NlX3N5c19pb191cmluZ19lbnRlcisweDhmYy8weGI3MA0KWyAgIDgwLjIxNjQ5NV1bIFQ5MTYx
XSAgPyBfX2ZnZXRfbGlnaHQrMHgyMTkvMHgyNjANClsgICA4MC4yMTc1ODBdWyBUOTE2MV0gID8g
ZnB1dCsweDJkLzB4MTMwDQpbICAgODAuMjE4NDk4XVsgVDkxNjFdICBfX3g2NF9zeXNfaW9fdXJp
bmdfZW50ZXIrMHg3NC8weDgwDQpbICAgODAuMjE5ODE1XVsgVDkxNjFdICBkb19zeXNjYWxsXzY0
KzB4MzkvMHg4MA0KWyAgIDgwLjIyMTEwMl1bIFQ5MTYxXSAgZW50cnlfU1lTQ0FMTF82NF9hZnRl
cl9od2ZyYW1lKzB4NDQvMHhhZQ0KWyAgIDgwLjIyMjU2MF1bIFQ5MTYxXSBSSVA6IDAwMzM6MHg0
NmEzNzkNClsgICA4MC4yMjY5MjRdWyBUOTE2MV0gQ29kZTogZjcgZDggNjQgODkgMDIgYjggZmYg
ZmYgZmYgZmYgYzMgNjYgMGYgMWYgNDQgMDAgMDAgNDggODkgZjggNDggODkgZjcgNDggODkgZDYg
NDggODkgY2EgNGQgODkgYzIgNGQgODkgYzggNGMgOGIgNGMgMjQgMDggMGYgMDUgPDQ4PiAzZCAw
MSBmMCBmZiBmZiA3MyAwMSBjMyA0OCBjNyBjMSBiYyBmZiBmZiBmZiBmNyBkOCA2NCA4OSAwMSA0
OA0KWyAgIDgwLjIzMTYxNF1bIFQ5MTYxXSBSU1A6IDAwMmI6MDAwMDdmMDQ2ZmExOWM1OCBFRkxB
R1M6IDAwMDAwMjQ2IE9SSUdfUkFYOiAwMDAwMDAwMDAwMDAwMWFhDQpbICAgODAuMjMzOTU5XVsg
VDkxNjFdIFJBWDogZmZmZmZmZmZmZmZmZmZkYSBSQlg6IDAwMDAwMDAwMDA3OGMwODAgUkNYOiAw
MDAwMDAwMDAwNDZhMzc5DQpbICAgODAuMjM5MzQxXVsgVDkxNjFdIFJEWDogMDAwMDAwMDAwMDAw
NjZhYiBSU0k6IDAwMDAwMDAwMDAwMDAwMDEgUkRJOiAwMDAwMDAwMDAwMDAwMDAzDQpbICAgODAu
MjQwODAxXVsgVDkxNjFdIFJCUDogMDAwMDdmMDQ2ZmExOWM5MCBSMDg6IDAwMDAwMDAwMjAwMDAw
NDAgUjA5OiAwMDAwMDAwMDAwMDAwMDA4DQpbICAgODAuMjQyMjk2XVsgVDkxNjFdIFIxMDogMDAw
MDAwMDAwMDAwMDAwMyBSMTE6IDAwMDAwMDAwMDAwMDAyNDYgUjEyOiAwMDAwMDAwMDAwMDAwMDAw
DQpbICAgODAuMjQzOTg4XVsgVDkxNjFdIFIxMzogMDAwMDAwMDAwMDAwMDAwMCBSMTQ6IDAwMDAw
MDAwMDA3OGMwODAgUjE1OiAwMDAwN2ZmZjc2OWRlZWYwDQpbICAgODAuNDYyOTI1XVsgVDkxNjBd
IFZGUzogQ2xvc2U6IGZpbGUgY291bnQgaXMgMA0KWyAgIDgwLjQ2ODI5N11bIFQ5MTYxXSBCVUc6
IGtlcm5lbCBOVUxMIHBvaW50ZXIgZGVyZWZlcmVuY2UsIGFkZHJlc3M6IDAwMDAwMDAwMDAwMDAw
NDANClsgICA4MC40Njk5OTFdWyBUOTE2MV0gI1BGOiBzdXBlcnZpc29yIHJlYWQgYWNjZXNzIGlu
IGtlcm5lbCBtb2RlDQpbICAgODAuNDcxMjY3XVsgVDkxNjFdICNQRjogZXJyb3JfY29kZSgweDAw
MDApIC0gbm90LXByZXNlbnQgcGFnZQ0KWyAgIDgwLjQ3MjQ1OV1bIFQ5MTYxXSBQR0QgNDk5NTQw
NjcgUDREIDQ5OTU0MDY3IFBVRCA0NWY5MjA2NyBQTUQgMA0KWyAgIDgwLjQ4MDU5N11bIFQ5MTYx
XSBPb3BzOiAwMDAwIFsjMV0gUFJFRU1QVCBTTVANClsgICA4MC40ODE1ODFdWyBUOTE2MV0gQ1BV
OiAxIFBJRDogOTE2MSBDb21tOiBleGVjdXRvciBOb3QgdGFpbnRlZCA1LjExLjArICM1DQpbICAg
ODAuNDg3OTc3XVsgVDkxNjFdIEhhcmR3YXJlIG5hbWU6IFFFTVUgU3RhbmRhcmQgUEMgKGk0NDBG
WCArIFBJSVgsIDE5OTYpLCBCSU9TIHJlbC0xLjEyLjAtNTktZ2M5YmE1Mjc2ZTMyMS1wcmVidWls
dC5xZW11Lm9yZyAwNC8wMS8yMDE0DQpbICAgODAuNDkwNzc1XVsgVDkxNjFdIFJJUDogMDAxMDpp
b191cmluZ19jYW5jZWxfdGFza19yZXF1ZXN0cysweDNmLzB4OTkwDQpbICAgODAuNDkyMTQ1XVsg
VDkxNjFdIENvZGU6IDQ4IDhiIDA0IDI1IDI4IDAwIDAwIDAwIDQ4IDg5IDQ0IDI0IDY4IGU4IDg5
IGU2IGM1IGZmIDY1IDRjIDhiIDM0IDI1IDAwIDZkIDAxIDAwIDQ5IDhkIDdjIDI0IDQwIDQ4IDg5
IDdjIDI0IDMwIGU4IDgxIDk3IGQ2IGZmIDw0MT4gOGIgNWMgMjQgNDAgODkgZGUgODMgZTYgMDIg
MzEgZmYgZTggNzAgZWEgYzUgZmYgODMgZTMgMDIgNDggODkNClsgICA4MC40OTU4MTddWyBUOTE2
MV0gUlNQOiAwMDE4OmZmZmZjOTAwMDJhOTdiNDggRUZMQUdTOiAwMDAxMDI0Ng0KWyAgIDgwLjQ5
Njg1Ml1bIFQ5MTYxXSBSQVg6IGZmZmY4ODgwNGI4ZTBkMzggUkJYOiBmZmZmODg4MDRiOGFkNzAw
IFJDWDogMDAwMDAwMDAwMDAwMDc2NA0KWyAgIDgwLjQ5ODE1MF1bIFQ5MTYxXSBSRFg6IDAwMDAw
MDAwMDAwMDAwNDAgUlNJOiBmZmZmODg4MDQwOWQ1MTQwIFJESTogMDAwMDAwMDAwMDAwMDA0MA0K
WyAgIDgwLjQ5OTMwM11bIFQ5MTYxXSBSQlA6IGZmZmY4ODgwNDA5ZDUxNDAgUjA4OiAwMDAwMDAw
MDAwMDAwMDAwIFIwOTogMDAwMDAwMDAwMDAwMDA0Mw0KWyAgIDgwLjUwMDQ2N11bIFQ5MTYxXSBS
MTA6IDAwMDFmZmZmZmZmZmZmZmYgUjExOiBmZmZmODg4MDRiOGUwMjgwIFIxMjogMDAwMDAwMDAw
MDAwMDAwMA0KWyAgIDgwLjUwMTc3M11bIFQ5MTYxXSBSMTM6IGZmZmY4ODgwNDA5ZDUxNDAgUjE0
OiBmZmZmODg4MDRiOGUwMjgwIFIxNTogZmZmZjg4ODA0ODFjMTgwMA0KWyAgIDgwLjUwMzA4M11b
IFQ5MTYxXSBGUzogIDAwMDA3ZjA0NmZhMWE3MDAoMDAwMCkgR1M6ZmZmZjg4ODA3ZWMwMDAwMCgw
MDAwKSBrbmxHUzowMDAwMDAwMDAwMDAwMDAwDQpbICAgODAuNTA0NjcwXVsgVDkxNjFdIENTOiAg
MDAxMCBEUzogMDAwMCBFUzogMDAwMCBDUjA6IDAwMDAwMDAwODAwNTAwMzMNClsgICA4MC41MDU4
OTZdWyBUOTE2MV0gQ1IyOiAwMDAwMDAwMDAwMDAwMDQwIENSMzogMDAwMDAwMDA0NzlhNTAwMCBD
UjQ6IDAwMDAwMDAwMDA3NTBlZTANClsgICA4MC41MDczNzNdWyBUOTE2MV0gRFIwOiAwMDAwMDAw
MDAwMDAwMDAwIERSMTogMDAwMDAwMDAwMDAwMDAwMCBEUjI6IDAwMDAwMDAwMDAwMDAwMDANClsg
ICA4MC41MDg4OTVdWyBUOTE2MV0gRFIzOiAwMDAwMDAwMDAwMDAwMDAwIERSNjogMDAwMDAwMDBm
ZmZlMGZmMCBEUjc6IDAwMDAwMDAwMDAwMDA0MDANClsgICA4MC41MTAyNjRdWyBUOTE2MV0gUEtS
VTogNTU1NTU1NTQNClsgICA4MC41MTA3ODRdWyBUOTE2MV0gQ2FsbCBUcmFjZToNClsgICA4MC41
MTEyNThdWyBUOTE2MV0gID8geGFfZmluZCsweDEwYy8weDE0MA0KWyAgIDgwLjUxMjAyMF1bIFQ5
MTYxXSAgX19pb191cmluZ19maWxlc19jYW5jZWwrMHg5Yi8weDIwMA0KWyAgIDgwLjUxMjg1OV1b
IFQ5MTYxXSAgPyBfcmF3X3NwaW5fdW5sb2NrX2lycXJlc3RvcmUrMHgyNy8weDUwDQpbICAgODAu
NTEzNjgyXVsgVDkxNjFdICBkb19leGl0KzB4MWE4LzB4MTZkMA0KWyAgIDgwLjUxNDMzOV1bIFQ5
MTYxXSAgPyBkb19mdXRleCsweGZjOC8weDFjNzANClsgICA4MC41MTQ5OTldWyBUOTE2MV0gIGRv
X2dyb3VwX2V4aXQrMHhjNS8weDE4MA0KWyAgIDgwLjUxNTkyN11bIFQ5MTYxXSAgZ2V0X3NpZ25h
bCsweGQ5MC8weDE0NzANClsgICA4MC41MTY4NjhdWyBUOTE2MV0gIGFyY2hfZG9fc2lnbmFsX29y
X3Jlc3RhcnQrMHgyYS8weDI2MA0KWyAgIDgwLjUxODAxMF1bIFQ5MTYxXSAgPyBfX3NlX3N5c19m
dXRleCsweDJhMy8weDM5MA0KWyAgIDgwLjUxODk0M11bIFQ5MTYxXSAgZXhpdF90b191c2VyX21v
ZGVfcHJlcGFyZSsweDEwOS8weDFhMA0KWyAgIDgwLjUyMDA3Ml1bIFQ5MTYxXSAgc3lzY2FsbF9l
eGl0X3RvX3VzZXJfbW9kZSsweDIwLzB4NDANClsgICA4MC41MjEwODZdWyBUOTE2MV0gIGRvX3N5
c2NhbGxfNjQrMHg0NS8weDgwDQpbICAgODAuNTIxNzEzXVsgVDkxNjFdICBlbnRyeV9TWVNDQUxM
XzY0X2FmdGVyX2h3ZnJhbWUrMHg0NC8weGFlDQpbICAgODAuNTIyNTk3XVsgVDkxNjFdIFJJUDog
MDAzMzoweDQ2YTM3OQ0KWyAgIDgwLjUyMzI3NF1bIFQ5MTYxXSBDb2RlOiBmNyBkOCA2NCA4OSAw
MiBiOCBmZiBmZiBmZiBmZiBjMyA2NiAwZiAxZiA0NCAwMCAwMCA0OCA4OSBmOCA0OCA4OSBmNyA0
OCA4OSBkNiA0OCA4OSBjYSA0ZCA4OSBjMiA0ZCA4OSBjOCA0YyA4YiA0YyAyNCAwOCAwZiAwNSA8
NDg+IDNkIDAxIGYwIGZmIGZmIDczIDAxIGMzIDQ4IGM3IGMxIGJjIGZmIGZmIGZmIGY3IGQ4IDY0
IDg5IDAxIDQ4DQpbICAgODAuNTI2NDk0XVsgVDkxNjFdIFJTUDogMDAyYjowMDAwN2YwNDZmYTE5
Y2Q4IEVGTEFHUzogMDAwMDAyNDYgT1JJR19SQVg6IDAwMDAwMDAwMDAwMDAwY2ENClsgICA4MC41
MjgwNzldWyBUOTE2MV0gUkFYOiBmZmZmZmZmZmZmZmZmZTAwIFJCWDogMDAwMDAwMDAwMDc4YzA4
MCBSQ1g6IDAwMDAwMDAwMDA0NmEzNzkNClsgICA4MC41Mjk1NzRdWyBUOTE2MV0gUkRYOiAwMDAw
MDAwMDAwMDAwMDAwIFJTSTogMDAwMDAwMDAwMDAwMDA4MCBSREk6IDAwMDAwMDAwMDA3OGMwODgN
ClsgICA4MC41MzEwMzNdWyBUOTE2MV0gUkJQOiAwMDAwMDAwMDAwNzhjMDg4IFIwODogMDAwMDAw
MDAwMDAwMDAwMCBSMDk6IDAwMDAwMDAwMDAwMDAwMDANClsgICA4MC41MzIxOThdWyBUOTE2MV0g
UjEwOiAwMDAwMDAwMDAwMDAwMDAwIFIxMTogMDAwMDAwMDAwMDAwMDI0NiBSMTI6IDAwMDAwMDAw
MDA3OGMwOGMNClsgICA4MC41MzM1MzFdWyBUOTE2MV0gUjEzOiAwMDAwMDAwMDAwMDAwMDAwIFIx
NDogMDAwMDAwMDAwMDc4YzA4MCBSMTU6IDAwMDA3ZmZmNzY5ZGVlZjANClsgICA4MC41MzUzMzZd
WyBUOTE2MV0gTW9kdWxlcyBsaW5rZWQgaW46DQpbICAgODAuNTM2MDkzXVsgVDkxNjFdIER1bXBp
bmcgZnRyYWNlIGJ1ZmZlcjoNClsgICA4MC41MzcwMzJdWyBUOTE2MV0gICAgKGZ0cmFjZSBidWZm
ZXIgZW1wdHkpDQpbICAgODAuNTM3ODg2XVsgVDkxNjFdIENSMjogMDAwMDAwMDAwMDAwMDA0MA0K
WyAgIDgwLjUzODUxMF1bIFQ5MTYxXSAtLS1bIGVuZCB0cmFjZSA2MTNkYjFhMjVlY2Y2NDQzIF0t
LS0NClsgICA4MC41Mzk1NjddWyBUOTE2MV0gUklQOiAwMDEwOmlvX3VyaW5nX2NhbmNlbF90YXNr
X3JlcXVlc3RzKzB4M2YvMHg5OTANClsgICA4MC41NDA4NTddWyBUOTE2MV0gQ29kZTogNDggOGIg
MDQgMjUgMjggMDAgMDAgMDAgNDggODkgNDQgMjQgNjggZTggODkgZTYgYzUgZmYgNjUgNGMgOGIg
MzQgMjUgMDAgNmQgMDEgMDAgNDkgOGQgN2MgMjQgNDAgNDggODkgN2MgMjQgMzAgZTggODEgOTcg
ZDYgZmYgPDQxPiA4YiA1YyAyNCA0MCA4OSBkZSA4MyBlNiAwMiAzMSBmZiBlOCA3MCBlYSBjNSBm
ZiA4MyBlMyAwMiA0OCA4OQ0KWyAgIDgwLjU0NDU2MV1bIFQ5MTYxXSBSU1A6IDAwMTg6ZmZmZmM5
MDAwMmE5N2I0OCBFRkxBR1M6IDAwMDEwMjQ2DQpbICAgODAuNTQ1Nzg0XVsgVDkxNjFdIFJBWDog
ZmZmZjg4ODA0YjhlMGQzOCBSQlg6IGZmZmY4ODgwNGI4YWQ3MDAgUkNYOiAwMDAwMDAwMDAwMDAw
NzY0DQpbICAgODAuNTQ3MjkyXVsgVDkxNjFdIFJEWDogMDAwMDAwMDAwMDAwMDA0MCBSU0k6IGZm
ZmY4ODgwNDA5ZDUxNDAgUkRJOiAwMDAwMDAwMDAwMDAwMDQwDQpbICAgODAuNTQ4NzY5XVsgVDkx
NjFdIFJCUDogZmZmZjg4ODA0MDlkNTE0MCBSMDg6IDAwMDAwMDAwMDAwMDAwMDAgUjA5OiAwMDAw
MDAwMDAwMDAwMDQzDQpbICAgODAuNTUwMzI0XVsgVDkxNjFdIFIxMDogMDAwMWZmZmZmZmZmZmZm
ZiBSMTE6IGZmZmY4ODgwNGI4ZTAyODAgUjEyOiAwMDAwMDAwMDAwMDAwMDAwDQpbICAgODAuNTUx
ODg5XVsgVDkxNjFdIFIxMzogZmZmZjg4ODA0MDlkNTE0MCBSMTQ6IGZmZmY4ODgwNGI4ZTAyODAg
UjE1OiBmZmZmODg4MDQ4MWMxODAwDQpbICAgODAuNTUzNDE3XVsgVDkxNjFdIEZTOiAgMDAwMDdm
MDQ2ZmExYTcwMCgwMDAwKSBHUzpmZmZmODg4MDdlYzAwMDAwKDAwMDApIGtubEdTOjAwMDAwMDAw
MDAwMDAwMDANClsgICA4MC41NTUwODNdWyBUOTE2MV0gQ1M6ICAwMDEwIERTOiAwMDAwIEVTOiAw
MDAwIENSMDogMDAwMDAwMDA4MDA1MDAzMw0KWyAgIDgwLjU1NjQzMF1bIFQ5MTYxXSBDUjI6IDAw
MDAwMDAwMDAwMDAwNDAgQ1IzOiAwMDAwMDAwMDQ3OWE1MDAwIENSNDogMDAwMDAwMDAwMDc1MGVl
MA0KWyAgIDgwLjU1NzkxNV1bIFQ5MTYxXSBEUjA6IDAwMDAwMDAwMDAwMDAwMDAgRFIxOiAwMDAw
MDAwMDAwMDAwMDAwIERSMjogMDAwMDAwMDAwMDAwMDAwMA0KWyAgIDgwLjU2MTc5NV1bIFQ5MTYx
XSBEUjM6IDAwMDAwMDAwMDAwMDAwMDAgRFI2OiAwMDAwMDAwMGZmZmUwZmYwIERSNzogMDAwMDAw
MDAwMDAwMDQwMA0KWyAgIDgwLjU2MzAwMF1bIFQ5MTYxXSBQS1JVOiA1NTU1NTU1NA0KWyAgIDgw
LjU2MzU4OV1bIFQ5MTYxXSBLZXJuZWwgcGFuaWMgLSBub3Qgc3luY2luZzogRmF0YWwgZXhjZXB0
aW9uDQpbICAgODAuNTY0ODYzXVsgVDkxNjFdIER1bXBpbmcgZnRyYWNlIGJ1ZmZlcjoNClsgICA4
MC41NjU1MTVdWyBUOTE2MV0gICAgKGZ0cmFjZSBidWZmZXIgZW1wdHkpDQpbICAgODAuNTY2MTgy
XVsgVDkxNjFdIEtlcm5lbCBPZmZzZXQ6IGRpc2FibGVkDQpbICAgODAuNTY2ODI2XVsgVDkxNjFd
IFJlYm9vdGluZyBpbiAxIHNlY29uZHMuLg==
--0000000000005dcefe05bfa9b5df--