From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id DDB3FC2A07B for ; Mon, 5 Jan 2026 09:56:29 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 3CA086B0116; Mon, 5 Jan 2026 04:56:29 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 3617B6B0118; Mon, 5 Jan 2026 04:56:29 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 26FED6B0119; Mon, 5 Jan 2026 04:56:29 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0012.hostedemail.com [216.40.44.12]) by kanga.kvack.org (Postfix) with ESMTP id 174256B0116 for ; Mon, 5 Jan 2026 04:56:29 -0500 (EST) Received: from smtpin06.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay04.hostedemail.com (Postfix) with ESMTP id D429C1A0EA5 for ; Mon, 5 Jan 2026 09:56:28 +0000 (UTC) X-FDA: 84297455256.06.1A30228 Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by imf27.hostedemail.com (Postfix) with ESMTP id E84B540007 for ; Mon, 5 Jan 2026 09:56:26 +0000 (UTC) Authentication-Results: imf27.hostedemail.com; dkim=pass header.d=google.com header.s=20230601 header.b=esllsXPE; spf=pass (imf27.hostedemail.com: domain of davidgow@google.com designates 209.85.221.44 as permitted sender) smtp.mailfrom=davidgow@google.com; dmarc=pass (policy=reject) header.from=google.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1767606987; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=qMdAsZToeWrYgsW4hJGTZ5l2lcEpUsm0zR7Rl/0s9GI=; b=xUodM+cNVAwDcvULYTogxGfthqvrkj9CkDy9aQhB8UZepYdOx0fColRokFKHzoZrFqvcQ/ rDdmQymgh009CPeDrRnQ/SInnNyQywtgT0l7ZU5qfLDrJ8MyadNDD2+w7Z9U/y1aiUOSxE g6eBLfvvNjjzOgurfO4FbEixblM3OcI= ARC-Authentication-Results: i=1; imf27.hostedemail.com; dkim=pass header.d=google.com header.s=20230601 header.b=esllsXPE; spf=pass (imf27.hostedemail.com: domain of davidgow@google.com designates 209.85.221.44 as permitted sender) smtp.mailfrom=davidgow@google.com; dmarc=pass (policy=reject) header.from=google.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1767606987; a=rsa-sha256; cv=none; b=brK7fG4kmqpgjJDQhzbHJdohdZVuYbKXCrMm1Uce1DCANCHL/JEJcYBObesLDNaSu+zfYG XLevd9tcsBJgJq2XBbO4ve5+mYtHxuzF0VGPzBBYlm/Ks+madJOm8TVsvWpqL8qt3g3Lad XD59U5z6wHQzLQYOPYTyr3lYHV8l6/g= Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-42e2ba54a6fso5943825f8f.3 for ; Mon, 05 Jan 2026 01:56:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1767606985; x=1768211785; darn=kvack.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=qMdAsZToeWrYgsW4hJGTZ5l2lcEpUsm0zR7Rl/0s9GI=; b=esllsXPEE2NTGWMwo8flEU9/xcnckqPbIw3b/HLn8mTZO5q8ETfUglJ33lzZ6GTvSj tX6wDwWWOmzokfGUiRRI+A7jVWBbPOrZugYjZe6JzmR0q24miuXt4kpeJC2heynFVmRf zXwoLKnuZ+m0GyUO7qGwDlGVP4LiOD95IbO/FsGDNF2zkR4gSpu+Vl7rUbgAiDAGc/Vq TASns2s/n1VW7XxYITt7ZXgXKUSuiPsC2tBDKcP9G6VTBtsKh03+2j1nSfQF8IpQzVGY fltD86VT3LPMqNSQqo53sGgq/YVzmY6IqXFKXodZ5PEWwGFvk02ywQJHx6tVO9G0VJYw Dv4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1767606985; x=1768211785; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=qMdAsZToeWrYgsW4hJGTZ5l2lcEpUsm0zR7Rl/0s9GI=; b=wgIq0KfLKMDHCSyRxlfJr2APaL0oqi9oSsKCzTZVIRGYbinEcCOXdtM938NYqJisZ4 SbFIfZF0BYc35624KqosYlBYly55ApsDNnG+OCNicOF3PCpXVMfRBddrBbr/eS1Dc9Vi gr6EtbqfWQo4zv0tFUxPrjyKL+hTs7qDS7uXmhpraYvvGQQpZSZTZ1mHTcamAdlT+SMe uMgfW7TmbV8XFbeuYYLKtMxhz7oFKXXyte8L5YeQKFEA4WjnehxHgaGHw7LvPKjsyiZ3 JAfE9oC4ipzJ1qtioicw4YQw3uChfuxqveyRlYukLxI/Sq+FqcUW93xCjWdx1vDUWXYK QEyQ== X-Forwarded-Encrypted: i=1; AJvYcCXJTY1E1/OHRyytpU9SYdJtxZtzGufxNnTzdEipXS3ImggoRvpgAYXQuXCZ/o9Okd4jq/BLFLZApQ==@kvack.org X-Gm-Message-State: AOJu0Ywotj1hsnOb72wWDWYg+2wWwsiX67upj1LIu2n8kl89P8FCciIC ZQFANFxEmQ3MZ803N8kLp7RZVKAxpKP8a2X71R6vt3Qn2VtE5xs4/38eqLVo/05dtgPthjweKuP LfGGW9TlQ3S1FTgxfbVPoXJgU2+JK3DFVk4GSBzMu X-Gm-Gg: AY/fxX6tTZD+EIEn/J7SZrvsoYGSIVXULdqPhBl4XAa7So06DO+gCdlEpsrxWWsIfFl zHazMbw9g1c6ZE7aYrB+/EwrOSzK1FNw2Oy7FiVbqDzD5sIGpMCsQv9Ar0uWMMLH6k0l20qyAgI v0TubxkaeUNcDm5MlzAwy/l/Z+VEqY5aKhxLQxsgGaLYQFOY9GvByzNO6hgDPR1WZrM4+p3FbB2 eT3Plse1Ori9RlOZ5AGkOM5DvPIZD3Pqat+y81xidHN7iry5pYxtenUSwAcHMCgQuCwHGvN3sr2 iAf3 X-Google-Smtp-Source: AGHT+IGwwQUfDNp+vdSlrkiwzJXWM9K8ws1FUdgiERj8R7G2XmKien1SVaxnduxq+RIKu9VEsX6JxqLsnPJ4rVxMiNQ= X-Received: by 2002:a5d:5d87:0:b0:432:8651:4071 with SMTP id ffacd0b85a97d-4328651421amr32429445f8f.18.1767606985261; Mon, 05 Jan 2026 01:56:25 -0800 (PST) MIME-Version: 1.0 References: <20251223-b4-kunit-user-alloc-v1-0-fb910ae0e50c@google.com> <20251223-b4-kunit-user-alloc-v1-3-fb910ae0e50c@google.com> In-Reply-To: <20251223-b4-kunit-user-alloc-v1-3-fb910ae0e50c@google.com> From: David Gow Date: Mon, 5 Jan 2026 17:56:13 +0800 X-Gm-Features: AQt7F2o3aJjc8pg9gpsN4beGFmZtGXKEZCUwLZWf7shEfxiNcIVw9dUD1NE-KYk Message-ID: Subject: Re: [PATCH 3/3] kunit: test: fix mm_struct leak in kunit_attach_mm() To: Brendan Jackman Cc: Brendan Higgins , Rae Moar , Kees Cook , Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Mel Gorman , Valentin Schneider , Andrew Morton , David Hildenbrand , Lorenzo Stoakes , "Liam R. Howlett" , Vlastimil Babka , Mike Rapoport , Suren Baghdasaryan , Michal Hocko , linux-kselftest@vger.kernel.org, kunit-dev@googlegroups.com, linux-kernel@vger.kernel.org, linux-mm@kvack.org Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="0000000000007f7ea60647a1128a" X-Rspamd-Server: rspam02 X-Stat-Signature: pkpixd3bera37uwkezg9ent6qwce9ssy X-Rspam-User: X-Rspamd-Queue-Id: E84B540007 X-HE-Tag: 1767606986-696689 X-HE-Meta: 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 Ffsr11bu RUgDpau5m9zpH6ZCt5P495uaTnmVQPQPfFHxPBWm3gnQLwyIuMic2Kk+mlFWh93nWIXlShsn/QFLOfb81zeY7XofuBY04XT5Ooke9ihCJLIlgjU0Z4dj/rtMVQvpqv+h0FDCY/SZJcDuamf/L2hTeUzpfWiN06cOjseiF0yBoDIX3xZJgNvHVWIG5zFyMhk09mbJnEnIpa1l7NBzBWcsJYeFLDfhOqJwBIo8AeaBy5+lYU9k/YaCR96mLjR2GEOLaEWJMmeLbnwtp5f7IMKSdksDbXFFIlfOl6OGC0tS6LtqY+DjTpiX6jpD+LwQxjZc7fUaXeGMF4s/ZRd5HNJVG8a+wlhGTAmrR+UMqZ5/cYyT52DzuDHu/yahEwXM0hIGxZ5yAay/zcDeBMrdu/bmup1OpiQ== X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: --0000000000007f7ea60647a1128a Content-Type: text/plain; charset="UTF-8" On Wed, 24 Dec 2025 at 00:18, Brendan Jackman wrote: > > Here's how I understand mm refcounts: > > funcs | counter | manages lifecycle of... > -------------------------------------------------------- > mmgrab()/mmdrop() | mm_count | mm_struct and PGD > -------------------------------------------------------- > mmget()/mmput() | mm_users | userspace address space > > All mm_users references share a single reference to the mm_struct. > > mm_alloc() returns the mm with a single reference to the user address > space, i.e. with mm_users=1, mm_count=1. > > kunit_attach_mm() then passes the mm to kthread_use_mm(). It does not > call kthread_unuse_mm(), instead it relies on the kthread exit path to > release the relevant resources. It does this because KUnit's resource > cleanup logic works by running cleanups in a different kthread from the > test. You can't have cleanups that operate on the kthread, because > the kthread is already gone by the time the cleanup is called. > > The kthread exit path will indeed drop the reference to the address > space, i.e. it will call mmput(task->mm), decrementing mm_users. > However, it does not release the reference taken on the mm_struct when > kthread_use_mm() called mmgrab(). > > To fix this, use the new kthread_take_mm() which provides the API KUnit > needs. > > Signed-off-by: Brendan Jackman > --- This seems right. We did have the ability to run cleanups on the test kthread, but we couldn't guarantee it (because the test thread could be aborted early, due to test failures, timeouts, etc). I'm assuming that we can't just throw an mmdrop() in a resource cleanup function (e.g. kunit_add_action()), since we can't do a full kthread_unuse_mm()? I gave it a quick try and nothing crashed, but that's not exactly a ringing endorsement that it's correct: diff --git a/lib/kunit/user_alloc.c b/lib/kunit/user_alloc.c index 3fca4ae223f6..5177537f592b 100644 --- a/lib/kunit/user_alloc.c +++ b/lib/kunit/user_alloc.c @@ -7,6 +7,8 @@ #include #include +KUNIT_DEFINE_ACTION_WRAPPER(kunit_mmdrop_action, mmdrop, struct mm_struct*); + int kunit_attach_mm(void) { struct mm_struct *mm; @@ -29,7 +31,9 @@ int kunit_attach_mm(void) arch_pick_mmap_layout(mm, ¤t->signal->rlim[RLIMIT_STACK]); /* Attach the mm. It will be cleaned up when the process dies. */ - kthread_take_mm(mm); + kthread_use_mm(mm); + + kunit_add_action(current->kunit_test, kunit_mmdrop_action, mm); return 0; } That being said, if mm folks are okay with the kthread_take_mm() approach, that certainly makes things easier on our end, so I'm happy with this as an option. Reviewed-by: David Gow Cheers, -- David > lib/kunit/user_alloc.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/lib/kunit/user_alloc.c b/lib/kunit/user_alloc.c > index 564f5566641d5..3fca4ae223f67 100644 > --- a/lib/kunit/user_alloc.c > +++ b/lib/kunit/user_alloc.c > @@ -29,7 +29,7 @@ int kunit_attach_mm(void) > arch_pick_mmap_layout(mm, ¤t->signal->rlim[RLIMIT_STACK]); > > /* Attach the mm. It will be cleaned up when the process dies. */ > - kthread_use_mm(mm); > + kthread_take_mm(mm); > > return 0; > } > > -- > 2.51.2 > --0000000000007f7ea60647a1128a Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIIUnQYJKoZIhvcNAQcCoIIUjjCCFIoCAQExDzANBglghkgBZQMEAgEFADALBgkqhkiG9w0BBwGg ghIEMIIGkTCCBHmgAwIBAgIQfofDAVIq0iZG5Ok+mZCT2TANBgkqhkiG9w0BAQwFADBMMSAwHgYD VQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSNjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UE AxMKR2xvYmFsU2lnbjAeFw0yMzA0MTkwMzUzNDdaFw0zMjA0MTkwMDAwMDBaMFQxCzAJBgNVBAYT AkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSowKAYDVQQDEyFHbG9iYWxTaWduIEF0bGFz IFI2IFNNSU1FIENBIDIwMjMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDYydcdmKyg 4IBqVjT4XMf6SR2Ix+1ChW2efX6LpapgGIl63csmTdJQw8EcbwU9C691spkltzTASK2Ayi4aeosB mk63SPrdVjJNNTkSbTowej3xVVGnYwAjZ6/qcrIgRUNtd/mbtG7j9W80JoP6o2Szu6/mdjb/yxRM KaCDlloE9vID2jSNB5qOGkKKvN0x6I5e/B1Y6tidYDHemkW4Qv9mfE3xtDAoe5ygUvKA4KHQTOIy VQEFpd/ZAu1yvrEeA/egkcmdJs6o47sxfo9p/fGNsLm/TOOZg5aj5RHJbZlc0zQ3yZt1wh+NEe3x ewU5ZoFnETCjjTKz16eJ5RE21EmnCtLb3kU1s+t/L0RUU3XUAzMeBVYBEsEmNnbo1UiiuwUZBWiJ vMBxd9LeIodDzz3ULIN5Q84oYBOeWGI2ILvplRe9Fx/WBjHhl9rJgAXs2h9dAMVeEYIYkvW+9mpt BIU9cXUiO0bky1lumSRRg11fOgRzIJQsphStaOq5OPTb3pBiNpwWvYpvv5kCG2X58GfdR8SWA+fm OLXHcb5lRljrS4rT9MROG/QkZgNtoFLBo/r7qANrtlyAwPx5zPsQSwG9r8SFdgMTHnA2eWCZPOmN 1Tt4xU4v9mQIHNqQBuNJLjlxvalUOdTRgw21OJAFt6Ncx5j/20Qw9FECnP+B3EPVmQIDAQABo4IB ZTCCAWEwDgYDVR0PAQH/BAQDAgGGMDMGA1UdJQQsMCoGCCsGAQUFBwMCBggrBgEFBQcDBAYJKwYB BAGCNxUGBgkrBgEEAYI3FQUwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUM7q+o9Q5TSoZ 18hmkmiB/cHGycYwHwYDVR0jBBgwFoAUrmwFo5MT4qLn4tcc1sfwf8hnU6AwewYIKwYBBQUHAQEE bzBtMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vcm9vdHI2MDsGCCsG AQUFBzAChi9odHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9yb290LXI2LmNydDA2 BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL3Jvb3QtcjYuY3JsMBEG A1UdIAQKMAgwBgYEVR0gADANBgkqhkiG9w0BAQwFAAOCAgEAVc4mpSLg9A6QpSq1JNO6tURZ4rBI MkwhqdLrEsKs8z40RyxMURo+B2ZljZmFLcEVxyNt7zwpZ2IDfk4URESmfDTiy95jf856Hcwzdxfy jdwx0k7n4/0WK9ElybN4J95sgeGRcqd4pji6171bREVt0UlHrIRkftIMFK1bzU0dgpgLMu+ykJSE 0Bog41D9T6Swl2RTuKYYO4UAl9nSjWN6CVP8rZQotJv8Kl2llpe83n6ULzNfe2QT67IB5sJdsrNk jIxSwaWjOUNddWvCk/b5qsVUROOuctPyYnAFTU5KY5qhyuiFTvvVlOMArFkStNlVKIufop5EQh6p jqDGT6rp4ANDoEWbHKd4mwrMtvrh51/8UzaJrLzj3GjdkJ/sPWkDbn+AIt6lrO8hbYSD8L7RQDqK C28FheVr4ynpkrWkT7Rl6npWhyumaCbjR+8bo9gs7rto9SPDhWhgPSR9R1//WF3mdHt8SKERhvtd NFkE3zf36V9Vnu0EO1ay2n5imrOfLkOVF3vtAjleJnesM/R7v5tMS0tWoIr39KaQNURwI//WVuR+ zjqIQVx5s7Ta1GgEL56z0C5GJoNE1LvGXnQDyvDO6QeJVThFNgwkossyvmMAaPOJYnYCrYXiXXle A6TpL63Gu8foNftUO0T83JbV/e6J8iCOnGZwZDrubOtYn1QwggWDMIIDa6ADAgECAg5F5rsDgzPD hWVI5v9FUTANBgkqhkiG9w0BAQwFADBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBS NjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xNDEyMTAwMDAw MDBaFw0zNDEyMTAwMDAwMDBaMEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFI2MRMw EQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWduMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAlQfoc8pm+ewUyns89w0I8bRFCyyCtEjG61s8roO4QZIzFKRvf+kqzMaw iGvFtonRxrL/FM5RFCHsSt0bWsbWh+5NOhUG7WRmC5KAykTec5RO86eJf094YwjIElBtQmYvTbl5 KE1SGooagLcZgQ5+xIq8ZEwhHENo1z08isWyZtWQmrcxBsW+4m0yBqYe+bnrqqO4v76CY1DQ8BiJ 3+QPefXqoh8q0nAue+e8k7ttU+JIfIwQBzj/ZrJ3YX7g6ow8qrSk9vOVShIHbf2MsonP0KBhd8hY dLDUIzr3XTrKotudCd5dRC2Q8YHNV5L6frxQBGM032uTGL5rNrI55KwkNrfw77YcE1eTtt6y+OKF t3OiuDWqRfLgnTahb1SK8XJWbi6IxVFCRBWU7qPFOJabTk5aC0fzBjZJdzC8cTflpuwhCHX85mEW P3fV2ZGXhAps1AJNdMAU7f05+4PyXhShBLAL6f7uj+FuC7IIs2FmCWqxBjplllnA8DX9ydoojRoR h3CBCqiadR2eOoYFAJ7bgNYl+dwFnidZTHY5W+r5paHYgw/R/98wEfmFzzNI9cptZBQselhP00sI ScWVZBpjDnk99bOMylitnEJFeW4OhxlcVLFltr+Mm9wT6Q1vuC7cZ27JixG1hBSKABlwg3mRl5HU Gie/Nx4yB9gUYzwoTK8CAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w HQYDVR0OBBYEFK5sBaOTE+Ki5+LXHNbH8H/IZ1OgMB8GA1UdIwQYMBaAFK5sBaOTE+Ki5+LXHNbH 8H/IZ1OgMA0GCSqGSIb3DQEBDAUAA4ICAQCDJe3o0f2VUs2ewASgkWnmXNCE3tytok/oR3jWZZip W6g8h3wCitFutxZz5l/AVJjVdL7BzeIRka0jGD3d4XJElrSVXsB7jpl4FkMTVlezorM7tXfcQHKs o+ubNT6xCCGh58RDN3kyvrXnnCxMvEMpmY4w06wh4OMd+tgHM3ZUACIquU0gLnBo2uVT/INc053y /0QMRGby0uO9RgAabQK6JV2NoTFR3VRGHE3bmZbvGhwEXKYV73jgef5d2z6qTFX9mhWpb+Gm+99w MOnD7kJG7cKTBYn6fWN7P9BxgXwA6JiuDng0wyX7rwqfIGvdOxOPEoziQRpIenOgd2nHtlx/gsge /lgbKCuobK1ebcAF0nu364D+JTf+AptorEJdw+71zNzwUHXSNmmc5nsE324GabbeCglIWYfrexRg emSqaUPvkcdM7BjdbO9TLYyZ4V7ycj7PVMi9Z+ykD0xF/9O5MCMHTI8Qv4aW2ZlatJlXHKTMuxWJ U7osBQ/kxJ4ZsRg01Uyduu33H68klQR4qAO77oHl2l98i0qhkHQlp7M+S8gsVr3HyO844lyS8Hn3 nIS6dC1hASB+ftHyTwdZX4stQ1LrRgyU4fVmR3l31VRbH60kN8tFWk6gREjI2LCZxRWECfbWSUnA ZbjmGnFuoKjxguhFPmzWAtcKZ4MFWsmkEDCCBeQwggPMoAMCAQICEAGEC3/wSMy6MPZFqg/DMj8w DQYJKoZIhvcNAQELBQAwVDELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2Ex KjAoBgNVBAMTIUdsb2JhbFNpZ24gQXRsYXMgUjYgU01JTUUgQ0EgMjAyMzAeFw0yNTEwMTMyMzQ3 NDlaFw0yNjA0MTEyMzQ3NDlaMCQxIjAgBgkqhkiG9w0BCQEWE2RhdmlkZ293QGdvb2dsZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7T8v6fZyfEDlp38NMe4GOXuodILGOFXh6 iVuecsKchx1gCg5Qebyxm+ndfb6ePkd2zzsBOkBJmYrx4G009e+oyTnynr5KXvucs+wLlgm53QU7 6pYikvqTM2hezoWz48Ve/6Jq/6I/eAzKGhn4E/3zG15ETIeMpPFy/E7/lGqq+HFRCb6s0tl/QWhC BiR+n2UvmXbVWPSR51aRAifsKqiuraeU5g9bGCcbuvdbiYQf1AzNDilkvA6FfUaOPTzVj3rgMyZb mnZpzWOV1bfib3tYXd2x4IvUS3xlvrap0g9EiDxJKUhCskOf7dPTjaS/kku768Y6U/sDVH5ptgvP Dxz3AgMBAAGjggHgMIIB3DAeBgNVHREEFzAVgRNkYXZpZGdvd0Bnb29nbGUuY29tMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwHQYDVR0OBBYEFHZtY3XkWtC2 e2Idfk+0JyK7BLzzMFgGA1UdIARRME8wCQYHZ4EMAQUBAjBCBgorBgEEAaAyCgMDMDQwMgYIKwYB BQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAwGA1UdEwEB/wQC MAAwgZoGCCsGAQUFBwEBBIGNMIGKMD4GCCsGAQUFBzABhjJodHRwOi8vb2NzcC5nbG9iYWxzaWdu LmNvbS9jYS9nc2F0bGFzcjZzbWltZWNhMjAyMzBIBggrBgEFBQcwAoY8aHR0cDovL3NlY3VyZS5n bG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3I2c21pbWVjYTIwMjMuY3J0MB8GA1UdIwQYMBaA FDO6vqPUOU0qGdfIZpJogf3BxsnGMEYGA1UdHwQ/MD0wO6A5oDeGNWh0dHA6Ly9jcmwuZ2xvYmFs c2lnbi5jb20vY2EvZ3NhdGxhc3I2c21pbWVjYTIwMjMuY3JsMA0GCSqGSIb3DQEBCwUAA4ICAQBo hqjbVaHxZoT6HHUuwQcTlbgXpuVi59bQPrSwb/6Pn1t3h3SLeuUCvOYpoQjxlWy/FexsPW+nWS0I PUmWpt6sxbIRTKPfb7cPk32XezfnA0jexucybiXzkZKTrbI7zoMOzDIWpTKYZAonB9Zzi7Dso4An ZOtz/E3yhdR/q1MK30d5fiCS0vorEd0Oy8Jzcc7TJ2HGMzEEXiFFvVrJYJHvfYOeXE4ywAG6YWO0 x78+bXeB9vkeWHhOYKyYXuAXrnHASddEICg1QlJCHDAISMC1Wn/tjqTMTt3sDAe+dhi9V1FEGTbG g9PxPVP4huJEMIBu/MWNMzHfiW4E7eCHVPrmtX7CFDlMik7qsgQBbO5h6EcxBamhIflfMgoISsRJ Vyll2E5BNVwkNstMgU3WMg5yIaQcuGFgFnMTrQcaLEEFPV3cCP9pgXovYDirnB7FKNdCZNHfeBY1 HEXJ2jIPDP6nWSbYoRry0TvPgxh5ZeM5+sc1L7kY75C8U4FV3t4qdC+p7rgqfAggdvDPa5BJbTRg KAzwyf3z7XUrYp38pXybmDnsEcRNBIOEqBXoiBxZXaKQqaY921nWAroMM/6I6CVpTnu6JEeQkoi4 IgGIEaTFPcgAjvpDQ8waLJL84EP6rbLW6dop+97BXbeO9L/fFf40kBhve6IggpJSeU9RdCQ5czGC Al0wggJZAgEBMGgwVDELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExKjAo BgNVBAMTIUdsb2JhbFNpZ24gQXRsYXMgUjYgU01JTUUgQ0EgMjAyMwIQAYQLf/BIzLow9kWqD8My PzANBglghkgBZQMEAgEFAKCBxzAvBgkqhkiG9w0BCQQxIgQgLfB9g5dxQP456c5R7sE3iT+VZ25y 9QIOUJDByre+/oswGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjYw MTA1MDk1NjI1WjBcBgkqhkiG9w0BCQ8xTzBNMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCwYJ YIZIAWUDBAECMAoGCCqGSIb3DQMHMAsGCSqGSIb3DQEBBzALBglghkgBZQMEAgEwDQYJKoZIhvcN AQEBBQAEggEAuG41i9DkRai6gyhnNSHC29OprCu2rfiXgYBeTwRwcvS4MOR9/Ep7GHGlpPd3G+NC S00bHfKXiZD0Z9D16TDr3gDupFUgp7vR7RM8Q2neJBlH1rW3+3HzFHWpMc11oVRpj+tIePmVdVlX wrIG3gsDsHEyeWjZ1288rG4j4+F8KMHYc5v7FLBZH+ea6sVkhxLZPHtivJuM+tC1UyhbU3rDCpyQ 1Ny6qYEHymwxFP5K9JGDVbWRyP3tF/CBtQSBjuCRPvD683Db9nwigVLSxdWqkgNIhov25UVU+B+0 5DPlDDRE+hu6P6aSmYG4PairmGAWi9PrxkldZn7LzRHMz/zVsQ== --0000000000007f7ea60647a1128a--