From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6FC46C3DA4A for ; Fri, 2 Aug 2024 12:53:34 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 780EC6B007B; Fri, 2 Aug 2024 08:53:33 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 730606B0083; Fri, 2 Aug 2024 08:53:33 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 5D0C96B0085; Fri, 2 Aug 2024 08:53:33 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0011.hostedemail.com [216.40.44.11]) by kanga.kvack.org (Postfix) with ESMTP id 386F66B007B for ; Fri, 2 Aug 2024 08:53:33 -0400 (EDT) Received: from smtpin07.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay06.hostedemail.com (Postfix) with ESMTP id ABFE4A7CD7 for ; Fri, 2 Aug 2024 12:53:32 +0000 (UTC) X-FDA: 82407296664.07.5712F33 Received: from casper.infradead.org (casper.infradead.org [90.155.50.34]) by imf29.hostedemail.com (Postfix) with ESMTP id 406E012002E for ; Fri, 2 Aug 2024 12:53:29 +0000 (UTC) Authentication-Results: imf29.hostedemail.com; dkim=pass header.d=infradead.org header.s=casper.20170209 header.b=gk5Gcgpj; dmarc=none; spf=none (imf29.hostedemail.com: domain of BATV+a50a786cdf4715cf5701+7649+infradead.org+dwmw2@casper.srs.infradead.org has no SPF policy when checking 90.155.50.34) smtp.mailfrom=BATV+a50a786cdf4715cf5701+7649+infradead.org+dwmw2@casper.srs.infradead.org ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1722603205; a=rsa-sha256; cv=none; b=EzYwfvF08/oVlrmsFQO79V3genUTPqv4tbgHKlAd5VP+YVy/KJ4QqELEj1hSy9c3N+vUZj sLB/xq6qdMnjiIF0t7V/b6YCh7DDz9zgQow10841oeWS6YsjhfVWOrwdR8mFMrxcMsdTId T+XfyG2Z+DH/RMW9SeN1wwQXJHMXDbU= ARC-Authentication-Results: i=1; imf29.hostedemail.com; dkim=pass header.d=infradead.org header.s=casper.20170209 header.b=gk5Gcgpj; dmarc=none; spf=none (imf29.hostedemail.com: domain of BATV+a50a786cdf4715cf5701+7649+infradead.org+dwmw2@casper.srs.infradead.org has no SPF policy when checking 90.155.50.34) smtp.mailfrom=BATV+a50a786cdf4715cf5701+7649+infradead.org+dwmw2@casper.srs.infradead.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1722603205; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=9C0txoyRv53d0LXmfV4O/jld3nQsaMKAicBUBmaAY9I=; b=GlNhwC4t5925E7fk89LfgEPiQBblXzG90AJBb2hr54YsDeRT2cwe6mxyKV4wIrFqldP8Hm +f22Sj0uwTWfQ6KNgsEMTDXHsxlLDWXjRG9/NMhjKqlI2O1sNUfeaE9+BEe57o1KAlDoRK 0HbpZcDGqOp1YH7X1TXpyO0Uz1LaNkY= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=casper.20170209; h=MIME-Version:Content-Type:References: In-Reply-To:Date:Cc:To:From:Subject:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=9C0txoyRv53d0LXmfV4O/jld3nQsaMKAicBUBmaAY9I=; b=gk5GcgpjJbKKptiDGl0ya2ufFQ LgyRrcBT8hsG6ptQjze9M5jyyZE6fzLNmSwf5c0D0GUMqWgqoBVHdAsACc0Cb/aFjLeJRO/756lPV OIIulHnkSO9dlJmrrNOF7Mtu08uX9tO31U4vxyTgWEVHW2qBXuoKnHFabFLyQSAPlPM3Gqx9wsujs pVpimTkfm7LoZPBZYuQ3uGLbVYLrzls6S9ToKc4qVD2zXas51CJKxTA21WuK9JOR59rZuKgWNiJy/ yNnuT5Qc9sZqGD7jBFx2beBN4POCKrjXioRgvMd+kZF2wj0gk/TDKQNYCJR5ceJR7v49MLpij73PN eMzi5++A==; Received: from [2001:8b0:10b:5:baa5:735b:df3b:ad66] (helo=u3832b3a9db3152.ant.amazon.com) by casper.infradead.org with esmtpsa (Exim 4.97.1 #2 (Red Hat Linux)) id 1sZrmY-000000011mf-0fCr; Fri, 02 Aug 2024 12:53:18 +0000 Message-ID: Subject: Re: [PATCH] KVM: x86: Use gfn_to_pfn_cache for steal_time From: David Woodhouse To: Matthew Wilcox Cc: Carsten Stollmaier , Sean Christopherson , Paolo Bonzini , Thomas Gleixner , Ingo Molnar , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , nh-open-source@amazon.com, Peter Xu , Sebastian Biemueller , kvm@vger.kernel.org, linux-kernel@vger.kernel.org, Andrew Morton , "linux-mm@kvack.org" , Andrea Arcangeli Date: Fri, 02 Aug 2024 13:53:17 +0100 In-Reply-To: References: <20240802114402.96669-1-stollmc@amazon.com> Content-Type: multipart/signed; micalg="sha-256"; protocol="application/pkcs7-signature"; boundary="=-BBKSddBfoWEUvesBzQl/" User-Agent: Evolution 3.44.4-0ubuntu2 MIME-Version: 1.0 X-SRS-Rewrite: SMTP reverse-path rewritten from by casper.infradead.org. See http://www.infradead.org/rpr.html X-Rspam-User: X-Rspamd-Queue-Id: 406E012002E X-Rspamd-Server: rspam01 X-Stat-Signature: jw9nptq8fd5kp5eh5fwexyhaqkmnggcs X-HE-Tag: 1722603209-533747 X-HE-Meta: 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 BZkxFsn6 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 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: --=-BBKSddBfoWEUvesBzQl/ Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, 2024-08-02 at 13:38 +0100, Matthew Wilcox wrote: > On Fri, Aug 02, 2024 at 01:03:16PM +0100, David Woodhouse wrote: > > On Fri, 2024-08-02 at 11:44 +0000, Carsten Stollmaier wrote: > > > handle_userfault uses TASK_INTERRUPTIBLE, so it is interruptible by > > > signals. do_user_addr_fault then busy-retries it if the pending signa= l > > > is non-fatal. This leads to contention of the mmap_lock. >=20 > Why does handle_userfault use TASK_INTERRUPTIBLE?=C2=A0 We really don't > want to stop handling a page fault just because somebody resized a > window or a timer went off.=C2=A0 TASK_KILLABLE, sure. Well, the literal answer there in this case is "because we ask it to". The handle_userfault() function will literally do what it's told by the fault flags:=20 static inline unsigned int userfaultfd_get_blocking_state(unsigned int flag= s) { if (flags & FAULT_FLAG_INTERRUPTIBLE) return TASK_INTERRUPTIBLE; if (flags & FAULT_FLAG_KILLABLE) return TASK_KILLABLE; return TASK_UNINTERRUPTIBLE; } Hence the other potential workaround I mentioned, for do_user_addr_fault() *not* to ask it to, for faults from the kernel: > >=20 > > --- a/arch/x86/mm/fault.c > > +++ b/arch/x86/mm/fault.c > > @@ -1304,6 +1304,8 @@ void do_user_addr_fault(struct pt_regs *regs, > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 */ > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 if (user_mode(regs)) > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 flags |=3D FAULT_FLAG_USER; > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 else > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 flags &=3D ~FAULT_FLAG_INTERRUPTIBLE; > > =C2=A0 > > =C2=A0#ifdef CONFIG_X86_64 > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 /* > >=20 But I don't know that I agree with your statement above, that we "don't want to stop handling a page fault just because somebody resized a window or a timer went off".=20 In fact, I don't think we *do* even stop handling the page fault in those cases; we just stop *waiting* for it to be handled.=20 In fact, couldn't you contrive a test case where a thread is handling its own uffd faults via SIGIO, where it's the opposite of what you say. In that case the *only* way the fault actually gets handled is if we let the signal happen instead of just waiting?=C2=A0 That doesn't seem like *such* a contrived case either =E2=80=94 that seems perfectly reasonable for a vCPU thread, to then handle its own missing pages? --=-BBKSddBfoWEUvesBzQl/ Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCEkQw ggYQMIID+KADAgECAhBNlCwQ1DvglAnFgS06KwZPMA0GCSqGSIb3DQEBDAUAMIGIMQswCQYDVQQG EwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IFJTQSBDZXJ0aWZpY2F0 aW9uIEF1dGhvcml0eTAeFw0xODExMDIwMDAwMDBaFw0zMDEyMzEyMzU5NTlaMIGWMQswCQYDVQQG EwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYD VQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50 aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjztlApB/975Rrno1jvm2pK/KxBOqhq8gr2+JhwpKirSzZxQgT9tlC7zl6hn1fXjSo5MqXUf ItMltrMaXqcESJuK8dtK56NCSrq4iDKaKq9NxOXFmqXX2zN8HHGjQ2b2Xv0v1L5Nk1MQPKA19xeW QcpGEGFUUd0kN+oHox+L9aV1rjfNiCj3bJk6kJaOPabPi2503nn/ITX5e8WfPnGw4VuZ79Khj1YB rf24k5Ee1sLTHsLtpiK9OjG4iQRBdq6Z/TlVx/hGAez5h36bBJMxqdHLpdwIUkTqT8se3ed0PewD ch/8kHPo5fZl5u1B0ecpq/sDN/5sCG52Ds+QU5O5EwIDAQABo4IBZDCCAWAwHwYDVR0jBBgwFoAU U3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFAnA8vwL2pTbX/4r36iZQs/J4K0AMA4GA1Ud DwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF BQcDBDARBgNVHSAECjAIMAYGBFUdIAAwUAYDVR0fBEkwRzBFoEOgQYY/aHR0cDovL2NybC51c2Vy dHJ1c3QuY29tL1VTRVJUcnVzdFJTQUNlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMHYGCCsGAQUF BwEBBGowaDA/BggrBgEFBQcwAoYzaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1VTRVJUcnVzdFJT QUFkZFRydXN0Q0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0G CSqGSIb3DQEBDAUAA4ICAQBBRHUAqznCFfXejpVtMnFojADdF9d6HBA4kMjjsb0XMZHztuOCtKF+ xswhh2GqkW5JQrM8zVlU+A2VP72Ky2nlRA1GwmIPgou74TZ/XTarHG8zdMSgaDrkVYzz1g3nIVO9 IHk96VwsacIvBF8JfqIs+8aWH2PfSUrNxP6Ys7U0sZYx4rXD6+cqFq/ZW5BUfClN/rhk2ddQXyn7 kkmka2RQb9d90nmNHdgKrwfQ49mQ2hWQNDkJJIXwKjYA6VUR/fZUFeCUisdDe/0ABLTI+jheXUV1 eoYV7lNwNBKpeHdNuO6Aacb533JlfeUHxvBz9OfYWUiXu09sMAviM11Q0DuMZ5760CdO2VnpsXP4 KxaYIhvqPqUMWqRdWyn7crItNkZeroXaecG03i3mM7dkiPaCkgocBg0EBYsbZDZ8bsG3a08LwEsL 1Ygz3SBsyECa0waq4hOf/Z85F2w2ZpXfP+w8q4ifwO90SGZZV+HR/Jh6rEaVPDRF/CEGVqR1hiuQ OZ1YL5ezMTX0ZSLwrymUE0pwi/KDaiYB15uswgeIAcA6JzPFf9pLkAFFWs1QNyN++niFhsM47qod x/PL+5jR87myx5uYdBEQkkDc+lKB1Wct6ucXqm2EmsaQ0M95QjTmy+rDWjkDYdw3Ms6mSWE3Bn7i 5ZgtwCLXgAIe5W8mybM2JzCCBhQwggT8oAMCAQICEQDGvhmWZ0DEAx0oURL6O6l+MA0GCSqGSIb3 DQEBCwUAMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28g UlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMB4XDTIyMDEwNzAw MDAwMFoXDTI1MDEwNjIzNTk1OVowJDEiMCAGCSqGSIb3DQEJARYTZHdtdzJAaW5mcmFkZWFkLm9y ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALQ3GpC2bomUqk+91wLYBzDMcCj5C9m6 oZaHwvmIdXftOgTbCJXADo6G9T7BBAebw2JV38EINgKpy/ZHh7htyAkWYVoFsFPrwHounto8xTsy SSePMiPlmIdQ10BcVSXMUJ3Juu16GlWOnAMJY2oYfEzmE7uT9YgcBqKCo65pTFmOnR/VVbjJk4K2 xE34GC2nAdUQkPFuyaFisicc6HRMOYXPuF0DuwITEKnjxgNjP+qDrh0db7PAjO1D4d5ftfrsf+kd RR4gKVGSk8Tz2WwvtLAroJM4nXjNPIBJNT4w/FWWc/5qPHJy2U+eITZ5LLE5s45mX2oPFknWqxBo bQZ8a9dsZ3dSPZBvE9ZrmtFLrVrN4eo1jsXgAp1+p7bkfqd3BgBEmfsYWlBXO8rVXfvPgLs32VdV NZxb/CDWPqBsiYv0Hv3HPsz07j5b+/cVoWqyHDKzkaVbxfq/7auNVRmPB3v5SWEsH8xi4Bez2V9U KxfYCnqsjp8RaC2/khxKt0A552Eaxnz/4ly/2C7wkwTQnBmdlFYhAflWKQ03Ufiu8t3iBE3VJbc2 5oMrglj7TRZrmKq3CkbFnX0fyulB+kHimrt6PIWn7kgyl9aelIl6vtbhMA+l0nfrsORMa4kobqQ5 C5rveVgmcIad67EDa+UqEKy/GltUwlSh6xy+TrK1tzDvAgMBAAGjggHMMIIByDAfBgNVHSMEGDAW gBQJwPL8C9qU21/+K9+omULPyeCtADAdBgNVHQ4EFgQUzMeDMcimo0oz8o1R1Nver3ZVpSkwDgYD VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMC MEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQEBMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGln by5jb20vQ1BTMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGln b1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcmwwgYoGCCsGAQUFBwEB BH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50 QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29j c3Auc2VjdGlnby5jb20wHgYDVR0RBBcwFYETZHdtdzJAaW5mcmFkZWFkLm9yZzANBgkqhkiG9w0B AQsFAAOCAQEAyW6MUir5dm495teKqAQjDJwuFCi35h4xgnQvQ/fzPXmtR9t54rpmI2TfyvcKgOXp qa7BGXNFfh1JsqexVkIqZP9uWB2J+uVMD+XZEs/KYNNX2PvIlSPrzIB4Z2wyIGQpaPLlYflrrVFK v9CjT2zdqvy2maK7HKOQRt3BiJbVG5lRiwbbygldcALEV9ChWFfgSXvrWDZspnU3Gjw/rMHrGnql Htlyebp3pf3fSS9kzQ1FVtVIDrL6eqhTwJxe+pXSMMqFiN0whpBtXdyDjzBtQTaZJ7zTT/vlehc/ tDuqZwGHm/YJy883Ll+GP3NvOkgaRGWEuYWJJ6hFCkXYjyR9IzCCBhQwggT8oAMCAQICEQDGvhmW Z0DEAx0oURL6O6l+MA0GCSqGSIb3DQEBCwUAMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0 ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl IEVtYWlsIENBMB4XDTIyMDEwNzAwMDAwMFoXDTI1MDEwNjIzNTk1OVowJDEiMCAGCSqGSIb3DQEJ ARYTZHdtdzJAaW5mcmFkZWFkLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALQ3 GpC2bomUqk+91wLYBzDMcCj5C9m6oZaHwvmIdXftOgTbCJXADo6G9T7BBAebw2JV38EINgKpy/ZH h7htyAkWYVoFsFPrwHounto8xTsySSePMiPlmIdQ10BcVSXMUJ3Juu16GlWOnAMJY2oYfEzmE7uT 9YgcBqKCo65pTFmOnR/VVbjJk4K2xE34GC2nAdUQkPFuyaFisicc6HRMOYXPuF0DuwITEKnjxgNj P+qDrh0db7PAjO1D4d5ftfrsf+kdRR4gKVGSk8Tz2WwvtLAroJM4nXjNPIBJNT4w/FWWc/5qPHJy 2U+eITZ5LLE5s45mX2oPFknWqxBobQZ8a9dsZ3dSPZBvE9ZrmtFLrVrN4eo1jsXgAp1+p7bkfqd3 BgBEmfsYWlBXO8rVXfvPgLs32VdVNZxb/CDWPqBsiYv0Hv3HPsz07j5b+/cVoWqyHDKzkaVbxfq/ 7auNVRmPB3v5SWEsH8xi4Bez2V9UKxfYCnqsjp8RaC2/khxKt0A552Eaxnz/4ly/2C7wkwTQnBmd lFYhAflWKQ03Ufiu8t3iBE3VJbc25oMrglj7TRZrmKq3CkbFnX0fyulB+kHimrt6PIWn7kgyl9ae lIl6vtbhMA+l0nfrsORMa4kobqQ5C5rveVgmcIad67EDa+UqEKy/GltUwlSh6xy+TrK1tzDvAgMB AAGjggHMMIIByDAfBgNVHSMEGDAWgBQJwPL8C9qU21/+K9+omULPyeCtADAdBgNVHQ4EFgQUzMeD Mcimo0oz8o1R1Nver3ZVpSkwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwQGCCsGAQUFBwMCMEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQEBMCUwIwYIKwYB BQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9j cmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1h aWxDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdv LmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAj BggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wHgYDVR0RBBcwFYETZHdtdzJAaW5m cmFkZWFkLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAyW6MUir5dm495teKqAQjDJwuFCi35h4xgnQv Q/fzPXmtR9t54rpmI2TfyvcKgOXpqa7BGXNFfh1JsqexVkIqZP9uWB2J+uVMD+XZEs/KYNNX2PvI lSPrzIB4Z2wyIGQpaPLlYflrrVFKv9CjT2zdqvy2maK7HKOQRt3BiJbVG5lRiwbbygldcALEV9Ch WFfgSXvrWDZspnU3Gjw/rMHrGnqlHtlyebp3pf3fSS9kzQ1FVtVIDrL6eqhTwJxe+pXSMMqFiN0w hpBtXdyDjzBtQTaZJ7zTT/vlehc/tDuqZwGHm/YJy883Ll+GP3NvOkgaRGWEuYWJJ6hFCkXYjyR9 IzGCBMcwggTDAgEBMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVz dGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMT NVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA xr4ZlmdAxAMdKFES+jupfjANBglghkgBZQMEAgEFAKCCAeswGAYJKoZIhvcNAQkDMQsGCSqGSIb3 DQEHATAcBgkqhkiG9w0BCQUxDxcNMjQwODAyMTI1MzE3WjAvBgkqhkiG9w0BCQQxIgQgNqis07dc cfckTF19+D8CW+h2oPPC48UUVMYqyJqdACcwgb0GCSsGAQQBgjcQBDGBrzCBrDCBljELMAkGA1UE BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIRAMa+GZZnQMQDHShREvo7qX4wgb8GCyqGSIb3 DQEJEAILMYGvoIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVy MRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNl Y3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEAxr4Z lmdAxAMdKFES+jupfjANBgkqhkiG9w0BAQEFAASCAgA4j/1vlQxyFSHdp6Rba4e5bli9Da+C2gZl 6vokVPt0wtBEWOMyIaqT2HT7DUftbNqNtU1fcI8xpgDaMSShcwY9RVtp7CEM0Lsb42/tdyl0loIg N8GaHSAVmEkhkv36KiENz4eKZSolk3ZzVVfX4z+oCCgRbmeAmbAheDbBcECgB/9hU2HldR7PZ6va DGyJFWTi3yQrVVX4tbPYIpSFDQ4L8A7L+AWqKMs5qpq4D8FD4iUnNjTaUgL7Hv+GpoxLLKULWuyi ChyFigrfFdYgqITNqNbh2IXH57hAPFpImwsvlAoWEktb0CNZzGiv1ZzF4YtCKRIACPwHpe065EE5 OIgudqWDatatbkmwfKS3yZpMw1J+VNuq8N2ktrhgZnZAcnvCMKBUVNYhMqFUBDD1c0wjGu3MVAmB h3XuLnPI5Pco0LD24y5BEnvxl1kJnfPMfmyjJdCHOUhl2quM8tdlLq1oZSI/sFRnxJ2PXKr3jJo/ DwgjaNzp+dofozCec8NdGSFlrMmSfv6TEj/6G1OXSvKXZRxnzgBuHVzYt6l+iqRWI5qWsvlSboSD aR2s2lsbGslBhuYuZ/Pbu7SGMRvdb5YNkkYDxg636Gkbgdy/5jMOjR4BnEILdO+vX0ajy1MKHySD I/bCFWQeD8xDv/HqKsHFmOD/EQ5H+fTeeDC/I/9FWQAAAAAAAA== --=-BBKSddBfoWEUvesBzQl/--