From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 12300C3DA4A for ; Tue, 20 Aug 2024 10:12:16 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id A29116B0088; Tue, 20 Aug 2024 06:12:15 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 9B2086B0089; Tue, 20 Aug 2024 06:12:15 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 87A086B008A; Tue, 20 Aug 2024 06:12:15 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0010.hostedemail.com [216.40.44.10]) by kanga.kvack.org (Postfix) with ESMTP id 665766B0088 for ; Tue, 20 Aug 2024 06:12:15 -0400 (EDT) Received: from smtpin09.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay07.hostedemail.com (Postfix) with ESMTP id 22454161917 for ; Tue, 20 Aug 2024 10:12:15 +0000 (UTC) X-FDA: 82472208630.09.5560827 Received: from casper.infradead.org (casper.infradead.org [90.155.50.34]) by imf22.hostedemail.com (Postfix) with ESMTP id 81E6EC0014 for ; Tue, 20 Aug 2024 10:12:12 +0000 (UTC) Authentication-Results: imf22.hostedemail.com; dkim=pass header.d=infradead.org header.s=casper.20170209 header.b=H03aBhu+; spf=none (imf22.hostedemail.com: domain of BATV+4870c2d46fc23b9eb8dd+7667+infradead.org+dwmw2@casper.srs.infradead.org has no SPF policy when checking 90.155.50.34) smtp.mailfrom=BATV+4870c2d46fc23b9eb8dd+7667+infradead.org+dwmw2@casper.srs.infradead.org; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1724148671; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=X1ovsn2F+ANZD6UJeGZbZ6bCQyiWt1CWfIHYtFKX4R4=; b=5VFAYMo0mb2+WmWirGuWBlqYP50MF2QV6XKEn+SYj1d/JtEl+cFJlru/MglwSVGuMY6wXP u/JX/dFefH2mC+ZC566e37LgJPZln5LApBGv79uy6EAdJ8y8gonaTsuJzDLOmPp5dqX58b BWgMqbwsAquOszdybiWPIcgFJhHRI+k= ARC-Authentication-Results: i=1; imf22.hostedemail.com; dkim=pass header.d=infradead.org header.s=casper.20170209 header.b=H03aBhu+; spf=none (imf22.hostedemail.com: domain of BATV+4870c2d46fc23b9eb8dd+7667+infradead.org+dwmw2@casper.srs.infradead.org has no SPF policy when checking 90.155.50.34) smtp.mailfrom=BATV+4870c2d46fc23b9eb8dd+7667+infradead.org+dwmw2@casper.srs.infradead.org; dmarc=none ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1724148671; a=rsa-sha256; cv=none; b=pHzoa4jByseFpihmhj6XDnzY00PLzaWWaf7cTNw8mFf0SBjkFjh01/rK0DNEhbRXrN7BWS JdI7er0GKKq/9cvWRnnNepGVQaHNatfLPaoE/Cw8AkTWjOLmuSgXByTss5aN/oplAVk5sK cpts8bverr5K6GCnG18kTezgsOfzy14= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=casper.20170209; h=MIME-Version:Content-Type:References: In-Reply-To:Date:Cc:To:From:Subject:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=X1ovsn2F+ANZD6UJeGZbZ6bCQyiWt1CWfIHYtFKX4R4=; b=H03aBhu+/ooTAnXvsf0XBN9WH8 eJT5v5iXWxt1bpKXppB6/z1JAlikjMmXeoVkOZZ1UsGuUor5IQcdFpCRh2Rl+fvsUJX/a5oQvdjYg Hpvd06QXhhsyw+LhF06kZHAaxvs2seyH/AQwLHb6iNgs0cbnLjOkZP7f5IbiZyZNvY+Zo6fZmhW+w DKrY5KY/XTH1W6/Fb2UQDyOLviCzvIB8ja2DxQ861bAam7nHmKuj6jF0lAEwWYus+qNGMD3VFQ57+ Q0PMHSrl2cbjeHYS1uhwnkRshTtPGPCAFbJqd+1k6NgCgDM1NaUgn4eJ8qB4yybgB4jS3Jk1vc9MT BShgI83A==; Received: from [2001:8b0:10b:5:cb53:8564:1f06:36f6] (helo=u3832b3a9db3152.ant.amazon.com) by casper.infradead.org with esmtpsa (Exim 4.97.1 #2 (Red Hat Linux)) id 1sgLq9-00000007pNx-25Om; Tue, 20 Aug 2024 10:11:49 +0000 Message-ID: Subject: Re: [PATCH] KVM: x86: Use gfn_to_pfn_cache for steal_time From: David Woodhouse To: Sean Christopherson Cc: Carsten Stollmaier , Paolo Bonzini , Thomas Gleixner , Ingo Molnar , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , nh-open-source@amazon.com, Peter Xu , Sebastian Biemueller , kvm@vger.kernel.org, linux-kernel@vger.kernel.org, Matthew Wilcox , Andrew Morton , "linux-mm@kvack.org" Date: Tue, 20 Aug 2024 11:11:48 +0100 In-Reply-To: References: <20240802114402.96669-1-stollmc@amazon.com> Content-Type: multipart/signed; micalg="sha-256"; protocol="application/pkcs7-signature"; boundary="=-Z0KpPo4xLge13VdjKAaC" User-Agent: Evolution 3.44.4-0ubuntu2 MIME-Version: 1.0 X-SRS-Rewrite: SMTP reverse-path rewritten from by casper.infradead.org. See http://www.infradead.org/rpr.html X-Stat-Signature: cjg9rjr8ashisejimhp6s6yw4fgpt4bh X-Rspam-User: X-Rspamd-Queue-Id: 81E6EC0014 X-Rspamd-Server: rspam02 X-HE-Tag: 1724148732-981232 X-HE-Meta: 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 A5mykotc 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 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: --=-Z0KpPo4xLge13VdjKAaC Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, 2024-08-16 at 17:22 -0700, Sean Christopherson wrote: > On Fri, Aug 02, 2024, David Woodhouse wrote: > > On Fri, 2024-08-02 at 11:44 +0000, Carsten Stollmaier wrote: > > > On vcpu_run, before entering the guest, the update of the steal time > > > information causes a page-fault if the page is not present. In our > > > scenario, this gets handled by do_user_addr_fault and successively > > > handle_userfault since we have the region registered to that. > > >=20 > > > handle_userfault uses TASK_INTERRUPTIBLE, so it is interruptible by > > > signals. do_user_addr_fault then busy-retries it if the pending signa= l > > > is non-fatal. This leads to contention of the mmap_lock. > >=20 > > The busy-loop causes so much contention on mmap_lock that post-copy > > live migration fails to make progress, and is leading to failures. Yes? > >=20 > > > This patch replaces the use of gfn_to_hva_cache with gfn_to_pfn_cache= , > > > as gfn_to_pfn_cache ensures page presence for the memory access, > > > preventing the contention of the mmap_lock. > > >=20 > > > Signed-off-by: Carsten Stollmaier > >=20 > > Reviewed-by: David Woodhouse > >=20 > > I think this makes sense on its own, as it addresses the specific case > > where KVM is *likely* to be touching a userfaulted (guest) page. And it > > allows us to ditch yet another explicit asm exception handler. >=20 > At the cost of using a gpc, which has its own complexities. >=20 > But I don't understand why steal_time is special.=C2=A0 If the issue is e= ssentially > with handle_userfault(), can't this happen on any KVM uaccess? Theoretically, yes. The steal time is only special in that it happens so *often*, every time the vCPU is scheduled in. We should *also* address the general case, perhaps making by interruptible user access functions as discussed. But this solves the immediate issue which is being observed, *and* lets us ditch the last explicit asm exception handling in kvm/x86.c which is why I think it's worth doing anyway, even if there's an upcoming fix for the general case. --=-Z0KpPo4xLge13VdjKAaC Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCEkQw ggYQMIID+KADAgECAhBNlCwQ1DvglAnFgS06KwZPMA0GCSqGSIb3DQEBDAUAMIGIMQswCQYDVQQG EwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IFJTQSBDZXJ0aWZpY2F0 aW9uIEF1dGhvcml0eTAeFw0xODExMDIwMDAwMDBaFw0zMDEyMzEyMzU5NTlaMIGWMQswCQYDVQQG EwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYD VQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50 aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjztlApB/975Rrno1jvm2pK/KxBOqhq8gr2+JhwpKirSzZxQgT9tlC7zl6hn1fXjSo5MqXUf ItMltrMaXqcESJuK8dtK56NCSrq4iDKaKq9NxOXFmqXX2zN8HHGjQ2b2Xv0v1L5Nk1MQPKA19xeW QcpGEGFUUd0kN+oHox+L9aV1rjfNiCj3bJk6kJaOPabPi2503nn/ITX5e8WfPnGw4VuZ79Khj1YB rf24k5Ee1sLTHsLtpiK9OjG4iQRBdq6Z/TlVx/hGAez5h36bBJMxqdHLpdwIUkTqT8se3ed0PewD ch/8kHPo5fZl5u1B0ecpq/sDN/5sCG52Ds+QU5O5EwIDAQABo4IBZDCCAWAwHwYDVR0jBBgwFoAU U3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFAnA8vwL2pTbX/4r36iZQs/J4K0AMA4GA1Ud DwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF BQcDBDARBgNVHSAECjAIMAYGBFUdIAAwUAYDVR0fBEkwRzBFoEOgQYY/aHR0cDovL2NybC51c2Vy dHJ1c3QuY29tL1VTRVJUcnVzdFJTQUNlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMHYGCCsGAQUF BwEBBGowaDA/BggrBgEFBQcwAoYzaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1VTRVJUcnVzdFJT QUFkZFRydXN0Q0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0G CSqGSIb3DQEBDAUAA4ICAQBBRHUAqznCFfXejpVtMnFojADdF9d6HBA4kMjjsb0XMZHztuOCtKF+ xswhh2GqkW5JQrM8zVlU+A2VP72Ky2nlRA1GwmIPgou74TZ/XTarHG8zdMSgaDrkVYzz1g3nIVO9 IHk96VwsacIvBF8JfqIs+8aWH2PfSUrNxP6Ys7U0sZYx4rXD6+cqFq/ZW5BUfClN/rhk2ddQXyn7 kkmka2RQb9d90nmNHdgKrwfQ49mQ2hWQNDkJJIXwKjYA6VUR/fZUFeCUisdDe/0ABLTI+jheXUV1 eoYV7lNwNBKpeHdNuO6Aacb533JlfeUHxvBz9OfYWUiXu09sMAviM11Q0DuMZ5760CdO2VnpsXP4 KxaYIhvqPqUMWqRdWyn7crItNkZeroXaecG03i3mM7dkiPaCkgocBg0EBYsbZDZ8bsG3a08LwEsL 1Ygz3SBsyECa0waq4hOf/Z85F2w2ZpXfP+w8q4ifwO90SGZZV+HR/Jh6rEaVPDRF/CEGVqR1hiuQ OZ1YL5ezMTX0ZSLwrymUE0pwi/KDaiYB15uswgeIAcA6JzPFf9pLkAFFWs1QNyN++niFhsM47qod x/PL+5jR87myx5uYdBEQkkDc+lKB1Wct6ucXqm2EmsaQ0M95QjTmy+rDWjkDYdw3Ms6mSWE3Bn7i 5ZgtwCLXgAIe5W8mybM2JzCCBhQwggT8oAMCAQICEQDGvhmWZ0DEAx0oURL6O6l+MA0GCSqGSIb3 DQEBCwUAMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28g UlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMB4XDTIyMDEwNzAw MDAwMFoXDTI1MDEwNjIzNTk1OVowJDEiMCAGCSqGSIb3DQEJARYTZHdtdzJAaW5mcmFkZWFkLm9y ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALQ3GpC2bomUqk+91wLYBzDMcCj5C9m6 oZaHwvmIdXftOgTbCJXADo6G9T7BBAebw2JV38EINgKpy/ZHh7htyAkWYVoFsFPrwHounto8xTsy SSePMiPlmIdQ10BcVSXMUJ3Juu16GlWOnAMJY2oYfEzmE7uT9YgcBqKCo65pTFmOnR/VVbjJk4K2 xE34GC2nAdUQkPFuyaFisicc6HRMOYXPuF0DuwITEKnjxgNjP+qDrh0db7PAjO1D4d5ftfrsf+kd RR4gKVGSk8Tz2WwvtLAroJM4nXjNPIBJNT4w/FWWc/5qPHJy2U+eITZ5LLE5s45mX2oPFknWqxBo bQZ8a9dsZ3dSPZBvE9ZrmtFLrVrN4eo1jsXgAp1+p7bkfqd3BgBEmfsYWlBXO8rVXfvPgLs32VdV NZxb/CDWPqBsiYv0Hv3HPsz07j5b+/cVoWqyHDKzkaVbxfq/7auNVRmPB3v5SWEsH8xi4Bez2V9U KxfYCnqsjp8RaC2/khxKt0A552Eaxnz/4ly/2C7wkwTQnBmdlFYhAflWKQ03Ufiu8t3iBE3VJbc2 5oMrglj7TRZrmKq3CkbFnX0fyulB+kHimrt6PIWn7kgyl9aelIl6vtbhMA+l0nfrsORMa4kobqQ5 C5rveVgmcIad67EDa+UqEKy/GltUwlSh6xy+TrK1tzDvAgMBAAGjggHMMIIByDAfBgNVHSMEGDAW gBQJwPL8C9qU21/+K9+omULPyeCtADAdBgNVHQ4EFgQUzMeDMcimo0oz8o1R1Nver3ZVpSkwDgYD VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMC MEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQEBMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGln by5jb20vQ1BTMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGln b1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcmwwgYoGCCsGAQUFBwEB BH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50 QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29j c3Auc2VjdGlnby5jb20wHgYDVR0RBBcwFYETZHdtdzJAaW5mcmFkZWFkLm9yZzANBgkqhkiG9w0B AQsFAAOCAQEAyW6MUir5dm495teKqAQjDJwuFCi35h4xgnQvQ/fzPXmtR9t54rpmI2TfyvcKgOXp qa7BGXNFfh1JsqexVkIqZP9uWB2J+uVMD+XZEs/KYNNX2PvIlSPrzIB4Z2wyIGQpaPLlYflrrVFK v9CjT2zdqvy2maK7HKOQRt3BiJbVG5lRiwbbygldcALEV9ChWFfgSXvrWDZspnU3Gjw/rMHrGnql Htlyebp3pf3fSS9kzQ1FVtVIDrL6eqhTwJxe+pXSMMqFiN0whpBtXdyDjzBtQTaZJ7zTT/vlehc/ tDuqZwGHm/YJy883Ll+GP3NvOkgaRGWEuYWJJ6hFCkXYjyR9IzCCBhQwggT8oAMCAQICEQDGvhmW Z0DEAx0oURL6O6l+MA0GCSqGSIb3DQEBCwUAMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0 ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl IEVtYWlsIENBMB4XDTIyMDEwNzAwMDAwMFoXDTI1MDEwNjIzNTk1OVowJDEiMCAGCSqGSIb3DQEJ ARYTZHdtdzJAaW5mcmFkZWFkLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALQ3 GpC2bomUqk+91wLYBzDMcCj5C9m6oZaHwvmIdXftOgTbCJXADo6G9T7BBAebw2JV38EINgKpy/ZH h7htyAkWYVoFsFPrwHounto8xTsySSePMiPlmIdQ10BcVSXMUJ3Juu16GlWOnAMJY2oYfEzmE7uT 9YgcBqKCo65pTFmOnR/VVbjJk4K2xE34GC2nAdUQkPFuyaFisicc6HRMOYXPuF0DuwITEKnjxgNj P+qDrh0db7PAjO1D4d5ftfrsf+kdRR4gKVGSk8Tz2WwvtLAroJM4nXjNPIBJNT4w/FWWc/5qPHJy 2U+eITZ5LLE5s45mX2oPFknWqxBobQZ8a9dsZ3dSPZBvE9ZrmtFLrVrN4eo1jsXgAp1+p7bkfqd3 BgBEmfsYWlBXO8rVXfvPgLs32VdVNZxb/CDWPqBsiYv0Hv3HPsz07j5b+/cVoWqyHDKzkaVbxfq/ 7auNVRmPB3v5SWEsH8xi4Bez2V9UKxfYCnqsjp8RaC2/khxKt0A552Eaxnz/4ly/2C7wkwTQnBmd lFYhAflWKQ03Ufiu8t3iBE3VJbc25oMrglj7TRZrmKq3CkbFnX0fyulB+kHimrt6PIWn7kgyl9ae lIl6vtbhMA+l0nfrsORMa4kobqQ5C5rveVgmcIad67EDa+UqEKy/GltUwlSh6xy+TrK1tzDvAgMB AAGjggHMMIIByDAfBgNVHSMEGDAWgBQJwPL8C9qU21/+K9+omULPyeCtADAdBgNVHQ4EFgQUzMeD Mcimo0oz8o1R1Nver3ZVpSkwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwQGCCsGAQUFBwMCMEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQEBMCUwIwYIKwYB BQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9j cmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1h aWxDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdv LmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAj BggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wHgYDVR0RBBcwFYETZHdtdzJAaW5m cmFkZWFkLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAyW6MUir5dm495teKqAQjDJwuFCi35h4xgnQv Q/fzPXmtR9t54rpmI2TfyvcKgOXpqa7BGXNFfh1JsqexVkIqZP9uWB2J+uVMD+XZEs/KYNNX2PvI lSPrzIB4Z2wyIGQpaPLlYflrrVFKv9CjT2zdqvy2maK7HKOQRt3BiJbVG5lRiwbbygldcALEV9Ch WFfgSXvrWDZspnU3Gjw/rMHrGnqlHtlyebp3pf3fSS9kzQ1FVtVIDrL6eqhTwJxe+pXSMMqFiN0w hpBtXdyDjzBtQTaZJ7zTT/vlehc/tDuqZwGHm/YJy883Ll+GP3NvOkgaRGWEuYWJJ6hFCkXYjyR9 IzGCBMcwggTDAgEBMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVz dGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMT NVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA xr4ZlmdAxAMdKFES+jupfjANBglghkgBZQMEAgEFAKCCAeswGAYJKoZIhvcNAQkDMQsGCSqGSIb3 DQEHATAcBgkqhkiG9w0BCQUxDxcNMjQwODIwMTAxMTQ4WjAvBgkqhkiG9w0BCQQxIgQgo/Ykd0+y Axu06DyU+IMJJNe+NDc0koLS+GUjWJSqpiQwgb0GCSsGAQQBgjcQBDGBrzCBrDCBljELMAkGA1UE BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIRAMa+GZZnQMQDHShREvo7qX4wgb8GCyqGSIb3 DQEJEAILMYGvoIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVy MRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNl Y3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEAxr4Z lmdAxAMdKFES+jupfjANBgkqhkiG9w0BAQEFAASCAgBlDX7VvSdI6i/FwPvvspgI8qOlH660h6LZ 2vDoingJrGJb7n9moCtackJhWVlEujRLJA8SYo2CbmjzjAqEHZQ9PUaJ14USpoOzNH5Tdj8XA5FR zgLLERrBAepIKZtiSEdfEidw1idt1K60bvGqLvim1jAsgGbeKt5bLPe4NhSsBrOeoz00/gTU4Gz5 bDmX8zlEuz9tA1jMeRLbKFHO2sIXvz/OtruPVaSPcO0SSwyRtW8xYWP+t6EFhvXZBzydIRTS02uY ItEa6mQHnUVlntLNycTHaRH3xLzIp0WT2juKp79D7bpWGll1tQC/v887lgz3UB5fd/gA21BgyXYr nKWRl2NIPcXdAV+ootN1VSQtMARu2dKa2PrSaWbSC38O3UReCmwzxmZgiPp3723KKaSqsVcmGYui g1LYAdCnadxGXXxBY76d/CKoZDY7VMrI+TlwrKhrWf4fYq3Tv/Ii4cjV/ZL2CTd03A3p75eVynzJ T1Ct8RQmY9VhQXAwkSkQo/2izzo2xU+2/Rlzj6U/tcl62jWb69QzPdECBFYrE99Cf6bWIi0/GgjG sV0fdN5/sPzGOh0o8gN7iHsYePHY+fngQGdmvRSFV5e5Y3B6ch/aQw6W9/P/UM1farVH8FUjxKqM evpsA0wtrp7CYq0n8FbKrZ67YAKKuNMZRBspOvdLJgAAAAAAAA== --=-Z0KpPo4xLge13VdjKAaC--