python3-openvswitch2.11-2.11.3-90.el8s >  H `A !F^(*vP`Q2{l9ķ=0 ]A5y!A+WiXq+p??d! ) Gx| (|| | | | "| #|%x|'|*P*x|,h,-(.(/+8/4:94::s}:BG|H|I|XtYZ[\|]|^ebTdeflt|u|vwp|x`|yPĀĄĊCpython3-openvswitch2.112.11.390.el8sOpen vSwitch python3 bindingsPython bindings for the Open vSwitch database`doaarch64-03.rdu2.centos.orgCentOSCentOSASL 2.0CBS System Environment/Daemons daemon/database/utilitieshttp://www.openvswitch.org/linuxaarch64X<&ss8~8..rr<= ` l`2@____ǁ_@__ _t@_P_|\@_a@_G@_;_:q@_3_2@_/@_/@__A@__ L_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@^^V@^>@^@^@^@^h^g@^U @^ P@^ P@^ P@^^^@^@^g@^@^r^@^@]]B]@]@]@]N@]]ʞ])]c@]c@](]{]nU]e@]Ik]6]-@]-@](v@]$]G@] ]:]:\P\O\,@\\@\@\@\@\y\w@\R@\M@\ - 2.11.3-90Open vSwitch CI - 2.11.3-89Michael Santana - 2.11.3-88Open vSwitch CI - 2.11.3-87Open vSwitch CI - 2.11.3-86Open vSwitch CI - 2.11.3-85Open vSwitch CI - 2.11.3-84Timothy Redaelli - 2.11.3-83Open vSwitch CI - 2.11.3-82Open vSwitch CI - 2.11.3-81Open vSwitch CI - 2.11.3-80Open vSwitch CI - 2.11.3-79Open vSwitch CI - 2.11.3-78Open vSwitch CI - 2.11.3-77Open vSwitch CI - 2.11.3-76Open vSwitch CI - 2.11.3-75Open vSwitch CI - 2.11.3-74Timothy Redaelli - 2.11.3-73Open vSwitch CI - 2.11.3-72Open vSwitch CI - 2.11.3-71Open vSwitch CI - 2.11.3-70Open vSwitch CI - 2.11.3-69Open vSwitch CI - 2.11.3-68Open vSwitch CI - 2.11.3-67Flavio Leitner - 2.11.3-66Open vSwitch CI - 2.11.3-65Open vSwitch CI - 2.11.3-64Open vSwitch CI - 2.11.3-63Flavio Leitner - 2.11.3-62Flavio Leitner - 2.11.3-61Flavio Leitner - 2.11.3-60Flavio Leitner - 2.11.3-59Flavio Leitner - 2.11.3-58Flavio Leitner - 2.11.3-57Timothy Redaelli - 2.11.3-56Timothy Redaelli - 2.11.3-55Timothy Redaelli - 2.11.3-54Timothy Redaelli - 2.11.3-53Timothy Redaelli - 2.11.3-52Timothy Redaelli - 2.11.3-51Timothy Redaelli - 2.11.3-50Timothy Redaelli - 2.11.3-49Timothy Redaelli - 2.11.3-48Timothy Redaelli - 2.11.3-47Timothy Redaelli - 2.11.3-46Timothy Redaelli - 2.11.3-45Timothy Redaelli - 2.11.3-44Timothy Redaelli - 2.11.3-43Timothy Redaelli - 2.11.3-42Timothy Redaelli - 2.11.3-41Timothy Redaelli - 2.11.3-40Timothy Redaelli - 2.11.3-39Timothy Redaelli - 2.11.3-38Timothy Redaelli - 2.11.3-37Timothy Redaelli - 2.11.3-36Timothy Redaelli - 2.11.3-35Timothy Redaelli - 2.11.3-34Timothy Redaelli - 2.11.3-33Timothy Redaelli - 2.11.3-32Timothy Redaelli - 2.11.3-31Timothy Redaelli - 2.11.3-30Timothy Redaelli - 2.11.3-29Timothy Redaelli - 2.11.3-28Timothy Redaelli - 2.11.3-27Timothy Redaelli - 2.11.3-26Timothy Redaelli - 2.11.3-25Timothy Redaelli - 2.11.3-24Timothy Redaelli - 2.11.3-23Timothy Redaelli - 2.11.3-22Timothy Redaelli - 2.11.3-21Timothy Redaelli - 2.11.3-20Timothy Redaelli - 2.11.3-19Timothy Redaelli - 2.11.3-18Timothy Redaelli - 2.11.3-17Timothy Redaelli - 2.11.3-16Timothy Redaelli - 2.11.3-15Timothy Redaelli - 2.11.3-14Timothy Redaelli - 2.11.3-13Timothy Redaelli - 2.11.3-12Timothy Redaelli - 2.11.3-11Timothy Redaelli - 2.11.3-10Timothy Redaelli - 2.11.3-9Timothy Redaelli - 2.11.3-8Timothy Redaelli - 2.11.3-7Timothy Redaelli - 2.11.3-6Timothy Redaelli - 2.11.3-5Timothy Redaelli - 2.11.3-4Timothy Redaelli - 2.11.3-3Timothy Redaelli - 2.11.3-2Timothy Redaelli - 2.11.3-1Timothy Redaelli - 2.11.0-56.20200327gita4efc59Aaron Conole - 2.11.0-55.20200327gita4efc59Maxime Coquelin - 2.11.0-54.20200327gita4efc59Aaron Conole - 2.11.0-53.20200327gita4efc59Timothy Redaelli - 2.11.0-52.20200327gita4efc59Timothy Redaelli - 2.11.0-51.20200327gita4efc59Timothy Redaelli - 2.11.0-50Timothy Redaelli - 2.11.0-49Maxime Coquelin - 2.11.0-48Timothy Redaelli - 2.11.0-47Timothy Redaelli - 2.11.0-46Timothy Redaelli - 2.11.0-45Timothy Redaelli - 2.11.0-44Timothy Redaelli - 2.11.0-43Eelco Chaudron - 2.11.0-42Kevin Traynor - 2.11.0-41Adrián Moreno - 2.11.0-40Numan Siddique - 2.11.0-39David Marchand - 2.11.0-38Eelco Chaudron - 2.11.0-37Eelco Chaudron - 2.11.0-36Timothy Redaelli - 2.11.0-35Timothy Redaelli - 2.11.0-34Aaron Conole - 2.11.0-33Aaron Conole - 2.11.0-32Aaron Conole - 2.11.0-31Timothy Redaelli - 2.11.0-30Lorenzo Bianconi - 2.11.0-29David Marchand - 2.11.0-28Numan Siddique - 2.11.0-27Numan Siddique - 2.11.0-26Dumitru Ceara - 2.11.0-25Aaron Conole - 2.11.0-24Kevin Traynor - 2.11.0-23Flavio Leitner - 2.11.0-22Flavio Leitner - 2.11.0-21David Marchand - 2.11.0-20Numan Siddique - 2.11.0-19Timothy Redaelli - 2.11.0-18Timothy Redaelli - 2.11.0-17Timothy Redaelli - 2.11.0-16David Marchand - 2.11.0-15Timothy Redaelli - 2.11.0-14Timothy Redaelli - 2.11.0-13Maxime Coquelin - 2.11.0-12Flavio Leitner - 2.11.0-11Pablo Cascón - 2.11.0-10Numan Siddique - 2.11.0-9Kevin Traynor - 2.11.0-8David Marchand - 2.11.0-7Timothy Redaelli - 2.11.0-6Flavio Leitner - 2.11.0-5Davide Caratti - 2.11.0-4Timothy Redaelli - 2.11.0-3Timothy Redaelli - 2.11.0-2Timothy Redaelli - 2.11.0-1Open vSwitch Bot - 2.11.0-0.20190129gitd3a10dbOpen vSwitch Bot - 2.11.0-0.20190126gitd4ff5b2Timothy Redaelli - 2.11.0-0.20190114gitadb3f0bLorenzo Bianconi - 2.10.0-42Timothy Redaelli - 2.10.0-41Timothy Redaelli - 2.10.0-40Lorenzo Bianconi - 2.10.0-39Numan Siddique - 2.10.0-38David Marchand - 2.10.0-37Numan Siddique - 2.10.0-36Timothy Redaelli - 2.10.0-35Numan Siddique - 2.10.0-34Eelco Chaudron - 2.10.0-33Timothy Redaelli - 2.10.0-32Timothy Redaelli - 2.10.0-31Lorenzo Bianconi - 2.10.0-30Eelco Chaudron - 2.10.0-29Lorenzo Bianconi - 2.10.0-28Timothy Redaelli - 2.10.0-27Lorenzo Bianconi - 2.10.0-26Timothy Redaelli - 2.10.0-25Timothy Redaelli - 2.10.0-24Kevin Traynor - 2.10.0-23Timothy Redaelli - 2.10.0-22Numan Siddique - 2.10.0-21Timothy Redaelli - 2.10.0-20Timothy Redaelli - 2.10.0-19Timothy Redaelli - 2.10.0-18Numan Siddique - 2.10.0-17Numan Siddique - 2.10.0-16Numan Siddique - 2.10.0-15Numan Siddique - 2.10.0-14Lorenzo Bianconi - 2.10.0-13Matteo Croce - 2.10.0-12Lorenzo Bianconi - 2.10.0-11Timothy Redaelli - 2.10.0-10Matteo Croce - 2.10.0-9Matteo Croce - 2.10.0-8Matteo Croce - 2.10.0-7Kevin Traynor - 2.10.0-6Timothy Redaelli - 2.10.0-5Flavio Leitner - 2.10.0-4Flavio Leitner - 2.10.0-3Timothy Redaelli - 2.10.0-2Flavio Leitner - 2.10-1Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Aaron Conole - 2.9.0-47Timothy Redaelli - 2.9.0-46Timothy Redaelli - 2.9.0-45Timothy Redaelli - 2.9.0-44Timothy Redaelli - 2.9.0-43Timothy Redaelli - 2.9.0-42Timothy Redaelli - 2.9.0-41Timothy Redaelli - 2.9.0-40Timothy Redaelli - 2.9.0-39Maxime Coquelin - 2.9.0-38Timothy Redaelli - 2.9.0-37Timothy Redaelli - 2.9.0-36Lorenzo Bianconi - 2.9.0-35Timothy Redaelli - 2.9.0-34Timothy Redaelli - 2.9.0-33Aaron Conole - 2.9.0-32Timothy Redaelli - 2.9.0-31Timothy Redaelli - 2.9.0-30Timothy Redaelli - 2.9.0-29Kevin Traynor - 2.9.0-28Aaron Conole - 2.9.0-27Aaron Conole - 2.9.0-26Jakub Sitnicki - 2.9.0-25Aaron Conole - 2.9.0-24Timothy Redaelli - 2.9.0-23Timothy Redaelli - 2.9.0-22Timothy Redaelli - 2.9.0-21Timothy Redaelli - 2.9.0-20Kevin Traynor - 2.9.0-19Davide Caratti - 2.9.0-18Timothy Redaelli - 2.9.0-17Timothy Redaelli - 2.9.0-16Timothy Redaelli - 2.9.0-14Timothy Redaelli - 2.9.0-13Flavio Leitner - 2.9.0-12Timothy Redaelli - 2.9.0-11Timothy Redaelli - 2.9.0-10Timothy Redaelli - 2.9.0-9Eric Garver - 2.9.0-8Timothy Redaelli - 2.9.0-7Aaron Conole - 2.9.0-6Matteo Croce - 2.9.0-5Timothy Redaelli - 2.9.0-4Timothy Redaelli - 2.9.0-3Timothy Redaelli - 2.9.0-1Timothy Redaelli - 2.7.3-3.git20180112Timothy Redaelli - 2.7.3-2.git20171010Timothy Redaelli - 2.7.3-1.git20171010Kevin Traynor - 2.7.2-10.git20170914Timothy Redaelli - 2.7.2-9.git20170914Timothy Redaelli - 2.7.2-8.git20170719Aaron Conole - 2.7.2-7.git20170719Aaron Conole - 2.7.2-6.git20170719Aaron Conole - 2.7.2-5.git20170719John W. Linville - 2.7.2-4.git20170719John W. Linville - 2.7.2-3.git20170719John W. Linville - 2.7.2-2.git20170719Timothy Redaelli - 2.7.2-1.git20170719Timothy Redaelli - 2.7.1-1.git20170710Timothy Redaelli - 2.6.1-20.git20161206Lance Richardson - 2.6.1-19.git20161206Timothy Redaelli - 2.6.1-18.git20161206Timothy Redaelli - 2.6.1-17.git20161206Eric Garver - 2.6.1-16.git20161206Kevin Traynor - 2.6.1-15.git20161206Lance Richardson - 2.6.1-14.git20161206Timothy Redaelli - 2.6.1-13.git20161206Aaron Conole - 2.6.1-12.git20161206Lance Richardson - 2.6.1-11.git20161206Aaron Conole - 2.6.1-10.git20161206Lance Richardson - 2.6.1-9.git20161206Timothy Redaelli - 2.6.1-8.git20161206Lance Richardson - 2.6.1-7.git20161206Aaron Conole - 2.6.1-6.git20161206Timothy Redaelli - 2.6.1-5.git20161206Flavio Leitner 2.5.0-23.git20160727Lance Richardson 2.6.1-3.git20161206Lance Richardson 2.6.1-2.git20161206Kevin Traynor 2.6.1-1.git20161206Flavio Leitner 2.5.0-22.git20160727Flavio Leitner 2.5.0-21.git20160727Flavio Leitner 2.5.0-20.git20160727Aaron Conole - 2.5.0-19.git20160727Aaron Conole - 2.5.0-18.git20160727Flavio Leitner - 2.5.0-17.git20160727Flavio Leitner - 2.5.0-16.git20160727Flavio Leitner - 2.5.0-15.git20160727Panu Matilainen - 2.5.0-14.git20160727Panu Matilainen - 2.5.0-13.git20160727Panu Matilainen - 2.5.0-12.git20160727Panu Matilainen - 2.5.0-11.git20160727Panu Matilainen - 2.5.0-10.git20160727Flavio Leitner - 2.5.0-9.git20160727Flavio Leitner - 2.5.0-8.git20160727Flavio Leitner - 2.5.0-7.git20160727Flavio Leitner - 2.5.0-6.git20160628Flavio Leitner - 2.5.0-5.git20160628Panu Matilainen - 2.5.0-4.git20160628Panu Matilainen - 2.5.0-4Flavio Leitner - 2.5.0-3Panu Matilainen - 2.5.0-2Panu Matilainen - 2.5.0-1Panu Matilainen Flavio Leitner Panu Matilainen Ralf Spenneberg - Merging upstream branch-2.11 [RH gerrit: aac87adaf1] Commit list: 40682157c9 ovsdb-server: Fix memleak when failing to read storage.- Merging upstream branch-2.11 [RH gerrit: 1d6f0bd658] Commit list: 75907f8a11 ofp-group: Use big-enough buffer in ofputil_format_group().- Make changelog in spec file more informative [RH gerrit: 99ad8d96f6] This is done by adding the body of the commit message to the changelong. The body is indented and has extra spacing separating each entry in the changelog to make each one more discernible since now they could be longer Signed-off-by: Michael Santana - Merging upstream branch-2.11 [RH gerrit: 560df0228c] Commit list: 8710c3e5ce python: Send notifications after the transaction ends. bf3ef6a869 Handle refTable values with setkey()- Merging upstream branch-2.11 [RH gerrit: 67070c0625] Commit list: e9ad1da4f4 Prepare for 2.11.8. bbc2705315 Set release date for 2.11.7. 0f475a5cd4 ovsdb-client: Fix needs-conversion when SERVER is explicitly specified. 46299c1c72 dpdk: Use DPDK 18.11.11 release. 65c61b0c23 ofp-actions: Fix use-after-free while decoding RAW_ENCAP.- Merging upstream branch-2.11 [RH gerrit: 4351a9b512] Commit list: 9b0307cf7d Prepare for 2.11.7. 5d07b5da2e Set release date for 2.11.6. 018d35b7d9 cirrus: Use FreeBSD 12.2. abd7a45765 flow: Support extra padding length.- Merging upstream branch-2.11 [RH gerrit: a4f1272cee] Commit list: 5a62ed8002 dist-docs: Include manpages generated from rST.- flow: Support extra padding length. [RH gerrit: 35a473f35c] Although not required, padding can be optionally added until the packet length is MTU bytes. A packet with extra padding currently fails sanity checks. Fixes: fa8d9001a624 ("miniflow_extract: Properly handle small IP packets.") Reported-by: Joakim Hindersson Acked-by: Ilya Maximets Signed-off-by: Flavio Leitner - Merging upstream branch-2.11 [RH gerrit: 2e04729b43] Commit list: 1faf6f507c tc: Fix mpls bottom of stack bit mask reporting.- Merging upstream branch-2.11 [RH gerrit: a6fede58cb] Commit list: 6747878b7a python: Add 'six' to list of install requirements.- Merging upstream branch-2.11 [RH gerrit: b8354bd062] Commit list: cd0f896c01 github: Fix Ubuntu package installation. 5804c31209 odp-util: Fix abort while formatting nsh actions.- Merging upstream branch-2.11 [RH gerrit: f41ec7e05b] Commit list: d9e429cc49 Prepare for 2.11.6. 634e6e41cd Set release date for 2.11.5.- Merging upstream branch-2.11 [RH gerrit: 68170d878c] Commit list: dc222c3cf1 lldp: do not leak memory on multiple instances of TLVs 569595898b ofproto-dpif: Uninitialize 'xlate_cache' to free resources- Merging upstream branch-2.11 [RH gerrit: 10478e3802] Commit list: 008414b6f0 ovs-monitor-ipsec: Fix active connection regex.- Merging upstream branch-2.11 [RH gerrit: aa80d76b09] Commit list: 026339bc76 odp-util: Fix netlink message overflow with userdata. 29077624db ovsdb-tool: Fix datum leak in the show-log command. 041d001019 ofproto-dpif-xlate: Stop forwarding MLD reports to group ports.- Merging upstream branch-2.11 [RH gerrit: 838f461d65] Commit list: abe75f4938 datapath: ovs_ct_exit to be done under ovs_lock 884800683f compat: rcu: Add support for consolidated-RCU reader checking 090c694ac7 tests: Add overflow test for the sha1 library. 7bcf93452e travis: Remove support for Travis CI. a29cda9b26 github: Add GitHub Actions workflow. a9748802e0 ovsdb-cluster.at: Fix infinite loop in torture tests.- Merging upstream branch-2.11 [RH gerrit: 757d6ce62c] Commit list: 1dae577d74 ovsdb-idl: Fix *_is_new() IDL functions. 709b548549 compat: Fix compile warning. 8bd0dadd04 compat: Remove stale code. 9414a66816 tests: Add parse-flow tests for MPLS fields. 00ec8e5cb9 ofp-actions: Fix userspace support for mpls_ttl. 655e9aa784 python: Don't raise an Exception on failure to connect via SSL. 1cf4245ace lldp: correctly increase discarded count 330d64d036 lldp: increase statsTLVsUnrecognizedTotal on unknown TLV c00a829e45 lldp: fix a buffer overflow when handling management address TLV 9aed58b5f1 lldp: Fix size of PEEK_DISCARD_UINT32() 2c0bbbacf3 lldp: validate a bit more received LLDP frames 72aa3deacf sha1: Fix algorithm for data bigger than 512 megabytes. 7d52af2228 odp-util: Fix overflow of nested netlink attributes.- redhat: Explicitly define __python [RH gerrit: 045337a5c8] See https://fedoraproject.org/wiki/Changes/PythonMacroError- Merging upstream branch-2.11 [RH gerrit: e835b37ab3] Commit list: 684e43b4d8 raft: Fix error leak on failure while saving snapshot.- Merging upstream branch-2.11 [RH gerrit: a11c3da9f7] Commit list: cc81b50a60 ofp-ed-props: Fix using uninitialized padding for NSH encap actions.- Merging upstream branch-2.11 [RH gerrit: 2a26d61978] Commit list: 3cc79bbc13 system-userspace-packet-type-aware.at: Wait for ip address updates. 2deed05096 netdev-dpdk: Don't set rx mq mode for net_virtio.- Merging upstream branch-2.11 [RH gerrit: e31b9384be] Commit list: 5ceafdc389 docs: Add flow control on i40e issue- Merging upstream branch-2.11 [RH gerrit: a43432762b] Commit list: dfcebfcc2f cirrus: Use FreeBSD 11.4. 9e53a8a76b classifier: Fix use of uninitialized value. 30387b61ac rhel: Fix logrotate group when dpdk is enabled.- Merging upstream branch-2.11 [RH gerrit: dd4802fb0c] Commit list: 1b842af7ad ovs-dpctl-top: Skip "eth()" element. 9ff2a5a115 meta-flow: fix a typo in "MPLS Bottom of Stack Field" paragraph.- pkgtool: Use git-branch to retrieve the name. [RH gerrit: 7240e67479] The name-rev can return any symbolic name for ref, whether it is a branch or a tag. Use git branch --show-current instead.- Merging upstream branch-2.11 [RH gerrit: b16596dda3] Commit list: 05bbdfceb7 netdev-offload-dpdk: Fix for broken ethernet matching HWOL for XL710NIC.- Merging upstream branch-2.11 [RH gerrit: 7b48e66922] Commit list: e38b412dcb acinclude: Fix build with kernels with prandom* moved to prandom.h.- Merging upstream branch-2.11 [RH gerrit: 9ae7cb0a10] Commit list: 218ab4f731 Prepare for 2.11.5. adf1b5c390 Set release date for 2.11.4. 1210688623 datapath-windows: Update flow key in SET action d04e409f39 dpctl: Fix memory leak in dpctl_dump_flows() 5d7a08db86 ovs-router: Fix flushing of local routes.- redhat: Add support to custom RPM releases. [RH gerrit: 570434c6c2] This commit allows the developer to specify a custom release string to be appended to package NVR. If the custom release is 'bz123456', the final release would look like -Y.bz123456.X where Y is the number of changes until the branch was created, and X is the number of changes after that.- pkgtool: Use OVS static version in package NVR. [RH gerrit: 2ed240a84c] The package NVR must coincide with the tarball version.- Merge branch 'fast-datapath-rhel-7' into fast-datapath-rhel-8 [RH gerrit: a2d9792f8c]- Merge branch 'fast-datapath-rhel-7' into fast-datapath-rhel-8 [RH gerrit: c9f7a9e2d3]- spec: Fix configure to use dpdkdir without version. [RH gerrit: 583acc91dd]- redhat: Rename OVSCI job name. [RH gerrit: cbcaa83118] The OVSCI job's name has been renamed to follow a standard.- This is fast-datapath-rhel-8 [RH gerrit: 98f312f126]- bus/pci: fix VF memory access (#1851170) [RH gerrit: fa4d90db57] To fix CVE-2020-12888, the linux vfio-pci module will invalidate mmaps and block MMIO access on disabled memory, it will send a SIGBUS to the application: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abafbc551fdd When the application opens the vfio PCI device, the vfio-pci module will enable the bus memory space through PCI read/write access. According to the PCIe specification, the 'Memory Space Enable' is always zero for VF: Table 9-13 Command Register Changes Bit Location | PF and VF Register Differences | PF | VF | From Base | Attributes | Attributes -------------+--------------------------------+------------+----------- | Memory Space Enable - Does not | | | apply to VFs. Must be hardwired| Base | 0b 1 | to 0b for VFs. VF Memory Space | | | is controlled by the VF MSE bit| | | in the VF Control register. | | -------------+--------------------------------+------------+----------- Afterwards the vfio-pci will initialize its own virtual PCI config space data ('vconfig') by reading the VF's physical PCI config space, then the 'Memory Space Enable' bit in vconfig will always be 0b value. This will make the vfio-pci treat the BAR memory space as disabled, and the SIGBUS will be triggered if access these BARs. By investigation, the VF PCI device *passthrough* into the Guest OS by QEMU has the 'Memory Space Enable' with 1b value. That's because every PCI driver will start to enable the memory space, and this action will be hooked by vfio-pci virtual PCI read/write to set the 'Memory Space Enable' in vconfig space to 1b. So VF runs in guest OS has 'Mem+', but VF runs in host OS has 'Mem-'. Align with PCI working mode in Guest/QEMU/Host, in DPDK, enable the PCI bus memory space explicitly to avoid access on disabled memory. Fixes: 33604c31354a ("vfio: refactor PCI BAR mapping") Cc: stable@dpdk.org Signed-off-by: Haiyue Wang Acked-by: Anatoly Burakov Tested-by: Harman Kalra Tested-by: David Marchand Tested-by: Thierry Martin (cherry picked from commit 54f3fb127d9c265a5724d193e5c7c6db29fb4150) Resolves: #1851170- vhost: fix vring index check (#1831391) [RH gerrit: 8e33084d85] vhost_user_check_and_alloc_queue_pair() is used to extract a vring index from a payload. This function validates the index and is called early on in when performing message handling. Most message handlers depend on it correctly validating the vring index. Depending on the message type the vring index is in different parts of the payload. The function contains a switch/case for each type and copies the index. This is stored in a uint16. This index is then validated. Depending on the message, the source index is an unsigned int. If integer truncation occurs (uint->uint16) the top 16 bits of the index are never validated. When they are used later on (e.g. in vhost_user_set_vring_num() or vhost_user_set_vring_addr()) it can lead to out of bound indexing. The out of bound indexed data gets written to, and hence this can cause memory corruption. This patch fixes this vulnerability by declaring vring index as an unsigned int in vhost_user_check_and_alloc_queue_pair(). Fixes: 160cbc815b41 ("vhost: remove a hack on queue allocation") Cc: stable@dpdk.org This issue has been assigned CVE-2020-10723 Reported-by: Ilja Van Sprundel Signed-off-by: Maxime Coquelin Reviewed-by: Xiaolong Ye Reviewed-by: Ilja Van Sprundel (cherry picked from commit c78d94189dced04def987a17f16097fcb197a186) Resolves: #1831391- vhost: check log mmap offset and size overflow (#1831391) [RH gerrit: 753ae0cf66] vhost_user_set_log_base() is a message handler that is called to handle the VHOST_USER_SET_LOG_BASE message. Its payload contains a 64 bit size and offset. Both are added up and used as a size when calling mmap(). There is no integer overflow check. If an integer overflow occurs a smaller memory map would be created than requested. Since the returned mapping is mapped as writable and used for logging, a memory corruption could occur. Fixes: fbc4d248b198 ("vhost: fix offset while mmaping log base address") This issue has been assigned CVE-2020-10722 Reported-by: Ilja Van Sprundel Signed-off-by: Maxime Coquelin Reviewed-by: Xiaolong Ye Reviewed-by: Ilja Van Sprundel (cherry picked from commit 338f5eae5de73a91ba42951bfe7d1fba898e1aab) Resolves: #1831391- vhost: add device op when notification to guest is sent (#1726579) [RH gerrit: 92715cf99c] This patch adds an operation callback which gets called every time the library is waking up the guest trough an eventfd_write() call. This can be used by 3rd party application, like OVS, to track the number of times interrupts where generated. This might be of interest to find out system-call were called in the fast path. Signed-off-by: Eelco Chaudron Reviewed-by: Maxime Coquelin (cherry picked from commit 039253166a57ee660dd2fbe92ca77fa65154751c) Resolves: #1726579- net/i40e: re-program promiscuous mode on VF interface (#1733402) [RH gerrit: 0fe1f42b5f] During a kernel PF reset, this event is propagated to the VF. The DPDK VF PMD will execute the reset task before the PF is done with his. This results in the admin queue message not being responded to leaving the port in "promiscuous" mode. This patch makes sure the promiscuous mode is configured independently of the current admin state. Signed-off-by: Eelco Chaudron Reviewed-by: Xiao Zhang (cherry picked from commit ddc7cb0d9453e0c0601a01eab1f388eae4c1fb65) Resolves: #1733402- bus/pci: always check IOMMU capabilities (#1711739) [RH gerrit: 0815c39d39] IOMMU capabilities won't change and must be checked even if no PCI device seem to be supported yet when EAL initialised. This is to accommodate with SPDK that registers its drivers after rte_eal_init(), especially on PPC platform where the IOMMU does not support VA. Fixes: 703458e19c16 ("bus/pci: consider only usable devices for IOVA mode") Signed-off-by: David Marchand Reviewed-by: David Christensen Acked-by: Jerin Jacob Tested-by: Jerin Jacob Tested-by: Takeshi Yoshimura (cherry picked from commit 66d3724b2c87e6fcdf3851ca191683696a91b901) Signed-off-by: David Marchand Resolves: #1711739- eal: fix IOVA mode selection as VA for PCI drivers (#1711739) [RH gerrit: 11fbef3c85] The incriminated commit broke the use of RTE_PCI_DRV_IOVA_AS_VA which was intended to mean "driver only supports VA" but had been understood as "driver supports both PA and VA" by most net drivers and used to let dpdk processes to run as non root (which do not have access to physical addresses on recent kernels). The check on physical addresses actually closed the gap for those drivers. We don't need to mark them with RTE_PCI_DRV_IOVA_AS_VA and this flag can retain its intended meaning. Document explicitly its meaning. We can check that a driver requirement wrt to IOVA mode is fulfilled before trying to probe a device. Finally, document the heuristic used to select the IOVA mode and hope that we won't break it again. Fixes: 703458e19c16 ("bus/pci: consider only usable devices for IOVA mode") Signed-off-by: David Marchand Reviewed-by: Jerin Jacob Tested-by: Jerin Jacob Acked-by: Anatoly Burakov (cherry picked from commit b76fafb174d2cd5247c3573bb3d49444e195e760) Signed-off-by: David Marchand Conflicts: drivers/net/avf/avf_ethdev.c drivers/net/ice/ice_ethdev.c drivers/net/mlx4/mlx4.c drivers/net/mlx5/mlx5.c drivers/net/octeontx2/otx2_ethdev.c drivers/raw/ioat/ioat_rawdev.c Resolves: #1711739- bus/pci: consider only usable devices for IOVA mode (#1711739) [RH gerrit: 69f5cb4c56] When selecting the preferred IOVA mode of the pci bus, the current heuristic ("are devices bound?", "are devices bound to UIO?", "are pmd drivers supporting IOVA as VA?" etc..) should honor the device white/blacklist so that an unwanted device does not impact the decision. There is no reason to consider a device which has no driver available. This applies to all OS, so implements this in common code then call a OS specific callback. On Linux side: - the VFIO special considerations should be evaluated only if VFIO support is built, - there is no strong requirement on using VA rather than PA if a driver supports VA, so defaulting to DC in such a case. Signed-off-by: Ben Walker Signed-off-by: David Marchand Reviewed-by: Anatoly Burakov (cherry picked from commit 703458e19c16135143b3f30089e1af66100c82dc) Signed-off-by: David Marchand Conflicts: drivers/bus/pci/linux/pci.c drivers/bus/pci/pci_common.c Resolves: #1711739- eal: compute IOVA mode based on PA availability (#1711739) [RH gerrit: d5e1d2fa50] Currently, if the bus selects IOVA as PA, the memory init can fail when lacking access to physical addresses. This can be quite hard for normal users to understand what is wrong since this is the default behavior. Catch this situation earlier in eal init by validating physical addresses availability, or select IOVA when no clear preferrence had been expressed. The bus code is changed so that it reports when it does not care about the IOVA mode and let the eal init decide. In Linux implementation, rework rte_eal_using_phys_addrs() so that it can be called earlier but still avoid a circular dependency with rte_mem_virt2phys(). In FreeBSD implementation, rte_eal_using_phys_addrs() always returns false, so the detection part is left as is. If librte_kni is compiled in and the KNI kmod is loaded, - if the buses requested VA, force to PA if physical addresses are available as it was done before, - else, keep iova as VA, KNI init will fail later. Signed-off-by: Ben Walker Signed-off-by: David Marchand Acked-by: Anatoly Burakov (cherry picked from commit c2361bab70c56f64e50f07946b1b20bf688d782a) Signed-off-by: David Marchand Resolves: #1711739- netdev-linux: Update LAG in all cases. (#1812892) [RH gerrit: 2763511809] In some cases, when processing a netlink change event, it's possible for an alternate part of OvS (like the IPv6 endpoint processing) to hold an active netdev interface. This creates a race-condition, where sometimes the OvS change processing will take the normal path. This doesn't work because the netdev device object won't actually be enslaved to the ovs-system (for instance, a linux bond) and ingress qdisc entries will be missing. To address this, we update the LAG information in ALL cases where LAG information could come in. Fixes: d22f8927c3c9 ("netdev-linux: monitor and offload LAG slaves to TC") Cc: Marcelo Leitner Cc: John Hurley Acked-by: Roi Dayan Signed-off-by: Aaron Conole Signed-off-by: Ilya Maximets (cherry picked from commit 7a076a53716394742d0ae44652451501ae17335d) Resolves: #1812892- netdev-offload-tc: Re-fetch block ID after probing. (#1812892) [RH gerrit: 83cebd3221] It's possible that block_id could changes after the probe for block support. Therefore, fetch the block_id again after the probe. Fixes: edc2055a2bf7 ("netdev-offload-tc: Flush rules on ingress block when init tc flow api") Cc: Dmytro Linkin Acked-by: Roi Dayan Co-authored-by: Marcelo Leitner Signed-off-by: Marcelo Leitner Signed-off-by: Aaron Conole Signed-off-by: Ilya Maximets (cherry picked from commit 8508a57228560e154963c542823d36d8098e6610) Resolves: #1812892- netdev-offload-tc: Flush rules on ingress block when init tc flow api (#1812892) [RH gerrit: e5d7d5ec24] OVS can fail to attach ingress block on iface when init tc flow api, if block already exist with rules on it and is shared with other iface. Fix by flush all existing rules on the ingress block prior to deleting it. Fixes: 093c9458fb02 ("tc: allow offloading of block ids") Signed-off-by: Dmytro Linkin Acked-by: Raed Salem Acked-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit edc2055a2bf73258d5731a8f8853397190348b04) Resolves: #1812892- netdev-vport: Use the dst_port in tunnel netdev name (#1727599) [RH gerrit: f4a6fb7574] If tunnel device dst_port is not the default one, "ovs-dpctl dump-flows" will fail. The error message for vxlan is: netdev_linux|INFO|ioctl(SIOCGIFINDEX) on vxlan_sys_4789 device failed: No such device That's because when calling netdev_vport_construct() for netdev vxlan_sys_xxxx, the default dst_port is used. Actually, the dst_port value is in the netdev name. Use it to avoid the error. Signed-off-by: Chris Mi Reviewed-by: Roi Dayan Signed-off-by: Ben Pfaff (cherry picked from commit 6998788197e23c409a6b6cecaa30867ff6d40928) Resolves: #1727599- lib/tc: Fix flow dump for tunnel id equal zero (#1732305) [RH gerrit: 765ba1d1c0] Tunnel id 0 is not printed unless tunnel flag FLOW_TNL_F_KEY is set. Fix that by always setting FLOW_TNL_F_KEY when tunnel id is valid. Fixes: 0227bf092ee6 ("lib/tc: Support optional tunnel id") Signed-off-by: Dmytro Linkin Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 36e50679a6517ee1ec6ed9e4cc83293279a5fffc) Resolves: #1732305- lib/tc: Support optional tunnel id (#1732305) [RH gerrit: 42f09fe96f] Currently the TC tunnel_key action is always initialized with the given tunnel id value. However, some tunneling protocols define the tunnel id as an optional field. This patch initializes the id field of tunnel_key:set and tunnel_key:unset only if a value is provided. In the case that a tunnel key value is not provided by the user the key flag will not be set. Signed-off-by: Adi Nissim Acked-by: Paul Blakey Signed-off-by: Simon Horman (cherry picked from commit 0227bf092ee6b5d18e2b79493d44769cb37ecc98) Resolves: #1732305- tc: Set 'no_percpu' flag for compatible actions (#1780690) [RH gerrit: 42f07f6bd8] Recent changes in Linux kernel TC action subsystem introduced new TCA_ACT_FLAGS_NO_PERCPU_STATS flag. The purpose of the flag is to request action implementation to skip allocating action stats with expensive percpu allocator and use regular built-in action stats instead. Such approach significantly improves rule insertion rate and reduce memory usage for hardware-offloaded rules that don't need benefits provided by percpu allocated stats (improved software TC fast-path performance). Set the flag for all compatible actions. Modify acinclude.m4 to use OVS-internal pkt_cls.h implementation when TCA_ACT_FLAGS is not defined by kernel headers and to manually define struct nla_bitfield32 in netlink.h (new file) when it is not defined by kernel headers. Signed-off-by: Vlad Buslov Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 292d5bd9bb344527e0da19433cf3e51f8a24058c) Resolves: #1780690- rhel: let *-ctl handle runtime directory (#1785586) [RH gerrit: c3763ec916] Recent versions of systemd restores RuntimeDirectory ownership to the unit's User in between execution of *Exec directives (see [1]). Using ExecStartPre to reset RuntimeDirectory ownership to OVS_USER no longer works as expected. The ctl scripts already handle creation of the runtime directory with correct ownership and permissions so we can basically remove RuntimeDirectory from systemd unit file. There is still need to handle ownsership to cover some upgrade scenarios, but success of that will be optional as the directory itself wont exist at first time run. [1] https://github.com/systemd/systemd/issues/12713 Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 7a65e5a9252ac06df62707a571931f501747ecfc) Resolves: #1785586- rhel: set useropts optional for ovsdb-server (#1785586) [RH gerrit: 77bed8f0e4] systemd assesses the presssence of all EnvironmentFile before execution of Exec* directives, thus useropts needs to be optional even though it will always be created at ExecStartPre. Fixes: 94e1e8be3187 ("rhel: run ovn with the same user as ovs") Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 0186c3807cc4500c5699fcf034df3a995c34885c) Resolves: #1785586- rhel: run ovn with the same user as ovs (#1785586) [RH gerrit: 8f5f39b4af] Both ovn and ovs share the same log and run directories which are owned by the user running ovs so it makes sense that ovn runs under that user too to diminish security concerns and possible problems with log rotation. Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 94e1e8be3187a4824ac27ed843396dde5cc02d13) Resolves: #1785586- rhel: secure openvswitch useropts (#1785586) [RH gerrit: 71154ad26f] The openvswitch useropts file is being stored in a directory where the openvswitch user has write permissions. The openvswitch user can then manipulate the file to change the user under which switchd daemon runs. This patch changes the file to /var/openvswitch.useropts preventing any manipulation. Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 27e25e18c1f4cdd789d5670ab9e01dcf02a86b6f) Resolves: #1785586- userspace: Improved packet drop statistics. (#1726568) [RH gerrit: a6b7a37be8] Currently OVS maintains explicit packet drop/error counters only on port level. Packets that are dropped as part of normal OpenFlow processing are counted in flow stats of “drop” flows or as table misses in table stats. These can only be interpreted by controllers that know the semantics of the configured OpenFlow pipeline. Without that knowledge, it is impossible for an OVS user to obtain e.g. the total number of packets dropped due to OpenFlow rules. Furthermore, there are numerous other reasons for which packets can be dropped by OVS slow path that are not related to the OpenFlow pipeline. The generated datapath flow entries include a drop action to avoid further expensive upcalls to the slow path, but subsequent packets dropped by the datapath are not accounted anywhere. Finally, the datapath itself drops packets in certain error situations. Also, these drops are today not accounted for.This makes it difficult for OVS users to monitor packet drop in an OVS instance and to alert a management system in case of a unexpected increase of such drops. Also OVS trouble-shooters face difficulties in analysing packet drops. With this patch we implement following changes to address the issues mentioned above. 1. Identify and account all the silent packet drop scenarios 2. Display these drops in ovs-appctl coverage/show Co-authored-by: Rohith Basavaraja Co-authored-by: Keshav Gupta Signed-off-by: Anju Thomas Signed-off-by: Rohith Basavaraja Signed-off-by: Keshav Gupta Acked-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit a13a0209750c424556189796061c40d08c689467) Resolves: #1726568- netdev-dpdk: Fix sw stats perf drop. (#1790841) [RH gerrit: 54f4571750] Accessing the sw stats in the vhost datapath of a PVP test can incur a performance drop of ~2%. Most of the time these stats will just be getting zero added to them. By checking if there is a non-zero update first, we can avoid accessing them when they won't be updated and avoid the performance drop. Fixes: 2f862c712e52 ("netdev-dpdk: Detailed packet drop statistics.") Signed-off-by: Kevin Traynor Acked-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 6d77abf4f7ea5596ba8c4a7a27768e83e80a7e46) Resolves: #1790841- netdev-dpdk: Detailed packet drop statistics. (#1790841) [RH gerrit: 1e1b33541a] OVS may be unable to transmit packets for multiple reasons on the userspace datapath and today there is a single counter to track packets dropped due to any of those reasons. This patch adds custom software stats for the different reasons packets may be dropped during tx/rx on the userspace datapath in OVS. - MTU drops : drops that occur due to a too large packet size - Qos drops : drops that occur due to egress/ingress QOS - Tx failures: drops as returned by the DPDK PMD send function Note that the reason for tx failures is not specified in OVS. In practice for vhost ports it is most common that tx failures are because there are not enough available descriptors, which is usually caused by misconfiguration of the guest queues and/or because the guest is not consuming packets fast enough from the queues. These counters are displayed along with other stats in "ovs-vsctl get interface statistics" command and are available for dpdk and vhostuser/vhostuserclient ports. Also the existing "tx_retries" counter for vhost ports has been renamed to "ovs_tx_retries", so that all the custom statistics that OVS accumulates itself will have the prefix "ovs_". This will prevent any custom stats names overlapping with driver/HW stats. Acked-by: Kevin Traynor Signed-off-by: Sriram Vatala Signed-off-by: Ilya Maximets (cherry picked from commit 2f862c712e52fe524e441ab58bb042dcb20214ee) Resolves: #1790841- netdev-dpdk: Reuse vhost function for dpdk ETH custom stats. (#1790841) [RH gerrit: e0d00f70c5] This is yet another refactoring for upcoming detailed drop stats. It allows to use single function for all the software calculated statistics in netdev-dpdk for both vhost and ETH ports. UINT64_MAX used as a marker for non-supported statistics in a same way as it's done in bridge.c for common netdev stats. Co-authored-by: Sriram Vatala Signed-off-by: Ilya Maximets Signed-off-by: Sriram Vatala Acked-by: Kevin Traynor (cherry picked from commit b99ab8aaaf9f6057ddbc332c76ab774dbfd4ccc3) Resolves: #1790841- netdev-dpdk: Refactor vhost custom stats for extensibility. (#1790841) [RH gerrit: b084d7a5c2] vHost interfaces currently has only one custom statistic, but there might be others in the near future. This refactoring makes the code work in the same way as it done for dpdk and afxdp stats to keep the common style over the different code places and makes it easily extensible for the new stats addition. Signed-off-by: Ilya Maximets Reviewed-by: David Marchand Acked-by: Kevin Traynor (cherry picked from commit 5c7ba90d8189ee7b35a1723d5a76dc205720af50) Resolves: #1790841- netdev-dpdk: Fix not reporting rx_oversize_errors in stats. (#1790841) [RH gerrit: 26017f85c8] There is a big code duplication issue with DPDK xstats that led to missed "rx_oversize_errors" statistics. It's defined but not used. Fix that by actually using this stat along with code refactoring that will allow us to not make same mistakes in the future. Macro definitions are perfectly suitable to automate code generation in such cases and already used in a couple of places in OVS for similar purposes. Signed-off-by: Ilya Maximets Reviewed-by: David Marchand Acked-by: Kevin Traynor Acked-by: Ian Stokes (cherry picked from commit 18366d165162051463fd28e9f46d1c2cbe355eb3) Resolves: #1790841- ovsdb replication: Provide option to configure probe interval. (#1788800) [RH gerrit: e8a669ead7] When ovsdb-server is in backup mode and connects to the active ovsdb-server for replication, and if takes more than 5 seconds to get the dump of the whole database, it will drop the connection soon after as the default probe interval is 5 seconds. This results in a snowball effect of reconnections to the active ovsdb-server. This patch handles or mitigates this issue by setting the default probe interval value to 60 seconds and provide the option to configure this value from the unixctl command. Other option could be increase the value of 'RECONNECT_DEFAULT_PROBE_INTERVAL' to a higher value. Acked-by: Mark Michelson Acked-by: Dumitru Ceara Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry-picked from commit e988b8abeec9d4be94b519c5d4ed4586ff71fde0) Resolves: #1788800- netdev-dpdk: Add coverage counter to count vhost IRQs. (#1726579) [RH gerrit: 3c3997eb0a] When the dpdk vhost library executes an eventfd_write() call, i.e. waking up the guest, a new callback will be called. This patch adds the callback to count the number of interrupts sent to the VM to track the number of times interrupts where generated. This might be of interest to find out system-calls were called in the DPDK fast path. The coverage counter is called "vhost_notification" and can be read with: $ ovs-appctl coverage/read-counter vhost_notification 13238319 Signed-off-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 3d56e4ac445d17e69484a95b319ac578e3580b65) Signed-off-by: David Marchand Conflicts: lib/netdev-dpdk.c Resolves: #1726579- netdev-dpdk: add support for the RTE_ETH_EVENT_INTR_RESET event. (#1719644) [RH gerrit: ca1a1a8e1c] Currently, OVS does not register and therefore not handle the interface reset event from the DPDK framework. This would cause a problem in cases where a VF is used as an interface, and its configuration changes. As an example in the following scenario the MAC change is not detected/acted upon until OVS is restarted without the patch applied: $ echo 1 > /sys/bus/pci/devices/0000:05:00.1/sriov_numvfs $ ovs-vsctl add-port ovs_pvp_br0 dpdk0 -- \ set Interface dpdk0 type=dpdk -- \ set Interface dpdk0 options:dpdk-devargs=0000:05:0a.0 $ ip link set p5p2 vf 0 mac 52:54:00:92:d3:33 Signed-off-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 988fd46391495e1ff92fa0d81204ae712e89ef9d) Resolves: #1719644- bridge: Allow manual notifications about interfaces' updates. (#1719644) [RH gerrit: f58b680888] Sometimes interface updates could happen in a way ifnotifier is not able to catch. For example some heavy operations (device reset) in netdev-dpdk could require re-applying of the bridge configuration. For this purpose new manual notifier introduced. Its function 'if_notifier_manual_report()' could be called directly by the code that aware about changes. This new notifier is thread-safe. Signed-off-by: Ilya Maximets Acked-by: Eelco Chaudron (cherry picked from commit db54e9672052db9c45f84d89454104eb2fedfb02) Signed-off-by: David Marchand Conflicts: lib/automake.mk vswitchd/bridge.c Resolves: #1719644- Shutdown SSL connection before closing socket (#1780745) [RH gerrit: aa97017175] Without shutting down the SSL connection, log messages like: stream_ssl|WARN|SSL_read: unexpected SSL connection close jsonrpc|WARN|ssl:127.0.0.1:47052: receive error: Protocol error reconnect|WARN|ssl:127.0.0.1:47052: connection dropped (Protocol error) would occur whenever the socket is closed. This just adds an SSLStream.close() that calls shutdown() and ignores SSL errors, the same way that lib/stream-ssl.c does in ssl_close(). Signed-off-by: Terry Wilson Signed-off-by: Ben Pfaff (cherry picked from commit 5fe179987d14ff38cce345dbbe57ef1ffe7853cc) Resolves: #1780745- flake8: also check the ovs-check-dead-ifs script (#1751161) [RH gerrit: ecd3a1b407] Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit bc6f73c951af472d221985965085544e60248b03) Resolves: #1751161- ovs-check-dead-ifs: unshadow pid variable (#1751161) [RH gerrit: a086e76181] The pid variable is being shadowed by the list comprehension in the os.execvp() call. This can generate flakes / warnings in some environments so fix it. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 78e2a56927b5ba7e6f8808e3cf967171a2708a57) Resolves: #1751161- ovs-check-dead-ifs: python3 print format (#1751161) [RH gerrit: d61553f744] The print call changed in python3, so update it. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit c864b82d889dc47fb88d5cdde8caeca962776871) Resolves: #1751161- ovs-tcpundump: exit when getting version (#1764127) [RH gerrit: ea9923af22] Running 'ovs-tcpundump -V' will cause ovs-tcpundump to start processing on stdin. Instead, print the version and exit. Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit c691cffb03ba3a7595f364c2766fdd2ace8c3842) Resolves: #1764127- ovs-tcpundump: allow multiple packet lengths (#1764125) [RH gerrit: ac3b779405] The tcpundump tool expects all packets to be a length which aligns to exactly a 4-nibble boundary. This means packets like DNS requests will be stripped before being correctly processed. Fix this by allowing at least two nibbles (or one byte) alignment. Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 1051576cf2b8a6ffddf849d984c250a8456e6144) Resolves: #1764125- jsonrpc: increase input buffer size from 512 to 4096 (#1776883) [RH gerrit: 9c93db8373] Increase jsonrpc input buffer size from 512 to 4096 bytes in order to reduce the syscall overhead when downloading huge db size Acked-by: Mark Michelson Signed-off-by: Lorenzo Bianconi Signed-off-by: Ben Pfaff (cherry picked from commit ea5c1ba0e3b899b8b6684f23a44bbfd4331815ee) Resolves: #1776883- netdev-dpdk: Track vhost tx contention. (#1740144) [RH gerrit: 31112a9502] Add a coverage counter to help diagnose contention on the vhost txqs. This is seen as dropped packets on the physical ports for rates that are usually handled fine by OVS. Acked-by: Eelco Chaudron Signed-off-by: David Marchand Signed-off-by: Ilya Maximets (cherry picked from commit 9ff24b9c9323652f9dc80ff7928148c4af12da9c) Resolves: #1740144- ovsdb-server: Allow replication from older schema version servers. (#1766586) [RH gerrit: cb53fe2282] Presently, replication is not allowed if there is a schema version mismatch between the schema returned by the active ovsdb-server and the local db schema. This is causing failures in OVN DB HA deployments during uprades. In the case of OpenStack tripleo deployment with OVN, OVN DB ovsdb-servers are deployed on a multi node controller cluster in active/standby mode. During minor updates or major upgrades, the cluster is updated one at a time. If a node A is running active OVN DB ovsdb-servers and when it is updated, another node B becomes active. After the update when OVN DB ovsdb-servers in A are started, these ovsdb-servers fail to replicate from the active if there is a schema version mismatch. This patch addresses this issue by allowing replication even if there is a schema version mismatch only if all the active db schema tables and its colums are present in the local db schema. This should not result in any data loss. Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry picked from commit cec7005bde4bc81de7b94a3dc4b4160800c98be7) Resolves: #1766586- ovsdb-server: Don't drop all connections on read/write status change. (#1761572) [RH gerrit: 5a0a77328b] The commit [1] force drops all connections when the db read/write status changes. Prior to the commit [1], when there was read/write status change, the existing jsonrpc sessions with 'db_change_aware' set to true, were not updated with the changed 'read_only' value. If the db status was changed to 'standby', the existing clients could still write to the db. In the case of pacemaker OVN HA, OVN OCF script 'start' action starts the ovsdb-servers in read-only state and later, it sets to read-write in the 'promote' action. We have observed that if some ovn-controllers connect to the SB ovsdb-server (in read-only state) just before the 'promote' action, the connection is not reset all the times and these ovn-controllers remain connected to the SB ovsdb-server in read-only state all the time. Even though the commit [1] calls 'ovsdb_jsonrpc_server_reconnect()' with 'forced' flag set to true when the db read/write status changes, somehow the FSM misses resetting the connections of these ovn-controllers. I think this needs to be addressed in the FSM. This patch doesn't address this FSM issue. Instead it changes the behavior of 'ovsdb_jsonrpc_server_set_read_only()' by setting the 'read_only' flag of all the jsonrpc sessions instead of forcefully resetting the connection. I think there is no need to reset the connection. In large scale production deployements with OVN, this results in unnecessary waste of CPU cycles as ovn-controllers will have to connect twice - once during 'start' action and again during 'promote'. [1] - 2a9679e3b2c6("ovsdb-server: drop all connections on read/write status change") Acked-by: Dumitru Ceara Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry picked from commit a5ff4874ba4bb60ced7bda6ad97d0be38e8172eb) Resolves: #1761572- ofproto-dpif: Fix continuation with patch port (#1761461) [RH gerrit: 069d4bd437] This patch fixes the ofp_port to odp_port translation issue on patch port with nxt_resume. When OVS resumes processing a packet from nxt_resume, OVS does not translate the ofp in_port to odp in_port correctly if the packet is originally received from a patch port. Currently,OVS sets the odp in_port for this resume pakcet as ODPP_NONE and push the resume packet back to the datapath. Later on, if the packet goes through a recirc, OVS will generate the following message since it can not translate odp in_port (ODPP_NONE) back to ofp in_port during upcall, and push down a datapath rule to drop the packet. ofproto_dpif_upcall(handler16)|INFO|received packet on unassociated datapath port 4294967295 When OVS revalidates the drop datapath flow with ODPP_NONE in_port, we will see the following warning. ofproto_dpif_upcall(revalidator18)|WARN|Failed to acquire udpif_key corresponding to unexpected flow (Invalid argument): ufid:.... This patch resolves this issue by storing the odp in_port in the continuation messages, and restores the odp in_port before push the packet back to the datapath. VMWare-BZ: 2364696 Signed-off-by: Yi-Hung Wei Signed-off-by: Ben Pfaff (cherry picked from commit 88d2ac50aa4e3383e185b698a1b3a44a6f7b4f80) Resolves: #1761461- vswitch: ratelimit the device add log (#1737146) [RH gerrit: 052e541d45] It's possible that a port added to the system with certain kinds of invalid parameters will cause the 'could not add' log to be triggered. When this happens, the vswitch run loop can continually re-attempt adding the port. While the parameters remain invalid the vswitch run loop will re-trigger the warning, flooding the syslog. This patch adds a simple rate limit to the log. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 45bd8c563273fb914ff1960a53cfdcfddb0a5588) Resolves: #1737146- netdev-dpdk: Enable tx-retries-max config. (#1747531) [RH gerrit: 734086f5d4] vhost tx retries can provide some mitigation against dropped packets due to a temporarily slow guest/limited queue size for an interface, but on the other hand when a system is fully loaded those extra cycles retrying could mean packets are dropped elsewhere. Up to now max vhost tx retries have been hardcoded, which meant no tuning and no way to disable for debugging to see if extra cycles spent retrying resulted in rx drops on some other interface. Add an option to change the max retries, with a value of 0 effectively disabling vhost tx retries. Signed-off-by: Kevin Traynor Acked-by: Eelco Chaudron Acked-by: Flavio Leitner Acked-by: Ilya Maximets Signed-off-by: Ian Stokes (cherry picked from commit 080f080c3bc1e87da4affdce28a01b1a87a60364) Resolves: #1747531- netdev-dpdk: Add custom stat for vhost tx retries. (#1747531) [RH gerrit: 0c238ac414] vhost tx retries may occur, and it can be a sign that the guest is not optimally configured. Add a custom stat so a user will know if vhost tx retries are occurring and hence give a hint that guest config should be examined. Signed-off-by: Kevin Traynor Signed-off-by: Ian Stokes (cherry picked from commit c161357d5d96f32144f4b63ee6b06049c0cc0a09) Resolves: #1747531- doc: Move vhost tx retry info to separate section. (#1747531) [RH gerrit: 91d9e4d92b] vhost tx retry is applicable to vhost-user and vhost-user-client, but was in the section that compares them. Also, moved further down the doc as prefer to have more fundamental info about vhost nearer the top. Fixes: 6d6513bfc657 ("doc: Add info on vhost tx retries.") Reported-by: David Marchand Signed-off-by: Kevin Traynor Reviewed-by: David Marchand Signed-off-by: Ian Stokes (cherry picked from commit 4e6c16db31806dfcf84d6ebdb0d708cfa39bd08f) Resolves: #1747531- netdev-vport: Make ip6gre netdev type to use TC rules (#1725623) [RH gerrit: d3315b8035] The offload api functions already assigned to every tunnel class. For ip6gre tunnel class only need to also assign the get_ifindex function, similarly as done in commit 5e63eaa969a3 ("netdev-vport: Make gre netdev type to use TC rules"). Signed-off-by: Eli Britstein Reviewed-by: Roi Dayan Signed-off-by: Ben Pfaff (cherry picked from commit 8732450c2ee76410c7fbebaebe5f9cf27252208f) Resolves: #1725623- tunnel: Add layer 2 IPv6 GRE encapsulation support. (#1725623) [RH gerrit: 0c20e7e83d] The patch adds ip6gre support. Tunnel type 'ip6gre' with packet_type= legacy_l2 is a layer 2 GRE tunnel over IPv6, carrying inner ethernet packets and encap with GRE header with outer IPv6 header. Encapsulation of layer 3 packet over IPv6 GRE, ip6gre, is not supported yet. I tested it by running: under kernel 5.2 and for userspace: Tested-by: Greg Rose Tested-at: https://travis-ci.org/gvrose8192/ovs-experimental/builds/552977116 Reviewed-by: Greg Rose Reviewed-by: Eli Britstein Signed-off-by: William Tu Signed-off-by: Ben Pfaff (cherry picked from commit a3173ee1476840aaa6d90640169bd276568ff4c1) Resolves: #1725623- ovsdb-server: drop all connections on read/write status change (#1720947) [RH gerrit: 0f0be40ee0] Prior to this patch, only db change aware connections were dropped on a read/write status change. However, current schema in OVN does not allow clients to monitor whether a particular DB changes this status. In order to accomplish this, we'd need to change the schema and adapting ovsdb-server and existing clients. Before tackling that, this patch is changing ovsdb-server to drop *all* the existing connections upon a read/write status change. This will force clients to reconnect and honor the change. Reported-at: https://mail.openvswitch.org/pipermail/ovs-discuss/2019-July/048981.html Signed-off-by: Daniel Alvarez Signed-off-by: Ben Pfaff (cherry picked from commit 2a9679e3b2c6fde74ddae362d88ba16db7fbfc38) Resolves: #1720947- netdev-tc-offloads: Support match on priority tags (#1725623) [RH gerrit: 895735b382] The logic by which a TC rule has a VLAN match is by the VLAN TCI field, either the VID, PCP or CFI are non-zero. For priority-tag packets there is a VLAN tag header with a zero VLAN TCI. Match on existence of VLAN header (TPID) regardless of TCI matching. Signed-off-by: Eli Britstein Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 0b0a84783cd6048ca3d35af0f5b4652cecd34358) Resolves: #1725623- rhel: limit stack size to 2M. (#1720315) [RH gerrit: 79c6209e71] The default stack size in Fedora/RHEL is 8M, which means when ovs-vswitchd daemon starts and uses --mlockall (default), it will dirty all memory regions for all threads which is proportionally to the number of CPUs. On a big host this increases memory usage to many hundreds of megabytes while OVS actually requires much less. This patch relies on systemd to limit to 2M/thread. That is much more than the minimum documented at function ovs_thread_create(): /* Some small systems use a default stack size as small as 80 kB, but OVS * requires approximately 384 kB according to the following analysis: * https://mail.openvswitch.org/pipermail/ovs-dev/2016-January/308592.html * * We use 512 kB to give us some margin of error. */ Acked-By: Timothy Redaelli Tested-By: Timothy Redaelli Signed-off-by: Flavio Leitner Signed-off-by: Ben Pfaff (cherry picked from commit b82a90e266e1246fe2973db97c95df22558174ea) Resolves: #1720315- Add a new OVS action check_pkt_larger (#1702564) [RH gerrit: c899ac5788] This patch adds a new action 'check_pkt_larger' which checks if the packet is larger than the given size and stores the result in the destination register. Usage: check_pkt_larger(len)->REGISTER Eg. match=...,actions=check_pkt_larger(1442)->NXM_NX_REG0[0],next; This patch makes use of the new datapath action - 'check_pkt_len' which was recently added in the commit [1]. At the start of ovs-vswitchd, datapath is probed for this action. If the datapath action is present, then 'check_pkt_larger' makes use of this datapath action. Datapath action 'check_pkt_len' takes these nlattrs * OVS_CHECK_PKT_LEN_ATTR_PKT_LEN - 'pkt_len' to check for * OVS_CHECK_PKT_LEN_ATTR_ACTIONS_IF_GREATER (optional) - Nested actions to apply if the packet length is greater than the specified 'pkt_len' * OVS_CHECK_PKT_LEN_ATTR_ACTIONS_IF_LESS_EQUAL (optional) - Nested actions to apply if the packet length is lesser or equal to the specified 'pkt_len'. Let's say we have these flows added to an OVS bridge br-int table=0, priority=100 in_port=1,ip,actions=check_pkt_larger:100->NXM_NX_REG0[0],resubmit(,1) table=1, priority=200,in_port=1,ip,reg0=0x1/0x1 actions=output:3 table=1, priority=100,in_port=1,ip,actions=output:4 Then the action 'check_pkt_larger' will be translated as - check_pkt_len(size=100,gt(3),le(4)) datapath will check the packet length and if the packet length is greater than 100, it will output to port 3, else it will output to port 4. In case, datapath doesn't support 'check_pkt_len' action, the OVS action 'check_pkt_larger' sets SLOW_ACTION so that datapath flow is not added. This OVS action is intended to be used by OVN to check the packet length and generate an ICMP packet with type 3, code 4 and next hop mtu in the logical router pipeline if the MTU of the physical interface is lesser than the packet length. More information can be found here [2] [1] - https://kernel.googlesource.com/pub/scm/linux/kernel/git/davem/net-next/+/4d5ec89fc8d14dcdab7214a0c13a1c7321dc6ea9 [2] - https://mail.openvswitch.org/pipermail/ovs-discuss/2018-July/047039.html Reported-at: https://mail.openvswitch.org/pipermail/ovs-discuss/2018-July/047039.html Suggested-by: Ben Pfaff Signed-off-by: Numan Siddique CC: Ben Pfaff CC: Gregory Rose Acked-by: Mark Michelson Signed-off-by: Ben Pfaff (cherry picked from commit 5b34f8fc3b38b430c05ee39a0c84f8e9da24cd3a) Conflicts: NEWS tests/ofprot-dpif.at +L10571 - Not really a conflict. Had to fix the test case because we don't have the commit - dbf4a92800d0365cc3ec3c0e99df56e2ba676cb7 Resolves: #1702564- netlink linux: account for the netnsid netlink attr. (#1692812) [RH gerrit: ce14b518b7] The buffer needs to be reallocated and data copied when the netnsid netlink attribute is included, so avoid that by accounting the attribute when the buffer is initially allocated. Fixes: 756819ddd788 ("netdev-linux: use netlink to update netdev.") Acked-by: Aaron Conole Signed-off-by: Flavio Leitner Signed-off-by: Ben Pfaff (cherry picked from commit b43762a5ad3343d28e61ed518c97802c5bd8f380) Resolves: #1692812- rhel: Add an example to specify custom options (#1687775) [RH gerrit: a7dd6b6eb5] Add an example to specify custom options of ovs-vswitchd and ovsdb-server. In the example, the log level for file and console destinations is set to dbg. Signed-off-by: Timothy Redaelli Signed-off-by: Ben Pfaff (cherry picked from commit 175b9a6401da76994bac955ebc9f440634e63d55) Resolves: #1687775- ovs-ctl: Permit to specify additional options (#1687775) [RH gerrit: b8a874b82e] Currently using ovs-ctl is not possible to specify additional options for ovs-vswitchd and ovsdb-server (for example to specify a different loglevel during daemon startup). This patch adds --ovs-vswitchd-options and --ovsdb-server-options options to ovs-ctl in order to specify the additional options. Due to word splitting it may not be possible to specify an option that includes whitespaces. Reported-at: https://bugzilla.redhat.com/1664794 Reported-by: Matt Flusche Signed-off-by: Timothy Redaelli Signed-off-by: Ben Pfaff (cherry picked from commit fce20b8b73b1c08bc0f51a04a2109d80e4bc8b51) Resolves: #1687775- Merge commit 'a4efc599e0244e43fd417b2fb38b7f120eb1ebd4' into fast-datapath-rhel-7 [RH gerrit: 8da1428afe]- Backport "bus/pci: fix VF memory access" (#1851170)- Backport the upstreammed fixes for HWOL (#1812892)- Backport fixes for CVE-2020-10722 & CVE-2020-10723 (#1831391 & #1831394)- Backport HWOL fixes for ingress qdisc (#1812892)- Update to DPDK 18.11.7 (#1822653)- Rebase to last branch-2.11 commit and DPDK 18.11.6 (#1822653)- Backport "vhost: fix packed virtqueue ready condition" (#1793068)- Revert Backport "ovs-tc: support OvS internal port offload" and deps (#1737982) - Revert Backport "netdev-tc-offloads: Use correct hook qdisc at init tc flow" (#1737982)- Backport "vhost: fix vring memory partially mapped" (#1798996) - Backport "vhost: protect log address translation in IOTLB update" (#1798996)- Backport "netdev-vport: Use the dst_port in tunnel netdev name" (#1727599)- Backport "dpif-netlink: Allow offloading of flows with dl_type 0x1234." (#1722337)- Backport "lib/tc: Support optional tunnel id" (#1732305) Backport "lib/tc: Fix flow dump for tunnel id equal zero" (#1732305)- Backport "tc: implement support for action flags" (#1780690)- Backport "rhel: secure openvswitch useropts" (#1785586) - Backport "rhel: run ovn with the same user as ovs" (#1785586) - Backport "rhel: set useropts optional for ovsdb-server" (#1785586) - Backport "rhel: let *-ctl handle runtime directory" (#1785586)- Backport "userspace: Improved packet drop statistics" (#1726568)- Detailed packet drop statistics and related patches (#1790841) - Backport "netdev-dpdk: Fix not reporting rx_oversize_errors in stats." (#1790841) - Backport "netdev-dpdk: Refactor vhost custom stats for extensibility." (#1790841) - Backport "netdev-dpdk: Reuse vhost function for dpdk ETH custom stats." (#1790841) - Backport "netdev-dpdk: Detailed packet drop statistics." (#1790841) - Backport "netdev-dpdk: Fix sw stats perf drop." (#1790841)- Backport "vhost: fix virtqueue not accessible" (#1792399) - Backport "vhost: prevent zero copy mode if IOMMU is on" (#1792399) - Backport "vhost: convert buffer addresses to GPA for logging" (#1792399) - Backport "vhost: translate incoming log address to GPA" (#1792399) - Backport "vhost: fix vring address handling during live migration" (#1792399) - Backport "vhost: add external message handling to the API" (#1792399)- Backport "ovsdb replication: Provide option to configure probe interval" (#1788800)- Backport DPDK interrupt fixes for qede (#1738789)- Backport "vhost: add device op when notification to guest is sent" (#1726579) - Backport "netdev-dpdk: Add coverage counter to count vhost IRQs" (#1726579)- Backport "net/i40e: downgrade error log" (#1719644) - Backport "net/i40e: re-program promiscuous mode on VF interface" (#1733402) - Backport "bridge: Allow manual notifications about interfaces' updates" (#1719644) - Backport "netdev-dpdk: add support for the RTE_ETH_EVENT_INTR_RESET" (#1719644)- Fix librte_pmd_mlx{4,5}_glue.so error in Execshield part of RPMDiff by backporting the DPDK flags from dpdk spec file.- Backport "Shutdown SSL connection before closing socket" (#1780745)- Backport "ovs-check-dead-ifs: python3 print format" (#1751161) - Backport "ovs-check-dead-ifs: unshadow pid variable" (#1751161) - Backport "flake8: also check the ovs-check-dead-ifs script" (#1751161)- Backport "ovs-tcpundump: exit when getting version" (#1764127)- Backport "ovs-tcpundump: allow multiple packet lengths" (#1764125)- Rebase internal DPDK to 18.11.5 (#1760246) (CVE-2019-14818)- Backport "jsonrpc: increase input buffer size from 512 to 4096" (#1776883)- Backport "netdev-dpdk: Track vhost tx contention." (#1740144)- Backport "ovsdb-server: Allow replication from older schema version servers" (#1766586)- Backport "ovsdb-server: Don't drop all connections on read/write status change" (#1761572)- Backport "ofproto-dpif: Fix continuation with patch port" (#1761461)- Backport "vswitch: ratelimit the device add log" (#1737146)- Backport "Add custom stat for vhost tx retries." (#1747531) - Backport "Enable tx-retries-max config." (#1747531)- tnl-neigh: Use outgoing ofproto version (#1685642)- Bump release- Renumbered dpdk patches - Backport IOVA fixes (#1711739)- Backport "ovsdb-server: drop all connections on read/write status change" (#1720947)- Increase CONFIG_RTE_MAX_ETHPORTS to 128 (#1730421)- Backport "tunnel: Add layer 2 IPv6 GRE encapsulation support." and "netdev-vport: Make ip6gre netdev type to use TC rules" (#1725623)- Rebase internal DPDK to 18.11.2 (#1713698)- Backport "net/i40e: fix dropped packets statistics name" (#1728610)- Backport "netdev-tc-offloads: Use correct hook qdisc at init tc flow" (#1721219)- Backport "netdev-tc-offloads: Support match on priority tags" (#1722249)- Backport Vhost performance regression fixes (#1672538)- Backport "rhel: limit stack size to 2M." (#1720315)- Backport "ovs-tc: support OvS internal port offload" and deps (#1702334)- Backport "[OVN] Fragmentation support - check_pkt_larger action" (#1702564)- Backport "net/qede: support IOVA VA mode" (#1684605)- Backport cpu affinity fixes (#1687320)- Add missing dependencies for ovs-tcpdump (#1697978)- fixed netlink msg corruption when updating netdev. (#1692812)- Backport "net/bnxt: support IOVA VA mode" (#1645523)- Backport "ovs-ctl: Permit to specify additional options" (#1687775) - Remove useless -fPIC from DPDK- Backport "rhel: Use PIDFile on forking systemd service files" (#1684477)- Update to official 2.11 release- Snapshot of branch-2.11 d3a10db4fd38- Snapshot of branch-2.11 d4ff5b2be7fc- Update to a snapshot of OVS 2.11 from master- Backport "OVN: add static IP support to IPAM" (#1664028)- Backport some patches to improve offload indications (#1655990)- Add "Requires: openvswitch = %{version}-%{release}" to python-openvswitch2.10 (#1662944)- Backport "OVN: add mac address only support to IPAM/MACAM" (#1662905)- Backport "ovn-controller: Inject GARPs to logical switch pipeline to update neighbors" (#1643902)- Backport 'ovs-ctl: fix system-id.conf owner' (#1659391) - Do not check /var/log/openvswitch owner/group (#1659391)- Backport "ovn: Fix the invalid eth.dst and ip6.dst set by nd_ns action for certain cases." (#1656018)- Backport "dpif-netdev: Add vlan to mask for flow_put operation" (#1649516)- Backport "ovn: Avoid tunneling for VLAN packets redirected to a gateway chassis" (#1561880)- Backport "mem: fix memory initialization time" (#1647498)- Backport "tests: Use the default key length when generating RSA keys"- Backport "net/qede: fix crash when configure fails" (#1648183)- Backport 'pinctrl: Fix dp_packet structure leak' and 'pinctrl: Fix crash on buffered packets hmap double remove'. Moreover align 'ovn -- 3 HVs, 3 LS, 3 lports/LS, 1 LR' test to upstream one (#1649008)- Backup "netdev-dpdk: Bring link down when NETDEV_UP is not set" (#1645288)- OVN: configure L2 address according to the used IP address (#1648272)- Backport "bond: Honor updelay and downdelay when LACP is in use" (#1646923)- OVN: introduce mac_prefix support to IPAM (#1647750)- Backport "ofproto-dpif-xlate: Avoid deadlock on multicast snooping recursion" (#1643065)- Re-enable "make check"- Update to DPDK 17.11.4 (#1566069)- Ship statically linked OVS binaries (#1643478)- Backport connmgr: Fix vswitchd abort when a port is added and the controller is down (#1637926)- Backport "ovn: Add DHCP support for option 252" (#1641740)- Backport "net/i40e: fix VLAN offload setting issue" (#1637893)- Backport "Python: Make Row's __getattr__ less error prone" (#1639963)- OVN: ovn-ctl: Fix the wrong pidfile argument passed to ovsdb-servers (#1636714)- OVN: Support processing DHCPv6 information request message type (#1636874)- OVN: Fix IPv6 DAD failure for container ports (#1616129)- OVN: Fix the issue in IPv6 Neigh Solicitation responder for router IPs (#1567735)- OVN: add buffering support for ip packets (#1637466)- Fix null pointer (#1634015)- OVN: add CT_LB action to ovn-trace (#1635344)- Backport NFP PMD's non-root related commits for > 1TB of RAM (#1634820): - net/nfp: support IOVA VA mode - bus/pci: forbid IOVA mode if IOMMU address width too small - net/nfp: check hugepages IOVAs based on DMA mask - mem: use address hint for mapping hugepages - bus/pci: use IOVAs check when setting IOVA mode - mem: add function for checking memsegs IOVAs addresses - mem: fix max DMA maskbit size- Backport "Remove support for multiple queues per port" (#1634015)- Backport EMC reorder fix (#1565205)- Backport per-port socket netlink creation with EPOLLEXCLUSIVE (#1634015)- Backport roundrobin rxq to pmd assignment (#1631797)- Backport "ovs-save: Don't always include the default flow during restore" (#1628905)- applied Fix translation of groups with no buckets (#1626488)- Removed provides and obsoletes for openvswitch-dpdk (#1628603)- Backported "net/mlx{4,5}: avoid stripping the glue library" (#1627700)- Updated with 2.10.0 official tarball (#1618551)- Sync'ed with fd-next (4452afaa58) - vhost: flush IOTLB cache on new mem table handling (#1609643) - OVN: introduce ovs-appctl command to monitor HVs sb (#1593804)- Snapshot of branch-2.10 6bced903bb50- Snapshot of branch-2.10 58a7ce60b9f7- Snapshot of branch-2.10 faf64fb8861f- Snapshot of branch master 7a78d1c1ad73- Sync'ed spec file with fd-next-57 (shared linking). (DPDK patches not included) - Fixed package dependencies (#1610603)- Snapshot of branch master b1ca64f020f7- Replace macro %{name} with 'openvswitch'.- Snapshot of branch master 1ac690899592- Versioned conflict to be less than 2.10.- Snapshot of branch master 3c921cc2b6b7- Fixed unbound requires and buildrequires.- Snapshot of branch master 93c0ef12039c- Snapshot of branch master 79d0dfa4e99a- Snapshot of branch master e46148133067- Snapshot of branch master 61677bf976e9- snapshot of branch master- Backport "net/mlx5: fix memory region cache lookup" (#1581230) - Backport "net/mlx5: fix memory region boundary checks" (#1581230)- Backport "net/qede: fix memory alloc for multiple port reconfig" (#1589866)- Backport "net/qede: fix unicast filter routine return code" (#1578590)- Backport "net/qede: fix L2-handles used for RSS hash update" (#1578981)- Backport "net/nfp: fix lock file usage" (#1583670)- Backport "net/nfp: configure default RSS reta table" (#1583161)- Backport "netdev-dpdk: don't enable scatter for jumbo RX support for nfp" (#1578324)- Backport "ovn pacemaker: Fix promotion issue when the master node is reset" (#1579025)- Backport spec file modfications from "rhel: Use openvswitch user/group for the log directory"- Backport "vhost: improve dirty pages logging performance" (#1552465)- Backport "ovn: Set proper Neighbour Adv flag when replying for NS request for router IP" (#1567735)- Enable QEDE PMDs (only on x86_64) (#1578003)- ovn-nbctl: Show gw chassis in decreasing prio order (#1576725)- Fix hugetlbfs group when DPDK is enabled- Backport "eal: abstract away the auxiliary vector" (#1560728) - Re-enable DPDK on ppc64le- Require the selinux policy module (#1555440)- Backport fix QEDE PMD (#1494616)- Backport "net/nfp: fix mbufs releasing when stop or close" (#1575067)- Backport net/mlx4: fix broadcast Rx (#1568908)- Backport mempool use after free fix and debug (#1575016)- Fix the email address in the changelog.- Backport fix for missing user during install/upgrade (#1559374)- Backport fix for Unicode encoding in Python IDL (#1547065)- Backport the cisco enic patches- Backport a fix for "Offload of Fragment Matching in OvS Userspace" (#1559111)- Backport "ovn-controller: Handle Port_Binding's "requested-chassis" option" (#1559222)- Backport "python: avoid useless JSON conversion to enhance performance" (#1551016)- Backport "ovn: Set router lifetime value for IPv6 periodic RA" (#1567735) - Remove useless libpcap-devel dependency- Backport DPDK CVE-2018-1059 (#1544298)- Backport fix for PMD segfault when BNXT receives tunneled traffic (#1567634)- Backport patches to make NFP detect the correct firmware (#1566712) - Backport "rhel: Fix literal dollar sign usage in systemd service files"- Backport "rhel: don't drop capabilities when running as root" - Change owner of /etc/openvswitch during upgrade- Disable DPDK on ppc64le- Disable DPDK on aarch64- fixes i40e link status timeout trough direct register access (#1559612)- Enable BNXT, MLX4, MLX5 and NFP (aligned from FDB)- Backport "Offload of Fragment Matching in OvS Userspace" (#1559111)- Avoid to unpack openvswitch 2 times and to overwrite all the patched files Fixes 2.9.0-4- Backport "ofproto-dpif-xlate: translate action_set in clone action" (#1544892)- Backport "ovn: Calculate UDP checksum for DNS over IPv6" (#1553023)- Require the latest rhel selinux policy (#1549673)- Backport vhost patches (#1541881)- Don't require python-sphinx directly, but built it since python-sphinx is in the optional repository that is not available on RHEV and TPS test fails.- Don't verify the user and group of /etc/openvswitch and /etc/sysconfig/openvswitch This is needed since we cannot change the user and group if you upgrade from an old version that still uses root:root.- Update to OVS 2.9.0 + DPDK 17.11 (#1475436) - Backport of ofproto-dpif: Delete system tunnel interface when remove ovs bridge (#1505776) - Backport DPDK patches from FDB (vhost user async fix and enic fixes) - Backport 94cd8383e297 and 951d79e638ec to fix permissions (#1489465) - Use a static configuration file for DPDK- Rebase to latest OVS branch-2.7 fixes + DPDK 16.11.4 (#1533872)- Remove ovs-test and ovs-vlan-test from openvswitch-test package - Add an option to enable openvswitch-ovn-docker package (disabled by default)- Update to OVS 2.7.3 + branch-2.7 bugfixes (#1502742)- Backport of fix for i40e flow control get (#1491791)- Rebase to latest OVS branch fixes + DPDK 16.11.3- Backport of enic driver crash fix to dpdk-16.11 (#1489010)- Re-enable Cisco enic PMD (#1482675)- Update based on multi-arch- Disable unsupported PMDs (#1482675) - software and hardware PMDs audited by the team- Backport mmap fix for memory initialization on ppc64le to dpdk-16.11- Backport support for vfio-pci based PMD in ppc64le to dpdk-16.11- Backport support for Intel XL710 (i40e) pmd in ppc64le to dpdk-16.11- Update to OVS 2.7.2 + branch-2.7 bugfixes (#1472854) - Add a symlink of the OCF script in the OCF resources folder (#1472729)- Align to FDB openvswitch-2.7.1-1.git20170710.el7fdb (#1459286)- backport "mcast-snooping: Avoid segfault for vswitchd" (#1456356) - backport "mcast-snooping: Flush ports mdb when VLAN cfg changed." (#1456358)- backport patch to not automatically restard ovn svcs after upgrade (#1438901)- rconn: Avoid abort for ill-behaved remote (#1449109)- Fix race in "PMD - change numa node" test (#1447714) - Report only un-deleted groups in group stats replies. (#1447724) - Workaround some races in "ofproto - asynchronous message control" tests (#1448536)- Fix an issue using set_field action on nw_ecn (#1410715)- backport patch to fix uni-dir vhost perf drop (#1414919)- backport patch to correct port number in firewalld service file (#1390938)- backport patch to enable/disable libcap-ng support (--with libcapng)- Fix an MTU issue with ovs mirror ports (#1426342)- update spec file to install firewalld service files (#1390938)- vhostuser client mode support for ifup/ifdown (#1418957)- OVN-DHCP is not sending DHCP responses after a MAC change in north db (#1418261)- systemd service starts too fast (#1422227)- iptables should be easily configurable for OVN hosts and OVN central server (#1390938)- ovn: IPAM has no reply to DHCP request for renewal (#1415449)- ovn-controller: Provide the option to set Encap.options:csum (#1418742)- fixed broken service after a package upgrade (#1403958)- ovsdb-idlc: Initialize nonnull string columns for inserted rows. (#1405094)- OVN: Support IPAM with externally specified MAC (#1368043)- Update to OVS 2.6.1 + branch-2.6 bugfixes (#1335865) - Update to use DPDK 16.11 (#1335865) - Enable OVN- ifnotifier: do not wake up when there is no db connection (#1397504)- Use instant sending instead of queue (#1397481)- dpdk vhost: workaround stale vring base (#1376217)- Applied tnl fix (#1346232)- Applied the systemd backports- Fixed OVS to not require SSSE3 if DPDK is not used (#1378501)- Fixed a typo (#1385096)- Do not restart the service after a package upgrade (#1385096)- Permit running just the kernel datapath tests (#1375660)- Obsolete openvswitch-dpdk < 2.6.0 to provide migration path - Add spec option to run kernel datapath tests (#1375660)- Backport ovs-tcpdump support (#1335560) - Add ovs-pcap, ovs-tcpdump and ovs-tcpundump to -test package- Add openvswitch-dpdk provide for testing and depending on dpdk-enablement - Disable bnx2x driver, it's not stable - Build dpdk with -Wno-error to permit for newer compilers - Drop subpkgs conditional from spec, its not useful anymore- Fix adding ukeys for same flow by different pmds (#1364898)- Fixed ifup-ovs to support DPDK Bond (#1360426)- Fixed ifup-ovs to delete the ports first (#1359890)- pull bugfixes from upstream 2.5 branch (#1360431)- Removed redundant provides for openvswitch - Added epoch to the provides for -static package- Renamed to openvswitch (dpdk enabled) - Enabled sub-packages - Removed conflicts to openvswitch - Increased epoch to give this package preference over stable- pull bugfixes from upstream 2.5 branch (#1346313)- Enable DPDK bnx2x driver (#1330589) - Add README.DPDK-PMDS document listing drivers included in this package- Run testsuite by default on x86 arches (#1318786) (this sync the spec with non-dpdk version though the testsuite was already enabled here)- eliminate debuginfo-artifacts (#1281913)- Update to OVS to 2.5.0 and bundled DPDK to 2.2.0 (#1317889)- Provide openvswitch ver-rel (#1281894)- ExclusiveArch to x86_64 (dpdk) - Provides bundled(dpdk) - Re-enable testsuite- Enable building from pre-release snapshots, update to pre 2.4 version - Bundle a minimal, private build of DPDK 2.0 and link statically - Rename package to openvswitch-dpdk, conflict with regular openvswitch - Disable all sub-packages- First build on F14python-openvswitch2.11 !!#$%&''))++-.//123455789::<=>?@ABCDEFGHIIKKMNOOQRSSUUWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|2.11.3-90.el8s2.11.3-90.el8s2.11.3-90.el8s2.11.82.11.82.10.0-6    .build-id3410388a6ff7e27ba21ae55fa54635f1cf8f54dbovsovs-2.11.8-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txtrequires.txttop_level.txt__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycdaemon.cpython-36.opt-1.pycdaemon.cpython-36.pycdirs.cpython-36.opt-1.pycdirs.cpython-36.pycfatal_signal.cpython-36.opt-1.pycfatal_signal.cpython-36.pycfcntl_win.cpython-36.opt-1.pycfcntl_win.cpython-36.pycjson.cpython-36.opt-1.pycjson.cpython-36.pycjsonrpc.cpython-36.opt-1.pycjsonrpc.cpython-36.pycovsuuid.cpython-36.opt-1.pycovsuuid.cpython-36.pycpoller.cpython-36.opt-1.pycpoller.cpython-36.pycprocess.cpython-36.opt-1.pycprocess.cpython-36.pycreconnect.cpython-36.opt-1.pycreconnect.cpython-36.pycsocket_util.cpython-36.opt-1.pycsocket_util.cpython-36.pycstream.cpython-36.opt-1.pycstream.cpython-36.pyctimeval.cpython-36.opt-1.pyctimeval.cpython-36.pycutil.cpython-36.opt-1.pycutil.cpython-36.pycversion.cpython-36.opt-1.pycversion.cpython-36.pycvlog.cpython-36.opt-1.pycvlog.cpython-36.pycwinutils.cpython-36.opt-1.pycwinutils.cpython-36.pyc_json.cpython-36m-aarch64-linux-gnu.socompat__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycsortedcontainers__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycsorteddict.cpython-36.opt-1.pycsorteddict.cpython-36.pycsortedlist.cpython-36.opt-1.pycsortedlist.cpython-36.pycsortedset.cpython-36.opt-1.pycsortedset.cpython-36.pycsorteddict.pysortedlist.pysortedset.pydaemon.pydb__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pyccustom_index.cpython-36.opt-1.pyccustom_index.cpython-36.pycdata.cpython-36.opt-1.pycdata.cpython-36.pycerror.cpython-36.opt-1.pycerror.cpython-36.pycidl.cpython-36.opt-1.pycidl.cpython-36.pycparser.cpython-36.opt-1.pycparser.cpython-36.pycschema.cpython-36.opt-1.pycschema.cpython-36.pyctypes.cpython-36.opt-1.pyctypes.cpython-36.pyccustom_index.pydata.pyerror.pyidl.pyparser.pyschema.pytypes.pydirs.pyfatal_signal.pyfcntl_win.pyjson.pyjsonrpc.pyovsuuid.pypoller.pyprocess.pyreconnect.pysocket_util.pystream.pytimeval.pyunixctl__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycclient.cpython-36.opt-1.pycclient.cpython-36.pycserver.cpython-36.opt-1.pycserver.cpython-36.pycclient.pyserver.pyutil.pyversion.pyvlog.pywinutils.pypython3-openvswitch2.11LICENSE/usr/lib//usr/lib/.build-id//usr/lib/.build-id/34//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/ovs-2.11.8-py3.6.egg-info//usr/lib64/python3.6/site-packages/ovs//usr/lib64/python3.6/site-packages/ovs/__pycache__//usr/lib64/python3.6/site-packages/ovs/compat//usr/lib64/python3.6/site-packages/ovs/compat/__pycache__//usr/lib64/python3.6/site-packages/ovs/compat/sortedcontainers//usr/lib64/python3.6/site-packages/ovs/compat/sortedcontainers/__pycache__//usr/lib64/python3.6/site-packages/ovs/db//usr/lib64/python3.6/site-packages/ovs/db/__pycache__//usr/lib64/python3.6/site-packages/ovs/unixctl//usr/lib64/python3.6/site-packages/ovs/unixctl/__pycache__//usr/share/doc//usr/share/doc/python3-openvswitch2.11/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryASCII textpython 3.6 byte-compiledELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3410388a6ff7e27ba21ae55fa54635f1cf8f54db, strippedemptyPython script, ASCII text executable  !"#$%&'()*+,-./0123456789CDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ R PPR PPR PPR PPR PPR PPR R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R RRRRRRRRRR R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R utf-8a095b592f1fabfeee99e58b89e1cf74e31a71de4116c858a7e0878cd80ac88dc?7zXZ !#,q] b2u jӫ`(y,yŝY)hCFk}׊H -hM]p%$EkS9Q|n>C3C|Lf(\8\>"6?!bAR` {] Ǥhr\C?(w֢ uKJr4CI_oG6BelsP|`p{t6\RmdYsSby4^AIS^,$'lڸ&90OiϿhZ\`4_=-q ֧jU!c^DӖczumKۖ'(P(12i==?yte3h4M6v^yz&nYQ8>Ij d!Puu,x"??`s2(vE}Mn htJ֘]-v(=XCNOҏϾC2 M/øt4f-aTMa-50/4.C9^2Ds\ES5lHRZ> *3h/#Ze -,H%=ZX 8C׷|_5i[1UE;~sEu*kqO"@pS轍Dec>6YGܵǠ?[HrMHrqm gb<ڬ5V()Q5++p[Y۰PGr1`vLI,*I7Ȋoٶxkc5w8*?Ο ?w*;PyV-E@u5#6J檹pJYV$j\{$D])K>H *j@LV 7iHz) vX0,L -=䙣N21wDx56GnGlmpƆ7|uai/妺Ck8YvD$Mb3 ޼/>w9 D޲jTvJ]">Fz'q)jz]M<Ǹ#TZIuBIҀO폫A~&N\gl"ZWU}B`>O(Df\IM]P.rM}όe'@BބXk8Q(Y'Q>:?'/ +InܑQi$"*؁.y*A=xS,o6k+s7šOff_Yy6lB vCJ<92hk =?NLJT !%Qa# @w wDŽFo՞Q X<쌇g:9\%Rܙ7:0U }T^݂ݫ냞r!O# t̯-W_x04jpCM 34z[Fr7!DHO1oHnv~xROv̄Hw+Lvod|(7F!%ǯ+\:e!DڴaS%EĬ#k9YkXƑaB<ϓX֖}ĕm4 礂=":rКS4}JΊJzp0`uȶ>~~c53ɝy G%q޻TM/E)em2ZD{}M tӗ/3O"7,_lTL,[og\сPe=0#D&zKe.l=HIAYM "NzBO":1X+99VݸqI[*aZZK 66.,k4GX4os̓ssecBٚ[& ygz×qU\:(>`P#ꖳ(%}V_.򪭎7C)%a)?#p#pυt4g2P]Vz_2NgޚuT=> U=0еY?p΅47[_ LeJo7ZqJ,!!׃fJq\ }"o[1jZ.CN3rrA:_sor,RPs,:{s9>|zˍ$O2kvƌ"Ų3"P {Jf_Y)j؜3as6mrFѩ>&*jR>ɴ zyJ 4޲^YnOR4'OP65F=ٕMIS ޛ7(mqZ %eO$A|i]9b st渡ㄢL%1Vi;AfN*^4j?eݦL'iS\%XQ`TRRw 6`BK VPxhō :Iv+nS$E:y4-[wk=!H<^!r(Hk 'JYvfAݬ狉!`u[bY'hV3}DzKy5x ˥1ƪy= R(e/)}C8dkrJ;8л,6ػ) Ng %wT9忝7(Zz;nO\2-װJ;EYnSU3ʩB2SɊKl(E\z ~̀ @^gu)4~1CK^_q9re+,>UP,Lލ6-{]9J=:X](HJ&О+QZA.g2{i:i@%fY ~6,\oH8k0[K m,eذ,nP K0Xe3Z6Xz} ֔iHpxoY(- ӣe 9?8x4UƯV4 QJ SFk@dBa묱m4 kx@W#*`uw,1J$ERqݶHPFs/XX#`Gf}Q~ѽOoVdle{F;rGkuO|e]3߇Zi zI_AG¯ {}JdH(`c־V 컨 E_xiz3ێ,.0R%J Gbt]H,k2>aL3l5Jd&3 .MFy-X Hp 󣀳Ӷ}B1T2nT9dϥ_U=EN%Cr/ߪZo"#]Ei9|txXmmYnTlv`W%oU{TJKi3,W~7V8Pd`7N(6e v_|5C=l{PPzN^wv)̮R8v qau37rMPM)A~Cf^Y5gH͘ o!x;06ĩpU-U1e9.8ZJ%hdpDξ׃69X;Fi}{ˀW:FH8vʵ:jt%p,h!o{(96KDzhE?nW_*dʦk1p;zS Q=r琰t{yўd@]ʎu,9)Ac,;)N@e@7rș5_0nz NBG#gsU-" 7E݌# b PI!\.`UƯO4=^A{/¶#{^E+u\NdhWcm/bl[Z d#MWoKck~$ddISTEH뒣zawrK% BvN~<"@?ec cs ~(-ӝ AD I!ċm+*luuoÔ9o3wy.L"­<Bhn|Z8: Qx}zsFl2'7'~5!D+MV\uiNm~RζRHY"ْ~O|лd"@8P;Nj4%0]Ynf$x}cެJ{u~@GӥE%Lz8 YzNCQ18:é}W@EK \·A1-ن _5 X^2Cl-LuRԲ)[o+ #m&䳀7p$ګ!"wn8[<7h6Saaw)8,NS]ddȧ.H0 ů$eEVfjk~Nc;/DL{ѱYJؖrE{k ۗ"8)1ӊ;S) eX\0*@^ ìQmoK7;nv0ߠh]oPڼg1&n73@YfSZPN"~xw/9K~i!`d dw1)iU2RBo)DfEPNWE'(yW|bPǛ=NgK\.uE2/2)V Ì)Oɀɚ mH4F))%fW+Y}Zya%GT(hjwpb9)ZD`Ԙ5#aY2L56gꖄ|@BGy0"$5gmM]L)eDMHwju}i0eTsRϤvzcokZ>KZ'|soI|J\{ e l_kgݗ 㼒a|[ vOZݕP̭^S2(eʚC!~BErkȅ}H,3"KIEӴ$EΎCN~HcT3<\x:,QWDK~})`>Shn@`h%qqn߾NW\g%$ AN}IH}G*+|0Snb:-5 "V҇jK® ZWW w}l[K0=G en+$>MX CuML#ڬBϋwrZ _Lj IEe艭O)~_ӑS/S왲o |6 D:KH+ԤpyfK $nܬ)Y{"JՙV?bJ) gZwa,zPՒM]#rrd. Uhq 12e{ Ge;<۳Iy]N;V"Fxkڈw5`Yppj}qGxۆiu FH$ߔZ.*۔=Aw1a wb l00 .a.q~FlIA*Sxԫd[S".l0$Z;)D`xe7c#@-Gg.y"O5#줭 F L')#n:lä}Cm:µwW_#3N9+z&ѐգATt%8byouCEjE_ *#зXq18=a@EUe'8Mag&ދX⇰dgzÅaX4 ![ Du'1'LK` _ [cl))"k u"VWF !w!(t 9i:֜5`)(lJsQ?W̓JţdQNii+$HVuUp1pOl.G?S]Zam14^Ua3_5t@p֠%Sx8țŀ W-"؛:b%@}a1,"$,:1m&jl_e6J*QSm,O"|+Ne_;UDJKi;}\3ڕ1}ۦfL)\D@KPqj 7slDM5C|=;P3cW4'z~%!ܣ#$չ~~pբcc \ 0[>!jGYsXXdy^mFI$ܠ|Kj 6,Ǎ>:$gPu[QBv5MYKb)i}"|%fOc؀k&ZOO) [Ml&1,Qu?(7s  O[mɪKtdlpG.Ւ`kbGWvY%8j\>x?# EEuYs[z-+.ft"ur -zhZ~,ur*4J op.18fd+@"p66e8ǽN] /)Ͽd0޴b}!ț]}t_?5Fҍ~[uzLB[3Mr(9 2ıb!T3R*/S'r$Ee{lv jgcHݕϠoS7Ew+9X>mDTl1 ?},UG)mCܩVl W4&N)2M#;1MN9oܹ:x[WK+^ܭ+f&3MK!'!0e}ĉ.8Y#Rf= (  `` Ɵ6ӣ*@ T3[8%Pg񺖖e7(<*$#=or5pʭϟzo੶7|il#PAEPL6W>e괪נ'r݇ \ J M `1-S+WpxF~>ct L>9eAst-P`n|l9cBOfC9yN039Eq]B9BcF)1VS |7IӋ- +6 {>C`s= zs1U\=㩮RnQ+27$D2l`N4J-%o#+Р:StGCF&!o9*i(aY82QAnd/9B̛"eY̦|FR}1/֍D&?an=3*Hg ?ZznhK<:A&t` #&'qp?visO{KKu?^'>h2ֶvbp|ѝlQ6X6"w4W:/:0J[$(qTfN&zcצ /5:I7z($e;ؠ)cJ1I)-Eη\70JIU\rݙ et}{B*4 eʞfooEclyUTwn$ O'T{}>:xa[y܃{ >2TrMw]כPt5o g Z| R@ru8?SD7 Kˎnj<1l^ Ly h`Y0z]A[kf]jPO˵cLlZIi|m\ 9[w̲XXo\޹ևzJn޳nm醼@j~Ox{yf:hGjd3 K,"qTFVN_p7 D]њDe$sQcmMgȠBٛ9_}-; U qCö[_-ZE>joL>,` j~T u$bKв)+9ݝ~NY=5xA z| dN]ԕ? /̘ނd65nJ#dl]eFY!A RVA@d<]$}lQEVj z$ pEQ{Y!FIK [Ihh}[lJ ,r<ݲI Tz=H%սc@9+qwd$)7LєgS6@xVL^A-7>7z~/>t\;"@d ғghO"vsaZ[¦ x6LBRFTҼHZ, T`ֿbxP>-Fǯc+qE4:>_qA= Nc,T3 lxoZ8W7멌.R3C94#;lpIJx'(J7vNQvGJ-:[|9k j-b:HǤէ#czG+1 R]TF kϙ=?3i^}5\& ڏbh6 {:&Άgy|$ѥ8Ѡ8s*ȶKiOIp_!Ўıc{꧁o=R(`.*v*kG9; n\lxPwDŽF\J3:|dR}n,kkPfFøS3B4jC6MtW\ J-fP/Znew*dExj"-9d~uRۛ$<sON%:,h8k*ڤam=L{חRwwY74^ԣܝXIy0 #zhJ /kUF\cDPQOyByl/WbDbBiݩf IJV,߃hZ+ 铷Ł*.lT䍴][AT%aVheB;0dt lh|ipp27wmEq8o`k,u J:CǑfzJsM x qŻI_]`i,\`>Ul*=6Lq:M7ʒ3TI'u}oGSa<0Kp{6!Uv\qu]$4sˡI2bdUwAE AS+=J'xd'm؁[y!#Q ,~s8!6Qa/GzMqey쏴{. к]iX^GДvnUoT:y"ʆ3Z sLlm x~*84:{UIDe  OUAzJI2BĹW˝0E&ʑƸ5CCz!= 'Miby|R~OުPBGt<_b0LO{汃(@ރ}34+]Eʒ7ۑZJQ= ٻGGJ0{5` A]s;ACIkGč}vk:&l?Hum.*!z$&x藬=O必aP2~DӃ0Aߚlæd7h/_# jfyxli,&Ӽ`VʠdO.YjF7 /yAs|·WP@TB3G`J!isuQ9ScOcck9J4Z6>x;)ʩq"/ΨA獟Y{,>vR{b q~ [Isa ƈ.r ~D ? XτjV1G(QTzz o |MpaiC]b VXC2+Mr#3٦=łJW9:#Էh{7 c1#;b Bj85ȔxqNY 9&Γx.~u /*!8a4M$a2G}#!b"9(7}.gEYxGnM-R Z)R{H[ƄxP?KLȣz\ QeYQab=a2`2MgNI-!z^j4eԭy9CGmzﺿ^<4$BE6}b$qjCxҍ6%'jb/5sᄘ/33xQm%]+rbB8o_82SȈ3g?T hwPGDW2I'H_yFMtB$dT~"e"1?XbE}ph`IK|L3ՌY?\}Ô\'$dlB{\a`ȾP ݛ|a"UܣԁF>h[mK0Ѫr㤧F>"`mQ~zPqFTd}֓uuxOoi&rμ8w2ªns؂:4FEJk#M:]^໪̙k !j.ZH;IV*jJʌBidVE 立x9\.spfN]9A/p@ɖ/ .rW`b ڮs_ nUsڹAG%|TU !ū6m *)!$.So|* ԌѱװjW0+r 1bӛk{X,,&wOmuBPtMXU F=9Q:*fŒvw6s}"s-0&WFuݕ˵ɍ&@L4 'yQ^jݜddP@6Ty3ZǴm[nG(Hy9,m"O[|27*:N %A|yhC*#c[a֪J+OYͶE_ႄ*!K ``NK뉕U3$Q6.k^o-`W,"9-3mty#wEW'_O]3Ag `e ȞLvF/o xj[#qm$\&+5@;S5ܫVZ`%?* ׄ!',*0zZj鞀0M6H}h#%'>p' ;X7lyU ĵ =\ā2OYSmNFv@^]]{Q r3L%l1M;)" s?c@T_3*ޘYNSBsS^ĐQv㻯D,8gΏ"8I\aBGRYQ[(hrWp=@;u%並ې7,rVљc JSn3D.U0->д#J2H&*y| hC!OtTo~~k򈬖CܗfuݾSAw~QD9׍d|Qh_C/dBf?Pd2JZGB0Wm2 5rK癎i8q1 r| :m2?>2b=C|+&xL]OC Hy): Z C:K?zv@y8Q]/%p폢RMK&U9^ώ "D$RPi0"%@'Ńua&cFW PK]fSAj)qA tdAɧkCz\aE2E2s3-ëq t޺ YΗ}2@)> GG4׎)($,Y[ؙ|l} KTc*swwM N<`ả!$-BŻV~^\6og#K]wBAyHv*.w 0DncL*[%cBLaG"F$Wr9e8{ә [q0ׁ ڵF]yKOe:1 1ف- ؙfv_6~-+v )bgZrX QnxM3[R>e8$aЛd_} N&fWS~.LɃ!:H$N`sQ(~ʸ an[m 7&(ɰ7t|A؏`9Xɤ9d̾X@'^᷌ h麻ČKJUqnb,;6d5DqY 2%ɊtmU"J4i_rjA-`YܘK6%Tb^O7qhu<ߝTZ^9hO1~W\Cù7U; nkIudչFT3 z&v? 3b_-G:T%xSw+sq_z ĩW|؁]LAsƺ2O( uRiCjG:(GӨ7/3VxCLqq!vlS/MMQ[j~_x1bQ^/4,F)[\濉 3gK[^I TH!9\E|d6)@?]%}O.Y*F; `Kiv |쩸 jSA^蚻/}ĵ rG XM[;8n~%K'\U.r wd@{l$%q`'T؃T$5Klx$7HVfY(n}m?r͞o!9Rc>& N4x|[p蹰\x.KK2dOa֟?dp j42Dzѡ{e<qRiB0@3)7*GbT2e`uy/)Mn0 {AU@A Glq5ܥ0S#\83.iH8ߙhœwgum]t&ړݮ^Q6Zze+)5jޯ=m#17)#$;/TOGFЗoǖNFf9>Yc1r@χdzGs, F=tk]8 0o%jw`(ǚ9styd7z7B8+, H7/BWK{5vEKBQ iwv`ᩱWR}!J!?P*Az`ьG?,C'>4_@( oQ>}RnGK҇l{B29::SpNr٤b!kwR`+Ȝl)lG6^@lH$줦OS[Q6.͖0n4KN < AeWƲ1%s)tȧ d+<"X ( R)$1HgkNlwܨ5crUH|z* $VyXnBsʁ>T8K|Bp gQo!Vv2:̷МϛsL1'7"!db5Ajȉ o B )-ՀLde/,߿AUwn*!*o>t$'+f0:WFᖃ*Joܾq耔ݓK֨1Ǟ$,`o:P:56ڇIRBcCg.07rV*#:zgxrhe(`k<% tDJ2˚{_yNZDRiyc+cmw#tYHg䎎47xfy v*? \o0Æ6o>p(3)Z݁97tdm]TV֍G;bO3 z1P˛/SC～X+=LYT UX0kιfF㯢I̫.$2tF*ubXNFxMo#:j}a@m8zpkIDΠt{fRJT[N:13]_h=b=b|;4CBs鼽-ZHM F1sQF1N q(= kuk'MF1[R6(1dFamY5#(~_dZSu7ZA92ӭ#.zx&U$ g?xkWlD4셀|,{FKcC?rMA2 ڙs<!no.`Mr83tdU \G"\y`e8"lR,A|s͏9b~Bwy˯lYPM_4} 蝍""I!&Y aJǙ1{w̼k'ۚ&ACTS -3 c=&w_3"bU%fִQtғoX#Kp໿֊f>d PCvTsw.A9 5Zg|?O f>A>%m(ܶэ1$/+Y֓I/̟9dMo/|  :>¢@6Ѻ+8Ol4r4OtWp*w]rlƻĊڪbHbP=d;xH B( gcY6͌ Jڤ *M4_TȒL73fSf;q 4T#]j?lcfiXTe=ԽCKJ0d:'<<٢BzܪuNMK/f5aQ^|YqOv\bp:qw}SͤU?JZn+UO~҉?%]&8lP~rc{O)_cxXMϑm7;%E$Elw}h1Isx٢͆G^M뷐Q$B;EQ?܅$kZKb(4 Tt۾< DΠP>>`;8M:ħ%ܬ{^u&V񌆒2yQ1,~aԥ~@vŠ?$ZϤ"7td.I:8'CLRD2.Cbo\{kU<8GL084LP8FEf=Ua\Pv9 lZхJ)7Dp߆I@- \m LK1鑟^ A m,B3hQ @ 8Jֻ(椓`13/-؝gj96$y'M~e?JSM@Ύ&zVqϪBQC7wft X6|Wi[u*1T~JLY3-bDY:B 0CAdu{{3\lғP 0֥;z@gѮƹ^/ eyߖf{;c髚}?{MHi|Mj%!{4+6m /';Xk}P8Gmue3:Θ_.X@a$^4G% H X-4k0ž|*6CbfoXLf# yRA8,И^ֿN{}YXLSC ^/:VkURQEEPܗf=h@uz>cN gq)R(۟KjA '~uU'_\-e)Z]yP ҂ AYyC|ҙ6#J¾׼,:9z(Q50@dƩRNSxɍzZ E+3M2<.Ǵ1x|a?Ʊ/?uYՠ#JZ0Q\ & #ju?Ud.hTMHWwNS;32[LHzvrx \)vAKdz)^>@>e~0nJ$>*{M۸&Tُ* 8(Y< f.:,4Do^,r'%{Cr$5}}ԧ;o#گlM`~IZqJ#"']#>Sca)]|V*%^7Lo>Fk@1_ЄU^_L;arW? aB߷hJu\4M>r'-bZA;eP.EviY]QciT|s_C_ oBnDy>Wm?>;&\LSx2'Lj9b?#Yrw1uÕt h0Ё`%P:kɞi;XFꚨ\gh"JnN,}33 9+> Al,7~ya Y/Ֆ>TƺsY#{ ^9j/+\#K8zH=OYA&ZoJ};uP/` 2/ 9Hsݞ]bF"be >tTJI]F=j/n۔VM֞P9곾cEPuȡ,0МzAE.M#gKHuنK}%PweV~_V%ʨw)3qCy2l\GǩESNHGqQ3ٷ_ݤU h~nZҜ5IWtOm28ym݀4,!Kͱ5} Qza2[YíQ(]@ 3] H =oڵv%= x8*ǴSNX2s^c*_ۼ.Yb,%"9#HFJ脘%PĊ=0v1&C>q[{ޏlr71_Cw2s =R |p0V {>%U`v8V?=LFX6gߧmwitw&b7xVH׎Mm5M{O V;`6BH}6uSZr)jrۦp/OqbiR4'_]|YH9N ^ZCC>S#vE<>c9߶"fɑ^K`1j<}ꜿOtr=2ԟHvj.m]e T"NfDV~eck>Ò7}y o6!˧hCuse~-aC-3D$pgb 0F0QVKNPMRD9w!H~Up(|q^KƩLݺlN1DE6P7Wqe>ʹ*Al9„4DCysϿIv֌j09EO~bv KfZW31٧)_G %Y҃Vc۷cRA%-XP-{R$IIÀ֋ͶnkQK Z]m̡PmMFqX{R%NWCN`7~jg zo h 8 $@x aMsLnaZSĉo]⟃4JD9k3[/+m]Zҋ0 5e zVp5 ;Hp02m'6LNI:bw7[iַ{>5g[ .ώ3FcWB\n8sYb} İ_N7 {`V@}%g ~3<$.@]X kt3O>8"}ݐRQwDXvG$V$'C}8se1C%4_n,0'Ev9Fcec!i! +QAG+~M=t9{(a~[n`IbWCuH: "%đ}؀nGwn<+Pz_(*hN'L|ޠ)ÚO(wjXiI}Z,ubڒػA&ͯ8N[/ ?u]RI~a6rڨh 5i]ub9'5h9}S!£; ӰmQ,RgY6uTž䃣70!RqIoYry)qc"ϸpͮE U\<4n_F AFYYz8_ڣu>Xj  du"6Gc#%j$Q^9d U7:4"j3]Y`+tmX@g0N)\"%8Vm=:);s;|XA5F l?OJ-d =M:Cijѷq@F.z1Icf=@䛿5y]Yx}i҉F͡uO5r{ב430 ݈HPeCq+Ev$nDrOr= ;;@ܾkNsSi]yiORpA9#K@F"\q/i[]nrQG,|9AJWrKO8r@s14~wM`Ez{֗9!Ϭr.Ӻa0c~f%8 F u@@ c`u#z@/p4.&j[&V,=@Le׺-oPx(W2Y8- @6L)[$8@ ED|nHf*aIpVlj~Fg~PsVuaudV9VFm{Ƨ0}%9!7NJ^ #qp'jiU;[ցXK5Ozv=B_̊E5~ #uR };Kfԃ'3ǃAfB,Q*"2l`? h?|! ?t'_ЅCC(,*Ut[O&:]GYw;?w ]:V +l RYҹ װ[`ʥSLM6]?=<@ !s]ͦ {E38*#&-kP=`Iio僳c {ƏNq Fd`BM[ &sʜTS-e,pra|AR =823 ?XًNf}\CZBhL^J9-e4 T7\jԩHL`vm2KpIZEK:k@$1&jwh<˳.FhȬ Yj]x/c\d4\rPbsX7ïߔh!rjzYHr4p $ӗHdzUO[kBgXC)Eq!C,4Nm-f?T%p'){xvAJy1X힋m'˷H Q:<72iA?ii}u7Mi[A㚸|5Gt #@ݞ;iB* 2GסП*Ƶ= MNb3~g/uQ//|v}ӎHw.jA31.^7&?5`!=eBQՙOwqȗ#fs^ A "ܩxLQ!B?M^#ə&Jxb F",ԳvS-Cǵ^ӿ {!pí%b**u[F,ѧԬyW}?,Y3攓v`xi/ܩ +=U 䟻XWey۫2\ _AqaD%pČR.d$+cJt`{|_,< w "oZO .z㾉ά\L#>xlߠH)YKu7ߩ,*QIȯ]i%Ce?ʛET3;z:4 4tIxn*VYq,p-r.:o~ +տ4Q!2ŋu3rUۦ?Ͳh܀;O$QaGGmGsJ!uFR P]fUR9dY9ÛW|heOfP}?ORZQdVӗVcr\πpi)ܧx33C hȚϓ4Ia:(R ڑҧBKӆW0 gW?dݽW}zxGN7's&vI2w_ Sl((x3Z?@{gZE9g;i&: .ZgY۶G\ƍtrBe/'H#:.P~GY{͖?:L䊳m<} e>( ~4Z,/\O)HM?qxߚ8ZqR2LDUiɠ}cX< ηLY>',𝭈EC}B{NC蝑/!L)dpb*n]icK+aeׂ4;{:5 cmW!|1H<|*Zgw~Brf֗k\MB}w/V *8ckPz2ۉuSzTeĿrP ] ޖޒf#bc'b(:\g./H; 7 pkf߂;rmONX񬬻楄 z׶K^Z;D􄱌fHki8-D;rЗ&zMEȣ_خY?\F1w`2xW"uk3^ TpF [L"riKy˙MnAoΈz[^g?,$ ]qoN릓7PAf3_z?MfZX T6.>BI bp23,bɪd?,kYTQZ|*)VuIj>3$ FY#;s_'#X [2R}R1Q"kL!{ZcoSpMN8hW_Ұ>J=@vȗm8k<6G䝝1)a7hՠAq 27= q#v^ѵRF]6ovkfx&P 7<{ qX /S)#s+Ɩd)Hu]噘_&`"w&K51;8(U?YЙI*bڊ#"RMK 4J&~u K(T'KkmT'+L,9!͎4ԇYK W$= 6;ިT{u옩<#[S_D/!7KP`!r:)D!"R6:&2PEr0|DBG6:(`w|jxLf&03}([Ohgpkzh*C؇1@ǙzK·~?~9dq|7@0W7'x`.lⴗ|..r>L j޵JVS;4y2ޠ'f 7ӢR((ZO}cS>̓yB[tVKTPBn߬iUͅQsOSB ;2:hKS9m@ۑG Ϗ宕DZiD>z'ygټ/0IQڶl'U!\Ъe d.CDK b e>ЫѮ>8׽}QJ QZA{PyDJ"8ԅ;P/:v3Q4 g "zgpLV8_lISV}-Y*QɩcƇ0uІ# uǢSYd|/0> ډ۹݈"7QW0Rʍ76ET@2:`9v  C 9ðYqK{7PFٿ9hȨSA 8 xơWtÌKrW[;w7JnhG|q0QOt/?Kub?@=]MIGZ@1k: 0zkߥԲ ֨Hyx0i^yxn98?)xӴ׮ bdN$'ʖ6<ٮEayi-;4R&IqO MQ W%@sp= y!xԾ~p:cnpQTv^zfhw #bY_r19=sG!sz(샾giLқ]UwԈ$r>CpKASOn|+ e~ {a'' ,72 #.Vyxd4vhxt C8Qs'6:ՏQa[Cney| CIyrɼ:0T̈́Cw(fh@x"D?ZLĒsrN;rb0yEOo`_ܮQq25 7 k~d `7BkN*-J/ ;o(lt.<~I⢔N]:#CSjub4|e Ez!\NPe9V@9bzg879숱 Vhk't7NnK`OS*ط,>4';ڤnE}C&EN֙D=zqym\C]՚E)tHBzdro[9݇^ śʀ%w,H;KB~uJ]!y-'5O6")Wj3{7UȔIyF(D(jd܎]CJO 49GvA5+&& bղ™l8J)౟ ncIM!| 0F[lhMd6cRD-"}Ϭ'W0l9MO6bwԇmӎy(5Ԋf{0y' VE6ŦK P]Q~ƌKW**sGoK"GJugiuX1 $ܛ:Ju@`ῇOQ!3q="ߜf(X$2)Hw = lέO_rsZ*'Uҝ.K<r!o)+D6[9,Ϳ(&Tq6VmP1R3wP }&G*m0HP ϋQG |K;cS4C.9b+,iZ-gÇxxU0b"hӽ8*7Tg `&myF˭BF$xpcig dDF7hI*,y3.'ZNBdc>1g% N*ka5ɿ Η'H":F$6[;_xck8F&4J }?w&=($9./3_#-:y$"ւ}֔i/vE֤ՄedK{[kIx]&^?qS]BTL4D<Ϗ9k:27j&6sCvLZW3Se~)\vSOX)+9}9`z%a?pmTC6W9 yQz68Dof.oFKDLW0#ZA,f ˔7N2PCc6*A9Zjp:;ZlbFyrpS 'gФƚ{'8%Tpo{WWsֶy C߆MW9@˅:kQ`KmTL&ԶAX$7ĩŰ$E֞Fw:FG:Q-0 bB&_&Сr@Rulm?+{%i=Z*PpjY~{,*_Y[pr IyVFt1pUegg`^2qQ'}:h {еv5gI )SWhW^PBVtpQŏ, C!>+ZEѷS#߽cjU؍ŮVܥΚLuadUU{ċ|r Da5-fYWZ nW1EuϹtO08Vuic+19p-6)d$ L-goLФ'w&EQ`n{׺Cy)x"gH \z&sc*dh:;d1 &9c`<*' QS7t,5iitk~jTP葍Wc^e89,.mg>xMc< }i丟5E+O{E?^>Ճ`TqD‰nsF]t&|-%c,AIY#J3#Ud/8L* &v!>~: >܆zr12h8cRZ [=~;#yKN"rsC%pe4 sE7 |ZiŤP#*N3ԚEc F I52eD %ǻebcƈA-FNy߸L84lQNiAT,! !|/%:ReIz9BdyN䂦bːQ4wK݆2TpE}/`5B3f!8uxs-)΢tRO[cNY}kpCxxņf=F@%'q%+q&OՌu$ qL'7#.&NlOSxKSiᇊ4v-ɳc­'|sCn%kb] $-wmZeL:p MBkઋq4}4n-hplۺ&5Y 8ZҁWo ְ=rjT9M#Zla=!JukJ,w/,Cq?e8(p'80Q>wOk4莃Ŏk Cfs`,Ǔr N8(N>XBZB4ǴKw\ƨ;*7W F1e874>Rd!1~cw{ ~TcR|mo(ٿC9 :9Bp<=_&tۖu4hNˇ|CyMHPzt8_O o]Duʧ[Tb H; Rt(R=Qw8PwJ65c|j2=W@+Ne90$\=P Q6!09{QS[B݅{I]a=YX!Y|̛|~Zn#Q>,{ g-qNjq У)#k>-c!ЀMx[_CP>Ts\"{$[y7MK0>BjpY状 3uo%oZ.6$&L *=nvE~ ,;0l/I'ݴl3p["h:MF7$T}GҺ-g@=Da7/JT*[ע.}rH~i09"-fTdыVg9\1˜0qF]Q3תC!,ɱTQ_cV=bL1> DZ‡Q 0kGd$Q<^NFR)~r|q/OrKA;*z}#(L&:7@:yXS6ٍؖή8.`sdG4HvA@eD¤ rԔt)hFl-CC"LG]NQϬu@cK~z5d! gyr$tqJrzjWl@ >r!}/"2Q A0X=]vXĤvV&=nh9ҵϊd~<$~V ݩOϠCёk9m)e*+I*N;5!~ҒmDF,槏cw=si(o6`+FK'3-<)yr>U T`ifݰ V7tCzd.(zNn3^Xխ!]; 1YZ^<+G7̉}<Z:R:#Yf@o#$=gQqB'j-l0AΥcZ;o,|8po^JDߍ4w{8@S p!'3Cb }x)wdyAٗ6p|^`H|ƃG$(rk2v/D1`^|Ho%RdTix lNʓ[aX4F쿚r۷R#zQl(iQ_nS Blk1Gxy}-_g$芦ހ4S[C(?(i5 sRa7܂k k3hsAÑB&:!򲭏ЧMg#9WCK9=ZY3/ۜb6j, Pu8TP(x6$SJj"%*b(, %Y^Qjpwʀ,OVd[#u%/g$P~vazKUΨ5#|j;|zDU&vrm-([=t^֚2v? WnweIܯ^.c`?ޚxKX(DZեx\TW`ܬΎzq,2T#P4Ϡ$kr8QpZj!Dbײ>fNQLlF@C5BT YheeGݏ'Q n1vw3XP`۴?v.ĂF qzdnZĨ'+X*#3=RzX! vċ@8$N&R79*[Yaȵ.kh[+};ZW/b6I'T].uFUBM|B!yJu5&.A(AqBPuՙWO=eIYv+ީzÉ^x;#vr'.D~ #8׷i "@JƤͬ((;2Abx \@ Xwu23=yaHH'[>`yH",0/If m;}:w,AfvH ]Cvs~|sf'@3n v!yYm6> 0E8N8`G[-`N|1jPdRn.]o,qkһ2uvo2G=)r56Ϭp0LpGW$fOUo\|3 \n9 VvC0*S͞daݝ'HvY]F$ᄏnpn>S-[Rԟ,%ĴP|SҷG+VUMio>T&bph:CʹtgWqg5|r`%{Jg!9ɗj:+[_<6>Pe2>Ο.Yj ^d/Le(qJzL1)['>`8:?(xh74;눬A` LÏ$̤W_CYK]oB.u TkLqޡSMFjeQT3tch2##:<|/KQe[;Eht,&o!%.H0ܜwOU&Yۡz6"B6Uʝ 5*N)+~6)Kǀ8lBď` i&>sVAQ72KPyƅ,nrv+<E5vF٢rY)ÒaP.u+x^t|Wh58IOO\ᮈ5!cPi")A/.Պz㒕J9чc,(k?)8+WN]S^-lZEf+j#czL~!8+QO[ˍ49 RD73&\WcAiߊNر5+U xHZgޑ.8].xπXݻ3xfAvL=΁ kO Oʈtq ?\^2HG f#|Y \>, O Sͅo 1SϔQ ?}o<.1Jzٹ~텅{:=#L[9^zn\"T.DpOP(ᐹL%FET)lc鐞s]\rm 6' ZINMDdPBX-[!Eş3z+1gGxl$fQc%^СYAνj :"SKerrAB G8f2<*l`h抈! 0Sd]]^$5~_d" 䍋 3 /  ꌘ:¨)O!iMx ah#b*jʍ#fϭQn Z0T+l-h?vI S?m#[4g?nေ1"3ƴM5D̫-SĖA몔OttO57X%P̩$z>C_ `2.Pޠnq PEH`,_LA\1‰7yT!PJLVs$/njlvaDŽyOƯ* -d tj Bƭql2 1;WtƜ2<$q.So`~こ-*Ï Zc'=/ӈ5 :]MYs2 u6 jZ8A o2Y8Gcg1}㢲lf.ЄA6ܓ&i?ͣPYC ?LfU+e=M6~H݌4#$.]o7CG gF0ԃ=b>7vLKT}T__ &v?ϧ'8[C/~nE5,OV+F}fZ?rQh4 ZjRNyQ5hrq<^LX@)d[\C+%{̈R;8ýCZ2s؏Ѽ˱qM6G<[$S5]zTԹWz qr;mcBGiɫr+dHە/;N[K:)ƻ >`rƛAb1%MHJÇ] LBX'd',tu6WnILM1%\|kl Zs1ce?V2jqe@ЛkL0`GѭwȨX(2uZNp _^i潄Hp"T&@4%pz`Tt'<_:l݃1!6P+\s-FxoRmRHk L `2v6X}+Ef1N7Z jVNd!XA:xU ]Pz N;2ElvEG`ݦ^kNFswI\S(L/De1N?On@{pnQe6%k 7%tNf$b] bc@j&*]1UoS{zcDr_mGj p@jq+n X{({R gqs홯,4><~[lo>Sbn^O*Of8![~5w9hB]ߣyfjﵹ50M+=ݷO6r*kb!w'؏gxm@ 2rx+ IIg9 d*gwRlCH3i0д[ZG \>"wVz9~tAC|zs!˭GăYѕCn4m/7-ЎYȯK<:+$<1.+f0Vhh)a+R j! D4m@sX8(g֖Z4:;r=l1ɀ}o0ҭK-hcfޭ⣵"4z,F|^IL61׾܀W 3Л 0T*]?i3F9|7Fhn"wgURNʼnB>O]Кڶ*Z9ɷY͛Y.tf8 6F s>R`I*_(c~/:;f2oz?byc6JWp e>o,yzx1O o $H3F.(X_)K$P~(u.}q) aCW'#ѧU]Phʩ%̓?;IOFS_yh i՝NXӄ 6P!~.L2OvN*KB &j YkMoMf |eNKkz$LJt^P.Vɔ]-y f4VK&OdI(L#”ݶAǁɯ<ޑGQj 4vd!\)Kl_6.H bJGy&.`7|Ӑxո&WQ/l7{ %Z}! wC9E|N||IjA!Lf+12rxqcjI{ cOi㟸` ƌHOpt> ։ cQ<'|phNտ֖eQqrY,P݉ʬ-bg70Tl-l|]r\\*r2TǘaRTpdհQv̄;@ms|r3(`sn R>qu\M,oJt#T݁bUE<% -/^~,[+Y){^ GŀniQ^h7 S(9n2 [C@〞ΎOiC>Oϊŏ1]b?Y^cg0EN9Gr \5ӍuP\"ۢx3FܯH+޵і:ݢZ%aT\%5 4pԮc2Øja RZd{Nq}x\J˻\=h,r*!@kV"t+@5fߧ%>is,IBu#ؙY%o쮕Vo7DsR>U'@.] ^gv,GJB8'6&Ag( $ 4c0U'$::_oDhQcxNs$!_UCXyFn}e Iڈ*Qbl$㴋bvWg&=tHhwK!>o _H1pjNɊW+h[=4u7O/*鑨"'SuO<|^`PUsڏ&8αlkڍx,c_X֡x3 | !tiK}ӇkXaǗeczq/`vm%:7E"TӇ"ceBT͌i]蘮<G [L!HQ>p'Ƿz)aXYL ̚ɩZ#ov!Up%mNxHo=CV#"F'dz(Ay~ep^}Y_,!q(FU"&؟=i/W*)9Uљ2K,Q#VkȰAѾ'/:g9S6OѦTٴոMTO`, + -דWV#1iWF w(ECXko@aۅ)`&f a֒QTWt6a}s5*lP8`?epWs䧲?+øTKܮsξLZ&Ҵ$H[Kn7,g{M}kPlNv@uwU]V ko:v8lj#߫WekzAF*5YƠ¨likd H"j*/YfXSٓVʫJ*Fq!'d"/aٟ;c< } js <62Om)!rV˷ߍMT2tPS5ﰓi+55T2eݟS<8̇l0EKvT8mH蚞y+\dcT+ 257penyuo +7&XqGpB5)}v&R6ҝmYsؤ%a oNj(`#7K$.uudo*6 c"u.n\29$CK?*;xzlf9m06Fj=ڟ"/ѽ:ڠe,R"3~/x5Wdϛ_W-rbKme=eR/)gm/X]7QoapLCi_w.i.t>QػdցCYq:ۏ%MCm25Mض\ '6I jFҾgL|*]RHŝc <7o Ðcs!z8YH-Ћedrl9xuƥ.qCwɦl` Y/Ѿ >9bqqkaL nucUr)a}>`f>l 2Gό: RUx]Yx.)]oŶ"pyP_ha40&)7dh7)ֵ/k-W*wEkʎaXG}߸iL!\ͧDe9bg<#YjKRQ'*h{׹^CtnMil hfLDx E L#i2pS*%78Q`;*# lO B|'q)s$ {w)2w |V" -"FSp X'! =,Ǒ ラ%2#o,uBQAjP7λ[ +M*xeM:3]{CbmfBk* n OoE]Ä́L=h?ZQc™OzR+#ݿtG{GI~[MH39<=%сĻv.5oϏDGԧ$"NEF5Prs7bmUKm/(jDuϨa^nmF(I^ܘmG& S9$w+u:?ͼБ/Crzrpz&K(>#-jdw^ DuFj_pg{`3m ~_GZP2hVL$qiЅV o9@+8V7E50112/li9 XlƯ0k@hEc--m(T18DD:D E7X|K.(>gbX>Pw<'8V'.t}+;NR)1{_W <9_o^-j*ٖ/⩃-XbÚ"}3+hQTߢZ}1'7xGVZ--b:{3&AYQ.i[1 uv"oV#Oh5Hb/D3$rO+i2ى5R#&*LCi)<62cS^n C-U=Gi [h"gͣ1Ң}E{`lJc,4>WJo*k'׼o; LEkԈUW_9Ό]'bRW*s5m"ZG 8Kp ,˿XG6AM);ZiSG`tQ/x\# Dt}`Mi#kAcׁ-tOޤ363t׬T JC-J:X4PuLM4cr>Ї2_R9ũ@DRih!Eeτĕm[.- 3:Y/tąa߿jo5 )uq qdD+P죁Qvm/KkZ_L6˟X}jQ͠@F؃KsgF;ēyg_O7p'xHm[HO+{Kג#2 3Lx\ ?(H]{oz(&T)Tc*HmOpGxs/-y!P*L.i7h N`4iarzEj5HP'um3,xV;ꊡА.%xYy3{&Dc"=&Mb}L%R2(W(΅WyCCŷ} ^D.앟v]aͥ. ,`/ OJ5^<3e.OtL=\_yF1%Iϟ'nәf꿆C]n<3,2Ŀ~Y֙WJKvV6}<U IEIBTVV-G>Ay{%7?8G]P,oi)t$'>wNqr!k)ZA3KIߨJiaw%,gdfE:7V^=;_Fh'7ޔ?MF )mjo IoNq_OKIJ$[BrjN0?fJua;la;"8I4&.g^BTbHz+G.!f^fP!ۦuo {B5&/Zc>{xΛ'ۿ)a|±Y/s\y9?FgvR1S+,iI ~gÈXjani$<[?SgtcO^J}_Kr]c1 B{klQ:5 oKq킍!a|U?yI~f~6;F4LJ EoPD~3$\щÔNOQ:{4mҁǼ0G'30] _ [Oз0f|YT=N(AFh~ op>A) HGl70 &V͓v/ULꑋ^̩%%0ySH=޼?tl(ZqI@J"=r&)N&ןm{}bڌR4V]C _P %ArY?@濅Ӻuuy@jq>v".M&>]V*T8/B:NFwX/mͳ1/#mOGEhْ'?8:u΁}|v<5ehJ~X.~qG@(Y_"8D 7.uaPm"E_mgEcB 6\rQ2Rͨ7P{&,F_`pvAOPߩ[0 ]ٓR8hݤ۲-L$ŏvS˻[wš5a {?X8V;)MhRo;,(Z^6C%j/s)j"H>,_$~PnrQpb $m>15.>*IIe~#N\4ρgMN8YX5 ?ly]4.d eפ]NlZjYxI.ЏK3HaٙTru RG,J!W=bSdLDַSkduJOEwD;P 

N*MSȺpTCi]eZp!%tːG}s5I?f~O… M]WZg Ꮌ'0G@k82>xmڅ eH{a</$S3~HN9ͩq.6Zj2M|I 1_sz_7r6j8stc/.GK偌q9_ dQo:Mj`+݊jU &f_WL$A$/V5ȳa6*bc[Ϋ = z o Je&i  ߖ% xf-⼒@Mz]j`y%Ah۷FaW8XN 47ek[Ȍw —S5^],Rx.) +O7ݦuUNrG$ `Р\. qօk>R\OI\t&QF⦦lhxI2a{nӯ9#yd8沵dIlmɠ$ax=tõg5eb aa,y}5@W0Sk)Jgt|^# ZE秥dM.V.seF" JZmI_<9-=~a!NCgz4Mz4԰D|&w{`O6XΩD3m{]S` " 43RDӛpUFUeOucu/гnXGuwR$x,"Q#BH~o6H |1evoCMPR#qgGS.`qM(*"8o ʬWRz,.k 1{XƊ{󱁔m 9KPr f]DzŦ.͠nҌSD}~Om쾃l^MG(EMoljYu0aOϨ]$j 3';g`'-[zj8}6"OW2~Xy=fmlVG]JJeO4͈h+ɷڼӁqqtVxg0tO'%iDMItpNHa@ z5*28,-5EK"$TMWJ+T~vq4$/P9?%+1X<&:QMY*|j)Fͨw"&hZfcj$ڋjSf9֬{"F5B\zf;9O໫ Em=XpW2eH,5)Kܘ;Z162Cft×2b^|]^&( 1G.q_Cec ⍶U3/"D+5aL8ԃYGq:N\P0S;cUTp{!-y W$.:gĀ_fM'}ldUĨ{q{lC[qb-LWKxcI_0;A;I~{5nTR+Rirohף;E:~dD^fkJ!G LP`t?\IP(pcO?OyyɈJZm9}.j^3Yf[5f?gTwVUA奓fWˁ 幰"f8QT̺ٷIGmLX_N6bTg?_RU0$NߌPJqg \+4L'D/*}r*E-&L]"9PjR%kiA{3>YzP|qdExU{'Ώ&Ȥ즊̺FཊWh>;?X~Nq b'Zh 13qs{`%Pa,, cI5 ug eA.lZ5p (h?\;' V_s{-c"a4BlYe>x g{x‹S׫}w&+ߨ_obi%Uius]kX0T}5 %e98I伍z7(8E4Tά5y?-'Ʒ}[{fK+:< bKW OmZbXm%F60mrnFTxGiT&]JJ ,f?(a4Y!ϴ!X/LNQo}8x||=)/33B''El$|? $FY]vT[D/W5j2ƼZՎO=ݞJ.j`/#1ʳtX T#zqgP{xd 5" %R}9懑SOitiUGC^@WƭE$Pa]持UlgMR^%7;&BR Uwscaؘw@۞TzCaګEq¯'0ؙDdG6ċ"ta0 1wʫULl:p4) mg I `o`7 "g6I1shQNkNWF UjLb&zSWgyҞ Aӵu4R&g˔&,r/1$b_zj9ԝsd]I Ip}!DRҶN0hܽ8<$0`pDRH[vspg'~oȤ( 7tı vam 3s=( 'r8`SߨN@PzĬE \:qkYP>c&|܆/ +δӠ%ip|ƔiQ`|deo}%8fIb E͢tZr6+)@޲>$N-T՟98Joؿ@1tpbP6WEmˮD1fƱ1j& \O]$w 5wyJpt>.!)Q8}KK9[H9ÁY//n9bi4yRu2;;91@SG)>ޞ8{*ȑdEAbn+ԬOr-##2[ a~ȳ(QUM9]_ƱOWt~6@o6xҟP B>OZ$}evhR9{ݼU2?f?h/n0~κ\nX=O˶?Onh8@K:DaMӏ_Z{,pm'Zim‡<.*EJ '$XG?t~}ޞ6DvsC9YͿ_v-'^Q&#?t̄& 'HWbCl6pw6j1 xBl{L%CcOTivyA 0yaR-6r-ؒw]K/)Lum1堭 3YNpGDŽ9翄W{v0ihâ d)-6@lK g ߯gkA@7+jLJ'[̗ Y] &ڌD?4 QʺEg<6 r,w^1; ةӷ!9tHپ@ p&#vnVX{[_$pN89 4eP0 ;VyQ{kZS + 8qf6M/t約#(5MIԊ#~0hth& FU!XcqOR t93b.$ *6ק0 OZyhW&T [=aỌt@O-^Mr쩅2HCJZ|Eq" MY 8v>޷0^P3W|yZAjK5HE8>!jg{VBD7*Zp؇#wV/ U2s8sO/?6UcE:=SߒH۪ fCm璡-c w"=j-"ѥe_U|ۯ<3Ӆ٪ ۰yvk*;&>7BdT"ȓʼnv󉶆Y9Ə#vu\կOZzx'|xS#1R@E0_L`uRmćiy@j4gQHnq>W]xaӈݰڒFT-&௿ ^dvSu℥$G% \TKc%I }%Q-W n,S^ f]Ŵ8l)Hq"NJE}=|GK^fP;~p!y`;`zFƄG=xcK1/ժa pxpv>#iϩEtW}=ju|ݣN:n o`33o7j M:C( I>W?j4t"kZH֔ATxĽ@&>w*Ӱ]=OG67D^™4/Cym;\R)7b7uy@g%% NR,wq KʽonL:o\|a$7$j!7&"CuQW ".G-Zs+kcYf]q07waZ0zdLK_ vaBR8^P'u ihؚ9H\ E91bGmIS\E~r|t69OD8,SI˸B(l$u#[wuQ.&e2L$b I<\0m0x+/*ݸ'N{Cq-`ٵ8m`Ro;S$eZ㍵Yqc?T*q$dk^0M6k4LjژρQl@@7z%[iazI=N6C}iw*"Ib -`(])1GZCjkpd7)6bi1? )6g*2؁|!_UI2b0x?[Y@ꃹĒKud f[M |3+1y2);r+ c _cՉ -k>Ӏ;iWM7f?=o6IjKcZl(#-ܗGnޗPPu:?ChT|A͉DM!)8?4K{/gѻ9> ˽#[<=A 8Y`2TRBH9 0d1t{*8)_N!z@qo*Rbu&gFjҞ &l a!40 l4rDyLRs6#V6}xүXv}Z[4!PCك!s*<=Wk o\IC6\* ,9 ֥ !_lVճ1mzj4'HY{FU];yljf`pU +EursE^Nܵ˻%ecYlk7[^L^mX A&B ,5fDF o< ƗJLT8I n iBWmq ϱ*ž02( 3U55I%ٞ0'{TEx~-Ni9=dɅ]ǁ4X)0A>R^l53z0翋]!c:6VdaҢu; &|PxmmV}K IKd]dUi.f]g$Ku*  f<[: G9 cpXiV윜&kݖkZj$sZ4?50 t <4|zh""^);9_Q3YAkUtVObi+JJ[' xŚȍL˜|l )hw^cbP 2Ee,_eƕk .ܘ~Ω/n:j:(qSQ I_]/%V۶X(Yh$;?OhT˄ d*545sKG͂KqTG3f@<^Nxe#(R88p7A(/UeFzY|ly0cCKk^z^Cn^b]mjliZtǬ%>H? 7^5pPo%D{fg!R?X(R SFLgH_Mb&{3#h%{HejJDy^xB!k$> L'vm|[sշ&t@Jcs;Rxj`Q\Q-y\5$`w  '[ eO]hA^+U47žgKa k[e/n C>$S`7_!x$jd| 30nB%WNǻPo0dv>3cRi8T{{#s)NGT4RC?;h) _X7İ&۴d8٧EwU$#}v} =}|vuPel }ȲysPSڮaz 2MN& lxpĵLI$`ܪ71dQcՀկq/I WPSŢ(Z Iڥjp+ʷ]1. vUh;MdӢT1>Rm1 Q-i!I$,XYL>200M)9>w.=w攗wVfK]2x»1-ծHX34pK0uyxĜUЦR~I# XDlJb-k Id;:}G'޵Ҝ#VFiч}}9߂B J(S{J?׭fkxV![Z JY#Vϊd#78[Z2<+y[ Ǔ0jIW6Հ_;e2:VE"UM~D1@DreO1^5Ӽ=y>OQ笩>!7 ܥzȝqb\ "AY/+/4)kԅlY9(:CpO(.[2 ݔHv5ݔ]ĩYrOW)+Z=ߑEdt4A0ֿ;vA+<0x:ޡ9&鉵(c<X,ז1z_xE \qk> n.0p̭,y \\gi2435m s4v,9nw:3CC}s+0Q XRjWؼ9n:F_s֗m4;-`҂^s)g\bE`C"!;) ~3̥6cfux-&;0eY[mHmV睫}3qpMPe0u`NA+] وJ\M8nyAЋbUݫXS@@Vnj oCկS`wA{L[ oZ8'4Eaق3Û"L\#~Vf!0u۹y⡨9BI2 nX硡ExA60KhʼӃEMhW 9Mj@ov{(MA[ oT]hkӹ\+cVɗU.:p !czX9 59RSLm}0lєb"tˇjkw:% R̩:ZӥE1jNӋ,<ɊQNlS$0eLQo!,s\_.K6m\rzؒ;ޱ!x-W?[<2te_Ud-Xk]hXE iuG纊`H}b[S8,=ś3 ϑ5ǹZ$@XTGCn*z[C7G[1Lй.Q]WC6Ϳ = Y0y ϐco[-6Ҙ6d/$l%~-(Y!0jWf ~TB8iHtJ \f~ڔ/Tt~Qqɑx4Z4:e]RT r><7ݖόWEAʗV!".3e,s]M'jH^Dɗ$o-'lp($}oLyz@ԮLsq,g2psb׎Cm*L8t"\K "jlUU@V}aISf 1&N% zy&aGg8rcp͟pb?fme܉Ϊ*wxȞnG=@*\xp}vۤoZb( .hj4УԥO4͑i VB7uqWޟMx$S0<(O8ȭzhKMXs"S̽Xu!!0S %sF!+4=21rDnxi|}=Wp5jNh|Ոj 'ebnBnhq/NP ҇\ VtQe7] W[NTZ/d Fu ^B4I5QͦL'*{w,ºE؀NؒW6~ ld/zre{Q1\!!S#Q<iD/"3F8ؘ+bT3o2QP ʰ;S\AOyQ- ю5^{+E,sI ko\fdC%΢t[$/]ZdZ;jtrUjJ^њq.-l+H(|BBCrUH!V.USz?Z%X|]lofǤxWrG39~ aVćw? :@lP 9^UOa FZ~:%wH=,\yf,fa-i~,ҷ+wll-%T'6\hF'x^ *[3URbijrZȐjԇĀe(<|(rLA (i6P +:AkF`(UȬ[|QK4_lluubRLHG[ o֗B:e"ٍ#U4]e;XN|^/6Z.C4,0XuYJmJ;)tFet6y?,JVfZW ʺjuM[;)v `>x.SjBPb"&|<EpɺJ}zSSM-ENf0"U^N s0neNpaoܰ*=l䞾ZN 0& 3wPq}_Vj ^ZB~|H+3?/@N|kYs+qz]h=ZY,4AÓMgq3motp·  !/T?ȿݐ;n{٬$7r]4}w`R-#gVΙs2$ה|:M"?`~Tu웃B#},D{ђfBٔ4A)]]=?$:X +!H05H@= w<3`ՂHұ.3ժ jXlYvxZ뗌zD{ݴl%5vXϒGCrsG(#[#{jX*XWLE`LDxmV^婇k>zGŰ ~\3T.E4k+5c*(?*A bLJO#ץɃ'Ĭg_6ۺ-)ѱ-7ME WIGDF >En_uOW4yƍ(mA #/uT4*c "G#z~fQZEwz#Y':hQc-ڃ>u6h_\:z$F3tlFzp k\Ζ8XX:umӑ9U.T8-aξ1 ܞM[*"e&z̡d ˎ&©fhMԚO6F'+[Wl B1k?~,͠x/W,Ζ025M?l,\a\Wwt˨y803?deHgN9guՑ@& i lԕGr?^76/gnK #ML0jmW jœh)M-݌$KDG2S "bSR2u,?!6s:K:hx_g--4N(/W[W\#Qmg#d$L&Pw Tj2J}M6@&o号.A]h.h6Wp$[h%uo]o/yi`#zvӫF))ۿ}D-9|>jFQ6%|0e'Ė #N*y&6u9ᤥ琋%-}t^U`7np]6439?q$fL/LhoKOQ8_xNH7~'CyYΡCR=6OX2b.:=2o3 œUHi@iњ0#㉙# &bVoIA4_٬OَӒ T?[5EnZ5,Biz`v-؋r*iTJO@wI^K <4Y/{[jƲ H&X)^PDD+QhV=xSoR'qu3,:BA; 70^ZQެaP:ɰŽmMǒU;Q)ѱyqO˰o7-3J7]]#lO!ة*r aJ-#YY W;'ʢh2F!",X!G%S )xϯZ#[j'pJܐKS>$){| Ng ]S:3ަ|b]vK)LW=<"#@pdUhHȢT)elI2B!ɖcAˎLMzńLUCk8pBE*vPƑ+X#)u eP"rB, ^2mB|RKDvrec6eJ۬}=)I`S^˙ڰˈݴlGâ/ V{;R̼܄{sEͣ3$eHC_ev}VSGϨxI`p~"{[Q53'@t%[<2?+O;h \еMgˠ)0*8!{H7χmWτ68e-Xc_ȃ0ILOr0}aUrwy@&:Un &opLh" nB(0"G R+h@ԠU;x*E8`"Ȯ6ߪ(zj)r~z|dyif`E[T;X^ WiG|^K@&ѣEвT=Ad[WRpHSZ3`%7SNr((roiOh}-B {R`enX_lO`؋la}k NmR ^^9fA^`dDz1"{9Wg΀88N}GDx: R:6,"%PzP0gmTE="c|B7#,\9b1"\3__dA; ®H]jhdIašaS^P>u|߀tu݂FyN%Ks~\:Hb&ȣRAFISEiC7)D pAߋ--f/J>!b"M.L[8*V|rXRbN'H*dUQGҸC04Azcfn*p_v 7F>!2y1 zwSyn:4W{Z,(Jj,dxg Ɲ3ͥSkU5$w7Eٖ]p9(X뱵/u]Ǵ@")+UK>m% mo{?׼oYv'vB\꺊bݘXV8_,tt;=)º:XNw\FQ|BPZIжDL21;kg}jO]_!y{{B zD8oyKl#3߉ A՚6Sf쪆%8ws kSt0x}L̥ %'|GZG<^59%[<~z}۲0Z7~qm8w}hK'y\TsmܖiPI6vZ\V.v=b57HƲ.jbNlb'ˣ*H!ÐBM~_t&n#.qf WS]W..n/s iӉ)z79KVQř]EL|_'AUp2&b݊chFᜦl!(01J߀൰K)t_ڙy~ls5&ӶbuV3PdN,.'4{z<*yH|pq=iy x1G-4tɜ)Te90 nۆN}2m=.TڣdgF0܋ z[0 M H퓂ʕi]WX@Nw{ S<Uwjd /s,^B|~(fpKIU9[^:|[S T(B@,i/h9EGS4mX$˔+QA`lMpنxyVkfZ;m/-Ġ&<雌:2_[dR|H]B [ 12qypf{/8ͱi{3[-7ۅjֵz*DbuM DP%FJ 5azuIʰ?(ɆT2@+Q ={6бt&3WB]Gf ~iIƣdB [ȉRJUcc/JP-.lqۼ}'1uS]3kb/3usK j{f [ӯKDHlmRJuc-\dB mK*p#Hn|qDŽ W!O0OAku\j@TqHrQǻJ6BpZ@j{x5du/RuGҎ [5D>@Z5|\dbWl(R:xT۶k=ؚSbIhac9A:0(Tor#'횖<<^q&ԭ]9qOWS5t}oJccm\BZKdtw@h I; \M鏦w^3%K ^|hi_SBQhiJ`< 9k ai}gHRh|pFT6m?YeC`3ˆJ(НrU>~ `)^jYZ%PW%`T5"<}/8нp췶N0Y$'9FqՌ!q9Ho1_ 'd3:1:)eĶEj4[IѪԮՍtNlʳD+4)9ݏsĪ={oBR2$qLHWbfme4!Mt!:ۼ#dsi s=--/4yj->%Br",Ue$"'6ߖy:$ݴ>Lj,,jJ1Als[\Y/Lu`vPKzj)D.C"x{}ߺ<5h` 2TDACY1d(Ž*U]s#eGH<:@]4ϋzAaR5_2W&)D`@^l( ixDΚ*b=*c^@#tGxMֲt vh z3-hbR"jѣ*tG@'~XzA0:-g>Nϧi$lřRkyE" NA(-*힀A\exZ(pxq-wY̘"0o-)5xj`XZ|g[mYbF(Hqn4~/%bc#h-dߺ,tn 5su p@83k[[\O9y˲mTy=YZfM鞶ix%p Mn%- r=(SA`+h&bQ'=rcŀ}})z\DLRp8m Ƙf`x C_dyk<(2S~ }ػKQ8*sg:Y%5s}.qWq*}V8nvc(!ӻOBf//3=~q>xT{DM{vZJHK<1bd1/0g/.3tDh պf`٤ , *"Czj=~P`c졭,Xf8JX13XU.s/XCM*vBkD:Du$mqoV %9WμBǼl5qq\-0Mo(11_Q2)ӑBP3XuQF忇YBp.⼲Xuew|EV  eyY#ImZU)]I' kߘ4[OkV̭ ]1It1U3Qv\hl5q̦VL.̩n+8K>U_Dw'e&=nFeBwe,215 0:b k,.Z#󑽲˜C^y5 .NbX -$sAL?j E \rO4'MrJ}35{MiaQl =n;L*!Pp- " WTja&~:4K vL׺j6_k [ux@Td+7[ysѤQL}9vDJB_hNe7PI0Q:Ne|30$[C I?Z$|]QT@ ٢&f҂qr)OAܶ;s?TܭZB~qԠ;}[ҮC}qS ZJd"2##ڇҺ0`c/IxA@/,/6F`v$KO,W4\GTW)&Ů#0jX )wmɡv#̞nڄog+'vt$YȂ.j zZi3YMl"oYo/ Uݨc1 zt(1G^(1gD, X:T"v f3P5Z%D#Νw"ISԻUyӛd>U y?#I#'Qus_{sƼOS.x{jH.:űǏo葠׌G2V*4!a5/Z{,9?.rj37BJp(|rlÃ]zrÄ)e]JQ}ȑ_Go? lo#a9ǣIb%Q:y)Tw-(V\ JOׯaq5ʇ <F5j3:JEq'/ ADxf|K#_9!!|WBe"=(32s&wO0RND˩NL(T]08;q/x)ߧ;@&@^Ͷѝ2zRly?fwc⟩obK|˛Q]Vqꅆ{8%q]ʲ'|򔞡GTSr66r0\,a*O Ogah&u,ÔMoâI^ Я2KoYQbu D0#v |Q9T,N.;lhbFܧiQ$.J?4-#k76mtͬ=F(2dv+ nnzf޽,Ih=]#iC^εdR[(-gfy'4@boh-8onL^ +^'4ľ3_%&݌;?C,[J(QLV4҃8rGAh;Li4݇.~Hqxo?ըO]/5V9ijr#TfN[Gq3uWm8gH=HW;8N#ly #nYl|. wcֈE-[]9W㍕*fuA+=`ywȲVեJ_CMיz_ ɬC 0 \[%;S/$^Xee+{ݿ/]MC>$c=Q..Z 3!8ݿr'&T['DpYAWxBp>A? :__]/[t>&$m$1E~qtt`?E9~rAH3(A%fiGhhy4iUV,o#p5­6pb5:u@j=vyDtRfZ`? øGvH,c,C1=$k,,^#l$}g.UQ 3_5#VÙ"bj{y (B DߨL8>#}UyDNEhSG8k§8f忁̛-5G-[v*2إ5!&LLWrAj!,q{Ħl/pD!{/Wpht^:ar4{$CItT 2rxEsTeWr#Of[-Т=6% BdV8ix$f38<`{h,I{Rxk-r7~p.^x$u^lm 0Ϝ\5YshnB?kE{@qC81sJy$ˡ,x-z)Ү!d[lR{dF"@pnm( BwIn5!IJ,PXD2[tc$Qt;Z!hv :*Cֽ}{|G໙!R }rֹz"C3fpt#RھUTHٴ]ۗVn ޘu /JV'RZpoeUywBUљbtW2W6rS]D0h=*~b9.I(XO쿈H*ޅjvUytPz[WutX#M | ԀQE|xGf&ycE~Ἱ8nщYn7 !Ko;W+~ߘfQkAI+J% ]9Z0T+Tc/!Xt$,E,i̼D(ID 1pY /#Hic١)>_Qi##PP +Y}4 Nlbza]+??\oW80TE(.SFFԜ$ekr`|Kj>tW4 ̮ap .ʚ> M)RqWoL*  y1flރK,[oC*3 k_ 0]A( s9nt4"J(:gSv/Fe5+{{ $W諒$Gs1_<nuOLa\~<9:|Fi.[{MJ8ڛ>{\Cމ:bOR QA<  4Vϥ:|8ɉI?.c]̩+A컏zDi_S&8kˈ.<1!?y,`&]N;_ cy2gĩZ<:\%,29xZǼ<9ޱ``'&8;M7:Wm*#Β"H'"5 m _&Jxd̫^/ ߒMO;[=< 4T |Sh8k6x-f(8=qNG#' an2=CĻY3Dnl;!AUf/mMCn|~Psf5FM808(L)(@Ep&=q3Z|螲ߎeĬɩ:+N^Ot–Hݓit oII* {m!ړP[@%U~h8wNϯ=fhA(:tV,?舶{Բga3b5V`9 QN2B+'e(pTl>IKgmzB)ON {6c/35^\C#ƌK)Ɏk,,Q6 :# S*h6ژ[= fVOBF-i67~i!d`U' @* +wȃn7lpYm.ʛGJX~s-WVбo  :ڷA'O{Rs.'>`gP5~gc> Fr1^^Qkm.Xj_<9~K_@;F1v^_P8;ZZ[[G$,/6@RSB4m!jvKy7zeDV 5sv({(ľszpDT춖G]Hb;|Rv}D($VJO>x/a8oԸRK=( t $IpgxڌPT֪$1[BI|زyK˳AQ`K@ؗJB(byK="=o¯9!3&;vq֞l`j䇟"˗ rgӟw2LQL YP46̷ *!1S515 "}u2pXo(n9}ʐ<_)kݢaI T)MZ"=\)R56 3jXRExsRZҽ$:gs..zuB iSdҽXO*[j m38˰T 1l7 tzbo'=cJfww+ߛ(JB9)!4P>)g`4U\Q]ބԿDk*oIrMzF*%`<<dy-.=+R td5x ]U7'wAR(V傌fxڞŜX5t١\2EK+ՌĦ0!`,BEP MCJRR:H2Sy}͵5TnRI5qG_8j;:>]Ɖ] g8_hN;\èAYl<=?+ǵ=Stq2BnW6ћB@y F9O*#!o/ )cc**-F!ScY*^D0Ulʞd*LOW=B}6 )-.=Vꠉ3"A',0q o]! *׍/Hr&Y5p Kj0H r[+ ŇƩSPO@i\₷aa2þ-h/N3j([F bGl?ҨL5z/Siڠ'Ov!Y/8mda1}aSrỄMP*5 Dl3̃NOފ? U F :; 9] kB+g𦟨_5CGY"F4zXmWL4Er#*%1s4 a]B[~7M{H912 \68A~ o&ͭM9kq@੶@8i`LWs_ΠL,J?X*i/`wITCQzMApz@p+W8t^ʊX<0a @O9K\ؔQ5 ?}̮Mu']^ݻ'خA$R~夨M5" {8}(C' GP,Fqz2 s5&PAӐs\Od8{]ǿ`uzc5a5pP$)k Ni ./Ϳp7<¢oIBpGz~7q]1BD#|Gy厢.2)WA-y>-{1ߨ|X, !UJ0h0& m*B,jXuřR%]p(7e @iO4NgJ(jH73f0ID|;0=EͤTS7$ ;[S7/A-TbrZ~Nnǝ'ѥM&4.^f&8`4U\Եs e D5Wloc`1L/sr0^~+T;FQLZ,Rhnv&y]w7U u #"PMB8L/nR#k+l`P1s dVӱU} be"*EA&>H*('{ 9E}8S0l/?RZ~CJ" ;Y1.Y%~7ʼn2 -(&@My{%Xaͅv?LJu(t8q# 2& |>ϛXmvU!H-ou.3ͽXFSZ Xs]ARNΑcת07uD_~ֵ*AKc0*C5Э+Jޫ#w>Lg=0wOA3\C>q${S l-jC,,L@љ~E&V8o2yF_z*y(sH!NK:c|rx'N;Ht@9^$֐¤A5ѝaJN%gRDvei[6ŝ`6Fhqu{Rü'|*,NUn3ʺja-#3aCcUvjo1DI+r*bCsM_k/ CYZXC l=$e2Ղީ?{7KUE4pӉ"+K>8cwNg$+bu.b7.W=VVi宦 Cљ_MYF"YNEDV==W| _*8Zw k QpT)ÀaVc 4 juL}[Pd׼:cD)۽jwFFa `*^Vđu[RG$Da1ZݩXz7wp@/QJL>^E3-cQ!kOzjN[u9 8E"7 )֓)N4tiiC/׊>Wf帱9c$[sv"u7p\$=k:"'U.I!qR=Fb>:5~(WS/AP\&ld'azCY q+~_>k8 mZr*48X!6?%0CgwaJ|qmXAbE/Xl6s\3k%Ø#8剤a $KQ/WPQ"Z:Yl?GPÒ`5-uyLJTTH~On# ȕ?yt"S/MW% mɘ= 8 0 [eu.HͺW|R >Z)^hU7AvIt|brz4޴$\6G_o{N3@!Cw)6h_6Wcsb镺V)FŸeZV2؏]Dy >qVL|H|+¤krlGExD5FJkA&:=ITHu@VJs nYI%Ò섚iLk0:Uo;HIlX~[DՌ(F!Jes_ʔمp2An̗/pdD0W|X"BNuo.]O`ze={+[ٴFǯ*O/M R(B9:)LVzia*>#=>&Ne/pr9.T G=%P :ǟa#ݸin )c =cC"?BGӪo'Ղ`1TϓX8"RW:19pXaa=yw `$*HpwVf=(|خJ<'Z ̅8PwְοcV !Y磞LͩIޝ \R_2ٍZ'w6bv|p_80pb@F5Yj+3X[ ,d0<%dA&sX *V'l 1a`?)]`|h*× c^sUڴ9(f((Q+E?_~-6dU |Ki5qz*#y>=1e#-,[[Tc,fg,T+CMm "͘Eh`(S?Thdɀڔ1匌6_@E0}1g`HHtYS @rҕJW5R\tUi=9^"_9[a*XMZۍbY9(ty00u|=B*=.,7ŧq@?J hegW;*xRy~4OD{k6@7s G2vЁn[]$#Ȱm^z׆gJECHB:ZEp#y6\䉴X$1y< ABS(7%uhˢzEON/0 *dyd,2T$$|38e%EA~j-*?jW' lfu#$95r`ҰwϑȘNVD.z]V_BL&e82MuEt t/G>bƁb <,zi m7mfܒlI]BO{_i'фV&BM (ݓSd&n\}?oiqrMrFI,t#SM"=3˶~*&ӎL,2]3-scE'+iB%i+|kNg #tѮB a+pk'o8/~O<,a8_vb֔1FTو@Q dŒUxf!]ҁu&͋UqJQv琔9RZcF=X9]Z>yw@mQ{vj^ⵙJejk0)q;FJ{byjpAV;T_'$k y }2쟺%xڜ~-_IWVe'!=?fu$x͞eΌWv =?i:%P-iA$6)kI^ˊCiV~FݺfiXAhЦ<}檁B>%f /s"'kk/Nw'sʙE0N(FDE5^&.ƟDWS]QM 0 r`u:ޤ-;# vwjEDo;ҤICoRe[=Oa{+8I5xVLz=1kGQ TWa>W o!_mvIc :s'Q}׹ShA#p-\"-hgDRJ~U4 R3^̎U($hyJ//z%;|-o[BٿWb#ssy2"~@3C\3{/Y1+&:) U5MrՌ3'˳8 XFGǸuJ|}K;=L Pl? ȊCʀ>.m\lvmWȱhv[i:4vMyw'x/>ʕlP4Pɑ\E p}NVW9hTHtXMB<w*2RP7Z-M;7jz.ٟ油da8G[SBۛTg}ԓ!^@ ;~Q}"TbG7g[H^s)^!)>?ҷs֢6g_IԠk|4xHbXěj܃6mq:(©D8NbKwwQó=*Og]QO1=fyc`ovZ ͥ.)\Ob"8*c%'olcu84L-`u 𴪻tuF f\Hl=7n@¶k_|;Zs<*tde ]I+Oo&y2Mg*7mDsr} 5˯ 1~|j:=8*iRd^@!>$^!Symڔ\'M ! suX_WT`9qCAП&2Xdah'kxK@y^%8Y[v]S1K_$'Q7E3cS~@_vS^U!5a箠绘0J_ `c0Xd7HXw}Stǣ-Ys%jfKp٭C77tʋJtu%wsѫr8Kdu3/?eٸ.5RfEj= OÞʯR\WIUdI:e fX:ɷk>Lh-b*9ӄSD'\)lUU@V# @6 0-a4V+ I}RB* !5嚷ՍG%UYDz3\/D̎> UN%^oG4j2eVi SEe (;c?+ViIqJHe>8mh-p)Sֲ淘IUYߩ;ۡBH)3VnŋXDmVm !Id/& ~PvG;HŜl: iAѥ CMOJ}IZڗRS(K}igc4fIF@G#tz 16no ] ~pS[Jyz=͉~MJwCKSg&[S }j|{fJnJQn T#Hu< ɛ .CuyǧyMS/T4qZB6 zFYEx ׇBЫwNSKi66czI) mc?K }r)[k:;(L9u?corYYe.2PJ$툋kb qS9^:z˦ _-!0 ͥE(p8rZb5tSq\C:U(cklr?e~q' \Rx{:{]'G'aP#$'s]Fre R8AƯSyž&Em[Pi`!hxM|Za/2tQrM2TˡɹGdFJꄈlSvh> ]'λ~JLd䙤`r:4{z[lуٰo؀[f3ȚK3*$JΌkiw5Yh]pÉIb6&} R[6!5_%۫ϛR)up"v7z . }R"©#]PLޜ)NDɝKa>(_dT]%lB`0+@u md c"/2>߈ T WF3wuV=,J2&GGaA3A1^Jo YW!LJpCͨ..on{fKn*⟻CY62/Avzr|&V)&AXӢeddd؍,10"6ҡ4 E3 +W<{H:7VLNZ|k[/Ov=EKD;ɍ5NjQO|Wo2V! =Ƕk$@ػ?b/wWm58ű; 1{tVqfdWoEdd\۬x ms=+ԠfgmO#kp4\Ôx3V!`PZDFzMP qc:h fԞ[5[`c C6hsQStk\zyu&IۖDĽ!  Db{{"}k^*Xh#5ugt%}<,W ѓdƩN:5Ŋu9W7-af nJrU# eq;Zwm"ZvD#5d,%dzAS**f?Cz?DL18Z$ρ"]L8w1Œ[׮8&\ 0qwG%|\xleVCCDa"Eev GjrV0%g %pF7Vǽ$ׅD#0a"z&y 4~Jժɾ 6ΰ`k:42ՌoHbEۊY-"Fs =M%-7KuniYKeX39wO F돣Fu~o$TW(M*~ 3Iz?\o A. Q瘎̖r%O; fԮ'ڣEg_'eF-qkU5haJ}dWXRsX ve ljJKO,ܡTqvLgsrfK\U{hR`c{yTHmܶ$HDw 'miVn]!iVoߙo tOeGUkQuc"f+Dz9?$ɦfmӃQ1Ĉf_p2DxLܙ[u< @vMЛ~3hWx(^K$9joV?S0,x'xSjda̮\@YAeI#sޡ$ivXYpbpXʷR+f6(@4^zQb_<RCΡ̩&g&:;ʒqh3(z=yFs2%E>hqv阩5A+sJ!=骝q:s~GW&m԰i!8 iŇs9m<% QG8{)mBJ^Ŕ'3J8T֒Aޞ> ZR|u}F'֧`S>CQJ̆[#+Ω%z!W\[w~ӓ)T^Ҽʟ4e{ c1 O@ȡ`LD h'Lsd).'!#OW/%+{1OwN:`oIILZK [NeMZ7:D(׊0b5-g#r9릯b-Ⱦu/xmT]|8lv3YrR %v?{dJ#:"2?vgܸ!7qM`I K+nVn/lcp 1kCMlP Hκu^Mѓ8s z[eYQߟ=3q, v:/K}r`PFNV">wAn!O,=IiFZ`GȖ{N g ((}A4۶no]Kl$hoWU1q޹ =6&WRVS@_,_ef,hWIt6@5S_aY+<|ҀdQAkܶ\a w6͡<6vXEՈ?Ŀ2+ ].xiJz*n l4-~gW9y-j;S\(yěH_vy%R};jGǷ=qS]^81~yۂ;u䚠mUx(7>ECgsp*&<)Ef$_{|Gf,F.k|!>[i(v3ԀjpOF[0q'QPņRyvF6ZZo}YU52i 48GB2duťeɍӺ%7 U]=/4rqCT4MukF#WlY4tXS扉]@SF)b％ t7G`B m5e4q; F`)X\9,Ng Z@ AB0}[aqSߕ}!x"u sؐTeLgޫjOt"Ss/fr*:;2HgS{輟r`@6=Gqn-}Z)pGu,EjD1? l]b[C<~(`S*.{jWjD؀HN?oR|X]445FH'21h ;,JE*'`!Q+2I`NRS-'0 Tܿl#mPkv !$Y_mSA*eb(ͨ$oyPsyJYGxtA'@]?*eeP["J,թ l;晨SڟrN~.GnD;ËE oaIRb<ʯ;2H0>h)E !Q >pTaImY @=?T(B iXo؎q] 7`Q^ 뙢.4|?ݝ -ܻ;"u*+# HnTxN +߸ߍ*lPsc-`#ߏO^Pwq  Ň2Mh1u1dQ;z<2*uPUmިm qRi?Z]>MqV{0`΀5>:uxAQdsV/an#?Bq@_;3妉єcHMYk.G/&Fb)FyS8L*In8g?'@s骇Z& |9dї'.>bVk}ތ(evA @S|_v 8,p+VJ_ƪDn3v̫T_٢?DV;3z<\l~8 Z.EXq} i[ 5" jy`}7BMίI(3I.ݵ> gE&*|}wXkRa;L Y>Ƙ&&USP4_%N>oC\.3h9O_E]GB8% [WRq)vƂ(5#KX6YұX2`IVOQ5xWO/l bzS?n٫Y2;4KH*SZ-$⧃"4M`IаvLtb̞A ?<‰$= ƪ{ѕ գ6N 4 " R̓BwJQW]BZ0,CysTʊgd%@AʦvCt~I]K; AιUEF@͠a vלC7|2BE: vYb@noB;cF@ͱS&i/5/"x &$eXvXGV0.M[}/"}ߗtZd)tYnuKo[7G3A9 RhM\ 2zLLxa^O)HH#qEf !Bw)XsLl ?`)5y{=tw:ڍ2/视KROiyR}E itth.MV6W>!|m`^\h}ah%6SI1{;<WKBڙ/)`Ƴ䒃PgRߢ thx!=oXR;[!I~9g:i@{L\ӞГ:h&vf6[y&s'gZ0pN7dF;ѽTVs# "f?AMɐC)QR5qդ{( F~,;lt6AREY[l\s3Գmm4 a?[){1MhGzgz&'ΒDSa<66X5r.BdJs7H!۴6h9r"pjjsC]\.ӪQ+v9pa$wB8xf(X.@F/Dф8Gfyvx/QW%D]OFHdqй˱bㇱ>AXqtwfYE~*XTwgbh<@7H6{~w䪓EJ`n"6Es߆H8v4ی&$_&{у9ȗN/hnz&84 D ܸ7s/ڎnUE1~Â8^ikC,|&0֙ SdžnR{ٰrpmu~#-y~f0Ʃm?sN80_B`jִO,sJ*ҾH$]f`YOXii&#>%ь(];ȁUgݏ8Lz/%,&@|]f&MوL1ȸGb%-'>ߙ3mF[б,UoVd̆4l5gZzZ_(ƵNyh6VM1BQ4:A[}~"l_Px<#aHݮ8CA{A)F3RbOO[`^S559.,^j]КG@i+ 'Ҡ۰Z}*>wj"t/X'gFg셇z_8 *A\gi=}8ļج,0ݭ'lÕW|,,P7tjv )YVt`HΡr$z>QڋSZ΂a{j?ztIrV4݌9P1vrc?\CaZXjxQ!3Nwx0B@C n,a_=H;'ާS)7|ʸ? ƔRK@i`Z/ 2??~*Hy{]mң`lfԆt`dΏAѮ &5Gڑ~Ї57Ʒ~U =N۩r =d&&:UW^ 4dy!;(m=MMU1L^oL(CySϸcCBtYW=־Ka!^\mFS*,A)3I@>َ)sV4 Sű'֢G=]W|7ڨ\F{Ty;y4c𑈨=gBqwOܫ:H QQ=]Nn5׹75/YZxx=7 zϮ0H`e585(Ӝtu0^Q[J5 85a?h0[WGe;iQo%% 7pm2y} Ra4*gq/ٿF JDSPGPkeK􂊄vUcտ)P2^q3uGŖA ,,<@umը Qu:sZ/+| P:'AC&7Af F7!+0)o8GM1oL+$آnJ n"z_sޗq9[ð[_%0cyq6=c' Zl:0糙k_wp/r7+شnsH7L[dh0J6GM]R*"Ofm0 ׷Uk)#B+` f%iY#O0"Nɦ'~~.&lr[+Y˩Ɛˋwغvfq[t3[P`҉F`Ld$xʐ<=,!T_.t)^^t94dYu}k7cV ,qOrߟ,.e`[n{rNI O5%aSlx@lFvumN;.|%|k,= t&̞%lNq[q eH?V ;,Evۇ H^X-9q^ڱWA5ퟣNMu;7tM.W7(i555OIZ 3KuY t8 I1>})cՔDYx7zTdVWdyEmAns9ݱ2]6bFGۜ6+Zm,cI\L2[y9ѧB#^KybF$HM9f( 2͜=vJn3Zm G*B\AO"K1;Td|S-|Î>NQSc',SYi rwS1:p\Ϙle%IAi`WQW[0?5*8i.U)iߤ5Hh$+}኎Cvw~w^'5de5UxɅhVWԸfi1l۠{N]|YO9_k j%I4`Joҫ X- Oy̞֦;P Rj>[S_nAɚIry" 2@'70R;cN)0wG+rhC8qjaxS? x/΢fE;n;n[maiv\+p(ji%<_[f5 uRIVȫP;QD/ɣXW&<5xC\LV ~g2׵/â&O}j:9p~3;3'":Q;w]YoCPi澄DZ$H HLfY߅yN߮'HM LyGVeW>pi'_!OLU!gдviara:0$w'ߍۛEL-@ldGp-*i?Џq;|?W^6. d? YM\ςD,#-;_Й ;rje^I$ȍRrB݁tt8B1P o  ڪO ̯imE$ 11UnRXgq̩9 'Hƨ x38*]5xY+H)FԃxLGj%vλh<#ּ+}Bgj)0`0}}on3aS7'`X?vW}`gc*&FGMt!=,@1'\ÆFI<^zзOZ%_S_noI6>{ HD0z1y@mjF4 v˕ ,MM "MPO]pFC!kHb/?+ QFJ/Z`s]CՁ^F\jgvO;R2:\žAUPq!BW4諒%` H]WQGꛗ2O|<:8Ӎ߸95IYW>Nc/UL^ϋW3?zX6b_!VFJ[ўŽ ;Cb=,dΘ?k%DNYK,Cyiq#6"? /HZ\7eF9e%$Kd$ψOWV%PTEVdb̙IE>y;1P* ^#UPCb nFc༷>,I unFr7y D#&M;|GjX^&cӭtͨ3B> vM* *K-Cޡr+ l*#r#ߓO9Qpx- e F] {`BDlJg1SiI(F Q}{fK1 @}aɦ>7 |OAX*⧄4Q|]{p&́e0Ľ i=Ix;yL[޻fZ&zW# *'Q싱L&QNkG˷}Giw¼C\GrxVxaZ%7CŷtlӰGK\z?/z/m&߶hj+a-A/jz|P1DG%bA ԓ-!P .n]Aϒ&Yppד0de$o_B-6jpS_B qfbM֘:AP͒bt5Exka8kG@9cl$Ybt7[V/|@Qo~y ?yEzCE= ћv_i*hqC{1<6w|α/i cf9q(UU.A`y&XO &q(!+PP EwcN<0'6CiNw.EJj3]/~OcGz>݄̌znКPK.mAHlm+s??ӈV:;gieK S3k{{FU7IԜVӚ H Rry -d;Bc "P<)_&8F -RyHՋ$7[$1D83x~d:Zxkzsf>Vo)p C.ztDKDh0xlL(S\F(Dp\mbu@QT!q!'q2KD=ME %9HaO&[pipď55X3j (f$7XF,wb/vo Xi9H'fȑ1Υm8uL>I<`{=et u宪 _%RZV/8$\Eur!hZRr1( Om=y\cVk%dn٭t &/:= '9?#<1}meo0P,kCYaXF ]qO\2SgJbhlѠqXXDJ0jb}!PU\`3 rgKef>2:8(Z')X]mhq/)k Vr;iHU'nU0ƣ%WQk0:%SHjNԠMCE&3DU)W  -ZC<$ .啕ԅRC9X".Q ҊUL;,}~5X{2!>(=%eO$ɾ_U;Ŭ [(`W߃2:P|PPp1^Y2m;G*ް,-uC?%?7L2F8#+YTstS4yb5@!̐o;W=^[9#NSGbsLLt(R{k_e蕀ECi䰾L%bYN{.na͚ɉsi]d PvK[x1ѹ9̳E@AM>_ U蜱4dM`˜nZhbLWo:‹*XU_hϪ7`?,մ)%ҙ@ރвH^* *HXE _w /,뾨DD=^S;(A 5SzJݛd[$/ ÷?1T8 jzŞ݇*c4mZDVvjoD)09 lj&M:%(6TU;-=7Fh1rkY),]PWWtϠʽxFK!Ԝ[r[I shSMc (e%!@)yAUT_9v|+71?>ÂP" =lk\ >M16y^n?=p~pP߻\AĦ=f٦aئؑs)JY;)ݣaN?to`:qB~PˆI!@YF`qv9x"d-xt;9 "]5;negVDZ4=K?M/g熿Hknj( $޷*m^Q@cR3:2'Ț1+y+Y7#kNd-~F5aK%ϩ}ujZ>^.JWUhAce\WfmPޠ2J:073Ț*zؔƙF:JpW0a wyONY8*jf(N\٬%xyum +mW/ami] va#^Y>ix}8J[̋sDZzw*j!@-H^%|'B 0Uvt8VFh'q&/;H= !39\@}ȅ.B:!\,3sW,&suixtC\XFc%-LTx>|r'dF3ﹳohڼRPJ9bO\cW,UةVzW>T%+Y^`׌a&!ϓ giS5d!I*ztt])KQ[Wc<ӊ*Y>Ҝs9m3w=Z %JT0qc> ld;W+sRM7޵sO'>"fV7? $eZެ}l5AU[6?G4> eaq oX`:* `< ('u3ZB(gVN{ģCw>"P(@<3S s]8UbqXZ꽎qsІwu Gm<(&o埯#UOSo~@uʕGEOG^Quk=uBG)G&V?c^l$VJ͆<cنvt𡌣-I~)I@cLx ;XK/5rM"]:V * co%fB/ZLQX5Vm|%qYIayԒ [>b f%Iegk;5fOeO:&Ome;._+I8Z쳓dy2TpF@66Dw 3_42Q&ԎxI*6$y c4DÖJ+wv-j}!ؑ(!Rrp% [V{4>3rQK&f(ymmpƴ4EyhVYS1ᚅ#JNgG1 *~~֊Mx7~ܲ|CڶB`:הwÅ68%ˋ{zjsc+Je)dURJ;8m]Ný襊!ʷrc|h4g49Bi"H1^4sޮ'sQg֧>EWbf.?N`=OOL1u7Ӎ|Q+&I5qТj{xgԒrba9l@vu g8u'%E(:m/ͳW8ճ9^P}3e[[c-&@-cD6s!v 鑻 EYk++‚{'%W.\~4'2 [;fiP譑4->* s: 5 Q1hg>uΪIe}5foJEO*7Y&'SJ䏲?j˯STUpP/^}W؁|$’q_; }#W!=uҢ!YSI{ DJ3xd6\7#j">9H#͖c7E2 XJ6lKҋp.S=dZ/t{FgCQ4$i@Kv꛺c[ gB/A?dl5\U&IyX8B'R$t'RHAz[c‡fRkXtq늜HР?ֈ;o-0`e > fs ˕LBPH?}]cJj,rI-5HX ȀYyE:ÅgwؙJE. yRN=d 1fZ̠6 s;+u"m $LcQ(b뭹Ay ,CYz]%zsGwӘ>_Df?;Nf%Jp)DDna]BMNFw5uX@2Aȼ:QJxzd@yִ `<]fSFx>>|ltkޒTfS6;CI$p>h;zQYQP|AknCk?Fg =)DIYXH2tJܸ"1ӯu@"/$@`)r@l&>_>])&])1@SYA9EPyg)w**$HU 4Ϸ̜Pow:]s^ua+{{vbxS0qQGw s*\ŗߟYD#[ȵAZ!*跃f܋K^e/E j nSɉi VSYX^v}H1Bv| @ߐv~wom;?sQGeaUU`hY23꽙AGJz_Qca jda8{qdZ1'p(N6'7Wk2٬(T,j } ܢH%ʥN厁<#VѢ6}pQsq B,SV kItKX3]%$J0k}h|X 4$Ivub.c&bԓ7lK3:d?hD@fGJ eRV d#Ehdɭ?OXј4ʅӆ9#qSVQ HxBJꣃZ&)o QO꧇k)52݅wut9xҸq.Ls9C1 8%bj'. ڔjC{%UdrU"-v4/cQfDVDaӲW0TQw]M UN=l*CN .׉A2Ii D8=3y.~GDd Y~ * Ǹ8Ҹ2 dwwIJ|EulȂ˒ciǚoǢ#{"޿Qډ%̀w{rKY߽I.1MUJcM۲ #+xA޷ׁ(̷EVU4lc? <黋{SE:>X#/P=)?uj2uBk:a0U4L73bU mT ܯ8(ӂsfiYc}LJvɵE}Ӄʈ#jQh?[#.nTu(dx7&Ґ 3˻~E4:ǩ2PMqъY >k/qO¥B]6h=PzFj,ggV%0(Vr:~+x֔{?ζMb^̱ 2i#ʋ^AŌH"dԍ^kk^Iwj+[]Mz%E+y1 LCT;1VFuly 1 紲jd'a&:^¸s'^9U)hKϽ#04/>/] Y}BVMPSo&l`W :?4JwDzf&'If{NG>J23+PgJ&uF5 F٤5<{@Rf8++H~ 2k4;}~Ͻwc60 R2T|89g,Z[mYGg;= }̑?wUViNR+_ ͂nC2B4X>XnM ᐬ$ B{F齖n=> }MÒ l $mW՝.OMzYbELtݏï5BfysmoIZm{jdi=`}`bƦ_DVm &b BpimlQ=Kx_(X Lc07UYy,tMeHBsBï9SG@ QADX*$Tpw t n<enNz^~4ﲹ)qؓI֬: Ҟ_7HR9B>()E"Ñ0 ^}>Jqޔ%=ZqOc o{FJ*CwAGtrMZmi׾WԕS!fGF+%,R99 ]Elfj 1r˨PU=ꤍ\bb鮪7DD"F5_Wtҳù DGZvTs0UƸbɪ!S woha_xa9fr֛&4 K,XGF.*snnAJ.?RҜ7(te6k 5\2ST|Vr)<r??| z{3ܚilq W $hG'ۢOx52%~%H=M<^ȀF v}pF02o5h SЙk׋0l|ӳuݸMXm:Km$5᎓8`X1jgJƢnB[-S [0vSδXAsP"iF5|vCqeQ҃'*7DH XUFvTHlq={gq2ܬ(G@d,oMoI_/{bMv49 Ƃ5]`&UynWRъTJZ#B\ 6{POSq<g:p+LHJ\ $VlɑX5I@j/iܿVwhQ~'&I~ŲUNx:%?-ƙ-A1cIpYp#KdlZ@=Bm'IX4YqiԌPn_JgX]2a:I䅪wKp؅Hd[t2T" 0B7ΗWE;HNc:v5eY\/v`=U͹Jti2ؕ\bP"C<H؎@[D;X&(ap"/}'Sxsk?͍wfh@Q_Y6HU =H p&'`v."#; Rr+:UNzf=j!*a2m'?g^91g>!.z]Z9E$={]CB5u.zjQbwk|*m2 +`gMw>%7r;N?& #-#"Hݩé bkhj$}10 sc cѹqfs"rqAĠ:iV6E+ʨƦ;to:81b-d5|M__wd6! \ eH42C^vnJLx!Thƒ d];sڜ`Q3-+[#?J9nE >(> %w1C?BRO F.)I#{cx܆Gu?Q庻Kr5yy8`]CX*څl5W P:ь~8VIjᄒmvs&R=Be/%G-6Re–su6ԢHOZ rv;˞4 Vk1gVMYn4Fn_ kEb?į|2w,%mw~Iwi#U atR+`- &w ޚ$V~{7ii]do^(IQILuа}W1W SIv3ǢAa;~u8&<=SU,ہ@Q9|mn{D%Ͱ7T~G K\5|<2$ioЃwh ,FR(?=sSV("@Uo Bʍҥe%;Y:EH!5ƣ5i<?]%́ms1 B+Rq#i#bxmw=%bU gii@Set,5PTKӔt?Ʊϑ^x7_Wg/St$Ϸ:&{~¹pN !pZB84o.i\D49҉`dbg!ܪAݛhAfxqnS.7)DGp5Duo=u K)$ЊcUuTP^6 [*,&*6\Unfr/Vk.뮖5 `wH-2IeXÒ.Wr;NP-AI=:C1Pt& Vv6U4#xF:*D 3ݷH'4޸+7dͮZFh(h of%:p?}5:NCBpAԱ0:{h$ DY 4 }a $i |738<9P,3iJu1gg+~gO[CLBiHt]*kJfȷ`0)3^Ir;49sG$i\'_8nu(ۻ N!m*AFIdyAw5M}Snu8;-hmB|ݬBo1^ "{c>y;>v%2MO̜S (&I# Jwϸ0yߌEt!ǫ>j+k"l'Xx8S@x|ۅb])8"'H_;#7?Ƙ:%g ef"f֒uk_Sy]M"$?˱c(ɶzs*$YpeV7j>O(c>E΋.9L7N5 Хj^`sDh K?vۮg ^a$/fgDc\h' &KwH/SaJn0g@90#l ( EBesaVH| 8zjXg8=&Zز<ǎgQŽzfy^A-El_Ukp;6| oRŽr'{Snw8JG`~[ >fp[|zŜsM&x/swq8o:"^?Ey;Zvި8/)i0rmnI˹aBY XdO H5a,"wNu=<)4ۉPc-r B(4IDĜ"7V<#.c%yH`3HxwF-k]t6&vw!MjXӶzm#BG! Chէ|~WjYDPL{Bix^wU&T4$vv)~6Z\ ʊ}*g.r̻"Rs2,r|dBN-A~Zx<VD\ʔX2T~գ?|̎RнN΍!V[\Q%k?X{6umzwV^s s)y1HsP]N&|ElϭCs5nYRQхMvzcYҞ n-{9K [,~dΟ L$K#6>O\([K\B=M6ddR 0>>F(P?7cYC($\eX kbMsr.ݰ`jzh>h||`L.ΟaL+ " ݮ$Yyҷ4$^ӱ.>^be8;_DLˠSu׾_8m"eը?6d+*^wPd OAYH#F30Vq{|'wNҥGͱ@ %Rn;MCXI />%.ٍ5FVwk Fu!̦S_.G^m6:\m aMsPf0!J57D`2kۇĄ%ʍxqD{DՏȩ^hI M:hb7>0LWaҤ_.<246Vg'8;Mg @R"ȉyUE{chTb/~W5[|4Їf8يorT CWTeyQ G!6 x= 쵆'ui-j󖻇^uc!߉2?S͊is"ąWvd;u.ȒB;ͻ6qxt$LD[C pm2*v!i,~" =X1o#oc3o<œg+1$='Jʤ,_2©EAi¼[g{,!H Ύ(4ԹvV>BW"^/]S$C,< A0d(4"z뼯^L"JtxkK\zwi")v2a& ua솘}[S";[=vEg(נJy%3 _J/ًm-x"Ϯ˙c섿@$!5=1Tf^1sG; 5AXU-j93K "7bHcl)fˡs 9c%nc3IGE<6c*eA 2I"puNs)I!$˖FIKVh WQϫ<)&^/ )By"s3̱.vv% 4u3gNЛ^b25Vɠɿ~a@/*9V^w`4ǯ'O\M~V?"v a8ܲ蟦&˅16M@ե0x}+po-t!x^  &~RienTIES𕖍7;J[dɎLCwC:ۈ lb6Q-}kx#uՐ('[⁼eZ )w9ʎeakvF=A sJZow헟#r/ $<#o]ISki G⌌M-v~4Qq0B>}'nhzԱF a1Bڹ +jNTsjK$HtW8PBQAKh3-K/ٕq^&(?髚@T}IOc+P7['&#k`!&n;1\QȢg;&S%\!V6 er K!`C7H4Nr< v5d MUZǗDp9!jD) -xaw&8Sϴqtz_ SO>z4xbTB ENY )74ږcct ?[ ;hĠm1$!os)xM*C}|yE e \"OcetMW-͢G*ce6O'|Rina̔-uLBgRyYERY&s:L@އݰOwBѐ7+qqp;2\D!yn6,W"4JPNHV&W4Ã3S ,)T/Z$3!B%Ѐ{A <[H]A)6EILȧ#ӹUe[9m&6E$emRjm (.bHXƚ:=!vd0_SS=@-ø% G[eo%i^\lMITF6>U; wMѵpl@-)7VXB5v ;akx;K\^7Vfpx;zeg)봡5ES`t"p mF ƴ4a52CU,djcuYt@[ 3-;aww:ցOHڌ1`mzZM X?ݿLD ~C M#3ړ(ʗ`p=T#hj mcm >p2D>7<Uy\.s`_]%=VúsNcx-l!8?<w!Ț=W 3 q7Mfrbkk@sv]?!Mۖ4`'O4|^#Mz~ʱ1ga6}O0?hus?f7DBV0|1"Q<}9_ Mlg@BEWN\x ~ q(Ry@2:MzB^={hЦ׮q{N\(<;N+Iz@>9 \(d/TCeI.TkӀt zYJ[ 0Td^Z#w!XZ^p,ӟou.5>ɈD<ǮtЧF;DN| '"u1kc\1̤ٔ[ >_D*=(5bɡW]PxB 6y)B?ҟ\ӉˑPyD%ynVcF=+em ?ëlk<^4Dz=^IuTN$~ ^ns mK8*.͋'.n?{C[6TJ힍|9^@x:1W7 @S^bԌ8Y=I=JM"bv砱o>N~2H&x}nQml1?8<2Ε7Q y:w@3r#c-\JPs+։}%*y7PRY帩,-eeM? l&LjυBkζM|`c/S͕С“ndIR6Bc"'x%|Ac~'?OXukTE# ;/'kGS&k)*]Qlv7T" HuQ'\>[VÞ?OsĮ o&-Hv+ 99k!*\ddӵ-|ڢrW4Ꮽ'z> U\vHnh9ս 5W8#l8ã^5kiH>"z6V&\=+ Q]l0qo5lϩa^ǦUV7UdvsV&8b',(`:*8Em"۶vTC6H?;iF PsG泾Qu:*lEHd-Υ |_f~T"╃ݛtfU}仉lK<~Xwh <+Zr>5-݌[q4.D F*1',w4[ P` x'PU2sn߅ûkmL &dKq^4m0q1d +0Q rݲ9 bM>oG|qT! Nݯ |qH% <|$=X5]ȶpw5ZU't g#ʔ M4@Go'!= ͌ \)n^֭6懧qY{[U+UmAuFjAŃ?l܈ZD!nrٽmʕ_%Íiض|I&2m~^=fu597y;0,uvt"(ʓb?zp'*fmq{H'}GdRfӈ5_F-C#MiCrLBвp}@% kbzbjFe"Šm6پ!3} 3aVmH,UEq0iXO̠c+1 ת/‹_b\}2UGӢI:+ k6#GYSEU?iCt]/B4?7e=<OtW[#-uͭ/()RUxKM,Aza2X"GmlP"n}pXDЦf XD/s8Jb*UW퓧;؂ *Xj1Zmo$zQEOXn *4ES_5jרfgRևz0@;7&_{C{|.WTl_E ?*-A{zE`!E\Eo1|M'3c'e(yx\ϼFA즵ɒgt\h]Ŗ0v\B0™ƒ'3V"YK)u;pkGJBBͩ669hi˗CU5HWĄ_rbQ)b&AHb6~O;֫e0Z[qJ7c-/$47 1|A_9rRϹ!$"^@0J]|;){;f_ƺ\8X}Ο~)І)' A1F_URA}$iB!IpϗJTm0/yTҐ;v2W~!#f7,ۏ/_}2:S%<^4eW gErx Κ {\!E4d> ؓ4x|F[P <i_G vZj;D1?"NKTpڤJXA~ӑ77 ^q5 mYI9OyY'%=lZyJsC-#Tյ٭W{+GQAF^qB$N[<}=`(9(HWhJh'a 7JJ+ @Ԟ>3 ZNV'+[{hvF$!z&V3q>KѫCt]Qs%GcV7(U@I ^ EmkPiD23*"~҈% ZPK7) 78\Xik,!Ά u=tp)^Fפ.p~~ #ʈ+ZjPw^3igʜ}S{=꥔a$bbfZcug=e*"Sj3!EB4Жpѥ Bx wY`-洕 V.X~"]}qKp-(K*# xpBSǔؿbr"ynHZi(0q@͠;8ꖚL'`v;OE<-7yt#&}Bb8"=5u \J!twmjSsjJUkLK"hF&c?#Cob^,eV"lIUyLryfKoc}Za, 8pӛ#({hd ᘣc;{3]ͼ ayn<[b{-ZgyD?TdlPj+pڋ'?VnJr;0ڝxWB"HMlfpd>Mm/IoS"7)h'e8?vק'8pOdZFmӽ+]%f.~/Ku&}FzbBM3 "ST0"PI7+ s6F| nWʕx|7dSA BɌ2̶N!XOG4igl !];>f,}%SgT@wOqcbaFǃnI kpk ص^yqiϽ ?x Wli\hxt(7M2a kx%})@ |Z+QQȺl"% 'U=(% "7O[ 2gF.!M;.|;> 05a_D 3(!>l#45h'{́=;#mF6~Kʔse_qϭ8XSMep,݃7"UdK̯*auQ4dB>ʮMўY+HTh~8`'G¤wx:"ܤny /b-O6~a4( ++㹯7?G:eYS^q([ᬭYc'1Q|9~@dٟ O>dy |pm5Piu]7FLiX{7mlf!$Bgڊa/?|f;󊐂>f45am(2ÆkT{еęxG[$oGtn%DF.04{ֹNN܏4pW|EW W+5t'cg#N`S+C"Ol:7'7 vt ՟n"U c 2:jZdJX+*[åֳ^sdz#qʪ{_vNk]8C4|ؑ0qrK TGڟteO]QtԒ=,Q @0SˬGߨ.y J Y9?ǒJy|/4hx)؆&Y"Ȟ3 ~Aqŏ(=БFFE8-LYt? khm—~ 9,:\7x!!IӠxeZ<]K8?]=uu|RgATsj{wS$F'>4N+uDL]m,;6mK|2*%][i§{[ DxooauJ<+ΜDN`h(%#g\,x-eؠ(;Um=HFp]qr@s<?in_nj'4w]fвf;'.3Ң_݆tߣ r%f:~H8t—ߏiPJ d9aշBvp6|ߐσvٵ[3}]QۤݡFu-x='vd+} =,7w 3勈iTMf 25y P: d\?q|*Op 6w[N1#lx 0~`QڞTHVI@P'+Do'[{ MeOZH(*TD,:_VULV?=$(>XN%u3g(SO" cg{o$g,& 7n/ٵ*d[ey O=_@~D)!^-1wQ-! ߭7+|3j_A-HP/&4Anji'fņSձA.C! iuXv,ҤaDuh)nOm7CF @SM8ȿz3HEJ^YJ_L96ZUj9V̵B%QCRbmIfҌq3zV!gD,Oi{,NM2>r2uE0ߟ?(l JQH_YmZ ڢoj^Ð焛Op82@* [o|8U< XB 3 SH@Ј)>DKs#Wje~BnB.ON0SL6 [;9# fU9/샐>qjWVGd|8G,9wOXQ/lŝ竟euz M*ٕcDXX́# g|e: Ojpj%րm֓)&DbAiONND$rMo5qLi.Λ=}ov/Woרjh~b )_Zy2ɩ䣵ƾ{N&TWp,ؽa3L: ߼e'dw=S,Ȫ6݆o<nU~I/dK/gYr@II9_"`->J]Jz.#՛QX1fgbf{_#2B PUCMY`39*u\u]T!@6ނQEop @K !,9OM$AAÕ٘?,jqb^BKS"0P|YoMdu4$܃pZP7zI*gn풠_ 3  \k"(w]UABPxJ/Nr{Oz< `kV]^ xB-.qbˢ'VLP&d?F-RNij|\7ʛ&)yk%.2nY0+H4E N]'!ɑaZ 4%/ 2*% *qo? pv5`vx$EC.ۺFS6sUed}j7u-I3ىj%Tp}`eMwy_vS,0nZQM(; u^-V^'}gYv=R7n -H G! eQ_ݘ8 2%ES pgjMǺ@I|wGz<g{>K@jIYp' bpָ rP59 à!K*=Zu&O=ek:S+ cynX1OX_3ͤ[Cv는 W嵄O^]p[G=s=' r2=Tl=k*6mE OLOMh)Lp H*8<Z>% m3[loeucv(T s~yz uٱ*ѧ1dPϯC i1%M !IHQ<Ðtzt [Ft-t+H6(;! uݷJ^ ;Qb4?+ s<G2-ey.)ځc!cK5:5b;P/\yޟMWSw8ǰ6MHMtDBa5J$| 4ޣGR(TgF*Vs`ed0fp6J+c#/?,Q_/(:M< 3|ifP zѦf s-V60*ulY0/N؄z#{wogW4=KǬIf#&&)5h]P,w\pdyT0k3h=<ܳw@wX3aJ;Ki~YPp)풣( :C~h.؂ogQ !59SW4V}sT?>9q@X wBOĶzA dpw$護`j XWR"M7  nOb_-Vư1숲0ج8ifc? z2}ZCId2/Rԅb LJ‰}%n$ |OP=t4@6gpo5x2Fw'_en{@/!Ԫޮup'I L!:@V w) ҂w*[4nH3;ȩbԘ[w y3T"WZ3ƫŰ#7S8p.2z{ӄ&hY5 ߍH7#k2{T4Hc0Eӧ <ZHOvQFL$LeEF0XxAi%&vTJ,N&TchH \$QVG`n%HZ*Nv[H+mQ iTtzbVY(3V-} .M-^qnw\`'"TgU_n*itE#;.;mG =ڒ,tv, mE$q^n}V vAMLP:~5/Oe2g:}iyK:7s ein)P-٭(j?^50CO]8-M"U%,$]p̞T.+a^ y^t)WO/8poeHwHj$JgDxYNNSl_a.uC)TehLd.G +1=\*Npuջ\kbI\w׽rF-fQ FM{҂qmWZ~Nľ^G;y!hlPb".!=fUFDUhNzM*=Id%R%0R~j3QURa KTZ8Ug*S3 =!|R0l8:P3CM"%DOwgn+,aCw|0>n0P6@[fdEA>@ PB-]ܳdQxkpȔP;(ߎwdқXچJJQ 0;H;"7JPy:ReY? zYUAvDGԞ^!70Ƹ]K@C]? e IJBIZǃo$ڬ#OuKӸ[JvߋK}Q~#@|@ :6gH hQ(-663YN/#u@C2 8%*)T=LGLT%c 9.Ò]7JS^JhO.^^*rKrꋭ qsa`YH{]JIMi u|( MsxNU֌O Ez 1.kay 7&_c6~" ݣ!rRMb0Y/2H4ښnԥybY wEevroBGm9Ї607BޱSҏݐF)4ʪ70":F/Ԅr(DӺyЃ.Oc?NڣPLnWpB R謿U]{#bh=G(\D0OAU)IuŜxqLfS#DC9 ʋ$aoJ^I=5 e|Nݶû5b'qg&a=F}$=<$@bm?hA7c sʓSR-kNrG g][ϑ:C=]M^S#PXGX7pf݂2--*9l_E'-,wX ܶvζ٭5t ڴϒ Jhiяp)vSkFrUY.”[?<¤,+ŻO{?Al!i.2zD3d_2aB'!?^?58u54(!LWlj q`+Eߔ`,LL+O.O >bѰJAUnYLIFL58ϼȜIt{ vP `g ͪ * 5;Z[dN *ɛfqW>iσ.D+ T ^ƱS=0_.^x-+7BMͲmk 䄗ᯊ| d%数#-kiąza ġ}w'YeȼLƴP+*c}IxE0 v;BUk#IpUu6BFe!XI7T%qnZـ/V=b2? -1eJ*.؇}Ŝa.FvM9|fIfakҿ C Ngl$VZͦ8U+YӢS3k; F.? ]&bng\+`r} q]De sʚbR[5# W6؟׃.r5i x\߬lW%PK6 \cVֿq<{)?:B= =qF&;NTmkh]vtߋ(xkͫ4hEqǽdqr>!3Dir9PR8ŚwVpt>o)i_=ZG kE*˩ړJΡcא"EoI,c y|% djTpѶ"ff3ұcݔq3?:𡐬'novUC[ ԫZZ1uΒvBJXCQĨu9ǙCT~ gr 0t ]Acll=Q+pT [-Z ֆa)mST?O4ƶ}m+$Y#3uPigw˃ǁy%XE”pVq߄g^Yk~K[ԓ3b;d6D/+vF CEVzȏ5ƢN+4 g-URjk ndiҒ7Ť#u'KIScEjq.T QnXRv8$&e.my}/ycн=}O%.)L(Gw1%MP'(Q2`2R`&^TĔ^/BP/lWeXBBO#.sjܢV#gHIOOy2Z1ΡALqҧOK٭ ZWrQzT$x;Yh%:NhQy\uEcOyn'/~eVwRYdf`>=z+IITY1~#^~> 0m C+BL0MHsևXk{Aԏ/G%x釶gunwNMWzQɱ6e;AaNJިN ^da|G3nX?{z`cuQ7Ny@q/,Y+s__fz.Ԡgn91+-Q {%Y?XMvV)w,NOʔ9R9C0`$XxI!jg &!݅〸1\,157( qf{%Gf]jYU($a ib^%3B:mkeH¥6 Ou_;`D7$ szϽz&=ǂ*w󠕖|2B y^ .pt)OX@`A1t"־WZſR5w*ohJdp;_MsnȁA59o"Ԛ|ICZJ-]clb8PM@cn?!5,qE̝ ;}&-iQ1(y (ӂٯGvŏ1A;luҫ,EL~"#' 1E6 XYCDLƀx,7g/NB+q |9I-Ce/V 'qu '#/Qwp# dkTIUy%Bl'vE^Ӽ$IV-NM֨Exx q*H9= b1 bl'f6(̐gd6\B/nÎċy @;.QPeCx 3sp|,7F{\Snk)jpa,fv 5w&%yOUNxRςlؚ׳:kq4B ,PoMDkgtMSz6rP}"p~VP<yxm?s=UospAm~3sNC}^BD,Mt$I~W9"KEODq)g4[0+"`4m<09% )k:Zd ٮLEre|txr^oQRUAoaQlLL|/[*hW1@>VCZ3w$ay͍P Uga@6eCLY}7 \B&-L+4U'H3a4D˾1K{lf~EpAo/b|90q\;Hn1 й`̟ljZMXZz# M]? nP_7ce6`\o Wu9RJXZ܎qMG>qa.˅;gFɴԄy.sbNnټ'<㰷 ycc͒ QO engٷ_ e'.#/]q8='zOg,*;xYhJaY d &|:cd7!y-3Nwטn16tJV+Dagls,K,ޥ]!s )rxi{Vj18eetK@(Br3~9Ћ ?ʎZ*eSdƚHG :Z9('m":le,ؼ5#/_Zq<] [c茻Z^\P\%Rn0Hد|hCp C/_n!e ˪Q1baj%~uqZEߜ{:yԎlqt/*e񶁑XIPڦR=EApjt ɛ}N*vs:ͪxN+ ؠ  D\0 kӵ=oj$t7 [Y|7zFd~2{dG7 \ 9Ct><1A3p+0.Q$= Cqih֧\|C?j<%|ш(Y v 3PfH .Y<&C ?~G fӃ&+>njE_:%b=iU(41Mi] +olƃƸHÅqnh_SCӓ%{(y|CT8ΖG r\;ձŅ/1-@)eŒ%tGpߗ`d˿+;҇v.IZyuF|sl_ΒtQLNt6{Opߔu: lkiVwo͋eJ1 ~}3brx728~[SrOd+{F{[ (ZA^!Pp>C[18'y(GB_y38,6v0OwW&fԣ\nQ-QCΖKQ4o߮_YmisF a$H&ґjōq98Jrnȭٷ"(h)U { |2)C԰O1k%\YNObZگ'ac)b\*A9 Y Ȓr"RkkX4%=L2mynr5- ζfnR*AsGLdGƎWkx${1СƻꁗM?Mr1pĀ]r-VYf)(׉ ԕz*:Z t'3ojb]WŶcw,@"Et2sԔ6:'KmNupJMS\1~C![X%MV;?n4| ZL"Դ,>*ԦqB4'φq( PbG7/VN.e9zg9qP~Ru~]7z2Э~Z^Fnʬ ռk8vCLl+箿]Psj&S5D9j(A[iCt^1z:5qVQ|uta|u}g.mb K3ɢ[s7P_`:8e v(|N]A׫Ѵo.O9݅ B@%#Bŧ5je?J]0/D%G4DA:~D W "|jp7Q 03^+Y>NޔPfekmi֖lA@WruV*3~wwo^FeAFXZc~>=PxT".{& ^T)/?)*|A:}WL-\sl=8d݃| =ɡk '&Vz mr3]rQL2dtٔ.mo/oQE` dh]C'&ZN[1tm{9Z<`2 fKpmEeݴZ]Gcocet'dC=rbϦ(z3L1V& []J~oI7SD!4cvGĂ$3M mgv h\wuN{P"J)J_ 47N>oF[Wu~U(IĔU©< %KQ40x5 4M 31f\Wk^Lyr2̑80z|@%@ wtnֹP[?֜_Y' y^.$ÝPu{mT%Gre*4ہp[T +/7K2-Uyb~n|%1X$[xE1D'ۇ0LUNF|6 [;KadH@l()lǻLi3FZ3N$F}G`qRLR0RqX8|_ zG"2ZC`OYXҡ9cO GBC8ll ^E@\/y|r(]G%a"hjo< .sׂC~cJFe* fi6 9r"4F@HiB*r:z(G8e1OX!"~4@)-/8F{Ro#!rYrC['bϝf##9=ywhzō ]Z)5`GIx9RvgFY#tqi<.#S'\eAa7.H+=6A[re|DEcNXGFXVQBe 澕# N7^P`KT8@w qc3e k;,'s'TO=]n7_\YN,A(HCr="t 6:_)w[vsSIaX m}z$[X䵐B$yuypsx|trN~>8hzt<'0!t*O"p&)[1]J7~7̜(M&O^ŗT\ <߆g,ތ79yL~>6g:BIь$2j|ݍ*R28 3%qǭy|EZd\  BZ8,XYQ>QEy jB zEp:-Bwqj o+x|un_mfreW5sevXb*ygٺ4@&9vH̉riNevaf),SnGkxu&'[z7dzKSW:Qֲx͸L+cmT5;Rt#Ayhb }P*:hG{R:>?J9u6ꅢFuG;@Wh,*Dv]{=Q Op>&zOSǪ CP&VM הNQuA1OYIńRչKۖV "~c_XЙMwg5Xm0lގ{]e <8 q5R<ꉛ=Ű}K4xN_Wh@~ɓR{CN_]V\ѥPac\%ɬ(luɛ3꺀R8h?<8|)Y~0+yWV|n^ tz5𠚁M@\BK5¯AŶ\_3I?kʸ=ΗI2caˠPgZZ5!~jGubBB& ^|_U!;gdaT kY;,@t/'YTFIז~BOEa[ک׻Q fPm,PӱJ7(o h3K|XbL<p}"mx5.cp0@M,CY36M(l 21Di>BI=Jf||>D:)7^^}/5֘fI\#^ E_ h l* `s JPUXskHIdVϿCH/j]<;0hiSITD.0CŸG+ )DMP)(z,W1:嶇abXZ_kp"]^Zk>xuV09;'H*k2;ȦeN0*#N_ ?#ǁuysaSGIl~@ >c)~O֑[Vk-1H/Luy%|fXX&6. 4=Rҵ;@3UVxa᯿ v~+d8aJqۆ8HAт+-|jl ^(Rc%P_H_ %++4NҳⰎ@2ŦT1\iYK"/y7r5-#إbA`'?=X;sC»"]b˦˧d^(J Fu']D Z,RIѫpZS(N Jafg $Q$Ef696 .]m$!Yb=g:5k9>pC\Ϊ9uOP7N9 ޳[ @$EgaA_h/uI/P7n99ZS5J՗`3,YE-7Fb>N%AzȠƋ"g>90SLG}}Vb"yPf B%frDYpxYMhJ}(Mrg%ʘ8pF32$ɾDxҚmݣ{]Ա ?!"8G镊I46e:f[BQ FL@H8?_FUw&v{OHbpv&HԌ%tᢴ]co7狁Wm7U:7킙bnF$OO**?Iy4Q%v"&>tJ]a{hwbXZkl9t3qGm.rʴ\u=(2F{9J qͬ?UR!YX+$2Cac֔~$4:cΡW.-x+y[1:역 hSM-|c1(g>oxP9嘹 ?NfS?m?Eq~̍LzKѡ 4镖h D9-RP)ٟNy_X~}wP}W+(b6 S"^Q%jd1 .7/?uJ9SyavIVXW,wY`۵v 9kVcB0'es`)4̆ l$l=[}xmp3iCȝ㵙##j:)0Onn3_D& Xns:ʏkxUxwG' _%`Z쉁0U:1!cٵM{Ozh )<n0뮤X'.ĝ;mG#`RrוzpKOJS)_hRIvޓYAF*4k—SY lnp qee)Sf>Qʖ0#nzse'hL;9,~S3D[U>۾Wd}26 0/^U4AEx0NԬQ Ef{8K'# vMɢ2E4(Mp݈*MvJzrAUaS|E!q@O◉ և&n_c͕4Y$1pϝW{vɨ\Mh"chbYG+-ydUq1$V"jN; L*ʽ,t#o:׬`|_} juuI,+ ^{!Pg]6Ӧ _1*'B cbu98(&X"=is /fkkz2Z+f$[#y +.R?DIӵRUM6 vSldW>v'N9ӝr>e8{cb97쓕+ގd~{֑)M,1cZCB*O\1L$jŐ:ӻaʸdr)ޫVSgD';'`s&#+Z`Y1>q:_9Nx%0V*ȏ"#&7ZC"?7fUtTՐ~c-Zs * sOd dBwXa}9TVyc%fkZꙛ ZYRrJ,Uo/rC '2W6ڬp]T؟௸Y2 {v%YbDexЄ|fQ zɀ=:9qQV-z 582~@',4zX{ AEa%y{62Lϣy[`nJ-N7 ϳz0`E`|v3xz3jٗ1L&W4ަk`$ЙL8&LX%޶I %4K>iw xlfٹaC77}좈,{?IΡO8t:#:EP`釁;خhEi WVpw Sٰ֠}xHC]]F @1NWʡ4RsE-0C YKzWN:UN!?Wk}[}zl0##(,%TJ-/ ܒK|O%K[ACb@ï(LWWw -:J8Kb$ME΍Χ_.%)vd6lb`yN~$'$ SwxXMDv_p63R4`47L..d'CyXpY-dեm{Rdb:k&3l+{N^ ٌ`L5? c,λ7ҾTDvmC_/X{7$S2,aW}S4]qgX3n5^{.sʭm4KLu`6gTȀ,a0W3ha u'~f꒭<pOv$Sk)^ȡƌWwV#!q2TEGk#@"$V%Jd%1XA[$_ΈH>ųlq%kl|ߣǾ5ER B;eZS 7JȕJw wi%Eէ|&Cc`l|Ί]]?3OΔ!Ycۛgé찉-{K_]䘖<'unh U{jT 6Lq๜ T %Sn~<2i٢q9h ֽRa |kqoB(h?MhjCwǝպDtjk[qod{&*"jj^$  V,sn@f__ߗ/z6N>՘@*zxrY8[ L5yw2A!/Z?O4N:Ɛk5.CEWV7\~_;m?^ 4xƼ.ՄtI'EU(@U3 ;TۛMj5oOsPH}Y,$aO+m{/Re鷗auFHwvoBX>`T/uIwl;픞HJzc5v #lW*FȰ_Ck?ss_lxX9VR@d]wgPGMT%0St,,ojώ+& @*z[!f;{|ـ|h;W #3gS޷P^M-cߊh䕸FJG : |{qs$'dQ:삘Ә[Λpa }6 NicTCڷI_DdL,uӡ` >(~n )ze '/յd{r%i!N&EAвgRS}L诩%y^f--!"1"5ZXe'7=i{yٿs`$lgҒojr흸'lYk#O )aDA YZ( O1C_w8.H$ 䟱&}/F(O8>Y֫)G, 6_ҝu 0#hӀ}Uߐ:nG9.z19aί廊6z!N,bLtu=ݞ`e^$= د(i)+8P?f R,g[oJA7Qt@7xwɚցc`RHdZ!\{ɋ,w–B5N8 4oQ~?! EpE1gn4ZyLL+^EdGb }f:\-hD&JN[-ZJ|ֺ)lX\71D!fȎ7 (Thjw3S~65jkJX Yؚd ՟AEou|)-B*!5ـD ʵZ&]kj^Wx8RR Qy  aG*ԵgTZGCZDHn˪-F.K :,jǮ=d! (C=6Vl;̊OD`<4; M G:XJK!&S\/hqY)1ÃIG6>RD)+ZޝY^Y3?kLlWoE֬WI">&i#b)׻wݠ)JLnpɬg,lόc NduL DlLWy (O?u'+earw8ħm} bo0 ĘJO0:@EoL_(tZwTxNc-D80amR.GItf|h?OdiL(Č@%c?#+QEOO\[,'0DzwPCߒPi]OTaHAn`3@ӵ>ͳgzx25}m#iw ;0pV(`p"YS͚ޚ*w:Uk+R қjs~KZ/!xL1ȾQa=H׺%0bGf|P!$ F0t]"ע?Pr(e#QrJn$"P/,wvQ@|I${j*8ZP 'Ϗk~^emG s)nNfwwpԹ.@j(ԿOAV⿡'r{1:"a='X8J-m$xa♢YNl<ٽz'*cWU >@hI˭'@PEi5t|!,e7o$1#BUD4/c?d67"k+ZZζ"H@$O"SVD9SKx'(h~$_I(n8/[/˖D-iusE#*U|@1 & R7~ܴZF%g?ʺkX-W//Uɧ6JBO5q;J"_it`H'>(]'l%)qxK&ޅk66">ZNMyw'Nrƀu])@$4_ !])$ixҗ'ݸ_~vjF6)KcޭdwLw3SVL)in'1Mɞcþ j"X1dN5͛l7K0M۪}5n TA7+2OwL87?>m+LFt' ܀-2 j-"&^|{0/pLԯK=Wj>,ߒYf?'|x\ ʖ׍ `ԞiqoڷZeZcvٵoĜ"|вCiSZG$Cwdw_a9▴D7SNڂ{3X*t,UKHiПš[=&9ri_L;4s1m3['gFۀ48S" |sDM$pn~v!1?t8X\O뎡8FTɅA{FeWYie0"a(_)'˻Z*`Bwq0t{S[E6sPt Ro}R2TFD+Y> kDҵ RЄL0m۬Rc; ; T 1cu^h*Ru[泊KZEd "D {ͶU)R?V*2@EO?%Zeͪ(Sw0x"J5[?!~\ 6 !E, )UW28I]|ADڀ Ņ U1(NX?W۹.R쨫J;#c=o7*p<ʴuf)fWle Hd1.\bH3HZ&!8CxGԤ TЎCNN~h^P5BY~\D|!u!g oWD^m[x!(F#&5brSuWHBn`(Vht1dOEDDOJO4&u" U⋩\t_Zm!jc;NKCK{.~7T-e1ۋ-EI>1gF "r@` j0<*gBi9?eh #3^)Č7(~]IS-6q2֪S+PF M5cp [rinQ |vF+3^0R]ŋ~]U@d>^]OQPC$ `I{ơƎinIoŰ015I ~Q' x/75.va)K-ōQa#Po܃cF6(A 9:]5,^vW3ˈ4ca]9ϊ2&Wa3dm+W8BAJ/Bo*\  tޱo˱er)Wku^ XA3# m?P>rNW3h1Tna}%X.'(i JUx/raˮpZ犁t4oSy i<،bıvϑGMYӓ~2dM;I\:w{=TYW{Z= -gXD܄.Uepd*a`Yvn2渧,7Nd)%~@YD?2\|:J(166kqG "qU_{AMBnSJrCw3L̔I~;!j : X2gTDEאI7oI5v*3P|f4+Y`;8Gmhk0g:>aR[i 1&7kV@`ku68򸿨Xԫ0;9|Hb iMas/ݣ>(: 2Dtobl0 =$;qL[זxũq(MV| o1:F±$/ `ԕy wWް"Of`s .7`H%9(1SeHt{*ۍBqpIY_8taPɮB$.~|*͡Biw/NU睌vDW"v~߹O ?'L}ƿeAZ8su/,ʸ{<Ͼp ,t1O#_YYB<l}wD9z#27Y:H͋ 0c]-fuD%c #jT=_KbQIgj2wJU^(UD8b.2 8)S⧳.B 9|х3EѤ""0ƣ5 WUۦ-.kW GS0fJ ݷi2^ݘ)0gxH5g۽LDVZgv^7>)`FrGчHLeZYc=Fv|reivo7^xkvһLG9`ܻպ<l;VG/r+!oR5.KiP>bqJk[dSxzz6"$j?+ DڻO<]0-IYUw_૓WD|tuK4_0,/; b `'FfmhaW7 B|CZ543cY\DńyqqJb.[teDž){iծb E\@P͠YU񁄍y>5G._pip]Nw>nlHt]dc3 <6ҡ#}d:H jwa=iUgѼZ㈸~Qr"7@hK A>oTP_/S6cbk8"HɦS#c u Tv uvHqxP)qG/ $1]/@$iH'CZޫBv4 *$k.-3R=2auЌVUR_HˆW/6 ŝשg<ȍ,Qm5Ml$n`a(mZ9;"33|)ZT+^^\:dClBIPSV3J+ݚ&6~H˨)5* cE.+"Z#!@emR)U}QQ[ҭgČ%sΝ3Yxr:J3R} JCq1VI]Ud$^"YDMH@`w2N=gNNF>6euͣM)'g)0 )cBB ߿ .Tw[kr3 7wY7ytoaG p!5X 2LpZDA}LAI6-X%. z$,RE<Y81 iNꅺ2팙 @2\ݠ}T:GZ"׀Jy[2sg)r)%.}Cq0% /խBR:دj4io\0s(PoB/GFGM$.5#Cwg/A!v1,+"f ̈́xj\M Zk¹[Kk}iZކ$'LO^i?9&dY-qVG^f! bN}ˏڭlB7A\&ȷ-}cVЦ+H>^N*'c;oP88iUYOwk*8A Kr3 ~kq/]6x\*)yZ|rXJpDgig78 c~B(lEJSOE ]vٜˤ_$0i{E`k;Nnimr\#U3W%%uhwp!#*Ü79!0j2R),Ug.Us%/)NbU (gTܫQ/t#0IW0AfW!s*tTXh:y,H_RA‡dI<%N]̆Պ'Ibj7,? CQOzvګS+70Aj !7;Gͅv2Mw:ÛxtL =J.kJ!2ҿ l'} |8䪃ڛqV}: MyG?&J%8ا|`zp/| IGl!,hnrI\.LPa;Ȟ@j[cnX|:NīHNjuyGֻCr5۝Wx0I;%0 XkU=N=EdF"C\[&#ũ^x!I\?U| ڤwHlʇ'- ($0HY~NTCH!:@loCDz1rJ*ᵽ7,g|tBbP'_GfqzQ=R9MK~5@nӖ r,L]ӣ^4z$.Рp;%NNISdg-H s4t9ҝasBe;ZdFvƀr]\o2Q6\҂w f pGTy_6|kqyiӭ5I̡q(\(j?2 &RH"TzܓEp aCOO"7lo !f0$|'7ZC'˼xC-t[I2oabOk'ec$V6}<}h^gO{W.v@K\n5lݹ3G_+t1tٕ`D360gh M5hM~#짱uXQ^ժ{TVT0 t(X։Ҏ?oDFJ$rA9OFeOUsu1`a|cN ͆#h9H΍E.}*+e8uy-1t:,M+ q@`UՄ8 $dNղkM dٷ.30]Nů*vbcP4ϸ84T c|dfgV"rܑjrgqECqo,;9fX I3mBFT ]!(FgcCIVFc zi5Z/Ag+x꾽-lƥk^BUw..PR>yz8d+T^ 7fb9`qv#cߎ&nLƚw~T}0iR+n t8@ L1޾ɝh$pot[7Pq==&h;B*Ww]GyyWqR"qΎrx\uI^#+(&c71 YC \[O =xl_+*/>,ޚ~Ub(4 XgG;:cV|6pH0K(I1d{ xtc%V[>&$b~ٲֵ0_ϯ8c/ 7ǡ\E6w|NR!s𗑞c`܁`lFY ]Rtsð޶kR3ye-  9H%'h$[r*AZGg. M=(*?cKz.d)Jt/ʯe4b@FЃbIv[ 4/#ͱв`\VC~5D? b 7b"^,c`m`o*=w(l t͵utt71jw9ߩtJf3rJ'P9J1L"xk)m/ɗ#[⎖_8~?QfR^V|4iT'pC cd3jkXߧqJA3'#pp3 v5 zaed}#ǙB;R0E! #%$(/> -lKԥgm#ۀ}s]{77L'ah:H}Bl̆m|c6!D9wiU0|\,A2j۞Ā싔Oϒb!Ĩw:T6dF*W:t=v3^-=:WJ {]Nl)]YڢΪ fc܏"#wnɿAH2L,%"8bfN'@gfTlGԄ{/l!-,Ժtޤ\V[ 4kZfG/ l]cQ^UAZ;THFqL;~⋷#XvJ_28d[g Q%rl !t"ǭbr1>猩}7O[4U`@ G#zHoSLjq2^)jF&unW~WFx)vЌEEI^3AF-(k@ڞ2 @+ZQjԚvHi(jLJoLEbՓ5g}i"XCјE\ LwLޮ3C$/ -.8ژ^` xl"B ;[f춲^,ٷ\O_Q'BCI2 `g>?ֻfT)F ڞ%*tdb^n>c{b,gJfQ e ?C - 0v ٌ-']""|F%VwJXv h(GҠY.^އ+W.b1?aorn)!<ؑ=KJ2dxJZ4yKơI^ciӷ;*Mn?CvNw(U "ԝ<.Tk/.]lgnmM$A*"abH*bJ5lCP[$%߉ˉԁUT0%+bTjVu2yXCu79 /H&z "#a;0 >mxX݂}ZLCG0hqcJi_KQb̊Ēp^0FkvI :&bozK쥱#n2- nxvpAO.܈qUw{]4(->Y:cم FɧJBZZ6EMd\5(k}V^+QU d 9M\N-oؗ`8O^8fN1\1n#'4ejgaH5۵^FE}Ր{A:RA]|8U \I%ڰ0P\>*A4?*x*Cg%!ЬR9Űt ɜ)qibΘ`l˯kW|d&$@jIЫ;ߋ6c+1g%LTG> R)̇Po43ĈbjF۪x߼`,HhC7KHE:Nb i)k y\4=UE?<]stSPYԒ)K7~Tf:y#ӵ 66J26Xwo wJ}gwтOr޷1gʡNPXKMFj,6sXm.yC櫫>?}L[@ 0k ˒ZH k6~]5]R4UWꛨnHZ`Z@,svi.SvdkVACĝh%Gtsu4}; ;H "qļ$Un9 oĀgI0Mew{tHbZ%hxT1pҘ;سmW].H5|y dmE㌇>.mW1?dp]obh%+y'x~n_z+ d Y!wʫ+9wWy[v8|!aA]:Zqs= 6.gx3+l Ͼ܅JetWZ1}!(a8v+a!Iu&fH$h e]k 6m/ar'v.r\Zj b/H7TcJLX1mTsX0c ڐ&i'VBH]!:|HY2MV }dhY!rxq?"v,,vlpkOv*\T`@P%GôGR,aJJʁ)K/EI}hb`'u<~:KLdæ3,LهI9`Jx8j((m`XAa:z'YRv7&,u6<;-" z B,KeђrЂ*'I x@/>bTHa>?˙cWOFqpݧ4Lv2U(zM99a~N$c >m[ aH](LaG)KsR|S;/ovp8DP fa҃{x@Ϯ1ۮȬ;4mlҗ*|PpYɂfE*& lЪ4Zs }>5:2&\/%;'s@D6=N4DA[-(}qk?B#b( V-~թ-J G*N +o)= , .L8曛XK99nsV f>o%9KXZXOKa',E0?FqxS5hrGBߦԁlhyT$/XqFRH 4=#aSxKl/ZMu[ C`Ws>QÊ\:ѕ) Uނec?{i0SX(@TI6/NV: D#rI;]5|Ǹ,%wJ}#00~xhc>ݜ7?횣]쿂fr2Oѯ#InGaɻ@ֲh樋Kp߿_gNj Y&ជAw ^/]-0De#j\1O~Օ$'a@4~4yկq)݃?T9r+pĸli]k/Q0ںg9r'T:)&s'؞uGOr€uFW20CzbI.6E@e,GaRt/%<]CBs&NF990cmFAcav5^d)s\W7qDVh6&KLط_b 9d oNFَ,vefI'Tru1NBwާNi u%.)3B6 1-G*_(WþKH(+Gp]h;$+ V x`-9M)K)zXUe͑0yu|k.S[;JLY -Vdsڬ'6E) .O΃h?E,l&uPLJ o~=%oQѹv`gFvNʔ>I&Uc35~D}v~fTPOD#c\cA[Xp%J$PqT|c᱕.T9Ϫ34<2hIO6U^ nB=yQ-*8 5j%lю;)~5Sد ĶzlO/tÔCuYͣ|⎯>?+ _Sr#G%AzA ~R[fΎZƜw#c`knxD7eLJUz*!.!=G qS?|u+3ۆL:ڒDŽ  g'PcGxSɢ>Aֺf ĜS[15*+juXoelh"|C$ x3GmIyo1#֊C3DHxXeA]bHsJ4)#t6Eܐu$zG;e핁c1aJg.k_N歊 nI.wg,]q%"hӏ;{U۔`ß1 lw<-wC艅W" X/ýG3D:ANL"Fgras=7)c,F?gW7徒TKT;[*GuBW4G ~}̬J' [TPz-*"tXOP +l!\]%i$U2Y#W}L;xg'X ʿSyO:?Hl#tZVijuhybRBTLb ]ȥ>α}WF%qol0i,ŭԟ-!9_d0o)Dd?`?ea`Uw?<@Ҳg.^ QNAHmnt1 %꠴ t^{=Ǐ@7 } /cP objT 8.#%L{3)5j:B|ؑʴ{>)q]SB^NrrSHѓcgY2`bsQ xT M>$ü-A[بЩX`Cf@Eyma@ $~g 4 U4R٪Vs)Ha pZͺH)U9gW!38*s9z246Ѱ<]Jh":i0У؊ "4(B{գp^i}dU[<,h L2$2 Ԇ=xq|5jCDKe' c #oҝ]K,Q Hh)_a?q:3>DYdv!@ ̇x9 ocUq1dR$ ė`dܧ,( 4^B8=-ҠTfJTOL*EVZBUEG7xd ʄq`‚7tA|;&D$EF=eIZ9 `O-H3+-\: H` > vפ:Z [ lsFZp* i K?sYs(I+Q")#؄݃2%lӘ&WW ([_;e>'+7b^hLLb t!Ue˸'﵍Rz=;#&=QFioLk#Ng-dsKY*0աq/oB1 EQHQ޼eLjiQ]RTL3 U~?s?6L c@n 9-B$Btd%B*Vm| 9Say>5(=xuJ-Ua<s`C@Nҕ!M6o5HIdi"vE^I>7t>DJ h".fWpOTIPdn 9[jT&fHS@K|OmĜ׉&yG޸`K-$^GMNS)I{#-mN!&X!4/?sf=?O+i<,}r*ŲIXuoY!fY[Z˾f!#5'%r[з\+2CʏڑP_*?P1lGL,YrBQO'MOxEI/~m_2$YH%!МYoruEdCc#My&B@DI3l,0CZNļ}w@[4`l'ϦQg9o 7(*Sz⪇}rRBt%Ĕ܀/b8QfFSt8=%x݊+nQDHvoαmTzRZ aO?w>nY},Իw]͋ ezp>u6ΠjG[2%X~=RhofaOOAQ_ܪ3@*0uk5}ڲZ \SʇGD >%?]C{H].{Ԭ ]EոeO"RgXs$]Kh}䳀A++sH^ӇGw [(d))Ǽ]pZ1i:`'=Wπlyo02rEF!^\1:,[WS%vҍr0]5]~ΐ+k::UKX@M}XV@[ #ol_N`PRro&i/K8հߐWfK* 0h j7IYʷ)35v|lΖIxSlϞ!MaBNĒqJѓρ.IRy >@ªFuhPXZJR!HrӻY;Bty_&zl7E?V2$cͦqgܯt/&KNKQc`HS˞I -{[mX沚U$ׄ聘#H/p4Cu<-H>f&f 6g&/b)[yL(vĉ$p$Sϫ+|LO]7:gfkV9&uJ{QZ"eeîV՝a+,@8*7!+ ]i!H#}3I3PE.ݝΖp;l58S&fJ*Ĥß )> / ̝z\Qp!fГ sqz_Xd T>X]"~psC\6 {2mjlYhq,b~|ge ONB'[8o|(QlQQ S%A1xL.bH-<ЅD= nrWtkCLg*2 l83u^`2)DgwNG%Q^nSQ3bgaR;u`.y&zy}g0O^iZSg->+xqfPA RmWx1 c= Җ֠HL)]2+Eig!cہ^UZ KEUL)ؽ5Lw,c$t}mx g3ף]uaDB\QQ|Ki9wCQ.d+Q gH N*:ϮgHWN,;$Gv%||cR־jL)L6^ `/c*;<5J ̘M-!y/_Qe9nJӆ]"/>{ v('2ǘîCTCdEĵr"KMA〶AYZ&5dڦ+ .#0]1MjmyWe۴9`+!I#F\ֻ6#78mG-Yta%s1rRCV| n2"* !xǫȒuɊr$I8S XB =4=ZP *mi6@w&3Յ_ xX93?ojlqjxt@00v!mE|@~qkF y=5 劘=K.՞翼p:<0(]Z_Z(Îd[bF?`@b4n|0K/$ߍ%2I,ls|cto Q1= m"v!y?l^l:os&Heo#֖@wIBHϔ PP0LLErqzX%^9JIT8U@}][! rۢ?5+ ۉel.|iaA.eW(X,A1b 4v;&9QhB &[v9d H~ [y3ID.gWioyq+xiw(b@zũ)zapW('I-=16e ~UoN00 U"MJ-"o-dP̫@veKHjl3eEvaQZdHF槪A[9p&]N%S_˯z?M`Lkrjw^Ohiھ@}yy(4<1clnˡ5ᔊߗTb64qC{!%5ZKzoR rdTvR*'](|=z%qfMx;`U׏=rV2ݣ`_^Rcil 7`eG֔u^xj0L:ീ9];;v8ڋ_j/226F`;e-gCa +dq17%bOF;AWpf\%$pN2+~|Ǽd| H2I ˳͵ ׄNi ¤p%~uDM]_QoӪqGԵB(lu6=v1(9䐼 +PpO{Dpic-u`ͦh{CVIHvtWK6ǒ2!n! (wbaöP -|=#N:bS Ic+gxIzFYգ 6 yqPXN 1%BO4IZ;Gt!K"Wmɧn=\>wŨA{p}eAB7G/{-Y;i*e̅^CqUG9j2f0e=x H~ĺ#6nw2y)LOKKRm: {멂ڂdNfP^?3*K!6:2Ć WSh {K¥Ͷx 7uRb\l̡ؼU`ȰˑƓ_zImc kP̜ADܭݝ,`Q i_\.vFzs H&%E9sE );58 Q ɁlCHy uh.Be5hgH=~S6}"VNfPAqѲhֱ Ga*Јs %#@RM{ Sw *LwQj':?f٣ ]}=?u絆;k)h'~: Qׁ 8hc?R_ᛤř]q ۾B1I<{اq.i~xXx^^nShn:C+vHnS'µMgSHq8y1)HgA`ԦKA")WoRF4"ń乜nWV'gXn5֙ɒ&"zVuBQLc;ĆuvƂ».hۨM-> Ȧ+ ÚeAX%Y~[Q)CHΫlDؚ6Oi_A ~M^7"d k<``uˡ&XO\J_vz,+wZ6h-)tHH~rf^'R4bGF $~PIݢݸgY\Бp9*d$Y?T$OPy9y=6G%yrH0q%Łz:'u~ ͧRox(|&=$`!pθ 6 ftX0( 78p 1tb^hP]ȁ?MESz7.n_~٨m#1]20\?TUD%jH|8 Ve "M:r瞯vXhdzL!꾇4 Dh/.5qCPMqPT{6 ,(@+dcNZF :u ">дvųog<_EO-U(-yX}SRF!6+J|*Lt= S^fI i q9l"\3}S_l?|s*ՃPbǡ]kGWqNP^`$6PkA47JT@)pٰz58!צChyfqk1Όl B^7J:ň;=U8YxZpd]n Z1HvƐTF6ucH>~7K 'GDK8}"1«~eQBy1ō7IYBdAQ=,n/OF?ۯp-m#IX핔lÂ6+6m.wsgNy6K"Ȗ؝|n .7H*C^ x *ͦ`\<n-zx(hEMCr 5terWeOaJA<$>Mv&BAh5jDw},3HX`?~S*C$%1a8QޑuN`x{NOgs) PDȐ"#(qBDuz$NC;s_<>>$@1֍B!⭕P݌%V_4 >4D[VO%dOjJ2;n,hmFPl+*Ql'̳ee1@f1cAyclL[cJ`?u(/΁woY2S{HogՌN ϋ!rRd8<JcK):jcl|rd=xcN";1 W^$1KQ7o\@|j9IDsH4[U_ʹ9f0PXTo;ι7 `y|/#@T(CB[{$*gu/΀CZ{D򓨎>A-榱NGH҆VNGO_ NGtH)`;+Bi'Rvoʽ(wD7ط ti`67BA 6L%V3~Z /N"? #sJV^OTi^m^6 ɩIb45;G8ը0Vg0 &f"a~(DC" {^%|g<Δ4?=J\=t_d{`=0niyV-b+pF7VlGfs7rj7*6(PSW d%t]EikQ Q E@ g*dqpx*mL+0㩬QT8)#FESP:;BExRL0Q&J)9/={0y5 W2 BtQCל9M lE+ )@/ ,Ħ@uX).ׇk6.fȥ5<P^-Ud٩NIcطM +f\JA Ӄ4A' %Oá}ƧI,pH,/yZiNzu,tƚ18$.l4M0AXk1+)$ 1"6ERwϱf1"oCbWi#2"8n_&قW1K%t߁"W.08|u(@'`i+A0(2}dW]+/XNl_٧#dbۄ14V@M^<COS6ƲGLىlY!SPstOT"d>!+"#)4Ǹ̄loA~úLz1ɦi Q{nMGԦ2UzuAlvP55!=<ʞ%󢕚sEaٞۛBͨ0[ɗT* T,h-xe-Xv:_ZEQ,?3?@3\KhnoM6gU=6//- ę3PwaW/՗1Dİ^; ڹAmD߰A1܍QEvzi_''u3lvpwN{Xu/f BO-t%5rXBwX ƒԁ`u;K$kc]ğ\DVq3tTO1@`4S ҍ@6;yvB":R~m|Mk΀n[~ls¹b$ߌ6FcyHE[54ܷ\1 ]Rg߲3/EL/z$o?"Y?ӤY_\c!|W]c-,u'O2*4LBҜKR-}eի j[-YQD-36twYoitHqaB\}[|& 3k#iEI" VB]Vhlnwº%ޓ_Q;}Jn5r;>>+;J&IC. P7:zs`8#I0LպKa<_x[6ʷ-12tʻ-tl" ݨ=#XeKFl{elSà/{KC{CKܹWŘ (^TkgkV1.Y:u@(,sl91ۂ ti 6|\3Bq,R2!p_ M܊d3ŲPǸMFN}H*+pIqǨQ#V>ۉZkq]9m99I4WuDr* ˓ȸ˒)_L/_OCd #źMW&ZXte*9q-朁ܜsU)Si!5:pFKdN + !~F*,IGJ9JCX}yѥ:Ebӡ(ʕ~͗$_Z.&O$M#E0#{R[oX,3ͼ3{ QFWe:|JcLh_j 9rq\rg*<*ynz)gsPt b_3RT$E'+SVܴ+7+rBBDs=8 GJp(|lI@ djEn%ȯ}Ѡ`!{:Lh0MѺuaZkmlxTk)i?_'@vqv4CѰ&;ʪ)s=Qb_L2.oo-@Es b7\JNl_̅+[ƻ(F,0L=6˛_xJ>5XwR4pC$!ԍ3A^=[n0Vw6 LI𣮼YʱbV(F BqÐĔ^Lӭ=Nhθ7`2932K!nZҿC-5m%B'QYiRmwguӠzL4Z N^=}+t~|VKbXM#M/5? 5ZEZN~pd4q!9BLPlLO;Q~cCh*ЋdCģwAʙǕczDaVόnybbA"/CAv[M>vy$oᴚ͝w 6 RM)2At2hȊ_ k:h!}2[|}VͿKLZ"]"PAׯʀu|Ц\ZƏ2h9v̴  ~ȩYZ4NO_Fw6#^ϛm =2i\>KvIkii$׻H䓊^9~]Sx.\٢$ {;n4[Å ?4s& JEM4K^RRNQ5 JDW=GW;k3,б8}\JHF6qŜ 6ߎ@]} ׹lnL%_~X %K0#Ӱ8[ H/SXQ;|O>{E(++\Wx7kBT8[^&JNc7uHVb(C(y]ϐyÓ)Oc k"uAVCkyR9OENݨNam:k\;>rQWlh ߿ns옾/벁mQVԸ4iB8QEla=zu NA:F>\7( _pKx8toVI49D9uSw/xfsCP@)Ir}D%\&zSP sm`YI-h6>tOy0g[wJ")w^\8AѮcY_EtH2c`]>m\6m a[ER!xD9f7 ?%F.չ4[ģ{_ٯZN,9?`L}-" IKyO<;*Vghױ.& 7[#Qמ]޺sj=;®Fk"wFFbc k Z_ʇԩGKvܯR B،kG.Ι2/pp+Jy?5D:o-݅Tɻ=tIP/;"Y 2hv9a O/U8H- ;"9ҕy0Ev? [#l:;.LpvB]ENҤ~X;F&w?öF%ܺ.;o꫔@KB2F>I1F9w;R4P6& R4'T[ǿC;LB*J15?̎ ݔ˜˹U@p3lϨcwTe5bzeMiiԀL^""2io`^bd.wshj,h"eN+JP$T[T,Ȇ t>g fi%6)c#i9>ÖwQg9)Ixn4 `e(2$UO- '|+ScTu؃ M-9ek6ClDwP8C rƕ∠RtD_<[3(KVu&zc1OPmf*@PO=NO*+U\c|*&aW=[aCNSR'souZ Op^ "}a;"Rf#3WJlL@LǓg~Mu~)$R+E+F6l2s[u_nh -.xK;r%Ԏ؍1ooqP +7pNƬʶM:~A̓HǐK$zo`[uX-eAs\H 8XI&wMTٗn^r5#L j?6w}*FoBez' (4>mu|OzO֠(hrܤ)j_"Gl+ObhVT}+ }@9@aOTɁ^+p_QO(M \Pޑk!&j8B QNs`P\Hy҆,:%fkݼ,r 5sQ]O0&(\}a pxK?%-XD؍}V8R3& N-]iNۥ(c!:xgգM]reO9u8?z|i*1±)[) y-6;n;]\Kx|ͺ-ƂtZ \eVR_txz^閎#EE`3n1ssX\>١^A'"ЋJY:C`ZFS+-:`9~PBo5foE8lwe ~{5Wg5t;|[Eі_͝&VC8h zIvR?4àUMה՗.%D?tvƈfd"$u}H0~,Vs6=t4CUm6y{z( .^E}Q< e0sx*\㊣n:WI3$=Ż 5?/UfҹB2 aL Vg"j቞~o8S#*z*ŭ@H-aM W ń왨f]L 86i!K&?Rc7 ^9}@>wP1uN#|xݐH4Iv>蕅ۼSߏyKM}sQd ra"Æ~] h^W

Rp甬i==j>~@3g՟La"{iIF0P|JV!/ V5JWIjÊse#+UZuDI)(~%tS(W6w7j(=+$j}gNP\ bA97CAִ&ߎW/pH5/hG9 !Ū*|s GH1:.6?P{ρ˫fRxR3vFT$qcZTt>^gijVʴ--[pa !-7مb^zO\ icu Â15Nht#+~2c*B-`HTLHT$ mPʽ_M*Xh`, ED!dPo4kr)v,~X29:%, cGw<$Q>Ťyi_Ӳ!h>{\Vωt[~ .t8䚣2`E=9Ču㨩:I}F(h5J쪙F0 lb8&ם|le龚w)S<&ppS3Jk縓>֧wf:^\ yEhh2u6ԝaC56rvE`:$gm 5.p_X((HH(DfSL S,&;xh;wC)x,2O+i" kWXh$Z{6=&=EeO^x4.qj{I4OǛh2i0*MV_xN/W]5j, oa !tlztY.t$}hj؝Ʃ7M y8جI6Vn;Ȩ +3i>eWW#3}ք^d,ئwliaqss Jx) S(Ay ܵ P5-ݲ㫽*7ACۄݷCd)QjFBļ|g%^ɅMIEň`Upb<}5 W1Nw5<.+!;Tr`w9"V׎pHOw׶8^ajmv G˴Opk= |,7< F$4ؤb]+t>0$Xr]2ZKfauDH0vunŻS{E\™n֒ʐjZB2Fv_q )pި٨#to3YԗtÞsa}'„JlZx+׸ۻ̨k?m"#-0S׺O&BbD~A̴ ?EՊÎΪ}:IIۿ⒕Wڶv!߷= pU_ u?0ip"_Bgn'$sIbmt!1g:rTyggO, u FF I-n%X J"j#3ݳ1p3*23\6Y`˗jF+L'+y27gd(Bq7hwu T<Ѵ`;Z 1|{E\DrΌtw~0@lܰ<ڹi4zГ$~|uƼX WJhvUH_@)dN !@v(vZQ- 8mSn1QJ=0o?m`9UYEG4yvy}jl w6i'5zUc=OM1m^StDShc?Aς%y{* Z itvdI|6n.{`ފxo.`5l4 N G&"K\ύӅq?\1Rqfh U2`vV<7~!HE{52&DvVsXPe9Gձw@XȤ` fiHikn]BE< "Z>KW·[h4|".^8?@8ӑsa1s*EDv:;,eV~K2bGNR 35)Yhgh]Fnf+qBƐvIݻfJGRU8`|tF}]<|jr^bRa#=h;n;wqJ̯oYo8~` :Ҽ:i@Y(>oj#@_X[eP93 b*(BrFLzNnj##~ˁ@-~q:c i pr#)Q֫^i`̓ FUא;4DLsal\j4^ A9omS+u|4)g?L4ɤwDĥpFjWK]e3ݟ݃03GnG )QbEk\_\2Va: MPOiG-,ϣ?_It  &;^Y^!{}'0/r(],/ɣ(s?/nh`pOãxׇen׾>AOW#}4}2@'Wh6?| z@}dAkP"r"?˯]O:o*!C^ OtwRn1HBLHR&NyPoDlqXJٚnBtخ"܋ޤr_ݦXijBZ$:YLQgn>A}F _c3t.ax8KiwWT@o]E'o)1/-pAʔ+)73,*7G J/;%YZ6opi(So$Qx1J.S_[a_6C'te=G<{XaD 8LyP)9H]@?ց֣:Ge{X+7pFw} lmyϴ es9p x.cj@H8v~- CJ!j kf# א̀\4frQfs06 [`bQ.T.0%%Ux/5b샪Ujw Mba͎N! ٲF}Z^_,ޙNSd;ܮ6!ގ7x+9!9kq`z?[dk.#Q`ov9hVTwòs#T` L8#rjo4#0j[eABȁy]4KGCh>7#N8 r>Ǒ{Gi,2>Z?VcF. G6y h Yw:z!1Wxߧ>StG,Ae}W 빣J6ᅬ$9Uy0w uu+(\m.oaBw,wcp"%C h+Qf$jv0VOoWxG㢸|d\?^0sؤt6%KIy8Cw|@MBq810YF}EwJTP\bx0uV5XS,UMQw[4oϦܟh y.ɿ \KFk1fEgdz̓ġg,W0Ԉg?2(y 8p&Ff+B,c94Gߑܶ| r(Y O|MˡAvkPm:[sNvB쬮4g_9Z=ىvtB嫘<^/;K1 n(#։ `͈Od3G;M"S 7"3+E"ñ>uVEb}Usa, Tʢ<ŭRPU#vNRzhZ*MQFhч?M"w$#kGz!l,kȼ=@?3P'8*sĬ~\:FjKVOz|{V9i67EXܝd$3-H4qC[ -.qs6$nqY{MWkgh]n]7-XLPh=j8##z ? j=SE:J~9X"gi㔹2"No%FZHzҺW~ HҶ YZ