openvswitch2.16-devel-2.16.0-92.el8s >  H bz !F^(*v1@ۥEDe Hakgi^!0a=aq."6=`,;GAZzƔM :NndnRl8tr1ʿ< +yI9b*f.Rhĉb4,vg4C_ɦ6\fEwWa$xd(&#͔ξ6EaFKt / >p< ? d ' d *2 G|EE FE E E )E EEQEEt   (8\9d\:/\G@EHTEIhEXY\E]E^IbdefltEu$Ev 8w `Ex tEy     Copenvswitch2.16-devel2.16.092.el8sOpen vSwitch OpenFlow development package (library, headers)This provides shared library, libopenswitch.so and the openvswitch header files needed to build an external application.bbcody-n11.rdu2.centos.org CentOSCentOS Community Build ServiceASL 2.0CBS System Environment/Daemons daemon/database/utilitieshttp://www.openvswitch.org/linuxx86_64# PQNIn)7@9<&K+* )>U,;) n*< V U yy'#BnL8([ T . nI=4 I _ B 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-2.16.so.0.0.5libopenvswitch-2.16.so.0.0.5libovsdb-2.16.so.0.0.5libsflow-2.16.so.0.0.5libvtep-2.16.so.0.0.5rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenvswitch2.16-2.16.0-92.el8s.src.rpmopenvswitch2.16-developenvswitch2.16-devel(x86-64)pkgconfig(libofproto)pkgconfig(libopenvswitch)pkgconfig(libovsdb)pkgconfig(libsflow)@@@@@@    /usr/bin/pkg-configlibofproto-2.16.so.0()(64bit)libopenvswitch-2.16.so.0()(64bit)libovsdb-2.16.so.0()(64bit)libsflow-2.16.so.0()(64bit)libvtep-2.16.so.0()(64bit)openvswitch2.16rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.16.0-92.el8s3.0.4-14.6.0-14.0-15.2-14.14.3bb@bbbޅb@b>b>b@bb@bb=b@bkb@bbrjbjbjbi0@bgbaG@b]RbP#bMbJbDF@bDF@bA@b+9b%b#Pb!@b bbbs@bs@b @b @bbb[@b ar@ar@a a@aaa7a@aNaaZ@a@a@aa@a@@aKa@a@a@ababazay?@av@aqV@an@ahaf@aexaexaUaTU@aTU@aTU@aTU@aTU@aQ@aLl@aC1a8a.a.a.a.a@a@Open vSwitch CI - 2.16.0-92Open vSwitch CI - 2.16.0-91Open vSwitch CI - 2.16.0-90Open vSwitch CI - 2.16.0-89Open vSwitch CI - 2.16.0-88Open vSwitch CI - 2.16.0-87Open vSwitch CI - 2.16.0-86Open vSwitch CI - 2.16.0-85Open vSwitch CI - 2.16.0-84Open vSwitch CI - 2.16.0-83Open vSwitch CI - 2.16.0-82Open vSwitch CI - 2.16.0-81Open vSwitch CI - 2.16.0-80Open vSwitch CI - 2.16.0-79Ilya Maximets - 2.16.0-78Open vSwitch CI - 2.16.0-77Open vSwitch CI - 2.16.0-76Open vSwitch CI - 2.16.0-75Timothy Redaelli - 2.16.0-74Timothy Redaelli - 2.16.0-73Open vSwitch CI - 2.16.0-72Open vSwitch CI - 2.16.0-71Timothy Redaelli - 2.16.0-70Open vSwitch CI - 2.16.0-69Open vSwitch CI - 2.16.0-68Open vSwitch CI - 2.16.0-67Open vSwitch CI - 2.16.0-66Open vSwitch CI - 2.16.0-65Open vSwitch CI - 2.16.0-64Open vSwitch CI - 2.16.0-63Open vSwitch CI - 2.16.0-62Open vSwitch CI - 2.16.0-61Open vSwitch CI - 2.16.0-60Open vSwitch CI - 2.16.0-59Timothy Redaelli - 2.16.0-58Open vSwitch CI - 2.16.0-57Open vSwitch CI - 2.16.0-56Open vSwitch CI - 2.16.0-55Open vSwitch CI - 2.16.0-54Open vSwitch CI - 2.16.0-53Open vSwitch CI - 2.16.0-52Open vSwitch CI - 2.16.0-51Open vSwitch CI - 2.16.0-50Open vSwitch CI - 2.16.0-49Michael Santana - 2.16.0-48Open vSwitch CI - 2.16.0-47Open vSwitch CI - 2.16.0-46Ilya Maximets - 2.16.0-45Open vSwitch CI - 2.16.0-44Ilya Maximets - 2.16.0-43Ilya Maximets - 2.16.0-42Open vSwitch CI - 2.16.0-41Open vSwitch CI - 2.16.0-40Open vSwitch CI - 2.16.0-39Open vSwitch CI - 2.16.0-38Open vSwitch CI - 2.16.0-37Open vSwitch CI - 2.16.0-36Open vSwitch CI - 2.16.0-35Open vSwitch CI - 2.16.0-34Open vSwitch CI - 2.16.0-33Open vSwitch CI - 2.16.0-32Open vSwitch CI - 2.16.0-31Timothy Redaelli - 2.16.0-30Timothy Redaelli - 2.16.0-29Timothy Redaelli - 2.16.0-28Ilya Maximets - 2.16.0-27Ilya Maximets - 2.16.0-26Open vSwitch CI - 2.16.0-25Open vSwitch CI - 2.16.0-24Open vSwitch CI - 2.16.0-23Open vSwitch CI - 2.16.0-22Open vSwitch CI - 2.16.0-21Open vSwitch CI - 2.16.0-20Open vSwitch CI - 2.16.0-19Open vSwitch CI - 2.16.0-18Open vSwitch CI - 2.16.0-17Open vSwitch CI - 2.16.0-16Dumitru Ceara - 2.16.0-15Dumitru Ceara - 2.16.0-14Dumitru Ceara - 2.16.0-13Dumitru Ceara - 2.16.0-12Dumitru Ceara - 2.16.0-11Open vSwitch CI - 2.16.0-10Timothy Redaelli - 2.16.0-9Open vSwitch CI - 2.16.0-8Open vSwitch CI - 2.16.0-7Ilya Maximets - 2.16.0-6Ilya Maximets - 2.16.0-5Ilya Maximets - 2.16.0-4Ilya Maximets - 2.16.0-3Open vSwitch CI - 2.16.0-2Flavio Leitner - 2.16.0-1- Merging upstream branch-2.16 [RH git: 6cd148d13d] Commit list: b8fc670ae6 system-traffic: Fix IPv4 fragmentation test sequence for check-kernel. 23d514dd25 system-traffic: Fix incorrect neigh entry in ipv6 header modification test. da1f5a95cf system-traffic: Don't run IPv6 header modification test on kernels < 5.19.- Merging upstream branch-2.16 [RH git: ca5dd54f22] Commit list: e7792039e6 netdev-linux: set correct action for packets that passed policer- Merging upstream branch-2.16 [RH git: d31b5a2a53] Commit list: 27936e0f9a python: Fix E275 missing whitespace after keyword. 0d3a67c462 dpif-netlink: Fix incorrect bit shift in compat mode. 4e319c98fa packets: Re-calculate IPv6 checksum only for first frag upon modify.- Merging upstream branch-2.16 [RH git: a9d421666d] Commit list: 2de2ef224e libopenvswitch.pc: Add missing libs for a static build. bdf147c584 rhel: Stop installing internal headers. a48436481a netdev-linux: Do not touch LAG members if master is not attached to OVS. 9cc1335f91 netdev: Clear auto_classified if netdev reopened with the type specified.- Merging upstream branch-2.16 [RH git: 11b35522e2] Commit list: dfc4a324b0 system-traffic: Properly stop dangling ping after geneve test. 1c017da8ed conntrack: Fix conntrack multiple new state.- Merging upstream branch-2.16 [RH git: 092b9c8e76] Commit list: 997ba4ee77 tc: Fix misaligned access while creating pedit actions.- Merging upstream branch-2.16 [RH git: c1bbe117f8] Commit list: 2e6d28fafe dpif-netdev: Fix leak of AVX512 DPIF scratch pad.- Merging upstream branch-2.16 [RH git: df1ebc7699] Commit list: 0fe91ee5b0 dpif-netdev: Refactor AVX512 runtime checks. (#2100393)- Merging upstream branch-2.16 [RH git: 058ebc82c2] Commit list: 19f20b0da7 dpif-netdev-extract-avx512: Protect GCC builtin usage. 1439c72fa3 ovsdb: Fix memory leak on error path in ovsdb_file_read__(). 8456befa34 odp-util: Ignore unknown attributes in parse_key_and_mask_to_match(). (#2089331) 222a52c86e lldp: Fix lldp memory leak. b04b30af65 ipfix: Trigger revalidation if ipfix options changes.- Merging upstream branch-2.16 [RH git: 3a0b236aca] Commit list: 2266e91acd conntrack: Fix incorrect bit shift while hashing nat range. 7cfbd3921c odp-util: Fix unaligned access to tunnel id. b46d9ba9f9 ofpbuf: Fix offsetting a NULL pointer in ofpbuf_reserve.- Merging upstream branch-2.16 [RH git: c4dc313aae] Commit list: 63f21bd205 drop-stats.at: Fix frequent failures of the recursion too deep test.- Merging upstream branch-2.16 [RH git: 4e6f367244] Commit list: 64f289dc97 Prepare for 2.16.5. b614d27ebe Set release date for 2.16.4.- Merging upstream branch-2.16 [RH git: 45dcf738b0] Commit list: 87922569f3 ofproto-dpif-xlate: Fix internal CT state for non-recirc traffic. 51aa8dd106 classifier: Adjust segment boundary to execute prerequisite processing. (#2081773)- Merging upstream branch-2.16 [RH git: c224775aed] Commit list: 840c3fcb12 ofproto-dpif: Fix meter use-after-free. 77c89b0d25 ovs-rcu: Add ovsrcu_barrier.- Merging upstream branch-2.16 [RH git: d7d5f09849] Commit list: c8c78a76e5 ovsdb: raft: Fix transaction double commit due to lost leadership. (#2046340) 2809af022a Revert "odp-util: Always report ODP_FIT_TOO_LITTLE for IGMP." 90e31552be ofproto-dpif: Trigger revalidation if ct tp changes.- Merging upstream branch-2.16 [RH git: 3e3d3725d3] Commit list: 72bad27674 Carefully release NBL in Windows- Merging upstream branch-2.16 [RH git: 72426100fe] Commit list: 6a304c7866 tests: Properly kill ovsdb test processes. 44dfae2991 ovs-save: Get highest ofp version error. 63754ac391 netdev-linux: Properly access 32-bit aligned rtnl_link_stats64 structs.- Merging upstream branch-2.16 [RH git: 0c22edcd05] Commit list: df77b74438 ofproto-dpif-xlate: Remove mirror assert. c81571d602 netdev-dpdk: Fix tx drops statistic for a down netdev.- vhost: fix queue number check when setting inflight FD [RH git: d084ce15a7] [ upstream commit 6442c329b9d2ded0f44b27d2016aaba8ba5844c5 ] In function vhost_user_set_inflight_fd, queue number in inflight message is used to access virtqueue. However, queue number could be larger than VHOST_MAX_VRING and cause write OOB as this number will be used to write inflight info in virtqueue structure. This patch checks the queue number to avoid the issue and also make sure virtqueues are allocated before setting inflight information. Fixes: ad0a4ae491fe ("vhost: checkout resubmit inflight information") Reported-by: Wenxiang Qian Signed-off-by: Chenbo Xia Reviewed-by: Maxime Coquelin - vhost: fix FD leak with inflight messages [RH git: fafbd8f642] [ upstream commit af74f7db384ed149fe42b21dbd7975f8a54ef227 ] Even if unlikely, a buggy vhost-user master might attach fds to inflight messages. Add checks like for other types of vhost-user messages. Fixes: d87f1a1cb7b6 ("vhost: support inflight info sharing") Signed-off-by: David Marchand Reviewed-by: Maxime Coquelin - Merging upstream branch-2.16 [RH git: 1c2e3ff275] Commit list: a51dd4685d ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. (#393566 2060552)- Merging upstream branch-2.16 [RH git: a0490a292c] Commit list: 271bea0ee0 ofproto-xlate: Fix crash when forwarding packet between legacy_l3 tunnels. 9f9d59aeae system-traffic: Fix fragment reassembly with L3 L4 protocol information.- Really set RTE_ETH_MAXPORTS to 1024 [RH git: 104da44ad6] Fixes: 81ff7c5a60f0 ("Change RTE_ETH_MAXPORTS to 1024")- Merging upstream branch-2.16 [RH git: c9969bac2f] Commit list: 2afa9d2285 cirrus: Update FreeBSD versions.- Merging upstream branch-2.16 [RH git: 2ee98fa0ff] Commit list: be8b35fddf Prepare for 2.16.4. d8639f81c1 Set release date for 2.16.3. 71a5a38c83 NEWS: Highlight libopenvswitch API change caused by UB fixes.- Merging upstream branch-2.16 [RH git: 4936a7194b] Commit list: 2c666b9791 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable.- Merging upstream branch-2.16 [RH git: 1418edaf18] Commit list: 26189fd264 dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id. a5af081bc6 alb.at: Add tests for cross-numa polling. 78c8f8a7f6 dpif-netdev: Fix PMD auto load balance with pmd-rxq-isolate. 6731e581c4 pmd.at: Add tests for multi non-local numa pmds. 60652bb3eb dpif-netdev: Fix non-local numa selection for more than two numas. c113039503 ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal().- Merging upstream branch-2.16 [RH git: b4c45acc47] Commit list: 7644c924e8 sparse: bump recommended version and include headers. 20b87feba9 rculist: use multi-variable helpers for loop macros. 05a440fafb hindex: use multi-variable iterators. 04dca15004 cmap: use multi-variable iterators. 80e64f712d hmap: implement UB-safe hmap pop iterator. 3b4b0af690 hmap: use multi-variable helpers for hmap loops. 05e899ea8f list: use multi-variable helpers for list loops. d2406399ae util: add helpers to overload SAFE macro. f22f9d947a util: add safe multi-variable iterators. 72c3e8627c util: add multi-variable loop iterator macros.- Merging upstream branch-2.16 [RH git: 32008eb008] Commit list: 1570924c3f ovsdb: raft: Fix inability to read the database with DNS host names. (#2055097)- Merging upstream branch-2.16 [RH git: a3c48a5aeb] Commit list: c50a0f080d system-traffic.at: Fix flaky DNAT load balancing test. 9928344ea7 dpif-netdev: Keep orig_in_port as a field of the flow. aee2e66287 tests: Fix incorrect usage of OVS_WAIT_UNTIL. 5881545bd0 odp-util: Fix output for tc to be equal to kernel. 4a80c322f9 netdev-offload-tc: Fix IP and port ranges in flower returns. 49e0bb72bc netdev-offload-tc: Fix use of ICMP values instead of masks defines. 0fb545c7d9 netdev-offload-tc: Always include conntrack information to tc. 13a3f57976 netdev-offload-tc: Check for valid netdev ifindex in flow_put. 6e72fd96d3 netdev-offload-tc: Set the correct VLAN_VID and VLAN_PCP masks. e43157f303 netdev-offload-tc: Add debug logs on tc rule verify failures. 37297e7ee6 tc: Keep header rewrite actions order. 823be413ec dpdk: Use DPDK 20.11.4 release- Merging upstream branch-2.16 [RH git: 561b178a3d] Commit list: 47b5374280 system-dpdk: Fix mfex autovalidator tests. 98a74bd487 ofp-prop: Silence the 'may be uninitialized' warning. ab4f30e02b ovsdb-cluster.at: Avoid test failures due to different hashing.- Merging upstream branch-2.16 [RH git: 0e0cf86cf5] Commit list: d5d2bd3c09 ofproto: Use xlate map for uuid lookups. d158b29fb6 ofproto: Add refcount to ofproto to fix ofproto use-after-free.- Merging upstream branch-2.16 [RH git: 67312d8bee] Commit list: 43882d8372 ofproto-dpif: Trigger revalidation when ipfix config set. 218bb05fb2 system-tso: Skip encap tests when userspace TSO is enabled.- Merging upstream branch-2.16 [RH git: 832e52bea7] Commit list: 1515e085b9 tc: Fix stats byte count on fragmented packets. 7a3b46d517 compat: Add gen_stats include to define tc hw stats.- Change RTE_ETH_MAXPORTS to 1024 [RH git: 81ff7c5a60] (#2059758) Resolves: #2059758- Merging upstream branch-2.16 [RH git: 897937f6d3] Commit list: 9598f0529c ovsdb: raft: Fix inability to join the cluster after interrupted attempt. (#2033514)- Merging upstream branch-2.16 [RH git: e4d6d108a3] Commit list: fb4767b472 dpif-netdev: Fix a race condition in deletion of offloaded flows. 3e72eae031 dpif-netdev: Move port flush after datapath reconfiguration.- Merging upstream branch-2.16 [RH git: 970214133d] Commit list: 0168e7989d reconnect: Fix broken inactivity probe if there is no other reason to wake up.- Merging upstream branch-2.16 [RH git: ac5da61d03] Commit list: dee52795e6 datapath-windows: Fix NXM_OF_IP_TOS issue- Merging upstream branch-2.16 [RH git: b2df459e49] Commit list: dcde9771c5 ovsdb-idl: Fix use-after-free when destroying an IDL loop.- Merging upstream branch-2.16 [RH git: bba08b5363] Commit list: 8e23c06f24 dpif-netdev-dpcls: Make subtable reprobe thread-safe. ac0e3dd3ba ci: Fix typo in variable name. fc25e0397a dp-packet: Ensure packet base is always non-NULL. dbae56e702 bfd: lldp: stp: Fix misaligned packet field access. ee17b06cf9 ovsdb-idlc: Avoid accessing member within NULL idl index cursors. 1d799a5d17 stopwatch: Fix buffer underflow when computing percentiles.- Merging upstream branch-2.16 [RH git: 7b6570c65f] Commit list: 0954c2911d ofproto: Fix ipfix not always sampling on egress. (#2016346)- Merging upstream branch-2.16 [RH git: c5ad7f71c5] Commit list: 867e586b45 tc: Fix incorrect TC rule for decap+encap datapath flow.- Merging upstream branch-2.16 [RH git: 4541c91b99] Commit list: 418e6a0b8e dpif-netdev: fix vlan and ipv4 parsing in avx512- Merging upstream branch-2.16 [RH git: 9d51785142] Commit list: 1ec567a752 ci: Install wheel before installing any other python packages. 031a99cef0 odp-util: Fix tunnel key attr for GTP-U. 558699c73c ovsdb-idl: Only process successful txn in ovsdb_idl_loop_run.- Merging upstream branch-2.16 [RH git: 6e6f66ffd0] Commit list: 0276bdb30a ofproto-dpif-upcall: Fix n_revalidators on upcall show.- Merging upstream branch-2.16 [RH git: 513117cbb0] Commit list: 16575362dc acinclude: Detect avx512 vpopcntdq compiler support.- ovsdb: transaction: Keep one entry in the transaction history. [RH git: 7665f42d12] (#2044621) commit 6e13565dd32fb2cf5517f51ca06956e2052c4bba Author: Ilya Maximets Date: Sun Dec 19 15:09:38 2021 +0100 ovsdb: transaction: Keep one entry in the transaction history. If a single transaction exceeds the size of the whole database (e.g., a lot of rows got removed and new ones added), transaction history will be drained. This leads to sending UUID_ZERO to the clients as the last transaction id in the next monitor update, because monitor doesn't know what was the actual last transaction id. In case of a re-connect that will cause re-downloading of the whole database, since the client's last_id will be out of sync. One solution would be to store the last transaction ID separately from the actual transactions, but that will require a careful management in cases where database gets reset and the history needs to be cleared. Keeping the one last transaction instead to avoid the problem. That should not be a big concern in terms of memory consumption, because this last transaction will be removed from the history once the next transaction appeared. This is also not a concern for a fast re-sync, because this last transaction will not be used for the monitor reply; it's either client already has it, so no need to send, or it's a history miss. The test updated to not check the number of atoms if there is only one transaction in the history. Fixes: 317b1bfd7dd3 ("ovsdb: Don't let transaction history grow larger than the database.") Acked-by: Mike Pattrick Acked-by: Han Zhou Signed-off-by: Ilya Maximets Reported-at: https://bugzilla.redhat.com/2044621 Signed-off-by: Ilya Maximets - Merging upstream branch-2.16 [RH git: d202cd6da1] Commit list: 34c830c540 ovsdb-idl: ovsdb_idl_loop_destroy must also destroy the committing txn. 13009736b2 ovsdb-cs: Clear last_id on reconnect if condition changes in-flight. 017e2ae50e ofp-flow: Skip flow reply if it exceeds the maximum message size. e0c6f92a95 ovsdb-cs: Fix ignoring of the last id from the initial monitor reply. (#2044624)- ovsdb: storage: Randomize should_snapshot checks when the minimum time passed. [RH git: abe61535ca] (#2044614) commit 339f97044e3c2312fbb65b932fa14a181acf40d5 Author: Ilya Maximets Date: Mon Dec 13 16:43:33 2021 +0100 ovsdb: storage: Randomize should_snapshot checks when the minimum time passed. Snapshots are scheduled for every 10-20 minutes. It's a random value in this interval for each server. Once the time is up, but the maximum time (24 hours) not reached yet, ovsdb will start checking if the log grew a lot on every iteration. Once the growth is detected, compaction is triggered. OTOH, it's very common for an OVSDB cluster to not have the log growing very fast. If the log didn't grow 2x in 20 minutes, the randomness of the initial scheduled time is gone and all the servers are checking if they need to create snapshot on every iteration. And since all of them are part of the same cluster, their logs are growing with the same speed. Once the critical mass is reached, all the servers will start creating snapshots at the same time. If the database is big enough, that might leave the cluster unresponsive for an extended period of time (e.g. 10-15 seconds for OVN_Southbound database in a larger scale OVN deployment) until the compaction completed. Fix that by re-scheduling a quick retry if the minimal time already passed. Effectively, this will work as a randomized 1-2 min delay between checks, so the servers will not synchronize. Scheduling function updated to not change the upper limit on quick reschedules to avoid delaying the snapshot creation indefinitely. Currently quick re-schedules are only used for the error cases, and there is always a 'slow' re-schedule after the successful compaction. So, the change of a scheduling function doesn't change the current behavior much. Signed-off-by: Ilya Maximets Acked-by: Han Zhou Acked-by: Dumitru Ceara Reported-at: https://bugzilla.redhat.com/2044614 Signed-off-by: Ilya Maximets - raft: Only allow followers to snapshot. [RH git: 915efc8c00] (#2044614) commit bf07cc9cdb2f37fede8c0363937f1eb9f4cfd730 Author: Dumitru Ceara Date: Mon Dec 13 20:46:03 2021 +0100 raft: Only allow followers to snapshot. Commit 3c2d6274bcee ("raft: Transfer leadership before creating snapshots.") made it such that raft leaders transfer leadership before snapshotting. However, there's still the case when the next leader to be is in the process of snapshotting. To avoid delays in that case too, we now explicitly allow snapshots only on followers. Cluster members will have to wait until the current election is settled before snapshotting. Given the following logs taken from an OVN_Southbound 3-server cluster during a scale test: S1 (old leader): 19:07:51.226Z|raft|INFO|Transferring leadership to write a snapshot. 19:08:03.830Z|ovsdb|INFO|OVN_Southbound: Database compaction took 12601ms 19:08:03.940Z|raft|INFO|server 8b8d is leader for term 43 S2 (follower): 19:08:00.870Z|raft|INFO|server 8b8d is leader for term 43 S3 (new leader): 19:07:51.242Z|raft|INFO|received leadership transfer from f5c9 in term 42 19:07:51.244Z|raft|INFO|term 43: starting election 19:08:00.805Z|ovsdb|INFO|OVN_Southbound: Database compaction took 9559ms 19:08:00.869Z|raft|INFO|term 43: elected leader by 2+ of 3 servers We see that the leader to be (S3) receives the leadership transfer, initiates the election and immediately after starts a snapshot that takes ~9.5 seconds. During this time, S2 votes for S3 electing it as cluster leader but S3 doesn't effectively become leader until it finishes snapshotting, essentially keeping the cluster without a leader for up to ~9.5 seconds. With the current change, S3 will delay compaction and snapshotting until the election is finished. The only exception is the case of single-node clusters for which we allow the node to snapshot regardless of role. Acked-by: Han Zhou Signed-off-by: Dumitru Ceara Signed-off-by: Ilya Maximets Reported-at: https://bugzilla.redhat.com/2044614 Signed-off-by: Ilya Maximets - Merging upstream branch-2.16 [RH git: f1ca7b8ac3] Commit list: 2571b1a464 ofproto-dpif: Fix issue with non-reversible actions on a patch ports.- Merging upstream branch-2.16 [RH git: 60b19f443c] Commit list: 07a115f7d9 ovs-monitor-ipsec: Fix generated strongSwan ipsec.conf for IPv6.- Merging upstream branch-2.16 [RH git: 349d687673] Commit list: f2ee013f73 datapath-windows: Pickup Ct tuple as CT lookup key in function OvsCtSetupLookupCtx- Merging upstream branch-2.16 [RH git: e370e283cf] Commit list: bd8ebcd10c Documentation: Fix Rx/Tx queue configuration section.- Merging upstream branch-2.16 [RH git: c9297f5ef7] Commit list: 29936a853f ofproto-dpif: Fix memory leak in dpif/show-dp-features appctl.- Merging upstream branch-2.16 [RH git: edae801e00] Commit list: ba7fffb832 dpif-netdev: Improve loading of packet data for undersized packets.- Merging upstream branch-2.16 [RH git: 6ad0375ff5] Commit list: 2595b7b3d1 Prepare for 2.16.3. 6caaae525c Set release date for 2.16.2. 443e3657d7 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed. 75d2ef9a60 tnl-neigh-cache: Do not refresh the entry while revalidating. 5d88836566 tnl-neigh-cache: Read/write expires atomically. fb42c99c15 dpif-netdev: Improve handling of IP/TCP in avx512 mfex.- Merging upstream branch-2.16 [RH git: 07b9bf085a] Commit list: f42c484445 compat: handle NF_REPEAT error on nf_conntrack_in.- Merging upstream branch-2.16 [RH git: 8708b55152] Commit list: 3e527f21cf flow: Consider dataofs when parsing TCP packets. b537e049ad tests/flowgen: Fix packet data endianness. 35244b4980 ofproto: Fix resource usage explosion due to removal of large number of flows. a201297639 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD. cd0133402c tests/flowgen: Fix length field of 802.2 data link header. 2d65b8ffd2 ovs-lib: Backup and remove existing DB when joining cluster. ab01177637 docs/dpdk: Fix install doc. 38a2129524 ovs-save: Save igmp flows in ofp_parse syntax. dc77857ce2 faq: Update OVS/DPDK version table for OVS 2.13/2.14.- Merging upstream branch-2.16 [RH git: e90e06a818] Commit list: 1d8e0f861f ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation.- Merging upstream branch-2.16 [RH git: 77a249d38b] Commit list: f8f2f7c9cb datapath-windows: Reset flow key after Ipv4 fragments are reassembled- python: Replace pyOpenSSL with ssl. [RH git: 0cd5867531] (#1988429) Currently, pyOpenSSL is half-deprecated upstream and so it's removed on some distributions (for example on CentOS Stream 9, https://issues.redhat.com/browse/CS-336), but since OVS only supports Python 3 it's possible to replace pyOpenSSL with "import ssl" included in base Python 3. Stream recv and send had to be splitted as _recv and _send, since SSLError is a subclass of socket.error and so it was not possible to except for SSLWantReadError and SSLWantWriteError in recv and send of SSLStream. TCPstream._open cannot be used in SSLStream, since Python ssl module requires the SSL socket to be created before connecting it, so SSLStream._open needs to create the socket, create SSL socket and then connect the SSL socket. Reported-by: Timothy Redaelli Reported-at: https://bugzilla.redhat.com/1988429 Signed-off-by: Timothy Redaelli Acked-by: Terry Wilson Tested-by: Terry Wilson Signed-off-by: Ilya Maximets Signed-off-by: Timothy Redaelli - python: socket-util: Split inet_open_active function and use connect_ex. [RH git: 2e704b371c] In an upcoming patch, PyOpenSSL will be replaced with Python ssl module, but in order to do an async connection with Python ssl module the ssl socket must be created when the socket is created, but before the socket is connected. So, inet_open_active function is splitted in 3 parts: - inet_create_socket_active: creates the socket and returns the family and the socket, or (error, None) if some error needs to be returned. - inet_connect_active: connect the socket and returns the errno (it returns 0 if errno is EINPROGRESS or EWOULDBLOCK). connect is replaced by connect_ex, since Python suggest to use it for asynchronous connects and it's also cleaner since inet_connect_active returns errno that connect_ex already returns, moreover due to a Python limitation connect cannot not be used with ssl module. inet_open_active function is changed in order to use the new functions inet_create_socket_active and inet_connect_active. Signed-off-by: Timothy Redaelli Acked-by: Terry Wilson Tested-by: Terry Wilson Signed-off-by: Ilya Maximets Signed-off-by: Timothy Redaelli - redhat: remove mlx4 support [RH git: 4c846afd24] (#1998122) Resolves: #1998122- ovsdb: Don't let transaction history grow larger than the database. [RH git: 93d1fa0bdf] (#2012949) commit 317b1bfd7dd315e241c158e6d4095002ff391ee3 Author: Ilya Maximets Date: Tue Sep 28 13:17:21 2021 +0200 ovsdb: Don't let transaction history grow larger than the database. If user frequently changes a lot of rows in a database, transaction history could grow way larger than the database itself. This wastes a lot of memory and also makes monitor_cond_since slower than usual monotor_cond if the transaction id is old enough, because re-construction of the changes from a history is slower than just creation of initial database snapshot. This is also the case if user deleted a lot of data, so transaction history still holds all of it while the database itself doesn't. In case of current lb-per-service model in ovn-kubernetes, each load-balancer is added to every logical switch/router. Such a transaction touches more than a half of a OVN_Northbound database. And each of these transactions is added to the transaction history. Since transaction history depth is 100, in worst case scenario, it will hold 100 copies of a database increasing memory consumption dramatically. In tests with 3000 LBs and 120 LSs, memory goes up to 3 GB, while holding at 30 MB if transaction history disabled in the code. Fixing that by keeping count of the number of ovsdb_atom's in the database and not allowing the total number of atoms in transaction history to grow larger than this value. Counting atoms is fairly cheap because we don't need to iterate over them, so it doesn't have significant performance impact. It would be ideal to measure the size of individual atoms, but that will hit the performance. Counting cells instead of atoms is not sufficient, because OVN users are adding hundreds or thousands of atoms to a single cell, so they are largely different in size. Signed-off-by: Ilya Maximets Acked-by: Han Zhou Acked-by: Dumitru Ceara Reported-at: https://bugzilla.redhat.com/2012949 Signed-off-by: Ilya Maximets - ovsdb: transaction: Incremental reassessment of weak refs. [RH git: e8a363db49] (#2005958) commit 4dbff9f0a68579241ac1a040726be3906afb8fe9 Author: Ilya Maximets Date: Sat Oct 16 03:20:23 2021 +0200 ovsdb: transaction: Incremental reassessment of weak refs. The main idea is to not store list of weak references in the source row, so they all don't need to be re-checked/updated on every modification of that source row. The point is that source row already knows UUIDs of all destination rows stored in the data, so there is no much profit in storing this information somewhere else. If needed, destination row can be looked up and reference can be looked up in the destination row. For the fast lookup, destination row now stores references in a hash map. Weak reference structure now contains the table and uuid of a source row instead of a direct pointer. This allows to replace/update the source row without breaking any weak references stored in destination rows. Structure also now contains the key-value pair of atoms that triggered creation of this reference. These atoms can be used to quickly subtract removed references from a source row. During reassessment, ovsdb now only needs to care about new added or removed atoms, and atoms that got removed due to removal of the destination rows, but these are marked for reassessment by the destination row. ovsdb_datum_subtract() is used to remove atoms that points to removed or incorrect rows, so there is no need to re-sort datum in the end. Results of an OVN load-balancer benchmark that adds 3K load-balancers to each of 120 logical switches and 120 logical routers in the OVN sandbox with clustered Northbound database and then removes them: Before: %CPU CPU Time CMD 86.8 00:16:05 ovsdb-server nb1.db 44.1 00:08:11 ovsdb-server nb2.db 43.2 00:08:00 ovsdb-server nb3.db After: %CPU CPU Time CMD 54.9 00:02:58 ovsdb-server nb1.db 33.3 00:01:48 ovsdb-server nb2.db 32.2 00:01:44 ovsdb-server nb3.db So, on a cluster leader the processing time dropped by 5.4x, on followers - by 4.5x. More load-balancers - larger the performance difference. There is a slight increase of memory usage, because new reference structure is larger, but the difference is not significant. Signed-off-by: Ilya Maximets Acked-by: Dumitru Ceara Reported-at: https://bugzilla.redhat.com/2005958 Signed-off-by: Ilya Maximets - Merging upstream branch-2.16 [RH git: f5366890c5] Commit list: c221c8e613 datapath-windows:Reset PseudoChecksum value only for TX direction offload case- Merging upstream branch-2.16 [RH git: 4682b76694] Commit list: b79f0369f2 ci: Make linux-prepare trust system installs.- Merging upstream branch-2.16 [RH git: cce913794e] Commit list: 2a4c87f300 Prepare for 2.16.2. aaa1439b8e Set release date for 2.16.1.- Merging upstream branch-2.16 [RH git: 29f01c4fdb] Commit list: 108176ab5a github: Stick to python 3.9.- Merging upstream branch-2.16 [RH git: 2546fa9646] Commit list: 5c5e34603b datapath-windows: add layers when adding the deferred actions- Merging upstream branch-2.16 [RH git: d572c95f69] Commit list: 458a4f75f3 ofproto-dpif-xlate: Fix zone set from non-frozen-metadata fields.- Merging upstream branch-2.16 [RH git: 557ca689f7] Commit list: 6d8190584a dpif-netdev: Fix use-after-free on PACKET_OUT of IP fragments. 44a66cc1d0 tunnel-push-pop.at: Mask source port in tunnel header.- Merging upstream branch-2.16 [RH git: a6c4770398] Commit list: 27a5848a33 ovs-ctl: Add missing description for --ovs-vswitchd-options and --ovsdb-server-options to usage(). 0300d0c0c2 dpdk-stub: Change the ERR log to DBG. cdd6dd821d dpif-netlink: Fix feature negotiation for older kernels. c2682c42cb dpif-netdev: Fix pmd thread comments to include SMC. 9377f4a465 python: idl: Avoid sending transactions when the DB is not synced up.- Merging upstream branch-2.16 [RH git: c1145b5236] Commit list: 0fd17fbb09 ipf: release unhandled packets from the batch- Merging upstream branch-2.16 [RH git: 5c05133179] Commit list: 3f692fba98 datapath-windows:adjust Offset when processing packet in POP_VLAN action- ovsdb-data: Deduplicate string atoms. [RH git: 24e7d1140e] (#2006839) commit 429b114c5aadee24ccfb16ad7d824f45cdcea75a Author: Ilya Maximets Date: Wed Sep 22 09:28:50 2021 +0200 ovsdb-server spends a lot of time cloning atoms for various reasons, e.g. to create a diff of two rows or to clone a row to the transaction. All atoms, except for strings, contains a simple value that could be copied in efficient way, but duplicating strings every time has a significant performance impact. Introducing a new reference-counted structure 'ovsdb_atom_string' that allows to not copy strings every time, but just increase a reference counter. This change allows to increase transaction throughput in benchmarks up to 2x for standalone databases and 3x for clustered databases, i.e. number of transactions that ovsdb-server can handle per second. It also noticeably reduces memory consumption of ovsdb-server. Next step will be to consolidate this structure with json strings, so we will not need to duplicate strings while converting database objects to json and back. Signed-off-by: Ilya Maximets Acked-by: Dumitru Ceara Acked-by: Mark D. Gray Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2006839 Signed-off-by: Dumitru Ceara - ovsdb-data: Add function to apply diff in-place. [RH git: df0e4bda98] (#2006851) commit 32b51326ef9c307b4acd0bacafb0218dd1372f3d Author: Ilya Maximets Date: Thu Sep 23 01:47:24 2021 +0200 ovsdb_datum_apply_diff() is heavily used in ovsdb transactions, but it's linear in terms of number of comparisons. And it also clones all the atoms along the way. In most cases size of a diff is much smaller than the size of the original datum, this allows to perform the same operation in-place with only O(diff->n * log2(old->n)) comparisons and O(old->n + diff->n) memory copies with memcpy. Using this function while applying diffs read from the storage gives a significant performance boost and allows to execute much more transactions per second. Signed-off-by: Ilya Maximets Acked-by: Mark D. Gray Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2006851 Signed-off-by: Dumitru Ceara - ovsdb-data: Optimize subtraction of sets. [RH git: 5bace82405] (#2005483) commit bb12b63176389e516ddfefce20dfa165f24430fb Author: Ilya Maximets Date: Thu Sep 23 01:47:23 2021 +0200 Current algorithm for ovsdb_datum_subtract looks like this: for-each atom in a: if atom in b: swap(atom, ) destroy(atom) quicksort(a) Complexity: Na * log2(Nb) + (Na - Nb) * log2(Na - Nb) Search Comparisons for quicksort It's not optimal, especially because Nb << Na in a vast majority of cases. Reversing the search phase to look up atoms from 'b' in 'a', and closing gaps from deleted elements in 'a' by plain memory copy to avoid quicksort. Resulted complexity: Nb * log2(Na) + (Na - Nb) Search Memory copies Subtraction is heavily used while executing database transactions. For example, to remove one port from a logical switch in OVN. Complexity of such operation if original logical switch had 100 ports goes down from 100 * log2(1) = 100 comparisons for search and 99 * log2(99) = 656 comparisons for quicksort ------------------------------ 756 comparisons in total to only 1 * log2(100) = 7 comparisons for search + memory copy of 99 * sizeof (union ovsdb_atom) bytes. We could use memmove to close the gaps after removing atoms, but it will lead to 2 memory copies inside the call, while we can perform only one to the temporary 'result' and swap pointers. Performance in cases, where sizes of 'a' and 'b' are comparable, should not change. Cases with Nb >> Na should not happen in practice. All in all, this change allows ovsdb-server to perform several times more transactions, that removes elements from sets, per second. Signed-off-by: Ilya Maximets Acked-by: Han Zhou Acked-by: Mark D. Gray Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2005483 Signed-off-by: Dumitru Ceara - ovsdb-data: Optimize union of sets. [RH git: e2a4c7d794] (#2005483) commit 51946d22274cd591dc061358fb507056fbd91420 Author: Ilya Maximets Date: Thu Sep 23 01:47:22 2021 +0200 Current algorithm of ovsdb_datum_union looks like this: for-each atom in b: if not bin_search(a, atom): push(a, clone(atom)) quicksort(a) So, the complexity looks like this: Nb * log2(Na) + Nb + (Na + Nb) * log2(Na + Nb) Comparisons clones Comparisons for quicksort for search ovsdb_datum_union() is heavily used in database transactions while new element is added to a set. For example, if new logical switch port is added to a logical switch in OVN. This is a very common use case where CMS adds one new port to an existing switch that already has, let's say, 100 ports. For this case ovsdb-server will have to perform: 1 * log2(100) + 1 clone + 101 * log2(101) Comparisons Comparisons for for search quicksort. ~7 1 ~707 Roughly 714 comparisons of atoms and 1 clone. Since binary search can give us position, where new atom should go (it's the 'low' index after the search completion) for free, the logic can be re-worked like this: copied = 0 for-each atom in b: desired_position = bin_search(a, atom) push(result, a[ copied : desired_position - 1 ]) copied = desired_position push(result, clone(atom)) push(result, a[ copied : Na ]) swap(a, result) Complexity of this schema: Nb * log2(Na) + Nb + Na Comparisons clones memory copy on push for search 'swap' is just a swap of a few pointers. 'push' is not a 'clone', but a simple memory copy of 'union ovsdb_atom'. In general, this schema substitutes complexity of a quicksort with complexity of a memory copy of Na atom structures, where we're not even copying strings that these atoms are pointing to. Complexity in the example above goes down from 714 comparisons to 7 comparisons and memcpy of 100 * sizeof (union ovsdb_atom) bytes. General complexity of a memory copy should always be lower than complexity of a quicksort, especially because these copies usually performed in bulk, so this new schema should work faster for any input. All in all, this change allows to execute several times more transactions per second for transactions that adds new entries to sets. Alternatively, union can be implemented as a linear merge of two sorted arrays, but this will result in O(Na) comparisons, which is more than Nb * log2(Na) in common case, since Na is usually far bigger than Nb. Linear merge will also mean per-atom memory copies instead of copying in bulk. 'replace' functionality of ovsdb_datum_union() had no users, so it just removed. But it can easily be added back if needed in the future. Signed-off-by: Ilya Maximets Acked-by: Han Zhou Acked-by: Mark D. Gray Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2005483 Signed-off-by: Dumitru Ceara - ovsdb: transaction: Use diffs for strong reference counting. [RH git: 85da133eaa] (#2003203) commit b2712d026eae2d9a5150c2805310eaf506e1f162 Author: Ilya Maximets Date: Tue Sep 14 00:19:57 2021 +0200 Currently, even if one reference added to the set of strong references or removed from it, ovsdb-server will walk through the whole set and re-count references to other rows. These referenced rows will also be added to the transaction in order to re-count their references. For example, every time Logical Switch Port added to a Logical Switch, OVN Northbound database server will walk through all ports of this Logical Switch, clone their rows, and re-count references. This is not very efficient. Instead, it can only increase reference counters for added references and reduce for removed ones. In many cases this will be only one row affected in the Logical_Switch_Port table. Introducing new function that generates a diff of two datum objects, but stores added and removed atoms separately, so they can be used to increase or decrease row reference counters accordingly. This change allows to perform several times more transactions that adds or removes strong references to/from sets per second, because ovsdb-server no longer clones and re-counts rows that are irrelevant to current transaction. Acked-by: Dumitru Ceara Signed-off-by: Ilya Maximets Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2003203 Signed-off-by: Dumitru Ceara - Merging upstream branch-2.16 [RH git: 2114714012] Commit list: 547371ecdb cirrus: Reduce memory requirements for FreeBSD VMs.- redhat: use hugetlbfs group for /var/log/openvswitch when dpdk is enabled [RH git: 4e5928b671] (#2004543) Resolves: #2004543- Merging upstream branch-2.16 [RH git: 7332b410fc] Commit list: facaf5bc71 netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock(). 6e203d4873 pcap-file: Fix memory leak in ovs_pcap_open(). f50da0b267 odp-util: Fix a null pointer dereference in odp_flow_format(). 7da752e43f odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__(). bc22b01459 netdev-dpdk: Fix RSS configuration for virtio. 81706c5d43 ipf: Fix only nat the first fragment in the reass process.- Merging upstream branch-2.16 [RH git: e71f31dfd6] Commit list: 242c280f0e dpif-netdev: Fix crash when PACKET_OUT is metered.- ovsdb: monitor: Store serialized json in a json cache. [RH git: bc20330c85] (#1996152) commit 43e66fc27659af2a5c976bdd27fe747b442b5554 Author: Ilya Maximets Date: Tue Aug 24 21:00:39 2021 +0200 Same json from a json cache is typically sent to all the clients, e.g., in case of OVN deployment with ovn-monitor-all=true. There could be hundreds or thousands connected clients and ovsdb will serialize the same json object for each of them before sending. Serializing it once before storing into json cache to speed up processing. This change allows to save a lot of CPU cycles and a bit of memory since we need to store in memory only a string and not the full json object. Testing with ovn-heater on 120 nodes using density-heavy scenario shows reduction of the total CPU time used by Southbound DB processes from 256 minutes to 147. Duration of unreasonably long poll intervals also reduced dramatically from 7 to 2 seconds: Count Min Max Median Mean 95 percentile ------------------------------------------------------------- Before 1934 1012 7480 4302.5 4875.3 7034.3 After 1909 1004 2730 1453.0 1532.5 2053.6 Acked-by: Dumitru Ceara Acked-by: Han Zhou Signed-off-by: Ilya Maximets Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1996152 Signed-off-by: Ilya Maximets - raft: Don't keep full json objects in memory if no longer needed. [RH git: 4606423e8b] (#1990058) commit 0de882954032aa37dc943bafd72c33324aa0c95a Author: Ilya Maximets Date: Tue Aug 24 21:00:38 2021 +0200 raft: Don't keep full json objects in memory if no longer needed. Raft log entries (and raft database snapshot) contains json objects of the data. Follower receives append requests with data that gets parsed and added to the raft log. Leader receives execution requests, parses data out of them and adds to the log. In both cases, later ovsdb-server reads the log with ovsdb_storage_read(), constructs transaction and updates the database. On followers these json objects in common case are never used again. Leader may use them to send append requests or snapshot installation requests to followers. However, all these operations (except for ovsdb_storage_read()) are just serializing the json in order to send it over the network. Json objects are significantly larger than their serialized string representation. For example, the snapshot of the database from one of the ovn-heater scale tests takes 270 MB as a string, but 1.6 GB as a json object from the total 3.8 GB consumed by ovsdb-server process. ovsdb_storage_read() for a given raft entry happens only once in a lifetime, so after this call, we can serialize the json object, store the string representation and free the actual json object that ovsdb will never need again. This can save a lot of memory and can also save serialization time, because each raft entry for append requests and snapshot installation requests serialized only once instead of doing that every time such request needs to be sent. JSON_SERIALIZED_OBJECT can be used in order to seamlessly integrate pre-serialized data into raft_header and similar json objects. One major special case is creation of a database snapshot. Snapshot installation request received over the network will be parsed and read by ovsdb-server just like any other raft log entry. However, snapshots created locally with raft_store_snapshot() will never be read back, because they reflect the current state of the database, hence already applied. For this case we can free the json object right after writing snapshot on disk. Tests performed with ovn-heater on 60 node density-light scenario, where on-disk database goes up to 97 MB, shows average memory consumption of ovsdb-server Southbound DB processes decreased by 58% (from 602 MB to 256 MB per process) and peak memory consumption decreased by 40% (from 1288 MB to 771 MB). Test with 120 nodes on density-heavy scenario with 270 MB on-disk database shows 1.5 GB memory consumption decrease as expected. Also, total CPU time consumed by the Southbound DB process reduced from 296 to 256 minutes. Number of unreasonably long poll intervals reduced from 2896 down to 1934. Deserialization is also implemented just in case. I didn't see this function being invoked in practice. Acked-by: Dumitru Ceara Acked-by: Han Zhou Signed-off-by: Ilya Maximets Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1990058 Signed-off-by: Ilya Maximets - json: Add support for partially serialized json objects. [RH git: 885e5ce1b5] (#1990058) commit b0bca6f27aae845c3ca8b48d66a7dbd3d978162a Author: Ilya Maximets Date: Tue Aug 24 21:00:37 2021 +0200 json: Add support for partially serialized json objects. Introducing a new json type JSON_SERIALIZED_OBJECT. It's not an actual type that can be seen in a json message on a wire, but internal type that is intended to hold a serialized version of some other json object. For this reason it's defined after the JSON_N_TYPES to not confuse parsers and other parts of the code that relies on compliance with RFC 4627. With this JSON type internal users may construct large JSON objects, parts of which are already serialized. This way, while serializing the larger object, data from JSON_SERIALIZED_OBJECT can be added directly to the result, without additional processing. This will be used by next commits to add pre-serialized JSON data to the raft_header structure, that can be converted to a JSON before writing the file transaction on disk or sending to other servers. Same technique can also be used to pre-serialize json_cache for ovsdb monitors, this should allow to not perform serialization for every client and will save some more memory. Since serialized JSON is just a string, reusing the 'json->string' pointer for it. Acked-by: Dumitru Ceara Acked-by: Han Zhou Signed-off-by: Ilya Maximets Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1990058 Signed-off-by: Ilya Maximets - json: Optimize string serialization. [RH git: bb1654da63] (#1990069) commit 748010ff304b7cd2c43f4eb98a554433f0df07f9 Author: Ilya Maximets Date: Tue Aug 24 23:07:22 2021 +0200 json: Optimize string serialization. Current string serialization code puts all characters one by one. This is slow because dynamic string needs to perform length checks on every ds_put_char() and it's also doesn't allow compiler to use better memory copy operations, i.e. doesn't allow copying few bytes at once. Special symbols are rare in a typical database. Quotes are frequent, but not too frequent. In databases created by ovn-kubernetes, for example, usually there are at least 10 to 50 chars between quotes. So, it's better to count characters that doesn't require escaping and use fast data copy for the whole sequential block. Testing with a synthetic benchmark (included) on my laptop shows following performance improvement: Size Q S Before After Diff ----------------------------------------------------- 100000 0 0 : 0.227 ms 0.142 ms -37.4 % 100000 2 1 : 0.277 ms 0.186 ms -32.8 % 100000 10 1 : 0.361 ms 0.309 ms -14.4 % 10000000 0 0 : 22.720 ms 12.160 ms -46.4 % 10000000 2 1 : 27.470 ms 19.300 ms -29.7 % 10000000 10 1 : 37.950 ms 31.250 ms -17.6 % 100000000 0 0 : 239.600 ms 126.700 ms -47.1 % 100000000 2 1 : 292.400 ms 188.600 ms -35.4 % 100000000 10 1 : 387.700 ms 321.200 ms -17.1 % Here Q - probability (%) for a character to be a '\"' and S - probability (%) to be a special character ( < 32). Testing with a closer to real world scenario shows overall decrease of the time needed for database compaction by ~5-10 %. And this change also decreases CPU consumption in general, because string serialization is used in many different places including ovsdb monitors and raft. Signed-off-by: Ilya Maximets Acked-by: Numan Siddique Acked-by: Dumitru Ceara Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1990069 Signed-off-by: Ilya Maximets - Merging upstream branch-2.16 [RH git: 7d7567e339] Commit list: 0991ea8d19 Prepare for 2.16.1.- redhat: First 2.16.0 release. [RH git: 0a1c4276cc]  !"#$%&'()*+,-./0123456789:;<?BGJMNOPQ2.16.0-92.el8s2.16.0-92.el8s2.16.52.16.52.16.52.16.5intel-ext.hnetronome-ext.hnicira-ext.hopenflow-1.0.hopenflow-1.1.hopenflow-1.2.hopenflow-1.3.hopenflow-1.4.hopenflow-1.5.hopenflow-common.hopenflow.hcompiler.hdynamic-string.hflow.hgeneve.hhmap.hjson.hlist.hmatch.hmeta-flow.hnamemap.hnetdev.hnsh.hofp-actions.hofp-bundle.hofp-connection.hofp-ed-props.hofp-errors.hofp-flow.hofp-group.hofp-ipfix.hofp-match.hofp-meter.hofp-monitor.hofp-msgs.hofp-packet.hofp-parse.hofp-port.hofp-print.hofp-prop.hofp-protocol.hofp-queue.hofp-switch.hofp-table.hofp-util.hofpbuf.hpackets.hpoll-loop.hrconn.hshash.hthread.htoken-bucket.htun-metadata.htype-props.htypes.hutil.huuid.hvconn.hversion.hvlog.hlibofproto.solibopenvswitch.solibovsdb.solibsflow.solibvtep.solibofproto.pclibopenvswitch.pclibovsdb.pclibsflow.pc/usr/include/openflow//usr/include/openvswitch//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnuC source, ASCII textpkgconfig file RRRRRPRPRPRPRutf-8098d25b378ded0674c951b78b8a0207839f8d08a7afcb40dacbcb4c58889f5e7?@7zXZ !#,q] b2u Q{LT2p cޡ1{L\A ~,Oq"F1xW"81L Z̵ o=ʧm )/=,1OS%&T+MkO_!732:3&-uC84,/᮫Pweʪ#XBo~G{"UHWI ^M pjsj*Pm8s4qʶF '?'eb0_ue2u06b"Ou^krk_5xi< [b2c %}Cfy>2IS <]/>v<8v|li+;,"RݞK{̱UhI0u_'n/5rl.wm-*gc2N!1񃉯ZyY <^-W`Q֦uu! +0n {Iwrsk]  TOna-*} N:;*AB뜱fHZɘ S!t4u@%a0 o|%1\QoPVTg$w_fn$m 78[3i+UY9$z*Z{k8 w\V(S+QJAo^cOTyv_x=W<^렢m78r8FYA)vr3ɨlL$SesVAwĘ8m/_Vys}FZ[,6쿘 ߮^矓kW`>LJ@m,^1sy9nG1>ʶFT'"⠻ᆏ*ڄ<}H& toZx0&w幉[Wz0wFl!.7<`k60hĮGuruO>F 㒚PC*8x-H+O11!T\aJVU>].>e7WPnib,#i;%O: 1J/j5- LNsSjϛ-5 ,+j XEvO[dlUUG"J36x%v*}eAi}gfD% f</̮MD~)MWMa@";Gvw/AC js ^v_KgiD6В/u1'"$=\.|Z 6Q\GjR۟1K{ 3d:,ֵΌNuFՠ|m??*."_rr'tWϏFЍ#R.S]ܲ[{I=VY[ʒR. [ L m.Pf}l}pvC ׀ qWK;;2>?FXznUS@}a;#‰67 VSjF+*ʷ6 bdk=&e"V䭈;=/k&,;Ĕ_uT DzY[流$~o:hs3Hna*T'Ŕ{ 8#H&LƏت-\g+]IX;.ąz"МaIɁ+arLS;ŚPIX7A$Ի) c?4̃t%S͙.o3eOH7*⨢f}T<E%9G?{y.`ԥ:^^vWn3Amp^ޓڐ-J]\x֜eOn"g%>wʢ9t{պ.T9Aq2kiLuؖتl9lnV<E Hbf}$=T]<ĺAsƢ{k^/&Ҏ%ɭ0V-/`sd&{G?R_,&&Xgmls[k1Yc Ns, ]6? تVHRa?9i!$piا#뎰aݯ׶bA}1GSvaO⭑U”M а '6-y:-ckbFTA'|S\D s'uR@4[$.N~I)1_ n_GqAFhU$;ٚ6)D$61:%VSBbϷwIoB ^+`R|}l(H\{w %&zsA89Xڞhe]h6]+̘PX,aw&Uń7!ڑ1$~slS35N{H 7B>HPOdc·N7/ #}wQoڹ 7,ǑXǔ\peEa z0klJl~ւtBGliJl!$f_v{ စ^s i I6XL/sM$j#L@Sj/43Ij"3wҝ+rxt0HE \18Al19#N(۱=HTF]93l](*]h Pʲ%AN 9P *zaeZeU,!?|sI5@lȳDw*`Y/fJyN΅FAD?ZmkAP/40͗hO)㧒锹`/Ɂqeg ew\ۼZ'[ZZmsَ}sÞ$GkH SlImUHb#ZN^`A%Tc.Ve/,-^iݽ'U su iKV$ 0$bo3,DAVメc93UԲD~Qr##zFm+V䢫(}[HVGry_ 4msa޸%+0CSq"k1bf꫒֪WFOKUJL0> ӵg=ET ) gyӠÚR2Gp4~fxt,Gԁux =p QFi@qn:6>w7|AəP07'g!c֜$m/2I`H TjTmX+#N f4$_ĄoKKakg ஭$ Yn,=I9"28CR? *f`^H]K O/;5Oq(]k7-!x`$"` kR"Ŏ's;tšR\raq0˃C! =^o mk5دjҳSg#l5'nԌ,F[H &UPβ &| aSh"X͉q2"]'7%!wGrvbȍ)=pk]x]!ЅW1Y`N2+MhT4?j,ГBu;>tC"_2N6zO=Y[D{$ o(Lz?eIԅK)w,6G%a#˳@01δ.AA7ϛŭDZdJ܎+ͭ $qdGVnW]}VJJBnn:zyfS=L`7TMXl Lby  <6`4'wϝNС$o2˝VA:{ܧZȠ(,4tL$OgyؗɇFVTV3AVV*a- ;EFp`#duP' u:u3BV5i4p^pT@#6duQ/ *H]!4c.u/1ZV U;qxjo^.)#sWHyja_ɘw"]H2/rr;\u"EF>/oEX~:1(㞹?8wh[IzOB #i٦yH?3+8>P,c-D9ZXu<5auurQy«23_`fW?UκyOl@76R3*&xCK..Gێ71Lp͡r7Nly/' t|Rw`U%=Z><I;rasLd5iq?;dDǨq & XLyށ-:1It܄3"7ͯLwn!N.`"x!` Zn->ˤ\ꕮV&0O:>1Adn8c7IXG^}NqHosAt4 ߨ㒴킕9VMZuPGڭCfQ}P (QXBBRbLS2O֞DNL\q@fdܼD})nTf},0jBKƖOUNX  ?2MQhEl_'<@w9 Ih3MXkPJTSJBTuhpwTO YurpMmIcU8=1?9xYq(I ?K nz 4]ɹD zKX0!5W4> 8u9g(߳ 7y?zꇏt^62*u[OaQQ~6D1 Ht#KϚz Qtipj9Uݡ! +9ݣ>hQHFV 3dU]p_x1Je 6PNR,\`=m`1-/;> Z0}Cv ݔS3 T sZn{;dNzH=e dpȁ1g8OUf_Dt'NV#8Vb5uFWW(l^q s)F/7גsÞJj-y : Gk,6Fh94 X12}ݡ1Xo \]SOvj> cAkdc=G?ǜI* eѣeg;P>[Do}iQcTM ~S[{ͼkk@2*o[4L2˲Ri"I\Cߩ/Ņ746wn_肫SLO'zu?h﬏n"O\yje > =̭}|3\`}nc}; IaXLᮀWS_ǚ#۹xĥ$c^L@݂>Q١tnw6K)ٟDԓ V wj0qС]Y^7ZpAWIWA{L櫥T n놇|wc~`Qw-f );گhkdie:c"Xu^Y;Sp^tْ QEyӒE2=?;nGO} ً!ٺ`$3AL~nJR*ЖA0yz koCt>&v2rP{h\J4VK HhaiLjtrOT;][45 l:1wrl,m(#t˱^mqI&2Z@~kIr ֚Q# ߁zŻnto*xZ6ҞI ]ʶ :n]MA P ^d~ < @YX+jE4lun2_|0d Jw;sp1ʿ^gWF"~5DS u(fQbUULP8-*t4| Mʅ+3=GxKX尩!Dyu q)@ټb]ya2'YiJϠ45g5Q:4O;b5H_.[/Z:^_R.^!lGz:-ze/y&ic %`'ӧE۰gSUY tVV T>0jN/@` ѠXГY^ĐqtYci`cE܏SM/@優 -vk$Sd"&Yn0x߯)r 'lޣxRg e ~5!M϶iX `S[ Qˮv,2#?QgKdޠ_b + ď^4TOEL= g_Ƹp9 }~c TqfX} Y{#}LE۞DH7߀7z(-gH}9\F~Rۣo@nj%NdZST틩3:wt7F(_Ӈ;-dc+lZ&֗RDLGӡ)NnvL+q&- u:[z16ָ9~B0Nm(cg)\vOZX`~OwHH{xˬ Rlˊ%n"zj,-~6]zXLoayVa=8<~xmgw P/.?u]af$i T!ID+H Ɇk4Mexj(DUet]-PVJ vM:!/1!I:bc\C7Ɏn}gdcRiIx^Jx9}8\& asSp+;Ǿz RTT˓M)P0g܁ahu.(x yX ]8h}~Ld%5 t5#GW n%w_./::N4(mBK.?~܆64= 6Nq߰rR?ܞbc `ɌV5EGO\5f;E^4iY뾥Z@ϻ+/0^Ă)0phJյ/Hk@'LIZT!IZN*)Fp|63#*mqǑh_E?'_}ƪ]%=b޺QiI8*i CkeI3w r,BF/e'몰+֍DJi8tk]Vޟ/wu*p,9zLu&Pbb9DY>)Au/\ZS @]{<Ш՗ͅ8QGՄnC.PvTZu8ش}~ мMy ns QPI*C8Q*AC,PѺ9%D>ѽK?~I/p vZ)QGQd@#zt?Q-RŚjYyf-[+p+rUlB]cʹp qVCea| ##75N=fĒaFopb] Έ؞0$O^v#Zqo,؎VGNғ1M?ym\4 Se]\Q2l:ڜUx9/BpRo@/@"LhT8[bděhPD \3,s ៾Оsn0<֬TjfX@"*07z~83,󥜫a/ sPf%~k B}QyF(@TUv| =_*$ZCpCh0iԂx<:0H6ԠR|zKȘݤo 4BE9xzKѲUzpdp!ҁҸllT:DASr-z/Oe{1׾1^Π56bcB#<F! NJ^穴Fk+4ӽd/l_aw+5HW'=+<}(k!t[_D cAfDjmUg!L>;A>ܒjHsir)Č{$Gzɶ蓦X6^i(%Z*vʫ'-]0-"cjOЈlk+1쁎WVi߬/tzڊri٘/k\Or)C"r?HJak`mY#Æ=S_(Ԅ#C2$ǧ: FgzSX'G&͍L/2cEEj7K^1@luSu`SCHHD>77tvF-͈dž͗Iy0&$Q1ߚo\3tS3vFݍ dFٻz"';ޟ3LKQz4VPDSJGϯVH; yO(X) *ycKĽ ]\ F44'J| I6!Zr>ߛiqPHeCբ*I& N0"j$^A` ] yFfbܛMp;`#6jqmG(1Q5֠IrBIh8oOMR1|_ǎ =͒B:g\31xu@^ڸY Xs~]eh&kVGY9_Ovy;܈m.٤YL՗I{myIx)$(k|3nc'boyh0uJNh|=]A+ @htl#%dh}JQb9Zn~oЭrZX58Qę*[=}Օ"֯8ݷD,z%)Qo &m|(%K~ [Xc~iRz(oA႒0lk2|Iˉ:]?-+x6ȭ,8ON>Q@]*Od OfNM\9cU_#9 L锌6>}[hhTCT=CaűwPݝz^emT;$@ Mb:^ibzzLU)(:{{r)ܲ2ҏ~ZeUL뚍@1M(T9SY r|vD u /qD%jZRVF/vr'4^Z<[/y=a#MF<ͥ%[i'@ 2,Na_rH7~dr7 sA57!K0Yx[q!PKaW~hB"k FBEhuQg!ve,99)ZUfګ۔/퇃a͐]/Q%3ffZgGz}4+d럾Px"o1cB]4xN,Crt0KGD) [5 25^S57Z'_`#F Ы ddaFЕ; \qSuI]E5+:àIBr"]UJLδfH`wyhe\KI{\-a>eK8!- Z<|aa+l 6 6Qfk҃<~bvgWAG{%FX0^ׂAlcELJ)PЃ;k) i+4'AfMK }5z'I{;1}&3b3Cf+@`ⶐ .}gfGW7GqgёRZ6YG l`6R:U"r 63fǥA8eӒ=F7F:v?.Ob#l P0 */;XW$iB`;ڴ+9Y2=pi1D'nfv.-Pxpv+k@BHj`Ho ٵ9:-8t'!ɸ M%e(f]DKt!(}lB ĎJf=Lb1gy߰+sOħHLІS_ /\MhT]=xݽđ 7%\!&3b0'^sj$--Md}> izdl tX%+kv=͞0?`2uK58?^c^2<,fUP 9令rIZ^V GrjfXfa;U >hs?;̹SxwKKwH G&FiI}Zit6jE9"|q`)/}P," fMoG=ZDxorT~zjS+R7h!VVɬF|ROvW:vH*R\jm9ѫOz4 e@K uP!Ѣ:-^25v&,tHK=^vjWR?bFv>}hp>ڶ ɚtK%` %\Mx)<)kD3'5vLC//Fm@ iV'')͵7-itWV aL&INDEX+ PoF {bg se![p'<:XA?cPP +\cU8diOl~&-(FZGȅ@캩RէU|=рCI /6]#o|5C>,FfWdN/ n3 W쪝dJu$fq*-]5uss ze/.,89hCmxEge S%"TG:o 1oQKf>=TSr.k5M(QEP㡜7(j·u׌%Mj2w5uyLj&m>|m%Z.1H&xuiLIGEP`&[ wYQ _/j&qi hE?ec@EQ瘹Kf+_CɟۯL'j8o8y^y5߀亖]4,V[jXNњjUite=+\ F9a}U Ii\"Zi=\CK lڳBǜCƫ҇y*{UM婵:GX%Ժ;UD"cjlBuQW9*ks7CA~QBj 3\Ժ6R;G*XpG~а~ ?ڒORs|BP *,궞D<.%[;pb߄NVn[nԆN!I~JŌ6bI\K>@|" ?D](XΞ4]`1q@i+vzQ!pwm]97,ۢ,L-x<(mt nvA(%1m,C%5J0(qDߤPq=j#cD$f zzݘEf (C5r L//cGBiú!RC_[=eϳ@QFj!OvPFZZ;W]q# t`k)ֳi9I/Nw>Y^rzIT υ%$^&ko/p ϒ2gyN_҆Em2&626f5yF*sx5q ٖ &FdLk\AQb2'(]% &s[U}8HWL33Y OiC2S0*ko6= !?.#b90؟We@NIf50OAC`=W]6CKg$6DRc;!ZtO,6rJ=epr89'43u5c.gyI~-~qJŕf(ף $rnU*jCA+\؎uQn*5kW*dKT( ^m|N-ژ=9PtU3#.74mu{r2v+N6x<%/뜆_eBB4+ kPD9DQE)#鍱/b.Bna h߶0lc}) U!de@7Z0A.Ji̦kG.D 5WV Sc|}90y]T=LsͲYX1.: 0Kժ*8)7ֿ yFWU͌$8Y%jݢdlmB!% XZVly2ZO ]p<0Mu2>ҚT:IИǪ]m+b fs[.eF)u/s#sJg?wC)]9%]!rl:fنqq(71Q =^taw3i@1tjrv^^郦+a\-ܨ@b[o-$*whd[-(sIg!;АG%0APhhs:;+V'C1ZوB3\EVׂOOM$)P7϶įVj*҉y=4ֳmw#aח/b}-2C]͚1z*jxC%?8,I9xxfq_*-; 5 }&N|q_| l֞XMSe3 fbdVOcm#0tH݀7&a|}ݵZR;1gK?`(ab:!G]bZ gGA0ҝכYXD$ز$_,x7ޅ,n+VKEIސ>+QPہ R }x=le@bAkW9E1)f$4>+_|9W1lJ$韣+6 qYz*T-fo~y-P*M3-QK|jsX5becV)2x~ X,CHD4Qg9\u84*սۅHY~䪽(OhSg`m)88LkX]SHq^34۸EVYс5Q:y4-N rrxQ@{F4U >8_4 0S4ȫh+ҾU.,V$Ơ23Kr/H ?7f:D\yJZ5oC8cZfc[; j,3T1w"r}sSa4M!mw<='="DװPaT&DL5[4,訶e: \vLfQ~ qZJ/({.5z3uFgYla B(n&HbCU9,(+52t +IL]1D>A UuCi/ʩTgZGtiAr=ͻ2_d1Y-AdP{!Yl7I遖vg2c3`/ ˘1z'PE']]^/D]1/(6=ٴt=4MY;[-faHo}am_BZ3'+/_#t+H [e%7qͼ:`f(hBm'hV+B{W.rU_ОN Bu(Q_:(Έ q1v5&?5Մ4D\]s\,0  Y$qT#nҞ+cՐ4@/Ip\App^{ǣy~ the)\_q"dQ%^Ee*2 e*Cg3 ) -Z~Fo"-Lwɲ1S 7ֱ]T`"TgP ¥3aftzm󀛟ăj, 4mtoe0 SC$#&P +Sed vBDJWJxvǼ%`J/ - kT;I.$1d}o)lͦOyاMsݑxcRJ0q=ܦd cg"w\ ۢf#Cd4Y,3t\Z>(H|h6)]ЎrZ32#9'yx6UæԚ:0#ShՒXZ؁+n;ݔk6uK?N.fk2չ͞wbB7`U D|)e ;Geca!6y{T/wh VHJ*@:Ɣ=TըC8TPA.;#:ubr?uX8䍠P{|gГU BS>e'U=YΠCNv1 [WʢA DKo3!.ams*=DH oyq] bHUB+O+Wt,f4R RXcae hP;̘7@?$sb3\rB T0Pe]op[3U{wVr@~kpcY>F|'lٚK ,YC Jξ -@9)cJ&U V/K OxA5`;sv:g qt?๹QTq{(p(ix$C{Z*8iDJ:1@ٔV"z-V'0">6&CD[IX" dg+_ `Gq Rzhyt3K|F&gjKw @Uq3dVx?E>eBz+Z9ucO~Kd'M.[t*dJH4.m;QCdA_.dY+ D^R^JfZ@EEGS0y4F21ov[Sp~|Co+GGF\oߪ X( 20pO#@mB&dm:s$>HỐw՟9uEQ&fUt!˥1>/A4r $<7J;ҾeFhAcTx3m)^ɲrkb}Ql T&9Df(@}t1X4R6ss\V7L[<%;!\)?q;* >%HV FG4hJuSœ`"WZtvunK ]nE%byP>\Ga#a O0*F' XJ!ü"Pʺ+.I(emHԵk |8j$Kڵi-@5Orb Va{,My.},l (}Eɔ; 'pL~.XBZ=}cR՟ 'ZK_B2<@A7FhgXCƝ0~/4w&كI.kgQs7I&q8dr>r@/b&h+|121}KSTiե0>gXд\ 9ly}b8iF%w.Wm@Y.H8{(UjlE ee;rySkg_Pn皇v/qܐ?ִZ|BBy &ZcRqlCu;o}vΗQQxYKs@W!-˟&xs#CwVH0}1r=HE*^oW# -D8 Tosjn7U {/2IqQEt?*Wb%l`Qrab7}G㏎{R!ʦݤ>goݎo&U\P,v0ϓd2&EҕY+"]q4Lظ;3Dzz2E)jnCثYuGKiX[9-i.U.xC=x^ퟹb(@&&bb%JP*'(gw͆~/TP5^Lt QO`s@r/u4)_Mf.z/Na1vU}.]J*.&X_ +/{IyԓVh@1ÜlZ'QUO1,$in!t2_=)a]wlƢ3T#DŰ%g#PBV RlBy{)'X{ОJMPRr,6Ynم%yI2W=v]:kp-٫f b|šp}\z`k3jV?,, Zi웊*;,P5@WbI9l!~8LǢM,MyKŚq9x3.KKOTFP)hՁ~!muy]+X4wYZ (ooo,>Qmk8!(ԗSӌF%YgӋ26:2MEl`$7>aЇ"/ $pdhuTDg%mKl(.l8 H' KcR'VANINoYjVY}^Pt@?PfNYHѠfmB ,+7-$`-Fez')I@! S3'd/a/HaXqeyTp`8t\`O}X>@!bbAb~«1wzh׷D2 Ϗ+ycd0aSQaoZ/T% ! M@\P2*qpP؜ӦVh%0/.t' c>WWaDWW9o7KL> -L[zϵV: č~Nj7j[@0Y>qyW`/$}[KRVzk #?NW,E%Y{+UZaqG0A)Y' <wFH/ 8I'Q eq.LsboYP F+F #uorӏkMCk0) ( yІ퍊1iľuov k`SMf޹ ݠz /KhEwLƜZ1ˌ#ĩ߈ ^I%G؋ٝP)e8k~O3t)N+"j<V9Ghߛ ZN#2N9r'fuђLkac΄%1g y -2ֱU 2԰6ƺJɷ$/AgPboR}wXDiv r &@of{/7CE:lIk?P/] ߤ} !ݵ ˺~Ic^l#=eGGgQ\9+ݵoG&RcYSJHJ\p8 7?X$[m 2)Q}: E{#$yU5D~$=%ب=gǜU MYL(8jm-xߜ9S0jT"bRz3ZU3Z4D3$$I]iđ-Y*%C&&Wp8Ӈʣ R)&MOH/`lhLBgW,A?6#pFF Es[.8A FAb_b M 2?/ȕQ*5G^uPXM|oQ.jD_2nslKpq=ɈiPz@tC ϭYH$00]7Jǰ{_1ZV˽E;7lO"+mN*WYf]ǁ׿`ekA U_!&DP]n3!yȾ FTq=f=Ռ:|o{ւ >QƇUepy0`biL=d&̓%XI "SzH#g&`ݫ.mRB u[+]Z7WOߖH܃],x3qYXì(.%`A*x8m'DWx-!GK'ca|rf}(} :a``T,TC :ytyfբMy0HN/Ego /Hus(WV񋪠t2 M3jM,.]aX+"/oM-h`ifXJiF"p <_Fs~#Kg^6&sh ] ` .5,7;LD/7M ؈HUC0[[ޒ~6m4U_hh<` aZS*s]?B/+)do/_ 4ޟQuds!(<82N%Sݸp!Ъ<&;GzPP7`ͲYM6M;,yÓN_DoTh):cNnp8kJ!WX.7,* `GhlnAQOU7ЭU5w֜v#,{~i< /hW/~zp)xԸCۖ2i֬.M펮HOE˜+a`4]V%KH3t+6|iJ:ẻnI!%FskU .7گP|Wa#3;bzݘdcEHD$bє7fѼb%F |{xtMywlW7ʛAXl%1KI%5Ys3G' OA3iJ.h5 ,%$Vc F<$ؿH*:tH$ԡ$GP{pyI;$L&(BMB}C}_C ԅ6 ~^,{\ VcӵV^㥓}D["@EL1w`[!?_\P–^|5?π~EE2OŕqI(UwC㟝BW*1iV {ҞO3.2/4J8j=HWoeU QEMNĬ2AN>b̹Vi/ unxoqa4*Pw&W`ukORo_Ӄamk0 A ̑V$R@)mH tI0>%nN n:q ܗW} h :hRܒ_~`E2Wb_i+n7w;rl1bc,=ԡ& Zy2ĀW[b+K(f9SML1nFZ{LDO{*K(UC 9snxxTgSi/ ڎOΜH VB,H㶒)Sy$Ŋ((X I9!|}TB߼{}sOm ύv&ߓhO-;x$̴65dSWJtE=wJ1]LݭmD/0{<+ۻy^йyմC[kO,:'q=,N?:y/%f\zbjŪpJ%gW!T߽-m+&Rȟ0c+E,6wVi kC}SM_#,bqɓj5s^gT4$p)4ALћb_9(+kCQAr[ P X@܁q$|ĵ$p$侖1W{󻔊~wVpQVOx41@۲W}{U`QmxӍ@ߛ\^OOOBn?7Um:[i˲i1zCK\l55 R1bAs1l=Э!ͷŶ J^{J]p UNEEu q+&D|v=N7n.A:AGha9x<R+:, @5 8Gm΢xk(^WRzҖdB vssx&Y th먼\5#ak" wTrZbȼ(ӸJpzgm؟x3=њʐB5'Hf6hy$s<1`'Y#[PpRZ"hJ5ih d]@WtKZ}^wˋF-ȗN>z(RCM6 'H /2s M ~I;A>u<]yd82=SѹJn"HwjZ 3|r1q/{<ކ2/UEqF/\б I:3Uyx:ݨF} zvjp 6!g]>4CK@_ +`"8ܢ>-(r@~%F׾}tj&i^9q(_"nfeIk?_{ˮIwl&}^ք`hƬ-vt˺obXY +?hUhM3DxP@68<1tC+4)0loCOO ":n˖Ͽjr%)O_XRՊ髫~;2Gʉz'aj1r//y;p:NOʨqzG+?H\R@!෶O-r=S|e#HNCɃ9+spIHk/DNҔ7)57T* @Q bR2i;%r/|P?zeyma+C21fvW|@CCg>OV==Z4v€P̲=j/c\Y. n+TG6[oC-KȨ3w; 6Ao.ӎAvmlH4GEN.xWZ1=iKU%R[Zlux/kFV"!/p N:4zE8';g@͉@͠#ȶ1tef5525I))W 6r[`XevLUY G.9=$$,tSoR_ESe~\\o]K7s8XRے0Bm"Nx$#ZX@QG$ݎ*ƂX`pX [M5`5azĆgLLǟ4OҜ $G*;k jD[zZI"L\E|s=†;Ļ-TrJN= NŖi;B )L|m;.sfŪ9NRm`7k ̖>VV+vqΥ8+2W(TÙ64|ڗDQ0q&{ZJ$1a܀,XMMu8Z,RTTyo85y:qBOkM%?K6Gpmɤ*lgx*WSsZ&j'ʫlT?v&P23E/~OUIAZ]dS)GVkwH^j}7E":n!LU;M6lm )ВelPPrWdgRB٬ ~%8n$  K!G#sUR2zy <M }yt{X,gRrVρ65Gx2Vڂjinajԯ\b z)1! nB0Ȓ='ݽ\cjY˖^@a&%΂F2z.[ԧ&|X;met9ǏuLW:O| 9*ZMAb|B:]iJĽ9؀pH)7W4Z곥OB/04ɷ9 בQԫ%!$_6T^SIu^ @BV^.q04 P!l @Inհ4+"e?gI-#0qL:dz<- dʜ\ k#B_0OH?p>/\J{|1@K:4~ 2~Ll,ӐP(m$H?֓Y"3F|v^PQd)!l1b/0,E`1 v.*!?gсFM^=.G-e>SrSAr%y#ys~vf?2E&·(3">\C VI wKA(G<ଓgm9Z R*ye㸆w+[HӔM*gie,&*縉lj}~j ͗{\1o6$J)28T")"*w`*s2R a#|ϸd!= FIf:P#iO.:Kc61`ZmɃ!ȡݖ ~yHuT)`8g,#unFiyºV3p= <"Ƶ5vDȐx4&n,lkf'g8i %2%6d͙MCE$"kRwA' y/ KK1$顣F$=jWs@r>VaBbhh̻spo_.TǁTtZɂbh! $4@FA;J|+;^E=44#vJ)J:7-HH_U_Ki.Lb^>B4?A/S7Av%]'&9i%ԎV|KZ]%CY1)Q+>}yTx uН%)^?ZJbڪ 5arM_U)ʇ\5"V}8n.#B"KnΜ\eUʼnkFR7FSR+#0`s۷˺(%[SEINR ˏq]ҴG0?LQ0؜TH-ciZ%=[@ ?doqy몬,n\;#l*Ø8%;隖KOb٬{-6sm1,ڥ6F؈a|amhM.S3x5ڡnUˋikI0 ;G[c.^e\?u7HL@}q()ۄ!cAvdq5/Cl4%Br]8xU*u&ɉ ]>ҫB3(zmvGQ'Q 7*@( שƎd\u{0QW$*|!c<4w8y~_#LJ=\ &ΞWOz .ʕ3?w;6&+iֵUn_I͵+}*6QPy %kdx5`)V H^۝Y'Υk/ְlxq!-cEP22ˑ4:Տ$n^bֲ._ #Hm _.f[rI02fl\1SQvUyj㨌BviawoX_$$d-͘p[;:,N Oޔ=QYR/\ wПةnyȘ?gZQ4z!Kyޱg}ΔdAn~2DLX7FC+6~r׃ ڏ3ow.aB`th~ol{~$9h/!h'+΁VGҖ'Ǡ%-eA0ۼ ϳ- ~z&{I٣@ѣh7;$~ڊc@gB!3hn/_Ty]UZƼ~cLՃ&홊a"^ ~oO{%CDKRI8ZLbrm\&fCX鱡1ḆZ+0YɝIx]>b^/Y0jTW#DBzK@LՓN_7*:/Iib$Q#D*ЖP)XbJm+?n\]T䖈b N/eu'MfF pA߷<:Bhal,(v7bCG+7sDJZH8p"_ovSG~ڋC&8<A (^Ã8}a(e } gd &/VqxQ*__ OaB [QJ)׼R`e/|/ȳo#+uí'zqr׆8  䠕_)+'5Kn9Mn=A}uiۓM#A)vY!s's϶lJY"QDF> '0cF[ֈJ$Vq`hhd6)NQZT8תO_-C[w0Dۃ`/nz_, +#Oq<|/ܗ7XQA sByPF>CMl,ܠ *<RtHu*mx7JGU^Jp&g b, omid-n&?7&cg47Yp3AGCb1:TL6[1+i%\/po5na[FU*}e>ˢGuy^m}Sgw\r*P8yII6k s&:}Dm s1s?V1-קwOGu#ۚBՖHh$kF(Y5 :J,ou}"P-q0f+1Q׊pP6ﭢ*v%aǩF6vU"X Imy n*_:[+eͫ1sՄzAI\,1pA (NQ˜by,{0ＧB\S-UwG\rhm*# yt=V7N^2@yFUT=x,I_^-+6HF 5=N]&7&lRuN":*XSW?-/a,& ޶᧽0HaάV+{O}W5C~`pՒ>0*z&]ZF0HUzJ XeJuX*,o^;\|2z^e6䄾&`;ZVbŀi?p2)( &٪t a2Ӛs~V]\c3 2 βƖKX5j9]ŷ4h<^aekJĜؖcD 'y:>XgpjB_û!1)u$ 61Ub􉑛-ɗO2F*vioӸ2I a"?rA@(~'j 5l_=Z[~vھ?jcn?a3m,+h12k[C(᰼o(0b!vTEYZAuelu`}U$?aMOS\(86jziFz4F#ۇ&\JUZ ,ը>*h ~JdR_6_q;L`%{fx{L^ fC}@ֽS @X=p@dRnݾ~/PY}p#]88E;kn߆&3ҁs& WQpAr]BMB[D5RJЉVUER-~T28wK:UDckkZi$6_.{DZ$h#OrGxI;wvǥ n.x}<.t@(y޸q3,i4_E+̬%5r9_f|M0Y* ]*) `aDW"Š+WF:6؋hgvF2rLZ +*E#"w7i0 gLϠ^>i+ WxC9>O3|k Fqfʾ֓65JW#Ңc&OKgoŢpn+ `ߗUgMK"aK5CZb[౲k52i)MUu Ʀe`pZ) _q.xcE OZ[pYB>+xL3|HJZ}*6 ӥ(GD}03{|#[|H$0VzǕ ދ˭mZSg5hE.<p4aTGO 4{-K'.@o8<*6d00>$[0:,Іe<nE:e^.k%s0FZ5ljpQ?WH9u?ʺB*RrDӟC=\'F-y3OM yХVatpH\ ,r5f66!r#Fuƒwo@nY_opce3o pӉpJj"\\'lΎq)ED`@H,61MIee$ڌƢǞ)x"5ST ~r-99-Q!ڱ;&UըaC QBD/zIBU^Qu=]63n [dYdb/Bٙ'늀 /Ƈ4#n7i%=WB"F*T&][Zmb 0^gxZyC~slWĮR`o+]B kN;Ucj;Yh>d=ϦՋc w*VUr0, 2mgpѷ^8$㬪~$Z!Ij7:vnBaѥz|+qH~&t\uKw 2K|kcxne)x}ģQ$af*r1Z$jNRiTh܉"+]s9+A͇4$l1 ˣes_祚{Գ游Uy |9Vt ,:;Ꞩ.H!yyIs 4!9Ggή}"M* &ZVJx!FyP6;䆮쒰h*3_2˼.RH#{ꑙG`RnUٿIuP[-H9XwRS#4նAH&`l!X,[?(uZ6s)lw纇1$i ㏂ܶqz1I]`&47*f#HAUv ʴa4ڲ{:|KS)B}@_wSKۗӎt>lVo] ~Ss4Q?@j"p5FPMLsyY+b,J+2<7oyoF@eF[ġ4L]MJ9i%́9s:-24:L#g\ɦ#[Q]5K6_J}/. ^ώL# _^,l6ΒPS'{d-ZN )\z>~ 2Tew–  G.6渿< sD_x476L1.Y-y(1^0iojE vyvE@ץUzO:i)rTMnӄܣ)]o$^vr%3}kJ!hg /L#=,k~ /ީ޶n+KEŠ))j\c2b"L]*2jX/;vCHy{0TH|"Gw =M<)`\Fd~S ymxc+v {LA.k/qP+hnggĘ;hm G[v@T|*Ry9ve|i#/0S59sϮW?XQ({Ϟ96!ckY_ "u)f_Ch2&xA ts˔ fGa,!Z_E63pV?9A>?_I`OQ6 )fIMڽΪc&"gקW!Y̘ LmUQwQR"rǖ0z3#,Bymy(X*װ'<KBA * Vt%H63QM ?LW Յɂ)+q {d0$wT ĄvWf NfUfui K>8-K\ ,gSƀF#J6T$HnᘼK9?,O6pqo!͙sDϩ؟$oS?`ec(\`.$i^`M}`3aP-N;Va%rU:-tiq}6U4M|Ŵ?#F3?xl/I2 j[ θwj:ɻF: IAY*{c qh֮MPs7 [Kf(UdTzS )8pjʪ= qC0Èd KvJmquA~> 2ڟ4fu$:nU$i9{A۞~'gc ̺A1ҁ+0_Bg)K0nhE3N;w6E%Zj4$k%X.@wћ0- Uqߤ\nT1NlNW:aڏ()p-fqYcjɉ%Ud'^8b!WܦEpGKxbN֤)z'E&l^M9xOmS1[0~*ېE2ͪc`#šf>bZ}OJA}dm,S_m H\B!fM!Scr?]Ŏz;f Hߋ #|j2bjohe%|A A2ӠY$J9ft?޷{v//Bi1֙Jp zkϹPֿ y])RCGA@Ե,3n$'!tHRl圵Z 1϶Uqݳ}=o9O DF;%ZZ!AaL8/"t75VYKԸ$S(3⨕U#r2hJ>˨F w%z Y쁶MbyKX!tu!P#=C0X%L)н S=ۜ_p'_ pKrt[eK;)muy`qXR0gtɭXܽPY]:زHfF<LFQ)67G8VPswŘߑ[mzaӕ=T(C:/f0 ho}xczJZ+r.U9'\wAyRB|I#hS:])R㒟I RB&lxOo2ޭ un?F`YZFGUvµ )}p "]xX}^0/7q,mNi#G7{GBy{_{㸌KD,-;-^AzA嚳ydktݍCE!n[TQ`ݷh33fy,h%\iC-؃oH)K(1`%x+!S^~rvYsM`ÓeG%VB2mҵ, ؁=?|+oLtwz$iv,UWm%|Y#%qvRfLP70tWApZq΂@[tƐCKjƇ ّ&ޟ01smdC Gӱ5Mtn庰"S5YLW;h(v8`&6-nTgD9Q-~A-~ Ry,:qJD.oE<4'{Omh6Yyhȭ)B!߱ϪUTwARw3^aoY#2-KcPN3Qs[P#2Ekla#'== g75#z1H/QJ8 4XCͪ5p]y&udO#`lSlt} 7 %;1e@eg΃մx~2 SqIDLX˜8s]@rѠT)Nq r-s(ab4u~a/׊]g{/=T㷏Ò>>E ɲ-O k'̖2y{ NHQK(Jv,!N_fS*JО63uspG(ia^a @WL5k X:kb!Nߵ&){,kanvD-b7\`A#r'6DJ f-Nmiݬ{OU8hXS~Ƀa 00`m(WV-Z'D L(Eۏ8i&c IY?l#y8X{ 1y0!q^'J{';Ece?g7vR, m]t涟L%Wa[ Ecz -3ӂYRA4W.dk2b %o|)jt^&s?5.wŞ :^Ac 6LZ=$w"n vQLE;4tO)PdvnXv$+'lEk (s ?~CKJ@!*-ރĨ͚xkIA/_#/-X\H(NMVԹ7zKW9>xRnP. ʕx܌sݡ8\37ۉlB4D;nDLtԗ?+8:I-:F.E>|`]]Ҿk3ɖ։+ƨ)胲?h̔cFV)`ʹ{1 gQ8+X,gvU&|v&PTT"M3ƚ!W@^M?p͞5Vfyt#GQ3g P-c21 ;)mjԼĬ ;+=EhL0IY(޿x̂~%y(GE$j/`2 ޺{.K$C'R︝R|On%C>4ohT=W;X#LՉi%tC \u,#q kKp6v98)*fq9g7U黵2 wو T@w}uMɫ{qx;tU7Ui3%Dvj~+S_Q?7{VDrM/_{~뒩'jYf;8S. sRW^qsLGU!oHz>M'Rx^,&z4x<LTXd$dNBXb s,1*N$xʯ;o.T .Q C~ֆK}0b:b?q龄u[0ڱ9,4'Wj5w ]V?tZL4?`ph],T).?dz4tq\=O8`Gǥ+:ANH4N־ez"} tbj-SU23{OJ'FGS lO)u{!lO=m]yDVmL\#f38hm9'O`I2rf6Uf#.U $Q!)E'?& E㉤d)vGJX3,o{p!f[ S隕DݝJyfk9!;7A:jI_-OsO;pP1'iãH0-ҜRWiQ&Ĺ<^#$rR[>u8+rih.roGxd U"|;oP?x! (UVa҃CڀaoE0r$0,w_DUXg'6p6(|I˘?dv5LuyTŁYm>D=n'=Z@0mԁCKnEd'IhczSc*uMt8qוԉxR +oJ;҃Gg؁ sD4gk1o$ A3{H m&PlG#^dm S7o[)3A"F'Ka ^aʉ&G(}5>Mu_Muh 1%𧑼ήjxeUbkj9[#6 g}͂iJ !]W;ꕲxr^T/x☘"BWQ' aWʔ?k}` /&9 )R#C(6QzUtؖ6RW~=Ar0gujySxo@. ml_.30}b8w(^Ŋ4DBjW/7G.i*bg=+!a#/xc6֑ddrXzF'"z:i1ϩ7|$yAGvb<4dO4-mhm zMuydj)ad IbJu|NMk {e;+m0 ohF1xԙj~ jQH7M]Q*˗iھ*QzsH~G C(6] Ju LڅrZO1׽;1T<8B()mXlݥ<x6;hUA{,0zٷ qO,W4Cp+K {OĉB@e^ .0 وwyPm$YB;+"do>H;-#w5i^ r-*Q=)\. D+2|tim\}X0-5H!$X(fbrc |j0nhc02)A ĜKumZI5 DžKy{@&Ra:i쏀t1AJVba/; RUɖ}aYg;"+62CkBo*壔KYF/g*\۽u'/ jRaw $ 6Lś?%;p~GGT&t罗 h|>f=0YiZ O|\euTЎUsn Zk -{߁g %I@ȏܦylĈ= bw'G]5xbO2X\=Ri|I! :7Xf DJ:{\_8ɫR5zn,ql*IW}6Z~ %.!ʐ^on le`H;v^h%\9V~5"u򾞨[A@t+tMAE<E~.FFN_wM5 {Lf]ڐ5m9SۜZ3˛;'K$Fs -/)GIa}^ULIt>0]ckUOwH&J%U/*JO>YL*z]ws/h,(!pJ8n:&~S%1@ ;o挱+v.NGuc%J-~tT{U3Pn6>qsVF7?تE~.Cf*mfV\80X_?jkWErkDM7KNIs.3bvGw˒/ez4Cۊ 1鷙zu {>/| V,P[tZ7y"~T}Sǰĸ(Y6'?m,1u.C#%MT6@"?VQZ|A-o)B ӄiLȀD sΫW>@PMvLwS)%Wy5 Eߍn#@?qU'^cr@dS1 ~\az쬟{qlȬK6 U-9w+ckfoT$,C/ cAڣۧ+-5Tӏ[q|W+{ec=a˸<Uc7'[ x̫0$hUbK~āU"9#-'uT㓑x`n}嫨r!6ʳH#R1z|ZRdhjЋh߳HX >'39pLci81r"Sz!p5, !'rO9:_ŨV|Wa9b4rf 8a?U_tT!X,h X`>ҴU{ݯɄKr!#b RO_ e.Vdk~ޠ{һ0ܞe[?|A Tl9- /=)#h z%/:4H"u;NC{~9NV+縓ԒSRxA:,u2[|)Jmw Ęa\ I~UGipCipRh*\kgځLVb.jjAɌChd-L=N~W??i0װE-1lC&jqߤ.[3> p4VN|Ag-5 >6YVg' Uꬭ3\syBzjJ˘w>yżwt%D:MF"6U3V }o8 !aZ5X g^5KdAS#!3㻟`t.KvUDbTjA!>Hϗ4P~+>K\"kxbArR{j_(Dh}Ғ6Oq:^x({2)-4觷B(Ko}\Ǵy@^B%'UwRdiWyx1Mllb3|FW&9M /Ii .6&Q>M9Q_#E䄙F|ϦA`k) 1Tɿ^8`l*Xzj o@cCKЊIEjѭ tNR+e׏JuH(;f#lͩX ͂4ذl~pnEPZ>b$kbbL mk1;Й}H8t!Bt[.ѳmeMj?3?5yBVᖮ"UeYj]Zօ7=!4{C) }hz[p(11$Zlg.msȩ S= NrRsO95x~ XLrrZ}hy}W:01~5L\aN}4qi)H Gt4'p%-9O{ڎ^)G^i2`GExa=9&I7 GՌdRߴ `ḑ3|I弚q$A<)5h;UEAۢG95vz\ia1%52<&c!{tD 3֕ʿXDcDl!j/KC J5e&$ mӫ(=]+R;R/qA(HtWIћotl{]kprwgv{T /oT7:`/DLCln\޳0srd^pC$'W曖B#~FQFf܂ [^jt(ʺS8BA'G#,=Yp lEF.& dI} ɫ+̲(dUxi*.jCt5֞`8KS9eVRaZFb'=8BVްW빲Ly[&stΆk1XYL<8x&A,B](:/FTq6l`1|0]t)etK{Ud9DMt}RQM#^NU~;c'5#S32S_ᓛQ XG\1=UYwXh_wb0jȓt&ga/yv^]oI%(X4iեtzK1<ڮlJ^9gru(c?ܟtzBt?:f|`JSFw.k[m،%tUE#E:sv]!\1> ~ @ 9ucd&hTT*h5ڇYw##Y;=L.ܝ>Y4F8/-eߣ ^?<16n,HoMF`U-UW`N<#xcP ls:ۭϠBv^ :EV_@fl ÊS^ݏa67j̻S:Lw !K.##9UJf/@Ͱ=(4(ˉ]ӍB;Ij(=+s5'z2 [ f0z2PvT~\/^-)q6ǜ1mlY%7@p! ^/X7l,q+q%]{;p.C,QkvPqs S+ +ɼ*jP3Q+@w_}dvY@12͉۴M^,]GXlJ@p‡HR&9H,:$~&^^Vsm[d`OJ@=T0x >]ABGQ~ V6 =a6xsS5#0LBep#ϾcMdZzH 7[0n[Fs/R7s!m5;%3T]ݲG{Uh=6O^6:2AR`԰rm h$ୗxٯȻ`;Dz)h;]t¢+K㋋we6i7KT*=cN&)TNqok^$nϥȾi <XW60};Jޮ;NAOTUR= @ p MQ&)oQ`\4INɭQymo$N ;X ,4i)(!CeWD]9D]%<~l,m,*/XDzӿw^󗥶nmdcZE]>'B4S)kI0#u#Cc :yCQ ) .oy+ z(8yZ(p6F…1UIHZSy8KlkĔ}GR22cӑ1P+=0jBthrsH,e5%+ ,)!MMy_)+33@VnOȕ:. oψ LL= 7,2J|7b(R@}95p =տ줌T!IF*⦍Ri7F" pP|& Q^;}Ȫ~RtÎvY$u&x/d/J\3 ǨTC|yGuU,~~,ԩN"<(ezwҦ_!1q^}S~R-].ܷt'mt$3%B]WC< Mi`FHfyEr>̟ފxX!H -2:!Zј)UoktU Bb OF, l'(.8'(H!"sv(3 7N rŭIz[{Gusӄw+c z?TˆKgOb hJ읮>x`Z ϒ`"?&,ǗWg.qA@~zßt<{A_ PX,TO>:S>'9|Bh~m.;3b}/pí;fmbNs W! Wω;*7#`2 12c䎪SRUҪ6 `ܕrFzte2P źL ^MA>KؠwK@!)$L4AAD(#̗o0HZonK \< L4Z923:kh{ % @*9ɔP'L1ފq0i'V>.l>r,c~-2 nϯ3i:0*K3*玹iJضsf# 3輌?ѓ,%x\[kf3y8߾48_>w&c]әdJ"aMC? )^R7:ILPyǯi/J7oѹ+l0wKqڲ }quǑth;3W]ZA;sTbt/Ct!oܝ;q. ktF_ʰ}2"aw"^ʿmÿ:a|g$JX gu;VU]=lFM2rLa -zI}a ?FG8kE"  # >!۾R)UڿAIrR꤅N{/4\L g/8K"&Ɋ?c Rs[KyxNb˶B띇YJAz?I&ulkكNÒ?Or:!EL~wh'jK{kb{0cN9頻w[ D 'KzPBϲ3'?,M#lbad~ ˟Hc36GݙB1NjwǽvMjiBUyBdy1 E1;99Z&5VqG8)!tF)7$@AlM8c"Z-Rb9V,1*vp>w)򆧱16>TA/? }sq5˼"LZ2mR^Bl aЩF* )#Mk˺l0UZ%m[R2y6C$V;mg} vgj77*ڪ)cTDže,?Ma7tt~~;cӣ/o͂DZĭ~WDnsƄvPgrmPAEqz3_5eTS%8a<Lusق/}I#|cov!hvb} uυ5s`~=-+Uֈ-U>(FlՆ<oޏte}.)}f:<'J\Z5Id7gۂz7 tqM84cK[1V)f~E*1+Ǡb6Z[| BMcR'3o+"ע0V:J8~h,QXfAb"]1]*#q͹`W#Y䠼XLHSޛ?"SB\5(LV"jȆlkE}_lCZx!j)?UQG?z,M`L`دTm;". 5_NK Uϒwj~}O$2ib{HԺ#1<3yGA:.cQ妰w @ST{'%#SüGG%0?Н"~a{ teN~ MIHlz34d h#5&;a $.ٚKs3o>l+K`e|ut\^#.TIQ-p]Hؚb F3 thc cUEY,f-PZT($]y)C=h˟TQq) 7)*bm%;/!B'vjS=. ADєa"rDMTYqd!v5h5MdQ)OO0ە!VqJ#t|MAVT̽ByarV\x0L5T<̛OoAB. %9q2c[ߵ.h ŭ&F5c95<>ۃJ0*݉G^ckVI傉.  ߄Bck7!{s0-a/R:ÑEEL4#J6WR~}t6Y“hmW&ԅ'ɱ޼ 1N^F麞ʦ(;G?(Gs 6 7:bE8 }/:n)ذ}x]A;tP|ՙ sV8#As) fWszl 5r/6W-NY`lSm71:~BZ08JkM 1%\aP}cE|2`4 'e~e g1E_qk!ňn%3 o/dS6Co8,,aHފ6U0a7>aXv0TwFPj?b-r Zpou 螯7'F g/^p]!Y':WP|F(&A nqIsR]<߅bPb];7ffdguUH08&Z%bI#%Ck T i>8//թ? SX"^]uܿ=n!({&wc^N<c_aG5ǯ!RשsTBC='ET5Q:{>NDo;9z LbJ^Yī"?dYY 0NhtwH1x0fT7EE _ |j; E7gXw/ESF>ДӲ~o% DYXrߞb>U@XAYҭnX\a< ﹹYV;nNyLHOR7ۅ$YEtVcD"ޞ,4(tܯ{" ۿbbA@tɺ=7i *Ib=byZZp] NZ[.#LH MuJ\;[ouhIaUɸk̴iB>=ׄPwG(E}p2,Dj)umP^iOZC;?EgޛXMf!L%PuWUi/ki8 (j+/Aվt^}1c Nڪ=QSE8+4~ރ춴i P×Ge2~O]ψhKu  fV%f 4՗ؔ9 ,,c"N'oJzy3`z/Lf$XX\4y _lviT6$.oc\UGR.n%l -@#j2%/Sn>)P|gqyO3G'PIst5kVZA7H͆08s =b.ĿzByrs7&~(=LvO5<3m{f.YE!>A^c|~<SuSۆ◲*](e@ [ye+;;#hy"ƑcLMՍKy@fIQ$!kJ?- x3j\LH~% W^? (x|l=k1b7}+}SJ "֦_: ̋6a#;,ȆYDy)qBUN l0ZT1QO  a6m3n]*֛_N{+_=suKٟn;s ֿ`fK# ! Y1mRJz!H7M``,AҵDMuDj;kF` )Xp>nFE iBT /m"GL&KbKbc0ӌE` 9ìN>H5CXZ!P+<I%D`o lui M9؈d:yOW?VM,Մګͭ7s>E m#hv٪_V/~qϒBMu" zD 0ڦsڀ/ [c Qd[xt52FIܓ\GsNKDa<Ypt~/<5vi/IIYUTG8:=ÃXD Sz@Ep'D==sΝ{ZO/7/Xg/m2%CO*1~;ldGbc`/&GBm ._3/M3;]Fzh_L7R|U=&0.~SV.|a^jR>ןX#Un v˄ %B;ȪǜERʄ YMrKkTk0-z4eMNrϠ]ln`jUז/9a7G(Ѧ͗1IoS"FQI4fj(*oz.?9abl 'd6N(n s~/\:ʺ]z5"j mY%㽔O#`<]Bj `ܼibrIL8Ee5ufJzKCfHH| .eDDҶpm@U/ǀ0-?7s mL~Jwcm# Ulta$FNGe2i /@u*, 1v+\9]{_,b$.bVDM$ٜBi{!fs>ǥ#0w"؊S>Yegei4 vL1@=7O좒$Svʪ?ԁMA.٪+`='31 s#%4ҡ°Q%-17ed3{'S jNp&.Q]OCw0N/ D|3_O[q~l〒(_\5 ZWTcڟˆY:mQ\B:x~K7u6ė W;T+1rB{h)khzXVFݴYDK&rpN|F*&Pj B-FƂУ*Wo׫G~:ejYoh`ɮaU2[P6HJ͌RYA'k\q/ ]Kv0@c~r^ƕ#;8h<em>y{ര+SA‹ AWm"I)j'SUbwt,xT G}J֤As]\Hv^"M̰Ž-,0ŕwaKkE4|>#HW$f gfA^ATLmӾiMʨEovy@hrg:&#V2zٽ+Pey^g7 0(!vF%r ٻU QC-m" W#P(d0PHt0-v(R-m8_\GIa]?>iDo7vHuB975 Kb;ԼxW ]ަ.)_0.$/Dd*r+qRez;S]HE@>ˬsʈ7Q}0_Ȳ!kMs|H`DXd!fq-ĝ']k?e, ū-i5W˙^J>IB4Hn]9~ɎkolNˇGM.+/R _ỆEs-T(ͭ~s:NDU|7SOsS!]"\e˚ ǡ36jp6r @{J#:2̏LXt)+>nZG RMʤ"gTyK'#ȓ$ELPK#_c-RűЈlR ` 2`<p)&Cmd@sBFVj=f{?r!i!uOR]p|7Rv NRqh_--!XmXJ'>{h8?36<> µ=dBN>)Z,@g9y,7r$assHj| cdEMFPp_?W OUmۏLG{wŕ-bGBp:RW:ru_g%*fLxz&~@j`9OHSi饹K)^nmJkW.hLZaip"\H^Gr^8zBF%ڲ4-Z t9p5ZjF9sxcwu[HC6Lc.}F&5]() ƂMY?揖,af#դ%xsݱSy;oC?$kUjgRl{釡]?a'V.ί,uF71ϫQ?⮶eO0C! lR6 0PvI/h.cpuo !MpP6b%v}>}2,[rYC8V&@FQV$*RwʭU=L|b"zoG.1ZBg p{bBq'޸K X˫FQ@j>N鯹c,JPbrYY*;N).9L|A/V4Go`A9bo/^o OöY}!̰ͦ*lRm 6 *ػ93tkxpe,8B0okoOSۼ>6#3{ _a'gd wu("SǂѻD8Äz}OESrB>;s3nnSj:_ Ϊ{PN,N6le=+FI:fR3\;4~.|  j^J-wn>0]w3yT춈YE͹&ʡD*Ku.]|֩rz\_ bSȚ, ~m:L?ٍIq6HJ&A7M}'ǬxTi,p)PKs{ }"0GuyGHxÌbg~J. rAT[?6>#g/a>+ 5uX[&]>ɭersTAX\tm`UmIoQܢX*=hgt|ioU7J˓e3;<Y;:Lsx $p0]0\V9if'+&'xu W‰fɊqDdUX5߈|ZA-"`-sc*CSflW u=/)zl(J(@ܑ _C% (׼6}?͈$0C꣄^-wJ9Ύ/od*^9#|f7{θI0b Km;]2,V֞RIe㝿~8&KZ'q|r@rCMT6>M ΟrzKM ڣb\LU%32Q/" avgG6ˤeZ|I89b)2Be]@Z':4/G+՝p%%l7%D#gA HD_ pi@#-uvd)v!YAiĤ):]uǿ5MO7Ps 930juS m)Z$?l2kS׻eh2ldx[^bF3,Ųet-z?c! oBBrjK+Є3\pcOva;Yb A9mc`1R<8ٿH!1罃2%|:(?(|jVt$SBAT940YdESҸ.T5ϣR+qdnԵoI_8ZɄTQ@Z*Wb&w$/o>Qk@K3/ؘڮ" Yn%ʩ|$8  ډ>|́N~?UaR\M) + 3}{Br(7 ~d`9b/E,?RgpZp]! >[/CD wn.\.1*d4d7u/ 7=7^󸦄bL|~ ApaUf(fBc)CI0U@ڛ34/.qo$DcЇMXX=8bKu@SS֖R}}#h o}lGI8VvA4ud]f`&Mؽ7gf x!%gO 퉿ǀ,9t]~T`  #%d*f=*mڡ29G\.w%H}a#aN[Hk/2'iW$tgak=jFT4AjsŹ6ϗPy2Ԓ2xRK8 D GIƩp̢p Ɂ)j\4|OţQR /A#&f WS'rJCä.=-Dv`U͌HX.woԴ=:>8NzP0%,UhY`XT}3eaKvo 8a=BtE596Ǡf =Es]RGbBz>2|D2n ACK G.$܌fT1i9ȦK(~W/w%Ai#&9`?ʬ3O#ٰRzԿq*pg[xZw |m+Vox7y-BcA0@ *}c%G*k@#|-}N!c$ ~zň OWxT8A`I-ya*i5G1QFF#閬 ꫤ˫JWѐtЏ{vKgLL~B]9ܤl9%‰|O"g(ML` d"5\ǓDzy7z|s8"g]L [1Ӈh{%NvwO4z-j#+9v 0M7/V(ɱVw)!T%0$NEY2g3T'Яa9LCC6K&M^c9zvfÅjz\`IG0QZ<H&Iq_I,u}q{~#֍#~$Q$$rHL1%5<#qv0ޞ|^?@̏33}пP{29p)!/ȗYsn8a∡mp%k⫀*(uv=ՒkPS"׀|mgNLOH ?c$-Iʫwf8J©}mJ5S"^ehF˾X *Ϧ'`hWܐgφW:v(w*C2eQA*&tn-9Y 9^ZGw'|y3٢LM)R.85ZpS|3Z6)AKXоF;P)e |_R.+kKc8>VK/+0׷:>|%̬QcH!!j+se9SO 6êq@O*s` qFF&8y~̪oo ?Ӻ5|)`EiU1 ]@f:XMKEEOKxG呂q`f[hrf9-:^jG*Y(=J[Kk>'g/ [Sq<>}*-l'K~fC\don~4jFn H++;?I \~-2#;H[\E7eb TF{~^%(ɓ5ƍz&( r4S~i\#< 3m| ep+*ᯫEl!U`ڎY@ۮ$E[+k+.6HoX+Z\|z#1bys2ү"{4,+?*^{߱\>UȈ]k)G)dGkXa"k6ΊxuB Ks8!.ӧ[5XVdP"s hk7&kpӸ?6x* 7GLV BqmV^gySn鸠^\Ydu@Ajb+]rH)eO6h)NgPTl:+gL'\G2Pa%&ܱ#rG He( z}p**N(}oL_/tЪ36ėCNVu%rRC>"ӖO#^7w84p^T|hw zNTp}Ò?5Cv8p1p[$dlʯpWxG q.S=D`R*"];qrg,ދ|W,HDqi-y)#Ρz߭03~Id5n7g kG+3C-FuXow/Iil|/aKEDm4 7"g/k' ;񹳝@Ͷ{-1}eQ}[W>$z<|KKs?^FUěMkf"tJSn{/ScfJ}2N5voA G*nEVPN C}c,s\+wup>1BlGcC5QlGk+<> A{4梢. ')g䦈mw&տFcRA"G`*dxP_ CVC f}ҵfȥu.:[TYtFnlj6F2zk ؟`FgT4g_I7*I>eziJ%Z)E7 ķj5Р4To{"5˛6.6?4d4Ƿxeц#:H7+]dq݅LLb "$xpoB--~Vhgx:(gĤےDYTLwV@]Lj$>{jY!Ae:3q6Gk u2~P#v rhCO%y-CB:6gfzZn'qV^8lmBpCAO-°.#ɢE#-PP,Y{~F+]׋xIOKӻfPV:}qW&xz ˳ǣImxmkbo >ov|%m΢6Yo]P6pRpNOf[8 ceL^4lob,  ]'r!^Iru+77G4lM|nѷ7Rb;tAJr2jNT*}WciH6aGJzrQ]hPJ &!U2y/t mWIx 삛8dӱzG3Ev@q!5ϫ5YXa4o$49\@lf7tSl̅tjeQG)#)M-nLr,H]W.> nB:3+NmPh͏U@.zB9\FeKsoauz@@ˢ.$FwGM^>vy mp,?=?%/xfӦO8ޙU4WQ9JOrR6oHRg()n˞uTRjodRsK9{Ɠ c%jTq\{f̏RJ]^ C߱#yj]BPSbzͶ4 fVj*ޯUuNb <80ƟDk΁.o%^}{mql%xRFJэb@(VU\.IopЊwvޕq-F<>CJy*hf_%c6}QZnA}:` ?T0hi7HF L4/ɛl'_1&a ޑu4148s +oKduGi!rArV7Ɔ$_曄E׷1eT: K8H+~8jZZl@b-5ҬoA.^[ȯ!ڬN+p()\o,k[x7EunpoW<`|Ңp18rKk$F>U|i[wr W8n4AmN{=ׯh+/$*NrНz{x&^ Lch9?V4B\ÜaakZq@6"v夜eQџ(/j~?)4#˚ܫrofNhcц*J (ϷG9Z_Uy[|{r<~s[Lgrg+Sk W(c݇ ] fНarw1O矑Fy-A*0dg.OLHY6Ѷzx9@Blx/uӔ,!0cZkR;<\eR,.u(i;n}-噧FEqϽg >c!_)ZAZS߮Ol^j $93TjuRi0~ pEreFG\RRyn3?>M S],!0Nϻ4o3Q= Eg8Pj2p`j,x/h.C_&}Cj9FP-A"U(3&X.lCv;>!$*[$˗ >-2[G{FX66#c39Y$tp9 % iC׋Y4eщոh 2hr+iq(/g⋹1Y5bewJihfK͌Isݥ&+fU45};FA<|1g!c ϲ}m9GfrD}w+smҠv}c]$p`s#1_M|iQFp]fpjJ]0b Re36b{ﳝBZ@_K .m|E]dWD6|5%3?npD%$;*逢o!ڼ$ pgk=Pay0pa,k"E6sqߨO,b$JBe.f;F l? D*W=Tm렲A4N*@siǝZl6ӦhH#WPN=6G-io큣CىAm|kyTrK]빲kǚӵ{?!\Lnf|FLBF F$κA.X_%_rn#>.umΘ0G%l䁪Oah8Cp=30u%/٧dֲF(IsZ:j(I*(^^iiͨo0B5 4?OV(~Dz[хN !Dr$pjq3@b:M !/c7 LQ<6CYpz 9)(ϹW<\TW]]~ `'cw8رWXwoE ٥!$V(|)abWoe69" 08@B MCjc_=RFۍ踒Qn[ᷫBB:3LW٣4!|r;׼2^BV0WמHd~/|λH!Ƽx]zf4j6V l3. FbC(4]m`]a%(h=-6Qs 8I EZS4*ؑZLcXڽr,a2Tb ?96U O4('?q 32[ 6흘I Ņ!$Q# c-#oeNVFjÕ,Bmm3 N:a*i\PZںa)s1@n}"Ҿ տ $"d{~L\= ˺0Rod`G!$TŒ좼;r|?HhBھdڎP *^*^A؃VT{ $T(d}vm:h}`yUi {Th3AEnoqMeN^ޤ EL!WYNu#1Vv/gfVt@:҅-dGj>0'hµ? `N0 /cg_qNMfjC-7g]T*,bgY]e!€IwCS yֿդuT0:;Hp[^yl 99laB27pZ@0Ehԃ1uX6Yx&gB V=]Tp DOFmoy/b|0Jk1}~+( '=,,|Kpʆ]{^4m}Mqj7A|ұ ņ|OC Wo{Vk~vp*8Fd<ѻ^\r(cvz4IRV9Pe9 x OzVn=O9Sc[+щ]0yeYBKFޡڮ/:b2tb'މA*, t'Zk:*B;R'/N m+Pxpo6||fu;RP!g[ӭفg9;eDy{̜=#$u5) _PƑ<3X.PUHN/%@aGqL:=b=J*](h{?>BQNcGjymG,D-< ~?۟~ee ^XWX`ڷ'~.d֠2;> 2uGfikPZn:3[h0+ Q7+]hVǰL0POԡZ.Pm B,[YךԎ 3a"}ĕ|HnT|}ix>\Wp+'k܅ҿ[XG(ac.?jIGy( ,l3-_Kv8{TIM³"=(!"2aS wtquB ]_/2hۿ$Wyxk-RTejk1flulk1kfL} "fkWI :7~[$TџLoHQL5=jZl[V0^Ơ\a$,*4Dܛ2" 9RCGAgP9dGNMq&C%E@zIy ^ӎBV(E$R y-o;@wB Ok1=@c`QJUA|jǣ&<$m1H"ڣi_첖:MȎ+X݂ab|`G1X4FNV72zC^LTzVMV\*3WAB2`J !MvypQ _UMjƫL3ar^vv}Sض[Ʒ9AKV0!FjGac 佭 5 fĞWu&!hh*3Ldw jkn\&`aY-kyjb'F.UI%R^{* ~%> Km Y6-?^} .cV-%Nwn r]˽2WA=oϰE\az Jr[ t?B]yZw6_I=k w‚uec$̌Y"Ɣ v [o̧tŽ+ 2\no^O 3/R{q Ά$p-j)]}YsӝOt`q]vƕH`CT{O`~q٣N^-&=%E@h9Đ':ٻ}A41_69E^o,_¡1yS:69ӸoA=d0Uj~S4A1*X8 ך1'5 \y|Xʆ-UozR3Z yB-.ƘdZ=zIb 2{ilj@4qb,X}S2/ jj<6{9]=EԖvWuaja%͗BP7Òain^ { "PQ0i hB qShI :(AIJ՟*H<'،0C_`"BT[/1n=%e+2H)y_أ=n,50JȁV +OЋFyhh'4Vb&c%O JKhJ&ĜV@sͻ_gV}@Ƥ nr?l_AQ<+^vh"XNGr­S6_[r;]=:񐳎tud?4W`Sd+V Y |wGzoF,7Ӗ׳<G%PԬB4>mOGþ ߢt'#Ü>ʮ#W(j{ d("۫<~)<4uhjvW/R(dR PNbWn%)!/"OT"3 w zA8@qؔρMlSG#8nD"|)po$pI#br>A{ X>0I΁NF(@Be>h3֨S/ujy|V8B1PBNcYsN:l~}"dBi*^<"⼘ -ЯG b٦ rOg'J>B&r,кMN1x'*V։>8sXB/He]4CcƛYb1s1Jv(ieYnx)BbOKD!շCH'[zcX_S:OMH*>$W\-誉o;1yy>w=zz^=ytȲ2^7My5 j>I6[$+SSG \GBqqt'kZ{9b /~i /_Yܣ+ys~Vq튌*bn.C͑c3#Ck,n;7y׺\Utt w97gG_*}E2_*x}^gDgO_;߽e(08uTFxQ9e;cQ֞~'jSFݨP-`4HyfvI@ ? mē  kS㭑 ~ Wz^ִ& ?boN;dPoz9?$5ubk^đ٦T}6/0jW0}t Rbvi'V/ rͬ3|he` W!^~j ZUn_OԊuvB]m@LQa[ҙ.ې2!7Q8|rf綢8:>.$,ρjWa4)yAȷn1' -B5S vUݬ5!Qr3msf\HKmhTMA8zS.Af( Xŀ /y=`7IE5m6ֲF6o@Ԥ<11IkbM|&nA`LKj$U8+M+t|6搞B*7񣽏`ו̳ /؄ AK} vVLVM[K%aTZ8`M3' o6gAs|uq,LSjwX`@-om2LIG.) {G]4A±|-1UĊu=Tfs\da}(93+8K \˩L+^Lyuf2TK#{԰^eG E*6Z7v>-J3v-R#/MG,@͑]H\]\ڥnQ$B>Mx<8 W;8~7Y AFs^#fW B](?~թ5oڨܴ_3+{k>xHz ݿŗpT| _ RW"72Iz 2jf~w*K>B()_\Eȥ)ԓu^@&ov`t ONP-Lb+e?mM=OJƹf&gF w;jO2OrZ$t@M I"8ciOH z}_{tPv&oX(Kq`]CdZ'',v qy)[*zKH )'Ւ5y^p37e#}Y8õ+K~^].e)Mnn/㴀hR(6mo\lPr/'j2Zҥ!1M̩2"ˍlu LVwmpq Mգ6mp>R p0Z:[~$@%s@{NyvWb19ŦxF}0+HNIkP ?"C#v8?Ԉխ;֧Dq8[mU`|<$Dչ2Q] op3&uX.Rkg+h,D |OU3qY`kUh% ϗֽ%<oŶ-q6.V>3̇ifچ5!sJ_{R{6/ etEG-s_`~j^1$ 6j1ڗ=yz㝻iEgeBLDkUKd'a%²vE( ZZIE? E>mr-|MRGU" Xk73Oɍ f7M{b5c-^(mrq/Vk/+0kEJi"j#(| Mɫ~yT}FEb6rGvCmDf.Чqʅoey#`exۄy3d#Tr]?ԑ@Ljn~6GOϺ](x5׋(&8*vN7*rt!b$-U|R+$e}4RG#of7,.ĖNRva2x+2i;Ũ2[rqaOPXA䁄~##,`3:N'Ivne k޵/fxnl b@}Ltn[1Ǜs bBp CeUN N*M=wU:BBbq+@ 3xB{E]Z896:7/?0QuM p>8/jz1fy΄֑0`q 7!Q[!A`QҲdXܳu-= q&7pմ^Kz%vK3S$o5aP kPJ0hgjQKaޤu\@a<8#e-,.Ҳ @ÿ-}#7ω6&ԡ7-v\IKQΖd"_a"_LK qf6~#۩mNJ.tC=Z"F8:u `#=Fqw :x(S`EV*&4 Y]ϟ4װX_Uh3x)ÙTNSrOǍӰ[dȍo^>BF P@nѻx|Q=RCǟ |aݘ\W^"ΐy: `o8jZP"y2|.P(#]i ~-5Qe4\^3Cexr?>>so_gam 2+EgRIҜɬ5kGcgvF崢;I`V<xOGjV!E'%۴I (c'v/Fߧ5޽%љ!1(D)q _9xL3^k#z'>X]}[ F 7eʾ kET|9{Il"fos컭 RHhe(E¢b|6k^H,Z:T]R #C$ӂc]f} nr=0Ю5uuN5&e=0.;mgC݉cێv'Σ4P+^DKRj$40pq[ݡ|Iq ?IijN)[7;Jc =[+:J36n2QǝҮpk){fW{D@W&g߼ ~=!'BErN6Al*vK 1LE"A }FXJb67w19(,U?FWŰ`s'Ј4xiUX Uf7ܘYk^10Ͳ8îtxjM*Jfþ/d䛔5\v8{ m7hqnґjd$-e@^\R.`rm 8uVɋn1of9~'x.#_jrPRY`&d$,`I(__p6bKfx8? d+O]gٷgyR8-Qp0WgbjQOI#*>xzmm@m o m3 j-W4xLhrfh]vZ/ўɺIe tTUcI4i50o"Sk F.u[p#"=S!⌦Kٰo zEAkZx ,ۈ琙R8Hog'׻3AdĩL9DKr 5opDR.M(:uyz]U(RgmݫXĿ1'*?mD%ˣCփF5m CܿFgCD}“; !!"WK~]wC鬞|]jS{DuϪhGeJH|35 -IiT,CKjzI*Z^òГ7l߁|XjC퓻 Fݢ8(z[pv=ƙoKJHX+@mpYIG co ڧȩ#F2q//bJT簭̯ѿ2_|m%yo%iǣbb:a:PXzKPzWkcǎi/Îˈw㕚MM#92KTaa-7Pe,RSxgCQ lS+4=A UOr721%k }odkq!Gt\ʪMH-v[&‹Ѝ-ߒ+ۊ#fG68$IeI:>͇;G%a~:^|k6Rli׷^ "!I` 6-X@ҫF58Z4k?@f®Zk9L&W^pmv } pB چf&Q,E], Zx =h]xJS<麉{g*`2*Q;^?h{,b3 $2&+1ov4#yYTBrG[`~LJ2) <,0H3 - Ҥ@D$#6EFdQ,) qG { ?X@w}"قQ;g.J'Slr v5OS-Mц:}yW{S_I7 r:5ThHl1~rI<ŶK3-60k)и1>hqm#_S5e#:Ɛ}o T$޻xlhbT!i a_"Dw)߯žzD5Mr/W~x]N 8H~K+1ېBb.'Į߭g]]Sclq>皶[J tt{^QXɐg?F}t͓)W&I &Ue̢[jB|ݵ̖ z-ˊoɈ9YGCn3 64 ›ʚxyj;"ݯg7]L7G-pۧ'η;Ŧ>|6,0htnBMrḲ7"1 __wHM=\V %#MVmz{= O~ZMΓXZGe:I{$-Xm&00:= kH7U! M >7QVY+g 63 34 'ԤB ns=nU[^/Hz6 Er0\ u#ȱ;#g9Zǭ߬1n,|Pn&&xxj=FҸiljWJ#zK9ZOuad^9u#mª7wgIBZ_,i5 U꘳8  N-:OH"%G}iek@,u""R:B u/HnG̩_ yh&>HĽfJ]mO2s2>=~-:s-ݎM txʈi1lI[v?4C 4Jѱ#%VӤYaX}ж !Nps[@0k09/xn"ai{Dl 0%L6,ELrimcRbnz4m+[ORr:c!VlvTST s;Y.<*;bTx}ة\fלas9DģՁjD2EP!_1HK)eؼbxX> L!d0>PvV"v !?H1U #f^u^}p W[=$v$_EvIV|+̈1{je3Z;(/H n?7GI` lz Uh_4C,*z~򍐭b@@:xѶ95 RY\8԰A؉Sf mNzo $@44{BKB&޼ݠؠ 7է+}c]Ύp'(]:碢ۅ> T ~*L4MqʄZϰn!#(U~.Ŵ?0CV #V^Y5#1ޡ4w #SAOGmj$gcF< U3=,tp') _?h,MEϩ 3=( FDZvy>GמzU?w]5q} C?L\8טtwBe+gybt0mYO>Dz`>{ єDKa >.?mF䫯SJv禶]ue* #M3 zpʖu"L%R#tD{Osb]yAU4^"[$WZC1?5z >d_w" _ oŬ<ѱ+cEf?{ܬ#"\?I_dj<6֜!hIm)ď {°r>9]Y6w#B_Ci89qKb5e;f"Y2eHh KalwbG+Zgr/3r &/ 8fyk!<2/V7t̚V7Cr#qV|kQ֬p/rVBhDW8o_ѯ`_4zH{XT7պ?{Qn.m`G?nz["<+o]SXׂlL?;ehi7B+ hrެ,d*|keup7׉VV?҉$Ѹ\^γq)駐{y2Xxp=1/$VnuLzp9o,QMvO?yppr)Ie*Լr$lNk9_Uv/"6 I ̠l1AJj !vS_|,E SĀ[i}?-%,9?$"";gϯPcWb7kڍ/)56SNoЈvLΞЎ3~Q󙺱C3_ٴUś@-H:3`}G}89~˰ڱHO%v3`.Y9ݬ"SvR C.k遃Ǻ/ڢz FIwtwlzIe̴4a){VvNUޡlKUjUu-p/9 HQJkK37߳ /U<#*ћX?}kmA l\v1<*h.?l.f7g)BdLH$h`X&"o4 {/#mt>1y 4N~l .عIu/2!}Q/6 MԢh=tyΜi)I Xf[J.sSFEӮ+wbh/ e#\oX`r58~?tNJ.=c}:0 FVL!Hs"Ku.0bL. D dAaNJ+ȇ'Ru}[N c٭N@F5utN5<3iCokE{K׾D<6<őpȔst9XSpi">Մ$ f Nע&hjMBVO )yw+ ݸd7YsPyK.e$kG`:L}. ԋ0AݏwܱvJ[G$s8N#廛k.L3`zp'ZOձje9^)OC2t?D?qk -63O#O`ݫ0Bۆ́+(Us(8Ebn6Tѽ:8vwh<'Y-u|I*ߍ4IJ}K` q E ,,8'Uh]ZsS~>~Mј# #i>Wʚ; 0~{k6|&lWkM:FlX?8f ^Ch\ލfFC84Ӧp$HnMAqsӏSZfd_]}҂+%`{{[8H3IZ/_Dք0($07gN<ю-Vi)>׫JApXxc.h2Feܩg|PeZ^;w/MЮYn^|t*.E1p> 57\^cWS XQe g]2Ho qv{4XQ62/|?jeu[-[" I׳M.tA2w\_C)}T{WЦDH&xEq7MYW04]%l^'Q;j?_"lOJ} љc76nj%G40UPǚ^ I+?ྐnhLnGn ~\fMQFZ}2TNj(!)p.#H,G10( ҂^ՔRܯ]1l7)|V{g  7UFt2p Wz]ͬMj#:'27+b(W'F@^$oJ~JFfnNWWꩈaw'3 s0Oݕ: 7IOŌ@04^E잁`\gOd =WH!&=3qq2 |9QVN~*# $G+c&+ ~HD~55sx5Ͼ`ΐb<ӿpZ,z00~euRn(=xUHd^H"(l@PۼQKw 4-t牷#r֠T]RVkb+&M>|[Yտ)ݡ\@R,â9IFAm#.}T~gm+dz+`K~uc-}`+ ޲˗n.l6ʮ]-ߐ)b܀p"7 t斐yPnKn[˯a0G*f?Xͫ|Ւ|Gg ;ަG-ÔA~4U~ ܔPY(_{*u*u Zͫ?Qe51>(S6bUݶ"{U 7[VR(+K4rL-* \5R0k;M#KѨSȆ%r[x`-_Ӗ`+02̥N^5JU"J[7؝>RQe>H&x.DZJ/!>QGyheKnQXr7Pxa?p(<t4Thc$B~Z7h%r6 ?δ+LXD[sk _ "}K^B~[991T䔳tp Ra^掋wwװCǷ$3@5/_NհE9&J;ohȹHec5gKĭ 0-eFFyt3E83zAHV SGiyc]P(w7+=Hh6r=L G4Oa䒅wϰ2HpA<7Ӟ購Jx󃝆LЄlhB wec>E[.'#(K]m;w=wO:&[ymd|'ЇJNOQE4miԁ(&d1{͵)=n[k-SvRPh&6є-[c]FXX  .h<`32bїܪ {`Jk5%JXXo5x-G[Zj鰙_)+]kfh'S*o<9ы*zCK ^|~៛Iiq!WW"oӑQCZҁ" Qmdw^v%rml;:Y<1 T sϧ׉Hl̛\^֭$gtbO.\b8bbC,Q?15ۙoY6sl2mC/+sy['˞n9Ѫu%ITxz rq:n9  '&*$nDxHF`Fml ‡^BJPQ x`"RKQm)V$qh¨sKE2T (^p 粀%|{ät75G;JOEՋSȸjS?„-Or4x 7V,eNx;>Vu g5x'@dldG{i ~&1 QǮ'CDAD i #*o@ehA47JJVOʚ0݈H-\.G %'(3PrzPJS + 9&Gо'$U!Jha^Y !DnDr*V >)cKj[2]L fg~@#lJ-v+gWôv#umR5jX=z_^ZĸS[2F~4vAXR- 2pQnryD`1w46.:-&%G;,$wtC /%R(f_B?tW ?ka`0?;8p-;Ll+'od)N9KOrs&Ǹ<4 Cqr =K!mvy:/돈3G`Z`ZgV붯ry?qpk=(HHs,<X#F>9&mIyp76$p!KE%T#:+h;6IAz2J1p !X,qnɧ$x ]&| d F@rLc#0αT߱ ugDw/v 8%ʼngvܓ2"~gʉbfoϽ<?Cy?{PNHvH}̨Z6őӷxv7vPv6PRZ5Zѹ S' X^Zo&@-[DkaXymU)ȴ~yfЂ49rh?8YKBk ]w)Y vK!^dmv.1p9a`7:&l#FXJx|a~!Q(aW嬞LF\qRWݐfہB *̱zWHQhvEwXI0YA/O$ ,yI733W `!6lW>繾_JKqv<ۚD8[2Jh+]_DγS-_OSSHX:8Yc*~Hٙ JpDs33,c=|=HIkUڪ"_CmZB&s-4\!w(4zc_Ծy9ӕQm = UmQF Ͱ q3-an:/sŞ[j%:sSazVYku[O IN%Vbd*Kk/n@0,,nU=tKysNgw龢Y$"kX/_ڱ `;:%`вS ټ~$J#6Ehڎ6 3kS|l\ARo%6 8(;誣۹BKnuNox16jmD|TjH@)pk뢅R X"JTx~ (oEnІvlu!3=m^{-uo_,أr*8c Va2o~zV–3s'B"ƣefSJI'uQw"u903XV N% ¸y,,y u}Dh6h y{`VJ K,.a~imGhv)_JTW>1pQ9[|ؾJ%^.;WR!]BSy55qKeˆ Q 5aFuD0)z9 rS:Ջ V pT'1}3"(a?Mk2 l.%j9#?7.k=5^7q2#N C G%!fD*vGL^gq1}X@4o7e aŠd $y'PI[ތt?`m {׍8ܟ0Է-Z6.b=IX7}wga瀇 ϖC5ԡrفAjQ:QX9 5w}cbKj^j& 3ޏ:M#/con)uEۭӹN-? @$wK .M}/(a Յѩ%FXiYǦ& +HOxW07[s4Q^8ΏPͦZМo4F8DgIe?T$_A))w;` zYE l!IGD* [$% h湝-pQxZO%%<]Z)zMOD `Р JB"_fm%' xJ CSEnZ;&ZPD{%\DC!yB2qmA؞tˌUU kB ߓkI/~M61_mv> Z7@d)_1|ŸqB7 Nˡ7txτI9)B;c3~߅(B RyPb(TƖptSAڌ{S)k**cCM [Eח~;=9LS&"bk4mW9*Lqܼ$/%p"\H9J)7TqZH9(p8If5&ZWҼLd;> bQ hvrݹY p>e  ) 6ʹ!&83t{xc&Mo3,]Տp܂`DWQ ÞҶCBd`@q?iȜ%`UE -CFgϭkA&@'=5@EuꗇmࢴyLд_T֧(} ; m$CAiMzB8nY\sg>w0aAƜ* gaQK}djX4m&9%.Gsbڷ4(\+Ae$4>Z P8!n(ҿx"}9PgrQlp- ?,P[Ew> chjؠjႻ ;{8Ggw~Rn#Uc5'@ $ȵhGr:xgK,$dIӡlIDL sY3Vim OӜt>,Ky3#"'L+Oޚ{o1[2,j>|xE!mDbHߔT}N+B(V5(W˗ I ПӜ}_nv-'P2rLhỶ-!y.x:Yi7H*}ǐ1eҘOս$0=Uʤ%L7@Z;6&R5RWL ~,[@t:\yڒ?BCu#u烥+$kc7Wu͖-j&T$[5YC?'RQ%oLpStPeKydܼUt>j,@ -IJm! 4i,Z)TꠀR@)> &t |SQ;/Kx't1f_k; [c;n}au\ c0=IJ/"ZGZ`%.:g3=ARHFn`u|AvԵ+ )dO~,2-䄘Lunq2ѻ%5׸Ld냉 Pyt8HwuJuĬH-_d*/]-.?ҡ-a|X67Fςn5[^aQ?,!(:;;J6RŰ3uNZ┋~L( !Й~(.RzzgrA7h%?+^֓H=KgEa:CA4Fv)4xNe R?} (1O p$%ث;fmj]TB4wz<1c|Zao$kz8MSPj'֙HJCDl&$QN*"`;^fޱ8@)9>s;Hg]/o( m8mLGxtZE )T[cp۾L8ᛢAI)B$7vh3.NjXǂ+n3kIp8˼ 6GI/(6a6srʪ@`AxXwG+<g"ZXdLk̀ `i?{/2"?orbTiOxw `RQ.zBUڌ&!%"7ֻ ` [5)3kp YC]rJH{B 5l+\ȱipTVތ&x+.>zM +W<㉏U]!N (l̔=)r$@{gt^y&P 知?7>nFήQųr񎑲MP8藌Xk8EJA^NIP [Cͨ(Ҍ:8AQcu"eqLKxĒVh\2D#i>CE}3"Y{C9Ev#\MI(pH>dM&nC8ͫG]I-_S,|w *;LisD:doN(O;;@¥4}[I2//[4e:_ݮDh,a.Y }:kGqlN!bwl KɅO$0Ec;kRR?)z7D` 6"b+&P8|TS}I8:ʅVlӭ\ IfBl\9)}(L*d:nJVzTq7hE7c& ܺ+Yزa`ksj\ Pjds)3Y{)xRjjD 77 ],­= u /D,ηuBѠ "+sAacd3<…Tm0 fQ~O\<TmWyFsz*vV٬?v#l٠EuRxGhA"GrOl'4fXU<ȿ*G9-W;v;Wk}j싧vv@E bQϣzs z+3.y-iV~I%qyhAc6Xp{Nkź/l``s{Lth- "5ŋ?lN=Mpf*$S̹L8c?&gH OC$uk HfTIcpGKs'w]'~ ]MiF79c xGWg*L%_PRuIހ;G\C;6y7 ;5D2ߴiC߁$9_ë?9Q RVi)9yA\ :{s>DTЇoZgGLl4+Vٙb~|nW6Wl!4-ujUyzDžbZ3ʏ(H`ߜ@?H\\f7<'+~;̭ 'A;/2gb؟C?؅8].EV 1Ԡْ4Ȇs+AWOQ$Z~5?%"=ܡY>䐡{|5"҂qZi+LW/˹^sL~0ZomLSd-AXRԦL qj/Δ!uyWN?MѦŪn fL1M!P\((כbmצgc&x BlW~ > kqݧZEP U3n`|d T si G$ :1i]F`|AC}| 8%Q"%!`&k`.q]b6:k\  B [q*j_w /1+㻜Vh,NF p$w \p akDhISx8#ݒw%y*u5YꐦsU'ExVv×#v$E UKDpYu-Z;LxZ<[|iTW)ͱQ›iz:A6MXțpF.&w -̊3~ /~#coWxF E-S=RlV*$ Sq7-L]^aY _o<32`s.ӴƑ.#H[T[.1MPO&c~U5[pK"cX!x̽{?W{:訸Q: KTǥfj0J-Ëi`-܌GŨc#lss,1GOL%&QDx:&wߟfT\z+l/sy>2y* 5QdaS]PjiG=x?{LD W:z$zrY m`˪`W?v?a-ݵ}hLD{GMlK!J  Fii)ޚvkHoqE[⊶E^J Rvc7nč2Μi񘠠㒜sl$Yw0 .uh͍`9t 1}0a{8+mm2 zPD 6::еuua}ԗr.xZwց?f;m|_'K8a90BP k*cv%b|@BN2uv|\|Bn ˡ)M]F [J]_ݜ.gtA-|`Ʌ9$MJdy2n`ynx;mLBXm0ε(\0E{)RLvX(+kraR wʟMzF^: ;BcpTUk[%)25tx!UpS5.LUAC4;_PQT쯜ыr &F$6eYT;%Llvj6dpaC&R07AN##,:œ@La[L ePDrlCpd]+MZ4 }nM^K9C Hr \ h$#"Ul /1޽ɮ\F)"aQc*Up." V]nzBS9:ܽv-Gl)Z"B5Yޚ\KK`VgY@:^nREބ)b_TTnqjΞch$`&OaĦF]4^58QЗخ-%N3!NjEi(l^*)ZcP^؅V>P!Z6vgS>DyRB'=\rD H$%T_z|hfhz 845Oyu$P'yX9e 8ڳ%z"nYD~˸]A~u}6+>TK/LR/vh nᏱ>Rdr%<}"{SrxW$wkIWva9NACeP5a&0n3xv k'ٿ}@Yiu5B$ĕj.1W4}A%#utgϲr ':/pRQD l~Cri )S_`y>7HSkVfH(<;*ý8̡xM.䐂ϘnwU;0Ą+1-=H3XCOO3H#f(T-9q_ab-thŒusL'{?W}^ Dc븫a잷òuJ&tLxg(Ka3KD\tB3Y&0'ZhU wxCBLt 9U_U(J!y>7EN`" }AUpQ($=1oR]pl1LE}C| Qg1܁:C5f8'?3a%ί?5Wj(B4S@* O$bI@utP /9[vqP,۰w|.N~"UE&VT{# d[5cu+pmYV tWj`)bԎ?wz%ib"NScU o V\?`S: *틫B֥ TB{H*Vp 9ę w0dKPzbfxh*Q8r{^NC2 3gbB([|;c~BNq:d%A?tzG/9̀])vt``H 34'1ԘUӰ>7ǯe]\w{-\N>͞ zҋ,抨lzæfeqU7h{Aq9/ӧwrX=' G 4898j~ט՞ {l)b2twP}A|l7`Aj7.,0BQ 0#%\ 7U9IWm}z{"faJ͵K\CIF2G/]ɔ.&k=5EUQ{+Ve' kW䨾V,: q$m*#3I˪~GF.${ 'y6ӱ1V̱xfѢ|G@"L/| ?D2^k Ev%7MTL}ŒO6(F{̚e% 1O%>7#8P䏼b VmNlᴥ٧CS~PfuZۈƺ5A] AgI7~, ]ե v躿w`j{i!WZzBPg*8Wv<%}21.'PQOkd1)J*ϝ>\;ILRcoDiFf ]V}pH`PP7g %|v6%ڟFH"į@V=L Mw%tnN95Md<ɔVdWC Me+Gy^"V.X. S 4Bܗ޾L#ϞJ:xeג @qli֫!TCj@YT{t,ϱ=Xn^[껮d4-,q0H(н;r/o. mdj6sgj"?fpli b9! xl)šDžXy Ea_" g1`NEe%ރ 1mc{2$P Ce |, M)nǧ%8/$@ 7;3aY_R-X3զ#Ҵ^01nʧN[6*5J,QY)@@VFxn) jyo _!Q"ZKw:f:NX2!;m(Iulzwl+iۇ(WkVq9۷,f%^ϽM ,s^G&Ns+b4@3~֏viN9o"C?׸>WNRl0q}-\!o].,/b:2@Ϩ}оXQ2gG>WJ3'pk e%S-C` aVj*8\ ka5(!eq=r4PŒhT ~zԧ|v曹ԯ|F67܌wH:Nm~K 52>.0H7!k`%/de%vL>*Y>S~uiĪ=q;iǎ^$-$U׆QIPyt°Px~te@_sEz!#V:n7~oў)Mx$S6uBVN&|kHurg7_,w_UIXSp'-Ҝ؞sػKs!l[7%r(f\L6)Vou yRu!<Hdrp=8!QG<ҧ H슌!y <9H,W@])ap/yh>d+$VP%INnnw``\L׾7&MKG,XZJWEw~Q#Ph+Q䰗k#j5XHOl:9jD 1ĠfL[k y#+9HeTr>7w(%4X67Pc)(j1M Q>uw,V.J{+kFh!BQ !9.EAk ܮ!|ZK>謣l^Z:$a&`$2$I11Vׂj`YW|Ls";G[ڠ:/|qT5-~AlXɟs,2UMyqp2AAoի{[GWg@2f5Ad]D1>?WDz/[hiY`\44C Fo/ \%.9Aqů(TCaM\{O1E|(<Hi 2Y۷Hf۟TReJ,jffNZS(U\eE=׳Ww@qbWTj{QުȻVhXUdL$AJ i'Xћut] KW,%/bR1OOʉN2 Ki ੆oZM%{Ie th(`^Vc 9Jy-"Q7끶ѶX=4kci0(}ӻ?ŇR:(ln~8AHԯɗg"E\X* ݅LQϰJe=ENWt~$ `r%6S^bQ\3k`=]Xo IRrFņ0}7#VD_|E+^> m.}_G a}]XP׈7 +M}rP;z ez?+*=ضn8[MNiý!5U+l$WùqpgH>G.HsOV{w^u-n|{v;~l-/_[~[fW{%/^y$ݝlIӞ0& A8:g@˷%8c!j:#FR>]: IDo/_ǐ2( SG"%0%MB !L_xCr,$*o 6"e G#1əmLYN6fٞ,6z:tO59$Ϥ44y W="&\Vkv %!R[`\y*&WDw8=}\c~`}[0 )| p 7_8Rfc-E=~fz{ {v< ;?h<29Z>qEԯ.&'+<b&5 5CEq BlZ^rʾR(%R5"=Ӫe%O <18I0dhuć H:*ĉ MIÞV 59SH}ā.\VX :2sŒD>s;Ro qʠtlUk{eo 0q{@# Ӽ5s_lZЁ#t,TRA6Ojjs n4 T jYU&D[@hg2%y'i2# |4ʁ G{ǛnJ<+⧳ٹ"4hfllX~~Ys<m8hZ,( rY1 tBEiBScfB "$}@T|K7s#|'&tÖ/Y B}Gz®|Rq*JlO8p/rs4xIOg&C+:0.߁V4VU5DtCzUOxC`n|-dNZxﶃGu*-UsɡЗz(Lšp"pI s7eL M;R6 9C^Þ}*^ĝ/K9700_jイ PNdV#|R+@gkJ)p◼;66Al](:mk4~9xxx,- <u>ƒAVK }f`1;ݟ]qRvc%@ϒk2Cni% !pzST`cgr <3bN~WioƮȎ]J  4,Gْ>cp^!а4Kʗ}ƮXAgU ͝"rSRjIrk亱Z5>-Y5vVaN¾?oKeWeY 4C=z\r=o:v[JxHg@/tgg:n|e!lɶQ #kE6<ɪC,kJaUfllm'!Dex#O"҅:Tp{U\I1[׈\嫯P6rpI{P $KRiV%٬W*oAP$*Tl}}23Es(&˂:m˭m  <_UkLcr LGQ I]l*<1h}\ez :*!1B$ xs+tC>5l1U4={4ieh>}۫8qa! UQZC-Lє?&(D`jICgS򻄆#8Vys,$S^wbkrtH4_7jMϻg0K|k?T/j]B"!@=-8LͽN1%}G7Z:5C5u&<Gh?/8X6~4ZBh8OY\)Fδͥ5+H>f9$ŦĤ3mڢRhlq$^IQ;(3B`7&ޘ8ۋ?v" 0pX")[ksˏ-]q{%[1uRSU/x~e$EBh67֎fKiÿ\ff^R|V7\0ot)R@#;d% E"wB`vnbTnQAwQ c?p'<:*54ɲ|!5)ؿL``1|>C@ nS0]Y^1((U4XIB>0(Ivwؔ P&8n4ܢ)s<9}[ɑH$:߬פI'[? ];$l`힤)9ݳXYq_T2IQb+ߦk#u-%_Bbe)PA.u!2_@GbKڦ&_^513ok͘hѾgpCH! O3A$w)?ACgB:< ZުFH퐫fIj iZc긧%2}G%Ӳ7's!EKRQCA%ހ=Qd}smJ5*ĸeYE4/Mq D ~—k= /&"䒓<`߂?R4P?U3!zWqon>fSc=C$PĔ0 DqhaTVt ltpg-X/h3T4<3p/(N|Fb>k;JS%[= UF^ G8L}KО9|۲}нd$xJ ҋ?P"lc5r0Ԡu|DCOj>~GLX~#!:#fKJA7o n˱?da}(Ýg6,Igꯜri.o~t `6jUYtfX֚+tSgv ٿm`t<柳LZ:bJRV꾞p`rc9GZP+) <m 2& 1z刚8_4-N OS-ÈM(j 5O;67fqFk,o/8ІsOKPi7nG.mM'}ddɑF%=Kwcgc36~TjvO䶫g+3[[- >dmhjH00BȆy%͐ĥu=`EGC L 8>xMg ^FH^eG~ΒTjb tHKY1Rl$2fQd?=BG\4ϦX=C,B3Ayբ,KRwSj3l5s5Gᙅyz[_r`6Q1cO!C~ٓ[ŐwO;25Cw)ôvwm KCtiLs^fTqOS4C[pWNΰa4R1)j+F8|7㰎4mꐆ6+C;dNh%fX}}U~Z+4g~Xs;%)vCvFu4g1\Tw(1_a{ja,3V_yge=wF^@ ͐?B$I}] p{HѽM{_e|hb1:Emh#Hl Xq,pt r@Ì$A\,>awh$f3xe.4.J٢z Q:UM'LMܕ)}9Cv51+Da`q4b30m#uo9!>#y ,Ls fBoJ&H?FcϲhERn6|Kߚ+] ׸,$Veh&U yPZHh (Ve:Y0zl 4f]&t~_"Ac]ْ/o:^2}꜂z]h-ʳDRP'!aHPo\=t䷩)dcIfBRoz:W Lbgc^21opKأ/@hdߥv FN]UnXȧMDriyq~M rpx tuNSR3Re*p ":Vg ۫i-Ӻ ׯ!:\vǧO*p:v4$R@03wF} ?ns~JM#f6tَZx %X 7iUNhɨ4xV(D^Lҭi]_r7NZqlGށ̣Aʰar+B`##(yD?pL38R\F ]*UwACQR;r~A\!XZ=lXB< #EX%Oyk&f=-(#^8Bq͇Z4 ;d\`*;?SȾUWze5Ei:f{հݜa iޮ"?[&)IKGw@ê‡ rL ("CPx̂dh|!~}G[3m" QjO{7)J#΢?s6_; S?୾S˗)y;)gC\1[Ti+xD!!5RDƊ-hXD\2CRCGiCYB {5fi ioTy:D MXh#xHpvP/Xf]^*MOa'o'2Ãj/M"ɒ#L! )Uٗ F2~͠RH {zF8pF>ƪ^>訒;$˶n7^7z q_/?QSiHbȜu.F#VEl:4o˳ Y@yOuGtp-hfo`o x~8SI'9 Po>(o,&.zfo܈P6n2J9ͱ4Ix85#$V2ʳtڃQUS輾7#0'v|c{PvwGU vIsG"ӿFrJo)GW}D*fh'1.עN5^؇"D;ew=O$ɛTY|zW餙+LwX`iP aRX&7Ty<|<.}|u뵄)d"l{@ߨ]5W(? I!sۭ FxZHrYHk%Pk~J֡Vt}wsy~w,8%< HlW#˝+[+q#LzW^x lh  eE:[ꅱVcpp%"Q6%!-):mJ+ł%(:]~J8`qY?OB D躃cZwKdu@,<ʸ{<JJHXi1c V^5/VzUzE"ydelՓS%aMU3P p4uTH2 6˗ &Qt@,/`謘nyZkgÖ0z/j"XfRE&{?<0n{gkCh5l [pa*:zr;;Nz`c<;]5|j:UmfpAA4T%n1oo93 r ,LNmȌ$D|r& 68^~q |`ؓMea-j5u%̰39tFe2/r<1?-&u;,[O;F̡"qXE>Sh NU=MxʂJV@GS}{|ox&yПw̸zQ$.SRG(|S8;ɤEiw10*%`7FHF-'!a(:K1qBUiLG7hYmPAQ~LZWF n]a|iKEБEH.Vkgބ[#i> ~||Cǻe\qnj@q]dKB{DrvE8בZ&,`m'1JȧSe{wJĺޤ+S5C' ,W̓=M%1Ii pTTEn6c=.@@h#JЈq]3O/h`;jSyz$q4c~-gLILc; `Wݘjx id7#R~]4k-*95G @sRO!! Ȏᔘ&zLw=*xϔb,إ߀d j+kZYkD7Z>ޞq9Ë'B|;O+s+?<5OPP*mQ?@OqPoRo[4w"uḱVѭ)P96&2H$ނ!n`uQ*ue &'h-~wĖvM'\xhEԊ{cL`/:I|q~Gs-5J(KAy'jڄ}Jw 3QB96ݛ2%XUˤE?%%NhZe w=2TaW4yyXq5;E J$i]M6xh,}铘sRapaf/~e=xdpWp^@+ K/ߣN{T`4Q.E&]i"vg1 "d52p-aN&նo(q8?')|xa/ zd~{hcؽoP|k;5sIc$]-o;`+,(M rX;3/BkA?_ geZ {NMj1TbC Ӆ4טk8.?j-0A\˦u7K_5LҢEd=)$P Fo;ʋo~.Η䚭elB90l"+dYü;|KWsa6A}WaN} z Hjãq[ts_S-, $Րh}ܟ$U(3+4kyW!+y*-J˝ H"gxOqB{Q1X h[DU]TF!|/'"nHi}bɈK7%._됳y#l$ i|Imb}܎Fov| 2^?m䥓h1/oW~ԋ 6r*4;k29Q@^]ަE%t Az`0Txi&FvRϧ[5/ EC10(ԏV!.5.y3k%:3tLv j[p'-:z 9TX åZƫT?TkC4sףҦzꧡ]4xUwI MDpf5Nbs{6VOu{&̯ } ~NJ5K1SCAgɆ)v(NbHYɪ\ /|._x[)L'&R÷/{GQ\9D0\}:$=L}Wd=>Q{ 2Mϝ 9,ţDEٸh$Ⱦ/G]2l8dBII2XYRώ Xw.TP]} Z{;Bh3db;73VG# #k*]Ž:{`Q"ߒ97ti?'hcԍy pMc5pcVkX4LkwųB;jFwJV4ƾ']< l >/ƍO<Ǔ]c3M959 N(rǯr&nQPԘFys2TΣl7qPTK79© { wcwŠ '^˩S 鈰kuAB Lhzʪ_ @Zej\Ѣݝt&h\ 9TGO=}OM})hԋ/\/OeaX3lұ $VsY@ qį^9,5_ 74,|~={ץ;P&X\ekoڥ.t{R?:jUY}9vAgTIb,ẀNYEFo J)S/)ldb%2>R5Ùc8g[*_Cy 薂m&N痲< $g}^"b;MQH0V13Y-sojl̲;0!~20l߶+k@9f(GsF gbS2vp=(5BrrC[&fy_9TqVʦcﷇꍓ: n4&)w>ͣԓXa t˦{ /8 UP4_0 Z`sPz^#\{Ӧ]U !_[l'