kernel-headers-6.6.148-1> )lp fb1d30e7076d95212b3e13d83e70f8965e196b1e7ea04085e72094d259817801d5206f3a64d4d49c57e8c528b2d702b2b093074a <<%z.c~>B ? d  Sdhtx}   ! 1 * .>Rffvwww{(w8w9w:zG 4H 04I @4X D4Y DD\ Dl] Tl^ >.b c d e f l t u v w $x $y $  $ 0 4 M q t    Ckernel-headers6.6.1481Linux kernel header files mostly used by your C libraryC header files from the Linux kernel. The header files define structures and constants that are needed for building most standard programs, notably the C library. This package is not suitable for building kernel modules, you should use the 'kernel-devel' package instead.jlocalhosta7ROSAROSAGPLv2System/Kernel and hardwarehttps://www.kernel.orglinuxx86_64L`  `XaO HPV*K k I/Faew@""AC!c( ED V3P7Z{aE". )% ! ;&-"!Eo.&uCr r' R .+}7 !?8!/#\T:38ygIJ t*s Fa@Wc rV @Jo Mj=TB(y OAsq]\/@W <my 5r+Z c 4 4 syԓ9Wy@G(1ع  c$XM  -N;Vrm$ $vnPYe CU<#Xid  #J @\/U  3"0  2 ql&E9Mkn} \X& M]+S-#$p*_AO1E">5g L  h ('q_ n *p v2?YI O(=TO755J3! "7zVx > #e, ,BrfXPK D1* 4] "y:C$:%.($-y0L!4#VV(i  j ]C { ** CFyl%Y-$&P3% %I:5&m T@X=, [iBiteDasher BiteDasher 6.6.144-1BiteDasher BiteDasher 6.6.126-8BiteDasher 6.6.126-7Mikhail Novosyolov 6.6.126-6Mikhail Novosyolov 6.6.126-5Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.6.126-3Mikhail Novosyolov 6.6.126-2Mikhail Novosyolov 6.6.126-1Mikhail Novosyolov Mikhail Novosyolov 6.6.106-3Mikhail Novosyolov - [bot] upd: 6.6.145 -> 6.6.148 - Changelog: - accel/ivpu: Reject firmware log with size smaller than header - afs: Annotate struct afs_addr_list with __counted_by - afs: Turn the afs_addr_list address array into an array of structs - ALSA: hda: conexant: Remove mic bias threshold override - ALSA: hda: Fix cached processing coefficient verbs - ALSA: seq: close a re-opened queue timer in the destructor - ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC - amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN - amt: make the head writable before rewriting the L2 header - amt: re-read skb header pointers after every pull - arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates - arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234 - ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() - ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI - ASoC: cs35l56: Don't use devres to unregister component - ASoC: cs35l56: Fix potential probe() deadlock - ASoC: cs35l56: Use complete_all() to signal init_completion - ASoC: cs42l43: Correct report for forced microphone jack - ASoC: mediatek: mt8183: Check runtime resume during probe - ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable() - ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable - ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe() - ASoC: mediatek: mt8192: Check runtime resume during probe - ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link - ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() - ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb - ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop - ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup - ASoC: tas2781: bound firmware description string parsing - ata: libata-core: Reject an invalid concurrent positioning ranges count - ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered - ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts - ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning - ata: sata_dwc_460ex: use platform_get_irq() - audit: fix recursive locking deadlock in audit_dupe_exe() - audit: use 'unsigned int' instead of 'unsigned' - audit: widen ino fields to u64 - binfmt_elf_fdpic: only honour the first PT_INTERP - binfmt_misc: set have_execfd only once the interpreter is opened - Bluetooth: btusb: validate Realtek vendor event length - Bluetooth: hci_qca: Clear memdump state on invalid dump size - Bluetooth: hci_sync: Protect UUID list traversal - Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds - Bluetooth: qca: fix NVM tag length underflow in TLV parser - Bluetooth: RFCOMM: Fix session UAF in set_termios - bonding: fix devconf_all NULL dereference when IPv6 is disabled - bootconfig: do not put quotes on cmdline items unless necessary - bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline() - bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c - bpf: drop bpf_lsm_getselfattr from hook list - bpf: Fix ld_{abs,ind} failure path analysis in subprogs - bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized - bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() - bpf, sockmap: Reject unhashed UDP sockets on sockmap update - btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8 - btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() - btrfs: free mapping node on duplicate reloc root insert - btrfs: reject free space cache with more entries than pages - can: bcm: add locking when updating filter and timer values - can: bcm: add missing device refcount for CAN filter removal - can: bcm: extend bcm_tx_lock usage for data and timer updates - can: bcm: fix CAN frame rx/tx statistics - can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() - can: bcm: fix stale rx/tx ops after device removal - can: bcm: track a single source interface for ANYDEV timeout/throttle ops - can: bcm: validate frame length in bcm_rx_setup() for RTR replies - can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER - can: isotp: serialize TX state transitions under so->rx_lock - can: j1939: fix lockless local-destination check - cdrom: fix stack out-of-bounds read in CDROMVOLCTRL - ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() - comedi: comedi_parport: deal with premature interrupt - coredump: fix pidfs file refcount leak in umh_coredump_setup - crypto: rsa-pkcs1pad: Don't WARN on an empty digest - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning - dma: dw-edma: Fix build warning in dw_edma_pcie_probe() - dmaengine: dw-edma: Fix confusing cleanup.h syntax - dmaengine: dw-edma-pcie: Reject devices without driver data - dmaengine: sh: rz-dmac: Move interrupt request after everything is set up - dm-verity: avoid double increment of &use_bh_wq_enabled - dm-verity: make error counter atomic - dpaa2-eth: put MAC endpoint device on disconnect - dpaa2-switch: put MAC endpoint device on disconnect - drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference - drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources - drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips - drm/amd/display: set new_stream to NULL after release - drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT - drm/amdgpu: fix aperture mapping leak - drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved - drm/amdgpu: fix division by zero with invalid uvd dimensions - drm/amdgpu: Fix VFCT bus number matching with soft filter - drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx8: drop unecessary BUG_ON() - drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() - drm/amdgpu: invoke pm_genpd_remove() before freeing genpd - drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() - drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) - drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older - drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 - drm/amdgpu/vce: fix integer overflow in image size - drm/amdgpu/vcn4: avoid rereading IB param length - drm/amdkfd: Check bounds in allocate_event_notification_slot - drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) - drm/amd/pm: make pp_features read-only when scpm is enabled - drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() - drm/dp/mst: fix buffer overflows in sideband chunk accumulation - drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers - drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers - drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() - drm/i915/gem: Add missing nospec on parallel submit slot - drm/i915/gem: Do not leak siblings[] on proto context error - drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU - drm/i915/gt: use correct selftest config symbol - drm/i915: Return NULL on error in active_instance - drm/i915/selftests: Fix GT PM sort comparators - drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() - drm/nouveau: fix reversed error cleanup order in ucopy functions - drm/radeon: fix r100_copy_blit for large BOs - drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() - drm/vc4: Prevent shader BO mappings from becoming writable - drm/virtio: bound EDID block reads to the response buffer - drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker - drm/vmwgfx: Validate vmw_surface_metadata::array_size - exec: fix unsigned loop counter wrap in transfer_args_to_stack() - exfat: validate cluster allocation bits of the allocation bitmap - fbcon: Rename struct fbcon_ops to struct fbcon_par - fbcon: Use correct type for vc_resize() return value - fbdev: efifb: fix memory leak in efifb_probe() - fbdev/efifb: Replace references to global screen_info by local pointer - firewire: net: Fix fragmented datagram reassembly - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() - firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context - firmware_loader: introduce __free() cleanup hanler - fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() - fscrypt: Add missing superblock check in find_or_insert_direct_key() - fscrypt: Avoid dynamic allocation in fscrypt_get_devices() - fs: preserve ACL_DONT_CACHE state in forget_cached_acl() - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list - ftrace: Add global mutex to serialize trace_parser access - geneve: require CAP_NET_ADMIN in the device netns for changelink - gpio: mt7621: avoid corruption of shared interrupt trigger state - gpio: tegra: do not call pinctrl for GPIO direction - gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings - gtp: check skb_pull_data() return in gtp1u_send_echo_resp() - hinic: remove unused ethtool RSS user configuration buffers - hwmon: (asus-ec-sensors) add missed handle for ENOMEM - hwmon: (asus-ec-sensors) fix EC read intervals - hwmon: (asus-ec-sensors) fix looping over banks while reading from EC - hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop - hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop - hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop - hwmon: occ: validate poll response sensor blocks - i2c: davinci: Unregister cpufreq notifier on probe failure - i2c: i801: fix hardware state machine corruption in error path - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) - i2c: imx: separate atomic, dma and non-dma use case - i40e: remove read access to debugfs files - IB/mad: Drop unmatched RMPP responses before reassembly - ice: fix LAG recipe to profile association - ice: use READ_ONCE() to access cached PHC time - ila: reload IPv6 header after pskb_may_pull in checksum adjust - Input: ims-pcu - fix firmware leak in async update - Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() - Input: ims-pcu - fix logic error in packet reset - intel_th: fix MSC output device reference leak - iomap: correct the range of a partial dirty clear - iommu/amd: Bound the early ACPI HID map - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() - iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() - iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() - iommu/vt-d: Disallow SVA if page walk is not coherent - io_uring/rw: fix missing ERESTARTSYS conversion in read paths - ipmi: fix refcount leak in i_ipmi_request() - ipv4: fib: free fib_alias with kfree_rcu() on insert error path - ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup - ipv6: ndisc: fix NULL deref in accept_untracked_na() - ksmbd: bound DACL dedup walk to copied ACEs - ksmbd: defer destroy_previous_session() until after NTLM authentication - ksmbd: pin conn during async oplock break notification - ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL - ksmbd: validate ACE size against SID sub-authorities - ksmbd: validate compound request size before reading StructureSize2 - ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl - KVM: Introduce vcpu->wants_to_run - KVM: nVMX: Hide shadow VMCS right after VMCLEAR - KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available - KVM: x86/mmu: Fix use-after-free on vendor module reload - KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN - libceph: bound get_version reply decode to front len - libceph: Fix multiplication overflow in decode_new_up_state_weight() - libceph: guard missing CRUSH type name lookup - libceph: refresh auth->authorizer_buf{,_len} after authorizer update - libceph: Reject monmaps advertising zero monitors - libceph: reject zero bucket types in crush_decode - libceph: remove debugfs files before client teardown - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() - LoongArch: Fix oops during single-step debugging - lsm: infrastructure management of the sock security - mac802154: hold an interface reference across the scan worker - mac802154: llsec: reject frames shorter than the authentication tag - mctp: serial: handle zero-length frames to prevent rx buffer overflow - media: airspy: Return queued buffers on start_streaming() failure - media: aspeed: fix missing of_reserved_mem_device_release() on probe failure - media: cec: seco: unregister adapter on IR probe failure - media: cedrus: clean up media device on probe failure - media: cedrus: Fix missing cleanup in error path - media: cedrus: skip invalid H.264 reference list entries - media: cx231xx: fix devres lifetime - media: cx23885: add ioremap return check and cleanup - media: marvell-cam: fix missing pci_disable_device() on remove - media: meson: vdec: Fix memory leak in error path of vdec_open - media: msi2500: Return queued buffers on start_streaming() failure - media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe - media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure - media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path - media: nxp: imx8-isi: Fix potential out-of-bounds issues - media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding - media: pci: dm1105: Free allocated workqueue - media: pwc: Drain fill_buf on start_streaming() failure - media: pwc: Return queued buffers on start_streaming() failure - media: radio-si476x: Unregister v4l2_device on probe failure - media: rtl2832: fix use-after-free in rtl2832_remove() - media: rtl2832_sdr: Return queued buffers on start_streaming() failure - media: saa7134: Fix a possible memory leak in saa7134_video_init1 - media: stm32: dcmi: unregister notifier on probe failure - media: sun4i-csi: Return queued buffers on start_streaming() failure - media: tegra-video: vi: fix invalid u32 return value in format lookup - media: ti: vpe: unwind v4l2 device registration on probe error - media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() - media: v4l2-ctrls: validate HEVC active reference counts - media: vb2: use ssize_t for vb2_read/vb2_write - media: vidtv: fix reference leak on failed device registration - media: vimc: fix reference leak on failed device registration - media: vivid: add vivid_update_reduced_fps() - media: vivid: check for vb2_is_busy() when toggling caps - media: vpif_capture: fix OF node reference imbalance - mei: bus: access mei_device under device_lock on cleanup - mm/damon/core: disallow overlapping input ranges for damon_set_regions() - mm/damon/core: validate ranges in damon_set_regions() - mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages - mm: refactor mm_access() to not return NULL - mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n - mptcp: decrement subflows counter on failed passive join - mptcp: only set DATA_FIN when a mapping is present - mtd: fix double free and WARN_ON in add_mtd_device() error paths - mtd: mtdswap: remove debugfs stats file on teardown - mtd: nand: mtk-ecc: stop on ECC idle timeouts - mtd: rawnand: Add a helper for calculating a page index - mtd: rawnand: Ensure all continuous terms are always in sync - mtd: rawnand: Pause continuous reads at block boundaries - net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() - net: bridge: vlan: fix vlan range dumps starting with pvid - net: dpaa: fix mode setting - netfilter: nf_conntrack_sip: remove net variable shadowing - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it - netfilter: nf_tables: remove register tracking infrastructure - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() - netfilter: nft_fib: reject fib expression on the netdev egress hook - netfilter: nft_set_pipapo: don't leak bad clone into future transaction - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL - netfilter: nft_set_pipapo: merge deactivate helper into caller - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path - netfilter: nft_set_pipapo: move prove_locking helper around - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone - netfilter: nft_set_pipapo: prepare walk function for on-demand clone - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions - net: hip04: fix RX buffer leak on build_skb failure - net: hsr: fix memory leak on slave unregistration by removing synced VLANs - net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink - net: ipa: fix SMEM state handle leaks in SMP2P init - net: ipv6: fix dif and sdif mismatch in raw6_icmp_error - net/iucv: fix use-after-free of a severed iucv_path - net/iucv: take a reference on the socket found in afiucv_hs_rcv() - net: macb: drop in-flight Tx SKBs on close - net: mana: Validate the packet length reported by the NIC - net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation - net/mlx5e: Report zero bandwidth for non-ETS traffic classes - net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule - net/packet: avoid fanout hook re-registration after unregister - net: pcs: xpcs: fix SGMII state reading - net: qrtr: ns: Raise node count limit to 512 - net: qrtr: restrict socket creation to the initial network namespace - net/sched: act_tunnel_key: Defer dst_release to RCU callback - net: slip: serialize receive against buffer reallocation - net: stmmac: enable the MAC on link up for all supported speeds - net: stmmac: fix l3l4 filter rejecting unsupported offload requests - net: stmmac: reset residual action in L3L4 filters on delete - net/x25: fix use-after-free in x25_kill_by_neigh() - nexthop: initialize extack in nh_res_bucket_migrate() - nfp: Check resource mutex allocation - NFS: Charge unstable writes by request size, not folio size - NFSD: pass nfsd_file to nfsd_iter_read() - nfs: remove dead code for the old swap over NFS implementation - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF - octeontx2: Annotate mmio regions as __iomem - octeontx2-pf: clear stale mailbox IRQ state before request_irq() - octeontx2-pf: fix SQB pointer leak on init failure - octeontx2-vf: clear stale mailbox IRQ state before request_irq() - octeontx2-vf: set TC flower flag on MCAM entry allocation - openvswitch: fix GSO userspace truncation underflow - ovl: use linked upper dentry in copy-up tmpfile - pds_core: check for workqueue allocation failure - pds_core: fix auxiliary device add/del races - pds_core: order completion reads after the ownership check - pds_core: reject component parameter in legacy firmware update - pds_core: yield the CPU while waiting for the adminq to drain - phonet: pep: fix use-after-free in pep_get_sb() - pinctrl: remove pinctrl_gpio_direction_output() - platform/loongarch: laptop: Explicitly reset bl_powered state when suspend - platform/x86/amd/pmc: Avoid logging "(null)" for DMI values - platform/x86/amd/pmc: Don't log during intermediate wakeups - platform/x86: dell-laptop: fix missing cleanups in init error path - platform/x86: dell-smbios: Move request functions for reuse - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug - posix-cpu-timers: Prevent UAF caused by non-leader exec() race - powerpc/time: Prepare to stop elapsing in dynticks-idle - powerpc/vtime: Initialize starttime at boot for native accounting - ppp: annotate data races in ppp_generic - ppp: convert to percpu netstats - ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF - ppp: enable TX scatter-gather - pppoe: reload header pointer after dev_hard_header() - ppp: use IFF_NO_QUEUE in virtual interfaces - proc: Fix broken error paths for namespace links - rbd: Reset positive result codes to zero in object map update path - RDMA/cma: Fix hardware address comparison length in netevent callback - RDMA/erdma: initialize ret for empty receive WR lists - RDMA/hns: Fix potential integer overflow in mhop hem cleanup - RDMA/irdma: Prevent overflows in memory contiguity checks - RDMA/irdma: Prevent rereg_mr for non-mem regions - RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp - RDMA/siw: publish QP after initialization - RDMA/umem: Add helpers for umem dmabuf revoke lock - RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper - RDMA/umem: Add pinned revocable dmabuf import interface - RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device - RDMA/umem: Introduce an option to revoke DMABUF umem - RDMA/umem: Move umem dmabuf revoke logic into helper function - rds: drop incoming messages that cross network namespace boundaries - Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates" - Revert "drm/amd/display: Add missing kdoc for ALLM parameters" - RISC-V: KVM: Serialize virtual interrupt pending state updates - rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack - rxrpc: Fix notification vs call-release vs recvmsg - rxrpc: Fix socket notification race - rxrpc: Pull out certain app callback funcs into an ops table - rxrpc: serialize kernel accept preallocation with socket teardown - rxrpc: Use irq-disabling spinlocks between app and I/O thread - sched/vtime: Get rid of generic vtime_task_switch() implementation - sctp: auth: verify auth requirement when auth_chunk is NULL - sctp: don't free the ASCONF's own transport in DEL-IP processing - sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid - sctp: fix auth_hmacs array size in struct sctp_cookie - sctp: validate stream count in sctp_process_strreset_inreq() - selftest: af_unix: Add Kconfig file. - selftests: af_unix: add USER_NS config - selftests/alsa: Fix memory leak in find_controls error path - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs - selftests: openvswitch: add config file - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() - seqlock: Allow KASAN to fail optimizing - seqlock: Allow UBSAN_ALIGNMENT to fail optimizing - seqlock: Cure some more scoped_seqlock() optimization fails - serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms - serial: max310x: implement gpio_chip::get_direction() - serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch) - serial: sc16is7xx: implement gpio get_direction() callback - smb/client: handle overlapping allocated ranges in fallocate - smb: client: validate DFS referral PathConsumed - staging: rtl8723bs: fix inverted HT40 secondary channel offset - staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() - SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists - sunrpc: allocate a separate bvec array for socket sends - SUNRPC: Return an error from xdr_buf_to_bvec() on overflow - taskstats: fill_stats_for_tgid: use for_each_thread() - taskstats: retain dead thread stats in TGID queries - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() - tipc: fix infinite loop in __tipc_nl_compat_dumpit - tipc: fix u16 MTU truncation in media and bearer MTU validation - tipc: restrict socket queue dumps in enqueue tracepoints - tls: device: push pending open record on splice EOF - tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match() - tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev - tracing: Fix resource leak on mmiotrace trace_pipe close - tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args() - tracing/probes: Fix potential underflow in LEN_OR_ZERO macro - tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err() - tracing/user_events: Fix use-after-free in user_event_mm_dup() - udmabuf: Do not create malformed scatterlists - udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect - usb: chipidea: fix usage_count leak when autosuspend_delay is negative - usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback - usb: gadget: f_midi: cancel pending IN work before freeing the midi object - usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() - USB: gadget: fsl-udc: fix device name leak on probe failure - usb: gadget: printer: fix infinite loop in printer_read() - USB: gadget: snps-udc: fix device name leak on probe failure - usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown - usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer - USB: serial: ftdi_sio: add support for E+H FXA291 - USB: serial: io_edgeport: cap received transmit credits - USB: serial: keyspan_pda: fix data loss on receive throttling - USB: serial: option: add TDTECH MT5710-CN - USB: storage: add NO_ATA_1X quirk for Longmai USB Key - usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits - VDUSE: avoid leaking information to userspace - vduse: remove unused vaddr parameter of vduse_domain_free_coherent - vduse: take out allocations from vduse_dev_alloc_coherent - vduse: Use fixed 4KB bounce pages for non-4KB page size - VFS/audit: introduce kern_path_parent() for audit - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets - vxlan: mdb: Fix source list corruption on a failed replace - vxlan: require CAP_NET_ADMIN in the device netns for changelink - wan: wanxl: Only reset hardware after BAR mapping - watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() - wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() - wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin - wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() - wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET - wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET - wifi: ath6kl: fix OOB access from firmware ADDBA window size - wifi: ath6kl: fix OOB read from firmware IE lengths in connect event - wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request - wifi: brcmfmac: fix 802.1X-SHA256 call trace warning - wifi: brcmfmac: initialize SDIO data work before cleanup - wifi: brcmfmac: make release_scratchbuffers idempotent - wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read - wifi: carl9170: fix buffer overflow in rx_stream failover path - wifi: carl9170: fix OOB read from off-by-two in TX status handler - wifi: cfg80211: bound element ID read when checking non-inheritance - wifi: cfg80211: cancel sched scan results work on unregister - wifi: cfg80211: reject unsupported PMSR FTM location requests - wifi: cfg80211: validate PMSR FTM preamble range - wifi: cfg80211: validate PMSR measurement type data - wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() - wifi: iwlwifi: mvm: fix read in wake packet notification handler - wifi: iwlwifi: mvm: validate SAR GEO response payload size - wifi: libertas: fix memory leak in helper_firmware_cb() - wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() - wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock - wifi: mac80211_hwsim: clamp virtio RX length before skb_put - wifi: mac80211: recalculate TIM when a station enters power save - wifi: mac80211: tear down new links on vif update error path - wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() - wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses - wifi: mt76: mt7915: guard HE capability lookups - wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses - wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() - wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() - wifi: mwifiex: bound uAP association event IEs to the event buffer - wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper - wifi: nl80211: free RNR data on MBSSID mismatch - wifi: nl80211: validate nested MBSSID IE blobs - wifi: p54: validate RX frame length in p54_rx_eeprom_readback() - wifi: wilc1000: validate assoc response length before subtracting header - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out init_cpu_worker_pool() - x86/boot/compressed: Disable jump tables - xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() - xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert - xprtrdma: Clear receive-side ownership pointers on release - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- [bot] upd: 6.6.144 -> 6.6.145 - Changelog: - 6lowpan: fix NHC entry use-after-free on error path - 9p: skip nlink update in cacheless mode to fix WARN_ON - ACPI: bus: Introduce devm_acpi_install_notify_handler() - ACPI: CPPC: Suppress UBSAN warning caused by field misuse - ACPI: driver: Check ACPI_COMPANION() against NULL during probe - ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() - ACPI: IPMI: Fix message kref handling on dead device - ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup - ACPI: NFIT: core: Fix possible deadlock and missing notifications - ACPI: NFIT: core: Fix possible NULL pointer dereference - ACPI: NFIT: core: Use devm_acpi_install_notify_handler() - ACPI: resource: Amend kernel-doc style - afs: Fix callback service message parsers to pass through -EAGAIN - afs: Fix error code in afs_extract_vl_addrs() - afs: Fix further netns teardown to cancel the preallocation charger - afs: Fix netns teardown to cancel the preallocation charger - afs: fix NULL pointer dereference in afs_get_tree() - afs: Fix the volume AFS_VOLUME_RM_TREE is set on - afs: Fix unchecked-length string display in debug statement - afs: Fix vllist leak - afs: use kvfree() to free memory allocated by kvcalloc() - alpha/PCI: Add security_locked_down() check to pci_mmap_resource() - alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs - ALSA: aoa: check snd_ctl_new1() return value - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser - ALSA: cmipci: check snd_ctl_new1() return value - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() - ALSA: es1938: check snd_ctl_new1() return value - ALSA: firewire: isight: bound the sample count to the packet payload - ALSA: gus: check snd_ctl_new1() return value - ALSA: ice1712: check snd_ctl_new1() return value - ALSA: seq: Clear variable event pointer on read - ALSA: seq: Fix partial userptr event expansion - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() - ALSA: seq: midi: Serialize output teardown with event_input - ALSA: usb-audio: avoid kobject path lookup in DualSense match - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks - ALSA: usb-audio: Roll back quirk control caches on write errors - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes - ALSA: virtio: Add missing 384 kHz PCM rate mapping - ALSA: ymfpci: check snd_ctl_new1() return value - amt: fix size calculation in amt_get_size() - apparmor: aa_getprocattr free procattr leak on format failure - apparmor: aa_label_alloc use aa_label_free on alloc failure - apparmor: advertise the tcp fast open fix is applied - apparmor: check label build before no_new_privs test - apparmor: fix label can not be immediately before a declaration - apparmor: fix potential UAF in aa_replace_profiles - apparmor: fix rawdata_f_data implicit flex array - apparmor: grab ns lock and refresh when looking up changehat child profiles - apparmor: put secmark label after secid lookup - arm64: dts: imx8x-colibri: Correct SODIMM PAD settings - arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host - arm64: dts: qcom: sdm630: describe adsp_mem region properly - arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning - arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node - arm64: dts: qcom: sm8450: Fix ICE reg size - arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S - arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc - arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well - arm64: Fix early handling of FEAT_E2H0 not being implemented - arm64: fpsimd: Fix type mismatch in sme_{save,load}_state() - arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() - arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS - arm64/mm: convert ptep_clear() to ptep_get_and_clear() - arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep) - arm64/mm: convert set_pte_at() to set_ptes(..., 1) - arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: sysreg: Add layout for ID_AA64MMFR4_EL1 - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: tegra: Fix Tegra234 MGBE PTP clock - arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative - ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint - ARM: imx31: Fix IIM mapping leak in revision check - ARM: imx3: Fix CCM node reference leak - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO - ASoC: codecs: aw88261: fix incorrect masks for boost regs - ASoC: codecs: hdac_hdmi: Validate written enum value - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails - ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count - ASoC: fsl: fsl_audmix: Validate written enum values - ASoC: mediatek: mt8183: Release reserved memory on cleanup - ASoC: mediatek: mt8192: Release reserved memory on cleanup - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put - ASoC: SOF: topology: validate vendor array size before parsing - ASoC: tegra: tegra210_ahub: Validate written enum value - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode - ata: libata: Fix ata_exec_internal() - ata: pata_pxa: Fix DMA channel leak on probe error - ata: sata_gemini: unwind clocks on IDE pinctrl errors - audit: add audit_log_nf_skb helper function - audit: Fix data races of skb_queue_len() readers on audit_queue - audit: fix potential integer overflow in audit_log_n_hex() - batman-adv: access unicast_ttvn skb->data only after skb realloc - batman-adv: bla: reacquire gw address after skb realloc - batman-adv: clean untagged VLAN on netdev registration failure - batman-adv: dat: acquire ARP hw source only after skb realloc - batman-adv: dat: ensure accessible eth_hdr proto field - batman-adv: dat: fix tie-break for candidate selection - batman-adv: ensure minimal ethernet header on TX - batman-adv: fix VLAN priority offset - batman-adv: frag: fix primary_if leak on failed linearization - batman-adv: frag: free unfragmentable packet - batman-adv: gw: acquire ethernet header only after skb realloc - batman-adv: retrieve ethhdr after potential skb realloc on RX - batman-adv: tt: avoid request storms during pending request - batman-adv: tt: prevent TVLV OOB check overflow - binder: fix UAF in binder_free_transaction() - binder: fix UAF in binder_thread_release() - bitops: make BYTES_TO_BITS() treewide-available - bitops: use common function parameter names - block: Avoid mounting the bdev pseudo-filesystem in userspace - block: skip sync_blockdev() on surprise removal in bdev_mark_dead() - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister - Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control - Bluetooth: bnep: pin L2CAP connection during netdev registration - Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() - Bluetooth: btmtk: apply the common btmtk_fw_get_filename - Bluetooth: btmtk: Fix btmtk.c undefined reference build error - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown - Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c - Bluetooth: btmtk: remove #ifdef around declarations - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() - Bluetooth: btrtl: validate firmware patch bounds - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB - Bluetooth: btusb: fix use-after-free on marvell probe failure - Bluetooth: btusb: fix use-after-free on registration failure - Bluetooth: btusb: fix wakeup source leak on probe failure - Bluetooth: btusb: mediatek: add MT7922 subsystem reset - Bluetooth: btusb: mediatek: remove the unnecessary goto tag - Bluetooth: btusb: mediatek: reset the controller before downloading the fw - Bluetooth: btusb: mediatek: return error for failed reg access - Bluetooth: fix UAF in bt_accept_dequeue() - Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() - Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO - Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state - Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle - Bluetooth: hci: validate codec capability element length - Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID - Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length - Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock - Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: validate option length before reading conf opt value - Bluetooth: MGMT: Fix adv monitor add failure cleanup - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready - Bluetooth: SCO: hold sk properly in sco_conn_ready - Bluetooth: separate CIS_LINK and BIS_LINK link types - Bluetooth: vhci: validate devcoredump state before side effects - bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() - bonding: 3ad: fix mux port state on oper down - bonding: add ESP offload features when slaves support - bonding: Correctly support GSO ESP offload - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix xfrm offload feature setup on active-backup mode - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add missing access_ok call to copy_user_syms - bpf: Allow LPM map access from sleepable BPF programs - bpf, arm64: Reject out-of-range B.cond targets - bpf: Check tail zero of bpf_prog_info - bpf: Consistently use bpf_rcu_lock_held() everywhere - bpf: Disable xfrm_decode_session hook attachment - bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket - bpf: Fix effective prog array index with BPF_F_PREORDER - bpf: Fix stack slot index in nospec checks - bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs - bpf,fork: wipe ->bpf_storage before bailouts that access it - bpf, lsm: Add disabled BPF LSM hook list - bpf: Prefer dirty packs for eBPF allocations - bpf: Prefer packs that won't trigger an IBPB flush on allocation - bpf: Reject fragmented frames in devmap - bpf: Restore sysctl new-value from 1 to 0 - bpf: Restrict JIT predictor flush to cBPF - bpf: Run generic devmap egress prog on private skb - bpf: Skip redundant IBPB in pack allocator - bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() - bpf: Support for hardening against JIT spraying - bpf: Tighten cgroup storage cookie checks for prog arrays - bpftool: Use libbpf error code for flow dissector query - bpf: Update transport_header when encapsulating UDP tunnel in lwt - bpf: zero-initialize the fib lookup flow struct - bridge: cfm: reject invalid CCM interval at configuration time - bridge: stp: Fix a potential use-after-free when deleting a bridge - btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC - btrfs: do not trim a device which is not writeable - btrfs: fix false IO failure after falling back to buffered write - btrfs: fix incorrect buffered IO fallback for append direct writes - btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() - btrfs: zoned: don't account data relocation space-info in statfs free space - bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() - bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path - bus: sunxi-rsb: Always check register address validity - can: bcm: add missing rcu list annotations and operations - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF - can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure - can: esd_usb: kill anchored URBs before freeing netdevs - can: isotp: use unconditional synchronize_rcu() in isotp_release() - cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed - char: tlclk: fix use-after-free in tlclk_cleanup() - cifs: invalidate cfid on unlink/rename/rmdir - cifs: remove all cifs files before kill super - cifs: validate DFS referral string offsets - clk: at91: keep securam node alive while mapping it - clk: qcom: a53: Corrected frequency multiplier for 1152MHz - clk: scmi: Fix clock rate rounding - clk: scpi: Unregister child clock providers on remove - clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances - configfs: fix lockless traversals of ->s_children - configfs_lookup(): don't leave ->s_dentry dangling on failure - coresight: cti: Fix DT filter signals silently ignored - coresight: etb10: restore atomic_t for shared reading state - coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() - cpufreq: conservative: Simplify frequency limit handling - cpufreq: Documentation: fix conservative governor freq_step description - cpufreq: Documentation: fix sampling_down_factor range - cpufreq: Fix hotplug-suspend race during reboot - cpufreq: intel_pstate: Sync policy->cur during CPU offline - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation - cpu: hotplug: Bound hotplug states sysfs output - cpu: hotplug: Preserve per instance callback errors - crypto: af_alg - Remove zero-copy support from skcipher and aead - crypto: algif_skcipher - force synchronous processing on trees without ctx->state - crypto: amlogic - avoid double cleanup in meson_crypto_probe() - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 - crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A - crypto: atmel-sha204a - fix blocking and non-blocking rng logic - crypto: caam - use print_hex_dump_devel to guard key hex dumps - crypto: caam - use print_hex_dump_devel to guard key hex dumps again - crypto: cavium/cpt - fix DMA cleanup using wrong loop index - crypto: ccp - Treat zero-length cert chain as query for blob lengths - crypto: crypto4xx - Remove ahash-related code - crypto: crypto4xx - Remove insecure and unused rng_alg - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels - crypto: drbg - Fix returning success on failure in CTR_DRBG - crypto: drbg - Fix the fips_enabled priority boost - crypto: ecc - Fix carry overflow in vli multiplication - crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve - crypto: hisilicon/qm - disable error report before flr - crypto: hisi-trng - Remove crypto_rng interface - crypto: marvell/octeontx - fix DMA cleanup using wrong loop index - crypto: pcrypt - restore callback for non-parallel fallback - crypto: qat - fix restarting state leak on allocation failure - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() - crypto: qat - validate RSA CRT component lengths - crypto: rng - Free default RNG on module exit - crypto: sun4i-ss - Remove insecure and unused rng_alg - crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1 - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos/hash - drop workqueue mechanism for SEC1 - crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation - crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor - crypto: talitos/hash - remove useless wrapper - crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request - crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue - crypto: talitos - move code in current_desc_hdr() into a standalone function - crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function - crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function - crypto: talitos - rename first/last to first_desc/last_desc - crypto: talitos - stop using crypto_ahash::init - crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header - cxgb4: Fix decode strings dump for T6 adapters - cxl/test: Add check after kzalloc() memory in alloc_mock_res() - cxl/test: Fix integer overflow in mock LSA bounds checks - cxl/test: Zero out LSA backing memory to avoid leaking to user - dax/kmem: account for partial discontiguous resource upon removal - debugobjects: Plug race against a concurrent OOM disable - device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() - device property: initialize the remaining fields of fwnode_handle in fwnode_init() - devlink: Fix parent ref leak in devl_rate_node_create() - dlm: fix add msg handle in send_queue ordered - dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK - dmaengine: Fix possible use after free - dmaengine: imx-sdma: Refine spba bus searching in probe - dmaengine: qcom: gpi: set DMA_PRIVATE capability - dmaengine: tegra: Fix burst size calculation - dm-bufio: fix wrong count calculation in dm_bufio_issue_discard - dm_early_create: fix freeing used table on dm_resume failure - dm era: fix NULL pointer dereference in metadata_open() - dm era: fix out-of-bounds memory access for non-zero start sector - dm-integrity: don't increment hash_offset twice - dm-ioctl: fix a possible overflow in list_version_get_info - dm-ioctl: report an error if a device has no table - dm-log: fix a bitset_size overflow on 32bit machines - dm-stats: fix dm_jiffies_to_msec64 - dm-stats: fix merge accounting - dm thin metadata: fix metadata snapshot consistency on commit failure - dm thin metadata: fix superblock refcount leak on snapshot shadow failure - dm-verity: fix a possible NULL pointer dereference - dm-verity: increase sprintf buffer size - Documentation: proc: fix section numbering in table of contents - dpaa2-switch: fix VLAN upper check not rejecting bridge join - drbd: reject data replies with an out-of-range payload size - driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() - driver core: Guard deferred probe timeout extension with delayed_work_pending() - driver core: Use mod_delayed_work to prevent lost deferred probe work - driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() - drm/amd/display: Add missing kdoc for ALLM parameters - drm/amd: Fix set but not used warnings - drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() - drm/amdgpu: initialize irq.lock spinlock earlier - drm/amdgpu: set sub_block_index for mca ras sub-blocks - drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free - drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm - drm/amdkfd: Validate CRIU-restored IDs before idr_alloc - drm/edid: fix OOB read in drm_parse_tiled_block() - drm/hisilicon/hibmc: move display contrl config to hibmc_probe() - drm/hisilicon/hibmc: use clock to look up the PLL value - drm/msm/dp: fix HPD state status bit shift value - drm/msm/dp: Fix the ISR_* enum values - drm/nouveau/bios: specify correct display fuse register for Ampere and Ada - drm/radeon: fix integer overflow in radeon_align_pitch() - drm/radeon: fix memory leak in radeon_ring_restore() on lock failure - drm/rockchip: Test for imported buffers with drm_gem_is_imported() - drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() - drm/tegra: Fix iommu_map_sgtable() return value check - drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove - drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered - drm/tidss: Drop extra drm_mode_config_reset() call - dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties - dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback - dt-bindings: pinctrl: nvidia,tegra234: Add missing required block - dt-bindings: power: imx93: Add MIPI PHY power domain - EDAC/i10nm: Don't fail probing if ADXL is missing - EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info - espintcp: use sk_msg_free_partial to fix partial send - evm: terminate and bound the evm_xattrs read buffer - exfat: add exfat_get_dentry_set_by_ei() helper - exfat: bound uniname advance in exfat_find_dir_entry() - exfat: move exfat_chain_set() out of __exfat_resolve_path() - exfat: move free cluster out of exfat_init_ext_entry() - exfat: preserve benign secondary entries during rename and move - exfat: remove unnecessary read entry in __exfat_rename() - exfat: rename argument name for exfat_move_file and exfat_rename_file - ext2: fix ignored return value of generic_write_sync() - ext4: fix kernel BUG in ext4_write_inline_data_end - ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback - ext4: get rid of ppath in get_ext_path() - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes - f2fs: fix listxattr handling of corrupted xattr entries - f2fs: fix potential deadlock in f2fs_balance_fs() - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() - f2fs: validate orphan inode entry count - fbcon: fix NULL pointer dereference for a console without vc_data - fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() - fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() - fbdev: hecubafb: fix potential memory leak in hecubafb_probe() - fbdev: i740fb: fix potential memory leak in i740fb_probe() - fbdev: metronomefb: fix potential memory leak in metronomefb_probe() - fbdev: nvidia: fix potential memory leak in nvidiafb_probe() - fbdev: radeon: fix potential memory leak in radeonfb_pci_register() - fbdev: s3fb: fix potential memory leak in s3_pci_probe() - fbdev: sm501fb: Fix buffer errors in OF binding code - fbdev: sm712: Fix operator precedence in big_swap macro - fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() - fbdev: tridentfb: fix potential memory leak in trident_pci_probe() - fbdev: uvesafb: fix potential memory leak in uvesafb_probe() - fbdev: vesafb: fix memory leak in vesafb_probe() - firmware: arm_scmi: Fix OOB in scmi_power_name_get() - firmware: arm_scmi: Read sensor config as 32-bit value - firmware_loader: fix device reference leak in firmware_upload_register() - firmware_loader: Fix recursive lock in device_cache_fw_images() - flow_dissector: check device type before reading ETH_ADDRS - fpga: dfl: add bounds check in dfh_get_param_size() - fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() - fs: efs: remove unneeded debug prints - fsl/fman: Free init resources on KeyGen failure in fman_init() - fs/ntfs3: add bounds check to run_get_highest_vcn() - fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow - fs/ntfs3: bound attr_off in UpdateResidentValue against data_off - fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass - fs/ntfs3: bound DeleteIndexEntryAllocation memmove length - fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() - fs/ntfs3: fix mount failure on 64K page-size kernels - fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename - fs/ntfs3: fsync files by syncing parent inodes - fs/ntfs3: handle attr_set_size() errors when truncating files - fs/ntfs3: resize log->one_page_buf when adopting on-disk page size - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns - fs/ntfs3: validate lcns_follow in log_replay conversion - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio() - fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid - fuse: fix device node leak in cuse_process_init_reply() - fuse: re-lock request before returning from fuse_ref_folio() - gpio: eic-sprd: use raw_spinlock_t in the irq startup path - gpio-f7188x: Add support for NCT6126D version B - gpio: htc-egpio: use managed gpiochip registration - gpio: mlxbf3: fail probe if gpiochip registration fails - gpio: mvebu: fail probe if gpiochip registration fails - gpio: sch: use raw_spinlock_t in the irq startup path - gpios: palmas: add .get_direction() op - gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe - gpu: host1x: Allow entries in BO caches to be freed - gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path - gpu: host1x: Fix iommu_map_sgtable() return value check - gue: validate REMCSUM private option length - handshake: Require admin permission for DONE command - hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length - hfs/hfsplus: prevent getting negative values of offset/length - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read - HID: add haptics page defines - HID: appleir: fix UAF on pending key_up_timer in remove() - HID: core: Fix OOB read in hid_get_report for numbered reports - HID: letsketch: fix UAF on inrange_timer at driver unbind - HID: lg-g15: cancel pending work on remove to fix a use-after-free - HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter - HID: multitouch: fix out-of-bounds bit access on mt_io_flags - HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() - HID: playstation: validate num_touch_reports in DualShock 4 reports - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads - HID: wacom: stop hardware after post-start probe failures - HID: wiimote: Fix table layout and whitespace errors - hwmon: adm1275: Prevent reading uninitialized stack - hwmon: (asus_atk0110) Check package count before accessing element - hwmon: (it87) Clamp negative values to zero in set_fan() - hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig - hwmon: (occ) unregister sysfs devices outside occ lock - hwmon: (pmbus) Fix passing events to regulator core - hwmon: (w83627hf) remove VID sysfs files on error and remove - hwmon: (w83793) remove vrm sysfs file on probe failure - hwrng: jh7110 - fix refcount leak in starfive_trng_read() - hwrng: virtio: clamp device-reported used.len at copy_data() - hwspinlock: qcom: avoid uninitialized struct members - i2c: core: fix adapter debugfs creation - i2c: core: fix adapter deregistration race - i2c: core: fix adapter registration race - i2c: core: fix hang on adapter registration failure - i2c: core: fix irq domain leak on adapter registration failure - i2c: core: fix NULL-deref on adapter registration failure - i2c: mediatek: fix WRRD for SoCs without auto_restart option - i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() - i2c: mpc: Fix timeout calculations - i2c: stm32f7: truncate clock period instead of rounding it - i3c: master: Prevent reuse of dynamic address on device add failure - i40e: Fix i40e_debug() to use struct i40e_hw argument - ia64: Make acpi_cpufreq_cpu_exit return void - IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() - IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified - IB/mlx4: Fix refcount leak in add_port() error path - IB/mlx5: Don't take the rereg_mr fallback without a new translation - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier - IB/mlx5: Properly support implicit ODP rereg_mr - ice: fix AQ error code comparison in ice_set_pauseparam() - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() - ice: fix ice_init_link() error return preventing probe - ieee802154: admin-gate legacy LLSEC dump operations - ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation - ieee802154: ca8210: fix cas_ctl leak on spi_async failure - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit - ieee802154: fix kernel-infoleak in dgram_recvmsg() - ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() - iio: accel: bmc150: clamp the device-reported FIFO frame count - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error - iio: accel: mma8452: handle I2C read error(s) in mma8452_read() - iio: adc: lpc32xx: Initialize completion before requesting IRQ - iio: adc: spear: Initialize completion before requesting IRQ - iio: adc: ti-ads124s08: Return reset GPIO lookup errors - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug - iio: common: st_sensors: honour channel endianness in read_axis_data - iio: event: Fix event FIFO reset race - iio: gyro: bmg160: bail out when bandwidth/filter is not in table - iio: gyro: bmg160: wait full startup time after mode change at probe - iio: hid-sensor-rotation: Fix stale or zero output when reading raw values - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ - iio: imu: inv_icm42600: fix timestamp clock period by using lower value - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading - iio: imu: inv_icm42600: stabilized timestamp in interrupt - iio: imu: st_lsm6dsx: deselect shub page before reading whoami - iio: invensense: fix timestamp glitches when switching frequency - iio: invensense: remove redundant initialization of variable period - iio: light: al3010: fix incorrect scale for the highest gain range - iio: light: gp2ap002: fix runtime PM leak on read error - iio: light: opt3001: fix missing state reset on timeout - iio: light: si1133: prevent race condition on timeout - iio: light: si1133: reset counter to prevent race condition - iio: light: tsl2591: return actual error from probe IRQ failure - iio: light: veml6030: fix channel type when pushing events - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call - iio: magnetometer: ak8975: fix potential kernel stack memory leak - iio: pressure: mpl115: fix runtime PM leak on read error - iio: tcs3472: power down chip on probe failure - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check - iio: temperature: ltc2983: Fix reinit_completion() called after conversion start - Input: elan_i2c - prevent division by zero and arithmetic underflow - Input: goodix - clamp the device-reported contact count - Input: iforce - bound the device-reported force-feedback effect index - Input: ims-pcu - add response length checks - Input: ims-pcu - fix DMA mapping violation in line setup - Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging - Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing - Input: ims-pcu - fix race condition in reset_device sysfs callback - Input: ims-pcu - fix type confusion in CDC union descriptor parsing - Input: ims-pcu - fix use-after-free and double-free in disconnect - Input: ims-pcu - release data interface on disconnect - Input: ims-pcu - validate control endpoint type - Input: maplecontrol - set driver data before registering input device - Input: maple_keyb - set driver data before registering input device - Input: maplemouse - fix NULL pointer dereference in open() - Input: maplemouse - set driver data before registering input device - Input: mms114 - fix multi-touch slot corruption - Input: mms114 - fix touch indexing for MMS134S and MMS136 - Input: mms114 - reject an oversized device packet size - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count - Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure - Input: touchwin - reset the packet index on every complete packet - iommu/amd: Fix a stale comment about which legacy mode is user visible - ionic: Fix check in ionic_get_link_ext_stats - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item - ipv4: fib: Don't ignore error route in local/main tables. - ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() - ipv4: igmp: remove multicast group from hash table on device destruction - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD - ipv6: fix error handling in disable_ipv6 sysctl - ipv6: fix error handling in disable_policy sysctl - ipv6: fix error handling in forwarding sysctl - ipv6: fix error handling in ignore_routes_with_linkdown sysctl - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). - ipv6: guard against possible NULL deref in __in6_dev_stats_get() - ipv6: mcast: Fix potential UAF in MLD delayed work - ipv6: mcast: Replace locking comments with lockdep annotations. - ipvs: ensure inner headers in ICMP errors are in headroom - ipvs: fix more places with wrong ipv6 transport offsets - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors - ipvs: pass parsed transport offset to state handlers - ipvs: reload ip header after head reallocation - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new - ipvs: use parsed transport offset in SCTP state lookup - ipvs: use parsed transport offset in TCP state lookup - irqchip/crossbar: Fix parent domain resource leak - irqchip/crossbar: Use correct index in crossbar_domain_free() - irqchip/gic-v3-its: Fix OF node reference leak - irqchip/ts4800: Fix missing chained handler cleanup on remove - isofs: bound Rock Ridge symlink components to the SL record - jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() - jiffies: Cast to unsigned long in secs_to_jiffies() conversion - jiffies: Define secs_to_jiffies() - kcm: use WRITE_ONCE() when changing lower socket callbacks - kconfig: fix potential NULL pointer dereference in conf_askvalue - KEYS: Use acquire when reading state in keyring search - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE - ksmbd: centralize ksmbd_conn final release to plug transport leak - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd - ksmbd: fix integer overflow in set_file_allocation_info() - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation - ksmbd: fix use-after-free in same_client_has_lease() - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check - ksmbd: reject undersized DACLs before parsing ACEs - ksmbd: require source read access for duplicate extents - ksmbd: run set info with opener credentials - ksmbd: serialize QUERY_DIRECTORY requests per file - ksmbd: track the connection owning a byte-range lock - ksmbd: use opener credentials for delete-on-close - ksmbd: use opener credentials for FSCTL mutations - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: vgic: Check the interrupt is still ours before migrating it - KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers - KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure - KVM: s390: pci: Fix handling of AIF enable without AISB - KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode - KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs - leds: uleds: Fix potential buffer overread - libbpf: Fix UAF in strset__add_str() - libbpf: Harden parse_vma_segs() path parsing - libbpf: Report error when a negative kprobe offset is specified - lib/test_meminit: use && for bools - llc: fix SAP refcount leak in llc_ui_autobind() - llc: fix SAP refcount leak when creating incoming sockets - lockd: Plug nlm_file leak when nlm_do_fopen() fails - lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure - LoongArch: Add PIO for early access before ACPI PCI root register - LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() - LoongArch: Report dying CPU to RCU in stop_this_cpu() - mac802154: remove interfaces with RCU list deletion - macsec: don't read an unset MAC header in macsec_encrypt() - macsec: fix promiscuity refcount leak in macsec_dev_open() - mailbox: mtk-adsp: fix UAF during device teardown - md/raid10: reset read_slot when reusing r10bio for discard - md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry - media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() - media: cedrus: Fix failure to clean up hardware on probe failure - media: mtk-jpeg: cancel workqueue on release for supported platforms only - media: nxp: imx8-isi: Convert to platform remove callback returning void - media: nxp: imx8-isi: Fix use-after-free on remove - media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code - media: qcom: venus: drop extra padding in NV12 raw size calculation - media: qcom: venus: relax encoder frame/blur dimension steps on v4 - media: qcom: venus: relax encoder frame/blur step size on v6 - media: rockchip: rga: fix too small buffer size - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe - media: uvcvideo: Avoid partial metadata buffers - media: uvcvideo: Fix buffer sequence in frame gaps - media: uvcvideo: Fix sequence number when no EOF - media: v4l2-common: Add YUV24 format info - memstick: ms_block: reject a card that reports too many blocks - mfd: cros_ec: Delay dev_set_drvdata() until probe success - mfd: cs42l43: Sanity check firmware size - mfd: sm501: Fix reference leak on failed device registration - mfd: tps6586x: Fix OF node refcount - minix: avoid overflow in bitmap block count calculation - MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() - MIPS: DEC: Ensure RTC platform device deregistration upon failure - MIPS: DEC: Remove do_IRQ() call indirection - MIPS: Fix big-endian stack argument fetching in o32 wrapper - MIPS: ip22-gio: fix device reference leak in probe - MIPS: ip22-gio: fix gio device memory leak - MIPS: ip22-gio: fix kfree() of static object - MIPS: mm: Fix out-of-bounds write in maar_res_walk() - mips: n64: add __iomem for writel call - mips: ralink: mt7621: add missing __iomem - mips: sched: Fix CPUMASK_OFFSTACK memory corruption - MIPS: smp: report dying CPU to RCU in stop_this_cpu() - mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() - mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() - mmc: vub300: defer reset until cmd_mutex is unlocked - mm/damon/core: make charge_addr_from aware of end-address exclusivity - mm/damon/ops-common: handle extreme intervals in damon_hot_score() - mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() - mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error - mm: do file ownership checks with the proper mount idmap - mm/fake-numa: fix under-allocation detection in uniform split - mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() - mm: shrinker: fix NULL pointer dereference in debugfs - mm: shrinker: remove redundant shrinker_rwsem in debugfs operations - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled - mm/vmscan: flush deferred TLB before freeing large folios - module: decompress: check return value of module_extend_max_pages() - mtd: maps: vmu-flash: fix NULL pointer dereference in initialization - mtd: mchp23k256: use SPI match data for chip caps - mtd: onenand: samsung: report DMA completion timeouts - mtd: rawnand: fix condition in 'nand_select_target()' - mtd: rawnand: fsl_ifc: return errors for failed page reads - mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout - mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout - mtd: rawnand: pl353: fix probe resource allocation - mtd: slram: remove failed entries from the device list - mtd: spi-nor: Drop duplicate Kconfig dependency - mtd: spi-nor: swp: Improve locking user experience - net/9p: fix infinite loop in p9_client_rpc on fatal signal - net/9p: fix race condition on rdma->state in trans_rdma.c - net: add a common function to compute features for upper devices - net: af_key: initialize alg_key_len for IPComp states - net: atm: reject out-of-range traffic classes in QoS validation - net: bcmgenet: Use weighted round-robin TX DMA arbitration - net, bpf: check master for NULL in xdp_master_redirect() - net: Drop the lock in skb_may_tx_timestamp() - net: dsa: sja1105: round up PTP perout pin duration - net: ena: clean up XDP TX queues when regular TX setup fails - net: enetc: check the number of BDs needed for xdp_frame - net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths - net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove - net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp - netfilter: conntrack: revert ct extension genid infrastructure - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump - netfilter: ebtables: module names must be null-terminated - netfilter: ebtables: terminate table name before find_table_lock() - netfilter: ebtables: Use vmalloc_array() to improve code - netfilter: ebtables: zero chainstack array - netfilter: ecache: fix inverted time_after() check - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop - netfilter: ipset: annotate "pos" for concurrent readers/writers - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types - netfilter: ipset: Fix data race between add and dump in all hash types - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() - netfilter: ipset: fix race between dump and ip_set_list resize - netfilter: nf_conncount: callers must hold rcu read lock - netfilter: nf_conncount: fix zone comparison in tuple dedup - netfilter: nf_conncount: prevent connlimit drops for early confirmed ct - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() - netfilter: nf_nat_sip: reload possible stale data pointer - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures - netfilter: nfnl_cthelper: apply per-class values when updating policies - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst - netfilter: nf_reject: skip iphdr options when looking for icmp header - netfilter: nft_compat: ebtables emulation must reject non-bridge targets - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak - netfilter: nft_synproxy: stop bypassing the priv->info snapshot - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock - netfilter: xt_cluster: reject template conntracks in hash match - netfilter: xt_connmark: reject invalid shift parameters - netfilter: xt_nat: reject unsupported target families - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() - netfilter: xt_u32: reject invalid shift counts - net: gianfar: dispose irq mappings on probe failure and device removal - net: ife: require ETH_HLEN to be pullable in ife_decode() - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink - net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink - net: ipip: require CAP_NET_ADMIN in the device netns for changelink - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes - net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink - net: ixp4xx_hss: fix duplicate HDLC netdev allocation - net: lan743x: Initialize eth_syslock spinlock before use - net: liquidio: fix BAR resource leak on PF number failure - net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check - net: mana: initialize gdma queue id to INVALID_QUEUE_ID - net: marvell: prestera: initialize err in prestera_port_sfp_bind - net: microchip: vcap: fix races on the shared Super VCAP block - net/mlx5: Check max_macs devlink param value against max capability - net/mlx5e: Fix HV VHCA stats agent registration race - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete - net/mlx5: Fix L3 tunnel entropy refcount leak - net: mvneta: re-enable percpu interrupt on resume - net: openvswitch: reject oversized nested action attrs - net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy - net: psample: fix info leak in PSAMPLE_ATTR_DATA - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() - net: qualcomm: rmnet: validate MAP frame length before ingress parsing - net/sched: act_bpf: use rcu_dereference_bh() to read the filter - net/sched: act_ct: preserve tc_skb_cb across defragmentation - net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload - net/sched: cake: reject overhead values that underflow length - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle - net/sched: cls_bpf: prevent unbounded recursion in offload rollback - net/sched: cls_flow: Dont expose folded kernel pointers - net/sched: hhf: clear heavy-hitter state on reset - net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - net/sched: sch_drr: annotate data-races around cl->deficit - net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() - net/sched: sch_hfsc: Don't make class passive twice - net/sched: sch_htb: annotate data-races (I) - net/sched: sch_htb: do not change sch->flags in htb_dump() - net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants - net: sit: require CAP_NET_ADMIN in the device netns for changelink - net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket - net: sparx5: unregister blocking notifier on init failure - net: sungem: fix probe error cleanup - net, team, bonding: Add netdev_base_features helper - net: team: rename team to team_core for linking - net: thunderbolt: Fix frags[] overflow by bounding frame_count - net/tls: Consume empty data records in tls_sw_read_sock() - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() - net: usb: lan78xx: disable VLAN filter in promiscuous mode - net: usb: lan78xx: move functions to avoid forward definitions - net: usb: net1080: validate packet_len before pad-byte access in rx_fixup - net: wwan: iosm: bound device offsets in the MUX downlink decoder - net: wwan: t7xx: check skb_clone in control TX - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure - nfsd: change nfs4_client_to_reclaim() to allocate data - nfsd: Don't reset the write verifier on a commit EAGAIN - nfsd: move name lookup out of nfsd4_list_rec_dir() - nfsd: release layout stid on setlease failure - nfsd: reset write verifier on deferred writeback errors - nfs: keep PG_UPTODATE clear after read errors in page groups - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors - NFSv4/flexfiles: reject zero filehandle version count - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC - NFSv4/pnfs: defer return_range callbacks until after inode unlock - nilfs2: fix backing_dev_info reference leak - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers - NTB: epf: Avoid calling pci_irq_vector() from hardirq context - NTB: epf: Fix doorbell bitmask and IRQ vector handling - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() - NTB: epf: Make db_valid_mask cover only real doorbell bits - NTB: epf: Report 0-based doorbell vector via ntb_db_event() - ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head - ntfs3: cap RESTART_TABLE free-chain walker at rt->used - ntfs3: fix out-of-bounds read in decompress_lznt - ntfs3: validate split-point offset in indx_insert_into_buffer - nvdimm/btt: Free arenas on btt_init() error paths - nvdimm/btt: Free arena sub-allocations on discover_arenas() error path - nvdimm/btt: Handle preemption in BTT lane acquisition - nvme-multipath: fix flex array size in struct nvme_ns_head - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks - nvmet-auth: validate reply message payload bounds against transfer length - nvmet-rdma: handle inline data with a nonzero offset - nvmet: remove superfluous initialization - nvmet: return DHCHAP status codes from nvmet_setup_auth() - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path - nvmet-tcp: Fix potential UAF when ddgst mismatch - ocfs2: add journal NULL check in ocfs2_checkpoint_inode() - ocfs2: avoid moving extents to occupied clusters - ocfs2/dlm: require a ref for locking_state debugfs open - ocfs2: don't BUG_ON an invalid journal dinode - ocfs2: fix buffer head management in ocfs2_read_blocks() - ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write - ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits - ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() - ocfs2: kill osb->system_file_mutex lock - ocfs2: rebase copied fsdlm LVB pointers in locking_state - ocfs2: reject dinodes whose i_rdev disagrees with the file type - ocfs2: reject dinodes with non-canonical i_mode type - ocfs2: reject FITRIM ranges shorter than a cluster - ocfs2: reject non-inline dinodes with i_size and zero i_clusters - ocfs2: use kzalloc for quota recovery bitmap allocation - octeontx2-af: fix VF bringup affecting PF promiscuous state - octeontx2-af: mcs: Fix unsupported secy stats read - octeontx2-pf: check DMAC extraction support before filtering - octeontx2-pf: Clear stats of all resources when freeing resources - octeontx2-pf: Fix leak of SQ timestamp buffer on teardown - octeontx2-pf: mcs: Fix mcs resources free on PF shutdown - of: cpu: add check in __of_find_n_match_cpu_property() - OPP: of: Fix potential memory leak in opp_parse_supplies() - orangefs: keep the readdir entry size 64-bit in fill_from_part() - partitions: aix: bound the pp_count scan to the ppe array - PCI: Add kerneldoc for pci_resize_resource() - PCI: altera: Do not dispose parent IRQ mapping - PCI: altera: Fix resource leaks on probe failure - PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining - PCI/ASPM: Don't reconfigure ASPM entering low-power state - PCI: Check ROM header and data structure addr before accessing - PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() - PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 - PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 - PCI: Fix restoring BARs on BAR resize rollback path - PCI: Free saved list without holding pci_bus_sem - PCI: host-common: Request bus reassignment when not probe-only - PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling - PCI: Introduce named defines for PCI ROM - PCI: iproc: Restore .map_irq() for the platform bus driver - PCI: loongson: Do not ignore downstream devices on external bridges - PCI: mediatek: Convert bool to single quirks entry and bitmap - PCI: mediatek: Fix IRQ domain leak when port fails to enable - PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro - PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() - PCI: mediatek: Use actual physical address instead of virt_to_phys() - PCI: mediatek: Use generic MACRO for TPVPERL delay - PCI: meson: Propagate devm_add_action_or_reset() failure - PCI: Move Resizable BAR code to rebar.c - PCI: Prevent resource tree corruption when BAR resize fails - PCI: rcar-host: Remove unused LIST_HEAD(res) - PCI: Skip Resizable BAR restore on read error - perf/core: Detach event groups during remove_on_exec - perf: Fix dangling cgroup pointer in cpuctx backport - perf: Fix off-by-one stack buffer overflow in kallsyms__parse() - perf trace beauty fcntl: Fix build with older kernel headers - perf/x86/amd/brs: Fix kernel address leakage - perf/x86/amd/core: Always use the NMI latency mitigation - perf/x86/amd/lbr: Fix kernel address leakage - perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box() - phy: phy-can-transceiver: Check driver match and driver data against NULL - pinctrl: cs42l43: Fix polarity on debounce - pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 - pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 - pinctrl: meson: restore non-sleeping GPIO access - pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path - platform/x86/amd/pmc: Add delay_suspend module parameter - platform/x86/amd/pmc: Check for intermediate wakeup in function - platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops - platform/x86: xo15-ebook: Fix wakeup source and GPE handling - pmdomain: imx: Fix i.MX8MP power notifier - pmdomain: imx: Fix i.MX8MP VC8000E power up sequence - PM: sleep: Use complete() in device_pm_sleep_init() - pNFS/filelayout: fix cheking if a layout is striped - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path - posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() - powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus - powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del - powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down - powerpc/pseries: fix memory leak on krealloc failure in papr_init - powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() - power: supply: charger-manager: fix refcount leak in is_full_charged() - power: supply: core: fix supplied_from allocations - power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak - proc: only bump parent nlink when registering directories - proc: protect ptrace_may_access() with exec_update_lock (FD links) - proc: protect ptrace_may_access() with exec_update_lock (part 1) - proc: rename proc_setattr to proc_nochmod_setattr - pwm: imx27: Fix variable truncation in .apply() - qede: fix off-by-one in BD ring consumption on build_skb failure - qede: fix out-of-bounds check for cqe->len_list[] - rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup - RDMA/hns: Fix arithmetic overflow in calc_hem_config() - RDMA/hns: Fix warning in poll cq direct mode - RDMA/irdma: Fix OOB read during CQ MR registration - RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs - RDMA/irdma: Initialize iwmr->access during MR registration - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference - RDMA/mlx5: Fix undefined shift of user RQ WQE size - RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one - RDMA/mlx5: Remove raw RSS QP restrack tracking - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path - RDMA/rxe: Fix a use-after-free problem in rxe_mmap - RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe - RDMA/siw: bound Read Response placement to the RREAD length - RDMA/srpt: fix integer overflow in immediate data length check - regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK - regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions - regulator: ltc3676: Fix incorrect IRQSTAT bit offsets - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() - regulator: scmi: Simplify with scoped for each OF child loop - remoteproc: qcom: Fix leak when custom dump_segments addition fails - reset: sunxi: fix memory region leak on ioremap failure - Revert "crypto: talitos - fix SEC1 32k ahash request limitation" - Revert "crypto: talitos - rename first/last to first_desc/last_desc" - Revert "PCI/MSI: Unmap MSI-X region on error" - Revert "treewide: Fix probing of devices in DT overlays" - ring-buffer: Fix event length with forced 8-byte alignment - riscv: cacheinfo: Fix node reference leak in populate_cache_leaves - riscv: Prevent NULL pointer dereference in machine_kexec_prepare() - riscv: probes: save original sp in rethook trampoline - riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe - rpmsg: use generic driver_override infrastructure - rtc: abx80x: fix the RTC_VL_CLR clearing all status flags - rtc: cmos: unregister HPET IRQ handler on probe failure - rtc: ds1307: Fix off-by-one issue with wday for rx8130 - rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 - rtc: mpfs: fix counter upload completion condition - rtc: msc313: fix NULL deref in shared IRQ handler at probe - rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc - s390/monwriter: Reject buffer reuse with different data length - s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() - s390/process: Fix kernel thread function pointer type - s390/zcrypt: Remove the empty file - sched/fair: Fix cpu_util runnable_avg arithmetic - sched/fair: Only update stats for allowed CPUs when looking for dst group - sched: restore timer_slack_ns when resetting RT policy on fork - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT - scsi: elx: efct: Fix I/O leak on unsupported additional CDB - scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() - scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path - scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() - scsi: pm8001: Fix error code in non_fatal_log_show() - scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" - scsi: sas: Skip opt_sectors when DMA reports no real optimization hint - scsi: sg: Report request-table problems when any status is set - scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() - scsi: target: Bound PR-OUT TransportID parsing to the received buffer - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE - scsi: target: Fix hexadecimal CHAP_I handling - scsi: target: Remove tcm_loop target reset handling - scsi: ufs: Fix wrong value printed in unexpected UPIU response case - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it - sctp: fix SCTP_RESET_STREAMS stream list length limit - sctp: hold socket lock when dumping endpoints in sctp_diag - sctp: validate embedded address parameter length - sctp: validate STALE_COOKIE cause length before reading staleness - security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() - seg6: validate SRH length before reading fixed fields - selftests/bpf: Add simple strscpy() implementation - selftests/bpf: Fix bpf_iter/task_vma test - selftests/bpf: Initialize operation name before use - selftests/hid: convert the hid_bpf selftests with struct_ops - selftests/hid: Cover hid_bpf_get_data() size overflow - selftests/hid: do not manually call headers_install - selftests/hid: ensure CKI can compile our new tests on old kernels - selftests/hid: ensure we can compile the tests on kernels pre-6.3 - selftests/hid: force using our compiled libbpf headers - selftests/mm: allow PUD-level entries in compound testcase of hmm tests - selftests/mm: clarify alternate unmapping in compaction_test - selftests/mm: fix exclusive_cow test fork() handling - selftests/net: fix EVP_MD_CTX leak in tcp_mmap - selinux: check connect-related permissions on TCP Fast Open - selinux: fix incorrect execmem checks on overlayfs - seqlock: Change do_task_stat() to use scoped_seqlock_read() - seqlock: fix scoped_seqlock_read kernel-doc - seqlock: Introduce scoped_seqlock_read() - serial: 8250_mid: Disable DMA for selected platforms - serial: 8250_mid: Remove 8250_pci usage - serial: 8250_omap: clear rx_running on zero-length DMA completes - serial: msm: Disable DMA for kernel console UART - slimbus: Convert to platform remove callback returning void - slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership - slimbus: qcom-ngd-ctrl: Fix probe error path ordering - slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd - smb/client: always return a value for FS_IOC_GETFLAGS - smb: client: fix change notify replay double-free - smb: client: fix double-free in SMB2_close() replay - smb: client: fix double-free in SMB2_flush() replay - smb: client: fix double-free in SMB2_ioctl() replay - smb: client: fix double-free in SMB2_open() replay - smb/client: Fix error code in smb2_aead_req_alloc() - smb: client: Fix next buffer leak in receive_encrypted_standard() - smb: client: fix overflow in passthrough ioctl bounds check - smb: client: fix query directory replay double-free - smb: client: fix query_info() replay double-free - smb: client: harden POSIX SID length parsing - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() - smb: client: mask server-provided mode to 07777 in modefromsid - smb/client: preserve errors from smb2_set_sparse() - smb: client: reject overlapping data areas in SMB2 responses - smb: client: resolve SWN tcon from live registrations - smb: client: restrict implied bcc[0] exemption to responses without data area - smb: client: use kvzalloc() for megabyte buffer in simple fallocate - smb: client: use unaligned reads in parse_posix_ctxt() - smb: move some duplicate definitions to common/cifsglob.h - smb/server: do not require delete access for non-replacing links - soc: fsl: qe: panic on ioremap() failure in qe_reset() - soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy - sparc: led: avoid trimming a newline from empty writes - spi: dw: fix wrong BAUDR setting after resume - spi: ep93xx: fix double-free of zeropage on DMA setup failure - spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path - spi: hisi-kunpeng: Use dev_err_probe() for host registration failure - spi: meson-spifc: fix runtime PM leak on remove - spi: rpc-if: Use correct device for hardware reinitialization on resume - spi: sh-msiof: abort transfers when reset times out - spi: uniphier: Fix completion initialization order before devm_request_irq() - spi: xilinx: use FIFO occupancy register to determine buffer size - staging: media: atomisp: reduce load_primary_binaries() stack usage - staging: most: video: avoid double free on video register failure - staging: nvec: fix use-after-free in nvec_rx_completed() - staging: rtl8723bs: core: move constants to right side in comparison - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() - staging: rtl8723bs: fix OOB write in HT_caps_handler() - staging: rtl8723bs: fix spaces around binary operators - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() - staging: vme_user: bound slave read/write to the kern_buf size - staging: vme_user: fix location monitor leak in fake bridge - staging: vme_user: fix location monitor leak in tsi148 bridge - SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing - sunrpc: pin svc_xprt across the asynchronous TLS handshake callback - SUNRPC: pin upper rpc_clnt across the TLS connect_worker - SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED - sunrpc: wait for in-flight TLS handshake callback when cancel loses race - sysfs: clamp show() return value in sysfs_kf_read() - tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) - team: fix header_ops type confusion with non-Ethernet ports - thermal: hwmon: Fix critical temperature attribute removal - thermal: intel: Fix dangling resources on thermal_throttle_online() failure - time: Fix off-by-one in compat settimeofday() usec validation - tipc: fix out-of-bounds read in broadcast Gap ACK blocks - tipc: fix UAF in tipc_l2_send_msg() - tipc: fix use-after-free of the discoverer in tipc_disc_rcv() - tipc: prevent snt_unacked underflow on CONN_ACK - tipc: reject inverted service ranges from peer bindings - tipc: require net admin for TIPCv2 netlink mutators - tools lib api: Fix filename__write_int() writing uninitialized stack data - tools lib api: Fix missing null termination in filename__read_int/ull() - tools lib api: Fix mount_overload() snprintf truncation and toupper range - tools/mm/slabinfo: fix total_objects attribute name - tools/mm/slabinfo: Fix trace disable logic inversion - tools/power/x86/intel-speed-select: Harden daemon pidfile open - tools/testing: add linux/args.h header and fix radix, VMA tests - tools/virtio: check mmap return value in vringh_test - tpm: fix event_size output in tpm1_binary_bios_measurements_show - tpm: Make the TPM character devices non-seekable - tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() - tracing: Bound synthetic-field strings with seq_buf - tracing: eprobe: read the complete FILTER_PTR_STRING pointer - tracing/events: Fix to check the simple_tsk_fn creation - tracing/osnoise: Call synchronize_rcu() when unregistering - tracing: Prevent out-of-bounds read in glob matching - tracing/probes: Fix double addition of offset for @+FOFFSET - tracing: probes: fix typo in a log message - treewide: Switch/rename to timer_delete[_sync]() - udf: validate free block extents against the partition length - udf: validate sparing table length as an entry count, not a byte count - udf: validate VAT header length against the VAT inode size - udmabuf: fix DMA direction mismatch in release_udmabuf() - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() - usb: cdc_acm: Add quirk for Uniden BC125AT scanner - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() - USB: chaoskey: Fix slab-use-after-free in chaoskey_release() - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() - usb: dwc3: run gadget disconnect from sleepable suspend context - usb: free iso schedules on failed submit - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler - usb: gadget: f_fs: initialize reset_work at allocation time - usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile - usb: gadget: f_printer: take kref only for successful open - usb: gadget: function: rndis: add length check for header - usb: gadget: function: rndis: add length check to response query - usb: gadget: udc: Fix use-after-free in gadget_match_driver - usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() - usb: host: max3421: Reject hub port requests for non-existent ports - USB: idmouse: fix use-after-free on disconnect race - USB: iowarrior: fix use-after-free on disconnect - usb: iowarrior: remove inherent race with minor number - usbip: tools: support SuperSpeedPlus devices - usbip: vudc: fix NULL deref in vep_dequeue() - USB: ldusb: fix use-after-free on disconnect race - USB: legousbtower: fix use-after-free on disconnect race - USB: misc: uss720: unregister parport on probe failure - usb: mtu3: unmap request DMA on queue failure - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD - USB: serial: digi_acceleport: fix broken rx after throttle - USB: serial: digi_acceleport: fix hard lockup on disconnect - USB: serial: digi_acceleport: fix write buffer corruption - USB: serial: keyspan_pda: fix information leak - USB: serial: option: add Telit Cinterion FE990D50 compositions - usb: sl811-hcd: disable controller wakeup on remove - USB: storage: include US_FL_NO_SAME in quirks mask - usb: typec: anx7411: use devm_pm_runtime_enable() - usb: typec: class: drop PD lookup reference - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres - usb: typec: tcpm: Fix VDM type for Enter Mode commands - usb: typec: tcpm: Validate SVID index in svdm_consume_modes() - usb: typec: ucsi: cancel pending work on system suspend - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove - usb: typec: ucsi: Invert DisplayPort role assignment - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode - USB: ulpi: fix memory leak on registration failure - USB: usb-storage: ene_ub6250: restore media-ready check - usb: xhci: Fix sleep in atomic context in xhci_free_streams() - userfaultfd: gate must_wait writability check on pte_present() - vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter - vduse: hold vduse_lock across IDR lookup in open path - vduse: Requeue failed read to send_list head - veth: fix NAPI leak in XDP enable error path - vfio/mlx5: Fix racy bitfields and tighten struct layout - vfio/pci: Fix racy bitfields and tighten struct layout - vfio/pci: Latch disable_idle_d3 per device - vfio/pci: Release the VGA arbiter client on register_device() failure - vfio/pci: Use a private flag to prevent power state change with VFs - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc - vhost/net: complete zerocopy ubufs only once - vhost/vdpa: validate virtqueue index in mmap and fault paths - virtio-mmio: fix device release warning on module unload - virtio_net: disable cb when NAPI is busy-polled - virtio-net: fix len check in receive_big() - virtio_net: Support dynamic rss indirection table size - vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() - vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). - watchdog: apple: Add "apple,t8103-wdt" compatible - watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 - watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH - watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure - watchdog: unregister PM notifier on watchdog unregister - wifi: ath9k: fix OOB access from firmware tx status queue ID - wifi: cfg80211: fix grammar in MLO group key error message - wifi: mac80211: fix memory leak in ieee80211_register_hw() - wifi: mac80211: free ack status frame on TX header build failure - wifi: mt76: fix argument to ieee80211_is_first_frag() - wifi: mt76: mt7915: fix potential tx_retries underflow - wifi: mt76: mt7921: fix potential tx_retries underflow - wifi: mwifiex: fix permanently busy scans after multiple roam iterations - wifi: rt2x00: avoid full teardown before work setup in probe - wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer - wifi: rtw89: Correct data type for scan index to avoid infinite loop - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response - wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication - wifi: wcn36xx: fix OOB read from short trigger BA firmware response - workqueue: drop spurious '*' from print_worker_info() fn declaration - writeback: Avoid contention on wb->list_lock when switching inodes - writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() - writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() - writeback: Fix use after free in inode_switch_wbs_work_fn() - X.509: Fix validation of ASN.1 certificate header - x86/boot: Reject too long acpi_rsdp= values - x86/boot: Validate console=uart8250 baud rate to fix early boot hang - x86/bugs: Enable IBPB flush on BPF JIT allocation - x86/mm: Fix check/use ordering in switch_mm_irqs_off() - x86/platform/olpc: xo15: Drop wakeup source on driver removal - xen/gntdev: fix error handling in ioctl - xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] - xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path - xfrm: use compat translator only for u64 alignment mismatch - xfrm: Use the XFRM_GRO to indicate a GRO call on input - xfrm: validate selector family and prefixlen during match - xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink - xfs: dump the recovered xattri log item if corruption happens - xfs: fail recovery on a committed log item with no regions - xfs: fix stupid compiler warning - xfs: fix unreachable BIGTIME check in dquot flush validation - xfs: move ->iop_recover to xfs_defer_op_type - xfs: recreate work items when recovering intent items - xfs: resample the data fork mapping after cycling ILOCK - xfs: use null daddr for unset first bad log block - xfs: use xfs_defer_finish_one to finish recovered work items - xprtrdma: Avoid 250 ms delay on backlog wakeup - xprtrdma: Check frwr_wp_create() during connect - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot - xprtrdma: Decouple req recycling from RPC completion - xprtrdma: Document and assert reply-handler invariants - xprtrdma: Fix bcall rep leak and unbounded peek - xprtrdma: Post receive buffers after RPC completion - xprtrdma: Remove temp allocation of rpcrdma_rep objects - xprtrdma: Repost Receive buffers for malformed replies - xprtrdma: Resize reply buffers before reposting receives - xprtrdma: Return sendctx slot after Send preparation failure - xprtrdma: Sanitize the reply credit grant after parsing - xprtrdma: Use sendctx DMA state for Send signaling - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Remove rudiment CVE patches- [bot] upd: 6.6.126 -> 6.6.144 - Changelog: - 6lowpan: fix off-by-one in multicast context address compression - 6pack: propagage new tty types - 9p: avoid putting oldfid in p9_client_walk() error path - accel/qaic: Add overflow check to remap_pfn_range during mmap - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: AGDI: fix missing newline in error message - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - af_key: validate families in pfkey_send_migrate() - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() - af_unix: Give up GC if MSG_PEEK intervened. - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - af_unix: Set gc_in_progress to true in unix_gc(). - agp/amd64: Fix broken error propagation in agp_amd64_probe() - alarmtimer: Fix argument order in alarm_timer_forward() - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: asihpi: Fix potential OOB array access at reading cache - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-motu: Protect register DSP event queue positions - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: fix some typos - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda: cs35l56: Put ACPI device after setting companion - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: misc: Use guard() for spin locks - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: Don't setup bogus iov_iter for silencing - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: sc6000: Use standard print API - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: seq: Serialize UMP output teardown with event_input - ALSA: seq: ump: Use guard() for locking - ALSA: timer: Fix UAF at snd_timer_user_params() - ALSA: ua101: Reject too-short USB descriptors - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ensure that won't go past CPER allocated record - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: fix use-after-free in rawdata dedup loop - apparmor: make label_match return a consistent value - apparmor: mediate the implicit connect of TCP fast open sendmsg - apparmor: provide separate audit messages for file and policy checks - apparmor: refcount the pdb - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use passed in gfp flags in aa_alloc_null() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: cputype: Add C1-Premium definitions - arm64: cputype: Add C1-Ultra definitions - arm64: cputype: Add NVIDIA Olympus definitions - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU - arm64: errata: Mitigate TLBI errata on various Arm CPUs - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: io: Extract user memory type in ioremap_prot() - arm64: io: Rename ioremap_prot() to __ioremap_prot() - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64: mm: Batch dsb and isb when populating pgtables - arm64: mm: Don't remap pgtables for allocate vs populate - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: probes: Handle probes on hinted conditional branch instructions - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 - arm64/scs: Fix handling of advance_loc4 - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - arm64: tlb: Allow XZR argument to TLBI ops - arm64: tlb: Flush walk cache when unsharing PMD tables - arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI - arm64/xor: fix conflicting attributes for xor_block_template - ARM: 9467/1: mm: Don't use %pK through printk - ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O - ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow - ARM: allow __do_kernel_fault() to report execution of memory faults - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: fix branch predictor hardening - ARM: fix hash_name() fault - ARM: group is_permission_fault() with is_translation_fault() - ARM: integrator: Fix early initialization - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: socfpga: Fix OF node refcount leak in SMP setup - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: codecs: ab8500: Fix casting of private data - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: codecs: simple-mux: Fix enum control bounds check - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: q6asm-dai: close stream only when running - ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks - ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio - ASoC: SOF: Intel: hda-dai: remove dspless special case - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata-scsi: refactor ata_scsi_translate() - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - auxdisplay: line-display: fix OOB read on zero-length message_store() - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE - batman-adv: bla: avoid double decrement of bla.num_requests - batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface - batman-adv: bla: fix report_work leak on backbone_gw purge - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: clear current gateway during teardown - batman-adv: dat: handle forward allocation error - batman-adv: dat: prevent false sharing between VLANs - batman-adv: ensure bcast is writable before modifying TTL - batman-adv: fix fragment reassembly length accounting - batman-adv: fix integer overflow on buff_pos - batman-adv: fix (m|b)cast csum after decrementing TTL - batman-adv: fix tp_meter counter underflow during shutdown - batman-adv: frag: avoid underflow of TTL - batman-adv: frag: disallow unicast fragment in fragment - batman-adv: frag: ensure fragment is writable before modifying TTL - batman-adv: hold claim backbone gateways by reference - batman-adv: iv: recover OGM scheduling after forward packet error - batman-adv: mcast: fix use-after-free in orig_node RCU release - batman-adv: prevent ELP transmission interval underflow - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: add only finished tp_vars to lists - batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE - batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd - batman-adv: tp_meter: avoid role confusion in tp_list - batman-adv: tp_meter: avoid use of uninit sender vars - batman-adv: tp_meter: avoid window underflow - batman-adv: tp_meter: directly shut down timer on cleanup - batman-adv: tp_meter: fix fast recovery precondition - batman-adv: tp_meter: fix race condition in send error reporting - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown - batman-adv: tp_meter: handle overlapping packets - batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection - batman-adv: tp_meter: initialize dec_cwnd explicitly - batman-adv: tp_meter: initialize dup_acks explicitly - batman-adv: tp_meter: initialize last_recv_time during init - batman-adv: tp_meter: keep unacked list in ascending ordered - batman-adv: tp_meter: prevent parallel modifications of last_recv - batman-adv: tp_meter: restrict number of unacked list entries - batman-adv: tt: avoid empty VLAN responses - batman-adv: tt: don't merge change entries with different VIDs - batman-adv: tt: fix negative last_changeset_len - batman-adv: tt: fix negative tt_buff_len - batman-adv: tt: fix TOCTOU race for reported vlans - batman-adv: tt: prevent TVLV entry number overflow - batman-adv: tt: reject oversized local TVLV buffers - batman-adv: tt: track roam count per VID - batman-adv: tvlv: abort OGM send on tvlv append failure - batman-adv: tvlv: avoid race of cifsnotfound handler state - batman-adv: tvlv: enforce 2-byte alignment - batman-adv: tvlv: reject oversized TVLV packets - batman-adv: v: prevent OGM aggregation on disabled hardif - batman-adv: v: stop OGMv2 on disabled interface - bcache: fix cached_dev.sb_bio use-after-free and crash - bcache: fix uninitialized closure object - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: fix UAF in __blkcg_rstat_flush() - blk-cgroup: wait for blkcg cleanup before initializing new disk - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blktrace: fix __this_cpu_read/write in preemptible context - block: add pgmap check to biovec_phys_mergeable - block: relax pgmap check in bio_add_page for compatible zone device pages - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling - Bluetooth: bnep: Fix UAF read of dev->name - Bluetooth: bnep: reject short frames before parsing - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: btmtk: add the function to get the fw name - Bluetooth: btmtk: fix urb->setup_packet leak in error paths - Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c - Bluetooth: btmtk: rename btmediatek_data - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Allow firmware re-download when version matches - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: fix memory leak in error path of hci_alloc_dev() - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_qca: Convert timeout from jiffies to ms - Bluetooth: hci_qca: Migrate to serdev specific shutdown function - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend - Bluetooth: hci_sync: Remove remaining dependencies of hci_request - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths - Bluetooth: HIDP: fix missing length checks in hidp_input_report() - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: ISO: fix UAF in iso_recv_frame - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix backward compatibility with userspace - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: MGMT: validate Add Extended Advertising Data length - Bluetooth: MGMT: validate advertising TLV before type checks - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: Remove 3 repeated macro definitions - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() - Bluetooth: RFCOMM: validate skb length in MCC handlers - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: serialize accept_q access - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Fix NULL pointer dereference - bonding: 3ad: implement proper RCU rules for port->aggregator - bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner - bonding: add support for per-port LACP actor priority - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: fix NULL pointer dereference in actor_port_prio setting - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: print churn state via netlink - bonding: refuse to enslave CAN devices - bpf: Add CHECKSUM_COMPLETE to bpf test progs - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf, devmap: Remove unnecessary if check in for loop - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: export bpf_link_inc_not_zero. - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Forget ranges when refining tnum after JSET - bpf: Free reuseport cBPF prog after RCU grace period. - bpf: handle fake register spill to stack with BPF_ST_MEM instruction - bpf: preserve constant zero when doing partial register restore - bpf: preserve STACK_ZERO slots on partial reg spills - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Reject sleepable kprobe_multi programs at attach time - bpf: Release module BTF IDR before module unload - bpf: Remove mark_precise_scalar_ids() - bpf, skmsg: fix verdict sk_data_ready racing with ktls rx - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: fix tail fragment offset in bpf_msg_push_data - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpf, sockmap: Take state lock for af_unix iter - bpf: support non-r10 register spill/fill to/from stack in precision tracking - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpftool: Fix truncated netlink dumps - bpf: track aligned STACK_ZERO cases as imprecise spilled registers - bpf: Track equal scalars history on per-instruction level - bpf: use kvfree() for replaced sysctl write buffer - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: mcast: Fix a possible use-after-free when removing a bridge port - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: add raid stripe tree definitions - btrfs: add support for inserting raid stripe extents - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() - btrfs: move btrfs_crc32c_final into free-space-cache.c - btrfs: move btrfs_extref_hash into inode-item.h - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: read raid stripe tree from disk - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove btrfs_crc32c wrapper - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: omap-ocp2scp: Convert to platform remove callback returning void - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more) - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: enforce cache groups - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Reset DL migration state on can_attach() failure - cgroup: fix race between task migration and iteration - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix busy dentry used after unmounting - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at registration time - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: qoriq: avoid format string warning - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() - comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: Fix refcount leak in counter_alloc() error path - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: menu: Cleanup after loadavg removal - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - cpuset: Fix missing adaptation for cpuset_is_populated - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel - Remove cfb and ofb - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-tdes - fix DMA sync direction - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - copy IV using skcipher ivsize - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - Move direct access to some PSP registers out of TEE - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - modifying the order of header files - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: hisilicon/zip - remove zlib and gzip - crypto: hisilicon/zip - support deflate algorithm - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: nx - Avoid -Wflex-array-member-not-at-end warning - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - fix context leak in nx842_crypto_free_ctx - crypto: nx - Migrate to scomp API - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: qat - remove unused character device and IOCTLs - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() - crypto: qat - Return pointer directly in adf_ctl_alloc_resources - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: scatterwalk - Backport memcpy_sglist() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: testmgr - Hide ENOENT errors - crypto: testmgr - Hide ENOENT errors better - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - dcache: Limit the minimal number of bucket to two - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING - debugobjects: Do not fill_pool() if pi_blocked_on - debugobjects: Dont call fill_pool() in early boot hardirq context - debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - device property: set fwnode->secondary to NULL in fwnode_init() - dev_printk: add new dev_err_probe() helpers - devres: fix missing node debug info in devm_krealloc() - Disable -Wattribute-alias for clang-23 and newer - dlm: prevent NPD when writing a positive value to event_done - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate() - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: fsl-edma-main: Convert to platform remove callback returning void - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add missing `inline` for `dma_free_attrs` - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: check allocation under invalidate lock - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm init: ensure device probing has finished in dm-mod.waitfor= - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm log: fix out-of-bounds write due to region_count overflow - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: fix a hugetlbfs reservation statement - Documentation: ioctl-number: Extend "Include File" column width - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - Documentation: tracing: Add ring-buffer mapping - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - dpaa2-switch: do not clear any interrupts automatically - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: Balance RCU calls in drbd_adm_dump_devices() - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - driver core: reject devices with unregistered buses - drivers/base/memory: fix memory block reference leak in poison accounting - drivers/base/memory: set mem->altmap after successful device registration - Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: Bound VBIOS record-chain walk loops - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix integer overflow in bios_get_image() - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use krealloc_array() in dal_vector_reserve() - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Validate GPIO pin LUT table size before iterating - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop special case for yellow carp without discovery - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix spelling typos - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu: restart the CS if some parts of the VM are still invalidated - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Check for pdd drm file first in CRIU restore path - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 - drm/amdkfd: fix debug watchpoints for logical devices - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: fix NULL dereference in get_queue_ids() - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/si: Disregard vblank time when no displays are connected - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe - drm/bridge: it66121: acquire reset GPIO in probe - drm/bridge: megachips: remove bridge when irq request fails - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/display/dp_mst: Add protection against 0 vcpi - drm/dp: Add eDP 1.5 bit definition - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/fbdev-helper: Set and clear VGA switcheroo client from fb_info - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/hyperv: validate resolution_count and fix WIN8 fallback - drm/hyperv: validate VMBus packet size in receive callback - drm/i915/acpi: free _DSM package when no connectors - drm/i915: Constify watermark state checker - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update() - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915: Fix potential UAF in TTM object purge - drm/i915/gem: Fix phys BO pread/pwrite with offset - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915: Loop over all active pipes in intel_mbus_dbox_update - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Read Intel DPCD workaround register - drm/i915: Simplify watermark state checker calling convention - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/i915/wm: Verify the correct plane DDB entry - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations - drm/msm/dsi: don't dump registers past the mapped region - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm: Fix dma_free_attrs() buffer size - drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN - drm/msm/shrinker: Fix can_block() logic - drm/msm/snapshot: fix dumping of the unaligned regions - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm: Remove plane hsub/vsub alignment requirement for core helpers - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/ssd130x: Replace .page_height field in device info with a constant - drm/ssd130x: Store the HW buffer in the driver-private CRTC state - drm/ssd130x: Use bool for ssd130x_deviceinfo flags - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/tegra: dsi: fix device leak on probe - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/v3d: Set DMA segment size to avoid debug warnings - drm/v3d: Skip CSD when it has zeroed workgroups - drm/v3d: Store the active job inside the queue's state - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: fix krealloc() memory leak - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() - drm/virtio: Fix driver removal with disabled KMS - drm/virtio: use uninterruptible resv lock for plane updates - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - dt-bindings: net: Fix Tegra234 MGBE PTP clock - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - e1000e: Unroll PTP in probe error handling - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - efi: Allocate runtime workqueue before ACPI init - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix "BUG: Bad page state in z_erofs_do_read_page" - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - err.h: use __always_inline on all error pointer helpers - esp: fix skb leak with espintcp and async crypto - eth: bnxt: always recalculate features after XDP clearing, fix null-deref - ethtool: eeprom: add missing ethnl_ops_begin() / _complete() during fallback - ethtool: eeprom: add more safeties to EEPROM Netlink fallback - ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() - eventpoll: fix ep_remove struct eventpoll / struct file UAF - eventpoll: Fix integer overflow in ep_loop_check_proc() - eventpoll: kill __ep_remove() - eventpoll: move epi_fget() up - eventpoll: rename ep_remove_safe() back to ep_remove() - eventpoll: split __ep_remove() - eventpoll: use hlist_is_singular_node() in __ep_remove() - exfat: fix potential use-after-free in exfat_find_dir_entry() - exit: prevent preemption of oopsing TASK_DEAD task - exit: Sleep at TASK_IDLE when waiting for application core dump - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert bd_bitmap_page to bd_bitmap_folio - ext4: convert bd_buddy_page to bd_buddy_folio - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: get rid of ppath in ext4_convert_unwritten_extents_endio() - ext4: get rid of ppath in ext4_ext_convert_to_initialized() - ext4: get rid of ppath in ext4_ext_create_new_leaf() - ext4: get rid of ppath in ext4_ext_handle_unwritten_extents() - ext4: get rid of ppath in ext4_ext_insert_extent() - ext4: get rid of ppath in ext4_find_extent() - ext4: get rid of ppath in ext4_split_convert_extents() - ext4: get rid of ppath in ext4_split_extent() - ext4: get rid of ppath in ext4_split_extent_at() - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: publish jinode after initialization - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix to round down start offset of fallocate for pin file - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - f2fs: fix zoned block device information initialization - f2fs: keep atomic write retry from zeroing original data - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - f2fs: Use sysfs_emit_at() to simplify code - f2fs: validate ACL entry sizes in f2fs_acl_from_disk() - f2fs: validate compress cache inode only when enabled - f2fs: zone: fix to avoid inconsistence in between SIT and SSA - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var - fbdev: fix use-after-free in store_modes() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: modedb: fix a possible UAF in fb_find_mode() - fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: offb: fix PCI device reference leak on probe failure - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros - file: add fput() cleanup helper - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: dmi: Correct an indexing error in dmi.h - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fork: defer linking file vma until vma is fully initialized - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fpga: region: fix use-after-free in child_regions_with_firmware() - fs: add for 'init_fs' - fs/adfs: validate nzones in adfs_validate_bblk() - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/ntfs3: validate rec->used in journal-replay file record check - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - ftrace: Check against is_kernel_text() instead of kaslr_offset() - ftrace: Do not over-allocate ftrace memory - ftrace: Have ftrace pages output reflect freed pages - ftrace: Test mcount_loc addr before calling ftrace_call_addr() - ftrace: Update the mcount_loc check of skipped entries - fuse: Check for large folio with SPLICE_F_MOVE - fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject fuse_notify() pagecache ops on directories - fuse: reject oversized dirents in page cache - fuse: re-lock request before replacing page cache folio - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - genetlink: Use internal flags for multicast groups - gfs2: Add metapath_dibh helper - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: fiemap page fault fix - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: fix use-after-free in gfs2_qd_dealloc - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Improve gfs2_consist_inode() usage - gfs2: prevent NULL pointer dereference during unmount - gfs2: Retries missing in gfs2_{rename,exchange} - gfs2: Validate i_depth for exhash directories - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpio: cdev: check if uAPI v2 config attributes are correctly zeroed - gpiolib: acpi: Fix gpio count with string references - gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) - gpio: mvebu: fix NULL pointer dereference in suspend/resume - gpio: mxc: fix irq_high handling - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: rockchip: convert bank->clk to devm_clk_get_enabled() - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: tegra: fix irq_release_resources calling enable instead of disable - gro: change the BUG_ON() in gro_pull_from_frag0() - gve: defer interrupt enabling until NAPI registration - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hdlc_ppp: sync per-proto timers before freeing hdlc state - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: core: Fix size_t specifier in hid_report_raw_event() - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: Check to ensure report responses match the request - HID: pass the buffer size to hid_report_raw_event - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: quirks: really enable the intended work around for appledisplay - HID: roccat: fix use-after-free in roccat_report_event - HID: uclogic: Fix regression of input name assignment - HID: usbhid: fix deadlock in hid_post_reset() - HID: wacom: Fix OOB write in wacom_hid_set_device_mode() - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hpfs: fix a crash if hpfs_map_dnode_bitmap fails - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Fix trace oddity - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hsr: Remove WARN_ONCE() in hsr_addr_is_self(). - hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf - hv_sock: fix ARM64 support - hv: utils: handle and propagate errors in kvp_register - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: (axi-fan-control) Make use of dev_err_probe() - hwmon: (axi-fan-control) Use device firmware agnostic API - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer - hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR - hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple - hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer - hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() - hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() - hwmon: (pmbus/adm1266) reject implausible blackbox record_count - hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors - hwmon: (pmbus/adm1266) seed timestamp from the real-time clock - hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with pmbus_lock - hwmon: (pmbus/adm1266) serialize NVMEM blackbox read with pmbus_lock - hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: cp2615: replace deprecated strncpy with strscpy - i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: stm32f7: fix timing computation ignoring i2c-analog-filter - i2c: stub: Reject I2C block transfers with invalid length - i2c: tegra: Don't mark devices with pins as IRQ safe - i2c: tegra: Fix NOIRQ suspend/resume - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: fix VLAN filter lost on add/delete race - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix double-free of tx_buf skb - ice: fix locking in ice_dcb_rebuild() - ice: Fix memory leak in ice_set_ringparam() - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix retry for AQ command 0x06EE - ice: fix setting promisc mode while adding VID filter - ice: fix VF queue configuration with low MTU values - ice: reintroduce retry mechanism for indirect AQ - ice: Remove jumbo_remove step from TX path - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: icmp_msgs_per_sec and icmp_msgs_burst sysctls become per netns - icmp: move icmp_global.credit and icmp_global.stamp to per netns storage - icmp: prevent possible overflow in icmp_global_allow() - ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() - igc: fix missing update of skb->tail in igc_xmit_frame() - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: npcm: Convert to platform remove callback returning void - iio: adc: npcm: fix unbalanced clk_disable_unprepare() - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw - iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux - iio: buffer: Fix wait_queue not being removed - iio: buffer: hw-consumer: fix use-after-free in error path - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: scd30: fix division by zero in write_raw - iio: chemical: scd30: Use guard(mutex) to allow early returns - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: common: st_sensors: Fix use of uninitialize device structs - iio: dac: ad5686: acquire lock when doing powerdown control - iio: dac: ad5686: fix input raw value check - iio: dac: ad5686: fix ref bit initialization for single-channel parts - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: dac: max5821: fix return value check in powerdown sync - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: gyro: adis16260: fix division by zero in write_raw - iio: gyro: itg3200: fix i2c read into the wrong stack location - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: bh1780: fix PM runtime leak on error path - iio: light: cm3323: fix reg_conf not being initialized correctly - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix scan_type struct - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: ssp_sensors: cancel delayed work_refresh on remove - iio: temperature: tsys01: fix broken PROM checksum validation - iio: Use IRQF_NO_THREAD - ima: check return value of crypto_shash_final() in boot aggregate - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: add indirect call wrapper for getfrag() calls - inet: frags: add inet_frag_queue_flush() - inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush - inet: frags: flush pending skbs in fqdir_pre_exit() - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) - Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard - Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem - Input: elan_i2c - validate firmware size before use - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() - Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size - Input: xpad - add "Nova 2 Lite" from GameSir - Input: xpad - add support for ASUS ROG RAIKIRI II - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - Input: xpad - fix out-of-bounds access for Share button - iomap: allocate s_dio_done_wq for async reads as well - iomap: don't revert iov_iter on partially completed buffered writes - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommu, debugobjects: avoid gcc-16.1 section mismatch warnings - iommufd: Fix a race with concurrent allocation and unmap - iommufd: vfio compatibility extension check for noiommu mode - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() - ip6_vti: set netns_immutable on the fallback device. - ip6: vti: Use ip6_tnl.net in vti6_changelink(). - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). - ipc: don't audit capability check in ipc_permissions() - ipc: limit next_id allocation to the valid ID range - ipc/shm: serialize orphan cleanup with shm_nattch updates - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: Fix rcu_read_unlock to srcu_read_unlock in handle_read_event_rsp - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipmi:ssif: Clean up kthread on errors - ipmi:ssif: Fix a shutdown race - ipmi:ssif: NULL thread on error - ipmi:ssif: Remove unnecessary indention - ipv4: account for fraggap on the paged allocation path - ipv4: add new arguments to udp_tunnel_dst_lookup() - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 - ipv4: remove "proto" argument from udp_tunnel_dst_lookup() - ipv4: rename and move ip_route_output_tunnel() - ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options - ipv6: account for fraggap on the paged allocation path - ipv6: add NULL checks for idev in SRv6 paths - ipv6/addrconf: annotate data-races around devconf fields (II) - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: exthdrs: refresh nh after handling HAO option - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() - ipv6: Fix a potential NPD in cleanup_prefix_route() - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: fix possible infinite loop in fib6_select_path() - ipv6: fix possible infinite loop in rt6_fill_node() - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: mcast: Fix use-after-free when processing MLD queries - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rename and move ip6_dst_lookup_tunnel() - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: sit: reload inner IPv6 header after GSO offloads - ipv6: use RCU in ip6_xmit() - ipv6: validate extension header length before copying to cmsg - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: clear the svc scheduler ptr early on edit - ipvs: fix MTU check for GSO packets in tunnel mode - ipvs: fix NULL deref in ip_vs_add_service error path - ipvs: skip ipv6 extension headers for csum checks - irqchip/ath79-cpu: Remove unused function - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - ixgbevf: fix use-after-free in VEPA multicast source pruning - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Leave objtool binary around with 'make clean' - kexec: derive purgatory entry from symbol - KEYS: fix overflow in keyctl_pkey_params_get_2() - keys: Pin request_key_auth payload in instantiate paths - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() - ksmbd: add durable scavenger timer - ksmbd: add support for supplementary groups - ksmbd: avoid reclaiming expired durable opens by the client - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: close durable scavenger races against m_fp_list lookups - ksmbd: Compare MACs in constant time - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers - ksmbd: fix null pointer dereference in compare_guid_key() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds read in smb_check_perm_dacl() - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops - ksmbd: reject non-VALID session in compound request branch - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: scope conn->binding slowpath to bound sessions only - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate owner of durable handle on reconnect - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Fix the month in the name of the failure directory - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - kunit: config: Enable KUNIT_DEBUGFS by default - kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: PMU: Preserve AArch32 counter low bits - KVM: arm64: Remove VPIPT I-cache handling - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Fold requested virtual interrupt check into has_nested_events() - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path - KVM: SVM: Flush the current TLB when transitioning from xAVIC => x2AVIC - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: VMX: Update SVI during runtime APICv activation - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: Fix KVM_GET_MSRS stack info leak - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Fix shadow paging use-after-free due to unexpected role - KVM: x86: Fix Xen hypercall tracepoint argument assignment - KVM: x86: hyper-v: Bound the bank index when querying sparse banks - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - l2tp: do not use sock_hold() in pppol2tp_session_get_sock() - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - leds: lgm-sso: Remove duplicate assignments for priv->mmap - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libbpf: Fix -Wdiscarded-qualifiers under C23 - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: handle rbtree insertion error in decode_choose_args() - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - locking: Fix rwlock support in - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Add WriteCombine shadow mapping in KASAN - LoongArch: Add writecombine support for DMW-based ioremap() - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: kprobes: Fix handling of fatal unrecoverable recursions - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove unused code to avoid build warning - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - loop: fix partition scan race between udev and loop_reread_partitions() - lsm: add backing_file LSM hooks - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac802154: llsec: add skb_cow_data() before in-place crypto - macsec: fix replay protection at XPN lower-PN wrap - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: add sanity check for channel array - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mailbox: Use of_property_match_string() instead of open-coding - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix data lost for writemostly rdev - md/raid1,raid10: don't ignore IO flags - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: fix race between unregister and urb/irq callbacks - media: rc: igorplugusb: fix control request setup packet - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: fix inverted error logic - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: tegra-video: Use accessors for pad config 'try_*' fields - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si - media: vidtv: fix pass-by-value structs causing MSAN warnings - memfd: deny writeable mappings when implying SEAL_WRITE - memory: mtk-smi: Convert to platform remove callback returning void - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - mfd: omap-usb-host: Convert to platform remove callback returning void - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Convert to platform remove callback returning void - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: DEC: Prevent initial console buffer from landing in XKPHYS - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: fix DMA address corruption due to find_vma misuse - misc: fastrpc: Fix NULL pointer dereference in rpmsg callback - misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context - misc: fastrpc: fix use-after-free race in fastrpc_map_create - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Fix host controller programming for fixed driver type - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: litex_mmc: Set mandatory idle clocks before CMD0 - mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: add signal voltage switch in sdhci_resume_host - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/ops-common: call folio_test_lru() after folio_get() - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() - mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/huge_memory: update file PMD counter before folio_put() - mm/hugetlb: avoid false positive lockdep assertion - mm/hugetlb_cma: round up per_node before logging it - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm/hugetlb: rename folio_putback_active_hugetlb() to folio_putback_hugetlb() - mm/hugetlb: rename isolate_hugetlb() to folio_isolate_hugetlb() - mm/hugetlb: restore reservation on error in hugetlb folio copy paths - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory: fix spurious warning when unmapping device-private/exclusive pages - mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node() - mm/migrate: don't call folio_putback_active_hugetlb() on dst hugetlb folio - mm/page_alloc: clear page->private in free_pages_prepare() - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/tracing: rss_stat: ensure curr is false from kthread context - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - module: Fix kernel panic when a symbol st_shndx is out of bounds - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: add-addr: always drop other suboptions - mptcp: allow subflow rcv wnd to shrink - mptcp: cleanup fallback dummy mapping generation - mptcp: close TOCTOU race while computing rcv_wnd - mptcp: do not drop partial packets - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix missing wakeups in edge scenarios - mptcp: fix receive space timestamp initialization - mptcp: fix retransmission loop when csum is enabled - mptcp: fix rx timestamp corruption on fastopen - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: handle first subflow closing consistently - mptcp: introduce the mptcp_init_skb helper - mptcp: pm: ADD_ADDR rtx: allow ID 0 - mptcp: pm: ADD_ADDR rtx: always decrease sk refcount - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: free sk if last - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient - mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mptcp: reset rcv wnd on disconnect - mptcp: sockopt: check timestamping ret value - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: sync the msk->sndbuf at accept() time - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mptcp: use plain bool instead of custom binary enum - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: Convert to platform remove callback returning void - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spinand: Fix kernel doc - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()` - mtd: spi-nor: sst: Fix SST write failure - mtd: spi-nor: sst: Fix write enable before AAI sequence - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - myri10ge: avoid uninitialized variable use - neighbour: add RCU protection to neigh_tables[] - neigh: let neigh_xmit take skb ownership - net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add support for segmenting TCP fraglist GSO packets - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: ag71xx: check error for platform_get_irq - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: Annotate sk->sk_write_space() for UDP SOCKMAP. - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: increase WoL poll timeout - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: keep RBUF EEE/PM disabled - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: Remove custom ndo_poll_controller() - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net: bonding: add broadcast_neighbor option for 802.3ad - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix NULL pointer dereference in bond_do_ioctl() - net: bonding: fix use-after-free in bond_xmit_broadcast() - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: Flush multicast groups when snooping is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - netconsole: propagate device name truncation in dev_name_store() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix potential unregister of netdev that has not been registered yet - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: mt7530: fix FDB entries not aging out with short timeout - net: dsa: mt7530: preserve VLAN tags on trapped link-local frames - net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw - net: dsa: properly keep track of conduit reference - net: dsa: realtek: rtl8365mb: fix mode mask calculation - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: cortina: Carry over frag counter - net: ethernet: cortina: Drop half-assembled SKB - net: ethernet: cortina: Make RX SKB per-port - net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix pinctrl default state restore order on resume - net: fec: fix the PTP periodic output sysfs interface - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: bitwise: add support for doing AND, OR and XOR directly - netfilter: bitwise: rename some boolean operation functions - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: bridge: make ebt_snat ARP rewrite writable - netfilter: conntrack: add missing netlink policy validations - netfilter: conntrack_irc: fix possible out-of-bounds read - netfilter: conntrack: remove sprintf usage - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check - netfilter: ctnetlink: ensure safe access to master conntrack - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: ebtables: fix OOB read in compat_mtw_from_user - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_hbh: reject oversized option lists - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: stop hash:* range iteration at end - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nf_log: validate MAC header was set before dumping it - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nf_queue: hold bridge skb->dev while queued - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix dst corruption in same register operation - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_ct: bail out on template ct in get eval - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag - netfilter: nft_fib: fix stale stack leak via the OIFNAME register - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_inner: Fix IPv6 inner_thoff desync - netfilter: nft_osf: restrict it to ipv4 - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_tunnel: fix use-after-free on object destroy - netfilter: reject zero shift in nft_bitwise - netfilter: require Ethernet MAC header before using eth_hdr() - netfilter: skip recording stale or retransmitted INIT - netfilter: synproxy: add mutex to guard hook reference counting - netfilter: synproxy: refresh tcphdr after skb_ensure_writable - netfilter: x_tables: avoid leaking percpu counter pointers - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: xtables: restrict several matches to inet family - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: x_tables: unregister the templates first - netfilter: xt_cpu: prefer raw_smp_processor_id - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_NFQUEUE: prefer raw_smp_processor_id - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - net: Fix icmp host relookup triggering ip_rt_bug - net: fix segmentation of forwarding fraglist GRO - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix overrun check in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: ftgmac100: fix ring allocation unwind on open failure - net: garp: fix unsigned integer underflow in garp_pdu_parse_attr - net: gro: don't merge zcopy skbs - net: gso: fix tcp fraglist segmentation after pull from frag_list - net: guard timestamp cmsgs to real error queue skbs - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: defer node table free until after RCU readers - net: hsr: fix potential OOB access in supervision frame handling - net: hsr: fix VLAN add unwind on slave errors - net: ifb: report ethtool stats over num_tx_queues - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: ipv4: stop checking crypto_ahash_alignmask - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: stop checking crypto_ahash_alignmask - net/iucv: fix locking in .getsockopt - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - netlabel: validate unlabeled address and mask attribute lengths - net: lan743x: permit VLAN-tagged packets up to configured MTU - net: lan966x: avoid unregistering netdev on register failure - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: queue tie-off or disable during WOL suspend - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: Add NULL guards in teardown path to prevent panic on attach failure - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mana: validate rx_req_idx to prevent out-of-bounds array access - net: mctp: ensure our nlmsg responses are initialised - net: mctp: fix don't require received header reserved bits to be zero - net: mctp i2c: check length before marking flow active - net: mctp-i2c: fix duplicate reception of old data - net/mlx4: avoid GCC 10 __bad_copy_from() false positive - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: Do not restore destination-less TC rules - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Reorder completion before putting command entry in cmd_work_handler - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mv643xx: fix OF node refcount - net: mvpp2: Add metadata support for xdp mode - net: mvpp2: build skb from XDP-adjusted data on XDP_PASS - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: mvpp2: limit XDP frame size to the RX buffer - net: mvpp2: refill RX buffers before XDP or skb use - net: mvpp2: sync RX data at the hardware packet offset - net: ncsi: fix skb leak in error paths - net: netconsole: move newline trimming to function - net: netlink: don't set nsid on local notifications - net: netlink: fix sending unassigned nsid after assigned one - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - netns-ipv4: reorganize netns_ipv4 fast path variables - net: openvswitch: Avoid releasing netdev before teardown completes - net: openvswitch: fix possible kfree_skb of ERR_PTR - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phonet: free phonet_device after RCU grace period - net: phy: add Rust Asix PHY driver - net: phy: aquantia: move to separate directory - net: phy: c45: add genphy_c45_pma_read_ext_abilities() function - net: phy: clean the sfp upstream if phy probing fails - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: DP83TC811: add reading of abilities - net: phy: move at803x PHY driver to dedicated directory - net: phy: qcom: at803x: Use the correct bit to disable extended next page - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() - net: rds: clear i_sends on setup unwind - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: Optimize rds_ib_laddr_check - net/rds: rds_sendmsg should not discard payload_len - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net/sched: act_api: use RCU with deferred freeing for action lifecycle - net: sched: act_csum: validate nested VLAN headers - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flower: revert unintended changes - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net/sched: fix pedit partial COW leading to page cache corruption - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: sfp: improve Nokia GPON sfp fixup - net: sfp: re-implement ignoring the hardware TX_FAULT signal - net: skb: fix cross-cache free of KFENCE-allocated skb head - net: skbuff: fix missing zerocopy reference in pskb_carve helpers - net: skbuff: fix pskb_carve leaking zcopy pages - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skmsg: preserve sg.copy across SG transforms - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint - net/smc: Do not re-initialize smc hashtables - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net: tcp: accept old ack during closing - net/tcp-md5: Fix MAC comparison to be constant-time - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring - net: tls: fix strparser anchor skb leak on offload RX setup failure - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: tls: prevent chain-after-chain in plain text SG - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: iosm: fix potential memory leaks in ipc_imem_init() - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: fix out-of-bounds read in HCP header parsing - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: llcp: Fix use-after-free in llcp_sock_release() - nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfnetlink_osf: validate individual option lengths in fingerprints - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nfsd: check get_user() return when reading princhashlen - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix posix_acl leak on SETACL decode failure - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Fix SECINFO_NO_NAME decode error cleanup - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - NFS: Fix a deadlock involving nfs_release_folio() - nfs: pass explicit offset/count to trace events - NFS: Prevent resource leak in nfs_alloc_server() - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - ntfs3: reject direct userspace writes to reserved $LX* xattrs - ntfs: ->d_compare() must not block - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: layouts: onie-tlv: fix hang on unknown types - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: fix missed admin queue sq doorbell write - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet-tcp: fix race between ICReq handling and queue teardown - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - objtool: Remove max symbol name length limitation - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: reject oversized group bitmap descriptors - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep: restructured interrupt handlers - octeon_ep: set backpressure watermark for RX queues - octeon_ep: support Octeon CN10K devices - octeon_ep: support to fetch firmware info - octeontx2-af: CGX: add bounds check to cgx_speed_mbps index - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: devlink health: use retained error fmsg API - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: fix memory leak in rvu_setup_hw_resources() - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: npc: Fix CPT channel mask in npc_install_flow - octeontx2-af: replace deprecated strncpy with strscpy - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: avoid double free of pool->stack on AQ init failure - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: cap upcall PID array size and pre-size vport replies - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - ovl: Fix uninit-value in ovl_fill_real - padata: Fix pd UAF once and for all - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove comment for reorder_work - padata: Remove cpu online check from cpu add and removal - params: Replace __modinit with __init_or_module - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - parport: Fix race between port and client registration - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Stop ruling out unbound devices as error source - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: endpoint: Remove unused field in struct pci_epf_group - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Log bridge info when first enumerating bridge - PCI: Log bridge windows conditionally - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI: Move pci_read_bridge_windows() below individual window accessors - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: Supply bridge device, not secondary bus, to read window details - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: Update BAR # and window messages - PCI: Use resource names in PCI log messages - PCI: Use resource_set_range() that correctly sets ->end - PCMCIA: Fix garbled log messages for KERN_CONT - pcnet32: stop holding device spin lock during napi_complete_done - pds_core: add an error code check in pdsc_dl_info_get - pds_core: ensure null-termination for firmware version strings - pds_core: fix debugfs_lookup dentry leak and error handling - pds_core: fix error handling in pdsc_devcmd_wait - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf branch: Avoid incrementing NULL - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf: Extract a few helpers - perf: Fix dangling cgroup pointer in cpuctx - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf lock: Fix option value type in parse_max_stack - perf: Make sure to use pmu_ctx->pmu for groups - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf unwind-libdw: Fix invalid reference counts - perf util: Kill die() prototype, dead for a long time - perf/x86/intel/uncore: Skip discovery table for offline dies - phonet: Pass ifindex to fill_addr(). - phonet: Pass net and ifindex to phonet_address_notify(). - phonet/pep: disable BH around forwarded sk_receive_skb() - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access - phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: tegra: xusb: Fix per-pad high-speed termination calibration - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - pidfd: refuse access to tasks that have started exiting harder - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp_accel: Check ACPI_COMPANION() against NULL - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL - platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery - platform/x86: ISST: Correct locked bit width - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - pmdomain: ti: omap_prm: Fix a reference leak on device node - PM: hibernate: Don't ignore return from set_memory_ro() - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: Fix a deadlock when returning a delegation during open() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - pNFS: Fix use-after-free in pnfs_update_layout() - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - powerpc/warp: Fix error handling in pika_dtm_thread - power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - pstore/ram: fix resource leak when ioremap() fails - ptp: vclock: Switch from RCU to SRCU - ptrace: Convert ptrace_attach() to use lock guards - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qed: fix double free in qed_cxt_tables_alloc() - quota: fix livelock between quotactl and freeze_super - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - r8152: handle the return value of usb_reset_device() - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu() - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - rcu: s/boost_kthread_mutex/kthread_mutex - RDMA/bnxt_re: zero shared page before exposing to userspace - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix a couple of obvious typos in comments - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/core: Prefer NLA_NUL_STRING - RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA: Move DMA block iterator logic into dedicated files - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: Fix use-after-free in path file creation cleanup - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/siw: Reject MPA FPDU length underflow before signed receive math - RDMA/srp: bound SRP_RSP sense copy by the received length - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/umem: fix kernel-doc warnings - RDMA/umem: Fix truncation for block sizes >= 4G - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - rds: mark snapshot pages dirty in rds_info_getsockopt() - regmap: Synchronize cache for the page selector - regset: use kvzalloc() for regset_get_alloc() - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: fix locking in regulator_resolve_supply() error path - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: pca9450: Make IRQ optional - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - resource: Add resource set range and size helpers - Revert "af_unix: Reject SIOCATMARK on non-stream sockets" - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx" - Revert "crypto: nx - fix context leak in nx842_crypto_free_ctx" - Revert "crypto: nx - Migrate to scomp API" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "ice: fix double-free of tx_buf skb" - Revert "ice: Remove jumbo_remove step from TX path" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "perf unwind-libdw: Fix invalid reference counts" - Revert "ptp: add testptp mask test" - Revert "rust: pin-init: add references to previously initialized fields" - Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors" - Revert "s390/cio: Update purge function to unregister the unused subchannels" - Revert "selftest/ptp: update ptp selftest to exercise the gettimex options" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" - Revert "wireguard: device: enable threaded NAPI" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - Revert "x86/vdso: Fix output operand size of RDPID" - Revert "xattr: switch to CLASS(fd)" - ring-buffer: Fix reporting of missed events in iterator - ring-buffer: Remove ring_buffer_read_prepare_sync() - riscv: kgdb: fix several debug register assignment bugs - riscv: Sanitize syscall table indexing under speculation - rnbd-srv: Zero the rsp buffer before using it - romfs: check sb_set_blocksize() return value - rpmsg: char: Fix use-after-free on probe error path - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: abx80x: Disable alarm feature if no interrupt attached - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: internal: init: document load-bearing fact of field accessors - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg - rxrpc: Fix data-race warning and potential load/store tearing - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: Fix the ACK parser to extract the SACK table for parsing - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: convert sprintf()/snprintf() to sysfs_emit() - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cio: make sch->lock spinlock pointer a member - s390/cio: use generic driver_override infrastructure - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input before trimming a newline - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf: Disable register readout on sampling events - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/fair: Fix pelt clock sync when entering idle - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scripts/sorttable: Add helper functions for Elf_Ehdr - scripts/sorttable: Add helper functions for Elf_Shdr - scripts/sorttable: Add helper functions for Elf_Sym - scripts/sorttable: Allow matches to functions before function entry - scripts/sorttable: Always use an array for the mcount_loc sorting - scripts/sorttable: Convert Elf_Ehdr to union - scripts/sorttable: Convert Elf_Sym MACRO over to a union - scripts/sorttable: Fix endianness handling in build-time mcount sort - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly - scripts/sorttable: Have mcount rela sort use direct values - scripts/sorttable: Have the ORC code use the _r() functions to read - scripts/sorttable: Make compare_extable() into two functions - scripts/sorttable: Move code from sorttable.h into sorttable.c - scripts/sorttable: Remove unneeded Elf_Rel - scripts/sorttable: Remove unused macro defines - scripts/sorttable: Remove unused write functions - scripts/sorttable: Replace Elf_Shdr Macro with a union - scripts/sorttable: Use a structure of function pointers for elf helpers - scripts/sorttable: Use normal sort if theres no relocs in the mcount section - scripts/sorttable: Use uint64_t for mcount sorting - scripts/sorttable: Zero out weak functions in mcount_loc table - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues - scsi: csiostor: Fix dereference of null pointer rn - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: isci: Fix use-after-free in device removal path - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Make sg_sysfs_class constant - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: core: Fix integer overflow in UNMAP bounds check - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() - scsi: target: iscsi: Validate CHAP_R length before base64 decode - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Fix use-after free in init error and remove paths - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - sctp: diag: reject stale associations in dump_one path - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - sctp: fix race between sctp_wait_for_connect and peeloff - sctp: fix uninit-value in __sctp_rcv_asconf_lookup() - sctp: purge outqueue on stale COOKIE-ECHO handling - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - sctp: stream: fully roll back denied add-stream state - security/keys: fix missed RCU read section on lookup - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: add stack access precision test - selftests/bpf: Add test to ensure kprobe_multi is not sleepable - selftests/bpf: Tests for per-insn sync_linked_regs() precision tracking - selftests/bpf: Update comments find_equal_scalars->sync_linked_regs - selftests/bpf: validate fake register spill/fill precision backtracking logic - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros - selftests/bpf: validate STACK_ZERO is preserved on subreg spill - selftests/bpf: validate zero preservation for sub-slot loads - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/memfd: delete unused declarations - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: skip migration tests if NUMA is unavailable - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: add test for extra_subflows underflow on userspace PM - selftests: mptcp: drop nanoseconds width specifier - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selftests/powerpc: Re-order *FLAGS to follow lib.mk - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selinux: don't reserve xattr slot when we won't fill it - selinux: fix overlayfs mmap() and mprotect() access checks - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serdev: make serdev_bus_type const - serdev: Provide a bustype shutdown function - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: altera_jtaguart: handle uart_add_one_port() failures - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: dz: Convert to use a platform device - serial: dz: Fix bootconsole handover lockup - serial: dz: Fix bootconsole message clobbering at chip reset - serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ - serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero - serial: qcom-geni: fix UART_RX_PAR_EN bit position - serial: samsung_tty: Use port lock wrappers - serial: sh-sci: fix memory region release in error path - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - serial: zs: Convert to use a platform device - serial: zs: Fix bootconsole handover lockup - serial: zs: Fix swapped RI/DSR modem line transition counting - serial: zs: Switch to using channel reset - sfc: fix error code in efx_devlink_info_running_versions() - sh: platform_early: remove pdev->driver_override check - signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() - slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock - slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD - slimbus: qcom-ngd-ctrl: fix OF node refcount - slimbus: qcom-ngd-ctrl: Fix up platform_driver registration - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb: client: fix OOB reads parsing symlink error response - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() - smb: client: reject userspace cifs.spnego descriptions - smb: client: require a full NFS mode SID before reading mode bits - smb: client: require net admin for CIFS SWN netlink - smb: client: Use FullSessionKey for AES-256 encryption key derivation - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: common: change the data type of num_aces to le16 - smb: move some duplicate definitions to common/smbacl.h - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get() - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc: qcom: ocmem: use scoped device node handling to simplify error paths - soc: qcom: smem: handle ENOMEM error during probe - soc/tegra: cbb: Set ERD on resume for err interrupt - soc/tegra: pmc: Fix unsafe generic_handle_irq() call - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: geni-qcom: Check DMA interrupts early in ISR - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: microchip-core-qspi: Use helper function devm_clk_get_enabled() - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix runtime pm leak on unbind - spi: qup: fix controller deregistration - spi: qup: fix error pointer deref after DMA setup failure - spi: rockchip: fix controller deregistration - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: spi-ti-qspi: Convert to platform remove callback returning void - spi: spi-ti-qspi: switch to use modern name - spi: sprd: fix controller deregistration - spi: sprd: fix error pointer deref after DMA setup failure - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: st-ssc4: switch to use modern name - spi: sun4i: fix controller deregistration - spi: sun4i: switch to use modern name - spi: sun6i: fix controller deregistration - spi: sun6i: switch to use modern name - spi: syncuacer: fix controller deregistration - spi: synquacer: switch to use modern name - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: ti-qspi: fix controller deregistration - spi: ti-qspi: fix use-after-free after DMA setup failure - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: uniphier: switch to use modern name - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: wpcm-fiu: Fix uninitialized res - spi: wpcm-fiu: Simplify with dev_err_probe() - spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - spi: zynq-qspi: switch to use modern name - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - string: add mem_is_zero() helper to check if memory area is all zeros - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - svcrdma: Clean up comment in svc_rdma_accept() - svcrdma: Increase the per-transport rw_ctx count - svcrdma: Reduce the number of rdma_rw contexts per-QP - svcrdma: Remove queue-shortening warnings - sysctl: fix uninitialized variable in proc_do_large_bitmap - sysfs: don't remove existing directory on update failure - tap: free page on error paths in tap_get_user_xdp() - taskstats: set version in TGID exit notifications - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: call sk_data_ready() after listener migration - tcp: defer regular ACK while processing socket backlog - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses. - tcp: Fix imbalanced icsk_accept_queue count. - tcp: optimize inet_use_bhash2_on_bind() - tcp: Rearrange tests in inet_csk_bind_conflict(). - tcp: restrict SO_ATTACH_FILTER to priv users - tcp: Set pingpong threshold via sysctl - tcp: tcp_tx_timestamp() must look at the rtx queue - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address. - tee: optee: prevent use-after-free when the client exits before the supplicant - test_kprobes: clear kprobes between test runs - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thunderbolt: Bound root directory content to block size - thunderbolt: Clamp XDomain response data copy to allocation size - thunderbolt: Fix property read in nhi_wake_supported() - thunderbolt: Limit XDomain response copy to actual frame size - thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() - thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow - thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() - thunderbolt: Reject zero-length property entries in validator - thunderbolt: Validate XDomain request packet size before type cast - time: Fix off-by-one in settimeofday() usec validation - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix double-free in tipc_buf_append() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done - tls: Preserve sk_err across recvmsg() when data has been copied - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tools/rv: Fix cleanup after failed trace setup - tpm: avoid -Wunused-but-set-variable - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: branch: Fix inverted check on stat tracer registration - tracing: Do not call map->ops->elt_free() if elt_alloc() fails - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing/probes: Point the error offset correctly for eprobe argument error - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Rebuild full_name on each hist_field_name() call - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: pch_uart: add check for dma_alloc_coherent() - tty: serial: samsung: Remove redundant port lock acquisition in rx helpers - tty: serial: samsung: use u32 for register interactions - tun: free page on build_skb failure in tun_xdp_one() - tun: free page on short-frame rejection in tun_xdp_one() - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: clear skb->dev before running a sockmap verdict - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - unshare: fix unshare_fs() handling - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - USB: cdc-acm: Fix bit overlap and move quirk definitions to header - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix request skipping after clearing halt - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure - usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: core: convert ci_role_switch to local variable - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - usb: core: Fix SuperSpeed root hub wMaxPacketSize - usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: Fix use after free in debug code - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: dwc3: xilinx: fix error handling in zynqmp init error paths - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports - usb: gadget: f_fs: copy only received bytes on short ep0 read - usb: gadget: f_hid: fix device reference leak in hidg_alloc() - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: net2280: Fix double free in probe error path - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usbip: vudc: Fix use after free bug in vudc_remove due to race condition - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - usb: musb: omap2430: Fix use-after-free in omap2430_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: belkin_sa: validate interrupt status length - USB: serial: cypress_m8: fix memory corruption with small endpoint - USB: serial: cypress_m8: validate interrupt packet headers - USB: serial: digi_acceleport: fix memory corruption with small endpoints - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() - USB: serial: io_ti: fix heap overflow in get_manuf_info() - USB: serial: keyspan: fix missing indat transfer sanity check - USB: serial: kl5kusb105: fix bulk-out buffer overflow - USB: serial: mct_u232: fix memory corruption with small endpoint - USB: serial: mct_u232: fix missing interrupt-in transfer sanity check - USB: serial: mxuport: fix memory corruption with small endpoint - USB: serial: omninet: fix memory corruption with small endpoint - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add MeiG SRM813Q - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add usb-id for Dell Wireless DW5826e-m - USB: serial: safe_serial: fix memory corruption with small endpoint - usb: storage: Add quirks for PNY Elite Portable SSD - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmodes/displayport: validate count before reading Status Update VDO - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT - usb: typec: ucsi: ccg: reject firmware images without a ':' record header - usb: typec: ucsi: Check if power role change actually happened before handling - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO - usb: typec: ucsi: Don't update power_supply on power role change if not connected - usb: typec: ucsi: Move unregister out of atomic section - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: validate connector number in ucsi_connector_change() - usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: check URB actual_length for interrupt-IN notifications - usb: usbtmc: Flush anchored URBs in usbtmc_release - usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write - vfio: Create vfio_fs_type with inode per device - vfio/pci: Insert full vma on mmap'd MMIO fault - vfio/pci: Use unmap_mapping_range() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtiofs: fix UAF on submount umount - virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vrf: Fix a potential NPD when removing a port from a VRF - vsock: fix buffer size clamping order - vsock: keep poll shutdown state consistent - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: reset connection on receiving queue overflow - vsock/vmci: fix sk_ack_backlog leak on failed handshake - vsock/vmci: fix UAF when peer resets connection during handshake - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() - vxlan: validate ND option lengths in vxlan_na_create - vxlan: vnifilter: fix spurious notification on VNI update - vxlan: vnifilter: send notification on VNI add - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: clear shared SRNG pointer state on restart - wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() - wifi: ath11k: fix error path leaks in some WMI WOW calls - wifi: ath11k: fix peer resolution on rx path when peer_id=0 - wifi: ath11k: fix warning when unbinding - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath11k: skip status ring entry processing - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix error pointer dereference - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: iwlwifi: mvm: fix race condition in PTP removal - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mt76: connac: introduce helper for mt7925 chipset - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: nl80211: reject oversized EMA RNR lists - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: increase TX report timeout to fix race condition - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: usb: fix memory leaks on USB write failures - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - wireguard: send: append trailer after expanding head - workqueue: Factor out assign_rescuer_work() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - X.509: Fix out-of-bounds access when parsing extensions - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/kexec: Disable KCOV instrumentation after load_segments() - x86/platform/uv: Handle deconfigured sockets - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler - x86/sev: Harden #VC instruction emulation somewhat - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen: Fix xen_e820_swap_entry_with_ram() - x86/xen: make some functions static - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: ah: account for ESN high bits in async callbacks - xfrm: ah: use skb_to_full_sk in async output callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: Check for underflow in xfrm_state_mtu - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: espintcp: do not reuse an in-progress partial send - xfrm: esp: restore combined single-frag length gate - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: Fix the usage of skb->sk - xfrm: input: hold netns during deferred transport reinjection - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: route MIGRATE notifications to caller's netns - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: delete attr leaf freemap entries when empty - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix undersized l_iclog_roundoff values - xfs: mark data structures corrupt on EIO and ENODATA - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: stop reclaim before pushing AIL during unmount - xhci: tegra: Fix ghost USB device on dual-role port unplug - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zonefs: handle integer overflow in zonefs_fname_to_fno - zram: do not forget to endio for partial discard requests - zram: fix use-after-free in zram_bvec_write_partial() - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Fix CIFSwitch vulnerability- FIX GPO Frag vulnerability- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- Remove dead, not used patches- Fix Dirtyfrag- Fix CVE-2026-31431 (Copyfail)- Fix regression with touchpad on notebook Positron Proxima 15 and probably others (bz#19950) - https://bugzilla.rosa.ru/show_bug.cgi?id=19950- [bot] upd: 6.6.106 -> 6.6.126 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - acpi: Break out nesting for hmat_parse_locality() - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - acpi, hmat: calculate abstract distance with HMAT - acpi/hmat: Fix lockdep warning for hmem_register_resource() - acpi, hmat: refactor hmat_register_target_initiators() - ACPI: HMAT: Remove register of memory node for generic target - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - acpi: numa: Add genport target allocation to the HMAT parsing - acpi: numa: Add setting of generic port system locality attributes - acpi: numa: Create enum for memory_target access coordinates indexing - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Initialise scc_index in unix_add_edge(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Use standard print API - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64/fpsimd: signal: Consistently read FPSIMD context - arm64/fpsimd: signal: Fix restoration of SVE context - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state - arm64: kprobes: call set_memory_rox() for kprobe page - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: Set __nocfi on swsusp_arch_resume() - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wsa881x: Drop unused version readout - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates' - base/node / ACPI: Enumerate node access class for 'struct access_coordinate' - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-mq: Abort suspend when wakeup events are pending - blk-mq: add helper for checking if one CPU is mapped to specified hctx - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: don't schedule block kworker on isolated CPUs - blk-mq: setup queue ->tag_set before initializing hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: fix race between set_blocksize and read paths - block: make REQ_OP_ZONE_OPEN a write operation - block: rate-limit capacity change info log - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Improve program stats run-time calculation - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - btrfs: ref-verify: handle damaged extent root tree - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: store fs_info in space_info - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - cachestat: do not flush stats in recency check - caif: fix integer underflow in cffrml_receive() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: refactor wake_up_bit() pattern of calling - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: fix pagecache leak when do writepages - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: Fix uncached read into ITER_KVEC iterator - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - cifs: stop writeback extension when change of size is detected - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - cnic: Fix use-after-free bugs in cnic_delete_task - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Treat cpusets in attaching as populated - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed-acry - Convert to platform remove callback returning void - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd: Avoid evicting resources at S5 - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: Check dce_hwseq before dereferencing it - drm/amd/display: Check NULL before accessing - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix null pointer deref in dcn20_resource.c - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: Remove redundant semicolons - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu: csa unmap use uninterruptible lock - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amdkfd: Don't use sw fault filter if retry cam enabled - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/ast: Use msleep instead of mdelay for edid read - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imx/tve: fix probe device leak - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/adreno: De-spaghettify the use of memory barriers - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/pl111: Fix error handling in pl111_amba_probe - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/tilcdc: Fix removal actions in case of failed probe - drm/tilcdc: request and mapp iomem with devres - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: Add SM7150 - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - epoll: Remove ep_scan_ready_list() in comments - espintcp: fix skb leaks - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - Expand the type of nfs_fattr->valid - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: filesystems without casefold feature cannot be mounted with siphash - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix error message when rejecting the default hash - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: refresh inline data size before write operations - ext4: remove unused return value of __mb_check_buddy - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: drop inode from the donation list when the last file is closed - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix wrong block mapping for multi-devices - f2fs: fix zero-sized extent for precache extents - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - f2fs: use f2fs_err_ratelimited() to avoid redundant logs - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - filelock: add FL_RECLAIM to show_fl_flags() macro - filemap: cap PTE range to be created to allowed zero fill in folio_map_range() - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Fix unused notifier-block in unregister - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware: meson_sm: fix device leak at probe - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix memory leak in posix_clock_open() - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: allocate ff->release_args only if release is needed - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genirq/irq_sim: Initialize work context pointers properly - gfs2: fix freeze error handling - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix use of bio_chain - gpio: 104-idio-16: Define maximum valid register address offset - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpio: ljca: Fix duplicated IRQ mapping - gpio: ljca: Initialize num before accessing item in ljca_gpio_config - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: fix wrong error probe return value - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pca953x: Utilise dev_err_probe() where it makes sense - gpio: pca953x: Utilise temporary variable for struct device - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: update Intel LJCA USB GPIO driver - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - gue: Fix skb memleak with inner IP protocol 0. - gve: Correct ethtool rx_dropped calculation - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: core: Harden s32ton() against conversion to 0 bits - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: playstation: Center initial joystick axes to prevent spurious events - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimer: Remove unused function - hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Add support for Dell OptiPlex 7040 - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: increase max descriptors for XL710 - i40e: remove redundant memory barrier when cleaning Tx descs - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: fix race condition in TX timestamp read for register 0 - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - ima: limit the number of ToMToU integrity violations - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring: move local task_work in exit cancel loop - io_uring/poll: correctly handle io_poll_add() return value on update - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: add exception routes to GC list in rt6_insert_exception - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: avoid possible NULL deref in modify_prefix_route() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: fix GCC mem-intrinsic prefix with sw tags - kasan: refactor pcpu kasan vmalloc unpoison - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel.h: Move ARRAY_SIZE() to a separate header - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: fix null pointer dereference in alloc_preauth_hash() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_session_rpc_open - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: fix use-after-free in session logoff - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Fix softirq masking in FPSIMD register saving sequence - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set synthesized TSA CPUID flags - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: spi-byte: Use devm_led_classdev_register_ext() - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add more instruction opcodes and emit_* helpers - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init() - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - loop: Avoid updating block size under exclusive owner - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md/raid5: fix IO hang when array is broken with IO inflight - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx214: Fix link frequency validation - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: tunner: xc5000: Refactor firmware load - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: verisilicon: Store chroma and motion vectors offset - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memcg: fix data-race KCSAN bug in rstats - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memory tiering: add abstract distance calculation algorithms management - memory tiers: use default_dram_perf_ref_source in log message - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax: add a few more MIN_T/MAX_T users - minmax: avoid overly complicated constant expressions in VM code - minmax: don't use max() in situations that want a C constant expression - minmax: fix up min3() and max3() too - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - minmax: improve macro expansion and type checking - minmax: make generic MIN() and MAX() macros available everywhere - minmax: simplify and clarify min_t()/max_t() implementation - minmax: simplify min()/max()/clamp() implementation - MIPS: Fix a reference leak bug in ip22_check_gio() - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Add missing dev_err newlines - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: SPI mode remove cmd7 - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: fix arithmetic for bdi min_ratio - mm: fix arithmetic for max_prop_frac when setting max_ratio - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix folio is still mapped when deleted - mm: introduce and use {pgd,p4d}_populate_kernel() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm: memcg: add per-memcg zswap writeback stat - mm: memcg: add THP swap out info for anonymous reclaim - mm: memcg: change flush_next_time to flush_last_time - mm: memcg: make stats flushing threshold per-memcg - mm: memcg: move vmstats structs definition above flushing code - mm: memcg: optimize parent iteration in memcg_rstat_updated() - mm: memcg: restore subtree stats flushing - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-tier: fix abstract distance calculation overflow - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mempool: replace kmap_atomic() with kmap_local_page() - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() - mm: migrate_device: use more folio in migrate_device_finalize() - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm, percpu: do not consider sleepable allocations atomic - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm: simplify folio_expected_ref_count() - mm/truncate: unmap large folio on split failure - mm: workingset: move the stats flush into workingset_test_recent() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: nand: raw: atmel: Fix comment in timings preparation - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: allow small head cache usage with large MAX_SKB_FRAGS values - net: Allow to use SMP threads for backlog NAPI. - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: add Makefile for selftests - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: improve shutdown sequence - net: dsa: lantiq_gswip: do also enable or disable cpu port - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: allow loads only when register is initialized - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: drop unused 3rd argument from validate callback ops - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: missing objects with no memcg accounting - netfilter: nf_tables: pass context structure to nft_parse_register_load - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix NULL pointer dereference in l3mdev_l3_rcv - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add support for MC filtering at the slave device - net: hsr: Add VLAN CTAG filter support - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv6: fix field-spanning memcpy warning in AH output - net/ipv6: Remove expired routes with a separated list of routes. - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: fix unregister_netdev call order in macb_remove() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Consider aggregated port speed during rate configuration - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Report rx_discards_phy via rx_dropped - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5e: Use extack in get module eeprom by page callback - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: adin1100: Fix software power-down ready condition - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY - net: phy: clear link parameters on admin link down - net: phy: dp83867: Disable EEE support as not implemented - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: fix phy_uses_state_machine() - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - netpoll: remove netpoll_srcu - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove conditional threaded-NAPI wakeup based on task state. - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix mismatch between CLC header and proposal - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: Fix accessing freed irq affinity_hint - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: stmmac: make sure that ptp_rate is not 0 before configuring EST - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: wait for async completion on last message - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: vlan: sync VLAN features with lower device - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfs_common: factor out nfs_errtbl and nfs_stat_to_errno - NFSD/blocklayout: Fix minlength check in proc_layoutget - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: convert to new timestamp accessors - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't ignore the return code of svc_proc_register() - nfsd: Drop the client reference in client_states_open() - nfsd: Fix a regression in nfsd_setattr() - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - NFSD: Fix last write offset handling in layoutcommit - nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr() - NFSD: Fix permission check for read access to executable-only files - NFSD: fix race between nfsd registration and exports_proc - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - NFSD: Remove NFSERR_EAGAIN - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Rework encoding and decoding of nfsd4_deviceid - nfsd: set security label during create operations - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: enable nconnect for RDMA - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFS: trace: show TIMEDOUT instead of 0x6e - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: rename free_ctrl callback to match name pattern - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: do not directly handle subsys reset fallout - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvmet-tcp: remove boilerplate code - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix use-after-free in page_pool_recycle_in_ring - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Fix uevent on failure to recover - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI/sysfs: Ensure devices are powered for config reads (part 2) - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test stat: Avoid hybrid assumption when virtualized - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Do not enable BTS for guests - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - phy: Use device_get_match_data() - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - pmdomain: Use device_get_match_data() - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: introduce posix_clock_context concept - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/addnote: Fix overflow on 32-bit builds - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix type confusion in pde_set_flags() - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: add testptp mask test - ptp: Limit time setting of PTP clocks - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: stm32: Always program polarity - pwm: tiehrpwm: Fix corner case in clock divisor calculation - qed: Don't collect too many protection override GRC elements - quota: remove unneeded return value of register_quota_format - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks - rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks - rcu-tasks: Maintain real-time response in rcu_tasks_postscan() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - RDMA/rxe: Remove the direct link to net_device - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "loop: Avoid updating block size under exclusive owner" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "net: Allow to use SMP threads for backlog NAPI." - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf dso: Add missed dso__put to dso__load_kcore" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: Improve exception and system call latency - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: mm: Do not restrict mmap address based on hint - riscv: mm: Use hint address in mmap if available - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Replace function-like macro by static inline function - riscv: stacktrace: Disable KASAN checks for non-current tasks - riscv: stacktrace: fix backtracing through exceptions - riscv: uprobes: Add missing fence.i after building the XOL buffer - rocker: fix memory leak in rocker_world_port_post_fini() - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/bpf: Centralize frame offset calculations - s390/bpf: Change seen_reg to a mask - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b - s390/ctcm: Fix double-kfree - s390/dasd: Fix gendisk parent after copy pair swap - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix __ptep_rdp() inline assembly - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/balancing: Rename newidle_balance() => sched_balance_newidle() - sched/deadline: Fix race in push_dl_task() - sched/deadline: only set free_cpus for online runqueues - sched/fair: Fix pelt lost idle time detection - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched/fair: Use all little CPUs for CPU-bound workloads - sched/pelt: Avoid underestimation of task utilization - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add fill_crypto_prdt variant op - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests: bonding: add missing build configs - selftests: bonding: Add more missing config options - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests/ftrace: traceonoff_triggers: strip off names - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - selftests/net: convert sctp_vrf.sh to run it in unique namespace - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests: netdevsim: set test timeout to 10 minutes - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix GRO coalesce test and add ext header coalesce tests - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: openvswitch: Fix escape chars in regexp. - selftests: Replace sleep with slowwait - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: refactor EFR lock - serial: sc16is7xx: remove unused to_sc16is7xx_port macro - serial: sc16is7xx: remove useless enable of enhanced features - serial: sc16is7xx: reorder code to remove prototype declarations - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix tmpfs reconfiguration (remount) when noswap is set - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - staging: most: remove broken i2c driver - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm: Cap the number of PCR banks - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - tracefs: fix a leak in eventfs_create_events_dir() - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: complete command synchronously on error - ublk: fix deadlock when reading partition table - ublk: make sure io cmd handled in submitter task context - ublk: prevent invalid access with DEBUG - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: Apply the link chain quirk on NEC isoc endpoints - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci: move link chain bit quirk checks into one helper function. - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - vdpa/pds: use %pe for ERR_PTR() in event handler registration - veth: fix data race in veth_get_ethtool_stats - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: move TDLS work to wiphy work - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: remove RX_DROP_UNUSABLE - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: Report correct retbleed mitigation status - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86/vdso: Fix output operand size of RDPID - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: state: fix out-of-bounds read during lookup - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix log CRC mismatches between i386 and other architectures - xfs: rename the old_crc variable in xlog_recover_process - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: Allow users to modify DbC poll interval via sysfs - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbc: Improve performance by removing delay in transfer event polling. - xhci: dbc: poll at different rate depending on data transfer activity - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xsk: Fix race condition in AF_XDP generic RX path - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Patch from Hans to fix SYNA3602 touchpads- Update initrd size (kb#456)  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~6.6.148-16.6.148-16.6.148-16.6.148-1      !!!!!""!#####$$$$$%%$$$$$$$$$$$$$$$$$$$$$$$&&''''&&&&&((((((((((()*((((((++++((,,,----asmasm-genericauxvec.hbitsperlong.hbpf_perf_event.herrno-base.herrno.hfcntl.hhugetlb_encode.hint-l64.hint-ll64.hioctl.hioctls.hipcbuf.hkvm_para.hmman-common.hmman.hmsgbuf.hparam.hpoll.hposix_types.hresource.hsembuf.hsetup.hshmbuf.hsiginfo.hsignal-defs.hsignal.hsocket.hsockios.hstat.hstatfs.hswab.htermbits-common.htermbits.htermios.htypes.hucontext.hunistd.ha.out.hamd_hsmp.hauxvec.hbitsperlong.hboot.hbootparam.hbpf_perf_event.hbyteorder.hdebugreg.he820.herrno.hfcntl.hhw_breakpoint.hhwcap2.hioctl.hioctls.hipcbuf.hist.hkvm.hkvm_para.hkvm_perf.hldt.hmce.hmman.hmsgbuf.hmsr.hmtrr.hparam.hperf_regs.hpoll.hposix_types.hposix_types_32.hposix_types_64.hposix_types_x32.hprctl.hprocessor-flags.hptrace-abi.hptrace.hresource.hsembuf.hsetup.hsgx.hshmbuf.hsigcontext.hsigcontext32.hsiginfo.hsignal.hsocket.hsockios.hstat.hstatfs.hsvm.hswab.htermbits.htermios.htypes.hucontext.hunistd.hunistd_32.hunistd_64.hunistd_x32.hvm86.hvmx.hvsyscall.hdrmamdgpu_drm.harmada_drm.hdrm.hdrm_fourcc.hdrm_mode.hdrm_sarea.hetnaviv_drm.hexynos_drm.hhabanalabs_accel.hi915_drm.hivpu_accel.hlima_drm.hmsm_drm.hnouveau_drm.homap_drm.hpanfrost_drm.hqaic_accel.hqxl_drm.hradeon_drm.htegra_drm.hv3d_drm.hvc4_drm.hvgem_drm.hvirtgpu_drm.hvmwgfx_drm.hlinuxa.out.hacct.hacrn.hadb.hadfs_fs.haffs_hardblocks.hagpgart.haio_abi.ham437x-vpfe.hamt.handroidbinder.hbinderfs.hapm_bios.harcfb.harm_sdei.haspeed-lpc-ctrl.haspeed-p2a-ctrl.haspeed-video.hatalk.hatm.hatm_eni.hatm_he.hatm_idt77105.hatm_nicstar.hatm_tcp.hatm_zatm.hatmapi.hatmarp.hatmbr2684.hatmclip.hatmdev.hatmioc.hatmlec.hatmmpc.hatmppp.hatmsap.hatmsvc.haudit.haufs_type.hauto_dev-ioctl.hauto_fs.hauto_fs4.hauxvec.hax25.hbatadv_packet.hbatman_adv.hbaycom.hbcm933xx_hcs.hbfs_fs.hbinfmts.hblkpg.hblktrace_api.hblkzoned.hbpf.hbpf_common.hbpf_perf_event.hbpfilter.hbpqether.hbsg.hbt-bmc.hbtf.hbtrfs.hbtrfs_tree.hbyteorderbig_endian.hlittle_endian.hcachefiles.hcaifcaif_socket.hif_caif.hcancan.hbcm.herror.hgw.hisotp.hj1939.hnetlink.hraw.hvxcan.hcapability.hcapi.hcciss_defs.hcciss_ioctl.hccs.hcdrom.hcec-funcs.hcec.hcfm_bridge.hcgroupstats.hchio.hcifscifs_mount.hcifs_netlink.hclose_range.hcn_proc.hcoda.hcoff.hcomedi.hconnector.hconst.hcoresight-stm.hcounter.hcramfs_fs.hcryptouser.hcuda.hcxl_mem.hcyclades.hcycx_cfm.hdcbnl.hdccp.hdevlink.hdlm.hdlm_device.hdlm_plock.hdlmconstants.hdm-ioctl.hdm-log-userspace.hdma-buf.hdma-heap.hdns_resolver.hdqblk_xfs.hdvbaudio.hca.hdmx.hfrontend.hnet.hosd.hversion.hvideo.hdw100.hedd.hefs_fs_sb.helf-em.helf-fdpic.helf.herrno.herrqueue.herspan.hethtool.hethtool_netlink.heventfd.heventpoll.hext4.hf2fs.hfadvise.hfalloc.hfanotify.hfb.hfcntl.hfd.hfdreg.hfib_rules.hfiemap.hfilter.hfirewire-cdev.hfirewire-constants.hfou.hfpga-dfl.hfs.hfscrypt.hfsi.hfsl_hypervisor.hfsl_mc.hfsmap.hfsverity.hfuse.hfutex.hgameport.hgen_stats.hgenetlink.hgenwqegenwqe_card.hgfs2_ondisk.hgpio.hgsmmux.hgtp.hhandshake.hhash_info.hhdlchdlc.hioctl.hhdlcdrv.hhdreg.hhid.hhiddev.hhidraw.hhpet.hhsics-protocol.hhsi_char.hhsr_netlink.hhw_breakpoint.hhyperv.hi2c-dev.hi2c.hi2o-dev.hi8k.hicmp.hicmpv6.hidxd.hif.hif_addr.hif_addrlabel.hif_alg.hif_arcnet.hif_arp.hif_bonding.hif_bridge.hif_cablemodem.hif_eql.hif_ether.hif_fc.hif_fddi.hif_hippi.hif_infiniband.hif_link.hif_ltalk.hif_macsec.hif_packet.hif_phonet.hif_plip.hif_ppp.hif_pppol2tp.hif_pppox.hif_slip.hif_team.hif_tun.hif_tunnel.hif_vlan.hif_x25.hif_xdp.hife.higmp.hiiobuffer.hevents.htypes.hila.hin.hin6.hin_route.hinet_diag.hinotify.hinput-event-codes.hinput.hio_uring.hioam6.hioam6_genl.hioam6_iptunnel.hioctl.hiommu.hiommufd.hioprio.hip.hip6_tunnel.hip_vs.hipc.hipmi.hipmi_bmc.hipmi_msgdefs.hipmi_ssif_bmc.hipsec.hipv6.hipv6_route.hirqnr.hisdncapicmd.hiso_fs.hisst_if.hivtv.hivtvfb.hjffs2.hjoystick.hkcm.hkcmp.hkcov.hkd.hkdev_t.hkernel-page-flags.hkernel.hkernelcapi.hkexec.hkeyboard.hkeyctl.hkfd_ioctl.hkfd_sysfs.hkvm.hkvm_para.hl2tp.hlandlock.hlibc-compat.hlimits.hlirc.hllc.hloadpin.hloop.hlp.hlwtunnel.hmagic.hmajor.hmap_to_14segment.hmap_to_7segment.hmatroxfb.hmax2175.hmctp.hmdio.hmedia-bus-format.hmedia.hmei.hmei_uuid.hmembarrier.hmemfd.hmempolicy.hmii.hminix_fs.hmiscbcm_vk.hmman.hmmcioctl.hmmtimer.hmodule.hmount.hmpls.hmpls_iptunnel.hmptcp.hmqueue.hmroute.hmroute6.hmrp_bridge.hmsdos_fs.hmsg.hmtio.hnbd-netlink.hnbd.hncsi.hndctl.hneighbour.hnet.hnet_dropmon.hnet_namespace.hnet_tstamp.hnetconf.hnetdev.hnetdevice.hnetfilternetfilter.hipsetip_set.hip_set_bitmap.hip_set_hash.hip_set_list.hnf_conntrack_common.hnf_conntrack_ftp.hnf_conntrack_sctp.hnf_conntrack_tcp.hnf_conntrack_tuple_common.hnf_log.hnf_nat.hnf_synproxy.hnf_tables.hnf_tables_compat.hnfnetlink.hnfnetlink_acct.hnfnetlink_compat.hnfnetlink_conntrack.hnfnetlink_cthelper.hnfnetlink_cttimeout.hnfnetlink_hook.hnfnetlink_log.hnfnetlink_osf.hnfnetlink_queue.hx_tables.hxt_AUDIT.hxt_CHECKSUM.hxt_CLASSIFY.hxt_CONNMARK.hxt_CONNSECMARK.hxt_CT.hxt_DSCP.hxt_HMARK.hxt_IDLETIMER.hxt_LED.hxt_LOG.hxt_MARK.hxt_NFLOG.hxt_NFQUEUE.hxt_RATEEST.hxt_SECMARK.hxt_SYNPROXY.hxt_TCPMSS.hxt_TCPOPTSTRIP.hxt_TEE.hxt_TPROXY.hxt_addrtype.hxt_bpf.hxt_cgroup.hxt_cluster.hxt_comment.hxt_connbytes.hxt_connlabel.hxt_connlimit.hxt_connmark.hxt_conntrack.hxt_cpu.hxt_dccp.hxt_devgroup.hxt_dscp.hxt_ecn.hxt_esp.hxt_hashlimit.hxt_helper.hxt_ipcomp.hxt_iprange.hxt_ipvs.hxt_l2tp.hxt_length.hxt_limit.hxt_mac.hxt_mark.hxt_multiport.hxt_nfacct.hxt_osf.hxt_owner.hxt_physdev.hxt_pkttype.hxt_policy.hxt_quota.hxt_rateest.hxt_realm.hxt_recent.hxt_rpfilter.hxt_sctp.hxt_set.hxt_socket.hxt_state.hxt_statistic.hxt_string.hxt_tcpmss.hxt_tcpudp.hxt_time.hxt_u32.hnetfilter_arpnetfilter_arp.harp_tables.harpt_mangle.hnetfilter_bridgenetfilter_bridge.hebt_802_3.hebt_among.hebt_arp.hebt_arpreply.hebt_ip.hebt_ip6.hebt_limit.hebt_log.hebt_mark_m.hebt_mark_t.hebt_nat.hebt_nflog.hebt_pkttype.hebt_redirect.hebt_stp.hebt_vlan.hebtables.hnetfilter_ipv4netfilter_ipv4.hip_tables.hipt_CLUSTERIP.hipt_ECN.hipt_LOG.hipt_REJECT.hipt_TTL.hipt_ah.hipt_ecn.hipt_ttl.hnetfilter_ipv6netfilter_ipv6.hip6_tables.hip6t_HL.hip6t_LOG.hip6t_NPT.hip6t_REJECT.hip6t_ah.hip6t_frag.hip6t_hl.hip6t_ipv6header.hip6t_mh.hip6t_opts.hip6t_rt.hip6t_srh.hnetlink.hnetlink_diag.hnetrom.hnexthop.hnfc.hnfs.hnfs2.hnfs3.hnfs4.hnfs4_mount.hnfs_fs.hnfs_idmap.hnfs_mount.hnfsacl.hnfsdcld.hdebug.hexport.hstats.hnilfs2_api.hnilfs2_ondisk.hnitro_enclaves.hnl80211-vnd-intel.hnl80211.hnsfs.hnubus.hnvme_ioctl.hnvram.homap3isp.homapfb.hoom.hopenat2.hopenvswitch.hpacket_diag.hparam.hparport.hpatchkey.hpci.hpci_regs.hpcitest.hperf_event.hpersonality.hpfkeyv2.hpfrut.hpg.hphantom.hphonet.hpidfd.hpkt_cls.hpkt_sched.hpktcdvd.hpmu.hpoll.hposix_acl.hposix_acl_xattr.hposix_types.hppdev.hppp-comp.hppp-ioctl.hppp_defs.hpps.hpr.hprctl.hpsample.hpsci.hpsp-dbc.hpsp-sev.hptp_clock.hptrace.hqemu_fw_cfg.hqnx4_fs.hqnxtypes.hqrtr.hquota.hradeonfb.hraidmd_p.hmd_u.hrandom.hrds.hreboot.hreiserfs_fs.hreiserfs_xattr.hremoteproc_cdev.hresource.hrfkill.hrio_cm_cdev.hrio_mport_cdev.hrkisp1-config.hromfs_fs.hrose.hroute.hrpl.hrpl_iptunnel.hrpmsg.hrpmsg_types.hrseq.hrtc.hrtnetlink.hrxrpc.hscc.hschedsched.htypes.hscif_ioctl.hscreen_info.hsctp.hseccomp.hsecurebits.hsed-opal.hseg6.hseg6_genl.hseg6_hmac.hseg6_iptunnel.hseg6_local.hselinux_netlink.hsem.hserial.hserial_core.hserial_reg.hserio.hsev-guest.hshm.hsignal.hsignalfd.hsmc.hsmc_diag.hsmiapp.hsnmp.hsock_diag.hsocket.hsockios.hsonet.hsonypi.hsound.hsoundcard.hspispi.hspidev.hstat.hstddef.hstm.hstring.hsunrpcdebug.hsurface_aggregatorcdev.hdtx.hsuspend_ioctls.hswab.hswitchtec_ioctl.hsync_file.hsynclink.hsysctl.hsysinfo.htarget_core_user.htaskstats.htc_acttc_bpf.htc_connmark.htc_csum.htc_ct.htc_ctinfo.htc_defact.htc_gact.htc_gate.htc_ife.htc_ipt.htc_mirred.htc_mpls.htc_nat.htc_pedit.htc_sample.htc_skbedit.htc_skbmod.htc_tunnel_key.htc_vlan.htc_ematchtc_em_cmp.htc_em_ipt.htc_em_meta.htc_em_nbyte.htc_em_text.htcp.htcp_metrics.htdx-guest.htee.htermios.hthermal.htime.htime_types.htimerfd.htimes.htimex.htiocl.htipc.htipc_config.htipc_netlink.htipc_sockets_diag.htls.htoshiba.htps6594_pfsm.htty.htty_flags.htypes.hublk_cmd.hudf_fs_i.hudmabuf.hudp.huhid.huinput.huio.huleds.hultrasound.hum_timetravel.hun.hunistd.hunix_diag.husbaudio.hcdc-wdm.hcdc.hch11.hch9.hcharger.hfunctionfs.hg_printer.hg_uvc.hgadgetfs.hmidi.hraw_gadget.htmc.hvideo.husbdevice_fs.husbip.huser_events.huserfaultfd.huserio.hutime.hutsname.huuid.huvcvideo.hv4l2-common.hv4l2-controls.hv4l2-dv-timings.hv4l2-mediabus.hv4l2-subdev.hvbox_err.hvbox_vmmdev_types.hvboxguest.hvdpa.hvduse.hversion.hveth.hvfio.hvfio_ccw.hvfio_zdev.hvhost.hvhost_types.hvideodev2.hvirtio_9p.hvirtio_balloon.hvirtio_blk.hvirtio_bt.hvirtio_config.hvirtio_console.hvirtio_crypto.hvirtio_fs.hvirtio_gpio.hvirtio_gpu.hvirtio_i2c.hvirtio_ids.hvirtio_input.hvirtio_iommu.hvirtio_mem.hvirtio_mmio.hvirtio_net.hvirtio_pci.hvirtio_pcidev.hvirtio_pmem.hvirtio_ring.hvirtio_rng.hvirtio_scmi.hvirtio_scsi.hvirtio_snd.hvirtio_types.hvirtio_vsock.hvm_sockets.hvm_sockets_diag.hvmcore.hvsockmon.hvt.hvtpm_proxy.hwait.hwatch_queue.hwatchdog.hwireguard.hwireless.hwmi.hwwan.hx25.hxattr.hxdp_diag.hxfrm.hxilinx-v4l2-controls.hzorro.hzorro_ids.hmisccxl.hfastrpc.hocxl.hpvpanic.huaccehisi_qm.huacce.hxilinx_sdfec.hmtdinftl-user.hmtd-abi.hmtd-user.hnftl-user.hubi-user.hrdmabnxt_re-abi.hcxgb4-abi.hefa-abi.herdma-abi.hhfihfi1_ioctl.hhfi1_user.hhns-abi.hib_user_ioctl_cmds.hib_user_ioctl_verbs.hib_user_mad.hib_user_sa.hib_user_verbs.hirdma-abi.hmana-abi.hmlx4-abi.hmlx5-abi.hmlx5_user_ioctl_cmds.hmlx5_user_ioctl_verbs.hmthca-abi.hocrdma-abi.hqedr-abi.hrdma_netlink.hrdma_user_cm.hrdma_user_ioctl.hrdma_user_ioctl_cmds.hrdma_user_rxe.hrvt-abi.hsiw-abi.hvmw_pvrdma-abi.hscsicxlflash_ioctl.hfcfc_els.hfc_fs.hfc_gs.hfc_ns.hscsi_bsg_fc.hscsi_bsg_mpi3mr.hscsi_bsg_ufs.hscsi_netlink.hscsi_netlink_fc.hsoundasequencer.hasoc.hasound.hasound_fm.hcompress_offload.hcompress_params.hemu10k1.hfirewire.hhdsp.hhdspm.hintelavstokens.hsb16_csp.hsfnt_info.hskl-tplg-interface.hsnd_ar_tokens.hsnd_sst_tokens.hsofabi.hfw.hheader.htokens.htlv.husb_stream.hvideoedid.hsisfb.huvesafb.hxenevtchn.hgntalloc.hgntdev.hprivcmd.h/usr/include//usr/include/asm-generic//usr/include/asm//usr/include/drm//usr/include/linux//usr/include/linux/android//usr/include/linux/byteorder//usr/include/linux/caif//usr/include/linux/can//usr/include/linux/cifs//usr/include/linux/dvb//usr/include/linux/genwqe//usr/include/linux/hdlc//usr/include/linux/hsi//usr/include/linux/iio//usr/include/linux/isdn//usr/include/linux/misc//usr/include/linux/mmc//usr/include/linux/netfilter//usr/include/linux/netfilter/ipset//usr/include/linux/netfilter_arp//usr/include/linux/netfilter_bridge//usr/include/linux/netfilter_ipv4//usr/include/linux/netfilter_ipv6//usr/include/linux/nfsd//usr/include/linux/raid//usr/include/linux/sched//usr/include/linux/spi//usr/include/linux/sunrpc//usr/include/linux/surface_aggregator//usr/include/linux/tc_act//usr/include/linux/tc_ematch//usr/include/linux/usb//usr/include/misc//usr/include/misc/uacce//usr/include/mtd//usr/include/rdma//usr/include/rdma/hfi//usr/include/scsi//usr/include/scsi/fc//usr/include/sound//usr/include/sound/intel//usr/include/sound/intel/avs//usr/include/sound/sof//usr/include/video//usr/include/xen/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-strong --param=ssp-buffer-size=4 -m64 -mtune=generichttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnudirectoryC source, ASCII textASCII textC source, Unicode text, UTF-8 textxbm image (16x, ASCII text !$'*-0369<?BEHKNQTWZ]`cfilorux{~  #&),/258;>ADGJMPSVY\_behknqtwz}  "%(+.147:=@CFILORUX[^adgjmpsvy|  !$'*-0369<?BEHKNQTWZ]`cfilorux{~  #&),/258;>ADGJMPSVY\_behknqtwz}  "%(+.147:=@CFILORUX[^adgjmpsvy|  !$'*-0369<?BEHKNQTWZ]`cfilorux{~  #&),/258;>ADGJMPSVY\_behknqtwz}  "%(+.147:=@CFILORUX[^adgjmpsvy|         ! $ ' * - 0 3 6 9 < ? B E H K N Q T W Z ] ` c f i l o r u x { ~          # & ) , / 2 5 8 ; > A D G J M P S V Y \ _ b e h k n q t w z }          " % ( + . 1 4 7 : = @ C F I L O R U X [ ^ a d g j m p s v y |  oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-838d5386496ee26a266199812c657700548653ba731182c104ebc9d24c58957534ae3b767f9a32bd731c73b470c073844182b7f96a9421e0b359cbca3a996bcfe?7zXZ N!;s] crt:bLL*G Y4iH90\PfJmWϖΠHKU, 9FsBYvpRHcX_۔DvB(/j~ tVdQ' kQdsI% fw$ow#'̜4< 9]0q׬9Rf2؆kE܃ V2`T͡* Eu69A牵-*:Z8y%dH*u&sjDOo*[PJ߬3AΙ_(c:q(K#i0oі<b@:=2jo)m=}8}5esי"*|a#y)6q !q]j/&cvɅ&C p*QO_$no;[xv;UIb40%9UIQyIa&m%7HP&~xexP{~P/@,hw½cZ̃_J8+sՋz$@\z ׏Tưo/`@DS}𒯻 3M֥K@)ro{GJVǘt xD˜k̵uNJ)(aiI.`\W!3hE*Ӭlœv7B 'f@iu۔:_ jeӄfEΥ|_ѯNg)SJC.g蔚V/\U~KwhQK}ti |hDдj EbFŠjn)o;~$ut5u/߅EwPYc޺yB + lВ'%)Z 9:d%D9}jbf,70l2LH;5 aDŽc=\Nt6[X\XJP;EvpRۏ{Q[{&F l줡CL$YL3iIߎIsfxKbBoۚQ,>R>NT5ʲ;S_ k)2 =L1L\䁐R(fc u YMK-{C(s|,%Y Hc#b] I3CXJ3s'FnB-%[a BZP F|/+`mDHK4]p w"˧܇XI}tiX Kh ^'s~W&hu1G$ô/IpAڿzWLA:H1+&K!"-&Yx1Sݸ9ƐAY> ,_HQv!Ԓrb2k]b7eL̲?PVoFO^b5>g{LШ:J&;{s@u)(*(W[PUmzI?l`IPdb]LA?FmdG@PDȣᓪ9o+aWbցH~맫ZD>V1DwmH `-fmoPln~9LӉp+ $*@6gپ $~*:''ٵ"@h+̾xSZ޽n:LZۦ+ 83d0cNu) J~ +λQxA!aU i|dE#qC3K/T0>zc=}맘-g}}=!4c`mx\GkFcMЙJB/2 PF$Tr\i'iőʫIN8y;ӡǚۓ(f4V;{v-M!*32]!E˩*wbv`&e_ .bJ5r+'dحP_bo2;wĶ[yehC ˎ50N΅Ւ nH7œz(a@[ mO$(Lw/e qZ>6[_^YY0-cccd d| CX\[>Q {E0ɂ]d&uFCpRYߎ0tgyZ,(U6Fak|je RjWBJp 566[*C*e U'W.&5]-;SCxNIOu\ַڽweV*xmh1ЉuhjMHDj}uEƑyY4ho[ǐihG׮ffcrugvSݘ/a'Aeb+Jgew e> z|Rphֈ!TeҵSA V] 1Q( ڴ:Y(hQVM$;<5o&ߍK!.wi J۾Km1DzSH!t4O4**FWky-pF>|wm»Ki햤 * $VY>߻:iU+ND*3&+38w~ Cf#hTSOg!v႓M?&Ð ۰考&Ռx"qŝ V`_, ̽HݨN+sqTppمpi"R~9tpo3C,vAoNΙmDuU'd8j@^7՛)|m{Φ4ok/|kofi#v3Tlb+$ƒa#%+[Ϩq* nQI'~#0}/j m&)ДLc3&CĈ5m:{류ZV|.mJ9y;-hxPp^Nv2 & և,)D `ܹm=>{llW6Z1ƭFyHDD7^H8 m9|e*jnlY[?2E9l;߳hxoI?T'ۥxO{lZiyÿ8Qi6sc~ԕ|G_{k d}(qd!Csa 4-_e-`" ڳߵ[3Si (gS N2'Kp@L׽7ƤC #MwT_ؓʲaQG/pKϴ'fœYzGao={$xS䈔q`5{CTuRŹ#ۂ\LTIrU +a=y QIBޢ-3}~[^ k RqY~oiX% ,4,]C$-[O{ᯞt?{E/x;9bT]Li$|E>UM u?UH|'D9ܒ.VIgu;aŧ|_w{x,ÆLqm!RՄVH@cVU9r u­=Ԗ0CR[+4V,HO8ԳHĦP!˨ _mp)dNPysZO4,9#oHVs*V^w/JյE:;#!a_-V'YӅ@p퓟C;[2K BuO|dKwvzX~SjBۑma:ˈn^Ҵa^%˰ө GI dDuj{Eۋcf:ƶȅ49T#ܓS!aEp^v!6 㚌ei7m_i tLhBKf= 2\:_3bS1Q+ts!.fj]fA*%&.@EdzP,=FjFø[7l67㈂Sl~飞iLFI Kb;N U=ҨD4x[茣ZUY )6i7.鎨X^i=cԣfwدڌEl'^v%^5߰噖푏&qyD5sr4pNB̵-PAFa#Sdp&Hb w]\9Y7ePO׸a8_{ً^~ |vAg<l ppa3S:8IK郤k*7szzu_|sݩgeEuͤrqbx%$ߘ'\JyPWHWKQ/{S45_kgtH`ֶlyШj=۞J;ON#Kϒ{/իJeh! .M3,f ۲gr>Rʸe IaF Ɏ# [4hYQث>Fg'"N;ՎH{4{RDML]H#9j6 D#jp}iZ)!VQS}#ZR-m;O])ӣ@# ݷ˧"dg'8F-8S $= yZϣZfȴ_EIrq 6 i>'^QdzW8:4. Kd/6/ eyhAhFΩkW;u/,mfrSv׸('& !fĞW`xR>MD] v-Ĺ)Ŭ&hl!h)s?TLPb)<"I{*c]8b$" Qk^4kvxɮOS5{1?7t*4/@犃t0[+TZr!2_T"\[̧ >em&@}?Ϸ_KSgY5rD3RV'ˤ Ď2LQ]w'^,Bc}6Q-/ήo+$vm0hePygY9z&,VJ `:cM[ h z~q/,Pwy:ۋy}Fi {- ٟAxz5JZ_єVmjRrnjiCyBU ZW [f 1lH PyeB vd[9Е,n *t9.rhvBtydRXky/`F6yDnZd(X+Rˆ_+ƽ+8;07hݔbUfsx96ЁeF^ | GsIgfF N j2ݝvέx:9Ek; ${,WM { `0y MZq~Z3lFǔg[X!.dA^`ܮ!|~v|(u C4+x|)p#bJtG>GH礀2P=!ew5”"\2I~n|?A19B (YJe!^>X*pA>b>nw,r2q. 0`z8KRɕ<~_A{ ?$-ʟ0 unH_tsU Weif~<:a1~7Su\_~$ILg7BT~8ןFeUebءtkL\9*~_+gMm<tlc HܹU} [_]"8 x1Jf/( d<>.4AACf8YLtҐ4,'RsO2ݻWU]%8`J#AS2Q]/ǥo/2^P < ;o]R4a(wgs6%qP>1e}軱JO>ϖrh #qv;«EʗѭP/:?|aN6#E>^\@ i:2 w( "/W] `Z,4-:Wz;C'EPl^J63Kh`k330aܭoY˗,'aT'zl:5r+';LRf}K=&ٹ^+?z\.sXvO,O/Wb.ìwJ vĶǺi ɖ 6y$(~xgxT%`5kP Y,(|OIDBd hlVFՐ9&5$(̃Mm !r >/i5R4Ȥ>(fXSkf rl2\DbzGhfq&F;^0E$4-h*i nʞzn> 9.Ręe`]|4z͗I6-[l;KO~!cHeșHuLۃs/r "Nlc㠩pO:Izr{_qֆ퓂Q _ '=i9ZTbo~^rx;"Z*\}vg)i(sn@,[iDGL<`gynZy 3p27`2~B^v uta5mk޲=4 a =vkaSD$]Ř*8&FE>\,Z԰Sq^sWt9MpDߊ4UvU_>R]L/ht9M)낙|OاGgjy8u[Uy%QKRD7UOcRo4k`0+={- 6&=44yI66fuc 6UOm򏅨h+N<+qoV0OĉSTOREhyysKX1dr35A'#;N%79ތYa3pYQZ0^&%p)>10XZ͢(>#xYBc 6N6Et<, &ߍ0ȝgo%C# *%!|3<wTph)tR217-Q#]Ed͂WLj[(f<zA^ʗ}[2'Z +jfx@*hoyqo4Mo2q{:+(q@k߰vlr 3Lߴ=Km?rGhbE 9eVm=%b#Z[5,0`g7&`\2w{h8'WYfug IH?RJ\™\0]VNnԒޤ%_)̿tl](OSٌ^Мy96dE1K=2svf̛̪D1C}m-c݌ir (g1XƢ|JBz' csk) M`?)ߊ||`Fϻ\qǥzݠGx.1f@o 4(zg򱞈QӪwe\fH*Pn]^*jfn\ԘJ0> !75:afWu^ PQ n1kus(>Xlgڕ4zV"٘k[xtֿ{k0\J\!y+6W/r.·Yn@gR c?ݪ;F`Q )M:У \(oV)πiP*%>mowytTc:Ɠ64`m!Ћnthp36׊mp/H*aC堎ZieS}gQKj= gum;HAK%?+KBB}0gT97}eUz7y!vs 'IFݩPtIBr$݈ [4&-vU_c #LE]D.*TW5fMT8.k FwkJG.{S+"R)= %Q_ _uf  0 $Y1% b =էvgeW7À|zk' ޴\Ry[M.z'e^965튈 iNԭb&G١n[g"=9JMbxg5i~B%G&e=V^Wt-ν(lNm}-J _|vt@i-b -^ 04Sۨ+qR!T3R'~i ji׏`K*U&כ%%% ,{ބ>It)V]<]=ҶHmBnq›hYӗc,."z!L7+,1k5e\^`y B~Q[aNI5[ڼz4s$'jmA1gBd՝\‹H$gL,yINs(Qb,Lr0QJw%[". v3}%(!`&tYq̈uJan, -3°g=mji,+H}ExZKZ>*i~f>oc\BX ȏsC/&_PƎ5H0Qܰ? s/~GR߆? %~~*\4h;3D"IknI&7Xa:V,o3a=} '!8!ABg0HĆEsLE.2淙Fz2$y^DVa7Og,Cο$& ,p$Xbwv`>Ol[PJV(Փӌl\3<ʙF)AqA_5L'Id;K(#%,SlEN{_F{s|JQ~kdבO8ޟZHDOrY~ҸG.be >HK>2=u%DDZ%ፅ$|E7|ŤpFY|#Zs(k<nx-$lޅyU`Q=~#d"L?E*S 05T4>ѹUy$£tP\ᓣRu^C_Q epzV!׶;t cQ: n%qO(ئk/2:=e9dXVAzXdZwDD-2?Ebu{g}ɰ(n rXӫaj`%rC77U['Ι\v?}xހ9oK@7_]͒ ^/$ǽECA2ޅ EIœ/һb9_qmUE):uF+z(;:!XcoK^Er8u7@[b#l{SZ(Hb-S<;D 4c!dl-$Z7YyIjCЌcehPmkS|"@^Qᴆ.;:zиKgUZ=?T)tuϬz V]PH0%ΤDBʺS͎+YS[>?a#A*'v4/q,M`i`JH{P8i'I GaQLG)-Nr|Nj| ,7KtҮyk젉*^BL3MT1"Q Оz;*g`Uzސ+/)*z`tkm0u1q>h _$ ޽,x]GG©4'>4;jݟ_)o60/XW]ҤozNJFVŻNڨ??Qа@( +(tG-R_Aͦjٮ'c}9** _ƶ.Kl TFb]Qg=mq3N@ N@҈C#72n86 G")Ғ { HLQ C][}Mw({w čPJG'ܽHEsdqKer^.y8$"4-#Z`r`(S̠V&^TpZ+fVuu\>178fU_$#2,`j]NIdZpտc.7W'[vP16M w#s`VI7gpTi5X?@Y0I_Č=2 2mReO|/0\h׊ <'t?Ơ9C~w4xbb!o&ĺ۞ž  ;m@BDۂPdr~%cF:B4Cޣ+4.=2yXx[Ӡ"`T Uƀ(&4](C\ 2董] 땓>ۄC~ahEW;CGHAMFEU= `Xy@s1JUL^ϫ98 cZ8rGd{xO ~o*c =Zgxȕw|=S:'<*72IDg֘׋eERHpdz.Xylܛ[04ۢ=f;P:'<~~/H*he(H/PeZr}{KH㢝n@{y2f[Y^q3 6f!WĪSIn|k:+ն󩫁9q 8a7ek>NƔy6x9hLNsiʆGL?daP@* 2Wڱ z bƤ5cl)ʔW?ER&!7D1*<0Nx{wH6(`pWR/ZUk,Q=bGG2ʺCL`(xHӟ@] KQr_;`JzU͵- 0s741v݉]QAMqh1ކ<΁Q(Ճ+ؔkG= =ECPk$&x0v͸+lOsBvm.hQ-[:y2jl)@Z"Yl?|')}\ _XjL7gfKl=3:ܳO08V%LR8Ʊc rwd5|- )RDp0Χح/Zui+O3S_8;?j :◮*AYL_Ho[3b@'* `!+S12 x7 d0Xβ.mesM4֑J(s&+X}ԹsxvCZ>1v妵x'|*oTEb[x0h@5Vm %٘qP&SB%!"/lŐ<:r77l޿|?*Ռ^4ɞK$@'ґ(Q:Pt>| ڝ+-FbXcDA FJSYgH 5AI!OS )O&-B-K hŧ AO4|,խ Gc.gVcHc?;Г9"~/֖KQU  cЇ/~?l ^Ͳm֔K+ Rc{E1:+# FNs'u+j$ZLX;Si05MbWĚyTP,`Q~yݵhgl}jB]?%t2a=Zh7k s8{"mE=YnZc)d*Pԫ^xC'bmeoEXVcr/fz{;lţiB+Mm%˺VzxV;P0B>bא I*XQgi=gAcD2Eh4 Y-&!AlGŞ˱fBNvnxZyDjf>8%t@ e!#\oru3ت"}O8 BM2[+dx\ؚ&yii)/y.U_dFv;jU bvZ_!^egx w{ɡ%_jONin۳ i%$%/HŴ/`+by?9v瘖91x!r'\h{jV<.oҀ{ YP\ 9~KXjP1Ii3PeꓤiDP;!H&?4aO=E}_15 Ж}K Mqh?;Z玟,KoB_\5w@Y 7B@m;2XMV>kת;EB5AuDTM;E 9rq1%]%a+İ~*~lr&wΕ:=gJN$^f9v1_H2nuݕr2Y.(c، ~']@puSj~͡{1.c 8,ETL*4|}p-cmpn 85w&e{nŸ w:0g-y&^IaVD}=2 n՛=kҁE++Zk9E> +*pW;I/7@Bܹ7;QH4^0nZ7Q6!hyZIɫ3 pjQe6oq FVղAh70L7pl m WR[pF$/0 EzPDr}MHaJO~#!G*Yy: uM }P˜SGtlpl%ye/f)1sˬ[{}n@1eur\ gsmi$Ԣ(/gO⸷tK55j * *fIHanwfVH[/&}g&ӅmnM\S+ؖ&̢bsjO]9譨X!z< u34bZ(dZLq:\{-027;1b=s#NJr YjyXz5pqUeRn/ w Jo$ k*8X@7Cs9~>d)tͣ%u^kh-k|=LVe"2˵#5g I5mŸ.j3sX'SSyp76ʌ}L+rЛj ܐ҂gH>"u[섨. 03#C)v#;`098)wʹՋܢMNȥE< Rd^+;ͤ`$7 p4M:NJfK%FXxc}OO``6SΊ5BAQXܘRzWF][wjؙM+b쳴`yTG$`1}=nsZiҔl÷@ 9f1qI)Ed%PI,-}==X{5Y<2sPnS}xr{!+ NYTf @u4w>LX*>Vb90Af@[ _=5Π$ "NQ+'.޾EscV?UqۄM8Upg|w^xk rIAedׇ8Z!uH+u+]:;֭&AӨ˨{||ȶlnIUl=0==/'OY>48{*}@$qݳMeǁ ~F vgY N̋1,o!AFIs~sl@kZdiVMTqV❤#U/9,:箟9^|Bf$:vP9lLt[O&..q°~Qߪ=pP{;7KC5oƘ߸,}ko÷uj4eI/=mW7 ADD5TΙ:4Nq[fO _~$f>,Wlqxd;z:pؑrx8)\-/~9)jgeC%,Eaۆ#aޥ7,V~>^Ir"Ј .t,u$w#dj4byzV0V&n󧮣u]uI2({kv({3p x3LA g*AG8y&PQCIµNgc3>!Kݚ&`OVTr!(p`35Eq2;+UWZ r#ĕG=Wn@l@ +K;D(\agMKv!O-0ۑls`DB4{o~ 4"AХZBjҺ`#6tڲ=ؙn7ny,E6B%\vw~M5.c͔ Ma7BLj6ugAo[[7 _x > Z QȀ($ g$ Ycr`!0H(?h?/@w2(%\ֿ$]mtFցT8$i#ಞo$uv="&nF) /SRĒ٠"si/ûʪW!mJ\;S:|ҩu%yޢV3>Yz! (VVuUo6TS獻9\nke̢ha{%jwQV8>ӕi"*;!˲`I%辌b(+x4U޳ Da$G >lmDbyƯRlfID/J8RionES*ģB=ͯznXHӥK_ϣ\ltiK#$fCH<0) V_2&~57BMw9-Ƶ!㡝z݁c5܀fZb5ZF!A%ޏ7.7KS).ٲ!E♬{UN/;!<Ǿi>^gû/%$g]l>)B3nkˊM6dQN+wSzn +VIv02Ids\|:kd|M7׍wH P9p#$q0QKLͼsFf [Fe7sCO$% jg ik$ hХ{E漎 2+R^U^<Z^E-l5UqSupMS_'+OЪ"ȐG;khM;uN Y T[r%-E.xp&,kQwDTF)q ~tę;{Ue`j-nd AaVh#N]h1a.VUu+ahdbްu~ ~}ߤ n!DFi5"+طѷ9 Zi,syGLЂR~Bi̥Rۿ3]{ ಋRNBw5&};4b΍wB+`&Td9"EʫXe;-`S~hڪ]h -inC"1P( ö3CP/Y@Z? aZ2YN36 9VV{'^٤$I]Pp{4y ȵ},^-OvZ0w~w} U +="Ͱ1w\޶\>k·8 ?3vw4xCT,j1"dfNIB7VαHpPVn/X,u[ER0϶Mz4OaoHׅKEG&u9.-ky)$C[Dzuip.(蝮 mfDʪ?F!UAVP捏 zaokI<9pl>vG+ڿ_Q=!WxBZh:^P=DDf_AOv!* W(Bo*B''D/(I_HzsB΃"1CtdoQJbe lRVUZvaCI2b<@oZY,\g-]>-[|a,cdikӚnxHx`;Ǫ-,Dk}*!ͭpz>jirN 93bGO>'uB }3a;;gFLn~ܫD` /҆&meⳊxj3]b?>g' (!_'d;KBf*k$nUSBv#ӞgoHApvf'aӝg)Š@u<`uE /x]hOf3u5׃DL.˷~x ǻa Ӗ+qx3 uXqbZHj٠&-9J@ pvB]"Uܪ*JmHcr |Ʀ.ܖAD8`]f4<. {dO򽶳6EpIvA^@s*o_tCI_J VBDDM̸K @̇TPu$"Ydj.9j };hbrOߛ}!\7ʲS H}z e%'M/쌑i5̞-ECOy2&?|1h9Cub=*kH]V yU~ax`%Tm}(Z ųb_rX,̢+T%ŕsv0!m$*47%]f|&S {a7''xT?7ӏ5">B.,BBky?<4<;vbM5A_nM_gMy?~ NZU#}QOfmRϾ{ -EU|NgGc™v~1\DL|D{kDδ,ҭhdvM6mkBAqA-b$^0C֗JD$oDL0? I,(ο3 ..!PD!l֋3,mP7bhW 3 n/Xm!7|hbf[id2юs>mbĝj~>#M`+B V_Q: ~[`s&7 v>jDIKh;0H Iu򼨓A5a$b6:s ^@66j벬 7ZS ~glꓟMksox)6

GH9<@Bݘn*0hïÿUˠCB;Tg᳘Ӎe$Ad] ϥn>])6@@VH.*"R^B?NtAA݁IdVaV±/F+ Χ᪤8ι!VajLj}=hR @,wj̈rMɒ!{3=q*qlt23>z]56cN;k ypR1_9S׻4ѽ_P迸CiT(WAFʮexV)bb΢zƥnr[RG6M^1o".w#mb_t/F2bQYP"=6Oz8(uY v32~_HԞvhQ(b3QzX=L톭ܰϽog.] ҄KéBN:}gANkB` i((îeq#u+CK,{n}G:x#V9`(]5 FbUJ' G uf% {ߜ Rp5;i+>V^q-0∣͋/r=@eAqZt BJ_"l)^Wc"{g*ߜ?Z B2"=m"{kp7]x{U<DUjT u=Moo6q"SY>48[1-v8tH9Jv$RI(ceɽ~HŠ).[tbbߗ aJhn*H Mk,ɖؖ0mzK\)3{B-A/pr͓~ms<IFL1S?@DݿւY$A5gabYb~}+kp+ᢠzbt,ӕd!z$aDK'ʗSocyiD1&d2%p~\4vloEZ0\oPJC|*_s_G*r/V$T17<{b$jQ J8X#'^E!G6H#$LW2X%bvױNi}G67VUQQ ^LPY)`HaC&R?^<)-x)@0k^'Mg68m!btÚ/iG6?-~"3jRRgx#ڠd[ :2wyr~R_@#oz sEĘׄx絑YEnǴDr3faP`9ݢ~Fj`ExAD}V`Jȏ]`F(fox<\Jnε&@ 8ym}kqI?Oz-4PŰQ;FʰsJ'>w>"~o6eYMYREGQtqDG *stӎXҏ^ Vڊ4v:O*R61Ų0<$wI۷@ǘ`ΕH;"}^LLɮ̛e" S2w]Qˁ'ǣzf5Ғ]q&mx'EPH|%Q9+W6r EkA?Rd$&UX|w_6C'61`⤖s}WIM)zL3kw= ;w5av{~]띴V]V;re^g9)@ s9?1A5b;ʒ2`K6y3Q 樴ĠmD5zu`tA0q%FJ$Wd O#+wީmiKŝQiJHkfq:"E{C%@`l{bjQǗ1 "x\rFchZ :}Ca,u.Íuֱ,s놶Dv0H<9"kI.jo։G$.Y_&T)=m0daܚnnJ*WIv*V0%]9/=uFPب甶Q:7s~ X'(}޲۞3XK뙁%Sz^qdXġ\kR=o7;lK5:LQ4T<v|IbˑDz r\DFqEF>ّ#=[,I 88E:|"Ӹ޼@.;~+eth)S(llƾ!a$8Msj=0cRdrv|YM暪+}>SDӯ<p'ztL>4q.$NO s) (܄q ~H&xl̝בf,݆> R_W-Kvop`Ok NQdԕ꫑va/U5ɣwsLbdUaG7o-y y_5l+j;?1 q/vQaLA;6c.48Q"-tr/)T:^,3cM',naM ,++F9/46@s-Q.8qڍX&'< 6kV-iA^A3*E>#^rK`MGՋ6!]2S*.-:{ju,oS_m&Ji\ٯt>elc59:ZJf!UQ-sr peԬd-<:?x֢O<uhiCFs9)Ąi3dg-)%Pm1uXj4r&[Oc8Gf:L|:/[7Hd8t•sUKV<՟ 1_wӫ$b[pf{jgubZūxQ6W]Ӂ}RyuQQ HF4rЙE6zL_cvlpY}<)ڴ%k=˙y ɗ+|2y=m[뷲G$Q0q~MƩ '=*\{"GVV7Unwu|t}E>=vK~7EԢ9Ur&]8st{nZ tQ@2GN﹦>@1M,E{[|\%M+Lo2C("CաE|?YsESC5knp/( VŴoo e=&d4ceV._Ȕ_# ӱHKUE[{s̫xFS[p{5w,sZD~ps>"ch:lV qu7NYM`+כZ'US Q:0֜M'egM.ʁQ>`wi\78}<}!4Hh_z""M/h өa)XW^Mڻ_o$d#er.ōU7罕pBYyV$Lކh0 r^ܑ˨nf3nXj$.ASI^!.¤sK{x*4橱 '^-ѓ1ӗ,bsS6EQ,q1b{K# D㓈G(t `FU{{4.6y4m<u+%LSCֹf03SmqX?b$.]pQ$?lNYpFQܨ .^#៧`)#FDsvԌrSAVR*N%U`\LR Fv^YN)rnUysf7CP7%=oȮ Bb i~j(Ⳅ|l ;?o* +mߚysZP!gٔd6i[6r7|=!*5J Oe`?vҁ_^EDlM+ k\wi!HPp7{X\^4X~M /PȎ:d.Rp nBāwf{\їX]f>4D[fH*5DĬ 6m`趮98^t#0= ?ՙch7=;w3r!5&BT.rZӦ(&<@1@5fCȣx_;cez$u#q uH՗Xm77FQ Jj=sU E R7Qّ%;C?cFT Fm!,9<@W%LtFoÉ 1"JiQ{R<΋~^*#RAIUW{okC!Z =_E% P# b8*)6EO<4q|C;&3}.vᅐRȁ_l+wgf%NDkE2 .{Л>[%Eڡw1Z$ϽЅ`u$CTqw\#}H[}km!\#yYfթզ+-h J>]*vۙGfi;\S"߸T{*|t𺣣Kƣ#E8WDBK,ʫTOŸDꁫ$*BN6RGJLIRH抉$qĹ;`t%-~<ʐ<Vp/20 -\ p!+K*1"8onend;_.P_Mṭ0rUdM5E)Ϋ[#c;q{Ou=ra2)ڐ33*tV.e;SӈGR}|ggx"C܏&az45\ <`i+!T?#sM%qKw# lCrIiR3 شRN4(?ftBDGzKZʳK XBͦJA4T> }%5  c;#-Ʒ2>x?^i4h Ř|Z]ӎh@̊`2]"qff7to*T8PL{7gUnR8=A {v#F\z5oMHmk8gVoAN!b23lfX[џ[>O#5=>:Ez4#?i<WI5}QGe b6ƂRv@> d~*6G <.MW oDcG3Q-%yYd0Lek]@Ň".0i1"3h#{J;9!癘M!O5=56>'Y,ƃBޔjC}NdUͷ]ttϯQ毷) Q =x2RȒ {N/Q9$ 尐&Nl$^Noz=ܟ1e LJ+\f&=z( 6UFӴ$޽A @{;.ȉ4`$vҲwBiL꓄P~7rByBM!M1|Ve9) OƟ2;"| ?PD&w@9~dg;9>[0m&N(M.:{|cؖ!ܬX!5խ7`{\giX?~H3˅H(Ѐ `0(_"W益AiP͊C)l@ QQPP%Fw^oD+6=Feln"ߑI$ZTdKz.$k P`GFTh&;}DuDNA{kYO:bZ$+hg9S)~^t3)%+ zh>lIQws}ϙmBH8'CNnΗYFqC}g2棜 dL f8Wz3ᦢmz%}tnT"ro * M8dqHεZEE(#&4PjЖ߲täYMV6ZIhpVjO6Oqj?0𵤤tRI`w CBbH)0`~ș33z#NUj$ W?N$&fW_޳{CqYѵ+M _ֲ#i 'n Q r (9?3B*^,ʏ/O`%e*-4⏢pO@"\jzp2m=O; Bz>m{ Loïo'迴 a6 D yqehJ{eGZ>:%.OfyaJѢO=++g#jmjv={Z+@ S"YT?o6C50KFơ5zu`̊9t12[NBk3sbW@'" Ωz@8ƪNDO2 vLdvV FRMbXp}VY;8{1|&_Cdҩq{>m\I`xfxN<#-n o?K *"߬~epXJ槞WOJ=]B7G @Xˣ g3KtR5;mP%cJq1/5lc7E +AA.Y z:U!iYYr֠f66Xȵn貽K_`Dl0INL_7)W숒*b-I\a?3 ayo%T}SpXR_!i%ax 'Z4&Я7t!c0r0~Z,ՠnr䚿*ޜT{UD$2U>P^fڵX%*s<уx(q}Eڹ3q^,+xwpI;6ɢ0 ,O#M\AvZ .Ȭ0zEe♾`, 4&3ZD8iIēu%8oOnZwDY{R@P  (n/$6^y닺tru Č%Ck卆~p1`)W?P/#u~Ieg_ kb]!OaU8ꭒi`u|;v 趺ETT&fp5{ª GxWkNܩlC!Pv(ː#'U'^8(Dgv]M7ކ=yxs J\ir[0\>}51j-}'IDx=e?i^{v2#GcB,[Y+%Ō"B*\cO }14|F9jD+/[󌽓b_-o4oKLJhWg[wĘ Fik政#aIo6+sҦW{^Ro (۷m'!gސB ΃d=lzJ:Jqb0{&! @ď(6;{0/lv+혼ZQ,Ju@J6Lv?)WMpmFqjXj,beBib`Wf!#!Έ\ '<]P]ИJǹG~ /=×T,w tpa銵1I c@%@ Oȝ0 ]SzWUEam_9$=ze/ig3I4Jz Ɯv\VYrjWp0+,KϮTCN gըVv ~;]A|IjkcT}}T$R)S ˺ry R"M~&9+THAz}?}sʟ+dQƕWtb*E. eE95rR񾃖dTO=_%L>;eAĚY߂0=}h=>q(>)0<Z穁c!ռe=%-(ދ ؂^׀KTB_+~&q,iHYS,X].!{X`TX~y>mMXj7@"}ը}9?ѵSإos$ K8AU^RgMY&ʅH#Lq)=n@ ZV?d-6հDa<: Kn+nߖhI%k/g^,&\S0b=Q VozŻ26%i>bS9U2.QU)%LjiJmiܖv.p?cmwW;=f?.=]iH.3dr Xy0A5xdefc*(k$~^L½9jkFWBU?5Wh6H]s2VHoәVK;k`G= ZtPP&J?Se-R!:df0xr`TnZf&.N4| D/"A*f)sж85޺{~=Ցü羂3mAIoKHE9gIl,vrn bY++#+:„L ,.e1o _(F[`%pc܎]2$x GL5U_ *.w}5 T-&J<yCgƈ=%AC9`Nj5>MNZުmi^UZM'riCo8_&ZE kb4׻ph g7Um!׸1!J'fq̙ 4^Q`&yg )?I0ZZ^9ܟ :"c;XhgOt(~E ҩ#dYY|R$3 lyLU7!sU m{|\$1D]lyX'ຈ5(` Y҉;X8y~ȲO\<2'+ddA0ms?%^(y~zfHRk)/T@\b7v侾ZESK s=79Z15!#W-IÙ/w@ڠ:rUus֧ `9uĻ 킍dFkLcQKƒ=ZLYT'%]&CGx$ :BmJeǺ,:4 T%I&a],-陬hL`;~BM7ZXxoE2_V@z\yS%Er(J6%=AVr$Mk1%^Jc^ ڤTs[bR ^<|JiJ[@>-;8zIr}3vP b~*7u(%V+FggBM'G"lrU=ᚤM~)HUm="YsV; @;\ͿW>ѓӚxuV;Ì ՝c|A0 ( jjA#QЉhgNK8ߑuBg](EV襜cېyW:2t @{&qrat`PFZ9uբ4:r͐ nYModKV Gkې%|zƚ+Q"\cdǮO$"PQNϢdo瀈ws,Z2Zd"yBNU-g_ڤW 5a ʅkst;_Ϧr]XC:ܥaD;5KfW ^J?u_t MEZ`\ 4`*=ej!*u]H"YQ *MUa۩zt1' bԯ=Ԩ*$Ph3ZwKaojL1J(mF0k.ۥv3J˒L;иa`y*T*bUikn);; mkev1L ͡ b4sU8FNұuw#Q!|צw||\ 9Y >  yT +7BHz^qѼhcq.-6H4-+-HᣪdNʁ[c#CPur_1@vOZa$/=(g,^[4p`ؖUc!OgQ2GVy hcXu1)[j$TuqU 4+hcoCkRxYjixr mx rSTYKJ7t8R ށ;_oW+"Ô<[E K2b̷߰utfJ7::+`qY/`&} PҮߍ`jl6lo_w\i9I>dVG lH(fCȖLUO صXu9M#Eu4:%cKۂRf?i_#Q.9_P.j,⽖<9 &Y*8ST B|8 (#ՖV%rLwCktr"?}^j64e٪p;pM.sBYy> `,P%} {#x&Z{͜Ձy14 AGsg?y|w$<:p80P/tcW!ec(LY_;}$͹D `*kf?V]c֟3ځSK=![IҪ!׸xkN8{GW:v2\;d9zGŮͨܐW =Vܦ.nBRGv{`BJ@Z*W겳IpGLTd1)jeY>a‡A߸V<z`#Gm|;x#⳰`Cwf*r덴2NJIAJ/H.>K@ (dErwpL)]错sE 2BR[ZWA[](di9Elӑ18 0-"\Y[{'SWArfxZKk1v#93ч"ZιYKLQ( K=uxj-Af/`''j`F6xմ ιVx[%Ja(2ʆLM6䑄eډb] -;BTҳ2Y*lkxH!r!g?O19dž-/yQs>KM>Q \m@&rL5_oÎv8;_K$cavk͗aZ]8g~1cE8+gMq|'xnh B,9ϻ+7ѿfճLː,V N<\Ee{KA*K]OdS8W{͙?|c46sa=-g!X@_Tԉ{ex$NI;Ӑ2grT۰_GV vu\99OFPةBf&~IZP~9A6|$aR∌G MᜍFh 8y aiogQ#);"S)6LRrloa/X= }wbV8([FbiYhKsg*]<$1&gl̷ΤAu aF"tpԕuBg8#\X 5"yy5 86I^Do*ⶺތw*K K(N<bSVW%"YeHs%giv}T}ovJʗ(1B+ssnj6ːD^= k݊& ȅ3?39avU8gb&4vBS2mgyQ b939 X57U pc^WЍluȳ;1"X*7>D)w.qXǜJx r)i2sD[2 }-B\ 4])b_U"VkXݤ*ɗq<0,cv.U j1s=%30` 8Mڀ⶟74ZHPEej-E6@a4,34[of.@="X#]!.achע,o}59hX,)GKA{@kZ_mkZrNE+ji\.cS'PL~w0xe+͹†\#nܓYeR&cOF)2xǤ+ӳ)QVo82ŭ+)E)@:Jkh8IһaIpih{9 K\΍e2O]]I_A;yZkr(f-O R9=D>Fv~֎4i├Hͨxʙ,,&g rv9#گw#5/Bm &"Z3@D8jɥKzP WiWd#z2I)ULk6x V$_eU蠺;]rtn[- .PIjܵI9Q: YH X Ox鸌]ˆm4&K@'K@ZiQny`t%& 4 z+ER'2D*!;tp sSo-W5CsQ%0s/E&h3`~; |hU$tg3rD4y,#EE+#|ᄏ#RK#5@QVUڅuS@ H+ ߀f'XHJ.$z KXBG[ͅqTa`?kpYwl &c%M2Bp똰3I5Pl}̪8MT+lRi ,ZT/X"t2t䊧\PGc\>6h'px@yoG]fe`Y ɖt"Υ BIuq?@:lB`69=$$jP9y=QEe.+<DCn" WwZzÊ loTD" |ʦᎩK&:J2ˍ'`#-'שog w RoׁT^Tw\̬e]bك%JÐe2=1PQYv n#n/I.;s:6ޤT?#IHWEX FKi],(:&8 p'/S/=ܧnY~3FHRXWAB ӫ^sy~4J8Ð.v $eaAa]xX݂4 eJph 8jǡ6,OpVޡ.,%{F*-1[rѩE^ڙWr],Tg; @^sH^+_8F}כXt#WP9-=A5V%(O3-nfԕ+;>{T*dZ ߿ΠcË`(OF62~{AI3-eM쫃E#>D-A\ ^b$yuOƼ*벬PİM ט!i^Fkј⧻e]/}#itMQ|cX+ۀj.wkP-kϣt|KF>y=tCC*[{z"ݨzfWf ك-zi/ɮub8z^7a9 v8Xq@߮N=ӱnd3etVXS[TK$=R 1F_9 KW^blmcsA -Qg݉K"ϐT]1][JA8 __ldxHSBN U oU$T8hvYgժ~̂x-in|Z>-b7^sp s GQ߿C?2Ps>O#38^$_ xQ¾^*)19[^Wo{zQW7oc}Wl6Ote%J-v iݣ'и @ h% ƿ~""oWD+BQ@U0c(P݇׻h\k#'*xY">^xn:Ʌ))3-ϮggyȥoNGu%լlIbhd6:zO-?21NCn/x8=T(یˋShb7 nPq$ٕIbx)='ㆬh >GAy A+8k,O+j7,N2ˍ%qBmv'rP%_"$ 1WVz(V<|;[nmo'gVf_ l:` Udq(Q:$vR;F{K\ 'S3;N:>==.Q ZzK,,X ?οu9kv7ZfB始aiʖ":y͙jnMyu\clPm*+X{d] SǞH _>ꪙSW-ȿcF(M @W'袥ֵڛ8RHG~ie_oJd`$)u~epGu-wy4QU}Ő?ϣh{KRhR||g>|j`sVA_!yMo- _P *,6{t 6'iYb꒫D_g3Ƴ S'\F cW [7kd 9h+MEL;ꪹX[r*gbXsըkE4Rτٓx ׼(7 iӥ v-e~ V@MRM.`pL\@b tN~K5jݳh(q5hK2.+9k2:0լ+.yr+_L*rZ2{K%$ Z"hPb8y* Q.p6T$'Cs (fZrKBbYё?bվf /eZc|YE񦌷)~02}$R(pPJ &#g0d!;tMƌmm4p[#Lu?lm:џjѴ"2ǂ%sSO,D_rZ1zw+3X9ͷƔE!\3MڸY$x n;#ŋ tݶꃶ}2>*0Z)俋K-ZޑOeߧ;+颁2,dG7/Fmx#I. xe]֐EYn8uD)(y_\G+T(1 [ԟodѤTMϲ|V>-*Go5uq?}{oCw T6C^H&A |a^n%aɫgåXCr'?`2 m/V"pl[A$I}wduV.-wMn(V#~/գ5 d:JE*OC AJufo}\),ԐX[~8 [ݔ{qRl:t,łtJ>CѸ6m5"~h$IcNf9L}jWnTݤpXA澶_'mKMyg&&;kSRӗ,562h'H[{"ۅ' s(8 qM+d*eLZ^] PAᅩVǨ[mOA })Z;P=2Dbzs,VT.#UxJnQ#*7,wDWQۍ#.hG|+X?݊Ǩ ѤZ~P߻CR_lE&s)%41`xf*/46fnh-ϭ E5]_8{YzG lj*i;YʞX[,c!2VbɊ[nR!Ac>>pg4F2Ůt~t`Ҏ =a|\qC],I&g|]nRA[qӒW|:(A<V\\PNܟ9aR!6%#{YrO˱K'sei ͿFvm*(]=AWPM(oZ"H#x~6Ζgcz4b^F8ܟ9،YE Eے +K(ҏwU}r[]4d6knsXȉ8f5j(}\ZS$w%D'nLzCs̽e _IzGU3ߝϗ}d#gJjzKA2VPQ3IODiO^'zY]raV:62GV(1$ ^8Su)h0n '[;O PZ ~O=ڻo0Nj%-c᱂rU*̯L!$* ΢;Xސ@\|g+BsWUxZĔ\{"zXXX=&, vNn3 ƪV~ثI*T߮[#@0'?{Q=_G%eI4MgdzEp; ) kKR =@YBM^.'RƖNY*"c/$4λ&h<͇몏81@ ԉ> "tM(0ɜL; DaQJ}}Q Wo? #60C]@QNqǽn8Kާ޼5ل4m^ggb~+Ա`m]s,'HO"c؄&5|λiLृZ[rFΨc`lE,F;RY򎍿 mMkm\⃘n'{Y['3I=5u FB\I`AP/NEݍəW z8nVhsprr)r""B UD2 +W',d+h?Д|ީD,Q~=Y$*d/pMӕ~g,8HK0j\0aA,k&.$2CzntaovI[DU] rE07xw0C'M_,JH5칥.M_+ړS72-iߖ%::b9_#T;_Sz<Ϝ&- ˷",rɆ x˻o K vO\ ͩ<] -O݆͉^w65@8q0G)O4uqWq_U3\'5\Ujv& Ml;~PѼV-~] y_Q6bwoF:?g1'GΉ~z ze]f;dL?mW⭾}=TuJe&VP渱"c#Ȟ Cq3nL{m[_PNoc 邕s|^1htӶA瑵Mg ܼkTpfu v]w33% &Ak(Vg~yZ"'Y0bhx7Ru}qӦnU+1`k<}ǧxv,xrMW̲zZ+>kF\kرWYoMFT`+^)F <Ʊ#9DG`4! @c"te#$Pu %qQG$O.]Ov݆,с:S|d/2~yWx;Xo3E7EЧq.Nf'zֶ[3#tkAsNݢ T W[5/9R;Eu2Ԏi.ZGZf]^(A۩IyXmuܬ~cSx׬ۜqi9㛜C놁6rV+-RTG5iD^p?n0"`P\$Ieɝ˘rve_FDzeGkhA]- p @e9jth;c*!JZ4#d*$O/TzC[H,j;O5>!y XsXRq^։w?_o[H=DTjMUh˩`]J̫w K H\dr([O¬1>!_H njHr ]tGv89Ù>K(M85v_;O-l:|װkL..#bWnb3н@G6vLr}1kX,rV.M `_̻x-6xXYn^n/tϽYGĔ u^[jAg(R&t!zC%bS78~ZZ؛yݼ_xtkVd2]5ӇBY4[犻x[=멫L&<ؒYi*_tg_ bNQd J\{g5w檌aoAWW7 U>K蒽MU#m.XG86[`B4f)Xh+R0 dh2K95Pw:wD<kD? ȟ!AVof6$5yvĂ+fe]Ӻ`<Kp@lQt36gH^+PoL/{Iá =ƶ [HF+iXG)Qlӆ+ r8_*6ԇ^i!H8jO `gj "T;4렷L= Lvn{yO`l>.ݨᱸ-zMvsĸP Ȯݴ(&!Pb5XF[b^CϷRD[y6퇈>ZtyNAYrD7ڠ]-{n9 B"!=Rd@Y98u9vS"g/^-T*>QH=c4'!:JChy =v>5b7\ߊzٵkQzX]5IMB{lN>FZrs.Fj>|v8A.R2 tu,b:{(2*eFxF1ay7Q/+b! "%gH%?ؼYRFK[NGnM5׹8RUYRa} 6ظzV5 jJMNX6'AՇGAv#^Hp@Gѿd^I4ckGs.cLqF $Oi:&a"= "Url69tBjىm H\z6a7? H>h_ώK#cm?[ t|y2@1n0~}[ gPb +qF+UO 9nqV\;- ZoÎtCOiY$w?m]>oqoi`aHr>&Tz-+Fg|LOT"f XO[oQujTF0ηKQli:h:d%uFC^)4tJKUouHWC1fb'p>ٓlrQc=#qZ+Nߊk ЄҊ ܠƳOj.39; AuuQ8Y]1 ɮ¡n|h xR]9 ~<]oh,U Xڗy[Qshf# Qriw-bUxaR& &d;R0 a̾¡|}d 屔[۰BeaE`*x(${,o %!Qft+bÂ1q%jh?lYTuD*VG ]~+C!w<i1kzۗd{KYTI~a DP{ k7JW)lGf ])λu6X=&3| SD W )K/Ua>8~r04YK[D~UK@;$:hxTpy7 Hy,^Ntf`xy~4iȇ  țgr3dO #䢂2"LA@lBanL\Ųx)DJ VA *'䯆D(Vڣ5x3"D0xjץƮ眩O`: OJΤqy6w)ůpXJr .li7(JGP=۹p <ߓFC}D;pڲ_F8h|گ”t-0sU`G}!]d5txbmNKPAHZ4[C+HV ] 1Yg5 PQڋU⒀[kCmîw#c7T-Y ErX7«Y 7J]-@ `52)9!W8G`a'C$@Q2L]S.rDL]ns;ɟ/Ӆ: :U,.!Ag9ԣ83S@aInj2rEKoIk|-w5݇Z l#V!-@%J 9Zȏb8F Mot3ڲEqpX1;Og5_EjXl:s*Eu 0|[]z-D+$WA>Ʒtث2ٿjS'] VL" TIh>6m,FiKID+`8'&Ī3@ORG USΟzD淠HxhZŕ1+詜IkI." ؀OcAXX$K&ve|t<}:L9,oD\9X1vߘ^ %yRezޤeG!UХ1iU}w&3mr4BP@kӍ'3ӽ @(+㵌 =q]:k?A^ݭ`jL.iƦN F`uƸ~~f3cˏ7ܣos`FĻm` 33CJ.7z!mv ّ24}-jwwZ vX[l"eB]Ú lX$$v`+JMu:)\E@6".ٽ}&L EPCav {<کNQ~<%>95j^j"x{A CUEole-2s2׆xO:'nG7"y( _ P q2,ᡢeԫE8О<e07?*zSD媓dMOK &]."mܟhl5$&zOsJ^rӀ'qE-XsTj/{~p:;% 3Ģ8:zR'+;RX}n G jo&uЪk@rq]#*S:q1'\};+]Q"j(]bP'tW=r6tl|;6;J"LUK fECR=o;UCwh\gv_eϢ%GŠЏ=fQ b%&I }ЪD~x ]PZ22a$?|x tw #u\ qpPk]/_Nע[MuW' A/cW\yϚ#}B#RDq i&APEAX^\-S#AcB!6jQ;`[3Vf@Csb ^1Ր4Na;]d <F} $K!J`Z[A #^ ².l+]b0(&/pU'C/X[RWX}o!Y0Ƞ{IwM_yk[߃=ޓH8x'=,,~w^806uF =} .ڊZJtxw!C"IuHpI!q`oToQюY pl$fW&Tft o1JS"OxfqI}oOĪ` ջUD-=wUnq,'z% ߌ2HY^`Y5b3d1E@7rB E, -RF̤qٯvqy+28*|=7ds"::l{sli<vL _XAgnDyMNt2Dix*:]ȝ*s@va=y  гFЗ.[C)zzYЧ6N4*IouKm+obr^ۇE[[A5.hO? )פjj<ЊYKᇱm/paЋ yqL6T;UщzW`^y‘4~(BC Aisӣ_ضp3Ʌsӊ i(!z<jv`gj,0kǕ>1Ûnߓc/s1@婓F U 1)TFϰڠ] qǪ۶Lt}t^V<ȠD,F{vH%B}>RC"jʠB1)T41No^R -)TenIsЛH>w6qDpD   { b4+m\dNRSyE<(]Yͦ{m=C@5穛WgD(Q[:?[ѝNhHRtiLS֓+X`'wAx[GsLͯ܌Hˤ$_ꠃȅwT:w[`O;AzԊ;xuV#8J{X/ v||q6b_AhW\k!3NLlCXA̞,IhN~؈b"K[_ nIax!^)Lf;zx%=sgw3__Q%-i'MUz"MnQăn*Zȇl\i?-`uj bWmb3r'= yo-AWpഈm mm5%$n oRmnA;jsamu3؏R#5a}Ez+_q͎|!-zUɪ,Ԗ30 e:hpD4<ĝAPRa+.A6x*Ie1Xw?F.z) =C$5Tf ]'dnᢧkJ.D\3da APa8ٞgSex-=:8S!!9n  + p` Wե՞_{//]frHVm[f"8H COk;){FO] & N9k!_gaAht y (cv"a-Vw#fTBZD)qeA*SY~V,BZ>n,?Pe| ܈Rd]SDY-b)5$mU_'3i&(ֶu[fJrA:ӂx2 ;:6.N ?RP!z1\sF@]U}jVsWU  $co=B6At5жt-86L}LꪆJb@.dkGfEĶȗ=r6H$!a_@]+̢\+$J fu)`aJ}{Oc1_U~H J5v}ܛ%x[ ('H8/#~ ~ȜY۰ N}}FߚI^qV +Y zp(PåtG= lS}j!Wtt"D6ؔ=2k=6DRv-Hk eWרŝ?FdGUTr]090$3CA]y~J% DFSIeU&҄1%)f#OdLõ|MNt6AV#.Q'DleiOiɔ&MmHh[L2zl/Y pZݭ7S0+89P}ÅPҵ^] V%O+I`U!HJ6 اpb#;^.fd2?YklE7vg| ?nBpY)t 3nY,=2|lY^l#&X$ՃT#/G._|x4>/FxMNj%h੷U+U~5aELW~քU0JV=#p9~C`-/Ja}v!7Q,MhI{ejuŰ@ uYM'3-6~z]8jML|,[^V,Y2rs?K0~#18xъ`_sPP] vDif|:e`U)5r/AQwui* A\)̮pHL Lʐ<^NΣJ G?+l*UÑF|#T8HOcro(<>Ï^24/^![+fRa"@* l U+NWn.ȂUKl5$:;J X$1bG.յ`㍰_ёi櫎0w&cg²{RX; e M2^p21&Nu& ;oMF #5 iT׏Խ q});SF/NCBO zy/j~=EUX~;)vcb~Hj sd_E>"~rTl"1^,vV/_x^)\*htZK$DvpJiCKAe[ `dZ"|bHјeL&9kFN Ű:?r oiM0B G4&^4xRf=G5u]KtdgP%g\,&M95'7d3M|.5`nk.)ĨCàZpqD`Q]A@JX%]8`$dBKC]b@`[l?χ  '7w㵥H>5_Wdx">ń3` $e*\2ǽ9$Jڥ4>qpRocC<Cj͵k)#  2uyLםP8նtf~<+j@V?aW~Jg*B)0՘Mk>- X9*ivv% );0c~!c@^+*Z*Cّei!3J:S,3vyfK2{o7k ^,t( עmz`z%rRk0֜Lo_H:ak0uF 1Կ`^;7IHuj2{J^}T"tIŕ!b{_s}P`d-m4DWҜ7g-*>[(Jب]aK21-P}vT!feA3@TcdžJ,n˴X3%]0q]a$Vz-UQژaj$9)5I(*||]VyN7Z'11= !qeSY )sOLj-V F(ʁ ,-`nf:Skتc^ l((BD>*RJ֢)/ZztZ7,հ1 +mFT ,+;ҟjoZ+6m)N3iNX5CDxՈsūA |JJ/8ޡ`~Mv6B0Ub#Ɖgj\]ն,5S=#A՘, Erq8NhrU&l3nB&2,@s|LمS;^. DIn^ʪ:03?vmQf}5r V<ƒ,! Y_I֋ !uZX pƪ]||dE rHn&P}ςq}{~Lk >NӐ&a$xev_ʕ't>1ZmVv`|2Lxvb*J CUL{௸nJ+g` >R\bƽx,R`HgO`J?9:7yI%*3KFw[ǂfM.&vKj7 w-Xe+G³;۟W#fbŭZ@3)dZ)lf'6ӱn[$jhPt*71/Vb;9;}:'OxCgxc}~WFS#nfcbnQsck'\0ޞ"Vhz4V]*h8=Bi%E}x߈r&z~ 3qX?a2i 7UعY͙@VUZ Iբ5g)I25f{=!h!6e=E_}lrѭ-9C[-ۉi}: x:)m5- /b.dƚEd;M yjkA5FeWCB*C ::Vf jiq9'̵U_TGdA\K "d%L7 UHJSwNǧC]L<?,\"ƙPѕhݘ勃o5dx/֊h 5r,7/q|Z*ҕiQbS?}738Cm awi=[hmѰt$A %ϐܵijQM);qH=خ f%KYk] aІԹ$WژKCnbNXhYǁÑ3Q3"DyCBGL@'C߂+}@/VuOMw n۔ =헄qtk`ݯg5HC*dd`"Hsk#3ݐJp~NL4 WeNL rާ)LpܻP?սe/aJ~5(n'͍ohyݟwW 9*Hd-S>bq!<;A;>BLLq^Pt om4t@ûהj̪abfBhHmV (|g1FN22( 4l<;`=~ 8NwS 0ܩ#̞֟Qd ݱ+񏶅be7iFQC@(h퀜U> V̔O7$b'xI8l^G@Q[]qD$[n͆,tsjyT|s[dRGE,|@4V(<$c-3>Pmªnm־ oST4pJ$ SӯtNګl>ⱢUDD0>j!tΪe6u9nzU%DZ3r-aDG ](/Y@տ4Mg꯳],H_m^:#BvQMe0=2A5V;>fIup l@2-#p$ia49p}fze<@|WxV)mpFtSl@^ `Y9tI&9[4]}}#'Sz&F7G!H.jDw H invuEIQ *kχ =A {j#y&iܲ4 N7vJu`j -S>Wd.$=/5;iLl{֡,Z}sOk oKJY}&'(X ژ!2*@@G'M~X2kwsZ\itrCA C:(Ԩ?'G0Z7^g`8CTf+7gX嶝V@ЎsHp!Pqh/~VSmA5͎V4 `7gbl`r5#X^5GBD c~sqP0Vi(.F~_CT3 zs9wbp9؝tL胢'Rm{* <#љnB}{W#R͝Ԡ>,JVБD޽Ɇ$X RS鵚J0V[{~=B$Kvd,GY4vǣR=B7f94?s( n=`4_ ec|in2'edzi0kMjS__#?1밧ݰag\Z!茩"PX1|K}~HчG@;¿sC~,I-wendx:O({CQ$7M6}L&Zn Dx[?VbMwtg$A-p~B%U Wgs}]~630`\﨏jl^\H8:A #dO&2)9 vvA!.gY`0ytrB"'_S8'V&WOhًc},b`L^^)"JۂGHuObRAq#^K)p-ff·tKO.``!0Vl긟D|(V#G8^{-~l_"PGd; DvO7wR Z3!jJF%& v/rU !sDmm߼i.Ȓ`h73t5գFl7f:n[$n7T])>(@.5.ũLěqyq?w{Qg=p*>v OyDFsM1~.uS(k~C;fY c&}9unU+e{=ubK;zՓx%c}݄27U-f(e/xA]US(O4KP39N֛1>RF">D;T ٩vGx46e/b£$U24!PVx_6Ûl&Dvp7Lq ?o"n Zܬ#f)v/ڡ[m%ww.Mu%fVe vwE*V&C\d,䣔%D'x WD`kGǽ!@C_ [jyKoxdԙ$2W <=Men4KktXӂq1X( +XmC+sP,kt9]gPfXdJUٝ"e!\e zgHӴ;]A.oM .iUfOXJ$Tg7E`39S"ABYo1-|0& !^!0EG^?_OiףI%C"$_>Up'Y'E < &( 1-U ='8I&EE. C ~Y23kδS>!KcZHQeLp6Q`H O5>۴kNg`~L/B%*y:jhkK'|0slwn%XpX8rj͟m툠JcܱdamXߎ@'ק@-o0I C &nM h]a0+gO6;byw_}bIM3uyaLL+̮etpRi-+*YPc%L$TzcH\|:Tm9~[U}'A5 ou'=+ڦ%7ڻ Def%PU@7ٲJS,|ѲYWRy阉Lx)Hkmr$FgH.`uDlVN}Q{!W=H:g] yjlIW tRҷ~^J %dr<{@7I(W)X-hYaFQ*l3 !6Nl¥%,"nߛ%Bb ъ{T:'J3 P 9奨KDv𮊫s`."3e\B4'CZ81# SGn#\a8uP8(+aa~逝 Ɍ!YE*jfXf'Rc^c\_ΰו+-"W%Ovd37=rDOVo(.~;IqRg|=LRTE2!|W hTÔ"' Y:XA)yfSY@yYB\#p-@ {˛, D3SnaM}Dو1tCBYT+ 4(uy<+-H9|[e}QBr 0Ǒ@\ӥddZ s8%J3-!^Nnn=f59.vAc`5~F9==d E }qy)o zTnC|EObi<X ɫ<>'Byŋyl\JHlHu10\rk}4Ps' kFާOu!}7Az}tu7YLh#ƺAG锕Sd\`ekH%Fv9Y du>ﺑ~>(BY% ɤ3EeICZcWGn3NsؗHbi #rj!$ aGqCB @,Mr㶻:rt?Fv+h/BW:IUPu 707enr܂i(ulv'("쁕Q&O4ѭjxj&:NђKVb1yM2ɜFGEany]CXsttTBLp6y*tA[T .֛j *?xxev -sèFdk>,^,Vﭙdzd㋺?末G %f|UeVh5 {I]fQ5)6Bu^;S & ^## -롳-tuFx !5@!@˜R$>(hqg,QxNIe⎫zwS˯@\Zm¿$bdz*{'SӴoo %I2=77x4c"Z ZJ\,evR_)pU?hI>e`@P5s=(4 \}čSV٥FvNyeNb1O¼`M6I2v7\ ~óoG@'\1J,QFf3tih˜J]wj_€6㔹LI,F34@v2CS/z `ĕ|Kt꽚`!melDf|Q'@>+3Ulc~~lI>~" *$"]~ZN7"7rz t98ABV5%n?D-g| F<?ohRrs>hJcs:x7)yUnP:sZ'{ux,6 ֖)Ⳍ%Z,I 6JpA/)!\FݢLNqYl f'DO\:ՖwRA;Ewq>?Wf}QMcڝVa0GBHbу>Vﱥ!ǵm9@B'h\KۦIZeyg=ݺw+_xbcҵ2'f׌#8^v/:˜Zc—ؗᑵs*D؞+$/R_r A_sjx?qUqY@KI#^_4%{vWCFW0B1c qOI`;#b  rYf`'gCy]5F&r/ ?RW$ɽɴEa<WU"'6^W,NDMYje?v#+93R}ڛ|!K`DgGX -mơyXv x/V\}8Ѕ`!A4)@yNG;.z\m&;hl ^ChЍ%.Bɥ`v`s 9DZֳVɸ 4:Ⱦc7X:$VV_bA4|ə ݙ` 5LF8L[D7h&c7}@'OjN@̙A;D`^wɆ eƈ9s\29媥$E V|1ВR`T(C0m-L""[3B4NҎ[Py}UpWPA`ˍ{T/n7̟f";,ƔK63mA(䀬?_6Ї} 8WdYW"CHݢ\f l>*%_>䞆rQ(VKY ߌϐ.J/qZgO0QҪs=<x13q2)b7@|%XNh0M0,;0# TtȒ?MZsSv) bȾ(I !bH7xRrBPiH>B-a/6Wڐ3h5aP;xy2_8Ÿد1IKRT//%wJ^n(-b̺|fV cVC~ؕ}gvb?zz*'-vp2(N$%ê^pfoiMB;Iua01"Uc-0TU_4?*@q@`EX h a7*~ >R}f3GlmKGGİs뺣p#_ۤŝ*~,D8`-F>/?kE@ UwQe<q"h@xwf'lpwU/ 07yZ B1$;@D ƈf_7[u}{tٝEc>./.(%. (aA,e[Bv d vv lk2O,axTݞj,Z͟)vníhm/L0,`3,@|AАSQZReyE㶗NǰKm:OLUn̳g0DF52I䖳^Mpmb ` q9yc|%1FZDZEg4 MhdɥEيsXd8ur Q26<,Qx|DЗ|lfypC:. @Aͅ ̈́ZKMr~9=q zG`_! nwT6pnW!%2d28X, ~6ro1 >|AhuTq_#~aʘӉjD2Ơo8'p._%XVbf@Os!KG֩E1H]~ L!(֝kM{첊5OhaՁ[  Wc&J/U4 0Бee]Q=]3"vLS)/&WjyL1qⶰlCBm /VV?V]:SvtIONNN?FݚL u'yCP{-ڹCh6@W:| Jfa|$C3$.#FE.I#h+y#99TDq 5b$|Ls!re>1|Նp~g7DT@# ۙA:%P@7I>_nHmdH} S>k5BB4 Q|V+W=el!aL6~2gNltr}H΁6Q=#r׷Ra~jV,jY.Dk!K򷏸%V]BU"y , t# YkeRLҩ&5[eaYR{gXFXkZԖo%ɠ9Q|T!A{@ &J.:pXN~Q~q ]Ho$M^8*] !;O 3b)(l=DR41o[Q;Jl/ڍKkZ\AC QY\?"@'ܾ5˃%ghjZ bL3N@[:&MĻH 5ϒ?aBUPot7XTj {{8Bt92Ѓ+@0;L[c? )T\Zz]PDNGOoh#ϐ_#e,8[.Bw#,pLQ$r`M=k< @G|I8<< >{ybMNUjbJ˫Z! l00P9+9ey$N"3]c#OPf 棞yH[OyLlxRǪi-E*>|>-A"6x֐.m;4]8_E&%DڌJCSP )!:*Lr[L,p% "5D7lźBHuqUA=wjQoŸҪD0>OIn#?(@8 @ ~HRCܟr o5-  o ep8Uxfo/uJnHT=T9./q?ϡʭh%tcۧ)FF~{L.|3 ++~ a싫{'xY|F~RY|8R2E?˻@hϥ [}{mESdpd1>ge,PU#Q}4~p9i}Y-M%mT3qU U];!ٌpg?8RǬ+c=R{zƌnBbX3ױ;m=S$6c|zJ|Y0oc/ۂRFf@kSvTO2!xI \Z1,d;aR VlkGpZtcMM_)/_C|ګt+u a[n5%_b:K>>sT[/_N%Sdfl+{'6 p"Wo|Flxⷄ{b޵U+F$Y€ڇ =reΫUr[usL|nj %;]vk !l,?6(Q+Ѡ K*U(W?zIG4?Ƥ#/OyOpROXdJ[|t{I2JWXV&|P2e4dCWa_7l%gfW5h6YXfQ,1t,}S'U#iuAՆȠRi`1?Dse:KaڞdvZYE]Ux5KEARIa*0{|i3`۸M;j:QQJMld(zJ%|*2›aa-oGjg.^r>kE[cEs׃Pb`3\q"Y?Aoʈi슲93oTԋJ: \:?Duy\hkn7[ *ݶ~[~DGޑ.}D@!(*w;4|wb;wPq)av-qIdW}2y&冥0]R|/tA!g N"p)]W hч!О )V:[hD˚ZZΓXʷRE ntlVbɪr65Q@'vXrKPyWߒF5Ov~86Zk%3vl ^,;N{ #^6s.@f' 1ܮ5&lHOX}tp ١ݿ*ıI/ oDLwa7MJS#ga&n.p8Mk !p>kHcЌ~=$#%f^,OS69˛6\ .D C~ȏ:v9_z/@-U'bՄjw-p0wT=̞WX)'koϺJ3 :b*ub/>|?#y^IF|Vq& Qǥ]+ nC|LMŎgh}U\ vPSv>"HMuk@yH媷E< AN{!c#ip ԙ9 Iv憰.Aӱ ~e3M.:FYm,F/1WL j}ChЙ @1F)Ken)*s"@/}~JTeOTwgux] 0ˎF3rȑJ_žrWh^t`g`A]F8 j1(='5ܭv3Ny?$7>O"v0u8 PeA-tQ(eR݂ٟ ;ݎU)֊t띅伃QxseAj +逦ǩ//GM6^ʧ;r"~<9ztXVȏ"n?G1ކ5ahu3B$wCoxDܛr1F3.On_ BAM> 4ZV-ά6 1wZ`HejfXlݗ#,86P#Ϫ O(§>&yB\I*$!e1JEy@*]qY[[ޭY5|o2>:k>gp(+L{QZһ-NkޓZa{L3wb|k4C vE :B)E]QxNWeHO]iDaWZų gS?7ŦY]N'5U^^s]fbӈ >Nx YvCx<ـKg_nht"*5rL-Tr`{yQ\FP8a[~K|}p  /I &EAgh M gAaefT5WӠo,/o%r:ɰfJ-3 XQR>w/J=QXY8ҕwJN8Z70bjqB(\$̄/'i?A0嚱Z{KL/gV|N`ENd4 *PjlD6bM.Ћ8ad{vb '3,4x/\ZUCݣ*="q~̍Q0}@"H8+)lvA01q\5ľMuF# 3gB|yB+ƻHBYp5Vc(On-(ā HIq*"fT-5mNUgkEj/Xx'*F+x pH50F,!?+Ws3)8W%vԆ%} }M3 ==z8 \KA J mTը_g"(d>k[86KF*s fէM;ԶwOQZ{`uB@<D,o˾—l ~ %YttT "Y,B.bX ނ/G's=,Nc鄅fbJzCLogB  {EDe#wuN#|*1/ŖEe Cyd@ %j8ͬaǩQj7d =nv8L'|k!K^ghQ+Vh+Ur .v|J<*JoZAEM/B|聍Ň(QrlsRCc)UnzFՍmZ­℠7aUq` KCVTz$9J9zd%נ;tIG;:068xhdCy8M˞qncjZXnrqBB.3kzӷڔGs<6|Bkv#hR+.Ka wxuqSФOൃl&rS[/_H’t/1[^hZ:gד{ewoB;trX`Z`DR5^5#C4U[֥- _Qpx2g#&KWd NJ "fVGj-RzaN3I鋄#R\[ϋ+ p#Ðt{w)ni\RJ[|PΕ?> O_n4&n2P-k $]p}Ԉ ER B(邦c=w4>3Ǣ&sDIO8SqYUkrfPXe1O7׃ǿvT#MDb+Ky1 olЭdus hb<LW7 Ї3tȽ9p=*랛¶87уǶe%?& ~ItTm<8 S~zSO x ԍڷ>Z\ .mgj|[}1ӫΣ|j}|=b:ـVqorγ[IA+-ڏkdDg( S%ϭ]v?ѵ#6mH0_A QC=r2` cL1 f fpx#br~f2[Q6rn&]giΆ 4ˑw+-I [U-Pq|z2Q8՚w*GV(5D)xIҺ=.+<:ғTvڴR2BХgBU`>9k.قo6]Fy%'1%RLj2ɫj~NfO[ % ppdO=C ;f23GdĥE> SG hsD}k4x?%NksGZc8GCfjo{l: \4ӏRV%v+-aXYt܇KG *[To VYK[yAu0*26*߃X d΢6>ۯMOȰ3`-`:,e) UMXMG|3kE{To# n{_}nk7H :S.w]hc|vM]_Wl6Vȴ.(E_B␹1~t(9=Hic?K3G Q[RR/cZVuBV ;wT2>(jsi_]WI0bA{o7W~Jqf b ,失Hק 7~ݍ){0<@ȃ;Mފٵ(9o;3^>BM*],ea.@L_ ^¢vPCWx|,\B|BzN28(n֑Nhqc Z /6|N. "je'u&h~ծG{ rNt*mK(ZAB@PLcbiYv2Yn+ݯ :` G :B&>?wU'yj/ 6v4 F!*G'JRXDjyiPFuWnC/;vm=A n)L˸@b,Ӧ"VE8{؇U]gQ3aZ8 B$F [9W)Be-V|L.x p\&Fu렡`D¾Ie5m̶9;/~)VLGG$-H'6LDV`k&O?%m#y2*N5*Xv:WFfUqK,2xܺUSYdg L6k;e =]RTo] aqjU8d+j?<*atך2KgPOu Sg8[$s-bޟa@U[!mi8D rDEWj/ ?ϟI3VS=JMLg#&0Ў vྞK]9ußQ+qXbby4Dlf=u79]lnދ_H H"|׍ Pa"*`ıL{3n 8-#%ey)Xe$ҫ&dZD,6i}Y$ ϔ\ǏiYwYEk0gK,P>##'\ Sz7#Ӥ>&Ǹ=/ܩ#U P7g *q{BމUHFLYȥ %8 Gּ_+"ssI>kNx8F[ RDN[QB_'0+4#܃KΫb~ ,wI8R{/S1zӠ|ơ҈2%6h%7-K$uj=S[i%u2(8@Z:>mw`ՙ6 O PF簌wU;Ҕ?iEKU4cw@LZ'n3A#eʈmGqc~/1kJd4DQ/D(Z;kACо}]Б3$h$wI!?Y6O豵NgSX0b% ^\No.n-Y-#PwRzPgi0kQ2|s#|l=g3C6#;0*#ɑ,.$}ywreJ(oF屭NtO$c #[Ow֦ .Z̓ZHYWT3m=7I$ɽaذ>(5h㉆-x?ִ!D5a 7II͟E=w-{t!{$]]ò<'q{ ڀ芰C/-~l(iȼB`Ym:?våiQ?bg}U 鮪N0gzR שۍ&ZVrkpt\%?Ծ)1:-BRWv/Ϗ!}\, l+p"#||a?ߨCj4}&hh8cE8Iߟ}*qlZ;ePw =/Y8~ 584l δ*0C<^i+}pFץȬ2 07e)a:h16SQ9ZmQK(3\q)J'/:M"tApaz<˅.\6VdQ,{v|KE6RWeNJJN T" ?ݜ? lFkbmϏhK /{_|R zjM;cؚg/S'-4sKp>oSsB+V3q\ _ҊֽӠMs'ۯ2 ]%{W]I] *I}Iu}opU|v/pi2`~>zRo$O|;(\Hs@L"|xNȦa<[@}u" A{.&XzXςXnQG~,BC C-$)J|B4r6unRl~w S;3[$ɻ8x,jđ].ィfvbF)d(,xv^#lq>\i>%'K9U6aGܟD辕#gub*?<q9yPl-ȹo[5vѧm>K8BOhzwݔc2Ln JAbL*au1>okzF>wBue%(5s`álAfFu#{/mz x> mrq,v|?a]zxY-P/kfKg\I9?6wIf}+M^(X 5ALY Nhf%($^Il;>9 wj6o6MJB;K0Ci2{0̈iYĩ-`#}R3D]uM'6@k/f,U^=n!(^*z$2}Jk/ըZP~EyyڥO7r a`%e8lU>!tG]k mx86jN?b;dj[4{t~ʖpDY?I쿳09AWr1cI41EVrg'j'ӊhbF5,Ioh&()MI}}"~̘ ٸ v֭X#*ilDp[/C&Fp mM ǵջoq7m4}ٟnTO@eirj5aGHjb' c%*xء9m~_"w75N _de8*;6=Y@k!II8 \(QIW/pstA68XG?!)5k ov;4KN. Pj;f/5w&Usru(\:ZDq،Š D`TmM(L#)P:*(Ԋl_e<&\요(V?й2! d,_+6L桐s o}N1C_K&#:W%U@"c]G$TwB+o(6a ȮH 5 B|g"t P=pBl`T8噫{GQ@щc"X_iDur.ץ*t;J{>TYKlsR S?Q1KH*?`үި8'eǰ[(S?#}L{q][@ ӄ3/{$ҷ5r"~Jg;FRJ',}k^]'6٫vJq|/Y CT&U'M>,Ae\Zhhef̪'A٣w47x˜Ok=]~?tz跆l+0tiPi5hƴYѩ/+E`d-N)eobNxlRNF亃; 4Xs;*>UqeVzx~c㫤ʢ;:_O,Bv΃q鬈^-Ci.4 dOj܏>;6%#2p0c=:B3Fc5Ԏ(AʘL:sa9(ܭBHӆ~ģ.Ώ&m_h/y!(#uHFt89r,h BoY >[ ?S5 j +r褵D33j:B3P{{̂䵍["}"oFNŨ:aI^RR~ZpP(|e;fktG4hU_b)jม閈8- ,6@e1 2AƷBe!Ew}3YsLE3JW1vdN=ͱN,DMp.qb9K}yNhLR%? ~3]Y\1q(<'/C&sr}+Tڪዿ0ґW"%IAfIo![ X% XE(a )kDx|}Y5`Dpw֚'(S)Wٿ޶2S3z#4}~#JꏻMB`Ekݱe!o`Y;aŪZ8wm=r SބԺpIf" -̟7VdU -t·« _>xk125݄*fVгv߯)rbi"C9x:ZX?0 y3E`}yQ,ݙwu\$0*-Cоry8[Zw:'-y$3S`OŨKL$ؓblutWgT޼EM pM38-,[ti:6{+V5x`6eeOu Ad1ڢw¡(0{T9Y"V֭GsKҠڔ~H) `IQz<d݈g3j6G(#r>]iJiP K,i4/v,Hq/v`CL3ڛWJ;$2_ǔeT^-\0&iЦ#h*ge(kr| u)>NT>ϩ=4U%;y''uAK+҇ꏛ[eee;(l*c#2=(㓨{[U'٫H]SlMG,!ӌ>ܖTTr!X(e*ǨB?7=ɓ˯ֵNmN)#Uԉ[;!q)^5,)}Q,Zhl|dJ6 _>/'G Ank])f7i UΨ}i1 ٝX@n7m_%6Dee0%_17j+kLjeUXFգ& Pw7!,/8MsF;IO`UA!gȓ~Xle?Usy_ [}U+u.iu ȮxMZ⾑%K'1T\ڗCQO|~˟7>Hi=-RbC*P"]ω"B[Ǫ]|dPV „LnGAK%9yn طP5k<@c~ 2P׀ޤ^_z69x`+N 7ɺs <3N>D7om6X6qgzsT+f^eX{?(.^ 1RۯҥJq7"^V !],yZ^&vv*F;% p_i ,1hҜ?qE"A;nc.^|ދxS= rB00zBf4?KFdnjѸU ErY*3ʤOqW]8٣gt@p , %,lp| -c+ڴo:(^1&[<@ ؈Õtm4$qʗP •YD>Tn<~w\oـuuaYTS%SƼ~%ylư-U{haD~&c,R-H؊0oF"EY1+rBYhBPZ@NuWϨj Y:i|>i6eңtGlT Q_ :jb兤i>C?Dd o]1c ?rɧ?MXZ;t9mgOy1Re oҫF\lBzH&vK"AYy2_%^au:.kWu@tTS $ULgfƌC WdE$_˜ū%oS_BOAC7< %l %R( 薭2J!z<[sJv($lW0qFvNTa՞VnֆG1tZCJ{`џzWW`Z- Kc9[hgWޙP["+C0`2<1aôV Uϔh尴(/H+mtL1(ÃPJBưGW,QpkT"LU%ѥ ߭T(fHdAl\е ]N;y\Wd,'q_ =h Nncgfl$󷏲i&gc؝4֖l)I۹N $^4\`W ,^v1kO[$okNRŴGoV\5Mᶖ\י[߬eހcN4䳕-+ᅟhQgZZd(v M,u}9zT߰x&{ˆ쁽…D1E`=t3H)m@co+?<-:xY 3<~rwx D0h^pXV]zt9y74w֜˕jvU^[Rm(避 s-Nɱqdӵ/=VA>@#q5.Mf,sQc!fӑr]ԓJY*"W.z{ktg:fi$a@aDK%>%Rc4CG}f5.RRXNdnjzcK6NnMy`c5To_ʕı>|?LgX]Ԑp)-%J$mQmm%rJo]_N- _(w6sNoVV&蘮T'~TyVdK"ݿ!et_E@^dyn'v;yoeS`y,?3~k /&yJPJ**{#X!Jтb+ d9`R-{ySu]NdIhQHXSV5[ ٨Dɟx]G9mFC.9y&F;q +0Xjqo',h-0-L,k0s}k>`Z!RQd_'1l6s!yh2Ka4j[ -Ֆ.qPt&UڊAhT=6QVz:Nq;LaR}.鳜  .MF }h.yo`iEߵuɄeo`~-)0xF^8 eJЩӫ`PgU0rtDMnem]]cQz4 e Ѫ[+,ឨꦔU4tgM cC53<&*ߠH"QsAMy1(ۚLЕ@4HgaqY| X2N6W6ĸt/q\{6o,˲/ 37B~7 jClJ*$x` zK@ӇVTYzA*F--sIƳ,܎au8ˏL jqFE.6֜.;uok)@YOXXy=2+IJ:8̚Tk` Cex\> 3< َq):HVQPn:NY>*a>][\گ_6$t9*0'\*9O9 5wOt\vMg$9S\V{+hpqG1hnZwSua rlwnד_y,,FPd#UQ-QI Ǫz 89;?g-}V0N'3k9`69.wJxq'R Y3SfT[jNqS1Vb;U4|1[*'n͹DOt(,+Q%>NAH|BƔJ.$]f/6#i*]SKc!/zc]B"O ի_R51;.aқ,ו4OKdCQGb$AgP9cBf,ܔ8'mvY[bH;tNǣEug%e_`e:~ g]f  z=}¸0D{yYHNG``)9E/" 6#>љ:cS@B9oApĨŶX$6=*D ˀEh6ׁ@9am `XFNWc#F!i=.i iHjG=ASq"Cy 8WǴV9,E`e;<をl{yfs :DA"PVbD '7۾Gof96괫@f5)bVAbF܈v*DjtvMyaҍ=fdz}ȩz]cnm"i4m OT-Ƌ_Q@; .q?}qx@}ONEjFPYscvT5鍘kx\N0mQo$Pul}kΙq_[a[yww=]\L;-P!d[zв_Q̘ɭ]Hljav7 E۹X=s_|;71Z61!qRNj]To%z l_ ]WC=[<=b>\zӒK#4& INu0m>,DcV!BEC"=UlURMina4UM: J xDa R.Pʥ͸TW=u䁉̯[R38!+h+=7CBӍv. z6aB9r|XDDDYKd2Zj?VǞQm 1lHPi:1#G[%ʞs_M_ KiX_7 ލtX?/{lyJxլ7!QN`e_dA>2Knҁj4vzM9i g~q8T4pP[*H]QeVt+~'S?zC(ۻ!-P_X69q 3͏ԝa,X1]~GE+ل0\ԏR1qD8 h4;IV9>sZLe*gB,NBPKKcم }ݭR\V%)S#jtH`\mTh"ӟD""65 vbɡ*Zeylx6UbX+Gl`L:@Vy$i]v (WʍLن{i A݀ n0"EW=OwÒɣ5bT+ 6G@U7_^\Vv?^,H兦zPfDG^o+W NL,Wm1V A/.sYcPA^'t(ljQ2ŕ|?N~i؞;i> Rtιy\/:4J_ҩȞjk[ !~.~/dS?Kb%IrR? < ƪwqȱIHXb#lnxk*\cؔ^[rӶ X..n<+?gd-Kآ4 x.Y8\N[ p>[4J#a3K82u@T2/zտ8*8RV%QTű6 LHw^T<4d:5ӻo[puJLf}cWa\yA-f3Ye4Lm͋hc:Bq\`%bre!H-ٟ ]͒kYLTdW1iOL]^l?9f̸$O!܌#*F/,wW;D#jS,c\BJ~eMU#Ή1>ή7tNadk~R(cjʇCŰڹM(ݧӿ2&Nj7iGmW/DGҐaxӕe,85&4?v |ӤȜAǒC]-_pRVV[[gwa?7ٷlbmX6L6rR/h0YbQPc[3=okSQT-_q[ iKq~|^t׬4C&63.@ @ ͙,cg T@>iox,)4+"j:+`&TjLZhl)?sk{fUfjRLm~{tKJvxK˭4?Ej7鐨4M^m~0NJ䄪<kЫ]7r-mYc~ˣH`NtrA_SQ̬gj'.rT$PoC)rFȄ6F5F/Yʏ{*Z ɰ]0CN}Ev @־r 7u&n{U(XH:LZRzݺjq^=97'pu…%ơKFSXaKgVjሆ_^H\_idN"ڙ,"4ԑ|DtMF'|ow vnӨH'Iquʫ;l *dm'A@ --VS$O䨸 1#HހpA\0XdT8^KdW4V t<@=cMڟ}9qeu(4_ ,y=ifXnz d܌dZ;:ީ:ƙJ#íD^a'܍Wtjާ:}Q#tG3Kz! 1h:](AhCuv)**S8g~RFs Ar̍>I=Tx]6ٱ#W l teS~sOiÎ+ {Cx_{ 5D_ =;Qݢ@Y \Ŭw7>o0}ݜq!eRqfOV} +^wR"~T aBeV!=( P>[0k:Vn4ȇi5S0vǚHŘ%Ef2wK~15/Q4K>M3CĤ,ɊX﨎>N =e訾=,sSdIHS*eR;" (ao]x8ۉyZEt66eYS[o`ds(v' DG`'[68é~ˎ̦Y1hu޿<}Jd Oڒ &(BD Vi#mJ[`oP5E.^K\-@O~Ǧ0gb62B#lTyWUB|6 J!r`-N{pF]Ƈ|@n?Ɣ< z,>>Hq ^OLcHT9ҥQh2:Lc-组Q >0dY;VV;hJΫplQ-\U_ ?}:!{5ye {i쥜m>'W鄃EimVj{(ɈIt) uZD-{c\`J%ugmA*Nқ(^MP˞ ePcLF-^WE)Q<o=, LaHD- zh>a]#%r[Ocf Z918wH` Ajj5.}@ ͌uSgV6pЪb@`p} !(nQNs{ #Ʈu>1^2 [E5(1&7;>~W=_V0yqj; ;L%op< FŖCe'#" qudqC=w0$s%:F>*L:8l"$kѡA>N /݆Hܮnbn]Os r~є]WӞG~IOK,E}VWBԠm PTn^s ڂɢ7Lܦ5 9ꡄb N G⃞I[XQm,24$hNї @Fz" A*M!ڲ>p*@f˰4S?rv{{~&_5>4X{ $6Җ0ÄPnsSφy"M0|MFIyi2bVk2X #}},K7rĊǪ) (a1]_}KOCF򋱈'v$j$xZ 46NvZ})fG@LW6<{2A 0|%MdB4 8pn15ň6aN2J#ߥvl%-dXr<Sϥ_"K _ny-+O[4 癗1OU;E;oYYy!鎪>V TuP$<7MUm'{>훕s@ K ۔^UGDp^BJ\O\qMI1IiƐY^'3:Gw#W{B1J+{`s5ĊW(pI83&Kq)csYBD׋KjQ/g~o/(yZ%]13MijsZbԙ@_"Mu yZ*4]v'}<ڹ^)qz/?,8럾#I5 N緮 q(DeS3:+VfE%WY˷v `ge^!QWCk66dv|čoHL#YC!JvkIʊCWO7ojޡX'ysӭfVH7^m̎i` ԔoaNתFiEejQ/npLВqɪ{t4;:0tftuvRnfaY۹cw(=$$ZN^\ctK8MOB.3Yôg3; 5NE e9+i.N~p88 ɶ~*!Xh!K4H!v i? ޒ lC}z9 >ژƒ8 #f$A|y8GlOP[90Q^ vTvelq 2,^Re],͌MsXR[0F;a ɨk]Z_o?w\oOġcgd+1M{%k 2/eq虎a,j0e=1\unLk`I5H~/ ӰlOhS ;K6$,ee h痡C@UNTiHXN*) Ä`? Ey ]^{{oBv-,mNE2AE@F[S._G™Pά¥-d7&xhB/(pM;8: ?;Ɨ r!& Pe i~@K'}NۅG{d,9͢70ŨN5LTwן 0WJ#; MpU CsC˖g?& >5q]#XmO⎀ WHȋj(ͣ33֪|K"!J|j}}6{hτtt8%_&͟*-7? la07$E)M+ܣڒF܄Y.̰GujŲ0dxq]80MpQ$TVθ>gtn1ڜi+a[dҒ-O DPNr!X61:8QAG[?`,Je,4iޱʗ]Aqq7ppj0]M"9qJ5E9xEE˾QƕD#\; a~˞0/t-p5-+bߚw 'xgHNtz2A . kEΧBIԋ܊*>zv.ee7d-pp+a/JI;\QFC-.ޏK'5K:Yߡ8/i$C#S~GL(+MdL0 *-|'VX"߃;;Rŗu,ϰQ+p(c2u rf}z :FnVGxS: NmDLKyTܜމc4I}t-8s[N=gH "i2SxwJabrg寷"Sך0gq["FC~fg&* XĔNqo .]#=¶Mk$Ry4KEfЛ! "]*qjgaU$@7 Sbr[o ob-^p8gQ!2g,I~8&Ͽ"/\h3PZKF'2;wT5؀U~+2hKŨ3ie<-BnnެyC?O0x+Y,WjviP!U7)V)(q< Z`ڒnzL"M}9^n$; *[tV@ uB>S,*̾0b;)~l 8ciYaT;c1BL9b9oE=O j " 9!hV vC{ h-Ɯ5.˻wE%[#:/@ Tuoѵ4%pvN^h!9X(Gi₦Xk|[S~'WG^CJ+Hm {9OgTx˥ \ 4nYTOe,=㌤rE[lX3ѽ`NۤgU!DmR$ePp]}bJG慳aɱAR{ɩ;΍JKj)r**Fn1m5b`>:y5@ʌfXP]/xvᰴ]"\,O9r6ݍ+zՉ/-9tݤI8j4ԭ/::0i m$a}p׵쁗ŽKf!>IܪjP;"Jj(ۮ"V(5sk zqdP0s 1=G3D?RT|[V<?3\ŵEI(V6xnE 9 >h؉gzw71)'Y)z@O*LO\2Jġ.{ )o}-ޛ/6y)Ya-vx?<(dI)<fGŏsij^KP4ete 3\WURBz_c~4lImrK*sN`;kM| "_a]6E m[<Ug"I LRVC&CG'GlFu9>%[gW<ʹ;>ZFź?R9&׮ڄ 8E ωH@Y\UxlU] %`i|EPH tQɤ7y;l*lWh-."=ST{,DⷫtfFn{ؙnovCY¾ΨQ!(P}y2pӀGj ƞH-b& 092Re\߼;}to$ #^* Hļs='ꭉ畗jBA GOev^)iiC(ѢO⑙P &~t4Jm7~Hp t͵6fݲfL"~Gxs-l8Kv:~nOxIS[Y.K5>\_Pq<=7YQ,TC0O\p[v&=͹4ċPt}֒peZ뒃UG2 `eEr>tiÎ8=$L 6G`E sty^NBbg:}DP<2]+h6C>WPE$U EF4C @ca yT 0l}jA9wXEUjGC_ s0;k&ZVwYV,rE*D|4U{LqlXe϶ qݻe̲1k@ ^ےdQ}כIf~F9P0?/`]" ;2kh>BRʹ` QA7-9Zb[M6> t7b\i% B/\2aLЄ[M쿟}GV0w] @@DaN=YXۓ8xT!_xY ,:BGWh8TRno]At{kk3"a_oĹ4ٍ_{f"9ىQ6AVfdЦωt4lw\ti~W*vc|%R;Z$ r]oK'u>K.Fk 8FvUV̨C瞤ǩ,3^Al_A`#)!j<붛Dw$16}߫bȕCTl%g~X .Pߡabԯ3ѩv_B4qvD$$.O]'* ilxW6羽bOL=L35vn{+/&SW/'Vِ|vq^/9Po񼙝,ߥ\ncE 6]o64VT6EA=gzm,0pCĸ6,z94&-YLqū~X y#+^5i_d!">R@lc;Ob#bGquwcΔ uxo2 @s"YC34RTM!7]@Ib4#V$ ˬsdPȪeiBh Uve%wi0KӔۓN'H }C=Ft>H0DJ􅔧c-BfXcxWI ?W"39yQuUD4 6Lgp7:C"82j2GC9WfH8-8yOG,ɹlH <`c@ͤeA%&Gk:G)E^R= 1^S᨞Rx~$Ȃ]9;òH|S_> Q-ک'q[;vpNPVMm+nyFKL{4jAu2B:Ux)wTG Yx!n%駌o7KJ!D/3\<#v, psI@9"hc5]jksl1.bIc\1n"7o,bNce:.])KXLdɹq)(s`͜܌mc; QX2iey{)@quA |ne "hSV9z9CD͖/UYR!k oaغZ'!o9DFXMC*/375b4=!x}MlrEh_zũc]ױz^~Ԥ}yA80 Є]G͛R2/^I(:tKrSI8TD{HҶ?qpGyY@@;%$N18LNx ͋j@ pX_Um -( EBS"xhՍ'"j CǙ=VkM$ 2{TYRd~t;~glΙGAqpwC\x2)pQnla $NOh(j;ܫatN8PMp~Z81]LcݝpC,t]?uZ:ߓ+ sVv;%st)*R Ř2l3nzS2)dBc[ [1T4/_qr΅DI-pg_E[3Zr qѺꉛ&7hT9.)ϓlEVG&uw_3Vz9ഐWzrӕ{SyPKSHb;+saIpC+p51RI~H~fCSZ}~$e2IW-x҃@v-/,gy̕~uqB&ӕ*HMau4"ymAgbo 6X>6v`FV?(mQ9t ji?&J(\ZʞFi5u"CN RC\}aKXuԲxVvGb#۩ZOEb֚vbqkv*88c@  BR;;׀0-#z[l.qA?὆kR6#o[=*U\ߋV"rцhV\zʓ4o8=#`:mYŃ@<=*j^LE> ,fybࡣ)QM۩]:@ַ BmP N7i*T׷/k+WxW/K'xM5̱*q(/qX63jڠ R‡ bP13n|DV,%ɏ@/!&;8)kt%ytsG,eg@TpRrWAGƱhnNR5Bx \kxX9~~ 5- )ZoD# ģK_mQgS%n$2 }I\ݸ&i2.7M*O߼s |MuI"ha=Y{CfZDv6l jy͘uPatyVV11M* fC 1zFF3I[E{Ec#. R6 0`9/Je1"_>62bbT]8&? l n a؜^89m!jD8¸ ; Y/)}h2Fg٨Y`}A )6|zPw)(7}nTPd#!<3El< ^K|G?97P `Pϒ1F sP?=Or{5rCJ?l loPb'mDo } eeiV(q(E3VfB1Ѕb^s/5?VG,;Vpl}Gu) $V[cpLQs r9@50sqm<ݹpGd~4__ <6L{0uvtԩVM?(.l_W^xmB`v)–h`O 4}+0 M̼\F' kLlP^D|ɳdIh2!O7nIC7n:k;4y`GewZ3[% 2E/5OLfM,ŋ>IW^N^,Un|{D7urkBip5<GHak2dcA_WK$qqH .gZX:X^$:.Y*Mc sE.p#68oYvxõ؈j`׻<̲!q@YY&xV؂g\j/o&֤E1y3D*N8~uKFIDvhJ8:׮4_F4e3@E65Q,߃oY1`qϾT=ZBy? }L#H_>N Z{}ޥFSZRznB3^.Q&TԉerJ8ex7heك!| @b|AsdoFٜ,"UDs{،#PMk'9 x3HS&"u\3'^MW--oZ~32>_O`OX3GT: t FG, !VƽOa74(/psbp*2;8c[/  ,#Lpȕfɸ>ڇ UUԏ>wbA wްJ0/3A#p$,cB>;JiS#tJ#`ſxe Ҫi1TH#Vl3a pWOmqd0'ɮ4qLl%:.tlY!RE"쎽p'ut)؆U(AʔNn=0j ͻ}P ZD <d`×/f7cɼ8>N%S=Z6 Y4sܜ/Dz@" GMJPrTJ g ׂ[A`E0>HvQ+ν&!V?o2oceB%_ n6%E_Ɋ.GBl0+&CՃ&/.64(iףlt{gT$҉hztjbuA^6#U^3|Î;DIs& z7 _K%yy$+~ST%6eg]l<-̓+q[ 3*BR1eNzAMw4XYmuc!)S 2\D&muեZP߽vY7asFMZ/l[RF J܄=+ҵ{*^6mEt >̙[G〒3p6 L\JFݑ= n s&OҍҝvHٵ.\G3WN$x'wnϠU"QA<"{ZXSK`hGO&Z~C[1D.?DPyV@)-T#:)kal3=%`w c}}:<}sV7%/ #Xp{C?W`9U/؛`c&)\J4p_nA]Ǒ>3ѳ9}メW %Ոe?sXuǥ);M;*qT%(Qj G9󬋣~HD2K0(pqdfLBH+FH/i 7pBN' B&XS&{.h'q5N87$MΪX14':'6ˀ6r=tCkw1]ԑ/ɠ``qu/ .PrJn,kO:t͸_7ۦ'ϑ@alf0ao7lja}KuՓ/\v)/yۀg;s#?ŗ16.KSu1#{oCr}5,_5yR 9If Fc>M\^/֭`R=6& }c*<W>!?2\L^_wxNE0QV4h+5؊6Yb8f7-''סhȍVsUeFJ W\7ޤϳKeʺƥߘ`[}9ۉ)Z.D7c?yVivQʹނSӀ %)la|U^Gf$rc;?tk8]S>L<. })NPɚZ)Q2AF5p.V־͘3ysýD 3Rٮ圑X|Mq%nЁ3u䋂bܪzV-Z:/eg^/cCXd5~m ;1%g< 3$&IO( $؞s7p1{/B4v6I+ӮjigEU>c!BbX]G1@&ˬv i(ƒ #ϥoex5 aNADUhjA"Ɗ^t =1zϖwJ)[`IBzK~6e@zz&0tZeq8r8H,Ր-%oksחcssרefR?Z"˝J?+e+AL&0ۈ$57 ]g@IhY|x$;H$RRlEKE& dnGD履ͱ" pz̑`m5G'h`g"k£6:+iڔl1!?J>ХX#P SŖaqyM\%0.jSKvڒ*rwi6deQp8N =Ŕ.lGOoAQ8^o=̑@#fJp+ qRmڧUgo?> rc*WtRJK(Me^TO>ЧyjAtضu`kɕȱ3STawf/s|# -6^"rL)A wS kCp qi[NiW|~QDz4D&xsl{R`6't:a#GץO$*>Wy <Ck*K%b@S*nr lGR8'oJB&"*ztEѴe 31C\ikfya3s'Q*=~BWRr8]: C1o(3ˏ]d\Z[g1Hپ|Bpe ki.#hP1נg/BF[GD2gZNTΚ)WW0/|b%86dp(bCn;/[ʆ2.ĖR9SnN >Ĵ1ێvrG7-a{sxb*|т,MfM A04f"='Y~Z|M|u+Lֱ:WW$"ZFH̟xjr-ogQhi?h|uĹZ0523c!yui~ `ƟmßEx,sm gR)]&g@aS_0Yߏ-/W7,*\dQpb8$o\z5lף}XD7wLo?y-c/S\"vRp4j{L0Ѝf_-In<]煯jxu4;ŵuq&[w&'R5ʁzq9߅o$fp+Vj@Gpck6#go? H[Zy%}! MW@5֍a[RwjƶY*Ns]K8@OOz =uL;=|7*KGJU`NU@1*ӽMCF+*:NGăX鉻4AL<_5Ye eSX;8V>ZzA+1KgT8t^ڴ[(Զ}wGM!u=YRYe2Q=.U91UΰPv1+4Iƒn4 ;4?B?/ ޡ9N=Y8URV ebyӯjc`MzRKc.\f{SW!^O1$c7ZaXYUpX46Ύ޷))L@B^My17V$}8L|eZ%X\W٫ l$$-Y9\UR04rYq\B']Szb~MePº$يx!ˆԅY04j=n1>,Q^2dtǏE+w{k3^&gST;=9_$ޅfIC':XFݧutK64RPEUY˃MU#mEQfЇA х9;ۄXr&yV^NϨQjݲhI ]Y>@\UFPeVMn *_ś<ƨ$;%Ȏ=5SV'eJTKf) 4[O:{D(2Y"Ae~))YGޏ>ݙKђzK~{\`W TF/BP=5~tY*Go֖GSؕ'{|]);|Dp \ExAN(OpLZw!S0zK@ %@GKU@Exv3?7,ᡨ G -Ӭm)w%)?"5 clج=iF:='t\cs`_:܂\Ll4_m,L)= a䩰{{9p7'HkCBR"]4W !/ 1O$(aǔR3 j)(4Y^2!A7U&>/O8E[*`.m`f0 så6orɎJ_7 er]6nJKta8cæKwh ۭh7F8B ;҇AHJtB֦iUՙ$_8^ ݋M>, \`xܜ#flczM )Z\RxJm<塃ju3sikm:< J*)&{k ׀G?((YmjRl0ߏi,nKiKAh',yKS(VVJJC1ߊ=BEEIS煺;=S^PjHy _sT؊$gGն,tA!mBJ_`J.Q1!6I& WFEMIɨByoa$QhMGZud)ӡh*pYMPTB&hNF\Aҹjqw&;?/ZD;C=+O=27 bX崏6%R,oW̠eUL99N8Dj9lR^8bബkZ4v܇.(_2?싧YкQ8\T}oS- ])tX0:91O멼|d(Y;X]s$|NNRAEZQe̓;LG^#w8*"+ʦjCzyo@Q)Δ(-XI dT 0:#ѫT/ElqtZGiu`R+lM#-ywcޫ%x< 5ZcJ؁oUpR^flA]dz.aW8CsPyp_U9Fr8q!`lqloVbҶOրF§E]!UO2("񺸈rǞ+lblGGp/b[Rۊ!mV)~%=jt&қ~~waz0B 8j&GN`7m " r[HuKJFw޲`V`x2^^V+uY 1+7G=GwZ?0; )9$g5K߆%vm/$@{xg5Kk_$!v灋0YKVע{mo3M~[0 CW2ȣ"F>l?KH>T锊bU3<qbOc QIPWUCJ%6y TϯP- mBpɌYWWh9W~i;{ɲ>{Az '{zgte]8vE }GR{˜|ׅcvQb@g E ,n$yJ5EΐCb Q?>2KO qju}á R5oܭ&PUt-w%7l N.]K(.'4'P |{6]N:ָ N+8Qٷ?8<2$;ʁV) 2bРj전ޘΰvѶ1 sȘq]0!4c;J,k75w?#Ȍ!["1 qR)@yakm:v/V W @H}? r`%f5q TϻmD DfM-)nKci䝥d0%Vej]H#?uz0Yj[(@val/[Q)3!JEc:t-;s&45"Z{ @~Jeowj6 ͦ ߳~6YJ"tw68)vG /f!O0KpLk@y??!YEсNB[_$a$B|y82&VėX9nA~c$4.p"4i>S +Pwf(l򰚞+,xQNY(y%Z0C jQ 8R֑Ic[Mr\+o|oJ4=%JIi<-Qik~u`IV/DUŰ. NfM伝n _ &6 ӘT0G5+39-EԃY; C@rURC80>5O_ n jZA=sC-Ur1 |yDӻN'z\(Z/ }W̡_Rf";|Mu1!#' &`37z]Ԝs[,[8<%+ -jWLNk_Hˑ,jVLy3JcQvV ݥ꽑=mR5]Χ |,x&Gc֧ݱXoUq޼tG ڥ[@Kt. "`wRg<()۳Iҿޭħ3}At5nsM]÷(|t hdY#rEv E@ǁbÐQ&(P7yM 6>)RUc1^bSkdyP~HBO#nB7fmwⱳP7_h~ TZZ#S 2fbLCHK6W{8D6'fϷNbfDu{:MųP!#" 3&WW{*~XgKY,`Aq oa!6a@v+^SIM)2͖!S}SqAf5GuNc𿰀*X{+J٢7@Ikט)죱LƏW2Q09}{:n!Dp}i"7kNOU |B,hڼmBcV%YLELƅc-ooPGeSUa.% LMai`o^[Vr:5bX~#IM%xfh1ba *?K5;ұP=A:-T-Vs$@W6ܖ嫦 mϤ!.OFKaL 9ЌѾrXclRk<'5eD:Daǁ6d2nLvci<[-!W;ܑZDAoNѿF|=Z?*yF/񪕃-D5M? ZhH~Iv2wp3ʵۃ7v&r@U L\z7ArHpOu^v Q`'T܂H v̐f(렟X5un3t MLXTdd.O1U3%)śnr(*d݌ܴm@c}HA-=(|Tw$zOJD޿P`Mct9Q&1xt~h~"`UaAb9_Wc\Ȏ:\ A0g/i7BpLd/B2ڎ\<_󉜲J1qUXuTzq֌jE c5*׵w/i"]A0δbڀ*{*ߩS*&~ǵ `7UģRWtKïεO=$/( O.t"5V]ghΡ_!3,# *T>]rJ(!"=!z4\ s,}{jMRBP|rrP'Z#]7wmvʌ\)i<}Iܳ,/ %ӑ:rɷl`Nd}neEx@Jqbf`#qz50Z]v0yahb.C)10lټƜ^p_&ʰ/9it/^3}cyV)u6@_T}x?ir9wTR ʪ<Ăona\):* sKFAry)Ď 2.Dҿ;/Hcp^8ksЧ8un5RMQ:\HxQX1i*Nz.a}70E^Q#D|2+ZVu4p;}AGezԍDfeLh%c-;4*U@29eD_`+Phڹ./ bDV?/YL.)ş7cA27Cl8CXrYRWޔ_ |ќJړ-vv73{i~ \# ;UG>P%F5R܋VR/s^܁L@4 d#?Ց|a_͹UWL4;_byvv ;D_3~ШשC%h? y~oZ~rQcj }&gD7RI5M%x@47AH_Wl7#^͔m~kNVs)z V,3ظ*zu>J o47Qe{ƴ+ՄyXRCǰE@5]8NP+Y@a@\^z1[8ܒ9*ii!?)i7OYg`f ;qNdv7˙nW$uKo ~q;< Zc7yˆ+T;8)z4i}ܬ/UqTx'oJ,ܟM K.L i<#Z6rN[t0sOf3z:5ތ&ZF;&c6`3 \b-3_k\^axq(73x] IE !\2{ik%NEQᦸ/mWL{V_~L^PYwrʀo3۰M$Aqf3TZ/PFH&@1eƍ ٘ zm{oQWv{ NO,|&+7Y5>H/h;S$lRf/i[b/CmEܒ7%[*E\]BPO!9ǐ6n&Y"\f ؀ 2M\Σۏ&SQ~9>QTR Č&}o𡑱ȁ->|oh*˷ɴD:H{a(Rgvdl8ce~xD}NpY;a9uɅ[Ivrܒw_Z94ȃ9I81">`8! 5J<UEMq 5 eNrh$B|r$bC%O =ID1xJ'ʱ|iS :+?X mC?H(1Q9Oe>wkY )D? 'Ñ]c%]tyݣ 04󌉡(N^=zmO5Eݐ@;VŤAoc"4ZU:+"Ab(bٷ n O߉Ա!)`X_xEKm$UX@ղQ.M+]shDÌ[k,rb8GL t1q3 Va۪䞞?I8 (ìE$4Vtzf H%v>-$ִKEpzvRGR=ڨ^VB xa]fW1M))KOG_331TĒvj۱=m}6D>_H ]xs3;! czxkwp {.}TBV+c2mOg_jr>[Sgzh͎C\nlz2fgKĹ)"R{zm(9_(#Zs3C6رpZ'Eرm(V'vLsČz/9) 4:*kkŝI\Bw{+';Fل<gSfoBv 'r_ff)n&ِQzn:;ApߗNz5>Njmkǫam~qo`9ER%_91yH"nv0 ;a6|˝`ݪM[9<+_C)/=dв|X~#Q[ӜQx}f]p(^յ6ujC5֫}k\fЫ6"V K[4>X^Ѳ^/RtY[d谯KZ|vUO=U LT [u/DԷq{VULtR\5rXZpF}| -F3=m^-!r J9tddoI1cG ;HT0gUy-_ I;lqܢl{1BH_ zS& #0L_Ks<ɉu{wLRXP((\{I؞ &s6& rb5}"4FD,:lC! .t:)AR)唰 /͎B%A!Qúz=ZzYr9f/ zb]N Z yDA%x{r7y;Flt[Mm)*z{M;&BB" ;fH_mwde9! NvGCՐm1-Bt?Z)H3Joתթʚ>ڊ87vt3ˠ&L~&9K֌ߓ³s [i@ͦ\]*>`0^CnfÎRT|1~e{AZLا}o2?@SQj9\M:Paq geݝC!vKv$R  svUrq%0# AF9+;? Lqt녇l|5ҳ~ds sRDF;$oG~YdbA;ȋV^HIb:x\#ԉU Fw1P9G%Ŏ(&:lH#8v!THKsW9rsgmڟC,M(X4RQaz31Hdki/iУ)7q"DT)i&)"v_0> ;c*:5%Gk,")=2Qb5j-{ۥ jҪ,,*,F  vY%gvFOTO8oդn+p>Nbf&sO/BpJӅ%K?@x zu_ $[<@"'짰Ys=mP=܆Bn7E–gx]mg̠U_WEDAfn9V~>nZMclɞ݃ǪS =^,SMbEcn%qg1dh4dRS:nFӪ\oWj>4JB<'n& S8<(4~,@vs3z'ڵV 4н94YwmI: Bie=^bo6sZ'|Jw{5.J_5Wp;>p;BX `i$ɑXy^\9"-7b,t!Ĉ?-u𽉦q?L4IۚEh.=ט=_MQ%*2a/2ѴyXj䛃5jr 1 SD6JG~El-Рȹ1w/Z|AXѝW㭡B R6}^- Y3`b‡L R,wiK:vR 0ΓxiКxX802~T`W!?E!ɋx{RLǰWM viҙk+1 4WWHܧ=m&W%P[^qilPÓ#F,nj%Qk$}ĿdcFxX죁J$.3A?((~IM?e5~+20Mih{͙*5g*w]DW7*0˷ -ێ@Pn}[Z5C(!Qr>xfD F&7䰜L\V*@#Qܭpj6w%zQ(@JgT-]8 m106 <!ATZYD\0s#!'A'o "grn?YrƇ~VY^ aosdrEېX_bB\Zp5%g/Ղu> 4,BG°;G/ݜCIa9aNhߡ<`\h9q$TR&2#HL&d"lM({VX-uFq첇/7a'?pôT^ENꪠrKC<hN^qG:QroDGp.;3S T65*Ȣ9{~Hʶt vHF+l%! ףLiCg'J5;?!v]GTlݢvS9 -s)]-+A$ʂ^Qr\0q@(pSO#9h8}Ҷ3XXSK:IN1:_+$G .;uV|˭owf,6lZQU3SrUme(bgD+ $m-[ f#2Gxo3lރ).HQehͲT{ԾC'9%䨺:sFe^VT#7`*|Bd;P#ؗ4^6qFܴVMr({ۅA" *']ԔN5Pdmt^{+}NC$/+/IHQ(x*Z,Ĕlmvf$.XH8٨EFJ@3OסeuxftB/J IN\NVЯ8-NlRpwvy<24ZÍ{kMTghUU{ vԠ\nwa5>pJNՅJSS&DžE[sd^$:H!G'HY fA "h.FX jlf K3 焐wD}G3c Ү0."4^`av1M *ka` (usl͚+wPkh~$~̕ z3[4끩G3,o "O`ԝ u )U jKܐB}>lVBI F ZDu=\`KQ!J;E2ه~k0}wn<|xO|0 Y1ŋ  re7zeXU .Ha <|#LtȤ6^nx]G`,riZ {瀜osbj!^N@U@C3|{hS'y  M)>ȽǽF6u{'θڵGEDw!Ή2xj><`)t“@K}Zޘ#-*}{oI1Q"i#lC3o! Ľ nns!^UЇƬ~{ Hӎa1J:&HJZIWHfO\i[P,PTa|r|t#ly!^Mp4n gj;=h&ٽuc&k uz/ЪcyX6V?Qx\VC16섛T#ohjځ0ecR bmlJ|.{uhTX0E8CUDJNIeXXwI$y`E. ( ]>%HFXOo]˷'H~*R͞j]#n!s+]Tg|H1{'#44cOwP+E$edԨP)=%HHN30A!Bo[%01? f@};(CCj ?=HVlYlck94GYF9II2C|¬1 8kyrXE眳 6f d7>Ϲn8 ,t>b f}(81k zXLaab"B rn~3Q4O->ac tǫAN1o0v@ ^XX:,E)lV  X5-_@ ˜/V|A[1|oqfu>dRϾv fHXXX[X_n׹>sobOU5) s<6.û4W(mq,riDzIp[;#^ao/ b{ʤUuOgxuK2f#<s|vr(% VQ l[򋏔SM&`KN1Jc\=vb?=s,$q6#l3X!?g~y'Z4>Ao32[%'fE >K):QNԆF8wV6A͹&a^_9sMOͯue#|iSXV^cS sȅOx8w? )ieTU+cO);<⧓ @*4%3I3r6ӧ*na4P-!ủM:QأtΪR P t%ԕW,~ޅgL}xn5d#C򎭘t[B Ũ``bb,}U2QT^nNz9ńj2ܗ/jB pT@ni&Cp8Iʨx|a\amzVq3jMw "邔dWe 3QTQl5ʟwJ ٧TIL+<;@+8޽{EܠC[cc0/l][a 5%| ?<|T^#5Lp}[»}FK._XfD yK09?%󤺹T  ϖF]%)M%ĒghwfPJ֊\$MInmW Y-F'A@{c@Ш&3r1AR*?b9j5(umWYp/QYqub<O?mmϠhy[[o^:3^F?-N}1AG1T[^uu[4%D 7wgCgkFj#]ʹ&ghUun15"1#Y ^jۭXZX`MQYJ-Vtx1S"zىMr;*{|xˆ_U!os Z_$K6u?JѹϤG7 d ?V5!@YG[}>ӓETN+t#ڢXfҴNa<k%z7[9=_/˚2u@{ߥЦQTilx(- yG?ٺ!e۞j>Gs2KӮeϳq(!W_cWLeYܜU.P~Kkoe܂>uhL}Zf tC!ro;a,h\dHkjQ%c_'_I s/DP@𤓶h7#'Mo&aՕ'/pd`Yx Z29׎F^2{T;?˼0#p]Vh3GP$l#9N9njNFo񐌝53'^B:Pq+4ѻ9܁ s"~^ " Bn@C PT❈蚧.˧ A ;ta= z~Y*18ƿg8dT}ˬ(z\<ᑹ=6|)4CaY~d */KVŶ"c|N5efq񑔅s}yAu0OvsdƓ_6pLD{Nc͇MrtT.fA"_e?'#7jDЧ@EP=\CI]T%4a{o2"O 3U%X=ۚH/̟n)vՄ@W)r w-Rr3ÓPZ?Cͭ̈شЅNZug4`_ TYGʐ@PeLwy hKpv`S,j8e6ė<-E7x!yFkWg^tkDعSV=nslAfj_ʫV}✱htaIG/{13ӃS=}q}XɯKp+Vn iOx6V,]닽?8LKCwZBsp 7gu8N$C Ը$x:A|Nq!9R{Sdu,AOD.?.rgF8AB>{Hv(kBvA@g4kهF_=K')Dp?K)!\n q6xh]  Df;Yu FBЖk@FgL?̢`ee\|2gޟ+Dl] ߅٠g,.t;% ϶SJґdOFb. YH5TǫpFGTu-czpDs_hL#:4oj|hynP–,YH; )[;^VD8^tQΚISL:rIFg=anT0ݣE_l7Kj8ܠXnm&q _G냉V"9N>!O٠}կ@֡*ۮeG{|ʝkj&ʃFD$ [ -_!xRkmh LA %**w /Z?Ay袭W~ˏr[QuY9I ?Qm76rDLuNm{vt&}(*ccH#S03';oj^:.0]ҧÚɲ2cۈ:VaS(U8x\OkqOl_![*co<4!$Sש8IX:DxB=j2w)G+.1^lcb}B֮ '1ȭAWĨF&[ rL{#t' !0>gk;qLiԡ5/Fz0i8 #v@"?k-WjY+'7Rc$̱dWkNZ?Xur%=+SC2JBHXS_RaQi4SGJ&]$hݼ/Ahп3n1qHd`qs,x 'Vg $}z7*F)`~pzW 6 C5lEW"2w/Y/hCVD+)@:aGY8{gKN.1S^ho|2tpH,V;pd&pP 2Sb鶿O<#v)aŝ&<_/I>=}Z2zUag fҡU3bG^ {>,ERAoWRʹxFoڰDrAEV4+Lu6Dӭ5# hoZ2K2~ `[V5_֤sH uۘ2Z{wɇc<\7zh/:Vltf9R1v˧t 1S-"((}]$Y#۔Q|5]74Boiށ\4C7Zi1mq۝$l+!,OluhhٱY_e%?P4.OonAPjb蹬/I %BI{! =4>e=<~bEɊIwxXח(vaUkkh|=KJE TʚeDc>堕iF&[-Yd P*MJ$7ŢA[ѴК;j l87ryb 02w_Eƽv~/PèMVe2_v ãY3]65UAIRй>Rs hm]"2Qwi#Ikj#FCy|\FTk:b(KSqd5Pp' ]O7'fZE+ ڣPNY++s(8^\S %c4w.o^ʄ0r|"~n*r^mkjck|z1Br) ?^gJ1ӤxS_f)A5T.MlcuULOk;]'ײ_B3ڷj)e1T2|h(1C*Fn#Q]':̿Ϗ6 3RKPgss+`O鲫p{_e}DCd9R&%8ta9B4sPwF, Pqd&!I 8d'ٙ)΂vgȺCK gQ;xNO "g?A_IԞ<}ϹeL*Oc$ɖW[Tt|HCcV tC &`Ĵ dBYt!Er،􇚂QUwnW/jfcFd | ĔZʘ~;_bgl~q:aiEzCzݛ'ߤ\½v~1޷b!w.u=^yNz8 Ǣ.@(?hs戏vslB{aOqyf7g̗ yQ-D9Y> \^mc Oc1MyQa¢Z:Rn_<jۻVwsF~uQ8D*|Q<" G\J>Oav%PSS" #Œ2z`' .X̶Y+I#M~OQI|+BIKS\n,&q97 O<[}渑D]0I|- O R#aڷac55u%; }WA&pF7LvڽIְ!ןWt'wfN֖13C'd;T) Uorb+P{ 89MB{ Q?27ӏ͘CǜljJ݀)_<`hG~e R]<؟r=l',?@`%L֥|()oX[F0A?dȢG5KQH}wg5"ʣ"| xA`s;573>2adym [[evJ7Js bJKn09 eZ} v6$[Нzޛ Pap6w]!sI~6(1Q28q%| 9]ΧGWA,/wnk@30N|[$DaZѮ,{.'q[k?`zoif95TKux矕Bv;Na< /x[QD({[);,kTϙqFZa ŠHR5}w U%?z L JTVNe.S3ްxjGD\^͗%vHFۮY CEdg'%_3|O fhgWe5r!3sG%ٵ\xzjač 聂\u0-_},t!妍f"mCizla~RDwo˳ڊ ']suJWE5Qc mF }!9Z +W023L$gV,ň%j E5(~i4/ YeQ6?u҅kz됇|cDZU,vZۼ[k8s?@h46syKn`(ץx7g99}TScR]aġ54OE@.5[Ѫ eN?;lI yTp^'Ri53z?ra<TJˇbF?S;6MYuJn腋i6Ƃ.9wwV\Y58 V^a6h( 2 urU@ߔfr&yAd]g(\gMMR\tqP:$G<54$ҠIunjG4J* yi&yw&ybsQK6,4I6IeHȜzDiIS"V#qhxɳs<_~8yDʤb"o{AqA2֔@;n cc[O|v`١B =8S8}U +A}nh:Uvm0-蒫?w[3+iZGըIJ4 v춊]݂peo.>.HKTNNyMb|dZ[RNͯѫ𥤤ߠu%ށUHroZ@ާNH!A tgt Y7`rW~O|_{Jj.01Rhh̝'yw"Jl#ӄ:qw6q3R[Ju Q­QEke. l*CyjS(zKh}RUT1mIDЫ|e:5َyrͲU˻~\OXDzYZJ`db)\j]K?i};*{Eucu %8g^((KB;OcWEhs'G:Pq#2W'HU!];|ft9HhNIT,uQ{ ~Vn@@u:xB30B71ao9+&:B4.,ݎ;Q* 7Fwu="4ݖ T6yHK|aF8.4WVS1t \`kX: 1m.T[3]Ǹ,Y .U6'?(6 lZix97(WO}I9 DXW헌 {F1 G,vZlg'qc>Ô@ &%)6J(j [a;])K|H;;:bvݷ<5?;fjd4"av')i ڞr5#EN=; [ ԸsαbHLTI#ΰPznMrď[H s fyT #W%89ܑlGΨ(x‰p˸CCFm:*z"G-y<,2sX۵WrQ_+8LhZBtے +ui298ס ?Z2Ms GLsyԞdްb%DbF/kτui5ö0ϴ.hDwc#,?7e2y$EZ/}Dv ڙi}b.X_䆱}1GEwuK+*YNTKA^ve/#Vu`w JlD䁂 y ޹5kw|:Dm@*a OE< K\[.̺$e DpY|xfM0-IJ*nv0M}3Çn~CxNm*JBg(E۽: &MeQ(g+sZH-{_zlFU}ݒv@9׈wzeJ@:v7.| ox%f @EDZI=ϸ%:JGOGZ+>|pLmy0ډu&R(ND9)kLfU㷖]tM~g[<=r)?|͡Ln @(?2`'ea0[3!6xgYc}Ѽu.:dW@9eoYAf#[<)ÁQKF'jpKǒ@\<9wb.ַW`~ .:xzC B+݅xvZT:bT߹Ocx7 +[8ތFy" )^g)C{$ܔKBt1k!eje@n*Z*r|?7Du;w`3'fJWs>a*Y)lR YYA9oBBp)/rbAnzJ\Y[r!kw8L_Rk+˧?-Ymr_šD,^EY)\n=OH;YWLpoggHrӵjNi2ٙӬ*x.)W,C?[yAZJ>qNciv1C]ECqR<(n]Svhje k6_C a HZ CQx76EL4ߺEq1#´Ybc:<8 ,-rK[9cBC=r|4%ʌ !iF,]%KGWapN|adHv%apgC҅Ҡ@İzvE~CfܘZK`{U 4%PɯF-h5ϫfNOL_@;w*w{4359#flɐE ZCmUO:&#W +xCU+oLUkH_ M?l3OC6"V[201&c& r0"܅K@j_7,vR.Se'BGS6[Z%6I2ViQ+e "fx-ܹVkΩ>Q,F?;LwF`J^XD9گL'D8Ei*nr-s3o'zÜy`,)@B&O3giֵk8bʨKADT,|ʄލjGN4 v1h(k6eJY:B/.jkwWW;'asY4Ďx/ 1Gu=ngHcs?łAlJ@:N+n-o~c0=B@&_t@(%s8kmh[=^⟴5*raM⌦'hM<ϟ.:F k[ cM-viOݑ݃Vxs8RA|B+ޓuSTq ~ka(F}[lwP>&h< 1+ԣGս4@>ac_!A7uߔk4hrA4G2 erQ:aZ0#n9.'Ҕ^P#[]ɵ߭0' nԣ ]J" sjjQ++L၀`/ϗGm8_.Z^f<_#GӥCI2$1*׿_ie;R{^>:cI6:)OG"8,8wz ZCy*)? z̃KGQ|UJSLGQB4}kY}W.+]K_n{zwQ\ kH7ٔ'$;˗{i JZ3zxd/Zğe\/X_@ 0 7b+F9:B< Ige킆R<0#r҃(g^jFPInߊiHotx{M-N 1-Tf8%O&ϧkŜ}A{VBg @ eˈGA'SpFQȘΝN8ӊ ,R_(X9RiQ-=?+^ZJrdQ[MC iZdc 4. y}_,T ZYr{@i+i'锒n%9U/Jm8p8ikAIy[F3Om{.$FTr}_f$v}JR&zRW•ϫ'{ɲ P'ѐyЏ o>8}JGS(*lPZ(\]68Ҽ3k-wtԸ- 1PC*s Lnu+,a/A Ctjv%3]5^?gTV_R 2d 뻈geuF)s|i=tFfҥ-S$ B*7^3;FO2QO̽G|3f $S#Dg kXJ=M(?=ڿ|5!Ȉ8"3k!iԠ̉ .–c&?ĥ20-&2:8ZB_ۊ:ZĊec2tWkЕ٧a$ZqZ}(Rߴgk١ŭI0% W25'`v;_Mj,ч,&`YhV{Vxݞ)UҲ>5q"wY >y_b8SpTCiW5ܖ$& .frxʞjrq/N/-m[WnoŜZP0+luug5aKnj9u++ȋDaG# v*3%INbLptCᩥh?C,ǝ_KM6!#5.of  hɈ_T67{# Pz;潤erW$7f¸?㉇d|n6)dEeUJ.΁U~HCb 98kR |,Ysǟ?|70+~tM\PAgm~YpJײj#!+E4$Notͽx&FC^Gc }޹@(4,yb!XU QohXd35㻙ǧRXmj#Hm3wd V}5z2KdoN!I9,k]KDQE ?*kHkFT*L # D8{zxeXBhy^S»n\y`Sǂht{FSਓ[_BN3pC~0b`M5*Ϛ_85؟^ ;9 c3Y VC` ^I36wr;>Xg׷-BI"N-"v 2ΣsDk[! ?7T_[ FbÑ /~P_L7D85MtD#vRؾGĥcg!+y85 L98mv<MOFiϥ78;@>͈+QmrU 0,E~9A} N/]9k{b6,AJ}b!jŧ:1;`D 8g= պ)ug /UͤE'[Nn47̧`\-#Qo" f +뱋좿z4sV SAZ%V+*}rgX PCX1 J+ H0XD؀q_;"Vh1}T,TN[S۫\4zzXy<G{e0NC~[h=|*ʥ5'܂W 0/W9[ e`pb"x$yVgbMzص \uZ6ؚwzAL^1Oߘ`?B\~Zʦ2Eڣ.g2WsBIù-=-\:+!sa;$ǽЯa}å1HOuh$bK-_-񶔝N>ۢԻ3W)[MNW]T're:S:X>0$yR:߲gH]2acd啦G9|T&e 3ĸ dAM'^SY 3zx#!>m_oͣ̂yX~jָ 28N'q*\4}5ϫ\W3[Tȁ 3BN5=Y1n,n@""HvFuoŕ5~b[X0S=ͷ^Nrq#;| X.0ϤTNJ'LxDQɞ 8?&5 /ƆF $ٝ,Z̿ S8&`"_k[GiHAΎeD ,zQ3̯FAeXF2~jю"]T`4T󕲺kNl M2Kp{!:rH'5+f`2\"&;0S=}EINy#YaJsUj3Qj0X76寇vCfYH'J]S3ܭ$(wєjE"Ob4HAli_i ﻟuESDոɟK2Flc[.4Z Ԅ-brI" q0 [&JU[LL 6f4nBU8ɛ,zTԪT[3JwNVmC+c㉭JXGj#Vyb^v6j[=.< U)d <[ c ["H%-}:@raaXus_i_] 5[\t+zTEv!/AvvT؉IM9EYeCu2\ \0f%؋?q\ 々5! ./_FbkfgtEZ1w_D0i2ƀwzZ|Ɣ*/[ %v+!#Y\4Nn2Nuu{^BҚ|e槨a) <8=#D&–(?F GY cWkԢr4/&Ҭqqv~%ledOӱ+[٪)mҒ阴l?AI@6<H\Xp1t'A⦞ͮ 80ZITu[TFYhhMvs= -= U\zğ+á5wKw2ά 3Z@mY!:x@#-!(>K&|kgOSwu|{-݁@ѻ!y:*:NMdzѯ/bu:ak4/a ƺ7{z&Gt"ơCW5%R>H𿮹>NWUyn~; 7(Tx$3O:JdGjNncqD_R jeUyxJޠhm-ʞlwbR*[  %;=^KƓ8zI2ZJ˵OkS5q[,Gk >Ƥ&'WrFK}{1OcC~dEI, rM'{A5[yWF0 ]'}*rk>J4 0-"`!ixVU va.'Mc!4)h7}BdgK+@fn癟.B&:ٍ=uIt/M SOK"c`g笹.e2;ȍk}wÛv&7#{Rkl,Z #h)ʺŅ-zYď6{d9H퉗ƒ- JMt ƶ\NvP'aUv&*]noVBPNzR/Z]XO|( '&2?iE\dmgnfONxe}\1$)Rjv֘5u-PZw+dwȱT>zܝ?yآ j 0>}Z}A^#nQh:^/ q<&~Tl[z潉MU{`ÚԂۙ5"i&[MeߠpBH]޷-oaa_Pk˸UI㞏2G%ofi&I*WdpKһ>G` =*ΖxD. l0)[cD W'-D. (5!?#ܤZHCDy U\^n,_lJMOv jᣕ M_NĴ9ځ]gCGqx1F $k|;ղЙ(v$o-~giyBBՐA! k'aU̾M ++!N RorwaRd7RO;xgK1_R56F_SkqCO?ߣAQ#g常ʨ aF-BOYu?q {Vau :kj;_5Ȅ Ⱥ'ٶqϫrGu) cDrUiZ{܊\q㣡d&Fs[߾^(DQ)Jdmq_c&1p@̭D.Pe&o Pm@cu,I8t@!+ZDѧl$vy_N| ߆}i5hvg騙~5KT[̭£m' O*DCXZOɏ&1?β>czht1 ~0YqDX U,:z  8r3[ƔS Y>krWiZXj\U7qSdrvflVqiHy"\>0Z;r.$wO.c\ľtCVM1ЫoIk8ʳ 5=9p|3|F\{ 0gA"(㱒,2]%F<`i 6s\?ve"nmKg+n߶+<ԢϓZ"Hq8 q歭rN0# 8Pr6Ù1iwe.Œo7^̠@ݶdkkJnqav-iXB4⑛C)s |=G(Uܴv!{`3۟5N!0mmj\H-ж3.3 EvMX-RҚ+k,oybk-zm5?ፚV7zA !h0 XA b kf8Po2/!jKJnY#94R<:˾ KFJ dz>+f)n3]JR-~[;P' h5A׿|l\&&G=X6=_WpcN*O/Z%BE{x?vcb +e]lAڦ&zQ};`@}eqKJؔC2B\&7??K:7% X$^Um_ަ7Dqې蘅q`:?K+0K %rQlKQ}.BAi0ޖh{,@p`) t%ђJJH< ٭tjDs2 L+Q&񔌇5t ]d&%V\O"Z7~4eW PY¹ ㅙV83Ugj̠>spup ǿ飌y|oZ--Gږb]2#a)'^rHFa[<5譙 5PQT nZ(z) p*Y|x2cAriZM?莊 \>! ,ZoV +)6* ATz\,W̩%iu4<.%OB(փ~Zzr to S cVDnBT̈́+ 5UN٭lB,dN6[_՛$=i#0mhm^+`IS*0wu܄PF[ElVhp*OZ9rLFP.9aC%/8}Yk=4!  {ՇXC6nӄK%Q0^hJ9lrRh5x0;i=ρwWWuH`7hurZ.^sbnƧW'm{vڱqVsC& CX);Gr8MwJ|Og,.l7/Iƺ3v%p̄^ӆ_p~CѦUoez]|$Ix4o4] rtoX4'|H!a9,d@O)yc>ܶw~5 .2^}04 O2z P̝q̄^M8灀vNLڴȺZ /CLL!ke?"F7QN^V [Ve%0Wyj@)%|- MSexЕ7͚H97V 8֗)lϚt7GK}V!V.FLR3duNK#a|Ii{]~S:Yks%>STFxlGcen EmJr;_+= V*^wr]E^hKR{TeBDSMke}Ju>>#6iYIT]T9_ g E|hG3z^(bgbQ4<؝WɆٟ # Ǘ^vLFsQ(#xyyʠEP*Og_&iɜn9k…%Mg+ҍ,EqA{M h-?S6;+<,jOTH7۝2Q)0!qAəO Ʈ04Lu;4fLqǺi{ar]?΅|:yg3MԴSj8`E8:޼^d{b\7 ^ֲV 1]rH9+Wfh7= wq:eS'?4준t$)Y G5 {Ot-։"It;fsߡe#%J9gWV9qƷx4_|X4RXCj3F!~#ylE)FЏ%h@=sha}2Bl̙vz/Z}[%$< L3HCud=*|!`omp%C cyuy*3%N0ny|R/%+1^-vŗtҍ+;#4$_늙w^7sKojbm\r哼\~@?IA"$^ZIes ^!7R̶ (AzE Neup T;̺P<BI:`Njr>_?Ů *ϴ1Vq ][U2Ǧ_FJA97B%1s;J /V^an4.Hp%A.PwUg&[ W?W; ҹj;H὜Yj* [Q5lE_RG9K"l=K侧Ƕin j*oƴN/@/kĀ>L`{&v2KM/v[fq%w+pR%/.v\|!ZN( qA &6fe2Dk߂sD$ӗ7qk,B*šCELJ^~PcSDvTWYbXٌ+`X G4ŵfD6u9[ -CgWRV2F |Y1yħu)QQYI-pEWT`iR9aheTadFZ<_Cm^QrJDUG|(<$`~'Y LS㲭g׭ IP$!%䲖yd 8iuml=Q"~ӷLK^$b q2kIWyk|COOM Eo?T]a%:x"s]Hjj8=>~d|!j')4&' 3cꆷ+N_ M-6E4m(3[s:eD|a[;D]ԠEEHK.=8w%ApHM5Mz#zO]L}^ɭ+VH%6=t/ٸZ5_Aj'6*bA5gAjT?z %wyT".x)MNjt$(Ċ0bޫ-B- no>lZubK*GFwu7b "EJ(S)hN-qٴc$#v>5Y52KD&jŶTck4_֪M?h|;dTeP&3=&QB+ |[JWy5UjjQMGM舋"pLl`XEjˈS:>Uj 6R9s[*oP,kI.zx_ n) @$Dk/"\Y̺`4m!/G;xmqұ[ĂQJ[2ahٰj[7%gPNj-Q]N-ANIk<|Z .273!eW,ЌbȢS,p,U! Yp@@4sI=v'@dW, bqKRX?]aGwT`;[U{ Ĝ-L DW:ۑ =)vC佶CD9{~BYx}بM+*pQd0ЦRm>.t6RX);$>&kkh~Ix4q8ן7jF3Hj,'.XSCdd~\z7J.*/SZP㭠.3AjvF>aP)D\ }Rb8{OkW\R1++ml'*T:NaȆx8KjM\[`~CپY>qiPSn{KܠK3ʸ!'d X[n'cЬn)\+G.{[֥|А^SsDfPj]_<Ma3֍lC:q ߹łQ%=&&]llr;n=)a(PN|JG8-P.gـX@Pc00":'٧4O '%pwL*#"ibXMzYbK]0\#Mp$đtIwR=ݤG(йJzehHu1n7b'id\ҍ4R RXH=„a;'+eRV H.ۙv!;_5jl[#Smڳ9E\(D.yJ !pvj-|Fe=fU< -OؾdH?L5G 7;"qu*Pzq >un1AA߽j:W`(0 !kd*4F;"{<߼fC$OvAV3\4PѪ/齇_G!@I%?֏n{f:CMMt372͟?.f{M0~;ME|Y|eV|Tz.0M)Q4T8Ix7Ϊ-s" _7{ۖ 7/>#ZpyKdf>4c24  .~u[c?d be rNR3o8ymONdwg NQ`6bqy8x/; 2(a)E֍+K4#|L}~fqX)`0qM}̖>jo![W<ܤf vFHcPVW&/*i+TGfPq׆`4*gqCRfgdb/[ϲQE$ KLj"+V1',#P5OE_3VUw;`ۏa~P\ѴoyVX6eNQB+F,c}V@Hwd254)Ahz[Zϔ^5dC츍۾-)}]Y2Hxd(DB^H^3VSN!Ÿ_1 V|Ǣ9"_PgU6^u18k+~ŭ)1+ *u糨aU_|.%g4ZA;wdt]\SvC@տ̒Z C$\7%%[~=T{ HyR9d.Ui樣l$YA&P>}h0C .ބ7 s_Jfnۼ&'W7x@ʳF(]cIqN /}.tt-Ep[[/tyT4YC:'=,.;A:.C0m+Xnv?PSglK6fn KfdgīM_%=2:58Jqi׼S]C7';GMmmy$%Zcbu8=9)/Q.+ aGR!G1T>̊2|FF*SJb~狶.GV^`쀷B$g>qPpGs;o}3'ҤjVxc䎌#a )aGt+4bhpˎVJ:~zUC<9wSޞRn!Uu;6Zh\w'!>`3rwD^]3)uoUS3nI.4^$`q&̠hy5Ab1V ϙ|ίk VS9x1 qH a<$A{n1"KNi7Alo% sB u.2rl|SA|;f @^T45{HS G9ʆwC9? ^;ԧH~ f ;GAG.8k%)dz?!⠛4 -J%C.vTj_={wy ;WޮO> o%`6H@ aUg(ջ\“O!0:kHcCr Ea؍b $9_X #c'PƏ!Q.J |3lTyu%)Uis$9l?ko5E"DfG nPsEM|9\x1Ey *ixgǩD4 m1\GwfSWK"Kmر"Zɣ^(~uh(Y/w?C3!&2N Ty2 ׺Xyw(|MBꫳi "\؍ҷY/;xpCi.zKz6ZL]N^GQ4$(n0p,Tk(6" c"պµL]]+"x4=k?ݨr+||hh`O DRE03I.B`w7ȅXT-0'J+\Aok{de ǭ]yHV0o/]4GiςDҭ8E-mQ"fR2q\en\ﶰc]M(w*sI\&ְE!RA[ѝ43݊d*/!ڏ+"~+\Iԉ)H丳.n2{#XC.ώtm3'db҅h/N"qh(V& aI79LiB7CrY=-xDAQǁͯ&?A$y7WBǽ|T!{6.'>p'CUɅ[Tgb"c_-{F{8)wLǑw SKcNF5F@Ĥd ~9jnX@3ˠxpMBEfTdQ̛Ԏ֮[cmK=+9& !W{77 d1bwπ)Yz99xe4 vD}=܉>-ᰙ$=fc JΡ͛A9 -)[N4d9u׫;{VzSlX-TƵ*녧\ œd poP4=( fenY#n9wf\q\YӆǹObɟcX"hя~|iTBrrĶ#ecI1D1JMBH $YE] KOhm pJ&Qx[qƄs 7>b5*# Lf8"?w`V ߒ%HaO=HmP'?j[VH S[ (90ѸJ9Llx &ԹaM}׎Or!-ݐ UK4{CӴsSnښCF@.x˥UaB] id _>29ЪLPd@mV_%`*El5j2.zN fuMZǁ\Ȅv@'ƻC+.n]QP(&yJ-,_ Gzl% `=@\ɥ+UDcckyqqX.)A 3ͅv!/ZAF{fQ7:LM;2*5QWw1TƶDj,;HzsF"J¾9Ľl9qEX; E?Cį{zj= Q33 ޲ 2R|,}1-:"\N٪r깥`5-(6a#JFQu:C*XV2pggx yvN.=3^$/%~Ƶ@kX(ܸӕj?DQVic=;la]9YjD#OΫjwHENoLYLν` +`Gwc5 ?> v@h҄y$ O2|Cy`GLJ~!+yFR>ƨfLGQX4Q<5+X*T8_FꠟQi  xj; lYX {r㸍uzjobӸaG?dLVn~C ^ x[kisuC $`P,WqIau(L Y]m7ENFd~xΜ CW Cr0v=D1h9> )ˌpHC1ֲ\@Zo4뗺Gc1{=-HT\E:|bQNՊ? ]Ou8;# tة*.N#x7)qJrs;=y1* u)~ظ$Z]6k4[Z̛Vav:~(JFwHp&N݋JC0BY]Kw$YZy{s.g7ڊ}_6 amƝ Üx!%3ֱSCa1Ԇ^y6Y x<\/*Ɏ=C$Ϣ= &{jcUJhfw>̧;Z$vf{O=9fD$,p̐ɲE.^zeB?M`"&WԚb5/6^)%2|1 _~!J4I91K"|~_ ;Ai5Yo:y6mi.HwAwdv׳+ !U5gI%*B%4"5:ؕ2|D}LWB"#OyֳhNM5wiY, np ;iVulOR^Bu7/Luʹ~!L.6"֑'R|\F蜲 d\O:)"ek:Wiy٥a&p9~v-N֬F*CحWjc<4yL*, ULCwn+a~]q;\fb83# Ɍ{uGL_kW+bUSU8PY$8 aEoZAuJُrE*B]>E.8,Aw4.ւ[Pnm+8FbV5'|Nj=8 O,_Y3}lL/:=y0CO>~X,6 l)W9{$X;[}JqCG>ЯNBhsʼnT[iQG2 9>~C԰10͆+cб:zѱIX'p`gy jM$nL\ }^vgЅA Fp$KP!="8@\҈ۓ4вed )}mi|鯹E/ E5e 7)mB\BOW"RY \5q?1GÌ88 i932#/f3fiqt['~}'=|dy-p}huo_gmT tpdT}[rM'o=|CuC!ph&w폷'{"kQ@I> b=nՇH@Xu4e֪~rQ6}Vvͪc'M]Jyk&ppKw+5=QW E(V%w#w*ƛ~H6}mβIċz9HZquE b̀7z\WZ Uя,FhIՆ"fX'!*[(hlc5uڗPxʚYĂ]y[/-nzȻnn.Y3Ev1T '{/Uy) 5TmlM : (s)6—Z~~̧,! ;XmsZ_Nn/xk1SU7Crm=F=.[{c.Xĩ-ruChtڿ G>.,[(ф d<uD|"ꭚh@飋c#t8FfrQyc;aW,Z%X<|p$4nuv&(Үrp)/x)^ NA 5);B1Tv2c T*N4K*_#HYkV7Rzb8jRc"4͕ {M]IfxvȳrmdnMK]hZ$ 2(2 > n#xmmK+6ѿ0_64<>41 S#tRNARI^jOY;A]8̟FO a&A z.Adʘ*ƨi?!8 0iJ8؀U{ۑڵK0Ourd[Ge5LOͨ$Q/DvZz4D.Nz7陫޿+E4vOT7EPxI/ȷ($SaD,!GcBmƪVwki;!`NS4aO<0TڛeZ^/V8#nr$y-vxɇ@U15ً.Oio:g.̫8Dcyv˔{~s "F ]lC=GSY.+N Ej>% 8fz>ޜV^+ tvH l[;q4t R-}w}L &z옌C 9>2'8s6ZMl}LƓ[fKY ͨ`]U" `JJ"EGDzA \lFaIJ \AҜa+1ׁJ{ ;I8MsLfZ7sw7:Sѽ|Nnג9Дm9$9UfU,NP{|<uϛs2ỳ͡ f|"o*_+̂a0Nr%q_.p&43a.q?\:gZ7=6lFSAsVҰ .Qlp#2zTDқ9P0Րwp ZP[%*\N d-3˘MWMB_0J"sQƷ+fBVK͋EH, %V -5[?"VIEw'?I>=ktTy'< =?B?JaHXQK n4aν.rJM&{bX*Z"cQOnK]e@[^zYgn8Bײ8kH9"Dma| EDž4 &=Lbձ|2_3IrDD}@*;+!QdNVuBNވDaܜ$0Zp؂b%05T^!MԼkH Y 5 xlz9Ϊ .j̄7JA9 %ħȀ; ĥ#~=~KgjBTC: Fp̤wMŔCW۵`ד"R(q+:i[ ᧽ e?k_:#$fcrx.& 6ZR!dF Bfc KN$O f67U`4!60ۑ]9ֶ eYJ>E'yj|ʳ3qq$Puj8`}]v @_ծJli-a ? 54;]Sw~ũ`cO oe DS8ͮQ3M뻕T 7 ;/):DQ,X2P ʴ*oEjAťDz @TN7˛Dfo>' ׅ(^ h9&>5v˙ +=Uc-ُ*eKφ@l?y>$1 ˯*T5`*31+v(}T]BD\=q}H4Fʚйi#׉R\Pw}^5#L0wlчc|9M?ɮSހ-jd,(q[arGzA & 7ihvI=HsڜljB*Pa_XE1Vb%`3CgUnĮa֞ڣZ!i؏ªk|F5K s!&'1'E%Od"b}^}Ť/qᬜY<d+6xH>P Yv9agy@u^|Q1ނZbNjP`q /:vc gF,%W4q;5H7]/JsӒFu$,/{(t0E%EqCNX^nAGz镍Θ2ҖUs7~wnU{gՠZBlQ|szP]K hU!ˈk}nP7h*wON1\LWn )h8.f$ HThb0gdmVG[;"*DK$Qd.$lM,[,ع7J) 3o~+ג~PăUO`<vqXk69({k."H".g5.qx7I$dWaH g^5r #LMKOOHm5WU3)9܀LxJY{>V<Ƌ;&owx"F/Ҹ@ei%BX4=lM hØV(z#+.)m>jLgf_ho7r^b"tK|luEp) l@i;'ܛMR*2|ذכ` 4<,="y U@;wÉ bIv w4 ?Etl=Pٍip^xYo4(g[|/jN@[掲MILKj %Fm  wExOW8>դg빌IՌu2QK:Cu$`vcdylJyh fX4b*n6&uhrKޘ_cכ.SXC }[ŋ7)۵F`.7V@ f@""\=>mfƋ//=y?+d4&f+^iu#n^xit7")Pb;<(eBr%:ҹ#dSvh4uׇl?@Ve>J ?IRH;YY YO݅3k"3쉣"j% 57Nzw6Bmb4:z$D3CEdj\Ğ54A> bȎZ ͺզ>80*@8?Dvpɴ?FYNN$zbe,W? bEAV%mN˫5ힷ:NSSJ2[QWQ? 0NWVgbXt;CQqdyyEt Q1C5aFG4-30`tWI{aN)l,{GAE2WD.SgJ 50_!)gp*oqb*8x,}ŝ1I8K?n1^)U VwZcwA&>LJfa iYln!Wg_`ekBURM QfUɿ%y¿[X ]H3&u9;DWR hEJ A_e8gYgUylS *Xr.gp yAbhk&#a(ߠՍŋVB8J,f QU%;NŻ=-$Hl7"NVx?BieHx蹀YCvN^i1{ohep(rL9+/|":oL_sU9 n12y!`NKNA) ]3s7OI"},ViBfVN[kޫ=/%]6TS!4GZ;o|Ȉ)r]`+x?SJ;9|x3vF=%eNA?,cX6$8-үzpcFM{O|Pex>& jkUhZ _k@wC,[2M"<=B&k'0:M;eS"MN-Ьrx0*vI(?Nv77C2)BeԈ` jq6sM!|Euְ>0*Q/h̽%n-6`r:ёt̆[|J^\ َ)iU<Qs$_T ,ژ.l ͔AbeęAWD,HTG%wmPu)StT@B3x2DBDT ΡXwg ĪBbK&"A&Jv'ވVύ9ƽ8C-S02ot샯~ڇQ.R,<8sx>ce9#uM'JC-%'>``mj%P|O*m@DWs5ZPs.A M *zERÜFoGbtNF/Eiz h-̓ yBjͻ(mm]gK@g.A gDtJ{@ K76ig3DDR=I1YT!u*F"+B{ܷOj!2r\ `Lпg.;798}8= "В#ÄOtƼ[|A#$*Uiiw,Tvn1ں}.X C!ywx%3RشnѠ |Ŝ"L IA`A~eŃ`{ģG:0N Ş4LHTVNFC 89yfTip1^.ŞQ@rL#Z6N{ g%q!xӀ 7MO;."1Ǎ`gv$Hb`1/cF9j1H~y5vdyVoPw=I<;/SӉc:Y(W&*IT@vî[ !ٜ\ES( ^gxB#0uV8JދԎb{0֙1-Gv2xC^LZ`O.Rj)_>X;`Ca8&j1`TƳץ=L}_7ye+kq]%>Z矢'l;^j!)nt:Ӊ){ttG>f(J7='lXнK>< 25~y ȿTkĦl'Jxt0]1*g,@SyP?*!?7(L`U#qq,pq_5]VrY}!*sT1A9PH֑jdS >eP3KF3Z 6Y{pbcc>hdFVK.UTT9Ԋg]J KΔh+(7n'|{y0V`6;l2Edœ/J娰}Mo$(+pJ9Sd̒ñ`jչ|A 8{SRBLMiMMxV4pݱ>Suc j\ǂ|3o5i%ଁg8PJ{naXX[QA%4 bH'0%JU-ZUY:]`" TͺKh-[@/jA{m上ˆ@hvߒ kThWV '~:~u!/ԅ{祘i2T/kЏlP%=٭x yZ@ll>^ʹ;)9~PzC,3qGx0 >~B P,Z{9ƞ~c )\V^*~U"v35V ln$OyD9;u^.$8;)l0W` \=)}X/esX 0o 0bP/qZp՟~(D#xjohh~^4wʳ!!,K QXbbTvZiO+OEtbJq%|^u&.Ff>&#]'qBuƁsmmIW] KY= ._Mf4[`l1FbRG3.i\[!6rɢkpCL']T3coWm)xgKw f$*gȯ`39lBf8Ā֤{DDC<~N@XȚMk8ɜ`$F3Ȯ:W c{h2j H''1kD5 Es`P&S)l ȳWmU%Ba IOXKB9l+GGPE/RXqL.^!T([y\]Vڗ,~hy*%@M ~*C'U]>Z &C{WHeQJ_[v4+‰|2A;KFQxͅ;\ȟ9>PR3q0;sϠVIJl0&Ş>֘`' ~Js;:j͵qDv\f>42 auw^qXiM'E)? kk"^ aAœP#Ze2 hkJwm\E0msB0viz^#,9%;X(4ʪZяFB,xlkm(žy~`8 &xF}}_|o2IR'+^ ` 5F*w̩C-L@!u6`H'=c]y,Swv rxB CAPG04>7\rxAHKmYwr@]̌o=^l-n%EC{ia@*O<1_r|Iv̠9R2W{P$D .u0/]Q}eD̵/PA*Tww9aGh$KF=Lu(s=δNۋ}GVc$ ib^q?#¾xZ?Q] )|H8 VHO1UKU0%>L7І)!f9&]615m,ǁ`ٵBՉP5t=).h9. &|/bRi۴[zW f_^>'c[&Me]w)*mUtkԴH/<ά :jE4Q=Ǒ`tsÈg$9[G5DC TG~fp^#o( &6{Fe뢀.d9n޺Hۑ=']㦛45՗fx[g< B' `3Yoӂ[8"eOpnppW"^b 亶æH>8|ʄ~6,qմR (\cT&TɄ|*@V><'PASvIfhQ}+8/$쭏JWN,\ͫh1j ' \Z&t4&.eĴ"HI.k.焃ďÑS--d K[['g6u D`UekWܫʻr|1H0Qn%pcM@adZQzky#h 2A#~?XŰz[ELoYɈyw*R ;vˇhEcɄBb~c3KU'Ouf7MtApD24gׂM;_^56j[#\$;gA JVLeW\Lpfݗ-xb{˂)ܝ6t xU&" w\hL.*-r %b(HE7➠~y7b`UBFp'>iV#HlJtB *ˠD|y[,T{*Zlpl%k+XRNk䏺t:>"ĵً`=z2;CXsր8ҵ(ep~?RoE}{Z&od&aYؑ0"(6wugmġߢU$*FKa0gxbV Wa*MOa` ,"ϯg"#7PC Pdɕ!H anteBZx ` ,BZ^;BceՍ>߾Ufܐ{ A9/*3ص$~0 M.5MrWb{=x-mɑcμncBt pk\n2:; ݚ&ax`?e# HU;؍igpu(1.#$ʀ7M%_`qwmݶ""qv)g=yBоlQGUaK:tȱrts ZZ7ߵ@5 < KS @Wp l:zw&jWKӅb%Ay:K\1GH ")x}?zx̴ؠIP3|\_Rp]7jA-0 ԢEyr vؠS # ; dT{'>ao K"{G5)S.d$vN\![=KїCO%OP-x_#]i2wdο^T=1L, (0Za}a>.T _&SWĦ` b-?ؓvo<s^aVфՄ׺Ќ$ (?cDuh`yn0JC| u7Ħ0Y axD6A[{݀ =8&DX2ꌄNt"R3tgb m ͷ`3 9Yδ[kY눐vE%xO@R:XjI!yse.oc| MsVrK]rFYc.9Vi^K)- p@Œ0}\҆Om;͎b}Nh3iH߇2FB"O㟝{͔ЯPElr>6%/t!E=%rxb6v5ɕD_fzZYvlݢf<F8Y]ϝeNM+gܨyFgBlӅLal4t+Zl 2R1%QAok `Y+~,35;D _U`H[Y~~ Xox{(,rS7xnXY@ Խw\I1`͙th<~&9׺UpF,n%a};͢ʘyW1+nC&IfyN7rb!R$:awu 1oAQ '&톊ҏ}Ȼۼ1oIѴ{h✤D0Qh6boa`WLd_| #z"7Ɓ#v% z5=;g 9X)1Uz%c g(֕Lk6eqI;hꀿ؀vuҪjDFn˄]‰H0 r0M*m_ ֈcUӕR5peY {- oǸ{3c}1j}ML%[@5O&Ao/ pwTTTa32&=>v6nj^qQuyH[pOQE+UIq!w›I,Λ*D>W[5Ё>sbA0 #/fЅ~ (#Y #Q7u oi> dٵ;`òP;ݨ,M_ֶ;_E&h 7sIs00dE Y$rU3%\wažϥlqEG) h5 Z'' Ԫ`Ȫ 9OO*K4FcJ%kPPOt3[zo8W P_pbK*6ɥMVm/ccZ5?38&gI Nq{Z2lТ)M;h$=(5h`~a#9L:ޣ$m]㸘D&ֱFKιP]6}ƧAi l㶎1ؕ;hQ"הr~,L:kvGa`)RqN da}b.K骷<7zܒԮ@Bj}D;Y\Pb?kJÅr &d?::6h"An PɖITol~0{'C/ӓ ]n.*ߒTm :R3oN_ ў3/3aNSipۤ?r$h IwfcX(_Uïɤm>NF$sU)Oݺ潡5A#e|c<$q}^C*!+z7%!>?~#6S>g0Jx5xYY]XRCxݺ)mpC ?d' 0/ nv6`8b}v5J!P :_fAKԪmg.RtjjAk'z `jk9:SGS"B*rrH!Xu_a8lvrL*; 3)kHn%2z+ 1ۑ<贗a.&mWzHs. wxd~f"ui ,3lJ0@ @Q͘[4ƺz7O^JĶ/E;/8^ec9jg2\1Um\}nͻw_&ĉ!ԇmA<Rq-Ԓ]o"7 k%ԼƐGn_gv8;tsnbZsO"y^\*i*D4عQH*h_=r"H،x ?xOˌv 按Y:YB8ZrlהK&c/耖y<^-{T*~44^ֿUVolZrĝu9svye sg'@b3 a*_Ϋ6CK"4P ,XD& q8Ϝ7t{[P@ebøs gx8^Vm "?Wշ6W-yV=ƸPܠwq⸣Hb;z"(>Vҩº(<-pEx3srpS9(yAjmL;,[o#{Hd6-ϭk5 (?:`egbk9rr:S1Oq~rB8P|rl"^}RhAJCXgӻ2- $"7ʆjP{X@,8j?;*H.FZ4Ma]1(^EdЮ+XºR˫vpތ'm]D\h*"1,p?j5_W®ZBe f~-В&k8~ tk^[u^NsGރ|rC2STl!@S&RG W3+x9aUP6W ֤`r0O>kIiڋ8 =~'媙3,gJa[5B*#cM p[lwI<1@- pNJ,O'G4c&ë`>orQTVy8x30CAe$Ti1T7va $B[2R^W~pwכyml-!W\ K:+iA+]$dLSHB|-MazJ†ųؒ;Eq8=vGgv e֒׾?k q:~?A(&TW4.*ebiP6muCE4G'=DH1!Udca@)w(j_@ZZ ~)eK@V}/O5׻Pz7-]3 w߇/* LpExD-0uz c¥64s8d A,䫊nZnQc"]wy+zb+[腄aĠѱ}Mw.Ҝi9*OY!Gm\Lυ)C4,8sۻ\a\_܍[p-#f>I&4ыWHXfBlg_K 3441:HVas. +cBm;sJ";޺`?. 3z>nGeb(JJNZzS>IE+FQSqVVqvd,nmU]Yick$@t^8w6S:L{F|(&.Αv0"T dU|<[9 WIM, ,í+Cak ԍ>t,:yǬdk@'oN;G?'"ΔML.BN4Ꝕ;< řbM:ݓз\ڻPxX$p&1;OZSI5ɺ:E@aLAu`.m.3uKHivi [PJHn])!/+˱,ڛ@2+';8tm¶6Ah}tV b2/3LtupPwƬILܮ\v8qO]y<N CۊWE\O=!_P,Gƪq,JXiA(h͓rmJ} yN ccw`}k6 2.twg:Vg9^uC'p⨪;jX:;WQwNsۡ{#t(=^ V5=)9l=S{ wP>m * tGW*$I oJ\؋ËG L* #9#ܷ~ =^sJNeYāȒ-u=I_0Z%zJʚūԲĸp]+N^#?3ՎjKɰwnd:]nϘa)llN4&omn~|]d. ʼV$Ō [Ne)/$vo fKB# f.S97 0#$ޢQLzS`8#jrڂӻ IZh$0dkDA*[.R= ޕZ<0Z.;4 n;̐_Xa&gNMn!2P0cϹ %Y(p"翪E]|*&9htc2.g)wߢm{uV?Ԅ!HbϠlJ>%C fe!v\TܢYz)_z訽H06=Ә{o콌A&6T*8-ŧOtF4~x{4NmVu\[ 4U24D5ATN57}Y1 INHܬ@3jTDG< ر[ʠ #7W7)haC U, CA? ߓ*sBҎgo!"s}ߍz7h{j&~_+>y܇H/%I}3oOrLŔ/UQxGrPș5K)Iq kan[l: w)V$*/&mW|(׺ǜE%-lǼ:@r~;]ANߢ}qU'M$(@k)́B!Lh/>W=-HN^/7 ;9jJfϛC|.͑_aPN+k#eʃ줫g޽q5\W vc)@qEi8>|%Rqžgz &YkEi޺yl~8 ZDؖJcRҾf@dl_fuBaS+iax}U*-~by \t;TCI Nch+@bf 2"-te!1A\ ̛Nx,<s]z:\'\M0uR.@ŬQc瀉>>  bo8:5yY s6NwﭭB[Qh(Q4$z .3${ 65ֵOGnвKp};@<2· /Ox9$m[<"h/7u֚ nªO3,gU%1cƙqt Ԁؙy4<Hv/l!3mB:&jF,(e]-:,|f! UM*^4EE0R8kM(O:Ф :f^R P16E,j0>JL 4[,%Ɲyl{P MoUE; G>>)C˪0MEzb-NoP^[Q][<\x5 u'z}-DznXO2"TAi"a}ɜP7srd2)\hْ^B{7-e7X%=KߺLe?KM'ЯkXMt6̘z/^p` K&3 XBWV+;sşQgTkbja ʌ%b( [cr$5fh fH|c2I@v-z@)jqnMeaw *pt*2a.H $&>S.7pR%)7ŰQሎnrQBFl|!\(@}LsWoQeIbȶV2!Y.y]Μb{gJ=h&*X^t\F(M@!*mGehtq8+N Zb.@ pF_\Oh7/\# FA8,٭ۏB l, c=t{v:>O phSy ꖚ ߑ|>mܫ 9|n^vg93$vOB|JJw(elN: 0xI*s/UsEZ6w^ am%z+D?gWHQQ˧gVƻ\ 0ݪ8LM,>Af^7/›KRSÁIT-S~9,iՓ\QwMIq̗%Les(C<޷D5 |jD1ڌ'7&Z2od5rsw-O-m[VZS$*ՐKG)@ܫŹ޿ga`q/XFEj[TR]Di}t/8e૷,CGfY_ A e55N8%yP(,an*7N:mO `+YG(Y8Edufj)GAu~FH5Q31͈hV&Ja)z!5-U!H2B8[mX *Ow8gHWw?\>UpWt^I+͚kX] b~ ۢ}[٧RAU`'$u30JePpwu}:2Uf3?ꢪ=8n$Tz_]a0ysmag"%[% .+<Ay?Ⱥz]u%?l'{>ٱh,-[ ֶ3prL^?v^ 1ZCڤ K6-j|g-;L21k?С%r6-)!hVPWOd] ڢ)"̣EqgI@$~9R/w @/ C :sŸ IAȿue:&Ü/V"{oz4T? "GgMRCqgg/AoG6!o1_-*tȐAZ,ա~69D9(dIGoߗu1vqQWT]&yZ!n,p9nRR9:e^X#_x“ `d 4+j`fC,FY>LW V[w{クvNZ\[J |53U[ΊQ&1g]R x7K8bG97JC3L7(㊝`|idqll JL%q|!A.@Dt 3:"&8 S:qH `n1>Dv֜؃5y|zXPF$ jAKAWdq94ұE+d cIfeΫRa}hT¼ oa'_hmi֧ٗ76 A^!\Z/PP [lBHS YH4I6̊_rH5Z<5M^y.!BVZ=tNC>n6?z,"G\ K(at|\mzO:C-IV]b#>\vo pAZ?WIq)zȳIBӌMU77ߓsDF2ZAj:%K9\@<^oL àƆ5BljZ)Vy>_,⩈6$M6_dg)B8 &r,v(Uk,P.M}wGSf}$+sZ1}s6882gD#UZ}]@o|[Gwg֕:ådTTuz̠:wLhV` _؉\Nʽf|;>qSyiȌsDU m)F5 9.5 g: >m 3Ip`Ng?>UrhwyispBA:S]W`rkQr/ر5Pő%06H36:嗶9D͒ &y )!cH^WY`ab^^289Je:JǂDS6oNsx|[_y w2wYs2 #}dNE]x͔ಾBͫ`megJE HlBU릐04`M7qhnl܈Lԇ}|F-uk-̮Jdgv%k]93ø.M'jD?xc4a&=$p{`H^ۃQ/~T7hC\>̹'ē?u{ ~kd (~uvC"$Cp%]yַڎ[&So795,F/x`Qߎݱ&r5LJN je U3[ey]򡋵4+醇I?Fa< Ҙϱ'!=Jdi`!ŏ4QoWkH#Sob\Rp!L:k={`GIwK%P@H쉁%*r\OXcHH v$0ez!d0+AJ#žVPgm5*7Ũ9to%&]=VR]C~.UWV1 ab6vw NC3qrNkjrɍ*G5t`۱I)ƂGOm8"g*#_Bzq!\;b,j>D.gW@aDX1L/ Hfy}1/7HC~]eنcy'?qkz7gM6-Q/ ؚEw>ZEѭX}s!7 NomKJUDz"D!VXU Gce#;#egck-Ĥ2{pJ!aGO1. `!92 3^9빥(+ϥݢh0]Fm|ٻWMʸO)}izK6[(i,)/8sJpwNXGOO}etcΡ/g^ tÁڲNۍ>*^:ms6 +,azc>XT,! Te )l!o.lʗ1سR%])ES LnRq+ Me%@޻"N!E4ƃ#p٣TmNX,:J}*.؂n|<"l_ѼQLڏ !WfU5G%߼5I@6Lo=:1#TvR7ب'^E =d ӰZ wYx+x;cɷYɷzQuКLtF59s>tC$d܉w>)cToω 3ĬkJr>1|!ų/ 1 y!öF9NJ]yL۱Yȋ0 H8Ex'mHm(l۽Z]Me/֑pmlgB[ y-Eb-Aax ]e_$+ڪ*oH`qT[_L{5RANyWu&TzAD ߭k [S>jkIn 2#b/&('Xl뜾Po&U0R4uGR\T.þ"YY7O͠c)|Lm9[2&HVÖHr ~lrܯɝJ `SgQ-5'U{~ 6 ˁ@7DQ L"uۄD@PV}5Xkj{K0u+y}Y=a~l5AiYOwV\{Ѷ_R޿Ph﯃B 0 eѡrR cCruicx>H1Crpl44響KT\U!afrݺ˫1_cE71*e̘: 0(>b=Vu XJk 11OCmn9KT}ͣHꫭ,7' q Wv5ۏ"L"VǒS%SCDxI]6%u;xW7t ^F黺B!mX(#n)L!7qLxq7!W&2ȗEU%v͏?P!Kn2|IQ0G$nc+/R0JҀ(A"ah'ǨZGrўfʌg\sp{k&)</Jiߧ̩N(+ȃ>SUq#?+*v ܬ (oz)+9_2fMQ*祿B8a"E[8*lJ,ehfUª@w_3|{?"mx:ypI 5>j\V%qih"Ԟ{Ϗ)8FUd^գQ^@p!?k= I 鮰HvŁlt+8H@Wv{rBE'AM65#Ė5CZ1i*;+vi!`>ۃ5 .|#IN^T[%UL¥Wc3 VH~q/&~:YYp^H!3“n3.1[ҪVkw2v:Ԛ\W3t9W $9 tF?684vW|{h1?pO 1:L'%"(G10ފQv_Vybң\4FLvh%~Ëoc6 ሇ!T^JGs\7G*+kLtҲr8YVnڡoA>"]yi 6<7- !$oԉ ;A!ÄYi^'bY6uK;9KfR 1ܙH:V}5䤓ccN`a?ȖJ(y_ BuWonBYwEa |8UyAv9…s>5sޯ4>d>PL<V88xZ*WOvJL^f_Q]FgF/2h\m|S׭qZғbaL9"}w$Y8d"BQ]: /A{?={GSK{L7_MnE!H .R})"Ts;(mveO{N}F{Q>K|/-0dxa\'[Ъ'>J.Jx'{IpH=iA`mLڙp+-rgioB!˚2Pi>C/&{`s&qGk 9Lδ٨Y/:sMOi8BLrJ 6pCɗLFKʽ&-GkWhcDtG[}_o ܗ ~Aݹ\2rA ˻VݗƘՄk"Ԛ)hإ?P=X/+Ij|pDfR.u;۵{T 4\[74[縳'^&*DnQ+޳PfaI 虛We7-m qh˘T̚{΋*rZthPx@9;d6蹵O^۹%i9a+S'MA` w3$PlcwARD8w"og1ՔFqv.텃 L?^+Ar2 &[/S%6UeGFHqqŰn˧*Ew_s\Uk ᤮d=mUIfjCN$lxX!F2;D8gΟZ3}B'b6a b+Ђ%NqrNA69}ͥo׮`)1>oy&1P/t$,5[%]ud e (m$ utѷFr¬#y‡Tu\C!}]jySh0si$d v_Q=9Wd(]IxppȪ&{ýDtcO䲰7V-z@MCW`|L6FO3 Ĉp')wgf8 pWh )txCGsh&xPaU4 C ǵlwggA*7HoԺYdU>6~g`1#Bkw@t򌋪 |o!A8jg]٠ti|! /<ei)L#7"4P<+, R?39q|?Uh;j_!HX_4"Ɛ~v>|Yɒ.r/QU9XSzY旤b( ~*GԦԈZocɔm5rbon (pvsu)Ղ DBR1 [`"yQz_ ὀl »\Ԣ@73H:v:nkܖ'e&_/Ѽ&q:Ǯ_58察j/)bq:UZԪ.v-^hk+HVNl}AB!Is!~Poaؓh#{Xu2|^o7|cHOu|s" Ʋ#`T#!Oވ+1'~1erL`wIJ:e(7uZ\+Ѓ-|AqtdnawV&yUDlULpDAaY߃'-TG,aa'⛍2ܒ>wNS6,xE轐>$.[D\#v6*Ž5F=u(X.Gx0}CBkW^g[3g D#_18.ctJeOJAJ(}ZHFhrxXpJq86S{ K "pxxe5qsd.BLU9#՝bPE&ommi~"sE!B%uU&l«4ǘNC 1%ˉnDJ+IjRqҍs*L&0ɄXsuPb(%C4gwP~W7jм^ Z囙v+<mȲ#8\^XP~EFX<,-*u#|(h&g dc\K||84+&=TnĹ4mOְ4*Swޙqd 5KdrIQ5P*>Lyl #]e*5L8&C%s.pT.|*63 }0Ci˷3jr_Ź H[*e͠qW֠ #[lI *`E&KJ 0첖f.}y2Xyl^">&~06k_ Ӵ#FQ28))9XW*B1RruX ͫ2MX;9 o]w㰴[Xpp )xmC2 ey}j +ށMdh=! 7>Pb_\?~(XU.-~_CWBF^ 3&k]E4Xi+DJAuk~X,BAӪuGTLKpƿ+35 d y&0=%9~|HEK-@a!XG8%kt]ZYrV2FQ[abzcKAma Qj[`N۬GwѺ/U7x):I GT6j WhofK !C`[)q|h) fE[h^}"zoS0%L~q_jZ!ZfzB½HLw,a%츚jHկ1`zkS38ٖb7Ϣ%'_Lu;Qݝ&oydD+y2/ǑdU΂ho*wN(pd}x8_LL\ѕD&lm`lOm?& GWәyDYy]I?~)ؿtZm ; ߘ1lqڌv;Z[<q`pCzUCCe݃$D١7&%/CܐZewr$ȵRsGNH L?7R)Ihwx<܀a xi]-YG[C["{t&EE Z EgM)w\@ aCee>KyO0vMJKpi&[>};Nh>Iԭ ot 00ԱځѽSa;mo򗻿66|EA9XB=p7t{z;@`6ޞK *3F r%tr ьDd})THeHɕ^!5Dś_Εcf_бܧ/i:Slm3$ !D`Y(jAk?!RvC.nYC gwP(/TyV'L-iduUN$+BtnX։hX9ZMB:{ !uN Ɇ:1\mzPv;!JwRn3v0 +V;GQ+g2rY;Srr )+헥O>`5ҋQf#Bkӽ 0CSբĥ D̊ķN!|MԠ2ט)5HmF(0";=soWgU&_`2TH@2`m5JNBdžeoWtn^*iFoEHJL C:~v̠E fV @Xs'dwT+KD@"oTFN3E@ CkܣSȊ, zΖ4?c[ !1EV1򯾔ٺ؃ǡ*;5&v,ߩnD7*ɝ-`BK099 *2`iK;uK h"vq1G6& G sIt%=VuMko ~vpd-Ps`/5h&ept|OuB `%I)J_Z :rcL؁<|edm#jrltmKKވuο>ќkrEcàҔX]gњЫ8ӂ7W{HKΟԪP|iK,%51}b2M2L;BIlG^4:?i19k=RnΕ4S_wE-g0x4Z_؊Ϭ>KNy}ؑI4Vz&mk'X úcL 7H#) N4)m;K/=-k jp-n#<$&U!rw>ӟ]}#.H{) }^*Y f2ﬞ¾p;)j"Ej =2_D.1b7`Ըh@vV$ABgy,1S\:bn;@ޒ(ӌ,7z&Z*(nZR=㛀 #q9FzvrSY%4).܈NK/"[tc}E$mtY'+2yrDd)>84 xVp`.!]AcMծ0i9Fh:mwA#$gXɟSZo$W zzLgh[9Jfߛ 'sQeނ&`ЭaI*'`Xy'Ob|\ٹg%iK9jKZN=\ln$Cc[kghP?@qDܴp i7xDrgs/,iѼJzyݘjӕC\Ȧ(*i;aUȉ hwxmyݾi$~:p{"J*2PĔcNX:&6u?X u,xڲ> [ff(^EnQuoo$+ Fy4qU~)Yi2+ ּHؐh/{&US.P{!$)4~Jh}_!ۓΗh]MtkqZ4O[0B6Hh_Bn8I\ 1dJ=sؽKv%Zۗ5 2ˍT߀ {0Wf AkwəjS9@z~zhP!TSÌyfV嘾+ YF@aƴ S F\¶v{z0_Bj#(rVcJ\_Gp8ueْguAhҏ\\7nJIG\1P)xE2ӐYeg RB`PbE5ѭM`xy;˄cθvT YӅ`79qOfKk$ɢf'(J  QBۏ]1vz$׎T,E&8*f3U-Ho刮#t>^.Pa%1w=Gm ;/cbWP[rļSCki_}G 4F,@^cÐVo7Un| L7 wMm9=(س*ug99Wq@5' umӵ(c K҄'1^'Edq- "W+ P3x! "fn(+vd?pbbgA<7eU^j㑥=D[/%~`w;Q)8gΪY5jRKcS剃ڵY٨D%_b+𔹚0y/D%sLtn$rgDMETp@LB=6|`icB7$J0E>l#jd-Y%됇fGbf¢G!vV1>Qu#H!~`n]|IC$J,5s'@|D&Y=&EJ q0BuaW!я F~3nMjΘe|D37 %)hR+M5IbsX<*+Aj,&h^q1ã~ |M*R/ūۿ=1]'iN;\'ٟ%7`)` ҦC۪OUR>QYۦP tqt߂gM<I;`l|f Oi##`z4-s"FTHjeu;=`Y9 "S.쇵V}m钵{uq&g(^Siͨm4)xFIj˔8rR#99^_S(:LOp ळ]$VfȈ-Y(#$;R3bfRDA"&|*& garD41'kH`4U6Ɲzz86 xJGP1D6qA땒Ahдm]GY)OzV5oPGܫZ& (_@,"*e$/y_H` !oTλb24HZ|q\6*xhDӡ%{xV\"]**jQؘ/ _NE~A,pu:ҊWF 9xT+S" 9^͗4b]:{ۿ\: r-;RԱ:/g戴y#pL"9f$ȶ^NnO&b9Ma J,ڧ_Lɛ0r\pBGH X' 3 ^S11Q8Epܰ,1.@9gbm($^ZC^ih8`ݮ%a=#᳥э)O3R~YҎabn( *v "2~!TqLV;ʬ ;yhʶGu̾H^lt_Jڹ$6$ұKY:.S̤ņp.bƹW.R' D1nT39Pݼ8:ފ6q MLHqgHu=EvΌhRBh b8),&d[upXZR vH؏30]yn*mF j2HRS~ 0Yd֢To+͹EnB]z'觌tr{% DavDS$zDTC_SBLYK Bq+ |UT+xVG:iU5+qw/t?̢|'y2` E(ϸɿ-(E`&s7[UezxPTSY "È=F >e4vؒLh Rj|Щ@]14lΰ6vM$fh<*n? ;$!Q!(PY?߿Ib-ǗzD'-lP#(O,7;σ[,VFB@}7vY5U@\K>Yӵ/NnSKgrq01̏SiZV ?kmkJx<?pn?"[*I/+/G`2[2Nq]Ó|{X-| S3,vB+^R' j{04T<`HR)@𡁫ɖކzA݋w}M9Dw7|=ؾx7 ?,J̾=LDA"uz]G沺hN47sz( cj_?޼miwD攃~SsF=qޘbm;6Øi% bPc:Qb^ M:,' ŮV>:n_'rᎮ"EB֔'rmqNP_; !!- o$x)z}ҜT_7Tr+=e\ C#Z]\ڱGݎl2_TD%r̓rT~1:!&}K$6E!SIYJE|c:0X7Ŝ*ՐIbް/=ҷ;+izçA_ns.C{Z;4@ȷC>j,!=n\޶2.)j(NU P[Ss dݎ%~n7˒J᥷8uyq3\i:YhB9ޠa1՗:V>^-hXvQчa! ^{1>7wH-hx&=Ocė@*2 :h ZXaMB=ϐ1aU/_ Z(RI][%|FCʔXqrK` mt*.G3C $7G3ѴY3 Uyͦ{x~am#IG\Zߴҳ>* EԹP6t?BjH>7⨃ħd_!wjUb#3/x2жL\0:8p|axt.ͺ($ͣ?&I𗶙P.{veiE/v魳58>W1^Mɷ#NϏ-F5qhhI=yXlLz=lWɫa**sІXEVM dCYr$g'|i̺NMOIѪ B: :0˴Kf@> 78lkXZ?& sX^Z2mwd<:.r-$'%M.@D 6YI}H'0%1.]zmJo=eD,eS>ux҉: +ߤbؐ*;"l`+W4K}On(Cns <P0tI2K)jŻKZh"l>8ܲ#G G 0B mIgQ <3"_tg7֙THx|.xsͤR&)ʂ[ؿxVVV>RzN7Z5p1qՉn #\-LgP3۟>n&SdN44R+ɺ'to z=bPyn7hu9Z]gU}v].8!hKWB8L 5G'˟p~ȆXG]/Ĝ`GJXdִKH4ʝ&rpJvMi :g?a_ ЯEQsZLS?3;0 =F]f0StH/sawr&уc{އtJGG9vDq%B A5GdwQ),gʙ>KZ\U-* 4"%VW3#G2KIԝ\5bU!eMc?H7e1tȍwcr w}`gvS D$A< , N]qTV(+IQ<YD3'7„tuP׹g<v僑YuBM^]{"ϝaP+\F}9 5C^0Mo\2辝Ǯ<Ȁ7EJ⅀ pa{ :׿`,}\;aM`k1Hۈ(S\+Ձb Qr‰=Wn:VӚX\\G=(kP LỬ*%v/ߪ+ik}|xwYběv65Ѵʥ3&|6Um&S(߇-K9U_iBxM3Ѓ'|rHJ)!'^RbW7K|^<<*F>RlΊA$h8)^ZRx$jŭP}>PP&yGV!Pcj>BJPohz 7b&"ik8!Ӱ?TY I~^TfB +Oc?Px"&?ZvIS+] -9b 1G`hH/Z/5p 1,IucĂux(ۄ`2Y;Ka%|[˴kLFޮoq9qX K|(¥y=> yWrp٫qo#NȔ5dx\K=ŻPf Zc{jE}yD)rIɆ{'n2C=#<Wx^l k!!k J[oO}?n` Q_B$QJ8iTmk!V:4ЏT zFn CԢvVAm118Tf*XQ!1=7A-]eq VT[.ƻ/:nZFe~ PfeQWmwo5 S'voRd4hIWϲnr4ne.1PݏDpksoh(3#Eir ~ Xڙ`CRYy 62/39Bk2w7й`6$Ķ$ByN-.>և;i9=dnfAS K8䒐%j[hy˖"r<*}i <F9>!5E!}:Q e(^w@99\i2cD&]\de[GKe=|=\`ȣvC. ;L3g:6)N4R m eTeJtsz5=䖜|T.oUgRyWb X8FZ}`Q8dj_s\AvU6BKWf$Y-mt9[ ?={+%ܱ2M$H1l`1wF8r>@G5TR˕ zX1hԢ!C*,fs9å0nxN=E:sM{bQxK@qd`gqA÷a&Fp썩t^Զ6qh8DHh2 V^'=JMmjE J<-tl6DH}Kh*pR/>b(+ss=u ?VETٸz&8cW)ZYS0g9+g@ۅQL/ q=ZS`ōg+RaSQ%NE{[^UkS" Q5  !}J`J8MuzBXc.yjk٥xVG$hɆ}h+(OKIkb;6kj/D|ɰml~%!Uo i-.=(ߤ.3֤ (A߁WN,]%Hg6&'[M}MTE_cI[fe}r16ԋ*^}̠#(Vd8^>"L5n%()*v}^0ZP@-7* lj vy(bj'CxeZg.Qو`S͍:/|@? km$ߤY.ᒓ늋1`8~'LIeٟw,ܡ_[eowϫ] &9bv<JezBB%xfه%)D,:.q/ԨX)-pxfzr7~ƕ3q,~6֋l$pGmPTI1OFlG8rNE#tV3yB")3||&11Q&∰Q/̌ފ6F+WU ֳ"e=_BQr}g~q0c z"a;D,VSyUF_3΀R|B(wH}.w*bbH%n7o)S%Z V>x4s bo,99zo[D'I"F5~{6pd%J\u.Oỿ^)Bo DJHv$<ڋջ+TWJs(ˏr֘[Q>*X(4udt=o 3qDԠɺQ,D ]쬋x?-e_o3PFkzxޖ^ͩX?ޕ$75oՄKyʤr'ȔM[;sPf yI9:8&$%On3 e'^`"ȮNv@ 7c0U>}ږdh*cN]C׮Xv`k(Ҡ%o%D3pMQߴtN=|f-V1=bXY (CmaArg$O?ȟ-Ffqd3˃#v[6N}ZrD,t*PfwxG C{6MVkvm5э=`:D ]/s@{>HNVaUjqFzpBFZ$۶Q~|Of7/ nꚐH6H-1|F&LJCj 9Uesd9I(K.-;{ -E{$X"xܭAљqB)߻8w7`F'ir?GXJLW_e|Or}k.ZͰ YFWи3pfl+7{tsdq0$4m63竺ɤjֻٌ3uw.]tFc Ȝ=qOkBP@ў  IY1m ;RR>u)7c)-/ܭMMQ _CV! Iccn{!] +<@Yjn6J$ 7ʮYV>OW%wtwEV@c  1uhjb稃WD:x>IY!1ؓ b׫푆PE@ۼP]׽2u΁ -Ug=H\tF&YY+)*Z䤋hY9~ ŅNQM)B֩4osU+04mZ,.6(sJwKI^y5ⵡ0E1V@\ YC`ePT?s<>uX<_|Tf஌ZZq˙􈂷={:)0d?R-$6c5Ũ(ҦFQbe46e ʼnyA0ȩvA}3qPB hy/ch/(h|+y?$ɳlht N_0h¸ WxҍX &7 s0i]pgn\1Y[Hrƥ3.e1p2J UVpbl/bW>o^%П*]%GԧB2=cԕNXM\[a Gjx>Br}!?{vm>bQAס&]8D7@ͣ蓦ǩ6<o@b)ZxR !i4i kғ>-6=;P}LUvId蜐E@^bC4_4T%z!iWzO9p%]Gl܈,Qy-Gd~51+wOR4U^]!n;h4EX &#we"!_KP L[G-nВ{1 {!.8izŹ!4ϔ3 92lK1g͹K3llu*(L~VySn̅O2b'!);阦YkKK(> ˼e&f-Wܦ3ֿ1EDaH񴫒=%Qt&/Z&ҭV3{ݱgf&&s o)MH˘3cMxWO4 4iK\#,|q?H՝R9 nFn2yXP-\@H\:)7Dg?z#}sp!0ۣ R"Θ )iM^5k!ĞrsTMzyHjW#/g*a*9Zr peZhb_>`w @x(K:F~4ą 0.ǷOF>[O !^1fd%6V9[:MniɟGIR}ooȨb-V vz-.|/liwE]w2Db孁^Kxw@`-m,stC6W/WG?YO«.ꏭFpG<_GZeYKSE4D?oC j/o-h$J[$Ë;i3[Inq41ICaul\p)$cj^N}TlTK&.i.`K#Em6@sws0v&$rB#&m#_zhwbUͲ Lvmv߿/p"ɏcyŽ\nRJ VjTw1YJ^wֲsu"+znm4:bSyeV6jpG5`<|{HI;\)?\۲LkyfJgBfΥ԰Y7ZsW\Dt(b_3L?T(v4MY37 u=/kMvI &VPfMf@ʧB+22x^׺xR?zP햒}Ҝ6>MI>o{1S򓔣zDBo[,4#P'""%(>D^^[J9Vb Bs=-Q{!dkgh͂Scnqf%'/KLe侃96ÍBēްr1*2a{Z4sI۬0+MicsEt)GluR̒ }=Y|Φ!pu !A:e<}| 򎿴x0RdlPŦf/10<(gWVZa+,,hR!4y$D{F$L(of\ g 0П A,E v% z6$@f!H,c ֨bXl /N+ J$xV_Ykm@oZY)6wRzĵL2[4,Xn6Fbsr$[G5;, kuG#DƼ@XL:`E0w /FPm̈h7Do NL&T)l ka`EhKlaGIgxaOg5ݙ obh Za6MK&I/ڷ݈hL7S2s1zup+ uو`"9"t#aCm&s?"8A1/@+m7 PW{?ptQ7t; Y D^-XL>˘%Q~M)jim:`܊),R d\ZQob8դW|~\9|޵(6 jGҦPm˪vww8&xM{–=bx.6ڡ|l" ܦ*QvzHF`NVƋ ^M?gȘE~3o`L%BR{Gu"S;Rf hq8جgP%w 1te귅v='}f UC%l*Rr$>Qk, A6_-_,yi]wkL0ؤ԰Lkt.5NeYӖ@ uCdZƞ Fe5,1Icz(8GKl$,obƙGm>= [Տ8y]'a{+k0 1]y=mbs8]b3zj 3 ȝ/̽ =P|q܉\Db!iV8`"ACÓ}hz?9R.ISf "Ma׊f+ĥL>937sm$ &j)r}; zLR0mo~4a2o:~uw5iYSUblPc^f)Yc>NB[,jYV }vUBF\gijNi-J5p:SR"| xKOj͛:&4g%Iׂ1-!&8۩dW^G$`nl͡?i5aW4{Mdi&qCc@6c'fn] |Q5h;,=l,#(rvWDZᙽﯮ* Z9{C]Hy}p %e&h=%D: %^ a=! cȮFPH%BQ־K4xED+Rp*븵PsmwUN IJ=gR[!%LiDONߤ~> qOm'nZ:uUH#!_o LuAtTdV Wh;M\ڝ.}.jz4%bi *iq>@ tz+]j1q2k ~ 6g?(B3YRI 04=*"ͿCOXs'Z6I!-*Q uoI,lwʐ]* 7 1hy#yH\ g*D uU!LlP'g1朮  DW7T$Zea og|Y2:ӻP/^oحc>w5fUL(xY &s"G]߹ <͎b~{vyߡ %G4c@ÐmI8?S>M'y 1=46aV$|! 82Gz1lyqS5:o1yz2ST:FO? vȰTaW.\TUjؓgMIrp[g1"K$`ƭ j%ibңK0F8UĆ]؉f$Lvbz|'30U s}[`Gꏄe7D̽Qj.Ó*-u g&U;dY^_旒1k4酣E+&+b]{<1)t˪b h9[,Y9I8gԀ6QkUF6yʂhaUbv"iƪ#PBcYsllU|B(țn}|z%tOI6ΧSqhOFE\.BׂgdWz@>M[g K4[ Z$⾆2cggUȿ =xYqE:xC/XHdD";Gt:tH*,,[|'Hp7Lq}ä;1pDU4X\ާL~T|1=0T`S5{qW6TvKd4SCu:[ZNUɂ'g ޠN+kҶ 5|t$/+wf8kD4u/IGKwɨ\{Ṷn8,iճEE?&T*ЋI@k6Yu.i}= ;y L{,I+hܟ_hJةe.PoJdeC|sFr ?VE\"<2/ISKBvp.Ͽr-W_O̴JFmKtzjCدokl.v`ayÕ|wky\40jZݳ=gdߥ8C!R#i-kN/j-S 2K~u/×n8_؉D]qElLγYE@،4#j V|w= $N;rn::9xȍ \o"!+Rp ׯ5Y-eJ7X/\=ep-"".rWx v5d#SЩA4]9BZ\H39Nyeq X5,w+V Od(uJq$y1Up.C JnTIkm YI@3vO0tLJ}yHY ^p`ݭ({+@b]^]>MX>7'H&iKBu}Fzz2—9κZhteśZe&MK=SR%s>TehHKޘ9f XȘWpl q A_{+=߭$?gߵ.YYC5~80{m mn.L0xOo2z㋍UB$a>j$>BpD8jmɾ\6M/&JyTIQcCZmALٟM遶QcP;A0$]x²dv5&wO,QO=`gώ.Erde䮻H`;)aY=zp}˄(ޏG |@=z<;pՇy+zwr욳If{_4͓e5Aw5Jl ."ٵ<ȓ'bշyD4/uh`IFF3+)43:ټE?pTjz+"iA84#kPѳ*ǎɛ]r]F7~!zhϮzpA^Ys˂+[+CD/rMЦxxRm͹oƨ̡B30&Z,K|lTJ¬UJ 7N#1?$пEEO-I'\6٨c5 ϖ?(Wˌ0U1'[h]_QYUy/@;I_vRHg1+QzHӱ/'ziJ; M=tL1ǯjɋ :2Nx .kDR(6bbj޿뛇"{HMEh!:`I;i==رQ~YHnaNJL_D@>VOADn`SpYE'%NE. |p+_vds1HӣqbW_1Rt)VQo|v q8ťߞO-2ݸr9Q2)Lw]LQ#xUqtPrA[JpBswY} gM? ]S'Z3*I} v*F*2l9)mI]>튀nTPl%?t4~'.Z d۵Y_!KZ_tVvEG `u!4Ջ=9&YZ7qf9k?7 C=i c^`xȞ#+C?4_X9 (Vf/^.Q"`^67W617,Sۂ ȼ,$A%4F]F`)kfG{G~yn;|KI`k]1oxl@w SJЬWxGWu݃7̣5ɮORB6M~ ]Ł+QĈ[1D7/ w)2p#Jsx'5W׹.wֳZvH06B+VDSA% ,l؂Yxmל\9H&st6[\lw[jS'[>dF*Bͩ^,.n={72q)Z>,F_Z-`Hj<@ ԫwB^0e E8RDA:|U*BH$^{ _KoW)MQKC!4U0p/-qKsh5\Ul"!o4PӇHG5U4HpSMtn|wFZ} њrY&v뻥ZͼspÃωlUUIf0NÚI톕R5+#<;bbh`kJt SNFb‚']0pڣO&T_|L+sN܄,Aڬ.hBDʪ6ldVKUЁHGʅaFMa4i!4 b-*i[p 6Srh}1WzW#z~ 9,b>;[ה,Pr:' i"@NKDoD1)=S8~, #HTRw++Secj5i.u@i1/k ^vCć4pw!O”0h^wx8%, $1Ħ ^\!X/ 1KB0,&ԯ_:49ZMBQ>j ̔K,3Fprt b-]B?n*X2*D iv-3;D\ P H M"JWn{{8L:QeWZ$G-c 4Ց+jIJV:g&l$-K"mW 2{"G i3_)u~%)/w1|9pɃ^;j>=ֽ(驡v4upՉ4 4֭4t(Vu\ ZUF X",6_A t8ބ=&[4bAňWInz HڹltP@_*igj -k+~[RL)|R"m)1pKjh,(tO 8%̬oft7@и' .wX; 6@RTrbF-REB!t(ԑqw"SqpÒ \lh-w#js*!806 ?R$]JA|-yyc T/s>o2CPzޤ 8qJ.'` V8L;yd{**b 3x2CF4N)u}dU]2Uب 0IB{~hMz!˽*!+/|7*^a P(QʛL>̜HtB"t,DVCG?"#S196x3Zl—e-n#.|CŚXScqR(< 0.sZi֑$Va -7#fYsbxm.WmGPHP}S s*I <ܬq㰗 )K#>i Th<^v(Y|+)Ͽ]JEt)'aN#F~rl JYd#=򗭱aaKcgw(DR^>):^ǗB'OMV 6JTB$FڙD2& iG ~"]t )>DY4 Q)D8/uݮ9H~1P))%UDo \H /~N7X)Šwb!ߛ-nk̎qcwZ& 2XC=^#Z.^Ђi%럳 c ɏ .i;]?JÖXt>o!}D8IDJ;Vwv" }0< +k6uAW4ى-scyyjjָ(l|>iFQ5'Ɩà nn6 )#!u.0J~uV d~=%e7ʿhנ]yo1:k PP>'B9dGp)+KdUnFdgbzY~ɢ~cLh&%~7챣_K'7yS\oRV|/ma1j8.l3˝4xL)c6l0QړJ~OU)aa%՗Kr#c 2Ⱥ*;_M} JzY 3]goTk|_E֕ki*#?^8-[@`MR)g4Gqw3rKst? ^%dMu6F-AR*"@vomv/:N4ӏˬL+T] b3M^rtVGI܄3e \K\AR@wyȡ!=n~Gdc-mw@nA3&9ʢOQ.Ta%G!OIl!pM4c] m1 J]b~M /'- %2 <H#:~unӦcrAYB3{xI!(oސDgVqO`)X oh+Etc g)s^~PKk|kLڿ̟~sp)Zґq)YFMld,\paݬ6l#@OxFG;2[Ͱ༦nYFjCvZ3%P6)Gf;C@6+C7 ~(@ri{5˯58ǃQ!Zs&KznT{TRمKN \ͷ?yc#an:o$񄈓R|)s(D Zcd>i3,H}H4@vcg,`y_뱼W5/a"}^&,1(ٟ2N#G#P~q7C]ZkKD,2X3fqM(z]*|m,N-)Q"r-Ben\aa3Z,actԱ>--9!@CZg|s7>nF[m|5kuH>{WnEYL@]0%-UmqB(B0t~6C2jd3m?,t%*τSfW= ψ&mZNwd&+gqʀ3ܜlEAEH'(h5)Bf;{EL#esCwnw{ .erGN r6maW{C CxC.H[bhl >D(C`/#]2T~"w6js"¥mjrlh+FjB d@aҶ$j\c9ߔ%y!4X_E5I*(!ocRt+1Կu֍D3zh=_4U;N?y}2jzkr82$_EN,oza'᫳H3jr (aVY^,|.x5106V.NĄvRLz?~ zbP([Ga?Pf-Lw\IŻ2KDmS4( ǰȋn35$Dhʞl!>AeU᷈ =%ݤ?THNo0:L 5bb61BQte-!.WM0ow%Ea8ΰC%ǿS&Z3OJNcn(/8RDn)6U@%r-džӡP\5 0`;.x]@z/UW[\rzS4 @>cJo"ɋlcIt^sZP`"Se%/|I\8]'f3@["kEܬ>KGD@n nm ,(_%h1T͆i2Xo4Xo=L!/C߯dϘsh,vZK*Tg)9N͙a?LJOy4TǤکz6R>E984:*/~]y GX[/ +fWpl 2WtC%~(p. =A8v20׈]FL128 Me)=fŽ !aIS45U)$xK,0m^C3MLHh^SrE=MMqŭ'31:N)xb5\^FgTJgX#p~ujQ ^Ѷ̀O~d1fW RfV2xٕs):`jj}ܞTUN~MQ.nH?$'+ODjBsxVjDE7H{D LnN1b F>^~^`7:s%@TTRΉ"qYУ"xDs{ qЊtl Q-ڵu^b&Qza=jtJՁxPWrJ@J q%5~jT:sg76Pr,a]JIE@ic$-Hq3X#E%q d'y.%d׍Bzk-@~ M/qolN$ 8s(ȯ\2QѶ yοvPh>TM,i_]"!q#}i08FsU$fw:37L\ r")͈qԁ}ٸ &}%P@g\_I1oO;S&H-]D/8?L9!{ECvI7er#v9xggx dxuAW?bQh]pR*pI)C.H93Jjq&oO|{=qlE L ܆v4%1þ&USpS@(|U]~ѽ0w攃Đ;Qsk)6w>H=p%ޭKx'I6_mvtT`&ʹ!O%m)N\\MOk-{HӬ>+JK9}֬oy06) )J"E6qީ~fFu*>08Id MgG9,#tףMĬ] 2;@r\HR~&u\Vvaƥ0I9;0_hJ IXV x5|rOf) ǣ@G(Xp(B&%<X߯PPâ DsLoYJ"u }N,B \#{nl*+HMy((*;oF!;g`D* (hIks(ra憗t>5D$ru}]O6\tܥ=w՜n&7e* UKh0pܗVfS`VQ)aY?(3u? wHoRտ"fJ}X-jpSѳ>QbW]5` !!xP\d[ ?G)6˩s5HEZ:X#u:YrbiCR[Y74 Gk1pH)1ٳ8.tDp5}yd{i1hPuÆ=<=n1wQ-zcB3vHBP 4*uv-AW^#CwUw |>[8lґQ(<ʯ.tk5i!ۊJtXUYLw*=3߅uz[8í|L% &qOJpW]o/n16RL`9pSu7*w mz~)JL2^u%.GRBn&vFFrѾ6H. C4%_hzQSZ/9mBtz}[|Ih㮐(mƠk'~ rgMag£Z{L!*Ev34au@I'V -C˟ 3i];?.-?m6.V)m yC'A@@97K;/M)nm.ᖥiGߗNˍH9439@1CՅ˯TwJ!R !kIH=CZàuH8Uk;K:)De^|(1!.r5kN3@kgZZZ.ASA ps9JBd\ Zkh+voa ^F5r\8FƖ霞h(AQkZ#EXftBTy(Dsk8IsO95\찭 _FdIzLfJ9PqW$O;GN/pQԹfȨ<9ƚ:篷Fk 84i=Dm13 +b[q")*zGݭe ۰kBZrZ$ɡ&\=ϼyoꇄG8fñt"I[>4)~oLӨ [ $ j[%0Bǂ¥LEb8Ck͚g |ܬ)cZmk(cb0tXZz2!ٟ*Ҹai>2nUVfmRK:D~\0UuQ䱧pB@Iν'U:qK ‚r ޔ{K  ZCqwz8^$Q0C(,hG &h)Aft =*P x? >KB];E @3QVx@jSXPY{޲VzVljo/TQ컭.x8#U3jT~@*xK3>k'X>b]]O@( 1p5-uhówEyEL ؎!!U;SeAfe>+ bďD۫i}MOTzxTD%;gk!  85L)w03CVbQWy [^lar_ZO(ԉ nE%Z%)H"tlk͆[0 .aBD47"[Kַl25]i:.p,8'MHK/1P;.=Oo#38`ppRq/nM("M43~s3T {+[wtq?\ 䲯T8: ɸX矉QIJctVU禖YViQ(:iB{:?'=+MWxog]|?37♖aZ,LcT)>8"zR92ZՑT|jM Uks}3dyLc*ktun;Ol|/ApzcHؤ# /@N;PK:han j*$Dh3AER*&=B(O.VڕgR(mtqV"GkǾCࡍ"GO#«ec8pɘ>g%O_ tvLt~,IΝvgPa[nT<cN8K /EmS跌`yX |5nnl> %wN.C`g-,nXZӶ+TجmQ`:?=&[ U7ӧ= R1X-vRbύ0ҏW[|͕-CR@!xW9jV͍zGi{-Y+yJCE޸vxU+c鼽d\O]%w%EktӰ>+`W7imoNl*:ީxD8k 7A L$Cgg4O90C&VU |~GiFY X&M͑EVzgYflYǘ$RgڠILV^n -o#jà5F? P> YAZгصJG _\(Sո1ACZC\뮺!m,2Qd|Wm30X2R]XWD=2zRx )R,eJ3sm"gIEHS8/%D y[̀B1wT b[,f) Jo}ѺVW2=߇?՜θ"p dvNc_P/_ BmV쬃TBDyIlIgK$]E-~ay;ZTa5QpgIUٱ\),МLE;h#$+j?xf@+cR4Nӵɣ8C G gRk h|&]C dt}ddTIÄN&jGNck!+ѯ6` Yh|mAv Ǭ_qZq0DOsנ` Ug 6665!jgY6DJ ^hzvQ6R!o24 \Tgjlw]wAP%KmZw>?QivJGXJӨ-t뙢K2ϙ.rNZ#6[fn Ќ;ܝHjq$a ")AR[/O 0[H565إR9me Sf)y47r%?g/[{q5*HPdɢ߃ÙWOhZ`jEr559^%L}g`^ǩ%&r$a{*+߇?}^2*'*"K7mCN_yk{iMi <;Y8z][9aa9zW>ҼW7A lxSlch? d6Lٽ" L0+seMU8Glj=br^"m͡w'Ƨt/9줮Kqhܨ5W(Y}J2@YM,~VcR=}b ]=Cˑ K(a<75yԨDX&RE#e,m y&ߦQ_ 0$~z܍i!P, &$aaa!XD/!O_fW։\̵ -w9{~Oj,ZzP!ʐZd9^tR#TFp.-#rmVwLp{6"3v"A] i p !d!=$6rge$wMY-垒#=5 ļљ4?&JGnQIgD[ Py&#Ǩn|F,zΠ/y[ gUiˤ~>/tZ@Lid4)WтJѩkS <^8N $U}R<8۹]nDλ`uY>Ŋkhk~QgGB_,^c"MvT0"ƿ;`v2)s%|YܥW#Rlgv^3L6?3RS2dBөJ?{t(kX px:KMEJ:NK _xN],s2aMĔ8ߑ=o3WNH9 x@}eY|}?q6)rdU\u$'r ."Ee1~w:( 37~GC,V #8maD)`U3} i[6'w &rR*VgCy7{3ǤcH0wS5ic۔֕N-CEx"dTOHt᩿ zN}дJgĕU:wZABcǚ35Fk}o;^QS3z*%fR!8 h'i輦Q3=i{akйV'tv ۲! ¾$OJ,͊B;j|3Xvp>_3^S)2[|aͺyɓ jx&%a>Q>"mlY: "8!2:`홑 {y~@snYթ[6@)#<*n8sD&%Fw4m5y6' ېW0jwi %Sp%yA/W,rL*WFʴ cv'AL9RܙNծ%agJART]gaͦljޓQpY!BT ϛj(ʕY-RDh4!e`٠V#I{3ΔySE-ٌgկS%JA ~@_b9T2J03i]HTèGǭ$xs{UΉ%!*^?.5=^Ta3 [}O77Fd7wXWGjGO(8:[Hc> h}BO!GÖ;Vxzsx<e'x7hSGB*`P :*i[k 1.o:YDf$ K2$ y*Lv?>cqFGJ|ԡ=f 9,9!_"EGWE?<Բ,<+8xᘉqH6ez4R]xdMoHgf]kVx9a׫p+hiNK)c=}tb(zjiF?:H4չ;-QjO7+!0KdY,#)66C )jg!rlHFBqi@=\.h;用O_c]92z+߯ITwL 3GLv5S}l[R\] =>t}SEE&"[7*zXӦRiH&kD _Kl.C b w++N#x) L1Ϛф6q 1ujm9J[@O7Cuam4W+KAV qyYH% fgϦRL+JnAwp}9&n WeD1[$!EпRgmRo ή+片GMo e5G.R*[xt)i䜲5OMF⻰IbܒO?"MPE! 9 $ߔ ~+8aO4+|Al,!WW1nٺ-DwkהExI +Gу:`e+-v 1qiC89 yhd(?j`] ;T<*H%K2|Px7UQ EWq0 օ;E⏼kB=&l`=FI T3NDb8Fî]'tƻHNOnJ%dǔq(:DXc3\Rt61)*Dȳc\0gg >;~(vbE֯N{j!'ijy fͱ_K lrb>7`{CS ØEG} Ak8ok"1Do= "%36SO4-K$<(ȣ)@ ⛧&o$qM+; J! e΄|I8,}zLv04y@)U5"ckИQ/0}A#/&E!#ؖp M#dP c1 pYK 1yW*ƀ>Y nԦzBdbxy@{=eV/(5 uyegȣQ7bi8\ʲ'#OFSYNlElsķ{-vCUuChSf,艁=|igydM&!Mex5 =kz *PUO4oO:a} 8)B~~,멌ާη[ g5J5X9 -_+iuK>}!mO!s8;I؆'ȃɻq۫J_@HWbO~U4$b{>{xe̙c'nJC pH_QأEٕ־AQR;Fg?ADJ 犒/%U57K6oPbe]5]d"Vh'4L3EbƷϥޖJB/V(תM{·"hAG"]44P+md= `Cht aU}g»s79ƅ9SYgJd9eʓT=vm>.b)po:vT+?wpBmjO%ͤCB=g!ZR!GDJ3{ƨ!A6Hchv`bb/t_Z5_yL\?І]v S*h{-Gյʝ$b͖ijdNviu! DL)i}29×h m*!U"^6@)hz3҅2tU&y B ; U :-#<=ѽ> -MM¶Y|tɒ9٢^**c*rD.n]Y,L[bψpYd^Fl@E~gj%O݅!6KlG2|iCt޺vr^Ց+yu_ۗsPIi*S!qpC1[G-\IEM8 j;t48BcXWyi;NPbѵښQ0/ Opb2,Y⪀ܕ-f?cGpb!2:;v;VGu}jDv)J +#TŰ}eM |˜_oTiz[$*ALΜ tź")ـ)ÉYZd!5{=S,N"'rC#OEҭnrk)æ1GbM6gno05QtO%vR+Wd0Gz}{a\M&BIi~9Ro><oh7fɹL|XAZu)$4>|',~^&hqdw4 2b3L&A"v#*L\K8 %}n7N#بCҙ8 ?;52ԬZ1o~wX]~,tԥig6q7{닙o \*Vb!Gr]u{<'Lj,<G>f6a56m̒4BGA>䭸iKJݙJ+Br|6ZD{S+ZTPBkl!aoA"a.𑹮 ziXk A6Cgy22xwV lZ9vtw٩I >Ix: ]+m*R l):kF؉Pc[ĻߕHTxk҄6ޏD͙ڣ Jm2J`R֑u:whjlw_l"[@<߰7o@.$ca"]XPk{# "aJaç6d ]M廉 b sSWc#OR9qaXu:`}}˻^ʗTRf;cޡUr}K`o^8f1(|#If:" @B=-Qo>9C_5v܅4jrN ,V+:Dy`J#j##/Vb#@&Nl,eKJgޔƐQn-'qZ@M) #g,\p a 2{o3܏Mw4sT!t1}e.ڊW2O rh P98Hk%h֙Ÿ`6/GdCQ5lgh: wו]sOL|r}P(K (_['mdž*??ZTZ@h١Tֽ5I{ǘ%gHhz1 UQdPG5+;vPb]/i)& Q!qOA İŤlز>,!5vͅn3ؗ772{;z|v*:>DH=У&JyUR1{lZ΃3Gzo#wq@US=!Jzs;ކN܋|XEn{w9e¨yig :]4O3>h;XyjAhyUTFKNaC;K9)uQ^J_#X.^zoZԤdZ?47kF x uGMx[cE)ȀD/%8d`ށj [ƈFgZĥW3͟q8e4~J,NlYItT9"bJ_C ױZxBK(ypQNzXzz_ߣ;UֽO$@&/oD^> QHh T1_(w Y^<11zMx0Wєib]8Yl?^#gF73N4)md6;Fk74?SʉsX~C|="+rA`K()z'tKⵃܒEI<z|A12LHej^M貰7)HE"M̢f2 Ae*ϼ ?~s8h )a.缹~Zjnfc ؟Qx]I\B TXe OED,7 2c5}J=+V]*#|MPJi9qbq. lQ+#Dм `P^kQ;kzjbwD<  kяX>JterJd@6p!%޶b.`+vW BњЦfF{)Efn!5h!nz<:G{UgsXYKTE$橊dÚ6T{noTiqxMo?Bl\ _&D;o[D&@p6: x'HO2*I966_slŢEp$ٽpP~bIt fG hg-)! T Z E=Dgpc}:(q^P6xDfVPTj|2D?Cذb%?J{"@Z u2VLg\ @{AkvkKD}]K?F} \ L \@[*-px4 sGf2mčy'rS*F]W0qr7WTcVxԳ᪥M(N% FelJq$Ndw "(gfDs@F!=t- ۝94^&}u:НqMSU78siNd;x 8>(e8ur@nlأR ]L 9fqT^l@yCjM􆗌Á^S1!SI@x~+g c{u&*UQ밵(_ <)ݯO^A޹oU|(ϔPLG-a k*źpq8u_u>lOrКƦP'@^4rdwk ՛ǝǥ3O5L,ԤoW.c:ɯ;㪦p4"q~W^:1W,B4Ut>oN85'+r cn&.iE_"wnψsrsmaeTH^BN}T~lqE,nzp=6dX 4)4SR* (&Q%AŇ)kTUiL 2_ҺfvH]R c;<.%.vCa]! & ݖ{rV8 (3y8`_'r SKꨋ!v((`/;8I{Mظܾn @*pZ4k "eBpT: .?87Jv= SEJ!>tV܄^#]_}F:];YJTrL|VC̋?%7ڔR-VmPc9>p<zL39[-5H[sˆϳ[4 JKc4nS N@Zw|)42䰓:dVMsRн0P/=eX[ 汍x"~]<=l(?THЮ$6E(H(P}c*¯gh@~~|EzȌPbCMiԲ ꚊCoZVl(ZdS$BK*3. Yl `K ]bׯaJ5k e"N7tY L_sS+zΤF AU*w]B+L03l!z ܨ亮8+ z1969<쁀C63׽kFHǛyB漒 OGT^UAf&_P޴9*RK6z[}TPDtJ@G o˽V ZX0` @Dʗ}qýwEY c51Ql&ۻ)[&F%O-bz#O2)y*[%7l1I_AiÓ, ) 'yY*Oqfl ,0yfPnANdzݙvv&ߗ ٠ᒂЋkӭ=J,d6pT@qD=Aum Fx_$Upw+30H `c$θ}uڜQ<9IзOjcseclI'ua.XWt>~U͉ r:IGGR]g}| M yݴy0sQ\ @H!>@0X͊0ofBw$fev0E</]mHŦ4Dh~GAὴ᜛>Pqr& ̀J<9caƈgv{ .e#fk_ ׁ*x;Δ=ʡ_:/eSmψ7Rm74~=Zé`re`@%b!&}m(3ZCSȦX^_MNGK $]eY7ýVFo8lgDPb)6 ||.cB(okoG %6u% k7R8UЀaOa.u _IϪW8[' `xx=7 I -{A+w9;ӈxj.U٘e;ZqYhP-[<58R,CP("˓4&7j~\`q[*g”W{j+Rh-o= a-0-r!n;0q鉃0 248AЊܯI|L1:cu@1cOS k@uR_E`6;o|X/[ARe>Me*-ͻ! G )^,g*?CKd)"+1Yh .AFJ_DW>/DlV,./r: `p4L*뿌DZ=#ǖ8ϏؓJ}K6ɯKTK'8!YԴ0ɬ.ij%vJ&YjuI-AbG$z3 ⱙZ$Q̟/"U1y&9%hi=^/bD!/C$jÙy jE8V$;/aI w(rCs$e)2.tpa;3 \<[Bb=+g tth'=DP^Ԕ14b94AC[%k4d|qw- vh=Mq]D>;ayTABcHp덝.^шWXj1YOMr=%].SUtL`GwnZOwPϗ2M(%GMhJ.pX΄BO`٥ Zʟ3aЕ[8lG׸= ^ cyk0v<"Ȍd~=|@IJ.;'Y_8Pq jZa Rērs?o_QCs7W1\!G#=د33h>&.wQ1]*zP4~咝4&1bЮY.%K:~jvy$D)oЌH#>ޣ5Iaz8!mzO,*=kt\qfIҁJͨ j슞G_) &ϡ[9]q(L 0vu'$35tΫ;Vn"ˤMXMR tddB!AĖNAC(|N3F=].$k4gYw$W]'T{$.oy۞(^m(`uЃՔK-sG H-eA~KZ PRUQgsRY`jչodT[)ov1H=q֎I\Aop!ؾXٵ V?mB9+~iFzF# M,LBk7٧-)iPITJ"-O #vc۴STx6"M-?~r;CdpT%B1 9]>}SPu]of$Arb,8ҪG2MG8jz.F&yu'Yl Qt>܌)-Zmil@*fF ^F?);.qj};ROb&!ݍ[\QRATRwE@ wXwj-QfW T&z2&oćUޔ+E `Y-3ƎEty &*nr8S)[Z(˜jC4MO`FaD6 zkr«N*v=VTjJj.`+J #[U{pP,( Qn8hW%#mLZl蓐JEE(EnwgV0>RcKC+5)=i4|"8MbU6ыۡ;;#N~G*dXӫU$sP,áIr˿uZ$&KpTǠS ~ c@X7c3P|)=YsVdIivoupttaHCuh]Cd/Y; p@U}pf@t"5JY|A ܛZi3}vUw픝N-=s"|V@: @KONBћΦm# "'7iؤZ:mI9?NSx/IK$ fz%q%s ^_Ֆ4`-u,`p-id"ʡ ;exnXE U8-%?(c\W)P|Cu=%$]o(v_,2(dM\sշ8_K?ՔE̟΅~L26tͶ4kHA,/hPON"KRZkP _z`!lut4)D:r.LUOg `r='aLw7Y,*,HY"ڒ4 4=4t:"z_?ڋxVCBaٳF)hȜBMS$Ukڜ`YvY pX[љjN?; QM25Gon{Q#w+ﵭ"*i mսjbQhэ"=:7`קivY+NM٦p=׫0ԥx8 ̭PB3p;^CT*s3'Pʃ h*S]O, ϮiTvbk*p6p\%lA!Wz DܑHL\x>"W!SW; )"m^svS>4AŎ|Qe};Z4$ݦ=F9ݐV!o\)jgL\ 搬1<4ߡ0|B_KŞ$*{^ 'Jt@n;0:T51-VsUb >ϳ:_!U8nmXwƹ4RZeDcD.՚b !|@"7 NxG3ހ+5C^)ڨ=7zR{>\Tik yS,4dM/zEוi3Q6):B0u8~L?;p5]tjy؋lD!1kI䏾UK|vMP(v j)aqMv>,IǮ=&2έjV(عp횶[ qK oPV.G'V̷H?BUl~Grv`8jy2[yL4Sm:=rԆtr +9]7$3&[pfKۣryWeU (=}ʸVHީm+.or&lKF;@G'0Bvj T4n|xEnj2ͬmn* !"A=Ӊ.a/k^b}R`O_Ono-O˖,b~ dP-ܼU ,3rM\f m2=N?+1 \[Rz8n@npu;5I3di2׳Z37`Z+s S` IV'[R&J/}4`QioV7 ."=CAx_-M<7xt%XR.d{ϸgtr%9ae~[ƴ-ӋA%L5A Cy"3ƵEwMWȹK7EO2}r\Zif@[ݕ_GWsJ!~sU3]F3DS vp·I*1٧,<Q$(_ -Bl7[2!ZH.pxLjaJbNEUQh9k?cj:_%|-O(4L)Ĉ!A˝8Z9˼ad i|3?q,pvSxXv0;bn5gt rV8QI4tiA?YF~!M^M)ǡ[a|cxW?ϸ98 Zo'1]2i%p#M>->-}Y2-%&C 3#b@1FLh<`ӌֵ߸p-[A#q<3K3oh3mc-![4aۿA&>фU0ob{dvC~#579g}zgF #u=3 vHd}x 92-N<Ftiwd~*s?od/4ZOAǿM@zH3/4\usA^P78l(gcT+ h %S5˔ mL(W*4% jCKq8 1˻ :?Mk,QX4M]Dq(`VjcFdd{ay,?Znh`I6s|ꘘ-3Xy#?"k5.{[m!n !uwA3p[eПAӲ2b6Q)%eg.{[x6|aä|j[u`$DlOsxtʗv٦I1>l/ @?Tvs"Bܾ(1(azj5dz 6_SDc)brX7}gϧ`Sի#!Jȵ a2o?Bޕ.YNn-JBz~;3s/[SY'"<1^dxuXn|tņ<Fӎ aĹi,nj<ťK%lR^|N?9];:^l+6zC Jqz9>\t^y6ZݳFr%/lCϤS^"L& Gd<a"v%5e><DZˁ}!ueόAo+7ȫZ+W:T ^t6:2t7u?M gn)+N}[Aմ0*zS9kA1'(əi88eq+쭝=B/!\% 6R!` D/ !nzV+lA=aAM+[HɉDΏІ9J#VP~K97IJx0,p\5L3WeY|P.F]Or̢ SZ Ds`s՚Fڨk6ܮ޼ %4"%CQd9<)/g;6[+kmf>dMZO鼘Gx.ۍ/<21V, 647| sV 3A񭩉#g;qe 1@U4#wEďȚê8:]"Z2{A ~0_f z:wrIV8pl[P0.K-ۨ$JXDXSg,EUׁFMID{XX U2nԃ \PL(ɐ1n:+;+"z

LT0Xtcwȍ ̻PažrὈ%jmi BF9!,i3%K])HzˏYk n%uoݺjolHjJŀ@DL_b lÊ[lG$@^m UZWQ=8D뾤*ҠAs"F vS 'n.O'ca\PNh8O@nv X~T՜'XzMj5s'X./p\lD}<垀*1>)~=YZ)VE3GgdSB ol}?̎VBGu6ފY]7Mr*@$?}{NHJ[SaǣUШ{b^1U$W;]fxġZ/Vwܓ/7PGj޳YwXoaK~Xj2*?](Jg$×oӊN@kH 掅 XT#K'ByrFXEV_ND}ՈcFܮ]2sBL*Z.Ca4I0E{ŵZz#Q+i#wShXo>tkL^sl6ܲAyb|7\kƕۈ?ؼ6"xڠjԉc}SDΗi00[|Τ~ =qZ pj S!,#ofK{x^iNDJ3/j<Œ w|+Ȁn05_Tq<`5 ǧ6ğn۴c15v=&qrTL{fX j30,xVh=܉9{)0I,wH5^_&7?2  ~*/ Y@)~\b DgΈ\_ gNerPh5:vxz󁙰@S NsS 4Sn1zَ("[O[#$V_P Bhq>dcA`uxu9JUyy=o""a,v͉|7=2)kczzG/%!kRU+ iUӼhMO;^NyNhV3e /^&CCiMKh9x+ ?hĢ .<_@4 `مz\ }! !q ML6J5YKZ4r5ց9ʹRRL;{(_{5ĹxTc p l7F-J*/FsHbQoQ;# V_CBFZ߰1o{SHGx 2Lޫv˅~yrE>|Jԁ\t]'JcCy&W>}׾y:׋|uxJ1!eBoT4W#yn sc=Gqf+bd"alۍOA=И/1Xvy`pV/} txJ슁~<PW6P"]3aUi+D2[*(#E.FU_ Ăk3~PB*9/y%o8.XdX;'uia0;#RN^W3@ XXp8+zKUGSMy5q۽0sF;Z`0^WBڢ7(#-{t}r,Ll zY3tt9?F?ghPI@vHrmիtmoTE)%X Qd,[=ܞKi+kEnŖXXoykG)TwDBsMA~C@5 nϝ5y%KD>᳊UBaH>x Ƶq!'Tov09!wȆm#BT$ =? M?*!J t8`Yj,^C|tS!Y*xa%3>:q@{ œ<Qn{.wUZ.!<Pos#FxlŊ˔I0Z¤[|w].cs}j?bArkd+Sjy$~cVh]G%E=ied|qeEq0hʼnVg 4-8i9xɯVGjc[Z>ɷǿ%e/KޖJ@ o:tCP{='#[EDILL: o'HHs `ǻaua( HA᧱"swpVE?8D/XڻЛgwQ=qӹE,_sWXE0v]h=uUP%еevMdc5*Zkzl)ŚV/#Afiiqy=K(l-8CB94_ifl)tB›0$]Vc-e:t/?r&^}ݮ /JWĕ9I/YzD=}A*)_D𻶼=>5gCrT?0]7OšoI<lBrT-ԥDeN+h}_k)^PVߛM؃APzHt/㠨%/dJ*U0 ŃRKwwBC_OR]9/bS}qvig0/$8ěn c9:s)9'W(V'3OIX?G{!MnKT |Dp " @Q#HXF>Z O{WyaoNUƝ{O{d^'S1q܀ 8OϚ|_2Q52|N9^}"*zR @5=y؝4;Sʨ:㵮ob-J2B?8kg#t4:xjc]qudt\)me,D'nQXXB`Ls׼H+&<_Snȥ^ӰŠύ I h#[hV#2xi6eԷI}^dfZp끟y~m8Z߁H9:b @Ր-%t?/iݤ 5D*`D@56eolq{+ຼnƝW_ MrwϛgCq@Q3F7Mk #Y$ڊTLI3jCL!C"< =\O( I)y}++U_CXAܺ|Y |>bRVDhV 45m` F(Iї3w *X>E陛|0]~dO󻹔um8tVhVO%]1c!wV9Wqw@% >KbC<pѮ& @PfyA[ux"vztb]}Hwe' h -dUOuDdG -8,i B*=\fpɪ]27|kn=ҷ/sݫPVԴN`fN ÄrPxOs|J1rZzAF֏5kҽ{aҼ. =\DExe ^KVo5M^yVQG5,ă.t~lNb7`l9H&Á[hVpVHorpvKU?QvdO{VceZvR.T)ȿSTqz;oЄ:-=[x&~rCfg'p{+A0ej fm1i8KH,/߼ԾAm(4c>\{tU !͂{ÿX8q<nqn&)2cp%nN?M˸۸pR(yBFS JdD;6xp7P7l Ny7FK B7_%=Eoc[cr-d[ T:9Hj:E<cHG(+#RD-f3})=1 T3{ġ[UowZ~ V&6٭E3ɚ_T8~<$0 +UIjnٗ/n4DSI꜂ბ]1IU|؀A

nJ[jő2%B/ gMMR$\0Oz%{,Q4R{brv,?84 Bu "iP%?8|]WZ&fX,SѬiO>P~yQPs{|(OV h >) iu4T'Am0,ovA+v45X8`usK4d:(Şjs"=$*C/4LOCSY~%בҎ:Spa ޞFpcF[V)Ն 2Kijc3 ntZՓk4IyNr.90(߹"ڋONlÁLoE>j8)|23jOR!J_?+AJgZ,k"8wvnmre6~j#D&EQeJy$Dzc[$ Y I~ʿ>O9:.%VYuc\즹{&]ǩDM8~k%Y`~%NC5S{n"րۨcy6me͛x1c e2H9p Y!J.!U -?e1&KXzl@&YJlʶשz:N(U+) qCXNVz"_#i@[0$a :O|#?7At 4uH'DjwX*l_pLx/4*ZUjKK\.mxqe͠$9ϲit7C.T&ԜGP[̎CO' | /Uw3p] ʆ2v{sZpGA;ߐpvW݊ >&s8cYuW qME?]ċF$gBbK i96I! a% %{#]m}ՠ?fFR%I =条h:wf*3'TۤLX!DN͵'Cr*x4|{oX*e}DZyh@|2 PŕaTQ@uVQ^۫gqR'&xs6~ DC })uWF&Ou _r|?? -yI`"JMW2x UΏh.j}ނոW7,H v[/G/p>{`M’j5 "ܹ(g+@X!6Dlcx.Zzg{LJT&jί1EϚ 0M wpb[IN[m)G _wt폓J4饽WFLub9,CѪ/A-{ސ=xCd!I_!/g}Ǥ:{|SVk(Gr,mW֤t&x6Й23T$pg/BR]-iuGk[(6\Ne! l\+ tBgvV 1 *MΊ_Y'AŽ$uJE"5'" ]Ts,>OU"@hlJAD4*k >=d*%SGpXSZ@3?a Ӄ_v1U>?Wkf=0VAKǦҋ'sJhjb ڔ!bzkU8t5aETwBP+Qոdy9}Cl|/ڧ .:DV=(ЅP>t_T/3<hVNL`dز!+y2 alWtsܿ@ Ċy )|˃RHtfH?=!s{XˀPy4 6~^$We}?o!{`dhr|\jDrED"ܦA;G)' ِÈh4lf-_€jdY;XJ"d-KĄ#׭vwƊ uӼۀZz*e@K0L¨%}I}㼩F9^uҴ̳yUUG` 9 q7 U KQm-dux QlXcd]$ڤe͗(|!7K[QqcNcW3]-t_;"+0v\} <~`:; 4[|*8?s<`BaF-`ݤs[\O9P%[HrP W6k7`EJ_\Ԕ<P-DVf Bi.W Y^𗌑y d4Xo.NSAb_<,ǯ|Lj+-a6TrЂF>ez ЌIJ jn)ʁz^Oae *=JtcҠ6dweW1q VZHq#tnSbЌ@@?z (ɹ#EdD zY|OPkރj K` q}G"ӑ^4w8܊*CFeդ6f7R |Us"hZ5~ z'л3+b_BVgTݹɄdӜL:J6C fY!/JnE^Df /F> `w?|.'kE W,b64ҧjhIbo7og((?0j\POQvM\`y*B -/ɡR&Z$J@Ӷ= ̠EL:ILrP>&RE~c#9.98yOa;ӎX߹6i=MvƀK}YQمWTB2د⍰;Є}E(#\& /D3o`)q/6s)4aF*/I?YNdCO bs(@eGϡQEvb9K(Љ&X ÇDhqULn^TK* W2nZmޱk%@.5WD,s3Q ?pI%ʡ ˁǺ1c(J\pĽov(ZRi-+sCd`ۻJ~l"QdZ]bD2Y&o"G |k )EgkXx.,+D Js?gb`J|4љ*=!$::AtXk(فdH+ o㠶5ZcD]RPe7[7iUM_**8p(#qwӲ1MY$̫e .ds8ВWV+@3ɖ<6Uそ8E=0Mչ|Jmq]*/57t?B0`p-OWQ6-&'D"*^ *Yu8au,3N`BXr׼?H4KQ_NJ}G <Ihcge 1Ȫ[>: l(VE% gjeˆZ5\@pB.}dKl@ND63ş<&Db?ڗ^SQH)Wg.n9wbsDƹra\Xp;*lv??з@^9x>Mo$hM^8yS+om7bC7߿:{);fly*]E2Q`O>쾗-|y8,>dD.eK[d8) x<I_'}Ξ&i]ipw/ժJj€7v?Gإi_d:ՠ}e< _跧-Ɩ@46<8z?BĬuI ˗lHkU} `/-Z~9Z"Mxx_.9?ݛ[776;V'#"hEާ 6 lp.!x1+SWuӖWwr`P9@I$~n%a r5`O~g,wm;f(rB @7nGܧo<~D@&*Vwl7kjX@IL.E3#l3b,Wi*ןb AMA܉u~|54F]5)h7U54 EGSbXU~&SAO^d_f (ş4ײXTL#W?YYl. '$NFK '4ENpY\('ǨgUpgsӔSKUFŇz[z|gɘ+L*R3U:-SmQȦ TUIڷWV ml#+yO@5~OQ `ܴ{,~kk1 :cppA6)^栺-% X!M}LRcLPH Em(ٙ,dۋ雭H0a3_` {d5HF;.߈DƧ 2v~7OE"' &ٕýWDmZ}0kՙrX@O`ZFQvi b,{og-PLO~rSC'8NxTjYO Imso$ d.rQ8j? =fl &M̹'6q0Gi7bzoWa6~ЃKG%%  e<sߗ-e63m hͫ*V@hD #7K_Y>@*OV!> \Hʿ`GQR43~7m4t +8dD :^9\ 2aKS*a&Y>]H^,pj(՚|ۜ IຌrJTP֔٧w>6am#utW#w$)(>5p';m9dX3GonYC҄5/轑<Y{wJ%EuQ*6c| -@ RWKg"3S- t-SW4m7*%CO@1!}OW&w=L|>v G[7o2X"-ZپdsJ&{'tFfZMO/kRnl)%-ʐY MKG6-3a3 MŦm ڌd<9O$)V6АLU ` !xneoEjtNA ?x(#j! w 7#{SUI`w2e~~h XR?izT?+ j‘&>g.(aHN!ey^Egq1 :ƕlO&ίi_2M^~DhckUiWc(_U2le"%ÀsR)MGѰ\:)fSn$b)y<1(m%9~n`hTʲFș7)'8?ź07F{H&دڼ`\kS2n@fƴƃ{7ֱ8WOm/܁󄡞y`rV-YAJPbfPd#9<W9/&vX)kOQ `622jAnvCW%oHg*3w$_݆{ [ү>i7,Umj CZѪڇ57U}buLHܘ[~Z Hp[܈M qmon͛o vĎDC4A뺽9CS&'Zhz j}Cj?X Y3ì촳X?ÙqM #1+onHʆL¿ĹOwSMf+uMs[־cL,g"dJFc׀!&v8qQ+;WvpSs9?z@CㆃoifSM1F*G8%OA5~CDHtюQ >P2lܺfQ !n%e%B*t>!Y0ը $nL:#;A{h\t&*:dFEwjf1ёL;⨨Tk`m$J  8*Rw(5!.B`Ho9 7p^v]bd7c=5fl.Q3!&E)j]F7~T  ok$V{N:vxЕ^B`n(JV *w:$_]C 0:^jq Sw;"/00sE04~?'IGbtFW᰿,h z@i]jLRI.El!C@\?{Xe,F#x@ d' !ue[lUјYPX;񣧨&7PZ38l4q9EIRER!x`|lF:ͼVOs@n`eMEj(-QZP}_~V'X"؍M>el'Ida9e^ZycU^cy6 NF@j򤕡e֕(8o^;0_ U<]BE&?nLhm0\RqS,jobhl^2nLޝ-_eD2߇Щ%{'Q~nj*]C::soHyߓZ;v"|\\t]&lffanȜ>pQ m Qk?;00J ]&^' 3 ,Âׄtc8SGe{{?I(|;6y0R=r+ԅgk>BC?JefxS\5PI'Du 54J\:W^93a]LKKYENPe\:xaڜ Zs#bU0UnաZ+RjpWkR;4I|1s!Wф܄ơ~'@zn+2jguw/.'ȜBKÜ #( u,qCviNשU %% tK6-ŨtXl8q`ͱAI O($&JDvo 1mbTK5sBeϾp=Ne|/4xis2\=ng?#Ogy7X]2T8RH Έ7q%\f &_;T2547YBT n%ly Fi2)a88~%s~41c0x]E>1/W|&U2Uζ!*8e.k?F^tF\݉6eE#n7^!ID];_ITQ"EE3~bʺ_GǾF\8{{IrtRWV f_4t¢]Lnmvrsa%q]rG GLl0MRf|àӺd;d?r[ րR4Rvʷ[։?d?–BޛEAi ;f%r_gZ|O5}a|Xn-S?&=;1ai.MOXN!h̼;rwd-ʃ?EY]>< m+ltM7mȥ1"|U(?uUbs-_R*DThmf^g6`. Lsl5R{SvAS޴=lY2=1y뮯 %e57‘@#,:R_ "`#cM 簕ЄrxfFaBw~; 'w#S/.au%D (^u1yXَA!JsA,t &Ԍ? YrXzR5̝ x!/G;LqϷ ߉cZcH[.yL)Д^gY.ON(um:DŽMT?*HEu ɀ<)wSz`$Ud< !J Mq |,p"Ia%;g{+^ܫrPT~pg8틯rG5MACfB1o2mN;N`" &5bFv1 %* ] OɲH1lJ?i"3CTxFW&"+oR$Lu\f袎WC]uLbUO32n?ܚ;aoGZ7qrmLfD0bZډ3d$D..{䟶(bhG,δ;!s/QΥkx|YOS玛M X!F@'Agz)KH4# uZX t5,e@!aa1h:ye"'8Yыϡ$M{"LT~5N9%j?2ro&Yt jr*F۰˂:i R(1Vrj'v@""ΡtV!l3Ac7˜3w7d/d`)JT%8 Bxn_i*+50Bpf~{' O^}Chk_pE.H[3^ کX8{a8ᎊ`/E" Ʈ͹x)'VXw J|`<1?2 H=C_ H`A0u:03a-!`ԚyL-տF_& t3VCGcVտd[o8Uq)[62paŏ! Em r1U,M۩x~p50[c2u"]אY S0SIP+2:M $cͨ 5 ~Y+""ʎ/|M[1 ?B *)ZR Z>4WKì0T_4П'ҁS?eܢ@}Iu9E)qf{^FCKT$ydMl p򥃘B?vX2cv2p^ Gt" "*#yB5-o מ&v/|9-D903[ AJu,݆+<asRStjMq%G$m9MΥD_fYz'YثW/ r.ҭ[ ":_od~3u ! !e "a1]w)]&o-&\t,X2pt[6)3{\M!G4M^ϔw;fnfm\|6q@UA P>kնX'G&Mpnϫf4Ȝ8A8c3?(QʱeS' SHLVϘ*Sm ٲR s[ǒeV buVIѢ`K M\ͅ 9-GL}  k@_ :jZ!"BLiz邕t9Sh +h*FѴdz-xN:p\gXqL|vfc̠um rA}\ :о># /8=beK }3;BoOE29u*Aqba|;M(:r^ OڡtCn(;B q1eٱL9Jwn4v WHt+])(n&%vvJInpn@]KfsDsBo&g-բ\DbgxXv̈́5Qd#Ti$sm l[/opD:"jґ(A =x|ޖu fZE5Bdۛ$vE7"8KElRq<89ϮZQ ;˟Fn'~Ӄ;/{ef+$yO |!C|η;)50шNk0@̔d1ĖZ GE'X5`|QYFE0wuYԝRٜ"MQɅA#$u2\ێ3p*ŀkC'k9iԝ*^`qPIiC$ 2 [g{oÁ5MN?1;G{tb]B$~L#B6r@6 `˄OlK Ho^UR~jrɃ %M4(gQ-/Lhh;/פc *50vnARD5Ad}hDUv0;\pw {׼{QC! k_|<#cv%<DCxXJd@jטp%cf~(󻧖e-BRl :O_s3W /t8rUp9"\CBQ/p3`WWN.M ӓy 2]y4 ֏ʵ-0xoI0o wTrFքJn{ޢKܷjEa5|筗`wrm䁺a|?a4gI F9~2\SuZew.1B80͛2#$#,j}/̲+6Y(ǝ_)~uB(~zhܷɋP+UQ)% vd-;n5hgl)ethbho{ PdqEXcO.cGڣ_I$Ӓ3;678+6 e葢(jՉ@ܑ1E6*M ѭQ!w#,-X[!pM7 ޘ o?k؊9a #gx(>j,CFo%YiNRtvfnr{у$}F4%RJײN/ |AnjqCuILXL.rvOU=Wrȡ[p2R'[KPUeFbR~'!I8jCy66I(Мn %P 7 G 4{0ofP+مk`S4Td3G1dI Q5ӵ1C/lAD29=AQSfCUE=.Yn~{Zk~!ӾYpNSbD:|\/vpq+^}]`IO*EyLYp!Auib%X>ئ.\( &A=B;@N0hQŚXᤶ%:>u&v1ӛ@W{͑x #B>_jHOokemi #[2E_/Ds-/Kg@n^otP_%.QeSin\{|)S Ч 0‚ȟ725$tvyR`Zmh|7QFݬrr,8tIsiyQ:m*8N}kP< "}83obPKP7adXm1|DK a ʼnH4x$s&K( F B/SL5[זּV`\;_Yƃ,f q2%6r KnsFn?&\yta '2f4J+҅YA>&kBKzg{U+&7 k%}ynmޘE;q*`U ^Y Udoty~GP}-_Q}2kܯ8Ƙ*""0ń +$e|$%Kd1"U33yMHSx/@GF-d`/ZۊMQ_h &|^23\$IӇJW:[LkS6eM9T06z99{ r1ХQŨEq1TQ"bh:ݥC??hxݞ vCda\OenЬVjP'b 1ápibtE>C I1=39msdj>|lxpj%*$[;L v9F}քp`-T_Z}`X'z"Кkgo 3)Jm惑W=&0Y>iEe,Sk<`D{x-ky{yr3Jii|IZ:zs o%n0r2pz +W雫%2@`XA.9TR_<9!gk`~MR ӫ_#-m>>:hR~4X$@oJ!gOa9u8palVE98~W2_^1w6&4 FpmFRf!Ӓscu'Ǵ VXS"| Dԋ3g{.gYʟ50O!`z>.B<1xdy^GO!tq+9<ݬ:1[m̷tM: L˱Ӥ"̢![lgbQ:)=騯 boUy~q`4 o;ap]/ 2m퓗|(nSAeY/V@#0]óJC*2vv``_FߑuRMDvg:*|ؔ*M~B'">KDKrrnmO8g^Toqt{ݼŗZ44Dqc[GYH|: ~% *Q53xU$S ^Z)+n Kںqalc^Ϳ7R#QMоpb)hMM(aʯW[(m2d/0NiHR#Ky fi.2R=ER R8G5Xx3ȵeVm'm4G-g9d2#ȫXsqRCnݒV]2!ATƽoq:~.y 9$/9MEz^^h9NE:+0j -Ju&,@|pgp/y ]0JH{˫XGMWqzd.ެ%¬t ͡QA]&OaXBAf=xq5wc; EV?3h0L {BeGd=me cTʿ03RsrW[ sҸe @7wɤ,V96@|4in HZ‘&,_|"ɫG~z|gU_e|R"؋F1vuL=[<>xaSa>-]buPg)~Du-ԊAf0VݦH˧@g-ɟ.SxU4<ϛ29mޫbl+e2BU9-+IL鱨YvxpѣV$V8klM9$@>ܦ`}a0`nrѕ{'V 1b˫Ns;ZJT o: 7Hgq'RJ`b4 eY&3}JKWXҥ:j4Kp3s?aK(cziө$ȅiZ 7. 75΃X4W /6>ʗNqAzcLC oN3'ZlRQP8񢅛U Ǘh>Va UV4be!'Jz+o1*Eaf9Kt9%JR&j;q-Kܡc5p0ktY.KP;_RD?]RmҚo9]~n}aHkn:vAilNIeK_H!qt>Dj}EvR%r }Kx42h U'nll)뽨vֱEF?KĥkB7UtU18FJZW ĢanVZK F)PBT@cyPhqhO`q'-<3ꮩ(4 ^s;VS; yŭwHֿM$b|4\]Q_pڮ$IKԒ!½pv {PpΐY/;S9+1jܚ[sAZ"@dXȧk ?'#J?.bA&4C##xD_jYʼsMa9d2FI*ϋ7e<\=Q` $?!PF/_wQ&0 O84GPo{C~LAnjGڥ\cD)ad[N 'F܌*5 +@0PD{pM!byy%| xRFqr@ִGC&]φu2Hh`mۺ EX٢=lʽV onnb9|31dZ}cP;C6=c||5+l;ԴEik.=_&800Cx"yn_D?M C4k:HAr=y#䫈Z2wS>dEwIco9n1Hi39)UmS5ţbZSJ,Iߏ+M1DJݡG[G#3 -LZdx-[?[WAv .&Y 8/fLf"7}ҷ'9OvE?55a/M,U k =2 ^˓{*%%Em]-FDGҲuL>@<`n(up`Ve R"wafX?0[(īZ&Ėc9\x@g܊W%_v3xA -!bdq'$*$Ґn4vu鎟D*`Ec-O|h;3("܃"C(ƚ+\I"$Szκ{4pDb$j`E9%7PIEd#(x5:@ ߓ^Dvjm?qmƕR )S+DMb$NI8*~bm c4x x&EER5$ہ 6((J=A(Zh$×gZu26ŀe60pW}{~r)O18N&*;Z۸`j%hW ~, lE'(tQ'ۊxasU.I Mdts)2'\TpbԲiFp1/2q"?U!βED_ ~g}8fm'ᡧ,JFk9D"i B/;ܻ"D*.7=S*Z-|;f ]ևNdeTªp:s]y*Ƨ8aaI"lsbadgZsr!~X44۱L%.DU[tg 11g(Qp}m88R8 Q@zWS |&`gƖí!R8KBvKբ:(I@`Ԝ9;2ܜ D.U|\ߔyI7kZc',i[|2xG?YK; ^mPTAnIyK#m Eo(͘٪;o2W⬋.Cgg B=^6)ȟr}79CғCJ~s D!DHBVHқz֥r!d|O()VJ;'TP.EbCy{%UY`!Ui27r7@Ɵ5Z K̏[)_76畼|G'@N|Hew_ws"w]b9:1viw~X>vkxWۗV9dJr8*hΑ0DFO.{8^qB˯XQ &Y~GA rk?P4tFݏ=+4Z;^՛y>ݱJ=yFx|U@>Y1XUt'dQO7@kjc-M=8qx ?khdOoǬa1ܻS1Muf~9'Tm*6IZwq;M'cmUz3]ns߈hl>mor!#GZpFriZM1)̰"2j08T+/ WFڬD(#*1JꢆY`&K+Ӯ[>Ԟ|tF\wDmiwo0v?-n !>$<~ܭI ULḭ-̜֌ÝEi0鍖Wu)K sC_L`2oK.t! ,Mj}W!FŎ~GA>zIFn+iwBSuH*Pg $4RTK9U @%" ,PPY=XxOAT IԠ6j}f>$Y؄>`R׃k6( tH33uȓ[@ 'aNT8v rADU  y8%1ჶ|:YW /c_\$?{))/>rٝ6鸏W,9gf4kܘ1Yڏ؛s6Ą5hk=! Z9tp7RȂ?CC~rD] \,@T& הx7?B?|ud\Q`A*,rp$HG >f=>u!9N@yma-zb\3IEq egeGi*b@xM->,_.9 < aqc +͓z PK׌?A<\GVp wy5ptf}j65{ €ҠPbRU*~LZN;_^5e۠(2dp :GIVR0$f0ZSi>`z ;WIgsA)EP h1ᕍHZпoPW N_Ly)i툅8dEUA~7 GMt&ڟNB rY"e`iJB%F\t)@M:9՚3HsHxcm̀:.t"SȄD*^ ŏ>@] F95ʷ Oϊo׎p@ uWF>Cj :TwdCo؅r@|&r%R϶j2/>Ð{D|gBYCYyX_L'DQ(zD| "$=Xկ{!Rb͒ )tQF@fT|tCd=C*jgp3s9HD.3dB珈,v,g55b]bxXBӝruHe~SbS+LZ9{{/B2Ilǜ>֧Yoj,ULL`/7SAˁ56s=im}PVd nqzyKҶ#zb%4Qwvڕ[@X@Ha?1MmbLw1 B'kE[慙J_y~#Mȓ_x_ό&ei7X?b$^ȪF ]+:ۇ%?/)1lFJM^DkS=MD\WhXw@T.MvFb\խV5[pǔA485yqj%QE~c bnM/9J(IY.`Jkkyhf֖]grkJಡse.'4I;߽LgF꛼wڴ4awnȟix#ޖqB|mLS iuJuVX_hݎuO塵 Ik:ek9$?_-=o* Җ;L{قAswFBewXweVPƨ]ͷױ]=wrN8?8e2Ud_j=GqHWN#m %OcRH:GcG ;Of)sNa4ChCFoJe%c8_FA.р b"nq ^f vXnSN}gp<åXEiA[3fH8"m35E|a0˵P:d>GW[ sӟ\MPۊOX5&z ˋ%齈ZPR.VfGM-}V=8sE2uĬ4_6?$y{p\gW~Kdo K,QXj3~p]a[( DTBx TMfx ˛fI@]Џp(xOaqW .~K_&0QzI gx=ٛWy~<&*2k.7it*ޝ|Po.&0얏b4 ?1x_G;yuhC-eg6̭d+9w?FޡWj7A40BZ]L@%dHB%J'I5$Vh"%r"Q.2YQ` 0Ts @$idVv*a{>->WΊ%룏21F"I?/.(EhsOڀ=Ko&M7Fg*H%C1BQLZSh@4K-l{01 <ȔwMȭVs{؆+%y|I gky*F!.CX>K؉'߅u&@%M;};Լ6xw6 %(4YJ~LF18W@y]<'%JcfpVpyNh8b(>&Oe2DQfP $Uz[5hԶDž#(94b (z|T]ZoFeȂEt2͸M"2l3>{F{]zG U÷|u9``V}4""ގge'/y.'zp1:k\p.p)j|hV6N-%[eG{@cC҉q;F)hF>8o1Mk@Ի&E]jm"āJGu4HGབྷ(H$HJDZpcoq3qN#DUY7O2(V(`캼Q,b8VoVnʿV D^4 2 P HƠ455U~ lT*J8kZ&J'Gc/T)"b 9 X$&RK7𻦻m@};U_1z-y;SDY{2Y^CgykޠDádzF7q'.;eNeċPc)=-ڐx&54< j< UHIaHJVkgDc&f/ZCsSK4NsbKTk,^3{cIrpK9v_-G=M^r^6U"W4gs2jƏwfōo@U|3i@,{&G5I0eUD78oi[oe^mE<4pl_q$Lew)޲P~Q洵pjp oin=%9`8(& tH>:S ֪%XEP/+v(>njŪ7\q9X0!.ODH#3[>;!'Lc:?Y%@I;hESE1e?"Q? (s-y15R۞6j:O8HV}/"$^ \Q\n5@Xq.Ss uƼ0m;FFYψ@Ҵ?hfإ]3YH2B[{ Dikw@y ɺ0fus|zG kQ2VEcjYhu@45*Է!fhm30a8,0?XT" ^#kU(vؿlzdΞjv?2NnWc6 r}(<5V;0eP&'rdQdj.;_6"֊7!3kqJy\ZVF!1i{fR{wF6o@VRhz8*4 s..P}?CdGyN  `k?tQr\`7}wU~ZSAZ EPp9d񦻣wF>;X2l4SGEi{n2hfbZp+¸WGo"UÂIQ^QdBق  @Oyu+\2Ha*mͬ #>'-7lΙћ,3?YbUV&[$,+'G/s Hg: $TY6@PQkk֐Z3W0 (ڈ?zR1f_zrq-7bl 31zC7sCΟ%30td!2hS95"J$ǂ:4Q8o@ZRךFS*?<ca2cR?Db)-B:*G(S@d8\H'R}wbP+Ex쯡2m(rd upP6[Dq#n$}F~~*f^^ 5*d\X h~]MwK쀭ORIZ Wjy?[d")d481LZ$ۮ=w |- ʮhҮQO'#uɻ,nPofaPO],gVljUa14̄*C_L#X#0%Bc 'L\crwKYWC=z,sk Ŀi>]rp }S),&<dQ!V?kZ4L^ժ}@ <^']|FW2TEF6dVrѼT+D3_Ga{|  OlBYCrUeNS~Z Oc|G}T7Z(rS35&9c?a*sj6LbE9ޒWԠȢs5$X֟Λ=e>9fY` ęKڛ6ʦ%i%xΠt9FKd~%x#rޣW^0t3J p*,/+OA@\)%t\CgQG[fA,qo\1 2FrF ~4cxՌP5v(gMٰ+$yyqlݓ"]*`{3\vB6Pg^Bʴg7j F~@T,|t5O~1,,vP,~hk$G`7']\k~>Q"%,`kxiM =PSO{p%C.f;-V ߠyv<ʜ.DV"'|*G%}i饂ո4%Qq,2sDoϓ),8J^Mk)}!tp-ו q۞8' 3 [ic⎴8 tF&M0қ`V/US}>r´k\+Sc˦rv:ͳP۫U7Z>??BsO][4V0c$yGDu.2 CgW[ _ɘ0o4Ykj1vu$Z* 25u1tA,扦0ؐV96F}<"Le^Ky+i-# *km<_vOpL-pStMm # ]~@G6+b,t92. LZt8}zء$j W @3-3C}D䰧?bDObp8X5DmYq9Y9Gc}}TzlQԓxG)B)&%9<ޚ`tۜ* Uˡ˟`y%ҩ\QiLc6:4bk|>䔌V?&rKIB"njD  5DǜodBr7VϘFuywM@sD:Q5fy&83 4=^Y 3ŜYȜ.}ρ2g1TzA@By\D$Ds.ch኏¿zgI!u8vUH㦬`v=(D"$TAtpA^v"-YMcd,a#~NXQp*{Ba1h,3++uII`#]ͯwC=~WC3xv1 _|pUGIo:e%xu8v"d{ 2d~+bA'-?/`!:> 8}x=@+k(P03.^lQ(̰ ӗI[ ^I||{ЌJَq(rW!, *+,I "zr$J8+iakj=6O"LtmyN+1ɇMYx'@OGT-:H$t1US:[+G U9sHs޸iaH/ƒpG\Yj(8mH!+`/ cfHB07x팚M:5Be7C/XWIZLzHHn)@ =v>Nvpc:A 2ӌ}&RPc=ze E,]uq)Ȼ7xx *o{^E6Jޮ Т' :z[oX>dv ޺iVK`FILZ &Sgԏ|"*6)T FPR,EWQ薱1?>=tW1Dax DXX!ܷ9!:/6=FM, |YGMfov%~ |T,RyE![qg].pRU!@0!DCtRٖ%k,2Xdz!a(2w%H%͸ܻ*ui^z@5/P5o"+9 45o1G-Mb^1ӌ}B#&au/VR#rcQvB,!n:%( CR<}[E-qVB~QBO4a"]KT@Y- >o.21uҴZTF]؞-35U)[aSL5Uh%F:P(Xc͠48>UKoB:\4{R}y*_JkO#SM),1ˎ}Ɯ i+_K~>k&n,\hb|N\F6A&(pj]9-JQ"<$= Kba Iz 3]+!?k$^X ^]ܲƢ<}4N#D<4T~M20;)1$ax!Éu o@vPIHY0L^8oSܐs(zqD~ ֱvfd"kJ'\1'i )Ib2@wNTSbLdqh$iJfa ƌ={Jcꭳn!=mSp QVVȾ\ϲ]pߛ'bի~O4if*Ԫ nHO^)A.y~`VЄQo4#P=cV3K%kVQ"z3$X}(y5KpMYK[-:xYU'{._۩S;ym}UltJ'%hn9sZ6JϚ~$q^R$I6WJeWTt.here!=DlvVܮBrā}B1.PCՋY2FV.[K?Vȋ:*yXv%h05Nڂp%^_#Q/չKoP~'<헤ej>u\6|k7۫w[hzNl `|6 R:-`0Dl{%X9u4z3ꖃɦGqڎU5m0]Cϊ{\k9%1y_V^V: ǙIQ'rLfptE.^gH b' U"ߧq;Qtfuu͢Qz5.I2ܨB:,߸|Fё^p H6LC [|"]1Ww҂d%H4fbx0Vd)wCkԃ:a%r%Q 7;팼"7}z4n~Ka4BDR M:oXm*e4QҮhWt?z؆/&&Ny˷\)||zҶ#C;!?R <"M 3Gj39YG(\Qk :HyR;}^޲cn|{߸ڎ@蹲VVOɨn!WBqyYrT lr/fߦ*:E `~%"KC¡B"BU]esXH%ʜ_p%N>ԿL3 '_Y0-u? /TPXQ> ֏*+Z5ćU=jԗZzW$ Gs_gHwz_g= hOZH<ς7RØU0}vw5}'C7ٽ)~$0E(JŲg@L3R ^+\4=< pK@@п\`xfE/H,+Qs4`%`.Ce8o+Z,dpf۱cS3K[񤿋BTP8FgC\nCe[A0:Ԡ[aG8A/9`٣Vs\21)3}D]0q.`|cIl}ԍ7@"H ĎkZYs}=Pm?Wnd Sy8xWke%ߤׂf x|ɲmnftc6ra64n;+̃GD6^Pj'Ev5LT! vf `<2`ReVxkdtGIwt̚t\j :̣kq&.psZOE(!8VܕQnvN3۸W`3dl?~`&sLKLݯ0孰b蜐fs&Q$VL %yTRRl $֧t0N*MnBVwŃC+V}fJv h1pQ2ڎ4jqi6@ZLhqy.%ӫ}Ώz;v'sT7/ 5Or"*xZ4gQ(]ngb_Ŝ9&@1FMN^/̥q]|ё! .wƙN=7󞔛_9Q.(<^7g:-5*\,&b- ĄRg̠; L #/9}.`h^+m_D\ShJS"'.Η0!ƅ'Q 4ΏJƩS$@Яc26Mc<u0?_ҡ䦂]V x5Gk@\˼qe &0 p >G#Jkfܾ33I'PHnbeUӓs&dn2f;LtSn:G_oRI4g\[sئ/q&:g5zNrL {qM]*QO][.DtJ vs54jUbHEc9wl7Կ됬r0y/ 2ʂ myHtC[ E[n+xMs R>MZ?B)ni/XX#W)r_wB? ؐj:ɮD]Xcg]Vȶ1^2:8_\^}s~ʵdK}Cmjd۷Dhh;e3 4LtbKvMᬏw߉ v%Lv؊n=]~50@5AL^)]F5e2"Z;ʦ%xAw>ހ3cZ'wޫFheb=Ѹ;bqݸHek+rlOnj?G(7ԋUSBW-JWgݛই$8AY }c}QKq?0C<]C S@cφJ& ' @j!rp(py}]d.;csdmEGir씏à[P\2>ɫK!n 6gMAT>.o?ug[!3의pM`ݡ jEfřJ0!6nZН;tA6Hf\d|$0DT!';C >C ԋr(:V?򣛚yRFKa`cEolk/xV(.<)Y\gBNێ HGQE%4\Yd4GRҗIst,U@,R<;W0{! HxXg: dg&Uo\6)9(IZL [5џSг|2$=+9Jf1YBz9kXИEJc5+J)emvm i D/uGԩyr)iWxn\/gG T`v|7X)wBb]-Ne)"}r<ؙ)WUY >`d6JyIlm…DnW$s+UG\I̓q? 3DxGؗ]*pc[B[QW{_RuDФ9i3>xbȾ >6C6XAK_ ӻ`Z(rKvmY0h5#NKP(S\B xyxBd$ŠJdQD@SSjW }D_rDR:A=?xRy =@`t AZܔ&)j̜3k2{)Le7fkBdgV ߡ`N`^jr{(Ǹmg ԑG^!3=PJh;o"hx1:v@!Mayx![p^xԂBg agN€BQq.~.&#~JkoxEV8 r&xI'|NbeIk.hOqP9-L!iR2<؇qo#^.Ԗ<)poᖠFϺtV^&z~ڰ"qj+1WSCpB*Q_P0tcϩ-My8P-"D>FC 5">R2pH,45]O4Q3~zv嵖F?Jx` jera*!^++=Bn_XO&GXGhO] 3-J:AKdS! p5m:A5bamiZlR-7M<;fҥzcN6yv<Ş6,P`XVKk_y؀H%w)STxQhj_Nbql*mr[~/OcUї06$M+ tH>֤O5oɛGUN뒓p(krQ^M4$K0lpratB)mc=I=0F#&Ykz~Hd5^>!KV7W>cm>ؼOW5I1/2rZԞ;FF7kv=:)z MS9, ٠I͏>V.tk \J"A{8]Pmv,6%T{ oAa8(0 & j;Xie^Q/-R:sgJ/`"/9/v{u=5S\iw,GIˎRz4J0{ؿ*4@} 0`lG ԧ7aߊ;T$ wsMts$oꇔesӘiˢWR? &kgUt.әQ^HZvM7ČCẀmTF|/ d78KSD(.O/#$D7B<'U ڞK d zp o垛 *ޫ0:AM}d?%zD 06j!<} <~ &݉0Hat(nj_z-HgpŘe4Ţ`17OלlZJD[g Ds[:Ez{O$oY37vXNgeLkLCM<L:Cɍm[~m>)\.XI,kd}'P2a,Z=vA7uó[s [*uC6~4nGXSė 9F\b/ c'fMѓ%sw~sn\m0av QT,$AT 8ɹ͒Wm:LD-dsiPgmiURXATs_d>Iτc#k0)]IU {mm&ԻĂ7x&ne@9)輼FӢ:ah@ص*2ak|S_M9S,!ej5=1rN6w]oA&w20 kOEΚE:xJ՚#rݡ!iIiD@mmL:kjC'vCYu2ߝzyqr/Q#\M^^a~Dq$н);xεv _ 6TglJcixW^4AM۶ov②)w.dm^FٛS)Dku lXWC^ahTt Zc!}M$=$ p &XNDtJ-Z̞IMU!/v+234i~7ՙ> K:C JqriF~V.j1G~KikmNhC9 gbF%o _}wS=#C_JH;vׅǶC"Db4Su@N"vCr#"[7i"EL{ _ pwuQ[vUڵAdtS_ife1wPևZqC%cs>@9Alh6l NȠMz.~ ϠBT!GHׂ ~UH(L*{f?D\W0(ΰDMkOLoJ)0S'եƁ9| O9|0ĐGtԖZcLc".겥8X푥ev s?#I& {Ug"\J1Ak[E[>{v% Fԋ*q?{F$Ɍ]/7NADP."r|N}Ȟn{nT]0Ba!QMӞwHCʦ"Rr@iޠ4K 6dW%_s/K Xyڠl5a'/Ps$ɔ)B*d̡[uZK&b8</WQZp~};(>ʾ.J3RJ*h<7 5 &RP>bOuQB,go#qy ).MP?Kz/ex[Q&])dnF/XoX) sY1Pϳ{|8v PSvmkV<RjTOmQ.hoC; #V'$"3:Q7]C|-%~,mV+&GMSr©}:Jڟ-eKO!hmx/WSj)"eASk3_e_$ed="na~1KE0.r#2XCWU^ɦ#Y(' YOPÊ~_vʙTnaM5LV8~i @V;8 fHN &߳HsC#yVY:-ֻsoN#`F$>gn^M>ữF̀Y>4IA9FZ&e*@GGQZu,9UhaZ\2=?^Ljsä:y]7!fIT-d,ڙ||zVچ"C- 2 Y4 *Y>.Ys؁m0.K7gTr#T:r;G$v4uo>+v(In0=/-X'6utyp|],UcB?d2˦o~9;#¸%4ڵ}I D#=&]2?9e Zλ&R;/4H[[7Ս9p25/lM_~sKfw< %WQq>ٞ%*/uLTJ3 oޭ_6\.T]'nפ$0{b@n??nwL(2Z=Ʃ{jUY8<&%`do䱙vp/A }7D=6. m.>sۖQ;݇b\ ݪ^vap8T )(#Sa/zR-}Xm pI)ar;A ;׀ncYYJ&ݯTh2>ɂzT5vC$ ~GDT܋̥$Yj>izײ[3 I q:gٔ[o+1) gxa(9&i<ϯ5ܖxۚł:<{<֌g8Kmum>Nd~k+Swc2PKŲ!GHkij;}FY(k-3Q,=?c~~IY+\m38GRf\$jTN/X}uK6zR૯(zpI@H=RfO0-%t:K?3>bj"iymyFCӓK"m uvҋK4-fO HϧID8 $"%:DeǛms$z/qI|qѩ{"f3!Ԇޚc"~v6i~Fg>djUOa `iE+^x!w0u9 9C礌X($ |#Ie>LqEYjKD9P50 hև xqm6ی--'PֹSicpвH1TzJo3 /:%'=TvVTH8=Oci7 Jj$4N8OtE@xsK4 v|Ś~p7Z=G_b`RF)k"]qIHXn+IkLr qVw=~&b6s2}9阙"*uְOI[ȓ"\Jh1]ZM)yDԴq-|Z@m`Sx/vJSu8gM6L\i^t?zQ塚i>XOg{cUGgUW|^8QȽ:IzE O"  aK{ gY`»t%#+;_Q/rjfs6 ۞vA*(s혐=e67F[}p&:r4rz>dSS$<ip*T@JgTFyJyQ}^d{XBsg$p| ,_.;t=Ge̓ԋb{hU5ϵ}-|9 9"߯}DaEo+f Yj"r{86N՘NRgTn:) `$}8=O%2u!>} Vlv~i*Hف:_Y`skеVtT@(ӠW7_gLh<[勿@AlTtraf> M~[Azo.0;:YrW3|o^`rx$:Ywfj*' 5֯\o F+]IjZ֣UE k8<Y 0:I+ _SpiébpyCvc1?.#lhaC]Wј HU:ƵjPnh>}M & myHO*rt}W^<6* 92췿SrLvZ7|Pf,WRYLԯ0 ,nKsn OlEuRZdYclL4k'Il^5Fz gZ^墋lJ 5DiT";[6 nXmfR6i7GIԦJ mN׭-.Љך\c}#)ݮ_`<Ӯ{- HpjĐެn߰dHO Pĉ8C_<6*E\4޸ -ڛ o1{X>E4w#:qVN(dNެ9r6iJH׌xy7T>FunJхJ =K1Nj1m`&8'[duZx."Frs]Җ~l"(ł`7lC<;B;=GC v&o7zi|)x jmB VYp't$R.Q״PICQsCh 9N>stAה qCE# n^gv"B`5䄺84o P~[-OΥn&܍ӝ#8:2?vEٲJ߇΋gk:4 b椯zeMGmǷw`_imQ}ZFTk dpV_A~e4)lg&ųœ$]ұتgs"}GXbatT $kVQj}\iD*5wވiW'\!lcXFqfCM3<Iއ"WCCUy-Lp$5r!KZ݋_1LmZWzB+rrvu? kzSE**qI9bb˞?g95~~$!;F>4Գ[2}/c2a0Y(^|OZF )V؜_61~ڴݨk _$*WUX{"jЁFMzy}(eBHS#%xد,>fȅCSME&7*E6VkSvWD8CA3~ONʺz~4sR&`c[Sִ$fZnSkCp6 7?YF}J1X#?d[V1z Lw!rE}Ҳv \0Oy\t=qXC0@WM }xdP tCTx %pXo W7[n~{oK; ]BnK@/lzYuN?̇t/qw^jB$12Yl]8m*EeJR!|w|Y>DyLz͋RY2>?X1{O89/%`C5 K :r"#y4aw], {x>&&>'/"a_Ij3"|d"LԌKQvps-q޿Ea?&J,Mg Bqu5Y(rM^&_%X@!)n_[N[2%d v&!+b$^|ځ3N 0˒QeYwq-lbi' Ot4lk۪9N{z*߾iT#)UN3n`aqy9цe#ţ6#5iо C 7;TO50n_،?*GvO甥\.u;ZAI*ĉ$#y>Sn<]uӸl>'%zV^ k*S%Į66p>R=G߈?= U1診6`2H77~̵cKoPBF/%0>6E^tg* (,}r2Ov&4B,EP!7ӺN](> WRdfiАûA}Ѿ _VURrlxڻǜ"c*3t4*&Fݱ5;o֧:&.VLoQꤐc7^EJCþOgkZnKvS˟~NN;Jm*_a)|U3ot d *Djm{(i"h5zP)w bV' 6$m3Sm 9OLQ {;YtpXQ2S &+~}_r.\{[,ϑuy1k yUF1phꉩ۪]<|7~X67 L~`Hz)>`uuoKwchLHbi:)GU+Ui lXko+ ݁re,xkH4X}ai(ԞnͿ>]L+.K 7s/\r3[C8Z}YK+ ED.VYP>̧YGzp'H7T5nvpTo%=Zc :=? `.ٞf1>o~ؒ@sp Ka,E栟\ۿ[TM8|NcL,BUV-~ L')UKHk+8mPE@GJظ̐o~r6J7NSqt*BZSOv>9r X ~|~lo7_1]?٦(#S!#_;rWA^_z<ҩL+T8EgMmQFwUfZZ= HMEi1LQqЋLinYռA `G)nxt+I{d 763uG|ݼ?Xh3.dS$_6C^:9hFR]~ds*ELL:B/1j%a $1A.Gvպ!Q9..OVZ-‘Ŕs!Cݡ&^QMb_,T5kdڸ;ظO_JSKs62˕fYl.Vև+GtRݰ站[94f]T]v@~ w*輥~})^~}ky yU"]ql;vMI*n\L Fslr1a^͇t}rQ'£]&JԥӇrH5*ѽcQxĆKط#,f!;ݡy:yY 愔Yv](bc܎8  Aˬ曺 :=kZ'yKߺrrR~`pGPZ87#2SL!mzt2G`+â r' A4JeƿURɣڕʋKj9-/ݯUSdzn)dK"u4"C2 ov>?s<@QEMp#`A%T[tրYw+dLSkmÊXNҡ˒=)w $&ʜ57av&)%(.`yγ m.Ѹ\;D 0R^hT'Թ/'; hڡg|*Ǿ+Q uZѣ[/J;aK i˜f#kgaY#YU&meK ? yp iaρ5Dn"s{n{9F#]r0HgE3NXMK\-lM KJOHzZVv8`5 (|+>6eʪU9kaE }ٮ歬B y4^hաE&zc߆&zYw-Zٕe2n'yR}>zl"P~OBeNQܓ?E1 A[GNN!u{\JjW' U)-ͅ1X&-YW4$>uAp$^g ~r>i59i1Ǻ x+7݈[` "Ҝ&n +s0PM֩Z(j2>\b<[jco:k=Ӗ };˚n9aX_O/'j,%q~b-l#/]3|2WS5]os)ObkBdrt/(#>^r`攬W|OTzDY+fB }!qK%թ&\Wr<-ۡ{;g EI=AUn4spmw`rLΨirY8(i(*O.?F= oj~l} ,cujךL5HPNckm4R^4!P/Gǁέ]DKr ͙-X'߁xaR: 4H -hf j]$UA&D)Ю/WGb >4 "Hovb\iA+[:#w)J:M#ٓuG>pcYC[W$]9zWv% ՝YB#; gX䶐x;?c]F 9Ά(IQs* [dIP9 Y]PHbqođ]0dW'i'Ω78Ŧ+|n.CO &+>Y8tZ<9{/hO@hU*mkjY,׌ x}|fl 2U-ڃ+^ *NJ-nSҺԭbHvB‡.rtdfG xKsZf$^Р#\/`u5/f H* %k`K7| 2&}D]VqT2:gzq@ǀsR5PDOc̅)ie⾾ oRG!JzE9 F( H]~K MU>R3HEa|cxvsD6Ga# сvY2S.su\ve朌$2)&p,ܟ5,399`I [k΍dKtނ)icF{ Xк?vgDsB:PsWKqV)A|#]^Ĭ޻qUfHVK2lܥNyMfWȟߑUڢ}B)Ig7#a=imaF7Rg1qa6fAF~k_?߽7)~ PW#pvB}cאELT 8W3UFuN RnK.d(=h"~t(l71v#|6VExo Xf7gz]zo!%^Ea1d`(iUQZm[_z2D"SZTDG8 Π>^֛g dh:Cw:-]а-7l6\e+C,)^!DZƎd:?L98Ĉ]T \.[SS:oo<%0ΒR"$ W6ca\ْB.c?70ɳ\Vr9u/0dk-6QL6NOe&|SOa.{uǟ [Zbz!,cs$ Q q2gg|IDPfu ?ADEc+EWZKFE,H|u ;i|0XVNBr0x\V峮auJf;;}C'Ur0ގԃںuڟ+_g{Zͻ[ydliGpꤑALrh}`d$oZ7cs+/wf 0TgM;ש^ >kInΛzHT-SiXpoM ATg̴E"bV@c5o [ԭB2b< wW3潱1NYX^iĨʪ[؏'b'(>~XJA+աi>{Jvk[ yU.?DI;G^̖[ f<.h7^rHDƱ0MnAuOR@2/QR_(3{tRrJJsx 12=v'9H3.e@h_;7H:Ux;qVp=b( iFFfqX|Z0cD>?mFw鍰;ބ~yCQo/]4$Xu>!|M1>OͯGM9ȱ>\AEgl 9,SD`SZ)B>ьu9ujh5jShh/gjV. b j/,) xFQ;Q8Ri]9qWO;!-b+gAMQ(6Uk$` !!dlP6B%j1|]׼'CtPcqLCy%6ꎶ7%o_W^ȫ^['4K‘>鬆^9qH\հ[<6IJVg hފ_PVwYiI-,AqR|X˾7VB~{7S77JEB3$̺QxèQh H]cXo/LδqyDst$rVVc w/4 Y$Gq$Aǯmaq/fmyA/'*EE0n;+;*ەEߊyzjF^˯@b}ZJUKXhZ0yRڞʡB)!4#RS)2Yr|sf,A)^̰l% =JknwY4ǝcV*j+SVJ}=a8@qJ5WdUojttxJ# *˽2rd@-HYNGا̤QTr`TO'!:HA ?.l]ׅ/̈́0 6c$3T;H*[QFB %O)H>a3klvYW\}AKWG"u@j b?ǜ^5g@H17䬌brtq}06bT>&u${PU_Wr2GQe낙U("o+:<~`0BFx'Y$z Dok5{+?c1>|Lcc}71,ٳȨ#Q;3iP*HO8E9\)&qO#hċd`3r)\\H/'ⓣP7䰏3i0LK[lR|@ вuSDw$GXC:ϲJuc|E'7Th([*?Ccj؉ X~_NҠOwcj$ hGJ=^@q] *[Ff X3z9iXg<^/{ mʱt8W? he}hqЉKS|3tMu7! @>*(vٌt-7 øvcQ{یScH( vW˕6Am2P3vґ^\1oP薋ߕm;v֐2fh}pYNVLRqWB9%6CEx0W1Tr"l6햵Teb&թ:jSD_aA'}#DjZ zr!vׅF;6ɰjQ'en_g]IfD.Ryz7*$vGl*MKǸ<6qټ=FV +KN_fjmGTT@16`e6c&eZ, ejf_Eov׽җBJ!"sko~eH`h}x?A QaįK;a"6 ~P6h){ s`춉cV{CdDY+Ed6ba>YTtv͆PH&NVPL)N(Z(xq)I@&<%u:`I y߇e]玦g3[#۳=^O.;)5nm-;6H|#[}/i@30/vqplHHh ,@k*Ǔz(#"a9 |^01ig>>&_*6YI1le㿆;6Na'.mq'cp`甀~wB*+&”g`\^|HУps"fq;Z,TXW֤ڜ!I{#sτh"w-uT@*-Q&v7@&xO6nr<:m2c FlL9lL|=utpG+ |yURC|:[_ W`/b[c )\}[6?uGd b85Vs=Ri)G U5%ەؚ+[Y$A(aVf^6H ,])3v4-ޕQo 'dTq,9 ]@@ѫ.JZQ(E9L!Q'MBB 4K(aA &ik DݪpL\cb7Oz)-ڹ1W+oWqP@0a+?AH`Q>C9F>t&kDa"J\M ~;+qjijHErˤ[ZW Al#oj oVBY6g\aW#m%gzx=4cZ6" TM`ڰJl$pVk/ N,$#<"nM'Ӧbb,nh{407YW+Nmq=Xx&N Y1mbՋ* qub2,B[9Bbj: [%BcEIL}q @bg*4$ 4 jĥ+M]5$o(Sm5;768ny;ר&Y2΃r<]^cDo>OR'%6)bffq#U \GA|}W| gH=Qm%挬03mk,F2l /UfC1zR)_T)Q/b5`8P%׹I6mF*Y.t:"ؖ?5pU$ ׾wZ Hxo7Io+?n^↎_%R,m#Վ-Vk7RĂF lkYؿԚhYG\!zUAmʩ'n4Nx\{IjD'w彼y"Tgy B\Tʆkf{*i;^QKy<1,k?Trl 0=$&`IQL>pʰ)CEneIqTpO+ ɷm-Q\3 K'> cwe`j-{kx:;A$4 2ucXj3S#&oڗ=痀Q?&S~U`bD|APc4g?E`J <J/O7Qy\zBlxX42Dۈ 2y_gB^5Цn÷9{ H{ i<2V4l Eڻs&#w邻\L_vN&l-_ {[3$4@]TTz~/?bȋ? ЄIHo?*EO\ qYyRIH A38G gK'o_I+(8s3jԲ1~P}.GZ XK]DހR0 hNqG9NJ-}=BXShUf Jy+v?}ٗ9AüRww/@i Y1 oF m. IEFߞ䘭 `K/67{H7sz:5Ȫ(I23IHy0qβLyG2&jKs 1 (Xb(2c2jֆ= y2h3v޵C{vDxy`<.g{z!sHu`g1M9q VQNτ &|;D GVdΛe9n-Q푽zpkJ'*!T;3yo|lM}BN7Q&Q[ˢ!+eE=tk:&2T0F(WaA vKcqX7/bR}B#g/'R&~z@m7;M q݀tG膝I:$$0.-Ypm|{UN n3?.f7x>ԭD!>iQJX:fg.s8k[7Tѭs {!ffPP2.@|h4HB"@g+ V@fۉTcTe1**9Ih.vbv#}Jޣ< =TW?j#c}mb FTw%}Ť|1_cS,MYisr^V}Y8%_I:1M;fހ#pI/ߙ_-a`4dcdIV|aX݌-:WpHL]b]b^W%vK5c3ԿkJ1-kPD7*K#,=UeExmS<\.+*]P9f6PQG\[w>H`dž*T`uޞdjiV^^G.qdduȐ*W.b 8 H^UĽ@F9EOt(g9TkbDJ(Y<$Μ6"p8ƚ}?\X9nf0D9Ӄ넘%+]Mp`7%.\-/>j/3Eɝl:qFśڵkցU-Ӧ8=/΢9%rf%H#æ y@ &q,ӝL.H1 UրXD|چfv,AXSGloZ/K76FϯN *YF{h|~*!Ħ,A$Fq(E<ߦ^ң>8MCӔ}d. JD$,xEU;_*y*p&ʧJ"0G/S+`TT("ϤߐsZo Jɨ@px䏔\ )˓AMkI3| =ү5[eub=-ǃg1 <7 7b #0d駰 r3׆I,Xc nBڡQ:^0h{K385*i"Ʊᵊ+9?iam#,4`=pD0fȽZE ׄV0OYV<wDϸE#[rI : o.r\ zyEg,}e=4^IE:3jQgliKI^ o{ 8)z Q`9ܵ{gA`LZ"yQ[+~e7CɃZbwtmg :8dh-YdiTz3WEe9-A hD4y?gٮۢ XBxM5ߓLd`ѐչqedQr6rbVxG868QhfOko.y{ !88rlW ߣ@ NP&"nQ~bp+LRlFM]f#Ut9aL7[v˸'g8tlY5m{I<0a7;D87,*KsBB?ffվ[Y}qKpҵ j:Kz%3+#%G:nFiy.Cu(em-ǭ@n]\]ĺ!)_ uaDn\5n|}5ugO)}o83>K<p BE-6`AvM7~'ic08^TB87mAwױ>ԏI+m!ݿN3+_V+ :@' }e*PCw! 5bYCtmOr2@h2Щ<]9)@W@_<:ffY]įs!P&!,Y40Ԙ0 ۡ/߈>\>GxNw>E4CBY\V u[yT%ȃ`X31Ll۱x`K?4ĘhHOp-xM^-j7igo8uWsl+?^{ Ɩr+0:,ח0+SĠtO 4[<@3 ˷d@5QŰW:~z~I7@}/BL</X$ N [WkfOT^@iW*) ^~VMA3~M>8cNTYCOЯTS *֔ E:U[54lNP̩{Xor>0jbj3t p!hS0FQEZ+~L߮E@ߡ1MȽdi[fP&T0+#҉qXj5/_|X~f)AW@5%U(T\ O}ʑ8;_gi)!jm#QXOZ; Ԉx`DHH؂jf 1OhZ.A'bKUI.Q(& ((*jL Z#T rJG]ݤl #Cẕ.CNPcG=)'Hbpje64ȷIdecq;|vYs];0=~({-KBn-GRjYI`&:n6` dj5<^>۪È@B j1DBBفÚk\)5Xt^u7n~Ri T[pzU`Wبd,3ƾ&B+w4;tΜgx) f<)]څmG~jsrמHp0!fj+4TP7V*&]N ),4 e>o[ ELLdl>2&,J ;j{6By6[GH8pyK <]h#gu'GkOp! sV¯Sht)шpasL7~(V{d'jb]%j!B"KcJdPtH%yPzl?jC=Q~Px#~,NDkox^g<sGr@cue~%ɫQje6$A#}FbEdhvuʖДJh\ {XHt^V z޼mU612X a&M|!i7dSt&$=h4o,EY^ѨcCo8[u FF١+N;}0E9o>o7pHВ|MDr&W2lʔ/K6' `w ¨4P?2;8_3vk DpxtqD-AGwa0I!ҙϳDqQ9k͵GlPcVceܙT+OOUV'y>js!j%K7RH^FT:~],Yt.O=y\D咊#ӟz>X3oZH!S2ΩQ][fT\^)J=+ uZB?;OAMJ`x5bq`Iaűh\CEFT G @1MW4r TE!@ UQ|ݶOJ/-暨*ݖoNHFUwD,;((ˆO0LZPh\_酀-WYb*K|[FLJq{YCzɰ3d3CbzZu!|S#iRH4,g}`7݈'FrMPYU#UVZEbƈp(.$7!Xa-ݏ.lcuQ8˼< o~tzfiC552eճJ 0  _\v=4{ZPe"ʼn Q#Tmj̀dP(W-K$w]6Km\:n-V/IIK@NU9[xkӷr@5AeG^ f" 4)0NJ0@ y) +8х0Dz5;5HȀ"qrlvF2բ:}9~j^k57- xtn@K E#-v4 ՋO^]1dӴ*?Ynw'?]KF `Y.``9_e9ȥ鄼tp[H=k?+ziޣmiBsRWYfH}cŋB|)̙d1 dN1JoͣrzY"2|`q{'"]j>ƞ0x-_XOPV7sX|ωA8! #DS5Qp(?ʹ3N񋙳-ʴ 5`8e?y>T 4E:m;Uv~fՂtjKMqlJ^R^; UfؤksEA Ix tV'}X9rO\o$.f۸7P孌%,+Ie)inzȚd  S\N/sHK' Vqird#Atc)y>l[dpf#I٠0,؍e SUCc~[0e#}v޸s_1%\w~%&g+z5o[ҁ#Dq?l,1x%:t% q̘84ʩ'"O /||֖W$Oή&8b{Җh~g$90bOKh5muvݤ@^5lT5 ap1PɈO!&Pt:y_\r}t_aDWHU >-Nj|1T4 xܦچj0KFhqa1Ǐ/""م- 7s$(mț:Uo癓k;ת8eg2-`HolN^hP*T,ϾSR,,.&Q+G}Z#MTZLӊ\divL$@=Iywlvtb~KwU5fZ=<ӗW&y`m?w:\xjl4!n?'xCXB/'_uq*xM>2B 0Q&<q(,6Hq\R[ }j/I˛'nղ(F]Ԥ[Ŷ Gnۧ?\!UЗDgyHv]-[8c͢cW5/ o7o24IDEJBhc>1Hd އ;+s}a^;J"3QsQ?QKLQ=Yr!moђ@eTlKMa<'d>ڧɫO.Sۅ7H^g"إn*wrZb,NFv-8%ÍpٽQ)t'?f=U.pr̮3[fМxПV|] ]sAXjK`y {zkۂr@DG$ι" 2P a{>#/ }e$k\ս2l8eHնrny@W5/U;Hɶ:>7 5Xv0+ "}r)U Q!^Ekt":dP"kuHZF&I4QgK` ۨR،t\?S]%;9riճha7$ԁH0486h hB" *uyg{Pʡ.wElQ[6{j5[ hl{>#(:\}((X=]AψizZ’R4VҀC- lX\4]5P^hFF8ÂqCPa+_&ɋJ\|/۩\!T5xQrI,6'lɓ=S#ږΉڊޡa+I܏5 8 mjh._Ν`Hh^rd Mgɲd0PQT'kj˽1eU C`)vm欩\J %."h8wǙoV%IxcQCԄb̰At\ x]4X{G:~JC%m2=?Zz6$ sZp:qr*e>Dʴ, .͔NC%S\xAf6-F8BxF}hA}KGRweɥt0;sOJ* $,ɥ0DRr%@^Ӊ݁DaQz\BDb9IګԜ6Q\dtE$^% 9U hj.>7\btp^ "uV1\ WtDX],l[aSDhOR˕*a@A6Bpp)_/fhӊ%Oimyߍ6'%b))yk4,U`q4`m`Ucwe ɞCK_!Yd2˧fYy%^+ҁiAL` LR|p}ޤkC9)j<Έ'HG?h3q=lQ* `(jY ޸ !Rx0IՒl*{7+ "jHlqrL#[ y Oo<:R GHbS$ fJw}RY$<BHA e+':PO>&Bi/3i\t缟FDq|!2scjK uW>t׋c[.U@A,힗}a—5Əxe9f "p}{9ό9댝Df{*4#U o/iKv- ϺFRa$S̼ɈvVGVģdg}hta-O$Bx(YM,E@L$ fɬ|㼶0LtKQC8G6VyCEtݸ]1x 2W"ͯ;_ s[O8)v'ѩW靣c܋aI~]%x&5+~F~u6)6_t lboymP#uZ0mFgRm^FYO+҇6MsG-[6Y)0V Uo5 cIMܺ]N;vj˓+Ng[LAf5{vtVKVq DN:fRX#cz1V 5pBˍ!'_*?W3fu9C?"C3_.d*(ƾ#cK g,-) ꩟hՔw4 ivu.~ZLj+AN籧8jE)H1EHtܝ?o_1#nqTu ZSLssT%AtnWWGW7e磚rq'am( ,VV1|J5*w&LԤ%z$Q Yvbd1-n^mX" 7_Ak*Bph1HcIcP8j6z`RVf8͗hQc~x7TC 26X\pkؼ4zg亄ΰש@ޕ\>^`-(ĕovsLJMP?Mcw̒3 򃿇SZZTA-1n=HIPߊl*7TdNF #v-8 IuGQNS,g^'!QzRbච3~0l*{>oHF&骲ʕӔ.ேxW JN8$ِboG[; x̂6.B21^H5LEҢrm_F-Cr5-Ц^^F74 QE^@IC 4kϼ; c[f55 vz,%%& ړ6\k|m_w)LjE2Fx;F!!|]PG{ݺ^) 3$^T 0cEWѫV =D%klĦ) uNlO]]d<7'{bdm^oIOz*xw? 9+)TSh˝/Nڋ7t=v.1,y1G0!GQ1"'(@{֘˃e$?0L$ݛ "vWOi!@i"L#tgIHˎ9r]J" DLXb1ʝk8ܠĞY6(sI&, rQ[PWzgOi)7i3O'r˝MX̍F ;Q.k01ϓ Ey@_t4~!qJ[5A$nq&m*OYtfhO{f KWarD_jӰA`Ҡɫ4sPep^) ZoIZ" m&w Mۨ^Lӊ Ǟ". X7qmO/gWA-as眖x! .A$04Sӝ1C+5iken[좚̟ܚɢ1{7d)|F`SgN>B|S]+ !䇖AEDM{-KIi # [Æl/Y#[}c<:,qqlYu7;:8{Ebg+ƮUޞ>; ~=8=Ni ¨F&ѠdH,X Y>^,Ҩ4jo PӚP9dҌ- ʢ[nb XGmZi.Lzƈ?Bqةm -4ecɛ2v͈ 1˱qXxVẌ́AX.[QU{.1ZjP{۹[z)F{Y'uPAU= dYĺ!iGG ;!\|> Վ 5^ +y8ou8vQ6=R P{V_<9$M'ֳʦݏPA0*% pyynK)Vqv=ݳ\m (q; hX/. es*Ii600STWDE5Y9P!-t(W0ñb_}UM²[^x ܟ5 Vګ9BD.[ڦ&)JL]+\ږ?|7h4B_WF%PZ߉-93{P4+4C,eQZX[Ǜ1HF8"a:!=r˞\asdp ͣKV ,dJc9$L$=s3ͼc_v"bbwfv~P\8o x[w/YCVlo8֟'!J _4ISLk)|j꼢-H8uH D>`sƈu?"tk1;HwvҦ! `mxVgm:$TUy#~ZI+ٕ`R;o5QQD^O0mt%*9ಬ>Å\~уuJgb'[P=qSjfE~$Od@O .t-0A76ӆx+TYҫr_W#{ UעlQ >yI/uxځްX ݦR ?{3/)UqC 9"N+]/%S6Fa^fϋ!{$U\}X`&ދID72q !9Wԛ&uaC15튋pkxd3".F~' WC7'L3uvLbPBY4㦥pf;R?X xVѵzؔBjOEAf0 :Z]\FVx= 1Y_ 5+" 77z2M+a%ol>SxI}^h;{)ȖTΝ cwVvb1*|rHdU>LSVwuϲ:샊'pX4A%2MzA 净ܫ;BndkX,aFw>LL h^>ts7AT1r]tժF#6.;MP45ͭlu 0 **[VZLT+!@]n$9m"|Zeh]l!`|n/%0 :PO:o>Zp&|W. F,`Z bCVƦ=M}$`{SkafR: ryP=@Rnzquo$wx 2Q;^qMD'Ɇa"#gS0~ 0rCOW"FN>2!\ |z.m&$k7N9`zAȈaDb#kX-JtV(x8`:%BTЌM F\!4ql|mӡ7e56'HNxƝbjG sYXnKvzaGjc*Iq4tC;8w0\>{,5vP03 Vɹa c#CNr6ދ~EmVhz0hKB6kxY0ZDnTd%RSdQ9K#Ʒ1a}{YSgO]Dͬ[6>o=Z,kɛhoA=s;;MD6aA oχbNe e=/b-WꊈX>BK̏GѶ"qNjjM&]En% lȫ:NRfLqCKw_aqIDg>h(O/2RH5㯽~Lk4n%nU25`Fe6kū s`gFƯ\ mFHN=rI޴'#v{o=RP[gpa#!o1T!\#yaC? %w6qz䔯f ;Pfs1%z!7olx92Cu$ 㨵;f'@L8!2ti_[mYP o1?b/LD2a4F֝(__E|+u"aj.ՙu(6.٥dP9@ytNG:"P9S;Ij@4e2/qV6hNv)*/j6u1V5q@B hu3ϊ7U%\ dgwZN/=&{I'K6SF`2` &Uf &$2[1y&\4.*O .>g_627q _ĭ**C))?w%u@dz*ݨLe#8 +WfLL/-tikY\@0>$s>;I,u;>Čȑaf Trŗ0ZD ޓGu$/z MK.^AgST+6'Eu~8 K2Um t|G\7qL]|uC ls@`>` 5]g"X36 N|<zŪ= +odmKQs:`ߛpmKcDG̼@=\ N<,g󤈶I9+g`A;:z^$Iq{]13Pլ5Yj5OakoA?CD ྤ2#tz} ` xMk\RD|huw#xH~)A[ae9bŞ)S>V}dYWyeES> H:#Y>^ d$i ^q!H]z~۬fC~yHF 'xUuk_ jɌs^۹ei}i0*T^v#IG"xBSu fSs@^ }v]l?gX%XIU ũ}qgfT6F 0*_QEVT.f^?/ \!|Ո@o&0T^}J( &!."G9}<9L3b2hF"WdR~e͋ylbB:I[uGzD^鄣H,Bw!s|"ӹH)@'M^˾$| aJ^h_U5I{ߤy;^1RTI0bD2\7wE;N`~"RƇ3RbtΏ`(`rI Km!FxJeж~Q*n&R,T8mBY SgLRקbadgVC+z^rHnGæ_qlBo].7 #:x1 .#љ|+&-B hjBRYu#,(Q&HϷ{>ǫiC % &P-e(ťJ(sur.%NAo;-1_dV_{a3hv3|vMp 䖤Բ[&s!%]̡؆#}5D1(\~21<LMY3VlEUhvM$4T2y rԬ/)/,xÚ)*˔Ēe?d/!r \4$#K:Q} ~NMVs;Jrd,J[Dh2#9$I4i2[Z5,No&'^ծ2vPc(uA/ˆH @17GtHRLPtmgI4)^Fr{Zd#l{.PAr0 H *o  יSgPtCȈYPɵZ50h*GG<=Q7b,*Vhf'fY%2۵@?ᒅcqV3oB+%n|2óMU3I1'rLDŧz,Op wxWNW PNW>F$tI/lJk. .!9|)\{P@N>8db muw>WP\ў p~XpGIZ1;_m, ,yܨezsis_c[AdZҎ}u#B֮`=f1DrXu#{P^,Q 8GNk5Kz#hckGGLX쿅y yu >"2=Fpv,hOI?]FUmwIm 爋_kaLKӳq0;S#$E @~)w $d~%GvVac*rE "R}9T1,-g&,[q-L)C[*RoyfZSRL2Jr0SNzWf}wػҌ-U%фx|"j21x0ݼP<%[y݊ʦ ;~xكjʼnfWe uTkFk5gAuAJ7`ȥ3\hUfyدt|MY"8mCsA4Λ0# .5NZ~6sN'pz֔BK&NNm+A6y`v EԪ̔}] 4KRLD0{Sg.!ԍ6ӟHM:$)H2ISrl#4asx^j;R, rl:8AwgGzlYdmJ_匹 V/ՅJU/l.:.3 *q}Op<\?z B2LBb$K>R.L3Hh  _F{"IK N'ByR[S?ip( h[`k /$Ur a>q;ҧ-d)'N]k&k^!U}`dpv[?p]{X 6j޶~yN84C^} ifQ;>q"(U6xdƚDg>$gʊc#+ S 4 [Kأ'pa A&޶Gߺ[uO_&BbFK{]RL3n%Cgi<$盟k˅=5N狘ΰ&]ҭ8NJ6H͎q`ä<Kgȥa a*HˏsY{To׌D.eddJ&;FPv1g Y4ꪓZɐtF.md:3E $nW"x Wef?+ݗt(q$+{j Lз6 º[%׍JZ Lujv ~½U/gh,hSjX-HSﭓxoVv3lT?Uh8zɅ}k|Zc5_kkgv;Jjs-5g8aS] 9Jlfz@y0FB0Pi_}g H1qa90rOXIv"$9gL#3׽;^!g ک"!%x kC4Lx0:[@fܶE&: 41%/lR=fx y m(/AljvBkϙi}ƛu0*}qӖv~[6a#uQXpY}'H"+bWP(S 4D^3oWY,'V摤Vk- U"vDR.;fBN1$ͣ Q Qj<)DB\kmlokۖZ'իn=CC ʍrnqגA|AZM'˘ggDgXXDž(T_^dsCkh}6 BlR$z<XcBL4*\k˝T= -9:3&C i*k,oO=;6,R(7 |P1z򥡣Gm ?<X{*]{(ҸSO{n+[&p qowމj9IM诛'+l֯O3ܹrMBoySP:b tv$˂m( }Qҫ Ĵo NУ"NbbEnC˒F+u}cj,D_:/[&8 NuSa„ܚVRȷpS ]pHɁBhٺK!D8(X;HF[3dTE"OPPA!+{̚vcRb[,788[Ӯ+Z: FMĭpG@z9YUt(f)~Jr/ Hٿbwm1ݗc'c4̈oi`̅L"@~"xkijl0r**K(%N !1tWv}oϔ㫡 uYz700H-U3 uGI|SB&P-xgxhpK֍̼^S|1%k9;E[VਫN6Hd#h]N~-{z5VWbi⭯<}?ft]:Df&./ {Drf_~Y]x&3*Q¹<`%[)lAea`}NS7@nω\r#oCvC:rxϫ',:ɃͬQ76V '!y'\>1 |V롢 ;<]/= ~ <ےf|ZZZfrF +束Cm&g]@թ}^VLA(?\S>0c]?f %U7UCvB1UclV!4ŀwsZBG t?wh?dWd'`[_FiO4 BK¦I2?uk4VQm{EJmCX@#}U+Pdv*(ĩSttDgk v@( JI~=(enoNyaaHl N@@jm4,#(@{0X4,}:P%r=cwۨUSA~Xz1/oWۭrP,OekxpV7 %L8j|5~r"k'd9#&cF藅UmyZ[͉M*mݖl i <z Aq$:<3FOFh#hg^v^;#r }QGpգi ]>紛.+Q=ftӱgexs>88[[&Wف==.%K]z#n(=G(4@)]h߃>k3A?ibjX P; 4I^IGjA@@NǖTb`I6MH} |$ >2"]655/xV$.c9^Zxy&@fO[QsHU|~|/*59iRk`ښW"윿}dܑp5!"Y=Tm ‡3B6 f*%4 N|Cz*0!a9k抿UgPer9-ᄘ^c&lw :e7I BG4~ɈRgl ?sVIiIF'Πqgc?C0XzcL>[8aB'ǽF. K(H4YXrZKS.L{MbjiGh a{(j1V=\E.H|~: s9Kcǡۉo03XuS*ߌG1GT`"wp=f3^ssNY]&L67`#QC`2UTnF SyeoY铆\[6/δgOT4睎\ŒעSC>Pb(\)Hfa&3g"uؒnw7*J=czE +XlymsD)qt.ͷ @385YjrᑠXizvءx: =}<.?{oXɦ *JX6JFw\K WO EĮ`osx+holx5.x$l^?So1G#dtqfl[Ks`,`f9=QXZ4vTH+!)Yɼ|,h[4`چߧޕ, r7?լF;j}b# 0ʣC9C6IdrY#42zc8$MAAuz`C@(S|=owX`fV)M?GQlÇ[@q #RfOPިM_@_ Mj~Rk2>6C D =Ejĥ;j#wkIyhcd,_kS2:2+\^N@3%? = &%}1y*{;:ΰݗٹnae?*Qޚ42Q$sA̯Np&H ʭ(>[r^=4C5z)p>z lDc5pjPGx|ǤGļ;bfx6zO/wzD_W qM#D>3+]z]X8[v]#v=k3o$lcXbLzd$xu{8"B}6;譓a=}׿lm$_J<5$\V\dm}/u!1a_͙h2) -jFAkcqTJ~2BFP^ƺիQI)S MQ,N"At@/ ;~lpEZR;JdoBb$ <|SeQ:f>QpxuGw Ē:u YّZ9-:P/de;.[±F|ǕA^Χ5Z+Q b.(r9G*_l^8`4NA@ x{ҋUԏvb~N%he" @ d߷x{*A$dϙVJݓA5`!s='Q3Z>ykVbZʫtbS5WoGݜRg'M}%Fy) ;(dpIn< TD\w _'/dY$pqD;ٯ3YR\^ꝹTm4E|b8;^-lfB> ɸ˩~U+M\%`A߸||x6/Tv!1PoƏ[?K ٱ4Rz+B;g\A%Rx+쮺/"nx!bDM4: xO V5< x'GFGͿau-zLMi+u{Ǖ,Ì Qvy|_Vvqm'wiHP!Ť>p<5=s`cyyIXcd5ꖸw6͏M=2gSJ6'iesSFbemzAS%+waH&E0Ga{=:紊iPLk#0ɽKnKQܫPS!*!ZHqވ n"YE`J~2)W Ȭ?(/g[|0;tnʁ|q%Ed!EY|+v+g2c<(Akts bS(4h]뱥2@;9W<\rGD]7_۲+<$ UA.h(̸GVs*4Ead\_c3EDH 2iuxO،VS5#]jD8FT}TD'I ]ܸ՛y]*Kiuc<`}AF/Dm ][>NPZPؽY`M)RXQ8ӟ{5-td/nKI-?'SPF^c @)K=}pm8⁎s@hY?t9tۑC^$6"s"7uT.OEGMb:{;NtAK66Nb+ vOf=^NdP:uS/:64(Ј+,^+m_sLkD -#EKLZjȐ, ;|tRz 9كP-yܤiou]Wjٱ".M,=\F]! )eЇ0Eڒ'ԩELƢUh->' mxTu(o%jxN f^E fu3kD8cD܏$DXU݀NsbSC`i_P݇8ňP=z=+C\ɸaif["5>fj=T=3P!Ûe"n' ΒH{d0]E3ŸۘPsS+ n1`Ƞ;jѴk}Jmv &D xoSwɔϭlwZܨT~;*c" Pς]ub;$!Z|Wk@+ 俢z8?xDU[8-`M0a9&$댿x⼩8K@cPjUȟg]?)^n=3w$Z{)XGI\ #}:$6 L.+F;ؚ[L\#3Z8dў1 _.oZL=wcCs|陵L6MzR[$G#t Hvd;Ib<"rVUv;m>bX81v< A]OVKI) QoG a1 Mc =㘌{k M8kXkQ^E8!ǎjävX>H7\ZN_Gd:b 48NLŅRՏ^]|+5n0BbLJn>2QH{>nQUZ3u;B+mnq4eE¥SNK+#scX?ƫUӆ˩#Dĸڡ")g d%52i;p }V%i٭9/??vֵ7Gɮ`bawU{̆*1<ů j;BvY{4݀qAStߢѧa[M@LMI(-y e10F4o8ܱ{Q* 'YIFEE}fi;辷iI2TE[BmK 8)+r7kK6P(wC.XIFNȳ:^fe $'_9?4@嚯)ԼmRUs7:J:L@J%*0_s6M٣rˢ<!Vqy\ӹʯm}h鬡e9 Jȕ'!ᜨiK&gbم`5 EF#G쩅fDF,ڴ, >-ѐy&-8uJUhQsÛ*i)塆l}{]Az?1` KU 2|K"Bԗ6]as*ҋlEJG6|Da,/U"acJ8Fc\E6i,PQPcl~ 1IzoFg<)Yf`MC~)ͺhz˕miY&א(gChCO/i=]AP&'Kf+h XׅV* UDž&w%#+i{akq>sqOPF%{[E=_I h;8+8]|Ńf}fbQ 3gNսEwñy2Ѽw;%v rsgu1-1m~Bm EC kQfvԑ {V;Y_J;yR% ,Kh+O{<{4&E8皰/2nOAg[#dqhqF'unk!p 8TXq 'E$iˡi2Ƿ#盞+M+ ԯ"z4 a\x vScSN5R܍"x MT+13 ̱EPk%rzQb>U?'qvl̉tYF,3ʇ &hp)5:c`g xԖ]UDfl w{4:}8\G6z > jȪH"+ϥ9:/M:YAX[3/_rwш:ky_N2+}#lÕ˩׶xU7oK1/O(1t0Af^1wow:]y0TDqNā,N/їJ*?3,GɔZX2svwCۃ@lq5mb4b6}Ơ}eqX-͜`?78%)| I #kꊜ&Ce[X8B;90hm@"d+m"fx!MI0b)^p)]znLuqyVAɌ QQne&@I:OG}%/z~1? LF{- cbnR)|6f|}l ^Y= ճ Q*&+?}֧%X uu8mO ..Kɬ*ਫ਼q⏟]ʷ? M\W ,_T#8OJeRCsD^͢[CioPssh2?h ]0dR 86t+@~p!LƏͅir X1u5zlS;8"GFy5e@pCf$xx1RC]) n@o9V"`fSS/2;Cde!-c0eJC'C%w).JSP0ڒVÅHa ]4n'I$f[f(|V8tBF6X5'O;$A;φ;q^[Z9gi"YY_Ot(,NcֈIvgӶ:dQi]Y/RI= /<ȜQCM<*1“C4'rZN[R ^~gFݙEt+9PLRq}b,J0H2T2a633NQ}se(þuɑB`e(xxzs9K^TukXrXkǖ@E%xw[ĊSvyxq~.\}pqh3`ԧgi{ms| T4}r\hEA ;>(lU#,lv񠫋5Ķ$!8&HTR!Q9g_UA{RKT ڭlZߦ͙*QFvMzCfN HEՙ q6߀Nݧ>y{{`vؗk]r$Sy6MWԋN ]mZ'?q:Dˣ|@8%?\o 5dZnxӯbߨY4۫#_&y[ɶ[/pPV'a1?li-!XzARS:<3`IzaQbj}Za0a(ͺ`j=b=KB 萠5X2C2ޞ% 4vM,Ϯ1 Jڑu0ɜy<XSn4m!h#. _L5Q,Zr1G J^*ߵ<2K@?^~qz@m?ьDo|k~˅Jd5Zjfw8!X!vqhi6YJԏ vҾkXÖG[ &#HPP0b2VL,(V:Dn#BZ(dOMlˆ TN0Q)Y3+w6Z)]hEwjIo7SFb`/S "yqEߧy׵]jj_;l]HN=x%?^`؇$ w@"0w<^*أ?{$pokDcSg;DMY C1k{2uw%\pׁ͂n 7}_*;VC6IgPYS ''bw msVpPeȜi08;zca Үv/~`ihY:><R?N"}%DԿ2d"veZּҒG5})L]{AsZC*Ox5B Ku(  Z?/#HY'NbC##DoFjI@` SD["mc]tؓx'PZϕcRZĴxUBz°UE=w\Gb5w{&0Yg^&-g)˭ 1Xri* 4.h_l#?yZK;6ǘ:8eh=Ek1@)?=$L&OZ:yCaMȴ-VV IdN>CS3{Pg8'_toO9ڛG)Ei]±I|Ω}<ğFOKX$ͣ ]c#2!&@[Ex+*w( PϷhuK?>ݿ7ppNy&}c^6D9<16ԹM6 hqiŀvIĽ^Hܽvp0Oh3멕OTg𬰼%_B&VNK\D6I(8q3i#Qd^J j؊wWn'[^oOjD Y #Oˉ`5 㸑p-ם?2tBRju3qGd R2'6Չ*oĪ4#koT[]VSG{_p|gwk1>Gyo>Եe8l`TkϏ94#^Xo<41 'Ias}P9pOsZflvH}jfj>uw; :y}3*.| !6TWbA:[-K6.[Gt^{&YA0ag˛ZɑZrWm/yu/-WχzU b:Gv4Aƾs5bp^6ЀrԩP{\#}Ҿne|<f+,h1ז5َU/=Ot{WJB/_ƦkdeP˥5$ļ'ׅևn>hMdgX$q x:Ա}{,N{GH8K= C %YJw6p݋hFer5wlMR Wt0.+_BEP%)`l\t_cC^ake(Spz[-ְ˔E?Rq<&xYy }h"Ej^Dn<_1+#Qr!vGL2#OyYf7f)S1tŪ5VA!r|[5Qe p6p-`"w[e'y%-Qh LdEcŴVǏΊ.TghV Mr]1,"R>2{ngM#0BD_`LEsQx߮;]r!bB.V)dp }|H|j>Wa%/kjЬ l سCh 1+jL`S! ~r^MV+((I$5ZʜBsC,FH|v9Kg"{3-U1XQh┈HV +<6+@kNU|Is[=_/f mlQnMkK+ϾЃ-^ԗ;%9i7gѝTs/% p 6`hFV"\X3 C5uü_9uaIAL[JSx+p} ,[..R]g)Z濝hyn']<:]Vv`loGcߵ:rn|1k⨆^"'Hhi]In~l!:LFYzG d˟|$E)8sb0c6Cml~>Ih"R(1={̼4>x^_-uY'b |uh pWBK']X\-ͰFo1f4ZGL2'Q]>n {psYGhN,2ۄňHj3˫GAo̬*Ql[+*pct<9iTT.#] 45^ Bm][C-^rUx[Tu3 V~$ oy'bf$ \δsfDΘtFy”&w43Rv$<1m^+."QrA꠾ClLZ]o +y.>Tvm\5kQ{# RXx5 mKd);y}jl6:Cq#Xe&,j^e*&uuW˾9 s5SSxa+J ;wzSdM WzI(!:^T.MRZMeMZVy5Ѐ1Y+Nioz)Q3=0-3/kZ`,J X(M$Z"k"s,,*b^PV3zt>g{ֿ~Yө¾n^L>W /9}L`he\udg@|]K0rUngRG. @SYB>dZoC;9T"H~jfFV}YmjS~?Fa{&ϠϯR]muN'䝘wzu|FF$2(}Scj/t݇ruu!%oesMj@爁 q*Uǿ%^3;k0S27ʾg1BpX/cXMr$l8OxWoJ`b(^^iudo1͈h>7Gt ] c q],'jGd$[Н *ubn2ﻦ q_'G-m49p( =,{]j -5 rjYA i<:BFvsP?APZ .,$M^ #2-0p%G;NjzHa"8lrHȉlܑ&@5V'~rTF=Js K S2=rbطڪlàGŵ# Ng|+ A}&E Q3] P]0+D.t@/I/z4% .+Jw]MUYTV6!9F Pi.FP00y,/h;y;oΝҨA7m}F6& nbJp%vDPl7jAf#G 4ppF#7}q|v~|^8X8_ rQ6IJg/ lR 7۳PB'ֽ ,eCI*z+;=-@.^'BE8ċ=qfF3F=VuY#Ew֪tW}Fپ;⏵{*0 PxۯRQ H7ʹ{Żꈺ/YvG$ pThr}Fmfꩭw՚T=ý\_17X GX*#<+xd[oNYJ. Oy/jװ-݆=;/gAE^ǟ&gkH<41A$~L=2 ߅0$b['‧t/YZ֭`$3=" BCٛ+Hxl0$4 ReBQl[*= 8x{60NT0H0[8($>둂YJI@xz>98qRT>7X;w7khwDHflՉd6fED(Í|hRd֊o ᴤ{⩵[J mIFrS?M^۫B]mN9nv=9:;ƕ[&UI`ՠ]kXH9!sWƧ 'F#jA" Xi2˒%y7+Hy8sܹ= j]p=jHLO d L9(Dޡ3d+ A"$74K{[_#R\rLnxKo[-R[ IZ$?vݖI6f˾,9WMr"1yyf]^&Êx@쒜!69:4mqPA?Laf?qEG{]EKb؍ }"'>v*DVtzi{ȅP*Iܲ攷 kV_Uvd< W ija4[o|ar]k_v 8} -XN`vU":jlnCErDB'`hS4Y\эW1uzp2}9 T}zg5: KLS\T86iGs>$q 6J6e 0Tve԰\-9~9= ZIT"q}nIV~OhOC-;!픚 7hf}̬`LB] 5 HȾKk˄ _Х3}ƒ&Mz1"441yd= 7z]#q Cl~WI"mSve@2dvslSp{1O"YbnZBŪ"pħeE̮c#X05dk}˂6Dzƪیbbc+VKuv'1iḈpd,J?$EUgCU:PDK[FIm-C?3PyFK(fv]w(W!u*^7aڠHh.Pe:ǛUX ԿGwoڃT0*]A':#糉קdLe+h\쳱!&;Ia"X&!YMHcM!Cq(+!ǼI4SZv -9>:әQDp_GCv1g{<‘MJ C~?kqW!8:(D/]83̯b**0!D u2wT/=B|4)n˺[#.,ynW d_XLs L=i؝FU oN-hrx_CYG#&Y"anj q/PfQPλ*8sH%{)/&@NaqKY, ޾KxQt?T"+웵ړrrESk?߬o+_~|Qߎik䛣4rPkC-]JྋkB35Z^ygߪVFeuDa@*zǂB;E^c(Fk8I<#gsΰ6$) 10􃊱8֛_.}?^e}a[Ĵnէk`ݯ -"]#M"5Vd0ZuXܣo9 `Idt+GpTugw. LNYY μ=]ϩo!HΡ,?kKQm߳j̀n&G[gjPAdTW %^ +Vk{'aE]UP'N|chSW-.UgmEP;4dAEKp¼ !7h:/h5ХuLᠬKj*"sӦg[)kK9H9GZ&ޚJƝ6]\xڊcc1

zvi*@٦̓TYLϡ*oLgS{&Q\R%?24ů\3(LŘ4&R ùpRCΝW 7[ 0`™s"/st bB7"2mS2r+וԝ~uܩ,\!Nd? 'Z8QW~- r]ajabdh֜t-Aˌ~|3a,U;NEYzݜS_D'<*4-e 5aAK DC6<#ֽ o iLJ5plmxWYR< ?@N4a'sw|W*H gem_;a)eL3$uxxJCz@M MQNX] pE$*0@*5&=K/[oOp.Bd/+9\uMlM`$%QpKL 7D@kHkH\y N$BGWcGߧ(6Ume Nu#ST1԰rtd-(E< nݵ58Ǭq_h/j[Z>IDcnIy7r(6;?n溾p[X%R?;9ӽ=xZr]}@JƅpyyZҽPg> bxpf zfz˼aJ&=OE(k]? -l;Q$"iv[LЂ=՟mWV'kto l@F*ZOE3Tli0jom.w+Gx]?aFJHQ&\n{%?B`Ť*?\gKn\{rZhfh9xkWմ{ݖ]ikc @,:EfK+aUAOʓeLJhJ4 {_-h=C⿕>xuRcVvK?5TW) RlPBƥ>}#W^G3\Ͼy*5i *nC'&$ #^lQ(I=2tF5$P^v0 mS)?!HrbĈse 칏ǯ ?dsxRai#~r ?.V24h"u]uLߨ{CѼ{L2!Yk`u $c\9{S؃ԇJ"܊ێ]Ⱦ1Ϋs?ἄ\B;V\`DELVLxWwJaXƽJke8;2kX-JK܋k jnm+=[NgH Ljz>FvC&H%BkEmpcmmH,؎n_O<5^WAϟId\j܈qɴQ@s;rޘy}GWgzri'Ry `'Sn 6 B'{%Vqh^irpʡ8M"0H1>PxcE 21F5S{kS3O!qDT~"=5\j KE 3`VH̙7qҥYNhI' TKSTZv*٧-WwL+.}3?ag4.4׹spU+Za|[#s=|jz2NW~ے #ߋyS [FVDB#?O_Ԯ9 ,xÄ{< b.CAiulG#~Qs`Ї"2_py,tH6X>õRu %n*+G7U_&bY;G}}HLވTǪD‡Op54[-T*UsT~7k=}#d>,RYeQ- 3 A{>4?ZGD#`B}buM`Fnipb\86+`1k`ơA\ 1fg\_ٞ4OC4UU\j~VzZv)pV9\x]Dhc4vwc؟zklbX- 1Xh;%U|+*f^ &*{6OtYG E}  \XJtAQ$jh`2>T~$-npQi6.(pϛgmH0i4;ED~KnCPxNpٿ[Z q 9M=Yw#"566ftĻvpHPе85pµ@qNGd.3k N?;lmL.VAMNӀ* U?KX.ymY ٵ7sN <Qt]Slh7=>*-ֻ-]Vn f9RM`9)H"֍ԣ(_]pUnS}}/K܈H/ߐF>̌uSq$&KXf 0tLFk\ l$*+±ث> A )M(rqWowie+ؓh_{f$9YF5Sn4=uǀVx0ׯ5_1*x+)ynnB[ M[\Sg_C3m2iʰEv,p%),jN>^/Y A;KTC))66g$(Pe4QYA 䇠cY]Ҧ)E0vB/ԏTmnVȏ{1dzCTh^>`нGiڅnz#UȀ+&'jVMsϚУī fCX~cf`.w;SAJGth7$՜Y_h#cGg !)9jDկ+ڮ0"= Bph[؜a2zͅdxk? ;OLFW,`JϾ|ryj8}HY=S]@&q֣v(Yyy˘(4:SWuwcQd1"UрF8[U'Svt @9{PXtr_ZsX=_~Z$/HV! *42YAnq3di'mZ1ϻɢ *jd4M%nJaqV|?ܷ N/ifwae* wkHHn ]]7Qlx|pRu-$RC&ZŌ? UC| 6+flĨcJ)ZͼQp50G3,فrB85w}WU7p@AӒfc:V_|82X0*c"=-ߎu6tpqԌCj5<`pQH$#w릡)ڏ[DOqY>u*?v`4IiQ8пaݿ,ZG{e@رAKgrzXD"ϷEoHU,, ZLzƈ.#T\伙п=4j 9w\jQ8!,!+~".2oFm. 8JmO.^MNjW& 4G/W_r8v)e3u٣ JwcZT:gli^<1:$fj+S)" ,)#?T]~s'tl 1ٶ2emր;"[p't=3GS^FVmqul 3gq BY!|dLjO =0QI4(kEM15L>Cב![ =~vYfq }bJ4$ B.-Q@>ޖPȨܺHc5bn*GAj{f;q{QBGzP7ic_Y_cFnTz\{k7j.F5#iP} 2k?Q p:34vީY=*eP3o2N^ ՕP I#04T^JW*%3u[|Q3 Crب8ؽۗX_vz20mvG Q[lT䌧OЈǪYmAmo_XOgc>Xi~.$ yq;z17x:4%X d ,x7U9l bBcTܶ{"@T}qR ( ԈMê<\e/vEydL5(Dw78` s}~*YfumɊKZ]j$QQՙtj5̓+*.Ǝ19]k63 ){ XY)aO$)FєX8QS.{A@͓ABpY(nF : wSA4-SCW$]SHశ f1Q'll ҰK;/WZoPeZL:}껱FL'`8B$"-,'w,F+ RGg 5V?s^d8tJ` @ٕN]oSMGx =(C¬M+Kokoݒc7d"a᱌cjڹz uj{g?0)&:!|5d]bBFt\BQvĩdٲB8m+Z͹!)y[*4UӾ/^U osB-igzZKhBg3ˮ54 [t#Yd4UڴuggMB @\JrTJ#7f'!|pbu3>ZEB/&YM$^.@ؓBjyovܐ+Ts=-}aF`Ux 9 2/ĨQ~x\\7.[4 (܍;,OiW$7X9e;N5"27F/sx(3S%lr$N#<1-6r+18ШLQCA]Yk.N^ &[~H gPڳ!FB2+wxCIua3_R'PZ:ҡ1 Ym:*3 \L*7GD ]%"Jh,j2+pzotҎoҘތ8(H[%Āi)zM-;H~7}%)3 VgUXrc7ZQVLdf}OY;\YQNZ l8v4|'gjx0 7e~}Xdmf^JBb_K4AFY9_Ѳ)]~Ϻ9La2GPg;' uBM [,+Em5V7:Mtw* A:/ߤY> P{(߰k}+{h:,)/yp>mW;x9 -zjYYª3U wC5+ Zj~5V -4}G@M렾qkkMr{Vѱ!_'ܭl)N[d3B &7VJ!'yYk(J}NM;wwQyZAQ}U?K>=9n\p3a9χs54ͅj*Vʐf ָ̓EҼӖ͢Xy#4\mhe6CZj"pb8yc̄wR nNbEP+"rD^ R.XXb-7c ,E岁(h ۆ|,<錶VW$gִ"װ6Z_kenRϛdnQڄ iQ wXfDM"DŸ zȖAeϩKy1j1\{븗ə VCl[dP+g쟁$R]b?r½Mȗkyg ONZ,L]׭-H_VRP`s aİ`[ >W6$*ӉwRli,'bB5[=y79C3=lzQ1ᬻ+0X)g-BiȓK5C}1'1Ɩ6¨|"qRU_5r D&L.k+hx<)`W.pւi | p1@OаX65a ֽ?|UpmlSR ޚ2588DǸ+! OL3S;#?Tb?U%M؀?C4A/9}~^ȉBfa U>qeea02тDƯ*x_m.屉ki/4ܩj9D ,_~U~,.Yg|FcqO F)l;v\sFzr9a@uٸMf6 Z OgCr=cܢE% <]\֛6x8 $Mmvq2}>m ΕjB%A;2U c}1n\'RnPxcz͖43tN=i3d["J0 [2RaA"?&!+x籉+ ~*=+nܐɺ;L_P[IB`#+y="cg baZ(:TUk.t:x> JYorm/B8쫠oM2([#?@k0JC8Tp=;cQv=u i$Bv ՚S'Yt( $wHu$HXe3=T2x?* zM?Z7Ŀ)H?)(CB Cꉿ/,Il?\mZ\OV?2uAOUdSr؜a^@'=xK3 qa $^P ҂b9rmp *35I%RL'}*ka^ƒ,rU $H~ Ian`}L6V~Ej@㦼fsCǭ/2ۙFb,ßliZ=Ŧ&)@i~ߨ>S""k3wq5wqj">6v5ai%G>ER% R,i Ywwqg0=\y! +D( Z nה7Mڿ;ٙǪ,OI\!gr4? q祟{QFp!*5ϩӯJ7fI+Y ? j"h0p>t::{+.E"B󕜶mI+%I,H_Ej9^hkX4m"SX8Go &Oaqf|WR?{T@[wʝ-Wf~Hɩhej/8L3NYʕ0YBxx4b|Q?Y j}̕R!v@Thr#V3mlL8@2x uq*Cx6F_O/$dvAO eT\Tx*1P{,#~(|:_L g\ X}I \U+E͙7+ZΜzåV \#/Dڙ6}L 7 IM` qEsH [,VgEYh;;B8+-qc ##4ԕ3  h ~Z!%b,;Z߇O,>醗ƒjVy0^%XV;~9#4$ET.k})ِZ|8GBR`niS4/"P!\Ǖ7UM,;+ݝjCr$$t9 ^.Eu!7ɗC>#ži9 MG!FF2iHk(֬,% Z4<(ɩOo>{]M|-ow+;F^%QT)^%>8yDvO`aeGw2oۯ{Ϣ(<&8g-v)878h I4 ;XX {- p%um`ӎ/,hjx81 &W xK_]6=sz@Bt^i c=~I0ބky>|$ x@3bGs& + /aj yJ{eyg=vXus'! i꺊WO/7EiA!ljoN*O͕{r(Ov8Z)cHmUZC>6,0tTt_x/5*={Ra-NJlqҳī0#(|n;5 8U+ e22gHH)i vRFl/YDlKVAHXm)'Cu3(,4Z+&V\8ʐGCpW39צlCX k|&;=d&ZgkGI$HӱYJ3۰A7] D M sd~?IeP_}.`'. 49<L|Hچf#ODݾp&Npf# TY3HiyAظo-6mؗ|_nm t$Z}S:n,:v;'ԭx& GsAK5k2qB6}fݹ# c1l#2vSjUkPf嗄']`A[jZqAᴷ V<nŘv)/gr;B$j߽=:eMvNXs 7}hzm5p|&@&-pڣ"4::ڴ=j4=N:^c_nU&N0]&i %B1PkaQ˕/υFEiL6T:y%Z8:k+-I׽n[Vq3x76s`ַ٤3{sO2B乌sִEc1:5]ܻ^B64'<3V6({àZ?{/aBIR,u FG ⤶Sj=00JM Tֳر?W~%\ ط,q ).bP?NUYp4?Ah9城V5SkS ɧ0!5r͜S[w>#m{~K2 )h}Ǽ6S 7gu; 5pS]YR  yot]QƞIX䋫??2OuԁJ$a^"ӝJ]B?ؚ~{ \yvwʼ4ʮ4U;)঳x?Ӵ1 31R^#e3Kus y\+bEs=h;jNeI7g. &e ہ+ [TiW֣/}g=%\ 0Yu/a鱔Z/i<5N{iEqy,)T(Vɷ86ԚUԭ>Ӧ94?GԭvcSçpi}_/K=^Һy(dGK}{ =̙ZD|"!'e łXZ3^sԿX22+u鮈QݍE=s(ÑшxKe^<4NЄ2WQY. ui._Ю;l)g¢:ic.l':aZT`Yp&3c 2&jKn}uPǦH9yU3{-y}oP{(6(ō%:j;w4Ao5?ݿD Ӽmꢒ*Z e0ճXE3=~O^YwS3qYQ|e<Wɗb+VC <*` bg٠X)a J?F_1d=ѕ~- TS+OfW j, 1ǰsr/y- cPzϜNK t*wnTM-GMiK䊩 )}=Q1zpٿ̊N4Z1ퟔ4.}J< k\{^S%0azrqLA.ROl/M1xD{ d.\>gY Z;u-9ϭF]32Ou%`J!N@E*iT)+A/;'"S1zR줬 ۔) K0&: L|HFNُڤBX7BH 6M1{ HKmz[#tYGzKn|1/Gc?L¯1@81 ir# 04qK+m<5f]U`h{s]PeThpVVWjh4;yn(gʑѥJ|f&x҇FGؠ)e7'aFmS#ϢRak)yVp2&@"e}V6Ѧ6mV-{IJd֥]˃˖n.*ׄ#r"œ8Yu:æ|݆ X\]t(,E7p/!2_O@P)S ;__p?lΨwV~[ž%6vG/ە ׈i!%+)=Mu8,ݽS։dYAvnʛ{D q뀅2kqr8mbe_j t?(> +n@,>)5ejrSS=imq,K_j-Cꢭװ1G,q>I; ^S_ /-*qY-C<ӶQq5-Qw"'ǙL>OCW??C,1ڸ0U @`_0 g4tUx'}_UFOa.\X`1DpU3\,ɫFSaq_P i9,Dž1=aB1#|AVhj:/Q&lj$ BHTEa];x{/[,w_"dK)HH9 \ w|\JQjSw FXW>,?Eg*)KS[Lb?,-gW\0dV,\I 63l땆U oGzTC&6+N1ov¨ԓ9eHɬF@z+HF(\[@@2`=¨H,8?K=*cDxEC^9 chjXLt!DPhPc)0 \;5e@Y+b}dk$K,qkՁɀ'W'E=NF))'..CϏٞr錹 [ y 3VV:wD[Ƞ|+<<5 ~b<㸉oXb1sc0{mk ]ia5K<˰X97P8ES-~\fݲ[ff+ݓ?H";n[3{ae~p;Sz%n;CRԃwT1xHN?Dәo a/C3.nҼ}y4;^MV%JioR'kga@;Mjk%muQ-<`N"uGxM-Dp8zԳ=)d1?V ƈ[&%v*ط℠c7 5mXYY6D#1'H "IxXnK:>?2!}Z>my~3 ppcF6;v+@qa/2|,fPK$V&Y%9Z9Pdk72**3nkz1tv(@bJ! 0Y{U3Ľ+C;3fmߤo !yZ0[7/E,izcſXgԿڹ.WBȜr1J/GOD#R҉<]Jؠu7%I!a]Qe6!TU*_ ]5s+]!8Z.*}shAi.aJRg䳸*uY[7Ļʻ_!u?m4֎9|MelLšQ(걪J81lz{BKGY[QeUX<Ƙ$lz5(Е'8X4}\EzU}=KS>EJ8A}oዼ&cSDZHY@W9UdЈ 0.ɧ D._Á ?FyYܪrW; O5B624ݘপqWo~J#쎍6%(3jσ@^c)~WMn&9Y 9-ʯ4[˂yɓ U>SI ~,UWux{/ZR>F`s]raR왒Jߟi#hmm s"|jX)wzo-_odώs=H?t}kd[0Q~'$z*Ysl_B[BBjZ#館ؘj%~l0շIv` 4n&tryg$ړݐffR {OE-7_* />?mڭ a!E]*=Οhi,N1z>c~nAcǿ$P:ڶ2;$2mAƜ`VGmy ůa="u5[N2)zV[Vx{)4(iPsm0Z;>v0 =v\~T7a4Ǝw@O?wez]=Nj~f Fёt1Y$Oojygqa 4r/קax%O}Ka`2`7[OkevCaE1!xBb%wL|;ށcq%π ze{Q{xOYz aK?O# eAD M\#N{8e>z[/6:N@ŎepbH;ga˻LEZ0!2!;SA}Fqx]4^yFK)ws xTXж97Uֵɯk= ׾ҴE:m4` le kml;mUwk-!or])[duֲ1;!yhȥ_ (,2L:;tѰ=&jhS'8(+Կc/RT9VXfsz&-4\)"Cd H8t B:`J]AaMBNLʥTu{nO_`+'VI%^J PRUզ]"~腩/K| 9So+cG8+=8F30pUH VqXs*XpDu*9O'9Vv+Z17'%cjWٟD$Zy fgngΎ:/!,~݃7ʯo @PąvD rMrX &w4&2"׎2rRmf*ތNoN.Z$^g$d=?j].L2]3H+v/P3a5<ՃOLp;+sɀ&,Qt PambԞAB归AKTꂀ2V( oLZMq7X,==OR>"$77{4-eL ٸ4ז9PJ_YB\CwTeIZ|t#YAW}*Պd=4:VV:=ge]}f]%T%aP}䊐Tj֕eOW1K@:5 "z<%v=AFC,>we"}TX7ߤȼƯL($ ˃JާTf99Eޔn͉w9"`Gډ\5QP{iGnizgG闉r-Iu #~~?@p=DoHKn@mh2 Ayߍ$3(5w7 \FknK)V2`|t b݉yU9CXdٯc_0ѱHD: ᷝ7~6ZT᱗(n{C:μ@'yg8~1^e49ncFE_ABF7HJunv (U˃Qx*@HV^rJ h*lh[reXR](55 Z&  #",}05Nn|$4lmxOX4= hv{*x"vn$+vK1)| b嚴YBLŐ kxESdTK`"Qi&nfxRx`؂1$zuJ[Πа(S`gn#:IO%fDV7v@}IoI%<-/cߤ PLA3&pS2JG9Z*GiϿZWLvMTQpG OkF[Ô,sZNMңܰ/Y _J9 in=ʘ0vdcڵ|D@I/oIur4nlIxYxT?5+Ϥ8kvɔ" W =HoUn_3[*Άs܈=F|&] wIl?`FXVaq·tV}Xc`|誵ć0T`Hv{2W!R ?Kni߭XES,J&jo쯀Xh&璦 UV&@JE5Gϟ X6NpXĸ/CZ^Dv59-riq2:Q0ͳʄ!Uw 2zN󊣭$=E^G.0p"'J{VKAMGeکM@훴)tZ| !mթJBjwVYP8}bvk5`8%;epKRA=#,~xfDI ޖ+~|_TSuZc=-S10[|&뫊RHnТ8OIIFL@cSUmv:'5!ZkELS@(rp5(HS' o^bN Y.[ cWp |rD()گs$]ZZwb(!ib߇[HYn/äxT,z efMA()5d9*]9W:|6/P;"uCAM"wlx] +ʣ5o95uhIA揅nVdd.  +U^ \v;4#zL_ۜNxO *A ܬS)NyؠޑHٕp ie1}@z% 'B9ӕ\x5K[ a "DŽ݊En|Ÿ-m'_! 7|Uǰ[4-=O2Xv& nnA:wǨfo$ͭJ[%^L5۟%Om9rcC1V 2P4= ̕9i૴*s"Ad)-,gځZj|_PNقz HgP 2eb,WNI|FQ^n^#CcHgKB,q;Z E $,™p3X1oQ_4=k\pws6@IbRt@”*[YS?pkitRjS,|=B.儩BP|tq[R%)>CE#4Qa'('l-+B iWr~;aHoZ98BVj<궱&p->caܢ{Ҹa\$ÜEhq/K#'V`b L{+T-]M&S4U5%$!) Ecw4..agnJ[?]CN-uv(-/7d!=̅~?*²ppk۸cUٴh.13CXč,lz,R9JN4=z5Jr.e!ԀUTW12ȺxliJRrylԘAC&LorS}I#}mqn^4VJ&f^x~KJ=q ?"cI&-ƞ ǮvhOھžG6cI8jrL?ylfbH[&*ىwS+>kR16UE\FEX9$^G-ձc_w{9yrW))'\(ױgy POg:Ye| B1Zs#L O><+m$QQfx.vN(^$4ߏmS)d% >5Pk.MWN<M=ְjByO08(@%ry6ģa:cNT+0PVEL&h9ڜLЩاn@tM-au{ u/:uԛ ۽”tݕ AVDbW\:"qr;*~by䯤p2$uoc~7|@-@̜GJ#qӦ`ʊxm xp+9Zz؃tIGǿKu\.^ b=Խ*tΜN I.nJi!pT] +(ʞx %楽y={Zb:\e.MV MwFڥi)hԧ#|i~s2#+ZWRvWࣀ.rM&l*^KN} t`/!1p3Npe z \Y?,}T ˾R` aA@ Am,xE瀸[ ::ě?Q*^W}:px@>UdqK uǴpY]iK&xLik$a=L.wvkUKS򄼖 SC:oؠM]t FaZ6߂`ʰ|* q/ 'I9 Das2 jblb&@\k<ڪ:?Zٮ$TԖxJTdój~F ֐zT<(榍KiJT{NC kK%Um+{ :XC٫9 ]ҌU5;WJNv7/7BI"u6 QG 5Y3k +|q,8@yјƩWn5#wyv̝J4N4ٴW''tAУZ&ծ/[ߜGMUŕP}:wUP׾^Sᕟ>+=:AqjM# 0;`GPo&8?p_~n}CqyQ*F^ͅ6@GLׂD/9al E hE6-駄MȸE\%"m0,=狀e:s5גFӿRZ2)#Ol Kl9;I{rƵ=*WuK -֋mLϪg3@Vz 9qj>pܵte2˽FS M/m]`FR%ֵMLlgH 4OE~[͓ iU$/-e.nvCazû zQ<VRYGCyĂTl WXBװ^J.F5!XyiԴvzsgPe{g:Aw'ťMB :Luu(L[kۿOteg(N_S/Xa:7}F OZ5Gtd'K]eRRz: ě QAu ,}xq+c>7er;q@:/(b<㝾[>(g$oa!<*XBw[RДvJx~j핵`˚3IvCVxOFYmvk8)˹&B}Dz[ )x%7$RD05yϭz Մuqn@@bgbG?1uR#i!s(~`OB!bI+00CG Bw-WDaDzK1F0>, o<ݨ*Ƙjq?!ѷG\2y֙[W 5چH]sqٽ9H=XԷ%:lPEt0DJAk_ӷ}{Vysmήx<ns`e|JC%jAE/kq@8#hD+*C :$Q;Fh3yNBpeʔs#&\cf\њ+EW;+?"ƨ/y\MWuݹe&sJNi$,VK֚L)*Ma( 0x 3lhRWw5QX-Q6}wwYí3z^v6鞫Rx|\MxQшM*{7z* 3; }~}?7D`ZS8C)(-\F7rmdZ׵z*D2[<{KL!fRo<{!]M Z˹X_YDyd;>C^%L7}OWKH*C0'%f*/s;/f1& ʄ2F} .bKhե{gDvbyP!h1ڿ=4YV.^4L.Nzd[*ygpO$&ʰeVJ GQ'TPݓ{}I`eݐ>8!VIa$ߺ!-)YBL9ݛY`T"|%WeP*cCPm>6:i:cm sX8| 83Tp %D{s/ȯ8P6D=A$&C:&7>%@MVG&%"涧KcYV:بgd? Nѻk1믾Xǯpk8 ơ`OHn4G΂9jR86qBE=6bX_ u~+Ӂ4wx&q0Tp=`kE]L HCC)٤ 1 n]1'˰\E(YȤp,HkGkPM˪WAaغxs]"ΰ!9OeMgQ Oڦ^!u([W5jaE^Š8=XrzVAƓKj+_叨B{r `fCF+Ǩ0g n|ϒRջ}r%s1&CmV- +vwH#CpF`ans^}4>ፌ?Y0N氪X, b-u:^\* K&(̈C@-YιK׼œ64pV>P\q"HW!9 F\$*fOeMg΂~uU?XN}Fd(hTYVx4+pX}NG~#_Aܻ9'B@&\ًT#Zs kA9e%2NTOy6_JHT{_-GoQLxcCN쎣C/%6Qo/qQyǕVj2|W0J1żtDFc\.+8 Lcr8F r2.ڲ1xx#+dM OgrpA 0ԊN~]BQ-8eNuoAO>ThG㪼b]) I0c@D*ܝL9aC0>tbxNAQ|sîOh.7w*Vt7B~U; |*@Bz:$%1㎂ls6ĉ{|M19y  W0>S50@^l{ LJ`}]p3?02W6gl͞xM@ FVNs?⢥D"%[v7Apsm|fGTyF $gŠ\y/=pC[t@ J~6w tQ#eqP752.^>x1p/6031xB$;# 2$dP5J};$bgbƙ嵟f̭!@S;[.&`rM-Zqk/tUKB a-⟐ֻ š .? OpE1'Pgo`~Oj׳Iu9K :ٌ-(@-WM&w| 8  l β|T}hǣIIsOIxUf΁Jk#SI6Dꉮ< :ef{  '-(яF0D:##5mKMS„ѯw$ޚ x\Yʼnc'Y+/Uz~*ۦ=ǐ5{U/3WtC)]š&F+wQoIx+áN|TbcECDl0o#*W>~% }|UU̧y.~4o'yNpC ._hȵ!;o㲪+};D}y ^RJ(g07AN95۟ 4FbkNi+64DXG#hl~@fk,T\yS CMl8e`FraNn fujsEhp{3ҳ6rypmش;6m߰ZGFUG^~RhxZRs) u*k2/S$;h,fN(.?CGhJZia/*>׀0e¥Ԧ{g`Rq^C7×l $ |ޟOŽ 4 @8w9I(g؟2DJk6-MBIH`W6N# @cZɃQ?% w!bnuYv8vsE ` D@ }0Mr0>,[j*,SqSpx0p4mA±"]Bd.Sջ8Ky_msaqTwG^#H^TJ֍eYkԯ)?$`#-qT\p# `#r?aJ2<0YۻY6fI@]0ț]9HF8-JQKӱl3iNpk?wv۴ьɓ&܂[yOyɧТzOJ~զ;0=T,TuY{ZdAKԜ+FÞ03ghD[)giVHfwSC+Lt۝i癊5R+wo2bM} μfed7wP|]N:,5߅\h̻owW!--"^= qa$åG̍[̘*B`-UKï,pl'jP  CZf 2KPfvջڣ(W2Aɑ歅#g+=`'Ni+& #f{AڻjSW'WftP:3ų-SoM$c&ӠVuB_Eآ._߸X"?]cߴbOu@R{Y{5m_m d(xKDM|SL^]@Nz ZiivZZN_ZjZf&9|,\`%iq`~RÐ뭘fPxu\ӈa@_ТO0u?_I 9{IuIކy<`&6-UIo FM295&1@V %gdMЋO0ըpEp}|0~M9,J*ˎXnJ*qKnM R}dΔ_$t4>\W:;$Ztgȿ^.'1 Z0 Wg5lh?z aVHTjI 3rhb9!`d΁Hie%]ǛecRf1øucYz9")Kc(yF eE>Lf+,Y>,&#"+貊j@057zTmkW#(gɆ&aFQ~fъM c͹+pŤ!;& oŏ}_rQ2qU{lD*D7gI #Ts&*AkI9c3DJNM=fHЀJ2p,$dn?mULv6a=(DF.O/8x BM/msޢ'4LUPCkoP0]*Zepױi_@=;^IN ߗa8O1%NgncGHYf(v~Z2 _ O?,*&Ve.0M5m%9;G'OlzW͠]M  XǦVUu,=o w'*|81ufsQӶePsVO/=7Nw/L2AaYq,:KCmP>ovfre6dCAR_-<ÆaBih ?N6'l oy+Rj0ZJsy ;gSzw( RILORB6DIH*>DnAz]d xrNe0>F]_E4W_^{GK\˦\ pDe>D+'^Ƌ_&Bh}}7n 52iy@ B-}Vk-@ i\fLְ2;HÅ+G0|}ډ|WOqEu>R }CG$7(41ˁ4;F@̖EORXs>&oJ(3YܨFg+gl4CJw]S R(rLlD=̎@ S!)RK{ px|FSi:I'8)+mGr)GcOgvB$-'@wrRN@{6#pJRd'VK\Τß!B@Pćqrd?4RBCXs*섰9L[:; C̨QP (|GKN"~;/7u/S޼5P]WW$8={TSb{CVx77lFN>HuI=QMb- Y WU!Z鷌PdۊŌn#JǵPsRz2LiE +S>r`\B6q@%)xС z7qIBJ xo:sNkm~E1*k9!UCͬ[hJAo{根u \~X+%Ŭw0IaЉ( M)evGݙ/ v3<;_@scLl$2XTunOQ:sO}\bQrWRNitb\Im囆eרW,h RSIx"dQb&AoB 7k,؉u.˫gH%6N]jXHcZs())Xy L{!_?z?hH/â~dP z[2fʸa32js{ǀT9cNC 6^w T _g6=H&g y^L#}Yܬnԥ&{PnP1ilZkzfw~w-L'6'`/H|fvޝdDFi`H@[Sܦ x^޺oB{4QE9;. xJ ؏ׄuoz:4e9QHm.u"Ň&)DN; (A$(k^tn͉~hӡ) Hl}js8[Q7}|YR.o-dA/hZM"x^[R:iU½-'Bk!NG_yS&x(ڐRf8[r Szۏ9 >OVRsmN/e!PDޮ')ڜG=5s+.7Y}bH #+Et kDAUajI{m bܰ.G|i'zM/eL/,"Nz .x6YšZ@˹s wɰ࿺QOFbՔ2B6>vi1\ 2G-d4K YjMĦ#|/(k,h3 ܿT 4DdhZX=^BO Q]n !0<O<àM6鑞aĮϯڎv*Yг5+X b S!{ŹŊ"`9ƨky6cf\@Wo^>TJP׮~lKƲnS¾SB6`?mKnz> ׿; [VW 3زFpŘ^):Nq?yߪ6g?`[Xj5b*GCyJ<5  ) al WFB xHI>Ņ#Qj[ߎDaiٸXU s3) K(B۟a]n+ihQی1n'xJ"Eq֮6"ߧK͏ =߽0Yӫ*b?YJƎNMU]a%'cP?K\H; wuxO1yDjԺ>q7hC,#y>ƾ`jbQjQ!TT2O۳%S(E\lȚ]Q'4!5,Du$jR@wP@z=7^1;1Ї .Yi< 9&xˆ Z͕I<],Ůb1Uj/ޫb~1;yqE"C?_sRUr` Fʼn2v*B&]g79ϑW0G4 } &[8m9[+Qk!"Ǣ-\t1-Uwqӣfqz@Q9TT&hL-qES%ص&2O,4 )83 8`Uex]?MXKq+ ѹ!H(yv'qmGyHYaqHaF NҾד́ YCBa:W-5c1o&A~qtEX^/16ȅ8%-C@=!du=9g{3+Z@ކI#et{[yJ2&hN c9M|P7?e:=ȦSg-aJh9I%= eDFA/o7nuXIe(ݓMg?pB*"]5(m@%nAgntq_5"{s0|qZDi*];GzpOuWi% # M"8]#_WaQ[Mv^ 0: DK6Yvf[ԻwG'[dCY-eyM=5FBÞ_h;Qw GXڵճs=U5"ŭ Vi>+\'?dwȺyXAbkQڍW)e: rfqkytƲ`V*.,6&j(ﲅGw6rBmRSeḩ6( S] |94RH8)6 i_B8?vI`60q, DKE“q.4 /Y51s_!%?&L܅ohT.A'2P PS 9(o 8fYҳTHl]tZs܃7bc8mW#D.}dy U{QY0û1^ڂ32qTdp9u1m<-y]GXr~'ȡlju]Q+'~/QhO^T[*!1 fΞ. uK@4B 3[#_k|b%HϗeԔS\t[JKvl}E{Ub8'8ԈO6 =^%b,rF;~&_dc gl y(b?%EXd.-6=s>,KDe8∩uzeS & ~>E b93ftޏ!hT \8?6W/(L?jG`3;7'(55MwR+P;@}mGR%BjY T#-e,JAyq8J=JQ[ "rr_K(Âq q e^:<4~9{"/Gy_haL<Be-Tb Zc)NrTVW-]6uu=Z K$shƂ##3bV1/.ӽ,H􃍩5t'q005 ;G77ZA{<ށ4>m9@! ᯲<*t O-{+.L1)I[^-ͫ 5QCVUJAJO5&T_CnOn,X +a3/uJD$qh >79>35xq$ R|;jCu?B{lDp~ yAPکkӕ+?j!`P^ 1OLoJއ5LOH1y8y* xU}7/F)?yw:5o}Lu0,w[ׇΌ5* :bu&+_υd[p{rnD&0)x'CsJHh܁QtN?7^a|ż¦5&u? \:>>'0TETDTm/?Yf ps9V6Wؽ AǩN/Fw]s3D4w?{d hrrLwB\\89GLqd\K^;Ϳ˶}I~njo Kh@`-1Yo}a$|aaӍ)YZEqTQS~xޚ(^9\}޿`"d].IHz_{jT>f:8NK!jXoPHwf-N&itപ63ʳGE')bї)WUo|M؇ &ׄ;CDRg>BI{1%QF< eQqE.7GӃX1Ëm?YtK2 Ka H$k1$E*pZVwWEg 1>BwavN'/y8UmeD_{m%QeSNwEPԸhhCCs;⽧ReMђڨ;:RiA1)= -!jx,9 =iv%%xfF8ӻq"́cV=ĭBNmn݌/ޛqҁ d|jBkۜEFby/\ Z#x}%YqxSА̩@%Jf.0gBOq@t=U +_78 Evopx#shbKN{l0^I#kГ\j?3?]C'oOhQe${說䒾g7 ^?a) iUa>JӞ4dZn}/I6Jq(mqm 7b W 2Lt p2UH7an~LJ"^̏wC8u_uңaֽI5&^-bk-CL/lq&F_۟z\*Z 9E]Р݋QEwthѿ4:KOB]RobN_sE-)RS,PY%?Zi0kQRi1+(&R/="M=F{뜕0Җhyߵqވ}ŝԎ%lM&;(Im"4 W!;,kH;^<7w1b0Pɿ5RÉ(o}Qm1{-RF7B<.o Uwzj 'b$sKL {ǕP [ (O ~cH v/;ڴ2XasqN *i@LR4MQ5QW Ά=j͠G/7=N1^ bd}¼}{j+Fy)`+H4mÛ>tWMtCdP8F̸OX Ld~)EaR}5=WވLzDExXUj.ݎG h] "֍uYݠ̖Rqbmi@m|h2PlfyO@"pO rB·`vH]|+Њ*Oۼgʻq!OCF#/lv/H5Q>痔N& ʙ Y("ٶ3'W0N n.NnTVB9@]"1@> %ȈcXs-w/CLw8;I 8`c$oˀ\p$sDk1u2;r!;%Yl+X O9&̇Yx^UIS8,ˏM߶@<~Fi.^#$O{KqEeTEYUfCh ϒ)(>g$@mfn?^Ie ׏'0%A a ܏|S,'V?S:'j3ZCyy&@]e/ii x~GDri=trduU5ܵri|nDdnV?}#HQ1&C9C~+w\(%,p/6!oگ~; ' aJ@NI|2B`d:IT9ũ73hguq3pU͊=Sp ?CVIZF@o}vZ XqVo<蒚9Ã{ tw 8sjK $Hc*^jB<|8q *Y>3D@ d{~Fh]DR+(v2dx IU *z0oc6L}oƉh5Λ#YNh,~KM8-4Sn/x1kfr+|#?Ȇk# <(Qx67IOH~0D_hu"Z4ny<FdVvZmKNTB`G;ʥ'.U:}F=!JA*ŧokfpM@/9xiKVI5ɚ6-&:@F٭ՇZcV kO ˟jzC@}?gPUW7w0b$]2@Wsq}*t(Ԕ7&jko) tRz&6/YRmCRo9跌@ 9S,d UlE|.W/ 2K¿ jZx* 0j >%& 倲 DMgGw_ b<]5c5=6E\, ylK8nq^* [qT;Or1g1J,}wŦh>K0SQ/8>ߝ8ȣLO ~%ƕ9 sޅۺ/`& 2%p,O=50ܨV4n3-fFaI񼣜H ~gEs(Aw^xSxK\9KƹξQhIAhz1Tiwd߅ZDm{#i9f&7|)5[Mpzݸ3^6A6tlj]Ϛ K Hk曳O !t׆"@@1*vRA[mώߐ0(slAm6`'[qu[cd5 ȑYz+?jo^zj2rb޾eD0~3uZ7O~:Ξ q14$:BB=Ks#U,'DÆqUr ߋkʿIz5cM.&)̡XY>5y&z*>BeI^,Uˣr5F/ ӟ вE3۬\&ꞵ-'u˪T GA MAr2l SdZ+\W&/v?B* 0An˝Ye&KMbZ%NçW=Xzw! /NHl\MKFd\ \TعYL'-M|@7x .LK1~2VB9%y0"fSSxF0ZU~vcxO!fsOxSrՑ2Sweo~Iw0/I~vo< P*3ZNg04x=\yGSœI r3V:_GrSKN't{s},&*sv98B~/ҝP%Qtɕ.ζo^حèN+ hh*nP ,!Ѱ4Zb;ȏښNw).3OrFm˖"L5U% Z>-!Pi%v9;^֟ZiDY u* U :q5ai|JL;]\ RaUek=;6/B+H%_`kmYR&Iu D>`Oy/48H Y~C&l`|_ֻ Tl|=JnNƒ^<\9W3uI݄%,?5<4yNUp޴4^f)D*T38YYZ?Ɖ#J{_G#-I{(+XY `2qsv܇x+'[Y4i+fh"u˯~`K p-BAwGw*ӟ,%zǸ[Is~o >C|6yj{Ni=p34}h J\DEiA DUjrnF~d$"갥=jPbYCJFw A5]4xK-a6gᐈ9!sJ@JMF${JAWLO{3>uh*Nї׾Bgw ?i=9.v}.Ɏ\$ĸNMzt]e<6fPTd{v%K jѤ VY [4ƪmP j@ި=٩Z;뒋 r0'S-N?:r|@r"o=٫Z}V囑Ψ?%5!9%Ygo姶vշdNы@$WUҞh7N-oF ͐B{Yi= kƔᮇqy+C ʵU ruQѨp'X;R e?FQ^ktSOd][6*lg|CCø|e ӄ2Gw ȉ m!^_k~_8տCĻ_Pbн"@{S) xX|e0f_L7 <ܲVC/4Қ.^l^HajkK}08:}":ު\8djE{Y5F٪hUΚ^Gq#3h%ڮe a16)w>YJ:VWȠmxҔKpfL.x^,On{G׍ oc&WWٿ0??rY OigKZKrAOW_-;`}̑ ܙĔC0FOj˔f\}ar*IC i1ۋ1V"c)F};^MVc؝@ē.&`+?E 6RNW*~Cvg(-@ ; bfۀbj>!|GFp/khND`AQ.-hK:H^H"lk kJmֵD2y}0Mհ|cK$Wt2)[lZ1ue \1Gp }1(Jso =)a Orv>6.ec?(/E勏߬Gu&wyn oYE]p{kW?E |ܝ1\]H!|׭لCB{F> ᔅpFP eɪcJO=$6)7#}P^oߴwf9OAN ʃ tW6-@dC:>PL\KtwsD%v 5OD׊qݔMʿG xCȈ/;!&PXG,oP]/d׬ .90 & &|c{NdÁxVt\ɍmdSG{%EQL R* K|.#[V{C ?]@g\vڰ m/$|[ wϊud>]{Zzr[lefӾryRw%ep\Po0i ԾD72%β%5iدdשP#N?瓇f"x bF.Kg)Q }/e ]D'hYȃ`k%,s8Pv ;xBF('F>žۖe`/6$, /`!F>|ao? ژ6V9@=~K(V_ܧt^C|JBЛKe <9:Y8}`ZVq;Z;빪wYԃȕWt8ѳJ^e{ԽTAXy )i/byW MKSȊ# Xuj (aoQ,qduG5h0J6`C_J>\GA?-BpeAƨ,Qg{fAmJIYDl&0U3-1,PܰC8}_ͥC2gY=c$(8rOdȽ.eOC敶9:l-xT;d*h.L ͟G m,W]xgSBl}[a_疠jRcK-.HnR0myFELR'fШψ؄&<3?fk K&T ~U$$q_8=y& c2sp{V$yh9owՓm[6L 4Pvveńp̦>TXgݐ xu:qO]l5P2#e;wp{6"S#[!l8j[jDiE$ 1Oа`΀C?tֹJQlTqmJ\ߒcvOZPb8%(ߩ4d(pELI9%VnlqlKk`vLrq0"~Di%iFMtn%: @Y&eE{tX1aA\)=,c>RrJ!R}B,/coC1Ex[P7-Y,2@!eHTH&nmBR"R*|8ze~:}q (r{:+hLv$OOp4Q *Jȸ'D,Z{7l՟uGY RU]&MXs6S{OX Pݙ,F43(陡گZ[!fvDp[['=խ@<t䥜>v!! ZҊ>GuX׎ l;U=%60 o?z(E2ѽfP5D, B υZlG]AgzSSlyįً#{s/%'NG"~VO 㪾"V2h@IptK4~K:3D5,DEk g{v8{hGŢT+ςB_/`9& l8Ij#φo*.^p$ېnaGx""Y2xG:N%en8ǻJ7dHPj9cV{J)w{4(O͒hhCЅ{) t 8>2I7ueLs#ĽvBh |hƹ|yaiop)/qDl&~UiNfxQmR:CQ{l\Pv5FXd^b1Y5$fAy531 y=Q T մG>8v3ud_?΍-,9 )4uNh;4Z8 >b&`NAά9FA&@oȈDq/8!ГfX>GO:ɞfwޖ?mJCPJ(_َ{cľsxuA`B\;](ʾp/狜cњ9A%/LL\H-W/"Cq42q;'{y IDjj3TXi\#o[}T?( r\2&VbQKԴWf}vĎuN9vj"a P%!H=5mq~_oT6[2Xϸ:o=p-WrލV$t4Q<χ-. ף'I1k4"=m՚CdV=(Z+okDau#,o/6fJ.Tm*#sñ6}LUu(P<8lKgDfh1z൵iq-{wSvg@C]^G2 7.v[gub\!֧" w-i(JUƟޮ)J}"MgUJn_7pe3S@l%J<"@PB*λ&_Ž4.%Nʚم}MSV_?5@u4wwzFdFRi wP%!AL]289J%HI!Q Qie_]W"-DMl^M=QNd@pI]|h ~"ʂ{)Y<)d aݏv]={l#>;E2i b0!]' I!5@7 !UaHV8|VX%lkzF([,F%/E:Xxtf%t:i~^u9:`O@RU#a jY:mb;?/jF 6yVzOvROKnVː dWȋyt)%RQp[tbfX)>r^YӞ ˦73LEob:RGH38KUתeDß\NH?Fy!|Qc"\~fPYQf3L=aMsɩF/xR`$*8-I3G'lࠈRzE0Zr oAoxuIͩSPcJ}qe8~B(\~C,]¥`h"'{^̻Us7/);N"i?|ܢ {bcoXjYm[vI^S H㦅iAgԯ(VӤ3{FDr慳V|(O~IDFcڋS&y෵*깤˯B6[ Q[Pۀ\/# AvUdJfZqR!_e:0/)Yw/V '?ܳ=RgvuJkiЧ6HA3 ~Cͱ U 0H:N @̄@~0c |{t"Mn8wMPxo/šTb@'U8y +aB@9񂁩p'yfyJk_zn֥ 8oץe,% ޻2x s,hkAM:ga&&CԿ[ Z&Q3!DFg`-x;&^D Z?MA^Vgoxe7c^(2Ypss!&9ry6h ˡJޝow6 RJRԄxҿ) */;oh[sh:G-UR$e@lbKzkGk".ji u?RԞF.QX m<ʺW +THy~LنυݧBC9g(;3%Qo[K#q:"ANus/m`yf.gLS]O[{uw3r$dĽcmLA8 ߇Q3X+*#a[d|rr<_B36ׁfZūGx.DFXQUD9<2':PKqPgDA%`tZbd &f޹`/8=q9RXb-3YR`9(3xnEi φA-apRkif'C({ask  >h4JOg ev&Ww4勢n7<|V1 ծ$+A< `yk\hX,z1vo);ȘI&nʂZilmE4VٌЪ[-$b{ 5΀7<гkŎWԢ3iG Ok\_t؃[mO|CѕZ̡ώcH | cՅy^fEZ09Xt9F1jRUU9:mTMVZ`d >_Fa%L"6,1CReLur_*P8V㦑cįM ק:is%2$v>,wP 3:L2-z擀/>"mr~:ʤ=|x/e+qjhK`ЄFX6FarBKZV#ã> Jأope-t%F7(LDu->9p#_t?L۽XA :^'Uy[8 !J~XvD"9'`L DfώhМK{p],6O$~Qv!{R!*}2kKBX0 @҂àHTBB,Z"i{_ Y_nv3}Y<ver (I%Y4/ZF GNU/pb!.f _vZW"i!Ta-Y1/ƿ٣w~bTUº%?yGK@(ew=/Qa$/eߒmc%s{`ة/6MLo:˛bK4Aa5z+u/I,jh0šsCˤl6dm]:Rl'Bnowe~2Q$^*)KG@Dj/9:FpPh`H`|h1}VV t .wOZA8>%d].}fMdBh=+'&c;s,?J  +^L>]Qz؃dW8\U01AY@wfo.*v)%;ѱ3xͽ҂7DWeu'rM$c瑔ō3SB*=gn%Rħ4\^\߀\D CLJ!ʗn!9h: z+ܾ _IJ\++=7Áԅ/'-[T;ғ@LH5MsUϗbց \衺~; "R%ڈc~ЬF^eʙ'ׅ~kˍ}^;PA9ZrƊue%tQY≨YhۈE#KH{X:?0so W?3;46s@yR+BHZ/' L_ˀro:E?2@g{?gҵ>{:C+|?PBF (Bk?*=kqAŴ:.Ɔ` E air=V.Ce:MW`N&V!LYy *;<섯Vn nPr9RDCuܜȟҖLVm<辱̥(r']S@{ۂYLf6i(%M iK_[ %4i+ N-}7K*! K{<;u=ӷ/#(;7"/%,&Z[\*UNb͵QЧZG3t 7PuU6Sw%FfD_k#8 ,t&aru!J!unhu 5deގ 09n&YRXM B6& pK[-3ͽY( sP@lE 5W]qPWYe\y{`Vd"{q␫[4%/Z5=܅!~sh&hP$uq~pN|hi7)Qsc$=] U[xnSz)`Xt̀ wXMj{Q8UQȽm%Óy|>&]i0f1aϙft֗SCaD%<~YFۂ)˚|ڧm7qZ/'sL+Hx8.EVo屠g?E aK^dz-Roj?ìM-+FgX=vMxۥ2+ũn~h-/a(ǻD?Ut(x@[g!9>YɘH;ߩ?ڿ'@0ud/ʬ&>jUI8z;k="Բ:#l=m۟g΅%JCvlSY2Dѱ/zl# i x;AҚRR>d愩 3{!s dP+C8w| 4MuE@9WS$!a wzF/ 7b091xh{} g@կf"W7P|i&<8b1V'̀$ I-We)?o!+rƧQ DBt( 5&q'K+7RS lz |_fn^\IђҀ~QNHB(Q}8x^th@ѳ-;(w>?U4 '_߾5k%%ICG6˄ ^Wk4)Ss_GjWJH͙d]x,O}њz@eF<=ؘz][j@Kqjp&kҖqm&Bk}Ù[ܜM砮+,to E|CU#،Fl>* 1;XÍvRpZ4m<HZXu g۱K޾GD/^N of%m\7L/E8uXuAVP"@KͩD'8?Pq(x㕐~Ai9D0J<)Ci^u!ޘ,Z^=LKd`q&~@,O^Ou \¯u1S,3Ơ%e,s{/:91)#?վRd_ =UJ%^zqxKҷu2=+xVӗǶNՊJ3<5! 6 ݭkx7PHqM8Uq\Y j>+8%cᚔ0nѠcsfNK-d-.OK6V®~rK-8&[կRY Z~UP7OENe%a =\=_b?ENlS>]3{qٽw"Q'])~9^'8C0T+N&k|πxӹv;\ r2ښtq< pT'9mR|ƍP7c82өC1C`ܭ@6Yx ,HW3jѩRB]ea̜gRR6FU+ ЗOLu]'!k^#4g- vȼL ?05{ 5E_O#[@.+S&D. -҄^~Z>PGA-xj̢'+I!a׳6~b0߯~-daDe%v'O6%U}!\ Z(9ԱG4CB8ߏ֤\4|@V3Y[@K:0>+Y~0E,; ~ЏO{q$ds7qd83:Fe3ZfA=XU=TMcJC: of<\}*' Eu` Um%Ʉ'TxqD8I,0bB9hZBF43P*7.Ƞlq7`HOӲzbE"t~cv.OKG%W1Z=RП[͕AJ_)ߍ.{N?&yYK/vU1/ ?P:/I{%P ߣKhшQ@ 3OHlnq0n+mDRK6Jb[Nl끩Y'ZX'qef~Bth3'{QɃ xT/huXi@vlQ̻я^$՗A6lſz+~W KvIJ:\$[pI[K^4֯@7{^9DqP{K% O % 4Y}t<"Re%y3;j#U$}J伋k~"w1ʷ%bJIO`B'8rovrǺj1SG"1I#xdas/L<*2bX.Q8,;SyQȡ TO+;|jqUg!ni#t^vXfUe}qr --TÎE baC! /3CL0%VoVb|t 1\T~xKM{{we ֟պJ4zfu-"9YFSu68m[s< aVSaP8U:>`c8^_S -w0M$& c4Dp(Űu>PX,_r9Dcp^"# !_%3wM`z=oƒֈ @qJ0mq /:~A_|IW.p'KJmplX* yȂ?.I/99e!/|xV-#Ql%AJںߠ !NS5$"=Wм(: Wq#n鱋8pTڈbMu#iQY)!PÖtcd \Y_ ݅ђ{iKGRY=i*Nhy?'fLgj D$ ݧ&}ɟR=KGTE25O swh4G2Ư|Im BW͢ JC)/ .:CKVGc[YQֶ,@ yf?iBD6DbOYVAZ(g S/=<^.MQZÁBmO9bΑpސ< 1O`ŀ4w%"1"BWrJ+-c1q*=`v2QkPgz uS2_ ԃvzvuZpIl=Zņ˞#P#73"KR7(˾SL\rZ_E~Bn_on"Nө:"fC ^";RUfs$ĺ;mG z߃ @R%4S ΫDN<0JAT<|L ϢT&U2֚5y$@2ð@ZpY͔6QNc#In#9jEq[4 A3 }I:<)SiOXN)Ámz G 7|> E{x) &}pVP<2 7;fjӐ%|z#n36zb#I>!8~-̯ gƱ\+,!ٍǤ~f`6F0߯&c =;DΧ)FL¬xJ d!@"cH"f/Ʀkh+&rp*]XI u`ʪk7 %v'S<Jr-*SppէXH/2r2s\:e2W/^2XWzof:>J`@ep %@8ÚP3`^.R ##A Zi4xd[R^*9kUcAo|kXCb - ;-Jʬ:>K]{t\kzHvw^/̋qϳ fCS1j&NxER:l9"oN$zEB☄O DAgB5[v{ҔXUvƠhB쑱شPX=Q)?(lˍ]+V= z^:Śe¨h%'j? .Ke)Q0t@|Cx鹍kI] =Z`IHuc2G}>* Lp#? 9|>Cmguv84|pPQy;Ӧ!ddw"Wx EuÓq|S;ûxZwއ` <\59E1[Z~caH?rmxs Z*}(Ux7KW>m|>p%1-,IKz˄] ,` J%pBf@k8*,. od2{YZadҀ8x7)8R~ЃDA.G|6’k9Ed\3w?\Zw8%(M!C+F BLmFh dU +a7ʪW'$Λ$M}+F0WGue_ E.+߬K.뮞#rGs4j`l@ 5.A"LyuxHs w=07z%Im<Qa|Cl8 Z¼Kz%TMCz5V#_#+Pf(ܨ-P0 E eB!bq,Azysnٺ ?|{':+zRagCϏRDs4tf((Z&84-e]jDyd_î"[*YFǏYJĺY)8 n̞ҟw^Ce5dl-MmؿRqe m2VZwnQYiM "?<owEbYyf;-3UKgN( ,bh uBq$Sr#C>2^86ۨhC gj#gbnT Xa@!tFnz װhH95KԐ&%ݴ@xT4ԜGV3NrnD$"s ܈xLxc= s;0T $"EY4u[*]zZ1x&Yc>d^J9Z~]A٣B.:k{ ^2DSҒd4L#cbD6?e!'4h.,tcl5iIjLpQݪ\;sWnjg~:)?J/Aj\a:"X[ٜ=ZcƢ*J%(4c_lVͬi'H4a= #%R VF\8L~D![d9&`7+v2KDΔgG>K]cN\=} L}3db7m1\ª_U #-q2.Y&+!ׇ88 =VP˛@u,4c{(%X YjrhSJ9s:=%gȳWKZߺ :{lˆXNGZA u|߬\N* M~nlKC ާ[ZJvib:{AbS*{Q Ϳ DkDiI2v#U2u^pdF2M a;Wp;еzס=ҺB\r bĄfުh׭&6 oXښ|ku8jd48BqT[ TQDaVfF-A}#5RiOBN.8=@0245v X^0jL[?wҟ ' +:&Kc| 8\}ʐ.?tKʙ}S^.C~|NRsh[ؤl T;đߞE"q&,U"o &U]\]Rc ::y.lJw|k=sM"+|CKA;[@rΐfd7֙Jr_S|'lu)·465S(2@`w rWenKżpE+%AuNvH#W׍Hxf,~S2ځ[)V@ &R3Fu۬ K!޻![vBM<7V6~fS:{l}i10NsnCRhuRWyhbP`NY&$;FB`NeS͵ 7rs իBĽ7~zc45Q '9ĚLf3< ) qc3S5ϻ塺ΐ`*["v8^RDxipgx?sUʞO bz!m- h?fϨ>d W'Ч瑁\YϱmOKCW"77 [ƌqX%:эIhXdQe6ljtjHͫ){F&uϕZe 5,K(r<'GCRf^uBYCW 7[oqzRo۟{*YDG3a}ggb)nއ3kO'LNbZI-ZpaN|e$ ˺tl zW 3y> ( 돢tY[~1ˉ[0g49B ߏ!66,%WwMT]\Ý!hmck0, Ϭ;(/2Ҏ<[p_cO=8^}έDxjcZ}1xg ۏd6>GIJu_~g`PDA:=Bf Y~IQGMmmLBm !:VNԖ!@%p7y119q;~ʲ(jn+X?;og'NHڅ|V7Be;;xn;IvxA8tɽEr+ %x=Vtx3=< ,ۿ{v 2ǃDf|J÷ac*JR2#Z W\gnFK;ux}uaAajW<Ս<׋I4u[?A_jwO0g[oGpl~slV#3~ߎCIpg+DŽO\Zf/S3DۂU#J%XoZ$5rڀ˄FrTCg`2nOtUde"e_T(Ta7Qy ˔қw *BvZqH&I,]TjI|*(&{+ߐ8`12{ eT vG`ņ qI(ު`?7+dnjQEyN`{KEb]n9.TI#EdPoKkc|c";x(j3A@*ΫYqlwvTji I!(ѧ$Sh39ݲUz=~$;EM0NwgI``+7k,L9;e#?6_UڎU:rƑF#˛0@|![4rVB2[)i]/_;M,]*yYޠ3 A{dc9(< kv$7޾$v9|  <ٞ&SMjWN{11 dQ%#Mk_5M\ߊsby~cgA0kQ w`Y5Cuj9[0ҷZ8ɦV[ RPh}6"֑u$GUXҺ,`ڰlj\=t9,8y\9D#3i`9hzurşo{88qV$w9 TԴeC0 儰Gzr>ćko[aD;CԺ []O΅gRx@6DR|Wz_GH@ZX@bٙJE#2&]7PX; sģgm"[ɻ<X*h: AY\:V --?}mh!Apk7^[,W$ӭ5QrnzV^pWCV&~&c]fZQ]ͣJ E D+68 ;6ApIn4H&Ob^ ?faP+/>JIԩ@|[)tV$eAꤔAoۍTc) = qLmw2p8ƗR>Y0 =o.ؗM3WȍOOPsUnp%_P&Onß$#ĝo̢֚Jwh7vܛ$ P?lMڭTW|o4`qJHZ1&n;4!9N~r+;C֫ 7ojj@%(/IˤJ%Njf.B1jȕƕO˸ Jb-?U?-F⨝ϙ'W$KA}!%G)ԣE4dbbG }gAsr%dK._6nP^ڙ!eGU% _@*4Nt 2VZ*Ϧ'Dlán#-1eԄ)C66ʣLgBKM=CQf=qʹ9[ ^"s{v(l!SydozZH)#2 j֩Ԝڋbd5Q>njmEJ^çi6 Jګ WA A H`X9]e.}sq]:irܕDҭud2_ԯ@;|NcXEY}00^&(!;Ĉ1܉X[ہ8Y?}+<ܒ ) X $iΪ0.FXZDEp`Nx0U%Es|KۺXSt%4*g΀b`(s3: h3<#Y'T&GIp_9?K uEQ|h<$2vD}".HDV}%]vOٳ 7\$ޔM*B"+3"KpZ 瞚W/kJ~%$X<[<\M~u PK[ޔH%rJQwUd [oo^c 2wngEuB^jP =4 &3˃QEv Y;) h-C@^w Kb,{RVe XӆI>zI-!tԗKQb5 PSy,qiE3X:Ĺv hCј]au<^-n  +XdL%+#k%u(͋`TiNnVfeDuU'@ef8Wf"&gsgqyw ׂvлp[bblz/;P'Hh4[5.@m:0Ya׬Y(-+V)9KBBJ` n(L Ky!)~+{P.ܳ[Q+`,⬼…C,vO 1"(M!k/0~ꬑV`^)>?%`l7#>膷|k +8AJM:cSƈ.a)'PW+eTRln.aK|Z;s=ՎWɠ_剬FZcjyXP9|EY ``K9~PBQc!'t8Q0GQI+_h3`3=]3&NGtK!Ȇ)8`: s0JKz׌c6Edca3i_@=vE cv-Ne_ކ󙭇K6]6H0©Va+0M# [^2w-sw OoE9n?k7(Or󴕽$؜QG&32Ce=`4`bo/vNQ\N]+.=ruZcՓ[4V]*U d46"bY^L'=zū)Mypjܸ#*yW]XӺ+~q@Z7 }L>f>}v@-yvfDLB_jZr=O[f@ll<7`by <=<=(qZ9l:[@U\ "1&{!š[fE1'}Z`ZOymlH꒥ Ĥ@b&㔇9!977e(g겁N#4,A˻Q i7+_ (5\|r pˈn$`rŽSW}9-(kx:t_t'.O+й[ӸE oa$"<"@GB7+n^P0s R 1CX*n[ ֪||~T1 xBt'6q܄vuo_H,{FXEӉ/م"yi;S AuaЂh^6}q ԧפf4b'9P& Ve$yB3W2Ac}{)΀+Aȋېx2t_z!?8dv|P_HdS򈅢W\:\O i1Nf;ׂĎ ]N wգu0F,|,,.phn.M:">p|?*ȇxj8'c1E:h؜ V%m 5W==@_piZ/O3)Fvr d ~)Z2 j%rz`wJT~V= ,6Z:o_^ JK U("_hˇbUBS)]e[h\Xx$Rdi]6O8nF|%k: ll[D/$*KL{uu59 Mq L"i8^Q3 5CG \O(Mb,4 & oS& F^B֞L㔑p=D XG(lgرw FƬDVI-Cgf:=[/*`ľ)`P=A?~WD5(&W"r ѾEGdP/Jg>7rOHG|HuE #ƒq 5mpwav v=K5Z7MSG_L.XxK5ҡM"RvJu(:_te{2HFL. kZB PJyAL6CHVwͱ >NM,m*k}ӜShnlCL=UVp(}%k75|,o`\H^<=r!J5HkAGpHI,؄:3@5/tkxsaa&(W)eשւm2m3d^sYXS nm4Ѭϡx NLˑZs-Ar@r8>YM8-˽yףn_w1\|^u-@݊ɳ}gnhŌ" ;$ϲc6?Pd_ZC fotb1k^UOr\I.yx{͛!f;WPṬ7'"s#`VcB}FLj_Esb<Iֶ3@y_kT$8̐Fn%ƽr.ë8\B΋d3l`"!Tsle?bhZa)MpGX /=^YnvDؠɂ!EzNӦWoa><${VgQkZCUWkO"~snzjmqLUS rRMǹުAgLN.iEedsfWhRk9Φ6E1HOe-ܺg2rC+H/\)eMK rGCZT F \ڃD>jsgk$xL :=h?A]BTҕFO_c9uw7<Ҳl5Ef{1<܂hǪ.ll)lq݈g W ahߑ%HbR@Oc9bM vy9Ý%+Ed5?@eeCNzKF6fwU7_P"I{ į::i Kc#Utk-Uć2Wީܓ).Zw9>=n|ww̌ $,NFV {ӎ|idxkjifHRazo\Q@i:b2yx+"<^5EŒY_'đ2_-~=mnt:J|G2 7d*+3ơ,ۜ~D-w <$[?OU'RaF0??$6H''ŸL`;SReq١tlrm"|`hΣ8?#P -DR/icp&ũYw_f䂈(\:Z/xߘZYAZ4#HY[hivNLnmjzWT,0 &n6u3o/GkrzٲAUY_L7|q  ؀ZбZb虚S]RL|6RW 5 ͌aU KX~]Xer v;;s9K̎93LDn:aT><6}'1r's<<)L%݇4TuHIB.*ښ[0\*Z'P}upwL:u7W VD!q89sq7'4zsGz~~#)SZ; 1g'Zȼ9f,==( | gT&sI?uu'9v+m9較fdBvxDH4o߆ju% ^k#ٷVn+4[j(~M$cҋ TEUz쿻 Gf hۛ F")D}K&Gw [Tf`CɝbGKJ-TtE0 WDcn7mRZsd/mmj?濒7wD1 dqlZT<(R/f5p&砵H[@-̭-I&޾J[S_͸(?j7?jl/nhZJ=Z~fU[: UN !U~aNjЖH|$YA=ax#+_awʷ0">K9B0UݦK 0TGsxs[lw%t0keF8S mE7F.rҾIqGv!NJ$U㉿m=h} "93m]A}цz"r›n-fT@U>щ/X,UFӁ MXe,(Z ~?3_J`n$ Pj㍖@Hûh+xCzq͙ɹ]8v)=ES"%R]ĚOG}A8+O# 5m^AL=+v!"\,٦p/} I&+H5>Z Gm;Orcձ g'(I4%N6NZZq/4y0sDAcc~YdFEuč<Ś>ې+^lׇO0,WkP^Tr+PqM/_!FFyY%?'](T4bG&eFOar"$)IP(i&䖠` 0IQ^ ɳ&iH{aǎWnj^wc=jJvҲ@hq7ϔP4`Ds&)KAf)DžkѩAxk# ƃKU[ .۫PLס*rgCX<ڦ ykX}>h,^>kL ==R}5ɿ_`Z'<[)ɘ=QHՑʓ'9} _\g.n+}9CCW-^c,Yd[ eV\MOIlt뜾4mGġ`l&򧵩E1 lY 7\.rvST@?L8ucX{?y΁Ge~Le.IeqK-z)X ;#vEQ(D]@sӸoe}v rj>gVaha6*YFLFsx ! ^PZQ3l_k< tBO#Ry{(sDnV~uN}i_Iܾ%]:z"N9-݊&#oVO[wwWb,ݰTv]- 4%"kܭ "%K8m'6y㪠-߇VOqèezS/aFrڟC|O,ϙeLpޥ8]C8˂ab* aWxY Ec+`X#i.Bm\pxu׸@d7OkP6+j+M]I:*mBPDgy1g'u7ؕ" hW:K-Q(ٍ8"IjQ|)>Is9db\:*A Ib!C٘҉AoLM7lX/l1uw2]uW`XA" 1tզ?j$N,%L"|-n03XT9$3IpN|t5E@~rHXG&u;64^ӥuBL,LN[pW{?慫LLdp%u5L8͕i6R&~O s)?c:"{F(y< pտO".N3&ۀgD=$|9`u})_5^m ,/g ,n( lYV;Yފq B) *&^MlP0q}ZsRrSlqΆW}`jNnָKEw J 'bΩZ+Ar[ G d"y.a(82Ki )kX,ukUFja3<1bB>)6X5{f/*ktq˔ oU`M|l ,ys`_D: GWB@XfA,I,ڏE%YҘ_ɿp׵?{ JLS:s cRP\ogĽ dQОམl:v| ee,DOW_I5SH1fH&#'͚r>^<]@`|AY ;vp"rvr*Vv^OfVmD&iрS^#x}5)9_J-l?0΄DTi % e93i#|=l#${Ď/#T0,\[ѦwYKgƒٷ*YvWTGe(+Hn\eHн^Ҟ6=f |7GX m9\0 וu[LP9' ؙg\RtPa,dP21U(eq-0AON<0Sw "~ ГUCv&kr_D.hW N'~HzN0?UdǭΩ_צ#C".S.y|dGS`K#ȶexьD[ #e}-97+~>mO4YG`l+ KtpwXC1MK5褊qvzs?vkY%*ƴK^;.*tQNܳF" ƞ J#yR̝9vMdV6BÀ܎!:(3& \3mzLt]yÈ͝vQʑ,Y|<mr]}:|HnMcn6SÇ#qP ǥ`&Ɠ+PUKCz2|aiq+P^:xvu¬}ĬkE$?irT*j_d9h! 2Fo! ؅8`ŨLLY_:`zd71!c;JjŒ:FSC4- ki q-ưj#7i@ .$ϰ{- pd se f6Aؿ8>TR@zhQ_jIJmMh!-i߅G ,lإcup͢>3yɉ{CMe6\PD/RW$ƣ\[^Rmno-f >Y &}K (k?NE+qR  0K1Jݶ_&ȫ%e/HR:NNŇ^{שּׁK0/xq$p %$P/]t.$_M:2 !eA֟\O2T-C\9NƆfj(m,9 0wIh|ÏIޅowU ܎N,܁9OPZ1Ps>FjP!SI0ܦN{*F Ler*>Z,5G5mhVYGMcOdlZmp|-$X[ GP2s!]i{L ŭqOq}Y9=՗u3+6\963{8")-y5#^R_%E .=$, bjLO<9z) $J7r‘va[{Nʥ RH(Tgŕ_UR(vY8;0eMJ% Fh5w!I •`24=9/FU+3"%L~R*o$(xDnr@ا%o5b=2@ 7v=}}Aw4;ip130 hk#D[%nyxQ~fJ[?Ew!/JF5 ^胦khTNjz&t@{'"Fẋ cw%kLCD<υ>@iӴ8F}s lM-I~:_1zkwk!4FV\qCjMvSKRt (&{WI&EcYR %i2i vX`ԙ3֣)k w 5l0R.*FR` UU7T8σ«龡;~( sksy7 m_ː0I R 뱨ԥUwsX8m$`QNT&uQ/nxYI=yx@ɪb 5t 5&ne@-Kۨ]":Yy^S":6QU_S7??c)EEĸaor݁rvoԃc YqIH*SƎ=i-)D(Dz o)we "DZ(4?prb;Q|(_w ;^DIާ/ Z$"0'a5n۠fJ=}%! z"=\']ԟ/ZV)>#t+Z]D s z8uq['bM^1LH.l!hJ.v"&ϡN6 r|tG>.DogUnJu'}1וK[]MTgEz؉)k@R8G)Rp&/.'.JYXkGFF1HMxXCX}9l *-Ǡ3ć @8 qAԤ`[toosv&H8(tYh7bc˰Mۊmk+vb}aL5.A``eQxw6kYcdV3@rR( 0݄%=JΎiB@c3r uY@n_;o>KFA{0OS+=i6/p3^ flM5ТGp j'_N/00!x־wr3tyd(ܖmg?megZ5G],˔MLC c<{y6Ô u]~`Db/+NaI&Mꕔ}b:5-< kf]PkKСd**ܺkU#+}YYQ"KF (dbeŊY!|_s-IUl6U蹴RC~ -c4x'9L!4AEB;3!yެ /Ϥ צƚT+?9KH{ VQJ N,m<5ʍ#?$6];zc:[3E""hULW>W0d%⭫]~

r=ڟ,mNsp{/D|n8# )Ih\{agD˞Q6(d<o^c&ZL䏗y@/ʓYo3r k_ڳ*դSy[Q? ,쉬[俕0FSwa<5son2k 1+FByz±q&He!>mu9Dq0A/#Q6'wT@ AlU[#Y?1nΑ+`B)aT<값t_ 9pr{YuLo7W!GZBcdy V~ùH1\w?;m@/gOkv̈́&"ᷖ8O )*y6AR`D*ćq;7H;x4BK<,7; ^uah H \ZEs'n i6׻|LlGoS!(I.ҔP1;VP~+;jr%ON))ʒ 3aվvpϫlW>pY+oֈ2HG՗]Znnv h՛gOP`:}ՋSi}k19,v˲FiL*( =ɬ0颯 RL9L֥iY:jzƪLY@gAX%zVؽZZOT >9.&u̷ߋ'dP5Y8n[w.62^Ǘ{g?19L\0H1LQeyj:n&ie/THlSne^m@p~}URz|*JOD"he*7HƎ]<4!*AB$xɮ[HRsS:4~kADR&VP$׊kuq8 0ގ[<.>k 6)2aX$ %~.)Zel+]^,2!CD~с˲L㣓d). %xDL0?HIB| ҫ%}N2>wVk ò\륃KvCϥ{NΔ3|"e`M^ &MiDC2䤭fNXz/=  \:PN ”af*(.ù:A"xpVROkc.\ei =8mm:3 ƻ4S̐6>dN{Ё6[Da]4tAAPk0uZ,.[㈥44#V  N`K%IT>? >Ԣ]p܆;>[wZbߧ|L.V K״R* /ʱbںϖ`XL\~7^Xl;G @L%JkX 5SQn"a#M+G!"j3*EP)}.ҡQ,s8xMRh\:j:b#xV'%ray"nM1g!* 4+e-Ҹrť.18 W ҮoDAaNY JvbxXwU(bK."E~Ioj+9 r/ZVWr>cEg)ҚGmʎKgPJ*WpR1|uۉ o-$1Dz$WH2V7z UE%F=Cr#&WX5xv(6K q0s(ҤިWۘ\Đf Xu #}/q!!c1Z 8qB#Ħ>. ~ѴmjNjTYxs*M}p4J>uyN)=1DX^(mk* -* 񋄽J$% _}+q$:SrE( R" d:GP7o25ft` Ŏ/e"Y|)xUNCDck@[ gk.Uj5oQN;{o>$gK>jv HjgwJ9t,8} " zUMie[2Dʍ?KMpA87;èJ;Ug?liirrs!ha>#/‚zH ^`~2.PF KV7c-s1 fJ Bٗ4#v/x<۰ޙ֧&\Y807\50@CNcΝir[Zc'<1Z;cB AAAѩ~Ǩonc-we!/Xq{CpA J 8ü /Qc$!A 0 iQ[ݝWJ+Ȃ!CBaq9. aqy8I>Ox:J${L?.W>-&J?CX9zR[B N@}>vY(E(T&eoS7G$L(]sC5V5C0xmRe%)C=H]"C>#bX1!c0Bb*MZ9E Od; PmZLbS!o8YVE>@ި0-lm]ԖC -Car_3%cJC(K]aaHnw/25PsHoY{bh7 -e[جZokzC3WRxȔ֕ J0]hTE"_?k qgZ|ҍ~tܻɔ98韵}<3bV׮fb_􌝯 9yqCF3KZr~0[hOd^N> O9 ˮ~D:) 3'o¶"vcs3Ԅfi?_lo"\Oibk"nHQ05~35UlW Ֆ >1]v [kW/ KgDS2wr `]5T : c(J*Ly tm!4;Z,P Ej"@4󂃘S(HOZ3'V?)zO{SH$΃#咽[zx ?ӈn׊C?g Z%PǍ"p 3LIJD xg¦`["|vgZ~SPy%͸1G{!VD+ur3HYN6mtAz*T&dQ"B}z߁HӪ0H,=s"`wqA"%o^%ifY&̲]WZ鍘E4܎v4EZtNd=Oq[vzy!Eƣȸb}k uzמCmD/6k X t{ +I\iQ%.3z`IW"aUm%KIH$ t! w4}1SF e^7#lV(r( GzSǖ[^0m\kd'vWqXS t`o(Ft|ttSڙWѩD $ѻ'31,[Y~!.>K`ڔf8W50Ko- o<={`\>`lvMW3A#˄>4Z~^LqQ2j)$Ubll7F $@ݩ*~oC-GG0Cl67퉚{EB1<ze;SCQfDI r,:W/4k<ƠiEgMWn;b~BQͷwQ#?;` 9[p[~6`k1#Ji|#=`, EP;`Uq$*Z B޴.G3[%y3a͈C6CBefI5FȈEOg˕xմ0 FC֢ZXn Q%0a#3_Qζ4Fv8UBMeUc*Vo7v+Wݷ6 8iP\n+9^AO*H"}VIWDih-dM%d@G F \X_W#pęԍ-ꅯꮞO8ӃwN(bQr珢Ch+t(oDk),޻):UЕ?`X+ (nļ^u] b[<|l-Ɂ,3ƳiX[v;EIO5\#y^XGc%U3e0VWEN'&J K*|]ODtTG!\P,=e^lʣA?yW^13&:T;&'otjbSY]CGVXE ܣTwSI 7VFpsx&庍UXbA(rH>.O0Wl.^Dӥ⁙ʥ'JX[B>hE !.9OZ563F TKb` =j>s0_:VH6.y٬t&T"/vac: 2^6%u9|BhF[ ns G\~S8Ҵ|)}G  _Z#q3/gȐWN CE94#@ɇm5Tњsa ؝FwIA"EӘnl$ʏWfC MJ(#̕yJyrٲ{X!m]$xT^-"ۜlr9h#$_z?Eۏ]i0>Kb/ fjj}wZ=x۪mPGޭwx3԰BV.|p^ߠ0(^IʧD:G)B4/VNI(­HeH 934E8,Dh2@jk!Ke/ L%l3EvVr.bYF95!DQ1 $OmL a@n|m2~b^q[PND왁Zoʰ &Hdnqdž *vՄwmJFMZ4tˤ>=$Še;@ڱ0),ּhG\mj]uATΞelL,MgG2S8CRy%%vkaS7 =3̘XˑMH9(Eh& +21[] I:{\|V1[T ݜQeY+iǾWe[}GՄ moY<^~Qld$urSf JuW# [+05%{-ƏpVi+@ w9#i '##0F׽~Agzk83B 82ēyK%~G c N.vʱk椸@z֒[PAVj <.խf$vcRԼS%N>λ]gHhVI DWbysn n%ơax^L\<#kIꢚa/gEsS^'f ۔9KҜuYrјIvr8+ncٳ%ZLhE*v7m)LgAWiIkrӤ_<гJUf5SRK+}Hm߫:( @ Gpd pN'!*Z1ϛ*-*BP=pRhNi)kkBQ˵% Y^YIHbij;_)1-K~|0-?hyxqAɢ6uc(QbU5Kcp!D3RXVMϼ1t8_v̗lRdU.NHY|-BğO$hB 9q$2pEQX# SD˿X/7 3avJ+tZzȉ!O86H*ψ_o N6O69ݔmBox$ŗ8VJ1ϡjթ F-:l'7+~˱r_xU$ R3I͹ $sX{d6+O4C'j˟yxTHoY5X(%@BD0[) h rHƄ7( %f%s'PRvҍŽ+Q:͒^%BےntيVh)÷zpl,̮ ?jV_pRq^}ApSvB+hųDvHKν-u>󛫅a"?vX&p 9&jgGՃ-Wi+q^{Ac1M1ЬjJZVHG@ȃ)+Z,|$plL|#7@:Q^?8!5$-ZiI@25!}sIrU`JuI6YW67n;:'sOJF6utWmNGK^)\N8iMJd)xZ˓XMK2|@^~}(XnRvB!9SFFOv$ԧ#Ir8!?ks 2ȳwӺ>X)rY:)5F-u4{~S-mQ}o(m زgg<'4hjJT~L <"FypP }节I rKto'k:#僭6dڑۮ7ǃ)tD&spMXv6-AY-xH(ڧ~YA[:*ovO`Φk%*{ۮ> Ny>>jiXL7E.R vttG^N1<3y$I{Y7G7(ۃzVI[" Asez!reWMʊ }adۿRJ=ܸ;LRxT5iZh_ ЗZV g oHb5ξGC&jCQGd""ԓ[~ha-a2S{x!-s ?,(^ڸ%vMϟ`ZXo%SZ-}\.ӛ*ȖXl] H*2ayN?%{Uڡ'϶g$|w!lSfۿy~O;S!D,sIp9o>S (ǽo"2|Z.{3zBfشKd5]fVxJ|wؐlǒs:R&\FzFQv*5d`]z4{sfz5mкaOP\: 9W:Åն \src~ݺC=FŤP dk0Zu͡ZhyZ]د#Gg |>i.9?kt,=s5\FD\"ˀ_=&MmqBD<}PPXkR s% / WnjP3(l'weO/܌ bdmJP{Ԓ7H9p]lzqq@§%,B!mEqyuפG#kV }ǹ c@Cџ$͌waxu?2!ۭ,(K?\rhzͱ5p;1ʘ-%b+Sh~{4kIzqdӮ#"^BgZj)id)U: vJAzZf} Bi?G[o&mʥmUIGX2dHc=-FI;k"-!< \VHN7/4ym{@0D 0exB[wHuf@J5Ct/nE4p+(tEg;ɮ9p `yԞ̓Y/W%RyB,kAؒ {tK*oC+`/c9b\mҘb`qbv6rQQ$+OgŽf/Nj+- x|o)YHE0m5O5B7HM[\m6ҳA(䘰zԼC%>C] '[mjtx^,ټ Ss#j`紳j.y.0;c'T-:kH w)kѭd6I PZ |R|[.U' &I xF~$_`fጹ6q\ӕq$h< Q}lc 4۸YĴ";.6(ԒkεY2c0+W{ 2շ'\Wua 3 GIlei#P43pt.[X4dYp3pveI֠)qVxQ巅S{@#8j푣9w\'?jmhu`R59A!,FKU_ }? pNt\94l1j3蕶|-B3h?n.Sr\R3Ȧ'+7#QnoZJR Vrr+Sv\xAAUupkeP󟦷Dlp.8׺ͪˆ1ܥ߂z+SO~E~̉PB^lwq, KV:PNc3yRtgK/$5&n,Z|Y zd<7z/u[]R4P9On+ t3լ2pYUC[ ^[Κ 䌲ҵ+?X2,Q8dm6Cr -CtKvmu⎻60\^"WAB B@M\( hWY߀Ӥrm,q`$쓩i7<.]Pjshպщҭ¡bWѡ핇]"c+-(T6:SٺTņ SGz?WGw=c0/60PC y ڭ.ƃ U ڧi 1ۙMg&ݢzeBWg`-*X:d({CC&$iU~HaWy?"gpI u QdVB etq{ۂ<*,C92EM?\`ugYo>5_}L +T[ѣ΃J'8nc%H޴$,-`\>n݅1fk뛱="a˹&g WȦ=B]'˂5|Ŷ;I"182ڥ]{"Nߠf\Cnï 5;nuڔ0O̧r.:+h0xF0:'TnjwBZ@^CIh4؉*3xe``{ؽr/z.z&Ѵ_Dwx)b7o:dlJ4BըT">2 XM*`od@1Mt9PJ,&;Kgikzg!+Ĵ.ҳdB¬yM`@58EtSIU7 7r {QaDݬOt ,x/lmȥM.@{d0Ts=^fFLd_%R՜aPPZ2oxD)Ԉ} ?.!HCZZ b: NSi:3 ])zց(1cCWPW ôj?vP?*1vdH~q ))k tNlhIRȄ+|u8{n&h u5=ſh$-*7?pȒM.+@v6VOb-/NQ[d oٛ"$<˜tQ B΀LeES\拟07{Ha{'^'^L8!~k)=QEk"[;f *=:쳸wgקm&3צ3fW)- 7BbgKS2r[t gLȗ -mA %]aEQQu?[^#RSFbv"TiNAg[q-W(>=_:\nϋ OBgGy>M-`y )=7n^R<]i ¥ ,6b ,~Ю[ughN~қ!${k/KR`|qOk^QT*U#X.$6u3^0TSCy'z.wA^uOӉS_M2Y?=e'C 0Ka J@o&ƅXN4낳Rx{ >I1d@fQol'mu?>[\\V9W- 5j(g{mZ/EAeTB1a*;w1]'=o {CKAk/3h!+aɃt8](`#X])UoǙ"4!T}ˉ;P!5 jWWmsRف,."Z^ Slү}˕+aPգ㹨ZjJŔ ^an#'ڏ* 3ˤ$ g:^Lc{|_u1Wm};1_7zA0RLĥ2H uRV.|ݻ,@abJ(!gPi?oS@F:&?C_5*NNl$: (a?:яĞJ]] \sy#k0q Ԁ>jzSoD9%LC0\^&Y%sfdI_9g44\%Yp[('/yi@*#(J'쓮u d79GyiyD>GZ{bbT1/*~vlr>u=WV71O^5o̒eE0'=pu{ˌMv#,VZ(d۬EGz}d[$rpI W^$yBĵp N:wh$f Z_ `9Y0=wY CVZif?Χ0+6$4ju#Ny=n){v?[oj3ZY^z7C Ql>n3,Ayqu'ke+k8 O8`8~>HEir Ke/F^5ذ"6K:6V+c\r4 sƒ< z~m2Ŗ*aČj9AE@. 榍ϊUvY'P-d<'\B OuJBNk/MR$#۳;G0HgZ%ݢ˞@"\rQၼmt_ ?Z #,#Ct-&(yW*GЕ~U *»\eiݱپf(sT=rak<<s˕cIס06 %֑+۫n';:hKrbzӛttr=5r ʠp=ƅO a;3ѵJ~u)L߁x>ab<#cE rmR1}PGlA,rd~ۇߠ/k6b>82^r̋6 "-=s+v0ĞE:ntCrhxr{>WnOY׿hKydl? %3Ix@qY oXYɐzvH~8ݗO{ @lnФT13.󹸽 9s-+L;q{ !*?}h;`<f ː[F=nqտbn妅Ǻ =xd .1 =mxqNab=J3뚾>}UUmWrXle1KDl (2?'azi suhBrQO.rX7 }[jlv%`Kޑ< ] v,Irh-[ng о,hmʛՕ{w`(na¶.uw֮l*P\jR3&* و}?=(B 6lcr*Ba u+f-/IG4I4͌>,L5:mɻՄPTs7CKs$~ױ&L7Fg4Ua%/b{KS=p4&>qR,5Rx)K -N pA!Eٻdt}kCɪ-Y܎NvC>gx7ėrb0$Nsl!׌ob}Jda/װP"wA>4͏MЪ'),{{rlBkv|*?t椃i݅1bFK˷y0j/c6Ͼvx;"3g@'UgI]#%E6UҾjy灧fG}Sf2f E5o;R0eu _,'|y}y[_s:{7 qeŕgL /)ӎtmWX_b_繖.DrˢR(@C7R0)sH-!QdyʑMkCf'8>h.`©wKɆVYYoJJh|uFb'y8K10Āw%IIlI >9V~1Ywlo,D]gjm@!gECs0='&&]0"GBޔfXh; Vq ~Sٓ %; J \䆟. hXU`KǚRKȻcmUL9h' ZPT:6HdN;SJv9C)xǍ(8 2by&8 }Gig>˭mHnM@O"&ks&{Cg$.2sz'!2K+myM@&r0ܜ[%(w+tU ,"zDC/שK$7}n|bg̵긠ZHuաXkWNI{EI-˂"3U6c(4nS`Sg[*.a-f^V8|A! R pӖhK39P?Zg615ڔҨo~ y I|} $| rF6;M^&b%ZK旃0 ks ](b(A:~aSJgv OhE$)=dTT%%侭߭& 3=˅HUHgYgo\KQz?GF-c5żDo,$wH/ jF}9i3 |j[\ đOb:J *U<ŒQvsS'`rК!(UH"irOXG@gg3pu#w%Xrהؘ!Cv$X("'|E0G굳§Lj$fd7{:l os/Ň+zM۾hF%Nrlyң> ]t8+E2&yBpn b+VqQpje (qSEž"L4ibtbmZęTg됋3 2d棭휑o{x{])'y<`EVquahU9&FΪ,KbNXN)e_-e41}{d=XS#^F3Pr% OJD))r͇L.2ѩTrOK .mr3t&nSf<4aȀv`ȩubLb꧜w(=SqJgZb︷ߚ7YxJsrdw/CT.+#y, lƍK7GӹqGRMnGL~j)Jl )X?s/0wvl"{"[xG]cd(rjV.tJHFGӂ=^~˵)AΆ(";/]H+ϱr,M8 Ӎ;ʬ*}6-"̿zhQiq@ѣ}:6=TsRYYa:;VoZz4L%g[jX߸&E14= -aE jJ<"ŅۡY"k&osQ%Ckdhj5N@:+!>*gK0O_ݧ4lYkˠYҜzѵwm̠&(zUQV]. Y-~Z꧿NL$ ~;+><9)A\n!hfF wQuwBw"isVՐAQ07ȋxS5ǵ>o8Gs7D"_i%ϲ\S2H6=4ǚCZMK:_: ul!ۤF@lV euOouL%P GTl6/-%8DkQ-DK8ik=ⴸu"wÌqJ7v. =q,b?y׈W&q-ֽU,wjO"e>I1<kڢ'XW )c6buzmM;m.AYI890hG撘eGॻe;T B??e'+Ҙ?çyЬ@*=y!d Ik`{F[v 8vBWyLNLo_"@uɊu8g*4Xe[ 1!՚jV;V+`ofZK~KPV/D'd0NR">LZM[ųXYDpx^kPٌŤ!)Lw\wW5`&ku\3Wb!]G- 3.(ߋ9"dɢD'dbvY|4+1~*KäQfDspJ@ɹc=rd4d/EH%0^Ĭ1_0~O ΋ -jfZyw 0ijKDh +O[5-3Y"sc2`pb<>m$XLj /^ #G,q/Ddw!r5d YHJ.܂˙5cSUB;G)`P% h&<0S::C0FE}+ۏDg>M-Aذ<<,kμ-ޠixcV>ёrK.#ѓ?qJ_?X1Òt8Q1wqo%rX%dZz NNxEXzm] yM&RR]qv6}: bѫ%_|ΰ荢k )UN#TăYوxKvB)wp%+DFu3haC7>ș+C0qz#9CZ.JKd(Vi4KųXphe EF1s;Xmy^1\:UwŸ`EVʣY8=WIPqO<nbQOkRPMy^!Ԩu xZ4|gmpLj g+hA@ݕy6ԭ[/I{#c's[´ ;ȳz v.T'?' k EiωzVXr=4o2z=zފTW|zvG[ @Ԝ$/)AǏ|gI`)8_3O7V>'  ^?UWF1dШ `DYj p`2 D?'tSe)W4}΢nSk bOu}MBxPM)\n ۶e0ocu4B:؞}ͽuMcXC@5CaQKkYdSt brٷpbNB)^ ;i1~<1ԌȢg *f9P$CLFˢJ&F$O9ʻ8Qrh^plu#!˃@R?G $9X(OLHR|I hq#0lk\*Ya ِ,5 S6sxͥ-n1+JId'}UϨdAE[Fl0]SBTuhb;WujϖQk$D=URsh0@LO#_YwjGx2u/zm#LC1 d ZЌ%> `] Z8Ko?H+>MN*2ߡ'P$ wjR}e">A69 sG9Ou0L+9.+4ɨJݘ!̯4}¾ě˸jWV֝0[{ٌAcTxp!ɚBg`* S^L Y/5:트QT =jTNi㝽nq۝^O;fj]Z+X&_T`Ψc;u: `uA`бmu؛( L]߀kܘ) -\'r?*j֚goʢk7"_Cn%'}{To %8p}3#!n)jO!S$~TշUIۨ.ľ]bx&u%CP(Sh6`#%R O/xxg3|cu(Fao8'n< I[lz֊Jܘ?g6FcA=k/ڔ 1_a6#b|gvQv1*5?x\ _s(n X[-ā9-ޣA5}uWB71KnkJ_^PA%#:7_"dH` 5+85 @D#&j'Tsg:TY$~%cz'c%5~UmB$aP,l_u<{G\GM1v{WXWor߉뤟DL̯hηZOe&/i^{p{_l6fxղP^i[T~NZ?AcE5KKxʙ@L,K<̓A^c$Zj"!DHmh rreC}w7v*؍O*BV#V=Կ#9߭ݾ U n#WWËqDO6깋_z P3=š5gRŞ GCZHOؚB Ks$?MZ%!s+r?=M{Y$+6R\uFjm]&absҥ)ےfc6X>[bCc6d gCJ|-(nMg=yCƈX[~_|j"H|݁IFkWb3{22JQ[*/g!:X^j m>nh67,@E$a>H&"Lz]Zמ Pġ8 R?os>0^7cV;9P#b=z(~6ӌ] 0r$Sa_tQ @Kf_P[ `e<59x8/!A%􈥜Vĵ=Vn!𶩁K<ڰ9|Xo$[kEEYoUtajv^=y/Jۙp'n`yC;4m/3sHQYUe ׂb#ɧ,=QBSځ?Ω,E&lk# j4߯躡)!w|IjAGnˤ02kɄCd*^lY8 S@nῐ˖πF;պgk9NÝL9k8<;#z n=)Kd?3+?eiI@3Wu<-_&& oBR)Q؟LC7HǦA/ >/FAo骲j.E0鲪lۄU!Y/KJ?v(aQuJFK7* *m 휡8Ys=k@룞(=pr.8[I :>-mhi"BxDP5:W\ܳMe,s'3S`7F6}n6jΚn![EָXE$"c )t߶[Y>~=~RzРp-ќ u馕m^Ҥ*!lp0+ S3o:!-3*mcwI%K]2}E`K:@Wu寤{!.ķ k7!BCl  {bۯPߛ>@XEwm1a ko%,am!YkwA!PXq1-9v=y g&qts U&M}Sإ@7f' *~ [6C:cPfz> Voۗ& AXd-튧kāW_M4 'eݔy??־&w?*N|2*'S =-^#YaLSXD@< IQ U%/pqmM[,ŋ H1_qGpTHcTIjJPALzYVٔl ,zz+} ǣ9g[,*׃kZ\7IUT| %7q" cw`^_0̷TGݑ 9`Tz[6~l v결V s@OAu<{Nv`n3ArA{+ [sÂΝP5(k> [˹I0gEL2X4)N{[Q*_ YE^dt}Y:#LT~Iqp,EacQlX4=F~]qapjv+c&JG,E(Qu[1R<.ڈCNdo)ꐍ}0kDhE)-LbYtE1AwmU=5Ta~Q=hג xIi;7SʊQ I/Π#*K! (8 I%wKh+r`&AfR_YҜ 2¹,֕kcso@uy/Ec`ElwN&C"pG$b5?ooYUZ|Ot.&:(CoO*y+uU{{f}~nCZU)CE&?avb̘熬]13r A^9 1_.H}>9XF$dVu-9{e6E* Oշy(HDac)u֫g3ȘYhp7-]yŜ9gZ5Eq tՒzD f<ϒJD6G#+kMꍄnZ;g+,ه9/NUx ÔhUɇrvk\BUθ{?`{b+Xt0AI |/(EqS $0~v>NDJ a{"j>mJ'6םMH4Ŵs̕I%CL$4CEׂz/pe;;"G;r q-uϜ"Q 1Ptsr+#"[%W>/sl>V&cg޽nx]u|Co@` B`~p)?n >iXv?UR2ŬgU6Ztwxpl W;2f - нHj 5^5qG=a퍫rjTQ8iPeBEgٛ}d춇J#Xk`d]-dC'o_.Lf_`H8gO)r?rOF;0o3)s mKXIj:S1W^E']d{NEU :EҧuSq,{>raGo}ɉ$z23*Qja h,P>…Դb(굃h22XzN.=GsGľ/򋻡 }9dbm0?U">Q cn<5VB'ǝq.~م)) 㑫 (uS? [BYxWumP"W>M ;mTcQQ27yg OoL]M{O#7@Cͽn2mFmsz{+Ծwšcj\y_W0y69P6CbGޟ",z$iW':n|3MäÈ|ώ2+Pf),R/cӶz<`cȞM4b(e@)>JÍѵ#B|5z2vaJ}bL;\XtE4ONZZ'=o$ڌL\qn6MD·-[$ ޱ --1PEƦq\W}?싣 1("_ |[R-k+@~nBwB<r (%{?7od"%oo B,GdCdT۽ mn匄,aN|I5l 6,8W@5,%tp;1d'U32@~ X,b׀قꥺ>|k;&CoC(v:cSRcY `Y9ZA~xەL!3]=y$`s@;Vu!{!nXYt20zך e֊-$|LI51LiB?qMdruV3r,reXojw^Sģc6j[@ EurxGO1 J+P^y UoW>[4A63g`YllVI'D$Bv/&0~҇.X#-`%xRH{nݝc(*0Tһ>dv4}Q`}aEȕ̋l255ϢN*p*vqlx] z5pXZ<2ilj'iC˃\bs[g\;Q ?Ѱ^˙yW%uz V[dTKw,@mb)3gil#qfX$q}8$A"Oh(/;4I c4DC0 H7c2%kP~>l\3c)&.iAk"ktvKטUDIQ6h4"Y:d~Avgϛ" g8)wY9Zmޝ5Z NcRÒO]ƧCŤWzh>u9BDED ỗ,'Qm+J:#R5:>2Mnp.$x]uȚr4S;ԬPr^T_7Nƾ H6#" pQΖ`vJTˀ Q'fc&빹Ke) 2߸;B3 JH+ۖV΢- ¨vH+B=8XTjvS?UD&P[k͛ hhaWڙIu -xҀ%-U  )*-~S^AjOˆKL!) l%>PDmp bK(FzbS?_ ,!=!#Ƨ/ wݢld-o i1)O EfȽSQj/Ts0XJnk!]UU>V88*;[E ?@$/E c꾃'TOtOZbnTjl0y6t"Ygm0 +LؤxمƵn ݫt6dLqww𦘥!c;Ll%S sXEGbiRU|G(KxqC 6-cX7YOg1G{+BQeFZIJ*|S! 1/1p$}HkXoPﻎu8E@- &VV]mmG$7B|1WAG06 OLpAnhջA͟<%:;ȗGjD~|`Y+{( &6""T.MriMnAA. E5lbTc,@ ɖ N4!dd(ZNA@ :I]+͇] \l͚:z\ GF&1 _'0naZؤ@FJLVTIvFlHI#(b?!QuXmyW^q{aXfUo\W ÄtAp2I"\hXkA=ӭ@Vu@~hS3TA5K9/iw.՛:Ţ.(ԁ~ϺVc ƴPh`9p |mR4Ƚmu)/u>~E۱̳{Ez-y1KSJGD9LSV刭pooɸnn~h:MʰHJ3zEv/B&\NK$.[Ǧ7/hِoX+2[PfwYutq!^@{R'1\ܘ5"J\Qa%ZHő@Vq4=|`22pO[;qZ}EE28﮵aU&+v _PSm74uWC fESAW:Y~ 9H在`)!-mC-U&V70 o,^Kos^&le@裯[$&^}p!~b]xxlUhFVX#;sPA%Ǩ02bb%tڢMb]u~6Gv0K.ĖҴYܓrz6W\=]P0̅LfwF)ϟpX+G疇W1rdrR58|9#ȔxX2x"s D D"H։R.o_ELu`{pŵD-짽NYXY3A;-{:FJ6ڒ)o@?Z[5l{Ѱ-\b|#7ч-ES\j6ĄÝ &T5Ӓ/tqUz'r9̻k7]g5u<sIr'50,ƺ8L*^D9# ){pІ땺Lbd_Aw'1?'^P#e8es0&#BYg `Iͻ\63Ab)azq D1DsEwcUkX UMJ` A^w~3ʭKmy6U_}i$[Xt1Xe4KTG݌F黀tz2e?m@?_$˻c+bʁzU%?jhi 'p[F*zh5wRc, r ЯB+ 3U&&<̲)=;Y{f=S#i O S?}7 E[+t&6EwM5b]/*$Fjt~"6*z0s3Gτy֔A,=pF8sd{{&]KyT'ȝV90c E)gGG~ y7їzHjܵf.c"=ԕ'Dlm/rDDʟT^I!ReIf|دSS"f#'_{lQ*ސfeX͍\^>)q7ls LJ]={N6]E2Kи}$GW4? ]v#^ E91YUS 0EW,+Dؕf1o4TXEm%R{0~p#7%{f}bla4dZd óنSOPCy3|柛Md M\њ#[b/VlPVŋEuo '|"bI+{v:`78]q} )o~{+08{=X DnHozIQ б7e]䀼W߫ܒgpםDo-a+7g7qCxz>c/9B3)8^3CNtl׹Tb+`!6,S© >cP%hAH5ŶseB*rϜ!܄ny"0%I)Nm1m.v6R4z@&pJG6/W҈w12.,b}~쨦]pp/u0xQ*M8/,XFN`S_* Վ&bs>' Up/=Rw:kbN2vd}Z-,l'GFVv4 H'6ODrA{qFRe c_L>Ekn6_}yYg c#׮pCDFBYLY 6?<CM^1$n;Кloj䁃v2'̴$+), vҢuZbx~2q z rq*7ԙ<@7%ӱ;V>/IZ%A/}ގu 3~. *Di,a݂ wܫ7cvЏy\U'Lk,7r-X{an+3B,x^@ ;y˖2?QG5O!,ti6"_5:gU~X)]l5p}'Ul@}9$/5%/?:G y-Z"{g9%bxE]3E:2r-JߔU9DӮIF?褘 3\'sXUZkGm; C#> w#+a5@d.xTĬ4yF]ԫj-ef8@]8tEmp$l&b II[RBPЧ#ZtX|G|zfC*~Kp~͞Ћ|JYz<$[=f-|BE0"w#^Fr ='!ZYS[ѼR -ày|&Ju&C)ӥN8ȾY3Ԧ΀ [,7 q#z\)s ;yޣUmN\."ts(t}P]XseFFhFҍyPpDjj՛&'/3R,%_Y i˙x:[ði( ] 3a R/U Ͼ{*>iWPR4R'o28FNZ3Kī΀ 9@o;CC3 +qCK gSk`uj˩9b .S уTĵKw,"q1~PiN#R]%*vXmVȊ0`s݂Z-7ؓC.@$%Lf%3] #~:\[DX; q)jol.0FӸKJJT2׏Q(;=t=3'yHGND9P-A_GSKSR+8+,iz:UV9k' T0UF+K`]QY1 Mf_%F*簳JQSOim _ې41̗Jz˞k0Vzts@c3WC5ac`M`0L3--oDZ>j{= ?IjF!* )=ڇd`.+ʡH|G_Ebi" 'Rom7N˩ߋ7@S0LqJn ]IR]~&} bD䫉:? UV8> ٜj7T zx}4vVˋ˕u^Ii36_qx␙Z2֖8tƧK Gm Nxn9+e(-B)yY"cN>80rG\u-b.83]׷pVoVG<QNKn=WwUCEA Ja)uE'AB ž[%Q!)EK4 eQ\tXo֙pjyI}eْ3',YZ(H1l%;.(DؐlW@gsf]U 8B#fBRJ.98DMU^!5xB'$wHaQu қZS,.]LSj3jQ ;t1%Ve?yW(j9R QC6U*cCY K vZjd"EE|m:w淍ү7Qx$/  pH1S 2hv4.ew)ML:gZh]XcqpgRtCT<63bxUy% yUN :/ q\NmfJX? Dv,I&cKM(!rr#C|(8d;2X!|n}kCC( #7WNX:@`#WYa2D LIiȺ9fOuA|1CAZ-SFrݐs4"?N]!g;K:lbEa< <5&ApB>YBWPuES)"R)BjETmAȣR< :SH\lg"ixE 6.m?y8OBPfYo826mY4nfWũ!wTWD|TV3?6󱓀>,͕D(9`P1W4-=hD@`+*.N e>'a2|oO5iGu,la p1ksѼSa5g:MLjd"\ݙi'#vWf]ec|:5G.V<ܹSd8w<4+?WI]U1Tchk( T8\47>ZG/mKx-qFPR7DL?E|?W81ںɥKȟ?I~xgJC?1oB*baC{DB10g#'[e8fދvR3_ZHWۺS-mPB߫ _v?Pz АO:oU}j$ YHk6Z61pyrP$@WD1;%<`qK>9'DӑY=#){2(Qgu_MlX#'ͦ-N1nv蒖A.i7Dzl[\}^|cAQU[+)M@B %aNw6qO$. Ѻ͏Qtl@]d"qa*Rߨa M$@Rl";<=UxEŰ9Q+VUUiy߉f$s,0Zǧ/7 rqEhHEkEp!{}P++;P/+xB58wXE࿝Ґn/KZjvrx }4G+S1 Of&FmGtmu]XA3r$gŲd;g~ +.\pBSXX2I+6р3@U] lKv-3zeAƲu8vɏ&_ =Tbj#Sn ioF#N WPtI x7Ws%KkI{g^2?ED} ),|Fǽ)3ʯ"WphzLcd(%Y(UsbNt$7?W2|M|A-2>c3dD[2 ,E*oGEYx̎#M\wA/Bj)aQ'.srD+ ;4qPZ(3ڀMkWJ%NEŵ?옼CoɴsɻO=$!)̓*?byxdCl-b"x=A@0`uiNf`O+=);eU]5H'9^X?$FZ vqi2"~v xvґe>ׅKiǭqv01 lCϭQHn{ ؅f!%E*\+ V7$Ws3OvmgO^Lo8M<їm8!f')0 5\}dY_ڋ[Av$FX=!%B;1$oO%#g5{+RWղ+^Ne R QU7Ռw*6Mh^IVi9G/j/jē$w83'm;V7Z(|j&d`N"be &qqɮxORоr5M`FX祵إlod,|Kp,0٣~li<FIgP-k gY g®0TqW~L,X^!{|p{M(O ؙB %kgQM)H҇? a~iy+P\!yX>]쵩_Vzo(x49'Ku=mݕ줭EHPT|*:_W}F 57aMJ? c&] '>3w[Ezgq9o1Aϖ hDtW.^MBU+-Rx5&z[t$FH|TG{7Wݏ;&ZaЏe4aXu0=׈L {ִjQ2x>Ame=ޚϏ;"4D-~LGfy)pgk5M! gutuzjN_P;-uό!3Ȧ^$& hh{= =+-,gl5 Rg4[bUuJ_w0>beL>fd Rj$r԰hBQ޺X@Ⱥ>}p5e()t3!kK"k5E,yHI܇[/_>rcbMADgfG;NO,hΔ~~ Bd͈Zsؖ:|cFja?l>Hl D͍NJ6_:cZZE`F yQ]Nb,Й;JcƳkB:o Q؈>}oS`_]Ci/EVCpO,%Y;ONK8e [څ޻%ԫ3ߕH ]̀,[INGOn,h=$+A3G7$V{4H 'W)P~e".68~Eң*Uf;,oBgN 9*V}bWYVxڇv (t]F OO_-v[gt<8lO2T;dCxb{J'dX5k5ǽʱ2p\D47:s*_tRB{x?NgnM4hIg0IѪ =GEC3Qs`O5m +(aĹFqtވP$?0@QDE'^x-S,}@8\eσU)v4z5w+ύVg)^ =vVo ol-Pe/BX7_f4-BjxR<ݗX6EٌmH>+FQb= F60&N+FPMJ7I>cDIW#P}2Qi(2f- VɤMYEoOG\t:~oϥ~91ã&=T!3{jF(6V #Z/ʮ4!SqN\mؿ}ys ި𲕀:1ý hҍn? q7F:N_OGPVp-yNrɲY’BMǪ}ũvVm`jЪū{r;~,j+>) ';U1GBCvX5@f_#/|) xws^![ C1 .RVE gSMqa$hA.OJ)d걏q@;e4 B؛MVVۓ.-&@j5KsTGxUJ*wK[t&h #(K֛\-U>ahBhI},41qMF$6 $;R}ӚuW瓪  \Ӹeo)׫n(>{$ κ.&Үd[S8z[<J 5\1fd+1(9z~ dةJt8߶9iy|-C}] ⏜2jEm3%U`RjN|P WŒ7G]'M||m7L&*"y>xHxJ;2]u0HSu5N"XB}&,߅E GkoA,\'-6Hhcwj:V‹P4yG\ֵz}x.e{YdK福\Arhb9="m4fgmW4{qHμdtZ}<5ǃ <:5}WDZ{D<2 dGػq bbmF& aX( ~dsh_NkH< e"pJ} m'ⰰv_RB,IEX%0B@KQ whf85S2=|f(lѩ*yM$jLͶi-.} ѪÍv&ށ'Yi˭Q0u[4k-v.?+RaԐǗ$SO3#ogS)pV`"J<|g _,vy'K[%Wc`.eπS:b`#Ѿydh7tm0h_'«C˴d{c׀n!Fu##HfWnh)oH46OZ\&* wO4L/ @=[c.;.Es(..؝Z6Ks|IR82@|1rU}6`_V@$C<ީU8m"ka6R7OC0%\Pës_1ͯ댲Y/It a #SVga"@y12ִÂm|GtuURx= ; o4 b2E$rci6DۻwDdfX^aDI-9(~Ay{SQY,HY78E =iF9e iw6gW6K"0ݗy̽iGiEY2oF.\:t j*91+1iV9'fe&AH0]]! LS цB*hYdr5oK:4ܰㄵk vǐ*~ۊZ?.a9RSwڡ\̞ؐۓ`dp4bwi^̣0u#1='j W#Ck *pN:vf/O lahJЋ9ސ1.W8+ZG0m- `pЁ5P}ȼRm#0Ķ2N1V/3x}+}^{(^r&F± kW8?w?N#ΙUMaF&~Ǻ32\%jlKw^dSY;hχ0Cّא\b 'dF}D-Y/$}y8Y-Pʍǜ(%1XAyKVՌq:5_AIyjP+A<\zn QUׇ ȣ͌*uLjE DlU!kH7KX[[IN:IesЪc5Wx*A5<䟒*-GIǏLu{۵ E(:vԶ@x|=<{b:b6]bM @m@n[UW?NFk6C{@b`P]&䴫'`^/T>5m48=,X9Oğyr9`4Bʜkl#[`A9ƅzTJd6 3qp#I?.ܘ6bɜfkl)3}(>>)'K%,ȴOiWi0{ !ݴ uOaM#ʄT=qa\T^ R Ln>wX~3<ݔ@VnC%=u#>MOLæ vRm}v] ŕrPw'M@Evץw6 ͘?.lְ+}dV Y$ȼ"Xy<\y@rR")dDq>[Ng]6 NԳ!Ӕ538I LegiBW,R~=!~GQb!atvѷ@ln\%obSN Y,Wa6sG/D_x}X3ңxJMG-E.Y,O[ vP;C; p4;zA l"Ow@Hi(1-4jH ð炂KZ ۦd1捄> 6Ъcȡą|YSSi2Gb8[, :_@?ȺPEkx&(mDotwz@]gC_+(5 {Y:F_)VeD*YPF7!r6kD=(d5vBU]u M'0.Bo̔BcfM4}AKph|{B'@&Y|JQ: @JEpw95+Yw]67}BܮCZWMu' ^~kj\]9T;I;}&d 6_hq8jpȌ_-y2Lz}VqGw (q0F-U0o;zR֡ea)l0(TR?ǒn/?-BQݞQ?]QĮ -H TxƩ26%jmUͰUϡ3M_w(>($]i֨Fe ڢ$yĖa#{gG^ٽGQ%x87>j|n^a"TY!>#|A?^RpL8=9OɊ*BIvip̾O masl%Ў9Lq̺#acVdh0PA9}nif&qMLFw{8#*Hs{*0^iT~tj# 5ᙢ̇`  -_j]'(xa(;5)58*Dcz03Lj 0R[Ĝx6P.ȝx)ryQKؓW3vEIQ[x!\] =ٷyw%5EU\ `X5;X)^<)/Wr|MeHSJa\%H SI"1`]Sdl H5L/,Is!@“c5kۚz3GxfV"@SpQ{f(_#wDjүضř#\*Ʈ"zn=_?N-?.BaPp6+)/{,l s@| ZH{T/WplOsC,R՘}?#/Be[=&>K͊O>vZ6E>ϡhˋMς7{%No,w|$Ϙ016ڽR߱Q(rD %A:Qzc7is"? Š$ƮSK^EA C*=?d ,˳cYr_%¶{^|ZӲr6pOR00~uSp*a:4r[ ׅWnLSw^@_ UV2*-0Enufσ[=e-CyΈ@K Kxy0tҵ۠ZPvd#%73"E< Xv#h|4\L#U+ɞjHR3[pvm;)R\V@f0zB0wPǖ5xܿb7_ǶkJp" `1u [B;UjH{B Wxn-c4rۥOCTr,bgSB"[рMHӚ eCBv81ͪY UD#m=qc.?!@q؝ͷ\pM68m`%W ψ]#Du)~߮h~QOAǻ{^7ӡ[;B`̯>ƹC&A/ZndtYs|0Z( uN!Xoj}Pv]FnbꑽRkJ x5(W`7&OXqlǢ1IlYb?$jaystƁnrbJZyI_?_65)~|WS2+9er q|e'|BP ~/@|RR:4Tet]{..ͷ I+ C^QbȾ>M_ƴNWSǍThj~Jw! ݊0Ǭ?BP/58v yQ:U.hMF×͸|K\J,Cb﷧Y# 9+&;@hJ%oIbزJvo_1SKL e*:rM|NOJ7c8RuX fihC2dK=F5*e,PZDh<Urᗏn*]d|80JиZ{qvrX@浝g@D%bOs 61!vYUbF _2mV-lL6x$<#~rF'ݱH,vO׋y}~ʠeĩSܖ:WT}*LVM .`(uH=;>h;R<"ErU#2X&%6W;/hנ$ױpp^u:A"2p ՠ1s=Y (>p,?i5 .*>1ODV6};}Ǯ~舋tNN ;N e 9s`܈Q qk-"+SsyXČ4=)F!d黷7˲pt' *_ܜ: Z(g~Eyy \M^y ~US.X2PվvӪJ~lʻJ:zmݭ.6KӃOU;13pqR3)T\S֣ޓRw()? \^7tlFF^B^H. g͇&: I6i,q x@;%j258uPX徺Ec> /9ہMFNE[V Mp:6&D|z }Vd{$WQ@,a9sKlKCOCtEс 6"\?aB@&ڵ];)uu<0pb$ FPحC d,)Ɛ&yb+nM|E僸h ʃ,[K'DRE]jf!W1ZS h*#{hzt&v>S>VϯErwcO"DFgtZX$dx2K v<ܰoE|cwct~LmOXLUps^K~4&ŎT裉d=8ܓ.qt-tH;/1hSHʨf@QP`..X%S:E?Z&OPciW*!0x܏+}u@Z~nOO}\qlHZ2!l89 m`4d-oS?ML6dW}#iX'q ǶضLaʲf $NW06lCړctkb[4wi/[Bz5LItp*20޻(bkXQ jc6#{~"m)e%'G,hܚ?]2'WR0UΎ"XAGWA XOHdI+UB*WՔm>'N\5M niȞoF UZj3ytQ^C>̟e7;>)XIž$HQ@4&I+w#n7tQ´Z 3: ic $"To]3CȮSD$|@RY^I@*䏪rSv!YpDKgg`m*E!7!k¿:6R{Ɛ(aA֪?z@Pp2ѭT8n iTgn:-SՔJ$2cjlG/^G_S2AgZ/侟j,@tЉgAU>VOCŏS_w-k1On6Ii=wi9tT[+j1\+u-Xx-y,,s|H151"\3>?]4"/LLxͽO'U9R#+,URuLJiHMKYs!I:,/t `ge %2}@ r(LH''3<|>mct!}UpGǗGt(`VScE4u g=WL1Tz@"BNzx!`-(\O:F5>lc]nDvy yM J&LY픢3. #s1@}# N+xG_LQn>@ͩPFuJnZht1C㇯167h37GÖ)|R,441r{]=;9~vURyPP% k(merҐiy64ÝhݮX7 Q(ULÿ[W1=wɫ6g{33z ޿PΎ@\vܐ+؊ޗBsl#:!2L#OzT|:U\&JDGlFCuDŢ[NYY\N'_GB4߬F^`e?n;|wʛ@uw>613a0`X5f%{d@_u1܏&m)eGL$Hw]U:GUM6-@1zB+|^΂Pj @x 8@tLܮ=oLLrY,1?Sj*>*~2yk2(SXdJ 3q(im6c?si@5Tݮign*?"3jihfDD<.IÍ "+ͣQI3s!,1d>- zF)>:򦨸Am 5f{J>W v }\<;QՔ>]2EE7ˀɄrș^9%|c[/%rlv"Xkpzаa>ÍQtJapX" 񪷅-Fv7,j0{TvZHVr5$6Ì;ҽĊj-^hH-^#~`cm6XF}@^-]i:q/ 3?FZЊY6MSViW_8BvMjL?njȴZK%i ly4ftIr0 ĥ sN|}zG_iQP!7Ct𨺢}从{ũu* G< Dʹ*(e:ZX?QndSI^( $ h8gL7Xy;\}Vs[h!%[ϟݟFqU\' N׵Ⱥtok1K5AC3PӼRVs!xyKdƷr!15l)X 1)|t0q@PfY} wij kBɉ+!ScrQ fLQFm:O=3⦠&rJJMP='O0d9PV%~D˿\EEUr,t:'ox|gE?c"sʧ@GeP!K.rEav9&Op%s%GZzqN?DtW5i4|tB#6b;M #`)Zʿ JN!!+ cJ1R|)%Qr}d_%BudZ#BjlmxIB>r屸/3WT>tfS+1F=xbxcKX ijs7%CNm8C3A0' ͝Nٌ`H̲ydJ j0ŤWۯJͺ3Ր~6Ssm'%IMgG\^+=D~yy&/b#TMUnD|C;\ҕ~!Bw#`;7kǹcq[rWoo\(>S?ooLEhXPS 3/vI'QP+ōRcu٘HJ?>8dxLKG(:_^LYdC5=r` /͞m%d$cT[m (4uQ7剕Pt.}} ^:*@jIPӚ*f7!o4N#;. Se-DXfC8U[xN7 uj Tuaz- HR[p Q8(x eϴdhUWewODTx\rw8dDXk{~Q)N"bD(:[|"v:fZ*c\$&$ "Qڴ^Q5I}?rQB@p +q1nY&8z0`pr[xt[Wp}G_`1h72ŝĮ$h*VHAoܶVX c}rr*< u"1El+9&MrT8/ؒX[haL7ArF FӘ寁@6hjq $)fXL \iE \&os-~R 0/?6V@ÉIA6Q"ev{b gD:bAueB>1h&hwɮa߭tKvWޏi3AUӍJwn``S^;'T|k tjl;o̭7[7.s 8Q׈MC_C.Þ*o!~B{?#scO)2',ѧ*X.qwgSq֫BhX6+jCU&wdGȣRI>$ˏd&MO<ٽ8*yY#1 Ěcz" ȟ 1EfjVWT~b^:'$d(V̬B{1F~wwBۤkG2t(*E\63 N`kPĊI2:{gLTluohrx}fz36R'[FWKNxĴ!9Kſ8@ 3A=DިSkGX6Y񝥾󪜬s\J}^gYJT"K +Gql]N\WuuE'ynr'l$ +@YCSv4JG@mO{I'm;YJGDYץ&d˺eЙ!+;i^,K+ Q8vxQ2C\]i~uZ>XeC0[K 6~Tƴ N7lbR}g 5Nk9ync =w_ukmx@mg=Tx+_/|T CWl4쮸Ig%.ZQ'-NNls0e'_$޳ws?7fB| :"l&vg<#tGb5T0|U@#b"R GYC;SQ޾Փєg1Dk0#e5wVb d !Z7/}Vcm< gJWW?mFjۂ˻ָ/ D> iO$y۴Et4J ng [ oBdh "f^)HE>ulSS<Xu_@C" ;y[e;k@2nl>ǕAe`)u XȰPKg&..Fbt&} NQi1cgIjcѧ({T&3}Z.W$шL]Rσ $!OVT^|7wvp=l0<2"8|tQ0IKn Q3Q -MXW EMA4njdM$q\_?&D+ ^藧c 7ۄFϞ)ǩ d3߆9fy-~}/zRڌM78U<5hl}K!@J|/6ifCx'TA χg:It=akʃa2DLMl 詒!z@ 9bms~}x?pFژ T?yHIr][AKot$k8s[ޥֹUS[K.1"}훍b{ƜW= _D+{@]ܲ/@m$mL9jXmT3B:oit6?݋9 1Cc 8 },0ZkQY-& :X=HNq.t2@H]%f/RN:)j{pI080T{Yudg>yAĻ ybr y56PY#dy#/a0o m܆K=Ň+"=MOiV>OVtK8#8 ʉ3*R1@]U<&ӵ\̷OZDM_M5Š!EO9ȣb/r6 P~FY=TG`.W*$-YUiE2S丳tX+􅂢>=kc+ Q6 oixN # kf:Ny! mUj[h߰T@CֻeHx<¶C T >nBFB2b-,~C;;L{{r ٷ,S4f|TT&pY˱cK~RCjIa+kO&$m( ?%ǜ)g9X4:WpI45ޑy\%c߼ݣ? Mn)*9;NU5nr% Q]: %%ExW /?gx٢p^${$Kz?jNJ!'oʼnj ^hoUR+~qUcoҝJ MhN~(|ڄeɛcBQm[6 "^/mGb=~ѓs"547'vͲQ_=`揧gC/}&諴ے}X0IM*O9GN.#n[^(GԉX Lxe3o͞`-;;@$aFeVfW6Gf#EႱׂ1+ gfO8KI6*-xeQFMCQTב=APU*6F"cTN)KPV{_] ui5E 1p!p3oDZ{G"K=]8m ;"4҆gvCsGU3R.DCV0f2vlr8m'3(h]mk3, ͩr.*Aa|v&_IAV^ZnH,ۮ(ds(Ar.ƒs}Djέ_ zBn{|wV~2ؖ {sFĒܸJ :Ϳn TDZpdNonxp뇋"I%>/6%p'A2rfTn}.mHN)1ꨢc*pڭ8?`PC, &Tͤo!MX&%~1gG&);2}g?_ r&Q c#Z4oKVoNO0 ػ`]崀 +Fn0hzVyJ/#O{e~Hfט.H6/kb&!aDbҁ|`!gNa) 5ӟeG5WKJ>o '-!o>;N4Ɠ uRKKC[W Z=_#H 40{ 'mW>눭IEtXN{] Ӭ qfh-LAF !)9X{/GU,3~tJˍM*XxC]:ŒI7eu@^\bZ" {0`Etl2T~ X֬nYg5''X 5]X=6!c@1Tyyl(eG _F Kri%%[7TVɲGr[0/ݰr4N[h]]"x2Q`2lX  W%۠>zP:6 c^º} PEg*p,m=VS6[5T* vዷVg \ T/`uUαq%Hg@(}R}ř~3Kl,WmCiBNQ{)ټw,԰K8PM>69rL Ci/@EHMK$ F^ ub@Rd [l]n1:ƄLt"3U01(hjc4T6n{>O3z/,<_aӦՑ^b.q%ʷ,J]0F +SLO(tz&n]M삸[s+O+r8\MEP]h 3 Mm' u#KpܤeYV~7(Vi*8O@O}|/S{'n^nY=-]ڎʯ^^,)zy d+7p @&b(`YUH{p,?'L~: 7x@e0A8X3Vd ɅTƒߧӇ)|ST4 }Mt2ז5`vʗiJIuu݉ز{^#[I0E_S_VnE!Pfё'@i$l r] ӚCa$yiskgָ%D7%?ZeSfKЖ W2`yr@u̸>FiwlZH(+T oq޺\XGǹm,"uuT[C, ؞937|Gm+Ir+۟vD%V Ftx}: p*}D=Q4ZS4婖ӱ!ޯx WK#öE>U?9jc{beAǔieQfl_loc}y )te˕%%BFu+kZp ~,aF,;fWI+h'mS( C4+5!C r @* /o*;$DƢw@9OŴ ;1OD&&&»# \i,| )ADpM_A84~P>Yg4uD PS.MMVP]̄?b3zMgK#`UǾ+F1;XQXTW\-IU=J8aEGeȉcbb*h7 zS1?G"GE6mOnj!.Bg GLw>y'Np6"tV 4i[{ &t/& p))UF gGX[^6jz>׹OƝ@A1 tnkĢ q^0RN֑BZάCET@{و]5iG!ر;&78M߯睛'ذ9y,vEL` ß_@FWmA'BMd;z:_]ԭPVn諜P+nއ0)IUDРYx\@;`Fqɝs̆%#DH`s<=1~s>XZ1Eھ!" Y\E9ᬵc4&FuNsQ4M!}g1WoJHwCyFV]TɧZ=lkc3Pˠd+LAA):>MN ۀ=Jit$ŵoZccQ`LLɻTv䝟.(DHeb[+u? Ԓ _b|1X~d%`ubD(]"ZXQ`(B? ٱ/Ɠ/r.t9?%j#$Mv$ 2ɑ xʥ*X;eX8Z!w07 J;P0ԹQ<Ѵ9X)g(AR䅞5| : 0tIydpToAF-G[ӴC`}y/ӏA?>7 Y7.Fr '@^CtN}+-&g Z9M3)NDT_XH.痚 i%ꦠݭD͛/MDȡM"#Gy"SO Nnϵ=㎨ ۮMB>*{r َ ޖZ)9}T&6G6e~pi˹up1ˁ@WP{ ,}m*:пR5 K+wRZw-"2?uaDJd˸GD\wr X/:cN=.Vl,E`b27d`7 A,zaǦ,#!.gI9Ѐa md&lQN3/6 cyJ#͕VG/VLQTW}?ˆ*1WZLwr뾟, ~9l䂏Y@UHۜ偄 ScQ*a]V}_U|@uai#]dM6VTT񉢰EY&U%[` ώsfHdϔNF3 td٢5d#iMqwŨ1 Fkbu/`% gĻi;M褐_Z!,D7l26ivY Zp٪g #`{.ҙ5`<Co'C`X10i bs>,WR LoGϬkzJ k祢++b6W${3mڨ[6o!a12 &|x䑓ۜ UU)?(^zy C'>VFw3.?89XoX׵-8K߱:YI'M1 %ƅMjI,$Ŵ{1ۤ $ npj$.ih)M3I8V7$07{enOqA1cH,U =EcHQyOZMۓSkqC.y6!.dQb,5,uj?^^N 4\4Y܄n[֘q{L,gorxaVRsLkA4N]Oմ4I_2y'T%Nzek7ӮًlVzh'ȲYc%8?cFpOB 7qg'pi:B^\o,C|80U.퀐N1n;u$eKK\y9Mb=lO0+; [)7[I!E~y0\m>h5 52> 9ii%n100߼âḞ2R<] x{*MBϾu3ԋ}68zg/)FJ#*5!,t󝅗K(&_K5&AQyR7KʣVK,lDen7KiG*^O9mUEPRo5""ʘcNq~7oYi)̄y/:rMVS~xdmᲈ6LWHggm-43yc7Qqd}+t }ȼ9g8L(:ZpQ֟g)R 5 sAK qH ^{S, jی(vx{E,Kǟs5ws\L ZnGnoM6nH]A`*K>X8Yg }P W{pU5 T q;?`^(bkN3тr0DxƏ˳eݓIct 9SoO2ʰ2|mPɓ}^Ԝ|cݤe{oCU2y|I>!\n<{?4,Ϩ%R5O17nVӄ\br{:A!V˿:B4D=D?<]\qtWlCՙE=FFm$٢bF72RQǫrx v:dhqBikE^Mr4qCv^83FL,z9֥bJŏ<SJaVs_zl@c8ٚz#ғ! +E:tPf8ʯ4p\pv9IN΍&e9z~f߽UoKF YSBeojDN*\aʴsQA8{?o#'6z]l?SaDR )|B hLwU[hY5%HRuKIe1i)#J%ݞZ4K7cjU"6N}n8]U?uJʄg?u{$Gq-g%_{rGsuЖq5`Tr߰a*ov7raWǔ}MjWz#XQfd\0J L\ãCmRe危P=еY3'?1w2&sAGϩ&'0$YFy*xŕb-T>'ꀚAnGtEfN_`fGD/@>'3J5<>݇h2P&XwXcu5[̲b`k<p-nErUoYWbygiWbduvDHL2!#X.=Vh3 5m`vd}E =bzl?'DʊwDLׯR+~JR$bFOno9ダ~CF2;Êjv1Bҳ {1,S\!Lʐi)h6c<@1d=g,xɉ (,)]JΩx ߿jU7熤fh;Ar5nn0D٧7WV5z^a,vٺ+ ajkw9նi߻2B&+ R>7d$PStD p2"JM;.L%oi J)LP {ÜFmB@9c(҉]*`)U /S&TR]ڳ/:Жjb^&ji\x nĪ`Rj@c™E+S%Ifga4E@rU$xog{рGW(s7Qn ɛJjb~5Q*_q7Fn9^L']xg2̗]֊FÖ02@R,uz.j}.xb*ыpqwnKCz b2JR,FӿV\-n;xyW(T$Uu %SSҍ%܎/;8 y}H8z5/?=> <㚫fS+`\b9oʒ2\e&<\:xoW*ѳjyK-SNJ`N1 A7nu1r(|-`E S_zI4nyکTtz@ ,wq#9r":(z9_uPjY?ILͬr_~%I|]lf}]sU\oޥ}O|m)θM@.>Y9A6Ydp{2ݺo$ ==" G|( Y^BnB{bIzE^K;=^"2-+9C$O|8k*DmevCe@XJilq$>VAuzp#!^_ٔ0W}iy>ĦM>['2u#5 [Onᝨc2'Vߙ\N4)C¿~Py[!CЈ`m2 Ct;Р?Q J>t%< Å>=/z"S8c(.r D;.,xOIcWx9Ó{h}KHXUbG ZiwY㹢K;Vy+Z/+wzE-dŔv^R-FZz_F]j! wKkH n.?){Źo6x/9( t*ėf }5Yq䪦]\ ~q Y4*ݱnuyl'Ge BGPSBR+m5I+նpK2vY-P万&{xr 5e\Y~1GNw~BDwG~<TBtINd]5Oe i6@AqܢB". {}_> F|R ")M~.uf"p\QTJFC!ΕLB$TAï"%mۿaڔjD˦l^{!z*AFOރh";`'Bx*MbKrX N>VZ LY?P[& ٹ5Wk c2PD cdOOH_*vhuT(_Fm3zfE/_1G;ҽ2NdWnbLѯn^1o$$>]-_EC 7 esREU*)zYL$!i>~"%M4t9-#4_dA)fqՁ:B{-\Rc2MrS6'+4M8iWMqp|`ZS|ݍC4h7H$1KݓD"DW+l_WM-و> +»\ʁWttƦ.M{lcMe t)6G{0[##k孕&zO::p6 ,´cz%g;sӾjؖ"&vDӹxT8wOR/!kYYtG㨖CК7xgK|P.DjNjY HaBٖgBވ{07L[D^ ҃ #zh)s5>Z@.a'Ĕ/S31eoz 'ϋy"!^V H.p"zb j2xȓ`it֌x0wl&tB^U14!;á\xWg+s|̋wnйV=#]lVL(¡,'8;O /X)Pqxq AK wP<4|na77wsqإ0iGM3Yd4ϮzrqXv Q,?zF8FRt]/.x~OlIrw%p@E3rbKl=#b lFy5/[kQeR/ePmUC ނ`R[,%L[1W߽B8ڂIak_I_KD|k=y.f!q0Y@,6K񢫆%6huQ$K  2jOsdlu8.1mSY͸͙n Y؂^>X6xfD/RTo *ѣ7n3kqjV%7 #eO}t-Y g%>g9dNW?޼4)'P2kzdEi3daXM=.ho`X|k;=D۱;M%s\BL_X=63H_ƫgfŋ>&qZ7iJkB)VEN& Cz糂lgLZ3#CORvRЇ<&Q2 A2؁@G{bk1M. }h< ]j5¦F m .TI4wS_^x1=b Fte 6٥DiR^Q`Fl]|hRzvTA,q-lP8?̫m6R>A~G .:.J7FޕZ#Z21dV8:l oUv'Kl5Y [x>Ϋ{]Q̲"꘵;|p%0v-%KjY!}fum|覲yPN8cS.mEܬ:>: a*ڸ?Vws[Ur[B=k.OWaLwL H$J,|~&&?XLҽ} dnkTd-qTV03lʞ y@'%)ԩ?'kw'{|%4lu4o2$8%Cd>wZex-ldUl)N|TEu%+`<=PT ~ کC]t#vLXNG|f;Tg֝GZ %S^бsH"S1%+ո'XoJ %_魡:XyvCcbj*m> EqԳ>ٖ+|Yk;`G4'n괰{"TEUNjpfrMg(ךa4-^w gPZ; k$#2xGSC5mX:e?#QMJĹxL2p`!bN!Fs\~Yl#&x 8YtXʳ MH^ mgv^4M4UKHys{H[YX*/fxQ]޴,_ L2`N{aWR Mf[Ǫ˭ 8B@dV,lB @B=Q Q$,@Jù<FZZ(R/=[Vy Vgio華)*팩lxgȍR {0,x63 $?b D|r15%j:(q}}RzTH UMk1xP 7S-Wbi3eP| }ڝyHէ Z2d&̶*enE.f$Ӈ$1FB?= ?!"`0\^X\bQAnyM5ۙXƅ|yc#hhp7z{]dIzP:;}/w cU/!IÁ-@DjҒ<VJGEƕ\{xձ½oz8ebq+Bk!-HӌT.T߁JoƈWSҡQa׹h1RAamÔR-, *rrǡY٦7)yCj&98eQWdn2Ab?Sk I˅+Z{TH6c ]1=UJDs aT#lPF } .BX0UloA:k7)$"uep+ ȉ ^^)+, 8O lWD]9Vv4b ,ƨu[2?V4N?qQŰb5^1f7L}  +_Z pOϭ1R;TS mmPϾFR!ݲT\mK?v?!=eMk$]]lLb6$6<3\|m1f0yzivjeEvyeuڻclY29m@@T݇+J3';"l3-ۯlDQ|Ƞ)e,G bXBNYŚ|T3_ۨ&T-XW\y XY2`hR3-b Τz{:K }Jɍzbg_1r PhBZƏb&=~(:Mm$罉e Z' |Y?݉zYY19u$~F1e@x&(!BjITY63w Ki@cR[ œZֽaj#GM#n=4J> PTC'w<c|M~}AY[;C.ZvJ`9[*rf:u1kdpD:W@x=Hث8Px"@9> u>.4*Wq^)Z-xdW\wZ=JoS^ 6D4YM rJٱK+K+9jHۈ5wS0-#٢QZ!7( :{{>!Mk 8Fm7$Pܲo^#e| TbPc{}64z(rsX\ 8hxT 2<> Awڈ~yGA-CTag0ߋLĝjy F(MQC{8­>\elL00$M>ǾZa(t-*c'KMn 7Aۏ[v>KjA* ^S a*U@INe  jY>W޷7'wvV.޶g.‘ ! MK|')(.1b2@IۥE~m 7<ΥWvxBŢIQ0=j-6*/:VT9)bMV|)`w|$SGC[6C$v.Q9HNs ㍍RB90yj |y4 2m oX@P4M%&k#?Dj3 CDe\R(!Jq?L&aÈgOeLrDxr%C|'(gs9Y9RU<>Y$71tY .G^X%Op}cLzBBa [iE@alD]EKXvui<2{#3GF3>'&1v`Ƣ_36,!HD{]g> ]B#5&)yiy.$W4saoGEW[ MIBjek8[dkBNFc3"H;}XF|>_np#G[s-[ETxǕ(H}jSa:5R\jciN`GYK0 lQ} d^l+aY7H q3Ƶ|^ϛt2DI7_RGdI9La@v{e.JGSɬv+]jpR'G9sv*G7U6%-' e?6CpD%],5E|җm/B+^XF{-,ڿ%Y9܈T iC6T:%zIM̝CuO!fdm}o5WTPD8LvF~s%ŃZ}Ĺxasg3/x O*l18X %|nْIGWHd_@QN0_:+8]3_ 6Gy4IWԵkh^OS7DqoS}?\ܡMpEM!3acDX>E'7Uw%ҞiWR^WQѝ,G \&=SKNrs7Wk,,35R xg~DX8FEN[Ǚ!Q*evv_TKSA0\ViOy`G7Splv4NޣO$ ?g?ٗp2jF11p%0*2;ո`H]% S,vڜ_yԵn eoy+󁄂3,"MFD%",Ig o8 @K7YtAT"+.N;nk8&kIHѳJ6!:)ۄvLg_f+ըym( ƻO8Fþ.[{e;&)K >a#mLX??WŃnV:EZ'/uyZƜ|>sW??L-Q8d_|lsYo8IeVзES.ѯ.b%?ҙ1ZL w^*ų(4D{Ϡ)T̞jJ.woEߟ>8u4/b1`7}Qr"^8Y %we7Dxct$ZthxݖRBtAx_etEUԥ^_u_޾{ I֜үx+}G*Nu/E&wIWj|z8/@ {G UNƠar'P ـ>7qZ%@mxlȃ )UΔT;߇D\ +5\MOX sʥXxn7Y/IŚKBⰽW҂m%i7w@W.ɫ5d[n_Q­!z8vsOGm}Ȱ[?NSF *Y^S'mM Ò&LZ=^Ri sUcq'g^w\1Ԓ*߈ѭJ na PFRB.:z+8/!ᆕnK= qmCTO7*RBY*`.Cd/LA vcpXlS՞YāF98'LlޞiBT e'%˃%|CmlR~d3{vH^exkx0aa"%} k1^P*:Gri\ɲ`LlnT0l\"̀t{J 26OWsn/[ IJD4#ȓe ٣(qpiF;P4?0\A\U@uKY/n~^8d :D&i!! >GQx)E2QbJ9VƼ5Įz} ,egc֊uؕ9t$MU4)iqa;vxJuu;"`%vLk|ʌ /3+T0B P{J&1ZV?*A\!+OIwYGCpnݴ"1sUH.}緕n&}Atl?H4IJKqz ܬni3`w.4>?ۺ,!+-B]G(QJ+Ezlk;~mkbԄk}yHr'(d % J 0\nGTc3lu]t$lq ؇0.aB%mṯt-aw16LP/a%6L18m TK,ar|ͧ"=o\JX~+^P *|xׯ6&PͱJtΰ'znfM߳G3%قDYCIomW[fd!j$c};t z]9ڝ s'Θ`,~b(ǞvNd؁Z!q ?wⓏ:.E6W4+r^a2"$5S:J=4+*[t,П?ĭBf2RjNcW %~X~)DeTT(T}ArpTThU^z~y7Ts~|q#B娣ʩ%QH($Bqׄ4#jWB2Vw)3Ѽ1`z!\늀9C3W#:nqK֪\B8Ͼ/WQg~_c=0g˪cLbUZ,|_0@O*Y xI"[\Db g OPc+D T\DܨN'V4tn3-Mٲq~)y\H[o/E߮ ] nř|0USOxFAܻm~aGb_AZh4\J Yx^hu:jͫt즍-'A#Kט# ?d gzFiPf9}ΟʌgC_:%g{oG!{QD 2q"@86(*@`/di 1xs}e y9Dܚ`(9-9M8n l z퐊Q7̸'Ư]F_ث7dʯUl !7Wד^W򐍭2_s0hƔ/}Z=~mكaiU^>7޻bb鏱*,~j3N\c]?i_6?IQT E#9xE@0i$tj3p;x<60;*z=.LzTJjBJ w}(Z=YN^ >DE6( )BrHMSY3m  7'@6 \)ӺljnAg{$pƉQ&A9Im-"1eQ y bm^ a|É]JgKmjP^wi4fn1;_o,_:s2Ǘܕ]%g22~!-N"z">P3lQH=z׻HEqx^Jhe4 ,:DM$/!.`v((nHMҢ|oGKl6mܮIDЖǃxCdkuO0L@xڬ5a] j4U[׻I5d6;Bhp2x^LȾ1j s%w4z삟I>4#ėBI67Z /ka0!3D:ϖ-retrP_UeDO(Etċ??9uf y_i]DEF @b@vWvw b?Q`}pH9WM?\Zٌށw_$ w.Q6\~D,5FvFy!{ 99M#rԬcPxEA;a^PrwL)gpH |$1wg{ݣ"ڜ$&[쭭iuWO/$E}* d)<4b>(b+6 Dz[.jBgVgYGWk_Ts+zk|ТX^O9b>Qx@H^]Ü _S=< lLPչ_竊"UG TzxeӼs` 2Gkɜf4aY)hmvAfXNßrɤɆ%s ~ 25sŗev+(w..:mp®uHMTB8Owwߗ.;7ƩoȄ.зYHBzgy 6Z\N`37=LC=1i~- 0+kF-5F',&.ij)ѵJ٭ EH,3Ir4z[CfG:*Wy[&~6O-Mϊd7T*{ Եa((2Kx.`,20e"R+tdb%>pt(L H:@9͈dj8qe~/ dEYvҹ* &p4dAN`*1U=YQEJ0Z(lG-5ATn?r8ȭOCW1=0S!)jpmƥ[91 嶀GӐ"w0k9_m̏Ӎ}TJ1|, {Rq5޿b|pkA0 D >ǿ.h%Ny^<[掬@@Yc [DC8 wk [cVԃ -TIq.V+'.L@}d@'H1(ʝ6֣KM¢6ҳ:OJܣ-G);;X_N߼?zq.=%@l_(H.5Ji'aXMT0׹9KyFT6.j-2B7$8ClX"; <8-dM..G;}?=L\duqvSk@Cwbۨcɢ8#+ڡD ^[`IV }6p.sh>yvʁ;X Do9=/ar`?A60BX MDPj2]ײD 3Ëg%; Bp+:,!oW.QPpֻ^p+d=Ca&y6^1j,4Xʱ8xXo $t5Kgd0H}U[]9E@` 0j{KƿPQԕ+Y'GG= kWn=n_5İ ,}/5z_tAXm"u<3Gv&*^4r6f|a.^u"5p4 ro_, |m'0@ 0#!k^&*"T @qEvɃhทn671 w*jo1PPlJ_IɱxbҋN„Q9Y&f(l\!MK&}߇LT tSbv4={2'\q H_Z# >1$" ][0)yǞĢ+r,"8br3 #!x x>Zx9|lwXߑx?lpχaxM*lU-hT*^D WSEMxe˖ʬ+^`L噬VcнȤ%!T+ wl?.Ϟ8NtPo)U7ڑb]ڿ $/n U<#m 2~X˙]*Jp9A09!mcPT?d#p1>.43\VɋZ׍Yׯ{%Ci]jVث7=gYN.*' cL#_D2ڋ75hFkjh2`i+Pޙ&5Hxo6zph\]=3dоu(]Qr)OP.o "WH9@]I+X`09.Mgj+jZKc4l&mёjp|l~`B?0xFumInڧn>Й$#[>kVe0~-tw}51q-="n:Qms'{XAb I,KjO9%6 tP9/eۏDӺ<\-2"h+z`_ )xaP@A\[Q` i_sVFx4UO8_zETNȔ[цsKvbeI5+f%)<"= 5PY^ǂzT4xY%'TA災NN.2AYNMHg5M2W)fYXb0?jK6񙍦ʧyeOݩtrKCw po>0Ռm~!'&TnN zȬL+rk!vt(SZ^vC[7/C䰳^nhVAUkZiԢͦîNj~nd'6Rᜰ_!yX9d*)b@#-?hP5z\|zd,AA ϻ|ǃR%G~s#uU@֋Q2e};EUf8, U"KNHY'=0]UYɒLcGk B 5:b:-kf!`pʍ);-h@_ 3TCm+~v9Ҹ r6 =62DYZ~jM?pJGv?kwq[8c!_F#٦_o]،SzHZwʨ$0yY) Nۉa 2'P^~*BvX7ɮ"ēɘQ:Lnc +7>iycBx,swa9v!y.N-1S>1yLvQ l]J%r_3q~J2>*>  v,YUmu5m! / ,*\ЛMp5> p{̃7 &{#Н^Nʼn; uNۓʡ&ʟEH,_7կS6E#%&e[]aifb~ #fQ=.{. 8#Vb& ax~yӇ9ճG*^6 :$'sl9j6<:ν wu؀uϠ4^sAI(ZN|)ea Uy5(HA|χ$'^^>~ތ@X;mߙωćdJtOxbct$YU*/ϿϕR,El9̣makAя;U9*LƾOπ]%"5*Uݝ/li!{zz>Drh۪lk}~rt3[dGOEюb% 3CL彙}< @(\xn`qN*;P.ڲ9H3lgL s PHS_?$'dwFKBڡ!"Y48aUٷ/El6i_/Lw gM/.kX8nlrXPᦴ >qQW!M>1i(|>HwG|S$TCv"$y1tBڂN|Ew=NTDP1D='DGɣa2CDv KU2xo?/I6kH!otZ|O|79"S4»@EUpJOk4m4jR{y Ow\~/cJ,l@^Uxxcqۆvd+jw[e-:M؟c#oLmtG|CW.L6,a+*¼: V99 U | L˦<Bvl,hKϥƇ̇LܟK߂Fl\˧$AԐ.W_2]NxHEve סDڑߘr"cQӛIvCKT/SLY?bF?9 h{T`r٣*W}FØm\?lnA6IRABVt ybS-):iBD4Z|azde-w 4Mځc ;Hbۦ]zʊa%"PZor?)|?˽v&\i' Ԩ|LBF J[[\[$Z%@p9N.oYc&+3^sщIjϝ?4e]1"î˶;!pHl/LsG*h jddG]O' `v/*`&1x؋ ':P6aeiF"<'uPev~S.t-ri^)" }EI8{?@\TedSӔs8:|"wx{Nz2mNkk ,YH _߿`ާTQ/i|RNC~r6ށd7: An#`p 1yX' iYd/A$V.־%;̿]dWO DD,84/J*^@.FHIC{! (8#ZbCetUqM0 F #xQj">j- @*HðXVHtyj$wfj\WX‰CR!cn2 H zƳ@e&0UP8!N}IB9WRoXU 7A4EE\n r5݃ FRY3-L\l|ח@_1l$|۱< fT!ݲoe"?se` ;I2f%AIl*}KưKO#sp;wރu=u%A}+7^^J!\\rz9t 3,Պ1>sd,*0_6m5[@גCA%c ԘP-oO8LjYtɜhZEB pǏߊ )4 XgO$u gC"~%Qf]nu.bB/\́m]&Br=y5"l{5%#ORbU5u@j8>V{e>h K@@P4)適Xa~ ]6IxFu6؅MT 'N;QY-^'iЦ &5OOHHkCZ.}pa锅 lR?釗:̻V +ޏЛu,3e_E찲vKVު ga{n(%w%ܖ;$V7+Upvzִ+%J4˞>m] gՔnZ=c&>j^ 4GI9eM߼tsﶤdbA^]:P8[#gAFO^V?E!-y`N3$ŹqݵͣgNjsWT(񨺁 ]( ށpq\.6^@ ]PB=IJB((5.CD/Nee-Tmy τ("꤂pĊO~zk?Җ$ꨅwfJSieS#k-iD-gv֘;-RY{EqȅNݮ}37 X#rU( 9?V<⾍"Bn12~?T{s ÌJʕCٿJ577v5vZ#fLR bXڭV,M{ZkA5~ t& C'An*j`E:/xsJDSprc:Sk$5#Ã}w|({ x"SߵU_ Vi Kf#CPԁ>1GR zaOޟr~< dn fyqҰ(0 \!f4:>i/+F=:߆0GoK! _?SΟ3.[}"?4D{A;D#*3b)ZRb ipzobG&I5pT1[i]k_ G;L5Af\/ԑp,1U]--9d%DG)Hay!z-?| '|s  /"\wG%4=Ў^ݠw g+YE 3Jښ=l #J<:&?Ae݅VR Ҹo \c(Y iBFm{{dt7 q'p3A31{G-ۼ3=O/ejl$ 0L$V1hU)HLt%R(OI ԁ1 {R'9:ShKT18t):sjhgsY$K*h{ʸ= kG [zbF!,Ct9zw}8ڪ9߫ Z61KKN^$g|ɡrXMki ,'&zuȄ@nx'Tt|\`#Fx.Dn=# ԙHiH0&ͭIeߖ9lSo>$͟3Z!ewm[ŻFV;X L !mNȻY/7qbM|C'dKnsA+cPd$BZmݷLS6 0وv@K'3W/(G-?]Wvŏ"[6[I2Uue݄"Y{ynn;XDG>u#H+Έ*`41Km0oMX&Ebu X&:mNpV6c?$BFjݻҀD\3|0x#Kk[R 5v+PqakA|ќ`뾕:r2 G!"=~v-D-wjԳurB EZq7҇A Fuy!9!6;3IGsG8Hʔofr[(>D\HHX3ذBFhH^XxEhUe~w/,h2y}z+c oȜ ߑy#0̓JVQpYMN gWq{YKF%vw 9҇n1NuD %ƹsʧ&`^9@vviOyn#\I8J6nWmMm蜐KX\Ew?v9s&6Cɳ2R_BcQ@aCoړuމL>۴؅[&Fg:3Cԃ1T XMkMGC]XV,J*?zb}E몮6qoc_c:+'\Z0*͑tDg:Y5.k!\ѣ.k*y(NyyȍZo2)j+NIֻѻh ?[%L8)^zU^ 9?^#/))6L'ZhEhmVܢAZ$5Gl/E a}|ݥaq"1mnȷT1q^YjoE͸-q2}H7䏮oOWK`6fYO+j].y!I}&dx0L,ƯZ ڼ`qAR{nD&H ::$}icP1Zuu+sH9m[RI0!ӭH%]{a 5r.uړۧ3JHƒ^V4O/v9<gQc8Ǽ g-U72;},In<>ϗICP?q33Xum|i|1)kgR6SWY\`~e-RMZRrz_5mfjetJQ(S<51x)7XcOtUGE;Tr[&_utG9 i֥#ߪP5\I{hCþd^~'ַ9]Q酨sYEBS4ͳ$.cZPfbg8.%ubQ}&UNm+ 4r] bWrG =կzɚɋ\ZE*9_dDZ ODX;G7RJ@[wb@BZԭLΛy~rF6d S@Cfٓ5?d/Q35[o85qt]=P43HyK&DW֬xyI{7m.O XN>7UڋD>fXݍe'v#{-/ 4,+ZzG-2EvHXQD3ե'j9<nU*ę 'm/2iU N96Zo-_>) 5s?,P*F^_V4W[c=.kH"Jө;HUX` `WOtpS+PCq\$qNz9g#64.=LHuu"C&4R%s"Q>l&($N+]Q_u*d7'9.]/ժv˞4%ܢct^:?B*"':<%)@K^<5*92 Qzޱn+¼ٻ`v+aW4ge4L(kfF#pN!F4q\ݭ׽ G%!HAo҃RւEA^eZ JQ_8 AavgC/=^KG9"G7 teJ笥>-seϜk*ࡒv5(]<(dA7=^̬}9~<[*#MлܢA*/2AQ"^⌃*Q؆MWqLQ10F\&s)F@bvpEkCW3ђN UM/O-75`˸zx( :gcâ"5R;L39O(")]?!ɇ)<4a%$BVbxK=M⫢1 Aɀ#Ҳ\ʎVhCzkYUx twJCao))>Bk76 7*#1N3O8ߨ 8.vf[snC3 ֊`p_SbUy`P\P'PCV-n^F"s:ivٯ<^(vu+(A"A6( $7q P^Z 7&\ԝiKùW}_THm, 'hS{RsQ 4 oӳߡև5ʱoO:èg GX+ nLqChK|O5k'1n Q1DBo^L o遬Θ5^4 1vJ >NCb?>ucOSsLz->/<7!1./!B3zJAs7zB.+N#Z+dB▣2h5gAU) C/ @n.㮤]i-j<mM$)2  e1Jk9`vLK%]0ܳ;"E=}t*wSۄes[[17ɀhPq| 3x"sa @N > WoP2O0 _ cGO$|V J)tg Ԗ 8i2L`_=*CxOA5,f l[;"BZҡ>ts;,ʂA.m w aw-Pi[>P0ve8RY)baorE-R(-+P@]^^բ|XS_7@nT *o[U*csOw~Q5#BF"DfXy fUh">ו`X5{l7o)hvQDiKW)69wX;۵g\M/,qgҗbs5zcSe 9eLR~j8dzasa@G\uy|uFrė]Ӛ`4gBiJXE56M;"":;]sr΂ó>N{mSQ &p6u rSs7h6i e/O4gx* }[He&P;WHYvc`Oޟ$ALH%w婅”̷rCFīo %yv …,RO`H{]T @B؃Uij )~`a9 yׁ8b Uz=5ӽBFj@2@x72/&5=EڨAHQ[ b /i@ZQa ^A*fӭ^[kN*RWJ0Pc/7S{arpROn#SGUa:P WDaM;vC=_wkc /[i7ޑ#JdtxFhϽKŪlJ맥MJb%j*lO &vԷ%Ik-pP;x)gt$hW/{3l}۱r4JKN.VGw|=t`Y2W4)4$F8\HGmuV\av>Tf,< _8=~V!3oXWQ_N9 x-@IhkC.\rʜ&=Q̃]<DW|R!0A{[2 WJc L=ۈ:=pay+ӞѷΓXOČ^ܧQ``{80MH7 ;h<eT+7QF!Xr5+`*#+<Au'5-8 剼|72\W?1!⯸h]p !CT#\^h)EUn"!z$7˰$p%7O;8Eo ׋m K }(ه&H iE5=фyB^'"jZ+ `|oZwNa(U:kLu]y ő6F¼KD6#]wpBN.{ < ڊysl{RUщV>ѕ=oI<{mZ4b8YZq$2gXVVHw;t$ڠdVJ p OHaYCfTȁ;6HiuJSjUާ{ "[B[o!RWr:ߛ~<Иmf7f'-?K `D ݓ35X`6EA(5dolƽϠذh]jLz~po_Śh<4~>; @9Gy>^js91a-XEL6Ӡ{~De Ð^@?$^ ]& 7K{= &_̲e;v aw9 As+kɡLd{A?ΌV3ͥ'`L4#:Lvf_Y ءv5,3&b's'a4g0J[oN>6F8Ǟ8)% &f( SZʨޤ?!t'Éxʩ̝ŻM\t5"%]6pg0$ٌA:r*jYuk䱎Ѳҭ@\ :/ ¤-Xc7#ǵw5́" Sn]MFχ j7KNj!a4E t>T/DkHI?eho'H2ڀPX=N0[.?L12^:ET%7A'\4ESm0D:B\p f@g` R4U.Ɠmfm.oo"2)}!tL%솛\ 2u?^)sPwNNH|/(@GUPU,c3qFh\ \;\#4hۜ^ 3|P1n7?ș- r_e(I,+P^o cTV{ǺׁɔRM` ]0 a#7mc {HQ˯"'>X# Bt"i#0 ^[ 'A[ 써$jj4* #=O X͞JS//W4S5ZwP \w l> `PJK)~ܖ&F6rSDr4~B.D:Y|Ľ$;uRx59UP0ԑ<^˓ݩcY Fܷ81i(Gc/;1%% ,@cdAG5SpqOerS*uNeza/%S(N[8n߹ >FnRP gc;D/Cxt\vM ŗ9mksJ _{%X<eVm$6?Yœ4Efhֆ?y]wms6Uy&_Cpi􇍮[ޯh@LZy/qMzNU/ͬs69C{IXsm(Aq038)zݚHwٍeGB]/x.>㞇Kdj滦'5TꞞ_5ŽXHd| רI=>y^¼R(Leū(oȣ-> )xA>xSۮ7T,hi8nn/c=]r,&gIų(ATZi/TW YS|ImͰ@626Gu@9%MxFl`issZ⽒3zJK.4E**\ssh2 VVWơE!C/^VF_Ql 5W`sx/O%bp~+6E`#at[Pl߷SWvGd/;'l̈ 𪩼/JFi1h[W݁hW[3xŀapxɸfnВ6&`O]ʻK`]^iQ^/W /"If\~c pqZ=W gwDJ3k6jLڪRD YhRT$4?y_ZG?V3S.H)6/ȐCG:h6}]Y}ujtWRA8qe15+EJ*u[co`g3H'gޓFLƢ ߶+v]Vo85Kjnk}HxR-B% }׵&COiIYDvDHŤZyW%jAjT[w+'\tr:O\].E[{ji;:/i6dO$qi5?l4)!?j)4_(is0[i ZRtyVd 4!fį]o.yV?ڒͶB02OMcH+x[ۼoGt<;Yeuh$iy-<,ؙ.4r*VPǝyvS#N؋{sYmBتtLhKA%qč^q*rx}'ϱ DJx 9 BRYs ]3w-\Ln'ljlȰ@ H:n67g6J?xBg!#( 'fa}BlW/!B6{4#N:zҍup7DMKikeY {I`F/Y~1^iW-+|:lj{"!F(y7Q!IJYh ֥Q#kd!VG d6ny&#@8F-Mjs\ch; /%&V 8iY#ԑN畘HBN|j>4vvuVZ}0~P`I)yFS:cig1i 4ݓ rY,9|~g*8g t51e?dd(2 f1~oEܶGIW h>嚝\Rd6~914n#.'vC8Ab}D_cu Y2_cК^BtO^8L&0V`EqM=OCEFĕOm7q5B; aI$yCq]\wىHS̞>L!hP+`t\oeD9~My١Xq(y0BH aځ/wKMe+YTuMa*k+.q@<"}ߍN@ɬ =Gm,& <(D}Tr'} (_o4SCPJeQ%ښ\فLJD4$@Zl$uz aY XODKy`a9MY/@?7GNxO 8 u QVU&Xzw(_sc z:3Xc8$B~?aA(2qO%geQӪDvt~ 0x60Zs{6ǿ .[_"ªyٱ T˱W1:wsyZUv6()<غ1߰fu$Kaz7 Xk-!ONx+ԥ-l*|iyfAIhm 5eg?-3{CpRa6jؐªG'vfh? >|^ahg®vMh|.+RHPWZ7`h䖸~z_pA~} x(^WN)wx|ؕg&c.1;_e iS_ Mx$e1+d:Vf+࿀ J*9FU{#+dZDsP T,^]^f=!|+eT\r+3hD)6ԃzoo%TCMW9"g`)YٓGI+vI[GG/ʠ1҅&K!AS}awv,䄂 K!UA_ ,M'Gk:(zgRrNRQ|JqjbwWJcPiW L}℣|̧A@ze~~5;A*3].$”pAx.IdFsT պLN㭪|z0Y ҥ6a/5:=b̓&:1ʣ+S I1QImrpf+%hILog[iđed$:ea`6XK8RwbUA4K@/ʫl wp6g!'izABЍ$[0]}AjRiB'D7J3gs*2~Rؿ8U 5#穢8s4,Jao- cѪFΜx뎢j{pUzq X{rCpG钹M(Vj@bCj_D&B O-ert^oNu9uD+3m~z^{ΈI:M:BY,QVOn/dD yս)L7 qiNa7Wu[W՚\+U!\$}rl|znCOl[`_F'7<*lLZ57_}jDsVlJ+ˏ>#bfSQ xLt?K9nI⸑(2$Tپ:0% f@j66)E|^3o[RVZ0],8gp DQ/jIʢ߬%2nK/5W[jj <S/ |w9繕˴Ө=6gWvN7:-PlƂ6,玿6qWٲ dItA"}Kdޛ^G&~KA9wMsr kyu6@.7 ^7;n@O<ݶ%_8|W]<}|It+x Ns}^C6T'i.ltd 拞'k "Nޒ,!i\|3QM#)zC]fI:~;YcYMX'0JPT\ /ܓ*͠O.ZRsXU|w,(s˷Std]7>e蜌˴wFDlc}v9cm=nY`.ʛ16g݆}+._s$t)dϺí"N`{y<9_ 3bۃHo(w6b2L#X#"&@BN:mCppz+l] „eeu[F&jRą k$RH_$SkZzڽ6κ<Օg3KG (z-ƒ^>F*xŐOE ak_vFʑqV`q Xbi{OQzvk=qj]r2Mf ]dL zaٮ-*Sar9p~W`OY0UT'\AW`GH؀Ŵi ]<*G@XA.:듉U1w9ʼ맬<(7\U=mGC)^ĚbBlW_d|9'ZDIJo|qs*t$sY3%),wbg>z=tl}FMgE BHxC|`]-o˽ *qU,#` BL<|-D\7xO3H6Q 7k&3vi5g߶K{bqʕvgKV獥>@ɯ+3M{+#n)u&Aw|z)OB<< V L|`kg Ι_Cz-2:"hr?>/JǏ\F+?kr:vU x.okYЭ,'L%Lq.~ KFsRy;)|h:0ʾv!oDbEx/rSm6`r8-N5*I쮰|CMGFfn?Q\/6^>0OYZ޹ W=;HAM@"_:$b)Hֻ{L5/rTzdɈYTQt>gO+@堪 {Xbj79e%uNzV>?;o|WXm~69[Qv0\0m2hN?D_" 2HUM.ʪ__eySW('> O4c XQ#ه-ǧt5LK26(VF/+0`Ѱ@}`-#8EƮ7Ksx02^@X.a^E&$r3{dT`;{0NW/ ;V$kޒ VQ?Vo`)շSۋQR̖A%|]FyWYS[z'8G  7d.r5:B$[ &0$x*8Pui:,>'Ӭso]})1]a xC"6zcù 9Π/OgSWYIIX7c5Em@ZT8RHXæwU vFjpٮĺ|nmQhT$#a1KuK~,IEJaJ9GGSۉ5SGQzWHtXc6(K'RUߝ mUTU„ W+9SW:K_AkY{Qx>:>D[ɌkT$a&P|#xhӛCXں#>"{Rیqr0;ٚ8*Arh!]v H|u7JcO$ XnOkkQ nY d8ӈ'Wr6u֎Pp^^W(qB=N"<eh`KwrpDɆ [>6D}.ì2+T+bmS?Zsf5΀V1|qLtP& VGd4*V~ͿRئ œ|[ Ɍ6(UApx4)93Q.Ջo$jHKK .˹CUH=v$j)(ٖCھRڠQlpgT/%}[r;NZ?Q1JS{&loao3}>.y;4Ǖd)Eֺ]Xٶ&ha,!娈plьF!ÉRhYΆoLМ[|NAt6~/M0pSU3532S&LȔ}Uw#t)d1ヷdG- ў #}O^+꘍ʆ?hdlU.Ж?rx\%pZeQ֪b! B(Z3+dQucNN ҩT,I usIkC?%j6|f1l:DVqe^u*+C-f0' ^ҠߚM:),㛬' YH$Tu 䙚5Y?!n/,t:h{0!??E/6넣!s9+۟G:C0ќ6AA{6ꄴ˦dp/ǟiNi7x?M %(A@lu E+WGߥJŬJu5$ׂLiY.eԬNI4HʏS -"5*hzN ?>`nnSA\L1XK&5!ŭ? דfY3Eoi&;f('F^O֪Ck2'ZBâMפY>['mPGqlQy|H,߭WL;+cjH FQ,sIW&*_ IuBH˕e \ߟLS߭2D\yw#l/WhMR^*0(+}ؖe8P@s1.IBbSGqPpN̆(X*vAЄls#.*{:z?-/qf#(GuTG76l[ͽA43f'7'>8˵B5%2G18"FLAКlJ3Q[V[e .7 ,92ߖ:oػ.+Ix-0|IvÒA쐻?UDc[5- nR sSy~yۃ4(Ff Y{dHu߇S&K: rŪ)W|'f_7`(6 fS@4Wͥrٲħ+/_~΂3ή')ȒLvMPLٞ#8Tf\jzjr. K̻(ioQ.wMru|vwL4­GP 1Q#3 Ze(g꒯h;a1r;llY&EI m i!2IJP^ Y "J5$;AM5mɟ `{!Bfxf6Lúk*ml.Ұ#6NTJ.t~ʨ1MKbr("V1~%C:1 e:ywHh?ߧ:ķGDpXo sfО{,eJ.E333= Sie cFS ?axUSa:9 b(7621b pφQqE|5Ee+}C;P:_3[̷&Rgii%!dޒ{ HP&\M~%JC@Ƚs%)Ѫ)`u i9I1ltWٕճPyم e#.aqo]UYj*QRuQ`0=oF5tMb% =mu H$xBg*^D3h;#rNmrjnJ Kk]uiz_~T% PZ8V|8UEI+P%Tk5j|n.[KOuK5h;lS5~,u3O C8`5ؒAq-ƆE²<D1%;[k|D)㕑i^2ك!*@;f6ƺo?Iőӈ"CSxu/lKh]2~vDQ&?6(&YC# j'pu4`"츠, H׷i&3pIyG}OZJQ3&bD4Q+'C1;>&6B*+v鯟zk|; [bS}xy, evcP<d}' /vo#_?ssDֱ^PO+"Z=-y@ʍGbXJ|#usE;Qęoag=O$H){*L&*y?@!QN+Dč_~rz[%d&fˬ=Mpb3{ImhgiGް#z8-cv Dj9=-*KG 0 l?YCNq!i,IQgg-Sݒ@Õ [׫l>%^GsHq9Q^\ eDX%/Ej!8H;Ƌ@rD۩9bzO!=,Zvx?VGcg-z)!+Ŏc_L_8YV^YtDEKXcʊj..e&.$[Q%~+ ]xNE&Y8bHjC04\XS;F 'R7+@wc-Q_ V׍Y@s QJ3B惰YM˹;'0u;{'+Tݤª#J24qZ0??`I{C+,}C@~NT԰>Ȧ jwn쥲qp+e-*2J+Xp1`иl^OM =!)砥 >1`6|P7 mg)0znHgіm@CQ􏔝+8&"BBs!!B̙0g${s}T )`2ҤULJDDI|G88q0oU, $pFJ%]"aJJ6$~L3gS̰U Gj_~C0K Z]3Z<amW+H|e_-:C`W|W ];s<#vv <s0[[Ԉ=UG*@?HD Q -phژΣ`.:/}fԺ2kJ.5$)(O\?1|x :O"S3TѼp B&ԑ~?Nkie6rZWʑ;@Q}jQ:sFP?}x]l 8.}aNX\ƨMYy҄*Z,heYpĮRꚀMrH3>[cvX1sZGba!R^sY|>t#D \'{lIif*ɼ蹎QcBu mkWQ>e`Nho}|@Pd2te5"^^+SW&*y/~%K7Z@3#Z{Reޯx֐yXj?1x2jOm^E kFŸ?p(H㳵iœD#'iEʋ[,(.=)^{:?Nl^`ydIwVtGgҹqP>!bX>vDžەPu%z ],~w[I~?J88q;WH c Q^ >B+G#JKT_m'} ذ*79GS 9cy[O׋ Q<\rgY !8J1͌-UN~mxX ד o.[ACrY.LQZll?-`ݎ< Xثm\2X1D7dt!A$fp2c| J x/B$]vEiOiP_YPW^p G/Wg^qA+Φb:U{إ7r+4uv~ãaɂ|J(lӹuػݝZB꼃iT_ѡrZRA>iW*oyΦk7LN(Y.z\#RР0ivl% lfI| ԡ:|ǂ"UK;@Sb*&h+pCNt-W,lDbVG  v嗴% Vjm#AI8s{~ beEF-F-M).C QE/GmԞth_p[G n ǂeK|0p{]BhcKM|}/ow0MUkC(@Vi/a:U7 f]zl#StNJ6KN1&psWFEq4sQNQJ U0NZ2TCО@=8LRZ"%>H!כ7c/zPE:W^u$j .Or*%W6N 4Oԇct09TƱ;t,S< 5oQfmz \OR}bcya$Z kre Ժ#>XOُ+~]MwUH<ˠ*|B+B\O )Tj#T ~THp}.CKP ߫m FGĜ*Ȣ5Ll5l6Fiсk3SnEeC6+=nl'b$rJ$GfQomOɥFzjfj$z[d`_AFQ[@zȧlDe6ì s̒ʵ _فe$|74%A؇|%<éwXV⎪'9SĹ' UA>"6a,U\+Pήs+"VH  ὄ5E67,A^~I BƒλZP$wCkJ4ݼclι^& 6O_t ;Wq9C<U|ƈ8hGA2^Dkdi+ f /X;X45!dyH 4M? W2:|RhFk>̈́Vӷq"[ V\{NISٜ0݈ԒY#RFn?CU,PqA9'QmJ Ė%_]?O..6j&CDT"-AYʋ,-ߺ]`` /V Ghc#wh4o OO30 vQsx Tc=N WiY;ڡ|x%S6"[Iy]H?)v5MIӲ o_7HLte*cxqBmN;5 BoaoI\=O6]XGo[C:')N*]Oj+cT(jvXeTs`:|{XBl\YxaP 96>*eF3ͩG`B5HYo92Dsuf~zOTſw ф`J*!R)^-wF4kU߱spܿe&SzȔGS@2jO̓s.wJhOd:H*&@_@zh7D!dNǺD9tHeJ2vTb@JMx-qpO lM2fk[]ݙq+X`JKlpq%}rTkH' A[-Ā-QMΪ'FW7$ 򬈜[cb"{ ɴEM{}i{?qIEFP0n_hNMHZcbӘsZynȴ:9dgy5P=5:aV&nE敳rig<ӄ-'4#5KܐVk#]JFz'%_*qŀṀ !hR_Qi9k /sݭdG7TA/b":x9 B} D3{!a>u.%<5BB`6CL]| d),Po$,2 ~(P!3~]=T047>"EuAT ɩ14DC X]i4)NM3'آ6bt@O^5 23Uyj+z*l"#N?QDuo!9L^Dۈ1^gfrӪHA;p7JHlb#ׄ5?Ś-I|1JňndHaܧ4-cPho@(ݐO(H_~6K=T&JanozK Pk(fq>nEVnS$X9$HvӖPiUqD/{qQ.ABlL`k%Ӿ}I/Lr}X[x,m*ކn|H_ bUL ZPmI]"ev,THߣ Cd2,@L {N;1۟ *~2'cGBDH{V\s'J16c[ `x8?.&oeq)X7V8qM;0@&򃴕vZOf;\N_ܩ5=[E3՟35}[X@w9t}5< Iz[Z> <#PG5GgF.4޿ؖR$z,+6(84"t_d\;!Qw>jMqtNY1'ruR耚kw)*XTx:~92r& b>1ql.}}JFߣʯDF.GٱN uI6iĄ߬Jht,d(?5HvrId\k&3K ';.h1±ޕKJ&O _pOi(K:(a؂cZ=Rʹy*?p?}JC2Hw:g݉#ɍ7:A#`KnVm}'Z/^4kggĞOԄGz.e,v@ QgSʝbɌ=-i\{e|*tGX5|cqhTpHNJNiv .?x@ N'%?\8:r C iWĹ$-#)a eWMkQ2is>'tm£;߈eu=3R!9{D]i}i*R~ ?$3V n8.T_]Q b@fnW\0\ ZƀN'5Hw؇3ck#_5IRasY"cpYĎBˍr]A>u4 ?b.p+QBH\)9vbuxw<ۿ^G`3oGz;oL s|(#0DTJ[ ux["\p]T۝:ٔ5 /` %%GG;mD>GRy>YS~=W??zZ/g<7j8C-1,&M\m,wLºr9&B_0WU /K$V?ܪpO*2Ţz 5yjB,D^fq/$Y99j'f1{TV| Y)%ۭS8Lhw.S}qi(i\R?"X DΗ[2 >pw&d0Tas>ĝl㾄Ÿ*7"wJ!;T^Jhο[U<O1i7ErPҸӑ#5sHp-7fs?Fbjb:-k!/+G(O>ýX"fى0_Xa*hvb浨9B!3!vWRhy2w&Bxԥ.w嶪v8`4Bt%P}wPFc׀fSYU=?RW/0!^:_S}BzqͱU{N[ F`7ؿ1DUk@y>S<ekׄWIG'6&K'o$h %`xϨ,RtBqU~pʴJ{ULxP6#yR":o2Z̢}޾]Ü݅~ƛKKܫZXSUr 0?,t~#`ch/,ϛ$3&! "1VfTE{A<mh# _*ic\)+wͮ~{^=V.~Phg> hskk酿L1Tȍ^#N? U'~ڧd2Ȁ4tXf0\us5h(>c¯p)bFRiTyxa1d,ٻs/Y]i5D9,[ 9#5L> ɜx:#xȵ;,F\P(k=Rc[jzu6POK%v֢~K,UnJĽVf R%IӡjQQ?F_797QO}*p%QWhڂuʌ3^ nײ>Z %d* Ά7kGO)*6Nѕp'N1V.9OYyS{D>擷>)Qؙ'x'4-naku㡹Ѝf#fN$fH|{ GC`7/jhSXg:p(iC^;9~Шw; #հcdZf ӇMb}yɦaȍTt6&0Yb.TtQ7 }RLDdwY9yF $Jk1lhKw:-^uc ܺREV*~#QnOp?jyl/4!`sm 'g!4@ Q.za0[N:O؃9FFvc7-|Ñu6) rOE2  47Wc)ylglLO[g+zcyJ]\>E?!I$iR޿ġ|+ѕ@\%)y6 LǽXKEshYlg,,4iD#zR9-Mƻ^l;pǏؒ qcmOl3ŬULs}':uͥ2T6GAr%}oh._!P>F1P=-ϛIxrWn9H0% zs|fv_OZ 6OP# hsD87HėU$iĚ4Y: +ߍVS_DäֺФOՏA_#˰y_<1ҮA%Hٯ)"}hUn;jzL|#Jmy!0 WKw#)L]'Jy*{eMJH4 (JƊmeOjEi}KZ+4ZAC$6mUe;-C+쟋ז[H3Qr݇9e}=ZZF?qH\1:6(_VSk}rwSN=\nLOj`y_݄thoA-_`idX H&ceI^1^E+0n697hz1 꾄)nb}uvAHgl#j YPNv,t{F,ŒS/G}q*1ns?ޡht\18D)M3 cidkQy{F끉]cԷPKec&18哵O֧Qwrh|挕%4|EjsֹTEɳn~-aRYȾeʅʙ$)҆[ TR@{n:-&Qڜ,3>P-F +쏧9pLط;M@+[81){CΩω٠XdJhKt]ڞBBy>Sy z )uWX5sR=VРIkDSjZֻAx&Sis|q '135)$cc[$|t}Xx$ }|+{UEhc3SR21ġg+I-0vܽɃ1  y aJSw/#[0/dĖNp函5]*9\օM!8 +C-:m̟pY납ۂtẏOrz!XoR$c M!f,M|Q'`&o5.yUV afMipLR|#9tc'EX./$`Ij q){ԯH=GR[<7Ͷ{C'^T;;"9kNfNl Cb4fEvΰPc;0!vA Z}?BTaVjtwC-VqsGSV]_bE6EC?A(jBB2!s[6HPۖUˉ<*@N$w* c-$+;%uɌ=%,02ܖ9g1df('6k$2Wq}hƣBI;ӬϦߞ ȃsbsbLް&v3gÐKT0T78Y񝲠.bk&y9.ƶ-2]zh$*CSj(8Q"dP,D%Uީy)"U2IΘ,k8X^e d{G8fqu4\^H =kjWN;"xZvz`/*rFB8&6yY*~ #zBP4fɖ{sɾ8Q^ald\i&H38ʜ1N oUqRqa I >#.C,IP4w1-0D\XUdSm͚G4SdݡMjmPxZTً3wA1ss$#dⰃN AgQKia`3@:]g5TB1x0#6P տ4R~ Ŗ`d%PVu w9.Q^ٛ8pb9 ~?k^}{cY5dn *MLNWn냶b.r ȧF 'x]OUVs$b^|C)5ϥ3c Y7vC x͙#CvpʲB-^tzKHrr{-a@ƨZ ;E-e$Rt+ ZxLOߡ3%(ǐ!rgNhnpW;QS?n^:', u7wew_P \I-LV@-ruTxf7CM9o!6z5ot [ػH˓E~?~o<v?ҫ$VM^ z5ư>Us!<_O/}Um4ì)q]qtvM*C3% !!n?2?2աm,[aSpAx>54(A"f *q trB9$m}u/ܗSxcރ8g_L{s*15?LǗ@ >w\l8>CiGA>Z^ūDGS7I[8.Vz TŌ R<'jk*p,FG+N 7;'VO_ YN*H2=at0$ksI3BX${`>:ogc;Vm9+^41 <;PُM~rFSpM`chkW ]@)^4<Èzѵ slmAG2_2RUA4N;P~O:,3sN]yE.i2B4̟ԕYYGVqBx%EM|!Ɉ$,&ӞG%kK`SP4R=paߞ>w K$a[r[P 1]*>]BU0<Ŧ3gHM?lByyOBq0.IEvWIF7+l ".١bq[xj"0t꽙p8qh=!rCMXvv"F႓ZO3s i+-ܝV8lj䖠p  $Vl iS{t/T3\qw8G Kxw!{}焆V'HA Gdӈ:=~Y%L&!5̣ &h&o^iRT[g$L14 Kz*"^>9 α @eKtj9={i+OG|)hf'VSr 4V$2H)R49(1=EJJ^+h8G+ '^.z`khHeh0cl6ȦBA:, 0[ݦ(xsHG4Kܔފ r'6<7W Wy;.eKq_v'o|'R\@ GXj ":ΆSG341.0/Dxq|eiC2XiBqZŃ1o9 {Bضӽa'0eW8Pv(`nS8v-\IV:3oB'K8k /D롎}Fۓs=w!zyjhLxCЯ tcKI\ V Ƨocvx D@Т)@{9 & "6en+1*PZ mxPmt[7{!hw>%c\@Oo( =ńќNa*JˏkAjI^\ ;E.zkŀR6Nݲnk  }Ց!y¤x2DBUb!3U a(%ILq8F,ﮢY쑺 8+Dd܃I W*(5"I6K{mn2 Z/N/ 8؝~^$"k x2:~RO͞;xzxI2[AiTOpbcu0(cr aclLWh# Q6{#׸ yR GP,_gnƐJE")F3ݣڛ4(Af-"JeL8y GniFOs%OY,P[I ]/Sm醆 ̈)x+1y?nЄǃSu)㷳 {(˪kC6LU.A^tհUdz'Ǣe ,Ci'\t9bȍrcMFU' -{F ,›yϮȊꥏ8^H&aj˵7cmPvӞH}%e PaK'I65 ) _!#VTUwNIh/XeEvNԓAR󾋆G.gxh~F;Ow^njĨm:ޢ9JdV8۳L`[+?81VDWrE`4ݘ="i6v%Tǡϯ.Ɋ\uE5|1\)TC$nJ֧ 11; /Eq^P P#BOkDSv.!Q}?X򓏀ږ 8C-I+;FIMXԉe0J<\߂RUg2rdJ6 &ʰf}@vڴۊӇ_!& ƼDh9fNGOΣ8Y)H΋l.7Lk:cq5E>>I?G{Siebu8!o`mԱ6@mo]s7wc M2-_  ţ6@)߷x["ЂAdce:[X gAah+G⁈yn= r-'$e8 a]%Db21~!|rb/0wOg>If є"f.$OdZ\U!ļ+,t:d& xUɎ ڕ8\R3g%u?R#4U3koK,gNF0&rBi ~]*oBKG`(!pfc< Ӆc@ fMK*!/tY1gpHdS\ss%oy@YŞk-Xmu^bۤRa$"} P TpD-K'GUR"zYjTgxz153g$=P<1 pM?YiEҀn8xk lFJGQݘzuM!))9*i&C4FK'/@mOefm"Sm 3~~+E-&gӗUy5R|rZa?A;\.b?{9]0}]Y(ȥtu"/FI0\~1Fhޗ ;kZՓJVV*)~ošLdgdedK$EN6b38qfo0F_N|E;,r؊Oyʣ?p72o&/zEQv ȨE{?CBZJ_KlH69-Bu?u"k(/hh@P>[M;z7P41U[c$ ف"鵼B48 S-g24kyٶ="l-\=htTGWRa2l0Cz&7ecFs&ƌq7j9{C0rxYNK87*qu,XQ,b)kIjAᄾϜ҃w9NLMQH-doe&{M,ŧ/7?2\]BGrDD~,ziӟND ng&>l0K a<56"i7Y[{rvCOۖ\&E Z_;S7~ WRG;^+ɹAD~ Wd7uƶ7m`1?÷<{դ)(ZS$%:`55 ɋ첱ؒq W L.L&{ةw.Fƒ :Ui¦d8҄r2HD.ԐbHڟdksd wNvۗ,󆠀4ʜ\(cZ*'lL[gqfKq{s0.¿t^|Y<^✗D=? WqmgA(ңgin m-ohm9LJF!{Lt,-i sIwPnL#T+s쾨iZ5L^_(8RƌgcT]x*v4uL+&tAބtL[X Tx*6g34 >)?)^c'2h 0> Uf$aw@?C:X|]{}nlEoldѱ\c n5'! 31&Lz^el ¦ >\djLp^6`D m:#2ş, Ò_{pX٩ʨThF> t6d`hdD>Kj6זIYN$Fɚ{#hRqKϓ= BA4d[:5+ y ;sLrg$szu9dU?ЪA=#?` O-QIptMmД<'ϐɼb3q L6c2v,WZ)#Ⱥ|k5w\m~L0$jgxeՓs|-%^~!`{6b\I|s1Ǵ=f,V %6<&^F~+mXt0 0Wϕ&*HS \9<= kHݮMx(8.ʢJZ/Z4'U}[\XQ%h93!TB-)LIVQ #3T"SRqs@?YԸ%{g`$^-Ho>W, "kIGj}Ah7(>˲50~?'Uĸ,)̡`H)/ЫYKՑ-ҡK; 8F\1SBty T5@Wۄ1WEsPפ]97#d/dhsS?lո#;u+𧊅5ishĆB=A  p7I1y4LU\MWI H1';aO(W{} nJT .ѿNXCIԟ*6VE`ZS=RnʹaF.Ln> QW'% -z5۱db9\f I;SQeRN\u˸e/H" Fr*/{ xBTb ͦt\\x8x7W%54|zI.5W9kv^05 qqa~ աM_?8eXP6t]N!ɽ[(S *C0V%ؐZqK)ncYnlͤ\=Wб]?v~(*SfyqIt~6 rbjz |5=վ*{G]:1,-Us/$BRCsVҠ]Z\3d^{X^IgHڷ/E9TAh-Vj9oRSB"e9OӁ#zvfЯdzigFP, f!"k7#>j{=R@2 v7ku_k3-i ȫ4Kl QꊴF`dlJ=CJAp{Ŕmez mo LJ{H" ^RT,Qv[^ކjW‚GEyXE6 =`9d CLT\_lxjYī=+/(hL676-ĻpY>z7u)r=;1Le?b%ubde-n'&_ߧ! 7m=<*;yrd*̟L 2:T~IS Oy֦ X%f)@+ lq3$QnBKuZ \ &d=Z0]6o?u)%IszYiB簴JEwWWbm[7[}k0:Z(圑p-"z!4D(,dj6P#sChOe3uIF{z_I9R&1a;xzQו3`& (' FlSP=K-+ cc#G^", %e扥GA$)cg?]ч"]OlL˦ŷpGݟ;@R|ŗ0ZN2[F8$[P~tt;RRoNv`z뷠%HIQ"Lgsb ,l/\ש SR,C?pKyxZ|h0ߌ] z`Xg~/~<.nmK<Ǝ8EJJcm*t{jeӖmXa*Lbed!5|aB;>Nj(#B՗M: ET-4ܿտgQN;scͺdS86 & #@|xNϙLiWyԫٚ;W.#֗yK$Qͣo?)}*tg𛥮V)<||Qs>B 4?C3V|a eQJ~0 ˎ9Ҙf|/E9LEMEe Cs{V5>$kgOܪ>[Ze[ڦC#ү1  $%i:JVd"F?WR1&kIE1lgc3="B?"`=K=b^"Y{q+6!;+QT(NjQEsm"u՘[#Rq;+v y̨0 0ܤ/ȑ)[?f<İe淛ޔhO4wbB 4:Nm9s4ި6nHJn2{9^Y|BԌ"1>$a'Uù Vyª"\ȗDMJk͊9oKl0r_Ppz/% g˶.1ۓ6;>or<Hvt3iE`Ia< R` J]~Kuu&hcsxƷCվ֝">TFsjw U=j0v?Cf2ӼWS̍ ,h2|a[F3'0V^jf92$">5(svVߖւ©[\4lF. h}1@ef ]6Cf洷ʹT}\%uKʸ^ߡG~շf4[ө IWÏ}&HLh* Fep;3(ӝctzp/m"_^莺*L:ԕGkXS#=5GnBd"tB7P2'7r4^T- H4.K@8F̲%&BB`8GeO"%U} gE89ڮϤ1\ 9(GcoxjBIF'[AM@rP-ȃm,/Vl8k #%# .TnrQK4?E\vKV#WR ȩ+Rki%Ӛ') xg`-Z*!HX4#T dڂʔb;=npT*"\1dyL(Xpyك^xl/@B?4\\£R;enYS~yVWatB$\ vڬYA LYFdHPt_TfN"/+])تV\h(9|[s D=EdL棇Nwf1];vߋ.!f>{ 4>ϡous ]UȧwSD P X~R.u'/ۙʠ\0cW%|]Ƀ2ABV`۽kD>bq$QS0W7gEMҰ 12X۾`7^#x~SD?-4ڑtw"OVXi1Y3i5w)̥]xϦtHiYK iay!>E*J̜4cvQPt"eE'.yfL.рSYraoj^!;>Ƹ󴯹YoA\vg)]+^DbLS0f5[y,Mp*+5lsŚ)x`6yM <:|Dנ1(HЩ(+Le%}N1ao*p?S]xS=cY'qC5'"Q5) r'KFkBOspX`UzCܷ|os؉k x.7QLy%ˎ_vM!cĩA%e+D mh3~mg|\ίzpLP= ~S@6#]ԝu1 3R_UWr\V3(\|>Y2רW@ka"tfM+,f8%evVresbmY]󌓨ԮSicmY'kmyX+Z=S(ɪ⃦a گ#0f: '}%vi:0HI >qrX<5QtPxFLe9P+XpÖ;"|4Ά.]r,{ً/Y, .[~X@bӟcW /̒Xm65Y蟇A%ȌT`}=?'1M=mǚQ_b7"UY(?/<4Vξ{f>JmG<IToka} %x@)4AV qP֓O5=܈&mR)DՈ7DcN+}-jEy/E'Zж(2qc B)w?xYڌV}Ө,B,{h:p{:.dU\"m4Q2٨4%ϘRq!N;;$U81{uGT)Y`44d~gLL2Vb2^4 !Y *I()BYh!Fb+F-bi4.IXV]wG-VRGD Tz` ٕ^‰]iio XC,(uLz3m?R0=:W]=q*@YaEi谔HD'v شi+]!픒h5⛃f9U0*\A?6dtEi2'/Hp:PU=5"Jt: N̦ꐊiX/2Q~O{=B=౼_tk͕hz&Q:S[C20rͮJލȎ =>Tg&N-+-cqJ+B%,Vw+!-y?jxtE}:~YcZJޖd޾kA2f6rNddžƾ,.5$~k5Vy#t6Oۋ5XiPհ &C,Go,Oqר't nGԮ#(wԎob2ir7ŃZy?KcTJ[z QY(NŪ0v}iP+.ر @8<]7]M 5bVF;8 Cu9wԙ74sI t"0OOUkCR>N uVQo/u.H}'~έ# Wb A(U#NמvP:Py「C;_ͅ<\ٕE/6$*wjW1Յw% 'VPk D~q$ xx\7&а A+:?jq.fqo?nxN\u?=d)-F# ثbyUЃx ΑZ%l㔣 B>4|k74)]e $>ԿjFkNKzsf /ոc[#u܂??]o8|GLe69i p#/p=7,9pu?ڃ1VzKe)I?9Qlybf WWCTD=h5 1#/E%ɽӔTȎbAbʕTKs|Ծ |;K}ۊcB%p-Rzy!dÌgxH,_4f8uB)X˜w2OVEwuhzyhGM,c-eit\=d iG3ǍH0Ԟ\vUD,'Cd12@OHcaqMmA6cT>XfQ=K1A,؝AOwbOlLrIOG!5i6iVzup)նc_aY6oW٨]'w=s*Bj!5":T 3*j&C{MUC8eE܂Y|ٮa>_D'h\>}.h i5er/ncz@ƪc9,a#9~mn+i&5DžMuK(i%=>+ݕ*c,x89(U`n(V& MB߀V۷Я۷8༿4iKzO 8+mFϺdN1h; *M%hM$Caw2\z1ZμEhgj$֭u֔&3YRrw)o1ڍ |Z;m*O'PyO Vxfyelg?nKn׏w>YfbM 0nrAg$["ޏGKGqϵj'$:{`W>A";vuD4I iG|w̛|WK&\a[Wq?µ=.okZ/K~YS -:cfēr N)%0 HP@0/>4oXYDoJP 9cKni9''J4J l0?wGbxw;b  ץYZQT3̏YD L"0煒}oQ ~"@H|*n="u@_LbW{g#gXs]=-6hI^8ۛ'Vp0-S7aCӯ琹U Kg'ÇMCHVv!bّUxo^`IyI)bJ]7XU\ղAjsSl"& :>l }ƻB3侬)ɧ^+}AlNܩxTH$i`E]')Vjmj~nF;;@\dוd|ؤHV㽙9?rnHb:~s䘏:hc˃?c:^`^Ƽ#72woǵr? L)PYotc}*L:x9v2Ǝ ok݋AX"pl{Y 94SτZKxH g0<ܕTFOK*6"ʂ)ϙFcK?QsrH$:@1LG,V}d~g <.+$%y0ٻlKH[qf!&³=HeO/S]޼P>bs1zK' ;  2A-GtP/DѵIvbN} رadJʶ?smG yIO(:p*)"Ѧ!TMf@Jp6ix []*h}<Ő<5?} ᵚC^_DjJƼ8$V NXTF3t=@{ׂ( _:M0A4ger. -*,Ľ 8!^ggKf&?I? I-uкAW4 AJ۹@aҀAMbD䐬"o"} Pgz1.yE=|`b8(b7n֤ɤ!=`vQVW_#t G^@TeF7=3DHTX0s%tBHt!,)M)FiIue̗"1(G-ڪ?О!7bJXy{pcM.2|Iֶ,6 Y_}st CyW+:(Lu[ SSg|?zف9G2BSԢe@[[mkO-B k1[ˁ.: vWs %SѶ4k{5Ez^g/}DnVr7UropM툰$ETf;:X6kFIQ|HQ|,@0˰B'tqOǑF1 y䂇R=a4үc޿K&q`q5.%--u2tb7 bvͯ2jeik$u?:)oKӳ)pM]O"r5`ƃm-esK$^!(y;|} A%oy:ޤQc6k$W< y!L@lb),4fګIJ).D~ELDv>4}ubhGk`W#)-p)pp[^ .}hg?W<}+͐G.NCaaiLSUؾGu:?*BtZ4(~8)r1|౓NT\,޵:# LK)feHH("p 6z*yWQp˱[:ߝ"o/}RQJDҝLW@ -身3V&H':$]iOG,6#q lZ.F*[uRI.&d |/xxt#.6DS d!`g06Rrg2H[`?g l/gUF:]=OQswSXhb,w !+PfVU-qpAOإ5=GH(f C@IqRBZ毰QH* amO֨S)Tmyx%kiEY;iykځe @4\|d'uETE[&ˑrIāus/GҚτX\ve(ۤL("  V!k;bLviSLQ_EpUbW+J"_Ѥl|ZJ&੼Ugn*-זej㣋XP%c`H Q`%jXm;e6*{ūN˱_8Ku-CWo I E׫Z49ks); +ؔZ(K oKV3.>y+T"1l/hsK?q^WЙ2iTgpԾX%2C=2k^mR~%&Ce,Kg=hZqww9 |v(6zV1q?!@?Y^9 "q 7Ӏf%L; Z(\.L"ڧSw xYZƉdUShZ"x% b@kThE/ȉU}Rw[;Eo؅[d5*f=[==fk0!V Re푣}h$mǣ/:Ǯa"H_V9đ9hf4"Us8܃\nF NRl%1`|^lLHT! 3U2>.s)/a.Q+*^㪌CTwRq1. <֛rUSc˦ B.08yTVAw͞P LIGFd.[nГ|@A~B\M=z?LIq G k 3f_hmr$XK&2k{vR/Q"%M.*1Odq!2b[A̓1xp)sE~Ǧx.MzmKd&!΍RLrלB=k~8i]S\] `-)gKêb%{Jw԰a%ސp%:ԢXz%{J3q0ZU,TTv.I%cJ ]ĨF.4* 5`u<~˲:N&?Te-]HkkڌOMW)}m^e_vC0y'D>!g %WHXt9a'QF?sŝ ylE"+S#sDY@@ * $V2;<-Gĥ'zNֳߑL9|{eRU[D<Q)sU2edPڽfX; k[yH#6x]Zh _ l Ux5,Q6٨⟀`wݾS%mp/Ipv9=}Ćz%n xjEFOu_?kr"ԯʤ@k ԵʍRp94Jږ+_&2'DĥJt2ZSL #ɆDt#Qv_j8D8W+앬١GMM[ <>f'q+]h }3ѿ x g"\Ъ+$K^e s]f)?r+Ĝ@0[cQ_ec =Ao^vK L\"fYu1.!a*r}o"=܄t,a W^'8M_2wy [jd`?l( D0[?}c:8X6>cMGPw"9gѱڈ͓?I IP8zx#ܲͪKz|9.-mKoI#7q]LBn^}O|;J\9bqw-U.2Mޅۂ8ҘZ$0GgV< δF'䇘isH lm II;ơҊ:?kN!К8;Ҳ}|3gѨZwOO.vC9pѠh7\hXٻZ,57 {gP@'̍0t̝1`&v㙡 ~['p R &;w $s~吏1k1t}˨:020ӈ&;5/̸N=:hcGim_ 'Bu%zV]NYem{+M/g/*7A{@ąi`ϩo &QN6ClH#\'w V2pgXb>z|']ƣ 4+E}VM+ڪPlm *ݘ5-Ԣi톗 /C=>p M EF\ ؃^$ )YE4ΖRJ$,{JTUi`"fUUP5+7R]vڝqcaeKp R[J*TCBn y\,K]"*WW0. "eraPaŪ0Ԍ|#wQbGK@%v(}ԘVFGBP-\RC-ÉzVBM~Z@'NBNqY vQ5^+$AOP#ہc/qԻT(15h?5 -F7pu;x^4>3_Bnt&BpCbSVB^6z]7VlT/Un%zߣӶ9-|Dx ;ϔTIxUUz|LjvxB W\:O"*@`xiGYd%8̷j"xd`63=gx/AbюPN@_G]wΤbbD0ݭիb |^0IR8`XB-Wl| /X"tR gF!Xc)H2,n޷\!Kj7gņ?Eg'6g(\m lQ<,̟Ir.ag x-kO1}#Zy!¼Mk=+yzn~c=/~nKyG!? A'&v:#VH!* zm#/j.?_ue+ ^e+h¡h!jb6RS^O,gCC{Ph7̍]0~/=ÒAPPo-b˳n Ẵh"9\\ypظ5>MA@鯔hvq YBB~ӆ>ng*`~DVHJMq~)W@d~J84KnQ&:+$trug(<&~;K%" )\ЙJ9eKO" &Yyիz*ŐA | GRmye$-njG +[zslӼ j_R-]n?d=Ց5 !˫2}:X nZF"Ŝ-󖢬q1GAdA/0dgyPfTDL-$krC#Gy9{@%ʆׇ"\Q+1Dx~x]bF>cv7E+;ٓ[atE.- V70f=p3,k}lF?n( `EƶLO\Ͱb՗8JDoVzV5sv`ZNg4ZaYW$JIgm*j`5N'p6+H449hYP+,SyayK B^&$y{Q\4W@71g )o`5l[+(npƺdvjEGPqc\`S䦈zU ,ekPHei) PjBH/o(3 -_¢f'`_/xpnK+}mHvʡZnQh*(J.EՔ`RPf_גV["~90mgcqDI<֜f4?VAPQpLp6CaI {hub]?H͡ 53M֎Q8j2Htd鈸UT,|t'38B囜^7ɻfy+L'Sq_mZo:gf+/@ࣤ2qCZ< /+rhʶK\r AXIw%JQ}Fa(|Co`|B[e7.-ǹN4fp$tQ{53M$g_RWtOSgyt!GXPy-,tYSôAmuʈzΟS8.Cc<|U-9?qĢz-ZHvelQ{p68Om6_/2+Tµhz +!Ob[`M*WYL6NMY hi_ |˾ǁ"2e<( @kKa)L:،͵skvKą[!~|+tvZWʎ_W =*]GkN{PWUKq2WSٹ4cCKJ0k j7tvR񃃠4l#.{+{# .)A5J#e#`ē+wêz2j9ncPXr@%ݜΖ''@'3)s:nأc(Ig 2 A3C>_-5.tޝK_e Q1oi, ;4KZgc1WtuGA⽽M)b68AE,z% `E(R&a8~U"~% )dr˯dӚlao^m@ǒ0|$XKG yT{Z&p)rlqsr."17^NL7~U|י`lS!czDZ9}l `zME}Ο 5\v zrc2GM֎criJa'N^& 1SEa]Ёئ&no,.2\H7Vm*IL݄(w%Ey~i7~H5M$[A[UE9U'p>J=lH-r1_ϹEDay)cZ}K# 뺂b{Y}^Ίm.5TWitQ7jz{r78Q[K-/;T{N^6=-{0IUwppΠ|1LYwG63rUh5gMxVx1FXpF8!pјIHyTvlf0eǘA'LjA ZC;XnTHLٲAx@L^ϓ9gL4zސ`;f <cVޮq;չ&Sd_Ӗ@*&+o`ZjX($zA`hթ2ٽ43*/Ѹ%C֚<8`%#*uE^bQv)'TV(j"+^I 3g{钇{w0)r||DvI%Ӹ dĘI~ jJ&bY84o@:XT؊z|Tl!EA:? }[Qg_>ļd[(U:g5+`]S.*\] 1RArOmow8bA;߉c84w)3sGܿbe5zbl9W09~A;Vhk.TMi}m̯̎vt_9L*\1c6\SgO;?Ii슏Iiq? 8v x\7[J9_fU''UM7KMn@nvW>k(QFBF,7_ JFSU%OR80\}KX :%s&d)ywxEmP1hT[M@d*9+}~]Vv X`"=E.Qđ :Y[RqQTT*`٠)I')ڄB–tفɿeu/f^:ߦHʴ ;cQ1TUJĥ.7]Jj+;7O*!5?DR sq^Vݶ]Ǐ_r(p[::ݒslCus8Q;e agssD]gfsfljL\߰3a<kBm;Q:}=1 @鏮/ w *w%5i; -cBA<+0ʍs+ wYmi@7B7:(/@iAԄD~sq)>Sg!M /36]xoٱU>5 QyRG:2f-yzPϿp2SOe QFlR2Bϻ;eIᒣ-1k'ق6ޏu4x!׳Q=ITxbr=aOn@ Q*z#n;&D`^.=LCv`I? RjMԞEmNb c'َ <IM]6 s[MHR|p[.OӅ.}~fbu-3oSTQ",D(L[4NKJ4_ȥl\b.!ݴ2)H{^S}~}vur[EvĖ#iշ׮FB#;Ǣ'+" [T&QKQY")Y7>>eb;_n^3ӎn^egK+56RK;ꐰb @wӱWA) >3% X\Ns6m^l6 #CDtvӂu zNI"bO_E>04z8v~|_B7[D|$S][k~)"x$$iz/GeZtvmcλN8X&k]Y"i;<6dsζ>py?S$]1T )yGoBh9oXv=kӬLK?+"z݀X#Lec<<#SR @@4^3ˢmA0=mdz0-Fo75Ff/~^v N2J-3N%hq i`Jk]SҮƢȰwxLCnb"V%8gnI?)=g$z=d뇄e.A6k`:y=>"< fJBpQt5ӥ`l:/9K8:۶~OC |tRdX.Po1 GX㻾g씅сXN36B0i-)DsȒ~!o߬0i *o/O;ϛ?cՀzf 8)ʱR$-&3K`}CD@ʰR:OR\**h*`g2Tֱj~DHpCI,wS閽Hr8V9W&P/OxTd,+ܩ_q&.B2bݘq\5M}.b$q">p%>A dzRl\ul`7"{,1e0Y,gn )';ALqB;`2VLm_Q=ao51đj|e{)W+|{u3"dMp b㑱ߍ;'1n5xb91㓰{xX 1FW1fȇG3B^ba,=ydn:z Ax1Tw-FwM>񰦃G-?o G2ZkM0c`KvWb`̾3*N>%X%$AT4[V_L' E|Zn0E 3l7xWfxKjNJ#S ަywk._Ha%ѣtө¯iRMEg.VbVq\rQ4aOP]m.pƋf-_|ʸµo .$? ]v dc9ǎ TEI`)$ϓP-;h`°|z݅wvbE\bF%\PP]U!0d m?!$"tZXC#p LDv= 8d:&5ӷ=z)V[Fx lkUUykM]W._ji󼘝6h2C%MbNu}5-\e5FhWTfol)7|S;&ܑ2}X5Om 7hzT)`tf, uOS(}v+"*(">#%Χe "˹ -Tꄑ++B']t> $_)B"8kNƘ2T!Q tTtUZMp#lv'nǸ?iR 'X96eOwmh%l;P9$~vj {ƑK\<ۋCAjS( JP |-|:UIf Y\a(1.z 嗐Iᩌ' I/A73m9hRDBQm8szʀ5'`ᓁZhb^X__u`stǧ.Ybw{a k>ZP=JlVb.C>5oCX" ުI'P"e+b%XjDq. n%~9>}-qS_R8BN R/md.k#/KJ?7vZ\\!+"}}$Fy'(܇d6GcD\{G Ҳ$+"\>Kͦ&[iqOf,KD[{&ߜ:bⅯX7| ݻ GLrxmlF8Ntezw>7 /kTQ9t}eMSd"KA6C&N(:X?4V1:Q%k[xqTSxgL7Ъ6:xYOȎC]IHRƥ|)ڙ4TgPbB%l[0zilלøB*?W|_Ιmv015k]]4#,=^fD!˯PxSs#:B ?d "]wG[W1J\8jUeC.IŚB`:UѺS,AƸK܂ x̼P} *Ӛ"b7VeMQDiG^0A5xڰup|&xzfS?^b^?{~U{G jdBJxqT4YEVyhKgai=Z~&xOFk8?bvmU[1^N*~P 7&|:p!mNR3m|zEwt `_Y]4\!,m\n5tVAsm,Ts>ܬfX'񗊒 guC}rgVO?֨z)\qQjQɘЦt^5WV/1_-:>űXxeHw. Ac0;MdXZV 3M/KuXdݵ‰C>&~9vɯ'PW@.2pH 7:C^c ˼)y'(bQpvV=-L|6 ];/|DjҫFε{и8ӽ/oMiurU#̡;Ú~5usaI%f͑5 Dd,RrLhg{o|a*ͥQ+Nv׷Mc D^zmuQh3HԞ;`u dtCOQ|X ;cUݳ b? 86tdpȄ6: ;ϙO  ֽ|il~yLF\zAfM^SA=|Zfu%d$zH!CD*" =J"*핸@, +|8ɔ{9,jb'rDW~j OYjšf@ Yc89Q)زKase-5,:ADv7T-oz'#R&S ;B93לOO"Kn=4V/EZ|4bcjJwUcH5f}bcB)Wp45\Af<>X{f{(7o4nؐ.`OV}-= 1[3iR7 rsI3, 8?A˜i̹ R mAbaXln62O-pmT5ɊUu%LZ5}*G<\y J^x1{$jҫšj߽Q:1| )n/` =uM]>V AV@MS j`ł̍AeԨe*OZSFF3ĥe0Yf`şS FXo&$wxVe6ohO봵KJvz6&ڽ2?/xhϥh.1:@^jf,78=m;4/^Dy Uk8$J3"_r[ǽj2r'V9HWpPKk6= <yUZnfau&ZBZ~TqXGgSZ #FˬuBFMo AH˝ơ&#HYy~\b5w*(zʭ jK>&Ps/ؽ˔)pgB}i ܜ25v 1@:lUu*GT%'ڕ.[2 PXBKXRުЀ5;*Ppl9(56w|L!a螳J?z-㱹hP Q5 HK O10\8-nشef.%J^oq?D\͡{-^ h!טz e/~=pmN*~ɱUΝ?@1!X!/9Zt41" NDkn'i;KJ *2NeڹNaO[H̬e̞n"r?էҮxϡ(_CCXth>USBxIc j<#QA':ߣ>[.rRQ!6&NWZ; K蚽f+v|3 IT|dvL ϟcLqVtZ1ʆn^JknZ-؏?Mhe? 6 htoI [,951CQi98(T ixXw6gШܩ-󿋪!v,`1K\N6Xb/t`_,8`iMwqIW|MjdՃ(:N`=V5Tb)Ɵ \ѕgQ?P՞ Hd sApe2{tU㳑fUug$n~ojƘWm A1,UlcMt6@9Z3"ēZ2I$7F<:˨i:$nV ~u&؈:q:1S ?cQ'AV H!j_FAǥ \fӬJuHMa3nvmo7=V4$[ӭP[Jqu@F w5oAVڕul<E$q-6Le z<'f}V7R̹msSk̗ƒRv?&S&4TE䈬s!8<Z':U*RuM?p޲EEdZD"l=^Fq`G02mJC™:l0J Ubyy9c4ȅ=f5;r@Oxˑ.m@5$LHҫf&G"K]]}li43:?$c!-B[>}Z`PuXd'-/I? G9 ٗ: *$Dh:(4|I[d'Wt4ͮk2 S6aՐ|NYHa/6+!E;3% >,ށؾdžQlOfݎn|Eu[ޱ}p&WɟQZV;LϨ7#@NՇn}]7'DUYS6xɽgnv^Y]Tr66U\냄l $9౫E"9}h=$bP&Щ'< ^hZ %5jo5GA?j-6Bxr{'*0Y8 +ҽX8d,.M"n4# /yb>?p<Ϧd x&=)sU8J""ePŪmA٤#영xH^)'6< `ZtOY,,[#K COq5Js^K5>)e6o9X͋#֦P+\FXan T#];>mIk#J2꧱B"Np )M9pd"S-Uh"@"Ht0_y}Hv XI]!pݜ_FK-V B6Oȴ}% jo [ظKmaSNt ^V{Fsu3! r=47f,w2osp ',#%1!Vyhbz0;_Zq[jn8kbֵmsCeWTrx [,8 _M;cC/ D {~i$J)#^,b]0kz3ܔl}br,i*tBD9DGu ƒυo'Y6狍8 LNad9C9apt't)ֶPڌѠl'zOءj'ۆrU':-#Wƛp\4DUbnзPtvEo]sZ} Pŋ @>)d{Qhtԧ0YSTfLɅE":ۛ#!&ǥ4D'VfC(͈uw !9+]KN(Y?#+灠MxmCsxvk\x]恺9>e@QI'>zC;HR6h={H}x>;>5|0Tcb^.[xTG,1s( =!AȒ2] ЛZ;(!㭽֭Ykd 9c U@Y7R|9Kw!.[]AX/ ;`szdSjYn,`:x7M,xpa|_8Dq֞&@8K%JsOdj2D`+CQ|Mu_d-~!lhO7tj"tmb3vgy0F㍍ѵѢu2Iyz>#2g@Y0#D+Қ*eQ ^Ф)Z&~VGC^VXdb\ "LJ]dc@G߿_wDc[IT2Kֶ==}!ّ*LA.DL@(t91.fvm7 v6 dG'jW+C QN2=ߤIc$ce9yUxCsgKN5' Jȍ ~l7˦djַQ #p褺ЛݞRkR* #h3'WT]QYGi;8}jo8ɦՇ6uQEkrh_Qx_LV`TT3#2LFy#fT@*rP\ C̏5o,tU?C]o=` J_LLX?CKG-Ph4 W,0pWz g/}xNEfG0"(N#<" qF#*]lYت,.XB\/W,qϼ;"Oq 0 e_pkm bOt{&Ýxxh7ρJduX>HTX-z=yvv ?*dr4kv! ~)*>!` TktAsvmw$ \}N$#kŭH}XR&),Ouop|iov'f3>kRd S {1bA7ez4jD1d?9;#Sи{i[9{7DmBuy QK0h>T|軹rܦY+`r뷨@1q=ho0/.x0 tdRpYpo?Yfx/)@νf>TRE`RwE.7ӛ^Q dkW1qd.˱_$-l$M6ORn0s1CE ȸG+mj{yaD2? 3i^~M\SʲAT8K~UaSѐxeTkVMkZ8A446xŒkP.{~!%{KA;L0gNV_{p["W{ _jZfbFpA?òj9Tj0B4R8Ĥ[ eZjaHrIO-i '${>Yi`J aiH(w}w.+4$NWQ_Ԩn%0܊6=X9Wz7noPL#[*zwQUF B>!&LDK|s"j_dk ,*j]b_ԽWW7S(E gtLWujRn¯v-11\_J 'lEVL1@LcP 72<0 3 *D`g =WI\ ܒYǰꀁZ J3gJ*ORQ]/tSX!f''?48\Db] ,L@6l8{?`g-b{}e_.IP#l)y6AM =" LtCE2uk &࿯&8{,|᰹ynpEeCd„i 74WZV @[_ɋOm~ˀ>IűAؒun \i٫C)Fɩuy0b)u `'vR.cyv#+ꃎ#tvIs8MO Wcb7ib5+rWIsWWm2Uxg6+V mQGPmH>(lj]K*CڨP~*cҤs\/؇_jhaoYZ/c*+ xraXa!oK00ϰo4-0(Uԓ&2dh<#ƌ@ o#}Phm %`g8#Fz)P* oa?5FR(IW<̕6Ejp6r:$ [Y<@YN95\&nf\%+I{Xp zۅ0a0brn16!GM|qSK8"y5i7l@Led=9i|T4z='=VߐhY9t1 "pV%|](d'1N$f{KRhUܥH`]lz6)Kl^#ZoS 7&#zZZ<. Hzq\]\nezؼ&HG8*lΌVJz[Xe ہIKYg lrNcR(1@C{ɀ=ZL۩%;g3eIMW)/}'.93=BI *2.1Iԝ.1Ám:[UW1{=0B|/e 1Ci)RލV [GV$H#7!YvĬ 4 b[{FhqiR"v'a2_@ t`AjN[fK%|9ffRӀf3ab4$( EH6jwG0c-AvԞ* ElwKoLk~M85FvȔ#؊{uO+{PϞ q"p- ɊD+l\}wĸ2WLN_9? %)_MFx"9I;e\ 2j(cmC{3J=z.d Z lXhRbhįo"3%P*R9tۜ?N9E#D6>8Ҵ ju14Fғ\Qx,f!!#ݞ,{}V |,J!Eߢ[˷ =,0pxi~]:Hk6iLa+ xci8DۋFMMҔ@#SF̆r-L,Cjfn{TzW24Gs,ׯ'bNS1kDbxGRβW[9А ^8d֞%Rԙ}bK3-lcYo 8;Jʖ`ct^h~I%$a6?ICpȅ6anv*x!TDKt:kh ݙ*CJ̽0( ) b(,lo43H*EgoI.EZv2#)Ob_J)c9[=a; 2)?^\8 $:H"Ӭ ±7N)(fj&W㮮ffa'6Zu$q)E8^2qN;Tjz@Fdc,1ne:[o1z{/*w _# K8ԥY)iey%vE 3 I%9"֯/R-yUZί)&&Y08Q4[t4-_^-Re:$j5 S^̒ߘǘ[g4%8#]zLWb*ǬfTj^\]:)ggMֲ6^%D%q8z J]'7I#FrOƖ#l]1ptr3?AdFh\CAUm vf4IU޸Lu7@$~~j1[kN]f?Y9CaVLP7 ^eh[1nH|Dl֠'VRܙ:x>Ox: zx&$rHjWXjg~3+aį !VE`lC0k79ٯ4SKѧK50ּHf%O iu涉L4eY|G-gcMr(x8 abfW%O*$`K㵵Uw#9/bѳ}@FZal{L㡨V.Muas]{HRABGӊ9+kN%- o1sKMI @ QCvL&:HW$*` 44H,O qL6BC:4xC>wN$SM%X`lsB$/6=NՏW3AjnU"R+1I4eu!{S=LlAэ|ѽM_~geN5ڥȂTv^ZhoVK#@+M3 Cw{ h?zVxJ%0 ىC p)U \Q85i3fZ,ɃgP73չLU42P*ҙsF> ܘ^bwD\"tH#A;ba[xX|isL.&9Jp3Rxo(5(-f@UloWKNP?|_[XT(lw{ KWܛ84>% aB.Q$,Oϲ8e㻹o3 +u>xKcOTD#Ǹ;{zY=aBFA4 󁢬$r?g7(WJS=B7|Mkyoaq\/@cc;γE~xvr){xCsƚFQyc|qyM\%iH, 'ˎL%LL 2 ӳUKP8ND{ѪV1J`FRqÂ7" $Zڏn%($xW(A:CGmR!&+1XP傑~RԗBJ wwy3 >,f,8~%1#Ӎ5^k=?>w K5 <%w#u,yՔR2(3]87./+<3!߱}&5فH5GX?"?[ 6zs;;19y~Z7=$f)J8`]i8)eA3LA6=z0Uk9~v~^Okcd#(!)a(~!Yr@F믫b@P]o;+ [gPNM+Ŧ)Ln&pʌA1 LYj6ft^g m@q ]6-뾄'#{L-bǘ |:JּP-D|/ TPë<R"hQ隫|P_GXT1:N9 z!E0*ɅiIzG5EYOKf ҉+g>ք]S!'Kg#5k3gɆv~le[LӷUb$9CŁ7#>xjuѨpR tE(uJvn+vv4~'bҡy;&5E_ ܑh0~(I~Uxua$CYN:]jTw> : 'xH{o# *eD %b:}IkQ[*ɐD-ƥ"ɖ0:w^6=@Mp ]7/p┿ g1c60 ODq͎+\2`a鸁ݔ&gHF$ ~CV"z/vn+=Xw>"gXO (fuPEtIW;B ᇰ%LWWwQ[b,{eKRccNLM/YC < Ă Js_l5:L-4W<9üXnOF*?sRgҔzް"׷LFC%Pmn(&]IqD3wgNSexY=$fSXQ2BM°z-G(Vl Q+?RE4;tȏjd`wvQ-KҸO¨I{$]b$,P}*#q\/ۃD ş?$-5,5F.1]cu(o:vxFJa[# g.z~3>5OQI.c]ԩpOUE -|?+Uɺ~<Ć;\ʂ "+'G寒T`gu.\! ,nsaCRY9y`mNXIqZ 6(fy_۷/qf/ATw<(8DBc#_O_Ft o+x"%tZg_w*8N.a)H?KSLl턒6U=y'yΈ{e}_FWh #jJZO@RG@P\Nk)δ v~hpg(Zc'Qh#:SquΪASɥh'&3G~c ,r?~2;}lf$:F -8Vf" db?7l`ˢp\F,ȑ׬xЦqR !g^IjA9ΰWE^ =K ^n@40xsۇN4#'Z !k|.OsY-[u.XSytB<#@y z[$WƱꊔ̝ 0MWȽ"2(8XtiG0,XK{DF[2fDQ{GwS5F!u< {-R9B0>iq?|zIov]Iڵގ4La9`)؄]q{]:?= 2/l2yFHrF }={ᩒ_Q\'d˒"=HY}}@3CFڈ2#OSŽvYr%\] ԮwqxC)ɶQL^(7VP-kԣ, y6㔪"iXhfQqq%KM G-$\q4.rGꋯmaA <.k>RyV LǟgQPXOXvͧ]N(7.`tvg6>&X\[~wl)e 5LY6i# sKrW[FV5@ubzwtΪ%&2TH|_tW% s-5w"E ׷ȯ;$~#6Nst2Gh.SvT! ARfeKG?cc=aQ*Tpe# 嗉Ԫhf9_;>kȣ/v9_n)"!< c@l +g#@zzЃJS{\ Tx҂!6IR+'8|DN'LZI=n=*懷Y#ņkz2P$q{I ~(s6 D!6Uavvr! 𘌣u7wiv M ők! U.6w4]8V8 %x}imxncfmbc^aN:?@u5 Q(ǼfΘͷRZ4.YG8Vgj:f3-[}-RUBNDI5hfyLcKT /%z KJt79|m,mDV@Y-IggCb໇3d6N__w{3Ѵ2X@؁F=N]nXU}+ɤ S=#5pLn:JJrzJI~f/mqmѧpͭ7 J6|>)/6BdDeA,弍|t`:F֯ؤ.E,qJBxwG+ Je{]l8u8Eb:NQ JcJXxǯvg1U5?=R57:tch\}N{aXֈ!h18ѴZ22u?Cc 2 X?vjwff4SxXc/`yls: m_ziOǞ3ۼSwy2/]?t^8 zMy#HE3AԲ?1J]otUUnǏ'l؃j(,\[/(z3\Uz*&b Q/-յzA4K(HՐvC(U(;*4liE[PFmQJi"&dGb7R!Yn 𼳏;J^EB ḛ"02bv ՠrB_3 Nl9EW|=^&ʌ bCuWfqW=$WL! ?)yvC IKS16JƳ&$ t n!S3işBuZ6 WTfG/M!y͎8+wP7!cuȗ!B84;0}ᱵ0fQW]4 *r/J쟊;#kTyFtUp( d5_2Q`rʵGFvO$6,d<It\G@'OzpHg5W{[Yf<ǩ  3VN~]8?ch&}n^98jK: TQ&.|p72:ϑ}*՗r ~t{eC .ǡx.аL+VC=k%q+6Zs CM3OJh虀O-׉o2oM鎐OpGkCm~M %]_Fg#Jt(f&BE}Je62桛FcAFS&Lh'!yiS-IP/쳬Kx6Sͥ-JmJ1f9q{xtN؋.Vmd)Rl ARo}-ۚ)6"Ǥtb׳;]^ 74MM͔ 5S=(bݛ( G`3wl8A rSDFpg pyvQk5BQ70IXj3W=;#-3l1U5?3ĬPj-RS]` Jk4!qOȎqQDL o)gߗ`[4Q<|xJnv{H lBM0S] eLb;+k]a~OZR&x͢"#6H0j%c \F$d @H".$d-ÚP&lqOe~[=G25;M<_Jb_6=rK iBp:2+oY7*اOC:U}MR_3e'I! k4 q#Ůd%Oú;Qt8 e]1hXCpoH,_Tꑎ1]}tNJ E`\u/s|r@@/ _dR$ _u]|ἡL^px4TcJϧy* 4R@%NN$?z*mG3Ӄ+ DsI>n8̈́ЃbޮDOZuA=4ͻ3ȓjqocPNYi.or1.N ggqVv| H5nج@a3{} `M?[ny`_ 9{4K|ʪdP>P a97پB1]uz3\Wnd* t'F]+2m>aIUǟO?"?#@"aQ3F$0a5ƊX H{?; hK_vN < PQ sDJzPƜUM>&*s0L|`U4!Tg`j*b~&45Ϭ ضvGũ`i^ĈЊyd;GحSkekNfׂoqWJ)"*jm= *6^R3] Eҧ\k':(=6PTfA5CcRI3j2*8dw\1J/>YLs_!"=H0Qiu7TDl~-OOmΥܠ>ke3qg 7d)S:Y/˨- = kiCݸ]wO1{r!?wFs*e!\qS1G/ߣa /lMݣ?;Uw؅d `,f"Hgѡ4HaQQ-A_Ñ`usܗĪ#8oG>4zqh@@E|7@^}SSBdiQ@S>~kHA9rG 'Ÿ%`'R5A͢ɚOnō5g[5YҺZp J;v'pvrETMB:j!JDk l9S:FjK^zuB]Eڣ;O¡a00oh6iAFׄñf~k"29.hci0= 6\\֌"&ɿ6U_\RF@O%;Pq>F[*{6p!k8JGc}Cᔕ—4?C-̜a*efL*j}?dTpԘL1O{!)}7Em+QO^$pH $g5xEM-ZĸG^_䳄hEYRJ}Va!ugؖ.l;IgopU{]0d+$v %( rX]ҽigߌfڃf;yY\0^r"r\p`< 9h14{z\WN 갵á99ߥ QO䤚;$Swv3Np+_ !)VB R,}Raҽ5.F]chZ4k9 CF7 `$sI@ic q35 Aaq=!;> N_v,SsL$l%'ԋ="A[=8K܆;yc#"6q?-^,br9M z;Fs)sy7U[TOѪOhE#>[ DSkyKGӂdi tmS!ZGHFWUZH5<^pcdGcmgc#D/N=6e$&[ʙǫ3?o;O埔>Ʋ4c AG*ҧq K;idd5cj$[Qx`"5ܶ Vp۴` ͊P'טqH>S: Ƞ#Q3Tޜ6A l)yht?î6 3ܼUI0?ÀiՍ`=Ir51FW+e99gB_t,,))&mTCd!ud3[G]K\&w]a+w9&v7kM aU ya'R IyNsLRr;#"iO]tF_@ }΄0}V -cTXG.]kks>y#6O+۳TQ\@ lı/uc^.:㦔WqOI?Gc&pua 0AuF1G5*밆РMpf:S~QU~0zeRNpqjk5LF$Tp ߤ C?FDq yeUnK/ؤ+gLPn 6n3\机jCwkX &*l`B0H$gz&]F u[96+y5e[)X,O9,#ik%ie_kV Xշqr̵̕(}Y Qo!d;`mAr"S-j9ܸLP۫e'DB#LDU dzz7t7^Tp35B}]r3 k9aS@p1ߊ~Ͻ(7WxNN2TӀ+b_/}oã9Q hN\ۢ /{4,t8;?oD.N3W>Z/-%C3;nDxǏ[=z &} 8/Mcū^,U~*pL(2q5WRFE`Fn*@4h<4tYi\l"|=``0mQ> ,iȐM-f| ^Y|!T<۬*zY;QsRy;ɣ/cǝuf{'3h,&kR(r]NIgTV0B#%flv*|UVJɬg.x9D 7Zc8e.Y4G[ rKy!P1xbKTLUy6 Ί&ɢـ:AɆp/  PbKrNd,Un w Аbٕ~;.! Ű{(`iA1 i=|)yB_='uC.?RoenOYͯ'c_Ļ_ s39:{tU5r{ %VibYTI4HghIiTR~+i;/,fw$m@ zɡ\3Not~!63"ӞVs>ݑ-ȸanBjx%^P + }%D,pEhQbSGa8c̀ T{6a#HU+ =8!зҝNuw< I`r3QAk]1b?Яi?-ns9rt 0Awvmhqs6 Z M"G3[/t/똙 Eه<"r2:޿SGGɔzԢW2pp?{2 ,Vn* 20Fd1h&2Ռx!#gap|Ӻ`C4?dYH *VF{{fHh깺"0d)N+8(?NzܣqЍj{@@CV3-,L5lt )O>Խӄ*Pod|/zT]rL߇B_8+؋- T#GX_V0_Nv*y%jnP Y{,f}=[_[=OQfEA/FBz,Z<ԸpKRcxO 8ߴkJ^xخ! 88I4mGrG@у[KqE,je3uIw^T.6.#,upq4̗27qe.c{=a[Yx<5#tm|J8AZMS"9NxC­7VplPtz.(Ew-Kj; xfkX· zbE|9(=t_*0d}!CYkdO5Y/V؇{cYMm̽gG˸\CY~FAb~QʷWzA<Յ@+w:bM x/Ek(Zc+V7.K0 gzV/GbW NLd'WZ塠=MXb\dthe} b=E_.ֽa&]V;)!nnWH (ebE9F)o<4dLvd֝ϛo }e^y0 J TÍXOc<҉ԻXHHp:Cٗ0c *t9ǁv[)'(G2C-3#7cjOiLB|f_􌿳՗,ۜʔDfm;w@?gPDI˕ kjeэ;6M`h׷f`Pwtf{`{A}p=$Kة{wt5<+@#]>oŎd.*T`OQ~2оo db|V v&E7XnnՁYu=U2f.wy7>6 Yu(<_^6#f`qz?4–J̙(r#'/~SӶP(0̗ >l4g$|pd*Tt$ߠ,%ʑі+QҾRzu߇W* JC*Av%zvo0c)$2O#ye|G6f`dŝf>,]fg d}xT<ݵ3Dgv`$a R qNLHZPsRc|"OKeK9i;,9nw FvDz:HTCoOp QU 8ldG5d%C*U5xBD[{yk8G/$S_XX/_'Łv%zZW(r!wӉrce)/CdBϜA$ ܈RrreڸHck;V9* ՗ VhuОROjܨ ٮ17{4xܲ0+6~/_O(S$f C>l`FK8,,ߎMI.N%11p3v~\㌽JrLcJO,J5kwsAC. >dž&tF. s\\8 8fO0Sy%as2 bH"(\@cYVͷ{<_+qٝ/yя wpk{6.38O+i~3^P4XCmNo.xrWCf]{Bg~՘ JT'Of-FCm"|dι24GO7r ]u:JY̴Ic % lgS8nr Z í Yatgg Oӻv{3⨄%/ﻻG9;At=r~K15dv?n&@Y{^Ձ4ZH%6x<.܃]UeRE@>5moa!"Rr5JdxrZn^0(xAV/rJYZns0%!R9جp>bt ]wt8 pJE5hz:\`F2ѰxKސ@ޜxN+YՒ~C-m;,~V[;w5V~Ѹ0`./3Gw&2 0b-IGf:7OrI6eGd6 arrT~xfXv La ,@2M-rRQD-Bhݤ.P{UъeLZlԙi j1X?ms _XGh2νy5@@R |ëX w$zK]Ǭ~"AfR8BUhkGrHu")fC%*ɢc}z$%hx3<io N VgL0Zo:DsLlo!a\]&[|Ors,/J00P8/[zGzӗ߶^+cgA [ a֯] {dKU [ 1n+C@0;bzQI!,$ޅxt `{!>k0`9'"OwZ/c$T<XVy( ڥ_xK'4Fjy3fE8PKqJA8CzYݒ拑 0ڐ2)96f՛URՈ4]^U٢ƨm dkf7|8 Ls7юMGw"8$Aۻ>2E9P dW;@WȰ'ne& X[O}x#իWxe|vv4#]ߨ]\,I6,TH&7홪Gg\Nia =7S+ t5yj$*mXU?9Թƀ?JIDE-򰧺We?ǍoHa3hV#;hItk6,#gC]Xz^m1+/C˳9ϏHncOGmq ]:.lM庘kY0 >CxF֠V;P۶>_FE< nݣ Tᴃe@Ό9KݵЄ6q%U4xO ^{ɩ ,el2L:Bvn$ʯBBzј6^Wa,}Ȝ)QVP@N\c^} 2x1FCv/s:NFʿY@eATb%EgybM~6/ّcݤ2X ɨ;8gjd3xL׻Cgڍ)XMD1 nCy!d#tQF+-㡷GE %QeW?p_A k9JD̒ Bs{1ā3MSO/ i?۫U(4-rKBcP<>cEJo}ӒB}Alzխ"i|MB¬I(+Rt3*$/I[n_j*QD񱶸 'tK*xk]j`AMnztxE9LҪ`4 Z GEW W]9|7.;% Ț=aH25Ud)9<7rV()TX ܞ'Wv< ?8QKw2nq-Gked6TovC)uwGIɳS*o5 -M"WOa:ns;_':8qk6a0kd"ir Փ' +1~JvƔQH >F96h{}˘alҢ/#H9q ;*t[8wO nvTUh@nj$|kWC/FYI`9rPvf;j?т L#7)Mu*P W[vyɵa0wX\FޠuFe_컶,^11l0TGo(3kH vFR׺k:4K dgf'B~nǩ%$f|6ǃ"jL6]'4=.2Ѐa/3-t"ZXb o)샢ʄ{oOIFro?A{;-~! ᤰW[8Az9o̠3nys0`Iʐs?Ev McGFHp_V k ~ORGҌZ2tKgYyQK.fڸj(63p<TB_>sV'Ry 2FRjbT͸fc|xώKy< }&W'J]X\69teLwJv%cIXP%^v%}e3 jq*6ٌ@ۍj0 &DސI.xU>Z&*Bgvٹd[a[DJTB,XHzOdw0&69°?\&Erd*px,J Qr˾n_ݠ@˞vGxw& Z JKə=ou/.C4C1uD{zǽ'/ыH^e cǧHQ(jD\N6 E{',No9 ]sw_Yäl[,\jR"PsY|)A)׫0 < ʓ̎0ON*K[l O^enzTF Μ~P0i6"ֺbos&/P;F,ut e=+/MT@7/b?DF[h6E%5up@I`>? Lo\.,O6T]R_2|R,#T>m)F)lpWETEmH2_J)i_-,`賖R[9 !tCBv1,.,`ٱn4ӱox!el.xwEٴ܏r>a?B.Drr"I!2AWDech> uhÐD)4j%)z}0\7jB!:M2h{Y et ;w{\҂i㰱V\TBa( ܹdޞ&+Qm,^HS  y]vP޶M{m>k8qOX =t8 ~pQa^J.lgӅ*tp'}j!=SM7rpd N%.g+#N[vUAׄ]`)-ÄK z)̝%F͇|2XÎ$>T8@sWNgK3doUL]8L 1U_LAr k*8/>v:mliYlDv07&GblXGOY0{l][ )ߵ߿H2R7HYtT3-r[fQHkj*БGśrbzFu.k~;q$"€xl$@iH~`ez]TR8]5E0TqηG6N*~ǎR'C51l9@rgmQUpʵt &P\GF|#QG/uxT&4Jup4mF?ѫ|ߧn &~px+_cФ`D/SS f/ls4.d˓E*ZIL&jX1.,z"Nt>ȅʞ'KU2ZyGniCg# [ ' ukE\zd&@CB+퍜|asOT Uj]r=a#GZQ2ro ! m<; y{u"=ymő]`-!S9 b3 1<9|1ͥyK@e2\z5 Fx^m D!BKT@%* Z2G"Vb,=r]||M V*p_'xߠ_^2:n3,pžs0Rxjwsi&\7imp6DBãH#2tI]FL i#lIf!2lv/\r@k;K7:/z!K 蘭 P1Kj8#e*';KV9'⁋3 3۵Tv' GEVHsȀ^K`~rI\ L < rN|G~#c\[Xt4}ҥn-aqC{6AL!3 JUz8o`Rry9?%v 5nX'-?p>L0p+.][F-(U-tM5Y!LPӮ'-q-f6V(tUCG~SG:#0|-;._)jcCk[資eos's޳[$`w l L0 GGVPd쑗` !QO/gU\2:\82ecVT3/7svguyH u;ZQ4B.~Q1gO4ZPњZgP6ul-3r$Gl@KtzΘN8I/}WM<t60PpUr'fmt!T*5dBJ7}t6t'SS'VWECs;cn*jִz F90 ؝iYo|gtkGAX"mSdvJ^l54+٣NC"z-l0ct_yޣ"`+=W vE̚YG. fq~y4/$w^ϪQҩA#WB"`=z*dnX99xpq 8(eNh-v#npSOs7Y>E~6mSGxT|&J&G"]hM#Zƞtwv HX,R[$DMGL2<"scs{O#oxe; l|tlY2b*&lTHMAq5".IOhӃA㯖ׂ":)Bŏo&Zr|%N2gXU4<(1D Tё96 [FUߏQCʕT_}܂ Ñ*!ȶ^rQ˶H$ >Q(ΈoSX{OYw6h{!]`zcIjM l>VӬsU>Cx{,b@Fb*&6z]*mD2nZa- f0 [ho;* ]$TD;a[Vfgo틅 Kl`~C;_}GJ,}vkz DbMi ;r %OjbXnGCER#Bm52ad4Vs79z6eD,\0*(y SlP_=?E(WZ~AnD20G.Җ`|HB1'J]UP}crTTlō0*|5p4ume?_?=,JfW1VJQ8sH  zZHSDVV-˼.krӔ@7f:jPnހר@읣pt2i)[CôOoF԰RNڵ( :FAx\y:*Fo2'=W3‹:Wb[/F±>PP\aV&%" H{w"w(P~<=UQu/]õ*vJ`˝8 s|1= =4,'T=@; atUY}-/ST7|(mUJT) #<eFZ;?8E+Klj$ LH`wavNqUaWcb8 d9DQv5_nGJAAQԶV' 0uh[1CHtiVXmJZΑk>M W`ZU< Oi;10mƦ15^_`v:N'l fb ](m>#|Az\Az +ˑFtS:AnP&NYwt3hTTyTv+}C.x{ {FwEPk=h pjEh % i6{E15`8-i!hZT_gHy@j7Jp-b\Je ft`H`V#<֫*ؼʍv5ìmS舙9Τ L#Ӡb)s lNvqt%eltnLܮj؂Q?NScT3 &Fi%uK-Ùbo]|j/E}Ä ܲr8g>%\ܻ5&^2R&?GLK)Sgg0/  Ho2TNx gA)cLuhuWlquiC?ZO2\9pqm3VX-uPV9?@!&LJyDZ22uP_x{ŖQ`t+,3fwu(ċ}Y*|s:=D%zv|HV?9cqke~pac\IM"_h )!*E&-.-Xԓ+5ClIQN(ڴ&Md~ -, ̀E\P9 [RU[]`9|ypz~SUqdf40`)˜MiSs?>K2+R/Iҹg9P'ޞ|!'qC, zEǞy,vloQC R2̧\p24V(43'*fubϗaB6U<+T3%>U:5*/+HfO@rLȻ"n~qw>P<z_Joy{(xUaR|$"V^UE/80C{ K,j\žNGUaD5r@yr;oူ<3Y5iΑY$&̕L4Lh$dMl`Y\89q8AElz0*v\|;^F :K} C<~7ѽq&iQ3c1յu/I#Fvl ]X:gcmۓLa:!w!o _ \|+ԉ cwVyI-w fXU0@"{G Ѐտ4YxW`W sma@2܆>Z UmF_q7]%kv_rXރxn"JfMه14+E]l(Ǖ! K[!v}K n28ޝwsQt>1۟svxu߭1АnbOJruB}р8i(<-VgwFҕ 1DZ"} vKW;=$?N8I1]I賭rCe׳z o*T8ekG5߅ 2la=rf`H06ǀ1ch1hZ9 A$AQVV:RnvP[$=v5NX)S @v{cKP,F%4 +D~#uEmg&\FBV}Ϝ[%iaj2 )+s!} Лa'߄a0J7b0Z?CLL(jFw.g*P!0!^R]qZ^UU▛1o:H;Y+\!jXէ LBFxg朕u휳rDz4^pT0C2^'Dp⴮CɘPN#ZI!Frh1@^;~2o1<2gO#T܍ʙYDIZC-vVCsM娮xfb_4RcOhfj04MFykNWkOzLhR$6»fK.c?۱S0V/9RXNH͟hNmzd<8xגmbdR.ժS7b2CP>s:g_]t 0~8w< VPy<kb̒<7j9_6d ĐItWA4{Kma; ϮgC]%zAKVD3Di&묅h qGy4JmrA*mᬐ.],7B/i \_qߤ O-[rTh溺D̪=9 (KtqDVxHT러u S6_Ez+RM7_mWxӠ'xCI .Rak4zؿ\z3/lGm>-g|UËLqAB\eM B#7Ӏ*79kkf =}W_S'Ob6wlD^?xsľ/Uy+bdY)cnR(C/T]WG\PvwH4 kN͏ji0aUm5\tQHƯ:_C+Ia45˨l0;8X

NuqV:{ ֝ ŬjhJ5̻QjKTwim mB2 F$Du80sʴb]7"܁__MK-,,v,K^HMGHH!f "|6g?jFCQ%%=%q *v yjw ]Qmm`ݔ^**H;5?2ghH*XQEW Qe#Ct" e6}.؁3*;R[=~1C*ag] $rFe̩\Q}Ct~1y勤C۠"$)w%W^;IdkE? 92mCM5^߯Ll\E=FO(#uQMgzxqx4F|a"=c+FҳS=+KL:Ѧ 4%w=y8ik$XﶩƤQgh Qrwkcb#+nRnOq|yA2uB)s 1 #\&ajPo$.={,Ɩ^^l·@ 8w 8>(5OlJ]4(vN -N4 #"z8tgXABe#LqTV'P8DƖv: Y=4}+਽Nf)[c mR=|ը DzzhÃ뉘.B"+.NJxPQ )m0qI[V^0*t`a] t F&dT7iLaۧx-bbe_' &f J YnZ۳َ[p*'4$d1֨ZI(LS IUIUf, `ދL uVPyizllirdrv'`%x@HsDf6Tȹ縌S} jcO1cr)Qy|7L֮>ѦuE*FA眍GۑȥgYgcv)x}dֻ[ J[կI}~|žP$qoȅPJ >j]Z){9z9UY윩bKtcho 4{5uك\VyFI8z]Dj}'ż 0CaM18C }Oy߆ ;G?h%kr`P HwqPz| T[n2 \XDy9 JõTw@\(";rHf ,uo lpꑞ2Cu[s[3׉.]a<16u5"@TAe]+nkRAKFZ1hPh[i}L>QWsRS$- y4.p1/+6qqR=߲s'Q.5<硾K2XK~Jkۜ둜0|V Q@j?a$J 0Ј\'pzzC\$ㅴU;[a5Եa6 9jhVI(>&bp#']P,nS8pEڂOila9<]VBGSwG#\K&N\ Qk\YZ^n *܏L;o )+YQ̼UNKO 3%j@^Lׁ8lz_@]TVt$5'ˏk^}5rԏ*:P]ETCJ\G ub "&~JX:\P [f /Xn=o38nn^XZO>b_qINey .iF?ۖ~mh_%fjE\Cg^'=dJ!B-j(!e:T&۝$}# g(5Y&qQ mso2ff:%GYxcCƔ.DO ޔt Fx|V~\k*HG}ryl{j/xR6.*+ s^Ȥ%[ 02f/\{3GB!9}: A"}"'!専; әe`aPZ>X-5y{ށP5d&2gfZ_AKjc&J q*xhVs#zh ԯzm4)ƩWQ)8J~&s̆]Lh­  Īҝ=NBm}Na2w? 4sHJ׳nW+?}3M+0&Q2 Dl0Y4U!~-]̔vG$6wQw1cAP9#QTTA[ho\4^.saD+{rC %*ܞLD1'XH j-Kr7Jlt(4V _|໸X]Ӹ?f8[,&ѿp)hP߽G"O} j-H}nӹu'EW6 ťdc=/f r0*NnYK(v@Ìs5bHy©+\7 *\a1a,',S_i@BvLh6@˓N+Fj#̋N\Y)FO=a6#d +HK}=2Ģ$3jOރڣidYRVTj/nA҈`DkDD>M?7])B~*fvpVlAy}@",:#93&큣^:Gïj/zSUSE>LmYAՈ/9IӦAײRv( 7IygXB)M5w9nNgI onIGxnFF)QZ^ rnX Ӱ-G8e#QK>rKIe:~D%K)#t;ã M(Ƣ V;}5eLDe hdpWMS.873o%f,ύfpoˮ C_Je(;NpP Z{S V%9&GPZ io0HW2s?>^x'7p-FnL@5_M ģ8o-0Eyl_a>&Hآ#j;m.c}=J!xB:o!>K5 c*5U Ǖ f^b\@ 4o: (݅OU>AYWZO$A\UkzIv9ua q$f^-6 3_N#HܼM)8XUbTHXLR;mr~k >J)ai$lKcN)\H0$>1d>~Ƭގ邚cZw婋DoIum'9XCOa$Aq>MN NH>cLtdOcH[oXs)JG M%@Tű]jn l(ר"2i[b>o42a5{a]+֩fp@{:AIG>؝ 9_j`Uco::k%:klϦ. d qaݩ)1OF,SW̻kC~NWc@uYJI=['/ik!?p_8_^+aFzA~>╍ OiY+j@eC/ܨ=j*jB ujI|cDri1j= OA44Һ1NFmԶn\egUrfez]&I,9eύ&Gil͆=3 !ᙔbIZ(pkY$S󸋸Tf000`$%i]csG6j/#Aה <ڑJ'pRл-tTڏ tA (.$_v'ax @D `C8l O:?y9a=7bWu\YW[CWcTbh+N ɩW`UntL3fb@HIfgvU;ݑ $r)~.LkoTdnf@Dm¶&wg Iql^>MdG=-?&_MDPiWϞ)r֪+  /Ξ]]g usKu<<ޜ?4G,dtj c6ǤW}YThniK5יbdL;Ez6%q*+wEA\ϛXs|\x$~kReVKfE*j֊4=MA!dĝ -zʩ Otsjqʬ%JwSBfij1n$Ç"JLu'p\%Dae{!tK-ӋHڃKT!@Owm%?_DM =u%3tn *@#mlVP}t_wܵP1z(_~G z;%f&-ٸЍc[I8/^[cS=-0p0~[leh>|14L`*s4{,+츸 ht¦ }v*&YtF+iGwcX'y* T+^)ٛ L )TfY, d#Ŭ]lג Dq V¾q\ìa/cN)HJ u/c= 1_ ycҥ3)Ie_!;aC I3З\/ݲ*2X7I7$d)grUFb(--ُ`Q'Q8Q(t?jl'RJJO1orD#t!׺#pWQ"Ѱ- m2\(|F&hk0~M){ x儗j(~෣nusjV6y' TOM8/1%ȱh<z8c;3v2zנkL9/2 p3pR֌t>%5؂{v_ _J#:RDk){f Θ#8/V@SKU̇U6%Z"BIei2G T#[dІhtߐ^\s3.n AV{\L⛵Ź_t/6AeqI`fA;N9Oڴsm D ̺ZgG~)@??LQ`gFve pG|rqO]0Ptʮ/d?Z.ѡ;Y!+]MjwaׄsdF CHwls6;V/4EkFYu8g΍K3MPVx&9'_N}p֖2<@*Xa ƾD0]7YhMr;D\+TDZ%a$NJ'йdjC$^4<r>3"`.6l͊B˧K= Rq\&酿pp5}ONS06ȹRSYLV`Sȑy@I MmaRtIK0P&ռkdB͢aj2;[8Ą1XhuHfl ϣ_7u.T+#O)C<}YgW9[BVp8.@>6]P"O( Y 5L%;[Mu㫗"]s‹l$LaMo=k 6ÐXcT}oeTCZ E'q~DYty 'cT7 + 5|xV"\:%-_lqw"2 ҧ:_,DSOg^C-/EGf,tymOAhv&Ctt\ rA:[ wCҖMSɶ|((33ug 1SUUO)N^:mZ̳+xWw%TIDb5WM.+j,Ira(\IΤd~\뮦I D;wS%Wv1Ϩ b=.|=銍#' -{;Ʌ]nW nբ0W]Ȣh5|κ{WYE 3ϑϏ, rN-Gbx|HuFOAa%< !%fϕߏK,3,C4G->V2੽<#)]8FIpZO}P~0`3 ÖQFAp rw@'?C"D*x7ejVBl8{W &فja֓FX %nn2ي$Vhf0zq o(+RUsڋQ2@9 6YvSM*+Œ$w[S\ GrЍD~jjѝ@lX*/^##ad+3xǘՐ$B_ZW9ͱ((]AT|i+[Qq`B,;: .5sp=ֳ{]X5ȋ4r_Lɶkw^-~A%Ǵ[=Lx\mTg^'bK@w+/=8/#6k fN%u SyXiԢ+?.~"M&cԶu g튖_k}+9x̫ q(%l8ǣ gw0$V$T 夒/Nj{k8B]6hܶYTSLK,!t/e`rL}ۃhGu$ݒT}zݜA@}IArB4@܁;W7xtykk (rAg;tu|vq16Xe2|J-(9lp(C7wˏ30HHϞ݄n96KYO\/Sj͍bfUkIS_"y`gn2 hҫ7z$o4@"J訃-<:7dxĦ ]?S>FwDmGQj_q+iI We~"F\@'FXF ftc4ǚs j*c^$Tv{s¼az J|}t9q܎\gZڂO}Z?3gRC*/AZa4&[4'iBiRA4~ۜ[]mEt~XwEeUY歁g |ۻ'p 3 | Ի8^-] r |><ƻ=~G+?HȲ^DA)}֤5UJ쬵 "Uʯ/rߎbRY. *&|_ycXֶutSlv* - ěwǻ1ql{f%){m qw:VIⴐSAmAPW7n~JOȣd}ZΎLezϦ2، x$奃j-!}{y!@8\Ң~7k:\D>6;j@ \Pg4 -lQa @X5SKO}'\L}3-,;*^{pOӌMcLҐ}^aon eP"JLc.910" cߡq}8?Xz=+c?{~Y~ݕ^gnIz>I/QdMd]-ʍNׂZ϶F-0$a@4vLoJ P-fYjC![r@G Rwu'>myj Bvg#q?¶gVyd3(u3`z"7Hz>f|(k2jڦp5qu (E$R-K46A'T *ow^2nd@h';MA"Qygma}Ev!xO2R^+ݗ#W'5+#6t=-X62:+L,:ki>sp1%N!5]6$7Q_D5yZ"QH)'5SePi특Vl/yy/tuDFިSmG{lQ1S :5^+0Mx̆,=yB\{kǒE/hBl!D`pkJw:;QfNo˷*AvϮX8٪pqffv)H;|TʨIyoXy]im{0ui_~4!O3> rq2P8T˗L)Yc$ z>7cEO SN!|f+4tZ[lZ)Im tژQG@RTϾ`@8RChӲTӜt2ODT2X w:(rPAN a>zulzx)2h[- p7f6zp(8)aEYJ%G-mwc_n_5WuMa/-m]u$#j4[֤M:am*\ l}:l ;4](|$Mj']УjYkwYkY |xm]?ҝ̓t'yܐ,lnJLW/.])aa$!`82X8pks`eݳCVXKRiRN@}GvJ>|yyRqT;ԏ_{%Q%F6>*=nT2텔 G eճlˏaqR d }G<@?WbqéOڬc J _'-݅\iD|? Р+{2 t(s.AgS*>ӟ{[>?Ѷ*o+Ol9̅s3WS$>Q/ca{0EɎ 勹]l⓺D9i6f _/<M!=q-Ĺ.o!燿 tHeۆ6zͩ;)%N=}PQS%sV8k x7X.Ѿ)A4fq:|hEϐ@fsk>k 0o7,dud#-u_qL{j;f,x Yw(,G"s uz, vb[vS[E}C sdV־EsN[k( ɵh1)ÛVޟ#9WEE -7=f_(ĖuWr{O%_jM4[V[5Xj%͵Bɾ: @rrYEeɽOɧ@G?"~AGjjÚb3^I@;ҳc*h7|hmha>3.L6[#[4UEPb~[? e/[E @=(v_cOkg8Q,كdC_Ej2C@Fψ`$$#O9BRgRi+IaZ*7V; OX%.yNBki' دMh{ʸiGpe؝ə 47'Ӧ`bk5 و0j'`[뛂FE=9'_x$Ùy&3 @%#`1ɯ?X@\(` uj nLdn'B3qdi&seԉ>|\"N-)tcyw]P2zW싫}] 7J ' kT.3"i5~9-k:hGN4<cIb ށ ;~Fv;}tY zU-n8b M }F#)jlS&,GirzfڢCuZ^ 'wMgT\ K˨EĠ,bH[֮M+إPMFcPyv},i/M@K&e_6-G3…(y{;0UM:Am\L|ܬ}! { ڸA2],q͉;YCzۅMdO(3˧%b׍mXlc:w=+ǧ_UN7442FꎴM>GۘY`"օTT]gBVS'_\ :jw #V:v>(U-cSUgRߦ% d`Oy ?%.;] ~$0A b~sDm_] 9OYU!BMFC0xy=U=buϞ4zገqcz;#K!0'~@ #IґqMiϝ$)\k0݂IMt=P+?cvBP$1] rS(}ǔp4TCJpNVU! =30h Bͤ:YBCq[N!7vH*:x;ʗ/?f!mW(QHG 44 b!E4]f"_0K PoV=ES ^[aB晲7b7.:xk:b!UG7 Lagw\SM_ +8EF{\Д$ +"LEB8hVx&}!׈d^>z8& P*v 1>AC+^!q3OQӉG]JA{H!GgAmALy%G7B (Kj@Ti~(Paz֩ *~f`dK~F.ltM+5#ɷbnBM-CJ인dvZ| ˫ /۝Wr#rB%.3HPy~{JJ!_İ"lp~_mX*^eCZrA^($V3<&ߑWUgswW_`Ycڹ|V |LpaZms9`6zRC͍qWw߼I䍜3;g|X ڪ)sAUrYWfQﱄhCs9bIH p%䕣qw1X+ה! c\ĭ U|OPY=j6d=Hjo~-|Hiv[@ɷ_Oa 0$z7TN|zI0?Ni.GglDzm1MA(InCQv;2Ȥu2nefU 2^\G0v?Zzk%TLМ1w Q+SIz)kr &ar_̚A~Npgy m]n`6{7FsDXpgbz ۅByA&;bI\2cgYaIqYu t DdY 9Od Im#vw_OhM\;Qm$ӽ~I;GFo «~Z_ 5iQKbw U Td63%.·?$("P+ۮOLt}idU3V^\7I$*8`{ JtJZ=3ev41= ԑhÙe^gD٬71>F[)ݑj^eptЭRb b9b-@\(-CFaoZ J$9Nc z}wdBIv-;S&\"fmZ\Bq{cs$;@cȬ#AX U $>1C=]̼O`eAT[uabD,`BX$bܼNP4{RuXz2^z)Ku X$a׼K=C Lw2AEvʉ4vG0PL\o-쨖7vO J+r$LIKB]I)ݏRvR{]R]haW+t{G6Mzf $ 9Zl{6rz.p|ν΅ֹ~2Kˠ>\`T>#QBD~bC^`gGVP\LB`64oѨy) :$tRN+5i7('V5sHDľh1WZ&ZCsET!m^CݾD/aƈ@8y}d5pA:o{Tf$}'Y3~U2pJ2G(UQMs:lsny G:Ćp{Eހŕ"2g~hL$|^@k蒶qб죍#$Ⱦ:Q?(> vl"b"" 6[p雹B=2lBR/ԕ"E 7K>) CPl&$#Ϻ՘K={jU“L+p)^όCƼʐNKy*}W :-6 Eo@$61V|4֊Dh Iɠ ҰU׋b@v4uyo?[u8Cbm2v$"FR2ܩu?UwUxӊ |_~ׄ ~co3e?Q Zcs )@=CWB 1xMm=O6pĵ?Gk&~eT_ȹ("gY<.ó+]B( {'P[M.#$ t!{ΚD 4+k)60bs5SP!-ټb+g@^nP%BcW%`GP#(Zib{054~bEon 븯))01ų:Vk^2rQHД~cS6:`R^iUS}ruRh42ݕlT0.B{ٔ8o0/:t44?[!6):VŲX&]]7\unao7y_tٗTyW5.#{ׇj"ٟkY ۢM`X+:%bvj`gXHBmNQ[qO@Eh3>")6REXGrB|>;(8Q3sT-_p};xKRXE)m|-0CrBW iӈTds霔%0Z;OGuQOaFGqTҶ+hC/$o8œ`kЧzРv(IYUU>suVIkk䃻3ˉleA3aەiGNr__8mg:w\oF>\ำg2BF@?g;(,KNנ{Nli2^lZ+ bgw(F< grx mi AS 0*bV x>c\ >#$jӳ,Zy*adanI-QRe|Z %^l+m7 '^0=xA'o.iN_""g:+&Qr,yq"Ҝ[jYMU0xna.ýfbK na5ijŞ0^J:1RE7Kmq9ȞwD}Bii΅88wmv; '֮|\Fv x*iGeZ Ʌoh5Yr;1I~(qM,?#SҔ}~UGuMKNP6|(tj-Rp1 :٪ 8l_|3pK C 1|KoܯP|I#/\-yG=eZѯ 3o8ROqJ1 ;Y$ \f hidLlQebok V}sNлg-DK\1KFĄzuO+aK쬢aBߥ׸@TӵAJĵ>֐ KjL)3m2<]kGk8LSz5;>d_-۳<8=Evc+ 6sm~#pE rK\yx y1`ڃ6O{mM<@e iA'^~-W j`"pYJɪ-kA~`TH <I0o`,DVU;|ip`` q&R4 5dBFZlQ/Ee=jxޜKt<&(OD^F>ɛ viK1{h}am!4WR E6=GȈYty2eI $Y&7`0֌ Dj{ۭ( Sc-]&^|ݱEBuFp UHc/+e%a(teO2:\گzG)hkh{~߆ގ^45=xrhj3!ڍ*E$0kgK Q`U_ߝZyw^R+1z?a=JQHIq17mHYYq }p| }Q}ǭJ +z0''jQ@aCp(P?ѯ`pjk"Жxa*HO9C?@ړ=͞+?ʼ"qB OB"h5@GԃR'e_eٮ?! X䒇(%mu `=ᚣ:cχ/0I0lE\sIKFN,ȑp*5Bɡ~S2M[1KGh$&~0Z,{o"_%s 3Cxwjp7ŒKެf6#J<-XEf>4c]{:D= .dq,֙4M :u~IZԨd`˃Ў˻ ylԝv:24PGLT9涪c>a9QYa3-3^6-lx P6~y $|i8L=%RD >*E}ER;,0'i8KAV34t(˦=}^^I:c`{.:WiE=ɘ Ngzc7K!}NY,VB0lr0=B?Ș鈹j/94lpO(ս1 FL:\=C#ŕnP|ϳN7&7vGlk{'V}GmLhz> PV8^y)<ݚ;F VE&N׽]4yk>Dc^oj'0Wi0޽{?+)H֖BtOlmxBp;D'O4FV24lщK$ *TVprK6C^j`74U-AS}4R'es \:sx DvR{ve7MLzYwG^3b SH'7X}TIΒ,DWl0o_dg±YU"Rlm;F` {Y&V@p87oRbC9)RĞ MڴS% BJXBEج&^7mn ɺڪ,*.Q|V l;,d?L:7S}jt*&\M&eܩ`oڝ M'7Euج:YD niWݕ2Ot">Pd$ͤ Jpٯ% <`S?yVH_iuZbO5ڇtAAϭKQl"}ޘeL`쓯,,?YfAѳU~۳pjԑhC~Z}r~7}ؔN`ÕcvI#B dΚ" oF7XFahB)1"_k9/:389LSfd4íD~ w GH}*٘yca8ՁW֙\DlD~ȬKɲk' 3xw%lY$:] k834.Z8=☴DUT~w1UglR9fkgRbw ABM1 8YvОOIuTas2}C?-`cކ RtX{jzL`:⏾GuȼUV*HA)+.rs'3Td^5<xLy`ǣCf깸"@g1nTع1/6p$@xu}xT5;S&E]Fp`FS2Z@ B\Ёo{fAЃ֚- J] oC%[gW'S "\sZov3}R+35g:E`1+*ӏ"KJAB~-AYk9|frUrrl<+  ky&=\xH攆5Vc: M5k/eŠAӞAt7$P$&1@t|i *HdbYizm7)3F(@8%>  #mȷCwь8HeЅ1nWICm^e,{&]Bka%iRzsµ wPRD -ďDY`* 'mAD dԜPߩ:j:قb\ iPN4e\^%be!Vϴ2][DY.wRx[2b{;\u]~)$NoxYZ[Q>2MELflt40xXwsEɴ6r/1)@,-3W_ߜ*Mn? hi&q]s̴ %Uy烒n~/q XZUpPsu0 йB\k%"!@|ܹy3hq.#(.Dvp{PhTqb=ݢtUЩ{h\$]2pps<\J%TQw^rm]5XI] 46ؠ!B24j |{ibR(nؖ)&of=O/Y$2+ rTDh`>I4!J FFfڛ(Z(WBd7`h搳F!JjbũLYqo2qQk,aٌЏ_ @qeQYSZ|HFxhΥ4bo#e" P _ォ "4O9[;L+wAĆ$Q:ZՑcF$v\w뵣-*BxRdj ,$'N4.5vXvQH"Cfw_F֗6?J)jr$ L". GcgFðuƎvX%p͵@Fԍ!\$G/$ֱ+"ЍsNDvQ ES0w7yGTp"bQEU DK9:NX-Oy*În_ I^ڈNEL(]]gN!Mo?:%7}Z1=M}ahoH8ޛrm#Zk*4>{P=\;LL `~׬\RA]-NV|H{jxG FT%IɇSa9;L !FDm "h`_RlB"T/ ..S=-E&-tc^j2;S2 J=cKd/юqgCGpM B<\8#hcvVgu}V3N+ˬŭeܷ7 ~|l3_7*HrEC#+/ Ly\6H,m^f:}8E(>cnum'A _Yʫ:JFAH2vC W?Q$ڊ"\zJx, uK@z/mnLm7*$HCgHA AGʔ!ZK{3@o?\S(Ie3Bm!\c1W:ZvGn)mFC!dM;}71ipʡo # rŦ$cYs7\Jbh<Ͱ6E$C EnZq~8庁 3jl\#0ͥqׅ+L+eIro( t% dLiF-d MRh9[8(Z+R~E#Ίh!+nb͋w'hwp #+sӪsP̑uI4$UUE JjxջRA0MzSڪk9a?/G4Սj 2^50$V&K*X,Vdg5.|+8R%u=F"ZVZDU8¶_GnD\!b2KR`R"'YR>~ny{鶗} g~woڥ3{ͿK4$YiLW;/ X|ۨ`Wa#P޼"\Y!ôT.Bl&b'VxI䎕o x|퐙6s _ ?޺zu}3xv6o2ai; f }6hTp >6TZL_\6$[lӮ#Oi6P Γ~®i˜ʤKJzI`հ||9Ѥ(u$LҾן Cn7yz_Ƶ!dBjh'>%Jq=γf,6/q+$WxLހ>#=,PTCUȚzP MH~ccSҡu [-0D_破߯i',verS>Kf *ĭBU\86aeŲq_G2^C7EOp\;yhofgRyXF*R@`T--C7X>˄ iExx}\M~y>,c?Lb%$)X UL' ^R=$ܱ$0UׁA$OByET5'G+Ǭ9wm890lB&;d^m!Q nCjn|xu`3t )԰ [4^xj3p ,0XOQG;Y-Յ6*1 oBjvK[v=@{A"%#T"!{ֲ8Zi-t0s-'A g@lmR9L;_W$8bï+ta h\p~FK"#1UA]kJc}Zt>Ib?|@A1@]B H#@?  3szvt wd`KniY#ouGA:`> EwNKf󨙟t^khYl"E: q( 0peݯ4TB,T%iʍ#H aίFR e"'Y &^<9s'ؗlZL; EŐbڠ*mph& qIS͕p\ #!]"R·+ǩCۮD11\v5[勉rW 9[= [+6.lT?3Wau7sW³XtTD<ԞރQsZt?U] wpuăq)5dYPb?pTo7 I='(Kr}/Rm8CY5Q 3;CZdSU]J{eXFEܫݍB|M1j6 =XA^޽aB?+z<<ɂ\uqpxcO};IȲ< w) bWڑV(OqIgKX.F$a3n\3(0c #wKeaᜲo[^G E̜%KM&q]|6qȌ> LrEc 4Y_ф;_ޖ":+1?Gs#ЬH"K,^8%*ɨ^G+3Z_36\h\и5!Ƞ'1xDo\%&Q04ƥx?}Z IE{K5xAf!M #&5.Ư,ߙ"X< }-qkN!sm"Kǃ_ KOŗn-D(ۘXoa\ ̫һ'd*''&IKyv;OC6gP@h&oHb4¯) ɷ3KhV3!m׼0oO:zTK$:}Pgf'css6gv5ݳ]Gͩtb8&ξ)DH#Z0u?dVtC&m5`qV>jmW [:q2)x(oUz;zM&iV0 q47KRB#elV= J(,C突0i>f^|VwG;!M?"yjt| $GS 6**r^⩿^v%e7a Ő w*yՆ d^FK6㬚0FH/\ۍ0Rݥ_9X{꽕ꖫvMvٴQf%Zqϒ_!RZπm)bK $B0\նTi[RA<6I}V9]|6ɛVW+6ځ<_*ݏR'Yz\ِUߖ:r7(MErʩ(`z!QJ`\W{*_?T膘 `c- ,>1m|/N`uct1o%|9&" ^ۢ/\џC2O ӿG:vӆ8Y2DE#8"4H6yX9C|* ⽼Y,]KªAH05d48V}~8an/ʷ}y˫urƃ5G1ki8\@T_xdS ^3,yj^(a(֜ 2_nS+hS=A@6-cEO"9 2)Oka";}\awh񉅧lԳsTT9o܋y ?(9L nY'> Ӽ `DNBrhlJj{Ss6>Ά<(V5'nK3$JeL f J^`k?P̙q)ּ/b|_V]dojϧKvpƭݖH 'IMٶ 1A&y{r'+!>,ttƙਖ91`gb'mV}jQ=8uÆ^ fQkV +Cȹ´bkuW6PL}P&$} ,=]%H7l$gmn8p)g,Nqrn8|AQ?Zk8G.k+`Z3]S~  4SҭUtXS:*P/nNf qv.t;W6@8,W/c3ILJhq0oBs^KM0qSl%1 a//7م3kHR"UR 0>Rc=8hJKIa.ַ'Q;oaϕJzϰǧ$r#r8x.y]_SM~1t( LY ʍB`(4ƛvf3:..[VM{;t ´%\s[_A??wͥ&͢ۍwKo[,ml6/ Ř#&>-50lB;q7gv5"s Mts5B4}eK3C < )VsD"J!Nss=$ĝ*>! ?6t93)eR@T!sR:pݰΫp]R9=:V]mXRQX])xZʡ|kk28o w_B@RHLm]h_܏ǫE~*EbC#[k(2MFdi"e#V2*ЕL/$0eMfC ]CVRj0c %荳e/t|s{ȊTJԢ jrP=LJ#꽹WZ`oNw -.Qۓz{Ӊp%ݸfVtnD d"!AV# * ^&ȼƵn ?!89VN_W ou@J sFrŵsm4BV?8^Yen'zѧHI2K$qG"ghM|_e5 HƱTιk,M'5} Q^IL/xjc< kvȐ85Ӏ+y۠]N"Ƽz& 8[Uo\dP{sS5(0q;ΩM K3ڠL":rɰʫ( DUbح1'vJk5lrV=TMB^=;)+ >m vir`"h|C!/+>NżÜ(>n6[h!)LMw?Nr#^GZ:ځ|N`!>vF EE8{jqcd9Sr6mD'_CyB8",G[5j!l4܅? c_A_~Cq7asÈ%=SC1dWL𶻚$p3پ n۩V•?'!qM"aLT29"oȖ<{o##3u=NB11YHۼDlBZnzt-^b,m/憲mo;܇9++L^}#S]pARV?öPVܘ !6 <04GqeЛGp_+?)MٿR8 P[gr18QT3C]O@/˴#Iߍ Y5VK)Azܓ;XYD3wR,h`),'3Y;<kyhQ߳R vR~=nLť6=׿;⸏u~%ɤ K>'Ŧ-3BG=3BGKXdbG|WXCeg;f\[gפUsy\bȼѷe5ZQl +C,~g5f<:rJ<}Wm_x7/*ǑRe/T}Ǡ|Ú#/ldX1Wb!=vyye@ߧKsg0н&<0 ~P(9l"($1COr*OAdv+piOEѲA>ͮ zWlBgռ n=վs-EcY@!CvBM) (4krdM l,.ZAx1??حBq',l Ph/tӶO>UIhTͭpꧽU1[ps ~];4w72TwCsJG¿΂S:YZǚ{បml 7 (afh>fwpw *E2ߠާʛ"mOۧ> Qw VZdS.`G)3N;@鉙zd;sc$UjYN\))|3 lrhz4jw5z0W&E 5&/ >~\WaR_2GNG#l]x)#D]6Pp@ɬ8c)lY+z~2 q"SsVk@ ZaH^xv[% 'E % \eOy+kR[Mjk̉-BM+-zO@]G5a/&S@_˫ϟt.yA;ñ%#60H7# K(HYYoÆzS\Ogг-9٫fAM`nP Mk,*up;su&'%X!.@zt'W",Y|wy!|WMҍФ׌%'o9+ w}  Q!Ayz4F)5<–CuR`Ǟl_njw&%nIIJ:!Մq4)y8\^|jʭ6֙w5k=''[鷻4`#"IAxt-gi%(Em6yGChXJ8r:B^GU6C~#)ʷ+uznɹyƈ7بsgTP=_5ҟj@6>J$N( Ɵa&'J%Ny4l6όFM6Xvs_nܦ:Rp#K$\JzR%/˩(c7ˣ͵Y:tVY+C:}&U@ҊDfZ wۈOV/N-ӄC>g0d3O oTWlPTqU`5.R\?Ϙs/,puq[_J`' h-"8_\Ƙ{yѿuaRd ?2q(_ iyiPnh>$<\2&yCy¡fk 쎌yC$ťrkj&UyPO^+7+[)i5/kbbz6tR:_.^cw**RK1gPѮ]* D8IH _3qZFgx`,C}ڧPZt92A39 2)a&{ZX 73CӞ`@5hb:. ΁HTr(#SUbLBMd-(^}F*9mG=fpRu|iɫ\g\{R)F@d}g4ѵe{2tE j So Y&~/K#n}>nM@zQW}18`Q%HT ͧqoh-0ᠧC.i翠Ei ̶b_ո!$kл.I+<}{.mIЩ b$ݲb^{;cO+HBEsL8VEo7˽b;ܞgK`՟% bPtvc 07@°lCznirz55alM$yY/Z|[d 3k'yH3k&X[bB ٹK +@rjUgyxoq} q\k.ȘR I< d[ c\ϒ"+![aT( Vꪝ'LDeJ7 Xro/Rjfi; -um֯Qt(.!sq4 $I\HK9LBxU Jkϊ^}vAQvxxQOL socVA"Yzcda.6ôfnEZڪw!bz bYyIͶ6@"[1\SWfl͚qDb(846[,n"AgQ?-e>)vpK"5@U~N/X8wZ\Ch=+Q63frLI%xV7=xdLcM1,ny~q rP8%pp>4f`wox\p:}OKayѨ'@ѩ-k.O(*ȬM=ܶ,a 0V>.i| J*}j>P&jaS$W3Ī3E> 73(Kz~K]]>\ƪֲaDN\MU2fA\/W4+8o=2d:sY;7 y;4!vRzӣ6¦J%tzs|,VFjJz&[!" N~w@|bՄ{b](b+f0Z߼,7_9sj?b«(` 멐͞Ԅ+'Ps 2ܶ%Hm"==SMڴ.u~H$s&X5󘧕X+x7],8v3S,dj-ć8.ɿ\L-u)MKA+tehoȒ#㓊RWHyZnP,玙ƭNQԎF.$xi>;q(y&^tkKdme9CCcY$>eB^;Bӳ%WEX10 \v-Fӓ )? 1.@̇oHM%ō XւYcֱ@l WE sd.D%>v!UD7Ӫ!cVdY&#nG^/.wNA6VeqԜMN Vy]jd/!-^tz}wtWf9|xs}2NSb2˃#A=9 m'sجysGO[C.c_:qMk)d᡹r&ϛRi"d h[& swSiy-/C9GW'HOt_?ٮTGuBY x0 o9$Ct o=gM/0_2=AlPaš]LF[BG ?#:`#0fȘ(Kz ߘ~\;.Շd\S^$y:&dl7Z ㊙`zc_xmJ|O^ 9,!?Xy '+5ch3G1Ǎ I=4MYƛ썸cmE%'}{ҧw"鴇lZĔ^S޸֠mXW0D݊+S9p~Zgw5pͼݫ=<qd-'1suC/35ShPh3/@o^OCt*ÄtH Mg9iZ,4`e-Ç2"!SIrӠ!ynqX$$J 0œͳ.o \ KrB-C>5C1>q r3(t蠘:=:A_4r=i_Lg7^] 2.A٩#(th"|ꨙ$\svXV@J\G17*[ MbMx(Y_eK Eԛ|שՕ8_?r4(tB#=|Жj6X, b+9 %yw V!@ +mcIb|3_H sO>)&#ʤoVKyrr1yjnHHu{PYJ^@ V+ җ-I1~K 'u=~1&Te4r|3̼-&l/a&`o _,*,.eUn;N6$]H,y/J|eA 'WKFK++'k쬬iȹHc"O2*h/NS2ik̊ˮCˋShH;1ʧz1}9;MF!~sӚ|`[^Qt#nR^A@n"GhvZN-Gc퀛 =qMoeMf9,,hHP Oq*=V6}-w y7 p6Ă߼EҸYX}Vܬ/:x{L)x4m=ZK ˴uR&z Pο?;cOlTuT?_A+3N@< rje- r W :ϸ[Ϳ%y-C=.g:~39'^uƓ+q-KXтl!P=,1ʶizibkd}u>N2 rRDm BŕY.V }pvBPESn#◔IˇߕՐً._>!816&=Iozw.Ҁ }\-> L#_gqw k5G4o kDAxx3UEF[RK*d#У7*#/Ō&>=vZ ] p ]gz.+x V[<[gBmd߁}]_jܲB*|8Z[ϔjQЩE /hluCrqc%J}!C2vT5稉gn890 ĠUSagds)=dbL/`J8kmf knF#2N*2?gpZc?:mTT%VcՇMqA?.@rxpytljNc21kfDSW^.#5|4` r͢"t"p34 f2v=2`n,ppjsI9q%߬A-|$W Zn I"lULUvV!ӻ+B wP ]N@ S@aQж3(˴e|e0<Ͱ+@fDiO +_u}%U? ^l FEJҤv-yf@J)T O3%?-|9b0\:m QВ1bx8k ?K GJ1; uV#֒{ \zRV4$s AEc^iɽ sr Gۜlpkܯ֡A{]݁&̄I=g6ACQV`;6o=+^ڑA>, gyGPϡPHED@-|fDG Lhk߷'&F[-8k(9G[m*r@{B?a> ciut^|,ȍg'ylroٓZ%7&՘]T\wػ+zVl\ <q o|܍2B^mS ,=k$>Oz O^d&Jڿb8@k socHՉE߃4wk&@&͗w^#e Yfϛc@k$"[-k^K.OMdv٪n n' U[zG{9mâW.jKfmgsCM%; l_+p4s*„xe#!Id@BE}Pz!=ןh/ ʗV.w@To'ΦklV Bl}--?6)+)(lC>WXl߀F4Kіg# n#xpÊQ-  Z2(W7$h/tΗz|< 5u'UZ}";1)_{?IE>B=h}vi<& -(w\ u$\&;$26JR|/l, &N6xAf&5E\Z /8WiޔeӞdU0Db"F:[\hڊU6z5%YbFRG BsaѐO&6+\R WDʄAEGݟxpr;PM;?la` obMcȲ$V셺#E҂d6Yyc=.Ь0~=ۘAFfԿk|ёb͝I#&&bb@}4qY%-޸|WZ}e#L"!1]`q vD_g"xrT"K (AFZkhEtÀɩ#zl21$[!>O8V P8|xmMa\ PJ~.$ƠYvj߫0Y7Aa"V,E^bn@/j0}{ߺ+mJ=M5Ps*Pe_q$yYSO9J{HO'MYLhvm:CFK"hˡrnsozc=%/HO|[u]ѩP. ]hHQ}} ebwSxu+O85^03숈t$ĩy)%ӪyA$t 瀃J B0S/,`zlOyqt,|qUE˕XZ?UqնlpL۱ǩ|npDޑ]$0.ϯ羪M:Ji{M%U%Enѓ换žcJ5\CӅJ]4b0{&'v%wVi3u$[0b s{C~} 8PgG?NcLSG{FEFxs=890YoO)G_Lz8oH[8Sy DMP3?i>YzI¾onNd) b*e1D\M'Ta BdFQMFtcL g+a1q;*>zүΎM?3*>GC >4@cf}GƫZ0̕n]kѸz Yn9)įf㏗Cq /i ^~Ñ_'Hvr XL cznkJI٫k֚ %Yy,߻Lf巢I= HdI.MM]x[,HyXvEPkbhohKkQ ~Nb0mY*ALpiB2ua'ھ3$k3a5RydXlۄpf+ݮ5qMx 4~fX@Ѕ\T;W|T) n$9kPmbC0:_DAXM۝ R8;D Yyg= t$VÔa MlP@Z\M>酽2i%ŌC|+M?QǬ%VOLd‘>JZ%,t겗Ph30is3 **vЬؔʮam  'j߽~F1[L uBɾ[n5xW(D*S/^Dѿ@HB"WeuJ# W4uS': eʼn"00I^+R 3)[z*S"F6-փ뀾LeAdIUs '@M>šG ފSXxE67"=/g,RAg7IIދマUBoS5`4s9bc3ZXprN0=-iiK%!7>\ЛvoTwxΝX+9/]ofr6]w4j}Y&F_U0#f3xo!K9>ޒ& ҔVnw]ο1 cH-.0wl- GAJ ~0[':Ƴegb'?zZrp|pRDI󰿗!!cDǕNȸ \ci+S]9UYGу# kt,Ww&j!s_qe3[ߌa{Hv΢-)J}QhmoC فMzW/{7^ZB57=; Z[bf5WV> fp{7",- @=ˣ|XDU1Ȳ)D45u\ahe[h2w\偑S t"pkX+D>@'B4 Z,0-܍DUl=- k&͇j(4hiqsڕpXʧܜ.>xL%('f)( lP4YMi2HL#_"(G Փ>y `r~gnW\v" l(|zx7Gc]/-,g߾0#սIF?<F慑JtZi=oh4L]?˟bY$3KPtT>:H>3 =7J")RuT=11qzO C$D-il O\5>Wm&^GGiJTi/ax4:%ke6804i|M70yqTp#.# nLI'E.ErH_;eL+qj5Zá F#hg)98CP 'j%bndq#NGq\jljeOC3Jїp'hCg_L|NgLzNQ3Ēd5&gip6M.Wx+aחE *_j9·3l ~r-!3q/{UOa T)KF]:[0º xN= I%28QaZOK&{)^b?ɚg2 Ê7IÈ4,ջX^Nƾ=pcǃ\ygx!B!!;x"w95S Jʿx'v旹nF' piZ, _5+nH$68O ~ZC^X_ .vd'ZYgၢc2-:g0"#-qա.W~i/  * o$a4MeU̾}G3 bOt-%2$T9祆GdzpSݘr:%tw0TI$y:ԆaR/$达Tw&;gj}q7bٖ@ j}Ւ_W U.vs4?ҙ $KlmV^6\htF=Y1T's[E Eݲ& t G@LԘ{#OFs9͹3,"E=fS2O`}G5ιW!a䟠FEF*~S?1X R(0ldQS,{4hI vݪ,_ZP؋cL^rIOk)=bԛs` N.(m\r7LP TmEe=L18E 7pv@0-z҈bodR뿄*P=HP98thɱtD͙hLnS$ɵSUk,vW4R޾(zq^3IM8Z-ED%LeB#,= b2~*O~ 6:U?lx-B:Q eU-Zi+vh]vI!ci:IG$=EȚ8}|UP#CO6SI`/wڜ_-ss9ro `FW E\\rrFUK=٣eV/&*Yԋ :/Ül5gZS#Df&`&;ckaW9iLhji/sђ' =䜓(4l*&[nf9Ÿr7|t=])6hz\Ř`dIᎩ5BK)I{/ 5zl何8B׫v>}Q OIY`;4:41&[]U D!@44 gNQvcǁsk˖JFBE.\ *y/[zGt!2Gd7}Ҋ lӆR"^=bLJ%|tB3=3xreQ]{Hmș&0f/G0y(-(+s=ݪR՛b(jm ,@8'Kr&lC_3<%wQ+wrQ΃A VO`jxW ηyZL~Ig *k˧<͖"_Dl9ar6 xsR[ϜdTs?>t)y<3w{ 9MYu <5 &:3E:LU-Q]sߨ)Oo26/v솿 ~9ϏAւhTKxLb1W$< jx -e<\UJ5m`- h]jߕـY( s.D֠}ԡ rH&*7s2;I#H3]BR`G7ԛ]2DhpbeiOtIN_ !PĨ͔Ȧ9lIE rkabbG 唊bdx2Uwʩ/,\^;[l@@ozthVtm?r++\ M}Ahl4sG]ϐmh!Y0u;B Z͊_<^-s FʂB)>X`Fg YJ\ *טCVOWt.!=t,ePժ^79hr(T򌒋Jv{!0e 6Ė,_P } f,aqA0kLr$FFW,qk e/Q[,zA|]d ' gaVqY/bm 7>]=l,ӑ-  h=wK;..̀\,y;ZGb̲r*⎄̲Z*{<`ɤ zIfkCdq"fH!̌׎ YK7H;40,zQ{Ea$$\`7/ųJj f ,`p;Zr=QPלcreoW9DN 28&AiUa9< Z<q\fOCbh_$3 e?vHC>N7!azl887@/pl9Rkfv>]a~m 1=~Is?ĺӋN~Rmo"ʏ)]Bku Atehw{:A<0'W&ٌJresv|3p.^cw'ǘcvߣ\ao"5 ?f)véA5|οashТ ? w{6ô.ᠻ1G)>H;Zkp]~BD"`Vï4}$t#>DHmIj ȿ̳SOwvgɵn/yVd8&"g{&FGJeb`_t8M-/)6=/95#5$ƪ޽/_Nx9`r<^tE2q!` R7ԇ^/Qj6L}C0raWtc]2+EyIaln7B/6Cs~wa *\zKL  tBLo H66״V/ڄ:8,mVVJ12}*I"m?L xB_w-22b}븰7Tv&MlDy* Vz0Sc^5hBG:Vo95acY2.26E0SV^ gQ`eѐJu-h8y 0 bvdQCcH 4tc ro"-SjE`,0jџOo+3PH/9" @ew BB3-<It3"DvPFuϑOW7 [pYZWgZ-0 8?hs |LLTy2*1EM6y7@ 'r7rb(0~eX@NI":-HJƯ=L᳙B::e-2O|(23ð(۽T_u_z ;C_*;/pY8o@U\3%n` iV^aVUJo_cXO _=7[NȾ7_[AY[kI\2|"+uuRcl/z& e(&P t1aJ2hw׶AZVA0gSa XR.rfX%ߍs[O29IY4n‹b\F˔Yk2*}1\c6J:"ܳ?P'QӥI݇Y<("6Ĭ߈cBq_n͵-x: uN%bsDod|2下|x 1ç;M5^' YJipCu7ຫ,I~a@uy&%YUhǬ R@=bz ϼ@ VX31bNr죈I PzWW7v.?*5r/K*Ru=_~(U=DYIQjRJymÌ0@\<`@vVäkgwSNvE }H*m+4v9$Tz T!by{/ϰzY]%_#qlR⾩x:+x}

n1A%]ޏ_E'OiE|ˈkvG%~WPQX?UG&գIqKfg3:/;L05y[޶{ցvX䑐B}ݔ0hdFr; 4ZI2\DE_LPNhE2ü`!pKCʠ޽5Ŗn>uMGVHS!1)Xp|(NsE1~1$P,Q͙;E}0}'5RK (A5HnS &Tgxvn"B9-jyrPZN8iAw5$ FMbIIPSbiQfiKR;=jH㎚B! 0F~[qU '*ةP\6]p2q uj1\^%wo/z aaaؚwmD v.(fw 8w}N!"B,2!mc8P%Z 'gi#|Z|-6nDE9R7ȒSda4U0aW& +rES~=Ηee9|B\%O#ذəvd''4`JomX{SH{BdS)&wq6EX0Z ZAs,%z.v-tYQCxdF#?jPO>22վ?,~e _74m,NMw㦜3T!OI_J ^@oTtxګC0rO4Ơk1'͉CLKI/;}&:z͇ބt{端S+"]Al3"x^p!%[kCPji7RFE{&,&* u@ff ߋtA2 2d|51$Xd8*hЈ*~MdM$Za+_`Y1!N54F q )v)oRbn"_b JnDYrW'gY~B)z1ϚkđXLB2:d߬dfIi,q}ղuԚ/ Všӎ'퉞<PᯗdI #G%`dKErqO1ѱDҴ|7{C޵Sj,dI;kltp4TmqzQ~[:j Oٲ1Kmzje-]6'*9/u'i$)/4̞܋z{GcW.9B³ .߶c⯶W-l4`٢\|JV4:+a$5K'΢e4`TO$+[5H'L(<3FZVh Jg$h -S9 )+l5}\#٨]c6ubkZ R$R2dȥ;Nb"𦄵26{9Ig<ʁW`Rkv D fUR3XMXCV?{KΤdcz91bwQz[$ n$Ő^UA? &We3ps 27 ݛLIq;zHw\EB CPy\DbxvQy11B1$9*N,*OTGv R##%F$\Ot\)(j(4|nvDˡ+]KAUy-\rR~h5ՓQtň6*} pgi]rKǓE]0=EA,+ Z/(Ÿ=kVL ^pߦGaz+aj1N2_#X["O´E[DYѨqP@.מ Gk'ox1^nD U_xs->Jnt̞)H/xERZc1:lGF/N9!' UgPV!^x;.[cswFjIk[jXoH/4#n{ oSJVW _YZ#-$ԭu2~rKCLWa0Il NhT_Ǹ-ȩ( <-+sTJw\Β_/j<,NC- Έv/`6::edk?{f\>6 Ueֈ1<!,逘exB59ݬ##>ZjPqERr&t+ ^nc ѱMIXkJ/x 5VϩG IU%t??ZGЕ D{/}[Йv+d  p/2? /`وFLnHm0g#zӆġJ Qb,HD$'Nsi|اOtA^c!s@Ͻ6Iى}^wlӱ+su0ȉ76 S7 +ƕa-iE=y6lh$e/5/:`nE9pxؚl-V# iGɄw @nv+v'tOkzv)_MI"tMD4Cބ,+H2K I=op乺512cH(?;..DZ橎N W(, $"{Uoӡ6f$tn;vZ w9ÀFBXwċ8Uٝ_\ZO)XG 5wwH#20PXuO>O7ţ5^-FniS*O9Q؍'$t"Z^<ŏJunF":d:ִuD_ĸ0Hy]a$3aNV /^,|IG8s tSa{UG%#1xgk32K~xvgAVA; VQ[1I{%UG@NϞ{Aijz+Qb[吏!"DJlFvЊ/Z3d*cr$r,@pzW Qv=*[v۞.ZG GgSM"h8#z-")L dY n#n*^jUgiy6%n_ %m&2fF"?./6%~!F^F|GsPkZeRqKXנ-vJv:Iיɯg<'ɇcR14>g~ܴYN.iDar`L.>ˤ$P/}l%wEA97&Yw)k|׿f6ЧQ4aH,ő{,8q|"Z8ks2 F],Rϱ7R%jY:'.̙<o=O>y> ]v|'I_A߷%е/uP:ad5+3g(stN [9>=gsf1˂GgQ.xE|J%C7AOy^q#nNQ´;p Ph{1/K^^B}tE˟E~\녩]Wi yz*ҜM~ (Pi1!FW4w! _Dz|v_fA=^}-4YA >@d7`3H:{Gvi9&&EƌrvŜ2GvFpOe;aʃgʩuhJ.7K-Όi^Ƙj,R[ڹBV"y8ɘA)~QXbQcDUO('\7YNu6md:׽ (^G gު3CƂ^JS\-["J 锴!x6EZ83Aw~ ܌Ȱµp"\hRo1v^!rY,(S#Jc&~:R\J}8\s$@}H$?C}{3Cmjݳzh2ʓ[Gń:&wB]"@`Cw .{UENjۈ[2}7$67-`Vsul2|\XqƶVϴTS9ٞظq2g'u gga\^ofG=f)t|Q`*V f3MiC~k_lï*]> u|NqB+H26'lEɄ{,8fM=ZORX~ߦ>mg% t'a5a̽#ktxJ"< Lzw4Ԍ@ך`*Q C))4ã-#7o^9JJ_>82} u 򈾵eÑOw /ZYb<҃ÔJOH+l[05?n)NBc$c3]x.vWRt%7'.LݛSO?]j3Fs{8I_gFH{;5|yLOFaw_tZ/wwu%Ss3`x6GmlL&رBыFٳɜ7B̢3;xƽlپ=fq#QTZx #0pq]A]oqQl*&1Yx!3/UJ |(@(2 ԃ5Bg,h[05!~/Xu_`@'YD$)l;s vwjwtXY W6^$QwJ$=Fy ެqxĤ Nj (T|(ne6@t뒉*˚#}aIfV Yg 8L\ǡF&!+ܟLrHN6JNI4}:5/d]i)"Z]}wlG%Nk`Lw2X7sD3jǛ 3Jh  8ʺ5_8yTҝ2M,3>MQA"|'J3Hd@Y?7!Ia?w(IrGasه=8zp;C8޾|C1 M[.1!wQrP&&',O}*_`P'ir~VNV'h씎-laG+9G;gESQCN/&}KE1rLedYqIuVEm7wn;^n=&<2N8Z<=]CAPtE6=A2cA_?6v@I+c-o wx@?&w޲j՘y!CP 7y諳DOQp:T{bsK]wnaDqS:^EEq1G9j a@߇1ovٺV\j $Dpa}BB }Y%}VċQ2y=P<{pLί,u\|Q@C l]J$y}Yp/z_&};$XC6nM(h @F;q.W3Qq;W?ˤ&`ޣ@rW1*$-1ղ7XZnz/֕9Et(An2i]V\D&.lXR ?5 " 0o6S)[pJ1润Wzw:]@2{/M/MS%{LҽZLw -|E5fG&]{8Nn\V C(㈓?[խHS f/oJAc;(vtg'V$躢H4H lާ9%B+g"1HgGzZFثQ +T^?PJnwaCz%JSu˄![oi0D*~lVg2l7m^8O7 Z7Mk͡Nٻlkg8{dmuXsGswJ6V4hmS1 k~X<]w`R6&oM pIha@WI'n.-|zvl[ƙ*BN7RVb@oۑB=ZC^BJbѨz2p~؅-!w,n%> @"@s_S] S`LMZFj^kIEXޔR)0W,p*}#rX*~XzeAݩ,pgVR 12dt8*߰8Le.fu?T}ճM> )guޫ"zZ=dbސ`JiC*ʂΒ4t%W#:YEQ~+ (%#G=j䮊1`2DG{*o\=+ELe<ַ~35탔z\.s &pGIzjTԁʸ f㏐4 OK^< qg'i\NI bjsyҽ^ \"&i+wJB"5hCVp-. *j[ǟ1'5։Om8i2fkj3[qkOs6 b H6_a1Ay#\LmeVJl馈~C>Ex,jas#6(ޘE&4@3:80C괃YB<ֿ/?M~inT j+eȔ: Ժz 8 *7X2*(^ ǜ4ޅ#}\NvL܁L!cMrU,J4r}KqAө`'mm.X{R[6!i2 |>.>5[|m{1*e~J=]̎g/]*!&gN2 l QMS*%x^\6wZI+"@w~ui,x@ZGyAhLe*1R΃ ȣ?1fq۬wuhW hQ;믢}(UᅇgqM_)$H ` <ȭ}@G];tĢShtA7s3Q@`S\" Z!|Q ** 8plIQ_gv&A*ٜ 'į%A/HgNN2iS7ӵG\XYh. ;`vi#^2?=}T~#;3 jeʩ@&)LDb j:ڷCAʦ`#3E k2O<$F#ʫEx!Asv2%0W'֞bE"^fè'[V^l I,FߢRLָ}=*I2UzN]2=}YV6Lm6r>4ǁ:o+IC!4aYw]Jv;O+.4SB63NP+~H}yX. ?vڹ4|RROgywA,^`zHDRuLV}tVQ)f퇑vF癈_tϐ;'E,{Rt(;%DgJo^} sV7pCkR]Bs; ;j)QcګL 7?n4呹ȍ_K H<)\Zd%E'`شx$վNZ&OՃ)G_N2*zI _D^|al~C/ I܋7i2㤙=BDu:W{XFM)zuZ@&؃'`+QBSeɃ{ ̧d!5Sb(Q,v¨y{FIQ=wq3_Q"H[Ae vcW6o 2K9vhbW"Lg"+%,'N} 2ͤ%UZ&8Mr<֘(u[-P_KɒcZw5W1&Y7lVR@0Vvm׃C5;q*Dck?a:VX+.:4-an\N TO,&/ g`&Z ,` awxF'GC9Gm,_jSp$@hL(' ,Nåim9& F\d aq7>./{, "-djkY'9[’JnwQ 12 aIVRAbMؘIIL*횙eLꌊa\QvTxp.5_$T$UJh'{CX2@׏07;Aby̡8uHRo  fANחkyۃc qRUN`=rbJvl1Vaes3=G* SwYԐ,gz0DVG,׺i$L;4ǜ%X0RX7[LQ\ k#fY:hxu6T/%M?nڽh)N *k (뒪\tt:Y.%e7 VIPq9e-bob^R@nBqHLX3T%Tki}$glo('NoOl:bWS="*[eA;WX~:N1[ @>t>|ż'kvj sJ4UF pfP:X̩ =M#obAj܋b OCTDgYZ#|\T*0WUPL@ٖWHSFңumˤ }l'#19B>AsuJ|{.e^pjx7"bg&*QѴV׬;Uq\!JmLU{B5U i(a_XDd6}Y')V-g^ _ heȉJ6 d) rc ŷ_6m=kIb V ;]X'!8[&)`V yO/`':x'!yEuze$cmS&h{a(jwͨHwF]_os$Ze't%G^ZmΗ2坰VB b 0d@ bfͅy%bTI)|Cӳ [$;RH?+Ҁ;;s} a g~loE,rۅ *&_;gNw-*U[cCH*Q -qc(Q*Ҵ؅ ۨ9Z u3m=LŻ1,,>Ec]B%N=y~p }2Ԅ-6rwyR"3GUPb,KZbybۭa*JIO%P##;f,fYD&)XwD.q5hI%YPF`Bma:d[jJOTߓJW*821w)vK>_ʭLvLE2u Vu3rsP/MH\2IҀ utΙ\(ه.2ԀFl1=tHUKv< U1+p۾dԂvh %Yai%Z 'v@>) FHߡvŭ#;XZ6Ìaώw(`/>fSD-}vB\*-PG]ZR3@vHۿAz]&n,"ʰ-:8\F~ZbmHИd5- 6(z F%Ҝ챋e_߰'O/ؚ/sngaJRJq [g>l7(hڗwvHx :Fu j^GX2O,dM:C]icE* %L$р+Po`D~IU3Y=d*Er4錥 V!FzW;{w{)f@+wP#&B ] N"%~jxFd+<:%7K*mCA`[={#Ve*+py򵪐ܬF1iK% Jte/Jue안 anМX=f KQ3Alm53;CQqP\\l6v\(Z`e caqOp diVRAj,~ |a?~λww&l֝ <~#սC"~hƊnOvs#bbMr_)=_b5N1KiDVwޣ4M7amW"TF2Q=Uuo">V7:z^>L-Z8g4?,~/~B5)MWbR0 $(k<^U q@KE\!EU)qTp>ښ[t;Db\/X5i4DbfX`ٟ̽S]|K;iW?&Fn] ? NCI)__ {M9jiu¢6]XW@;u}y n8*x &{Fwֿ'Bo䣭Lf'k WxG+eDP?~ѻcާ^$I:}Ztlȷ^$?Փ;AybO~HR2X(M\8h3Rx҂/u64ZSze #e4&$9@]C`HI򡊹XCr1!:r[+v%ۓcœ4 V6©%akѡtӸh'Pbv?9ϫ7AdgtSsҎW"v/YM,$a +_~PNA\7ّ4ėǀJ+h'<7-ʇ o_ nR>*1%BnYqqʉ R72l\' _G^V5P rHg!- tw*8+">,ݔ0PQ`ݔmw.tg|?I/szy{Ü94PL~y@<]-;ҀHIa]e|z$"\MҁHp]CX$TA]U$8S'CBCj@N荞 [۶gJhy X4ERE,>|{\jg ەvaXBUpߵZ'/*ycJJ{i8|dx7yYPB (܂- A*?Fde h2ar"7Y!ƫJ;HXA򭈘TA.:{1\=fy"uaTDŪEt{£2NXVT)!:p?R'`Htvc ]}A.'ɿ#TЀa젪`X7d&uW)Q5GjyDZw 5\q/x8`0 J [h@<ߗm l|9Y\cq_eBd.!WtK C/Vdar^œ?7~M0uWO ^N?4y¸U_> 6)<,!\U{>W/Bak"RωQr}Kc/ZHAJzk619ap9$.(UXLZD1~e9^ٷ|ONU?t>fJ>zQvЏg5Fp3ksP BDeh]7@FLS֙w~3aVl7 ~Cχff-h!Բ}+n~8TOJuxޘU93 gRha !dyd)s i JhD㔊b2EE^ZeW5eVDʠC:E6%h#HpuD 4>ƥRt't]־1w6JƉÉu?qMfɹP}}?0/moeXPƘ6:K].oWw_/L= j:L,+-j)xQ 4(03w^MO*]J?~ȜxJ.wKRvW.jԔnB~wnq>_ŴSLDjnvY#1쑬{ YY:t S`m##  Jm*u4ge`SI- 4חVA6d*Ǯۨ@+Wu]lEa+rxzkCG@KxwWQy[ W \];i6Nㄦ4Dx# q6 }?0 L 9毇7F/^O 1 p7eZ MPNS[%,uG~'mJmv2YRG,z4DEՔܑ|_X L n sPV2=妡ezVfNt+H _mj,ZiŅV(Ww>_Bx>EbViC/+>9gڦc>kiG'xw/u?pqUgYԅE$u/ɓ]*:xT-1JvJ}~3OZS&]HizZqG4&-e* OUF:C]XI3Jj-:kHI|9Y~ ҥZ8R6+YW(V旚nyJ'zhqb$&қrmഊ 1ѕ=`BV~nu<آ*Oov k\-TSVQNĽgs>a4lCRދע]:DZ{M"Ԋ9_yT: :0o"6T7=}- +F *cd ¸`u,alz#3*JqJ{,ȇRz/D_taGKrWED |NLHˎRw&ۈ[pF]d8sIAED_z?c)jV5φ ſs jQZ/VȱunذjY8RqO ~SjIziNk{"2IMJ/ @y"KC}7DBf-eITuΎ7eq=5J Zrun*?XjoGٌYj5ͳ5t| mA ʐJ;~uі]CX^ܤ%̇q42ӛsQ-n_3I$ %af M8Z^⑙Uh6}[Შa,$v9@[|S' 4Aɋ+B0|u+4%[w֍&/h[[l4 scU[ˇS xOˤ%lH<5%YcƖqR*XihD@|Lke0ԽS5].<ˇmw+b(@˴WyQ:2@sFWx#Uw\&;>vt`\ziD#EUk쪌- r[zr1qmRT6{ oUQ[Ɍa, ڊ!VPml`HcG A`(]۵ݤ*GZN& c `fZ9N%On]Lq:Onwc[["%.}VN5 0씊7RVWf,e랧UX %} ;5. #Gk ?܁z`)Vl6g&\GxLi#~4cTafb`St拜.Nks>ւN'C&Np`Gk֣* &Ь(~:ٳ1lC2޴7,:fe$R$^]}z mXNLIhxZp.[ypD;+C`Eֿ47Qd9BVRwZH${,`*̢XmUHzm:cx#~?~{Qk>e#`z}`iD.)bh[6>FڳHů؉_ы/Hc1Ƶ:t{X~vbqI9)3'13 vXUG"'i |ݣ1#ՙd>,$)!zt"b]M *d:_N8<[O:,۞J0} $hd:R (蕛~D|p_ e; T%y\L\O (q 8{l]`_T&&>`+n.Ylf[ '5^dVmn\8\Ahc¹- ^"N7ZƤlL{weG'd 2;2lnv4Q@N.V ט|bs⁻WĠB+Al;,#V*w=Bj xwڑ'RҟSZGfn1T1#I< DT ~O*k޺0*aYC}Jfj2]p59'|pY\@/<}bg_ 8 のhT@H6V˼;!v2`z2#?s&v#; q s}uDmQU\4Sbl Y'4Vԥ4~#5tըH2$Xt-(? 66VII KsiŒp$РyJhg腍㟨x,ޛǴ51EU~lv~VFAX_!d19ײtj?槲Q,U_{J}ugSM#_2ޣ7asŋ]fM{%7O8Pe9sWt2wmʉitTń,BGQ5ZzT0ܶuI]MǥlSBcbp:#=leshb摭,y!;* XL<b_ 2>BHew|ggX^i6~򖉼#L4t_ϵR*VuiWmQ CsA'-Ј!/Ȭ#`{ՊK78S”3"|jm5&ں2_l+|? Ϊ-b$W\"9(c!*W, :[*0RG9 pC)3.I aQ 'ư2۶ ^(ǩO9aB )1KxF|Q_ΰRTٵل42ObR4%2cO,ocUȭkXzdz2XI % G|}"70-zk)q@w¶ښJX|Ю7p_*-^n,#\2puA \M~jfY~_٤44cUE2^pye[V}L orwWn2&/̝BПaA+XSkTQ`]+7b=0_/DKC? ]0XkMx,z9m)5׵V@PYsnfEvO~[X 6O,q}i@8~[[x@LfAqƥq+ysX+ &7 =(П LJ7woZ#_s;y.y_=P'h^@O]/%j@n_&dqESճ~2zEcϮA*'u5FrIW'E jk?M&Z4b9&ZE @,NQ *cP#-%mG?l2KPwHrgGyfM<* o ,bШKeYwm:aLJs2䳁6k:j; e}$-{1i[)A|&УŬk|=o:? ʙՙkX4owmwLzT*yчNcZ 3B dˏD[Ení(PB#T7F|(@Ngm;"$w,^}pr"AZ%dIw Jd{-SJ/%@ob]r$lg7glį;x. Ad.錩璛uc'?B~9hDiﺕ،6'cRM Xt@1(+_uvq{,)כ&=kxR[ՈEHނ㙮&Sy?} ]`mQ$ qTlѯw8UCJ1'gLF.iy9BžwcEIȻD[g])YyLf/;FQ}-*e/eKK; +a7R קD-Ԕ^شiC}>y#Tw6D$ۃ;y]=)]Ȕ=pŖt>xd!adcx" Lu z[M/5 Slr ar:I=v7k A"G>->zYNXCF\}찞Ilc&cc]DDC,2uCQ@k+yp5A8S,y!>%C@ƨ.4xy7|]\.ő It:&${<,EMiw bfy*sPh9:$L:0myIM0_qr $BnY͓;;WEd yJ3 {NB^=9{bsx|?hpfva -ސmvIk^ә"[xP }>o&ٿ9>P(u؟@/H@$e*Oi /aIHR%o>r{_S%=5Üt &ʔz>!]\r`9^){ĨWwܕz5H*M".SMU=$ 84Crt@nqe-6!O[ .ȫc3u`*W9ѤlÌQzPö% U!R%-'eB-pQ4L{3Sx˱^7<sc#n\>~?4Yea>$h5ѦN{nIk*jDѴ2 }>#_Edp BA`d88FkH1SbS"iGL(X9 Y'OO'd]%/WXv^-DP-ŷ9 ,NrAt^ԕr` G3PV.o*`.*Վ$b RiU~؀K5ʦmPJ!_V6j2)YrC41IlPЩkO9BA%L6Px*,8ŧ- ?'Es^!J{irnw#LYCnF;L} 0wbjP_PU0$"?а֎;=s3X61chH<*<4x 8"}J![+ fX CM 쪰b9ژ !PA5\AV@8u3O~XV[M|10nL2QvnŠȇKAcM`aT;"Y(U̎pE˶xcs ЎROiguU n[w[[C1}Zx))/7(3g>Y@ &6ȼoZ ;kI1[%\M^![Ev_FPt 8YZ+;f h-smم"sV??=7vh-zHxT>6( v!K, |wTOT@%5n(0+Nw7!9K^Akd\I;vkOS qD c xK"#PP{v ~WƤ)=2T $ * jͦim?;^cӛ3ݪ/#&/% ڬVfZƟ}yYe8;)AWЋ#.),?%2(faMC =Hw| >Lv_Z}*E?+#H^" Kf+T-}+:bč~Y}BămQI~%Gysm+A3WC%@JASO3gus^{7/7n!/Vw%7::gI¹0uRt&;Իv.MYxc庲/666ېYkڦѶ1g'RӮL}xH_= C3u.lMar͎ᐋ aS;Fv0-unq!ӫxa,ë. 3XxDy+ hNxpTg+)T:6ϊ跱\9q斢r >+ QM*JӀqXEԁͥTNNje){gLH OJQ<|muîV64OeUMmop-^^@(Cu @VEV9e}'?U9qwI̒4jʁה۸ls F=d"SLG*k9 ɋ{$u:̀YVAJ%vg<:0񭎺#z~vq4‰#9WOüU]#늊DIM{u1C\io\d+;&xۇ#?|[Ji7 *g QP%>^.!I(ff b!똴5a8m Wtuj1:aeMrLBj*B nAdZKPVZS&rjeE8*xR~ w?U0SwB.bG`"Afd>) <@UZw\{$?@. =h_X++TW!#WAK bg_&b)߄*;̖K%8Jә\j#>oyY\3tdhߚ0ܽ[ {-δ?4~g%"M F%1oU&_rJTӽgE 瞴:{lvhqH`.z K $%ԄdC`E&7Ma@j7zLo Y*%64 ^^^#-,,h9WA%l$7IT.; (6$/$UyLoأXIk"r 6&[L/•BtOЛ ; s"bRox:&|hk%1r.: a9;lCy ыj28a z&lwpm/S"6atLkgn|U7dJ>:!+*P0&7:TW׮wU!G0/yC߶T'z5B/Gx::L6IPoàԐE<-. jRgJp daՆ L}R]EtY ꇧxS4ʏ3+f!8CӣlNEu'L= >Sd2dlBz!7x-<k.3%h]]:D8أ%-Ru0.Ye*֪7C7aO9ƚȿ֙U;& %Ce/h6nHp[ۋ85bY}5]QU$Q$c1zmXHx;۽ڐ?x{tTgz~Kc2~5nam/$o}6& `H#yL_-Fm:aކǖU2j)rQ'NV:L{Q5эb3::f HDrc\%5{77N9VDSY{B s  IR yd7NwB"A&8%לL= $NHo0$|h}QЉD&ĝ<-7[ gٕn'8 ^ ).3րN&'v Яb#_t'S$-]N|21M!deSJe1z6gd(tΙdPB$߆!]kR+ )oT6% \rڅ8#7;4cܺK)gqmt4IvX8Ja"@x*+| eRV i'095#c@NwS T?pO@ӗZm$oU>enRoOqcCo);ざH\{KbUç堧Ve@|eD` 9Ap ׺z~7XaM+8cЩ _GߏJ y){R$g>|)ݨٞ ,HY{k[%h`U}oQ<5ב<~.vLwςsBlT@jFFha5ǻq(jxs&eCm.Dx SuP]/ lc eŌcK3gwuZX1x <*r"z9R]|W@=KMqndp"::,`>m@J ;#d]*VV I<9&oГ6{[_yۃ_a5JKu68V7bF} 19ԾB>U9~t,lȠ>_v~a#PPV'uxHʨ fvvxW OxM͋s?ZׁIf uB^ck.5kn g (=T-/MQDFOٹD~,wY>0OӺ-\@V?سQd˚/P8gp4uX]e#fsrdrpߒ#_yNEC-Vvt[?'(1K %Z$0 uNuD7y+6 :tP“ܯ@OyqHe=9ֱPI_+wHR ,SCНeT5CYBh>Q)ʝs+N+rT:?@4C6Ҟ(;jUʐ$ tDƥs: 1+&uhH'b/,5- !iRqk;Ha5 ON@sd]J T2;I&~9 g ]/\WO<[9+a=?’OZcoA.Fa)->:TRz-:Pj:Q=U|Aΰ胯y=۰혟v,0$|cJQJ(Q9AQ`P׫UAy%b}4iu0ܽN~c `Yl.qkZW m~ie q- y=A>B!G:O0lMZ807bFhڧ\K8bTT^~13&ܒPCpB㮣{/=^I{ã ڠU  ʸXz~DNb2 hLHFNY/9fVɿBXJ:a^7zW}V'-?#XNt]_m&vo09 $ M23 ѦѲzCL_9󺪐nl!P~7h~v#BfC@S]adFI&hEsv؁`IKZT5quE3VAVbD I?g]Y}}<[?#b΢=4/6zc3eZ '^ڳoWgneQwcç-*u'N$߿V@K)4c; eyZOf(gN{!hzBRNXe*Elco\?rE.C~~(ײfpqU{Xsg h}RK^1NyצQ}dl״ ##>i9MԹT~nd9N#dO]l54$^_.YYi$(<209 ,vqVB}e|d'$lkCf]:T6myBf[sY@:JAU*i;i6żee,wu ($Jn9䯁}ڴTx|Z@+zF]z+76@$sYQz}A\WbODM.A{$y^}I2t רB8vu.,$0c+(& L z~8{MX/}5\.2|U䈭uP _;9U D͏D,ah֋5$Ou9+<>EcPD1QЋj2G>C?gXhB-jT ˋ<[3-B y Ն-WG4eo 4PDy11g ;+!vd-E]B/J.!uBBfXuֶg4U'in)#u̞/Rא]yL=on[ozFPy}kgqBr#Qïܸz "zk{(/gCOux4#%BUG,\&\zb5]!|SAM]ր|mb"^(O#x#z!g+/s*!ӑ*'|fLE6 mWT@k ʹ&Pg d]~",84i @uxX{~0>~umi)PѓoxЌ>|+-hܿRbFZ<ސiת~$lE:ɥ .f]u?1~'J1[(~%Xc֢ڈ]/ʿ-y-.{ ~WRW&uSվ@m~a';mlqdpd$ i儫D_^bӹ^H/!w(!yͱ4(KfPUֵn%$Y)p)bg6_&솑nÆFBX\qS}ܙf_ jCYCy>ߘC꼔 (2Ojx?(Kbv̮_踕w lr4I>k?/I_9߄`IFj`\W&.(oo_r̯^Ϊ6%e'͢p̖pReCz&Mr2W ?G Tek:XJGCkYQm^blxL2aB"T|͏B @k`=9̜ AgKh4ϬS% GT~'}`q :ح vYg4@1'+=uc@\`*5% $+<~/i@SssdPY1SNUG"Q{*DN @/6`ݞGxSY+#^'*('#mHUf].޶+іǵ&֬&~!@2+#gK;} 2tB͡uow iZ|J{\ME- P!%P ^7}cF. PVZ܏ Kİp lv@Y=UW2E>)XVWaD~NX6."A[I[XT?5I)7(yGP0׶ѩȗc{+&Ln<q9dH|e^UqNZW"yoc'#GZ q!F,χ)qBGM̓XaV&̋#G85Ek~PV$Y ˎmcn ' *mB$k=WG*4SQjk!q=յx6\ $ URmez =A*:*0`ޛ{EV$<_Q0g; H fAu\K ٮ- )44Ⱦ2z!CoE TX=esCS6pz =>$#bWWlt TxPa;#rtJ򗹊?IpJ(w^ 7~o(p ~Q0fGb$Zpm4\jM2g$ۋ)':P]A0Q5k :M5LTN, Ƨ0Q"vH5]Qxj-w`iϓ0fgK;I01𝃅Ta*v&+%84iG2?Hl= !wuP1X>Dl Gkb1\Ѿ&w걳n=`Y ȅE{R`,u/u*~[DI%UMA_,Zn8dm9!yS4^[(q FE?;Y"÷|# #zI#I.Ϡ\^!ζN7 ~"SaR&8-p/#dX’pݭ6wcP?)L .XSWʖ@y5P7ZLGgKU(o,,A"2vI_pqn&ͤ0tFxNA+%L7zn74{-gG Vn`K^ժ茦W5jfXٱ㧂Q&͹٫Jj.&XYO :,od&kPOG:Ny,ɍdaiDc,l>#߼RPWHαf}D5\F>W(|B{ UL MGݐ>M&r6*Z*Q}Fgs4Tm8\(ሂ1cUh ɿ4 v8T\xsMQC`~ ^Lo#C@pk _H=ڷ ==E"yk)A& sh)_ ]xi2ʢRY^*FΪ`msRdlX|6L> |s 3寁NL1پ0s1Û#¯\.ib'NE U^xE0dϤ䍚^PҪ quǪS~qv x?}(}yA1M\Oi'V/s5jA f\IRlF:BˁGG3)Σ-пtIxAt**9 ' rX>YC:|6XhN:(|r% $ z=_=}]A:)zռ O>'ވdBNj)VJ.Y 7m}XKxeddrKw|8 ֛:৶h»kÞdYTp[+FPDmDtcMpx$W1(gȍ c2IE\dKS_&.C{)D-FKNqhuzZדx.5$d{+ُ(KQ7fA^ :VYNjJf1F^gd"T ݅k=\֛.} 12l񔷤\TaN,r E4=\C. nӪvSu0' ʠ̭8*&escz".1'N>E›+2- gsJN'#elZ,}%/GC٭g!Zk7bbBF$C?7?E0by VAVz5Zrl!oO9Qb]^q4ˎB; M;͓'uHO:0y ϞsFORƳ͜NܜA KqB J"ne>򑬦Bf=f+ç@Syy5[Z]JYuR5RY@SYLҳP/lC7=\9dz{sALQS rm$ ] ֣"bANx=":l઴d3,(R?9&`I[Z{Ȅ!QҴ8!yOaY:h[qp`$V< ١\ MK8wRL{ /9G/SGKYW dZթ4LRxG|Id4Oq o6rkxlKui%)Y2FwCO,f-,]g) 2*z .PɾڀOF?\2%vO*vÝ^)s`*xvHnE!maҳKD C&>e$/XҰ<#`>}rR!5s k8LМx:z;s2 >ިkܝ*.Y7J̙NUSW ܀t8kk٣ v"ӝ  '; ƘIjDb~VfՖ(kos8M66ң| o*L8 ~`6ldMM|+ 9OZ~MZ_C$k߻<  a%(Q?:62QޯTş*b߰#~| N&wetVǿ8 b7Q)BXl@tNoy-u+~aHtHtJ )(91#Iw}򳺊Yeњ~_KR=׉0uY a*1b"*:(D3\޼ƔA""!l,V)RqwTO{ $酻-}K4_ aDTN}}etJr0XY[f/5uԳr(uċLh+#}-GNwv - q#iGB7P4~T<(!M^V6mS `fû_x1h#fmϟVgJ9ݬ&!0b 䤕:FY@W@m`,zk{>{0 γP7(+fъl)բzH=@L"@P0`%MSx|0p Kb\i$5 D7b]<:kNic3h-PLːa-*\H8 M&ٗ0=&s\Gq'b Z56 oil6PndٚXC-XRq:V+cƼp9<~%߮b.8Q.c^z{ߨ7|hAt˂8_\/Tq.4ݫz1bmKZҚq}u} zjq!&]A0IiITKY2$-vBgǩQ:N`9NҴMMWLg~rhb0َh'm2:4j8嵂kL!3I:f40 u ߰$3Q #%pHb!vw9ϙ'M v216 ,Af!+P-wt10=e jWr *Q9VEvlܳ1 m0Č|{5|{lU)]btm2 (6jH7 ,AňRT!sxk ZY*axUc迩0mfVG.i *;PvSzg75(.UztFQTUxG}&d)mxy0>aAiI[o ROm -Dm[w{-«PO)DVA2ĒW~`Jhu++􄁰7`ste'htI G 3sP G#(b ͐Ğp{ݦem殈igs5uG H0P७ϞުSS$: 1aL'd%Ά ʭ=w-#¶ ꁻdʪPь8Iܩ\&MCɚi0v[I)|~7' Rad0E*o.74=ޢx0<ʧnB ƅ>c{0c,%%J7Ůb8WS&bSp/߈qw, |aU`UGXxLCv+fvd`yڱmEuN2zvkJU}C7Ő!Ơh@Y.Cc?'L~ܼ?XAz#5%GV}gaej@`xLiUj8/Fh11g@'ޯ2e-y)Kzb%hhtK)߃)[ya,%AR/1_ nbK% 0GO+e9~gd$. C}k~wOTiäxƂZVh6(Kn|O\vp9pw/sV(})YFVۭ1Ww! 0^!A b}zJu: Y}ԇ7䦶g:v'@"MDY\7 :n5K m ,)B<ַ-):eZ֋Iu>@*'gTwϟD}CbNOs,-s?wxg?M3|Y) D`y!^=+u 40-=z[B>^F`>'=qДZ>+DaF|h 6W]T%ScX3uU?ft[Pux.qZC-b||e-\p9Kj%(;-VNIG ݋ۑXUA\jjy ~ZSk u@yy~h6:+viU֩= >X<]֯%JX Ӷ/Qrdo%KdK+r-M4ֿ8)%sn47G,"J'oMDyG[d ,Y 1<P>u=.- Qs*!̂+%Zb=^UC6RQoBo[EMYd!v'/ZدzSQZ,,L76|臞yvMǍ.tk 4WxL1^uX*!dǡ_/h΀ņ-g~UY眴$%$3i*Ӂ?tv OETjzi.5SB_Z!4s]*`QՌt bHPVWy!r2j̛B&HV@Y֣XH 2ht{d?7oU;ypR9e=2Vᝦ{GU+i"Uh pdj5O.}I^EZ lFyVji=b#eY DA!X=2}Vd_\.J m:e+/t %Q.-߲m5X 4jEC!rbM/3C5#,1 Ź'̧j T2Ά=z8qez]^ Nq~4~ǭ- 9 !{ f (Ucķln6tl98Sd\ 9WT9 FګcZ@soϪC-wd>j\jg.vm- Ak0*>yĴD]ZށMtwQB$tݏ[*!2FM[;9>'nʹ=sЅv)0.ĺyK>zDI %Bc'KD_W{r{(\O)ún7cŊ _j&G`2Ů\rD)s]abZyo0W;H:DUpK?>T^TWpɕ/Z<@2 chzډ{ Ć&̪ vzc[BzЈ  ,/\QD1!4lV-iW{+'`D{,ZT$ V'|cgJd*(0@ob8*^NDU_bD8Ӫ[bq!!8+AgƂqLӆMg5;Y^L̾~CгtήZ;zd 2^ۀ~<3I&*]7mm0S?tڦCp'x<J c@_/vҊϡ{5@a\0 w J3Hp᪎ h7DDrVC>2lۘmsh /WI }pr Giyb۞l쳻]&M:9#L Cq.+βyZyky%]Uf jt0GtYț'dl=]IX+OstKljyK :i=-Oa4&w准[+[2z5zeqŃ*|cLbDp{Y aRDp 51Ͷ #R?@yRn_'IgOD1O+-P|e"T@vqɟi2}.\Hq% UZ<)FN˽p}4?^C]elH7Yzk'/-Sv>e $\1̛[wzj =Wa#SP¥Qtm8@soPFЙ,B l\.  ؅4Q.m(΅uiۮ!e<T4Q|t7_/ ҕ,%ލ-I Zg=MŲ7`_kw Y V 27Gc`Y$Kq`͐k3mᘧ{GCD˳F,|bd{vϚ4?X1\JcaA$^|SKgmxUrbww _"؞ֲQ0tM"p 1@(_Px,4iA0Xc"MagX={LϿ܃lߤ ~}P=\=h$DG_0jW%y`reJ"<^GmdR0GMHvA淳.iv rP:1F5é@Yg ˡ|yaG`APG ~~Bڽwg,H-j{FȋQ][ޘ%3Uw6nOZrj~dHԔv1H3ds$ڶ+:):k?5 1QboXDwKHkJl|T U0.4 !keJ|ϲ mH:78"fKTME] v22oċFS%DtZt![A?}gdN!UeKn fgau/@7CZ{XzlKX"$]2%7O-w?LHӒfW)`P^kN}ô/O#fՇil9hJԣP_h7L [A(^ wDGLΐRh/>dIl)rpڮ>=޷6 DMBzc>=k#ȴ,~OjfQw]vҴ/ZſQ/8[ٹ<.-GBGm ]."^= T/ YӄCER%yWlcׅS)=t'NT5ɭP}wqgˉYrA{6Cu4YѮ.]x@Dtc~R 9E@_J聬CIɚhp2<±[.NY͘u:EFMq]`r2,l66,+e QZdy(B!ͱ\ C a Z/|tηK;LG* R I]5X#[0JQ6s0B[*.w}~;ƛ< -ςrxtThqB. =|Պ$$F)8jNMS:93c\u/amڸC!I"8A;(Z'#ɖK0;ͭ'NUV 4 n{?^ߥ#&&- m=lO|a#Eb7FZ=_W+)D#r?:xUކynu'q͠+}gzn R_c$xF S27ӆ״Swt9RYs_ݦ~* 1piy͑慣-Tl5GpT2 dR/Qv; QB:1! ;&L诞{24]F4 -`9g Z1ʘ@<>YG 5@8 8⻹^$_ާ:L@1GfA\iр4S"!-52Z}Dʺ.Ō, P 62Fi=j* Ʃv37a՟,265:e6ZFazE*]m/l=T..E_3ՖF0Ex^nZ^R:*rg$HoVLP^OL. )4Wi޹$(|w =M˥r[YA{kh;V.u+sgѴ/]mD:/**&'E^(} a=b R!oؗ|ZOKw||`Kn>SsCzDӋbrv$E"iymvD[ 5["eʷ)q~9_eDe4^] MC0mwZ\4m!)ޠg wap v0lN(IZ vAkw0Um&>RUbLFCLO>y!e&w2#N>d5.F:wP317iͧ͵+cahZf'@)JPiG~d,2/Z^&Vස H|!8qbhH_FC}lԤRT#'x }Eˋ#;U 4|a]u>G 3Tof@In#ޚ{<}{_o/1'b]̻{td?=p-,Ҍ&%6׿)}Z@~3䲵_Wb=LmvÕ+ CDVq mn 9-6X?_nZnmAHE.#1&nWnrU02#s{H$QvaAg9XŅ9L@hZXBW>w?sTBbyvOUM02n:RP<6^3WKǻ?+)PnG[&Zİ*ʋQjn}[:tτ74 S@J4|I[vti:W<^s1SҩB<tCFC3۶'Q!Lܙ}FBu~WҵFF23ǁdr5m=j^4( Q:8]=Aa{ ?Q#fzj]?u!BY=Uѐųꠂ'(yن@+Q-W5=t+}dS'Г*C2tXeAOCvCfJ0N(PqG8Ȳŝͨ9ӷb)›A]qIxk=&SL[Hvԇ_<JCHQ\E*г6ʌ;R\ lNI.-ː0|Lw|^GÖ! :jG7uCn0d"0ج7^W< Bի{v$B(վ1CIG:#ڕ%YOx1wxz%Y"A"}#vPcA̘ Q-jS>oZ;OϬȵ}vN, J7(MA8F8Nsogm`g;5 u oy|-_g[{So% 9 2A+ ۓ(5M+=H5}նVWO%{rFb ¹@S]~̊5˜Ú5[ ((#n &63>c{D#Z;onx!#-j7$$QH٩ Hż}fu6&~ #h\__7~þ n@گ(=GAF^s>Oj7jsLH ƐM,1qϣ= OR,v:L|%9<7@3Q>Ec +\V}R-uXEO#?upퟠ ok}ufBTbqٻ*'k*(;;W2-5Sv_\05an,ʙP(;NJHr4;|S Row.:Ə^%4%h7\2o,7K9MvLp%LCC}9a vЄ ;^Tew*Gh;1QK` 1pn(U1r 4wJ`^}1F޴Cw t +[CeOodWjlpRk:23:;&f fXm X{pY`PqS A}%֛mjTP}fܭu[9Z2\ԴADsLgvitk' ]Ѱ[u5@u& OO=cu:.7KEzG 2PQ:I7UY6NMkE=uxttdz]lDʦ|.q Emoi+Qe>ৄ;-NH]| B~^  = N#W')t(t/WI/rң'QB5]6BK,ޮ#`Х|Gbl`B;9krB;`T|}$t続JAD%P+p E%,jj!DƧrA ef鮃riIk e0l'lf@¾ <V'j\vܕ4\Rx 0P/ZuKҼ/e#{!r#q£{"؉Fo<_Ѓg/o_]{Ru'T*/Ԣ)'Ux~Xm}Z %&e+a*t y667n4oE^1tOSXi7ی$.H~d`bT)Y "gޤ.yu) ]!Oeʰ3WÖ٣>rTW;R2-(!Ÿc<\g89Cl D¾xGu 6=Xyy9Uz zDmCI2oĮO~pKz尩B`TNü wRR5Fɿ&ݑ._Yy(.DAϱ"s#M9vRt`Yn9;諯t"ZULR ӞMU:Gls:e%O 7)kO9rZm `)?z!y &w1 )︖n]ZVdCzÃ>ϙ7tΜύ,Os8@=dҎBNJ:W:6FC3`-t !:^ D7|[8ނ*CA0O[&JZx" Mh԰bA5d\P~'Ii0 ߼oԅ؂ӯ[PфA+$YNߝM 7a7NhFz4F]|nJj;W @:WK,5 SvB!۵u^yK2Etl $,bJ6Q\o$q{ i<+/x2E]ZL>G@Y` f`N%hfQE]^ZH@*S?NK/%a\ 1MOه 2OdIƸkmM o7{P(YKD'\l5JfiVZYyΗa9YC[n`_Eİg!(YVr B&V~7a"^+kE|h5FR"PHîg ۡe_ɯ 6u=fE $YӢ8m(#mv?0y{[$i ժTCwr~3˻*O>.0fq{ 0c%M2=cD""\YA(d~Tdʳ3k3VR?g+ňN/LzdqE7ƻ?y0:W9;RuJ+v]rř)ʤ@Wۇle$9<LayœS9gKwU?Wt`M|q8=3ѱ*iwm%O\aLlPMز8gW!dLJ>hyK6ye<+ װ 6ȃV4F %UH6 |$`|A!p@44=A}o=z$C%v*Y/~B'XRϡ\@&Beq Dvוh(dVZDGcruQښj菥*lt1//gٖY4)s? .SI;ƄhrW E%xWN\yJ-|[P@0ls~1i˜5YIdh)C.wcC`OXCv`Luw/porBڒϼQ@ ].eTN )aCt\;)O LKF£Ew/#;à7Ff_K# ȾSَ&QPz>M&=Jbvwݍ>}~#,$gkJA%vXyXX&WCYBnn ?',8k_ДҶWz7&z'oYfbtL(8ޠAv}!eJj#ݾב!5=nRuMK ֟¹ǮWJwytē.|sZ;y߸t2\aE*=XcOb Sbـ9Z2Ce7(nd)$Crwvւ'j"ZՂM{]o) ϗŻYb4"X=xA#Vt~<+ x nC- b%w'3jT=4;C Kx @y^K<7tM#KkA']`:K!"i$ V,Ou^ l}_iq]ϰ)|ߞER-4"ɤ%P)r3dtaw+J߷=VX|K xno&3-_d'3yMuwJq?ɛb6َCx|w|6a!SۺM")f+S1oi-E Աt)Z }fdWMYWvYO$kh"ޖ 1-3RQA4Q4FXcID;0oB '.ӉޤЗ4?E5f..0&s4N sD_l#w׺\uL)3U8$`l[4k:[90*XV()up%SpQFj[bMP[mPwl l%$Viv\k!t2ayG9dDvPկh5td@3;`>K0G>b#F-+6fpߒqzQ"}?,=xek/}0 \t0GMS8ָ:j76ljp-o8{`[O ']8F =CD 3f) Y{7k/cc[%*mBcmYwķ yr2F{fHެuOUsQ1l z :SZNQ2[z>=gtOd*M;6OWֺ†o:ff ZT[8גo \nݎoqzE xh@HgX9gǑ:p +_mm~sn0^BV䝧xS4Wqx2x}hC3oeG%0\jB|I_^ Tg41Yz1M$tVN8Gr/]۳ _*Ko`bů"&% ft2WsaU$`@e]-=G4u_p5?y+#4V7q0X9]w.H cA> m9RM2h2ࠦi}uPC/j4 m>81ay?cr*δ)Z`#~ 1-}b&Jn*l8ר- Β#MuqF`3q(eէ5Eg$ôā85u@L.TY@E^M)<߃d$yi,ꃛߥx ͳYk%!УdAB%OUh$4RR0zu,؂ko&s{F<azn%5?z{p*'g$Y%G<J!$^sn*@! c>ԩE=z?=md \ֳxJ0cc'f{ӡ3ㇸ p*c~ 3Q O!t?Hh3uM%)R^a^N&H][K:FJ>O?}f $q?xog\/|+H}PW+䲼RS>^;vUTA kW% 5Fп쾶׎abgHa1WnXhEEBA,5,V7}B 񚽊c2pA.@f~ }]Mp+14$H6vVzď ,w`ݑsnܥ'LgcVasq(ί;1*Z?;B^ -OMV\|IUG{2Bױ'Ո]]{kZz.-DBܿvjdl^/Sw ~g ixO׌CF+1([1@<}[ಋ%O14'0.PŁD&ʗt]L[a񻁉+nEhA/|hbƾp 7ŏTo!8 d V8S;&,f'>*8-04h v&5h^>:(62U6*9ى~RaFO@,L+CYťx7'M`7T V2ˢ%δf-cIu1fQ-I RwqjFh1\`A"w'Plӗ"v3Iߘ#NVO>δM%\*V;EH~mH(.H,-0}1챍J"C陖ngHa~l!`)Vj$?㦚B-2wW["y#vb=AD"\-+~%޺kBs=b: -e4?:m0ovp}7Y h őpq ]]K~\< r/ľDA\L9 s7a`L-%0AI<z2xdJ*o0W3{fs H:Sg'dv#X?DN{^'XY]z+^ܣk3RO͂~񬊘E:ȖSnhXYO:fV4{"[ /jǶlCyԶZ7 õ8UQ\Mt)]=tp/ѭm6Fm;Ձ&\𪚃y.FRWf ^ώ@#MB`m2d/$֑cOoZjF3 yXѹr½$  5V98>M~qZίeN]yP=zy3QNݛ {.V#&d6I ty,@xTZq>KR'YjܬyiRh "A\vKڶڗO@! q;6 3y>L&pAopWZA^[26d%H$ dJgRM9;_ՇG14Z0mOUS40h;Â3v.V_|NKU:;g1;UN] ~mEL5(#LsZ2}gPPTJKTo*FP@jO$FgO>]#mlp1tk-KG{?UόK匒g<[g؀q}Ÿ!oȥZ FJT|hD.|so2Z^krY'6XxRag@a|T/t@7UYrhE0I& sh`@Ě ]>2is h:ʹRK~Nײ:j-m@͢+)wjBZы-xSA>5bP-x_BS:#UJcI,D1*Rfia ##QG̓sM&oNCGz},|F=* \֗4^YK:,ENbe@G7up5y,5-IOɠБ+$oX9:&3X&u*K5}nxŋꊁ=X?aZ8>!跰LP#`-YOΫFeh^BYvfwښk?Wթ1ңWPWH~I&j5O ם.8K- :R{pⷝ2Z\m?CCrt:,}Kk?^ EUodTbKφP/$(t^+Gr=j&8s`P7 *mZֈ8a…ٷ9f7=7Җsi)2[h}wR4ٶ .+e;}>0%Wm5 ׄbbg!`3|QV˸U̠ۄs x. k\:WHCḎPH|}$˵Ժ`{Y}Ys!#% =kր՚˟1@]XAr@}ITHG:a$28nX0 Oڃ({KNB@^HAF+saב/`ڣoVz+E`|&Di3;4&ҟʧg<+fѯQG)).q츐hAPkխ5ʈ/)RipC`>? p Ηc;b }Q*Scue']*3նHf⹜R]KH_WC0KGpۡpIaKEtv )`Ǡ6C Qmi웣6DΑ0{R|˼(L҆~NX80^pw5IdݳoF;lgCmdaD zs7az{"%3{6HN(~tkHC'\EZ$ڮuv_ !43;i'ۿrWmJFu;$Tx*o.3#RT]!&L -|Ԭv)Į#SGєT3%?b>fA4C= t7ֈa^;t@1/Ie,SpwC` % /j{=ϮB?L丈 ;0@عm@Ò~ 6.Tۨ6RZK2i7TNkKG06n2 ~wj8Ġz`4c㘯A 1ZJ4C'ϦJ㉽V -\MlfK1O QlHc# _-Y&]pF ?sײ0LPI[PkSV̔* TjH:[k$%HWMmX!D5Rx7P%he&oa (zzZ@Y.fۧM EK8Z3G|TbBsydDQ1F_2OU-sh!Bz֦W"COﳀ/=[^=glb[shz"27ʫfPc}{y-1tju_@2N5X#!{%'A1ImUd%{#4 B&?z'\R΍?qj,xp٭65lXsV{,hh2}mp\g{!omY2y&N^ѩ$aĂ <"Jr/]Se6>r NB]Bpb(OQF\dhT5VrhM gL( t88`li, #Tߒ+{J❊ oylΙkay%`\fE%}B]9MU: `Ұ $c> u QTW5ٜp QaLSt?a#8&ojYhSmљ,hCE uvqG97^ՌxQSmu`(;DAQHޅ;@7 nGc`=F$¥uw ԽP dy/dgUN}?qM8" }*w)blDz)jm 1myU|N0 ^N=fS#,ҞUHv11|14SA)a\جY{󱊨b+~?\l/dyxAqaY)YxM(MWlcI B 1֒_/+3-x o VA`@N|aOXݜu,,^q:#Xǹ|'e\Bڛ&5@1 kkTgkH˃\xp=(טUDgP8 xVIFIۚ ƛ CZe_\A/^$8/m;hDs JEf%</ÀV\yӴ$.జdz3&? 'A,pODㅁ6kZbF>rb"L1؜2GI1Y}yWD̻-~ 1 B0]=P:BB0֍w6Mm`屫̝i̙Q:'|r׮q$yZA3\k 0 J{Tɏ)su Wb.0'\ a<Ë_DXqI!O=VyT49ñx[\C`󝙵*8m^2Н_\Ϯt՘b7.5T^;5;[RI\^n)D, ÃxYGJB3LU)ޥ3]Wh΢qNV)5Sl!>:3O{u7Κ \&CVGv5hk*`$E:RqP_2mǭA<̢%S*0w\)|jOƄxWAw!x0p]Q\3RHA"!e.(uoJ[o5 !+1ߋo9!3ͳ?d35m&Tpm"}ԜGJdZyiO&w3vmَyNT5c+!qv?c'1^6DNzNV9dl(*>3}^_rr״%8;qwͿINϤjW(TsfY槳N<x }>%HIFX#Ϥh?֢]yMOXhhD`i @\[ϴ pBk:e ĺϗ@}k_%3NGe*\`AI?vo‚æj>V'f<9-w}VheM 2&CIDOQ&,k pOO5G-3l-[c[mH4֞N!s XzG ׯ>"Rhq: G_͈x.=P&yImh| jk{S[%611>>BT/ /ֵp>`%baF( oer &Nxw\Yn0$bJB>Tiku^Š"\~gׁMF}F~#T+M. -\/WWv0 OW afQB^yT $>(ObbմHIbPMѽTriS\k%-h"䰤{sViP %z m20߰ )#g m1/vǛ:Z@kOx &0&q'TlhP<~C/}OI/D4n\2˾'9Z3FhD`}cY8 !̦275~ƮD-$տ/|;t@utcI+?Dܪ`CUGe9,]9HlceH+Buvl]'51;>ƒ|J IzvB@2GrS.QZ6>?aN(KE27OWirMe6I9㘎80Ћ&Jt49~:K  `|F/c:oz}b.,l2VҖQ˶{Z-3qB^uGA}@_ !"2) ͲjOd:3}v7l p=~eXhŮN |7j\{2u :ڂdݡ/iע铮M}l3iK7E2}RRɃli#RVyF[6oy֥7-1G}gE[OD&ͪ=xkVw+$Ty,aK$~. _~\"Z@6na@nf,M%mJT2pH׃:S4I|$FBvwx< ΂:3 SIj RC% ^v{GceGA.#LTF`TH6׆P9g&;sEJ냶z/}c"~{Ck \jdO]k/kR§:`lU_,gicTO1g5$7= *`xTpoP6Pv1q#>Ḛdy9DkHW]S_8 ygD`D^c|ʝ2(#8/=D9;Q,X^(f-|7V04J?BjtYߦ 4d^)'h5f2?LJ=bGY뷙E>]n=]*g|: hTWH(+Zy$#}Zn%9d0B\#[|*ݺChm+Q;Wscjkj4BEJpc=~j1N_lwLYrb)PVSruetM`oTUvrX 7T^#@*zV1 1k Xyso1 Kz$uKrOnLmˤdWPIr7Tjp`/ђ:|S1J>·-藰G mlLr-Ӕ -;k6uDh9YZ~@} (1X Ρ,<7xƚ!NCjRSgiohY~E,6%TTj+]Pqo1Df(LEԴFu*(D <ϣ;$Gkf~V [IC8Mo.ߦmv1Z=$]׌U}hn?^I A;V! hi)@n _,dBJGb/!Ř/-@ "_fJT^#vKIU$r+NLلP@|UO^[V@dq=Kjh޻뿔?/x, :P`4{iGuWrhW`R];W=Y[eQcJ_1`CfX.0 vI< 4ŅTf*>r^[x,BMu srh!:Q58 8뗧{SA%I2I7աeqlIJ~|j $n<"0pOz:Zhwrp 17;s),7;r/P\nRFAVk'ɌEm%ˬTJѦ*(ݺʰmfvfriޢB\1q !K9f>aVuDN^"IBG3:Lw\؅CĉMAl GOθBlAce;>e90(@:JK7 ^w9S/uxG8.BFjIjgUL!( ֫1[O#p2'q'4/ ~@6Al"h6Ϳ3D" ck&Z?d?Cmxf4>R ICDi$dK֌2Ј@CNT .k8tk6,!C1>8"=s(QDn@U ߏn?|VVXne E{/stDlOi39iOIg]脎g7+o+yJ)`lR~r6F:73d\Q7xv?_͐ dۦQTuQGQ{ u梞kTycon(]xCWSs6ضox̯?DG_Ⱦ6* 2eeh1ّ2@YN(&8zSKv%o#C\'"dI(@d W(Y9g 1F%"EᆈU*5Tt=01aѱl4?KV3c ٠ܱ;f-Ѓ_X-S" \ HZD _mcͲBg'a˅ǽx>&ILE؜DG):V<%id´Fb+j1j"SSGGzkO!9I]ZX59<%cȄoH Nikz]o)2<f#SG} o*۸2DM4t,@f}U:٨Oj8Amhn1%33H+Y֚><8, %'Azh.~PUޖ^Z!(8*QpSZqyb ϩ^{_Z`$)azf>%rs!0E_Zӑ"kC$zFOL=wӫ0]&nX>qގw H|QG_2e=U=:w§ eS WІng楇n=9qE d+cDJ]حl4eav}U,9Ϗ;ck 4EpFU[;sw>{O`ldmcjSItZ)Jwɝ{QiFjOf"Jί8~<Kt6%Fd٪W )џ;'9YBt;}ȖBC.J-pl&A`*g/tfe1[䛎mLT1GJ;^7pyG?u`JuC廝ISgL<&y"!n7syŽ1k %9Y!4$>\ʆW+y!u4]t5:B;xB7O7i\,3^-S$=Z+`=n f~H3z.^X ^]ֽh ; *C >nlG7neIXr,4!Pnb1|{ͅiqgl:ӊg  @q󄜛&`ojюՁfpJ[@+НkNYo3ɟؿ/ U= H*DPG51X3ϴ%]]x&NMZɬXj@ ABIH!#usUC=-$J9׻,kށ|Ʋq 9dN\7My)%bejUٲv%%TLDp}" m`Ԫ捞_on`e gv\dװuJXZ Iqό^K$;arYph ̟_>"cc׫^}^ܩ}g {r>TiF JKK 0#\ o\k>xfbEN)!F5b /&pJ\=mhP$ 2G. J-i3Y|Qc+cZhKIVWcQ'OUn1ɼV;LoQ'5lZ+ڜCe~UPT2 C{}Nz<[ 5(As$w,FW77\m}G#ȅenS])m#.D 4dRpg#D)dD;me'3W<9GrvFV. 9rl!u]HUv*fcd "K:xA[IZ#\ҩ8P ;ge`A"p>y3NҖGzxV^kV&> Zpgc%_R~)6Fzc;TZIvDpϲ%ָSgV :g0DW|SmUu\R׹bq\ZuJm$WMö[ku`7;iuD=b~ -PXmvF%&]&);1 }i%ӠΡHZgImk"ki~pnmUjz!PM6|bz#iD\νC{_ވ_鲚 XKq5挶TcK <8"#Ur]RJ|3tO8肒>5ilbKZ4 }yӄ0B7bE!?U뷡%XV;J PI704t?{@ɢ,}}>XYmYx>BlBf+p Ru%Vd#]!d.O^#g4Q{ hx7%8=ߣ,qy56L\o}m _h>{x:|p$Hnѓ,8\ꝩDoRY[5i\e3Qj-P1U@#ͣ 3|T/x>άE>h1{"/Ich Ʈ7#Iםi/Kɷ*@#1i3BL~^rT1T[J+ MY|8'W hAY%.;8I`X!ʶ̨imWP8yDž堸fp2_vnN֊"h;yXbᖺOaSni-OWuYU]_u8S!#Tdh,AC\pfȩvrB?#EOs{ dy@0 ,e<_f{ូ(:ߥMH㠞qⰧweduN-%w;O }AwWeߩ"`_h>r7dy[]ʦ{16ϐ7?i>0[Zkp`d'ˊcK-Xi R]$"oȦygnDI~JUMv%zMi!EwCFg:#UE(hHeKmqiu0\Io}ek] x=ģH f;řkObT獯(~Ck(ɥMEvDyCY mˎHl78BAU<;콁t_QT1uUՇ QtZ~>洵1YiV>\ܧ00HG-U:zS*4QNⱪHV%](K1Z z$ͨ@\s;G6׹!Bm"2CAyYfapig*}SM(b8q+24dl$ nq%:꫆*oe;58WaNcꃼoɺwI13s}'N:}|f%po^Nqaj#EJcJC(*ג|gLݺ<Ұpߡf8cq2L(Gw jՇ5m#egTt-f4d ya"+%H<ټɬ 6DC"! R],Oa{ & (n6 ˳hc΅b$p,pF~>L `^]9&"\o}b_z ) bjBԨ )/ۧr~FQ`3bWAa wX.yeW̎h.]B$WԊ^iҨ6Wlb.O]1&v$<ic0Add7CF+-'>!ܲ*_?5t4?ٷ1ulC]pOi/ a F3e+W|PkMVFF9INlZxhX>kRD@D2?uT(4?Lo-r'Jy$/*3A \).iH7d 8j,{KjM϶y{7GtOA ^R͠E~`݌n:zO]rs_9ީJ 3E$V}Y]Tx!U|Ӭ]h 3T`&1fȘhMimN*;(-zHܑn}`՛죖uM}/{m *O԰+[,\/7vz5\ynFvJtK7ȗ; ܂i]gzEqq)$Zfg ͉6uvk))pʠVllS׊]8ʩM]#Fc&t]#G8`s0', fasamڲ*O U577p9.MzA/PLpJ0ld7)tX?R d7؅Q=:㙦h";!wmvKU}SEPj@ L )3 oeˇ<_k3ۣkhg> iŀRƔ/cTQVHo{%&(h򳔡0G\l( i_jGgh bI- 1u7xި?ʗ*:2eotƎ %NNawѾd^'~L#ݣL!V|PbF2q Wv؛sKk1ƥI8(4|lyXκԧKR$7i{ZV҄[PVb<Ra&Xz4eC U;/У45;j~l$:) g\{KPeۈ"%Kq Jc}lKXORJjr*-#p'sZ&B̀js"yxEd|Jݨ+3U-KGdo ~نdm{ d0P+BE%q_O9\߭lʁ]g_)G<ݐPk|ܢS=v2@ ߚ[YGOEJ6\%ӌ=cH'd?A\<CEB.J#k$ \.[ O!O쐮[{Ne0S(ZCZ?ԀkJ][HAK0`ݷ5F k?,y:m%WW6$Gkb C7EUXHAZMQ AE%Cb Ot$fMqz hS i<@mBDo2ˤHOyEHK倶,(:4qdQ*yA%{U6()CHEu AAE-j q.}BoxM(3σnXɶocq?͒l5UtPB=Ҍל<Ų̎+LU0d6\'KCj܁4[}|G1Qsbig$vf[yC0yJZuQeqTuk XMhוKZERʻ$p K3'%Hy[!o^J㢇rpDkZ{}Y w~` @7Ӈz= 7| iKo+A$zǨYmy[$dSG?FTSi}[QawT!t^)2pB)ϭ;;k‹ Dp%;QpXiuvf}"9T 94q:>sfeg:и;gk^b|~lOR\<<'6>]x9@;H- {O{_y3{h*DjPQW&whYx^+<9Z?G5.lÔ2{q 7}eIcr53d2\[ﳌ&=0JVIZ¨>-lZo){i :~_x!U[+|𪨮뫷-z ¥ż"\{ph o,ȕi`y{r^֒00]QK3RnHI2!}yfӣ^|lOJF^, 7/ %{{Dd"zQ1z$@kQiF?ByZqdcMTNڧo">Ru/bY"M> >“%!x$mR89k耐..M#A!xZ1C+E9t2{TڛB_<@3Zgy]QqŠ-,M7^jBL h8S$ wxv Ay2&F) R];``pSۃȶ`hQY.<*eVxw݅UJ^f{sp:^՘4?5kȠcȅ#QsN-l%ݏ kRګװ #,5=~vM+o78I#[0/7vvcWxd Jh)46j;Smt&ϧOdP~wQM]|^_"ΏknQrSM̑K;mK;ZIy#"5OyOb'(7YKmv0Piԏmh>ő$/RFñߓsB2WrNWtψ{xX;tf`X+Z5"4F!Tut1vA(=C3oWҺr n ^BMqA@Qˊ-9 ?vf]I/:SaHA~mg:yjht /_DSEd 9>t2|UzҔ 5;p5f?bJܚ R _ľP6d"1jE&H/%+{5C߳A~fO=SJ"Tr j:#HVQ{_z =QrFa!9/MlcH"Rv--N1~c--).&< 5;Od\^')_SD,wR2C)o(-.ɨ1q`\?T#qgf;AOӌ۵ 22&kdf8aTDg4NoV|6 [.Lxo5e2WçQWaz/#w`}Ӷ,UTO>6`bU- {q Ӡ շz{u5jcɶl Zy6&cE;_/:SWL姥;вUE*F] 6\,`agwzS3,\8NiUȊ,m,`PrjA_#X*53d@żoG 7ڎv#gp 8AX+c1t~7UW@MY0/b&UɶTVX9q˗/sy j)v492ѩZUwhQ\}VߊwH'D%Gd;+#*paq_DySN{wRa u[`ksth"?jf9 r&g\mzc<ǔnܛ11P}aff6[[UzV'EfA}u J JဲK"rR+joK>:-{Y5$M߀lE&ID BV*xغ1ڨQ 9īv:@R}ԗ(-QGl&B!IΦqgnTۀBUE>QJ9ƍkG|wOzkFO#+ڈYxۭzXo?<"1narTsyU$C %,:BVEKeNBi J@!럮rZLNƂכ_) /)7=?#4*({ξG1I;М2Mkj ^ycqzŬXe}V2eɉ>\6 mJkSw<ŀC,8Kzp;W:N!  \Wx"K-ROxȾg49S`^: Q>zEe`s`\G!`h Q!}9"+fuuV:ӫb7%r _a}1^6,u[< o(mS_Ukk"+0;UYa.p}1;*|v@7 E>-8s1iH).y@O7.^Ȯ8^w@d0T=ޚ hlcg2L|?SH:~FDrQvbkmfMfECer{x`k˯nf:x"k\O9Su -AȜd鯵,pTL_ qG?ĉ> Nk?ᷡ#af@ 1~ob7O/"giMH!̖"TXAw@:m1;'Wt7Hy AYc'&! Ua/s'n~oj.b<:)*[Ȭ F\>_:n >\=OKz,K !g{)(bJ:J@C7f $I ؿ9E+:`/Tѓ u3,"*V1Ҩk?Y )*1(QL ȇ}C}$?.=p PeP"jn. ~$G&|Ob#)y /'\5S,K?w釙Ü֐K}Y̶C^(\ bot3m4;VmjU,?aԛU8Ejw/I_c,ap*o 4A|Z&jl--*XrϿŨMz|Q7G +>a7 sIga~Bŧm &uC?#Eiy{4knbٱBkbŌl(oALze 56 iޱOWR2/z<,t j氽5>x#ڻK aXvy_罹PJGK-^%$/aHx S4jx5Tޛ54f ,n)h,+~F?#B T~zC$px0!]{wGg- n%TLYB9dWT ]DOTPU[ZQ?[1M'sz3t^+@+Jd-g!E|H&a [i`a͝%ϰ)%On>rG~bGP̀ aA"@T  )8یJJLq{3Do|C )EA@g,vF*aOTAV'wEE-˹}1D# (_@K!Ty,k~+̉a5iWw;ht{C1TQ?j W#TWg00h.:dàMFv' C=U'#j5u* 7> fƜ.2Stste'<բ (=L\QX}YkkCO2'q)_KR $ fQי?DZxi'ux%_f8# !!Qv4q  fQ$ܷCh!'Lh̕QM2~::L4{uɀ:As1 ) Y(qfS/YT8d"Z-E#$l?1i GhC=%nXKE[Z>Q QWہf9G?BY#]uڙ't0Qe;'scpPJS5vx>o*=a 1&А2\ C S"qθTt׈*wanCO?ּxt#!܈Ɍ%Gh]%# PfR^ߧuh U˲.Q]0US;ISh@W{,tm_!jw5ʅx<2x`cOB|gwp/#muڥ/qC>qE5חׇTy:IY a3ag_ (-L6Y.83_.~isl=Gm ߰.e8Y<1 ():bv T9Y7i]:z2] =A~Yxkr>Xz`&aD.2 +REbq *MJ-(& †!?O(Fye/MWpMհ2:S~ H^3 Y#ѹ+%YIAqj [N{>vƴJd-ݳ@?H_97,Bjw!|~@UXm/٢r&{z]K[[jMQሹw[ 9#<e&ԧQhX n\ޞCJlYT|$毸b=W!iܶrLPi}_]_7t%k3\HϻC,UÒ@ޢn1?Iv(4gSr[v:JriV֘4oXKoqBoGYR VV&_LRdmE(ДfyHc0f_>$Jy4 րӓR O?(/o{6 >/Md+"EAb3w1pqlN3gjA2Td[eBovXo,FCK1߆庭=hoG? 9QOhb|pImn̳%?QG\&^8do׹ρ7Zd*3q!]mR&ŋO%BKACӍh1\cȂo-"WTݴ[L2?qWOьz6w(_r6G״1CJ:K;Dљ{ mv#'[yvfT nz<ЃqI2h1ѹrJ$_7h\LbX>{ w8yM2#?E 8ii9C!҇\x~"erW0G@ZT2VH ATP f}ӚvgSAX*Sb -%H+JPzEbsK箁y+W#>1y`?O=]mZVeu]XVD z3 >~AG8xkQcQ,<2"tX/j %nZEl-yUiGsXQ};0HV񶌼Օ>ƴTA$Q3ntCQБh۫I +i0ܮb+e`f9$XMQfލ]+C[F xj%*Q%gS0zu9mۧFyfoxٔZ5(H-&$T4oF7 "nR|)])~.ִ_!qEgi6Ђ`%"f 2Y~Y'}Cv7w1'8,LE.Y̦걃JFɎEԍh QLJ|n1x R4μ-Hi3N)y dJ`o g. ZMO>B?ݚunsFYmijQJRT{A5gLde%^Fl:I pC i"wBk鑐A6x FB?[V \_Ѻ! f*qc<0x+ # 4pz#K(zMm\).XGm#qO!4_ 6+TT6޻)z1< S,*Gc&^Ve-WRDNo]O`ƭqA'*^ιL߷. Α}k8K.1&)Go?R pu"y!_]?P|t庁[>|3vV^E' F`^)O> wü56KLl.P,lb聜xȱ8ZvDq/KФHsd8]q]n4Nm}=P۳ }H;&£X]( g*BU0(0!xXf\ `.ʦ/()曙(uh@` (lፄ>2vPLZl߁5 7mX("LM !sLO.2SmQܱ% ߏS|}6LlYk,3,#^n#_Ԙ:rqPp1ڮ6i(ͼadfq pmCT,u%G0V󽉂]pv#TzqjV+}M zyfC7-#j{.EVF4!n"awa ynGZZ/-J7[p;tL",p:K%m@fw^e! 8ΥـE/+`8YD=&cu ~ rTIZrLc[~G*21OY .p0>X"?BY]ߘJPPC k0s<kE 6ؚsE?Igbq\Bi9m絁Ț=|)v%.Ѵ9ݔK^ʵ#u+ףs [SZzRz/.`%;D!v-ze4wAJ$ ;h^^ |Z܉}pMXH4o2颈-.,m|@^ߐYB`i7ȩ 7dB0\? 7(3D[M;C-0lna.O, *} қFVe F6iY"M' 54P, kB"njHPBYVBi7Ijk7LyB츒! 2.>ˡL͑(;^DZ }W476`n<#/ٯi<^a[6p=NR$#rmgQ=$׉tOm V8z`R:އWr2i"][~ ʝ.q 5C]zuŴs'm ')R\faB: WփƟƴPeT^UkH__C%څX[.pg[F_́X?9QWלkC[yQ!A1\™jz3w+Yc$?I91i汫v WCDjy}CP|X,OMkKR>-{hX2T 8[tx"l3xި%i/jמW.vJu@5\Hl݆ Kf_RR' <L2ܦ>0.umqS<_O}. cpP1NyRjI=Խ>gؼNA9&`^%L >Mtq479l!sK뇺c̣1 p~#3IŜXQ(Pa>Vr',T&D)bmb0UóK dEͮ$n.30rB7 Udm ٰ& DIni|cՅ#r膖%,Ki֙h\Xـw0]ۏ}ZOZ?2m![^˶t1EM -?,*ѥG?[75iCFԻH/UE4,`: Gt?A$cT u(%("Y)ս uC!e_D 5> ){3o'iW*b\@)MZCeVOj=48-=6Ax$QD6u\83::@PTD6&-HtO&=ీmNF@ͪn+q|#юs)-Yk§ʈ<{Bg )5(z)=[Wi.2p,XZ QD\ AJ2O]q"[eSF8*LnF:R VB m.Ý 8=GϏEe Qs zJ%!=7'cy 7XSRf\lf~NkQb!?%0*w~IN-!n&6d{f|^>])W `E|`G#ߵZQ1 p"$.lnJS;tU@/:ͤԏdc w5wQ rK['dzᓕ32gmȻ̌$,)>ì68z$O: mDO~pVX~9?>T]ۅs:fbbTH Lѿi\:"e|(`BZ=),XJ(_̫M(P6.c;OgiP E:Xԗde*pÝ eQqYpa˾~JA'UxɎq{}BP?`W 5ۢ+Z /sq=+.l#%Sm a{i!9ip4H.4aOX%ZE%KH@0b0;TCP. DiF4/d5Wt+ψ[+m2wT7n@~ ^ C_l G[,[ Y\s78 :?}OOWǎJ"x|F56k ΟQQ70ϋ c|~#Khc]:)?-8 Wx& jړ[C{E_D+ݼQ j滺ٕ6ܘ5G ,|^@z6tX yV׽>vDYdU7$$M|5?3pBKf?ԂAb "Fr۵d΢\b']wzΨD.32Ms3|Mrwt|B 92W^mP7xbE; N Kbs1ChM.7"7jwl8^O[jޅ_&0XڛB:٣VSqOAF\s8u  sp*bۿD{ZHY@ܯ eN~pS9yKgox:z]wzԦzOW[>V'S7b:[#+2*ÜH9/F|$ tݺى['^,=O>n㓦 9̪!v˟<)+L}eRTP>h[5Z2DT>C c\EXTʖy紞B.D o<&Rl ČaOVbIwt7ljG52ke~zp-Nm(ljPT6Eٍx$^<\om۶U?,?8{  w=|g|}[Oh/x"X2 2w_vi]-ǟ3!ݩ0YyxwD_WRuY%˥=KWZNwIgMA 1{*VygW[o}0ͣ]fH=VDy׈h<^exszcBd7E 4dRZZ:Ƣ2 fW0K;:4ș3:=GKR'gmF>A*;G9nްL-`^᤹1ܴ q‘4 i͟iɾr|ZnxV}tlu,v.#~$}u_.iq@(O}*͖*xdGb ء7~94-ʽ=GsD8TqɗgaI6pIVrИy1iYencAj쐍 up&fZ*|֐"rjs+Dϴ'#l*8hRSOjb|]O] .LJZ3z-CˋIz'+N5-8;:40}U&Co:/x/o[%>ΦX%:CCG6L-ʝ9U֊1G_Me`ލYd0:o?Ӆ7%vD2E(th+;Yb1kز, ZqSb=F<1JDTT< F1 }8EztRCZ/_$]‡~skKB%MVZwJeH􇚬.R?<9گq!7n p< g6fe/̸´P ^*v@9K{U{(m~b譚42meS{F0#%8eLFL5R,zA29aylɈFhXПyϼ<>1muvCK2ׅ'|p6$Sm$EH^GGm bnB?|r*Cb?3ɰ3>kB p׎ ׆ԝ07[x%u7(q 1CH@˺|Rpk 숀߳Xڧ-\D嬠j_\GҊQ :'Tijۀ//ܢ&p-UP\sҌhGۂ3ُ?ͰGaC^0Xy,8zj֊+Ar&$# :QS(J97b9@aY@o Ҁq8#)R4EBgj,f4eA^q[4 Lfi5$+_hwK[z*֮'C9Lnֿm.iع2p+ 'iIﵖyBbV$>@@\2[w ̡;SuŀE6B {͑}٘$'CSutL^c.ڒG0$AS i^U%L`=n9VQ2o8yva ^IX*\a_?^0UIJ%]IPi(.kq^", oUe;Te4O<ʂ\#z2`dElc1~F1)$'O`j2 @JZJ4_l*1S{|a7ȥ!&=ow'öVX (57/ۆͅgLCԘDBj¹ԩ!%Lepc+KZOҭ);}L$A6Vӑm` <f뭠!_*2޸FW^MYek ?XQcd E+# ,# ;ܫ$гd l<ag("Nzbʝ$&i $,xh"fِ+$!^?!6-ȹµEh'еW_{mPOX%|^FѦnź=2}\nl(n4{TGM=^w<珵 d5q ވީ|PΊ'jɑiRح(m{ ٹ}QZC%{o)OJA)G*68ӏ*mZg^6"YUأ3āzxLH] A${П.>z;&OJa B35 B֎)Fǐ"cnPH` 7;du*]i7Ef鲖$"0]o==< P1 ̈́,[ QCbI걞m?iU[J! sZ$ +\jiA{p5B}W^ɝڸf¯(p|(8[1(',-v9lA!>cX h"ڤlq"hSfFpz;̸5- :n2ٖ&cl=jTB/`ptIjh$Y9wf`Ϳ_/1Tx] +f|Էۈ GoF_vm@o`߄=paVlb{<<$H/FݎJLR+ =UŽޢX _ITw@b뱪&]|wlhl8r DQ9,7Ŕ8(lM,P)9Fn)kR dԆvɂ,Ћ%n 9&>{T~,T)Գ![_i0%ۑdP.TU(o6tʑ MDy'W}z䶛Ys`=NlqmZ-xPFPOc(Ӗm=޴66ezelGj`4ӥ. E$x> eʝ#DG B O]y@ߊVbl$3tY?l/So"~1 3]6qxcC$Q;1!ag4CU*%2h+ڽmjK]TyV~D17Kg"!;_OqDO #AYkJc bz[vG;ub;S=R(1S6obRrRҜ"YXX0E /,6,coW*7j#~-d,$t@-Yk=G vbT]]>!m], ~i ʓi5L%4k^!,`~ZvNaT5~tS}o-ݧcfV?S`jCy-KrNsTqzbXܵBoڵaW>ȃ96?n`<޾8g@Va,s-Ŏf{31`C7735< 96;HZC׆^o,`,t =bC:Yl ZK_7)dw[zK򴟒@f#CCQ-_/tVzQ+89)Pgywz$p;P>5+NQ*}0~{਻\(_INtOnC߱Wmɻ+3ն.a~A*k y?M߲ī]C}Z#d[)ʀ2^yØ[Vey]{oAu?D\\xy߃A6=I`Xa].7a> {]s)t"=iMK@imd€WFW]q+hTfxt4f1D 2xU[L }11*L8 Gg<4_ݵ t&t$CO>ׇc.x6;gk'l&M]Cf*vS-Vܕڰbۢr2q2.͵`9*b} qkm+Η0]![jw'HTo$5B񃑘ir#>j->{Y'ro56 /]W!^+6D.*I_Lַ* 8 0&񩒩"XQjx / \7 AvwӇ*Wnc:^.`t`auh"1Gps+,FB^熂 %+@LY= ldL3lڳ@{c]J]/ 2j۫tc\(z]kq !μi_7(&%y ' 8L blzw%-1].=f̔yus3G7c4:yjbKGz^PNs>/"B,C5lL4žR}5>'V2bzkOcTa| l1IQtn+gh|Qٔ,Fעdi fcWŀܐۼ>sIзB1df302]vwr+xEen 9+(D,ñ.S!1_ˋs=/y|HQRˊ;$E|fTz`1ܿbh՘&>!7*S0{,61MSlX:32C1*<񧕑Pu?r48\X^4bR?#0Wh̚6)I +:"mzvaҬwA&R|Гв:9 aK%:í?#D+b6SFfeBC ZMװjۧFL1jfQp<%a&텿1I[\*T'iߛ)Uf|oXzK$޿启&O4!`3s}^KG,58֋s(6wL_; ikn%wf@FlMKP-N R$] OCYYx/XZG\P 4Ed$JCYk`/ӔsKs/jނiK!*$!?MRgyGwsq]ϫă཰$\2akEVW[3` Q"|V9V 889𹹪=w3Msz'T#a*^}CޚIO2)a_c=$@ux* ]'SHS}>p%ڗ~I$tOcCWIw,w 6=uWvXU7?o:z|&ɮ0Nz֩P=;?Z8>M -32ok&`@߁jaQB+x:yJ+# ϦA'T<՝[ 4FgkD+[A? լTPHGYe?)jE=S v!`.3H f>)⻜N⧫7 mpFDB Ne.|:ϭxC~Ҥn .qyyXz^g٤d&ǪՒ{Zۏ+l<6#&@7"ۯAHK=Vg._vY2Yq>8s*8LC2t="ظA8mN  ڛ=v@*E-RaN D?K\%|O+V3Kn ~Mڣ: g~&!m,L"wjN}LD% GUuoOasڰ?qEʑY`IYQqEnjH<(Bi0;ރ|y{dU(X4{"_Kc([-:H<{aqz!;e2vjB#w%9J>J~ Z'uh\~'$.qR u*\LU//s+;:y2)ط:n޸"=X,Nqp7ʲD>ϔzRT%N<̀S&jQC`2HUZw7t߳"ܟY #1a0j~s5MgނE rH>Ԅl.?&fA9+Xs 'L:7D $ ۳\K1z>U0@G@;mHִ3ݥ;wR{ `9o'pCv6䫺Bi-:eXB{2"f Pvյ$Q.$]$Ⱦ u$,<MZGDŽ|@=I!=+9:s7c IZw^_z6^, tk{ <0*x!KoL~N7OIq\ֺAfDKXrg6e܀C}%.?u?3(Dr9kxYݾl's(L:kլe~#LysغtJݛUj 8$BHoqsô`H,Sɯ|;u?]-| .z Ӥ ڏQtft4l36`Ew7Bǟ8+ggw~2_!ۦrr!1#8uLzUqWM.h-f ̈́"=m89̏XWsBH*UVix$wS1fYXqIv|R@/EnVWH\54ԮMi8zu o$#| @̓ݤS5Fzi$bnw (eO_ϖz/KM:?.+HA6 /G<#nx: \ x4׭,~5g&"[mA"+@񦰪{uDCB ;ƕds"qn\䤫RqrWTS$WPD0w+14ܗɈ(a h^نOĝI'>Px]Zq ơ4@xXӯT=׵Z_:T3tc# N s> sO;<+U"Q60,6 4jZ [* gvi]Obhw+;]d\U>x(gg4Wf6Fm$ɡGj<=vOEDDgg6&g/ &NNf{"Z`w3[wҸ:N_  &F{~ A_{Ieb at+=ǻ7P2]JϿj ]f^tƐ& g|&3agm;xatDrSlG"B*GKd,r9)Hh%ץAFz_܋2Cd  53A>0h$@($y sӼi$Ov:?n+$^Rq]=@6&k 1TO~3p%5JRZ t>rR66c#evS f@qRki{6q8fúi$@?7Z{=G2,i1y?7k,[xS\T佷fֲR8>y&q+ٵ\w zϹ_E.dixÑXrl|-CJpf3]2YR(hF,ysiΞe V?5f,W#<_}$)ADz%Oy* GN4Ȳ,Uܱ<]Տb[PLjp'6B83s%;GΆQF778v3W !,k')u۲7MI;]z1X1,R{ZBjaq-q){:MF@K)~&毓l)dd߫E/4T` nA4>88?ȁ(QF^Z"RT戆t>2%e_ z ^e_5#r=NP>09]`+ɪ=88{W]RF*$4asLF" ΑI qukTc=6'hIt2Yx~um1bH| @]RJCk~ݎ,(DBmiFެM 3&oUPr/hhrmyCRL_')"ytt~ǒ.-T}[v,(Z( 㯧|Q@}6^=7y('{L 242ߥU P3 P4z?o(=L34@9is9F ED33A0~.9r>q~[S%GJŀGIEyPg~ɊDR^uouz3u%Z`ULm'],gRY!- B)`FlmF^1iUUw;">dOz:hz(7& (/x9cV8i>Dgo=6A%fa+~V[O2ލD('9[Z aT;25fEɜBchQ]dKϕu S 80d'>DY>l]E@ҬPx)-9f-;Juu!GF-݋yBp?Cn{LH'n2φ$L36Skoȵ2ރ&H CN=)u >Hxfq⃰d}>B9e.8r" 5Ƅ@\{_#H "tZ`~纋Q  l?z E!rqurƠHv`ԂB8j;F?TXɂ=_=j\,Ob|מEߨQ* FIɸo-i[i%?ޤpkG[VWDQ»Wהmh٘Lyf|b͊c𵂚 o5BUo.G6[ Փ5K@q@(j ٫cAճi|(:'χ}Ld gms0w7sF܁ToରGV=@i5=4s֜Wtyh#iJȇq60U%Y.} FP'brJ_q]J~UN(|ԹڀT@wa^0:UV|?\:H2tre yܑ${=5O$:u8)tuSXy>ghvCq`Z1)`P\;(gC8,L~i~FL݂Nnb q < ?A1\Ƿ4= n\YL6z-kmkqc8 eBkG/Ks0wG#jwJ}=dk(B}a"sYUS)U4Ԉ-x~g\mv Üm|?#wh흍ddHp~,J3Ⱦ@wDl߀34CсTWe XmGKXBh/&#Gb3*pJ8kj/Em|59YR FN{TѩpG",ʽ< ] PƛZa-`K;4i"GAN63Z7ޛļHe $̕}XہXR$\Țӗ˫oX4ײݏiy%a v,YgXI{n^`ٓ4 peSC[1Z" {D ɝ 1l :8s>1#pdA} gqe%"u@V^$ۤ&1v.ZlOQ`4aET8cd^n)`v(YΫ_Sv167EItJf5+4]i]wūZe>UoNK ; T\|\$ĶD65C9@t cjhq#"YXBҬo':\YE8299"7Sxuqt #VRs;<3X:V\KS{*)%h  7VZҷi풀\ Vz‚ʔuRegъ]栃ɹD58;d\3CJqQ`nAYM#|yE;tEk"ӳ$槡ɨ &X\f݉A ~7LGdd+h@FnF [*.R>vX9v??~?qLO4˶?Gjsw핢b;˹ ؒ~MM#um(:JCm|GyV7B8Ny6B.jBmYYLx\Fխ)"L}v)Sz0$-rVqr{CeЁc%B\"^=*]};v|^^򼔧鸀"Cm) SB X}l+icFm:Px!?[〟,`^`?Ab},~Tߏׯ~;M$3ElW#P!XԸ`8nnt )0 طb^L0!CPґwy0i7~" `v_{-qR0&Bɖ|MOk ¼0'iة  ˒XNhAR*5\k>0l5ChL1IEQт& /Ơ̏G5ɧ~-wJOu߯)Ιw7 XϚ1#嗁_O;%?:&33{zl' :/v7-5ae.}SmAhL0@ CnU .b+( ָ` {/AN :.qFAس,ﮕ?nPZ%fuMN4qG32Uℤ+JVAR8>ɩLbQ?{E2z\`j~ YU9fec^ƈyjy_]ѦyWo\E4NIK$(7r%䉪LJ-`\U<_op62G[_R)ئ:^7iƪVz!*3C-75U8V}p&.̑H e90=Ez,59˥^ڣvɤ>P;Xث>ȄD `2Zr 0-MpͿZ*) %?sexS)rؠk[ޡ&ꑷpYt8^fmF Đx%Q2 ڔj]za~cRr`jXQuۤ3'%C {l>h hN7,6cgY2+G_w # 2  %modzanNJ 6JSZ)CnΡ Wk{>w65 XKs~)+YBx4>*qII]`d@YQ5İh _\,].bX 4cCDNRw0f)ʩە03x/K&` X˳Ϛ5!C?:8Ȉ3ǟ)y0N2ģZntARc4{z߫8<[BǾ/PySOS-+vj4f\ǼUi(_N(8_"2Ehԑ:rG1xBw8m!G),[IUsuTĸ8\25L u [Ɛ4cVӉwpR.ǗЦFe_;M6NX ۹<:x:[?gь O* ?BT)"dԁq逜p3zR V8=%hwW5h{Q֑:IiiǿUPzX|i؏J2!VYfA Ia Jv=Qa\"VҢPy7j{v4t l=O"{[=ģOBAc`V#οݲ7:S_כhѫ/4Vܚ\`l*S{!B%EzӟóIy?3'<̈J6C6=v=UVߺ0l}0M Hgh|1EA}Gn!'`s!3zs,t,|6juĂPܚ=@وlgHQ+UHcZOv9B[_)-kj+ Vk|%&˅ԐG6p_^+eHYyln wcנBßkʭ)VM$W@baފL,jmtV-O,cc%f> BW0Sĵ#BzZ^SdE[@Vuڬ'b&%稀~8޺a_4qX]jO:_OroCb?ZIu5C2:JOQ:!ogH -~aoڋ̠V}ed[2%QH(|ܻG] Ȟ#A CLI,#FdL{xm”ÈeAdHX ddicu%ceNP͟ 9ZTWkFG9gȀ(OwoJ_ۭԴ0_|`.DGE{2֛ #04j1F wqVW@W;eJS .,t1Y!S,E%o"~7߽njY/̢ T%u>VE1ð|BFj73A}!^!4Vr}˯uLY#[i兒&Ƙ^<-F&SWt$3̉E8?ey 639 A6Z{BÊZ/~ۭa8<1WH>hb:~=_ʼ.)]?*Ĭƞzdx*0M }Xᇆp0o,!v J{ Y\NnWnh; _Hj#GDC܄mm,uPQTI֠#=ji5(-dfv, B'jN,LFj I*^Wz}zV8M. +I*BDa[%ґvŽ؃ݞ&F*Φͷ=lфWBM&z0>@T9i5J\{i/x{J!#/!?)5`ψ;n9Aٷ\A6c]*YJ>ze,Ւ|wU{";:!u\PI"K% d\ R1[X]P$NSNn9`Dҫ Wߔ8MeÐҧų(r"![ZՑ~FARqCec'beot9Z?*CϳpdPugi6Yf.^K\!?F&jFIQ LPܖ㪡.aBS:q/ףxrkVJ r]p,9D*FLݨEQSR c6_2Z6}wQG/0\0/Ố#_߆j Sa@ɝ{È0$2vmd>Hro-oMFŒ?092!D(˹4>J]Aޝ-9656bwr8()ƒeGa 1 zDhNeľZI9Z(u]ZMm 8!hi0?A8A{2ӄdž;˟PFZbR_þ 6ks ._:էE`=g9|Y}Xy3S G>S#͊ Lji0 >c`w5O;5쒰2}! ˛;uߨ1 }Zy 4_0Ů^{m%L=<MSFus) nI\D eYQl"^M{1!̪.b[Ky:[=)!jpCgwJ

X԰uF­ ,I7ΰME}~V'=\b4; wY,Vgtwn2Mhټ[#KDpyp !c2RDE0ds7>#W(kz79:Fҏ^EODY͜`%4Qyk>~#VU g$.70{}l([YCE7U! )A sRFNjj74vbr=&=[dlQ޵$^gnb4P`Ԭ%r[1%X /Ab{VLuYPGGC|Ό]oF(ȠeF'OumC_`K:sVE[w\ lvkh#ڲkza7Rihg=yYbo+' ܺ務k_ϷlƋ)V||Qk&@[  ݘszu[uAÕR&]xX\v4IA6Z15F/x# \íTf1&藐C_ bʫnjFƻΞ4ܘeт;X ˋ&_ƚaP($1'Tmkfvϒ-c'GL| 5ᬷ/Y:tqXR5gJH "I9*;ȐYR>J]_' N \h}|M9;#^ZГF/@ ]7d%F!ʖ3=A]u/ ǺС#yYh?(G8uB eZQ(^c@Sh!$s_v sppN71eQXz#x>ؑMgrA p5o-qeF64CN;'Ƅ//B30G+΄nRepEq[p8|ԄM\m14Fz- 3JЮc#73C%/P*w\ff(?"Cbڹ\Xv>{QMu ~a{ksfժ `%ժy XqH&1݅Ab>ۊX5(`cd1@lBPwcΈSa(-XYi¤xX\XyMGM#"~6r]OVcsZg"cms(8u*A\.% SY#v8!삮%s&p \bjʔ!}!+G*jh}P"%7 ^4ery/zw_^ j#(CR:=N~x<]I_0y3QTVo:NGӥg\P$~=}P2 9h|? pεVP 1ϗ:#7sCYhb3uǛ'v(CAZW>HaLt/pyg0^b '0hR2P:冬v<`A W>tmWfrV=$2šTp=OZ2itxsK(ripfyЖg8c+wF~ݸo;]\7#;+(fY /jT\~21ys37- JqNB5o ۲-u*(pL^a{(Ot}"4y5g֯d"d+`]] ύ-0O[]*sخikTx:x+"+qH7n⽨Bo8*N uRUk#8Ʉ}ЏվHp2$3R$I?j̳o"p"g{ >(uJF{UB6詿3F rňpjw#UYPtM(&I^XЁD{g5dlTWi,= Q(nr:7ѿ6{kΪCuht h@ԻQ&0&hF^ NZ?N~L Z$i"Q) PhUSؤy0n~ ŵ-a ab1Ҡ{}XA y'A" k +M\.1b?yT:; $v(͗>ŵ4UF\H3Uup/÷waK$].zURFz2c>2md>r" Aw9BY afOfiZbdao^m_ GEJ(&_/F0ݲ [,-Ś|}0iY3Ä0jp7Ƿ2^~ a6/ݡvxB|wZ,EPsqZXX5n}A 073rXsN͖䣹@6 h-~A)t>0ѲL(+\Ko 2N}:y/Nc?ɟ'S3[˦X{N.j+vVA}VNJ;CRDx50|f4 k&3YbX [;Hԥk!a"&Xh]4~0Ҋ  HV m`σWb;xʨuxqp)rv@Z`c%mٕ؅Zzٸ: Yʿo /iTb;dG U8߃j0U I|,4/ pQFO%A %`Qϧy_#婨xrNc;".3p=MB1ZM )6ڷYI@AOsxF0NH$HArׇZ9\ ]`Amq\t}UTKnfZg.{mI۰  kyB٬;=%xYE!?E̝% `uO!Jڵ9򨋀jZH+pUey'o"se-F)U5>Z= JIKϕКoLr)M2EYO5dD(%S<d&|`:l|W~۴i?|n=]෍F5Fipi?C6`1خڟ+> cȪ{{>HJ@r:NfJٵ7Ҡ'A0v7lT[d/@$7V=B\DXȷ;)r92zBxذ?g_cJI3lE HzHLy?>SЅ>JݵBs72fE*-lKr/|JKhw5:T/]}+Ա79tB&gk"NsOpx#$Y]BnsIK!$vBSP#kca&OzBe;yX썳JH0J~z@cn ϚnӚS 1וx:)路$1Zje 4X$+"t[mɄ-.ɋ&ZUW_64}4L,&F!^4A/e'*Y8'3 +|(4E>(Q$pUX>wr6~tn [Dȓ%2IJ ,hp~s,IDKble"20~WD^]d_ݨzގҝN\|o ;S^(Rx1eɾ\Nfh 4cr {u2 +:^MC~%*+a#*CNcbXRg&:BzF6:Tw&+OzLxᘼѷKBzB+S gg2+j]pX~Nվ'sIo; 3?R"h-94Ǖ_bZ.ᜪLL)~V@ Ɗ R N׉ukWN)E2cNHEF~:O$.'.d f_w`9UI3DwkH6oSnץWY u{A$ (v@aqe ߡkLA9EW@fۊW=Wj2[!G6MCwm19?ʖ:Yֽ'm{rmS/gQ!]گT?VJ}iM2 "i<ץzC_Q1me G Q3E~&}A~ Se)/I6 _}b Qk8SVRf9m<N oqtR;kx(u vƪ@A ~aVq;[aD:r*N1r1/;0$\8 87jǎ$>hM<|-46b{~x/KI]i*P gk]YL:F?J$ 9!M+y=ryԵϻJy A?HgObP=U X'W193{daԙ=b /spQkqO_$oRv(ߑHT.;k[:{ӗ6==]cO#@LEΓA q;7xQ4љJ2ZsX vq&sܑB1?|~VH ;N+} (3a:7}P;ց/Շ ycGIo M) Ě<'_?dl䬋w})l7"~&"@ΏdVb^Pu2ϩ+5Nhg/u0g=DF!˸hYh8R0[w{SKt  vE,+O64CHWG$_Ϟ&|&'I(F$1e7U*\m}82L[޶ӳe{wxxM-T*xY7lT4>(o]k+G_-Zî$ u aYܐ?@gD=(N >쾝.G([ {U;3/5OU gްQgwٗ"dQwc;Թ !~4u 3 )=Qp,Tyg3YA|3>;36/FDC\58V3VrH䗸X](Q61 P!'O5Kwi~,@4 ȿIBͮВwrn,[ ɐNsׅb7(\AzR޺%u[OSl7HVTpB-!hٞ]TW#zZ䥾 u'#箓SL YVgA Wz=sm["AU/hR  dBA12C%Vrډ,6 rĜXHScݞ_N;p9vxwDaێ1SAZQ2li%Q27\"۝[A0RǢ_osq~&N?6f@oUM~i*Yg]/c*?\dO^(c?F0CjKA{p L(6^vpޖ `mH:Q'Nszjk{u g`8'Y :ʩ1fyָSvfƃ30< }hh'F0%Jʞ4Ga%j[RgVppsl+L]ȷԼN}{J?_ӜCV󦱖wv -*"L ʞscn4 YOI30 L>4zHysyf5 |MIH r EbxAQcY`p:C上:}\8$AL_B6bn1 mACbRG| FL~[nI)hC^\xFÅ"#fm 5E Vz3SpκQ3'0LAF^0f(Ef$ !*mYD ~[ Ѿv,3Pr&h3z998@?EW"5mxON^kc(^-ʌ !̷5͏iڎ. &;*}>B!(HjkBSo(~-Ut?MX-:rc {m5.IŶU?)EGZQ%%O]nt?)x^ca?S;yvMbP8չgLUsoFq:SWfK0%+vpPl!b 1^ڮ?:M %wKP  dkʙtS-z:t]`j8-dF]A Sj!ܿu-r+%O=:TAOls5 E<6TbW4;:#CPK4jAZp` 2 .oLSmw0e1"Pyr jndM!Y8ŜU*0Bi:2)F2?'k*iie ߷j亙I\S^'l!U&$֒fָA(&|RfU;Kb^ u1PJ@#5*c(E:\(XdΙF=BՒ I0CޡQ e>HI5lp-&ߑ|[t0 )ݻNC۶b~ڌ YZʴݵ0+^z oG*j>UU%gnIղR挧"#H?4={)<ۤqvhp)r:\ޘc5R9ߙgN~tF{u]N<#l!Hnq`}¾fz0;\WiIMzNZU;)[xUw+LX7!붝xNdʄOҨpeZ;E\?$릧[p6t;շ"k=ٙSał kK*{E'Qv7V?5o9 j@Iwz9.Y/7xLuR9 w &/;xSL`O !݊C):!s,%l4ZH\Q&zZ¬[]B=(j#deex"6iᨁ_?W<~iď_4>n2J2koo6Pys+(B `:N*MEql!~xP(&C(yz?|9sDK kp׻[Ht;<$O E>p2d#4y S;ͳHYY{#O&kؠPYYtc-L[8 Lj*n+m<r~%G5} E5 ډJܓk'&9 ̏9U[nQbS,RMݾ\vDfU*YR,;^b, ri21wyn45&ӂ&.:'n@>&->-M؃_:ŎE =O(^Fd$37գUpX-I,1<12]wA[kt ]̔Nh6Rlr0;{Vi2fP#Z5퓟Wu&"5Vte5 '+q!98&s߬EcgbcDԭjO'ht.]뵁a,57<[X~3l$Qo7|h}>$^n% 9$gxZtiH }T!9&N1F(hR8֡`O9i5Bҹ_[++u| Edy SɵJ*1J)aG%80.Dj PM4'[@cfzh,0Ɨ lPؙ$i%N=#!OH WrHIV/9Ջ|B r *_B_(w%@|gl}K9Aq[ L#{TffQ@ lLo~!ִr.Э->ˡSWmy-馘]DhH }Сkm[~ }3{SE42Vх>n80f>*^_ə*@ahuYijƤ3m]'ɓW\GM0Wgߔ"14b=L? Ǧ,T5B /#nғ6 wpބ?t#_Xt2&X0t[*#å:5,yxX ݿY~OtA1SBt uO}B/ wYhWG}6#95_<uFo6/-2lQ6@? Kޮr)hw}5I^MkeEQ//NAmB'6nKn x>RzЁƓJ>ݷGi{=y3$4$&*tIțo5P >5gP'"`Qp$Wb J'HS9#ghnnI=,ݺM$}} \^SX\?3 !Dc_E6 xFfM8eʡ:UYXF0j/_z֊*=ݥ['Sҏgv1SNֻU`,z䱴dvݕ3@p-z!C(jUlڐ3daMtYG_hsc;J/LSR'/jP 9..Ԙ,tvy*ѩ::"C2ZP:C>iSɸOIΥ"- )φ4Zm@? S`؍Lǯk,JQΟAr 6r[DOd#Q*uoz7א5bVutcUE,Qx4uiomi:W#A9!0n`L-[:O2;D;kTku5-GO,a"2ȅrhcGlC?j&OV\@9ѧ+LJ+hV}*CPdnRxJ.Y\,Nb8SJAEMxR}ߘWb33c);V(h-TRՏS:r |l0f?k(2O #ٶMӗ NmI,_;[&]PlYﯬI897@__Р>xX׶"\bv&rIsT@ΠKE'dJ;k`cՃTp P?p9Vc . -A"4p[7is 3^ -کh9feq,k+s![b _Ia{Q $*yҵ8OYiBf0Hp)*Mfܭy>Y)v]YKbCLOGontG$J=5gvdF{4^FD</>Ia&Hl V/bp:c-fjj93By\oyuqPeT5-"ur״_k .>ۗ8:ja ͸;w]ёLzN b^Oɢ[WSi,3km; _ 3Vk gZ!Ntއeݗ|eEDvEkc>2rGksouL):1"F=W6@'4~SՓFg%f۲7] uD|茢ɪ FU~ѥ'_R{PN9W;ǸQVH jbNM:)np->1Ud>n CER DmZYC\2vLcg=wb4Ǻc\Wi͐(yܫXfWLVG+b|Џvs}*PmDu졢qzɴd+ADpHT®ˤ(w]\1N2ܾRgx@?:- j| X<o)#gft7ĎaՍpn(k7Yb*yο74~@Լ7MJ>C2jSK wQrEZYXT\̓DfpYM 4R{~0jg 0; :b"B+Q!¯= otV\ X/7߬ra { :G sP@ [9Ϩc^s,\[' ?~Y+o꟠VY꒺jx7&7G)O9NUjyc} "9hmRԩt6 (ea54a8*.Sa9\tiC-s;1iDZ6-EpZU  5,;KʇSeJ2Ʉd+=K{Hp=ꨴp7wb׫`dx*/<ʽφCٲXW5vOԈע+qb5-ƍ8(q K@R)^־Hf6#a'GW${Q;wi8q:2}Ȃ1]A)SAmlFVȮW,V0;Dp'hU6x0C}aMmOM(Qӿ:Uv~cu{Q̦T~dhI#@8ĺƤH|z1`1<1PBL|еot;{ʁE}q\Yvk-R Hm,Zˀ4&]:]#\xtց Ӎv{9pgn=INi3aw3Y"GK}cn`70mv1H=kf'M I}_6}"+ʠTzp̍#[t([_Nwʒޟg_Qs+{k)˽^L槢D>VViQsw<օ A $hu.AtႯq]u/쭸7Fbc&}B-/) %>+G[/UWٰM5-^QNn;v/3S Ʋ,PX7/U_`@r7cd1FXVם|mw> c)}=85/[v+M_'w|f'$?!3NFJ",tfWY6nَbn9_ tkYK+%4Z{Pu%-)<$ć_¶)OՇXT,Ctc(6Cu ,c-Z+_sEnʃo4Md%4ƐYc"ߞ4+)Y`ycrnfy:&@&W{۱5/c BAj`i n:CLUzx.œfMBm'B[\e~KI!颋2*;IèU0pE[@e/ӊ7J-}ȉS&IzWT\'p_[,T3ڈQXb 9ց3oN$_IJVo`#|)|%T[:,ڐ rī)3H|Cb 5yotPi0).]U(9 okIH>?[PF%2H,*ToC;AjL|IW^ P}ٱϖ[!#\^AƐ̀iSjɗ2w s7Ҩ Ik&gCXtQxڊG Oɽ=Ny"0&(R<[e^Z9$غhzrh`fVyz_crNeunFBDV;l'zu=TSN|^N!?R[`hK14{)z[רHOB-6lFSs:N?4LjG_lntMd_tOb#>:Dѹbmܢx!HΥϣR]1`N>t}PZ1d-쐟\V<_ی!ɇ&fވ6 cI&ĒoLjQY(~I2# + 6ko7dOB.fg0rBp+LBi UPSސw2qk/ODKx޶$aWYb Hy:oc3&oG*AvrU7)Hmduz>D:ML^ :6gBFoXQ@_-|q?xX܃i ^J{AK/,Ki]NC Ψ57%2ԧ2nB)l#@Nvie[[qIw'W6VS x ͉Vs[]U秶VFN1G6Ş682mK`8sӣ@F6SK:Cmm+dY?a~C .<>z0ӀE@Hl[$*Eț72A,Zg VjOl7Y>I\#O&Ns*Ec6OY|a6A|ԣ4N CSw =e|@%ۨ>sߊ_s .8Vz?dW^ȼEyˀʍ[wn:. 4_T7pG6Mt};x{4 YҋKAW`ߌUGdNRP&h?ӻW3m S, <]w[ƽm0snf: >qw'(})Xn~+JpXkqB f(UA;/"LH$_oK5VTh $r ǯH9PtU8 `]@N{zIr HgQw;o]Nu LR Z2bЙ3-m!`PRtzʑ!XwUiwD%"R w|=ѝ$ع%cҎRftm#vy5lBKtCvZE B3S"4x9ֺEno0oǖ"9#^2)pSOh?D܎d(cixx.aڋ5]\AL&Fָ.Ԥ::󔈝 :_':Iz>4zO06aA9⛍M0Ww܊$*(\ؼo9;"{Akh}caeސK[9]߰~:wHN= zOݵw`QD{\UۃabӼ!_Եݢ}ڔ/`p7Mou㠻~}\$lN!6&0g59'v 5gq l=@.^FHbCOE]-KrFh yurZ>?cs; q܁ӓ9\Ƚ;^=gc q_H5kPv1%xF0VGtTT[z8tE[Jif4fUX֞/m_&_ ^KƎr+=.+HZ`d(`@Ebgv0B.ۏrx*Qbݲ'oE3c`uIzrat>4YhrӸWSihRt-{ˤE]9]Ź/170(â zN AtʯR ,n8ap5m;ߧV/{`{2r hRE>_k8:;%H}^<{ն;owz'4P LWOS{ DmzoxXG=\8c,qHc0xP AIcrBpOE*fCjN߯q kK\{,#t=u^Nff +rùpsV)Uy8O5woQZwtgػ0(3csiNkGP8й7Y@L#uIBax| ƍy g.a)1޶) ND`&aΕq _1K29<"e#f 8dfdr7F@g 5\oaPO] +z}L0SE~}ڰ"zQIS֧gK,^z.Xa 7w d4 sHS1 :gE=" .˘NŜ{K۶D*j?=Y> M wv3= gFε0wڤf2VL=^`WN%}FPPĪ`bK*_I`,[QߥYy?sd@_ Д~>xtFT,PGxA4ֿ0Ƙ,a"A1%>2xPo ē,V;%~"HJJ'BΞ;F`l^vg5䌆U[֎nXEncbo^ćKO-N 4l㮀 aGbb8i iw* /c!{0T%&we b{L0m}*\;䷎=Mzdn#3۔a>rI a&Z E ~7JPS )6_ѣizQw}o`r] GrIL Q1J-O xVVj}<+@t t҅Ylq‘)EppMp2>pGThf;_*΍M8Q~#j޸҂e:ŝKUH\*ۜڔ1#q{#SҮdcX\=p=d|A)Ym6< y R.0e R0=uHp5nkؖ Cl7!mTg{ȁrȮ<@?\+J~[ܤYv & VdZ04V#}1۵eqg"Ω9;426?\N\\ûc4>UH#)Ȣiq$"٣(+@CK­QF:?D siAŝycPhk-;|-菽o "/t fL@!:Kد$=77aY:MEdű$I\HTy52_/>gL 08`H7 d2.M̂z_Ր&su-m=+uWw:Bwd 1גzƘ2$TcTnMoE;'k|\3i͕&:-IEK^x ӟٿێDvrzE/nvBb xeǢ"$ץrܾ+= VՔQC7yfa54Rcz.*.#]qMP"l=3O'Vң[Ln^^Dϋ&zhl;qYK#h'%&5毂9ev /=sƍS,~VNAT]F4vϩBnӔDD,9*v&Р-H\ *)>>d@#0=9yP5{NSY.ڶLF_5"lNyF4qPO%v@ I7'>]Ìe9+Kmlmtfl\Jd1 J;`SJ5I%-@"BWUK 43v"? # /ʀ86cP{*ڈ{JJW/[XIT_L=u)=G_"!< kyҹ"ϴĢ+$~>ɥJx;a ~xĆAetrDLFlS^Rk]f?J?% S Ϙ|ɲlVk='M0(3A/R Ws[n@k :m-_s]Z7v^n'?azp+էiʒ=E{B#$59\=B2|EcPԄv3/|v&bxV\ FB< ;ڐދ ۣuFf{ɜ~?B}/ 9R `c]ee-I-n$az8 %P174l?;[S]-nR##ms»p֔Ԭ^oo,uHq i P*l22y*SMC{rg |Ѷ4ćzDI\d&ʹM"5b@:A2^>j9{<!@᥎N t}Pa+0{xg`: h vIr1;dHͱw #6zKٱAn_l.k0["gk_Y*QDnw?FxoMRp:2PʗGʲdy藫Xn*R(L/i8mz;+g`w ͬ(nDIMVɆSNzٯӇuj&H/|]eyxv|!@N$ܭ2Z.ͱt`!^/=hjIl@ 0b1^⵽ ZQ"[q!rsh9\f'6u]iM[ɿh7tn }5,0\@@;z;¤SHv xI/yŮ|C-cF'=lg œY@~FSX9wbZ6@ F4Z#YYZn)v.f\Љ嶞%f)уiNYm'\P ReŻDn0?GRdz vGAΎ-187&JWpl-Ÿ :W_:=c+RePZ5 6~Nq3:fmYji7zS#4I6mZRvlGV*Ҡ~Kkr?b"U=ћw1 ռgHAeax-g(3>okOWE!ζ01K[)ʹ YhFQUJ։][Rgn#kŐg;Qg>b%5p83TRFގ,ΎpM:"S3YWMdi 8Mphk>XQDo@HoJ+/m-#sR?z*\[%zX:wr}3>@3 EkKȌLn֗F|d4i@{prc¥#03юR﫪"j9&`eM`pĪ(͔EᗭŠ'+Z}4g~Vs2)sنp3fOJ3 sIR]KJBM23.T0hqqɣjJ{?ӽr_k &ڠԍe8씻˧Ψdm=%G cF,J/^Vtk`)ǩS@rbBkdrEk<'f yd9 Fݞ@~<2s…"`qPx(7XGB¢V@2'kX|d{>B~QL'. O n-&1e=*H3M׺OwRF4|4鵪LU#&Dh"f D4޺,qS Ly[|{ >>!C@ZoԸ*()1B|ib~x)c}sDχAxWuDPe쳷 }/''ν~\v*zGxa>.7>Pv:]FMaB4vޏ}gwg,/8@LIyONK˫k+io8fSy"ϫ*Izÿ| lԈ>kvs.w ֗>b`"#Զ[Oz/9 IsBX!ci<kfnDw?HJOϳMbi/ttzZ&JSØju8|?T z7V:=HK ktʋ-"9KҗWc:k,V vp]O3AWxb%ٛ0roT[ig ]-OZZZz4)u>g"snҨp U[%3Ok?-CcmZ(d/5 /#h߫O[6^P"W`݊SV`8[޲:MPl?'*Q˳jOCLK5w(4M_fv))qT40 )%tT4s!C 7'T0@Q`X(hSrtu4C!$3 ξd&|c]M0؏H_Ykjq+yacN=XjjC'ňg DW*lO D+eKSTeO^\qcf9v#i #Tzl*t M\'S/eo |ֈ$3Mߵd{j"AڛU[/`WzDjy+c,07Q[ "m"ڰ$ZEv\oo9]$: G0mdK^|hPη˥O|RZ]caZN9H ZZہ}MVB|$> ]'{ RC /n޼N6fij<؛%XVMU l*t |tܢ- #DdBiDYR RŢ1I53Lwm#G B/,s4ei`pJwL> 6_\xq8@uXR foDQaxJs]K Պz5Z0=#LH}śUro2|#,?BjK}ZI2VƧjB^ikcC; qaUvN`A;T~l4̩*ȥ{ANJr _h#x%͌˷5 Db_(j(fyD\=dy]Q٠h1Qr:,ִD\S1m ͦ ]N28M-Իv5rqS쿓!wWr4^?EQ3V@b+ᣩ9(0,uFѻ}{掘V,՝<Z”(Tj}d 6?ww%x ;Jǖb[x)% 2Pb*ln~5TBޝ0m"U&AhDfX|qvzݫ'ݵs#QY tMp-E( 0(XN)X3RӀƥF;W*n#<'DVeK oYa]H߁6a7X`҄FJ3J^s{[9ɨ@eRY89nKj4t2 $3[,Z9F;-׏)"*GRNu=` Wޔ`p)i| C~3wX,ޗ4qZXlҖI>jWU6fFA{è+\Pq:`^]>:O`XU1-]5` O1vS Huf<꺺zb5#"}.iao^Y^,[p~ηxcg*4wań\zT4;k ]M=Jn5Fo N/WeYl|O*A&Uw(jlgEN֘08Y ). 8SE8@ʦ.&&< lf EcJ*dgu ;eYN *%:UJ#2.٠d &e5- ~'h%ea}?wCcq!XVׅ?em"^ $-6E }]7jK1npjK]JRb}јn4[wۓUv)oXg P{kT:Tv25KwAtVd^x:}HI]%Bp9)JEn60F;'p+J+s߮H<='STFiHT-.q'_\Y?ƄZj:HňdIܔk-;t>Ną"kD.Q6}"xoE~'a2xc (~r~@o8bbĿxjӶF,'RצG@Bj Dž.ٔ)@);ӑVCk~i\ɿxبz=crxTƼzL3w2k\RBvϜ΢ VruU ֥h U {XEO33}I'6`5H\<0/eN!2V82"X ʖe7˞HL@@>V#W$i+TQ&~ T.֣5w'gN3 3;܁i/  v >F]Ӂֺ?X32b-% m' Lpx5$xD ݯlj7/T[Z"~u`(IR*+o?mGSmr/NjyCeMm+a#z8zƭ{)gygVʼ,` E2[N@.{_aKj1~F&}j1C =fƂBW GD&iMZb23[UF#gn|!h /isSc:ݬ&.;?=%6ͧDz V>5n*zuDy#&zs']̛ffi</ 0s)g\G8ʫ'9>j1B)-Rzɸ]-t),|W ;B=*&Kt}~rծe~1-yWX#Kv4 psAp㺻L#6J$ؖUR8pO7ԕ-AY&ҝ0U Z"9D_+Yw4Ap)|i+!7 #Z-HE!3_0?i.k]CNUFjw `g/5<79vGPq/7Rzvo;R@08UDACTISGAܖg.rJP-gSJp;b%´} z, T+jNvkFٞ#<`e {4ud^lclbhRP\S:d0hɢ5QOPsNNJx ?oa6>vtZ)3Y9cAbYrZZ+%iOq`[420 8w顖Ek"ig&iy!8dYò3~M m_`)cL 8T>4p1ސ끋q C y T HJV O1N2̈́WT<_p,q)m>rfz:g{Uw״tY-8M$:xQ}#]{` Oq2tk tT@6飰 j#>)Vz _}4w'3p],:#$0|CWtIzauvߡ6rѵsq+x{~nRy(Ӡ\Lȋ3tmݕ$Ewʘ:mޕ5Kۃ/Q,F!n8`.;Uţ%}:6th z{W\|t'NG aunT?/4]#,la:3R3+/g<%&Oi$Gi-X.2U+⃶> !xZ(uH!C=0):G4<%] $.! K;ZgJ 0RhJx]UZuVB(k0@t3Ε O%G\M{˰0yAi5d̊[1ޭn}tָBE1esfLn'OD.I k U\m$"2vn s10'u+D6ܢu #x#9]N0ܩQ|j( ,r hz66 " !m-P'YP#T;w5b|@lʱ 2haˤiwb)6#}8f-ecRJL`*/H[VB&WƳx4eݖ\{m%w=ہQEG+fŸ\?lJZJRfgpuSjgeN_ ڧtyQ0OaE-mVhA ^<֊Kљj?GE8Te](L#SWl̄P7w164@A0<> u|~sS W"8ԕ>VO2~.؜7|*5t|NEcdJ)\ @C%dxwUtyZm\&T̕=b ]+AԇV^ٴ +nrusd]$9 ~r.7yv AW!<4(vDcn!~k!#bRƯ$ȓs,-/R,$V%0 vMkT1CLO )7!N 8Yv*)_zPf{>$V/`fM",@:~݆va8K#E8B+QYހުqkEDP J ` U Ǹs/7a.%h,~IOQ=D%7L.mxNG[m܅é1e91oF9@( ƥ +K:-< G0fC.(?莥% ͣAjz,{>_W1/g: ՙBFCoPQ6'6Ņ00o)MQ"F+_W1p|g^Mǐ lރձwQ CF5cQ:ÜC;|pa%K&ŕ^niVuæ|YIq[N ҩJ@CP7y0 }$Tϩ"fk@AQ9Pb`1)@>sr>LpIzv[dH5:3?rg2{xTu09,|s'4bڤO1zK2iGιyp4`-,OCQc2  ?\]E$@4yTՃC~A@\6}@Zз&V^G_-:.hny4sUa9Q3}]0YvG--ҝ꟮5s{*gz^. Z-dgPn@ 2q|H C@z)wx!YD r5φK-ݠ&VxNRcӹe+)i%Bǧpi3?Yh`韄IMkbCp5*U" e&,u`S╼HL,,aUF`sw}~.ܟ%E7prjIIZ߂c".'Eo$-qO%?w ZI[p Q7MIŖ/f'Dw7gD4YRiR/>[sI}zMbO=ޛg ~n.g~>y{˲ƷcKL^Ӽ$%tt 2V9Ohof| -DG h <|ϴ_l7qP? e;W.\YΡvYhq޺eD5sE&opum?/(CU49!"_#"g"Vf݀NĪ}ܒ~~a1ߑGCxP 톩ˍ%*1Sq+x+N"NP'B(N{ʺjk4k0i< Rw5'q_|bMR6'`bmirGYڏ`u]P\ԥV#doRh/C` X. RA/^c~hv2쭹j`,(ڇ %!d lQBЊ8UP&H>q&r`5/2^hJ{T/&s|?7:`ku=nE+^iu=Y*Erl-Ѓn0:(( =H.j~k$!Gn;vE=^yrg)m-TymJn tLUqy,{EH V2ɫKL~}!ZgE*6 #޿!r AuZU-* ];tzozUpo >R.v a6Pg2ՕHV8M!7O(H6 d&V5{[0=r}0;ppdƪX> [יճ&<4wͮx0XԞGk=8qLBVTI : zt Z? ̵~ `}r^Y} `(;fߕ Ƿ9d. GH !˒'dp ۺfOw=~i;}9H,o:rzeJhkpX;aoq%[S+t6-gpf+{#7Nnk,OWx3 U?ŀLZ{.λJcgbA X9,6[2C+~?p<D FJ뻼¤UB(}wf?)_W@,u39upѶʝ2OrƧ 7u晚T9VK] )~& C>n;x |٦g[^X/սP K4dG5MAy⚍.W3VLn!p"v>#ha&kh_: u\N9%V)ƈ!#(;/tWI}epEMF#2f>ۻ}; C>ֻu7,vhqܮ!Ǚ)5#[u|]d 9K ^",EH(a Dy9P9%x g\}Do/1UD& ZZV_ psھ} %id<5x9lLuR'T S;-Jk/F﹊5iKv!O+G~}&:WfJň7D[mެM5nsԒPZ9b#&8S^ZGE`G)h?Ek$ C>I5\5~8@2@5&>-YN.>^t͸ J©[&9XdKx:jy8B`]HvVp7Փ9w6EZXcNdmήz )ٺ;r)@|i,AGX3L_`XItφ ]uyDj(<;oHH]$Տi.s##h&@6*pa V`lDm1[%1BҐb6PeV"F`4AZ_[z"y9/!ך(+!q3_9Tc&PhƊ~KC*5 N('8de W3lNwW56F\O0*+x .}cWq *B}^D+@`CtùaĚչzR@8/Vwu/i/g/=@aQB-+%ߡzikpЀ ##e4US U /;NFhv}E\eD\3&hp ʋx ܩgғ k}bmV&%Bbc{m5FpO=+@.u?(ƥ4s㐿鲀]!N1<%\gte9xߝ!kq#]O+J=VW5M嬷&]QJ܋rX`^19S¼t2q WVg`!*-BL4)J cbg|?xURoA]13]A5tEsy tYjf㣾KHazlHmd)q Db:ɧ,䨅Ή >J3Rg5%v+O ipbfz{6*r䊰nux~ HG-DRcL\,?l*(:ax|/jpL;귑0%|-\GC}]pi^`>kf,a 6kxRJG{jqaRx zĎѠ{#d3Fcs?1ɛ`o=sNM!b<>.i+ĤOK.i+|2WUn=՛p"]2Ks_9ICf#E5bBgm.m@sL/$`n7ߎF\f}a6a<8mrOf2gh-H񨆵 93px=*}qsoങn!$c)(}C 0۶ Rߧ ] ym1TE_$$i$蝎N^\BQ@¬ޕ(GE]6 JU&@;> {Rx }) 'j4*<2ʞ~ w&TVj~QA(ޣgۓsQWhXR;t%pEzׄ;WMG"+"x/\Dt[C5Ae?WeŰjǎ)$YϸF%џB4uw$ݓ Q*+9X ғ}BZƤ|fe`ɊMkZ&f}(6{&ܹlgAFzw78=P4\'W0 {k1R(C):ZƗJb܇0]ǬVHe6%bJIs2NdTV8ШLXy"ַ+ vTF86&N_-F#y>5%`} ĵzY]:q?bRrhdWoάx~^<=ڻɌa5מ.ii~z9<s}J,Z,mNGERޒ6(ͮcV(\ W %' "e(&,Y IW~F)JEs`>L ߤ1{̷lPF2VcHaa Kr:Ɔ앒A"ӧ-Y/9}h$ {yB'A`0PVH- CMD|6bt,m|w-\~=wRWCh5\ugBopkldz{ddoNzآ F P\22cdvwMZFnpu97n[ia~ KůٵL};GlQ4'`z:l^:?#~.ʺ'Tr"c;V\xG|E'2,B;NQ7i>&z&wn7%ɦ|߽N~i?FGz:-iUu~Gog,dt w_2KcS?{:b(DLE/vܕiN|xUVG@}Ocl %W> ;:2_ty,lHftƕi+eKSB]ye0T߸:<ԱO[x(̟&q8~֍ݣGb^܌W8 x!>>(ւl"q<*>J9c^Ŷ&\rmef0AyWQ("tuwͥ|އY8W8ԙ.W1M mtzGZq7s o+M09/~XXV 'Fop_{̖Q Y1tະ. Fs-''422$-"Fj%95a & ԭcPʝUOθ]!"kN:p{. u3TyNvp?J_:!JKWb5DzA+^I`Frdb9/qUl {יf#oJrG',2ޮx?an)\hjwLDif=IP}ҲVW4# 'EJ> GwB4#i5# l{@κQLk:_;e)/|Oq)+ׯOU fnWa~]kOdlTM9Ee{B`e!0iYpF( '"(+Ǎ{F`THIX;!X2Lu/ ^ՂqNt&co/ Bs  ՘u">A03 .OM&qyc 3떼t ~N?JˬIЅXcPB=ϼuk y 2 Q(yԍd݋=&N٪dո8*9a;2fzJLґvхgq^ "l,ݽdes. EDĤN/ JFaT:zEq>PVݔO+VC^)ODR(YI=k2 s|jq̀!EQ>t,ilXl6i4T~2դg *`8Su9Pc}AZf]||D+ǓMB-IHXe ߰՛R-2 ,r't)4R:8.ڳ!=}p]"$9:2~&izpŁʅZNߠϏr%()8K@fpu$SG_ <[m㺉.RQCtQs. 7N\OAk+qBɷ.i:iv>oQѱlLRS(KhDL4p1*E#1?drOZoT)%5ÇPk? A|xXs?Aӥe?)Bt!DFP]str*=a(TC58(&pu y,Q[Lzn\.d45U,| 43|DwmEs5"[(oPinOCѸICgxn/oY, 5AEđ%JOp@`)Rrn9d2G2Ʈ3b ի1mz R83&'H?y` U]|~ZKS4hzßx4-,~]Vfڰ-082s\t! ߱}l;R Gy-NӋ>e?xkR6K!jaNGpk86i=SY[Ʌ5y\ 4I, )qHecI ę2Dh6xJ%CfivnW-o9/]FJEʨkmzI~!i" Ycdxvt٘.#SLSSF" |Nue%U" ه:ՒlH^w\}xdUb]Úq)u,J"  [Pue)sU!5ePQ2zY#}Lec2 ƒ<B;>rFg!Jx!a´º)o>|Co 7ecQw`w5fJԣOδ7nP[evaG\_}YOT .P(Őa7U^li u:qcoǘU[1.cq@Gۛ**ݾjK) z 7@~r1(q-fZ_%Q{C*Ut7 v?u!TӠI"drD >;߯@dlk•k&;Fh2)?+3YD)SG 95Q3c~zN֙ n@Ar/nIWz(uá"cTF)goE: :a+,u[ RZ-F3f;'TMc9Jr\:{8prTױgH\Y/v,;@< XYsD/Ū m/UԵ(9UņuxU v7.D!$Y#GF~]S8_u/Pլm̻*%)d1"DxyeU ٘^_J0`&:VO,399dn$Zt:)q0c3;dX8N;Ck(gؚցR>2ظu&Xs*Lr.}g$1/s{~,{ƕJlAZDɛ{c5.yW1àI/^kgLBm)8<org,bTbƻݝdR]E2u?lj&] [\v5٥`F>&s`G >Zm7{#G=OtbZy5%u99޺HNK73opUC4?ܫ>|@eU2J<ΌٚD@WG01ܨj7ZG!o`,S{6Z\Hb"e׺ 2DO|UnH>|S5'^Tɚ)[dj#?vTNnߟ\2B!m*. bD<&mf̬X6.onJvJaqbn_˅?|1_Tgs7ahe[qyvUE`h kA`HK~9Nv#7f*e<H9Raޣt24.ic6B {r FEs˳64g>xb0R,cbz\P`y4^NW{30&:H&Kٹ!r|)yfؠh3 [r2{mI|RQm7LM#5 ھԏ0-<@(=KwTcF1Amku dؕ]_)WpBD[jTH ו-OWOM4mViImczдSϳ_>#ѣMDk(iJOYpELj.)X>yd-&yh҆QM;"ugI+܃l[$ΥI6:o3𺧇@qfy]W8.Y ÐZW.'` ŮҖ,9)VY|M':lWf+G9iWF8gB9#j:ee9nD `Z& ~oW)Da?:D30L x7ly 2YÃ9>[I1:\^nWEWIQAKqL+-fwV(뒵ػR1ԫQ^i#.*!NQ!vRL02G&".plԏY2܂Rf?d&%hr UEm{\ 9aл"5's?dON5`"( \-d6Π-mSK<~A?U/( c8P:jJHEħ׫iN` Rv$òM=.i*zClb7ws=/ְ(ܢa=mTOCjKCqlRwS;q)Ihg& ݐHVvv$4a&ASN ȓm.gxS7ʱEzf>" jRd -1R/%V!Xo߅_"!l5? kN|?X(R^(f 3w?3n_v? sy>8mJ8IaζޔC8ܞp0M3haF B&fy,bՇ v#d<"רmc]H{.q%5@xwP.p9Q5t Ko3||x/Mrl[Y=UA#BE;̦ zewj,#^.Nzcf1(=DTW#-|X(i_`w7LqOh~3ګ!G ~FTqT$^j`pO phv#% M|͈BNμcUntۤ+TEkbDg<xhMt+@G Ԛj$9Ye`rM!+PLDnF.@3[ߧGo%pv@'V^Uʧ8E,N̄WdF5g#$3sY@[ +;iM K{`(x+%V@w`Hr?KKfry(t}xe0}x"&_Lz V*)(O96-eru+ >Qx_܀8nw"+9PmXIU ]]=uU8$\t!VԒ3m/)}ʰ{vJA>V / l˚D-2oc6%j冰_! {K#k 6~. 1 /؄2?\ 8)5V6Ʌ댮o:._\C7>FѬƴXLy$tK)r JE|k9p^򑙩0WD%pxp[N9EX9a '#941]P`9If#ε<0?غ@*r@6;߃c'i0+ s0[]dٟV3b0ߔy I:rśp 1Y0M#X-԰̞5_/p ֽT&EO#X B쏡z^{9S\iu4Vs}hŹ܉@3$ X{LYtqqm,4EBpI5qN )e;e^"i,CPTR[ -mݬ6ΑtIIԽJNpes 6}OXpl󰬖-(!"vs2G 񿄝Vga1sg}wpWm,dlуdJm0D3I8*eۉM|t$&'Fn j2?Il)qA@?_:0$Muhm\0#pTg)G!R(k"uב,LVSe؛N:Xil9(rwc[…*%{@ź8=mn;G)D$u݂ ^[2!McP/>]hCcM-ש lFt .8yjF_wi7:pN}46  .hm!$vx+u^Á`-4S`zK8kkeRY)diBazhK2cSY2 % :OK$AO̐Rp V {OL]Zb76J [W1P 8#-G({Κhue\<5Q/Ja)y0|iQ5$ŵz#zM^J E+8w"' tAQʮuSHځ~k#*\!==x&+f KDߟ!2 dTr A܎nHj{PxII H!A5 N^ 9:BF!jOFmzƳHK52^aTy7I-Дvg]YM)r21yxSdjcPZ<1]٭B )r,Ao2jHHsHV+BB9s j%&HaOL/Ҟ@ 721N`!R^4)yqO#>Lo .f_Ŝ0n~x W kȄ>FisѥJ* +{{b<`QXxظ! l:,b9aiϯEӍt3 `G bk'j FZ)Z;pYD0QmnG$l8ΎN CE8OYv?Z.ʿ<~|f:Ha)~[DЪuBG`KȂRi8AX)r r X/:t˵?5\pu8r2Ur8g[q)O6 #*jp_wu3M &Ng8f\Kw̞01QE \HzJ( Sco-/tʦހhd\&d\W'Gj6itj@s\Jus+bKK%7n|}S9A<2_*^} {8JMQ[A=[jǨkJ1!Uh4n?ߵz@Iܷ ʺ#R.=ed';+Sb p:?2:xPT}(!/(ƱvRs ,-J_ ][u\_ C( *.)W;6QGwz9`7X:Y,5 ڌwNϲpOZH} o51[q%OV#ȗ]a(bF9K!d4 v_!'fg(9"YWg?ǂ61WhᛄgBw,,ՠFfdpoX^cʓvwD} K2oaR[Wo庣XA]'"7d[L4ipk@xfs*߽"5 rXKa z4?3l6yp4L,Os`e"p'01^-⛦hH:$$mԋ̡r9щP $GVߩ- 'i*Oɰ7Pr4BQ?X)1 Y{bh&Figk/Wκ|в=Bo~yƫ~<(EYZ{'htbyivuON\VklͱS'FuT`3q0D} `qFD_#rj|E!c#B^rdnJ4Aɮʐ4 X$󐕂#TYG<#[9,KY=s6)*2۔V}o?WKhƧ8#=yl_,97~ĻTƃt$`yb =_gʷ]~`"7#0'H1O휘? *#fPL+}bpf[$EtQGiO M{VӟDsf ^-)cPX^p&2}.uh`*x3rE gMSo"D[+;my5,0P>xlDL1a/V4gMóİO|.ᴷgGIFIS8x1'Np) ?㼠ڏY^G%vG.CUZa+o6%GK˻m1ה2:̘_[!B*p`OkDwKT#ηFkpUHۇ-K?RuӣAb BPӖA8"#D׻HG#,TY&RF47sw2M' :A 0}jLyFL6;(`!(1pL) 8jOO(l ~HWcI=凔)#H j5 ]ًܾ*^gNj:'I@UG@Ƹ ocV3|,aQKD;t+܏P>SCH z>.1reywƅ9w42Iz> BE}AM|E7quޖ)h!"4qlzGLumBX[fͮnm# j|]Slenɬy3^8BoÙT[ >Fv7LD=S:&'/DpLKn~å\Ry{RzhQ2b|,x$wX[h6.uWZŐ=8řB$)VPYu\'LXS=oj@ `r.V%͂ >w+X8I3/\!cz05: 6HQWY^&4{D، qzk[tD7'Ds(K@$7>9Yc5$ow;ֽRń*գ`9w>e  cPmһJhAwm5_߼M. MǮ igj7JpUȹc}4R2O$*jȧV?g}`VG}^1HA%aJIX0iE)q(:b9DC#h~5vb:l$Ӭuhl;a7neO%bv!N*"5kG"09'{}GϦs]#װj߲υzt1*\DMd,O6q'ăь hm_ZmENB8wᦹ uE#n-Qnȷk-OY̎0,(-R٬mOԉ__2sY "EUpw?_@\(>hk,=M4գV~alĨڋV6k,}U0LNVfjv-|*d5'qNItW5]qvzgj2P"Zd%"ddz1oݞ9Q_ 8*qOͯlA`XyecMDLLKv@[ar&Z6>BQ#Di=r(WC D[ӈ,ixxmw*?SNYிGe&֌^>XgM[-=k0,1Y CS((K =m^5#;]j$\,k/᭷MpADys4Gvcy)U o=aHC9ϺGPRdL+\3Кem&s [6ħ7@e۰WQ% uϚNTzV6$ADA/g}כ HVi02fw.t~:]~|ӌs@!o?z/ nl_J$h5FeXZ$a8 C W4 ͳrI\k&.A[rO\@em}[vX7Q#JlxaYn}#[K_-.bs2. zxpz+3 ,|f A 5_1޷v24[G+{y1||{@hG4d*{BaQ 뭿c*9.*-q⣊^'܉n!@M6{KeDRq5"$ !=cpO7q'l?G@1Maˆk!.l; Hw$$,Que1'uxoSR!ΖL` byqt!*RTG0U5 s8VU|vuOQ,' 5818|h<<DzfL 2ADe3(*KfcM@^ C&1\qC_ *Nlһ"reoI͒aN[,p"ZېbDTy ̳j?rf7^ u'n D1K5yo_OyVIs׶jFZLÞ؎GꞄ&*yNuQ߉dV: SqWی-䇺xS׀vW|5LAbS&&jPiۿ$P8LĽbO!V!/I|!ZFe?`EaoDa;'E-7V{v͢]Jp=&B*|_1jow^9xMĨIaiןA‘R l߅h!ĂZAkJ,e02nmji__~pkIwK[ӧ$[#(PRtMd -X;sҏz\h-S<쀐~l(ͩ0,X+b޹X䗀Mɷ X+ #w=Shuݣ)0%ML/t=C_l #$,= &AcϚhʘ^\rp% Cm 3 e3…yFy'5mށ%5ԉ m;y \Ppo'G+uICw vM6C1'cf+ hy?*4Ųf7_Cg9&rPgYZ,EBȌZE *5C!Ec4}Kn"f[l7ѭ4xDayvtgۑ<>T=d$O_F%2h,oͰohxv׏Y}L(in@ hG'lhcx *UG4)Χgh*`*V 5#0E`dw*"ɈP%2|XO s UJ Tjih?uٟj䚮x$Q 4  ɈR+kpu=wӚQ;٫Cv\kb߼I;*F*S!4_t+Hg2rZ?lh}ir1-Z<4Nz:M z\ 1}|\D^g|WUj|0[ O^/W# Źe+T#Yҁvof9+;ux|E;=aB\2u^*Fk˖P㺥&;ڳ\b "X{ز1Aq0Y X-L1GI 7T+xVIحۭ.?T98gڶHe,> }lUhp?&jpa)(sLy|cO2Y-8"rEn?Ӌ3PԻUl9,OQ RiY`rZ oBU|H3#ߛ2*R)`juE{1Vbi sFᢡ& &AAZ-+\~[6a1) w'<*$ -^lr|-4<^L1D 'KN@wTi]lzL:D\GM^hF6mr12o܋`ҹYa'pu@ޠh:r@Yi P-k"ivk3Ruh@o~rS˦e'GUB1]2^5!.c)qGڱ-c^$ xtk=FFW#Tp26s=C0 sGE`~waQ|Ih׳9L랆Fzڋ.3;cꋛ!8,ok!|ύ D˥#u<fMl.PuMNo"gkcvfb~޳mO `LAvBʻA !jhAJǚ?JI~"nʠ#ma\\a# i_C 8M!{ݏ$l˥Ww[?NLYX)ыtoF:2;&4yR0XX=BL'?aI2q& n!=#qdAoK@=uJ"B`gq Gk$EV/i]<޳RTʥC]OXDs'f m+D꟪ߛ_ff;%56}ɭ&?S]ŗ9W jĐ ֟bfؒ۳Z<\Ը̅(BM̵ej'XI"h'H( C\pBbS@l u\$Q1}cí!K~C8gV](4\K^D0jѡ>LY"1ge Ў[sZPeQ]>"vU)rtnAcD{RݒVcfy*@n{ mȇ"V;pyaNѐoJu1Q5ŽDImTqSv%֠ ʣ̀=Cf~>􊻶fө_C.z( Ź0W̳|8EshQVkK;I0+7oc&j55爮{d6F&]:2iҘWvWU & <<8${lr|ﳡ)AOftZ=֠| CggZd9y6GY9p=UѫA `ш'/۰ .G~Bc̤x')0)"qf k9,|4П$8VPk#ܰ, Aj=7ɴNZcsڱU(wg گp!`L }ӳvEHcSb"+Ӓ ZSJN:~  O?:i^rR^5yVSry۪YT$maR~l }M+'R$0'-ÙmMf\^|GZMIa]B'c6aRvj-%<G}ch, b%J!Sܛ }t.‰L`@ 5%e=veO̐X)u& p&Ǵp 5-8ԩOG@$Aqir[Ffpb]A[aMoxlxE5LRkl/~ 5D_FRsi4DS]"Ve$Zl`">Z2BuNXkI\5^=Xp%B>UY%Z3rsiYx~ ُ]>RշXWrRѫ^Oܾ-ݴZwX9dmkB' (0{NA0)flLZ'+gMd)+2<{'xMT\rcL˓5-7B"eBD!6U* 9h r*XcY ,lQr$^]hWؐKjG7A00HGJtWjS—@ᠠ+<|5o$:Erƭ-w8mÍ7t tSk6T;= `gy.臘_h2R)(mJ y+~b+:Ȅh;?rY #4l!Mf ?DpE:{ p8M(u@8<^30CxDD%˓m%Al14SfmfKZbc'[L[nú57m8TDMF*Éĕt^>p;!JΏ߸r XGЛr0My_Q~FXN1tE` 2! $| 2E[Yl(yh*ⅅ5KA8zuӰ[g^"_&ʁ\]s_~p[h. i<:Z7H*8sa+3+ǵ0m>+@P* % aKXTލXNO ؒAIJ?haL#GEF S 0䨞bw˂F _1/}.xq^o7JdB>VvޏL&jFM3)" Ip`hwB&k^PGɥpFRg`efc4PG %~oS/jT"'xj)-&҂AsY,Ҩ8gs:Y8 BoB9PY9D]=Ov̙L?W{s`ЕRVHGٹhJ{e@OVN8st[`A䮠,9ԟu> 'ZQ|k}~NsC/!(T!$,gd3i.h\+`mpڕq aVCaiA#d 4AAH&6[~9G2?S\wlA&pC2H^j ZUblڛ@b9>urɂ {wW[)4rYGoEVGw:4JJK!i4ε?wLnԛ9{\H/~Sץ՟ndXV.j_cvK4U 2XƃN͐?0H^\(/S^|BSG,/a /"ש=IgŜ&veMKϲ?bdEI 5IʸR^{k}/ z sV(VvPD][ptI)Lq' oOAu)J{}!oms*(KנK|XIыsi:t0/vxt=ay}SBd寱cM21Wk̡y(Mk|7DЂYE!IB 4p*u}@GPOC藷߱@d+>IB Uug:˓+[?u}o{GyY+Ż_둃"AwR 8mn+8&3S#YK&8Xi(2ʱOK\"٣COLiQ;1FӅ)ٚ5ڽqʾwȑ北_<2Dʕ^B;rd mkٽV~{ ia]=O; FM7O”3 BU7~ h6p1}g]'Yd$26-aF$dRH@dcNQv(?1(9pГUB8r3nHN ѿ0-_9-fͪu5GIaGATH4Y+HQ<Fb/mHN]hV]AUdʙ) qdU?61ѱ`aHz -&R*bJ%Eff>n7vf-PT꒷SpvF96DwլٽQ\zc/(-7=ɥx,M:.[Aw!a;'SՔh!:[nyNMdmelS]ifM锴NĞ^">>^/M6jA/7 W#eiVc?KBw^89 TzsS10B~ejPuL2t)y&м3kJP=,+-c.D'4F?(d|r]ct vv1Ðؙ}5cGI_`x:g`S7X-ē4WSͶm;ʏkd&!up+ <$#>6gŎH}qbʹ*,t$)[|"%|Tw7cg,YJزCPT:L#VɧTٮfv1RA5tI_d+H"(0'5HB*K~r9l "4E/Cp[(if@.mmHǫtb>c?as}NKڙpr3f6ǑTgs!亁Hb8kb<~0QߒMg2W7Pgp 4gV2&["*3އ(xQ{,(*Tfo%טad3]w 4οKAaLNqjs4~r)$pZqOPf~BjcrZ\g嗖KʧbssQ<rlvf(U}VKOs%Flqs-e-aqA Qsbu"-90wϱXFfۃoÑ=,@!OiԻ=o.S?݁q_h͋~垛";.ӇjyEZx I+s2CF~ۣOM J׮=_~a2PO'۰& VfTۙe0jVAUSTw<0}4I5 [Rk$ %oXY SMQ(+@ ;J4@E__<-:G97wXW/-Je  ;`e"I&sﺼW57N1WdFZ<MhzZ^,b~1̴?Ѭ|y7!<&p놸AQxMXBul"hV;1Go"^S] %D-A.ã˅;[SsӉ >9)8@ Ag/󅜹,b,Cѿ88k]u?K\2wAjo dx؍hw=[?w_U"o=ɘ-ۄ $Ӳz $?oH@׽52 BJyt ATf(Y "xjٿӓSSųdE2(1eg/ hin{V/UMm' RjY C銺~'<uݵ05q 8_*^߃S:j(E^ܒFl`RՍ:/ǒ\-_-͎) g@l6 qh # AB í9*4}$-N)d泙Rv=vəkmjBy؍1A"~!Qw}[loYwd-,"vV|11dCpxP&E@r?տ4xo @(]R#pbVzg,+ŌV;5zP|tT&5N17 d&~FCO¼cq~+YRK N"÷0;w?Afrtvӂ9JpR~BxM!Dk1( h b.1GnI`IA ,ljzW ^&Bg_#ZLjDS{Zmt 32L?̷JK(3u9|`uvhP&_AvFZLp6Ҡi#BA_ڀ(P|X͜=n]VN6E4>~=֌l4C9QJY#<(-C0_,WӃ9YQ 3`K^꿻g;-,;D>Ϝ%Mvtu5DgX%YzǰP: 3g*I."?ӫ҉T 娫^=Kmñls,M&w;UGhƩ]PTICۛQՈGZ"?Jl6ۖS`>7_;C SW_^x_Et_zW+GXCYa4P;[Tn<]WkuU"I?I\;3؜X^ʍ?#C>D7sL Ӓ@%J9՘YC1a-Q>#*XF--y;۸nKexQТ\&~iNo%rzVoַ'ҲGݒ+>Ñ((}$1k:Hct*Q0u| 8BБ/TGeye H[x.f% WxDOM*w {@>,<ΰFҴk%qm)(7xylLf'n\ʈ)P>8>L)|&~7Ꞅ"xZv:W5} 7 iq?#FC^Ŭ*~|3}J5-_ 8@G/! `MjR%AӔ}ؐ]/0zS\HV1ꃅ Tyw>m0|= 9+*{SIl]xLpݷamډε _k܄nGL$R Eg p:ܮT@ iDs888ɈcarJ0vп̮!EepD{J+\+ʁ!CMOja}gqjƙa'6*f"8.BVk!C{Pl[!2XFP$[blc 9749| H\3PX,,h5 ̙3)[螰EO-R l5U'nz*)i$l0\BtB{"5osbV9n6CqȉdDCTj?0 @l-_cSN]8Ph1'}YbD@S\VS8D@>T7hdUe gM}ͅ}b6yY/\0Kjš̡u,U_1Yr4M|ς@~am5lS5*M;}Hl*KEYjRS| fDTBmN=Jw#-:(\sz+y6ݐܜhAŴfʄJN鬩ǒ={2,9gݺ{kG]66<xrna"E"K6bsk^fF]>w6"dZK g&kKY8Xt,e@;ZK#1m :L'SxP?Y7@b˖4SH@p#/Dg:f:4jFU :N˔OEQb}jJ Ş̬8CmZ̈́sr;:eWuO~ASI-nWg Kki~<r aUHC+{kY:D?T C!&(zdy)v0?]]q{cAm4}6O,e_ GZgh!Ao DwW͙MnAs+yx1R(5 >-|(R.s2G7Nr܁խ H#Gdp%<ߝEgkuet^E'm\ Cb&ѠƙDlZ2F*&Zxj up#q3ӾdΔz>xvɇb:@dS7]Y/BH9%I$t{#Q$=a)v ]nͰsp rB}Z갾^o7x+od7䷈o0Mjʒ-p= g - cĪ f:u"4VY"hU0|siÃzG.ݾ5ImbEh8nY;'r<~b S,dϡ0Lhx^}#({!uPSȱ*>IU›ye%W(6 I5Qju1[_Yl;\Cһol=9"z4/X74#]U½3>'Z;deVAF1! a{|Yr[UUgySAfKSD6N_٪ӼW / g3p 7]EV=<%9/װrUQH~&U6wpk))~nlƻAd)C)Ц"O`oYsؓlG:%]ujoeue NF)O>Ȥ:x;'mI6ߖ9l /ȎVQ;1ߨ7,) ɱ ^WkKF5F32pB1+0[I^tr*8SMdV5!%fGxwdOW#@hj`Yq[9L79(|viE,Eft޻{tZ<ŝU3Pr` N-=t,*'R)*x~"6^/ڜXܤ&8QT|;14?F? {Į?|r%0@w?fBv-{ ::1ALZ-z$v-A" D|'2#ҋCF'A.P ?]ܡ&WX2׽kwz'ӨS~aTfIUB+_Iy oi/Ma|%cfN$5Ddi5rsn?ul#ss}Y |i]ݧb)p[MOi?cX#Q0(Rr[sIMC64fi XgyN5=3ӉuӗEę2 ZU|gslu?eh)} QZ~LP;-+ Hb CWfO{+|2vaH|5JF{߭wY 4U2w;T@p 5yF)w4BhAك0U4f$iֶzD #Ɏ DR:emgs|L"ȩ4!G&V;!8/Ƚ7\2[y -&tN#H*>ɳ˝{(nc^ )fK" PةeQ˭ONT{Pvvn-yE- ]}P"@/tVݦ-Ukʔ:pPٖ&a]ހ<}Eݩ4 պ0Q+NX92bF#K4Pώ Vz7wdAXw/ ZeAPcURBg(.D\34NQ&YA`֭ 9ΗEl’q3|IYsσH} ]1'g#L 9&2mL-WQ+%gXxt{ҴB /ZlD2m̨i {ٰP"9"@6K@ToT5#t8N<$,͉"0V׸AsoNoMyDKsN'uq?l#VcecR+SGuZnL Aas4t66R(K_Oe)7BjP}JNkq=)m%a3[:;Ϳf^-*~hu!berUi  v*mTxhj0 [p({ޙ[?8Dv㚫 ϠR|xRz`Kǡ5o d iOwP~v\ vK-JZ1U9D6an0*rR6iA%*Q 3*&B;uŚAMlhlnYݢsZF? n&sTUN#3Ϫwy+\;LSzqcai|w;،>D&ЛMZȦ]41Iՙ%Ѕ}b*%X#(>7uo^rFYkQu:VY i`|Gq:hJ&Bg|Sq0+lcfXiC3  -uX"hņXp訥h{'O>-Z)Vh7]U+pF17d1l_Gn+2`vZ-'(׮f6Οö:-ܑV~O_,,saܑIt䟇]Zlyɜ.y( /әȟL?Tc-lyE=Fd+-뛄㩞PWjS)eo5}ٮeDo~wP٬":7^E>E[i? mb ] D*r65ac7{dPBj3M1Jӆs1{iwqK=BY"8OZm*y.&~N(S|iXNR$\.~_s b1+LIa%XtsMy^rM'2@lWfp:Xl`ۓP.<ܬKEaFONT],Mp[W^{fJSrew ?{6gJBޓnh8f})v(.߳oh HQ+5:3jIȧK&^vuҰ?R9mr)͡V=ujN1~E͒__fn2zW0 f{]iw{A} LUT7]r!EʶVBJ[.$Aw u~,H;Or7L13SpVt$ҞiQri:YlPfM[b]% "Ju3 q' XJ cȪI^6ncUF6u{ے"ɕz@pv2mw[9y(1zX Qܽ k,eJsL8?j@ƓڝN!C5- \q;=O ;:soZ>(O1a "BjUH5Na~Fx <=PG+|k±{Zpлчۣ;@@Lŝ ϿudBCԽ>,P$.Gq#}6]3U5BB|RHfd*nTF:.5E]O0l!'Oc4 S60i wۤ\LEnXVK~`pc Qj+b 2s8Pc'^-9P(VO׬ =`Km,Wh Ԙ2[Y>R8phM8v[':UMy:9iXB)pwz&\o<2}HIaIՓ]8@&t:nw g.^zݷ]^{9qj֣tBvu^~`^R$𜎯pD.7վkiF.r8ᛞ( P.3ޘ/9bW9LhgAb/ 1M#rnRWLV-ljv|.v( Y 'zie|q.jڭ7J FޘP쨴246 xy]ߌ!zK¥{xBUaٿ`(3oN 薶k JSE(!NSHjWN4$nBJm鄞"Y5o1!7^GS{˰x֒ĕ\vT Io-GLq̎.u |7(.)@VĀ(bܘ<uVV~2Ǥԍ%a. dw![r.bA=ۓ\[Zȃ+}Zh!Km&G-x8SQQ jY>A@aֹ>}SVѨ$&Y ]yu>wpQ*W^ AsLSmg;)`(3:> PSIŒN$la Mm <[=  'Nwn=z{W;dL;4RYU4;ƷU~~?e#S0r2k35 ,QjS^NغQg|~qY&8qQJ |qwzEk%pEdq5~LB-J϶cu czlhN!#5u,vQk3HL:Ɔķkݿ/F-#9(Riا(ǎN2>gO$u'$Yg2;S 0)O3$LƂJ}t[P5gmCaܤ aI4ssb>@4Ll;~湛 d,>g&Q`˨CWB{Bd4~,~KuAv`6^9BAEVG+Yh?GA%Lsy~n~ $F8֩FZ qUe 01%h=Rh}54R.ܔ}abCt-L!6V!&1dpy d Dٓ,}=pEENiW^@j$T{m$c%P `]A#{`sHXsxʒ4?MP!?IƮM6P_hHڶ¹+P=A%E kI{LCRoՔ )fXRQJ=W-UCP=9e| nET 5#U3^$GP, 9g^3lyzԆS.a8gr  :CX&o _jgpг +$CXGft'2?䤖H{ѾKjYfQ86T6O;_d _kU6F<@I{璇wE!IbD ͅ_0("$T9!?4#1M⁎VnJQX+! X#˙ޘu֩mI4(WĬ8~Uh#Ye"2$ݴ.|f&f-B RAˣX" B71КRO8+v8c0w`3<4iwɩu練_Gʉ" [H5d0|_]b?#b@̡Aձ|{A YMހ3xp ze.NV[Uˢm Wd|3Vh7:E;Ϭ8bg>ω]ճ92٧+ ϻѷl 0Q (Y _.Iz$է3 a訮757Ȝ,n gZTZ^]`ϗ<;_t,R )J2*"O[t%s⨏ڰ0d%z "j[}V׋'gFA7UwhĻ ^y"n]݌I!Xp턤u4GY\jP> {qdShM+';/uQ;͗`{A8ZFӱ92+p5;O2gXEmʖUĕ"^jq]'Z(%DkhظgsF+*!VI(e j@l SSdd6SvD!NP{]|8oW%`J09THOmK ? - =II raX4R9ꨰmPgIoXe()M(XM3f'o ݆WHEt#{YmFx6jWg42M+4뤟'pĔu쐊fT2Bdv\MQDy~* 6ɹ#Q%s85^a,鳂ZQɐVQL -H`SGK֓>z(s$~#3PP<?qr!;;GQ/E;YV]_r@K33b[JbzxfhOM:cQv]nMl!kaժr{\o4V U .TJD”c"։/3ʌy< w e=E*zw+BJzXF XzD(};D/L.nJqQ{,GGZ͟[#?!͒6Б#%!A e?/!蝶ǖ]:S|I›?+Mc|q=K%ps;k"(|[EtxLp|'b.r ŭV1}@SwѽeQKu@*VAԂKR&sV̐m&s slɵ'BcMw}!Bd\)s"v[X.곭m눽%daù~o?>''S'3hƽNsq߱e<< cVIdE]sToZ~tS\ɡOs龜0F}[o=R =/ad(rf7ghsw1gȶ[bHR % Ek\I QFtKG]jx}~sFYFΩt~ B܂>y!L?@%6;I0TQ f!Ĺ ]nfQ1"&U(%-P8PqW>8uƷWF3gNQyiV?c H3j8Ok:E`$WqcxED<cW=dlj?Zwj >&']! ]UL8w+5@a wT<dd\bEc3PJ\gĺS:HT<$~ɪܦ=>Bw L9X4Qm3s~ۨ\o.B%} .\Q[ ifNBh4ژ/?0Omzwγ-ȴmeL>{r|K\ EBK i Nbfw@GM{21KH= @&ipobd֢P?+k_'/AkMnQQ[5{)Z\H Lp04T녥+,9GG[=Ftx^ t,4br:!i@+`MYmhͻP4 ͖1N00IekDF n?S >.|=CJD//۠h7 zC"a*)VtWhx.B\T9o|u*h1#|M4K_*=ňS2_OkG,*wԌX"lٷDѦYfP/KKJӲ~UƓ&!*\=Wֹ!xc{5x I3Tl5 *}8y[GFdʹ]8EgvZŰ 4~\m6Mah 4B+X.?vd(w;Ǫr?>"Mb,>CoVwSTArq'?2cNz~2w"; oC;,G3epRdxȠx^Bݓd+m{QF {Jn @p:˜bV&v x,lL"ﰛ0;L9Hۑ> r&Wj/h 51 JŒat G6`J߯?ޱ8raIj]@$U ūxw~;ultL/UkW)SOϭh 0QYHYrn6k˵Ü}r2JJ ԰!Ha_B *XCE1wΣZpB2871?زN~%-N o=~i &Ŧ*i]q8aU (R7wP2:"F"F>u) 7ոҀdmyU- CӼ-~WcXGX:—Q!BjE{L Kz?PTrj` a(KW7jŜs㵌J3nDefV,@oΊћyOyM.O/fe >V͠ a[4جG!w/!ŵj QwRirjb_uHW#e  B3(=y3V5|>nlZC;̶71}.Ӻ0- |4>gb4@}6߇/-޴]EgdbLhn3Z! 7+srǷKE{eW0ŃWJ~V\iC5NԺp <:}P1~5&F[߁X;VQu\dՓehk $r )BT83)G~H-Té?OO"\V~*=k M NyUZY{"׏ï_h+hf#섓7ρw&ELIfBƀ7?tJ|$G&v2'`k녭[H+~Vav%'ւa7!L0jU 䟆r >n~b [G?V\gwNGz预Wt+6ļ3; r}gSWSم%I%< (.KAix 4IArc/l:z;̍+V«Oil\Dj/8 L =zH\ȡ{Xh#팶}ꏡ5o|dl {hfXsH;_Q3ofLdt@4f u6j " ޥ3Hc`0ibeG_iu0(iBQ1bMM}z+^KŬyReCSf8Yf+QTߓ|{ Z17SxIOuy0)P: i{`i7)$`J7: Z"}Ԋ^<!=u@_J7$iB( "Wezϫ[<oMMX#h]gR9K*:w`bp'l` e.8ٶ5"]G"lCfy,%98hzd.m3W}XSl/ H/\@dG@FĮVpRr+~U8yM%|T,庒l,.[uJly|B=+^M6?,N5,bemHVVap/uײQ32d`¢^m 0ޚ,.|#SAjL%.3EFF+HX֎(3.n[|svYj] Bг1Ƴ)>Ѷ6rԶt/f郱:nyb'ON\Cd7~ t Ơo\~ ݿ~S{{6܉&Nj!KN/f1PAڀތ+X+ڸŸxǫ烦F-Иc.H̥_k}yxL i<,n4ƢD5v'P;ޥ6R*>6#9&E]2;5[iV 7Y *:{S PCȭ٩*|]IC׍@qåUEjMÄ4D`gg [t!m>M2. ]|h,?cȅRϺ8z~}oH&a!]V ,CLR|Tn??.ʅ\>BsZJCm=b~c>=`+䅻?d]ݦ2F]ZLSN7cWx7>i-! u;fGV‡/ZVXrvUk%F񦝽)O,\ȆݞVf~:♡̬ꨁ3'(&Q:z8z}YyJbD肴Ct ;D O)ٲm勑zI}6MWb+a?EF4Z#z$^;5Aa ֘f.h u,\ǽv?Iܤ"Wefݽ>\U7Vy^%UT\f @~fS(~XKRWq8G's0q5ކVMʼF CbJfse-7jiXe%o!Ui߶N6nʹ2"vxDLNjs1ЦGg0dꨐo yN65$w,cҳc[֝+dLbY?|b N$ 4H*ic{pd$q"60<ړaѢ}*bnuZ7ã˓[I,;T!罫jhIa|L,j]/9-m#e[6JK)M76O@* aOFzۏ?YVD.*NuG]ӽ~]s;:IjRٝ<4܍'YHIk=4CL͇G\{V5  ]8ѕFo ^+S>HZ;eX P:5,,4 rmd:`!gq`5hҰd?KVCL׍SAb笞qqj>En\8^j_{­jpk*D]c+$1Mqk1oPY\iV⑛ {-U2CO6(CawXJcd~1~Qrwyӝ3LK (eNAkKOKO7paP]shFm)\ΖIbfi8`g.Ů #vFMm }8)coh6:o02V (9yr=yjhqt(z[v1HwޯGj6s[Cn\pO_ě[ڏ7`K>wX=VfD', -؂jtAMvK5${훆vF 1 *tR_}#/1J)iGf:#5QГdzf!qۈDpDv0Hw14<=Ok)' 3h1a&hlf8K߲HWlWGJVTLD>ׯRӿ6o浃Bh6C 9:=^}rS*4N.],(LldO_MpVAgsЀLw8rE&Uy+no\``O';f'!1JopK/ˋfw iN5 S>$ȍ`{rWA?Z?FchSW#=g0?C1CF0w!*I(X3AeQuP6xڪS7vipQwpSWAPf΁P?Q] {8(4٬54^j`h(c9  68W^=eJ ݫ~i/-7-Zv$T$mM';PKoýYF?kPbgnRrl1!Sxl a=+87JaF׏l e𒾼--Ho1Fpxį 6t |r}F{#lqݠ'Jץ`}|}FZt D(CD/3Kkiv㢨L},C*Ww%(\Hi<- y,%% +v M\ +.>!;8exb)fY$Ij&i3>xHg^, W"~I:vp0VMP;4hHBȓUqERMVVzz{.3"'k=EyJ6f3(6j-vS8qP^b(30%r 8Tqi^2{ijSJ#/3>P{<{d'K:b2F|jJ r3᥇z( =VJ fYt:߭>Fz3O>U*d]@k  /-/%ʛ @|_e!Ac}B;kUmm려}PvՉ]t~!Ei柕kL֮ RP Ң\Spt@#6>]1- η󺣷.\iYKUm׎,p_fk&QSmbbjc}p\jIں&}p};|[TZnPb_ѯRp;X-"՝a 9xAlIbU'Azқ|eSuYϞjNtFM*)4сLzXo7/C&c)zNQs.>py&b ߄N+phZ+9i 2*")*g~ς#{ هuN\B|u#xgd GԀE[O*'Ը1^~0["+GDoK 0!x b@s/gNaGDP??֖s5r?a"qPi܁` ;юաgI3c`O[/}=MS/pegҔbτ&[qYn6tEt5RƷcCzQ:{ӃqKUCËlXbv5xW~,IuW\_s]qAi樦W³YJ&d[ P.7>Zc֒<&1̶0g":JW ۴#es2 1Ҿh V/Qnto0Dk>x.P/$婝I7,G.2[´21p)ƭ\xècpaGH>_\yH62.CO/!njKW Q},1 =pN 1$.q%#Ծ̍&`A犢[:@f?J'jlK3x|f\Tqs6ҳ[Ď(Z[Z~ M' ѺS'\w uvhM.A`~Agkr i1y+Nc_F~^H|8R1absNWsnՂ9d/GJln RP42k cFϤ-BV:4mOuhPM !!HYŭ|VA%r6#W:)ot@+D)7Bruk~)Z+k/H+f`9+hږ@;Hpr6kЀG[㈟`ݔVܛ']YoRl(\#Kɥ NJZ};A98 We:+OGpƽs'^{e~lֵ!]2Oކϩ*V_Hni Q L_of\9 F,SG=fյu1v0'`8_kJg[h3f/S1BT= nkh J*qFL5Æ %f=Ԋ+=b9CF4-yQ ! X49ͨk%+z@y 8&z%X"I\RDIr%Y 8hR8¢N9;OTß<@b u$Z6Pg"2٢Eo-D\L.d•m\}Lpc5.?diy3yB}k;*3J43 8M]&]{±[rVpS FB~N] `{ nF nAU㌼E[O$w{CR~ٵ5St"=jPPy_8Xn׈ss!,KfT~)vxKAu }mU ,YH@3߮PqK/8?ҌQyr2hZ!0; qytG/,R# ՔBneB윚S]6K򓤻p[q.d)6çAL>"7U"uU{n\}j'ʺlJ˅j_ڏ $YUgB/4`e3 mV2mSUiTơ0ףbhw]䑑>aoڏu QY K-E,`P@:K0w 1|IJU9Ē A6 8`}5ȄV! ՟tڞw$ˇ^FCI=¾OXܜb.Ź8̍P;]ufSjpF߼ތ*F%N-͖gVo/q([-#ƬzO{/Z3{TJ몤6p7uq:uAGYY6'c.JʧECUkV"e& B6_Ku E#wë@*v*:}2w,k1ڏV8_'$ev65 RNL{{B> TiSN?PLcXkA/r%nlϭ _w{1H47rfWRJ`d%AM`-\tD !(E@rkW@-_O@"?^lm׮B-1t)5%$Zc^ze3xh~ MV8~{}X7)K`rXѵ8wod!՞b. y94cv+pgr`c+"ZmY *dhW׆py:K$'VDD|BÅ\Ai.'4X ƭXe(bDmͤ&+$""UDYENm\ZCf#7ji{MBy&t`h>`,R“!9 Sdb E!Ѷ?op/GdCAIfSPk1fm/+%3z 0$U((VO8nqm>{7̘Ǣd&4¬'<zy]:ĒeFh-ij4]뫽%-A!ۀFެ_R='x*3MF~d1DDo5 s<[BͲ%QWB8_z.7 \jTo0%R}I8,%^90:fR7.n,ś a`d ژ*?Œ>XJB%q>/3b/[п,<80Ѥ IdjگjN2Ǟl4e,iq]j 5]JoSy8]y5fﰢ#";9ֽ0yOW0BX(l>:1}QSCAᙈ2WwoꬕȥFd?_?j1.T*!ܶ x-SQ'탇ZTlptŭ M;|oQu*m!gIPv]l t6i*d1eK2> &8[WvۧD]d(!u|]Ž?+a{%bsf9ݳA,,4 & 6AjT=3 8N8N3U_S;rs /Ucv+g0 /M9`Ge1 N2y?[{)n/y AEN1͸'wdƒ3ڠ0daO&pf qoa9zNjV.vfS/J'/$N$9n\e᧺trk5<gm+BI Sg00,.sS!E>?Y`J%H~,dٮ$< l;cZjML]C/OmZarGeI4oD]Uxϻ%M/^lOha衒:0Ez rt+k#Bi e!(/t DnG4VfDXL ͉#J+<"L!c4tL׾xB.Q(!&ԛ:Xc[ޟ YiG"mfKU\ʘK4kexAΫ2]u1&>?w7HɫUe  %S8(۝*RA}QN'TG}մoџDC(2Q]]9z|A8kK"_seo$$I%otR`Ǖ||L=)ʺ(QBrYѧ{-v+.Y"ɣyġ8"zD+\R B( ѽq6~-)ƊC;҈^ }|tۋ-dڞmZl,LE|39~Kn:AuW˶I' ȚĶdS=Yx22(Rq.^Oy粐 D@~0)M^2ulikwbR.*o'5rJvx% ߫CZZ0UPp7@xN~ $3H|t?g, c:=Uu2-GJN - }^)f$pkO;R "ݶbQn=yt vXU0Suvtx k[ ^,OclLث@f?*3mS+1O REB:rzܻ\EXݟ@ 5IX*]X }<ځv9Ѭ- ʵc7A_bBzNVgpewc)V>F}2z*io2OkرJ p1L[ 8 *pcFpKbu"NJGF ks.=ˏV"^DƮSk=/H_] @Qx~ 7Οבv;ZNk; GTC ):B?q.5cpiH+1-BRxO1Mao v;sX#-Av^%Gs%ƀf-{y=t8Mh[GPvJ/*>*CU^o 1@ʐ68Ja/l=/4 WwIu=9y-#Ѯ3c* XASZSz7ߐ'X4;C ZWwH-a떗U)/T^q yXv#Wv0HK+v&uS`_gm6\tI$_2'jv*pǢ}p0ʻA^ q[yB^Bkk{ yg%؄pX 4@R%+]-+mHik 8)X8LޕMsoM({6 S/|U qʸ'0 znvtkIH)ӛ,fi"+W5"J$;95#_9M? FG\UOhS8'N7mMdtYS P]_諨OHVit+^=-qb;ؖ:9~Ю*}x֨T~rg(sZ">@rVsL;!%Q)L8t! R Ԕ; .= 3.ܩ[&ƆȂX^"I@],"N5~4d`BiTgF=ZE0'Kľ7y \C)w*ݣ>@CXu=,éEcvˇ6 *0%3r~;W%8$[?]UuCMϔ+CI>j>Gm%fȜוֹfj< cDBQ34De^P47"xM&4WGv3 Fÿٙ >ɴNSğЇx("# L™ "<]"Q'K#.ŐM9O2hC RHP(!l4Rd# tU.V?a Ψwg/`UWaa'^E,׏1 \Mr7K]w' #ah7N2iTm 1 gtӔU(is'A" i|<jw2*+)dz@q+W`k@ y`Yͧn|NB/ڗs36h;H>#LRBB_Όl {!r^XM <ƁO{v|<(W쮹5r1K#o q9׷)l01ݱ=˹Â@Y{ݦӥ"yBLˬq4$|z򩒪plbz5]ɾ}Տirmʒ#ps{ʖEԲOϰJlb\!b;{.5iPz;l̞WC?FG|yk!\G7١Gۮ0B,!䟜nA;Too5K1-UGeܦηAXܗ&!߱Btee^PMhݳɗJޅ0¥oKi+De%4zR1Z6˓CƔA F7ߞl]/}&T])4jvǀnPo(=ڷxgƕը !r.fE"c;Hbe O[JBJm[&Nf)]E+Sqŧ~*:}b{ L>o>Bg$|O{|&5@X؞,I['KvS<}Xu>\'ԼȾPRk1C-cZ~ɻ9r`; #)FP KHxo|Ќ#lehqz ϔHT1sכ5Ju}iJ(񆧕/AE El]x47(tu)S3cjwj_qZrTŗjLy=tմPAAo6Ud Ղ b !&3&" P32,ڕw+0ßiRv/2SҨ&d2JG#RbwpBH~薊~[;,ܤ`R ;n X# ̏!hpb ⓼nC|\Lي|kfG dc~ [hj϶Ôz(W5Zrn5n+ŅqMIx:ʼn`@=۬H~ͭ{v(`wJi#,nW?+p'ZC]Ǵ+@|CChK|SjXܧLvu§Ɏ9s!9x&!AiӨ% uR*.6)ͬM-1 ;!"2+d%*q(Őnc[) l##TYPP+h7RxrC@I練b")nA}P}IJOŠHLz L*< f7e?%y;TL1H!^07`7 ´Z r_X C^$"Bb)ܠaL_ΑmX8r:;aPF,V vN!rc՗Ekd@/c=X>dVN[>@@c?l^4!źE4n.qD~Sk̊S:\d"9Sd+֒)j!()+L> ,y93Yf۹t|]zEc Ώө{]З:b7h]#; iSpzD]U_\N*1eFȷo)bA$tBU4KWw#VRw$M~ck-k]-e[Ј s>DbMxfWso樨,=͋9? NH~]{{y_T )ٖ]) BIjkIU/_yN>{sݟ(i Α,io *-!l@D[޾ve=F ^  bRSHU9Iio]I5()*GFżz2S;UuGW]ljRaKCp^gբa܌C лnT'-(sxux0e z0!pB 's{eVE\>P=稘ԑ`X9C0}ןQ$vd{V22/X1H%&aNxj#j&p=;V=L3aL6!l(XO^  T4AJrˡ5 j/<: 0VGy8E^nd`UkMHu-A5,eu7r|ˣM<ą9y9bnC%RN ŦDZ21@gVn/jhܵ1ƨ2فWv3혛nLa S&1N9#弼#4߽ZkE̪+[o@2GE&gWi~p D?b7>Ŏexhyo:i/)eHhPEX]f{3\Na;80'Wr/> o8gbC<*V5#1mY^i{[)3>RgqCKC $x.7+ z? 1t(c6tWgvm&d.MAUqݞ~LuE.dJ ݆UB_ l)qN#Ffؙ$rMAe"X;rTĢ<(hky옔{:z֙ϟeY;T@4ƜpWRy'uZ{DUpY/3ky_^[<%0: ]xg4cY1+'{LBb0%eTOUϢ!/_hf,pJHX*U)Ysp#C,Xd@r!639=)L]\sV4}6TIWV\rǾ^bt9;Q<Q+X^>lkatfQ//&^6*qt$č+·,HoojG߉oګ)T)g<-li*dʉ_| 6<.kYvIR}/$ga]SD@:0 m2zcǭ8cY% v>ar9Ւd87B,ڤO xpJ#P.J>poӬ|uXXX3捼gh|x8gU, ~V;3>5YS1j!4rɍ,k >JНzgmS\X` cy- $ʤ*ϺP[RۘCZڛ4?-X)P53h%vZhu9ehS™RĖ]8|X~:0?㋠7!Gmѫa$h txWS، oej+]?=:7L­K{pdժwӮ p{dX=NYW+Lh ܺܘΫA5u'KQ @^H5W&X7vT8#Wz.I͘0I2Quʒaz]pc!1so3&*9煋#D4Rα~&h /7{;sxXH/حaS\m'&լyJ#)r rBC'=|2OW)&jW+!PE5OC#gԵYVz4fꚅᓲॼ"V2nSo"268Vp$6[M<Kb펳΋ppT5ᷮNUa%\u| O< Ji8QQsڞ&;vfd; @44r 3ԢBV6>,AJ J2^+;rPؓV#Zr[)S%VgiS= ->cR: k5~\/N~!}Nf 묨\?/G\ b{!8j:՝J8];ea%ϝ09;`b HsS} ǽ{=Fd^tb| yyo؃?D7|$2=Tv (*[4N;}j~e ⣉WsޡUDQL'{.@lcxs^xH$> K@&K?O }i*%#u]E ۵-"ڊS7RTrƹC9^z!:769'ԦI K)D4aBv5=mnoiB0IP<>'Z΢y70n1[ۃE P(7\"K^bs3QY?s*VTN(m#Sh:cXR')r߷[;ȋQb\yur"*sE}o1AY$E)ox* doy7p9< h"Qtw̅CW=Yɼ2Nj.z* %yݒ5\kL~ي9ٝc:G3Š:-]Y` <^8Ke$w|Na\lmd3zC9Pv9ZoE=T-9|בk>&mܦ_y8:Y.&cH+RP1vvI_tk}" 5bG{ 4yQK|j҃2?ML#aTʪѳv*wٕ۔e𖓏#byS6j5# 8ԕ85͓o4 f7 0?FBˉHJ,uACZlz\^oal,t1)}GY=|X%g'4VH?L! Y#&iX^*!_Uk4wv_]aUe#˭?knoh@8cZsdU`δFlhL[K*iT♵Y@w|m7O *k礮2㓋뵵fUt[ 5&E'O;NJe,qew-g p>hx̙Y$6o mҷF**K A 7൯1l\\\޻z_ty+[^ Jw2LePì9v@p-u 8U4o(Rey=j j$t!"Ovo39QQ[+)y5nc6C*&hoKKȭ~1!!U2L4",CP+ Vk]=` EW3!x\ش&"~§U z孈RiAt >h-V }L޼q7S吱;بʎV83v\!yQF\C*垨.oYe+?\ d&mp|%ʻL{^%G7Bh=2Yl֮? oċD .{HEqŁP9̌uL\ `b_OW@0-H@o^ƽ^:zǻ3GI WxxLjjv<:sBb.B`xf<flE{Ig lG\'MP"^8>$z1{G وsɛWbEĂР%,Hl:,S& VVl$kDz >4S֘1#So㾼|Ta 6O{,kbs)Sb=w>b]1ϣ0ɣD0oPd2 J))HLSOP“qOY|&W ?͟p`ϞPD` yYvqZZ!kqyU|ORAKА#L(3Û?C%J lLKRsYWWȜ;)U_c ?T0Ц("e <TVUj4j:;P  WKzm6XzN$`{9_N 'wHng7%j:P rn#Jw=WzgHՅZ0Jw{?!a *잚m`\!O'ȓoP 2kR̕/N>dt{_`^%,w-γދz]HMk 4M,5fDTfÏZxƈazr!c 71O o庨s}k|D(ƶg!㗕x%Ԍ$xxԬ޹ro -Ψ|P'Ӫ{s2 ҇bD 0Mi$j3@eL=UBH׎X{!]з\2h#}?\LߤAVw޵v6ƠwAZorgFvl]vcX.%҇ax \'rٱ=,ˆ̰_]G!)+W:f}@0+r8gԖvhO~ZyQ97Imבa:_HG{HOoA\WvGԎ3O| ð g|Iܓ%LXHyMgdņW F<Ъe+;)t:*i^.yG0dײ_2 ){2QC0;Okz* @)$^3?QZ0KJD8YcGB.{x80K¤֕S~bƫ? h/" KUu>(UrJ"{Y?K"%OR cm)T|?ki%6C+Su665oK<'DOkRSl 4nB7oTq=102I@wE{nŌ4{5xK \̬?$u,S.=rɘP7ՁU/_M7=Ȋ+(G'Zhwy}wx}376Q jWz4/!2ٖ9}@ul3GлX=᪝Π`$Sȃv rKv@ ֞y/ceʽs 9ڊIсu/z{l6f(G:J[{4Ւcŭm^ЅL6c~S$_'KۮY/tE5g{`A*_ň؟G`2D]J$ra*PS˳8x1kA=r_V\횀H r} ^g•c~g[!9Ǡ|(v.2%*zm%Ϭ}Rд|e٧Sb ֎W@ɋ$ Y۲hWhMToUD&tmi[/1Ո%Zpm$h<45XE+y1,F_ `hu(EG;6$;"1hbz.'\8(}lb2yS?}(G!A.q.up)8 dŜW.=~1| KF{[d•;;Gl<8FhT}GTz" (z0b Ar5W@i6c]Ҳ 4.WJϞ>$gB>܍v#p;kD=Kx W[ֺZBn+)u_' sSX`R${T˛[_aaޅNdrA?SնCZH,(̆0P^\9MmU7F+)֠E29 tk=j (h$2`2&<%9 ߚR!տ4E3R'\M6˺P#zN []4a3(=4n]hlzXMiQDĭkg$,FgIwۛCՆ)YGDp:TRS}gl אj&ءr=Q]oO(Q=u|()B99z׿A0UO^w J;}/*D!mJG,A6\ee^s<_8{ |JV#y:+]\ `H_TtYVxYW4.3THpKο.p|O!\?jm}5όXaѹUjTY oxw@jsmL?OH+-2u $6qHZJZֽq(Gge'31 'UhuC7B>_6n˭?tt_9odcI-0[qDdu7Q67޴)|NYm]mGTkwwwA|c귚4))XZꓳq2壴-!',{B: D)ސ+5_o'uGDE@x~x.|gy]O kNc1 9mOXW|?{ _(XAt,1I`7QQ>&uX7iKjM㊕@~hY7N~[I C:wPն Tu'NӦ ko &eI-F(X3d^,Z %(= | }IǶ@{x]muHqY ʼn&>(a Ԇ!녲DrʊU> )!4-42~q5kuǍ&(C )1 sV{߫ iXCĺ9v Ț@ts]|-NKSwM1!%p3*MI0i{BP:nPk6RHq 8l|!PW?U Eia]1nO00&Ab,Z^V>lָu V-6b QӛOJ%(?þ3`aJ7~w$]7$#3F;#,P"D*Fh0BoGdmW̞O@?* (Sdqb?aWl()Вrk3~?!Z~`zi'l Bx0Ҩf*Z􉷅 {C 8(+huW՟$հ܉BO:QY;d8-v􃫠ŋ;^d0mS.pݟQц<!!B['mjxXdJrQAvX^ ni'C=|a]!~!_+|!yi;$~3oS%r`66UG#̶i0|L lq6_=,!fd# "L4gB7yK0DK%f\HϛHы'~<܀b.>h Ǹn<ڪ!Fcx*+qWJj:ky&\+\n5J)!WO+}݈8H+\8k f_|'HY+hw*x/a45$  c C&fž?Y)aDR]xLG/Ro_\ȖtEް ""n3xYWZ9BZymGS OX[cgłX8q%?f05osP ":ݣu>$q/rj(H\,1˒MdQ;!٭Dbv)ˌ9f\5\'V?mׯ`\* 𩣕}] w,/j!(gNgǻFZ9a~<4iáCE,lE?[mYb m}`SlQ %dM=u&<2SCQI2ƅK52-osGo M("{S@ZLQS@_CQ~ʨ7ahn|b|/L MF?z`Zf-L z[r>`Mfe8Ժ4 UgX,2@[FJ_{>F\bjyWhŪ"3`})xY:m#9u>Hh`* ^Ҁ=;x0s51A2lCvr`sV,uL1/5a|vcQE[TcL` P ;&Bf?u?hyܠVTȁi7؇&wD{ {ӆ7o#fl=RB#EOnEB*nu&C,֊3c}Hy66L.zǼrԬm]~GV 2.4?R\+k*N vןES4oFsc<@1!psQw&b#AJTj n ?S Khm ^ = yWp۶e/?aJ=h*7"ɽy fJRcE!^ņēcPo,o!LՕ~xҊwxykY.Ŗm0gCBѨt! ա%0i,PMt~x6.Zr:oՠInNwwDo%)Ố'lTȁĘ">cedV8 VoE=F) kxP_f"[Qs_ԪynP3깶]]LB܋ba-ZOr >~RF_G.,J' d=q4uoU81~" ~zyw *<_dR{4Dž=^D hz׮Oh9J&=0`8{H0䌿4CU%Y.K+e)ƪI˭0N;#7_IpޚWC%`&jfS TWzz)?n6Qnk˴L3"l1cRM1/-} 2Z 9O̔~2N8Lm˨`⼿eX]a:Q+gld[A9p%:V4 lVkj}gf }xJ; ½oKC'K \᳻aK/h{ۑ-k0(n(,/)L)L JeNCvO^U0н-60#YaQG6$8loӍƏbЇ !!in&fۦdGÊD8A QpEޮBO<8~̺?%<}cyrA sZ\MXY]t76M+ētppi8:* m~XFVŧbumrPdVhC 3@q!:p4}R{}B!oWLn2BB)IX7Z#T Hǚd,LF sqel\'G1BEh=`-N!Hb 8!;1S@t"ZM'ae10Őg5l3N=$K S=]SR)|I${sw~ jQzDtig:H!Sf3/WO~W d7rqX#kӏقc'wrΜ eY> > hBQ{j&y.0{˄W3_mldK|tfo;RvFـ |ܾ%O_. ^{]cq`$Z%o]M*96z@1{ϗ^c }%΋2~rZ CJ}ę̶`ފ.@kh`ꔮ 4LmƁ&ʢry! Qk)Mm9V!0WO]@#w=}NR3Z& :6m×f| szjeXP|X"3{L86oh1 tsyQ*9]nFc{q;9+NU[UY/쨸z".ŽZE踞;T{Fdj{rY-`OGL4;2}Ci:L׉ `xt {ϹK.XwWl`fI:6(bx![$yDx|l|:rN ؍-4N/@hVG;'8(W|Eb9I4u@T$w <nsB798E^tGiTΓʶ@6\ Zg-/UU(%[>Ii{pCp: ߵ i8YxfWRVZhD8:4mQCBO fnsfǽډ;/fa ݨ!A¾mN\S(שlVHz."?2]%- 1k)yT.iDN$q7 Ʋ}(m4f`tu!A;98ӌ>耣ʷ tp*=S^'gka'r|>N}rsZ{Q~&8v5;jJDŽ0O1]1/bmQBv޲Q1K%Z(_4E CQhKV\oXKؐ3eHS/ Q('aؕ:45,+L֓آ,5ثz6FX卹MlhO^U"LCuZGU>B⫔{C=f`/bBQOG`>Q8 -VйkRVre,jKjX9SC.V =czPrG`j:.^{|JsA{ UQWX%cn7Wj\e ߺ%,VX(#J>~sʂG"[Ϸ L;DhO?];nsIn5sn"~ymPpp;qtc.%~?Nc t8s;K:0bh'b,nVw`R(Wa: рO} v: 4&\cxz3 چJ= J$Q~^ ^k4GcI6rUMۖ V 9n1 A6LU'jWD_>Dʐw/{"8T3SAb  dJ13t!{iPz+jop,u^h4:5\$)ǃ9>%r`T$E(~b,/ s&Ўj/澛:fu`T&)j-f"YBQW s)rioE>Ż|XK%_=EbCoCJƫϒR'Q{lx*r5sp3Mث聴 r7I9kX469u/7 ^

N/m@:9J?'SMi#, "n61^C8tr{ ]=C[|>^O7KI:q֤@E0U6X-_E7f_|ڪ52l7"6Jh)%yΔ3?3~3.Kρ%ɾAcnlE ՚*+. eaf0U%zdX&"9xq,gŝV1 kuhq k*/.d0CGp=~n1@AkLkPɮh/d Qp_}'`ސ+:~gZ&_b# ZSWւޠ<5CkTE{WMUe&L>cS ғQZɠ h5ix^=/ځbJfe"Vs`=!%XJj=If|n>1h$!g+L1tk$3!$A&;LAVƐFWM$LIiਵnv0sr;[  $|-_:Juc "k߾(e,n+uvweG&k1Ib&!f(!6q6<ϻw);A>#c;ڻ}5+L=̼Iy<טPi$me&F7${ZyicغcCEH8"cGq at+:CHհ*K82&<+$B H )&G%͚M%QOQK`۝& ǚ2-uxJZ&(oI{bË]YT\m86}T[#[+/(gn18.ܩ(/`9?g<{ -^8ZQ#_iѐ]1Mܪ^.8@*]ZL6و*w{G$o:$+Vd/u0}kCg%=Rsk$ %-g%jEo11< -SWo3UzWO ߖ𑉣]( &`] {iq e0aSY.,;.'^-,! \#("tQ OSe2/({5@e W .aaXA@ ;PGRGIi:w.{"joQ`)3^ 5dԏ&V+728v&(:4$—v^v $ȒjUGqnKPy XV핬}X$UDx p!8 } -5 .+ ,0'p湑?IXMh1Y*D 9ٵA g~L guJ=@zg/FAwSDvU0X%rs,ќ\;[KZokzR 1$L7R`&*bKprGyV W8>&0 _fP?|OI$5ځ^8VН' (\gxÕl n'8 C>Ԃ*=j Kݏfq6S~gY Ǒ\7Qz):GvNN)VX,/):,FV́9i3V^ ?>i$.&'c$43E1Q%RNɖUTTxMtT7Ьk9>ko"##ݯ/YF e`J[ 17?<2)`B95B=?8oV&sŗlaɹ:P3X'VCk;PJMYҔ%`_`9pT*2H}HdŁM嶵zlN߸Ƨ`zt2ˆ+SȲ,H1mڂdϗdT bCE&B68IGP ݔ M?3A62 7ot%y/>,AIoyϤ62ɡth\Fl %B =|d WO%U7ՖވNa͂<([DP .yT_hw ʰHܟr7NdA(iĐ`^,90%Kߔ zIPλ!^Zx.=븅O~~r$08_RY3`'7;3gRW%M?ЕĞ#\xX)O/2Bf9ICb0>nJZ|{Y >L] vO '\C/Sk֯:`m=15ߑ$-tmUd>^AWޏ!EOe\bM} opUYm;o /ʕ(lGCAoA:t-eUe?iH<Xnf`g5I@I1syp-roez tS?B~4.Jӡ;O0G"te!> g]KfRLVWYɳR֦%H{,Kʵi-Jr̤-ߝe &%nvanМ IPTt$MW.wp"#5m5 >B_GaZ BD+6{Jk#Ge;H[D(c~(Rm9H@kIPސzPZNy1:VR?Vk'ZJpaI5M> s*<)=*侺hޜ6 LuQ@;^bAk1s$n8yvj}-#&{,OU]+H~:?.'u?S (usL#)A*!\_F{~-([`;ZBa b>D/ Z]!G sb;H~et{v+9Z"1!GbFK|5 e]C-'!/@abl]y)&Z%*x xU=>R$!cjeCCVVقkWX+btا;=E\g$}Q^GE_GsŠ t e`+3#oIPeIptcI[{ޅd̗25nOES_Ѿ՜S!!;5G!_Jkuu}o]<EX蘐N8w#Ӷ-`jK! & -~F7`] ZtwZ(ϡ~v *%Brcb̍D>ibyv\Od~lgwW^N}W',ɵI[ ~dz'oEFf,ŒX@V)?ФEɈ&qEtE5 nO{ݼ7QV&RrpM % zcVRn t.]eݹ`inR?.b.w)HEӃ&{w6aw]TO xmugu >qi#K9PV-Q~Եf)NI=p| iմ8 )rtGqXׅpw[^P/t|/N?fiӉa-Ns7>43c=eUB0M''"ݣuW]C_J$ LAjp$H~N3 rF[ἄJ$϶8X35w֛,\bbta68W}y$I:%Q0v팪,1w CMsH7zX~"צ+585g2%5co#ʽ'W4uy6w0; 0gFɉˏIZXK>͘Gx~})/pD]r)Bkfhoo84+OcLE跡Ps*"pk*)CD]$,PSB/6jc:UTRErZtRb7#TBFM;MJB x-k݉H煲Kvk?wN'StUû)Q_1l$|83 R<7xf*TҾCתQkjA}\f TCW*h㸃BƾaW[l1,=zO֜}bf@RA1ϛ^31]+(F<<8{|))<yEʾtތf!?!Swc |t /fsZt3{J>T `5`j\پn|!QOr%abZHA2s pS> V]jROvb%}, Z85 ;0`,X~l7F(D?y .b;F"Iуo}չQ ni}.}>ω|x}KƧuq3zoyɴłĀg7%R>)8~:L=,':ˆ|"%ƨat(.CXjgwAlzn"Zݑ(nL l5#x`Auڃ)MN/AA6 #{vD_U8 -`C}#5gKOBD*%pui=Npp$Le;\lg7EȚ90^0 % GOoB:xeՐRd+P_8 U_$Uwi%U2%IRH}" }gFnA?L]r}"w%dԥYtk q6 ;޴Aii$=("n yWC;o&#B,[:uy$جhm˿t}j<4*}P{*zub\[$SޫҮ%mZIRvㆸ$fIM(uZʸx0McUg9grrZдs/1|ZTOJa+sN!,r# :{46iCU9gcs.hڲ9l9r=@4:*G^9 ]ڈwgO-Sp(lʼnI\JCO ⠆OAE{nRE 6#FiQ@?.o1kY7+powW^BMv!p s=M[JWjk>sN7%']oa^Ӄ*_BeS|KXN268JetS}Fi,_9oۓej RA,3?!Hkc 8W;[Fmkb}& zrpF]i+ FfN +&{?(yc@F>'dOs<@qZC.<%mC]NS~⾘f1ԙ!yùF^!`g иA vPԈ"Kɖj44!o}UMKx?<)f!cG!iRo`!ܛ; d`LYei\<+iXK*iIvt(bB2ޙi|@,FnX[$ MuUX-Ζ6a2E|]cm5+' M2vĤG)r: hM"aT}- /rAsz߻d)pؙw+c2xLJC/IwS2Cȸ13?NLpqf`G*x3WFEcv7K9J^mVm3 58VO Uf+)Ǐ7lKZxM3v|k mu$PBnͪuCyzwrJV0Q4?HY3ocxoO4F)"y#3:T9^[!Xf,,MsUM#T{~ij{EEۄO] {b1n Yirõ>|7ѭ9?CU-3D[)@6&Y\H?=8>3CzkBRa*AL:K[66ʊ̬>-ɭgkS"|VǦ5CVHHF_1m!vGa%Hۏ?U:۟]Q+sdL2XZPc )WU. @ jg)h@w*sohn,2 Yo<#-x$M"ʁEd%h8|-DOcto,)t%z {=8K hbsAfWy+G4)lˣa+D;fS0XE/ξɣ=& _ku' l Rzu?tclٜ-dV.LW O_MOJW3yXa <<{`qE ,/<>^zQ*>HecLs&9BAL:aM3\8K舰x|°w<㵶F"(ruAͱT enIbx'3SR,/R}﫢T#07 .ۜ-_χ=V.7;y0O{3Fb}1s!H 4zv\)uw \Q^;Р0{%V80;0|(3S< jEqj$lOA>-fḊpUaWb'ώTI`5"tRMb 赚B+~afG&*~:h֡gdN߃ W#kv8xU^Lf: tJ|msJbCWAݯݻMGIV0%x{ɱs]7)䤞͜ ő_}z܊I{OCJ:!;TSd\K;XO;mKT`쇸؄Esc,ˆ4?o$^qVK\bA4n="p$"}OVu9طNJ4)z5a,۬"(K"0I΂,]$ \` 7E@ Wsk`˕ 'km'tsWe{˜^j%3+z9Ce݈(@YKry+hedw􁛇+j  ]dJ(ޭ(C 1K#8n%@*vڃk3Kcst)MFw̾ Ohv0, nhXޙ݈܂ kBW^;NVf$<. M'wBw`!A5:X@o=eI'Q:toF1|wb5$1 قɍM=j$s( QmM*^+$CR!">sxᒠбyuGceNF\H! ,Mp,X?C;/;ZpOuҕTs*9"1XZ 8oOAfl熯$.Qln;3i_28xI*KSz| x)v|:|LudWE<|qZ+4gOyqRs6MZj|Lt)X:"kqjQ׎P4O@}tE7.DOeAw攈5'Ɲ#%?X Jvs+j3 ϳq/GjNKH墽 zGe[N^_`Cꟈ~omvͼ;T@H)C^2#Md|\b.m$[J<_scI}|2ρ4*F|5ڕ\R6{4p&KIR qG<#PRh尜yh6|M Xgiڜ GuqSZڠJmiDfsd7HhGb: bGgLy T#K 7}az K@Urw]&Ϥ l%DQIQwTt37w9AVe%|Rۡ/SRѷpN0;l7((c/?<~D r2Hô\4b c>MnJEUə$LI{E"\]M%tcqL굓qdcL58oB~r>%@sRy˛ur6Z`;IfgxQ/$a8EգUNXGn^D4meoB9{OqaANP.҉^6aj8^ DcҚ#YwfLP]lVcj> c:@zms9*hù R&>oJz421Yb˜3$Uc[(M׀JG~L*&7ۊ!Q*6αi4vۏGҐӍJhy\lܢ@sifO[ȍ|_2L̃reKMoʲ);@^-,/q6hAiϬ#v,,}sm̘vT8NmNзӡm0$ĕkD&D, WA}XCr܃[ݶ+L|϶n|Vb,'Fb2YZD-J$! UcU /r5Wih(9JI@¯! 4'MAPeW12w$44rYIh`wFd)k\D> Eb0"osп8~6PUAdmqZe fip:\ Gkv Kӓ`Km򪣃+?e4C,Ct5 M?K(y 5 W )KPPCbB|'l#W^R \>x[Eo$SiJk~EV6 @ #^kDF#ap*Mj2'Z%?q#4i6ˍuyr'oιOGzc.d;Tܵ+h,mä@3xZ&ej53$|BXN^Vv/#S(QM'7o3xz)~D̼k\b}C@;OmCϬ Г%D`Qu=ܔHgP5p8d+e_<;O{*d I+!Ʀ^Rp|^z'+.Sɋ1tt'vJJâ]fȋ|)Z ]築d7a/rxpYaO4]G==M̈P0( ga{-Pb%=ܶK8j2߶!5eCql;X Mgr eA QϼC;߷~;AWzh@ cXpAyr=@+°z@E-a/س~*);skBBw2mCZH&b>Р\D糳f] ƫ=nWOցC=W*; s/g$#p܂BS"+$4w)*3!*m202oƊwX<`0K}9Rݞϧb)êk-R, hf詌矻/T W/ Hp3lȱn ^U(=%xfC[c$XW.@#8[Z Ͱ~x=%Xfٻ䤩{Vm)miSO~3>tm$:qҊ{usv#"ҹB]}P0<7,Xɪ7,fV8 z珳REmbQuzCO +.&gMf{GSq/&G JմlgX帪H F1C]}яzZU?x1c*W%1K',A>I'-r^l3[ j٪!~_*־\u?(Ģ? tZdNC=tGv/r5K8/h+I>s9VS#/6mJ٩J0bY#'V0zb1RB$k6MRe}_ߙ#gmt@?#[Lx%4`#vvV+|Y^MAɎ{8d,%&"cJn^Uu=y1b¡; ;4oRа}Tt]ʑ&GHm[RAzd:.I/~_v]mWkO-Zm Ѹq=Np_[i=rk:'w;G)'V)9C} u1ɓ%]EM34wȑJ.-OkթB'̿i@ȡ1`ޫABHuFpTŧ`d^TB7OSIE`,N'p6 8P.33ZwG"yvR8f/n䅸L%T'MYe$'&Y@4'H! ^'G(dV&ǵuM>5Y `䉖Zגrh[(3Y- \7BUTVwJ18m/rlqMg5|0$N$C&DUAϕm谮u?28+=C2j0e~$1Z ng8}@,'Ѱǭk@wl<4h$@c8Np=3;:2wh'ˁd!|@F {Jg?/KoGLZS1Vɔ)OJ*8]h^!(˻A so#6x/> 5a #:FQ (,0F>CKceF YQc_]gC >oܱY8Mp$ m%K*uBMԠݼ:?9dR Mye i!0%&\Ϸ詆»] ]#cC5YMwcӯ^D47]pY}y f`p%zv qjy>Pn~G݁i P1EokΞP44ï.& ECjG)i~\m!KSC$R5'xJi*!th. F3N48H /3 XRůshЇ5}R#+]tn_ejt'ՎnXKrCxm:*6'PVԹ&և,mB {N][pLv{ 7QP @[Am)EWizנ\AUvy <4&-t129^N=$_ٶn)ge}Z;Vq}^ɺyˤgxJlX.)bbh]H"y)!$~(ݘ\MN hBΚ l$Âzn]lO`1Qy!pKD!y f88VF-E~dhSO> 8x~GFaKnv )Ox2$:W?m邨cVT07' e͕UθL69[vNY 4;Mv-X鼯=-qyԦxr~0DpjH U:aV, (HJ@B`3y?92q5f1rb amF:0KUc~,n|e[a +̦T`:' 8.6È*5s>zݽ_j4̯H}yp.Q 4Fȱke4Ü x~?ZD9e-O%RmUPlLYzV| eEK]F̽_K%=X [ !FƢ¶6m:)4D(5tIZVv1o2v_rOW9O~s Zs4sހnv ]5(q'*F}"0hdvJDq Թ>_ + ( +<$?I`@Ѯ'jPYk͖g& ǰ6/y vQb; k?~ܴ'EתCzOiJY yOm CYG&` G<S9.z_8 =8=T>GH 3F&=eGWM +aTpe- <K=QnvH)ˋ{tqG%d LMJW.GI3A~coz*lI}xAl "&bHZ˜GLX7|q>( !+&YZW@A?hl1Eվ-d~$.Mdզc49xxk%h* '-CR(yٟp?+'V-8;*צpߪX)<apt7@g\5`U$gnc;ut<繣{l{ ӿeԃgc+"EΜPtbD޳ vʢjh:).>4v [`SzO[^gsmrZs:fobU!3[ԘZtnE]섖8ߒ#N^m VK[?MR.𵱀@{2B}10j 휜3@]',I51J_Jj+oֳlZPES*c1;Wir8C bMCh|HQQQ>ϞWBXss85abN1}k2{n&"&tdDu gB!xLK"o}v̷ *&+ve2"y8O,8B=MY ,7 1@"'%TSђJ6ߩ15IՁ 13FY(^V֏bhQ%&Y:/ U"!e"51߶Uw8jVcɽ^-! I['ΛDF?_]W/0ztozBm~,Hq`"e5w'i"jx3@&5Y`~5(Zz\Ԉ8#iBUwuX\%0lfu aYZ1~eH-rMV@qC?<&Ix 51^2­ʁQc$`;z(>aTN24NjHEZ =: L0@u#j9鼟 "3B}u )uGqGB,h xai#%M?NxZǐJ~˷+YUHL1A)acOa$tȓ L&pLnܬjgXCPA@@fBTjࠋNEzc{R;y(|3(a&uIĖ/y3d_*}ԑ8PtEsd;V*c9ǂuu1E''?0ƒP; 8iqƪ0[o* E+fgkFJgK>+u{Q3mWֽOIU1#j#x~wF_#Zր.3r_vE "hpZ!d~?2^XDahf ߋ'O] c$ ]\ $k 'x¹LqXuC׀nn*/F&TX=8:!~#C]jф3>(-azFIOYHg +HE-},@6nJnLe.dMA/eґ3 ܢ /q@ =zmCGؙ%D|AB Q$^WC;J,w Db/]`wa5q6)Sh#<[LDJ ɦEL$P< M+&BUZ}F?[:Sm ',={ٽa5WXj4L1gМ kPR/DSr{ϫF~SNHUQu.:cX+k܅>^@-ދ2>7BĺoERT-lbPy3 `5f~9%S;cy3G)3kؽBk W3N,NM()ffO Rވ⾫qx g :RZr:LlAϓ;Ч^%!)(fwN߹tu=}U~|8ہƓ { gΊkju 0Z/F8^ ;#{'}h}%z x`Wl;KR[AsjH`< S3`gb>אj:1IG~?H= L%ys'ftr>+^OX|S\CT:{\3 Ge)Q X82;W/ɖ,V\(nd7'&Gԥ 17B9}W|ͻ;O;xxWa)ɡ MH,RF OGĝp/j] fBI{E;ٯ't:]S]E0\\I`HS0҂_L^0iFjppq&mQ9Uy޽TMW(W]GO _ o@17T ̯{Ugz4.ơ{V=ҋS=M|,Mx Py4?i%Yp5`\ٶtLH`|)rR/V퐑[xP..u"NeQ'(s7u_QVAJjnu˙Qrڌ \5 O WVRM`8<=&.r)3˝s C4&_#z(9ƹ pNXpRK+ !IK̦Y-p#\KC2}D>+}ͼ.fq-a|~>ݻ ADJ8yb`UwDL^wpy&xS(IwC f2';9*K\ hঅS]6d/IuGQ#V6>K+1M "|H+on͇4%)7i>d=n~*ԌNOd7 b!JSQa<9gIZ\? 9 *\~˶DGPE:iZ(9;6c;t3 9ʨ$0tIQ72 %XyMs}֒^gvOv[2U^ԹmLįHE~:=u@+ظhAP=/Thӊa^*deI*DF:-=/I0'NK*~úKV>5l+3Wjs+0,Չ||I'5a 0ސu,~(\&+R *EՖ`"P ~%}&‹tNXBŨI~Wӓ\H{B81yhۉ{$X#w޻B@`*̖KFҽH5eA;U>@Cfi#Fsz!\~&cbUHc  d!/#(?r۝eϙxUJF+lj1b,3>E܊̧/ }zSUq?I1ّs 48Pyɉ5栬uP,h} Dy_ok[fc5/YRN:].'njWX2+`KQ~ͬ{Yx[`̴Ucp0}f`~߄t'jm;ԓ/4Y.C7ߡe/4 ;4~Vv(aQZ$lk|B҉u%ei%1 g-Y@Tl-ukFjIeB 5S {.Jɨ1p#Bx C(A( Ӑ:1/"Bw{἗)IՁx7mW_ xpn(C|˺mä2cI/6 #7 bR.7~'*vtVln rDa/duǢTjtj8?T86ӧQn$jY[; 9,%6hSsI*CaRV'gT$S"Asb)aI*A)qXz&&@GX6s~ Ryr]/I;2b6l8?/ /X D6f=~+Oǭ6DԽJ,\P"*7AHDʱSrn\A!zӾVorlCg&ZIL\D:R?1krtnF!yvb^ 3z^o^CR셝1Dc/(C[}A{CEopЧ8h XyrP\,v鱘EPd~e["q!H)|kBSkZԪ)@}s7:ҝrfJyE6sR>zc$FDv [?oBl?'#L:kC\މ}1$Æ0ɦ04:a9?H`B/0g.N1^La0GF)m 9+$ O1s:Z)t;=Gk.}՟Z2\;Aq,y 41ҏ>>o]|wi+) xmn9A)@`B.}PUyݢ]F84Hq/1avCHr*0'C:i. к@V5c%IKw]wZl21Zi'(7#e@*[LfPZYIxfkr#5,y Ww)Fu#"7n2e5v7/ K&G8D0L@ěRs;{l]N6Jk~*`/},o%:Qk"Z5 S!JZ!*4fxr)dijqu l !7.14v"wd^Mz oWädW `B?)QFˬHUe@5+\GͿ6LEf|= s&E4ҐpM4ȌeffpEe''uO5DrןeA׾9CՐ ʊc7 +eMl/403UXtZa껿[u.ܟU{S@#p/#7e!A'd<;NPܤ(hF>5 ZL7`W(l+l{#]H90Uhyw^# lgH2A_NMΔD ~|~jH /ge1%z,slQ8.qtvtmX]"_NmQ5&NBru-桌ME,ލE2sxH Ez>qO j: ~d:N I Z.r hdLc=52Pݨj ѿ=^oT,Տwq9 ?{T;~Ɨ. 51_^='ȣ~Z(PxFg@8!o0f-wZZ n>un21Ia Ӻ*߂,aCX^2{P-xgbm1k W3g2)ܟ/)"}oM' {We(=^V^mo#iD/4EhBQjA5j.x)h&ShQD d_x1c-+>p1pP&F=%eiRg–Z h4af6 [_Y`aсN~To n'78h`xJ؋%0uˎmxs4=dxu nI^V˿YTlٷ6#p6iCm7F +C qt2,]bR딚;:d"/`fN$D]9S ȡXPy{ӼrSA+Ua\bSٱ W LFBy tHɣ([M) 7"`6oo=,&ga/ ɰq'sao%KTNHRvabë*{kfLg߸zO-7"a`?YFUlC#dRh'ҜXE+9Ibej2WS?3r"^A;)P Vw{!gxR>Z0'G%8| _2?5MϪ@*Rgb(g˥7`d@ۨVDHdQAz"D097C;rHEc$U:3N -oX#˒}?I4Փ[C7܉idRbW$sV|kbZ@g ILۙcdKMf6HZ"s`WL Υi=G. 6RV\ͼP؀TW@6m@,ğܰ:cpvnm<-U M}j,"jB}7y'jn\GE[BI~ڔEFx{{r D%&%^v/⭫[fQl3!G T=&,f,K7~m$HPW*NN!sUJCtry>{>zoJpk`|`zv91o[SF.6Xoge!*f%uK$)13 qXrsgHpvw y`^6n])&?[x, *BP@,`OAFD6xm9ZQFͅƽ9ѵH3g aio2׊H!'3IpMu@,41ۃ5T.YaZ]bیnSK ̣IվcȘ!Op"~m2oHntT2N~XƩ "9줿rm [:, C"DlA J[quukLi]lxy;T23,r>Ilh*"=[ O,uO!kM\@i*p-~;0ײ>M]v'mPp+X^LWx`F% 3D5N!frFx !)evW…_zmv2s^H?$,x&Xz(+SG[5g0drG~XFzY)\A6VG%ЃZO&!]on^6(* ( 퇬KwVwd6&3r"}\GL7TY7Gjrm$" :n gj=Ѹ9χۻ@ !%QHfr^2zǔ*rй%"Q("֔ lg+!YRo^Ũ5t-(6.h~#2 8vԚrYUgas.Ǜm^A81'ZỀCf%EZA<ZΦh`zڂ㼔Ʊ$Y˩.7Nj8z*7hK;o'u]@դaqՕV &OƘ v-'ũИ?˻)Zۯc)h=75,Vgo'$*W&}v4oW-|Y@.I=J/d5xBbګ~M w!U;H ՈcnAnѿݨZXR ,|Dȱ4d">)?g`-Ӻ;`b{6q!,ftPI gta[FZ6hAV :^@ݎ(Z~52'ofV(s `;!f6M5݀c L:ZyB Q\ēC =!?E% e+7tqR ; ǔDqΗ/+Y5~o9Wce% %x%$k }SnL>PR>E /̠Ѝ%0ի5qf PB Pgh#:lA\f-i^Zu:m~+@^Z$d@8O,|6 Eԯ(ߪ¨*7/_Yfm5E@?_e01S[zĊIsfhJb:Ҁ0fRh^픚2,bxAv-ϮШuYe pwXkܿV#4X<F4L *ecciD Ŏ?=w(A렳.}5&A+U雁)b׆qW$19#OjMe;"ڦ'\+Zؠ@rupgX ECI1KScm#](|%kcwÐ "_q̚87 IOnLd5pD F缴a `m1#!+I3jL#u`sEATc4 vJJ#'\\tPhΆ1zpN}|:Ȁs5RBL_(b#')9=eN/0OyUL7зT{M/y\Bֹ}2c=*+ q@|?iWRHެ(`P46A1cnU:HJ,USF`4H?%->'UcCNd%8׈E~h cnJi ;gޠ>PeW5wrfS5"+ ],Jğג 5Gt_ү}̈́ƛaJ3ϴ{YW qThuUڡ_n![+tOb8grf J@qLg;QKbok!ތ}v=c{amglwsxؔk-$uu&Y9뚂 KW"~a`c8<6^8Н!Dm4%OϒL 'ݡbj@Wk;jM.qOݗ=ׂ,bO?jOk2-dXy+*C|^z iL ±u’}Uy'(0>o#Um9؍X>jW>x@uH+~٥..؂c=mXE]Zr74E}9~a^(RLb:v/r-'͖ F,!#*H?VP$A(m yNMPu,>?o|6UW_DyѨ@  !w['>7osD woNi׿mGc2:R_jEt?Rͼ/4HռhV22Ye|.ټ$(q(&/eFnqDȓR c\uc:eYiBƹ.O#]E¥6cе7Uf%?<ͭ=]R% QC 1ڮ J*Jblx&J~l%S9Pdߏh4#j&4Xk74#ZDT 륉`Ψ^XI& U QcACC]yoQ D2Ѱ~Tܾߝ2q ׃ l#F}dh@bny@:jq%~πG֫ E©&JSsG@/cL(QAZl^_$ 9ݗglQR/7?FrjK^ /]2KScǕ&%LӘGohq {TCM6/uL",$z%B^qXH(%6.|τӾiZnp݋Cd|Ch#mWxHy3,O٣3:)FjzI^gޣt T(wO/ D-c3t\:;O,ɲ[:};Ұq2Ľk]˙ B.=Rzi9nCC%Fjiu-47* $*Ω -d(K^lBb 湘e" RWξ9)J;26I2b{sD(X8ьK bUsRMG0O&H_fXCn9!+.d7=pxL|&~Me7M};_(pwoT-)=AsGV*袚ʋ (~ dtM, hɂav7ՠ+:bk<["AQuWc6+R%Y7Wz;yOMJ%ᐔ u%}o# 3 *Zмow.,]m\J(R846@~eח}.}J\3M2LښNb^ᒗV)~1|< ^h^_6Y|Mؚ $-=I6tE.aE'JՒ%B$(y BW:&3}C{oix[0шx9+1\C>{G r[#ʤUS51KU(On}bgt(A.!Q|ҏ sT(KQD9m"Ka.sj_rM+(Ժ\?;N_ 3,{Dq=^KԝɎ)1aJ'K:vKNb皖|CRXӆC,a[*֫./]_z,HN"b^16sn]-SxI3

>\>n/E%Z1#, lfrbl>l/ %O}ld4^ѯ]w6V"U#jp6 GII=gL[M i >v0#K7{yWVsOmw9wɳѐJ sB(1kPEcޕ ɝ9܁ځubdk` `ZS@͆i=f+Ch\Co5#wn,HyY(YXkE_m|TȣR8Æ6D:YvJwMgbԍ7(^5H8XKcXxp?ΏN8*Z8Qo|mֶ%&ƌ}Cߤv(0~se̡"{Ԫ1>'ɹsu,굑ZN] 2E3!d]**jᆌ-7߂A\߃yݗʛ'6*J}f;8!BT֒vWV31p,E(ȶkAMdbVGO}6HfzCڇ6G[StkZ3^oE_ݑT<81/]꽭M&]S. Ji ᚉY(d^No~9X^ӁjͬHt{w@Ol5SNjk|j vHB5Hap T,(fvV?#epei&_)>%g@)=x:~qCu;H9C3]$FNXiȚL 2gju$ueDMOy]A +K`fMl M'Ҋ6.Ņ?\QXG̡BdvsuE{[1A2b_p1a~/DMə84{S-3 x:j=n[H}#:gMHv4@y>-v jx_Ҡ..82HN mY0kFDDn i7Ү!U+OIȐm뺈65|-KktHůV]q8u>3LDp[.-S@ͱ81 UUZIVDԠ2C\S.7feEj,{]ST `<&=s% 9>v7G"W5Ӕ0"BB}.Hy`0r;=G 1ϏzboPjDE@zmzJK8ql' 98]2/;=b/ډ<^J %,VA?PwS%VwԽ{! I?ORr`rjl+etS̬𭺫ɡqpxI*d`U>7Pk?#TZmf#kԕhFpj;#bI1@mtAYz|vЯ_"yĞ܌ U"Q PPǠeUZ&=[XN,[,OлàQXi ^e ˇs95_1˝$&Sr+-P`{_LAGoXc(# ;'JoX"*:3ewC6ti"4=̝ay%A7 ]J#yu~͔N!Lzfȏ/jJ^;g]q`mzmԗ"֚* Cn@"N}:hfnz(O8F^΀=T%f[ua}%}o!3#znv,U+B]|SЦ{Pَι$wj^F{חr2F$a^@v='W ʏc2TA)h Q)f|n4({&L-b-Dkƅ<"@ ,? oQs]깩qI;|_WܕX|e"jJu'E%&ѪP|"rl.U> KrPor֊c)tGe dI,M >@ys %jw1L4Ji&U>P+ЋyF;hgxSCowwF,w:PhaEEE]% H5R'=G,&^"V%.qډNٿp^0c1uZ* a [)fOy&JX~}s]joV12`n?z?19UIB>}3msI:1\>kXmˍN qӃN^A#xVSB%|Ѐ] J<6JmFM^p(>OO C a^K0H/lة/z}m4DFӗ%KŁGpcEZM5 PU[g6h4s LIE}/ϸϴ)xHw7:h o 7ꓜ>kBfz"+Y>~xv9"S>ve͔M ~kdN+~iUBp,+W8AЍ)Wɖgg|'0[tXaf4Z4dpC}"H'~ljŕS q Y2Ok`Qjwdr*",1[bnʲ~ ,[_،y$a-W.a+WVgrM$iy=b/:Ԣ: &9Lm@8nhS/2Klױ5}| za,GlW;{9B,[(Q m Q`,]2B(vE󯌯-4Mqd5q!<-̒.VEbr0"v~huԳ-i]ON5o"Q]USM H %r̐AnaW9?*0M r(VU'$8~nPVM,+kB ;MLk0Oy}7^DB&ɡH7)ʮm[) ׃Suz}z'k$W]K%)H O k8BJif8JQ 2`Ē; vZ4STWv>INǩSp- ʛۜ'|+1SYf\As&dPW:=.3ϊ50`d!}>m@!oŝ,P=ޯW~e@@K2__noJ;VܧGSlzhkSr%Brn?bN$8 +-me.XrRlE3 _^vʗP|\Ĕ߇}s8ĉ@YA1*WfLhgm6r,M? Cqʷ " dt}*ޗg*Df{,U/C{CǶDA](n]aj8 ~[&%y ho=2UőַKlB/tg;_ nOCyƃ/-_RҏJsk+۲|ݰ}uVw0ffaIw8q ( " ޲ \~cL^KmEa]>jOI0#Y~0AY`0#Y VTUvMGn2-t CC'6$T}?PU.Z4,9c\-Nrnڝ7/a~yS!-ֺs4=`ʹE23Y,r"`k`D8CpuJ yMqD+ن!!r60N$P3ӍJrO ֆٵ0gPOPZ d{=^Z9H59AGgq`&Y[M`ʛlxV ;uWOYϡU0)q-:Da;jxGJTsA\ Q$0 aʧ&pX^E Iam:{nMhC2m'ir~SwV53NbX&j[e1h!?tasKE|VxɖF"^`}^ )-z +Sl;Yډ/;Ρ *J cwV|*o4ҞRڏLV!qur"KTtK?a|IcfLmd#ITʯ`}2룾T*A9h<\Ir.6BWTPf&C% [_i}G1HT0w xXZL>X~uM$f~K`@l$L$5q6\lF9aj;duVZ`83A1TRZTLv ۘA:AC=rI9Z2u]8+Na*mJ^VQ"nƈb./djF >&<lEE{v<₋q;S }O=Ss(p0ʸRF~g\y"r5?SK@._#-TB-~.XD'\jcш2X2I향 ݑߩ<t,HS!&aQB(ܡ!Y?(1d*%%vWAt99cQWg,G@u/;pV%A#}G "iÚ-Y׻@o5DU&q9*9:| )lcD6aW1eY &_`fS%'aY2q Kj/b'3tny?rw/ceƶ.1˭?BǦvvzԆf>].lh1Ϫ,vcsooMTՠ#ki,rUN)0jB{waDJ=" Gfb jf~)Ƨ쑬!_쾡 NEWV?r=:C_OͰ[Tb$.ro;[ewm6"&D{ 2J7sr!=gMXMzޞWQgtDz2Vo(Ļ-ӖG-( *5ws%dc oHibmv?y~pI3PKıj,p` $ܮz ?D{f(Ͳ/iNwUv`%v= nEJhmǛ#6{LHn5!K Q8QF{BJ0( <ې(M̱{y>f4w5]! d2o@}POa,v6ێr<(gZ.*q)>g`HT2crsZ[#S.@茟U:qh _hКxUO+>/ -Ymq̯R_ARYa_A1$(tg͙bK{Ξ?z̽,./wD͜ V)bȀ\R Z*R(gbZǜ_H j4Ml40.H^h-$9ȁfӉ,S8ʌG\1:+j]tT-?[;[88Cm&&YaNVpv ؟egßHIN@ԾŷɳtC6F'?A8*SEu$=8QNtü Pj'%@@G aw;O 'bõA{ljq0mJyke=NM0dPGsK{#~ W0F?jnj&;  0Tids$B!Īj~-vhh_AE/K¬A'6IH?o@DK?V xhp)Xҳ%ʜA i VBt~!rM>@-8-[uͮڀzf{ R/kOz}d{f!$g[ sOpy|.\ƳԀcGm>ĩ Edmv:BAz:V_޽ˢTy6ގ!fE,,Zk++ċgA?ƒ sayQ%==eoԫ]x sFrk Xu79a!Y~aqޡIx*AJ&`;lLwuF0*w*\*#znHXzy`y ,;gWD~~wTQ}){ҁ. -E8OΗS[iۍPPZoM:kwvW+1|r@%.2ҘMT& _væщ_{V;>҇۳'+Q۟* wg?i+ ͢0d =nv=oL;rQ>+ wMhClD!\lʍ^n\wFԝKKYUe+<}gJMtBFM{F{&yud_K3nR #L. O Bu-٠gZ'XP4RЯOf/.Y8XSuh`?|TeU}Kջ҉UεOfO.JE p={lNYHy M8Xv/Dx{D FҦC'ϯ;ß33d$yUL:Є$Ҿ'.Ql m<'(9X[%qܨԃ|9،i$}BnFb&;{tS2R ƙmwާk0vs8=m5mWH33ѧ蟑>*g2O7Yz&ŊhC{.ex!C-kb ER'W$NC@)iB ' X5'[3ܝu9O2O9JJCJ0G"}l#TyTTLrc87aetWUmX>YG?{}YZ6gh:gsn&jC(Cy4۔q\0'8X`4u" *.f ڠ/s^'o~2a2A Xr)WcAX~BL!֮uIC$dhf'u"'$BdYH<ir=f,bZe-!yYfn*h8 (bbB1Q~EuNj/ǒtaԠs+_aGbd'zR%L79 + KBM:=eה`\s]t]~(_Xa?AhqG=M.ktIlOeSt= :LB=US_F3Yx[tNw6v?h󂛮=)Bzs.?~_"Ҍ ѦCj[W6.nvs:c>#,2H6>TSZvd4ka DD34!mAM;A0\ExGDc -c|=FZzT6p`ޣŁno|+2< ͚UĿCma357%=.Em)$Wc_0uCJ+`o0 <"ށ5hidڶ 13VʦJF!2pu =ڥycۼůn'v7b_;)rEd!!.K{0<%#SV=6Z;(kcrVai1 stexWu`h6>>8$I|)Rl#6?(ЅU6 OVj# tyyć>F#l$0?&#^H({ L{xl; 8ֶaJ>uu4.<6jՍ Y%7Cd2EԂ 7u-8\}Y6rZOCm)Q eOڸ;C\d"S~;AyN9T#L*N=z\PKʡI㬁Lz~\_ez6>-cEkc\e%t_=!9Nwp ѩ5 닄M#P;/^m6R]# {ˏ,CBRs^†}ٔ[S2_]rft̅v!xHXå'kjMAF YP. 렩b4Gg!j}ɾ8 *?VU7@pװT~RKj#x|XVe%Q&CIy?WR ?&$F6oEd{o< N0_ƶ8Ṫͧi$g l@hevbF[#=gB嶝-,fxe B_ȜYM`ϔBUa?^?R_ـ״nաRzXEWGs{'3eFMDOč6^ uA+v 7Fe7 .(ܽ!h+xS)xRp"W.g* )Zt3OM:,n/ +X ɪ|t+4j$삌 gPR2oRփlp(]Bԡ1u Ž ON =G!̳i؈Qd~( ߒUŵkCD9@vk%.v<ڛh'úfeb  e#k& hJ-T߾rD AT$ PPJ[ӒvH@ށ\rFB8Yo4{ĵuU1D(aȟ;|`֜M+̀JD҈EU3T\Ӧ/>QC JS_3z JڱFrU*Yw4@y? mֹWL1=cSRϪyfj1ch%u0O97񾫼;Ŝ!%Pz"@YYYqz%,5I(!~TŜ$i^:%xc&m6]&XռϪ 3x/.bQ>?xaRiP#IƠ7Yc엀ڻY+?7povD[vtAcH4̝W w&|#A 3Y1; s[UqX" ֫D{XBk`Gc/ I0Xo'NKaa Wb%:R '8ߏf Džgavm'VIezGpST8ywb5Dn{3$ߝ$W8\M.*Za~ )A]]u:$e"ʶ-Q!}HI*UANb5ןe#~@vxRDڀep-9߭FYmdNsaټ1V")@}TB4`;W\&=&o ƒFA{+!+$J0EO)>z Wt"SE1:eA<8'>z:nx9P*7‹SeܢRʝ$2wFQJs,u:C9DJ]B.&u.aNcr`0ҔVNợiz'w\~Ϡ[Tǻm&߬ Ng=mR{yrKk0I#|TyPt1i_C:X2Al?ӶQdR谥:/bqE.|tc{i;f8ꬸDزu5|-k~d kO,f1e; @N$1PH0Lm8)F{lВڼl_eBu>iћ%zUPҌeQMJDPJ>-^j-]JX\l+ɾ>M{[9iEgE=EԙA M#v$#ŕ[cw6.56HqkVEvV8=jz("#(sA=+,-uL7 ZGo~.Dy=U&/t=˰gn5*Dؘ\9 7PdlSQۭH\J+G m7S,pkC֥M{? a=px|ɸNbi,̎Y26QVĚjͨ.ј4´ pr;hgX+ #'wc7G+J0^}XVޥr4;:$<.9'a}NK; j((x!y@X%P.V+&-r/Q}Vt4R~A7)[%Nڋ3^?Zws=ƚnj?FZ7!2 r=$uF+t/5Uˈ)~j/5|vDIM_t (f_!Y)Zz|hyW؂GQaBe.M*Q j:Efc1q(tͰ27hx[,RSdR~b_j R1;*e ^yZ OE KO^hhB6h$vq$Ii(*T"y  8j?I\:SiP)d/ئiw'*:Z EY&^O@dh5Z2NՐm{<]P4rVoRu1W} 5r\+ y18aKC9bIF} vvNi_tp2553,ݤ]6f^hק*e!)'ɭEk [%#ICcd;ЁRCbBg'o-dc#UÃQUe<Qڊ1Nt9ÁvEaQ 梒v !|1]BElᎄ%y ӥz+YSO6ڏR)BzN]"a6Ku7+9] ZmDw*"(uS+;D= o nͱB Afwhݹ??CUO7[UԝhTlh&^ɁCSv/氣1pLxD7؂kєO ys͓S9hU[idj` Y[ok.x.A}-?vX;hs" ( *Soꕶ#Y^k QhzO O׳e<CHFxĩta ӝose.R^Jwm?OGyqñ^#6OsI-MԌ$ꞏTN:gX-N~晥 kLH|.nx2盆ף;E%x{g|_e1{9F2 %US@QpPU.S/~8aUSa,-L<VUIK#_<{L 3ʌ(3+xmtY:)'1 X,mUVm_"a!LZJQ'L/QSP=IE /!m%Pr\MWJQaFbnI^eО 7N STV`bX60W)®xw3+U ݠmtwGIFmWg)7'"/^O.hso65I]?zo@Iݧ/w5dlN3[؀/Jy3 n,/I@^-+ՃUȮ\W{[>檒WjI<ݫ/2X&rb!}!gCUMKT& !$W[TkeoC %9, QĂYТÕ-[U9NX$Ht1 7 SՊX*IT/ PUݟ/De*}4_C.gͽX3ÿƹ&ڝ\:?'nkL@ƅb^ҺB 0y| ϓ9Չ$^`*dSuvān%Q@ }[PTߊiMt&  ~8/INŞʧh_*\X#쪴K:("9gǩe{eAL0 F9m^K9-58{ KeT]M 17fhsԷzYu#hWx|E :~SїĔb ;X̼}=r79i0D, la\)@EnpvB'mKt8^bÞ؋'{~r8E(X?$M[UaFABJK:w5 o齕!iDrXG\zyQ8 S^%׸9zբ+'ug,6})y"yT~!4! +1Z /v bbniuĞ4c-,q{["nO"2 ow;x,w}"0fkS]I {"϶&\2Z`5ܓ'oo{8n3F~e"QHq OvQ|w}y7' Dvt|Tc5)Nw >ҩ'EsN *Yӷ ӦL+icԽeQyS%)ǙHYԀub1Nkm |cĭZܑ ̌'1dUURgC.fCuIS17 3c'q:Rx^%imNtVלwSɔ|N㣖8c &-I.z BSY2U:JE܍$s,1$X\1 C *DR?2acƯ^7 ܆Jqz#k3M.B<^q/PPksh##ƺ(Δ٬Ȉ2W_'Pa1a8+eh"_R&&@MYJdNfۭI]Yxut-)T^f닅E5?g1Vȸ8j蟐 g׵6w"!KF"L*nb-|ޝjGKJGՎsMM6 %P/ (s2LԴF3I#,􊥴򭘜:ڕqӑ^fӥq)Yﶜ)~'̪pT/I2 z0.DlN}nu!}庺WjG`ByԸ_c2P~ -Aj93 of%[֟a^`4 vly)z@aiS#Cŗ':A+\Ny.)5S&1= х8H7 bC\6LCB9WB zZg27L_JĄr{(m_R jƼ Q KG>&9pүj|zxeY}re(Ț4-9ܭo/' :1V 'BntZ|AE6zxTR 6V$4B9qĭ̡M.:V&ևgg-5h*:Y-kf4:Ay9H{lr ,l̈?{͊aIN5_!L.$*R]G)CWgV5{ nAxSC5>xD1z{e剈8nCꬍH⦴ƅ´깆D^s|VJ/'=]kxV٫꘭ì>B]B1jZX$rw2*ܫμ֜VlyjPƈeDvTnt:{ȣ|J./v&O^ ửnuoHp&ڂD怜 zp'KXs[:ړ@ѡ}PY. &Z EtRc3Rvu5=oӂP*':gjBL*+iX.pWAؓBV*H:%q&)vC8g,OAcN?H<vo&cJ%]hE s)80aӔje*^ &|0$ P)C0ytH_wH)3L9dlht<5|KPp[L! >7'-ST7v5,iV8ԃ5h X ȌY&Q"~N0SE>@ָLqf(h[lsh0u˂3!TF'oe*nO_mGm^tWUYҏdLn7:i݉P+ģfҐ DO*s)@{Ra^<5[/BoJP%D4.w|^F(=G8_+U45ú$rW]R; D0$/.cAo g?)je|WnhDys`YA $z< s W&Ţ-ueQ[>rɯx]&T1W/ZyV4ʕ nLĤFZ.J5G__*U#V9+̀ "| J)4SÝJ>oӄX7&n~bсQ 8jki}Y82D -t$I}No{/ztU]a46bO8bw[^( %lom_vp0Ӽxvf\_:e1xqk]&7s,n6$Hd6Wd;&?.b_XTǻK!':|2!F^4_db 堷Xռ= "`)2E?UtԂsfG-ΊԻZM'S$]3`JY\7L>}xި&'߮*=T#*`'-YNK9 _uWtuk+ʲ*U˂Pq:; ~*/ǘ:XykpsJ7Y݉M]*{ŕ,>S_PqF\h0wAaRw boeJ/WE+̓,o-@q /, P}2@jU^eغ_[uos;N]R7ԀX=A :WvV ;u \߃LFˊڐ#1D0@Qh,1`ah0=_;X9ʬh GC}~Pφ}&xZ2ٽ^ ٘c K=.!!LX_SO "w%j/Vq1&?<nОmW!& Ե9/prD1~c\)eb.ii UKkzxY{3Mr\)һFi"2)T]SgG0Qxu oQ}˻}=끽!w-^g,<@҄eq!֒0pwթ(q7-J.s ɰZPv ޵E|ŏbT\RK:k A]t,$H3teC:1(ԈA_cfeG0-FdTpa?JO%xdGJ'(Q}>kџ7k#Է[?S8m P UPn֋M-? 7QLy ֢9QK- ӌ̭{pw}U'dN:Մ 5UXa+*3_{;RE]!YBOp `Θ]1jС~nlс|ƵfSnL?b%"W̢NzN׻ ~+/= C\{i6Lfm_gqĦ[e ZRSBM([O kҦRq5  hYASEnfI- Z283H+9 k (-wSQtz}Zb2xtͣa^ ~5 B ,086#Majɸ`$rEH_)`Q|\b$3k~hNJjVْe-kW(+r&c{ԡ%Iron-L~!##3-Uqd6N{ε Bi՟ر`pf>%10S.,Vo*e >{ւrMN/Eh"f7-^h0h+60:R$︵eS\lzWf4@}@FU`:mhwLHҌΧAD0?fvV51aS5A1P|TVZ辳mp^[ڈ(R~Iger{S ϏCRPo~ގt$ϭGan0 Y} e3(N p׍`3μD"2AGE6uӡjR[P[{謥v?ɇm :\.g'r?IO(Skemk}r} |3_!dY-aSo+8"-k|iz$c tÇ>?y.åE"M7Nԥ|7]i]U+ϪJ,VYr?G lK@l5ҷr{ŀP!|n@ϯDzeb ӓ5%˵pJV/9ёOYHi[n9$x, QFm%4n+@./R-gtzi<3Ä?[0W3 Hy1@"p-h1f't^Yƪvy҃ʟkG!4$p#oacC6l?!NCL䟶A(VG`0];[+vq#)2'yk NXΠToTtl 1ًM`ڕ믝ƚt+w钰gؑ"!n /4x>KhPĭOȖ:9XDY @wZWH J2e=PN\LsDz}O^5w@>Fnp .\j{=U;[f*Xs=C7g਺IU.y|hECS1o0FԡRlglڷ36Y<8->\(׼i\wiٵ;0PbvR,mr5 9ո{'cD\d U߷k)B( 5 wO=?oGa.0ؓ6gGd|`1-O3Y]#l4Ny#p"⅍\L1?єTOkX4ĆjYR V _חYW#GKz'KOEkc}Ce_S7xTqXfWhtOo-}(v&HB,j"MLJp1]TJ^Q`M2[MN<@^L MO ') I1e8l{QgIiv08UjxRQSBCiAw&w^h9i됱k3M5ie+NYfb`I \nr%O >.틿i`X2PΐߋmӦ69tpk+6)r$gRX&5HCB>!#qW{Agp^~JnL$5"[HPจfC7/+n͟LG{t& Pj>>h`4cWqjg.ܕ=5Oޱ#lvP`h>v#rz!u+96i!Er|(b2t#<yqɹ\0 ڼ~96Q ;bnrnyK[I-Zp4?rpBds] ]wؘ F_3ރ'݅b5AB1>/2W]4\s"fUdSbOpѥ ߼VuP~)glm!%'Ϝ%I$6,.ޔ̽[㡼}>o[p%wx쑪 ~uo)& UMt%18ӘULkK_R4<Βb Dk;ݬ$~mWRMP&᫚#8Rb>ZCf5O[zstr򍈦'*ɀ`b '_:]K6D[ WcĤHh5Z2-L8h"1NFd!c!x.MNMW 2~gM?%PȎcKe*M}@: [H!~3µ=,t>wH~AtF![ݮX>8Ҽy~Bӎ't*QQGQKD!hBc=+3J-m,/A^,qj~ bZT;2Nӗ{kXIQE0:$i 85QGt9 Y[rgbh4;ju!&J8Qm5.R} v!ijាXln]@@(g'~/?ȓ8W tYj<xe\!Zi\Ev+^: pfoX@z൳o}c1g/2]`Ve2ez^>n\-1 );K]R>hYA`q+gtKp:\)I^()k6ڼ7oW8L$;t';(nC;P,#(vжg_Z!w2.hUۺA@^8ޯ2 )Gcg^CD-9E7.?M02ZA1^gg|9Ks`LQ lT|VbNA煮/"4Erb |_7a`GghIC#C=$pBd6<{DļٮQ.+.F3Ifԫh 8 ֆ6{t(e ɳZ_1gv!!$ƶ7%5*$.˾d^ jIꑍ)BA  ~[i] uaQ>c+pHێbCH;>Z\wߓh#5pKaoڜ_z?kt]N4gDMy:@861ce*YVKh)'f({ËK@V;ƭ{^uIAׄ8K:r!GpWu0Nl#ULT }vYɸ:[>tQ#ntoR3 ɨa_C˃ 9+11qq 'O7y J{x4S} bi׍Bj4èhoӽ'K5@꜇mqWqMzʇJi"bmݱVN>޸Ϳ-PZ6 ]%,AS=|4։\\ДiX 7L gdT]b*#p2q; obVNlUK>P3FJ WԛoxSԞz)Þ^}*mǝca4vp3 CX V |Ȳ)nʔ2-MPa j`53/g, zPt*?`+VK2 |ԁ"{"w v4LuQfGT-e7Ь[^lwRb06+ʮ %8ǸX^#afN_FA.+Lum<,=ޯl,@Vă'eG]נ{y!͆MD*"blY9}e%M4 RF<33U \H֍n` m(E<Ϙ =:)ebBG5 ]'c3 vJ{B89Cq$W^;|p=-lURxl#=j/uG;5Xw}xcd-?>9sPY;1mtwUȀaAAp9 #/U;nAE>NF>B7'q{aF4X>ʪN୛m&yFu~ҹs^vh,S"*׽))Cn &ůvDV}YRGxbj -C&[1s%"3ڶMVMÜM } Ap)AV2| ij~ϕ|].C{cU]*Wg&Z?myEL?~.PV.Z>%*|dc5[1Gy\nJyFĂˠ漬6WϏ+O5XF|U^O x7$f'kkW<ݛepv9Q,C41nʉϫjn-DZYbotCWehG!|3ˉy+{5lGLN_-4xzwEʓW. 7XE\MPUeJkT#uboPtjbՖqLءœAF٨j@=5;:^RuUkr5u-  'kWҾS>TiU02r `WD@_,4nʴB.8#3c7/Lh{q9~Arv l62Pn1,Y2N&BMcu8S` E]W\JRI|2JDЧ˭Yo`ZuD<hT#)d ݡ돵8Yz;*}*-$\,Y-;8ehe,Quƛ~BNP>{=wu,}<a"N\[l,q9Z AC AxYl^_;2 N!X Bk1$#,Xwu2d_-E,)a./b[HkC$M޴ܯo딘TE @jPZ q= i;1 @1Z!ߞ!G >< G߭p5W1-Lev: H&SJ5lΑ|SRHV84 .̉pR˯TRiZ>uqXHX8"ӼLzVH$2Aw-^l|!,%;[\&aۓ ѩjn߽+U6!|gc|K;eOWI3N1%4 Gu)(}ݜ!Q}UB>~A)ґ3q;/n0:ifIV5UDK" <U[/'X^E/j/Nf#ƍ4Odc\d3 \Fj'RIZ-) :sؘFE( kĢ({yOE?Ȏ!IFD CmH.&U~i!44tI98t6wU5deKtJqZ•w1+^jPVN% tkBLmn##eHs"/^jyPU/:N zܷ`/r Ӿ;a_~BZyEw),\or鉵K-a+l<31› E3QSGd\*ßWβ(wN2W ) _x`G0:6 Ӌ:HC7šԠ[Mz<- 3KL$!aTƬ MtmK77Ǯ }d\B Ҹa]h}zh5 .m+Ao ҅a֑5_3ڦ%Rr]Fe'p'>HՉ,b8l*yϟ,cEËd!d@P%ބV@6q)atysokuqQHu/JBVeSF[\8+&0&Ħ2YJp:hnXꑜ A~L|aE* }@/5aHjB_Ξ!e- R"RQ$XDh=pKsRM< M;#Ӄ,Y6Zr?lFT0-Z;i/mS7= dOEe"< 7txۥ2T1_C+jfNork"om\` Ƈ bS-RO5g&qf=QbMm%dEV. &'rs oC #:p/W}TwF_uT,eKCIM$b"≠[[ ԭ[2,#`zOpow5~oFFfJHOZ։$^:сBu9FQ14*I^MӅ82߷cG Bp^Pv2w&+J=ý I 5۶xs")B1BJ5r| e@6.Mv~uY$Ӭ|ֽLΪTeە Ot(kMfEmLkSs>${'T;||]\\_NtX_VҒaB*'wq>h9<'+Gf| aIڽ̘)f4J,f+w\R-W*-p&H&~eĻe.`٭1_(,΅Ъ "qs*[&u*k[f7'S@X ;Fk#0^[N#3=+2S{R\;x' ϼM 3kU)};QUٜTSEg\,D JQ%ԗk=؍Ƶǎ堐JH1 NTB'Vq Ō k %:XyY!D/:=G8 *Z<ʢ[Ǖ/^V.%2ҙ?֝؀Hq fb" [\Pհ e2i[کN:: )dT_9vroUP΢ahQ ϓ[r̪Hl(D1!55EN)?/Mˆ`=>KQ@[AO|oTW#=}yOW|\)%?&=f6ŌW ZV,8J+{;g{2͈ER㞮 aDe D "rs䤇7d.Ml#"MF<9]M}_l=9D5A!(AzȷDXcyľ:uԞw3Բ$dC]Q;Kӌ1U% @mؽ,uhn0 #)X8pwXd}IM%a-Ĭ,W+o̝I ȯSpk>EVȃavuQĽ-#P]5b{ɻfX,˯JV)+YU$B#xS]9}Z4|CIjz<$ @0y%S86(QπAo2AS֧D; Δ \Pڋ<2-C媶у^?NLC\=t\)\ q/91>#[O:FpezyU~$R#oƗ Ѣ;$MIŠH7:K!i~+3ig`VSY9#'|i%)nT<@]NR"#+L R^jDB!KLdZ]|| ΊǟG<Z:?O΀H򣸆^%?#X4H5y#- NZKW̊Hժu1J´(04y֗RݘIjo,Jy-¦zܝ$|קzBN*$ɺ!C2L@\&|9"DÐUVeyИU$'A $Es8%ՉD*WXB!# nڙlfXFO+X*>; D۳5A97 kEe>vC6@VpGCngeO@Hg;T~6dX넇S \ p{"pb3cl*i ά}/mEe(͹ʛ+^e\檴Ԥ6c^"xKjׁۂ^;2BSL16zxE~a7NI $#I#mtT1Ᵹ0<ͽJrhp5]teAb+xfUfF!U-$_苀gSc27ZZ޻-Ϸ_Uau왅һ' ėNIdN|.2&-BѦva5F<*1۱8 ųB r8gW< [ orRu_Vz Twdnw[G4 G D=Jzo Ē;b@RA^5j9b[&!e"S;*$"`O]E>cx+cr[$62˒Ɂʵ4eKO /Rx(Os›L]1uFuȉ=zZ^. {-@]MEZ iRpoz77fgN#׉GwXt|zE\3qmβ*sNAe1W"[˚]sL6 [ x$pdD,bPyܧu \|[\%?xML<Hү.)MJV6y !aGIU&&ٟv2E/q+u\8@oC`L#P&I Qo8ˌ.>گ0I X,5n"ϭ ^0O *\w>2I]P|`y=w>YMT38>rB@I y(t/L BCzg!鶃%KXΚxRP,eˏ΃OIrSnnvr07Jl\} \sua<51rB diò6r%x XA/@!wR i>H`K7:_{8/U75 wRmsE{ol;YXVƻ g)Hzwkg/Oٚm.2,`x;=EAQH }[t*}?) ڵ]Qsߨ*g)p8;t%۬ʱCZ`a1ΨEZ`+:'a"@L˽u7%mF %@X ̃Q(Zs_?Cʽǟ̀R _YlDKR%XgxB]4m;K_Ȝ_(je.m1,"D ߨ}Rz`B=&g=O.pɑ6?érޒS)yov^Pu«iM@EfntG!(a02bzQm; @!Y1&Ym*{{J6.Z$ :lEwlP \p>ve?S>>maS|ϊ^<>TO< [ I\opP&w_N¾~l8ۅvml Bhݭ״\-[A]|C6. RAE}#9'⡓`("C+ix !0: ' ģڰ{E=ZlΕ=Pn8aO0Ǥ whBC?ϲ>RĊfVKΚn4 LJ ժw* ^Z>}xL{_w$ VSTK5u鲊WD ! Ԛ.Q)s<J-yJTLTHzIZM02sy*ULf)Y "Uh %@.sn<FŰ:vMR\*%Ю2K J857e ʜwqVVyw~":\u&Є EtKCENϧ&(&lʥ i67<ó(U@x 7a;ߎ|wc;4ae8;U.\jG)-A`Z_+\3;W-Y4vaL!%9oƽK͒>s@`/}EG3 u& a{ (MI.'٬YrEͥt6z֞*D7CX+^1#)TٽM6I7* 䅻K:ŵ2&ZRb}5@)lj;K yWh#B;YT^wf0=zEvvLKЩNzԘieΤX|IOXgG$b91!Y,3hI^n:H%/ ͎'QeȥiU\͜Q֝- y@/I`"gF|\K|3o7VX&ߒk[qA/ߒI8,mCo(N!}{&;>H!c~?F@,ώ"lras (݉Gw"Du&陭]2)a ltt(pZ+WK!wb20?wLVǷbHr .֓F1_ikR7"b/w >b#.|;7nFj$ {KbjYɃ&Tm_~T셂S͕tc񳏮 LUC?Z-f}#+J?摣l̨K;CӨ'] M{h ?NհskZA ,iF(=Qo5vi/H2m^љF$ ^ukzK٧I1P.WpDxütuOEd^7NleXy6Th=0[5m  5r(2{,ov>w&k/ЃT{vѤI,Xy[_Pꑩ>Nb"Y6aik yWN͔g5]Xj+ʗ QmT.Wda) !0-'L$Pļ0hj])wMw\,ή3z@G7`M"k^;5qJɿO0&tI)Gy.HHph;ĵP QOEط]s/t?Bv Z/ՍDW4+e|dχ~8YF`ْス*[CO#}rGތ Vvڦ+zܡ6!W*%OdB<5Hp6N[!4L8xž&V>To"a nhCDdy/ٕ%yo.'GAAYȄ_lyVd\ 'KR-V *@^b)ulÈBd6.T/G{#JʼnEvHש7*F+|d'7-!,9^5?QI/C`tG{}̥Bf><2: n6Y̎aUf-4_͈󂕢Di=[;~H]2@^egRi%d?>٩rP(!K,~n!,:М2y{4Q@qnuޱ,$YԿP_2kF_1wH^Fd),]5w5LKGpߏ{ g4<'u-2N؁*w:< ]kO/ h>-GVt]X9=x/iKtWlg]G+ $= D{L;s:X\GP?|(y/Ht涳O) ==>(] r4B??-'T/ WDZ!$O8ڣ0so!|Z = MT\6|Ċρ{5^ySۧ#\%&QYBa"9 uV@ve[Lڦ4j:Ʈd:ĸsΠ4=a|$A~ u 46^ܶ&oGFM?PGM .$wψ`N&˺BU֩G_@tSj#al<,;ٹ~&xѫRS;'6:KXmY˄pwZ p?0!`,ЃɞPTuFY&zz |`EN&` ,j٪;7v7˱0&u@}b<,":L _rB~>3uǒЬUMw:qknP8Mbr͍ly5&߁6e?X͏j8xY ޚȝVS;Y9W1@ॅ=?뿋CМD}%fI܄Y> g[j,\G.Uj2;@"hyT7Bo Т_ £oT]A)0%b.OJPLҡ_VN!JQ"4Xo?q-r+>gj+d[SU [AS+{|811UF42E% Ud xq=).v,K†M6avau(nG= !47ʾdL6.箜$!s n3lc%7Lr!qev=S|;bQj:²YTEja DMDp˞IzE%Į@. ׵,MOglNFAn(%잟:~M׈779I 0bq6j/{flѡm7xDŽ\PKT[ Aޘ @رWl4uDWOkߣ[oZ «̳"φʪ7 G _}03j^adB gze{A:Ɖ]1, f*Ι#8yu:s# Nw◑u]Œ> 0:s2!}y]E^SQ;4xB3ƙSג^F tH+Pg+6w9]|nfhUTb\c쿓 "~%JQ-p/ZBI8'7,L\hm9V_KTVW sT YT0S.u­QiM~V/ۦ)'tjy'UEhH,3'X7vm! tvRxvLPTQeHĬP$vRlAC% *ݪ+͑JCAٶ9q=JykmI.p?,"ksg3<ßW8wX<ʭn_+ 0'l~,xS'/#,mti7ސQ}"@b 3sujc8}gfoQg-3ڀT#Y'F3$qR,kYu-ڲZ~i J~~Tr%h+rv6ZAbQ8LDAoQE'-#h m%/8YQ Yy0aˈq뫬"g=~JZY 9[>7cVdU"ۄ6۸Ȃ&;^Q(PL~ič,UE1:R)on )t:4o4u % Rjql8Hjյ7#N JV ޥE]Gc^ެ"Y:2';9a6^0P?)>h?ȥDQ3U! [4.y>SRb,4̜iC9>IߩS hC,X!c{Ł̆7T< V%}̣ ~5PD'¹` ʦ U]6&GYɻFIRoEksa `J' 7$U|cl"r=K>GmU=j'= M<'wBSv;*i6ge(TfNx9O &52i2=OAM7t_mKX 1:ݚ2B[,Wn0r!yu(\=Y誵R :dvB`m r;Z/C } PK,¨"/X7Rnɳ|`=RyY)e5:: ԫ#|aqgvHW3*Ug)]0x21?:xttYEKHOrDC#"naw@zb/!yq?o:,~#$>+ofB>b?6J> Mb-+FP&ª> <@3+>(JHPo͐WI8 /-{d$9$KV|0Tr*LXmU5k!nĸ?&8@ \cTg> ϧ}2G*wV"^ :O_AE+(q!@jJc0зΌYn}:Wq+&P]ȼdRN:! M@aPsVX\#eK'mS lvb~kr>uj)U!]+A&輈\lxvpp_$xId&f OjDi1lTiӪjA浖y#`l\ FCWbPbrwT ,_,CZɲAuֽlq*n,|FojR`#\_SUF ճQIqHe8 | ~Zx:6n+{΀U9 @iZ/ %La+d v )x &xZzо}H0M_\2;|;Ejٟ: wt)@s݃.,\X1֥'Aj m'1UAuN[å:3SϤ(q˜\q]/4л(|\^ ]Ⱥ\%Yxݵ듂ƃ!~'u/гU$1CW")r귱-l8qG.sSfI"7䡩0@jV H5 $%t w@xd$1z!7E"<.Jy~$*P!7Ul|SIoؒvsG귎h9R )|H7dL oMfCZ|ڃ*mULBwX WVFm[.޷JC-ܙgN+r^.wE٥^ 7!)۳o2:n3sqP%'xdvrwз#rh30+*nzf8. H{^%Xk/ʃx}gxNMkT'2L{ٹu6sxvK9)&mՑ{$(j yiw~*UkC@2&2*'5ƓnN"·Bw\?E@`&qߒ*+^skqk{ LISOEr{5RGdK>N:k_ѾLtCc[#NռX+oQ` @^ $Xe|kV Mޛ)j#Y q1w\˽ UoŞjl_-tr;mClBZ )| uɱ*ÙjPP (`x`Hqu#mT=F9yGQSig̹r&wŒ"C0 ^=9ӆ)ȅQN^fĻamt/W&9V#$tYrjQ>-čɢ?Y Х %/.[*~J<1ӳ0Xf0ˠLW7Oi[`ns%Yioр d T,`@.h9?9jI% $rCLT;! 88E~) 9jե9VV1iܠۦm$odTZ':[Qj6sʒ.XLMgB,Ptӏ 5EAum4C cm'eT,G~9A,S=B8OGI0F$7¾ ]{% {^EjޟVOzg*2U(0Ԅg4~W2Sf7TҒ%DSVJa_+gǫ$!L11pK}-qt?m!ȍ;2I` X~iE@zP$KۨSi89rCIoa蘖xܴxF<ћ KjGB; ޫKMr(JEZ&uM^9Z tFkH" #nLE&3zt605 z+}T!nȨ1i<9*ܭzۗ<=w=jJ,at_ճ 34+(/^%N~w+T6<0s{͹Z0_iq?VLއE2 Z_%7: oe+SS󒀥<mxxErݎbpiz0-)Ʃ贄o16p.߬,7`hQfC<%@P52UY^|RbfS3h}*8D?0 ,)$#rI?O-!B-8ʙcDe u,<1žk7|>Vf}0݄FHש>i$w]U?Uה+>.]Rԡ р s2o\ÐJt)}ݦ X] F"hP +R ^B7;]ݦϥEKoR7շpDNYAPz/' o5uس#ŘnܟӘ&f Pk$T[cS TDM|̋G: ?9'd6s#.LEKcVcYD>t!Կ)hJW :uteLv!gHAc%?vܕ\")(Zӥ4pHbg !*]6;jvvL1|ϕyDn}&_5sH>C5YoG,kD\f`];q[a>D@k쉃/fcFgaBؑ(^J*2gbIٕS2FS|ϡf?څHG{" _nqfX ESNg]N:>نV[,;2_܉T)DKP\Gb(_ͥYSm!?^ a &>z@|ɹsܝ7'j"lTm6g1gRfCW;yq T~A|gᨣ3arQnwt!C%up|ɛs Ҥ SQG/GռۺM!=qb>tgF Cj#0yŭ >i%ry!wT eҪ\f>MKv%9\'G 1Gз{~TgqPi}NM!,Q9+Ꝛ gG-Y#J5؄V[=8ft 㔥lOm5Z Ό|Y2D|J 9}_+;1&_u_u心ٹCP`t8zk S LAŵ>=Ո TSS\'BP|N?1 p蔫d}EjiݪImXJ 2<*›WeV! N~n'r&mWǘ(åNtdL{_d\qU1>>ڥ7-bk፤Q dňǒ'gS' dT7Q/OOMƹËKqXE #"klAZ K>RZr`Fk ޹o~5P""ϩ_蟹y6{cwdE4k1a0'Tn%?8Q F"T>Z%OR<>yꋔ(ܖX<}q=4{`kʫh2i9ކT&*tl@} w/ S^ ['z#jpѧY7mk1Cϸ,}6:@fihP- XyA[X 9Kx71փW q3ٹ^[R{8*ĄݷϕiCٙA"r ֹbhLUB~[ge a1% *BO&5Eb!鈍 OݵScw6$9⚖ع$b%Wo(*U8z8>s\E'6p+?:[j:Niʋtzlh8X60H)QjoJ)z;-Ϫa=s96)pil;uP,??4:[RfhIκYVr̓ 6?>C12($֧cP里rYsG'2ׇcc@lgIp|ܵ͡q ^AVYHHCV3l)^C5us JHrSsְ*[Q&},Htw__Hy >/2fwd5 NAS_UxC/+9 f?~<(ַ#u֒+?q5Rqⴁ.~>ړ?sr\!]^jd3LnLOqnt>T(<擱;4y8,̻SnK&4xK^ *6ϽހQk!b=m.7SĬsSt7<ѧX8~7x퀳S~S2 AҌr}?N R*dX3$f%urn}qgi8!}IE]LIbZ8PZ'ֽܺHݬd苦AQ,TeHiJhW .JF .G%tv&˭܈![Vuy;9Q":썝O?8l/8pO6]n=lGd~qy6FUYU[ݥ*hU(E8-49&XY-.gezΒtn{ b!~N$Qrt'>oi:wlźvWAJ'¥^QCicvXVrg|3]n[kb8R~W ZouzWH6Ncء$ Ddg=5(݋XM Xa%k䏪Շ}MAEl,χnp <reDTMߞM,nU`I(MI<8zyiqoT(>ݪ¯-ZrrT}#tdZ)o[x5h-eQit$Ȫ0G]6oGuWO+~\zP-6^)Rywajю`ڿo:b˜b.oL}+S:nnC(*a#h^^"3IL$UU(P|9ldJ,BK#9N:-Kԇ!(-kӟC32ZFACIT?|&2ꔭX"# ɃTOr&#=E3}[ދ+1逽bX.9Ę>$sF_>z\cJ5h"jN{J$USˢp!wrP{Ci9Ƴ 9qvhX>YI[H#pK K 4φ7 i -,OD$rVȼ6HLJ4e?}\dpû&Oa(aQ.}IT!s],෹ȇ@S?xh-nh=qX2hn[&S%jřUaL|* +}0z9BgQ'@. V71n}Uikw! ^IS*=r' ^(,4nm&_,W;0EoOΞ*^֌BGy5Od=?$\(w#m%qpH18 } n?.x ཧVyZm|]RIƇ ZxDŽRx#{kS\@$=ϾM=5`Xn[L9ey1՘ dBrŽi;]b6a;Te`V! 8ֽՁi'K^X5K6(,r.>!km E ȇJgTpU =#ro9w9 +C1d[82TPs p0V\ x,i1Hfdt.׼"S޽ߋ0 Y[Uĭ(ѮTv+/RqD_\2uTw?wjXWq}Q -PT:zW^تԵYΓʔlO Vd&mvTI~ |17-%y%Nz` XGkH2e)*/߷I_&24勻 46ˀ\,ߨ7,S bDZ At DZ,Df`Oᾕa:y&z0,4Kh!]5Lr! ɷphFZJE׌::`expD}LWTs9YK"= S:tmM6 6 TCw5@TJ}==!O$=MY(6_1$#<؃OPR6A䨾7#񄷘]p31Ab(~GYB(l͒~ *+ Ӏ#+GHvtD)WmCAZJVH0!Vږz-K'OTD3}4|${q$;w(]đ}8!oɸU!"] =zYꙪC!$[,3 ? Ma^|1l hw_*kQ/-rĦa7ڰOG3l)a I&8ps¤U(׵My.)D`=d]9=LvPYL 6jl6p  ƅuՀ`#9ݪLMcXzUEPP~sHY "l\mmDD,4ǀ\uٵ Hm+2[{ЎtLCFLo aNEZ+LC9#59  G(2Z5E̤od+euw)3)ڻT<8l!Ugg xj!wFUG`9aT|"V8:Sm BJFm]JA#o>:p[*cҖK+UTsqPt5jGNxo"-{y^<$ nnP:%|NھY-'ξ<nEt 4 t9If *;,L=EQye^$9@)׈kj7Qs}&&8L7ˀ5`B4ٗeYA2pU ]:#0M#\.Jl=.g/g~n^79rD֜&>zLyK  -,Yy< ɥ}+*]eL6֩AIQ:FCl&Ӻ @qVxtV]ŭҬԴڐ84Z J[_ᐐ&񴯗${eBϐKh7G3ܳZv:sӟnzZ.v{װ")?Jm`DQ:A^Ew{E"nÊ,}үtɖ/u(<ڦݧ/ڮf;qky1Uì+MFGSf]OD{L;[Ɠq rPDt[S8oCu)q*\’n6tN!έ'&ś3si|+ҘR9?`Y@2AiNw ; &5\bUgoao.ƛtK?8̫GVNWD@"Q2 (e 6E7z%Ӊerg~[ՙujH06E}dIn b?!E(|YhlHO [IF&7Si!֌ _G)h/TM2+@MMj? Ҙ\gzo\7qณЯ:P_( 9a,Wb&ޏX>U@Ekxp:Xp+UMzs ZXQp լfdݐb]mG4}eW'[)BR5qc&jP|'@m]uU63 $"T9 c&IV6CDܩ?YhG;uL+]J␬sW,]dT+3;jU<]o8)PuT&RDγPt:`˭R9oم,\n[Kn;oOfb*|~حV<f\0f;ຎ&'`}\Wit8#U­:(!0јL(M 4S{ SF,;e&gR*#$?f1Z܏DMcKnNtk2pa$ *j6ZM]r ]i7X46М$89Aj !3]q,^:Oz~)_Ȱ+y{bg gp$ӭʉ;B"̀? t%SX֖iGꓖDmMM}>)COv; ܝ.UbAN¾ ǩIƶx]tpk&wmgy@mS^k4X?6?yj3{Dp[qZ!?d,єT;Klk nɮYe1#%r/UBJy;Ӳ><؟b1t 9=fë8rn7]r+8*%XL<Ѕeo(i)9.i"%Ϙ|68.a&^^ d'l,hM\(v)eex:EAZ_lpk׫vdPVmu\FTC;8,+,x(y`xd60\(y'-g9wڍ殸DP%š̩R}L91>:*0:s>C)asgˏ#TS5;i0P?U;vTUF!F5k8̈kٽ}`^ MG_v cG~$nU/?;ROEnB~0&LLbq)zXE[>t`_jw1{ͷxPEΡ Ҵ[ȏʻ"G; ĈAȺ냤6үQM})؎IMVo37+' Sȃ@8zM#gIW:YHtHQ@?xO|?N x Ip٬#}ɮ͐ʰ9co`yT&(%5)]B}iam..Lߕ}6soezt!'U(®A UzڡC`ggTqpvV\14Z4Ez+hiOsbٿ酔u 5"dNmhGH! =ZT#d2VjNf{yLt.5Z3Du1&[7]bd[֡<ΙTeE.%6hM>9'7x9[0&V%,\B2>ɡ;k oJScZOn]$w6=j_[%G;2m:3/.x\bj{G"⟟?K͞tڑ7xp)ywGH*ggU}nLYT'cYxћO쥬!!YNѮ]Pq|R{R'H<>^30e;}>?$3N' G%)Dv@dcoҝ$Ҕ#L#T*__13DU\ g!եf<@ÃagWrhnac"V"x08/maHLAJ>vZk&38߿pɎ 22-^=/5߈8z 19{>O'E"=䕌a )CNǭ12Q;TFszK3|,Qzd6rR6cYfEL7\W8Lo:鱚eє7Q6*Dcɮg R$7D+Y^ ^__R G$nDcgZ}/md WFpW\v_x`^Yy&)3&qY\N.UT׍: f8$/pW!h?IG5"dYZ$[cXv '<ɯZ2\S9VKI ?xbDr717^6A\k J2h9Tƛ# jrULD+J N'^qS/M&_𳌛yWL~;hTtu)KC'_ #DVmcAU>|^Zi5Q &. J5 4S;c%<ؘR"jઋۓ2mw*zft \sߓwR`X6DMLf1k-({!- -ЃfA.'đ[;`x&}c."'cgngKK1 n6v/+ ӷPew#mS%l.y ^PD:ڬ9;N1{v) 3Q.IE*탺+yjGtyJT$ta/@ӠtU@,l}OߢӽuQ,Fe!Z >ҹmUd͐`k1x+j ;RzEg{f4}< L1.4M&5"b%ݗg'; J2"eͱ jB8Ř$f' R[oJGS| bGx|1?6BnA>좷QZKK}>!WyV#cSO@*Чt4Ƹ _=,'oo7@E.? Win܅ISj<)VZr3_c:>xYT(, Vё;ښ-0vhп]RmD 4T,%` j:sg4ۑϫJs)`4xd,Z2jmTY_jٿ׬4>ْ6Yt$ 0O#5^f[(2%&7Z~)Qˡ;FͬHaf&{;̴3>ɖe?j bB8r4i@ԦwMa2ݐ.C~m~}Á8 ([{Cmm ?r!O"s@?\]e%/k6Ht1Y8w~&"p^}R؞d>3s{HwkКsQbRPK;=y\tU>L"FN7.zx/q퀉kF_cY"F~}[$p<{tCyzʷ!B3|$ f.9$X|>.l(ϑ76_mҵ5m֟33 ni}^iV!fgu!([=pd cdAo8ZSN,- )gksjFgk.'2%߯b9ىe@>%>Aw%Tt@ Z.4#r%PiOm{ˇ..MN< s_ܮ -΄K8wc>#%tQȚx)VT@E3'v;RO@@U{~9)M&(fڳhR Yn@ly_4ﶃf+=1߽1M H?mt R)TE[XB-7,M/S)"pjRʐ?Cab`J{~p>SC&[+~4p0SL{h'`$7^X:5#2}bJ{)I3ZSl`*##r|KZFlaм p[~6;Ǔ X ^a~VW02Is΀zŲHaq.4 (%~I-հ.fqpN@B_;|";#u6S]'ɭ,RbI4r~C4U^\gY8` qg+c~~8P^е-T%P:5Iz Hs]<ÊÎBw+s_U!`ge7$̞7хŎ7ԩNQ,~ͮ?ڜZ>W6GEB3))k]WLᛔۜ-oX)q61d0CWEjRE4l4` OWy.b 7K>5m;㱷n&;,@jQ20v} /h #Lh܁i;p1@,ca5 ]ʅjSrad!e|>I;X1Hw#GO:|Y[1tO ۦF/;5z[AA%O*gX 5JEq2Cײk_U6!@Eu%+c䴃VuCD/ 4bCcqer Ԉ0gk@z؅o-g?<鎽tWpIgvvMa>|랲HjCևgJ#/.t gA%~&U+T?گ>!ѿg!h+ `va|a3Ct}i`kv 0?/PRv˱a)}8oVJb<C5P\FK;﯅ ;1iZI E ~-}G?dIS1ۺg53;j L7pQSÖَ+4rLe6)|f+‚+*U E1g ڴFD8^2w^wl H!M74h CHKSROo1~>C b= 9^72[T ٲWܨM!7ЇU4(y&%Qe#^hGrV4+c}1)toAOplVTkqy5 1FRb/:SLt<1}IQZj^>D <dX9<TpT\("jjŦʎ]@}L>aEz"ݒzTkWkUqlϑzQUΈ5 f>d3A -KP/DԎ}EM^9أQRG?pLC+.E4ߌ?W#>z2@@G>sV25uIX+iiEj>$8"mqf#~N74 @sme:!?g!Ȱ 0-Xg6湏R3%tK.N$/q T!:VMvAGȒM`4PG_w,Wއ{ 8/o(&Rb9قcl6 [ehEtTu4~D2d9#?bKG`H( #0:H4FB(VqZZ:LK};6wߵmԕBΏK:3VLNԂ)hr2"\)+9no+qHqT~3w/e=)) ijFCw?#wjLU 5)߇Xt Z վޑ gz](qysuyK]/`,3t!n]&#E) R/a,yg2/Pvc @<~jes0;!\ey>[BH^lܹ+|c J!2_)1Wo **/xwFzRȎ 3$9f j+3$ӦW@g'DɐvڽRݗGv:"v1YԛJ1JܐͨY=[]Sm2;]s;aHt+Z<$i}-Dqْ,?M?>ֳn_@l}rW"٠Iȿ=ӊQfNcE{OkKsĩVEdySMtn&9 ڠGԊLa Re V[^@R=hm珽< j5!1*vvBy =0ɔ􎴠,L C0AKա/r.6vݶQ B*K ˎh;.P0k1n%]ڦ_f}j&*^}Υvb nWvk5!^mKNx&9rѨ̼` ]3- ї@?T1fHlhrh>HɭpQ/t[wq馺jbn Ѯ3hIoZlQB6)1gDJqT$lsx Qzu/ћ '{kw䨭VoQg* /]޴7w5FwX 2s fUngyxMV/W󅶍z}vW*EL+xzgi]a.oRI+&+_a!DL/)l20g4ECÍ". 1gCv@lugqX[w3޲,`sΏ˓,^UX͜j+I|CVPݡl|)y\`1mN,5*ë MkT,ُs 3b +,sug/Cr]ޤոRL|t"`y>*kҾ}24ΗKV~zKހ:)fzR 䱐S"lCECM9Y0 _, c6p K5`7"=[d_YNolè霷f~\1ˤ]T7 a[W>waG@ t gI9mbĕ0 KrnTyDv+R׎3sh3Z?Vh>6"#~IIJz3t^ G==6^h*ƙ*Iv9F}_W9Mi5k**?΁FY!IiGEw|ɢdzuh eÕ:fh7aa1"fm:ʼaOuD7[eٲz4m-(P RqyI F)"ne~v#f6oj &LEf' 'USRilurDFrNޢ z(gHƦ_qH㫚sγ&, 0!@/Y5LQHxF۞.{CF,WV=RKB5M *>x%8|xc  D%ftN@E0qŰj~kVg9{`˪AT<'YsviP=,tڑP<+R`BE(`=LW.@bT1Ks !DZ ufKE;~<}X`&#mBs`ꉜFS4^ a-(,F#ق[D ;w4t!=tsY\~dcv =FCZ$Uk0~ 1 ۬\9|Cf{m4JEx}˾m?GT@V{GqL[N˪"iJ- ="r5[2L~zDkQ0% 43gmA +p i =>mu/)1Rq @9㠉 7Ti M0l<_CIOh{Efe Nu!%@S|zoEyGfoǜHb%FU@/ ܳ ЏdStDH :%67?3V ^@s=]ZQLۋ.cƟ>کYƘ#]KYUMS}:qL_9TNte˧pȥ++")1h4Vrg;%DhP[͗_u9:vo@1΁9 %fS`BvGsSCڰz?3v| mibNbt0 Jrt}D&{~jGES'(EhդcSsY<M-k uFFDM4d_%@ydţb\ؖ m$Av5r֍4 iO-.>X>49s30j;r4u(g@tIs qn\͈ʻ1Փh^ 2Մ޷+s*E`ESgYqs?+K*@aܞ4Z:jo Uā3~,!7d%qʦ7H8 WaLe>X?%hM-ovv4s(7NN7@ ~"WoXGS"\+ž{keƵNʪNxCo&*'t"!I\.)<<39=YEepiL>jӪ#b or9[d*nBA mUhťN1< ^f;&=$SHӥX|lj/5hagP `U"1Jc\NZ} U䢤H.4dir2I" ilR-I> Z%H Du?sJxfVGŸf " p??PyUIO{|GT Xԕ0goK ݓ e=nsM|w% >>*%ԫi%ˑP,6rFbxCW0D}99fTnGx %7nh)]G?"]Tˮ?R^2!lo\JdsfdS_ZOFWW5#x75?%Q y2y=>[m<]}G-orC`DeUI¿>]ytBV91w E˃E=? c: 6_!r2 EC0=:yb,i4:mIiJֵv ?K+CN׍>C"25k)&n'zgYtdk:#%R>̻-P|dЍ)_t@ASL?MdgfZ<dtN+9BLZVx?CD5td!,@u3?tCtw!YT2x!@O={H=5W}"q3c WR ;Ge 9A*\>1V_9)Df*thoYሪ.`Fqݦs5Gg+[ȔKGrWƹSU!Jse9sfA)vI-ދ(kYNZ/ eƞ,F-`e v2[6GgjWez3 S dx@wcgajt\lo<7ߚ/v5nkDo_ l\OQg BZGzd.}њZW1VM>|}, z5T\0bcڍ`%ĄyXdݵ.@K Ak3h=}-ئO; cE .c `gOmw\*юmj?u*>i$v!@BVfw T# &@ + ?0ʿC\\Cl.]X?}Q7k*Oz7ø؇<9ϧ߽kpyWߡ][c "?)45oD"6(x%ʵb+U6\FvH8D7j9b Y#.Wr[ʮiģrX֩#G6@U>3EQoLIxپlzo-IS%]b'\OJJ{"%.6`uo L=#)4 hvi0d]Wk[;u7eP≦\*Ilf3#~"Cf0 ۥZ~t;{W.ǃXN)aR1Y)5T饘A\_՘Բ6= nOMqc!\"᱖~]a 3xx&]&爡=O<6B6C⾛vr$[dԃFWEanJ9%kfz>m>Qhug (})xv-Z'l͙=R6-ddk'K(~\yvf@)Í d1K2ޞ)i.J˅5GPLHlHNi6'+[?P$&bNЛodis09t(#P׾Izۻct{XwrK#=&7S\;< <(hŔ){QfƉ,X2# p ڈ]rK~ 7Xv~l32`%B5x5N 2b\=p| aZCF<-:zyL,ɀN?΋|7F9OW/[!.hGͬQݼɢV1R2؝¦e =W5Y``"^}̱6taUؾt@EۏUº0WVXUӘH5'&C ʣ{x%w"U߯Gg0" )A"%M^ݘ귧d -ܢ!YT3^WD|+-*G'q u뿔G%|H)& jRBdX\pɷT1Ѳf593Ndʵf/[̚~4Q|՚%Nٝבc0_2$Z!(צ|/6[$BؐoY߭~nVTn2&ޤ'A U/&zݔc9cɮIuIת3!! n; f,_|, ybG6P[~<"E;Ǐ9} ˣ7qƊ!%)Ӽ*2yS@A⼊c6H6'9 P>Y2 rp81¾lb-(ct󾈺^ehQ@n[9RA+"]mgZ@ww'ع"Q(ȥ 2Fv3(r~aJ:ܣlM_ |m撕:;SUm!X,u6|[d ]hH,bI˘{Plgi, R3mR]~3ܻV[B/ dbUiU"^ 6Esm=)#ESX[V| Ujٳ@~Gj!EG sYNዔ45fnj=Q),?hOzG;4?k FMXruA8C sfUCHp~!B{eYCTP<Pto^ewK2/\y2aB$]{;$Uq9sڸ2/V1%@Zi Ѻ7j}4OӪv//[Bn; Z}3h5tF.GqG*v]Se+^1bK |T].?lJqS3NI6NjbTڰQA(;AwNljl^J)Y(\~([yԲ4Q4LKD8 bɵݷ# okԹ@Ke!իJg𩣎jE3+v"W.,Av$IG@형S Ek} c4\o-f]-l돾}#=zuXtÔ|E4d҆TV2?$ٰՔmBJgl~q|by "s,ڴOٚ_aܼOVw Wp/2GliwAv늧 ɑ~QJצ>14_>:zP %YP}p'v}o-hF+1 G Sň%-ȾKbrN`i>˺*i+ʶ1Ivhd]DlβU44x;Q^MN YWF&KH LpԔ,ue[6 4Dri*R={)yZ=*W15ghPբs&CdY P}d Mڜ32s!~vyP:8ڇsӺ[&haڀ v8Z0ڥ]\KW["J4zHF7gM1{aZp4rDy#z$H PN] t<{nJ[FVf<p'X…-9ϐ5jd3ô&Ծ5qRߍ `f~)K^Ac9'2̣ٲx RS U"?^#-S+kp.a+lxD-] fiOS}ię2+ ηGL:X5uKYf ۖ~H3oC`U<ɩ2rϨCڞ*vuYt4gAt_( Ro9M\aJ&. Cn7h_95pP56m=*,f='}@Ca{v4GS@B5VgɛS:A.Cɺԣw8 FũMoJ+.M9DP. ~c Xٹ-Bد~8D[Γ΂M:9-yѿ~6+Ir-wxOZM}0&{#Ț0 Ek{o47T8ɼx Mn[[PDPρY7m[ohu"1*1EOgZ|?+Npe97r..b*;unws`"9@}XZ% P+j) $M텸kYWh65 1:1d^T[oMs#iaHbPcrjsF&#=?qg1:j%#XJ >fdWzi)ͦ nf[x#`y2P} k3qaȉ6s:*tG]*>tsM朽i]*x] k9NPm?nE:Ճ3.ܚh!:O;WEۯ<+ 6UBwwQ"v"8BnFH7ޥz]V$nB*4~7ψŚ1sӍeT8PgRXkm2kE`qkRS*e IwueOx =0kI5©|%3al \[(:jB*9!D( \O/3*Oۓ^Gլ,+/V_G(ѕ ]dҩ'87jនvbNU#: GyHĆR#,v-T7փ+Ҥn[޳#pK4NޤGfro9/ w.|2MM<cEc/vU'(LcWN?kZmѰm7$ṋh%AW!٬Rp6S)> cfj,ً YpzZVml/LbQ24UD{s!6Ww6P4cN/3lyB6_SWwWS[$~Dg{_r -37p:u09EW#.O\4΂pEgA&\ Sbq^o>t\vV;_k/0]Èjw˭N#| ؓ43{(jQ 6~%فjɬPw7/!3o@= R@=B>h4 d`kn:bL@j= ͋[L'$Z.LEIL:a6d_W& Aݩpa^[pCNt4~p%wx݇e:$,Ym'X ݎ57r &z>ȔOI]Pa!eHKԜ@!@'z0[陪+ y-#Uz:KOb~wHn[?d96yxIW0+z)!2{N0ł!H$\mft׭?B@ UAS)HE(|}FkZ-1(6"ynQԓ ]:)bSko7|(gn7ei6ݝ~)bDY~gvL2`??wڋJگ*C2<ȶ`Y8"`C4UL_(MyO >K-D1u:wP}2|- ŠIWӡ>mKjY}:?A9RŷOKbN-fgJ)# RwmMy,[W(&Q)ki$ʼnB&f'g45ߞbqQw$ւKL4jw$-93Zj˄P:hULA P)DsWd٭8opX1@ u(Gf()aK!R+M4N5"S({f2~9hx*cQ)@x 6eGşr>Hll:gP_x+(`76U}bOTvMr[/nK~L* +^EIfrgT-!M9"xfD()X|I>}!sְQK$=OAق?]~dVS-:9_u#eV$NA ri?WUzti<{lY%8he7mxAKo1#~l>2.u;tf䔦.B`J_}q9!Q,l։)՝M̙O'Y\՗t:r Sv0 g {|}S> 2Ƹ/lc{S"݊"<˷g& ҫFG#Qb+;W8EAm>OFQ.%P*_>ۼ\FqF4v~HH "`*C_h9\b*vNVs0R-;[R"V ?̌>k#f݅95;Q.w1Z<`֮?_ʘ`qŞh9i֚im|ۛ.i(IQ N,^2`$_asXs.ڧsxoQ7'8&~6#v>Ze+!_gC PPuZYU5}z^W:$#Hv 5WXLW=8d? ̇#vc? T|)%F#fLkL\ՠ?IJTK:zF|[z|z׏ΐ(gyoû"2=4Ac[4'?ƊS;I9o\jWyb0Q_rq7Tod4jEJlZhNaJwP)(XfpqQnl^+%KZ!*??$ώJ",FW tJ3Jrwo>OnyBm鬏&WwqW#-`عFaZ1mH?0[H4_\'02X}V}C*s89RYxBCn V Dzq_˞Oh K/eÎmOy9W!c~ee SiY]$_ PB&)V[{ (b$I 1וy}Fʏoݽmfhܪ52F;pPScmcP7DζK)hhOߜi8K`@7"ILKd!Ðtb9AhtXC,I=sMA@x%d\Yw?0*d1fbL.+TC,ɱYN[]ע9i.4@Kv)6C0&᥹k@.>evVlMOx0~Q/]|BޕwBXN:a<Cg $R؂;mJs(Qe i3L̹{q 5/&EzDy*O+a٪3dxK,an(P?y*Sl'T|[~Dv&  ~Bvg`I}wi8~_m_%0|.BrB/fG镮XӽdgkJqz:9{77sоإ+^[wwĶ[<7k&{YF6~b am IWiM+YLЫ{x;+!yo@ø,E~TrDƙa<#IkԫQcI|TT`T:"3C2ͳna/~,^|c!_{W>Hw"f-;o37铿5(n_rML3Y+:4쮎W]Htw ¤gWH ǴҰ]s0edv㔈7I[l6sSRPx+ʇ'M㼓 Zų h0WC PJ;tz>̖t9;@33ht<M!43rrX\K0]3:3K q,NeJyc si9B؀߭!t|_1fџ_2lh̍CY+@*=a2a JݪmILomDG|e.6XS"v gy%QZLEOr)E+.=d1{OpjG's:)"y rU=S"s),@.>gI1̓\f32$19F`!Xc#qFexpи̞;f]տ0=ځp dc:7Z jHK5bqe<7OT'XM IUx'^a*NƜ]2yI½1n^+H˘@.XĬ?3>sntEsW1CKTcM2~z.K6L 3kx:wxYH.RL^~QBSʗe3y7/< ΜTbG**SQ(|B_ ׍#Y%ֶ T3d@ӳ-䨷vHvҼw}y.[e SW荊ӿm&T@TEX8EÓhe=s%5`G-J?A =[vgM:A@Rn$h@(ZJoˑi7jg~h p~׋l`ULrJ$Vt &b|X͔kc-dwj +oYЯnss%_1T{b .5dMrУUWII ub|gcRH481BuU> I܈m4Lwﰔ0~Jt&ҶwR՞뭻lۇդF4ԟKdJ6MZSFk<>>Qiȓ4Vhgqv]D ):bBfc`+0dEϨIVu(<$`ULthxz1ҀgGkDju¾ f OQl !z&]v^[ftܺC};"^ϮOry_g ~ZI0xk;;f9;{pIr;a970mgEn}#F@MD!p~[n q0r%e{X%<4PXc>>{V!LY4NХ*>jTD7DDK-xxmd!o~ƫ^yGiЊr39𜜌cI_"_dEW+ ; eɷľii^Ƴ* -{@Ul#86K GºRFF0I}/\_gMKH=׹* t$3ĭ=h44G0> n1ul^а|8(=YQ~g91ݶl.@fIuڴG_=QN7A04De?y쑫Trα;e=paS,~:D #*y}Yb t5\y>ɱ;n1n6-J:Xfݎ@iAr 6q1XZ&5)Js_f-mSoԔWK5%"rT4Y̏C}OЀ2hY yXUa]\hSt#}S&5WUT领?8H!/pJ;*.97lS,\_mWSZda+aVH0<ӌx?MJ0oomHșoz_aAh2[XSm7KĜGY ||nPӥ<߷,qEC݇\=K#F$%YL Q Ӑ<M9!|2nL`KEtXI`)QA R!I9u K>#]ZyH)fU?xJ}LP.^>*S^*j|aճ ,ٺD0=c3p/Ŭ!+hsu}t+NVmRT@ke=כ F`=eoi|߷.pVvm7˛|p z avYӞF@*6%r#@ C -5R*0,q%& 3-7͸ϊA߅ *%vPpPȹ~O* ($ޞ} %{^ʑ)*-J/BϭMZPc4mQe'=jRW5h52{Ug1`KVP}/:-4'm}RxU>A*CVO5> s2필mM}݈ce%\}u%;6ƪECyp/Avj4P#NEuuNjy$&PHmaV魕.2G'v;oЎ!9-8ϸ6og =0%6(Y^ĠWѿPgϣ@Aw y@MwE4FC"V({ĀWZB ߋˣF4JZHBl%aL&^+h#VP ?sjک\^+Y|qBV>1ꥻe*hW}|[*&DDHYϑ;)(/D4.t=%d26'NRC?y6F!~d4^{=bS1>3" n՜/.EKoiwᬕ驶ƹfsqO)3|Ls`@u;5*jo %%;'c0}`o0R2XxЄ'Y( o0'THRw*gGq{ܢ~|O{yKg?^\1: -l"/!EΕ۩OjS`_%`>)>Bh^>|~bXb _. ƛdΦ:3~#$op@,cdiu(~Fj~~ ̋uc]2@j;.Olf`pB˛(O>sXKz0cO )ܽ#̛$Ef1 0k.. ⇁wtPvj+V[w݈T%Ԫ>Xf֦ҷ.еpC*\9wbGɼ f) I$^rxKNH0mMI q+€9kmN:DMANI.`rg8+H܁y`ocGR hj X:cQv۳֔{4B];8o-CV"Xb-:l\0L̢5.Aʼni46 סx3r$Nxl?VevfW*':LqՔ(,ơ [oax6i|UF]-^B$eR(,TTn礷%8yB@q-CVeǔ(b1ϡc;W ' ygh'Z#yDFYܘAb26_{&HAh\\Av8vɏmvZ,yS"$D4>0,Wx%#I(/I6R xm&"ޏ&) N &ě Rg&8 $Hޥ"~{3- h,4'җ} com]c+O\ɱa_4!XZ9h~DZ^FPEwOF Zh Ws4M i*i|Rˡ9B'$nM{,CV0e[ܢ2ӊ`'[:T$㚼 t(pDh4#׵FW߭?Ȫ=YhbKJ' ޭ >L40R'mWCCQێ-*$@1Yr,B(6DT*evi101Fc/w&\iپl]JcM赧1+}jM|> /*\gB)J FKi&޴Aк?b?zImcI xnrN  O_Bs[ 40%<*$޿HpO;[2«IY2߁70p.dѣ'=.Ό¶d˷-$vB 1 dI_Ih z`Tg%V2ş<ӆq*P}Zt{(E_Wb?y7q)3(E* DusR9a1t(O mܸ yv{U߈;qXkb,~d'븰)ik z{u9)X Gُ/>,zMyֱJް϶=_dj SPvj:PlE]fD15ۿmyR=-Ys5l\#0!3_Rp NdSdZE")MBJP6_.6Bכ2Ng|B\}y*]mժpX@PY˙5BC?Piu L%*9[]ͧt$ #g|c*]#t9F*.'d ^wnkw7װfKwU BUnO82M❥OV<^{.ˈ5z<幊x$PvR)wd$J˪a=}D.7pã (vtn;\V^Phv3`5Dk~=c*7t! K_rd[%g$MM}#R<.z7 KDŽAȾ;5uחjz'?Pڅ.!yOק*8;e%z6v8x]CrҼcpN;{uf.l&&ȩ5!{WA5A"ZU gb~aX&AvgFJ뿽 jj:AXC?!=a%^q*5Wpr,oU: [6JexnF [F1 '3‹@5:IWзik F˄+{3Ⱥ/,6>)[PEAQPꖝp! <7z[{o1;xm*%GYP"g{D_S9WjUH#\0J2 s{$9Qc3緘^F:I s#Rv =Gq'Ka1?[UzTC˧. 9F #Hf6$Qz4=7kr&_ mSX,@-KcBfYe&7PZu`W@|[灑*`WWb%LHZk@rۡIe0DEFJ;;-HLKT;=RkVg绲"1{ _RѫX4tbFr2GGi^TnR@ßwx9,F"*!%e/b4V BEc_4ѳC]24 nd!eJn}RP@:R-TOX3ܿ+]è-j =,s 6KPH }CTKktE:_bKOi&oy]>T2vhoZtz. lZNP?h#&AO$oX\ ?_N8R2G9 ~c^(uez> c!TVJĞ߅ @ vpދhgې(B>d#b#ztn. (Vl4/-r[L|PcWClvœs^6ZrohUJF lM&#m&FRX0&wG.x1B"Ab_ Cz,N¨EO_ :t[T1CP%L\$w{ͨ7FKC cJ䇺3;|@9ޅrߖҐĵvc%n }/!ZWK]矟ٱݳXaͬ$:.s1RtdO[5N_ |w\Ld4H@$¬u5Y}YT]ܧұK)"ʚz㜨C (oui *Qh p( -\8 i.#L['`x=K5@Ef$柋l:ZO%h4 "igDqgddz1;eEu FN!)Sנ#Q~?KQŕNVOYESe ywfIpKt4z8L弩bfx.l Q]~JiLhjF_ .HT"sxX*[Oޘ2L.e|&q >5dsR?"By)H.G8x"o i|oݰY9,x|HW:|_O9Rf~E[k.y" )}Ɵ 廽xFz*pSu [l28AF#bP\)Gt uRY\ Gl|TuQA'l?!m<رR+Lm.ypB-ˇ<9Ϣq6 Yw)e]98 C=T^u8XDb8Zg룠MT*0vcMb67$cj-g/?._{sʢO?kx_L0YlOiH 0-AhCwʉꕴ$6f5j0|tq4҆T["M1<cI |Ux\EU䅂($u|]%b"e vz2(_NwWPzG !!R:J@6BmW#6O3FK{m; *qW,ԚsQ@(OXUdUeO?H~Q" }ghq,%fAs7-MFsi_0iԊ>m6So<7@V< Cˏ8lo{˯M!<${ykBCtw"O @<UРQ &PNJ~Mg\CLMȲ;z694A_oB:t o]$IzyC Z>;)~!Ȑ]&(Iᅪ8\9>2jdN.bE( >o[L܊=QFGLϑ~Ȃq8+E_Xv>mr^s~+b?Y76LKC /ðn $ѷ ZfqT:/̋U(W7э>+`cw)e\PIhtʹ`w#%>p+{INyG@suvjR#=M'fhaټS"`=W*c6%dOJs'\p Ix[LѤ7BQC a9˛ǠdZr4Z7ۦhUƩ˼GHU<یT431fclou)pp= w׮]액O_8q ݮҟO`x3/r>c8?6v;"x˲ߓ[o1s3edVPِYbHpL2Iwc]K ap; hLDaD>,O&%O qHܺKu &FA@Žn)6Y? L,]w)\E5Na pU)l$Zo oҾ2A. K9x*rly .oP"C0;pI=9>st" C4(E pz3 o%y]Z2ԫ} mcIOZ.xD#n-µ29P+qϪqh(EUaPʷe](ŧPxu\GB/TߟF}[en.&Q{Gõvw\k^e/ՄKZll 4N ]P8y}&G` ! >ǖNg.5N;&BEG3%G2}w:hO<1{"qn)0 o( [@O}KSDHWZN`ٜ+UL"[<6F6dT.ȷ,sc[m|H#,"Ԭ*Ǥ`)yAC[I0pֱ9E-1‼邼 ",r} vmkt^j+|U$xo7}By+4Ks 0a@+`Wt v58VQ'k:fJ$Nɑ\¦ 6γ\s6I>ҋiUT !ڍlFw9#5Kk+~/t|_s)-W"2jF[[\,~._^Vk5N FJ*_:=};IܛxscMYFې A#XjFʮiϛ*iMݘ}tB%10ͿK"D3lYTiܫ^a :MSq8dD{s(z}A~m$N(f9:ՖDN9A"+P:WO3ٴ恩UWIcEol2I=# /S,o_jӲq;їCnUv>>a| 9~X P#ӨTax][oFHMz4 ЃeT6襉2]a<G5=);LNC^G1 S4JL?baeJ:V5F:#Gm|bM̄0VXyoS`W+x{c硧p`PnMfՅLaDV.DhںlU%FEDdukX_}JI|l]bXI (]6P~.Xq }'Y:8' K~ZR +j1ӫLӾN -ҁkHt෵~Htku#5| ĆLU#߭]HKUQg;Ǡ S4M `f#;~-VIܯ' Hs) R`gYge^V1(DR2n1dil;;+ī\o}[a\~LG9l!]^sÑI/mR\met p>76JOmzT[<\X ñ?CCܺZ)4D"A?Nm3Ҡf/sLGتy]5fh8{?o8{[ZB#8}^ƣU6;LXwnZ@DQOVa@aru:$%{ 7ǒji|i0qv@3N+y2m@AYz5XU$pqN _.D$HBD;Q=kIq@1uՕ^O2a]lzp/zf .=JS:n_>]'<$Y);NU^/fW3R1G7#dЯQd",c ^ q,YڢD $6 xB{,m"qG&oDi]'\Su,rE13r!}RJCbl vK΁RL2sѦ-bT_5{_~r Hr( @އ B;@^dBX Շ+RXA K7>xGoܿ(<6*%GrEmk&$mڿKI+.oʜTX2'/JCU&X^A8oHFUIU¤N ?j3˔P.T<41+t_'15HBYU!EP`>O^shUu:Fr6|9' KIJٖk;zEj?Ho07I?kqĂ`m!Lr*fה0k'QIZLGeK6(n R^]p (eEY+:bsTng;kE,]+\%7^ =hi0#5sڹlo M<"T7Uӱu3wP}VKl,ph ӰSh4<ԞD02B:: yXE>Visd0vtD-jvޅN{SHe;"!0Dsjx+dz|2\ s$so/ sGXtv}.cP19Ό?6qH>a|.UBT\HC6 8w@YJP.><µV>]L鹸|~.}őw{5CDqm: ŪT{_e"%re>a7H@0͸J=Ϯl$4Nľ#HnA‹tAMy  Qh4U3VAA-dq$̴*1@[uC^,yWڲN <e#[̮>sd,@ϙ̼X/@2+,";2LL TN31 MO9^%Oc0ӫ&~u?/|b*=JivWmiƵ=tNC"v4$Qo.Cj,0ُ̥E@B! ̥QqyZ=#s k0F;yن8rea"k_GUW*S@!ekFh3o{ &wt[%2 (pV3)y&ԹOQ0E"`–Vٕο0\yuT"^LqCg^}xGV\y@unܴ P.fiTۼߍn=UOC,hzb1ɠ]w(d,[B(VMJ^I<߿G,зTB-zя=x!'Y~yTd]D!ےR'IcT5  ) ᇿJ 3`i<W[9R]o L\[i'pShYa%|n4W˷PH؞m\ D{=wse739\!O. MؗUާ%!mI`d4ھk %nu7r;୨}. e0Xa-I!` [{ -ݢ0~sjN x ׈ eDع\U?>mK¿pנjfA7էD:tE~;W'6&ԉ@n`9Kþ#;m-^Jq&߉үEFZC-]`j̘sLPJ &wbY`4oeBR%R6~1yqoNB՚&cǝ"%@eЂzgE֋DE>O8„TPڳ.E)..]7_ E IAv5ad[v1:1L;т;AN5fE~D%ih²=+ݯJ\tߨ{b&IZROwE/F@W-c"<oQXЁDND?=5YCv*Gx*p!҅V(ED}t"r;MDtOm;XRA.+ I8j;D-ݠw| $^yIˮnhvs)שΓޱ q~d7jDfg4t+5k3jLT3%h=tNY^ڟ ʦin<?m#9Z('Ԁ4ޚuWP!F9R<6~(x2I[8_79Z>SZN/ެfj**?$c|3zn=P>y6:~G()I%2RoliGx%ciJNk;*T:FNTŸC.4s>Цel.r',&m<8z .}9.,e,TB^.DCL3 0t/5 KPՃL21Ns\V3I{W׆$qf7fL*絸#Q*\a,zJ3{i"^́'#t~ōߕEvq儬m^+2j4(ܥf`=2e?epp` ҃S|k9'p;h^ޠbFK&M~lbܷi[J5yݬ۸1#mmVy_ɮMUd'*uixâH3 ]amcĥ+G1 Y>]5QMcD\0$H*"fov ͡w'HJű_wNSTzm}iR[`ʓl+;)C]CBSuZ$GGZ!ݎ$*^Nq4c6Du` l8SՓO.JްɊx_E6!tV eqT;_SȽtr%y2[8نli-l \*Dwxed p PKXUKW+ZvAPugt}Fk";5. wC> L#` 4#阭rճ @R?񁺚.-zDO(">{pʅe6:5HCwbf'+Ѣh{w,vx ?ĭ# LJ8+ck(ߒdEFb`3#wcg?v +P. VV%\1遉8is=mKQ[fpODGsX}?xij2漋ӣM(n-"Z0D^R[csSppIs* ILl|-a̹'N!C9Myg̋ ܰ=oʹ=>2lݥ،_pQ#U_m$4ۻ&>PA&ʄP)@օgD BZC`nКЃr4WuQv>-O@&Y3}-ډĨS'w{0Lv" "ms@iX)0or 97{F_J-O+y!z;[LJ<@T0eW伐uqZVG4 O0ፑۢ= NNۄ$ɂɕl |R,0 JALϾHC͟.<$P{BƁT = xĊZr vJlY"6uD4 qXi0CO`0%_| ZX{I#"sw!Z#pKͻw|C*/&Kb"D\If ֿ>QXI4ρýT8Z(:>,|vhl7qL_\7$cDށGlw6>l4`ԅ"RaNM*`5/'dK:Lu'>Ld4[879"{bӡp{X l ^w)G?GVΜ*ZsCƔG67#ycIC?KʬGw(EjM+ oZۿ8N/\wn"#[Io%uqPȂqUpGnm-Fs#'aHzfܨ+R# melrjbju]XE1m fSe&#~dؚ*g  bq$$}54pP&tGJf?Hq3pES )6nopLޡD>%cXqb:  ;y !:uEbS oy~gop<(j\W$NGHEש4]a8 ;;揉캠klNϡ8[Fkvfx8\1[+%3u VV̐yyxfaH*ջ/A tɰz6udQ]=B&{M~*uNǺT"p>]|[JA;Bl dD"!D[_ѻ?W>r<{JcZ(=A /{;cc4<۵<3g@Bw$w)ZۑfN} aWd 2e\^C6CSf5X0{m{!mϚԀ8J_Y@ ە}q!7w+al":m'UkogƁ1+bg9&QV/ݯ̽l4NNbhFלh ~w{JGPt}W%FsaxD'_ {%`U;c&Vx:Tӄx Gc|G=qՊ).|3[Ǜ@}L*(Dx) G,C/[2hK!4rw`q\D*qU/cT%dfn/U'U"w\ 0"R`rS^NwOh?;է[9Cv=?`_N՝@xʨ}=l}Ah#LqUT9"[B,t]W^n6񐬝 L#n1ÝGV;s '~IGSGԽ#@(+m;u ſk^qm7VR)i<|CumrQĵb:TxA\'3W&t%ҩ_'ռ}iɨmmv?NK? $Kf,fJn|b:~N^%0=`G׷CqJ,ZSk0?t_06&g|͗V-'1t=yZyfP5ESW$2St=g=VfU%}}1ѣgَ}zm :J2-\&﷢hP[fe>( 1td{w#~ʫc]X>bπWXr ʷr}V^ROIX[i\l}_1Vj뇷}RӔ`Viة#6ghRLĮ|zG +5)noptsܻ`$m>\<|SXQ%9Gx}w6^)/YjKD*ٽ@@|0< DMٿ/IsF-@r5zeBmָA=#n_O;^)]7A~u 38`?7!Siб{7Yw\I|'S='z  uǮ/=-lm{uJoKB.@(<+DOJɜJQ0x If^;z<˿gPDŽExS>eIJ 5}Wp_۰l8~{rp58/=@W%E4'YSd>qQi)b-hp-5tq-+ z&YYS*Mlgљc=cZGh6èf$%O %9 5R =hSv ؔ\h5vOOc"rTQ(6g+wX4ҙlV"~@`l.Uv8GzN_nGꃆAP5DݔݻM`s^ݾ}.?˫i6AM 4J-B .3,Sk4WKC$SEOv_1*JܴvHl{2nXRRC؀]abpUdƁxfU=s?9_mu+7Hy/ks(h,>;{nB5?YL=*%vmU3fbn5BLxWkQԳ~e6+`72Ht4V7.JOr@GVq +W@Y;#TٛZ `h /wϞP;22:6UMy~P ~)32 Q}Y <2Ծ1vĆL$)k1SqzVA~+T E 1QeNJƀ4gW/:V! -(?0tH1u:)d![4m꫕fXp'骰h5U?1OBG'Oq'=]f¿!A/f/ yJ~U[)_"4o9)G8幔Yxg:zrv~Ebj?GTέGZ{JOjR.1dt(w^S#=R D+%S?788˨1K >GLL7mpI6Y^f5[؁ΐSN:5ux*׈_r1U Ruf+l-4bxq'\4PsuWqg$յ^q-8)CH˫x [ms |[8<jg(D`RrXחU,\/F4Q;jlIrUIXa~-[e7\w.r7iCa\~G %fB-*4?WBoT:PCWU~|?\e71"`S1iy4?gèONgN`|>`Uj8"+<(L$>MePg_:uڢ@;>؝>Y'}j'd&5Uu Y^LqX:!J=Qko̧1߸l`s'קP}&2߰Ƌw|dWd ǣ8Y&½O G_!KmFNסʯ4 p|4)c˸Wb3UpcϦ[+o g?)@IqiC`}gAE6 TSH-$ia@$1s@P|YұȧweiTfCPV?@V֓:o?,pGdM‹ -O?BOWNZWi4nP c׋_]0fXN|)dCcSKGOvdYc%`:.ޓOB07G\ɃIp-uވݾٷ:ohj9BGe%HJp6a:5]u |},~Զ-Ϩ(=7P;PdX(vo'2^#we! k봼wIq%I6b.Cw̅3tj@A 5ʍ$5TUs']lzK&gWzC:{36/h|k9RF? YQ";_?5`XWa"<i?.2w*Zy|{#T'eZHC4WKY_ q]W=dJLET[8QUG'/q~hMhHi&0/'5,U.Ҳ6s藝7,qL` sxI/! A^w$R5Y$'Ku)32H$C$2U6W=V|QaC}) x\v<0p)%| 4o?F,? (Ucr yBovZmKSj;T Iq])z ۟g7>k`fB:0rɒ]/9 ns/Y ~HH(R,-mGUO-~s)¢n` 0OG<24-y;u9pCӒJ+)/_qYW=Yoc Τ^1b2kfk'-Mp_#ç=DfTy[f+Hݻ^Dgd2 P>ֹ{'ā毗=@Wyk#$1^<~pg3t5ԵW\ڑiԞG/0FJJ5:,轣 }Š  o -)\:]eijW%$ln˻=" )sP uR5AӤ:1ﵼ[IT%+-@xN"ӐͶb'|wsP8b]fW^֚!Bkt}PDGrb(FCƓL jFk?G`n!4z7wo&dB{O,H8US6*Q}oEQZd22}2H01iɛRiKA3&hzZأ[j;Onl\VC~Z8^  }S-<.q̟ o[3GbQ[N8)|fsި*Ie8E ;.l:@0e`8X [碅pȓ)޽!ֈ2ὗJ=J`Ju4IZI:_QR_{ }1۵[}Ӫa'J@EHyvGJfFj2U0ag RT n l5UNLp~\XH?˻{f㣸_۴\3~,rf?Eu䉈Eh֓WZ&L9n/B(5TgwfLPV~4BaΔOAޯlE/fEWQsn5U1bN\L:[;;2V 8{-HNߟFjԯvhٹa鞺*|JIID =,2U^-k,kX04M%1nXXC=.fCR=\WtO̖It+l.]s_^lEYt|'(dUCm̍.={5#жj!mGx,k?y5e 5SB8Z!ܤA#,v2/gݭ#/~A[0^奁˵t-n"̃7ȪׂO^qp$O#MʤN:yjD}Xf14C  )U6h[( Y?,|Rqw_L<MRÿ́9w)΃.^+5d3 \?݋aZw3fQ{SO 'oL& j7Á:D<R8B5[PGk, y2f4Ź|yur҉ɦ93T+Mfp^g E. q=Bi}p <Ba5 2t>oyb‡a +t{@mmn. 7E9EA>k> ܠ]X\6Ni;S.xMD x n4kh#X[Aa ^ ֩Guz.5&2;,e о:ow@MzὪ#f8MYf G7;'m]T\QF`+>kR_k;2t& )M(6ei~ x @~_u"`* ]ԤO!i*^m.k4d\rkF෥mƣ:ey̔# ?JSB0`ZRB6`:r.y{RhnYL`)`^qN .ӹʨ3dGԡ*yr\)D{]}tw*:fHZ>kI8*gJnc _Oj93yˠVIcA$11a_wN-;`Ly07TRMG5*Aތzg!}i^B.$f:d9K=mSޥ zŕ~!Tu‹FR6`;&2_ʒT^c-l47OrF^\Zdiz zw٣4Ԑu'oP/mJL5,D@R)_h4`9Oue  #v5o%V:!!3OU\Сp9M,59&[݊oc 2\}nB--rI$d GϾWWhl zRY;g[+3ju9grx&/kv*/W=w2{- DG7T F]ZXç3}\ޓ,9 % d9;;f~<Kq\~R97̚J[p.(8I 2˛Q5N&xRrc+der~G&w֬G{{ ҵG!TˮvH"u/4&oiRCoL1 *2N *0歇8- : /)U9}rpA3r*)PdRie$ZEϯmAMًIWNnEvw%&3Z4 M)Lv e|ۥ虿)HB>)S\ȣv}.BEQN7v32))ZيzDD+ 6`8zq{CΫuxhW.:.IO[Z|XWimrgDsԷxʓ }֗޽'S3+1 NvW'c_z=1QE&]]!C5OݞyHF^Nq$y H!Q>&SVZEGW?q=*^V M* E%ƽe]{!ЅZH3k30ʨ)؃lԬ]vMGfl\p>d&h([)vY$m{|%E[c(6B0[pggXFqK#6QK&w|aC.uI ԑް#icutXWI4<l͌-bZqd8iFVBq|aYTw?z0*8u񇬌(q>~v갔Rv}|F3iꈕGD4Q3VڴZ :j6IM*qh5wx( 0z;*[Ị7<KD@MVʌu<(HVm}\0+wuRǚ 㮚τ'f%|e( !G8Ip›05Kڵ"klinUImZ K,86Mw瑀vQx\@\UPBgdV}7{U5υfد/#pHp^&g&X92vpxRU #̵QV} IdFC`oO L{1|Qt'7% |bw4ZF;_S*Έ(zud.eKeK!ڂyL1D p|?G&k_.|hgoz~.N a/-q  y R_8UspWWI8^"i,rۿ E넟t: ݉M5r.ÁakpVN鈈CS\Nq֢bvv'E) 6OoE͌ ڸWG$bp ܝ{Qx &іycw ?VQ.׻q2U?ϩWYMx `3vf'$t;P^}M YWH7;ABVh~Iā6O?\SCQyDM{#:Ǹ2,B5,==t +zTU 2F#+zZgdgqvlU)j>{grk`xӭ|}yb˄ $hܿ8 > H^!1f$$LI_><5Y!tp V:O`=O4-1^@ NH30!6Wc4 a@u2?D<KԹxUj4&qb4:\1tM@mao 1 FaoCW bTGR@m@xSZ7.S4tYB׿>JŲ-PbYhv %^.c6j@+/0 o%S_pc$H`.[`&e_LM)ϏÒ[B)6Ln>D(NB'۴am+JX 941 Hٛ ZX/!s[ aQWay,%n~˸ a>i]YFo<*6Mp\8]8n+S~_FX.z-G^  C6v_ f{OMq?Y\|96Sm>,ǾG\ gN,L2_K q${ٌ[S/"4R,T27x#"S=9Ͳ$ ǫvPΒ{7*`BεMm0aҒVHi@ wGktB}ܸ6Տ9 ka~6: zoN3rSEBP2Grms WA(tя"\6A=暽=\6U^ QoYtėS͍s9X`wj5Ѕ/AD3/41E~>c|eOWHem{`+σCK*}Vbt|‹|`0Mi,{b6.6ۀ닟a*%DIFݹDvr3*f+6В;:Zȃgc*cB.1e8>l g`r`&/a+*g脶RsTW>o51DPhjc xNpQ[ k>s^t#~ jx`mw0.fZre70>#= J; ~"}R]m}W(W3uZ7p&'|[܏sO=%`%!Gpķіm>$! kkb``q͚^5i!<;^L`nd L݊D#f7sd3, H;UK{ѕhiXP,{Jc6؋R5M MītW`+zIg ig'vX0 662++±kwSQvSwU6V^l?&dLT'R^>ۢ沺r廣Zu ]VQ*֋ ĺx 9g0 샫X a @5j"⡠OtrDZy͌GDdy@<'[OC|JCG'WkNbUV/u>KBG45עHL@L7441.VE;\g^Iv$%[ֱd:_ c:-'@!$ ݐK_Ĝ7d[&322'Dg|QO0a&#Vv[͈q%ʆ9D.bC%0R&elE:dK "ҵ(qXJKNj Wn"U2"w䯁\J:q[8V܍ ХOj39 8jvGԤDJB}qиOs:Z@`Ca}Ԝll BQtHb,tQR#W (+e=t2M$R 8 58[f0.`9&[cŊ>Wha Y;%y]VԘ yGͼwa~;JJ ORǙ *p^M L_?ϿB$FakmKݯ9t^=0۲y(זdXV͓}lR>":IF. ڦ2N?Q֊?\E{C0c `5䝹LXfZAޠdr3]㢟g,:t'R8uS:R + ` ۼP85cPjx}N#b i`? 1wLid\Vt\P;5zgFi\}z:8!{%//`5}ߞ`%Wۅ"sai&P;7'q(c;cvNw .=~YْR|䥲q Ö>|aufZϧbqDyF5Yʠ'.`rS**ij:llv[X^cM}s#{p15ɬ5|dbq|Ђ1y~S{< |bͅ)/bJ7QVwh)p8Z|wH@ 3 ^d0?z(y,g1Tz4{s27t5%+8g6z״Ǚup].k[bMQÊ.k`I=`6Ιd&{!\N-r'jEr2%8׬儡΢k/w¯gQht Qy:HzH XΦ;(9]~u_Hډ7J̝_|5Y:+w5Tf9V"=eӔovp]=מ_VU=^]IN@0Qo<#Z=D o$KT?y^OMtUB"BDȌ?hF"9~@iXe3aZ!ƊQLN6=; 4y?')P>pes$ ٧]Ms5.'dX|΋\RƬ2W5.;CmЀG3Y^^=yKI] p}X A11؍#3ȫΗa7CZTdx*赯CQk8 !OQ:=:z+8@>k?Y/Xb*Vԑt<_wT>0ː@>'58d*p U2/J#ŸbŲ-!*{+p*b'^~۴'gSoSiLo=aa;ԫ⼄>'=6YS_/Όㆄ}aVfTÍuCfl2{6k!_j9N<N3nÁꪍ幽 ʸL>Ԇ <f\a4qĩK/T3$,Msщzɫ*P14Xze HY&HJ%pMm(:HD`&d@ۗ?lNۃ4ܷqMAmPx+=w[8 E $kao+ M0ѹzqy`Ń%prlN[#*X!x:zgʵjYDU؛ދ*:sKh36wПZV+7ewG<8evˆS6i`*=Z"z~9Jăz09eG^J~/.RϒE zyr9k!8n2&a]\Eb N$v?eȜ ^C|1_+BSN.sEyyHWC_3!AAW7.Φ4Hab9s=V>!M9eMGgxmGSJE^E٨Ȁ*s"ThG"Byi45tPxJe!ZxaȬɱgwA݂I+.c*"]z6s=;}VkӴC H6mBJҼ7)GEl%V|m.WbDcGoղq]$%-9xpZ^6y1}$wYިmDJc5?j۰<ڀ>?9T5kJ@KKR[djˉw, Kk0?-Fj6)L{:s:-H\pGk5=xϭ!nk ikεrcC/ ,sZ ~L}js_S*+:YJ:x@['&dz{dp'C-4%]U F!:χjO͈_v?jڞeC ^-O^tBKDdž mck%>qVBzdäW *FTGvtC묻DWL8 dɉ54_/6r~nb\`pMBR<}M{ Ht{-l_8>.6 "cnv?]4cߥVKi13ƪ֒,Twd[qlz\|>FYFAlLЃeo*!XY5  cX qyMKü8'#͗\m}dNjq1 1-~\j`}&V-R *q#>pbmBUrlDZc>pP>@^UreBȡ3PG 3/ p[VjXGf9devFX>,7;m3|HKiT6Lfk.x*~*z,4Z0 $"ιvQ{X*0?="AϑnA _|1Z6Q":T_neB z߱2|o+6SԨPlK/lwo"^aL\ȅ iN̖#[ IuD).kMI%U /9OT5f 5"f}F;Cel8^WVe!*Ed-qt ~\̫GI cģ`/^(t3\)UYl͜gE/KA,uK*Zȓi"d<У=]cݨJRя،b>!}aۨ6ύ`ф759x 1Ӽ`;2:nN]~e((x\^N/-2 Rnq:#JPg0O"I#^Ch[DgBFѠCbg FB H+ +ܗܬHqpFrOބ5}xjB9h!`y-EF9QH?r:q7漱a,g"1qФ4̻0gڧfFxOHS`XVN on-<@ ̻9?|F$Q0'ǀ3#"ם$al-9eBx<*Q^xBeּKs} GÉZᅧnByereA|MyO6{OP-" $ϵMH Eߚ}1^Xc*OE^P"Ve *~,'-,ΗeU8 dAb`-S{r|À5r7q:>(|n9~5c6#3\: ^ʛ1G("`6![O*:=xc%5|Ek,L;( /؍MxW `9%-~o6ʟ&_%c>ަLH8IGX~4!eC-Jm݈U Ap[UՆa_In`ƆJ},tjBo=;%< UFG asƜ ?>3/~?OXVG I=}FO,Cz~-6UGM}>/0YuEOc! 2/ڞ^[l>$*aPTI\cl,BoǺäŮib{HnK̜] Us5td~i>#NQK|~m!UX=+޷"X.%hǠ6bz8|N hW`q^SߜkTL󶝶 FBG&dΏ6&B(@0z7@W&[kX RF e 1e1[`Ci!91vd@YQ?( sǖ7_;>аF*E s2VCQ0pG=7 n_@]ykJh&%B}Q^jkpՕr<}8 YPhp|!0uHRǢ5ND:sV ?}՚>C9  F̳zpg[:V$,I>Lm% wX Y5b fXNU|޻k>@r[*M)=6FCm6Vbg\k湕5#ue~Ato??'t0 L]5ܬEw8`Lna`Y0fξtQת&f."1\۽\ 2T\Ӂ$TRq%KtOsny0EJ-O]<Jop O\!\<ѳ(^S:uSA񞒓Կ@#۟/Nnyuɷ *D8`Z#or7A~MEދ^ UeodìR>SN݉Y4J>O:M?Tw8D7KH*-NEUG()8Z򒥗|VHRq6Lá@0㤐zV 0_rCds]pc7 ?/(8E?\90+5L şg( F*J co6|y|G3vWb}`6?HҴ״y|#eپ-ҁ' F@L8b/`&y ݺe\@*&cwL=a[|"e$'jN5t@F~5bD]Y4<=R$K/Ӵø gWG:Trk(LuQHo~: ^'DdΓ60ȣV}SF#>v pQ߇ֻ'ը3j@)̢n-Ys?ƏXoUһAU+N YA~6P,* 8:5"o?x,pZ)DrgI紷4,xz1N0{zT'<vu4l^B ָ{_$KwB{]E;TƤ \,UDX90o뼩ι|x;c򜍆*"}qv aŶH<Ҡ,=Υ,z]҇G0$/v4yn\լ p*M҂ZWL= -;h lC Lpvl$ ܄T='T{u ɳ_k-˚WnRL:( d^+`1O6[{֠U'gb \T qeuHG})+n/lQ& H i t)L*04aHa <|F!bgTG"ryD+ x[a 6,53(!R7-d (7 f" c\WoSX\}gh.T1&]4OFBǹt0(eꃩgEy0+{J->A*sEW.b礪vf1)ƧQE+1K"$oNM泩xX 0WVܷ-x, N)/M(I3\l$'HxLMlbAblE[}5Y ڼ7kL̢PuK20ntt+xȪ_U*U\ #fRW%'%WBfvγ專l,s@(+W|Ij%S k_3;eNx"ٗ ़gAt6Mc((pLmâ|pQ#>y !aN]g%gT^K=eZI6 FY;N=.\F(oGS?K&nW0Zňyhw?qHSu*gR)7imW |!- [=א}onn&}lyEMcmdh&tMR%eBNlBDV$..7am'l Tf!vA7t]űL#J(Jǥ{ɕrL~/DPX.053hyr6z ӑ]](C@ŻG!,,n`]4 k0'Հ2#{kVB|z"釄jJB#l^HknD t鹩+\8ے~j $FnFsg8b؃13wZZYg$ `leSvsA{so#eNΡRGiC k됭_\;51ݡH'xVX@=}?wfi^ye,5B49d(F^`Hq)3E锻;aݍLHg@,s O֕_Q>{wVT|(  *͑_Dح´w''>;Lչ \1]Rp&@fYƪo*Z(ultc:幣Ӣ}zDӽBlbjlVElx7'9Q9QI[ HIkI#n|tCIsFUץg`8g]ihqŠs4<43DS#$&7onh!qU(|[T{WV!Qy!du p%K䵼o: ɲ9qd|/_W*+^ wHRgIXy֧ܛ(G?4嚃gtq@Uõ| i Hڅ I2=CqnZGu"Z L@>5/"hP~JǴ/#+. ;|#zw+U(t1*?qt5ʦ% Rcs,ub[Xn@]mѥ* ijv~vϪRޠ¬7 a<ޡy~%kXKnBH^ꞽwegC{5u@3a("CX ȗB/ 옋wPؔjgjQl ۄewp;N3ѠR l%{x@TZMID .\&|tCyA Wr/fPjntA@CG L"܋(ev7 Q6kZv ?҈l.̧IBk&]Cr *H׍;{@WMgӱ6K.~Z-;.b|%^Ul'Y$vofLދş*|:x_ ʭC'nHEޡ^_?ib5h K᠅93ll̯lSN ð7%`+4kS4^Ij.a=Xb-+{ NB!پ)rMw>`y6zw |^ ,Z6ȹ-HUe(n1bjb#ᷘooY\ifqi>B|>KSQ3$j2MŅ({*(^ VHf&mޑ|h277 b{l[;>cԘ꟞Gf[=ٶ*sok7{O +ckԆHux!2ݵ8TC>4e'C|catIi9.@ =(1H3ᒓ|qRc(m>"yv\fLJs.Il*ڝs]Nl Q6 o*&_ϕF6Q/26rQVп邅7Ρ=ruwۓpX'^5TTVt7EƧeѤQuf V)xi~΀Xɦ=D8pqcI%er8'o1`Rix 茶_ߧ58| IW r{L+;LsݰXW99yv[yQj z:\-0@ϗWS3mٴՏmGOkSXxELJI{TKL[.4ÙdDyr:|cĭ7A_@lJ/sdyxkǔ 6I01R2WhˏIA6(v;4]YcP (T#>je` Oյ4vz#=Tp'/zV)?nj6['9q{BQ$P +߂w7tFzuaϯLӺ;*h@cÿ=~ZЈ=L.2 v^X!gqPB]"n or6̘rW-GbZ - tIW0]aٰc|OkƺcK?]ZɈDt}KGCn[nʀS$&\˰!iDeb[D<-:'O- ՜iWZO~Xirf`SY2C)ٟbĪneÏ _$UN_ޝNbILvw<$M9Ez`O{&TըNXذ_taE0]qh(g(2A$Ǵ9=O}5Z].UU |vƑU>|6:;S0Ss6F$z"x '.&_1l'(4VB25YHą{T,$#a_-"(m%kX͠mhL? ז28deԘ@~%suRưS٧!'ė8ыw v>Yk,e߭F4R(CL<Nn,Ds.a,"A5ld䲓A|h#{fPli:}hZa UV@;n(_PN牁r!X(#nO3 <4k$Ǎr伮h|o"jWsδ饯6L]> >T0 wzFFdq?'UFb@ $Qm25gg=P_W%[L]J l?leЅhdId$M^4V;4lst &o$a#b(dδw0*<CmnX~㰓՘iBNK=Rt| `\Kl Io_վgKRJR~ƌwxG +4me6lmf?LӂD0Մa=ivҋ?TЫ#f4bOpL[Ν̥V0k1Hȭ5 PcSk\"H>ނ]wiF `|bYr{{híEYIVƻmIt1 Ir[eiAWf)K$?g+8M69b 6Pw;jl*bp-b!]C;jc+jX&&~+|fˎ'nh#Ýw&t2i_6*"& v&QrLq,8+@6!#%ElGM2/=3xf޴%S.v k*:g"CBArz;1/VuMdKhc*V=*je!4g)Cp vqeFb/NKP1ɟ@Z"p"'zص 1pRt&&Fm4 {Hr]؝RVl81 ֎һos:UfP|J:R?"w|)D'L(Arxu*B YH^)Q& tF}a&})I&$.N;C4͘z{#kQJ&"˯1Y;-u$2;7RXz\7:;/?g,%CnDj|y=֞:;[m|%HCI x!E X}Ha\~yT>jnDIh}tg&ԈM5^_'-0=ޏ[GqBއ)ax_[e4:$&ƺ9ME8~";q̭%ndGzS~'s ` O6@٬dSF3qڤa4c:SsƜx1H9]8)yqEj:ޜ+Z }ҟUSduBbVfyW_RX:ÍD qIc(NuRm"hV`Rm>7Q6b6ݖ@ic*OqmBsܷLE4C42}VhM)ks&%#I04~v]N<TlGqu­R׺*[)-۪]M\(EN{Ojڨ5UOu̇ {e՜{"NECse"A!hD̰5]e"ʰZ'_T)<"Ob?F{sFX]ԴՉqab~E.@6&^E[3"G*#V:YN§ <&텩V1(D:}ܟ|{l2?83!4ǫx\LZ OBU%LYRQ [lQ]dޙJ$ac#? I4n<7@V{|}L нטC+C xxSQǥZD }@-nO :ۿ%_MLA:݈(P #^a:bB/.?ʵ"0 !]'v2%fqz_6[$"`ZP@e$(n}T)e:;?%g %J]w)Pgb@M,[.P6F_o4MUlF;D6׏Qp@rkdf':njR-*~؃vKoe*pdJha;ϫq9HnNAml,8^(3 - Ck(|QU-}MV8W[%],v]CkWg^܎Q\sʻ`gцjpE|z"=Û{9&8m-h{-RiKULl)*;mcDRXn'Vdb{1<=-m+̌FLw1&섾88Hlex<-!D;skPmoM ỗvۘܮHnoMD&3IB?e0#ALպ,m>m4sDb|oBpWwi a$CwzQ*UiゆHq\+eBљ_-ImFm:SSk=mV]U̯:U"ItiU֓^QhÍ13hjA3K* ߡ\&'T G' S PqĬe LDwdlqėzdz7^e;9M7oP0.z D~BۃYF؁RM 0ԊZ^@w%m4BiɃ#f|2A"Ǽh=nsB)DP͖>8yEw^drס$E/<]}37UvN.S$>SJ ֤ls+}cS6_='1"׎ۯ7 ;1+YF+Ŋv_ >0zq[OLHX#<$g:>$l\ D/ >={s)[1;=uNkH 18s,!qO`{goԦ  >VIp>x"يqM2OkLƦJHSH m!i xL[8.ńD4rfW  \'V휜2<|ԶLȿaf[:z9U8H #3piz A+ Y6o7A{X6;zn@Z[gQ\\ KTKB …iJPTBU(@RNBZMB_;oCI(߼5d<4G %r>g7>ks2] m,dbNXRrY97%e(܄KAi亊HB*^C>$.l,uJz6Nja~|Q.dpzH۶X^_Pݣ*r[7GTT4)̵ VGNi=J ; i- Z  d*x׼nZ3̚5fhd̋P6hMyИȰk-"I`4;쎑ädO{52[]6#3| L*e7 [rbܵS2ϴ9*-~I`Ř5 1˛rg 3i&F&k$ؑ@QIkfO[Qc?.Ɠb8tA(!܉r#%8)X@*xr%_U+_aQtmvTgIlSi,L ?g6m/ok Q DI8\18z78E8'aLdjQ {>Ppԟ,*Pd1Hz]Y&OxиϬLR":KMTG?mY/wIN 9Ƚ}= E`J~_ XOAW\B~o+ @!#斻Ek7}=1DR ꯚ|#[Bˉ0!#/.e<~EVnͬ[IrsOa,?6LˡVhsw.YH5rQ,E଑!(ɦp4Tx>8kyl$Κp\`xɵhs>1N#ػN%ڒr!ΎoZQT6IޢmX4 @0S"w-Qq4\s{6gqiը"k>F\|7?`)ʊF4DZaڦsWja>گFa%pQݖJ瞹IGCzlC5t ڜkUC.,rXpRP(#o:M6|wsB2APf#ŠAenjDE(q6 Z^ڽ[Ub&H';N3'A)|"q<@;7k B̉gsy n ;@X8ޯFf y ۬ sXM4rP}tOiޤI˴2$W ^Ũ2} s0@/۽Ma` ›*qg|i5$ H !܌s3Ƣ-ǚ:3!8g8g] OBK*ROTOD=Bi9 .oԾBkĖHGN]`$rtw\pz˩sMFYZ+E :z )x_J[󦧝M/B鎿ތqRG<9"ӀaL"P3 + aRĒu>ɏm-id(` Uс޶Vr}t:i5W"IR,)X7z?^fc2lZcv况U1e:jXײmMB$mT;9>GwC=Qb)(GC/bX3ό _͚oLӥ4SLXA2-@a,m{$N>?EM0hIү} _?LX=*\q ?9xcӍf6PjKHTC6~4\ꐂ0sWxt <:j]1o8X,Mu}}Kowobʈ;xo l9 d?֣q\ƾ~6s)]3^:lb*tt$㥄quͮ.S| =;Ť{TפHaU_p4b96!ڌ Va極nca"1 ]/0FƱ.MM}L S R}OC>P Ʒ b셏IW>'cҳPZ:߹1h,DZNS&y E}`o>&ti@.1޺e^TcuoWȺ gĢƉxE(ysksW,21;.-._RD |~e2s\^!>z33\`ipS0ēX"xEޝD 7~e lVj%d32X[9 $!gDY$7u8_w9]cˤ#fe\B;ij.'VW \ͥic<[M irzHy+p@0sLqbjϯgaUĕ5=[oaJ㼁v -x9,S. }x\Je_(ǯQp%(!"?ɛպ",-g^tpdPjO ś E4J!V7tc:<46CҘb#&W3缼)vTldn^($WN q̡W౅f1*[hWR%ـ0y=J7 >LҼ^5zCz:DZ8GʼI7h_(=?vQW1nGT. G&xpP k9_]ոGޠEdیπ6%P"T4`Yy5vM  3%UVQ: aYr{vePǠ",hAPE6N>8"R8J;;(\R-Uj|SR2=n**'E^YDP`j0ɢڛwv DZЦR|К>pC'5%C61T22%BT:HI([Ae8Ͽ5Xi&ZQݢ; LCpUDM@'ݓ;"MKN;SȆUE|aL(3 }1#%*FJG nCO (Udvr:L߳7zG~թy,ړ>SQohZduNҏ'UpXP|#T]z|C*&FHd]~ܒ}oLMC*SOpsh C8U3Iˬ1! 7ӕ_ˠEv{MEIf&bKL'ɟN@ѰpྚSdŀzD3[p]2R B 㛥MWq875V>xBT]`ŮCFNCCS(ޛF0Ch44Um6`4G;1eiQϑuٲ-q'I]Jnrhw\|X' cL_ 5RߑjԶyXp%񉕍V~tNs"zsͫBPD!KH4L*w#^ {vuO6"%9GL=5CG˰|5LU3R3Xl?I55ْޘS6Á~Ce_J/M %S=Wrc`sq'>ܧV5P&eJ:XhUÿ0%4-ÎPgT{N7EHU#|4 ;ͱCrAqk5:DBg6njw┎Kԡ:B`i0O~c{0*&8D)%8ϣ! Eh`s/a~ CDo*~g׋=߇ CW2D1ALz*z3Fl1˦X%zО6]wqťLoKiȨKkۢOV+\gPn!K}#amMpB#ٍaڏnI#`p^v+~l40)tV]l. ĿYؘvXU7mw|/Da~R+prSASļ&MegA]+{}^7`n"wNvq$o~(eQpS^ `ݽ4q ]8'RbOf٣{_ۨBܣ禱+&~\{ӑX*@3QvLsψ>zlkpw]WO`iH\Sw $ _!UUM/_ڈgCuN>6BiִKBF S;:O=q.<EA͂%3Xo^'q ~Q&4/b{/83cDVW_A~@KLά,yՇəx1kn7Va8\u', MȺbma7w6{2-qHN'qXp|R2 ݏMg(o~ia̍h/TE޳|R \xQF̂y@7Rӟ[\!)6رcZݠ&q#"@5wM;CʫS2g䗹ڂ}qtKC \o0^}&I\%vWPN@= 1N?+ȑi*=xo~.ybfNS7:0suAPU ŮTt`goBw~jNYͻN.O]zio`5{~<`|s'us➃.Yd9>G$ՂXxDVI7K6lJ%x=^}SAYhVQ]jUN$XUMy__1x":giy]7]m9hZ;\ @BqFBk>؄e;w9/ ~uA{w\}fy dWayH;ȑ\v3)~e\7$ :cZҪK,M0wUVe~mHba5QYȫ^0 \@|)1Lk;HI1$A`kk$i` -˼%o*"̉^;, Vo/jx-n@ UNmd^9bsw|Uۈ '+RmU< gV^-'\E.iAGR`OT BL^X4]Z}=7RBx ЭhcsЬMu±P`EHZi{e kbcIUf3Ko 9UxƟTF p|0h|KU%ImXɇ;>8u;rqʷ~=QɌ򤪁TAsljY *Hxrσ=SH͍V)3{%h2=*WOhp /)#4qa 'N "0t . (fvKo*xLNv,1V) orů̲i4խ2<zm/nG ><{l'RpJ:%HɀˢoMY|d>,([DAE!ǴK,*JxI(d(#IH,*>3m@Ǯi#Iy&UuZi[[who1YI 6OabWq<>$7{R#'[pmȎPs񩑮Ыu5tGK@]0wgɤ32R% "{`t#&cP eXIz覱]NlbF%V= NN$K>VOԑ7|1'\j҅(/%>x>{D/:B֭Ya4h R%?E)U-J*5T,1.nzh h})ueFO9-9n!SFYz?aԧ-r^K̶iJ|׷Gk.tQIo jw~*ȶe_3UʷUt$*bWb8Z dF–)fyC<< ݁<+AO_*GyoQ޻CklU; yTAi4N] ;pAIn4p7Db;)Vfl~jB0f'$u}e B9#yvdaMN906{%#BOkbXU'vXZP,6e tQk@Y:%4=C>,ݾRjﰘu: 4,_yӴkFZ;6u"ްa, J: ND5)#Q=ݒc(Pel!@H`!i:p!;wq郯)=UAi)@3!`,b/]r]/rk[?Mv溉BD+]갏(9BU w+Y2ʚ{Mxifc@Y (gDlEсZQ:hNN!bW:nMK{ْ+PpFdzł-Eڳ2/qwU%xPj#s7f$h>1:eI,8~YG`@XݫRbcQGTJn_J#%-wRE,~:Ʋ]x́X+M!B'r=9fL`qI"]@5@TEfXR$O/0ȗ<x/;p  dE{}aυԪ ٫69&Hn'O"DGe>ʉC_h#+"ɉ2Vxu5Axc\fpqtدIvnLOJC]!w<-J*īgŏBcKރ2{bEp8Y|HCNE]W+[BʬjɫoG'*L~!ȳڛ6Jyt1/Zl1=f-8ɭc~5w_iT4"95ŷ;F\]D'ıෂ)> \_!l ܌MB-1/5J+npR {0]\/07<-¹I7qc#ʫNt,a'-fGR ѝḃORV-QM;`5A^UkY>8MwGğ}U8d_:eQt(V~TObJ=yd<rk*lIx.7>u+^Blji7D(j"QFbnw. ?#ʼnh),ބ$T Q3Xs2Vq2:<,(}x+tq!gN"咳1P۠cCBe ͭl@hU@vvqqbJ. ([(O|wgDhz1DOSr 5 e m`5raZJȷ`8+=DrZiuxTk]:lNG*88^۟܍Wh2{BGVYĝgB`Խΰ:}~knLW;A+68<"Bw8́s~7iozǖCeEJ[ЮA4-]GuI2)uѥ&5;@o52'#r`*qDȘ:ό3jd ~Ljd !CVA%.dĘѵ&$!YtVъjc[t3(WYv9]fv SHMtfŬSM2lڤg| +b3]/&]Et3||qaG"2{B 3wXp,E7' ChB4]6^9T px_(aOyn-nzQSRas7/-Sb '䣐T`Ȇ!1kZM*$4CUuR+0/̈ Oa_)\v! eo!UWxNϒ%> mZr&#UqL6dٝݝHEQq\|FA-i\]PNmŪ]&.UÈnG=vG,e@Vh*ƚ&٩/$X4"Ug%>Eg(q̼j5=Z_lq !L-Mw:[ ݡo# p76oԀV&\U^*dWk $-LNQ8N&?_P l<#ЮNdU&K$˶r*O8,es:h3BM;'XK@H,d QB6]F9y-4&z[\,(g !BUUO-n.4s94 JG*_3A2#W5S - TvIa|e#0P8\T~9v{r y=\yH/=NLvS#9c5ÿԗ4˷2<}{=+l. ;xV^]:S/*<+¸, ,UbUubcAc'y[nTN xA0%R\Ӷ2Knlmp1eV WoVyFNN{oma`˒.i!H DQA.e>tmE\Ix1][ݠғ&S  2E~"(t_AW.ȶ6?ʚ8"? ˆ1iLZn/px"Xȥ(:ǵb6FBN:hET!ԱI5IK:9c:a:HD#-;?Wff S'[?˱ϞѫŧvN W36O~;PxwZfvʌ֮$[0 ﷄeTqtMo</Gn>Ӧ+<4A뗱6'u2gk3F OH6>+h2 yp5 2o6#X:_6;'9 UYk.XZ9z$e$:ڊ)xG*/*=>r' wF {fvO)ݍ8R+t XJl\pM[٣z$e!dUքMhq4>/Hl8oBcTz"-x& vC M5rc[rq }BWτ %6:W"KqN$q$-p@SL'z7n oC꡽6.cJMMmaEَjG/x&C>e3 y޶ n {jGd_OjiMlw:] '~"~+:+py'`( 1s`yp Sh4H/Qb@KQG70G[ր:\V5y㬙M.TVé3Ip(TMݜCc ٱ'5wkB ݐ8o<6wcaM)wE3Y(;Aɼɰ[p-M+b܊O᱔C Jb xnpdua4mչWb6\ԂfT (qNyg1 \fr:,_4s+>8wrj<~< Lj(gD7 p3bS>Upb ^aXzX "3$#&uvr5m&n>Ly!Bs϶YlzXK$ݥrcUL UiG?Z4M[yd\p*5./i]&s\<Z]I|dؽoCEQWT0O=\.yHrk̽/=T IȅXA is+B uɖATg,"d [Y"^p\PkPբDnK޿?`5=-nW@Z%wN;^.F6BQUɄVOoSS_[_M1`Ɏ]wIPںKHLE ]!kT"RJQ^Y&H5@J]-d%q ֛jsn/\WNyXr! _Iʍmn;$6{H^:YJ#.ݿWq'dC^kKY)}S\l&@ePD~9IӃr_FqY{Gd `9ӾUQL׃B^s ]C'aBHԊv_B8̞LbN$"EG)ȾPуm,G['R\Lţ.y6~5O13/whkJBl䎸%!GW5,M k! ]o/?KF|XZ>}6ukT^>jjM|xeh#Dg{|$==N 0 4R *g J gy؃VHLmg%od>6s_|xBb6c) t.pTYGV&n>8#Ck6LLF3DZ8۳k%"\5RN fLt<ŷ zRlqi=j;{Q¡khהHUrdP=.pLJt$f.5C&䵫PH{f #dڎwbA _Îrf)p}\8PXE#4>Y/͝GuS)9LAG#o`Z1bCT&:*|FW(S-“Jٔc]28Dt?x,eH6Dk{팤reu$CqD0WJLNdZ3o(j*y&6@ ᕓSq$oP}o KwCzo͸nbN~BGB$D~ΐUѕ"lR-ԮWcVPkyu+Ęl]Qu.ޭ׌}~z 4)7ѯ|$Pk EjT8+h-JܮJ%Úkh"GU﫛|AE~[2`bPpv9d/MobV[4]*?[lG"n G,dQ2MTOmJ0“, \`iӔoi}=/B^קϠ"[Fl-Sp3nlBS+A>cjz['ZFZpU.Ovg CAu\?/[F}o N £PRu NR1 ){lY:Dĸqr>tmiW=E1[4E*۝-Pq7\RR $GT(p'Y7Frۣ z\Pzn2f0jބ{]ր1V{VG{ufQVI}ȁjQRɻ]\q{\W5= oM45PWqEA9I.cpmY)K'D>k8M*=oW5`[Wz# \+DC;Ķ,rhFdg$BR{ צ1Vw7aZfcWun'Aq #*BL!fAaOp+PBé7{S3) vHsdV64/Ob|uE2!  cT\i:ԛwTcH픜j5 ARWWytZכГ^] v5H.`A"tІ uXUQe 4*; _P|P3j ti?y%Mx6 Af!NSۈQw*r}M}F[@<DW=̝̟(;{2.9e6Ѻ9;gG:ߤ& GbĪvhSa襪z ZHް58r^l~~Ur;TҀ>SD9u>#z0\,muǭ8f>cm~Dbk˩tE,Чh."q 3Mx!A1'Fs. R lik)Lb(J%`0al#n}[gi8+n$EzK!X=]&I~d7: xx55ǐd,MJ<n>"ѳ L?*6 d!hEQ[] NL ]!ez}z}1#zu7LDb!Ɛs|S<.$t8xYٓ=1gRo6ILDDP~d@ot&9؀j>HDW#"5T 2F-{"~ {Z:6?SB4&nهw1Pbø@;Ea4FO'K {C~ W /ؓ)W^ 2u;ILT3Fvټ} f21c5fFe2rnclMDR!^>.9\ZW=5s4w/ݠDGj؈P"6(9\鍸/^z5PS R3MαKCq>*Q%"L`Co$9O2CXv.溧@C@'sx058Rܱ͡> ]WSP@g§mm}&aC6(N[[lݷT3?ځ@pH~TM!gP|Vӭ"U+O-tc25T@uJKk[nڮo'toV)a(3[sr&-tpR=ettɜ>AM15:fG 3 ) iL: G6 OwL?ƞZ>܎gUT@/&DjA둩&9]8 Y^S{ߥx3]6P%Q?mT/y`Ti9 67*1Є]Aep9A0>{'"}!8i =4loyyrLjKG! ?X?0KCGGf2X꺝Olq0XYt/3xv.m&-ۂ"C6xggR1.sNֶJFW=@5}t\52hs03ѯ${&>&(=d+JcL=Էsbﰥ~ntQN=DԱo{^/87q9Ax)њy8VШjM9\ضȢ<*?JzHaQP'=r*QP+4ߍ[k<g%봟t8P.G %WJZ aR+d~;*♿>К GCϛucrVӇ0\ݾ ՠ [x8T?b&qP'bf" >^DD6F)5d9𱪮z;qջjc%v^g3PmFZ\},sJ, Zi,xN/(./w}Yt'dp2]J7G':K+9V dѰŰ #x>MrpL!7[b7P$thQ~p|7P*@ԅߎ5yEF0'~ C}yGfcs%p!s8%75r 8=@9qڨL>#aBIXrfqM-&ԅ-5>?R7;BH—q]MqdH[53jJ6,!t }J_["8 vJrI=ܱtnCsdx`@",sڤfEN y!A5'$j _gUU j/S@5agPxkNyfb2C6< nJ"NSOeFU.kbRZM( e$NԹHA0A7?#CȽ.Ur4!ea7F,eԂ̧Mh sNerN/tE,c܃2a +=)_Wl*!:?~SFvdz4M{5Xu3C3E-"h amcPa3CpQ;dˀZeE.T8])앶5Ze0<-+>:enj&RNQ1w'PY"f2S&>M|q6341}=%: r&kD-2ts9g#y1ӔAd{õtxp}\RW7`=ggln߆ޙɧ/a=e1؍TLqF^U^j@vfMۈhHYas/xT h([7qniQ&^ּDq}VD"d\XtsppBvҙX>1!fM&,^)MO93$#rՕq;W;"U3>J|qz~r=R|t5&'f^wǞ>ڛ2 -[% ixq9Բ_I< `J7.Թp"D<-p%zY2i~_/% 9 .*p3ȎspKbCBQT6ͱ(5)VNmf2>&F<,Kl \b*|@jIr!N*n#vļZ.83{-rH/+hL %^b& iQO1 4?ħ"Xh|h YSVcط*jz#F oX$~*ƭ#* k>˴qJҮ{$˗{8V|i ITFS  -d)c7QK˧ދ|4CU>]a$tr=4NU̠zzr2dB׍@tΖ'HF%{fDRY֮V.M ${l:P"a2͂:g9Z(M I<=fVNYPk;ELpNˬc܆C >Ue.ALcb|,r{ONzޥYiP},NaQW گӥ;]I,|Qsw$3$nxa >z#HS A@ º03O|`- sat7d/ھ hz ͹+1FGlj" [M$1*Nа_ㇴ"] 0dILp>b1k:H\CE%JvasoDc[e E N9 P3dȢ;o@p凞w3{$жn{L*vM)2_l:Ս`VteS2F{H +Rs'(~^f߾c.7  WH76)Hhkc1 #V-LNkU!TxIbUJs϶ZDxɞ sJo塣?BO1eOEVzYä1?.`zy@h|mN &⣣y-n_OV :0hL)SW9n,,sOMbOhbgq#!sLeRyfž`=Yd/kWR jJ$,gc : |BU_C3lu,㑃:ha&c4Eh ϐT ߰mV Q놐J-&>iQ#t[Ň,U?=,M0%Z"X܋qRnq?\޹V?@KT X]OÓCXL]E<5Xҙ +sz-lݸP|IlG&{ط;ŀ-ޅ[:xad7"VF(Zd/_ =.d Jvh$Rh0@b~XDK ݘuUrcsM3;8[9?#r75^Gst70*G(yIk5,DdṮ%j"IQ窉3u mE? pŸQŃӅ2%ǧ1}=&+ i=,([)i8xp"Oz?Qh rwo6 R+c:BBf$n:?ϒ$L >_2 S Y= ^3؝AxyP%D[=8p"(b@ ME<ҘU;\QF@KO'7pw쥑υ.}!l\iZE3_Il/v`ٙL% K#f5_Y =T߻zUYqo+ESOkRN7uT vb氣JZaTGO@Ǡ4 (E JMea $3e\ߵ+!wXW !:i$oQl1t̅Ph@Vu o 6`g? 6֬SKHVKVu:4OA\=7(+fj> dg R MVz*I`H2'鉳1?~=;'>~G~+:U0qա3:S'bO:.})Jzص-soD}dގSg_X}xNV><"9w.\~Ř4&V\b;t 4j!Nh>V~w>=^,Pݎ]bU?cL;vj\,_Ôn=AJ4>MW5#Ro٢~cpHJsR-~p?:ea~uJ3b^2iz[Jc,8I^n5ÀٷeUKJLj]M:O7=q (?BI-㎢IR^pyy<,gW'L9H}7= Vg`+OE[Y0+7LԞd*݌o+uf/ݳ^IZKL(}'nǙz~1-@m+ܩA]|p:JYfe _&v:}iwÐjP }0`q39Q6tP@OK6Mڐ^WNWaw!}Ah8K+C͒7+33tư2#=h_1Рi/ڡQK+%xރXcic :audpmG\5v٪gXoBFKEYʦ5g䁣̒筟ޟ/`hjL\Ő"ܺlnc_x]S:jò0@O# 51;S;{Ŧœ%5 tQ$=F?h [jV) &_sأ^9&}lKJ W}aq99:4;h$ Q,!#Y\w#=צ T0bZ* oBް^#"#NLVs+Y=OQx*rr q!ih!Bd*o_lPrζg4&[sLUP41iq4\x3_Zt{e8Kf'eNXC%跐/YU 䔑 &aPܣ殙ps;*5aۣg- zoFo`47όx[fH)n|V?YQ16^ggݬ_[>H 0>*e"0GveЅ~ҩ 3zƱhs.WS#Ȑ=&%*ډ@R.s|+u;4@K'Z3]ԣDE`(#AԶ 8#gm#T74GF{pOveyBaU+_(2b{txq MSw#^w@ʧU!RQ#yAĞƧ}CٰV,jo0 @9$7w%V2?#6moR8VkSۭ~o>{fkrɚOĒt,2il/גlcSQ~q݂ngȌ翲]BLciASth m$_I+$\8ft Uw1UHAg:^QC?S?# p+YlR1Ib"0MHAeݜ ~-d]0Lї@ 4;U{?!d9Vsit)>)2~a\m$tdɡm|j:=x cNeԻ=@q4k0뒡yFz=3^k}/Py?vÑYHX, `AJ'[ȼ5 >SxlR0>.BJDtvIɨQQKd,`wM lY5HU6uZ?jx : …J@|\ 3}XKi{z"0\ ]Bu>Z"@ZrI~ []zr#OT;*+ MK{Gd f\҂f K)%ZHJ\n2p [1PVabG:+u)XKS.aKo&@7^ 8M(P<;mЃ# =ݝ)nͮ-_2rcFXl{$"ϥ)zSjRI% /QV+X&iky#h  Aw'@ :\o5o:8+H|=׺|"+@pK1}FzF8i%tYWї|QI[cXAIoRf yPNHDs)Ar$U XpX@I]qhK[|thۣ4O$xw6~ *`<[f򅝰;DN*aHf|@,#ũ%H U:{@"bQwiGAdP0f Q H?:|[G9gYh.:^]GZA?OXZTd` {6!Q]/йeK-:{[Zik]W>&"$-v֛0a}J/8q8 %}!G/qu_7qj9BE *၌=]eC {* >E[Ct5`0Ƅ4KG!e-M˕buQ|j<9vÄ];ƵLjfx^ ͌KE"6N8'Oi'5*cNxW[ƀ[s6=E MVbޒ8Ӈk~] 5 VK)&TDbJ$cت5D)J`J@Bb+}֫}Fe7֒@^l5qQ=ChZ<1TOr $₹gӧan IN@ًztNB ̋!{dᮝhWàOs,C넄J&e#X*BhN4E)ؖy/, akYJПI=J#)Wx쟠jNw+;乼'Er2s^p UX=ߚi+/v)Sop2.fR^/ oeBxե#WQJFb'45rmUe͖pL07S9$;8{z!>kC%%^b39ze^c@|6w0=#'2[]@eyn|%?Noҍl3Djt96+JعtG )xt|SZX.k= n6:DI]̋wh9h[^].sc^cs.:pX_Y"/֚],zy$vҺ&" _p6}k ٴaZ,ݗ4@-$4p}x˛һBЬ?pfȁwaR5KkCLMBlWFe=ERu*P,L׹!T;3]H`}ڷYe@1p5<=믽)8L/NDŽe5asQ&S\"gZbH80$ؙN?@9!/-pCa;g}guBЂףm1T( Ƭ/l׎=~J[؝D1rL夤:k %Wy :B20 FBsD+eXlDemiMCD82}Z>$D4D+sq <;7(Y~"\ 2rF!%wLk16o'i&*}hXmvp,H~gٺP 9~Rx::n[ yyy=ggoݎݗlZǽ$3X}@eKYD56f{un0|@PjΏD"bTϹJzВ!n/] Ge52}x8_K۰Y|ҵ?3 M \)@2K ?!e$Nfox  E&rp<ً-8ޢ̂y0n 8>rnJGj&>r."4 lp27ac%ȭFXSa)$f$2(X`hc$yۆ3 Y_tc|3|-y`{0 3(\bu)}̍4XB_R2T &,4jnLt QYmw)vpBMOi,8۠ ܲDKHҴ7 Hn0h$S735b댱-u.~C!ьq[Ls8W0B<med,鍒]j%"w(bnFN"|%DM$ZB]F$Up5l4k8eUkOϢm>>6hz^-F-NjhѰ% ѱyؠ,Y@ $0ک%Ѡ>bo{lo@Kv*VKt|@b~.SeD==|+@կ;&2t)>!j^#f_5񲡾C=#'aYٙ$ᆥDPqs z¢<t/bL,QحQ4YE&fZ"@^6"a]\9*ZB7rV k5U3-CG8#9g凹Z,a`j]͙a,C똨 RQWT'2Vʉn-zrQ2,Xheuɩc{~]sSJWnnXa`L'C]62B;H !66`rރ>2ޚ59K#6 G}qtEÆCdO>NLxqt/d>^^{jyWƣ5$3,^vG{[ֳiirh$i ^U^4 .S_n6N&btY:HMr=C͝dOgG%x_pr,ZCG&'`1WF<\/~2H*9X5">F-VKj:ֱjf=%-DݡX'P#Gb{²)ZPNy9B~ʤY.G B ͣK>Xï679 /Əh!P~fEI^vuoFXo32b}D[xƳl~|կ*1u9,&IlΉ7 9b wDu%8nX' y%$ N-α]Y-j$r -t"[IB+f r,/FKav $9V %eĉ\OyyJ^˜5p%P.%k\-;.cEǮ@4 t~ ɠ EW&{1=fJE$َ(ROtbTпT]]@%̀@Lf i*ϮX %fS#{F@ᒬܪ\NI+&PD60{|-ɕf\dn8XT퉖'Ÿ NI=dP?vuS;$]5`\tA#:0%FZc<%SK.(g[qkQ*͠Gʻ^ GG9̛zer-)>$UiJzjL2Ν6 BNx ' 'Y{3@zV)\Nm7ϯ1C[%l'T+[ܗ56̩tیNM(M=*p _ 1&rf Ӡl i$9 /;k 3_o?0xqy*"dVԠ)hWټmHJר3ȼt;# ㇌L}҆)SeU#6Oj rdgAa_ 3C2Vj,6dLw J KX؞VK9"&DE'hY fm}3vdqˀ䶉Se)z ~(|<"ny?Nvcܸ$DRxc-yd 6Β'tI8|94tQ{N?>&/ =XצhfzBnʹN-z~P~睞x^ `$^Sl;nWWbr3ZvhYR(.hj]. +a9e%2٨r~W[HZƣ UWQ f) "?"BjW8W%oDp/ONs8G24UKA3:W` kč['R!ke48]l\JĚaƜ/jV̾N1LwqU@ 1l$~\BR>498kc ,_dyi:u8[M,D̶,َ^b+*6.!ޒG"u!ǐª;q>sOS*>ܵng }bh*&b.ή'c'zCU㿴Au`r WYj:O\,e_/fV@p]\h; !Ё˃jEޛvL2{.Khe5gDq{Dn ' sMIhbO SJlt%g|BZSI"BRЁ*nэh{͑mjS29[5L;>Y^R]CȌwv9&x׸њ'_¦q]@AzX+N'}y,l}(W_7h*z,iO]V\&޴[\ b-{M)h698 %av ogd[@rǵ\چ} u0WT(G i_JU'Rbt<՟i:B_H)oqe߅ *cQ)%< !%k~R*-z/Y Ųx:N`Lit,0g!`PС&ɻ$a+GQѻL' )Q ? *|4s,.eGgGJ_-=Ij{[,+HS*V;uҾm 2Y;O$@FP9kp 8]X-+RMƀCfl)o?ެíՕhI [?{F5ВԤ>r6m+ckDHQēzO4כ0OF9HrBqaV47l@~%arꏳU-=ɉ`,H%ic<[fȲpUDf¿m+nC>V{JޕHz.-el;״\$,YSoewf#ѐR̢S!"h5G]f5Rmu3P_T%;a_m"^U_MٲY2&M|,K?F+%Ғ+uuF[2qyw0Zc*5\,p7g}ՑAu.&+ڭ1>p4HΣ[>ο5YC!`.II~EA^]RNB4; 7.u 貒o)BN4dh%=Hk Nˢ6C6GndfXVmȦ}/5gKTtw/;(gdƍ'UVlCPXFph3) uuZd&B;$A, cPS_G:(2yz9VHVϯ-U =j5? i4gi7@btȜQ&kV;C-P^(MFVbu29-2<{; 6yFGQ4Dls*@EK7dUa_5v[! Y[!L%$MyvZTR:i5B"`\$Xtm9w&vB wmfТzME^3mcoN7ZU? %VƈD}&FWѴu4^H٢s^O5ל:qL"%ol;~rǿxJ\s`c(j>k9Mc3Qm3#NԲ9{_n$X/ij@oށ[h\'-mT֧G=lNV?hYJZˀ"żNQMPzN; g?W{ⴉ'KHK~Ɯ^M'I0t'W/ވ=e3ic[߳4[XL2QG$*8*Ht*f5|8sHrwv^mܧY`^^o-kL#$*4>~UFKb~ܭ|>\:HGF|7 Av.,$L-bbdt13Y=mZ ^cJLi'20?f~?0E>jp~stMh$F28f(xB=!27` XFAx«ShO3G6!R٘"R(hxblٽս"K+np#eUQY4Pg蜢(E|g6|M|sؿؼ49*+]i2WgJ\9==[ery,|paY]6( `B>wZdLc`ߊN-ƎlIMJj[˜1V눣e\S̚y-t]֑ѸҬetU>@ƦB7;pš76 =ZrIRO'Λ1`FI: >ڌßú01&waMdf&sQ|8 ;MV?jYˢ.,҅~Vm n#_@$g.ؼl GNvZ(AeHa04(:0H&C2`R.]V8b%OǭAkpp}%;|QŤ4, άۙҋBJk0^0!SGvm(0>}I3a-\;8C m! Bj&&0{1r-k #ȩ{L{Nͻ;Sw4y~|#/̾nnXȚ烻g9a\mHpic8u'9bsU:qMoG vKܢHw+7P50]鐽5A5J LdV Kr1>\] ႶV VPZhd/"g8UPw\HwE=^ږ>m+莓"y(:,=^T %N A}/9PqqszJ2ejiUaw9n"%퐴yPht?_n&-'M?͗_ C2sIt;N=eL֌kO=`/CL/TO('mc|q팮/)ǨPCf+͈RI|~7@mc2~;L]4+]@3;䲆ik~c>}lDXF6!0H;$Sbp fW^VWX]o k>#￵4k1"'%su9x.k+bf^KR+-ZIcala-=,GV1@%}HjRحa' HrY|"+>6YrJKRZ[ /G靺 = E=_DJa Lט%uGл'ҔE ꊱØ}NPat{pv/XX^ })"e^ +7}+.`r}2R^w3gGܮ{ݶЗÞ1nT|#~e'J?[nF2S" ۦ6NoNydR(`+&# g\0BJ W d§/3/TfS%xP?+kxb`щ R d 1v' (El.Yu} dV"&.z0{]+6wY_=,0::EAv"i :|G !+[q뺜:zN OSҟ8#Pg**]6\QbՅD@./}$uvZ~޲&⠒fe]ى뻆: /5mw#U v\Vv| ]|P)e=x i xK-Z7AA<O}3xuz,J%G3R8dQ?\8eX?^\r8OZH?[eEJ&/`\ 'J$pS5K˙<)q$Q=w4[9T"b wl<&Vu[wRsX*d^ CKݵӃW ݾvYԮx֠zK?SYr;(};b2v+~]Ʃ-vѯJ$^"k;crwǥy\"i4' Yi`;EZij2.C R/JUq`|t~& /9 . ˛ç #Ɯ],_/91B.،#f7;ۅ9Q6srE' Quٹsj^FH*CYEu7N X0Bg]Ko#LnDxț`lV&C3yA"(G!Qn` hئMawjuόu8T۷6ۃDk ïF;&"ذ5A?KbfFs.Es`&AORKKzscqQY/6IjlK/j. 2 FbT@`E\&pU'WȒ)TyRKh 񇹿 /9K#Tx7KIVľ^RIn]&@fA񸳞^Nlf+A ۞}Njt綜In2f`1}ܶ9Sb<6St$!C"_YVvO1Rx;@K:O_L`fGj8mpvS 4m9yZ C)KPe&%=^}FjJUvcKXjH(`@n!3FfF qޑ2fv/a921r ΀9 V1{2HWS_Zw[*obxfN MqȈ`-_JFVwz(r;KAy/6k$*5fdQ] ܑ.gt$z@2<`a5^競u`z᪷dOb|fu6bzb rCLDkj?'.g7k!a˫F;YDiJ~d44v~5TV-?Z!R7`r >Tj`PȘX\f2`>h?NE"Q 뽖}ʮav䷷0 _&- 1p^d!`BX>v YAt.HA:) y0`|M쵏a7MqGC*a4+d:1А SlZjcY \6C(TlRfAs.6?f3b4Zln@g- JdA~HI&]ƊѸ`RwJm& 2u`j+ B6 v򸇁mОx) )RitR-8~^q}iV[Bs4*gІnpRջY+3[Kul,/R$2aj;̬*"uc];OXfg s5N~b"үH|=s[XDi,3争.ƹ5BG$7&u`@YU=JO8f_\\3x2/$rfrk$#7g ]k0̴81 *tf#QI!Η Tgm F ڽ8t^uvEƣ|fÀ4VS.^9xһ8bQ.pK`ȞZn(t~_Pߟ6ى5-y}-K8ve#Y%ing}+W08IAv3G1LYmpQAbk}+٥G}127'Pzn4PSpx V/,Ai5c:F[Tm耠˔tQ֏N討sXiWzv8ݗoz/+[؋O@VI 3jF &풁V?;($^k5>+k8wyK@u~—t7v,hq(:#(P]̜EƐڽj2x2J Ci5uA1wXM"lS>3ax$s]|fO) x3%'GIhlרl,RD\S8d<aK:\lxQaJ݅]D=֮=;V ⑀+$ Le9XЭhwj/ps}է(c_0)N}&iIK!v CnpBߋpŽU)!?$͝}-&.m~ŬG{cP 1ǯ(?U,E̮UbHI}E_rI3&:F`GޏXDLՌƖ%f~[R}b ^{sPu} 'a.Mlìn*CT 9tLL('j)|#G_CXg9}[ꏧ.vKS1r$z &B3%0Cj;Xj t9j.謕O@ qavDF:YPdQ%# \hǷµ;gԪWRove5AKMyjisÇ,[~D7a!yQ_̹P ГHA|J%]FQ|Iˉ7|O\ xaģx|3Հ]5!(?|˄cy1e>^D~# ABвk]5Jk;U `$B\W߾ .~ *_I y/ 2,]ڵ8l5Tt`met9wA6@JI@@$g W 0 Jh)YL{(|O߰'Vx6Rf+'(RϟA쏬Sr cׄqKFN#\}"MT7J,%ŭٻNO3iU%< Үj&cD3G'5s|pKsDž/2Z(j{.kM2Q)$,@f s v[Ϗ ܈彁hb> ~g`"[ANӬaMc\Qhq2xS}CbruQDnV|CUڙ2%@QSB*2N&xH&v/kMAl7{Ȅ-y^oez Ȏ,pNcLJ^Hs,QҼ5mb ֗ˢ/>ҟ(Dc[eϨjP)`PwEm&-qd RgfrW>ʨ^Jg_~lW >Z5yc yI3{dnS}Lȍn:k?|Î8\YKGs -t4:>Ɓ!sc Dmd~=h TGEUDyh<0n bV^V9Rx.-g[9@4~Ոo}{n"SBE~OTNueYkJ IQ82r,(ׅ+b:K7Y8X:#+\N]܎QfK,E}2Dx<<.s)tyds `COL?Qa25h8S(w]t&j| sX$B@ҕ HrBL_<: B{еՉy6#;)6>H1YWD4At&Q hN+uȴl5Q;- @v6<ƒnљB~"a˜Laf]SZ/1=zDbΕPmLR@c=69 gQ~=;2?$cЩXҵWIc|UŻ8y WDoqD.;iNtJ$F?6@E'Z<6Фuj➙#ߓƂႤRI^L.%% `rw"[0s{=$_ TA>R(BA]50XpE)35]wN4[} ѷ>>Kdna +)}a:Bw00=֟Gqs L0"}!P؍cI>n]-!zs&> |3Qp`PL&G7A7GoQ|ݖY[Ȫȴɑ\ V@S|==jvډnlȍh7Quzqj,'9|Ux 9iN莸QƤ() 3$ ک_m|b{ZyeHy_NX},{x*kQӥMRBitqV ÔR̺}yL839cX_0O*mk S班1!&ـY ?cA9d1xB0HN[}\dJ6̘mÅqtaƍ✆f(ϺW _GV<~b#.4bE{!%446 N.ոt,Cl<+C~_ǜyHj\ӯ ; F{?ΑA|>_&wr$93R\?\l>A¢TcPgM-sp? F )CS+U7'LZiBgZD}mupI`H8|m,+0mE&q Rdӆßc6K{P Ǥ<(xÑQ67C+ ݪ{Ll*D1LI~6Qc 7S mM 4n< 3zzhw#*[ y"aysh <1.WmiEeXU~|~qv[؈jwpmQxp@TtsJ6Y,ER8QY މ2mNmv76|{9ʫ˸#r$cEdnh+@7J0Y ئ %PlrIeUoV{oE7 K#-/z:C)t(^t/ei. ¨LhZ [Ӵ|DžHpWTf.fجW 3xpfJTCuCfyO(]x7u^++:=2~I~RwV oOi\3كC5Go-4F}r0^FkC J#d"$w9Z ;EQ{h+7qYjۼfSȶ/ר(|$%Sc9 Ӎڏ)6 ' =l-s K7ðGmuMQa56[(.{cۀְi~4KUq)$vq6J)|7aH &lKwaɎAe!>M&u YDJX̤qF4ِ+F(v+vݺ$~܏m2%KZUgBK/yvdZ?;ea!c%|~=–Q?<Oi\}lQ4y N^n~{Ǩv˩C" FS]s߂ z.A^qG &tJG")>FlLj DFZw'U.H8GL -p4h!~Z m_(u(/p—QJ/!9dE\Rk`>\M;7Gzh+Dݱ(L9뺻M< FocD; 7} A0/h_:5tɳi3Peu8跒'mʬYޟ𜍞bR+:lT9Aj[,jߤkj@\B> IDq6aNla9Ul55N"7}Zqwu:D3q)q85δ%tE͹ :6Oҙtĉ2sߊUOp٤.:S[jp=oai6yV؞8{pak=E63<٣|o akiM[?ԅ:wdv82]+2} K'`n1Ա e u5i_{[I/>l#CLW@"vQP$f0%F;&x "x=U颦#.tן\w5 AD[Ek$vҍ=X/41/&ḱc|&ieXTr΃QlѫRM9Kng""fC3177X/Lda;#2qBg"!P$1n+je)|Ja&ojݚnȖiu+5lL84ye{չT;oAiQ(5QΕZ{eƳ($X2ɬ{3p( #g&MӪZKsQ`Lr17 CvCCJ@9&|v9ƅ_KoUN"ayeÖMv%4g #M 6{g{o B ]^lMlgU!Hrdd_fa>{nQ{UE Oh^HaE<(VP >5F[1ލgrqLޠuE`-š..H,Ӯ{ zadJV !?q؈:MDq+᧗Op<*#9(ݧuA$xjqakMeTwQ#eqY/JA_N M+Jø!\r2^?E@t79{ 7/XLl͇ fkt.(22dw:OiR).tCSOYe Hh>c-Qy4''IX+z,5.AkKOgeTO7hhH! ˁrhV=X@6-4fGNk]9ZLd$N!VE;MCDoGs|U"gXߪ~M6 kOFT~P4{WJ"zeͦ;ѱ\9"$*X{6^``-6z fd#k54tz1O7?^Fil~3n# M4W`oS%:]s sAd֧QH#N@_wuN% Pevhc^TO`:>dhhh|h jQϏ썭9Mb/rUn"Dzwa3j=o3͍۷^O8$E~\K;uv]s=@PZD(+ۜhX2㴃0[$Ij!}6CUf~䨬QVHf':m L&bt~$^;k)vf"pj:Gj`&5|{__s\@xwi:;J}o l%T~uuG %s*Nz1%nq#Ņ8В8CO#0W2گDSL˥@߻=!mTUoqNC#PkӕI}Yw#~t]-2c8SQPSȦQ|qM@~ _^VU٥"fӤ8٦+ t;jሞ*Y a4.N5Fq# iHG@1璈k*֘٥a4݀JʓfOĴhU)YRrk%+j -@iMHOG8pNj@M<1<t~w\G!v3+apĈP+lѡfZqA9ro,ݪ\qڥCIU *1?Xkʟ/wEnÛ} R|ZO% &ԍ:!4b9 GA>5#nsHu$1s[an%0˲id ;;o?R/#7؆~5Twf38C_3g ; owIr\%`dՌA00\$ IYf?sF*o)ʚsJ.t/ɡVX%կdsIm>đFzk<wW/+Kbᣟg@}V?Eeez#-HnMsn?E|-sfLM-5 #6vgЮNCoy!0REt@ɜ}Ce#9BmmCZw,OȂ@U=N*v. % X-w-[7۷y܊u8)(֐쥋BLQmx<%_?s)JY=w0uu b s.%._yM$5Z)݄.9m\Ĭƕ,)z vtym ))Mwh-gh(yu 9o#oPsG#C|ETdzZ5!:Vף`^|w#y{I+3 :gk 3#aSGF5`k, T,[óRW\Ymd*3b$ xJʤOnVSt^0,NS]`ySI*J<LͶ<1hԪjtb.2>]>{#h;pΏ*YBAIQWkppcL&3!5 {bU#>v:88" ֵEfpm7g$TNꁍ ԈyYRr?^= AN؊0zAOC ͥ,eW|TaIe"L2-e |C293Ko"+Aa\ݿvH-ўi& jb>2I*Lr*Et;ϸq(ǩ$n ao znʾҼ8 #7MrBL 5E_6~qvبi /!caI]nJ4>:S')]|6(؅i>Te+n&WC^oRZVkQZLiA]?-{IS >*#b+~"ؾ_!!6ؐ|mh7Wp9h(01wV>: ڠBێ[y] q]*[9]:˨G{49OǺ[( r&Sr:7AZdJ98ACRP] Llk6`) T횡`'$Aqhcvm1|]U[ty1J5?LSq?x[ 5djzrvQ6>O@|I'dCܜJ}gKg.đq=CG!Ȏ骩 Ztn3Q% S%OeJ"M-,0u3Rb4,%z%9e-|wC#[ "CnmwֽTd r4@"[ G=w{ mTUPʑyCQ0S6Ɍmʋ wRGmd}Mj:sc |HS]$btm7}~]XFk Q 2Uq"'`Dd(V|)݂zTTR٭Q^EJ+ܚ>bu`P/8}2p` sP7S9j\>=%O|x!l5{mzWhա]8sXkP5KU0FO?: HH74sגss"XJO\̤\m;Uǒ_V 'eISWdpRؠ.\MU'9ܹəi;A Oʧ+pfYt㐘 'ǠH-/Wecv G=TReP,7NQ Z6E RX0pjA[Х;#W>xS&=Z!=߸Ɩ 7TX'2wKzr,Rwxd6؄*d^3Z>3OJs y& a#/&,2)5w\"JjXHc\ ">6&㹦h: vՕ/UtUJ,~xDIDK 3|cy?G3hJnYN.ކ&LbyF)!$_*Wsgm2HTVeJ +?%o Vg:ܒw dwTF]r9rBKJ ' ʳ~x/LsnzwXZd5DW H4JF%,E_]˼RUaǒ |/\)>8SO'lqpٓ7q'nK\ ,/|P1v =ʷ'"v(o=;WgKH#C(w\׬"2e5/(2+zs7W⎪vE W_"UȩZoƍgCњ`"ʽÄØ <7kkcwgn`N;FQFKXf9kȱ_HӠYn۳yE0˭YWͶR[eaNնU${kg#Vf[@;\AZL}%/t_0fN裊$V:q{ׄ9'o>BɦeV9v0KXL' :i2 BUP3&?M}{ǥ[LH,HQRx-ࠛ,PlۭܿP f~fZLCB:MΠFRج)IдW㍚мDJ=f*&]a7[LɄz_:bDu5(G=wDp@m !5רeUp_B+cW3{eݨuδ4SYɄ <:w1)T.H"s#9&aK9Im-yyÁ%c!Nx3[!)=$)1`ABJ(XlxZb,7iPLCy~0q;Gfr ,mڋzx3)[g֬37+aDG2܊T}CTz]k=~E\xYA%ݴ5C?y >`lz% f-=ui~ sei< "5Ұ"`0~3):r4(*MhKD'VZ>#(sLktBzhB'N宸'rӎ`~NEko)zq j]BJ>uTim #^rXaaV_g:|"/󓏣O$fؿ01}sB=prhq[aetȨlſ:ZՄÑİ{9ѹˤA,pB/;_'2 -tPDxo۩)74 "[0w)XɘmP6Oov05:ױ 1k2s}D^J=*6"EYɁ,U?op0!լ3`s#Z{6ϲra)"Z ubz8qv{  @ 8}ȗ ڎz/9Co݁$2ڴskfZ IV/K(՛2r?b{Ө8.WKlO(=ߝi}$0tM}_Mw+-@\^SƁrͩ&04r~%sg>ջA`Z4ڪ>1~q?ӂ-x M&!R7{UE;ԴfxU'B t]Tes]ZyG`m&G\RV8OJ ӑ35V! Th}3&K;84#u"l`"v0cݪ=ދR aGgNVw~0Jc7Dl,zn,253ԗß%A,LprMiLkd,SFu Ľ[O̧0-*mk%Ͽ:! qy$INUF&pPؾyBppC,S҈FHfi}]WEU.Q3 S\uUwOȣ|wklmb\&u02D @JkV1,9҂ԅΞM;ۑo3T[N8VmMG1=2y7V A#铸.%yJ?@ebҮ8g;&#>Ez=9CD-/W]'.!k`t0 (ި+b h;0 bt R鹟)"BD!E( |n+ "Jb ~^1Sj}hS <\¤xs?j@ѩw},N,d>4Q X{ /֒ÃHD(OލQP6V-v9l ^&V킃P*mۻ>Y#݁ NdP?)%z歁bn Q5洬C:eðeRb-N L8h󚱅Hj*LjI̽ccVWrz@*C,K]ֹmxNo F& (CNaTӊikm%dM]:/? M6W܋/ЕlZE}ptƥI51HOi=(-|+/)CݬNBPca}3.u $}qx߆L[[ҁQKk_sXxd c({/CndJVޱ C'8]JV}qildc‘I$5qZ(`l$-ULz}K']s4|[-RRpj耟+ۢěmN dj7:78q'R|_gZ@WSHFp  PWzqe,?G븅䀠"xM֗ ^aCZ5lv /ۗԱGUw(-SeaHH}G~9@ Cm'y ^'<l).. Yg8[Ϭ0áF3U^R:TnLδW&`^%ȸ:f R!\([d}ȝ3ZqCLy!AӪ=Hw!V+Cx&׷jC.e0%MHtB H;a 5r5w, fզ9H^}VSBVRj~JZY%k{=vANXGl;SvtԫniBO0?jq`X(6לGS?,oW*CB ])X3n9)Fzک׭q,`US:LSaVZ= PJ]DW٤j~t7vNž= +YQ*xm-ͪFMn:\j; JPIt̑?ⷞ"%E8«G41m8|:+5Xű}U]c Gru'XACUEgd{ B!1QZB_\@fϓ$/0w20)2)mh+}]a.w)y2rn68BC -H C njnةq竲Iz{xш0_Նњ׊oε/19:Cd ݜt[]a=.}2m A7]7*s0sD]}.zل)Xej`.=_*iɳDc_:P9'.#ǎ#X:9 Ѵz=qY{)*䲸(+bqQ] ?cj'N"g 9`;DBGqIƅ$2qic ʼn^7S052'Ehh5!)Q- Wsճ/QF*eXVZ k<°p&1te{_g0EZABɭdod{䴷W' 9Vh`VP@-G׻6 ʒw"r{ ۝|,11Yu>PԽ1~x*r474Ypj oJ]\jT]Iw4gd4H崭KX~E >LH'|_TZىc,Kɽ6ÁcLK$_ [8!J$DX;'th/`Ale:m&.EgւGF4׻FDvaJt^vA=&˳񿀮RAMWkY^n\J̜'-;XZ1C~Msn= 3v '7G$z}v KWɃo߲%(3jO߷ +3q6d 3Q?ѣ`:% OFPqV)'& E BhۅCd3mB3,=#hBMB1t8OBԌd֍E+|G*ezT<3C59>ڭ\P SuX:Sw\)aW`ߠfܣIo˗&@ܐ#,-V槫Tܺhj\@$eE=IB Lqmٿ.sFȎfpo,6٧|L*XC-#rz_h7pOLNVQTu5z縭?̋ȧFu1QZTDob>'A7LM {׾#!!q_d*#%1?qssy;S(t n@}#w1sc7-UoD1.QJ&.M&i 5u2BgRM'gjؗ%#!^I6嘤 ro: ɦ'әp@8EﮂĄ:Ϋ!?{I@r@s QSMa7By9d!==<:ZI#J]GK{wyگSlK:`Vc+/zfe\S0> f'Z)|+dڤ}q AX]AXj bVҚ+ꞶRs dF6ϰa/N+&w1oVf0DTPn=`$$rL{6a8;&+^o7@o%#m@ v]cgݏz便n;!A~;e]UD"`/emj}7¯wgoZ:U#Mռ5@GkQ&c2%Tzׂoltne:;w᫕' (- ^ehG2N;?"oZfXooG8LZğ \s0 6%񁴪 6Ku|N_PΒ.rT0= Ygfy3_Tm%*zPC-*ǭ~"?-wdypJJڥ7 j)o5t5ޛJ'ڒœ`hV;cBۖ>Z!tz(lqˆ=܇%^6:g)D//çg=6 "r _UӠؒ"3|tHȏ}?5 '8ϱ6A 'sY 'j+j+ewJ( #VqxiY X?"3w\J܂;щGYXP)% 8r8b|oERar[)y~efኘu]$  C[VHE-{bc0A9:'d-GԠVF baܐTUe/AV֛l0@tg,\Y<&76@C?~ wXe1T]%X0 ]K q i4A$`ǎn}01DI7˥ʁiw:kz~Ũ$7$_?սNыLd' -{<ڹ#g:*1?F㬅f+$ K9EB iKs{P'AZ)^ 6|&Hgh !e9,P&(3 *Xn.&ytR*<Nzz/wR <:e2iàM; d %Ry/kMlo(\bt֊yk꒿mq&O^Sy)9:D- 3?MH7@ OFlgNϒ=[ڦ qϨ!z fv&Ca^^3?u$ozkBA3EKxl4Xa.6jU8qg/ՁEi4Y~1NV2?c;!"lhϤ ė˴6./blW@ZԵ[2_b"\p'=a tĐW+_V=GxG B1jcZ#3T[B^N4 ,̋B`U*OuiTbcWE̯ȁMB+ z;Npr<)":s[8!EmNAL[W 9':xVTm"F/,|8l|-4,̈ *NFkRA*͖*(LEecETlq!'vg7{ǒ\GW@3OB21, JeYCL)F8qPx#DH&F$=ctG<_-FNN+ E4JA}=F0M_iʝ*$>]=~7M}iﶈǵ=_^Ksu0%%A(Kæl)AnE RVEVLm_XԦ6mf/bC Nz X6 چ:dV"O"CŒL?,ZXiR[㚡'CXr+1B1R;oʷSr[C5]+mzɆ֦C(4_ B,>]T P}m:կK7#}2Cu 􆱄^v "?W20=ǸU$.'"wL2/0ulp&B7YI}S+֖zI7 c4@}WxQ0LVgj7봣HLX\iSS%\FKY4;9N<%pջUI˺7dnHv|: ,z39& 2"W+2+tXvڼS[aeRb\6^ہ6_|-8zLTխC\&pRliAe!7|'{`zL?Ctlezc. 07Sɕ@P9*k8q@tDu=Lcf/c(>]eË!}y&^c δ̆p1Jg|r`K/ob&}?nlqkv>࣠J F3tdsk9e3BcC9>JeQ,Flg߶li9eӐtIw2MRpRǿpc3՟KFf fs&GY_kRW`1 )D廢-2ub{o}ܛޚ?"_⿣uR9080H%g9 F}pUҲE2 >4,/fո<\Fu4x䑧4.xXb: \uACUۼ}<~k x)UB-yR+7Ɨ%. G=LgAUT44/a Y5@Q>bVa˩V@'W0?dX8,a;?;غ4$DVqaY4@uJ߹H׳:o)fK;l20#b9p'*22>߾燐 P@UrLK%x )7;h5G:=zS1DKj#lжI< %{NjϞfDky1u$X/3v f8*GSET#ϡuV#U=1L[:J1xd3'fKj\u0K峅C 7M;gz79V%v1Ak|p`lbH5Zd=4tz4ڒ]3if…)|fdOl$Gd+}]Ԫw - :3⨶1f#kHi8jqYXX>2Џ (rZ\#T>vC{.y }jz@G_NxnhB A?Z)VZD:HchO)lN5<:}o4.½y.c%$"I&~aBs8 voTjyP< Β 5O4eQY)dtzMY5k#BAk'm]px>gvaI|95"67X<^W|MȲ6o6m_Ԣ]ɲ[Bi9ie}/ʼpN|j\"8@RAGp*Ov wcŪGͽz1"+.i1S="$BGl7߅ȉ4fU J3p6T 'bvd$=Qb7*{|KRYQo%W> (mKSm\0.eStEvA\(-RIN_OTMɞy% k5nԂ,*>K#2[^U`K PY*y9q+5$-mTF;VWcAs2n׵"[ ]81gɣ3)C."; pPZb1K&c0h4J!ŻAm}%04փV܆CEc\k+MqK&xFyZ_R pü_K@r՜voZ/ÆaAp=u)B㟣Yt3Q_ e˕P׈#}ʠP tEAblWeWԇ5 *c /JRDJ~yPr>m`Kߵm9GJKS/rEmXBE :}91#> L9XZ9^ScO߽ dbo,R~[#_ZTFOo\& WF{vAI>}$Fn_?0rPK_vw7n#|9o禞_8;Mn:F='x+n⤁K`u[4[?6~(iDg(p|1h ddg gX)GE ?( z,]C$;zt]Ϥi*ۤ 0nS !U_Ⴕeƞe ~ %Emdxʚ, i/J19&_̉8Wy/_%6n@S3nwhyGp֎!`$bsp%Ke/ =#Y$^$"h2 SK*z6IW ^El+/)C0RD}Iگ~MH^*ƞS22O@t $m1n# 4=RQ,x3| 5E!<*{ +^xZ{:*k#I. V*zD3^9$o+#v]ocی{̧ [jݪ mo Z* Po2,;"-h5qC{c*>h՞ G{ )ìѢLў(Sww c,1=9h|+7JEmIT *rQ5 m1zB( "GAs^{WN~:Z1 A at" `u_c4G}t ;N ,?ŕk[ѾgmT}>dAϏ(&P( 'T [b'+\auL,6,J{mjH&v4!9k7ɟbfxX.)Eg2cӎI׻CDLۺCYggW-> #Y~TL:b^Zs@gZ.Y@EI{͛xp!Z dV N,(`OO'fAq;oܶO:Y=>báqLcOcRĻv#@WWܥY\ӲcTPT۪oPh,aH4Ji1=MK,~ZjX<\6׶SȔCj(WnCfmu}6hx JǷ5]bqeAfzL4k[4JnPm1idbrʝ%wW/sXɘE$E#']7[?04 {ڶLnl,2SȢw@d}B0. H!W̦%Јhx[>:8}$6+pO"!:*ec|sONѾ#K;k=M?ߜϰWSh}QvB#jC-/zsttٲ<+`HHqKvµH#Z;b;8x3l5Q|qR 螓dFŋ΍Ig;ϲ䱪|QkɅF.A2.:~-Lg58oYp|qBb `)e`Dqlq_DY#_3K8%L,uIQi4$׎'5k5܇`k!WhKk)1* &Ќq\}ݠԶAb7*x&NG^ ͒FMneWðSYH\JA @!2&ОcNwU>BOs G{ yei'4cdOvjRp+X8BTpUeYgOxD+c7xOGjqglCEPz{Ṷ)5LakH<鯫C@*:ތz!YS}hX8Tne hB9- v=sEp}h +:-PgiUf҂b\G`bwbD! QG^ f[UAwpRЇ)+%ǥW2V*YmdL% c&TNGQ WU)']ObiJk#px+Ifb?LsJf*7L}!s)kNUG1ip7^iX, ~Z[гVY}bLn5F ׈_)BC~ LiE)"'}^B禆122앝)xTJYQ(1=*H!E>GB:QsD|nOm|_WL P' _EMRNqs ls B\m@cUӎQWnTۚ`:jD1"sx 誌榘L۟*4b\K=6h<|w!ccM=u@(|,E+[0 ҞIվ$F> %5hxu4uz$xG N+ZosZ*@c#U[Hk\nk`^J$!Yڊ dUm^i%pI+{eAp=hĸsw!]%G@|>{~D!L IFq5*40Z;Npk\\c+P35pO)P*o7qQRlpzFt[qv@[ʟJ8 Qf-tS Gy`p疆d_00~q#aԭ3\rFn-EN ^oׅ Oջl~{r6iLN1٪ |e;v @8GCX)H W^exEvn.P.a粆8P>m]ў|qӮ6yA0ƪQٜBŹҤq`xwNdsjlG{u܅w(dmCW J / p_|kAsK%P#p'K>ݺAA,36sI'JBʽa8jz4Ͳ:7I/49U0>Wc6O|K:s5tlo?.|zsK65{81JbJygv3YK" `_>s Hd UObgx 33}ڞ .0Q:7f^F7pck5>:v#>ք{\JޙA{y7 ^sA֌{sqۧ vd#D8Tu;?$TcU^ KPu6'Y0]⳽[GDֆg+#r\78ZR.cж%VG󴕆D-vLJ< ;&5p̷VjH_fgyl;*Dx8bѧ# E, s\Qx] rqh[@NXfI^7}1whN2$yKL`S8ĬVӝۘ?gjޮtyWpnײȩkiշ}-O \ hXpeycԯHԔv^]I3a+ZځWrBFJФh03ķSwʤZ, ϴ~l t/$T"#6/?? c$n vT~Zczt&_\P*? ոr˩! j>qWU y_uӛ?Ɣ2 )jg6"6nQSEb[T-S}soףIz,תQT>6P X4[MCԵn0=Zv;.sd҃=~=漺)UN`O?xH(JH+'r5"3 T~rdc Rk4  AfDi: OeMf&\K~!{K4g]5U:``m0%hfா t.*W&8fCf:&@*$RS׉*. \·_*xIn̎MoJXMzQڞDe3Dv8Ω5DSΆ&DP_ozefb!_4m!YkmS~y\?.vE@UL!Akc>0rp"5owfyyaT կ+-JB{s1p~ǃ_+6xTqQ:aA"Oe[J?g*B_浮WCW%MXa)F+B+-đ_-(J_/Qds@I %nu96!VspSYB}#UY_5ok  A0}Ih>iɢhʵip">Lծx$V7a%uPo.GOOȯĠ].'܎2`Fy$@RWRE~{KYIRqQ`xx-mZ:o^v~WN;Pm̉K؅ k.Gɓ"SC5_ؕ1~GVoY¼ " '!8C4[}c ;c R FgYڑk|Ug)& Jloȣo |F p*M ubTJ}+0A"qʊ\fER7[y^=g+n %6J!κ?A3hb p3DZ$Xu3XB2PTRpud{;_aG)+u`abPtoecC|A&$`iTG- ^:?S\!<t ,-1Mq~%_K<דDV6N7'-vd^H=<X&u=s‰b>Do *V> ߑ?E.s>Mh6'Og@u|u2=Ć7H })Xc㻊[2 i='Ean:+ X8:2o(d遏=th>{`1 1!#9Jwd>3pS!&!@#t"t| r ^ uXټ#)Ŕ-뉳!$).ⓥy\93>;`P ʫaZVr?%E*߷Y 66.A #ܭn/De;7;@cC_]PfabC V/"\T^z4$e:40(FKDU[ C;iKEmљ5Yd"ϦaZBc[K%3-jxkK`ChJŏCne hس'[! j/"WT.G{ȳ*6nTƺSePK'wZpaVs[3җzSqXꙗqz_6e 6Bm* {ID~o_I}1_U̳h/Fold;-/|8].½>l`=@IˠZbC;L:T1lrI0&"|%@3fp!y}I\O{U Bq9g)`@I߅7p,'ĝAI&7t cwoBuO:ʔiۭ1EhhQ@6@3αDLB9n ]Z|~dh8|'.rPPΊ ǃ>"EO8`!b4h?BY'-HmFY+THH]"aq"]<`ikQ,M==;S)~Y)[D.k"(;.@t`Jx7%eC>^ʕuE=//ĭsԩԢ? Y1͂\*N߇phoyjz} M,ȃ>i08T#܀Ib} 4auŽ=.Me$WT+$vPkqFK-jY Ws>=c-٢ޜӬ0/`4||ۃ\L$In;CjAv`Q `޲{Re[S*>`{;Ekh4`׷SW=ݜԚpl+7k"I&0)*Xps],m^429[DrMc] rpiaB;Nf9ZqƜžvpܾ4'LAçr??%yGDF0K kLdegk#ZLHuؔGc#@H:LSo ^ 4qCo-cUyJ ,(P"Y<8tVJs\9w]mG$l{w{W9x<nH˓xA@! W^1l&Jy y;.6ߥuOjќ  p k,J \L _/fA=3gh@Hljt%C ??QiSd3Vڈ#嶞+NtqDSzWZYe qB6O 2TB&Tyo*cD2@.9Sݰy:!jC F8^TM۰*V:O}yEgaB2iD[B%x]uѦc(喼hYWB׎w;pTX\ CZˋ@q&N/FJ'$TFɅ Vfe'-#1X{ 1p_ж^R"+25xΕq#[rq2!_3gn 6%w9Mk5.cjzYSɝ 6Y>#ҍ$}|0P/+sooKΠOs~_5FZpȢ`"hWmS3-0Uziő֬|S5!e5T,IjK!}YYISg-ֈ"=K/S>I\2$ȳ!6Ƥ[AX:R$2( ؘ>9e죘+Z++IcMsICQ'ᆠGdE`s*%>'ؿ2ِŪ-Ns:Y쨙r; eo*iH.bbO"jR֐'4g{%Ul1`~ 3|m_,B#gܰr/řUrf&gqpoocWʸj>9N%B.0/)beb]Zцk;7JdO~\ yҮw[NEo̐x% sy ɦq JVM{_ 'NBFU*Rt]X5"6pf>)P rjVr3 YsZGıW=anyc d/!D282\ojP7\_~.DF={q`oebT &9k:%9cF:q|Y+Sŏc\g^0\K=cmr{pDӓ`Z1^mN55kߋWqo(Qٌmb-U- y fB~KVѳQMo2 6%Cbok[(m 7XUN]*0$ !$Ur{QӬܙl6X|ԍzV0?1;5>Pp:Ƣ0~+N䝂v2>4\#/`cҢ_yƤÛYWP:' d"&ob=Lz.;چր8-$ZJ[K-$Ow9m)8%G+#/p`E]ʆ_Q"$_l0DE Z%Bg(6ȗ6 w?HM5 E,r̃ދS)rx怑YA`ɂ+ռ2#Q]0g&>8Xh+tY"BdkN ="dxpN_N4fd;05@B|wzd/"dG6=qrjl[*a? &;bV Y|IpjLIO]EQePo|wo]9J] ^uGsC, ,;=m>Q:%N1bAD rD7ӎ7r%;PZQk܈,佨y-7A)ڂDNrB3*d)v/IQmO5gl7:j RX<=ۄ*ͯ#ZsY:TyXVPQθpֹZo= "2d.uVE): ?I51,޴\#1\u:9O.otr[]XGYƪ'KaԥԱ%cQ4 > jTV/GWCGVIݱ=FsXUɧJcJ ›x7:fkZ Gcwm/khYUxYL"E=^( "eg$!Y1`N:Oڟ%ǪF%ΠAS`9y) z6熖۷xHkQ16J4, 3t]zA]ETƼYi^?SUP'>6K#*۹%4gqvpZ^j&LSO6ku!5RKQw*uCm0wԂuh={BL +/[etsh TnWoH(w[sF}$ĥT+K/ѿ; 3R}_?@pq& ed36KE]SP_Pz3gv@R[η<]W'AO\[{Pe0G4F} y=HN0OonbV=a8.J㎯Fϗw1{ EI ucXsőhz׌Jׄ 1 n*4udǔ]CǗ }P(C 4]hɊ+Kn ̬ɦx,DrJ7?%Jh;l42BA1A5=\jXI\Lvů$X#ӢsW٭DžPɾD,0w<$婣 <<_TH^k*Ng¢$"ûMU{5Sb/eKņFJQG;Ipw))E"oZ@? [ߣXN ad2))$%uL3_i>4Y7@sbAŶJ‡aXM )旰2gaf<.7p}&eTMj8Pl'ET,<2նo&) )zr345ڻ7AUu`L c#Vh +%g݅%v'jΜy[)}F,Go [΀ VW$[l{V0)$H%[@KAR/Iv$0 p_}ٗ! =>'QP' mq<0›w=f1,;2,Tzib` {.b48ʦvyvxlj۩D,tq/!yoƗx/[DDgs .EHSq: mEZ҉i}P ٫/t2J̗@NT IzLe^Z;\͋HC5Fu L0*IJb#3R {C76=qn:qb %B^őDο}ty-q7"TJiږо7ٌ>]jjKRo]pa"f&c!iDlҾ숿1دQV3fj  7^ oQp >CpAͼn('O7YccK Ix' Zr9՝k>lyp.q) p%;= xqn}xEl4%=?Ŧ*u)`P/~LSKCŌ=T+\<^)뎖 Nd$QnczbͶ 2"jXjtU/z@|'轥&J4jsoɵ5[VvGu؋΢`a%GWKYƔ!bN(g)ЍỰ.<=( _ѳ17"c4#.F۝YAb6eWJ !H=/Yp1aP;!_T%dm>v +쩳&9<*L@cqy@YA6y+0yqE[|}KjDn =[+ڈ |*nKh46oCqH[-Gj$ RT,"fWh5yFS22 W<wd'󗎇v]"36}o$bZ9"'xUIJrԡrgtLy(Ԓp-HjۙEz{Dfu0AЗ 8؟{|xA$1h\z"'Ӊ5U viXyQ劽I w~ i[%ܾzu{L3<D9μY˦?S=zi qYҝZO"4ed]DKh)rEiP== !a줅$Uv18.,ʆuU7S[b!e_ci&:SZ`aK6og46tI2} ^J;ݙSy7ٍ}4(Ř12ï@Dz'-X֝4ڷO ݲgt0m/Pztj 4:Ȧ$ܔZ`oH3:c3-(iAAA|ˬH(3UuiatVBR\qVr8FZ%f{~0yUNJv݁fF2}A1=}!\Za-a&qkVVIO+g!d HռejZ}hҾ}Gcl@JKɪM[Ŷ-3Fm?s/uhpP"ovN&63@uph4R`,5'C/4nsKW\1 zCF bb<96q o'F 3ضo0NC:sz;G_d`Lw?Szg?Ԛ@W:&8%-xkYhQqV8ҟO酂!,yDײ]K 9:IoA;2ƩB#›hjOzs8QgP1ѱ[6Z3;_Vǁ47XQcmCUO\#3MHħCfXt>[](jך1843{✵c,i'{:;un_@̦ !:\ß4_ q,6٤MڣezgN+a:ZJ``C+m2kNޫdVA"cf} ]CŔn.w ܇տC"l{J^wݐ -+hC`Lrjdzj?ٓ?&61xR+W16"9SY_1g7$xPssS1HM={Gk.HS&LoLZL[(sb]1p(9y {*}/H )ZfNj^OT/5y KgR]\mU ˄xlrQ@jh7ї;$K @?P Uq}_[ez#61S\$袹[OؿsGe-Y=C!u2BA_`^ppHQ NYo> XKUk:˒&C||,$3uNcf5 =)^PB}1`;Q@,^ɯL 'qq&%ucT}N"[mW/9Pvʥ2b2 1̱-l7.ĥ\~[BUf%H\@9}y&aedXb ކY̰'ïFH̲IjKqc.h\ =+{|3DVUzD%n gEmQN3#E>2}N"8C;{T6kk,ۼ-E)%`:44+bu3eÖepg$~pvУ4Ulǔ׫&jK"Rʶ+ G:Lї\w Q`^!ҍY=ysOxyU{Ow(@G^;.(u "uZSC4MEfښfnQ`9vr7Kĵ?+6_s;AޚCPlAr KK@"Zf̉i8'A }O3z4A*{G}Qk1IMm7rP(iom)mdm&鰝H 2Ŝsb:uv?R"TP*[0[~!42g\(,uLM~=۶uf{`| JWۚ("EV2 NXo4c}R z6H}|d2JBlMKl/ߊ_bMa|U yP ikg&`Z#$Y՟hA~  yORT]!$Ҭx(4`1<" N5[ _ uѤrP3rˋØE|Ml? |MkadPG 1EԎW炟:; ]K xV6|%n A"w[FF>R\8Ss2hAc[o.$|L6BriXnk懷'\f1fƥ{ +OsԦCZ!dc4=//.גʪq$E{BfM n_W>o ;Bjb Z65%} ]%iNɖ & ֭Ys!E9gYˣ;qCٻ'+r'Q^N>iΧ[r#Ɠ{ПQaXɭ,>AJ-F }&`'yK2s0E(bϾh|mIc7*c)K0-x|m#y?<Ϥɩ fD޷HאJkʥÐt|a3 > ؞qԐFX |et90T#q({\* >˃|Jv>f')[sz"38{%gSoL!kԢQC^H`c myx9نU(k"ĿE%«\⿽QJUX#CkuЦ ‰wҘpv%2LE"vvt[+|k qh`)>lM6A:@Ex)jpZKs \M*J>@U=`=kAXҲX5vYM8OhfɌ/'L;ARv6g])jȟ\I Ovh NL>Zjx>W ?bCېwz`t,IH;,5\nwwa ꏷbl\ha(Dt3pwFk"a-c.D')Tzl^]42@@=SH=|%&7"2&ZG_&"Ufa-+-Ȑ" 6_ds!Ւm&gNƵxI&sp5eU*ϭ+Ersa{,q>OJibVZ+Xc4+MC7ER4d;Xd=b;{ﭦl1yJ˚d*< ԰4qPB+8[|^zA ;@O9UYi5wm2CJY|Gȉn1PK|t{z -;v@Ff࣭*.&Aty,d5kXMKHx{ihCQB$au7-139J\W7/0.WaH bbrEjJdAtW%&(vF8\@V~u{mS&3 V),1 u, 2UWv6@ӷc){ %0ΞUYVJ;h6@ebwar yzgI&熄 X;p=t G)~ҩ֕|Ya:u|s4eˠ Sr`( {|I bJN[Y;vBtV*+KX{pmY\g~PgPBPGS(E\7؎Rt,K=B*՜<: tg͗ U7FwZRAYN1[.n'W  }EQ˝uД꡶ޤgy A$Omw\7%^ VM2Eg*ͬs/HTuVz̖Z8:?ԕ: 6ܧ5@8|;t1\ZK?葽X e;hX]/iLc@*vӮB{s4[m̾FlqN-q?㞣-F1 ?u7^yQp-3eu91?^=GZ):_HjNU*ߣ ޜ8|,YZY8P6OJA.'T?+":!$[w:~E= /pBYpiI {RKi0:i- V*ܻVL$RmÞ6ҮXXmaӎUNX!VOqkS*{{Ϳ7U :9 ݲy)8ZwK[=߾>@ZxwV5( tСqh«C'9bV$)EvPJ9Xxݎ;klptCTj^|s8e_.tKH~/@%T[skںd{(9f) fv Zg-n%q Vn.9&&Ah[mj/LI?? Ƕ/W(=`p'b[v΅S^I%w)QAZO4fw᧢87^4 >UtIBgYֈTܜ>Pe ]A1-~OYdEdL;*2m|Z֠[Ն (INJkoIWqe?P JPT4c(2_=L,+^kE:uwR:vyTdpsmL:c4ϓ1S:N݀fHȦz ڢU aEJ坍61DITӰ{k fꌛesw~rRմS} ;Q:7[)V!5qbU=*dP(7q)#N)2T׏;.L1suBhY|C\dq2cn?qK r@IKo([F@aPf5 ͫ6w}xiWǹ].LH^hFw0~Rw i͚_= Lt:QU [#rx XK?hQ8/ʟ9EdOf18ׯ9Ţ[=~?6 ""Zk2m=Go֠@y.кSvI[ķ,]l4@m>_ Ü(cD$ȉ鲽fwEAVV.C9I1&.g=2B .I1iw}>h;>q!L#_Q˵:~`#"STRh zh:S> ˜Ik)AUzwR 9Zd'lcəB?Cju7I>5d EJµ #H_*?38$ 5HW,g%pH e0?X~˥ `0@XBE7zڎQ2V "AȶCD}#ÜkQW/5+eQ#,lkh_Tv2h [DO _@7` 疄x ֔ky/zZHXݏۙ_0}k5A" hT #sN Sv{`z"׎*+bsd@/0)Ah;pV\]k}*WiNyD8DV>zerO}8P0)uƉ z7=.y:]Q29 gc/ǝG>1B 'ѷ:{J, _ؖ<U1 ~B#چhu ס>,)\@x=  |{T:CB^;_-w-Q~Jp5d~%Q~y񩼣D&p_"f"ʅĉ"qgrf[:7|M8+8L(@%^]JKd~lK27*.w\;/ K;=-&ؒa:(1uk]5'He5}JN\goޒ,BX%8ܖSϠ-0ر];ͦr~"@YqOF qۂ\P\E?9* X)buSSVE^^|Nԑ6mW3˼dexNu]f=R.n6(Я=ZtuUM(_זi9'S;SpzHmkpT:ts\@P=s9@_&M['QM>#0,nui6-JyN4Qf3v3aҼhxXKCrB=pgBUOx@9J ή6WUAz rD,`Nd!>{U5ѿ`&!VȆ[Bc4P*QEjB#V=zs{WY8j\QM řA'9_e![[\Ky3帒t?oYx_:0kdй¾f츜r3rD `=o)q0WоwLK:Z˟Mݼ ҍqWL}|(GXSu9h thf$pZ\D&?̪Wi6>V28ZxHV> j5p( re3s^DgT2>@\P|zZ-lJV| `v}vݨX*-Qϭ%P_~d. DRxa@အnVe/Uڳp\MBds̼gM=.⫭1IoGmj=k7T3/qlYƀl:Z%VK͙Gl!r l!^T7(q գMK7DH&+IJy*[UDMZѾƙkJd&-(dh[h&ĨSx0T+r`cѦNAXzOP@Tl?MDc}Ht+w5-S@@~ijDyκ2 Q [1T^1,]X7MܩKØN<|Q:!E?йvQ!bF/tdu+WաVQd; #^ahccd(u铅yq%J~JEx]ǙĿ6moijK+TG˛ %'oφ%uR6)8>1H2r6 굪uS@.0xK?5umw̒U$X~K5TȷhE^VQjx?0F7\CF\jҥz0zab ,ݧu[G@;[]jڡ[^])\寈G"1`Sg04 A!?&DG p#byuZxϥ5K#@q?&{f W Xs|w P/8 rE96 /Ӄ<jZЩ+t>#}Re1 V7bE;NGfX0QOhj(!3 rB=]م}&貓!鸣An<^A5ovj>_q>9BW@Q3i s\Z*ln8k3n#}2i1l#*p[x1Icу l/1zמ̬{QߣHt" 380X׽q{Pd{,}#1Z^;r"ؾZf4S0I ~~B,hڛ\oJA 6ȜAW )هn\9ǂ!ýTKԇi}|O}O970L  O6.",iݻ^δk xvh. :I

w)W۩KF 8@kT_t>tJQƶ#gC%W -qH0s$Bdϑ <_x9>E?cЖ\ϴXD@'6"gꫬLsKwdn^UξY F=:/wU, ɍ]AHӉ7iΕ{U9̺C} sUCaw~*jt\B].B+CWpnxH2fâkj _)B2ѧflu; 5f[BI-(zp3Q[-U+JAG,3,>GN%;ap ?,\hx*gf6̡Kĺ$kQ{)!4JC%ăsYxuFaSѦM2<ӵm)L}ßQXg깾NA&s6̯ :3el{T {BG!r-[r@^OaByjؗ9m2Q/ &vx;;Z'ؘGWR o륗Jgɵ-VXd q]O%{j5Z%F_K\5chc\ꍏ 8a1S%SzNL)e􏍥~ટ *_B6GqX3ԖaXЯEtؔpF=Ήű-`cQfdv`KԑGFUJwHQS飿ʩ*]i&a)!g8w@!]Pfp%7H^8쩈ɒoq uSDU0g vW jd89<e4К Je~pЀ"'J)!Xs\*!p( ~rD3gq*li[ݛ(1)B§dAѤl$6mZҺW-M,<Dz,1?A u-=G'V$<Άi4۾#R:tpI됉VxK.ݸ \Zfр0tKaOҲ#;OⷛrJRϰa^d[9?iͼ8f{srY3t|kK7/u5G~pE|'jL9:;cvd]Ql ٴ'2)I#'&> اs5Å]}Է1 0Q}DNN%rV:hx -ϵ_g)@bp8@8l~6g9LfByR<jQWt@[ (Zȟ_B;v1CMVls$₼>Leir퐙1_k$G2EmHHxӨx-d&KVŖS&JZ٩mu7 Y)*rLcegهUrO;VQ K"nZ\5W}M/cS{sx v: xpwFxN?)#Sn8I8Xz&x'tVG!um1 VDm"S)>GlmJN>u8c H(ِQ+Uc|iPF]f_T Zڱ`VsP%!Hn:a,=)^~eOϴbv 3m* !Q-p>=hvOx빑p J'mĿ'ßo wh(Īx60B<))`zRW$8'*&&͗gAf+!2]?McD߽/L,U_=[ އP=@ <rh=+bˈusS88ߦ(|vB[Hdź(Ne Cgׅ[N2H'/e8v`rWq! J?GEsDm8gө;HBjvMmXWըʁ2cot-hr@%}dM%X[`5w 3Fn_!M&t9fbX?(+œ O,/~eK\bz: ^5; dك30)",$"~fNx<`{d-kՇ .Y]R.6ӌ!S.0DbI7P>KO7`E5뇈%pKqh F,V\KV;A0Gc20k!V psY(g> Ή~"#Q x1).%+IݦF8VKX} x 8D4qJR+ƠLT2rY|°SguGzHo?ȃ sf!5$h1d2(ӭYDo`n#fӽ AQ9缮 ?qnYw0̀l :; O֕1aztA.EWJ|9i3%(Q)ޓמܧ|,x!R] HNg1#ȩo!07 R\M +D*]oE;I9BB L||뙍:1/1`Fa R;YZe^gt G L1F.ٝVjdDJ崁ˋdWK?4<r/>2`]_ZLUO֩dǏF$P)PT䟖|u?&}.;G@Jo;A`wrab޿>Y;f @bۤ ȁʦWeY- HG;GKC9N de`ȃF%xt/),};wY^:Ai}4Jx(ߴ2|w $999qv+R12ѳnvCoL JiN zR ؏Z*Zm?R7<2FG`,V!wI~=8bjesȚØ"l).J1y^܌Ug,: +/8@M'}PWPLɁwF:}఑6ޥ|X 1!h=yh! 9C+ rҽv{PlU-qWF0t$k" bd*H5X]#;PnOUuh"3Tdh8B8E˲F{(N nZHz!shfj(}xhuj~d~$uxw0) O]b=:E0w$jPs?*NG`ĥyC{Lڻ8"vGdf$Cpؼ` cgYLbQ{f O}voq 81Zjtj8CNMhۺ qg pgWy՜V9D| ݄I[NK2/e;bS#*|`@Ĥ;,|@9eS`/;_TH+_~f)N e3MoEq<.kDP]#Rw8>8aֹ ́% MdA!ʜCPEHz %+\^H 1* R:b-Hj~r0vRݱ^3Lp$bZC5ǡ$nB5>Vۑ_r ݕ,AGtQOvѪҒ`a?89%27B^L(JV?E{ݰE4? ٸ"o+(Xc'æBvm|lXe.Jpg\R/]^$5tѕ;MDd m6jW^ itn˔3~YO >בj0EE~$T3<.{]v]1q55I`\zK=F2VJ59U4wY_f}<[.lX{GYf)ph+=T"wuⷤDuҰI~z9K )h["O~7/ T1_KD݇}o@k+#Cؽs/y6˸ZSLA*XdtZi$Xo]\pkJs1L:QK7! %6MǑ\E^]TX_Tw&uJo556%\})Rs&*p2p@lVd棶 {9 bbyE3h)O( :&|F %q]1EIDeWώ$Y颥\#׬t4/W+v\D vfc}c$49k,p*8;L9ډY [2rFmEiDQa]}7c>@1`顨wm:βj }~~>Iᑍ %dGxJgul.!Βp:/WE(4Fz\s50v 2-Y-['ȈL Gz תޮ rO29g<|KѠaPlANS̶=8#S}6.4,qSjnb!ݚ!k3FZ&ㅨYEsNi$9LwDW[:[*@@D(UUMiZ dR6,(?1\3XƲ* { D{%k%)}=ܣQ bI<8l]"_8(rО+P/Cȹ `ꟻK&:48OsD<u$.h;&5Q^LUG.:EBi|aɳxorͮ;.%(֩Woe ޸@Vn$xC5oW[VOopB0-fժ[/X9ZxGU~aiW1Fy n!&ǹ(~AJyCEffV.Ns?(-Bڪv[+A@hhX=\%|ctwWb{4k#|V/}s]fVM3 |9/~^l{00x܍sRv蒹j*S / 8E<}`~/44b<5s`Ne>/<xCeQ$I@XeH_7/^̷f4^H ʗmQg^Hf2V_Γ'`FL8|$L9^ s&B2HhO2q%iݻbp$G 5$Z/1> wfB- 8.NyjR+X%k? Ca(׳GqEh 3gLc[o*9uU\+5Fi41N˜jXũ2Aq znLD6{˔<*GAw 1hKg4˜"3DW[9I\6I_3ʲ-JHDf8ѣI?VLF̃ uc؋L|+ӆ܌^2Z:'K?I#7*[Q+RaZ1{/#Pu y[JRƬ+un$oPCHH??WW`g6j@V3Bm,3<_gDiUhe'ENܯ\gR2jB%j|5;(dc.*,zh|nJH%ё*N-T9%w@ܹ̤Bfٚ 2핿JڟǙL8 ܽB}W*f2Ӫ-eCmU $Ĺz1+ƟD<y/SXzsPGce_|+FHh;^ ,՞ 'h#aṞ˜ f=\%`# ȍ%y u}W+#I"N [o?сG6F30[52 ]nBa~vȟBrJ[E^/VT&t%ocI!ɋyZ6*ֺjfǚ%C*{8( 5!ļ >E_7DCr6:$ ?k:=C=0}o'af-jVqn~vs H_G\|REE~i%F-Ϋst {mRh}]>+9{Z_Jxθ+<"i0'º]U&mVp^s:QYSc>?c!@|rX6n~cl!\@E7=׺\oB[NlJ`dUI~.< c޺95M+ulKPoT@k.\r[/q)N[xhkcEtJ}G&?)+$u @0~lpeW}߲xY}ytsf#+}9i,WQޤֿ3ˇ>o6Z-Ga {y6w#h>:-"aI <-vJ3%҃7~߻im Hi w\^lڢ"vm8>CΖNZ%kdKӧWH 41[gDdl .>]2z'P4btΫۯ1} ;[]킕0(Q^ E)(Zc)x@PW[R;NwP+'Nb-f_ƎL&b_ɴ{}@I L.,ʀʂY~5v~+VM;7 n{n.)\d- [|7ƉVL<,A]]33U oʼny ,;[ 0"dEȇ,? + (GٯL#Lr U&q<>3{Of<n$ˌl ,F$28PkmdIێ mk7w 5bN:Sf$ e2k!du zm87x4 3{dvi`s e*G _78Jy14@^𨽝$GgiUfF@j;(K4Qv` o@j?+ޮѴq5eolU GзZJv%GAkh/6&[LNA˼b+X53_Q8rnNIn프(VU(L{|{Z"p~JS9t%ZpBdeÈ8Q>'IˀsE`;-x̑W%*R[΍,w%gՊ)d@<M;ɋe[P\r|vT0])uSs   diW|;j;:t8 ` jG kzVjk&8J,"׻!<UmW8HDfQj;fxJKm=:srN?{}@ސ}Ĝ'͠~2uz% 9B);pلQ r57[` 07c~9L=2ՍV+HzH_g. !GY~,Ob|V{[Rё I-UT Ksyt_% :7Ԟ z-X!rW~5t{{61>M]\p"n=f«MJ*Š*@K).Ny+K'}hx_\X0X>ẖö=?& -˽E4 'r!c_NIG| Lxi/ :)Տ H&q$w0x čYͣQf[TZ}?ff:8lo |(X *jc obV F K^*䆦dN9xҋL&i>MR]3(!Pp,ӗ] .7LvPW F+/u%;7I85XLc^X46V%W" I C1,wt̿qԾ TEw}HO0cMS . П 짮Ŋ@!7;^t:Z]pNJmt~xUÄ˾1؞fpoUӚv{$08gtXu=.6 ۮ7tVS EaYE0P 2`)v٢Z2ϯ7<;4\W @Ńg6Sd;0.4S{y~d/nNEZI6IH,_[/aTyOWVUڠR|PW%2</-oTg[(W&21D6u Zu嫍/ EX|Sļz*[Ok;!盖zE0QR縲vRv%TZ[Q3ʚHP)xoHWi*5Q.jݯ35Fx&D=NZSnPws@bQ*2@i"rD=dI!r ^ǯsH)8}Ͻs'p PCV&k&vNjSSXlW$=)صb%Qt9ÞʦO8'Cs%(]H:d6ʮP!UR"YPё>U[Yu.Oh5WhO0fMqS%N2DDc:gɘ$y|-4cKZ :(Y8BұYǴ51KGIK%(!I+;w1%\=3)fQu Dzy+kP3)7ub9 H|s?@/^\K}|l^}ʍ'k&VdJwTʋBljaWܵ~}_xmBLJq{=w!>;25Xe\:vo8XZ,GQ PfӷLOf2>[V`?H3!!4 /Z$ʊfK )XmHY{4%K􌻦|Hnu#SUg\Oo/ +P!ͱg|oG+IЍ; x2-(tW{qc2fyc`:8x+I+Az@ Va~`zB϶oqJ=GuMDu./gWIZyv 䊈ȔzwV< W-[bKx<3%|)%te>(U`+OдR.V_t3`뉬hct٫Q7aA3~9 *grtXE kІ$皘(Q:@B#Y0b5M{O ޣwFx6bhVX΋9a2nU9 8[˖J3d0.HN5 AKEFUGs?b% =6hBE:>NJHV#>*%H ͙p!'1R?ϫ,ql57r\3ʹp^#p XragzڲŠ.8x_VTDpH⽑Py}TUCtJ%t0\kux$.,~uwXXaCT.Vy]"W/h3WĠTCl8Ij+:bvDL^PJFV((g p?ǶoL0rvZɍ!ąfRkKf64RN:jއ3dzMzieT;$y snacfRJtSbB лu6ϩ>PֿaLȒ p|?V,lK/pk*ͧJaNjug-63C2Zn!Ϡ_s?[Ar{qBxE~R@x~zH/J*i!YNXK3 &Q H8}-z\f?=Ch8m;7Lv׃jZvSR'д%%8nL.su3ZkrAt!f&>" ҮWu(tL]D\yftUD5 5.ET" &SFs@Rِ{6 ܕTV6$B)v6ſ"s >ָzl;gaSga K}QjZ'˔D 5:4$4O27,dY[6{O'A Y$8Wcu Z{#t;M ߮ ϭ*]&%,B)sQUfk3 i&Se͹fS*0LUvywIare1MRtY;Ύney3",;2'|vPMYL,f#wuF n"u[OIy \~tBl]o+{ύFP5n`(Aq9ΦeUW2ThZoNjxp}Av@^5Np9iojm r@VK_18鮮a!wza{T?7Ͻ?i$ g;2)waNZhsi.1\fi4sEz[{u$Kk6 ȵ o-uoF m?>*PNwHgʱOoIk ?^ I/)n-LcžKA&9j.'~@P;:{EO t GT rd&,E0^ɾuܓ֜~&` 2l>gSjDDm\`킸D Z?Ӿ|nيlj|2TcܯĊϦj9{Dc 2vA|`8} |d{7a{56/P3T,nh`D" WʾID1OyQ>14yu,F߹A:O%+lq*ǘ"buƉ V;HFDxnQb'X<)$0JNJc|<`E}܂1@&|09e@/ubba.xl efo]! ܌6BLi# M~&ʁ}EK _R#6nJr@` Z vya-i%L3KCrrEk6n_Dn,S: Y(O"f(GM^#p޳/vk]b n[4V-,UUw_Vd^VPuTE&Ҝ{륅U+](ӲM\ ; ZB 6T!.<yaE٦k1ʴ*q!Y cS3WP~BY%J^ȺT49!צ.s*ń)($ ZKKrE8r3AezĂ`M[ƽgOaT'ׁ#3ğ|(H\J_X[?t[D&6\Fe7g5(Լ`4zG_?|򾯾xO+):'TJ^ZOӗ9L1$CBl6$[u7a|{(?Fz/Zw᧤ZY7O(t@H\wA$Ful^!kx|↞$dGvnd!cn| #p`ɀ!疠h&;8ݼ]"b?hZ.58t7i^.%[ uB31)U-|81bArO>5e_֠yik"ŲՔl{B?7 M|iIޗq,8J_!3->#&M\;(Zͻos،E9y\;3GyPfTXDƚ#yH֥򂳔?LJN [ME)9{!I dq^~M&96t<}~Z+/n$QH3́40/^Y-CussfQƼ1S5!eaVwVxc|jٜF< lp@l炛}&atT:lBjq%&q@|'~LƋi^Lhʧ7gIֶ@v Ʊg7ݛ=?jq37 KzΏ/!l`V]Yv͊3C%TYdr_*2b5{! I稒ƽ 4ա3U,G>% jHW C8TOP Xq"Hʉrf zFXQfU Ƿ*cIlWv6#-Ň%LʺW鹹;7ޑz'3% 4Q״! f%`5qѕƵ XNE>DnvVbLHɥ V~rȼ19b=3}P 17 XfʯΒs39oeݲmeMάL23ȔU]otriP`Wn#`e;#rŭDDvȋudlBAܒJ=t8+dVkn=o/y3&HI%,kқi<1PO .gcz- dqF %wOu6=/Wz|fKGo</v wiC>]O̫-Sj;6Z_WQ׿.hYU53z{- "7ٙE?xI0bhp4wY.޼|}#_P ldɮL39>asS Uo؏DLU;3q߇+YfZR9 PX8k}, SEdA /S^2##Vpcu}ARXnnt*)th2xLK8߇1{>ݷEV'1* Q' ZfN OGTw`@,5:fΏ >UTZ&Gyhj[9*g(؞'y}h9ԡcGIeذql}t)mO؈3ğk<Osf>nQj-2 dM"\q5,ESV=5#U|P>ÜT̑mu6MoI)%,Z9Y+w8Co5a>Iť #^@ vXj#_O%57i0M1W[^`7@GkfI/\cM3ɚ+3m̻`Va2ߗD+|]2R;3qC+ D6Hk#WF^-gcYŰ'y2*i7^Xu~doLi(] KzmNJxrrnR)/a # .nzF%y(j_RnV991R,yne EZ&t!DT>ZB?jj% ӜVىq?oB`ly媂]~ jGjvVzuFqƏW:e=<4'9P(\kDA:r `Mi JglJ4<>HgYi` "|43HF#K[=zX4!P&ZK[BD\Pdbs*Z)Q; +"1|F⠮gؗ~O z(v;؊>OD&>#_`%|$v! /V*RKY`&vH`x5 YRƿg 0" jD]w4CS-kWRx qVp} 85A%_c瓍9'pۃw^%xҜja"V1k5,KB,ii8M,L>ŝ%qS}>iUت~w}e[Ŷ. S >|{b--ՙ|qBA$3U Ἆ41Y<W>V#VG킀@6*f>J=Z0!? ], w3c%ceh1Ww 6g_S,A@l|ct]^.%WG*GFmh֒&20깕l^F#A0\&0 `4L1E~'3/kޤ甊ig9\#՘3E7E7ICbR!qGUP lNrBs;%}X(-ҖT A-6Kz6^ǣ>q\ꀓj6ηΧɷQ g3;-ݜ/]](J-&Q*fKN10W;&iTn:0jup QfCӫ'Bgmiz^[Ekq&5&W4pEPҝGeMe?SF1Xq|G?}еh$G3L9?39!G :*]J(5Wn-ðKs?7me^۷`=vPec!!H+0$)ASfF/< "@VRۯW-0o5lE&߹D+3k*+C-3W9ѼQE!*YNi@Oa Gapg\hf]R2t+GVJ ώ}v )OdDOW)6哑[`,x#;j߳+o/3BY`jˬK6qp,{gN,6A VFHb1CK3 ]wP.>oEyG׍dyG]tDWƗ1Hg+CzuOZf*$&U|v)}5^m%rXf'7uX?Dg\a;Cz!몆Zߍ᪢!wO3o2Xæ Kkr9P1-?<%H kT`4`Dgrܛ^.u/O}\L[] FbK[, h&}c\/^ئ9=]+mꌑ1/11Tysȏ$6j}Yތ,Yi5-*1Zde Vt,69217k$q8M6D] }gشI‡k= t6%ґ>%][Y:ve!ި/M'izk$^_r6{\B1(.iXVj-,o]Bm`<<ű 9٬ %=NG]E̜?|mt Ļ_V$Bl_<*W^|YiJ6N,`" )L9 2 8=xj6+X̀pt6jf5椦&yUk6y& iM* ՊLmGbxB[U,!/(]f%(]7Ȑe߉\>L?RRXy,Bݭ9ݹ;\tHԺTp zG7ΑzoG[]F7&՛.Df,^dGxާ;N9__'(Ё4n4a̪Xmj{Y_L=.<􋀷- "to޴;@ @%^rlt8NHckV9wV..0$(PNi"`uZ8"DE@Bqctf;&+MTV܆.bGM/3p mmZJ_8#/e TS-ʋ#l2Du8G)=Jm"gu/ڃGVK{MNBX@7 0o#j6N]9ISۊK}Od֖̗}?Ϧ(DHBAa͖ż` P`#tEp9=l l#s.Ķ5Q0mv*J#R aChEBV["lZRL: V_f줚6/?R鄇bf!.R̪Q֣-n,Rf{t qp{f o!eVIƎ Ap ׈(^i)n'd\1` iT(UeT]0h䢑u"dJU&QtMAo#qlgJ#cFi<E:#f!ADٿgi)g1D/gdǁI0j]W%DY,Wj72v*!f%[vu}+X%NJ~SN+`MCW_ }o*G.ޔWƲQ:+Fq&"O)4*Ʋ{tR$KTiOeɦdž=0<*&&wf4䈮n<ωO7d=i/u#BFJn.MK }q06Ȳh7Ə]e4^h%"[ W'E'P-W$ڔa sj |8 D3-Tj/w{ WK_Nb2sZVd[qz(wwOl YAѓCRw>jiygu&J|fS:tptYeK*(>$DsGz7鲖}G %CYLg2y|Hncji$sxpʜx<ɱG9Q؆.ư"ۆ`_e[{* pSPyKK2+3J&%ՙt;f9"&eMT?_z9n#}KZ(8>d|cTY5*or^%-3MR㓌E*p](Y,͢3_" Tjd@@=hmsi:%!SChQ'Ä}>k.~r~5rM0mc܉ QȚ(Lxa"KfOYh{?-9VrI3<u dc3i^rvsY>y+`5nk?jJ<${FVK)}(a]qBFZV^O{`J{We$=l/ن3X# K[,O4txȢ۞\&lNk7Y3V .1!ѲK-3ܦbK JO-CƆl xQ&t묯va{sAd\c1mtq6&Ⱦu3?n蹯kM UBjAX=@Q07x"8'`ˑGO fWlv+wo N vB+Wdg )ǰUR 9fzKcjmzÖڎ"QO,ˀoƭ5R/bKu5'G: dM C,wwJniwy8 P!2~9Cg\pS MZtBVFm;H&U$StqGIX&(re_܁3qz~j~jtVMtVd(۸6 |$3U>0k0mr 8a7WI P?ϖ8jm+An+Y # 5RcfY3#hT'{ڇ5 kdgHCodXz= D'-l{->A3@!ZnpF$?\s8 eɹu|dwǵA10g|FMGyB)*d©Wl(a6 SG1G^uQ/ޖ0qMbjU5}5tfII%d؈=b| TaE#ά!@ QL3EDŽPz은 (­IDuY'Ir6'xgD$1-n:6]u4PMǿ\:]|r'*yD'QHwbMY4<* CZT͹N 3.^jr=$Yr'v*&#Ku30}ۭW~ bݞYsj@.է֦y y8[eK yj}EpyL;y'o 6B,v;HZ af K <ꍿlZ}$$Z|eGaN&2 cW&p[OyT0ٿ 3y:L}&*˃q-p(.+ oV8G"Q Q}oZikO]&{¹Cx )\cy$L(,Ix Bk5S#$n-Jimg;Ϸ+} (w12B ]阊up cT_ QSVm(Sª ieoo\"O./HS+~1hXw ߩnհ#P9e[\͗aSFF *:7m,^&#^ o8˳ȎVh{x xCM 4d,…+o$0cqcPVRu~hXN-,Kz]DzI6k#<`+3M|~ɴf^GU½0c-`a8NCx JŴ쇮Ze!R|mP ֏9;1BMޙhhAܔۧ(ޑ'P݁pJaޓONsm dǺH~[M_ Omsʐj)ԣ^9 ?75+Y>[:0g+i^Or82c4E/8;,w3 GH1p11.%yΣz ه1D, =\gnfqަ%*$/G ΡOs{W %&ucqC؁7=@ Wgբ&yft^4p ;_(4f) ?1-$/]9pE%8"]rQ8Lar[骐J%+e"%@gީfG N&,.c&# )N B%%sb.sQU]./"{$O]?wLK[zI-iu߷WWsou&(LDٵP>;(CFHD{qkx01\ʷk2Q0 `9t^I 'nȌ!;.rTYzDSFȍ *wqe1"L$ye=tz7nqxk-Q51r`#)2VK>) WV}RTx-wĺ Փ$يsa N\B@ ⟡))DZ:|oLV-o>T2zծgpnKi 4'O3zTMwWG7{aU_p ;R'h%ҀX̛X헟GLjLzsܡG\bNi~IόFQۧͥ:MK&dh2ؾǮ]e, B,aKʏ'e,pY ng _)f蠓2fqc7~GŎ̓8jY -}EYF+i[v(T0rU^-xfD+ǵz ¾TSe; wd.>-ԋ2`G:5\">ulPg@yO(; +–z]7i`;8M>]XpzțC蔱t(z13> }t/AX;dyB l+J,\=uHIvͦw|l[+vZ_ߏǤ72I6pNBZIWIiHdQ9xnb~I2gQ(Ĩۤg<MRHLo%`>&s\ԏd J"/ 0dds(>޷ '1#>PJm_ i%,XͧL:3BZ(krLUOHAQp=Y< D֍uлXX D¤[T+Zg?Ƨ%ipH~m/2Э 6r94B߈U2G@HiPxZBt qLb'm{ȒIY4bONA%nV!2 !#`rxfr^%#wB]QͰ4gG<[!qwLA ףȐ)k 8FK`Bfx (WZf{ X>+nãIay(M)Lˆp4ܤܚǣݢN+KyR. C/1fԨ)5 1یT>{H4s'*gK|Nl\24\]v %GApZwf -e Nq}ӡCyy1ca\Q}SwW4:?%$r 5qv)\@e#ґ؉kn|w2[x/ u܄UjM( Q1IǮeN> TAD[d6jl[۔|1q-V`2S  hiR+V=v;;+KU+ºN; \)q: #GN Fb! TS15\e$UZH@`6iO @X񉿸y80FAlm- [N) Ex*㑨ttqw4ܪl+ǼQ9?q$'Hp /vD}:[.U#IA[9]ꓜ >V'XB\e_1'"I_bᭆ{5k'-#:⒍2.'J-];RȬGn'p* qn8{ _@2oY8gDH2յ5ۮ4PB_^ @+G^Oa)QTsR:/# 3IS*ׁdt6<l4nu|G+kvM}";cۇ$haUת2yŢ[1ױ;1'\lϸ 'poD?bIYXU*HNpq[*_ubfy*ҁN\hB މg"jX{b&7,vK,/c3*YqƧ:\9Vrhf `pޠ3ߕH炙.,̚koʛbF.r rq"cP"wȄo~Xo Kc5rʢ\:)5bd9dİNѣG3.YFUWƄ9Rdi!+JtZBp{4~w[oD3%ѓOǨbzs)c'+W| A'`C va 6DM6ʹӆ]]42%JglgqO$ܾ9t?E7LOsqC: []D ;=@ig4m=ʺ1+3bx|8gbZ,ST- gSlՌQ2}^h#B-8SQi4 \j䝠2jS3KA11vTqVr"oGBJ.j)?uhBh!pCږŶ'-fkQ-sj"fQȺE9b6be=* / yNI NR+'v?B>Ef[F 5QRAx|ID 0 G'~rDc(!n2N_ݾ5B།$ȝbh_ ,j<3zE?<3/} C3HIZnHVc[b,Ep?g82?sʤMVICdH 9q]^uCgn^& E5 X!SoFK-\oVOn/1I-r VToC" ~6ZaW#X'M!= aJiRۉG6r#AWo]{Kp7֑2NٛŒ~>kJۄmhOKU:K>jYc^iZRnK}) -XZȫD37a>Wi{I9aM pw6>[Sɥ>Pʵp".h>@XO9!'36f\2 K옞ll{ r2& c¾%x ad.} 'XR/J  2 EI_*2$iNkl}nSc@\흴wVAx9 R q0R nyݖ27M #"7WVG 3r}7*#?"Rl1[s(mglFb#vP5lq2`B0(1G!pNJs5׺ D$:,sVL5RL+,hQVxkggP^Q岫0 1$u+qWOK,yuH9Dk=gF4DzE,s.pRj.w zkmA>{A$Ml 1NgRJ/B] zZoP.MM{emch G$4LA"9'V`l[VV0I^?̒hOIGWw&Y;:A-T*g d l72j~QPigޜCݾABbXIiCc 8G)AJ{;O,B #fSL* 9?s> 7 ,C f}o&x ze ꅭAC|M}^σ_:G_cZ'=j$Nl_He" &5{܆WG) l'Ҩdu5njt|Ao pw̸|JY }h-ukKųX!oC^7e3 %vc(UӦVsW] l QRf.E\AekGu\ CzcDSеEˆ -6]5j&&I t7pc7Qf['H2G=vOb{2KaD-{'u+R{B#LU \+N62?4{P +[ˁ\a:GVVUtO@"vMl+*҄tn NEզ\S(cCy>yj@l`AQn UM E"]E<\/-q:ێ (뷍MXfX#!lQOV?}7Ti~RU"N϶͐a ;`o# \A:zlqj͊!AYbx5j;]η^g@c [>U>bL;iT,q%/xچӘ X .6!җ'HkRC!d`O!==]1N5^)+25q +Mc)rpWxj=DQcpY$,[WpσwZ":=YK ӈaP' ȨP6qCV^=7sؒkx炖)6}XDTSPPe|SUeOUM6?E9i? So[# \U/ZclvCeЏ|}jsuÏyL[0d{U_jz !qŠ8+S>ě+m8R&肒a'|drFE$]]} iez#B݃D+Gٓ׋8f\쁡l$݅Oy[EˡWMX5i0Ε/~S;3~rBQP LpZ |CIWSq Q%a%~@ߟctEH_o6z@#c5]hNmݻKRI[Ul$ /;r n1k-ֵE o> l4@:ډ9I-Q}|8*t}Ĩb%/s9ߔiq,PV)d0b= /V#P~?vA) |&%k*?O';hqDENjAgLV fcQGyza/ؼ=z0\&m4q6j`o`3uej'%c]Nô谹\GL(5rzjԝTRAlGk뇭̿1TqcˌnˏsՇ>l}xb}^Rb=בǽ_Yv?#T4DvJ81҂~WȔ7ÃP.4&o,YpE*Mpz~#L {ghL $}$廔s!mQ2#Q-b~ xpUk7ХY,Gs\vȚDX  gdyQr|P87&=uf2[wf sȁ`)_PK_ Q{ X_dWP5wH {7 ga;pU 8ïŦ4*VЭ>W4y691~?KRr!-V-%l#{cşi'Z3T؂Ss@nSӔZ @Qɔȅ嶆o^@dߋLuʣbBCě*:at R9[݉bFDŽ[of[i 'l'nJ\@U miٔ@)%Z#XTʡ)^cXVd `UCS},.'%-idͲimdz=U\w2rfqKUL_IɓH )ŌzblͿ nJ07u i eƏ/+B} e4~ W[mrz. 株E#bW?P#,2⩏hb7x+iUd ͠[R 'h۽I:IJO;=oЧ@0{G`jя)F(었~> UA qrb҂G%QBFigZT [5w2iPӨ{/HfCj !lrY Velm*nS lW-<29I: {\ s_IkF&[;;ZES>-/n]Y>"?-?:sw䝍 %0صgkJg+1;G 8D+B 5N'˖: YZ