kernel-module-8821cu-6.6-desktop-6.6.148-1> )lp 47f57a2017b13d97694bfe6b0043c16c341884233c19f1659183c8ecf1d3138efd240527a93a0af26e6ca7d4d3e490623e16b9e7!@v7[5͋5e0>Bq?ad#+ - Y     9 <@EJpt~(89:G@HDIHXLY\\]^bcdefltuvw`xdyhx Ckernel-module-8821cu-6.6-desktop6.6.1481Binary module 8821cu for kernel-6.6-desktopBinary module 8821cu for kernel-6.6-desktopjlocalhoste/ROSAROSAGPLv2System/Kernel and hardwarehttps://www.kernel.orglinuxx86_64e/j#5e4bc40d0b9cdadca3b4d3a60f40388e6a9a7ad7b44cafee1d45e544fdd863cf5rootrootkernel-6.6-desktop-6.6.148-1.src.rpminstallonlypkg(kernel-module)kernel-module-8821cu-6.6-desktopkernel-module-8821cu-6.6-desktop(x86-64)kmod(8821cu)    kernel-6.6-desktop(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)6.6.148-13.0.4-14.6.0-14.0-15.2-14.17.0jtw@jgH@jL@jL@jj9j Pj Pj Pj Pi@iD@iii@h/Mikhail Novosyolov BiteDasher BiteDasher 6.6.144-1BiteDasher BiteDasher 6.6.126-8BiteDasher 6.6.126-7Mikhail Novosyolov 6.6.126-6Mikhail Novosyolov 6.6.126-5Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.6.126-3Mikhail Novosyolov 6.6.126-2Mikhail Novosyolov 6.6.126-1Mikhail Novosyolov Mikhail Novosyolov 6.6.106-3Mikhail Novosyolov - [bot] upd: 6.6.145 -> 6.6.148 - Changelog: - accel/ivpu: Reject firmware log with size smaller than header - afs: Annotate struct afs_addr_list with __counted_by - afs: Turn the afs_addr_list address array into an array of structs - ALSA: hda: conexant: Remove mic bias threshold override - ALSA: hda: Fix cached processing coefficient verbs - ALSA: seq: close a re-opened queue timer in the destructor - ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC - amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN - amt: make the head writable before rewriting the L2 header - amt: re-read skb header pointers after every pull - arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates - arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234 - ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() - ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI - ASoC: cs35l56: Don't use devres to unregister component - ASoC: cs35l56: Fix potential probe() deadlock - ASoC: cs35l56: Use complete_all() to signal init_completion - ASoC: cs42l43: Correct report for forced microphone jack - ASoC: mediatek: mt8183: Check runtime resume during probe - ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable() - ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable - ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe() - ASoC: mediatek: mt8192: Check runtime resume during probe - ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link - ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() - ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb - ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop - ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup - ASoC: tas2781: bound firmware description string parsing - ata: libata-core: Reject an invalid concurrent positioning ranges count - ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered - ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts - ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning - ata: sata_dwc_460ex: use platform_get_irq() - audit: fix recursive locking deadlock in audit_dupe_exe() - audit: use 'unsigned int' instead of 'unsigned' - audit: widen ino fields to u64 - binfmt_elf_fdpic: only honour the first PT_INTERP - binfmt_misc: set have_execfd only once the interpreter is opened - Bluetooth: btusb: validate Realtek vendor event length - Bluetooth: hci_qca: Clear memdump state on invalid dump size - Bluetooth: hci_sync: Protect UUID list traversal - Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds - Bluetooth: qca: fix NVM tag length underflow in TLV parser - Bluetooth: RFCOMM: Fix session UAF in set_termios - bonding: fix devconf_all NULL dereference when IPv6 is disabled - bootconfig: do not put quotes on cmdline items unless necessary - bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline() - bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c - bpf: drop bpf_lsm_getselfattr from hook list - bpf: Fix ld_{abs,ind} failure path analysis in subprogs - bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized - bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() - bpf, sockmap: Reject unhashed UDP sockets on sockmap update - btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8 - btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() - btrfs: free mapping node on duplicate reloc root insert - btrfs: reject free space cache with more entries than pages - can: bcm: add locking when updating filter and timer values - can: bcm: add missing device refcount for CAN filter removal - can: bcm: extend bcm_tx_lock usage for data and timer updates - can: bcm: fix CAN frame rx/tx statistics - can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() - can: bcm: fix stale rx/tx ops after device removal - can: bcm: track a single source interface for ANYDEV timeout/throttle ops - can: bcm: validate frame length in bcm_rx_setup() for RTR replies - can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER - can: isotp: serialize TX state transitions under so->rx_lock - can: j1939: fix lockless local-destination check - cdrom: fix stack out-of-bounds read in CDROMVOLCTRL - ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() - comedi: comedi_parport: deal with premature interrupt - coredump: fix pidfs file refcount leak in umh_coredump_setup - crypto: rsa-pkcs1pad: Don't WARN on an empty digest - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning - dma: dw-edma: Fix build warning in dw_edma_pcie_probe() - dmaengine: dw-edma: Fix confusing cleanup.h syntax - dmaengine: dw-edma-pcie: Reject devices without driver data - dmaengine: sh: rz-dmac: Move interrupt request after everything is set up - dm-verity: avoid double increment of &use_bh_wq_enabled - dm-verity: make error counter atomic - dpaa2-eth: put MAC endpoint device on disconnect - dpaa2-switch: put MAC endpoint device on disconnect - drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference - drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources - drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips - drm/amd/display: set new_stream to NULL after release - drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT - drm/amdgpu: fix aperture mapping leak - drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved - drm/amdgpu: fix division by zero with invalid uvd dimensions - drm/amdgpu: Fix VFCT bus number matching with soft filter - drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx8: drop unecessary BUG_ON() - drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() - drm/amdgpu: invoke pm_genpd_remove() before freeing genpd - drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() - drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) - drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older - drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 - drm/amdgpu/vce: fix integer overflow in image size - drm/amdgpu/vcn4: avoid rereading IB param length - drm/amdkfd: Check bounds in allocate_event_notification_slot - drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) - drm/amd/pm: make pp_features read-only when scpm is enabled - drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() - drm/dp/mst: fix buffer overflows in sideband chunk accumulation - drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers - drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers - drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() - drm/i915/gem: Add missing nospec on parallel submit slot - drm/i915/gem: Do not leak siblings[] on proto context error - drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU - drm/i915/gt: use correct selftest config symbol - drm/i915: Return NULL on error in active_instance - drm/i915/selftests: Fix GT PM sort comparators - drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() - drm/nouveau: fix reversed error cleanup order in ucopy functions - drm/radeon: fix r100_copy_blit for large BOs - drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() - drm/vc4: Prevent shader BO mappings from becoming writable - drm/virtio: bound EDID block reads to the response buffer - drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker - drm/vmwgfx: Validate vmw_surface_metadata::array_size - exec: fix unsigned loop counter wrap in transfer_args_to_stack() - exfat: validate cluster allocation bits of the allocation bitmap - fbcon: Rename struct fbcon_ops to struct fbcon_par - fbcon: Use correct type for vc_resize() return value - fbdev: efifb: fix memory leak in efifb_probe() - fbdev/efifb: Replace references to global screen_info by local pointer - firewire: net: Fix fragmented datagram reassembly - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() - firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context - firmware_loader: introduce __free() cleanup hanler - fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() - fscrypt: Add missing superblock check in find_or_insert_direct_key() - fscrypt: Avoid dynamic allocation in fscrypt_get_devices() - fs: preserve ACL_DONT_CACHE state in forget_cached_acl() - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list - ftrace: Add global mutex to serialize trace_parser access - geneve: require CAP_NET_ADMIN in the device netns for changelink - gpio: mt7621: avoid corruption of shared interrupt trigger state - gpio: tegra: do not call pinctrl for GPIO direction - gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings - gtp: check skb_pull_data() return in gtp1u_send_echo_resp() - hinic: remove unused ethtool RSS user configuration buffers - hwmon: (asus-ec-sensors) add missed handle for ENOMEM - hwmon: (asus-ec-sensors) fix EC read intervals - hwmon: (asus-ec-sensors) fix looping over banks while reading from EC - hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop - hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop - hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop - hwmon: occ: validate poll response sensor blocks - i2c: davinci: Unregister cpufreq notifier on probe failure - i2c: i801: fix hardware state machine corruption in error path - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) - i2c: imx: separate atomic, dma and non-dma use case - i40e: remove read access to debugfs files - IB/mad: Drop unmatched RMPP responses before reassembly - ice: fix LAG recipe to profile association - ice: use READ_ONCE() to access cached PHC time - ila: reload IPv6 header after pskb_may_pull in checksum adjust - Input: ims-pcu - fix firmware leak in async update - Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() - Input: ims-pcu - fix logic error in packet reset - intel_th: fix MSC output device reference leak - iomap: correct the range of a partial dirty clear - iommu/amd: Bound the early ACPI HID map - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() - iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() - iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() - iommu/vt-d: Disallow SVA if page walk is not coherent - io_uring/rw: fix missing ERESTARTSYS conversion in read paths - ipmi: fix refcount leak in i_ipmi_request() - ipv4: fib: free fib_alias with kfree_rcu() on insert error path - ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup - ipv6: ndisc: fix NULL deref in accept_untracked_na() - ksmbd: bound DACL dedup walk to copied ACEs - ksmbd: defer destroy_previous_session() until after NTLM authentication - ksmbd: pin conn during async oplock break notification - ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL - ksmbd: validate ACE size against SID sub-authorities - ksmbd: validate compound request size before reading StructureSize2 - ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl - KVM: Introduce vcpu->wants_to_run - KVM: nVMX: Hide shadow VMCS right after VMCLEAR - KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available - KVM: x86/mmu: Fix use-after-free on vendor module reload - KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN - libceph: bound get_version reply decode to front len - libceph: Fix multiplication overflow in decode_new_up_state_weight() - libceph: guard missing CRUSH type name lookup - libceph: refresh auth->authorizer_buf{,_len} after authorizer update - libceph: Reject monmaps advertising zero monitors - libceph: reject zero bucket types in crush_decode - libceph: remove debugfs files before client teardown - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() - LoongArch: Fix oops during single-step debugging - lsm: infrastructure management of the sock security - mac802154: hold an interface reference across the scan worker - mac802154: llsec: reject frames shorter than the authentication tag - mctp: serial: handle zero-length frames to prevent rx buffer overflow - media: airspy: Return queued buffers on start_streaming() failure - media: aspeed: fix missing of_reserved_mem_device_release() on probe failure - media: cec: seco: unregister adapter on IR probe failure - media: cedrus: clean up media device on probe failure - media: cedrus: Fix missing cleanup in error path - media: cedrus: skip invalid H.264 reference list entries - media: cx231xx: fix devres lifetime - media: cx23885: add ioremap return check and cleanup - media: marvell-cam: fix missing pci_disable_device() on remove - media: meson: vdec: Fix memory leak in error path of vdec_open - media: msi2500: Return queued buffers on start_streaming() failure - media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe - media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure - media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path - media: nxp: imx8-isi: Fix potential out-of-bounds issues - media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding - media: pci: dm1105: Free allocated workqueue - media: pwc: Drain fill_buf on start_streaming() failure - media: pwc: Return queued buffers on start_streaming() failure - media: radio-si476x: Unregister v4l2_device on probe failure - media: rtl2832: fix use-after-free in rtl2832_remove() - media: rtl2832_sdr: Return queued buffers on start_streaming() failure - media: saa7134: Fix a possible memory leak in saa7134_video_init1 - media: stm32: dcmi: unregister notifier on probe failure - media: sun4i-csi: Return queued buffers on start_streaming() failure - media: tegra-video: vi: fix invalid u32 return value in format lookup - media: ti: vpe: unwind v4l2 device registration on probe error - media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() - media: v4l2-ctrls: validate HEVC active reference counts - media: vb2: use ssize_t for vb2_read/vb2_write - media: vidtv: fix reference leak on failed device registration - media: vimc: fix reference leak on failed device registration - media: vivid: add vivid_update_reduced_fps() - media: vivid: check for vb2_is_busy() when toggling caps - media: vpif_capture: fix OF node reference imbalance - mei: bus: access mei_device under device_lock on cleanup - mm/damon/core: disallow overlapping input ranges for damon_set_regions() - mm/damon/core: validate ranges in damon_set_regions() - mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages - mm: refactor mm_access() to not return NULL - mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n - mptcp: decrement subflows counter on failed passive join - mptcp: only set DATA_FIN when a mapping is present - mtd: fix double free and WARN_ON in add_mtd_device() error paths - mtd: mtdswap: remove debugfs stats file on teardown - mtd: nand: mtk-ecc: stop on ECC idle timeouts - mtd: rawnand: Add a helper for calculating a page index - mtd: rawnand: Ensure all continuous terms are always in sync - mtd: rawnand: Pause continuous reads at block boundaries - net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() - net: bridge: vlan: fix vlan range dumps starting with pvid - net: dpaa: fix mode setting - netfilter: nf_conntrack_sip: remove net variable shadowing - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it - netfilter: nf_tables: remove register tracking infrastructure - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() - netfilter: nft_fib: reject fib expression on the netdev egress hook - netfilter: nft_set_pipapo: don't leak bad clone into future transaction - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL - netfilter: nft_set_pipapo: merge deactivate helper into caller - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path - netfilter: nft_set_pipapo: move prove_locking helper around - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone - netfilter: nft_set_pipapo: prepare walk function for on-demand clone - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions - net: hip04: fix RX buffer leak on build_skb failure - net: hsr: fix memory leak on slave unregistration by removing synced VLANs - net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink - net: ipa: fix SMEM state handle leaks in SMP2P init - net: ipv6: fix dif and sdif mismatch in raw6_icmp_error - net/iucv: fix use-after-free of a severed iucv_path - net/iucv: take a reference on the socket found in afiucv_hs_rcv() - net: macb: drop in-flight Tx SKBs on close - net: mana: Validate the packet length reported by the NIC - net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation - net/mlx5e: Report zero bandwidth for non-ETS traffic classes - net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule - net/packet: avoid fanout hook re-registration after unregister - net: pcs: xpcs: fix SGMII state reading - net: qrtr: ns: Raise node count limit to 512 - net: qrtr: restrict socket creation to the initial network namespace - net/sched: act_tunnel_key: Defer dst_release to RCU callback - net: slip: serialize receive against buffer reallocation - net: stmmac: enable the MAC on link up for all supported speeds - net: stmmac: fix l3l4 filter rejecting unsupported offload requests - net: stmmac: reset residual action in L3L4 filters on delete - net/x25: fix use-after-free in x25_kill_by_neigh() - nexthop: initialize extack in nh_res_bucket_migrate() - nfp: Check resource mutex allocation - NFS: Charge unstable writes by request size, not folio size - NFSD: pass nfsd_file to nfsd_iter_read() - nfs: remove dead code for the old swap over NFS implementation - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF - octeontx2: Annotate mmio regions as __iomem - octeontx2-pf: clear stale mailbox IRQ state before request_irq() - octeontx2-pf: fix SQB pointer leak on init failure - octeontx2-vf: clear stale mailbox IRQ state before request_irq() - octeontx2-vf: set TC flower flag on MCAM entry allocation - openvswitch: fix GSO userspace truncation underflow - ovl: use linked upper dentry in copy-up tmpfile - pds_core: check for workqueue allocation failure - pds_core: fix auxiliary device add/del races - pds_core: order completion reads after the ownership check - pds_core: reject component parameter in legacy firmware update - pds_core: yield the CPU while waiting for the adminq to drain - phonet: pep: fix use-after-free in pep_get_sb() - pinctrl: remove pinctrl_gpio_direction_output() - platform/loongarch: laptop: Explicitly reset bl_powered state when suspend - platform/x86/amd/pmc: Avoid logging "(null)" for DMI values - platform/x86/amd/pmc: Don't log during intermediate wakeups - platform/x86: dell-laptop: fix missing cleanups in init error path - platform/x86: dell-smbios: Move request functions for reuse - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug - posix-cpu-timers: Prevent UAF caused by non-leader exec() race - powerpc/time: Prepare to stop elapsing in dynticks-idle - powerpc/vtime: Initialize starttime at boot for native accounting - ppp: annotate data races in ppp_generic - ppp: convert to percpu netstats - ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF - ppp: enable TX scatter-gather - pppoe: reload header pointer after dev_hard_header() - ppp: use IFF_NO_QUEUE in virtual interfaces - proc: Fix broken error paths for namespace links - rbd: Reset positive result codes to zero in object map update path - RDMA/cma: Fix hardware address comparison length in netevent callback - RDMA/erdma: initialize ret for empty receive WR lists - RDMA/hns: Fix potential integer overflow in mhop hem cleanup - RDMA/irdma: Prevent overflows in memory contiguity checks - RDMA/irdma: Prevent rereg_mr for non-mem regions - RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp - RDMA/siw: publish QP after initialization - RDMA/umem: Add helpers for umem dmabuf revoke lock - RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper - RDMA/umem: Add pinned revocable dmabuf import interface - RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device - RDMA/umem: Introduce an option to revoke DMABUF umem - RDMA/umem: Move umem dmabuf revoke logic into helper function - rds: drop incoming messages that cross network namespace boundaries - Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates" - Revert "drm/amd/display: Add missing kdoc for ALLM parameters" - RISC-V: KVM: Serialize virtual interrupt pending state updates - rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack - rxrpc: Fix notification vs call-release vs recvmsg - rxrpc: Fix socket notification race - rxrpc: Pull out certain app callback funcs into an ops table - rxrpc: serialize kernel accept preallocation with socket teardown - rxrpc: Use irq-disabling spinlocks between app and I/O thread - sched/vtime: Get rid of generic vtime_task_switch() implementation - sctp: auth: verify auth requirement when auth_chunk is NULL - sctp: don't free the ASCONF's own transport in DEL-IP processing - sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid - sctp: fix auth_hmacs array size in struct sctp_cookie - sctp: validate stream count in sctp_process_strreset_inreq() - selftest: af_unix: Add Kconfig file. - selftests: af_unix: add USER_NS config - selftests/alsa: Fix memory leak in find_controls error path - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs - selftests: openvswitch: add config file - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() - seqlock: Allow KASAN to fail optimizing - seqlock: Allow UBSAN_ALIGNMENT to fail optimizing - seqlock: Cure some more scoped_seqlock() optimization fails - serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms - serial: max310x: implement gpio_chip::get_direction() - serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch) - serial: sc16is7xx: implement gpio get_direction() callback - smb/client: handle overlapping allocated ranges in fallocate - smb: client: validate DFS referral PathConsumed - staging: rtl8723bs: fix inverted HT40 secondary channel offset - staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() - SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists - sunrpc: allocate a separate bvec array for socket sends - SUNRPC: Return an error from xdr_buf_to_bvec() on overflow - taskstats: fill_stats_for_tgid: use for_each_thread() - taskstats: retain dead thread stats in TGID queries - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() - tipc: fix infinite loop in __tipc_nl_compat_dumpit - tipc: fix u16 MTU truncation in media and bearer MTU validation - tipc: restrict socket queue dumps in enqueue tracepoints - tls: device: push pending open record on splice EOF - tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match() - tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev - tracing: Fix resource leak on mmiotrace trace_pipe close - tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args() - tracing/probes: Fix potential underflow in LEN_OR_ZERO macro - tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err() - tracing/user_events: Fix use-after-free in user_event_mm_dup() - udmabuf: Do not create malformed scatterlists - udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect - usb: chipidea: fix usage_count leak when autosuspend_delay is negative - usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback - usb: gadget: f_midi: cancel pending IN work before freeing the midi object - usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() - USB: gadget: fsl-udc: fix device name leak on probe failure - usb: gadget: printer: fix infinite loop in printer_read() - USB: gadget: snps-udc: fix device name leak on probe failure - usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown - usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer - USB: serial: ftdi_sio: add support for E+H FXA291 - USB: serial: io_edgeport: cap received transmit credits - USB: serial: keyspan_pda: fix data loss on receive throttling - USB: serial: option: add TDTECH MT5710-CN - USB: storage: add NO_ATA_1X quirk for Longmai USB Key - usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits - VDUSE: avoid leaking information to userspace - vduse: remove unused vaddr parameter of vduse_domain_free_coherent - vduse: take out allocations from vduse_dev_alloc_coherent - vduse: Use fixed 4KB bounce pages for non-4KB page size - VFS/audit: introduce kern_path_parent() for audit - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets - vxlan: mdb: Fix source list corruption on a failed replace - vxlan: require CAP_NET_ADMIN in the device netns for changelink - wan: wanxl: Only reset hardware after BAR mapping - watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() - wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() - wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin - wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() - wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET - wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET - wifi: ath6kl: fix OOB access from firmware ADDBA window size - wifi: ath6kl: fix OOB read from firmware IE lengths in connect event - wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request - wifi: brcmfmac: fix 802.1X-SHA256 call trace warning - wifi: brcmfmac: initialize SDIO data work before cleanup - wifi: brcmfmac: make release_scratchbuffers idempotent - wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read - wifi: carl9170: fix buffer overflow in rx_stream failover path - wifi: carl9170: fix OOB read from off-by-two in TX status handler - wifi: cfg80211: bound element ID read when checking non-inheritance - wifi: cfg80211: cancel sched scan results work on unregister - wifi: cfg80211: reject unsupported PMSR FTM location requests - wifi: cfg80211: validate PMSR FTM preamble range - wifi: cfg80211: validate PMSR measurement type data - wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() - wifi: iwlwifi: mvm: fix read in wake packet notification handler - wifi: iwlwifi: mvm: validate SAR GEO response payload size - wifi: libertas: fix memory leak in helper_firmware_cb() - wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() - wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock - wifi: mac80211_hwsim: clamp virtio RX length before skb_put - wifi: mac80211: recalculate TIM when a station enters power save - wifi: mac80211: tear down new links on vif update error path - wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() - wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses - wifi: mt76: mt7915: guard HE capability lookups - wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses - wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() - wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() - wifi: mwifiex: bound uAP association event IEs to the event buffer - wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper - wifi: nl80211: free RNR data on MBSSID mismatch - wifi: nl80211: validate nested MBSSID IE blobs - wifi: p54: validate RX frame length in p54_rx_eeprom_readback() - wifi: wilc1000: validate assoc response length before subtracting header - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out init_cpu_worker_pool() - x86/boot/compressed: Disable jump tables - xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() - xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert - xprtrdma: Clear receive-side ownership pointers on release - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- [bot] upd: 6.6.144 -> 6.6.145 - Changelog: - 6lowpan: fix NHC entry use-after-free on error path - 9p: skip nlink update in cacheless mode to fix WARN_ON - ACPI: bus: Introduce devm_acpi_install_notify_handler() - ACPI: CPPC: Suppress UBSAN warning caused by field misuse - ACPI: driver: Check ACPI_COMPANION() against NULL during probe - ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() - ACPI: IPMI: Fix message kref handling on dead device - ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup - ACPI: NFIT: core: Fix possible deadlock and missing notifications - ACPI: NFIT: core: Fix possible NULL pointer dereference - ACPI: NFIT: core: Use devm_acpi_install_notify_handler() - ACPI: resource: Amend kernel-doc style - afs: Fix callback service message parsers to pass through -EAGAIN - afs: Fix error code in afs_extract_vl_addrs() - afs: Fix further netns teardown to cancel the preallocation charger - afs: Fix netns teardown to cancel the preallocation charger - afs: fix NULL pointer dereference in afs_get_tree() - afs: Fix the volume AFS_VOLUME_RM_TREE is set on - afs: Fix unchecked-length string display in debug statement - afs: Fix vllist leak - afs: use kvfree() to free memory allocated by kvcalloc() - alpha/PCI: Add security_locked_down() check to pci_mmap_resource() - alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs - ALSA: aoa: check snd_ctl_new1() return value - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser - ALSA: cmipci: check snd_ctl_new1() return value - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() - ALSA: es1938: check snd_ctl_new1() return value - ALSA: firewire: isight: bound the sample count to the packet payload - ALSA: gus: check snd_ctl_new1() return value - ALSA: ice1712: check snd_ctl_new1() return value - ALSA: seq: Clear variable event pointer on read - ALSA: seq: Fix partial userptr event expansion - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() - ALSA: seq: midi: Serialize output teardown with event_input - ALSA: usb-audio: avoid kobject path lookup in DualSense match - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks - ALSA: usb-audio: Roll back quirk control caches on write errors - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes - ALSA: virtio: Add missing 384 kHz PCM rate mapping - ALSA: ymfpci: check snd_ctl_new1() return value - amt: fix size calculation in amt_get_size() - apparmor: aa_getprocattr free procattr leak on format failure - apparmor: aa_label_alloc use aa_label_free on alloc failure - apparmor: advertise the tcp fast open fix is applied - apparmor: check label build before no_new_privs test - apparmor: fix label can not be immediately before a declaration - apparmor: fix potential UAF in aa_replace_profiles - apparmor: fix rawdata_f_data implicit flex array - apparmor: grab ns lock and refresh when looking up changehat child profiles - apparmor: put secmark label after secid lookup - arm64: dts: imx8x-colibri: Correct SODIMM PAD settings - arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host - arm64: dts: qcom: sdm630: describe adsp_mem region properly - arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning - arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node - arm64: dts: qcom: sm8450: Fix ICE reg size - arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S - arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc - arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well - arm64: Fix early handling of FEAT_E2H0 not being implemented - arm64: fpsimd: Fix type mismatch in sme_{save,load}_state() - arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() - arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS - arm64/mm: convert ptep_clear() to ptep_get_and_clear() - arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep) - arm64/mm: convert set_pte_at() to set_ptes(..., 1) - arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: sysreg: Add layout for ID_AA64MMFR4_EL1 - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: tegra: Fix Tegra234 MGBE PTP clock - arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative - ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint - ARM: imx31: Fix IIM mapping leak in revision check - ARM: imx3: Fix CCM node reference leak - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO - ASoC: codecs: aw88261: fix incorrect masks for boost regs - ASoC: codecs: hdac_hdmi: Validate written enum value - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails - ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count - ASoC: fsl: fsl_audmix: Validate written enum values - ASoC: mediatek: mt8183: Release reserved memory on cleanup - ASoC: mediatek: mt8192: Release reserved memory on cleanup - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put - ASoC: SOF: topology: validate vendor array size before parsing - ASoC: tegra: tegra210_ahub: Validate written enum value - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode - ata: libata: Fix ata_exec_internal() - ata: pata_pxa: Fix DMA channel leak on probe error - ata: sata_gemini: unwind clocks on IDE pinctrl errors - audit: add audit_log_nf_skb helper function - audit: Fix data races of skb_queue_len() readers on audit_queue - audit: fix potential integer overflow in audit_log_n_hex() - batman-adv: access unicast_ttvn skb->data only after skb realloc - batman-adv: bla: reacquire gw address after skb realloc - batman-adv: clean untagged VLAN on netdev registration failure - batman-adv: dat: acquire ARP hw source only after skb realloc - batman-adv: dat: ensure accessible eth_hdr proto field - batman-adv: dat: fix tie-break for candidate selection - batman-adv: ensure minimal ethernet header on TX - batman-adv: fix VLAN priority offset - batman-adv: frag: fix primary_if leak on failed linearization - batman-adv: frag: free unfragmentable packet - batman-adv: gw: acquire ethernet header only after skb realloc - batman-adv: retrieve ethhdr after potential skb realloc on RX - batman-adv: tt: avoid request storms during pending request - batman-adv: tt: prevent TVLV OOB check overflow - binder: fix UAF in binder_free_transaction() - binder: fix UAF in binder_thread_release() - bitops: make BYTES_TO_BITS() treewide-available - bitops: use common function parameter names - block: Avoid mounting the bdev pseudo-filesystem in userspace - block: skip sync_blockdev() on surprise removal in bdev_mark_dead() - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister - Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control - Bluetooth: bnep: pin L2CAP connection during netdev registration - Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() - Bluetooth: btmtk: apply the common btmtk_fw_get_filename - Bluetooth: btmtk: Fix btmtk.c undefined reference build error - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown - Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c - Bluetooth: btmtk: remove #ifdef around declarations - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() - Bluetooth: btrtl: validate firmware patch bounds - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB - Bluetooth: btusb: fix use-after-free on marvell probe failure - Bluetooth: btusb: fix use-after-free on registration failure - Bluetooth: btusb: fix wakeup source leak on probe failure - Bluetooth: btusb: mediatek: add MT7922 subsystem reset - Bluetooth: btusb: mediatek: remove the unnecessary goto tag - Bluetooth: btusb: mediatek: reset the controller before downloading the fw - Bluetooth: btusb: mediatek: return error for failed reg access - Bluetooth: fix UAF in bt_accept_dequeue() - Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() - Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO - Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state - Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle - Bluetooth: hci: validate codec capability element length - Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID - Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length - Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock - Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: validate option length before reading conf opt value - Bluetooth: MGMT: Fix adv monitor add failure cleanup - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready - Bluetooth: SCO: hold sk properly in sco_conn_ready - Bluetooth: separate CIS_LINK and BIS_LINK link types - Bluetooth: vhci: validate devcoredump state before side effects - bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() - bonding: 3ad: fix mux port state on oper down - bonding: add ESP offload features when slaves support - bonding: Correctly support GSO ESP offload - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix xfrm offload feature setup on active-backup mode - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add missing access_ok call to copy_user_syms - bpf: Allow LPM map access from sleepable BPF programs - bpf, arm64: Reject out-of-range B.cond targets - bpf: Check tail zero of bpf_prog_info - bpf: Consistently use bpf_rcu_lock_held() everywhere - bpf: Disable xfrm_decode_session hook attachment - bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket - bpf: Fix effective prog array index with BPF_F_PREORDER - bpf: Fix stack slot index in nospec checks - bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs - bpf,fork: wipe ->bpf_storage before bailouts that access it - bpf, lsm: Add disabled BPF LSM hook list - bpf: Prefer dirty packs for eBPF allocations - bpf: Prefer packs that won't trigger an IBPB flush on allocation - bpf: Reject fragmented frames in devmap - bpf: Restore sysctl new-value from 1 to 0 - bpf: Restrict JIT predictor flush to cBPF - bpf: Run generic devmap egress prog on private skb - bpf: Skip redundant IBPB in pack allocator - bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() - bpf: Support for hardening against JIT spraying - bpf: Tighten cgroup storage cookie checks for prog arrays - bpftool: Use libbpf error code for flow dissector query - bpf: Update transport_header when encapsulating UDP tunnel in lwt - bpf: zero-initialize the fib lookup flow struct - bridge: cfm: reject invalid CCM interval at configuration time - bridge: stp: Fix a potential use-after-free when deleting a bridge - btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC - btrfs: do not trim a device which is not writeable - btrfs: fix false IO failure after falling back to buffered write - btrfs: fix incorrect buffered IO fallback for append direct writes - btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() - btrfs: zoned: don't account data relocation space-info in statfs free space - bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() - bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path - bus: sunxi-rsb: Always check register address validity - can: bcm: add missing rcu list annotations and operations - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF - can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure - can: esd_usb: kill anchored URBs before freeing netdevs - can: isotp: use unconditional synchronize_rcu() in isotp_release() - cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed - char: tlclk: fix use-after-free in tlclk_cleanup() - cifs: invalidate cfid on unlink/rename/rmdir - cifs: remove all cifs files before kill super - cifs: validate DFS referral string offsets - clk: at91: keep securam node alive while mapping it - clk: qcom: a53: Corrected frequency multiplier for 1152MHz - clk: scmi: Fix clock rate rounding - clk: scpi: Unregister child clock providers on remove - clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances - configfs: fix lockless traversals of ->s_children - configfs_lookup(): don't leave ->s_dentry dangling on failure - coresight: cti: Fix DT filter signals silently ignored - coresight: etb10: restore atomic_t for shared reading state - coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() - cpufreq: conservative: Simplify frequency limit handling - cpufreq: Documentation: fix conservative governor freq_step description - cpufreq: Documentation: fix sampling_down_factor range - cpufreq: Fix hotplug-suspend race during reboot - cpufreq: intel_pstate: Sync policy->cur during CPU offline - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation - cpu: hotplug: Bound hotplug states sysfs output - cpu: hotplug: Preserve per instance callback errors - crypto: af_alg - Remove zero-copy support from skcipher and aead - crypto: algif_skcipher - force synchronous processing on trees without ctx->state - crypto: amlogic - avoid double cleanup in meson_crypto_probe() - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 - crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A - crypto: atmel-sha204a - fix blocking and non-blocking rng logic - crypto: caam - use print_hex_dump_devel to guard key hex dumps - crypto: caam - use print_hex_dump_devel to guard key hex dumps again - crypto: cavium/cpt - fix DMA cleanup using wrong loop index - crypto: ccp - Treat zero-length cert chain as query for blob lengths - crypto: crypto4xx - Remove ahash-related code - crypto: crypto4xx - Remove insecure and unused rng_alg - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels - crypto: drbg - Fix returning success on failure in CTR_DRBG - crypto: drbg - Fix the fips_enabled priority boost - crypto: ecc - Fix carry overflow in vli multiplication - crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve - crypto: hisilicon/qm - disable error report before flr - crypto: hisi-trng - Remove crypto_rng interface - crypto: marvell/octeontx - fix DMA cleanup using wrong loop index - crypto: pcrypt - restore callback for non-parallel fallback - crypto: qat - fix restarting state leak on allocation failure - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() - crypto: qat - validate RSA CRT component lengths - crypto: rng - Free default RNG on module exit - crypto: sun4i-ss - Remove insecure and unused rng_alg - crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1 - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos/hash - drop workqueue mechanism for SEC1 - crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation - crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor - crypto: talitos/hash - remove useless wrapper - crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request - crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue - crypto: talitos - move code in current_desc_hdr() into a standalone function - crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function - crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function - crypto: talitos - rename first/last to first_desc/last_desc - crypto: talitos - stop using crypto_ahash::init - crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header - cxgb4: Fix decode strings dump for T6 adapters - cxl/test: Add check after kzalloc() memory in alloc_mock_res() - cxl/test: Fix integer overflow in mock LSA bounds checks - cxl/test: Zero out LSA backing memory to avoid leaking to user - dax/kmem: account for partial discontiguous resource upon removal - debugobjects: Plug race against a concurrent OOM disable - device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() - device property: initialize the remaining fields of fwnode_handle in fwnode_init() - devlink: Fix parent ref leak in devl_rate_node_create() - dlm: fix add msg handle in send_queue ordered - dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK - dmaengine: Fix possible use after free - dmaengine: imx-sdma: Refine spba bus searching in probe - dmaengine: qcom: gpi: set DMA_PRIVATE capability - dmaengine: tegra: Fix burst size calculation - dm-bufio: fix wrong count calculation in dm_bufio_issue_discard - dm_early_create: fix freeing used table on dm_resume failure - dm era: fix NULL pointer dereference in metadata_open() - dm era: fix out-of-bounds memory access for non-zero start sector - dm-integrity: don't increment hash_offset twice - dm-ioctl: fix a possible overflow in list_version_get_info - dm-ioctl: report an error if a device has no table - dm-log: fix a bitset_size overflow on 32bit machines - dm-stats: fix dm_jiffies_to_msec64 - dm-stats: fix merge accounting - dm thin metadata: fix metadata snapshot consistency on commit failure - dm thin metadata: fix superblock refcount leak on snapshot shadow failure - dm-verity: fix a possible NULL pointer dereference - dm-verity: increase sprintf buffer size - Documentation: proc: fix section numbering in table of contents - dpaa2-switch: fix VLAN upper check not rejecting bridge join - drbd: reject data replies with an out-of-range payload size - driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() - driver core: Guard deferred probe timeout extension with delayed_work_pending() - driver core: Use mod_delayed_work to prevent lost deferred probe work - driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() - drm/amd/display: Add missing kdoc for ALLM parameters - drm/amd: Fix set but not used warnings - drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() - drm/amdgpu: initialize irq.lock spinlock earlier - drm/amdgpu: set sub_block_index for mca ras sub-blocks - drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free - drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm - drm/amdkfd: Validate CRIU-restored IDs before idr_alloc - drm/edid: fix OOB read in drm_parse_tiled_block() - drm/hisilicon/hibmc: move display contrl config to hibmc_probe() - drm/hisilicon/hibmc: use clock to look up the PLL value - drm/msm/dp: fix HPD state status bit shift value - drm/msm/dp: Fix the ISR_* enum values - drm/nouveau/bios: specify correct display fuse register for Ampere and Ada - drm/radeon: fix integer overflow in radeon_align_pitch() - drm/radeon: fix memory leak in radeon_ring_restore() on lock failure - drm/rockchip: Test for imported buffers with drm_gem_is_imported() - drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() - drm/tegra: Fix iommu_map_sgtable() return value check - drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove - drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered - drm/tidss: Drop extra drm_mode_config_reset() call - dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties - dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback - dt-bindings: pinctrl: nvidia,tegra234: Add missing required block - dt-bindings: power: imx93: Add MIPI PHY power domain - EDAC/i10nm: Don't fail probing if ADXL is missing - EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info - espintcp: use sk_msg_free_partial to fix partial send - evm: terminate and bound the evm_xattrs read buffer - exfat: add exfat_get_dentry_set_by_ei() helper - exfat: bound uniname advance in exfat_find_dir_entry() - exfat: move exfat_chain_set() out of __exfat_resolve_path() - exfat: move free cluster out of exfat_init_ext_entry() - exfat: preserve benign secondary entries during rename and move - exfat: remove unnecessary read entry in __exfat_rename() - exfat: rename argument name for exfat_move_file and exfat_rename_file - ext2: fix ignored return value of generic_write_sync() - ext4: fix kernel BUG in ext4_write_inline_data_end - ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback - ext4: get rid of ppath in get_ext_path() - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes - f2fs: fix listxattr handling of corrupted xattr entries - f2fs: fix potential deadlock in f2fs_balance_fs() - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() - f2fs: validate orphan inode entry count - fbcon: fix NULL pointer dereference for a console without vc_data - fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() - fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() - fbdev: hecubafb: fix potential memory leak in hecubafb_probe() - fbdev: i740fb: fix potential memory leak in i740fb_probe() - fbdev: metronomefb: fix potential memory leak in metronomefb_probe() - fbdev: nvidia: fix potential memory leak in nvidiafb_probe() - fbdev: radeon: fix potential memory leak in radeonfb_pci_register() - fbdev: s3fb: fix potential memory leak in s3_pci_probe() - fbdev: sm501fb: Fix buffer errors in OF binding code - fbdev: sm712: Fix operator precedence in big_swap macro - fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() - fbdev: tridentfb: fix potential memory leak in trident_pci_probe() - fbdev: uvesafb: fix potential memory leak in uvesafb_probe() - fbdev: vesafb: fix memory leak in vesafb_probe() - firmware: arm_scmi: Fix OOB in scmi_power_name_get() - firmware: arm_scmi: Read sensor config as 32-bit value - firmware_loader: fix device reference leak in firmware_upload_register() - firmware_loader: Fix recursive lock in device_cache_fw_images() - flow_dissector: check device type before reading ETH_ADDRS - fpga: dfl: add bounds check in dfh_get_param_size() - fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() - fs: efs: remove unneeded debug prints - fsl/fman: Free init resources on KeyGen failure in fman_init() - fs/ntfs3: add bounds check to run_get_highest_vcn() - fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow - fs/ntfs3: bound attr_off in UpdateResidentValue against data_off - fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass - fs/ntfs3: bound DeleteIndexEntryAllocation memmove length - fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() - fs/ntfs3: fix mount failure on 64K page-size kernels - fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename - fs/ntfs3: fsync files by syncing parent inodes - fs/ntfs3: handle attr_set_size() errors when truncating files - fs/ntfs3: resize log->one_page_buf when adopting on-disk page size - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns - fs/ntfs3: validate lcns_follow in log_replay conversion - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio() - fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid - fuse: fix device node leak in cuse_process_init_reply() - fuse: re-lock request before returning from fuse_ref_folio() - gpio: eic-sprd: use raw_spinlock_t in the irq startup path - gpio-f7188x: Add support for NCT6126D version B - gpio: htc-egpio: use managed gpiochip registration - gpio: mlxbf3: fail probe if gpiochip registration fails - gpio: mvebu: fail probe if gpiochip registration fails - gpio: sch: use raw_spinlock_t in the irq startup path - gpios: palmas: add .get_direction() op - gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe - gpu: host1x: Allow entries in BO caches to be freed - gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path - gpu: host1x: Fix iommu_map_sgtable() return value check - gue: validate REMCSUM private option length - handshake: Require admin permission for DONE command - hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length - hfs/hfsplus: prevent getting negative values of offset/length - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read - HID: add haptics page defines - HID: appleir: fix UAF on pending key_up_timer in remove() - HID: core: Fix OOB read in hid_get_report for numbered reports - HID: letsketch: fix UAF on inrange_timer at driver unbind - HID: lg-g15: cancel pending work on remove to fix a use-after-free - HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter - HID: multitouch: fix out-of-bounds bit access on mt_io_flags - HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() - HID: playstation: validate num_touch_reports in DualShock 4 reports - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads - HID: wacom: stop hardware after post-start probe failures - HID: wiimote: Fix table layout and whitespace errors - hwmon: adm1275: Prevent reading uninitialized stack - hwmon: (asus_atk0110) Check package count before accessing element - hwmon: (it87) Clamp negative values to zero in set_fan() - hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig - hwmon: (occ) unregister sysfs devices outside occ lock - hwmon: (pmbus) Fix passing events to regulator core - hwmon: (w83627hf) remove VID sysfs files on error and remove - hwmon: (w83793) remove vrm sysfs file on probe failure - hwrng: jh7110 - fix refcount leak in starfive_trng_read() - hwrng: virtio: clamp device-reported used.len at copy_data() - hwspinlock: qcom: avoid uninitialized struct members - i2c: core: fix adapter debugfs creation - i2c: core: fix adapter deregistration race - i2c: core: fix adapter registration race - i2c: core: fix hang on adapter registration failure - i2c: core: fix irq domain leak on adapter registration failure - i2c: core: fix NULL-deref on adapter registration failure - i2c: mediatek: fix WRRD for SoCs without auto_restart option - i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() - i2c: mpc: Fix timeout calculations - i2c: stm32f7: truncate clock period instead of rounding it - i3c: master: Prevent reuse of dynamic address on device add failure - i40e: Fix i40e_debug() to use struct i40e_hw argument - ia64: Make acpi_cpufreq_cpu_exit return void - IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() - IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified - IB/mlx4: Fix refcount leak in add_port() error path - IB/mlx5: Don't take the rereg_mr fallback without a new translation - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier - IB/mlx5: Properly support implicit ODP rereg_mr - ice: fix AQ error code comparison in ice_set_pauseparam() - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() - ice: fix ice_init_link() error return preventing probe - ieee802154: admin-gate legacy LLSEC dump operations - ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation - ieee802154: ca8210: fix cas_ctl leak on spi_async failure - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit - ieee802154: fix kernel-infoleak in dgram_recvmsg() - ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() - iio: accel: bmc150: clamp the device-reported FIFO frame count - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error - iio: accel: mma8452: handle I2C read error(s) in mma8452_read() - iio: adc: lpc32xx: Initialize completion before requesting IRQ - iio: adc: spear: Initialize completion before requesting IRQ - iio: adc: ti-ads124s08: Return reset GPIO lookup errors - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug - iio: common: st_sensors: honour channel endianness in read_axis_data - iio: event: Fix event FIFO reset race - iio: gyro: bmg160: bail out when bandwidth/filter is not in table - iio: gyro: bmg160: wait full startup time after mode change at probe - iio: hid-sensor-rotation: Fix stale or zero output when reading raw values - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ - iio: imu: inv_icm42600: fix timestamp clock period by using lower value - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading - iio: imu: inv_icm42600: stabilized timestamp in interrupt - iio: imu: st_lsm6dsx: deselect shub page before reading whoami - iio: invensense: fix timestamp glitches when switching frequency - iio: invensense: remove redundant initialization of variable period - iio: light: al3010: fix incorrect scale for the highest gain range - iio: light: gp2ap002: fix runtime PM leak on read error - iio: light: opt3001: fix missing state reset on timeout - iio: light: si1133: prevent race condition on timeout - iio: light: si1133: reset counter to prevent race condition - iio: light: tsl2591: return actual error from probe IRQ failure - iio: light: veml6030: fix channel type when pushing events - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call - iio: magnetometer: ak8975: fix potential kernel stack memory leak - iio: pressure: mpl115: fix runtime PM leak on read error - iio: tcs3472: power down chip on probe failure - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check - iio: temperature: ltc2983: Fix reinit_completion() called after conversion start - Input: elan_i2c - prevent division by zero and arithmetic underflow - Input: goodix - clamp the device-reported contact count - Input: iforce - bound the device-reported force-feedback effect index - Input: ims-pcu - add response length checks - Input: ims-pcu - fix DMA mapping violation in line setup - Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging - Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing - Input: ims-pcu - fix race condition in reset_device sysfs callback - Input: ims-pcu - fix type confusion in CDC union descriptor parsing - Input: ims-pcu - fix use-after-free and double-free in disconnect - Input: ims-pcu - release data interface on disconnect - Input: ims-pcu - validate control endpoint type - Input: maplecontrol - set driver data before registering input device - Input: maple_keyb - set driver data before registering input device - Input: maplemouse - fix NULL pointer dereference in open() - Input: maplemouse - set driver data before registering input device - Input: mms114 - fix multi-touch slot corruption - Input: mms114 - fix touch indexing for MMS134S and MMS136 - Input: mms114 - reject an oversized device packet size - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count - Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure - Input: touchwin - reset the packet index on every complete packet - iommu/amd: Fix a stale comment about which legacy mode is user visible - ionic: Fix check in ionic_get_link_ext_stats - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item - ipv4: fib: Don't ignore error route in local/main tables. - ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() - ipv4: igmp: remove multicast group from hash table on device destruction - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD - ipv6: fix error handling in disable_ipv6 sysctl - ipv6: fix error handling in disable_policy sysctl - ipv6: fix error handling in forwarding sysctl - ipv6: fix error handling in ignore_routes_with_linkdown sysctl - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). - ipv6: guard against possible NULL deref in __in6_dev_stats_get() - ipv6: mcast: Fix potential UAF in MLD delayed work - ipv6: mcast: Replace locking comments with lockdep annotations. - ipvs: ensure inner headers in ICMP errors are in headroom - ipvs: fix more places with wrong ipv6 transport offsets - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors - ipvs: pass parsed transport offset to state handlers - ipvs: reload ip header after head reallocation - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new - ipvs: use parsed transport offset in SCTP state lookup - ipvs: use parsed transport offset in TCP state lookup - irqchip/crossbar: Fix parent domain resource leak - irqchip/crossbar: Use correct index in crossbar_domain_free() - irqchip/gic-v3-its: Fix OF node reference leak - irqchip/ts4800: Fix missing chained handler cleanup on remove - isofs: bound Rock Ridge symlink components to the SL record - jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() - jiffies: Cast to unsigned long in secs_to_jiffies() conversion - jiffies: Define secs_to_jiffies() - kcm: use WRITE_ONCE() when changing lower socket callbacks - kconfig: fix potential NULL pointer dereference in conf_askvalue - KEYS: Use acquire when reading state in keyring search - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE - ksmbd: centralize ksmbd_conn final release to plug transport leak - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd - ksmbd: fix integer overflow in set_file_allocation_info() - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation - ksmbd: fix use-after-free in same_client_has_lease() - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check - ksmbd: reject undersized DACLs before parsing ACEs - ksmbd: require source read access for duplicate extents - ksmbd: run set info with opener credentials - ksmbd: serialize QUERY_DIRECTORY requests per file - ksmbd: track the connection owning a byte-range lock - ksmbd: use opener credentials for delete-on-close - ksmbd: use opener credentials for FSCTL mutations - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: vgic: Check the interrupt is still ours before migrating it - KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers - KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure - KVM: s390: pci: Fix handling of AIF enable without AISB - KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode - KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs - leds: uleds: Fix potential buffer overread - libbpf: Fix UAF in strset__add_str() - libbpf: Harden parse_vma_segs() path parsing - libbpf: Report error when a negative kprobe offset is specified - lib/test_meminit: use && for bools - llc: fix SAP refcount leak in llc_ui_autobind() - llc: fix SAP refcount leak when creating incoming sockets - lockd: Plug nlm_file leak when nlm_do_fopen() fails - lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure - LoongArch: Add PIO for early access before ACPI PCI root register - LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() - LoongArch: Report dying CPU to RCU in stop_this_cpu() - mac802154: remove interfaces with RCU list deletion - macsec: don't read an unset MAC header in macsec_encrypt() - macsec: fix promiscuity refcount leak in macsec_dev_open() - mailbox: mtk-adsp: fix UAF during device teardown - md/raid10: reset read_slot when reusing r10bio for discard - md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry - media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() - media: cedrus: Fix failure to clean up hardware on probe failure - media: mtk-jpeg: cancel workqueue on release for supported platforms only - media: nxp: imx8-isi: Convert to platform remove callback returning void - media: nxp: imx8-isi: Fix use-after-free on remove - media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code - media: qcom: venus: drop extra padding in NV12 raw size calculation - media: qcom: venus: relax encoder frame/blur dimension steps on v4 - media: qcom: venus: relax encoder frame/blur step size on v6 - media: rockchip: rga: fix too small buffer size - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe - media: uvcvideo: Avoid partial metadata buffers - media: uvcvideo: Fix buffer sequence in frame gaps - media: uvcvideo: Fix sequence number when no EOF - media: v4l2-common: Add YUV24 format info - memstick: ms_block: reject a card that reports too many blocks - mfd: cros_ec: Delay dev_set_drvdata() until probe success - mfd: cs42l43: Sanity check firmware size - mfd: sm501: Fix reference leak on failed device registration - mfd: tps6586x: Fix OF node refcount - minix: avoid overflow in bitmap block count calculation - MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() - MIPS: DEC: Ensure RTC platform device deregistration upon failure - MIPS: DEC: Remove do_IRQ() call indirection - MIPS: Fix big-endian stack argument fetching in o32 wrapper - MIPS: ip22-gio: fix device reference leak in probe - MIPS: ip22-gio: fix gio device memory leak - MIPS: ip22-gio: fix kfree() of static object - MIPS: mm: Fix out-of-bounds write in maar_res_walk() - mips: n64: add __iomem for writel call - mips: ralink: mt7621: add missing __iomem - mips: sched: Fix CPUMASK_OFFSTACK memory corruption - MIPS: smp: report dying CPU to RCU in stop_this_cpu() - mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() - mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() - mmc: vub300: defer reset until cmd_mutex is unlocked - mm/damon/core: make charge_addr_from aware of end-address exclusivity - mm/damon/ops-common: handle extreme intervals in damon_hot_score() - mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() - mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error - mm: do file ownership checks with the proper mount idmap - mm/fake-numa: fix under-allocation detection in uniform split - mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() - mm: shrinker: fix NULL pointer dereference in debugfs - mm: shrinker: remove redundant shrinker_rwsem in debugfs operations - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled - mm/vmscan: flush deferred TLB before freeing large folios - module: decompress: check return value of module_extend_max_pages() - mtd: maps: vmu-flash: fix NULL pointer dereference in initialization - mtd: mchp23k256: use SPI match data for chip caps - mtd: onenand: samsung: report DMA completion timeouts - mtd: rawnand: fix condition in 'nand_select_target()' - mtd: rawnand: fsl_ifc: return errors for failed page reads - mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout - mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout - mtd: rawnand: pl353: fix probe resource allocation - mtd: slram: remove failed entries from the device list - mtd: spi-nor: Drop duplicate Kconfig dependency - mtd: spi-nor: swp: Improve locking user experience - net/9p: fix infinite loop in p9_client_rpc on fatal signal - net/9p: fix race condition on rdma->state in trans_rdma.c - net: add a common function to compute features for upper devices - net: af_key: initialize alg_key_len for IPComp states - net: atm: reject out-of-range traffic classes in QoS validation - net: bcmgenet: Use weighted round-robin TX DMA arbitration - net, bpf: check master for NULL in xdp_master_redirect() - net: Drop the lock in skb_may_tx_timestamp() - net: dsa: sja1105: round up PTP perout pin duration - net: ena: clean up XDP TX queues when regular TX setup fails - net: enetc: check the number of BDs needed for xdp_frame - net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths - net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove - net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp - netfilter: conntrack: revert ct extension genid infrastructure - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump - netfilter: ebtables: module names must be null-terminated - netfilter: ebtables: terminate table name before find_table_lock() - netfilter: ebtables: Use vmalloc_array() to improve code - netfilter: ebtables: zero chainstack array - netfilter: ecache: fix inverted time_after() check - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop - netfilter: ipset: annotate "pos" for concurrent readers/writers - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types - netfilter: ipset: Fix data race between add and dump in all hash types - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() - netfilter: ipset: fix race between dump and ip_set_list resize - netfilter: nf_conncount: callers must hold rcu read lock - netfilter: nf_conncount: fix zone comparison in tuple dedup - netfilter: nf_conncount: prevent connlimit drops for early confirmed ct - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() - netfilter: nf_nat_sip: reload possible stale data pointer - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures - netfilter: nfnl_cthelper: apply per-class values when updating policies - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst - netfilter: nf_reject: skip iphdr options when looking for icmp header - netfilter: nft_compat: ebtables emulation must reject non-bridge targets - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak - netfilter: nft_synproxy: stop bypassing the priv->info snapshot - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock - netfilter: xt_cluster: reject template conntracks in hash match - netfilter: xt_connmark: reject invalid shift parameters - netfilter: xt_nat: reject unsupported target families - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() - netfilter: xt_u32: reject invalid shift counts - net: gianfar: dispose irq mappings on probe failure and device removal - net: ife: require ETH_HLEN to be pullable in ife_decode() - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink - net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink - net: ipip: require CAP_NET_ADMIN in the device netns for changelink - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes - net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink - net: ixp4xx_hss: fix duplicate HDLC netdev allocation - net: lan743x: Initialize eth_syslock spinlock before use - net: liquidio: fix BAR resource leak on PF number failure - net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check - net: mana: initialize gdma queue id to INVALID_QUEUE_ID - net: marvell: prestera: initialize err in prestera_port_sfp_bind - net: microchip: vcap: fix races on the shared Super VCAP block - net/mlx5: Check max_macs devlink param value against max capability - net/mlx5e: Fix HV VHCA stats agent registration race - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete - net/mlx5: Fix L3 tunnel entropy refcount leak - net: mvneta: re-enable percpu interrupt on resume - net: openvswitch: reject oversized nested action attrs - net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy - net: psample: fix info leak in PSAMPLE_ATTR_DATA - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() - net: qualcomm: rmnet: validate MAP frame length before ingress parsing - net/sched: act_bpf: use rcu_dereference_bh() to read the filter - net/sched: act_ct: preserve tc_skb_cb across defragmentation - net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload - net/sched: cake: reject overhead values that underflow length - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle - net/sched: cls_bpf: prevent unbounded recursion in offload rollback - net/sched: cls_flow: Dont expose folded kernel pointers - net/sched: hhf: clear heavy-hitter state on reset - net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - net/sched: sch_drr: annotate data-races around cl->deficit - net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() - net/sched: sch_hfsc: Don't make class passive twice - net/sched: sch_htb: annotate data-races (I) - net/sched: sch_htb: do not change sch->flags in htb_dump() - net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants - net: sit: require CAP_NET_ADMIN in the device netns for changelink - net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket - net: sparx5: unregister blocking notifier on init failure - net: sungem: fix probe error cleanup - net, team, bonding: Add netdev_base_features helper - net: team: rename team to team_core for linking - net: thunderbolt: Fix frags[] overflow by bounding frame_count - net/tls: Consume empty data records in tls_sw_read_sock() - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() - net: usb: lan78xx: disable VLAN filter in promiscuous mode - net: usb: lan78xx: move functions to avoid forward definitions - net: usb: net1080: validate packet_len before pad-byte access in rx_fixup - net: wwan: iosm: bound device offsets in the MUX downlink decoder - net: wwan: t7xx: check skb_clone in control TX - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure - nfsd: change nfs4_client_to_reclaim() to allocate data - nfsd: Don't reset the write verifier on a commit EAGAIN - nfsd: move name lookup out of nfsd4_list_rec_dir() - nfsd: release layout stid on setlease failure - nfsd: reset write verifier on deferred writeback errors - nfs: keep PG_UPTODATE clear after read errors in page groups - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors - NFSv4/flexfiles: reject zero filehandle version count - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC - NFSv4/pnfs: defer return_range callbacks until after inode unlock - nilfs2: fix backing_dev_info reference leak - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers - NTB: epf: Avoid calling pci_irq_vector() from hardirq context - NTB: epf: Fix doorbell bitmask and IRQ vector handling - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() - NTB: epf: Make db_valid_mask cover only real doorbell bits - NTB: epf: Report 0-based doorbell vector via ntb_db_event() - ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head - ntfs3: cap RESTART_TABLE free-chain walker at rt->used - ntfs3: fix out-of-bounds read in decompress_lznt - ntfs3: validate split-point offset in indx_insert_into_buffer - nvdimm/btt: Free arenas on btt_init() error paths - nvdimm/btt: Free arena sub-allocations on discover_arenas() error path - nvdimm/btt: Handle preemption in BTT lane acquisition - nvme-multipath: fix flex array size in struct nvme_ns_head - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks - nvmet-auth: validate reply message payload bounds against transfer length - nvmet-rdma: handle inline data with a nonzero offset - nvmet: remove superfluous initialization - nvmet: return DHCHAP status codes from nvmet_setup_auth() - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path - nvmet-tcp: Fix potential UAF when ddgst mismatch - ocfs2: add journal NULL check in ocfs2_checkpoint_inode() - ocfs2: avoid moving extents to occupied clusters - ocfs2/dlm: require a ref for locking_state debugfs open - ocfs2: don't BUG_ON an invalid journal dinode - ocfs2: fix buffer head management in ocfs2_read_blocks() - ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write - ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits - ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() - ocfs2: kill osb->system_file_mutex lock - ocfs2: rebase copied fsdlm LVB pointers in locking_state - ocfs2: reject dinodes whose i_rdev disagrees with the file type - ocfs2: reject dinodes with non-canonical i_mode type - ocfs2: reject FITRIM ranges shorter than a cluster - ocfs2: reject non-inline dinodes with i_size and zero i_clusters - ocfs2: use kzalloc for quota recovery bitmap allocation - octeontx2-af: fix VF bringup affecting PF promiscuous state - octeontx2-af: mcs: Fix unsupported secy stats read - octeontx2-pf: check DMAC extraction support before filtering - octeontx2-pf: Clear stats of all resources when freeing resources - octeontx2-pf: Fix leak of SQ timestamp buffer on teardown - octeontx2-pf: mcs: Fix mcs resources free on PF shutdown - of: cpu: add check in __of_find_n_match_cpu_property() - OPP: of: Fix potential memory leak in opp_parse_supplies() - orangefs: keep the readdir entry size 64-bit in fill_from_part() - partitions: aix: bound the pp_count scan to the ppe array - PCI: Add kerneldoc for pci_resize_resource() - PCI: altera: Do not dispose parent IRQ mapping - PCI: altera: Fix resource leaks on probe failure - PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining - PCI/ASPM: Don't reconfigure ASPM entering low-power state - PCI: Check ROM header and data structure addr before accessing - PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() - PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 - PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 - PCI: Fix restoring BARs on BAR resize rollback path - PCI: Free saved list without holding pci_bus_sem - PCI: host-common: Request bus reassignment when not probe-only - PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling - PCI: Introduce named defines for PCI ROM - PCI: iproc: Restore .map_irq() for the platform bus driver - PCI: loongson: Do not ignore downstream devices on external bridges - PCI: mediatek: Convert bool to single quirks entry and bitmap - PCI: mediatek: Fix IRQ domain leak when port fails to enable - PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro - PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() - PCI: mediatek: Use actual physical address instead of virt_to_phys() - PCI: mediatek: Use generic MACRO for TPVPERL delay - PCI: meson: Propagate devm_add_action_or_reset() failure - PCI: Move Resizable BAR code to rebar.c - PCI: Prevent resource tree corruption when BAR resize fails - PCI: rcar-host: Remove unused LIST_HEAD(res) - PCI: Skip Resizable BAR restore on read error - perf/core: Detach event groups during remove_on_exec - perf: Fix dangling cgroup pointer in cpuctx backport - perf: Fix off-by-one stack buffer overflow in kallsyms__parse() - perf trace beauty fcntl: Fix build with older kernel headers - perf/x86/amd/brs: Fix kernel address leakage - perf/x86/amd/core: Always use the NMI latency mitigation - perf/x86/amd/lbr: Fix kernel address leakage - perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box() - phy: phy-can-transceiver: Check driver match and driver data against NULL - pinctrl: cs42l43: Fix polarity on debounce - pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 - pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 - pinctrl: meson: restore non-sleeping GPIO access - pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path - platform/x86/amd/pmc: Add delay_suspend module parameter - platform/x86/amd/pmc: Check for intermediate wakeup in function - platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops - platform/x86: xo15-ebook: Fix wakeup source and GPE handling - pmdomain: imx: Fix i.MX8MP power notifier - pmdomain: imx: Fix i.MX8MP VC8000E power up sequence - PM: sleep: Use complete() in device_pm_sleep_init() - pNFS/filelayout: fix cheking if a layout is striped - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path - posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() - powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus - powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del - powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down - powerpc/pseries: fix memory leak on krealloc failure in papr_init - powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() - power: supply: charger-manager: fix refcount leak in is_full_charged() - power: supply: core: fix supplied_from allocations - power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak - proc: only bump parent nlink when registering directories - proc: protect ptrace_may_access() with exec_update_lock (FD links) - proc: protect ptrace_may_access() with exec_update_lock (part 1) - proc: rename proc_setattr to proc_nochmod_setattr - pwm: imx27: Fix variable truncation in .apply() - qede: fix off-by-one in BD ring consumption on build_skb failure - qede: fix out-of-bounds check for cqe->len_list[] - rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup - RDMA/hns: Fix arithmetic overflow in calc_hem_config() - RDMA/hns: Fix warning in poll cq direct mode - RDMA/irdma: Fix OOB read during CQ MR registration - RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs - RDMA/irdma: Initialize iwmr->access during MR registration - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference - RDMA/mlx5: Fix undefined shift of user RQ WQE size - RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one - RDMA/mlx5: Remove raw RSS QP restrack tracking - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path - RDMA/rxe: Fix a use-after-free problem in rxe_mmap - RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe - RDMA/siw: bound Read Response placement to the RREAD length - RDMA/srpt: fix integer overflow in immediate data length check - regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK - regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions - regulator: ltc3676: Fix incorrect IRQSTAT bit offsets - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() - regulator: scmi: Simplify with scoped for each OF child loop - remoteproc: qcom: Fix leak when custom dump_segments addition fails - reset: sunxi: fix memory region leak on ioremap failure - Revert "crypto: talitos - fix SEC1 32k ahash request limitation" - Revert "crypto: talitos - rename first/last to first_desc/last_desc" - Revert "PCI/MSI: Unmap MSI-X region on error" - Revert "treewide: Fix probing of devices in DT overlays" - ring-buffer: Fix event length with forced 8-byte alignment - riscv: cacheinfo: Fix node reference leak in populate_cache_leaves - riscv: Prevent NULL pointer dereference in machine_kexec_prepare() - riscv: probes: save original sp in rethook trampoline - riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe - rpmsg: use generic driver_override infrastructure - rtc: abx80x: fix the RTC_VL_CLR clearing all status flags - rtc: cmos: unregister HPET IRQ handler on probe failure - rtc: ds1307: Fix off-by-one issue with wday for rx8130 - rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 - rtc: mpfs: fix counter upload completion condition - rtc: msc313: fix NULL deref in shared IRQ handler at probe - rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc - s390/monwriter: Reject buffer reuse with different data length - s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() - s390/process: Fix kernel thread function pointer type - s390/zcrypt: Remove the empty file - sched/fair: Fix cpu_util runnable_avg arithmetic - sched/fair: Only update stats for allowed CPUs when looking for dst group - sched: restore timer_slack_ns when resetting RT policy on fork - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT - scsi: elx: efct: Fix I/O leak on unsupported additional CDB - scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() - scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path - scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() - scsi: pm8001: Fix error code in non_fatal_log_show() - scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" - scsi: sas: Skip opt_sectors when DMA reports no real optimization hint - scsi: sg: Report request-table problems when any status is set - scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() - scsi: target: Bound PR-OUT TransportID parsing to the received buffer - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE - scsi: target: Fix hexadecimal CHAP_I handling - scsi: target: Remove tcm_loop target reset handling - scsi: ufs: Fix wrong value printed in unexpected UPIU response case - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it - sctp: fix SCTP_RESET_STREAMS stream list length limit - sctp: hold socket lock when dumping endpoints in sctp_diag - sctp: validate embedded address parameter length - sctp: validate STALE_COOKIE cause length before reading staleness - security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() - seg6: validate SRH length before reading fixed fields - selftests/bpf: Add simple strscpy() implementation - selftests/bpf: Fix bpf_iter/task_vma test - selftests/bpf: Initialize operation name before use - selftests/hid: convert the hid_bpf selftests with struct_ops - selftests/hid: Cover hid_bpf_get_data() size overflow - selftests/hid: do not manually call headers_install - selftests/hid: ensure CKI can compile our new tests on old kernels - selftests/hid: ensure we can compile the tests on kernels pre-6.3 - selftests/hid: force using our compiled libbpf headers - selftests/mm: allow PUD-level entries in compound testcase of hmm tests - selftests/mm: clarify alternate unmapping in compaction_test - selftests/mm: fix exclusive_cow test fork() handling - selftests/net: fix EVP_MD_CTX leak in tcp_mmap - selinux: check connect-related permissions on TCP Fast Open - selinux: fix incorrect execmem checks on overlayfs - seqlock: Change do_task_stat() to use scoped_seqlock_read() - seqlock: fix scoped_seqlock_read kernel-doc - seqlock: Introduce scoped_seqlock_read() - serial: 8250_mid: Disable DMA for selected platforms - serial: 8250_mid: Remove 8250_pci usage - serial: 8250_omap: clear rx_running on zero-length DMA completes - serial: msm: Disable DMA for kernel console UART - slimbus: Convert to platform remove callback returning void - slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership - slimbus: qcom-ngd-ctrl: Fix probe error path ordering - slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd - smb/client: always return a value for FS_IOC_GETFLAGS - smb: client: fix change notify replay double-free - smb: client: fix double-free in SMB2_close() replay - smb: client: fix double-free in SMB2_flush() replay - smb: client: fix double-free in SMB2_ioctl() replay - smb: client: fix double-free in SMB2_open() replay - smb/client: Fix error code in smb2_aead_req_alloc() - smb: client: Fix next buffer leak in receive_encrypted_standard() - smb: client: fix overflow in passthrough ioctl bounds check - smb: client: fix query directory replay double-free - smb: client: fix query_info() replay double-free - smb: client: harden POSIX SID length parsing - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() - smb: client: mask server-provided mode to 07777 in modefromsid - smb/client: preserve errors from smb2_set_sparse() - smb: client: reject overlapping data areas in SMB2 responses - smb: client: resolve SWN tcon from live registrations - smb: client: restrict implied bcc[0] exemption to responses without data area - smb: client: use kvzalloc() for megabyte buffer in simple fallocate - smb: client: use unaligned reads in parse_posix_ctxt() - smb: move some duplicate definitions to common/cifsglob.h - smb/server: do not require delete access for non-replacing links - soc: fsl: qe: panic on ioremap() failure in qe_reset() - soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy - sparc: led: avoid trimming a newline from empty writes - spi: dw: fix wrong BAUDR setting after resume - spi: ep93xx: fix double-free of zeropage on DMA setup failure - spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path - spi: hisi-kunpeng: Use dev_err_probe() for host registration failure - spi: meson-spifc: fix runtime PM leak on remove - spi: rpc-if: Use correct device for hardware reinitialization on resume - spi: sh-msiof: abort transfers when reset times out - spi: uniphier: Fix completion initialization order before devm_request_irq() - spi: xilinx: use FIFO occupancy register to determine buffer size - staging: media: atomisp: reduce load_primary_binaries() stack usage - staging: most: video: avoid double free on video register failure - staging: nvec: fix use-after-free in nvec_rx_completed() - staging: rtl8723bs: core: move constants to right side in comparison - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() - staging: rtl8723bs: fix OOB write in HT_caps_handler() - staging: rtl8723bs: fix spaces around binary operators - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() - staging: vme_user: bound slave read/write to the kern_buf size - staging: vme_user: fix location monitor leak in fake bridge - staging: vme_user: fix location monitor leak in tsi148 bridge - SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing - sunrpc: pin svc_xprt across the asynchronous TLS handshake callback - SUNRPC: pin upper rpc_clnt across the TLS connect_worker - SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED - sunrpc: wait for in-flight TLS handshake callback when cancel loses race - sysfs: clamp show() return value in sysfs_kf_read() - tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) - team: fix header_ops type confusion with non-Ethernet ports - thermal: hwmon: Fix critical temperature attribute removal - thermal: intel: Fix dangling resources on thermal_throttle_online() failure - time: Fix off-by-one in compat settimeofday() usec validation - tipc: fix out-of-bounds read in broadcast Gap ACK blocks - tipc: fix UAF in tipc_l2_send_msg() - tipc: fix use-after-free of the discoverer in tipc_disc_rcv() - tipc: prevent snt_unacked underflow on CONN_ACK - tipc: reject inverted service ranges from peer bindings - tipc: require net admin for TIPCv2 netlink mutators - tools lib api: Fix filename__write_int() writing uninitialized stack data - tools lib api: Fix missing null termination in filename__read_int/ull() - tools lib api: Fix mount_overload() snprintf truncation and toupper range - tools/mm/slabinfo: fix total_objects attribute name - tools/mm/slabinfo: Fix trace disable logic inversion - tools/power/x86/intel-speed-select: Harden daemon pidfile open - tools/testing: add linux/args.h header and fix radix, VMA tests - tools/virtio: check mmap return value in vringh_test - tpm: fix event_size output in tpm1_binary_bios_measurements_show - tpm: Make the TPM character devices non-seekable - tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() - tracing: Bound synthetic-field strings with seq_buf - tracing: eprobe: read the complete FILTER_PTR_STRING pointer - tracing/events: Fix to check the simple_tsk_fn creation - tracing/osnoise: Call synchronize_rcu() when unregistering - tracing: Prevent out-of-bounds read in glob matching - tracing/probes: Fix double addition of offset for @+FOFFSET - tracing: probes: fix typo in a log message - treewide: Switch/rename to timer_delete[_sync]() - udf: validate free block extents against the partition length - udf: validate sparing table length as an entry count, not a byte count - udf: validate VAT header length against the VAT inode size - udmabuf: fix DMA direction mismatch in release_udmabuf() - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() - usb: cdc_acm: Add quirk for Uniden BC125AT scanner - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() - USB: chaoskey: Fix slab-use-after-free in chaoskey_release() - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() - usb: dwc3: run gadget disconnect from sleepable suspend context - usb: free iso schedules on failed submit - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler - usb: gadget: f_fs: initialize reset_work at allocation time - usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile - usb: gadget: f_printer: take kref only for successful open - usb: gadget: function: rndis: add length check for header - usb: gadget: function: rndis: add length check to response query - usb: gadget: udc: Fix use-after-free in gadget_match_driver - usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() - usb: host: max3421: Reject hub port requests for non-existent ports - USB: idmouse: fix use-after-free on disconnect race - USB: iowarrior: fix use-after-free on disconnect - usb: iowarrior: remove inherent race with minor number - usbip: tools: support SuperSpeedPlus devices - usbip: vudc: fix NULL deref in vep_dequeue() - USB: ldusb: fix use-after-free on disconnect race - USB: legousbtower: fix use-after-free on disconnect race - USB: misc: uss720: unregister parport on probe failure - usb: mtu3: unmap request DMA on queue failure - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD - USB: serial: digi_acceleport: fix broken rx after throttle - USB: serial: digi_acceleport: fix hard lockup on disconnect - USB: serial: digi_acceleport: fix write buffer corruption - USB: serial: keyspan_pda: fix information leak - USB: serial: option: add Telit Cinterion FE990D50 compositions - usb: sl811-hcd: disable controller wakeup on remove - USB: storage: include US_FL_NO_SAME in quirks mask - usb: typec: anx7411: use devm_pm_runtime_enable() - usb: typec: class: drop PD lookup reference - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres - usb: typec: tcpm: Fix VDM type for Enter Mode commands - usb: typec: tcpm: Validate SVID index in svdm_consume_modes() - usb: typec: ucsi: cancel pending work on system suspend - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove - usb: typec: ucsi: Invert DisplayPort role assignment - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode - USB: ulpi: fix memory leak on registration failure - USB: usb-storage: ene_ub6250: restore media-ready check - usb: xhci: Fix sleep in atomic context in xhci_free_streams() - userfaultfd: gate must_wait writability check on pte_present() - vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter - vduse: hold vduse_lock across IDR lookup in open path - vduse: Requeue failed read to send_list head - veth: fix NAPI leak in XDP enable error path - vfio/mlx5: Fix racy bitfields and tighten struct layout - vfio/pci: Fix racy bitfields and tighten struct layout - vfio/pci: Latch disable_idle_d3 per device - vfio/pci: Release the VGA arbiter client on register_device() failure - vfio/pci: Use a private flag to prevent power state change with VFs - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc - vhost/net: complete zerocopy ubufs only once - vhost/vdpa: validate virtqueue index in mmap and fault paths - virtio-mmio: fix device release warning on module unload - virtio_net: disable cb when NAPI is busy-polled - virtio-net: fix len check in receive_big() - virtio_net: Support dynamic rss indirection table size - vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() - vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). - watchdog: apple: Add "apple,t8103-wdt" compatible - watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 - watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH - watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure - watchdog: unregister PM notifier on watchdog unregister - wifi: ath9k: fix OOB access from firmware tx status queue ID - wifi: cfg80211: fix grammar in MLO group key error message - wifi: mac80211: fix memory leak in ieee80211_register_hw() - wifi: mac80211: free ack status frame on TX header build failure - wifi: mt76: fix argument to ieee80211_is_first_frag() - wifi: mt76: mt7915: fix potential tx_retries underflow - wifi: mt76: mt7921: fix potential tx_retries underflow - wifi: mwifiex: fix permanently busy scans after multiple roam iterations - wifi: rt2x00: avoid full teardown before work setup in probe - wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer - wifi: rtw89: Correct data type for scan index to avoid infinite loop - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response - wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication - wifi: wcn36xx: fix OOB read from short trigger BA firmware response - workqueue: drop spurious '*' from print_worker_info() fn declaration - writeback: Avoid contention on wb->list_lock when switching inodes - writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() - writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() - writeback: Fix use after free in inode_switch_wbs_work_fn() - X.509: Fix validation of ASN.1 certificate header - x86/boot: Reject too long acpi_rsdp= values - x86/boot: Validate console=uart8250 baud rate to fix early boot hang - x86/bugs: Enable IBPB flush on BPF JIT allocation - x86/mm: Fix check/use ordering in switch_mm_irqs_off() - x86/platform/olpc: xo15: Drop wakeup source on driver removal - xen/gntdev: fix error handling in ioctl - xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] - xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path - xfrm: use compat translator only for u64 alignment mismatch - xfrm: Use the XFRM_GRO to indicate a GRO call on input - xfrm: validate selector family and prefixlen during match - xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink - xfs: dump the recovered xattri log item if corruption happens - xfs: fail recovery on a committed log item with no regions - xfs: fix stupid compiler warning - xfs: fix unreachable BIGTIME check in dquot flush validation - xfs: move ->iop_recover to xfs_defer_op_type - xfs: recreate work items when recovering intent items - xfs: resample the data fork mapping after cycling ILOCK - xfs: use null daddr for unset first bad log block - xfs: use xfs_defer_finish_one to finish recovered work items - xprtrdma: Avoid 250 ms delay on backlog wakeup - xprtrdma: Check frwr_wp_create() during connect - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot - xprtrdma: Decouple req recycling from RPC completion - xprtrdma: Document and assert reply-handler invariants - xprtrdma: Fix bcall rep leak and unbounded peek - xprtrdma: Post receive buffers after RPC completion - xprtrdma: Remove temp allocation of rpcrdma_rep objects - xprtrdma: Repost Receive buffers for malformed replies - xprtrdma: Resize reply buffers before reposting receives - xprtrdma: Return sendctx slot after Send preparation failure - xprtrdma: Sanitize the reply credit grant after parsing - xprtrdma: Use sendctx DMA state for Send signaling - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Remove rudiment CVE patches- [bot] upd: 6.6.126 -> 6.6.144 - Changelog: - 6lowpan: fix off-by-one in multicast context address compression - 6pack: propagage new tty types - 9p: avoid putting oldfid in p9_client_walk() error path - accel/qaic: Add overflow check to remap_pfn_range during mmap - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: AGDI: fix missing newline in error message - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - af_key: validate families in pfkey_send_migrate() - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() - af_unix: Give up GC if MSG_PEEK intervened. - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - af_unix: Set gc_in_progress to true in unix_gc(). - agp/amd64: Fix broken error propagation in agp_amd64_probe() - alarmtimer: Fix argument order in alarm_timer_forward() - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: asihpi: Fix potential OOB array access at reading cache - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-motu: Protect register DSP event queue positions - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: fix some typos - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda: cs35l56: Put ACPI device after setting companion - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: misc: Use guard() for spin locks - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: Don't setup bogus iov_iter for silencing - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: sc6000: Use standard print API - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: seq: Serialize UMP output teardown with event_input - ALSA: seq: ump: Use guard() for locking - ALSA: timer: Fix UAF at snd_timer_user_params() - ALSA: ua101: Reject too-short USB descriptors - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ensure that won't go past CPER allocated record - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: fix use-after-free in rawdata dedup loop - apparmor: make label_match return a consistent value - apparmor: mediate the implicit connect of TCP fast open sendmsg - apparmor: provide separate audit messages for file and policy checks - apparmor: refcount the pdb - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use passed in gfp flags in aa_alloc_null() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: cputype: Add C1-Premium definitions - arm64: cputype: Add C1-Ultra definitions - arm64: cputype: Add NVIDIA Olympus definitions - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU - arm64: errata: Mitigate TLBI errata on various Arm CPUs - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: io: Extract user memory type in ioremap_prot() - arm64: io: Rename ioremap_prot() to __ioremap_prot() - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64: mm: Batch dsb and isb when populating pgtables - arm64: mm: Don't remap pgtables for allocate vs populate - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: probes: Handle probes on hinted conditional branch instructions - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 - arm64/scs: Fix handling of advance_loc4 - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - arm64: tlb: Allow XZR argument to TLBI ops - arm64: tlb: Flush walk cache when unsharing PMD tables - arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI - arm64/xor: fix conflicting attributes for xor_block_template - ARM: 9467/1: mm: Don't use %pK through printk - ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O - ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow - ARM: allow __do_kernel_fault() to report execution of memory faults - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: fix branch predictor hardening - ARM: fix hash_name() fault - ARM: group is_permission_fault() with is_translation_fault() - ARM: integrator: Fix early initialization - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: socfpga: Fix OF node refcount leak in SMP setup - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: codecs: ab8500: Fix casting of private data - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: codecs: simple-mux: Fix enum control bounds check - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: q6asm-dai: close stream only when running - ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks - ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio - ASoC: SOF: Intel: hda-dai: remove dspless special case - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata-scsi: refactor ata_scsi_translate() - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - auxdisplay: line-display: fix OOB read on zero-length message_store() - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE - batman-adv: bla: avoid double decrement of bla.num_requests - batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface - batman-adv: bla: fix report_work leak on backbone_gw purge - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: clear current gateway during teardown - batman-adv: dat: handle forward allocation error - batman-adv: dat: prevent false sharing between VLANs - batman-adv: ensure bcast is writable before modifying TTL - batman-adv: fix fragment reassembly length accounting - batman-adv: fix integer overflow on buff_pos - batman-adv: fix (m|b)cast csum after decrementing TTL - batman-adv: fix tp_meter counter underflow during shutdown - batman-adv: frag: avoid underflow of TTL - batman-adv: frag: disallow unicast fragment in fragment - batman-adv: frag: ensure fragment is writable before modifying TTL - batman-adv: hold claim backbone gateways by reference - batman-adv: iv: recover OGM scheduling after forward packet error - batman-adv: mcast: fix use-after-free in orig_node RCU release - batman-adv: prevent ELP transmission interval underflow - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: add only finished tp_vars to lists - batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE - batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd - batman-adv: tp_meter: avoid role confusion in tp_list - batman-adv: tp_meter: avoid use of uninit sender vars - batman-adv: tp_meter: avoid window underflow - batman-adv: tp_meter: directly shut down timer on cleanup - batman-adv: tp_meter: fix fast recovery precondition - batman-adv: tp_meter: fix race condition in send error reporting - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown - batman-adv: tp_meter: handle overlapping packets - batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection - batman-adv: tp_meter: initialize dec_cwnd explicitly - batman-adv: tp_meter: initialize dup_acks explicitly - batman-adv: tp_meter: initialize last_recv_time during init - batman-adv: tp_meter: keep unacked list in ascending ordered - batman-adv: tp_meter: prevent parallel modifications of last_recv - batman-adv: tp_meter: restrict number of unacked list entries - batman-adv: tt: avoid empty VLAN responses - batman-adv: tt: don't merge change entries with different VIDs - batman-adv: tt: fix negative last_changeset_len - batman-adv: tt: fix negative tt_buff_len - batman-adv: tt: fix TOCTOU race for reported vlans - batman-adv: tt: prevent TVLV entry number overflow - batman-adv: tt: reject oversized local TVLV buffers - batman-adv: tt: track roam count per VID - batman-adv: tvlv: abort OGM send on tvlv append failure - batman-adv: tvlv: avoid race of cifsnotfound handler state - batman-adv: tvlv: enforce 2-byte alignment - batman-adv: tvlv: reject oversized TVLV packets - batman-adv: v: prevent OGM aggregation on disabled hardif - batman-adv: v: stop OGMv2 on disabled interface - bcache: fix cached_dev.sb_bio use-after-free and crash - bcache: fix uninitialized closure object - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: fix UAF in __blkcg_rstat_flush() - blk-cgroup: wait for blkcg cleanup before initializing new disk - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blktrace: fix __this_cpu_read/write in preemptible context - block: add pgmap check to biovec_phys_mergeable - block: relax pgmap check in bio_add_page for compatible zone device pages - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling - Bluetooth: bnep: Fix UAF read of dev->name - Bluetooth: bnep: reject short frames before parsing - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: btmtk: add the function to get the fw name - Bluetooth: btmtk: fix urb->setup_packet leak in error paths - Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c - Bluetooth: btmtk: rename btmediatek_data - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Allow firmware re-download when version matches - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: fix memory leak in error path of hci_alloc_dev() - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_qca: Convert timeout from jiffies to ms - Bluetooth: hci_qca: Migrate to serdev specific shutdown function - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend - Bluetooth: hci_sync: Remove remaining dependencies of hci_request - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths - Bluetooth: HIDP: fix missing length checks in hidp_input_report() - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: ISO: fix UAF in iso_recv_frame - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix backward compatibility with userspace - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: MGMT: validate Add Extended Advertising Data length - Bluetooth: MGMT: validate advertising TLV before type checks - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: Remove 3 repeated macro definitions - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() - Bluetooth: RFCOMM: validate skb length in MCC handlers - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: serialize accept_q access - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Fix NULL pointer dereference - bonding: 3ad: implement proper RCU rules for port->aggregator - bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner - bonding: add support for per-port LACP actor priority - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: fix NULL pointer dereference in actor_port_prio setting - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: print churn state via netlink - bonding: refuse to enslave CAN devices - bpf: Add CHECKSUM_COMPLETE to bpf test progs - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf, devmap: Remove unnecessary if check in for loop - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: export bpf_link_inc_not_zero. - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Forget ranges when refining tnum after JSET - bpf: Free reuseport cBPF prog after RCU grace period. - bpf: handle fake register spill to stack with BPF_ST_MEM instruction - bpf: preserve constant zero when doing partial register restore - bpf: preserve STACK_ZERO slots on partial reg spills - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Reject sleepable kprobe_multi programs at attach time - bpf: Release module BTF IDR before module unload - bpf: Remove mark_precise_scalar_ids() - bpf, skmsg: fix verdict sk_data_ready racing with ktls rx - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: fix tail fragment offset in bpf_msg_push_data - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpf, sockmap: Take state lock for af_unix iter - bpf: support non-r10 register spill/fill to/from stack in precision tracking - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpftool: Fix truncated netlink dumps - bpf: track aligned STACK_ZERO cases as imprecise spilled registers - bpf: Track equal scalars history on per-instruction level - bpf: use kvfree() for replaced sysctl write buffer - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: mcast: Fix a possible use-after-free when removing a bridge port - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: add raid stripe tree definitions - btrfs: add support for inserting raid stripe extents - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() - btrfs: move btrfs_crc32c_final into free-space-cache.c - btrfs: move btrfs_extref_hash into inode-item.h - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: read raid stripe tree from disk - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove btrfs_crc32c wrapper - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: omap-ocp2scp: Convert to platform remove callback returning void - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more) - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: enforce cache groups - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Reset DL migration state on can_attach() failure - cgroup: fix race between task migration and iteration - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix busy dentry used after unmounting - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at registration time - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: qoriq: avoid format string warning - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() - comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: Fix refcount leak in counter_alloc() error path - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: menu: Cleanup after loadavg removal - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - cpuset: Fix missing adaptation for cpuset_is_populated - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel - Remove cfb and ofb - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-tdes - fix DMA sync direction - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - copy IV using skcipher ivsize - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - Move direct access to some PSP registers out of TEE - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - modifying the order of header files - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: hisilicon/zip - remove zlib and gzip - crypto: hisilicon/zip - support deflate algorithm - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: nx - Avoid -Wflex-array-member-not-at-end warning - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - fix context leak in nx842_crypto_free_ctx - crypto: nx - Migrate to scomp API - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: qat - remove unused character device and IOCTLs - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() - crypto: qat - Return pointer directly in adf_ctl_alloc_resources - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: scatterwalk - Backport memcpy_sglist() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: testmgr - Hide ENOENT errors - crypto: testmgr - Hide ENOENT errors better - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - dcache: Limit the minimal number of bucket to two - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING - debugobjects: Do not fill_pool() if pi_blocked_on - debugobjects: Dont call fill_pool() in early boot hardirq context - debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - device property: set fwnode->secondary to NULL in fwnode_init() - dev_printk: add new dev_err_probe() helpers - devres: fix missing node debug info in devm_krealloc() - Disable -Wattribute-alias for clang-23 and newer - dlm: prevent NPD when writing a positive value to event_done - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate() - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: fsl-edma-main: Convert to platform remove callback returning void - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add missing `inline` for `dma_free_attrs` - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: check allocation under invalidate lock - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm init: ensure device probing has finished in dm-mod.waitfor= - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm log: fix out-of-bounds write due to region_count overflow - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: fix a hugetlbfs reservation statement - Documentation: ioctl-number: Extend "Include File" column width - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - Documentation: tracing: Add ring-buffer mapping - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - dpaa2-switch: do not clear any interrupts automatically - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: Balance RCU calls in drbd_adm_dump_devices() - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - driver core: reject devices with unregistered buses - drivers/base/memory: fix memory block reference leak in poison accounting - drivers/base/memory: set mem->altmap after successful device registration - Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: Bound VBIOS record-chain walk loops - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix integer overflow in bios_get_image() - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use krealloc_array() in dal_vector_reserve() - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Validate GPIO pin LUT table size before iterating - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop special case for yellow carp without discovery - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix spelling typos - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu: restart the CS if some parts of the VM are still invalidated - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Check for pdd drm file first in CRIU restore path - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 - drm/amdkfd: fix debug watchpoints for logical devices - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: fix NULL dereference in get_queue_ids() - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/si: Disregard vblank time when no displays are connected - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe - drm/bridge: it66121: acquire reset GPIO in probe - drm/bridge: megachips: remove bridge when irq request fails - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/display/dp_mst: Add protection against 0 vcpi - drm/dp: Add eDP 1.5 bit definition - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/fbdev-helper: Set and clear VGA switcheroo client from fb_info - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/hyperv: validate resolution_count and fix WIN8 fallback - drm/hyperv: validate VMBus packet size in receive callback - drm/i915/acpi: free _DSM package when no connectors - drm/i915: Constify watermark state checker - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update() - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915: Fix potential UAF in TTM object purge - drm/i915/gem: Fix phys BO pread/pwrite with offset - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915: Loop over all active pipes in intel_mbus_dbox_update - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Read Intel DPCD workaround register - drm/i915: Simplify watermark state checker calling convention - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/i915/wm: Verify the correct plane DDB entry - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations - drm/msm/dsi: don't dump registers past the mapped region - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm: Fix dma_free_attrs() buffer size - drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN - drm/msm/shrinker: Fix can_block() logic - drm/msm/snapshot: fix dumping of the unaligned regions - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm: Remove plane hsub/vsub alignment requirement for core helpers - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/ssd130x: Replace .page_height field in device info with a constant - drm/ssd130x: Store the HW buffer in the driver-private CRTC state - drm/ssd130x: Use bool for ssd130x_deviceinfo flags - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/tegra: dsi: fix device leak on probe - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/v3d: Set DMA segment size to avoid debug warnings - drm/v3d: Skip CSD when it has zeroed workgroups - drm/v3d: Store the active job inside the queue's state - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: fix krealloc() memory leak - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() - drm/virtio: Fix driver removal with disabled KMS - drm/virtio: use uninterruptible resv lock for plane updates - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - dt-bindings: net: Fix Tegra234 MGBE PTP clock - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - e1000e: Unroll PTP in probe error handling - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - efi: Allocate runtime workqueue before ACPI init - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix "BUG: Bad page state in z_erofs_do_read_page" - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - err.h: use __always_inline on all error pointer helpers - esp: fix skb leak with espintcp and async crypto - eth: bnxt: always recalculate features after XDP clearing, fix null-deref - ethtool: eeprom: add missing ethnl_ops_begin() / _complete() during fallback - ethtool: eeprom: add more safeties to EEPROM Netlink fallback - ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() - eventpoll: fix ep_remove struct eventpoll / struct file UAF - eventpoll: Fix integer overflow in ep_loop_check_proc() - eventpoll: kill __ep_remove() - eventpoll: move epi_fget() up - eventpoll: rename ep_remove_safe() back to ep_remove() - eventpoll: split __ep_remove() - eventpoll: use hlist_is_singular_node() in __ep_remove() - exfat: fix potential use-after-free in exfat_find_dir_entry() - exit: prevent preemption of oopsing TASK_DEAD task - exit: Sleep at TASK_IDLE when waiting for application core dump - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert bd_bitmap_page to bd_bitmap_folio - ext4: convert bd_buddy_page to bd_buddy_folio - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: get rid of ppath in ext4_convert_unwritten_extents_endio() - ext4: get rid of ppath in ext4_ext_convert_to_initialized() - ext4: get rid of ppath in ext4_ext_create_new_leaf() - ext4: get rid of ppath in ext4_ext_handle_unwritten_extents() - ext4: get rid of ppath in ext4_ext_insert_extent() - ext4: get rid of ppath in ext4_find_extent() - ext4: get rid of ppath in ext4_split_convert_extents() - ext4: get rid of ppath in ext4_split_extent() - ext4: get rid of ppath in ext4_split_extent_at() - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: publish jinode after initialization - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix to round down start offset of fallocate for pin file - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - f2fs: fix zoned block device information initialization - f2fs: keep atomic write retry from zeroing original data - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - f2fs: Use sysfs_emit_at() to simplify code - f2fs: validate ACL entry sizes in f2fs_acl_from_disk() - f2fs: validate compress cache inode only when enabled - f2fs: zone: fix to avoid inconsistence in between SIT and SSA - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var - fbdev: fix use-after-free in store_modes() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: modedb: fix a possible UAF in fb_find_mode() - fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: offb: fix PCI device reference leak on probe failure - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros - file: add fput() cleanup helper - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: dmi: Correct an indexing error in dmi.h - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fork: defer linking file vma until vma is fully initialized - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fpga: region: fix use-after-free in child_regions_with_firmware() - fs: add for 'init_fs' - fs/adfs: validate nzones in adfs_validate_bblk() - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/ntfs3: validate rec->used in journal-replay file record check - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - ftrace: Check against is_kernel_text() instead of kaslr_offset() - ftrace: Do not over-allocate ftrace memory - ftrace: Have ftrace pages output reflect freed pages - ftrace: Test mcount_loc addr before calling ftrace_call_addr() - ftrace: Update the mcount_loc check of skipped entries - fuse: Check for large folio with SPLICE_F_MOVE - fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject fuse_notify() pagecache ops on directories - fuse: reject oversized dirents in page cache - fuse: re-lock request before replacing page cache folio - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - genetlink: Use internal flags for multicast groups - gfs2: Add metapath_dibh helper - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: fiemap page fault fix - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: fix use-after-free in gfs2_qd_dealloc - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Improve gfs2_consist_inode() usage - gfs2: prevent NULL pointer dereference during unmount - gfs2: Retries missing in gfs2_{rename,exchange} - gfs2: Validate i_depth for exhash directories - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpio: cdev: check if uAPI v2 config attributes are correctly zeroed - gpiolib: acpi: Fix gpio count with string references - gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) - gpio: mvebu: fix NULL pointer dereference in suspend/resume - gpio: mxc: fix irq_high handling - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: rockchip: convert bank->clk to devm_clk_get_enabled() - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: tegra: fix irq_release_resources calling enable instead of disable - gro: change the BUG_ON() in gro_pull_from_frag0() - gve: defer interrupt enabling until NAPI registration - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hdlc_ppp: sync per-proto timers before freeing hdlc state - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: core: Fix size_t specifier in hid_report_raw_event() - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: Check to ensure report responses match the request - HID: pass the buffer size to hid_report_raw_event - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: quirks: really enable the intended work around for appledisplay - HID: roccat: fix use-after-free in roccat_report_event - HID: uclogic: Fix regression of input name assignment - HID: usbhid: fix deadlock in hid_post_reset() - HID: wacom: Fix OOB write in wacom_hid_set_device_mode() - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hpfs: fix a crash if hpfs_map_dnode_bitmap fails - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Fix trace oddity - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hsr: Remove WARN_ONCE() in hsr_addr_is_self(). - hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf - hv_sock: fix ARM64 support - hv: utils: handle and propagate errors in kvp_register - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: (axi-fan-control) Make use of dev_err_probe() - hwmon: (axi-fan-control) Use device firmware agnostic API - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer - hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR - hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple - hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer - hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() - hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() - hwmon: (pmbus/adm1266) reject implausible blackbox record_count - hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors - hwmon: (pmbus/adm1266) seed timestamp from the real-time clock - hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with pmbus_lock - hwmon: (pmbus/adm1266) serialize NVMEM blackbox read with pmbus_lock - hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: cp2615: replace deprecated strncpy with strscpy - i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: stm32f7: fix timing computation ignoring i2c-analog-filter - i2c: stub: Reject I2C block transfers with invalid length - i2c: tegra: Don't mark devices with pins as IRQ safe - i2c: tegra: Fix NOIRQ suspend/resume - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: fix VLAN filter lost on add/delete race - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix double-free of tx_buf skb - ice: fix locking in ice_dcb_rebuild() - ice: Fix memory leak in ice_set_ringparam() - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix retry for AQ command 0x06EE - ice: fix setting promisc mode while adding VID filter - ice: fix VF queue configuration with low MTU values - ice: reintroduce retry mechanism for indirect AQ - ice: Remove jumbo_remove step from TX path - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: icmp_msgs_per_sec and icmp_msgs_burst sysctls become per netns - icmp: move icmp_global.credit and icmp_global.stamp to per netns storage - icmp: prevent possible overflow in icmp_global_allow() - ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() - igc: fix missing update of skb->tail in igc_xmit_frame() - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: npcm: Convert to platform remove callback returning void - iio: adc: npcm: fix unbalanced clk_disable_unprepare() - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw - iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux - iio: buffer: Fix wait_queue not being removed - iio: buffer: hw-consumer: fix use-after-free in error path - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: scd30: fix division by zero in write_raw - iio: chemical: scd30: Use guard(mutex) to allow early returns - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: common: st_sensors: Fix use of uninitialize device structs - iio: dac: ad5686: acquire lock when doing powerdown control - iio: dac: ad5686: fix input raw value check - iio: dac: ad5686: fix ref bit initialization for single-channel parts - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: dac: max5821: fix return value check in powerdown sync - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: gyro: adis16260: fix division by zero in write_raw - iio: gyro: itg3200: fix i2c read into the wrong stack location - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: bh1780: fix PM runtime leak on error path - iio: light: cm3323: fix reg_conf not being initialized correctly - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix scan_type struct - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: ssp_sensors: cancel delayed work_refresh on remove - iio: temperature: tsys01: fix broken PROM checksum validation - iio: Use IRQF_NO_THREAD - ima: check return value of crypto_shash_final() in boot aggregate - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: add indirect call wrapper for getfrag() calls - inet: frags: add inet_frag_queue_flush() - inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush - inet: frags: flush pending skbs in fqdir_pre_exit() - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) - Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard - Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem - Input: elan_i2c - validate firmware size before use - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() - Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size - Input: xpad - add "Nova 2 Lite" from GameSir - Input: xpad - add support for ASUS ROG RAIKIRI II - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - Input: xpad - fix out-of-bounds access for Share button - iomap: allocate s_dio_done_wq for async reads as well - iomap: don't revert iov_iter on partially completed buffered writes - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommu, debugobjects: avoid gcc-16.1 section mismatch warnings - iommufd: Fix a race with concurrent allocation and unmap - iommufd: vfio compatibility extension check for noiommu mode - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() - ip6_vti: set netns_immutable on the fallback device. - ip6: vti: Use ip6_tnl.net in vti6_changelink(). - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). - ipc: don't audit capability check in ipc_permissions() - ipc: limit next_id allocation to the valid ID range - ipc/shm: serialize orphan cleanup with shm_nattch updates - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: Fix rcu_read_unlock to srcu_read_unlock in handle_read_event_rsp - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipmi:ssif: Clean up kthread on errors - ipmi:ssif: Fix a shutdown race - ipmi:ssif: NULL thread on error - ipmi:ssif: Remove unnecessary indention - ipv4: account for fraggap on the paged allocation path - ipv4: add new arguments to udp_tunnel_dst_lookup() - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 - ipv4: remove "proto" argument from udp_tunnel_dst_lookup() - ipv4: rename and move ip_route_output_tunnel() - ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options - ipv6: account for fraggap on the paged allocation path - ipv6: add NULL checks for idev in SRv6 paths - ipv6/addrconf: annotate data-races around devconf fields (II) - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: exthdrs: refresh nh after handling HAO option - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() - ipv6: Fix a potential NPD in cleanup_prefix_route() - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: fix possible infinite loop in fib6_select_path() - ipv6: fix possible infinite loop in rt6_fill_node() - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: mcast: Fix use-after-free when processing MLD queries - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rename and move ip6_dst_lookup_tunnel() - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: sit: reload inner IPv6 header after GSO offloads - ipv6: use RCU in ip6_xmit() - ipv6: validate extension header length before copying to cmsg - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: clear the svc scheduler ptr early on edit - ipvs: fix MTU check for GSO packets in tunnel mode - ipvs: fix NULL deref in ip_vs_add_service error path - ipvs: skip ipv6 extension headers for csum checks - irqchip/ath79-cpu: Remove unused function - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - ixgbevf: fix use-after-free in VEPA multicast source pruning - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Leave objtool binary around with 'make clean' - kexec: derive purgatory entry from symbol - KEYS: fix overflow in keyctl_pkey_params_get_2() - keys: Pin request_key_auth payload in instantiate paths - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() - ksmbd: add durable scavenger timer - ksmbd: add support for supplementary groups - ksmbd: avoid reclaiming expired durable opens by the client - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: close durable scavenger races against m_fp_list lookups - ksmbd: Compare MACs in constant time - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers - ksmbd: fix null pointer dereference in compare_guid_key() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds read in smb_check_perm_dacl() - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops - ksmbd: reject non-VALID session in compound request branch - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: scope conn->binding slowpath to bound sessions only - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate owner of durable handle on reconnect - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Fix the month in the name of the failure directory - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - kunit: config: Enable KUNIT_DEBUGFS by default - kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: PMU: Preserve AArch32 counter low bits - KVM: arm64: Remove VPIPT I-cache handling - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Fold requested virtual interrupt check into has_nested_events() - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path - KVM: SVM: Flush the current TLB when transitioning from xAVIC => x2AVIC - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: VMX: Update SVI during runtime APICv activation - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: Fix KVM_GET_MSRS stack info leak - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Fix shadow paging use-after-free due to unexpected role - KVM: x86: Fix Xen hypercall tracepoint argument assignment - KVM: x86: hyper-v: Bound the bank index when querying sparse banks - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - l2tp: do not use sock_hold() in pppol2tp_session_get_sock() - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - leds: lgm-sso: Remove duplicate assignments for priv->mmap - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libbpf: Fix -Wdiscarded-qualifiers under C23 - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: handle rbtree insertion error in decode_choose_args() - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - locking: Fix rwlock support in - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Add WriteCombine shadow mapping in KASAN - LoongArch: Add writecombine support for DMW-based ioremap() - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: kprobes: Fix handling of fatal unrecoverable recursions - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove unused code to avoid build warning - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - loop: fix partition scan race between udev and loop_reread_partitions() - lsm: add backing_file LSM hooks - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac802154: llsec: add skb_cow_data() before in-place crypto - macsec: fix replay protection at XPN lower-PN wrap - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: add sanity check for channel array - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mailbox: Use of_property_match_string() instead of open-coding - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix data lost for writemostly rdev - md/raid1,raid10: don't ignore IO flags - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: fix race between unregister and urb/irq callbacks - media: rc: igorplugusb: fix control request setup packet - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: fix inverted error logic - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: tegra-video: Use accessors for pad config 'try_*' fields - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si - media: vidtv: fix pass-by-value structs causing MSAN warnings - memfd: deny writeable mappings when implying SEAL_WRITE - memory: mtk-smi: Convert to platform remove callback returning void - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - mfd: omap-usb-host: Convert to platform remove callback returning void - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Convert to platform remove callback returning void - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: DEC: Prevent initial console buffer from landing in XKPHYS - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: fix DMA address corruption due to find_vma misuse - misc: fastrpc: Fix NULL pointer dereference in rpmsg callback - misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context - misc: fastrpc: fix use-after-free race in fastrpc_map_create - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Fix host controller programming for fixed driver type - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: litex_mmc: Set mandatory idle clocks before CMD0 - mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: add signal voltage switch in sdhci_resume_host - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/ops-common: call folio_test_lru() after folio_get() - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() - mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/huge_memory: update file PMD counter before folio_put() - mm/hugetlb: avoid false positive lockdep assertion - mm/hugetlb_cma: round up per_node before logging it - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm/hugetlb: rename folio_putback_active_hugetlb() to folio_putback_hugetlb() - mm/hugetlb: rename isolate_hugetlb() to folio_isolate_hugetlb() - mm/hugetlb: restore reservation on error in hugetlb folio copy paths - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory: fix spurious warning when unmapping device-private/exclusive pages - mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node() - mm/migrate: don't call folio_putback_active_hugetlb() on dst hugetlb folio - mm/page_alloc: clear page->private in free_pages_prepare() - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/tracing: rss_stat: ensure curr is false from kthread context - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - module: Fix kernel panic when a symbol st_shndx is out of bounds - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: add-addr: always drop other suboptions - mptcp: allow subflow rcv wnd to shrink - mptcp: cleanup fallback dummy mapping generation - mptcp: close TOCTOU race while computing rcv_wnd - mptcp: do not drop partial packets - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix missing wakeups in edge scenarios - mptcp: fix receive space timestamp initialization - mptcp: fix retransmission loop when csum is enabled - mptcp: fix rx timestamp corruption on fastopen - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: handle first subflow closing consistently - mptcp: introduce the mptcp_init_skb helper - mptcp: pm: ADD_ADDR rtx: allow ID 0 - mptcp: pm: ADD_ADDR rtx: always decrease sk refcount - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: free sk if last - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient - mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mptcp: reset rcv wnd on disconnect - mptcp: sockopt: check timestamping ret value - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: sync the msk->sndbuf at accept() time - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mptcp: use plain bool instead of custom binary enum - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: Convert to platform remove callback returning void - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spinand: Fix kernel doc - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()` - mtd: spi-nor: sst: Fix SST write failure - mtd: spi-nor: sst: Fix write enable before AAI sequence - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - myri10ge: avoid uninitialized variable use - neighbour: add RCU protection to neigh_tables[] - neigh: let neigh_xmit take skb ownership - net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add support for segmenting TCP fraglist GSO packets - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: ag71xx: check error for platform_get_irq - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: Annotate sk->sk_write_space() for UDP SOCKMAP. - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: increase WoL poll timeout - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: keep RBUF EEE/PM disabled - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: Remove custom ndo_poll_controller() - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net: bonding: add broadcast_neighbor option for 802.3ad - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix NULL pointer dereference in bond_do_ioctl() - net: bonding: fix use-after-free in bond_xmit_broadcast() - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: Flush multicast groups when snooping is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - netconsole: propagate device name truncation in dev_name_store() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix potential unregister of netdev that has not been registered yet - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: mt7530: fix FDB entries not aging out with short timeout - net: dsa: mt7530: preserve VLAN tags on trapped link-local frames - net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw - net: dsa: properly keep track of conduit reference - net: dsa: realtek: rtl8365mb: fix mode mask calculation - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: cortina: Carry over frag counter - net: ethernet: cortina: Drop half-assembled SKB - net: ethernet: cortina: Make RX SKB per-port - net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix pinctrl default state restore order on resume - net: fec: fix the PTP periodic output sysfs interface - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: bitwise: add support for doing AND, OR and XOR directly - netfilter: bitwise: rename some boolean operation functions - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: bridge: make ebt_snat ARP rewrite writable - netfilter: conntrack: add missing netlink policy validations - netfilter: conntrack_irc: fix possible out-of-bounds read - netfilter: conntrack: remove sprintf usage - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check - netfilter: ctnetlink: ensure safe access to master conntrack - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: ebtables: fix OOB read in compat_mtw_from_user - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_hbh: reject oversized option lists - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: stop hash:* range iteration at end - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nf_log: validate MAC header was set before dumping it - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nf_queue: hold bridge skb->dev while queued - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix dst corruption in same register operation - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_ct: bail out on template ct in get eval - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag - netfilter: nft_fib: fix stale stack leak via the OIFNAME register - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_inner: Fix IPv6 inner_thoff desync - netfilter: nft_osf: restrict it to ipv4 - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_tunnel: fix use-after-free on object destroy - netfilter: reject zero shift in nft_bitwise - netfilter: require Ethernet MAC header before using eth_hdr() - netfilter: skip recording stale or retransmitted INIT - netfilter: synproxy: add mutex to guard hook reference counting - netfilter: synproxy: refresh tcphdr after skb_ensure_writable - netfilter: x_tables: avoid leaking percpu counter pointers - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: xtables: restrict several matches to inet family - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: x_tables: unregister the templates first - netfilter: xt_cpu: prefer raw_smp_processor_id - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_NFQUEUE: prefer raw_smp_processor_id - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - net: Fix icmp host relookup triggering ip_rt_bug - net: fix segmentation of forwarding fraglist GRO - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix overrun check in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: ftgmac100: fix ring allocation unwind on open failure - net: garp: fix unsigned integer underflow in garp_pdu_parse_attr - net: gro: don't merge zcopy skbs - net: gso: fix tcp fraglist segmentation after pull from frag_list - net: guard timestamp cmsgs to real error queue skbs - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: defer node table free until after RCU readers - net: hsr: fix potential OOB access in supervision frame handling - net: hsr: fix VLAN add unwind on slave errors - net: ifb: report ethtool stats over num_tx_queues - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: ipv4: stop checking crypto_ahash_alignmask - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: stop checking crypto_ahash_alignmask - net/iucv: fix locking in .getsockopt - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - netlabel: validate unlabeled address and mask attribute lengths - net: lan743x: permit VLAN-tagged packets up to configured MTU - net: lan966x: avoid unregistering netdev on register failure - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: queue tie-off or disable during WOL suspend - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: Add NULL guards in teardown path to prevent panic on attach failure - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mana: validate rx_req_idx to prevent out-of-bounds array access - net: mctp: ensure our nlmsg responses are initialised - net: mctp: fix don't require received header reserved bits to be zero - net: mctp i2c: check length before marking flow active - net: mctp-i2c: fix duplicate reception of old data - net/mlx4: avoid GCC 10 __bad_copy_from() false positive - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: Do not restore destination-less TC rules - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Reorder completion before putting command entry in cmd_work_handler - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mv643xx: fix OF node refcount - net: mvpp2: Add metadata support for xdp mode - net: mvpp2: build skb from XDP-adjusted data on XDP_PASS - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: mvpp2: limit XDP frame size to the RX buffer - net: mvpp2: refill RX buffers before XDP or skb use - net: mvpp2: sync RX data at the hardware packet offset - net: ncsi: fix skb leak in error paths - net: netconsole: move newline trimming to function - net: netlink: don't set nsid on local notifications - net: netlink: fix sending unassigned nsid after assigned one - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - netns-ipv4: reorganize netns_ipv4 fast path variables - net: openvswitch: Avoid releasing netdev before teardown completes - net: openvswitch: fix possible kfree_skb of ERR_PTR - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phonet: free phonet_device after RCU grace period - net: phy: add Rust Asix PHY driver - net: phy: aquantia: move to separate directory - net: phy: c45: add genphy_c45_pma_read_ext_abilities() function - net: phy: clean the sfp upstream if phy probing fails - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: DP83TC811: add reading of abilities - net: phy: move at803x PHY driver to dedicated directory - net: phy: qcom: at803x: Use the correct bit to disable extended next page - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() - net: rds: clear i_sends on setup unwind - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: Optimize rds_ib_laddr_check - net/rds: rds_sendmsg should not discard payload_len - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net/sched: act_api: use RCU with deferred freeing for action lifecycle - net: sched: act_csum: validate nested VLAN headers - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flower: revert unintended changes - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net/sched: fix pedit partial COW leading to page cache corruption - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: sfp: improve Nokia GPON sfp fixup - net: sfp: re-implement ignoring the hardware TX_FAULT signal - net: skb: fix cross-cache free of KFENCE-allocated skb head - net: skbuff: fix missing zerocopy reference in pskb_carve helpers - net: skbuff: fix pskb_carve leaking zcopy pages - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skmsg: preserve sg.copy across SG transforms - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint - net/smc: Do not re-initialize smc hashtables - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net: tcp: accept old ack during closing - net/tcp-md5: Fix MAC comparison to be constant-time - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring - net: tls: fix strparser anchor skb leak on offload RX setup failure - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: tls: prevent chain-after-chain in plain text SG - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: iosm: fix potential memory leaks in ipc_imem_init() - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: fix out-of-bounds read in HCP header parsing - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: llcp: Fix use-after-free in llcp_sock_release() - nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfnetlink_osf: validate individual option lengths in fingerprints - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nfsd: check get_user() return when reading princhashlen - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix posix_acl leak on SETACL decode failure - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Fix SECINFO_NO_NAME decode error cleanup - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - NFS: Fix a deadlock involving nfs_release_folio() - nfs: pass explicit offset/count to trace events - NFS: Prevent resource leak in nfs_alloc_server() - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - ntfs3: reject direct userspace writes to reserved $LX* xattrs - ntfs: ->d_compare() must not block - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: layouts: onie-tlv: fix hang on unknown types - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: fix missed admin queue sq doorbell write - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet-tcp: fix race between ICReq handling and queue teardown - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - objtool: Remove max symbol name length limitation - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: reject oversized group bitmap descriptors - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep: restructured interrupt handlers - octeon_ep: set backpressure watermark for RX queues - octeon_ep: support Octeon CN10K devices - octeon_ep: support to fetch firmware info - octeontx2-af: CGX: add bounds check to cgx_speed_mbps index - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: devlink health: use retained error fmsg API - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: fix memory leak in rvu_setup_hw_resources() - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: npc: Fix CPT channel mask in npc_install_flow - octeontx2-af: replace deprecated strncpy with strscpy - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: avoid double free of pool->stack on AQ init failure - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: cap upcall PID array size and pre-size vport replies - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - ovl: Fix uninit-value in ovl_fill_real - padata: Fix pd UAF once and for all - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove comment for reorder_work - padata: Remove cpu online check from cpu add and removal - params: Replace __modinit with __init_or_module - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - parport: Fix race between port and client registration - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Stop ruling out unbound devices as error source - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: endpoint: Remove unused field in struct pci_epf_group - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Log bridge info when first enumerating bridge - PCI: Log bridge windows conditionally - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI: Move pci_read_bridge_windows() below individual window accessors - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: Supply bridge device, not secondary bus, to read window details - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: Update BAR # and window messages - PCI: Use resource names in PCI log messages - PCI: Use resource_set_range() that correctly sets ->end - PCMCIA: Fix garbled log messages for KERN_CONT - pcnet32: stop holding device spin lock during napi_complete_done - pds_core: add an error code check in pdsc_dl_info_get - pds_core: ensure null-termination for firmware version strings - pds_core: fix debugfs_lookup dentry leak and error handling - pds_core: fix error handling in pdsc_devcmd_wait - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf branch: Avoid incrementing NULL - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf: Extract a few helpers - perf: Fix dangling cgroup pointer in cpuctx - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf lock: Fix option value type in parse_max_stack - perf: Make sure to use pmu_ctx->pmu for groups - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf unwind-libdw: Fix invalid reference counts - perf util: Kill die() prototype, dead for a long time - perf/x86/intel/uncore: Skip discovery table for offline dies - phonet: Pass ifindex to fill_addr(). - phonet: Pass net and ifindex to phonet_address_notify(). - phonet/pep: disable BH around forwarded sk_receive_skb() - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access - phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: tegra: xusb: Fix per-pad high-speed termination calibration - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - pidfd: refuse access to tasks that have started exiting harder - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp_accel: Check ACPI_COMPANION() against NULL - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL - platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery - platform/x86: ISST: Correct locked bit width - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - pmdomain: ti: omap_prm: Fix a reference leak on device node - PM: hibernate: Don't ignore return from set_memory_ro() - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: Fix a deadlock when returning a delegation during open() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - pNFS: Fix use-after-free in pnfs_update_layout() - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - powerpc/warp: Fix error handling in pika_dtm_thread - power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - pstore/ram: fix resource leak when ioremap() fails - ptp: vclock: Switch from RCU to SRCU - ptrace: Convert ptrace_attach() to use lock guards - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qed: fix double free in qed_cxt_tables_alloc() - quota: fix livelock between quotactl and freeze_super - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - r8152: handle the return value of usb_reset_device() - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu() - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - rcu: s/boost_kthread_mutex/kthread_mutex - RDMA/bnxt_re: zero shared page before exposing to userspace - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix a couple of obvious typos in comments - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/core: Prefer NLA_NUL_STRING - RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA: Move DMA block iterator logic into dedicated files - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: Fix use-after-free in path file creation cleanup - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/siw: Reject MPA FPDU length underflow before signed receive math - RDMA/srp: bound SRP_RSP sense copy by the received length - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/umem: fix kernel-doc warnings - RDMA/umem: Fix truncation for block sizes >= 4G - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - rds: mark snapshot pages dirty in rds_info_getsockopt() - regmap: Synchronize cache for the page selector - regset: use kvzalloc() for regset_get_alloc() - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: fix locking in regulator_resolve_supply() error path - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: pca9450: Make IRQ optional - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - resource: Add resource set range and size helpers - Revert "af_unix: Reject SIOCATMARK on non-stream sockets" - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx" - Revert "crypto: nx - fix context leak in nx842_crypto_free_ctx" - Revert "crypto: nx - Migrate to scomp API" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "ice: fix double-free of tx_buf skb" - Revert "ice: Remove jumbo_remove step from TX path" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "perf unwind-libdw: Fix invalid reference counts" - Revert "ptp: add testptp mask test" - Revert "rust: pin-init: add references to previously initialized fields" - Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors" - Revert "s390/cio: Update purge function to unregister the unused subchannels" - Revert "selftest/ptp: update ptp selftest to exercise the gettimex options" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" - Revert "wireguard: device: enable threaded NAPI" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - Revert "x86/vdso: Fix output operand size of RDPID" - Revert "xattr: switch to CLASS(fd)" - ring-buffer: Fix reporting of missed events in iterator - ring-buffer: Remove ring_buffer_read_prepare_sync() - riscv: kgdb: fix several debug register assignment bugs - riscv: Sanitize syscall table indexing under speculation - rnbd-srv: Zero the rsp buffer before using it - romfs: check sb_set_blocksize() return value - rpmsg: char: Fix use-after-free on probe error path - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: abx80x: Disable alarm feature if no interrupt attached - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: internal: init: document load-bearing fact of field accessors - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg - rxrpc: Fix data-race warning and potential load/store tearing - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: Fix the ACK parser to extract the SACK table for parsing - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: convert sprintf()/snprintf() to sysfs_emit() - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cio: make sch->lock spinlock pointer a member - s390/cio: use generic driver_override infrastructure - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input before trimming a newline - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf: Disable register readout on sampling events - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/fair: Fix pelt clock sync when entering idle - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scripts/sorttable: Add helper functions for Elf_Ehdr - scripts/sorttable: Add helper functions for Elf_Shdr - scripts/sorttable: Add helper functions for Elf_Sym - scripts/sorttable: Allow matches to functions before function entry - scripts/sorttable: Always use an array for the mcount_loc sorting - scripts/sorttable: Convert Elf_Ehdr to union - scripts/sorttable: Convert Elf_Sym MACRO over to a union - scripts/sorttable: Fix endianness handling in build-time mcount sort - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly - scripts/sorttable: Have mcount rela sort use direct values - scripts/sorttable: Have the ORC code use the _r() functions to read - scripts/sorttable: Make compare_extable() into two functions - scripts/sorttable: Move code from sorttable.h into sorttable.c - scripts/sorttable: Remove unneeded Elf_Rel - scripts/sorttable: Remove unused macro defines - scripts/sorttable: Remove unused write functions - scripts/sorttable: Replace Elf_Shdr Macro with a union - scripts/sorttable: Use a structure of function pointers for elf helpers - scripts/sorttable: Use normal sort if theres no relocs in the mcount section - scripts/sorttable: Use uint64_t for mcount sorting - scripts/sorttable: Zero out weak functions in mcount_loc table - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues - scsi: csiostor: Fix dereference of null pointer rn - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: isci: Fix use-after-free in device removal path - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Make sg_sysfs_class constant - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: core: Fix integer overflow in UNMAP bounds check - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() - scsi: target: iscsi: Validate CHAP_R length before base64 decode - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Fix use-after free in init error and remove paths - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - sctp: diag: reject stale associations in dump_one path - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - sctp: fix race between sctp_wait_for_connect and peeloff - sctp: fix uninit-value in __sctp_rcv_asconf_lookup() - sctp: purge outqueue on stale COOKIE-ECHO handling - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - sctp: stream: fully roll back denied add-stream state - security/keys: fix missed RCU read section on lookup - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: add stack access precision test - selftests/bpf: Add test to ensure kprobe_multi is not sleepable - selftests/bpf: Tests for per-insn sync_linked_regs() precision tracking - selftests/bpf: Update comments find_equal_scalars->sync_linked_regs - selftests/bpf: validate fake register spill/fill precision backtracking logic - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros - selftests/bpf: validate STACK_ZERO is preserved on subreg spill - selftests/bpf: validate zero preservation for sub-slot loads - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/memfd: delete unused declarations - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: skip migration tests if NUMA is unavailable - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: add test for extra_subflows underflow on userspace PM - selftests: mptcp: drop nanoseconds width specifier - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selftests/powerpc: Re-order *FLAGS to follow lib.mk - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selinux: don't reserve xattr slot when we won't fill it - selinux: fix overlayfs mmap() and mprotect() access checks - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serdev: make serdev_bus_type const - serdev: Provide a bustype shutdown function - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: altera_jtaguart: handle uart_add_one_port() failures - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: dz: Convert to use a platform device - serial: dz: Fix bootconsole handover lockup - serial: dz: Fix bootconsole message clobbering at chip reset - serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ - serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero - serial: qcom-geni: fix UART_RX_PAR_EN bit position - serial: samsung_tty: Use port lock wrappers - serial: sh-sci: fix memory region release in error path - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - serial: zs: Convert to use a platform device - serial: zs: Fix bootconsole handover lockup - serial: zs: Fix swapped RI/DSR modem line transition counting - serial: zs: Switch to using channel reset - sfc: fix error code in efx_devlink_info_running_versions() - sh: platform_early: remove pdev->driver_override check - signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() - slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock - slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD - slimbus: qcom-ngd-ctrl: fix OF node refcount - slimbus: qcom-ngd-ctrl: Fix up platform_driver registration - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb: client: fix OOB reads parsing symlink error response - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() - smb: client: reject userspace cifs.spnego descriptions - smb: client: require a full NFS mode SID before reading mode bits - smb: client: require net admin for CIFS SWN netlink - smb: client: Use FullSessionKey for AES-256 encryption key derivation - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: common: change the data type of num_aces to le16 - smb: move some duplicate definitions to common/smbacl.h - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get() - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc: qcom: ocmem: use scoped device node handling to simplify error paths - soc: qcom: smem: handle ENOMEM error during probe - soc/tegra: cbb: Set ERD on resume for err interrupt - soc/tegra: pmc: Fix unsafe generic_handle_irq() call - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: geni-qcom: Check DMA interrupts early in ISR - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: microchip-core-qspi: Use helper function devm_clk_get_enabled() - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix runtime pm leak on unbind - spi: qup: fix controller deregistration - spi: qup: fix error pointer deref after DMA setup failure - spi: rockchip: fix controller deregistration - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: spi-ti-qspi: Convert to platform remove callback returning void - spi: spi-ti-qspi: switch to use modern name - spi: sprd: fix controller deregistration - spi: sprd: fix error pointer deref after DMA setup failure - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: st-ssc4: switch to use modern name - spi: sun4i: fix controller deregistration - spi: sun4i: switch to use modern name - spi: sun6i: fix controller deregistration - spi: sun6i: switch to use modern name - spi: syncuacer: fix controller deregistration - spi: synquacer: switch to use modern name - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: ti-qspi: fix controller deregistration - spi: ti-qspi: fix use-after-free after DMA setup failure - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: uniphier: switch to use modern name - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: wpcm-fiu: Fix uninitialized res - spi: wpcm-fiu: Simplify with dev_err_probe() - spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - spi: zynq-qspi: switch to use modern name - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - string: add mem_is_zero() helper to check if memory area is all zeros - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - svcrdma: Clean up comment in svc_rdma_accept() - svcrdma: Increase the per-transport rw_ctx count - svcrdma: Reduce the number of rdma_rw contexts per-QP - svcrdma: Remove queue-shortening warnings - sysctl: fix uninitialized variable in proc_do_large_bitmap - sysfs: don't remove existing directory on update failure - tap: free page on error paths in tap_get_user_xdp() - taskstats: set version in TGID exit notifications - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: call sk_data_ready() after listener migration - tcp: defer regular ACK while processing socket backlog - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses. - tcp: Fix imbalanced icsk_accept_queue count. - tcp: optimize inet_use_bhash2_on_bind() - tcp: Rearrange tests in inet_csk_bind_conflict(). - tcp: restrict SO_ATTACH_FILTER to priv users - tcp: Set pingpong threshold via sysctl - tcp: tcp_tx_timestamp() must look at the rtx queue - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address. - tee: optee: prevent use-after-free when the client exits before the supplicant - test_kprobes: clear kprobes between test runs - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thunderbolt: Bound root directory content to block size - thunderbolt: Clamp XDomain response data copy to allocation size - thunderbolt: Fix property read in nhi_wake_supported() - thunderbolt: Limit XDomain response copy to actual frame size - thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() - thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow - thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() - thunderbolt: Reject zero-length property entries in validator - thunderbolt: Validate XDomain request packet size before type cast - time: Fix off-by-one in settimeofday() usec validation - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix double-free in tipc_buf_append() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done - tls: Preserve sk_err across recvmsg() when data has been copied - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tools/rv: Fix cleanup after failed trace setup - tpm: avoid -Wunused-but-set-variable - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: branch: Fix inverted check on stat tracer registration - tracing: Do not call map->ops->elt_free() if elt_alloc() fails - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing/probes: Point the error offset correctly for eprobe argument error - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Rebuild full_name on each hist_field_name() call - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: pch_uart: add check for dma_alloc_coherent() - tty: serial: samsung: Remove redundant port lock acquisition in rx helpers - tty: serial: samsung: use u32 for register interactions - tun: free page on build_skb failure in tun_xdp_one() - tun: free page on short-frame rejection in tun_xdp_one() - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: clear skb->dev before running a sockmap verdict - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - unshare: fix unshare_fs() handling - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - USB: cdc-acm: Fix bit overlap and move quirk definitions to header - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix request skipping after clearing halt - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure - usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: core: convert ci_role_switch to local variable - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - usb: core: Fix SuperSpeed root hub wMaxPacketSize - usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: Fix use after free in debug code - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: dwc3: xilinx: fix error handling in zynqmp init error paths - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports - usb: gadget: f_fs: copy only received bytes on short ep0 read - usb: gadget: f_hid: fix device reference leak in hidg_alloc() - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: net2280: Fix double free in probe error path - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usbip: vudc: Fix use after free bug in vudc_remove due to race condition - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - usb: musb: omap2430: Fix use-after-free in omap2430_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: belkin_sa: validate interrupt status length - USB: serial: cypress_m8: fix memory corruption with small endpoint - USB: serial: cypress_m8: validate interrupt packet headers - USB: serial: digi_acceleport: fix memory corruption with small endpoints - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() - USB: serial: io_ti: fix heap overflow in get_manuf_info() - USB: serial: keyspan: fix missing indat transfer sanity check - USB: serial: kl5kusb105: fix bulk-out buffer overflow - USB: serial: mct_u232: fix memory corruption with small endpoint - USB: serial: mct_u232: fix missing interrupt-in transfer sanity check - USB: serial: mxuport: fix memory corruption with small endpoint - USB: serial: omninet: fix memory corruption with small endpoint - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add MeiG SRM813Q - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add usb-id for Dell Wireless DW5826e-m - USB: serial: safe_serial: fix memory corruption with small endpoint - usb: storage: Add quirks for PNY Elite Portable SSD - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmodes/displayport: validate count before reading Status Update VDO - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT - usb: typec: ucsi: ccg: reject firmware images without a ':' record header - usb: typec: ucsi: Check if power role change actually happened before handling - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO - usb: typec: ucsi: Don't update power_supply on power role change if not connected - usb: typec: ucsi: Move unregister out of atomic section - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: validate connector number in ucsi_connector_change() - usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: check URB actual_length for interrupt-IN notifications - usb: usbtmc: Flush anchored URBs in usbtmc_release - usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write - vfio: Create vfio_fs_type with inode per device - vfio/pci: Insert full vma on mmap'd MMIO fault - vfio/pci: Use unmap_mapping_range() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtiofs: fix UAF on submount umount - virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vrf: Fix a potential NPD when removing a port from a VRF - vsock: fix buffer size clamping order - vsock: keep poll shutdown state consistent - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: reset connection on receiving queue overflow - vsock/vmci: fix sk_ack_backlog leak on failed handshake - vsock/vmci: fix UAF when peer resets connection during handshake - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() - vxlan: validate ND option lengths in vxlan_na_create - vxlan: vnifilter: fix spurious notification on VNI update - vxlan: vnifilter: send notification on VNI add - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: clear shared SRNG pointer state on restart - wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() - wifi: ath11k: fix error path leaks in some WMI WOW calls - wifi: ath11k: fix peer resolution on rx path when peer_id=0 - wifi: ath11k: fix warning when unbinding - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath11k: skip status ring entry processing - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix error pointer dereference - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: iwlwifi: mvm: fix race condition in PTP removal - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mt76: connac: introduce helper for mt7925 chipset - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: nl80211: reject oversized EMA RNR lists - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: increase TX report timeout to fix race condition - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: usb: fix memory leaks on USB write failures - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - wireguard: send: append trailer after expanding head - workqueue: Factor out assign_rescuer_work() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - X.509: Fix out-of-bounds access when parsing extensions - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/kexec: Disable KCOV instrumentation after load_segments() - x86/platform/uv: Handle deconfigured sockets - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler - x86/sev: Harden #VC instruction emulation somewhat - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen: Fix xen_e820_swap_entry_with_ram() - x86/xen: make some functions static - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: ah: account for ESN high bits in async callbacks - xfrm: ah: use skb_to_full_sk in async output callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: Check for underflow in xfrm_state_mtu - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: espintcp: do not reuse an in-progress partial send - xfrm: esp: restore combined single-frag length gate - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: Fix the usage of skb->sk - xfrm: input: hold netns during deferred transport reinjection - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: route MIGRATE notifications to caller's netns - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: delete attr leaf freemap entries when empty - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix undersized l_iclog_roundoff values - xfs: mark data structures corrupt on EIO and ENODATA - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: stop reclaim before pushing AIL during unmount - xhci: tegra: Fix ghost USB device on dual-role port unplug - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zonefs: handle integer overflow in zonefs_fname_to_fno - zram: do not forget to endio for partial discard requests - zram: fix use-after-free in zram_bvec_write_partial() - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Fix CIFSwitch vulnerability- FIX GPO Frag vulnerability- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- Remove dead, not used patches- Fix Dirtyfrag- Fix CVE-2026-31431 (Copyfail)- Fix regression with touchpad on notebook Positron Proxima 15 and probably others (bz#19950) - https://bugzilla.rosa.ru/show_bug.cgi?id=19950- [bot] upd: 6.6.106 -> 6.6.126 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - acpi: Break out nesting for hmat_parse_locality() - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - acpi, hmat: calculate abstract distance with HMAT - acpi/hmat: Fix lockdep warning for hmem_register_resource() - acpi, hmat: refactor hmat_register_target_initiators() - ACPI: HMAT: Remove register of memory node for generic target - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - acpi: numa: Add genport target allocation to the HMAT parsing - acpi: numa: Add setting of generic port system locality attributes - acpi: numa: Create enum for memory_target access coordinates indexing - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Initialise scc_index in unix_add_edge(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Use standard print API - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64/fpsimd: signal: Consistently read FPSIMD context - arm64/fpsimd: signal: Fix restoration of SVE context - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state - arm64: kprobes: call set_memory_rox() for kprobe page - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: Set __nocfi on swsusp_arch_resume() - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wsa881x: Drop unused version readout - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates' - base/node / ACPI: Enumerate node access class for 'struct access_coordinate' - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-mq: Abort suspend when wakeup events are pending - blk-mq: add helper for checking if one CPU is mapped to specified hctx - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: don't schedule block kworker on isolated CPUs - blk-mq: setup queue ->tag_set before initializing hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: fix race between set_blocksize and read paths - block: make REQ_OP_ZONE_OPEN a write operation - block: rate-limit capacity change info log - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Improve program stats run-time calculation - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - btrfs: ref-verify: handle damaged extent root tree - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: store fs_info in space_info - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - cachestat: do not flush stats in recency check - caif: fix integer underflow in cffrml_receive() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: refactor wake_up_bit() pattern of calling - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: fix pagecache leak when do writepages - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: Fix uncached read into ITER_KVEC iterator - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - cifs: stop writeback extension when change of size is detected - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - cnic: Fix use-after-free bugs in cnic_delete_task - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Treat cpusets in attaching as populated - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed-acry - Convert to platform remove callback returning void - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd: Avoid evicting resources at S5 - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: Check dce_hwseq before dereferencing it - drm/amd/display: Check NULL before accessing - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix null pointer deref in dcn20_resource.c - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: Remove redundant semicolons - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu: csa unmap use uninterruptible lock - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amdkfd: Don't use sw fault filter if retry cam enabled - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/ast: Use msleep instead of mdelay for edid read - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imx/tve: fix probe device leak - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/adreno: De-spaghettify the use of memory barriers - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/pl111: Fix error handling in pl111_amba_probe - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/tilcdc: Fix removal actions in case of failed probe - drm/tilcdc: request and mapp iomem with devres - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: Add SM7150 - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - epoll: Remove ep_scan_ready_list() in comments - espintcp: fix skb leaks - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - Expand the type of nfs_fattr->valid - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: filesystems without casefold feature cannot be mounted with siphash - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix error message when rejecting the default hash - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: refresh inline data size before write operations - ext4: remove unused return value of __mb_check_buddy - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: drop inode from the donation list when the last file is closed - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix wrong block mapping for multi-devices - f2fs: fix zero-sized extent for precache extents - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - f2fs: use f2fs_err_ratelimited() to avoid redundant logs - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - filelock: add FL_RECLAIM to show_fl_flags() macro - filemap: cap PTE range to be created to allowed zero fill in folio_map_range() - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Fix unused notifier-block in unregister - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware: meson_sm: fix device leak at probe - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix memory leak in posix_clock_open() - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: allocate ff->release_args only if release is needed - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genirq/irq_sim: Initialize work context pointers properly - gfs2: fix freeze error handling - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix use of bio_chain - gpio: 104-idio-16: Define maximum valid register address offset - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpio: ljca: Fix duplicated IRQ mapping - gpio: ljca: Initialize num before accessing item in ljca_gpio_config - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: fix wrong error probe return value - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pca953x: Utilise dev_err_probe() where it makes sense - gpio: pca953x: Utilise temporary variable for struct device - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: update Intel LJCA USB GPIO driver - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - gue: Fix skb memleak with inner IP protocol 0. - gve: Correct ethtool rx_dropped calculation - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: core: Harden s32ton() against conversion to 0 bits - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: playstation: Center initial joystick axes to prevent spurious events - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimer: Remove unused function - hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Add support for Dell OptiPlex 7040 - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: increase max descriptors for XL710 - i40e: remove redundant memory barrier when cleaning Tx descs - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: fix race condition in TX timestamp read for register 0 - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - ima: limit the number of ToMToU integrity violations - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring: move local task_work in exit cancel loop - io_uring/poll: correctly handle io_poll_add() return value on update - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: add exception routes to GC list in rt6_insert_exception - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: avoid possible NULL deref in modify_prefix_route() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: fix GCC mem-intrinsic prefix with sw tags - kasan: refactor pcpu kasan vmalloc unpoison - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel.h: Move ARRAY_SIZE() to a separate header - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: fix null pointer dereference in alloc_preauth_hash() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_session_rpc_open - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: fix use-after-free in session logoff - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Fix softirq masking in FPSIMD register saving sequence - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set synthesized TSA CPUID flags - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: spi-byte: Use devm_led_classdev_register_ext() - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add more instruction opcodes and emit_* helpers - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init() - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - loop: Avoid updating block size under exclusive owner - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md/raid5: fix IO hang when array is broken with IO inflight - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx214: Fix link frequency validation - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: tunner: xc5000: Refactor firmware load - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: verisilicon: Store chroma and motion vectors offset - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memcg: fix data-race KCSAN bug in rstats - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memory tiering: add abstract distance calculation algorithms management - memory tiers: use default_dram_perf_ref_source in log message - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax: add a few more MIN_T/MAX_T users - minmax: avoid overly complicated constant expressions in VM code - minmax: don't use max() in situations that want a C constant expression - minmax: fix up min3() and max3() too - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - minmax: improve macro expansion and type checking - minmax: make generic MIN() and MAX() macros available everywhere - minmax: simplify and clarify min_t()/max_t() implementation - minmax: simplify min()/max()/clamp() implementation - MIPS: Fix a reference leak bug in ip22_check_gio() - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Add missing dev_err newlines - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: SPI mode remove cmd7 - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: fix arithmetic for bdi min_ratio - mm: fix arithmetic for max_prop_frac when setting max_ratio - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix folio is still mapped when deleted - mm: introduce and use {pgd,p4d}_populate_kernel() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm: memcg: add per-memcg zswap writeback stat - mm: memcg: add THP swap out info for anonymous reclaim - mm: memcg: change flush_next_time to flush_last_time - mm: memcg: make stats flushing threshold per-memcg - mm: memcg: move vmstats structs definition above flushing code - mm: memcg: optimize parent iteration in memcg_rstat_updated() - mm: memcg: restore subtree stats flushing - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-tier: fix abstract distance calculation overflow - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mempool: replace kmap_atomic() with kmap_local_page() - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() - mm: migrate_device: use more folio in migrate_device_finalize() - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm, percpu: do not consider sleepable allocations atomic - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm: simplify folio_expected_ref_count() - mm/truncate: unmap large folio on split failure - mm: workingset: move the stats flush into workingset_test_recent() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: nand: raw: atmel: Fix comment in timings preparation - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: allow small head cache usage with large MAX_SKB_FRAGS values - net: Allow to use SMP threads for backlog NAPI. - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: add Makefile for selftests - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: improve shutdown sequence - net: dsa: lantiq_gswip: do also enable or disable cpu port - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: allow loads only when register is initialized - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: drop unused 3rd argument from validate callback ops - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: missing objects with no memcg accounting - netfilter: nf_tables: pass context structure to nft_parse_register_load - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix NULL pointer dereference in l3mdev_l3_rcv - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add support for MC filtering at the slave device - net: hsr: Add VLAN CTAG filter support - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv6: fix field-spanning memcpy warning in AH output - net/ipv6: Remove expired routes with a separated list of routes. - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: fix unregister_netdev call order in macb_remove() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Consider aggregated port speed during rate configuration - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Report rx_discards_phy via rx_dropped - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5e: Use extack in get module eeprom by page callback - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: adin1100: Fix software power-down ready condition - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY - net: phy: clear link parameters on admin link down - net: phy: dp83867: Disable EEE support as not implemented - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: fix phy_uses_state_machine() - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - netpoll: remove netpoll_srcu - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove conditional threaded-NAPI wakeup based on task state. - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix mismatch between CLC header and proposal - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: Fix accessing freed irq affinity_hint - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: stmmac: make sure that ptp_rate is not 0 before configuring EST - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: wait for async completion on last message - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: vlan: sync VLAN features with lower device - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfs_common: factor out nfs_errtbl and nfs_stat_to_errno - NFSD/blocklayout: Fix minlength check in proc_layoutget - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: convert to new timestamp accessors - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't ignore the return code of svc_proc_register() - nfsd: Drop the client reference in client_states_open() - nfsd: Fix a regression in nfsd_setattr() - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - NFSD: Fix last write offset handling in layoutcommit - nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr() - NFSD: Fix permission check for read access to executable-only files - NFSD: fix race between nfsd registration and exports_proc - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - NFSD: Remove NFSERR_EAGAIN - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Rework encoding and decoding of nfsd4_deviceid - nfsd: set security label during create operations - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: enable nconnect for RDMA - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFS: trace: show TIMEDOUT instead of 0x6e - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: rename free_ctrl callback to match name pattern - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: do not directly handle subsys reset fallout - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvmet-tcp: remove boilerplate code - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix use-after-free in page_pool_recycle_in_ring - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Fix uevent on failure to recover - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI/sysfs: Ensure devices are powered for config reads (part 2) - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test stat: Avoid hybrid assumption when virtualized - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Do not enable BTS for guests - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - phy: Use device_get_match_data() - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - pmdomain: Use device_get_match_data() - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: introduce posix_clock_context concept - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/addnote: Fix overflow on 32-bit builds - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix type confusion in pde_set_flags() - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: add testptp mask test - ptp: Limit time setting of PTP clocks - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: stm32: Always program polarity - pwm: tiehrpwm: Fix corner case in clock divisor calculation - qed: Don't collect too many protection override GRC elements - quota: remove unneeded return value of register_quota_format - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks - rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks - rcu-tasks: Maintain real-time response in rcu_tasks_postscan() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - RDMA/rxe: Remove the direct link to net_device - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "loop: Avoid updating block size under exclusive owner" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "net: Allow to use SMP threads for backlog NAPI." - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf dso: Add missed dso__put to dso__load_kcore" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: Improve exception and system call latency - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: mm: Do not restrict mmap address based on hint - riscv: mm: Use hint address in mmap if available - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Replace function-like macro by static inline function - riscv: stacktrace: Disable KASAN checks for non-current tasks - riscv: stacktrace: fix backtracing through exceptions - riscv: uprobes: Add missing fence.i after building the XOL buffer - rocker: fix memory leak in rocker_world_port_post_fini() - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/bpf: Centralize frame offset calculations - s390/bpf: Change seen_reg to a mask - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b - s390/ctcm: Fix double-kfree - s390/dasd: Fix gendisk parent after copy pair swap - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix __ptep_rdp() inline assembly - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/balancing: Rename newidle_balance() => sched_balance_newidle() - sched/deadline: Fix race in push_dl_task() - sched/deadline: only set free_cpus for online runqueues - sched/fair: Fix pelt lost idle time detection - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched/fair: Use all little CPUs for CPU-bound workloads - sched/pelt: Avoid underestimation of task utilization - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add fill_crypto_prdt variant op - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests: bonding: add missing build configs - selftests: bonding: Add more missing config options - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests/ftrace: traceonoff_triggers: strip off names - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - selftests/net: convert sctp_vrf.sh to run it in unique namespace - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests: netdevsim: set test timeout to 10 minutes - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix GRO coalesce test and add ext header coalesce tests - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: openvswitch: Fix escape chars in regexp. - selftests: Replace sleep with slowwait - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: refactor EFR lock - serial: sc16is7xx: remove unused to_sc16is7xx_port macro - serial: sc16is7xx: remove useless enable of enhanced features - serial: sc16is7xx: reorder code to remove prototype declarations - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix tmpfs reconfiguration (remount) when noswap is set - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - staging: most: remove broken i2c driver - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm: Cap the number of PCR banks - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - tracefs: fix a leak in eventfs_create_events_dir() - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: complete command synchronously on error - ublk: fix deadlock when reading partition table - ublk: make sure io cmd handled in submitter task context - ublk: prevent invalid access with DEBUG - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: Apply the link chain quirk on NEC isoc endpoints - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci: move link chain bit quirk checks into one helper function. - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - vdpa/pds: use %pe for ERR_PTR() in event handler registration - veth: fix data race in veth_get_ethtool_stats - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: move TDLS work to wiphy work - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: remove RX_DROP_UNUSABLE - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: Report correct retbleed mitigation status - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86/vdso: Fix output operand size of RDPID - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: state: fix out-of-bounds read during lookup - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix log CRC mismatches between i386 and other architectures - xfs: rename the old_crc variable in xlog_recover_process - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: Allow users to modify DbC poll interval via sysfs - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbc: Improve performance by removing delay in transfer event polling. - xhci: dbc: poll at different rate depending on data transfer activity - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xsk: Fix race condition in AF_XDP generic RX path - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Patch from Hans to fix SYNA3602 touchpads- Update initrd size (kb#456)6.6.148-1.module.8821cu6.6.148-16.6.148-15.12.0.4_1_g98821cu.ko/lib/modules/6.6.148-desktop-1rosa2021-x86_64/kernel/net/wireless/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-strong --param=ssp-buffer-size=4 -m64 -mtune=generichttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnuELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=8f1f87d6491d9cd381ac35fb055f951fcb95ba6d, not strippedPooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-813679daf090049adfa4210ea87bceba44cb8d001febc787549bbf05a21c0cf13e0a380be284190d685eb824067b807b4b62a9928dd1f7077324e5493745f968b?7zXZ ͫ<!r>] crv(vX0bRb(GNY`Iy NJ '"l.9do~8RUP*A=yLj,n)jV# )鞰Wr\ژ=78sv01+b瓍"8Clpo*: )O->IcǤFY=ЛYx*t&CWߞeJՠ',!vHڦZ?">(bҰJ4U5u4\(Ǣ{<4x]6&$W1cmJdYq {?[Ȝ$"! . *_9S̻Vis|&pc}40G'*z*Ȯǐf"TmlK#qV}3UVv9OX;_aBԇK! ݊a>$H3ٵVs狗oqӲDPҵx 'R6pkq̈br"(ߪwb/y~L%pDRBir+U&Qy5Eemū 3&x[YóvQJ2_xIݞe?6[ U(s|:}!h?Z</| " k1ڑlNi[bߙSV>w`iէ5;br5ŏ|;y(C? uUؓ: ت㄃5|[[AZvxհ!DL7U0q$]r5E:]HĬűCRmdR ϲ skb Wܪ' P}dn_66vX[\w wlfr\e1g4\аخ\Z8d_%O`k<fE+5QK=~ 󈋺IzaLc^D%wJWJ*ҟu _ HqΏ11n4{wGtDG%nOүDƒ륂e! 0@o&bK&Vu}L'MXZulX}j ٻ~)S  VT2FLŁ6^}I$GרvC?X@DG>e/T$_3C^eCPKze]~Vg~Fdx/u|or~YJ+66zS  _n`eѾq>AL% |T8y_'j0h*.&59TPImI88ا b/2X'!Ϲ-:8Pl2}#OerݽtgIBeM_BN$:XX()#Y&H4ݼY[ :glC̐-k&S>1\S,.r"#|&,$\.!,; B/WwӤ[) r{A P ƌ yjr@E?K?ynbO3upvAhĸ/_A JUm9!Kf算!@c[@j!89rM;jgkzPLKlju^[d5Uv31_ꔘ`+? 0 Ϲ&E_C8#Z_; szpO>=%wXT SFdc1("BuJm#F?wM1ƾ+Gi GTږ/JsO~17I}+mg3c6!&_֯A>/i.%A8e%W[2 hvH`[_/SA6j!h}Ē*Ӊ? pqnyŧ )/i"RZ^TN%eX@6/dQH՚;cWiS62ID=+wFgԔ8!J[XimL|;A.ʢбY^z<&7HNuZzp'dkN 2 A:|QO 01}ne* g=q]M!lӁpԒQ _ VvAK^E> l ( >qn5(ANn?7@ab',v2E̛)sxf~y4.]?I0h^P(T\3G*=$RPk|-z*wxe/QET98C8Аq 0qLX4oD}^K\9nRpŁYFyw'&q^H zJ`͝ َr0_bUS.c)q,H聰H;V5cܼ1(tYFwܣC̚떃UZr)b+ωFY?VAN7L 8 T SOlM6>zV̽haATl=} 1Z0C*qG[se<_ IS|/#=-fC.ªmu_1ENb}IorFn):֙&H=majL1c3D&Ë"iŕQ ܭ3!D?zӏ=],1s'3U0{;|}fG?Z:1^ 㨉5V.>=cxTp5|!;$+8N=t]UZA;`1[ Ĉ%]؜>deb@4{yF7EYD[UAHiɥ  yso凌P&<ɀSF[ێ||j49D,*Db?bֆ1 *jZv.;iZL=f$r~9N`:K 9J԰7~B\|gXR@Fé:EJiD(MRp]Glt]THEG6Bh_tzH^#RȞ)eشv;!\U0:*]1ԞRxQs u FLR|HTjOum ar:f4kW"5fm$, Wjang*Ysh0 w >Sc;UP#C`ձ>peZp\|!2F>5rM*(\W Krv4G)iDlEajޜQv>~`Nz:utwU5 Eߍ,BX< 3(= ow`5|; PIZ]Ww̾{¼FL!D+D]y ܄c'Zx\b˓aiYt/n f*AJRe!^?)V,FE ]51%y:@N.<0HխYed?7/k!A鍽Ր!#JxX`Ia[)8n{|JtPn|a1H;4 2n S9AA.%8X˜),a_T-?2:!;rVz/؝m'1qv?;OI!dl? 75_5p{ӏeur"Fk:;}}GJEeT/[W&9)p־AVTLvɧd BFzJOZjk^28#+V :cUA_ևlRh@0㙐QTx2t)jiUMl@8Y\2 Mh"waK.P+q߫o))>P0R.+$ulSPkVv ȫ}0,,+*/}z?CJf_]g4;)}f"gUsRg"UkQ'wCuOf-t\O_)8AVvWr->NGlIHj"i66 ɂ86`L*;U5XXe<`(7Xh";W@ hEjbWFt /)##H;p3h;5$ !٨A=ZvqZVC#&V;8֤ o6Hn .b][i:M)X~W*9t"rt-C4U4o{(H!&X2VmtL*\m,|$x{qg]G`.b~dzJ]wۺ3-w%y5^w#90מoΓ% WNQ/.Me΃Tϭyܹ<TeM0VS-d4r i/h-nЃHg70%t#e!!YWsUuFrօb*wsBi\\ fS-^y_W 6NNⰍdpcSYƫ=tVщMr<5ӳvmNP;[xgb1p Lsh9DN|#WCh#CԆVEd_{R32}1>q_]ZQ[VB71.%RmWGe=M?K6kl9(}[O416ή 嶜,He gwI]ׅyݚ7!!HB<u!y*4oZnģZg~GH閜Sݬvd _~ ͪ^0N'+֖OIXReJR*!:[{1ѻڷXcxiξ !NoTsq4iHw gRj'Cm kz`/|rx0LY5nX ׽@YtlX<:ޜ9w6rbWz!Xת/{һ!PdనE4#v "`תBA`Lw5X} 3E|90.*Ϭ0Lm7y{c"h(ÂY-ACt#ນu_э&<j`Xx=~|S^@Q[ xvP 7s2z朧g]*yKUg`!4i1(5* =iWqq/7Y6p|[6B^H?mk`ݓ= [!C[Ҡsҫ4QAZu#rMTs򽑧l\SZ*iazMU%-6Z\ ` qTYAIsryEǵc+fF$# r &̜k}}g>H,aIK1Z֖\ Kx6F/&ѷ;Cw-! U1ͳE%m`3q4Fj]^D6#^"֐:k]<[4@Iƞ@(ڿs#_-ՠ šOė7nRNC"vm$O7~ob7*vkTF7GČePFY^D|0I^ 3ݥ%׽Y9n 3+̄CYPr zyY`/cѠ#'/ue$DsaP]K>7?7+d{J"xu N#׼bV^B._-F(!J+0۷{wgxa_5R,'غ7!5 <25Hy̪IDF aYz`AM;\fO!ѕVw@[,u6C\YT{mq\:xǣ A/^f9f,Dmܺ^7z<ur-g}cْJֶ wI(}aQ\J(fL|ژT̲rE.ʱѲTΙepr"<&)qS۲"b JC=6@O(kh=B7Z Ǡl1#?k'i(Kek`2>#Eh]v{q *eH7d.cOUo3@Cm'UZ8M ~SJ;fuX 3͑Iؖ~nUkR{?pyg9w6M{&X$D]zr$*v*ĥAg7/5;9K:88ta)\£Xץ!edYP;Еc(Z IUUԗD8}C^ ڵ093ZDGBO!4}[} Soȏ-% vt?@^mhݰ;2l,}" &7>^S]K}9H)/,1# =pLaPeYu$a:JOM 0'dqeWlDB7A {UpZ%kn"?T-HUT U^NގՈF&b̩Gǹ/([; Wbhgbn Uj6fC}"$:"Nko)g:@7oL@+*7u@E+4Gx=eUzr654ή;)OLyTHEzRBb_VYY_{}[MOf[FB#WOJ,NoRlU쮰a'x&xǫ*-_6i ՌŠ:n Yw&-/A81*v}r3hj\Gb 0/߻N#G(}_ByNSV7ţGy"bkܯ n-ʫ̫K\Eo$nam>ꏇe׫ 9Ը~GFK1 ڠ[,CTdeäylpU2ƁK xgR[~/haI5YtѵͭU +-Ž{AѢM״ESch v1H&.\ &GÆAr}$Yqdi+־nGwO%;d6X\$zeIfQ=S4`U4E`VP9x&L1R9i{3[Y Fs8TJ5g^׀i`0H{qʃ6b2 Zh xDžVP>Q|X̺7 W KM6T` 7*\skX)u,;|JZH|ew}#}WTϱFx,qy65UZYubU?<0KaA2zhC0nEx/Wˑ7+z]Fʳxyc V>B,=! PvBUJT==R=?)m8,wF5eF2+%zL>,!#X#*T|3[{-5n x`nrGjѸ芰^URqLJ\aE e.(;aq >xw]#$ύ@3ڵ ˇv'~Y:>iTze<”B8AϛHt*Ÿ-P!`&ISѬD:[ _P̲PbGh蝘^NL' rjZCNg>s!{vz];LI֊VCpVbUεVTAB//`,Ok3,@;B+qm/yr"Wǣfܭ*eRZxݴYnI`}/?vX7Pɮ x6<+`퓸-Mc9+@ÝX㎳@MpF^&ɴt{}D͚]O=ImZ)K&RFp0κ.Q=㐌BCe/PJ!.U:JEq^ "#70[(/><Q15)cfwYуōB-;o:iab 7/Y]O}`T[{S"}v 3nĊr3?N5";x5[R 4nũڊ#mR#<X&cXHE 9Ufm$ޖ[p5b=)άކo,d'OB<J.R'L2 2L6vAR}̳<-8,gF%6l/HqS:eFaufx0k쵶oa׏6ޞFPG(ο) c4xlڡ` ㎔@Vl_oV.ZG(%ٞc2.$2lph}Ǽ\y/tCsǐ<xCrIrT4:6P0[ %hC7roݎɞeؑOhkywʷF2#ZLRtL=⦍^Y63PNiGA,|On< DيX0.soqظ^C$].ocS(.̃ؠ"&#mᨉdU=UW`@QiC%-$јz 7X4h?d=(be\1u9-Ys"EM2"r;d`E~YJ Lɱ\7p I$,҃zLl>2TiW3 WIM7Kg4FW1ݥ8 ftI FZUecOGC)kf[yɭͰ]_5,L*M&В{jI\}D)w) /z,3kӡh˿N)\7__)5?(uZ/d5[^$:9%8K|8dsP(y>Ok/Å& +wJ5҈#&^IBxiB,ٓ5I]~U_πx2X%ȚW9d"c6a,f~Lv`j?z+{\QFO|i?Sgzu%VS;DB%YoZ2h7OFv v<}ڙiG=Aey7@htnzD,Z;z=Ȁ-)TԔ!ⲃ!32C#Q͆G:9cNZQ?`ʄ i d;@Q .t|6@L6SnՋ#e]D276f0 NqiEA{*5X!M6qZ9>z|5,L0ۂČzl C#=18 l3R/H\mk\B0hŦY mOS۔Q8Pq䌔:|mB?Hy_A6}D帙wGG-l9wcFsLH>Vݱܛ&(e,>ovzbKTṱb{LpF sg*M&6zv0CT$om Mġ4emuC,Mk_RNh~ˆ"̭nb2a%\O#]R?/{ǻ6W9idRso5g`z[| B&C8ͽT9gŚUHԩ;I~3MC5k9G#L>q"թ(9n`;b"Oj҄^*U#W_į0.aVѢk7B_=^K>.; 5΅H@&ձhC+tRo-N #uOĨ(m] IR{ɡNfw$W͛ { K1A8͹Fݪ %(v>;$ZRcT"}LjW}:AMtg IQ MR*ip^t/Kª5YTeeF7>kN=( m~DL# h~땝W|%o˭\. z5ُ#ZnOɪ$צdrũ)[Jeb]*}Ym `{<~jǫjNǖoxMuD@X  rxi Jm[PUO_9}ȽIh˄[TSm @ʯk#[\(&}oBFSsėf{\De%QcLJ /A(kCnˁñ.&٢^DrٲS?ÇQߨ6" @v琯騺[&E\rbt h+ܣwcЂ3?ǡ"*˟@r1]KҘy|✃p 1w/aybv=O03AXGof 3zUG kT~=P^DL5YY` SQ'8qsbѸ5" n؂_ݺ̗%e!rOW@*&d ApJi^q̀8ӆ;1 $^xsb@vI4t[Cm[|[`jQIfq>%>Jć{\?*?BO9Wʸ+bL|ϲҚՑPr?bloPG>1Vd0~ M$]۹'F1:5 )mD,=oRu:9O/=4CF[]g.rMzh!Ğ'HI;? ,tgHwjgς^`23U$,ةGqx);-<W)df- WƵ wtϰN6"rs-"NN\ͭ"-y\t|w2f"*mS2ƹ$`ʴRɑG4_|vu] };^BA"%6N%|_4 < `-cXD=>KrtsoX l wj`ȱ_vdCF/Nap3XrF.=`l$rX0 KJ^˦NƱP>? 'a73e QC'K+)KhXwd#9k *5ÇN\CC8*Ǝ".ORG?uߡ+"b|.[gff|lj"h22W/5x xFu/,L'B:j ˁ+:}gaZ^3k$ ypd!p{LH)z%3U@h>׸6Ŧ@XbL0#"M WOOfE7[U)؎MOs RApf&yS=2/a I335 ~[XJŷ1]?Jc:WD,k• k҉4voOt,MTCv;t[ s o(b\4났/ EԴYCޙcnKta HG PrРm^a[z6ĭ ygjfyWJԗDd{ 2hmi'b:½rc?wq,V1"Jnf'%x|ڗRȜH&lr}ìql5iQt[ ܽF>G6UL2צi)A] !g ʙ? sc{'-@ƨ񮮿QD%=h~(s0 WsTo]`nfYi0.C;m,$yW z5""% k€= ;9dˌ픶o?,hH#~%}n,d[o*ՏD,^:b !1T˙u @϶wws%(gHkdom5C/4`pPTA楍|Ql xܥ2~d%X8c'qULK:xW~/W$R/Tr:ugӐg-[7l n$zs2Ii۠\.L HHKCI*VacSRW$ p@xy|#6? /|?zS";G~4d{CpI]õ$)Eƭ8UI+ UJU!w!%-dEO,1*xp䰤?"LGR0ep!`gwULZi,8tJ!>3 3a=weމtq!ehg"upd9z*}_(ʝ|֩j (Ҟ I {AJEɠFj V7rU!N'<{scH"aCf((#K3 EB;T*3Yo]_҄op ܬZ]W v >֫Sfc9PMr WM%#!4aNeoҺ *̉Jc= =#ǩBX#[A)ʪb$8nSa]FPΠz kwbƴ%V0"ߴO p^WZIIv2Gރwʣ'U`NKr@ 8i[ ^)z4k䅎|BIN.W9v1>F/gl' LeM_ߋHyLbi M _ mHL$WUV>*aJ enh6˰i}udwa q db`O648tXVx@+6kX_f[d0hAvYفeG'x~^rCvP]0e??.ry׊605i2Ysc0}O!˟ˠ?!ooki_tse> X B?uB يE s@>?߆Sr8} 'cE)n?w+`ŨO.,cSm lFR/bBV]2|:D3EՐG.tfE!}@_ kR٦Mgy\+ ao[kD!uSQf{8(kM(Ҕ>ڑ٩.8*佐k;!C}hCcqH??s稇;rEk Z~!̬4WQ}̉IEN Ut(VEFOS~QP^C1C[G[}IMx1T(I'}#ASll£I,yRXbd7Z׫_|amH@="23D5*L%p[QyKL#iN쥃-b*I~S0"_9Q=ޚ4m%ӝDƉ!Cn֨2W!,677NK_72bEkm׭ƽ0 2y,+/%2).W  X-e"Z͵K&vܭz}KTm%Jw=50͢Gw"K_9澧>2% [gY 8{,:*>7E8z jh>\ײ?V //ArS\"E>b &юj^%C 䯞9Ð,vѨ0Ո`H+V=*2MX\ܝcz^HBTk̲f'4_~^7bѧ@xki)_EP_&="CЧ Aᠲ1zղU8jbn>"50h-Π+(p|!.j~xZ}CN_O;&Ŏ禵9"Q[q|,>6ԛee(X!ȄPh0Z(:o(wB@NMÐN)<-nƯ?(ip~ƮW$̈2k`y}R, wdddyA>ZA)!u,M =?LjN]Or"ѣ偛 kj *^Rg `'B\0ud 2NahYK늾 UPKJ(s>Oo)cN =`%"|hM䁧9#ȓNV|4>TsH+@}AZΏb.)1}`\ Κ>rm!E6aqҼE"yyHk"+{7_:$ޝQׂ @ fI[ LHو"q-6oq}9xD,ڎhA,SeWB{5s% k5eH^䩺CG 6>56do/5z4Lكmy_WX#u(9E_p#H/%/xT(]PksX/ GZNw:'~.')W<' Gbe'M/գvޠ6ϊ NS> Jqvr"N8Yҋ#"y즄{ ꊅUEagt9/CGEzֵ7 4˛ūiۀrʢ h)8o 4ƊmnxcCX=8!=ay"cҳD8C ҉xشX1Wf~{^aż꣔F/%̖X8 Y,#*Ul'xnJ6TUWm٧$g pdg ͐t-jX48ً!Y7e+jő);Q>_^U[VHTfM R <މ2F;;"j#8B[A}YBOL X:;X1%mU y( Y͆Oǯ >0ޝmȮ=8\x[Es`7+*sKfs ʤ.hRLլ^"4=nct!.n1IGCk H3K2F,o4Xka :T&6r k mkC /9Vd~CDl W vmBK] $pe{L(S!g_fyL:'SiݥiIR'sJ{?M\$tG'p>H1jg`ZʾkSCoL_ൟ.b d:נZ~2ԮtTW/o*}rv|7 6i9B7ej~ uA_Z2J0w}=kдС+M%+pη2ij$;B%0gFzV4 s!H^i3U3{ɇJ*&V !ęC16: h ',/insx/E U+%*lE. ۙBYJ3X!̚=3U2K9җ8 6^U|azl-h,SUꈐQgCwec³kc(Q^ FwVM +`'"r+sxo9Q֧\D߾`Q1Zڛ(Ô>=ŪK!XUք~Io<{=!#[ӓ! K W)aq94,V[:wuz؂pm{q|03WI\B- bV;$x,(rm4W]H'VE Z^lz"4N*Ew4Cځ~%~]](gA5ڜHbIߦoy Fq.Q G3BHL4|hN*M%A}EVA]~)9U[N0^VaI|HD,sfR7 WeT좷۶jPd.6c!UU@Oк{ΎZ#LiOo'%vWRͅZCQΎ N(mh $OUI( 1Cɷm%}֞A2^}3[kh? C(oIIٔ(52>ᐐ߇jxGUf~=, ދ^ %h!v$}B]䵧(tVP Ej^Ysv\r=QG};CJlw$=//=N\PD?rϺWxN95n xZs:4d}5H4Uƀj<eԛi} ,y99gqHn n [ FQA:gu(RDl[尶eWv۴lƅus#1*| }'@P e;"x uIW-`-z^\ߓ6v6JP:d-FX'Jpҟ+BO̱/,`Xwٱ zA+]+ΧO+`R忮gVW1J-dh +Z%[!scP~$i{?ܹ \р쳆 m\l^"k(~0=Y/|s-f]Da*bdͫ¯']LQ?!Wf[$J)r>rP? ad.|#j-A@h]keFe`BͪMlo~.e(?u  ]xgRq -)Ǵc@% ?|;-ԵC{uQxFr{!+nr `#b9Lvza#TY1G3qvu"q'..h1<uGs̀D2f1ƞdee2U:Dw'2 }U\<'y㲅Xx@B%!⣮0vY8Sai<3掗~%6]|*U_{J'$^:5 +4s_NC]Mgć?f˞0ܻHURڜeԎv8?坌F%VQZ"I[V8R5}Y=pEjA6haC[U|qBp$ @ ?[~߾Drb&xC>{TNZo@ٸc}ƙR2UľMTTQnbAꛃNЖY P6n|=~TZE2Q<&_sc((j[D3FySC!\Q]8NF#E7oV:iO)$ߒmMB%pwGt~x͈$qA£CռYc¬Ӳ?0Cx/2yOp.Ҳm;A:aKjՅ<^8;zۄO"M9q:aS*T.3;eY8;fyaN{ў; aC%@omZ6?)2xy |׆ vsO[  ^Lbi)Ud(yɱ\С2hIZ6ixM8͗$rgSǨ2)NQ֞ٴ{4KYY PPE@ہ7r}uxC;_n9;>j6U35@1Ĭ|oR-19_̸TGHÙE4L^ ix}Ln4(>C5'ZΕhT|ݴoua6(߮tj[4gK2cI #kB m.2ym HBE$[ֈ/ԉE؟jЊ =֖~y]-Wgi6XFu"gG2^vw:<MB1sGjH86B|qFwvF?scT~XS]$E:p4HN4kԴ@]f-/ XN/15~Ig)c55km[>gDoĬ1Ky]9CguyjBfk6h3}fx 6't@ HeK c&6Cya"f)?U" O?bJ0`}r&ېY _ A:9GSu`1KKDVcAZ;)}nPWpd(Y{`̅7}1!I+: #s9~,T?}9յT>l5nt Dg`ݯe޺(|arFNw]nsNSU-N`Q8澜14,?@ifs< -b\G%ȯ NHߥ!EqO&Z׵^X d ;F;k_G+ *#!I,{N}ݻy8 f~7wj2!Xؼ|;°#Yc`CݪSkڜ6ShMt yoޫH̘1m*R9Ӱ6 m!ob0uom.b{b} _Au/עF6Ht`F^] 2J.ƭ )<\!sH{5= bug+;#Gv$-rpwvaN֮H;_*}߄UJhղdb:JLkZK`@nabh4G&ՏKEtRb@*!S( a>5[UST`[f!q_|"pX;"QȜ^W[Xg;=+]JZiSIs12&AekE'2[VZ[V1D==5ap[ԚPpCsu5T`噌 Mζv18WTaSmEIrXb9Mcb _VAy吇hѪ$%;['֖!L)(/QzBVnB^IAY?rh>'>NwCg=!F G'<%+}j]wՙsd&"¸k>ne:+X螑zdd֍졿S~o7B#.nГX ?v>iqadw͐lmEMr)#9Ү =?*Pr;8k{E/'12^#+O[Jrдֶd_p^| Cvlv"dFJ@] i-(QZV)ZI>E@~z?ȡd:oFI,d'>̠ n@k p>PZĸe [g*C,bQzzBP{:!ApӉN1Qƫ#!=\AOdMqm~`v_PWTqCL DCvV#5x9W3ZZ1IآE6U8w7Ml:[iN^_byU,bfŲs35=5a+HIY~J@=mZ0NC ~CXG3Բ+poTp9Ă3}^ǧ{8tF)J6$ޟ,)\7bInΔk1Z(V<]h'%gV糱xb'\Hz@ {lpؗRYqg"um2ʑ {sc<ݗD;68TK,RI7,DEkDbfОjʡh!C?8C>R)0R=L.^o}kftw"UiJrД±t4!*o5)*-G!ppv670\?&;kȣ(wwy0<ɫFbLnT`6_g~a magd#fnM_ S!{vK%m*\:kB;"r2 RV,ѻOogpN*!Ґ2}N6N]!{G M1h2x# sw{ɚ[mH(%qK5u)Qp*T!^x\)ɊoK]kZ`^"qlKB>3ʸQgO%9xAU 0tU9ʸxnQF:Dɀbkkni* IIp`p14X= č3+B浾jr(]>4 ^˯aWcd B4X^ќWWǺEm l2Bp q*!0Z)@I/ :9&?t$zʐ$J7 r6BXd#xʫV)xryd.ї'0ЈuYgQvh^Ρ0 2_ea PKe }+]mwH^A@J0W[Kyx[&$.C _d]c[Bb@3 ZdALyLtg8҈Ƃ:oU^XCUڪ^8Qg\>5@"9u $8l'9 zdܱ|"̐ZA[W4Rcvx5`6ft}7 n#N@)< }g*NjB-`UԂ)?$y6JO/ rt>l)Lt#KV*BH]ud߹iA;9w/5}HƲ,V`hH,@!I[ 'I処㧿Ci=&f uM]^'YSi/ 20e2d*vN N[9Z*x5m1ZjFiV̀ ʧ%T8]-sWK#3ß'oܠ#=Q~:B:To$)SXosey~qJ“'XtcfrSky|r06r*;2_`Ӻav*GQz'Z('?h0캺\R}ƽR(^_8xX/6uj9gKT3`&8>d-x69E)`jjgxXQS&-agg,AXV 8y_bP F䓱[0iˑ- ϻ]uTs<<3TѶ=n&Ky` $Wn"SW#fC6x)wOJ2-5&3hUz+D5|v Bjox!v 6`DDOHlDLK)TwTaזH h9YY߇ sͫ!+ v ßH(ǦCkԫ7o7oLs~v35Ṭ@KTAs> ?ecX u6ׯ({u2?o|d#oI˼bf>40ތMb~BaQH.U p0ǀo LtN]A<3=mVj 8VP RoYnoVlXc11z$~|fFnʹ|k˙1!ZhhiIA`UJ A nY'GXh_- ,iEG/!)sowSMb:s%2N&,_긙;hOҾz<u(-$m6;[vCPM˼U,kڍ}daPܴ-qԽ~%`.mDJ@=@…ӯTCdrrү1}`ieb+623]hH弊cНR4:WB·oKUBZ|:^0)æyt&Q\s ~=F}'Fl_iq2. v/]dSeɥ j )$v܃wV*D5 @GpA0cݑ?η͖ـ=+}K/VM7=}s~f#?$Ǿ NI I#uzXnq ?ueۜ=Ѻfw5*Πj]h_9pbm,G=wSH7jLrxFޟ/v hRUpv>'+#{GoGr#}vj&K>To`XG#cQ[S%EX < QmDQ]x$.S"J$hHyyS"w9x;h#Jl@gA&~籕s^߆cceiJ$!gqZi-3^0Jkc{݉SvrtzgC@M]X5qD]Q^\vn?2CE^P.r|w.: ODY|)5;F B|5ʁĹD]c /N4Yq&t+j{#|Jjy|/H3.6 aA%3yR^gmhREmeIV}~sDžWk|0XKp/e#U葄4?$ZP^+i=LXVJ%4 lUThBP()Uool+@v e3,R"#*̬Q!@ȖlB2}E]\hNHu|rhԸxE1wY.Nt~(kCihަPdQ <Q80r^P+U?ϖUC\Yu3%u" LGqvi W"qI8-Ӓ!}q5*7il8e&/Cc!5+C7T3*=B7*Rhfn2b"o\dF%9HA z$~>iPS4 "YLѿz*j3Ӣ|jsG2Ĩ5Žю@bۚ;r\^Mo~;Ұ<9 ~[)I?%CvJ|c+rfۗZȖ}dw6+!|E #mo}0)v 9c1QW!88a?Ejsފy`lݿ M H7~ʎ֭FϢ2, &oWd ($> |ePbȂ߹nَkK ɝ*u6/l1nA.f^.-xti=1Dk~^s-&@*OƬfN̋1Vm#!RY'I.; |[[)bj=')1mdT'H:ʐ\ |sǺvKt7gZVs1i5n-&6\?o({=MuX8r~]։kEMz?0ǩӰeZ.Qx)V",]EdHJ c"_45NhP@%>_яꄲ_N4bcuL\ k+[ܺ4=}? =ڣQR+)bBʅ4貓 LChzgKLfEJB9OzufEPFJ]4{P WQ&?2ZKP8fUӰ-Ao1۽oA"P !Zo*J;RrX[(HШoNKe\I_{B,T"(fƍ>'vб]RPA.lViϘnTIS:yTSi`Z~b0_9C$Pr"b)ZG$x?`PC6&meb{tSTV1^+M wls@_E" S?by፰"il9glgrre"IL0.'hxq؍ϋiBQ$U^w 0nH]B'FZ‚[X qHO J2˵cT TTLl\#wC8Hl:0PsLZ8~ ! JD{m#GQH3$`0v~1lw9kGHe6 24_( a|#hFiF}buНՙ]]uz\Ig֙{˒X_XgjI 3u8cur <a0yZ'G굑!h8#}YrM 9؉~&x<^~bStjtR&}jMII {"d;䠾 9+=d'%ݝ^XR?t X?l0W. 6ud8;piVH5k-O̕M>t?MKwWl&>H 3cYhS`MSD8G۫0>&%SZF'dϫ;ƽ8[P-kvҎ\dCҫ_s[=N" aCk H ne ERyA*H>J|Qsٯz0c Q\W-XPd `uA*q u 9%0l7Aj?YI~%D ru8o)C0ঔ吝n($Ĝ%%zɋ&(oܠJqrbw*Y&d|L\Z^?9Q)MN,~Jk\,D6_}s~-_>*pPZBI`P':N$?:8}Ԓbde$L^8*"VK!ʈqR7c΋-w03D؈#`+$: ߻L7pxA:H=M1P9L1Wk'y"dT5+GIq=u(ല@Y8w>'o=KWHe wd CyyTq j'MGQsC߮c. 4}p40cA"aJ8Nb/e3Ֆ,VP{,D@Ѓyȫ~,yb$=ل4z+3[9$㡿ʄm6ZŬB61Qn~#}ps}d  =H?M 1g] KnyU3x3ߵW lߘ$Okt{x*׷0DNdtT<$.r䮼4=L阒7SbXA$4'qz|Xc<1PY"C@|Ta22PX?2ՌI :t_(9<牐`ha}m͖*t}p015؎DUHTRfg5@ѾPVYFpe1Eѯv0"p<㰃cFKM g܎!{,>[Tj &V⮂ޘ,_$ԑj&Q@9iը:- 6g/1](vWg)Y7; J"1"v~>zG@vHFyg='R[ FŻ5#"b$[YX'0Ɠ2,hҭ&]L[Uin.w'4M0j7=ȹ3sdiDRnُ;(iru-Ǚ*h u KJFdv6?B@kr^ν,mat .PqΤog|bBZdڪ.s7B&&||Y{?'Kp=P IᠴL >7 q?mlk&Nۺ@,b T㋎f kʏXMaJdSD` G-sU~Oß=q8PXm&`)ɩ8pfbn44"z@yoan[O٣ri6eTX[lgaGʹA Ao/9'ЯA&oU!VtuumuoV5 ,F'!t"a;њb7S>O=UfIߍK4{6E^wK^vJjypzf ĹH*;)nBLҦ˶jI1mԋ4\Ǥ2SDo;Nj\H(ʳ*bɰ~7ȥ҄M*d=E|*33H2 ߗу|gd%. oX'J-;cO.^1l Y?p`CГZ< xUK(~C v*pد~8j~iè6J[mUgVRm/L:kMFKnp?YTZ "n?O 2˳-)b7@{Kl}mҜvQpy}x$(U(؁D{1Z@R&Omf͹_-$75<=ipӄ0^y2Q$?=kApN`zfe HCװ!?^}Wy!Pb4F<5 c!&/S}C'55]_b,i8(+AI*Yiq0G=hy<%/2V+^1*X&D\s)#6QLVPnQ%!DRñ1lz4ӡNu1kM !t̹Ί !e|me/B+` wD*gNJ@ІBR$VSbK֓mŌxgnm>.'R(i߳mF E5LG7 Q^-*$h++Zt'JE6׌ńT$pegu~/aLxX9Dm?!wƑPj}(̡j8%mVF7';Z('S$Ogf8f2M 08 ų"0(DC 0ÃM )v (*Ipm%E Sa0_:ZғGիklCLp=RhEre^_ ./3y>Z.]5AW3!GF9C7f[Ow' )6NpǘpUF"x tgYjc M有PKŕb_+MNd/%l F &xL*!|决b9V>x7G9v<=q .92 !*q)ZEK.\+'wb.]ױaW:c6VيE祲ZC,Z\K̲|#zOڮV0G͏PQ _>8*i: SϣIt%GT9"6i3&P%V@ Q>Lm]gi Kz .",)>;qk pMݲ}q>O.1TZ&VG+p iBy-; )˖H_Y $(}*y;b{{ŤA!4I]TAb%^?{X#<_L*ǹ~TҬ jwwJ?Oㇵ [Sč@ BNδ,q&lEnFC%ttQhIIQeޗD6v)JʭvWw%[-c9Tm.׭W<{6:oҟ1Oi H5sSyUėA'봯.Bug#rb脱*/9 iyy²?lݚ 3`qڭΈxYpN+ gB%ܡS.DQlZ~(jaZheȼؓW8z8ASt/l1{ȉ=]Y_Sb _bK"#ɕ\//W3E451wBK)Creu\3ZwhSTG;$A<- |8B ~%~r ;dϬ)~q){㕯F1>h$1Gn05Ipa_B?U%wh<^ic <,w?gDPKS#RV/,?Stʞ>0[]yvwB;qYo%ݶguBjݽ@xCʓ$cZtEeX0 !SpyW`X얚oJW- {d߲o_<8$[oGn 8РҊؕvKˡSj/U }7~;Q]=aJ[Dp_z~dbxL3;WaZa^/UӅfW>X+7Edj-^qJfJ6Z[<C3eh^рowJ ==~u+.ۥfv'a6T&UMNou{O7DD yuI @ *bt' C~;o2ttz΀[7$YPS~-_X`3S}G) t vx,AVpqR[wGn/ >bgϭ6YIړȣŬMnnX aT|@{ٲ9ÒR_K+R8{+il/K>T@rղO̱0^s#"0wbak` E^Qa_q&Vʋy{P 7_6`X |W[v6c _lN؏p;|fmT=E 0< !$\N4^VպE-"@% Nz(2|6#ׇ,C̪a&Ju1$h0nՔA8!U%J;+ZO^/>B$ k$a'(F]9ತДmi]U}HҵI&=Pu &1}Icq]o'pON}~$3'̍D2caGX&صyFo1Qmڋ>3* RUS]ƶ̫84t+yE294SzⓞX:6PH3`nt'Z+V0!os3l)˶r{)< }Hn_R3+.19ٴBoOY[5~;[ķȢQ0Gܧ/SRϣe^|>M' CQv۔%V-t;i\BϵCc_K)_C̵6Ed ~g _ͫb]ڠ.)E5ԻRtM5x RnhpQ޾d/)@{dǹ[4 *VH3U~nœ_erL6 ]mos#ޫ]1%ه Gh!g!c rm-HG41Eߢ%Z4 dd0YһͰxbCiylzGiSӌeyQIG^q/I. j:"bЌuXZbYa7[xI[@^>Q:@CA[ 6#''hŨzfOfO&njXET[?p5al lcȵ?4H.j"IKF퀟\Hp]>Zk=%VM{=#>u@ڋ~-)%צih8q 77+uoW6'50޿Llh} FX1>F5_CYYi^ԩހ[c_;g)k_ϒz1H` $!0gwCJFj.('K(/߮  `q#{wui`˲2S`(z"*M텆:CBSO='V);M"m/hG//5ls`⡠wM-Bm4rEwMiĆ9vn&K X҂ȵra&vgt3`TF $w,1T:crz3*e֕y}{sEv.zFfł3 Zw!jےJ=9a% qT`A1^yWZ<*3FՌgf9Z7=|vJ|]a0e" @Q$@ndZCd |e)VC]ՍPSS@%1/|u+}Hff OT.F1e! idQ\knlGpm 7Qt)˕L,1G)'b"nW&Is[G&[:>lꏡ`ngyI=Ww!nYe>BD7_ u&IѨgk7 `+WDb_ezl Ѩ?^II%<.Tm* #Gkkc1Ÿn5AWY˄zހ&.gڷ{Χ;xBC)p*(KfA*ZK"'w9Zdfwi]󈇸SwOZ9@*>r_oq7ܕk]*)MERb`l7 ;I1"F}==4fRA t,hEt#k"FiM _Qvkę"m=d?O\KSVb)9ZF3سq(QfdzKA >m] 4{P͉\-;u 5X#dmaXmR74nZ/ȑgf}9\0_SRңF70ΧP B>"5!9 0lIu$wI$,JoY$ ?ڧ _dUQl͆I0#*J M]bi '.b\m{TcJokz+1J>J}M%JP`psɂ}pXh4oubeA}$c7"R.֒DCaS-uLMlCuXp~@=_ȴEjydϑ#fU_E5kCK9J5#MaYeFl͛,SfVQaM#Z[IdTTu>> ]ޚlMkdV;ЍXVV) @70?ǂC L>n#4^ه}Ku&V|`Y P.<6~WHVK3fAo2|5t1~u(/ZBܖh~+JhH?; 흟|+>M[v=;{)HwZ^N wl]țcp!!xƢ}J%85]auWfg_'ee ;~*P >A[ <{@$ Z4_lƪܞw@IhKs"k >J$"wnFF.3?-*xֳWMD1 ô!-d$ARdq__(XviEN7wjqTgjnRb00 @(GQAYw۷8坣bTͪЬFQ/=w0C6UԪDŽfcFU+t%N3ύ} {2AfGQ87#:1F2~ёw=i`uQCǶqWy$+Wvݤ quhb ^9|0%_dʇΫp/WQKpkhr&Rwkwg C*LpU]E. .EF(iQ'Sɂ9Z>.|4A] `mEvJOZ$JMV27ORdpoҲ*_Z_ cpq]O~-'eZ{c[ƫUnmeH*q~.(X35nKHle FtN |8KɱA]ԉPƷ`ѱ"4ErTaɕq 6Kq';m$ mX#U/>T|#{IkU-2ɱ%ސP'TUx~Dt_Peݓ VYה.L)fd`@ol:=o;܁W-MB9 [Q6b2`%zt)BM3~&qV-JSKaf _FFpzNoC96"VY?/?8!4 \31Q d޽QrJ:t_Q*fi&IKZ2nvW :ML!J$i_Xv2NoP0%j^W5L GKȝBPZhql 53f!1]kdR]E3x-Ո} bn'4UZ{wnD4&4j+@3 Y/bXWpcp40|b Ys' 8a^\bY_&$^h@.~GT1Wy3[E.4rPB:@պ4Kr^Bul`|,mٵk%&vGLF4M2YY5!ݭ꣹\[GXD/Y@THu1<ق:DjІqͬ-#SQ,) -ᴟK7]6帾ǐ%5z߆j>|afY Pǎ5.KG ؎4QƯW(av۱g6qNkw;u>NjoN\לH+^aOʙ~n%}o+/㗮JnaoJm+q~Zn a=Jg+ ݦѳΒ~`![Q 蒥~];C}~nR)` X#u;`v=2UmaN OnenUW|uhmWU -Yv+[W$Cٌ_>L;m.wk8OW|%Q0ícJu7EHv>o3^>) ySՏj]a1pӣ+E" x""L3Po:B#}GF 欓B*>15m_UD rEq | .+)*h%vg]wZ/F\ vKDQQ* #7J‹jJ#.ҕF(N$[l8?**nqS%eefKUkRʙ:b1[Kw=EVO+a YgCF >[Z-r[ {Lv1MꝓyLJ8A1\_m zN_Ѽ"z`Jiu"VLJ2X  !;JP n+ IgmO}_}MtԠ uҩa4R˴_"FU}[:$F pSi>HWQBO.Nbzn:0DnY7> GXR( XV3 {r@ߎ aUM>[O{]u]PwaD Y=x|/ f>0ս FyBUAmJCDV͓W O 2`X2!ץ$TL)/ç$ڔm&M1Mu 4 du(ۅ>@E_ѡOה;ri&i.gX|)H2sCW?TX 4 0Zt~$U_uqkbHOdoRᯢZt=XGȤ@v+O17z06ak L6Ȕ-ЈldRז';URɦmbV "o"A3:NULO_2Jm4wta0\LJ䑣^m<$(Ki1٦υeJFvdlv{v,!jd0rY+x9 33G:ɕngE%5UH;][V9Y/ m_oe_ɉD\;SxUeOGҫ^~G&?F7daHɥb4P $M($G*@0)O#&j"U Nޚ̋N:W= 7?Tq£Sw *b!%)4$\<jg>Kfӵ<>s,5,Bc]䶾т+!S#H6ߞLjuA+_($$df#r@f}5arQY#I> V*sAu iZ:Uz6BQIh/ļT0 5/p~u15Kif+~bqж@ l`y2Z@Bk.ԋUV[gNn'G԰1ЉC-sD Kyyp"*#(S! Sԅi"RwbeD20(uvLxU.MlG_-yprDvA^VNi#ÇYbs%W׊Ҫ%>bi3k>{,zJQt? ?ZPh6K k%5F a^}Ow>UR_0+뀺vhiVPe$wF,t{Tɿr;ikA`o+aڷU|>̍hkQ"`}vsGI: {I_Z&UHC~sz&˴1ϾMrZ]t@YD˻e]gHgL@ pIZ\+`J~x(qrq[>k fW-8oŸ :/BƯ /LN0Bʦ^6?w. ˗KvqS׊ˍV0#mȵ\756MY=?2Sϗ0>^vުlcs{ e%={h,N(B ;,-kͤj-)EO2f|pp%A,q;:()'&#/^~/bPvM䅃*]%b1u9rc+ShiOהkl+D&a ]TUצ` =a Dp[\>vOhK`)K+,igvz~\U| ]\"3E )</#h~guc-4{Q“,h۰.}q3{[L&(k=$ c!W#MRUR xNR:o vU[{p\kvIM׶ħ8ѓx)χvziG66o E I1LiwT3b TStI- R߭z ߂Ǜj<}l_}v} qXf37S)Phy5H^T 18}gOѯ|0S(IrCf!#bA;[gG&tvđFx|pyjj7vn/ex]5,#y H( SR]8 0 ?@Ѡűsu A8у#9;"A46;ǑGOFf`谋yp?j./Fe.= hB\~v\ Uw5Mf%Ȼ5acJu|SqWR}>BjG[(ڰo7|1v+–Xx478>5Au:Jv}~ i:1'^QBfmbt{ [VOЍiגpζ~8e9_r]vX CI {IJ)iʡ0K,ς3+f4S,A vo"7WDG adލbWK#M"Sl,0h3]nСH:$ c$v<^,4ǺEr<&eY_mKXب,vCA`:Q; 9Uf)PiwKoieMDٲLM)Bb'߹(LTg59Pe寓 P1pd|WəZ&&vSӖUBE}X!N_,2azJe*S ['e.dkϧk}%i1н*nYp͒VXVtޝb^?Vrh;ܙ [Y}f4VdH]Rk61? qi.=.߹ԎOƐf4iQF^W+&Py  >:VAFR%ᗯ]FmGbu7W6a0̎3 `rv>bwْMݺ ߨl) 図o?ڧ:_za\%Hxk e]SBi5 O,Dlgp; ۽K-Ȓ,U+'COSAMhV%$ߦчIIvqCx'8(wK8XgD7us Z vvȣ>{ԲH%Al{3l  QH1l-qD%h19njG\NkFݞb'V84X5C}eKzVS4m 7;2zw˷Z"jVʹRսнs;׺ οBJv X|gO6CE_;GċfwK= \nYcG_k'0ux-Ifp =Y871Stq݈{)ccV_gmWh'2^Dn*8H{:?䜖36иc5IJctK"Ƹ]I!tU  ;)9{_muL8rgv4Ė:U"FDYuh1Ղž 7=N72LzqaeMjʡKHm V c RHaM:0**4x\.)Z{ph:tzK@8vt6u]]QZc;9.Q&UTHԁ.הf!oFTA h(1rVoGVz dr!h)M-G5(Bo^6Ta$%j/%h|~8v`m VC!3w_󷄣c-g^G-ITd-~0ũl%#_V @ ;(B=,En\-Jg#yWIh?>kCl30H_I5TuM=%gĐ 4~߬TgE9,h@i `Mr}R BesXA/Y-W O\wlCmS8{sh 7x6!+Y@Pj }*8Ʈ>v:+`^@nKעJȉn MIQ/ xPt O;=LI*w@j lQSa`@<>ˈ_̌*4Biף NH\2=`!sO2X}t)3 R"Nlit2}mΩ|jQzHZw0W`FDdYs$c+jĩ.a>ؖB"uȍ-qhDw[ ߆ܚ%lJ&;;4w,?QBfJI8!hOeZg{&ȉb?Z81*ꆼL"c>{\ ҅?g)q=-Cwaۓ?u&ߺ7sq"A< MSK*V8O$ gkQP[we kQj(3Ԙ%!f c䙽JtIcS`uxŜ/k7_[+0 ,C4?-qM$҆vEXl8YighTDT:򹝋桅nD 7䡧.5ȩaG6SB~#4fЃ%t⫍*yx}s&g8ljuuOƹnDY"K.a6 !<r%K( G޾x=JwK&!$蒹.:䌥{ DUB n{B7 ⷃ\GPGNz_L7mZT5-)5wY8*aC<}kiʶwa$NmVL\t- AkfVǭ]>chyWGOrGTK6j0_hxR)N ^f[uH"w˳0__]튫9ͱ.6kK=*>t팻M4/)G!n#N,ӊ*>M:|xGube{#ZO\$͟`060##g쯅1 S_#A;ɧVcϓxjk3f+Θ> *(EC2BWMc0N怾q@7zbsG3!,gπLq9Ԡ*6A$aB&Cy%2*j6^2 dBl9AeNBQ۳~U8 V>!*~)':vX818:#KԦ>}xo<1 |Oe@w e&&s9[5u * md֟~(6+N5ZЬ*?)Mb pgn@LᎰm̐H^WptfӴ޲g7io/P7r[Š,'gcz*kyXچ.s!uP(\.S7a)feIsiU)$TLMвs^WeaUhDz#Wi{>j|jNpںəQ;\n򾄁1p#P"DTJvJluحW4S(DLS*P8܃L*3;H)9vcfl Jf!`n7;s+.Hv ӑ>C4[:ydlI(ǃ"Wa1 t*iUV( @.N T˹W>)`[Fk5wze‚`9f uͰ)]։5T|󼥶W[@ (9-hYt,k*-nl^], Q./‘M$>gv~iԬ _ls sJF=qB9iW"_"( x$m+n3oKGĹ@I]BF :FF[Gh}ޗpSRZ/QxmAvn:!c{3^?>AꝒZUYj?s#pHv7CvuIR@Ɗ2k{p(gFÐ'_f?fUۅO#l9cyHR+G6 ;ؕ|V?Rq/0 ^_CyUgUd1 e;U$ꂶt!/O_s`wԍ!ovXU$szI C{.(e8Ԏ%r: hQTYIXpJvkk9hhZtR@xTqEݑKRw^ŏR{&6 zXQ{Є ǺJ)7@œ7(;wvÕ˓դ\C~Ztf~O*Dv2׆㾢s"8䈦e/eCU |ZJ{E|*4+w?e|op:| + <#nd/G? AicDXn"QBBC`sݞ\,Kw]}[iRfz8uo' ]ty–I $tK+j* \E. B 'Dj$:A!'$NWV rrr#~9K,=k&\1} v+3f;rpLb*Pv1KnQ"?*>Qk4i }P/lF e*Vcو\*D_~yZ4n.)ɀ%C?yV' S:C>ґSƂ:z˄VDv78(4C7TU3,d7q-C u"XTڽ?__'ZV+dG>X 7Rr,I/i?7U.m׺ilnB*V7gԇ<+4 "Y/ZXՅd Mɨw/f.NAS6 #H+ ̶KԷvxwB)?e{H~W<d#$/jQvE8ԟ][y]/,m@BFb+\jжxGlҘr9oʼnAbo ҈Rҏퟰ9V ӆ*A܆O*ru!V\c"pW.b?}"! nޓ]}$ >oD~7SfLO}Q(YZHP[ڿ~: ,xnd +O>2]͛%ٔfY(B=nvXKiwggKTXansxx2lY@o$QF ڔ~^ ^UH0_}$զ-V+) OoR fs*d4q/ӣײ~+ TsA)KJrw]^(L}C-[ }K%WȮޚ?KKb6<}Y[rзNlcj(Mʹ>KW' 6f ' P|yi*!Lɀk כ+^Ċl@%Ϣ.)T: 6EߍQg&CKKY*g5q- 芃 ˗/60-\iA c-Ȑ9SA{zA4duw#;.vCڀo+~v=ޞwߞ,Lxm\MwcH29`)+<^SMN_-^PBn$a9hXE``UU-> r̓`=n֭*=Cp=U5 9ässUPŢهl53im^J#]3 >0围v)PlBAM͍֌2GXlOY,ܲj~`->:h')6*/ . viE$,օPhM\TG>쀑Tnn;RQ)h;@&ߺ!cR5 j]V Iq 36Job D< 7~SWRu2MLhd+#>hmqWD(#^UQIh{i%+1AθM(LG!!!dHӓ.M2'B]<8:ZC_Exj!& 0d2hVw]Κ ۥ=DmHp;Mޭct)(>h1iۀv#NmȺӕ1ͻ)w־/NU@WU͗J֯YsAA3y/Yv=N#a .;'&7x̃1Ƈ1Ӆ:|Sޣ80y%nVŚNUP됺Ԝ&r?sucA珥0N")gun HB+ )1_ii0p Ug+زPVݏ U6K}{)oj^73*<<&I?BTs%9 P Q׳%u@C%d3<ӳ{?Do6#N@nr*q$cw=8F/>jtɜ(.;iSkQ:zx]͛v' iܺ :1mu]QU"J_v j4E0mdNuДYVz,[^){T5" $Bf%C$d/x+Wvٯ fw1nKf;~+ kڔZyo#1AD;t3Նto:Y7 m)`I!6G81"fvT9>p2SGvB_Njc#/ 7 8CCf3 =J.-fl?HRzeC:_/W//&7߱]8 ノȭ+D'K(N = K#`[Wn۾̿R3Zr9bv8(_c&yycTNV׸_S^M|\r?!No+ \&-<7 +30Ѱ]LuL$hy* X;(R hOaH0X4L Iy$8LصrzS4-? . Rf%pS!7*v@'R:4R]>nbo%-F },BIJWnI)Gȸ˖ ѕ<8{U3SFyӨ|]kw^Ya+!/Z]0c|ìQ)1oI eMcYBB_EvFxכ\6 bf7x \M_/QJ1;D= "=݁r$m/>o1Lf#61c]*MNhHA]`%）],AՅq/X y{mYUdfk! ^ !x?t/ox k̤iN%/ފRR/*s*ҽJ^TiYBYui\FMj@a l@xqMQ$?4w Yܪ ΑT]Hg%( )'ZGQ>_$T9ujb/ 7x^2@==&epрm lE: n_,Y4n0[!.$B~-S(2Pvؼ Qp0D$w_-A܄Ӹolڃ Ca#AMQ1?M0rV\˦gDh3`l=W~֎(C'Nq%>k'$Pй/k`p2nJ}#kEâxTIv13Yf߳G'!,@_+Y)X0@_S\¤vFg@̟ff*t%5.qQEX>Insu۴șjV"1]?@O]XlՔi5n(t)s & GL=FrEqU Ub$F\N/[ ^2خsU{o~'SbV 01Ohp0'3F'81#Defj8lYjK&"!yt@[Ւ}aBG)JRST袡(Y|ۊv{b8Y2js>^9Ug N9i #]y\z~L5(Y dU~.&ܳǖY{; PhUaw"H Uen`LƆ=O>|i'I}}]cO\wAw+Olk-W\ĂyZ@P-eNƋ~o`._g0sIo!,,J `UkDȖ T.io7*_ mwE%HL;|6/9ah ؠ\:ө)!bKC`KA/!p+v-mR*. }ݦF3fyu8% \}9Vp7&}+jo7Fw֛/g2^\ދP<}6=תBGq3 Cߕ%@8:xSr6YJ^LJ N~pv&? \<`KΉ}[]—eyb"?Qgz d#\e fO48l5V]tb )-a@&̊2~!JϡFUCFE`H'Ow,"?0kk;,F }amź$Ht͠h(ncCӜ4)n>)7 fk%8gڕ\nSi: |<cO_`Y%ZJ(Oe\5D/ (x1;id&kEfN,ȷTص!60a7IԪM*)NJHZ< &P7pjӌҮOM_@hwH6(ZT=9]KAi&* <nw)PU0-t/=\F3BR*`M;!Ck,yKD> vh^IlbjdR3,d7%fnox}g+:y<\ۉĸ^;h?fRZ@XWnR0!E'aiY[ph~ 5~N!WO[k,pE\is2^Lx]w4"qTergP(AVb;6.6mv"{MV@O73{尚5EJ:BEw4Of>gUf>9w\6uv`+ !rw|yR{ܪ9T&ObHڭr3:ް/)M@UVOjRVIB%xl)E#80Qc&KS?`}3hYQCn$!#ig;ps-IH"i2Ɏ,UwgXʩRr80>d"":0QM/DX]:9&]O1L|=#:d23%9vLZ;` C!p"19Ԯ(K0E7Pi7IW4jPܫP :wlOr.1-eaUn|͋!\'7!qagKn,{pD׶@coBdp%^_"s&rv. 0C TʷQ0cRQ$/o+e%y7"!ZQm S[~R/b3oB(3)D:tԓYv'(zM?_]Ww}{r"4\;8JQIVieG~ WQfw/I4`$ "]ҟ ֺLMGXF0%t>$.XlԙdMHJ?6Dd ut{:IЃ5{ 11f=q3\I+<7wxE|g_J!ْlzJB3e:H_|)aНGj}E"ejxzdJߖYxAԧ6*<,Z%&S(?ϫ\Ґ=]gv1,84a7L>`xNKTs8GN;' <vn)8҄7Kj_l8rɟ6"LzN𧸷2ӡhc`38ф?ϭMW׆er.TV`kL^Z, rFK+c6[El@r˱χyQ2o8&ؑ. іR(8z։ehy׈З1?*|@WVnn) dp#Z3FB4,9^ PH PvR{hB1ʜwx#cM#BP拌 < ůWꊂ=MMtU]u.9z!O Zʤe(ĉCH[qh0GleȾZ5'7`rE:j_0RbB=@PĞu7|y2HK4㿧 !07'h5% p ZzLȘ"!.WSf_aoQ%Ȩx LCϛ w6c9F~{ Y~TtӰ6@Hr^եhM-e|—r ISiz'`ojpGdKVn63>su%2 B^'1?JO o2"XK8e3'W<'{~7`ve$HKV]>>NjdR@ 3z-9%X1PA ^O&BIAe^Cq}nS}f˦ 0?=})]1= R,G;ˁ|a9 SH;#lV4TU] #iv,Q:USЖ,f1G~" ޻kt.W 7Vuic:,׉>iSTBut :ÄLŭNfGؔ}]wF6{vdavCD3 /j_0Jw,-0H͏3pvć(0;a`(1x[$T/b bA`lFz*%hcgW'i.os D; A.iy@'~qtL+ׄ]9q5Kw Yiݷ5?/y!}%o ~[aŭ~%ž` ͉M @;\Kj%r3'lNlˡB'W@4mrcQ)7 $T9f;QyLX˝ c&œvFq+Xr^%æTNm̶޾ZHW~4RKM7PD Nz̃(Py^f:N>Xtyy7p`Ns#!pŖ]8HBl_rH(rK-+sj\W* Xs =`zܽB~Ί\?H>uqx)4A&{"ЖAi4ȣ빋z`oI Y1ܐpjyܥ"rhV^&Vו0#&*9LJvubc8+ rьW4zઆ$pƖt4(LHkkq7T+M"=ze"5<7%/V48͸]aسR'iBϒw_o5 O,I@m6z{fu}R94D>OohE V&gn0M2,Z6\':\qt)4qOEG)F1ڲ_ָ`u-U^Ph'Rـ6GW"2!aGuaDIit/zDbqot01 T!CT`55cz>u t,ݷ{gDf!dl E1N8(+*%D`% e4@a89eC)Q 5>dpYӨU~=`!u;X X%FZMŴJ7 H ٠fvj/5B|3mtm/'R {W"VL.J6N M{Vo. {l/IڔjF_7`E{;I0 `~A~~Y]}9Iu}+Q5wwR,q2%Ԡ]#N@ }'{,*ΈecDc%흸,_,*ILx"R57@d VۿY_2[۽ENtĚ(!i'2qKs[H*L鳌7n*ZA3=Ϯ%F@Wf]h-ҩ?G| $Fx1 ȀQ(-:,pbe@~:g=Aw"h4->_uƍEz#)'0BWQ;m+KCm1i}@26y&T&K[%+&~V.Ў,њw^3`-2(l؇xuOy뢚5ߨǚ;s ϯR[atW@_n{C(^ Wu %]6߯p{8tO0uB^Dq V`xKaB6fh^LpgpJEWȏxo8xKTBѬUX;;v(lBt)HR#)G=6ne/Hc=cľli4{u-v6,ȲYtM_!qJ c]4}aG `]8~;M(qDXvN w쁧]vX8J_sZ#h.e%SUܢf-XÇf[g#jT涪3/xDgzA?W#p2\YIR5.NV&XK j&e%(jGqp2[|*n9 V&&MѢ#L_%fHAP!!sc>&`V;hpABCK#6835Mg!FWǁl, {ZRB6wswlK͐oSgm XNjqNԫG(m U!_Tg(l$F.Wrô"Jv\E4Q3'iY<Su ѣl08X $GGu#+yԞpkIN[.':\זۺ4_e(1&]lyqG>Y?ںP. iaBv5SJ,ov'-2zE[E=RZN޲σ6eC*(n1J K\dꋋ饡-ˎ=y!Fr*h \g8T: mG *sW(҄$ZFSZW@誥+bx<ΫX Ws l͖ 4J .m~M?'fN2ź\kڗR64Az-ΟX3eX՞nO} Sɷ"8H dppvg؈d/lu+1*M3v`BnJ,)-,'`r5 V13|8UY5aE$PaGsl TFǫ Ξr8L?tiYj.UWFvKlH5*yAfyhhaq~y)Ud±b΄y{ϑJk@#CSGb`ɫ= $_ `XOIv ]i^An4,W$SeWg{%7w{{N48R urZ4C*{H $OBecpZb`ҽ~q>XEی&. nCT+S\3 Ȥnp[ "+de˒ ~aĻބ2xnu'LFO+be* Җ9^otQdӞ7d^0ToL@'8LWȋ 9Vg&Oڹ]"8<^?>8؅t(O_ &EM dG`lVLTMw{:imFsJ{⭓3+}%||‹GO)瓳C0v(7=|&xAKvon>RSq3QlP\]u5$uFp8F V0{ˊʃo,!(*!OiޯwLR`e .0՚{\*9jFch'T9CٹR%ƀbҶ<7L9޻:M5Zas]D=9$3&2oׯK[$pDV,k`u#ˊ6MǪ|49ÜL ~/D(' $z!PeVluW$h1XOVBlXZVrfCvmiSVu: |C j01)E g{K>Ӆ'e' H 6:f[YNS$P3Xk -=ʤIGPx͹1Zr Kqh׉loY oM X{T&ńyISFsYYһٌO~.2bJd#qq[ݗH 9#KCVݣ^%c)* *,iƈTŔ.YH4sr甚k?!ȞJ`(n{~c-MWI@NU!?P_!)_VBvK%WXALǁ`W}bżf"FR M\cbV de/f٩CG-(&< %;8J.miW`j cݢ>Ǐ+xm>(o\&eqJ:6B|䣬qI|mʶam-ϗ4ע&o^[^E|7>C=+W,i#~=o0b[*bde/i4Mxv$ZT^ PSYJفG/f;ځIN-vuhﻎqз9賜+ü߃TD-}~(k9ւh?Y<*B-?@8c3=0i.D T9AG.+C&u1swT.# y+we7ihu+*!e'ottst5WdJlt! >/fB?h`ޔѡʊ~)\;u`ŜoAj88wIT#qnq)L[ol$SF 5e`};T!q< +a~. Ku(i/%{R&,oe8{Q2mѼ(A@iRsC˅t7e\=iaiq{"w`,7D=Db)5"a&8Z!(كvKF[5/-[G0 K6 .MOB5&MBJ4, {tЌI)23d{蘒}4'ߞq (h?ݬ_XumU?n wlr2yg hX.VלUGLn˵Usz )ѵzjl5KW!>LzWw;.4T z ӤkMj==wix#w6E-d=YjX\&AYܓ]ux!#Th7kOFo96K+)-XysԃM2aUۡ*}e2mfox3lR(>/usېfiEF=Wh??ū'F8 7 'W9E'} E?0MpKVE'u6u SZj ].F׵{2oidA̾.}0W,JD&DշT]֣/,r gx,Ut@xͯctH㽞->Q7Du3RP&zzAeT%.j _]~*j28^F20Gc9v`ޞKP2yxq0` ✼ximW*3.6eIu#4EKw.]*aWGis[ow;S֑C&8+5]+ [H_yb.C!=sMF׾? *py7ŋW ~?" )_gUY)~ye\['3340!G/O4!E- ݴ r+^R)L[nMV ^8x2EQ1o/능%G3'a7᝚&^JY03<\77R@c"n"+ MglBQkvpXeHXvA.eوNG*B ~I@Iw_tLNMI?FtK4i)dXi;^a'^@,&}AH)MDtT "pd^rp`-=Ynan@dwĦcV9lʉ~]Ru,f"}vD0 $%%\8o16a}l_8, l~J5[{.ÖQ6e F ;,NCyzP2MIrf [̆c%C#7r=N҄q :]ٕyT X=;5e<2PYf eUΊ`ʂ<lcފ6hֿsbqY{ AAP:#1ut>J{+{8mq;ED&d5U3@"VRX?{ 0 ,ǥ d!F+s做es$)e /S:(/Qdz9!zx+U6e XDI6S&e;e0| GN+gsS6P? URw3%AXb5BdwJdf,4:,UuJ-qmw/- 58 GU:鏾.Z@{ S[ e%S ޾2(Q9;aw03P Pn3"4"hٱiI?:7rgm18 lϧ p3>8˟@lF9`9Lս_Ba,‡4 13]@%k7Y'FؚLI^ | m noYX^s:[&jB.+TX~\D6שr*!| ;9HFmJ+:?8 ^0$> ΙTDY@s˸v ;'Y"[YnG3랷ќFz=""Y]2#rYH}e+Kݥ`I` ڜ{`qO]FG6{J7멪E 8r n.+*{C\bu4Pj :h1k&/K#x l־2A%Y27o<?,CqE*8fz\he*SJ4wæ#69J}"ql?>1j #+}h/V%=8wYXWƯeg8B %S&=IRY6R5Vf[ќq6uHrù`:;)='/rM *n$ZL3cԐOqSH'R{>}X,'G- $˖%rIkm ,uA1Ȥ{Q2ih%&)LfIo /G]'hl6ao^} ͧqL{kVSO"'tu'<5`jfM;:ɶh5xeJC3AǧPOCW}O>uNH6U~()@ރS3GC- p`GHO'z4Ҥve>#" \427ؼ- vw짣[ںm"CRƉFpMIM巧߶J=or<ܑ畻7Dz$0Hvw$KL=9͒>0@rˁ=}ܴr^d%4QzxN^6kg(Y pa NπZA>r/}9t@_$C;[q~u^I(Pt GbJ3EBiܧtP^1s-EʓVO"L 1f<ΜZ@'C#iJ2J;j%n3Cy %Up-Y^ Ҿ=1' n3i h#=|)A4-\sR9Dn2Z׻ԃN']áeGaT_f,pnQ۶xW.M'{P@*gjJKM7NJ0(jT\p,u*&n?sv(V# zbXX/(_owL 4L>{I]' ֢51Kb:&qR&* EܛeͨI#6t! Fd?.z_pT2uJ&[6zERi̼ >)V3{ Ymaeo2xsuKrJ7T{bF}K0m{(tuSmu%)4@NW-_d)]Q$Aj7D%23;iFM]q1Br{W \6F.jCk礫WČKQR+9w lSr(F1A &dYՍũ€lgq6ic̝U[2?{f;{ c*%u"nUֹ\W~,!╨p!vQX msce=n{/?5NBur mnuG\qִk,PKkб_ϗFD5Q ZH'-y"„FMJ0q:XBi\f|[[r5`à0r:>_]ΑʝC0JMB[gA*dV^rs!b5qDy2mD8q(8Jr:]Z DkS ]V?i Yl(u;reZEJQ R56r$ ohXE?u{V2f\r/^nsl3W98}6hKbYFnZ baɘ:kFq  @ݭN'9^(Vbf5@rhvjTN+2PLȳذ0ʛ&eÿSꭿ?\/^/BpP9 ET?c.-8LK ,l =}#堕I2EO5[Fo; k{em.^"g{L %:r ek>9&hr]W\i FsK)Xï#2Oj@IeSf:yq:gRxOc(c3ye7)T~/3lS*Ipn`]Yс[ |l?-jHghtMT`ˏ(\>0p6k&&ܧO"_\MS$x[2Z&h1>?[, uk+j^KɄK#1zq?d[ϢUCL2عqEd*N% h=7?4|vͷ:_/7[JԿ]I i7ubU;dw2b] 7f0^ƨhF`*ˑ,8I^IbYai&@ٿ2 <+bmq uE }5~eO@aTӻTۄ-*Gsr^vcgţ kBJgF?{(V=ox³f' 1 DƢn)0,qtIuy;[Wvo9rF-W֗̈́ZLza3v0j5;G n| dS%dg+-c!!f@$0j p[s_5 B#"<Ծ,oP~mHif1QGz(7X!QIpS݄lGZD?UX=`WkвHm4E% &,E"cH; w-Vs7l\ E (ܸ y %hͺDf7Fdob, ع؛A-@!Hgk{N4տ4E ր4hǁe6;6ݨfn R 8b;8h72 @7 #e~#3ǫR }6GLi[eUݤ?~ .Pp {"()IAڊč+?g5I"B (/SE5)r*_ jmwvW6ES G7`LvfJŀs:5K}Bim݈N oR'_ڝFlJ2Iw\JvvvapEG=ikmJo,z-}bh]knоp{HY܂1tTyAk,@V]Z,ZQϞ0VG#ÙSpP/5p㚽P|+me4gu9EW(@/6Zddr‡ๅQH?wX A"U![2N߿ : ZCJ_F#B󠕣Mվ15mQ<&%ԄEG_k:Mt-tv핺,~#~mqOGI i}%R2i?NƬ&|a}[|# Q'^Qv'*ͩ03V'V? FaO"dʧ,V,4 sXsfW 6O̞Ge{kGj#mOiph鲪T9]HZSDlzUG1Oߣ}4q&m f9@ljYl6̿qC\ t%[Qv)m}nk^ 0mGC4p1ATXg%A:ٶ-NUϮ"D!V<\i ÜwD4F)OX5"_Z:ZU) XT>T ?F m؁}*W뉦+Igp~p*OKn}Q\ FgUim\6ϣ̿6)t6$ A0wFhێ~"+q8J6ǖXgj;^y:" G?=0d3de䫔"C'`Mڴ ^;o7H=R*:Q%Un栧KQa7Kor\ԛTo{Ƥ~RQ=EVV_뮕Lƥd tuELA%eχ *b%}4T4ɱ|N]#X1egPgNzTK#Ҡbg#(UǞ j&N튻"IT^{GQ)E~mysuzl%d:qQt܏hw2ڠwxnn6 bUOb_Y)`XvfÐR=$tfC˪  -PrL9p8RYJLHBzZo_TsP9Lp`TdqĥWc-~}E9j^Bbm8?'M]h]&;˺u)̇uG h wKK_=y:`"ʅt74%dkI)hҿCX&jTbu44R0&!_bޑp).tjEIuX8M_b)\FL\Zݏ47-=̹д3"bץ$/?T?5AZ٬7`5 7j%LU`k8/[`;  @=D=f7^O2<PIވl"8nF~@N;jꕚnlR/WynE0_ !`}+6ݳص׽$jvauQ ޽ll*<.X LmiU9 v΀؆syNnnٞ!y'~CCs`Á09[OkflnF ^TmODٯȖ<5,w%|JK)Vtћ}3j1 ZO: <qI?}2$U͐=FS1>Xl_(d2^ d|i=)Rl*KgODțG#ˀ2ӻqYAnO,&V€JKeºXvzŽaufȰ#ȸd_}{;048Znʉ4R֌cLi(xN  tZw$}ĸK`\3 }oCX˳W㧯 yhOx(9m;p<$EQB3Md/)L#YYd،+ \B*I>vq;o_V)<@>/.e. yYxIe\bc$^AYf0}V.Gnίi(Ea]0c3bFlIXoAN|X0$Fx)L,t~(Qb׶&0pe"$/pB@90mIĜ_|{L̰Y u7>6f]DM :GB%pxi0Os×ǦҷTLIk54 $f4&槜n9XtJ0QG"gc$1&ؽ漗$i$ 0-!@IzM\* C~ >3MЂ7*c\DR!:f8rtO.;яG<*CEn(@޹v~i(pP֣|cJ]AIh=uoq:/;9ݧ29!/z!v=YF K2gn:Fp(c,Jƿ!fhH{7-,zek[ ي}9[s]gqP.089qS[a߀4xm2MDN"Ee ~KnB(1ՌL`'gem7\-߂oZ^b.aG14 kKb|AA=-C•(X7~|Iƒ࿟L|,Sje0w8'3cp;q!*Fdv+ "D"gD-Nyktǎl/S77>-uzI43+0ҝV_h]g<˧+xoO˝:FcmҦ E2>%m!Cz[;7b^T.ټY/ָ멑B'WCRAm8LHm;.*a fEw?.'!s8i׵QߓTĴz*%IlgoNfB\w0r8c7(Bkpd&CL(#!58{`(JT!8^ن~*E $+̴qsdi-_^O=O~ެC%`+h Bn7*&N"#Z Vy u_&D, Fx3S55:vgrp&1%F  8.y3Bk]%U{lH9ҙ밇W]Z1k;i+l͠VKy>u_~X \5g0A7&Yӎ.bۂRXs/o}Q1×} J6( @3w?7EDK\EнZbxs}Z_fIх 8?<3g`(x"کIWGmOJ Q5P[us]/Y.Fejja/#"O)$)~'521kP))\5JUQ7 ; (5]hf_@d>G׾o{֋/=A&IP,^mީ%ҴL$\9>?:]S:=w>H>-gIaorDJXͩ# S6RFсTvN$h9F`ƹvG c3/TD #ⲿVl բ~!t(0? |56AFV{ }J}@ߘ<,qY,Yf>=1K.1{ pugg({#9K~ؑ.A= -Aۚ5ׁ.X8q'5A5ԛW׺V?6ɘp7dd\:{޲ahC[R7d$ v:x?S(M$IqR^/$FN^S|Ԇs$TPU"X<~ڋCa䐭fa"7qRY_)n]Ԑ)/h\4'JN۞qW']UdqB`T>_lNU1VQ֦H"t=I-vzIw#՘wH u#]8oHUCQ/x%!6R"U8G)7*HMXAKlx:?CfR^8XA 'sasn9 Qo5e2"u<]DJW nLFDJ݆j']؏H@7G$Fsk#7p(-qW;UdFznFϻPW&3'tsH7i B𫄪?"wdΦbvV/4_nwm!3Sόy+q_:J4ExE;9%#` ٮ偠,C>"RrᕹN!pFzJuLZLI//8Kl1kAGiS4sŠoGDzGkFp.3fF)4u:7hXY&0wcH}3 *H7f`B!s%9c~ <+ؤp2WיQbq9R~,@<c"M0Q=4h!g s3PȬ NkoWxdp#v!*R }ƫ-jL .pY"鼅\JrɽhXXdVjmҎ5zEq\H1#Lgu>Ν;udG ~45~)IǧzwwS۷  Ӏ 98gsvŠ馛4=tEې/&>6nEnY3:~,$^eX9Әdlq?ŁsIY}QSl,eBlC$%T\%vwڞz;gۡaB/k1|9z=d$x62) G(Z>!TDK9t]%z 2 JƥپmcBjYX q κX8h.#)Yn #7psnMg H 4H_#Fw\,̃zAQ+b!`"Z2Ӂc9@]0B5+I(w|;`6sco&9Fjc']!&z@W>f堐U>FY*@WX75B.VnIZeL+ǯ5U; MzЁv?y\\엹!>.U`_R_Hk!ފ~nupj[I}ח8M.ڒEtRg!910/X1HtM2"qyC Q=K2!1Ont >f¾?՟`QW JE#_\֮B  А5FF kfr@J([2kKa}1C({6}UY=wZ!\te[R4[?Z}?m:Gi+JЁYdvhNٿ3Tݐ={y:dJ.ɕ3&Ӏ "u($C n!B3!5"+լط6Ru1X!}: -^i[2*]Mډx~Q]Ӥg@ dُ e9(9ҼiCeKGq{ӯˈ9%{7]'B%͖BTםቨ8 $=jDw#k#cǓL R&`ŢfyUxda|ӹqrb9|B>Ex B *P| d}O7a/qh,vKKy~La%+-ƣiSup;Y4{ +9'n|[ -"|}9!f=D.㾆X ZN zbJR רvyd`|זULǑmgr9|p'1S8&l K+[+>ݴkX [v[B>^evF8f #hcbߢW{/+~ޒZ_L)Ig n4IYzK?fU>;kuqΑś2ԏ s1BI {3sa'}/6J$=A հ$R(1t*-rnzzoM5ʧb|kr38i ?~>4T"܋uvyk˷6R6{VbB w'^Z6bJ]sbrx2#ofd@F[㻸c9W:XA.h 7W5J ic?F op.<)wBq[FO7!R EItRU@\M Iz@ i(ز`i€l#vK7Yֱe=iۼ}-t>rsۯ<5f; Q H#,|`(L| %v(A1x)J3O=iwhEfAVq7sF4g?TsNP9q PRzɶ 6XwV/gwԸ\uЯ|Y$p01)ңZ>LgAUy7mxa|Ra[ 1ֶp Bn^g&P@*,i:uiO(TѺT2 J "XF7X7%z埳`~*)gqJX>K )" F#GT{Tr;{GVv=sT?D;C waar5(b״Ţn(!!uU;?B Ѡ7/d$Jl{bښ .'HQT`Žs9!ue ye'96튅ąrL*| 区|FO1-~M03LX!51c8׃KYo`C '6P:vop:˔cԴ#[MLSh⍵ R&k>g?A0}︐s:+ێbq|φ2:J,{yQqLBLIݵ@/V_1_e,"ET7)1>huDWyJ))p]yr`1iǂ\hmJg58rhR})J󱠆^cl%?34]?f\$SPB}n,R#g|u&j28,h"&!0i*~T4ؤ ,&`9e+ z̓b) El/sK:u̐0{,'^RpоK"y4Iד΃!WRv4%X KH. X1_*t^'.GhxW)e2wG( !ns:֬jqefb8rG |o^gTu~8ȝO!mvOgQeh羛"ѣjh>lmġ`lJi"V3F`YYcAIObL n2jn aS} C20.=G^IKΉmcބ'iˍW/D`:v dd͒'`@Oi79pSx˾Ze84VEI!4WE1e ã`aLbTK Fp`B6`hZHc (eL 6|լϪdTEl>r=j@ H5-WL]M,K9 R (d^*4@Oʳ;$,8> -r1f4ۏE? =FZ_ :74WT;|;_YD덙]Bcju #$ C($ FHGǐCtWxZl$^!WC 6ŐU򃲩5Mk(Qf016ofGdMR6yD67b"@fs5iNBcNQ0P|Rxř28݀eG_cS:ӺnJruxӒϞ; }8Ihiw_lB=;<{$gf{I]IzwߡK ̖,%/X1e%pɐxCj7\[Op0Sz?䡂A<Ƞ;̛x3OS~(ɖݷPi( "}Q; 3살ӃI٧W,dIԟFCJ11-|Ja'RS>1mza|-e0*Lu%fSSl3_}C`/ګ c`3abkxR87D"wOYO&\Q/kEO셅(Co]FJdב˒ a.=(k̍FBhFya,&x{4aZR2{UtO{Vz9@n$'Yb}L/g~k(g￯C`Z>O|kC %ߩ|hO\2F8-xU3[A:&8_ګ-eۙWDO3F-B5} cRnT5-=z_Sȵ~Mi,6q^%V@J䍨~ sv=VUR:P0GTu[Kh1n9[htr3x8W1Vw _NtCz!r^28MsB7XЂPO.ԼGpr4VpI$ː=iGsN Z6l7eqZ| V;g;.ϳya6Lx4GYYYfBr+;$wK G$=AӮHW_v$PZOX3f=:%*]ƈR=s2 Yf sd(:gM"Ź^h QP {FvyA.0<z g~x@bwu3ҳ{0< 9̃GWMwL104+WZi&"J˄qf7zw*e` 7Ol3Ge\+B|3ږl i'govT4gu+_ޛˢ&3h̽L4Wϕ lL[ R(ubZr,VXF]zVtatC^z.&Ϟ{Q _O_}@;xO>mv7pAwmģsIՀaEFV؆8a#3P dXT&RQ[\QVwfWnq8X)aQ=ٽ+G ^ Q@PS@ԋY+ f=R@S#3yҊpv()m$][k?C:EG'yly)ƘgYeEywK{ 5~ ] c!P ]&ojJ}?Zdm)ٸFugM:BX l>}AuJəǣ"$1uuِLK"fw<\?F Fz~CiES?+VR'xb=|tX]c3 $GZQFvo<71Hl*/]Q+bw'A=dO64=|Ug.zY )~h_V!֔=z:mzp}szaD'2Q|\|-jV?dapji8EV+#n6;5. y881,܇D[!푊…c0Py( B">rݬl9qAIM2e'x99ayݺم cܣD]""4r>mJ Ӿs.J_ʙ\y;;$>F,5/hŨJ&{aǺkTt+_a!/1yn}Q|AnyYI 8#GOu`U_:qx d/bAP/C/ mh]M7#wZU*: pQn#@$<Hgo^d#P]@ F,Z[wssI:mv8̊;㰱pWp|@OR= 4!"-Y.1 >#^d w1MXhڇ/N[WR/)z@?=, <즁/u ,zC5Ww|Ly iRDX?hOQ :.g{_ZX ;PR huV0| NwK ״P5{#1 ᙵxsxD:\?* [7ɘ 8` l+PEЛ҅_q|&FAiQCv3@ҐHd->Nbg*; fp]PFGޕeڠ̄ QVf&ֵG2V7qrs}__+hHfϚ~V#>CfaV3<$wBq5gI ]VVø)U;2`˓wKLɋ>Dlߞ}Ӕ2bɘQ4g槢H0jSUxyZ Eض%?C ލA#qY ƔJ5LX߹m(7D)w-$~Ր[apqn]՞Vʼn< ҍ3AuyѢ%{-K)t֊u0 4ײwgmZXI1dX*x1I+uߜЧxXb{?arUfE\_~(qƌVqʺE$"zD:WQ("z\X jbz/K=~"˔YL,``kށݬx)Ʉj"G~z:Hy'.B%x(!2OW3`g\ vP\ 7}(ZMsUۜp7+8 2gЄ #$Yz>,؈V\«"WZq02Oka%tpt^-A=XUɉA9#;+P}TG,|kg!O_yĝhI&7n%hqO,YPל6JVg_K? Q%? LAA/FVB.ӧ+/c#)I&Z SyPd7},thY!׷cXYO>Ɠ_чt$KS°P8tm#ELmNwۘG1͋v AGE&;Lx|F%GMUA6*Wn6}I3x2oȰcl{,j&5]6 91RӁ KYw3uNT+q T/0tI Lݯ27m,SG6&az5IZ?Rjd>x2V2ⷝ+7uQ$bxJC1 _z;,!dqOOk7^#&E(8/0GX-՘+Nwaɽ6h.`.%PvIjmuBQ oDT8Y LK4|Zb̲::T&th G8DU?O]xbK'&j k_h5ל`1"c?T"0(Z}GoPsh ◰ZDq8gOEq"UjhtZIk6vW*M f jy6(i OakPD`焋 c5"oMkEmkd-4hN"T3jFS)iJC_FlD(srLx6a(ZF[TdK.2Q6xfc#Ǐfх?b\=$/^̓4 d fߪCFEg1A-~$Zn--?|ԁFR$<4?AZg{Qg:0^!H4T cҼd Ru_5Ulk[ʲ;bB]ҲS+|!U~Aäc3ʹ= p1bl̦1#cUW#IA>*rsF ^ӀjX5Lqeh˲:MtU'6j3`_:qA,:Xd})b,$w'zPL Qv26cxMXT~P.4158y#ǀ?Q*X 7<?Ԡ?O!Pv_5rڜ!_?@yܧ'X@-xw2 u wDLj_)!ӽtQ NX.:DADf̐UzE2ct<Ȩ䒣JBL>{ uQJ"ij;LE|x$]8KYƻZSN%q]z 4)ѬK%?dz,wa4})ëSҭ4zu0W %jgK*nvM qu:qjF{BѾиb/vD;sc>n:j{ a=T ld#WEU):pV B9;dDYv{C6ZVTgU*|x!`ǃ8u*#qJ+4&TLP>|0)L>mMdQ8xL*9zaBg@; R84s9 /4-͋U^ZBP`HUB  H&qgmGUZB2\],wz*<%/\l!!F`P`B?웶8|CGA!8,UY*M;gTYVh˯!%xҒԁg,J0YSPRmnPF*3Wbfy53Y ;dsG5 tñMe V@}B>)ds_]<ԘL6sHĒ| O7lhͳm|y۽6'k:ۋhsFo'3p ,y]u  <ޫh7m(|bUĦ, ISIXLPFp a1a9^JV@J1U"!k4yr(- *C2*:ȯ߉@ټwUB H#:>Yǵ-X Jm/[zpΜ"8+Uhp[`6ufip4u5 kY Υܕff?q8oUI/7`{喸Jc+>Y_֮DfɌp6*a5c]{{R94F[f RZ`7 U;H(FzdAd]>H?r.v_:}Iӌ2U,P ~]*~ ? I3Z6jp6Jڃ7MtIB uTGs| =t[~HzC06?"1 ߏp=?J˽eZ,ڗFfZy]jۂŸ_Agaցmrclg{*o _ݟ&FI$Կ+kZg,/DXa`JyV/lkip9n+gpa=G5,S "02̭z^FbR/uYL1sj z1!k= Xll`sA:hUƱZ˔Y+++DXq7.WEb@J*\y˂ (9HR†˜1|:u'פHEBؘf=3\:e+/H5 re-Wa-t^|Z yuM[qKu,!!sL+vM ("|=˭Ld Quy@ORu ̑K 7Aip 29+.bvNA^/a䟏48(b^9]G] uk*nG`bxtV]V f`Wm9 {O:!Di"gX h&$Cڸ;2$p`vyzAC;yӕ_2ߜ}(xޣ Y-B]23(eO牠0"'%J~9$k1hFfr+RG51҄S^X][7 1s4R,DZ& S`ę%cԏ7 -nDŽpOY 4I>S?9}AVrp))oB XB d.:M)Oxl G^묟A.GK6[~6UOI-rv4r8s&o@F(Q7ZVeUUwhΫ΋\:m58D쓦W4k<9JwhTT^A P{7rh ]H$Gz\syRޑAOS9TtkS> "H)7NꍣCh/}hr*.(Ai\'V†Ϗ&5$l"ǵ~X0w5R-+d⻌k47!;P=q|ԛ0>r!ވ m#,euuˣrjK4D88p5OO6RwJ[9? uJJSvoAɷ:_ˀHIיQƻU l~M"okYXk',ݱ߾G6c5,оR@,6RU%״=ah i92{j{%vcrĽRocDN)On=7X)M |sfKzp_dul?5rP.k$;آ048SA&O/>H"x Bu_ 7 iGBN%Qdxw QG9EѴ cc]6}ny.2r7( $]{V6"`)aZBg tʼnHQ 3)d꽺>.di)`{b;"BuL3{=#'8D-Ei9@.EfZ {$fAF#RQaH)x0jܴ 0CnN aXwCKl\.Qm]k;udOַ[~+Cw,ʢ5\:h6j{D KKj :xQGBTXD$[˂NF13,vvy;EfV'p] Z$uKm3CJ$ts}@ 9_gxZ<vmts)ΈjJC'Ĝ_[&pKtUp.wS!#"B3e& O²=2|"l?* ( G 1{tQ-F,>1+t9.~+-:->a.K~R͹9ODOVUq,CǙ[cl}V` GcEW.!j`CL$en3,.=NiR/Ry.<}Q9|C4xou\*T/=}0 Op^;ULpv n]P⻩R#i^4D$+n-I* #5TXV)`qd@ a3UtIeCmSd,bj=ٓ| ѹ ɤ9σyZ(OkK=(Mپ= XL]Px4oK$E䱣/? 9^DDJDrVKMl'YJ74H@"Z) p`NM .e^%)jxCL7Z{B&!O4`{Oh_*&],: T_Gؗ#Idece+j:|`lCdLϐXVB[]9LU>O/ĔԎNC .FׂSp8cj~IB'\|QLpz#î$#"K/7. Gf/#bLcTb7^yH ZbA*EJ$Հ:.o|'cAp;bQwQ_qb"^웺#?.',t6 5/6;=aX,ܐ dC8 F (3SVr!D+\rFZs6;_lΫ'acTd֚t4O T9APA?GQW/#*ukǟY.eȏo{^K3r$`GglSAHQ`"^yrv! :-Eyƫڗ wj)_iUM]eLI/\UkV\u'nv)Xۆ܈NI 2h4S&:꾡]Ә={)سϻ5H4ks] G2)7 \!big;۞w+j70%B o\6 iZ{㫗>>>l85/*?J2gѠ|cQaVC'հhUԉ6[q7ǡ\O>ꍒ ;1gCŕ|lYƠ=>aΆ{ݖ\X)c1b &I82NOۨcm,XPO%xR{̜_yO}Ɉ3W+f&ݧL\G@(njƷddV-OkejBc'{iE8|)3őE7408[O`>$>Ec3y,Et̏?^TC^LbYbFaI-G} ^H9{?tq{HI p\"#&Η_۵褳H49ɆVrS|-hJA14DNJPr[_y+usi* 1T8K5l?~Y[}-)=3LstRỲc'Al{#{LDTw^)UG."`%鮎x/|{dÖ=Cx֖J 42!XuߓBQ'0h$+ɷܼY8 <_C`=;p- 2^x>R[.Ofr#*85W0l F`( i(@U4/(jb^Ok ]Rz6 KL1|Gmx<" ~$=o&^]K*lhك*O 2h?"ؒtb 5alf_1'ˬAXuyd2$5j ( b74N6p4eiceIi8]Ño_ dt3U]^a iWRzpPcg6jgG82_ݦg$xH,rm a^c|ɑ(wХaN3"9ڕ]ekRhX1!޽jQ^(Oq)^G56 %}2wM%1v{eVT^͘/=ڮ.yLgK0%{K~\,}`efUQ)C竁^\7$QqcIʩvcپG*];GfRʼnwHs@T@‘=- y=š0QL >]"ei mlПFNߏ~3gENN 1JaB{:G` )&4Z%/xDPsFXpW1*/:>6 #OK@h ѱ։b@յU 8GD#}ϏY !x(0K2N{M^(4r>vy7~["4L|dID us2FP|۫fkWԐc{C V0P.7 ԺŝEWK*4a w̤Oj.4QO啍E^"Jz QlޗͱnYfy~qRLPKd.XjE%f8 v(Tq骋Uǽ,yB.X_C! Csa>ɂ08t.ǺU_?RHjK\TծiUטdjmFƕxoh jgm#C-5Q#^,5UF/A̿x~D=z{oʽ <^X#7@8Ǯ=eX4. (a_T@$cd娷14{ x ~w%2 A]fڣ[rǑtKfI퍦˗[V֋ pQݗ :D|^=1?Vׂo"\fpyYZC>'zoΘ_;L%j2? w"[CT4^M"\D}fXdDJc,,]n`fj\ІI5]O/vh*Zn$1q{Kf]`[fGⱕ:W ^Zwkt0"%?qzp@~ۯ[ .Iء;2`We!w{ Gxr{4;W%zԳJWemmל?(˦ܷE-K=f(j-EnB=U %43T)/7o/D)h&5l36h**Y3wK/iY"ِ;.$s6>4ҌŇF>;r4*Hzk%$c^AX&RvR=rd WLTR'񾋧0 ~m{Wt4?P&i@=u8Z/Z+M\΃)u%WwO6lCi ާ[lA C2u~NcGJg72!U =J+f (YPo3#7xѢ`^](}]7]VnVJEKGyycFj9r g1PMc4+Ee(M_p╅>Z4B ?p(DPHecz*PܒggZX`rolmO$Ъ<*٧&ERCЪLDZ,@Y0KwCA*k{^4btIY H9&ZAbYlD" ?0'6$AW՗>xj4_ު$10qV.:iɦ~ۂz_)(iT~Asx?mor-|&JԌø Z)-o%o^YtYgef`L3 i] Ch3LsUc2W+7|Lb^iYn*@c)ԥyVX9_FeoD`9D+ghL؆ rlݫp:"wε#:&0Am05 \sAEZC)WФ#IC^")$JQ+$ Ñ  'DZOEDăUX A;ˡ嵻Yad[FXg;E.S\nZe`~ˈW +4NwAcXҔ'Fr8iDKWm3*5=:sS)/dOyGd6 ~j|yx.p]hG0\l+ H sQ2<~2 O2YnkK.;ZYL |- h#ߣIt) < H؂oQ0#sIyf^S_06ge:hE.|Og=紎ct:i%8nnPJ9ɧ3ȳ5AP@^q/qk'|penpoOnjrוC!/Sĕ@ {3Oa[58 Wf%m4Ujd#.\OLKxhI@x"v&d_k ?4Fg0,fw+ϤqFTc N~'zY6gc:8ɕDse*~)q06`[h% MhGwT/]U AZ|H'=2%P:+ ` F3RG ^re.).JSWϒ D>JtMwFGo_3d0u牝(>c0CJ::v3jM' (탩3 o1L+56B4PCI*]G»UMҠ8JCvlK_ +AlQNzߒ9-_Eg~ +vDy;P; cқn8֌9hܰ gIP ,7.֋ ƫ:6m[boXq(~]~ B8)->jO󄘩1נM{=b= ɶEwy CW!𳘅m.&[G_r@aIYyZ)ush߇ZS5,8kRNi0,C:CPZlY@8յX`3=ŞkP$ӅoT9we@\3WCLc"Z^b {Ž.MU)$;q~AS<,y5>T .,5rybVgmyڔ.V0 5 X tF-?[֒oCGp{Zx.4#j/!STW ^ /SSyJ,ֹ*Ax䡭a)Vt˴+LE)_ jCB^Tl!v9zԟWl#A(mN-efv$vz5oQG^ qz@$Wa dt9Iߪ4ױw @gwSI"/L? /X^®5'b>Nk=k O8cVr|% Yz1̀+SZQ [O׈ɚsk-4syhZ.035c–]ieX)}%βl5fPeIqS@"*%͠b)h͎XimƊ ُQo>ny#`W) M7 w[9цDtedxoΛXI: wg Ǩ/p[6; w3ǒлejPOv5;7ץV#?hx9p{ Z9CBqv:*f&>_ /ԷV,Y'f!Tna\J'D+[{;NGXVoy:=Y@ޠsv%|Q!a`Nuά&ȱ AK !3v`KuVv 7k:F6n82'$C!OE+~{MpM< JʢxX\})M7σT; Jۗ̒aWr(,p.ww}_"[E1/Mkb Տs`ɜ~hcDUBkmj׿7 :p #}d 6/ES{8 l昮E>6q$Uڃ.8n,8t-J )ek$,OgN?Y]Gߧ\wfp쎙x9mE9Ay`>)wSKtp7O]9E Ovތo߭KpqK420CǬ/W(}8W^4rA6[}a]M\}τ/Di&h-I]-&*]P* Yaўl_q[(ǧ5[`9>4JC3iD%)0t~13=#iBh:ƕ`~Le `^x\;_Q!rH,'97}HB'b$);MU ?f9~K_#/rl ]=$@EDh#KY2q` )->N4ɬ }J*÷d+O gn@ c1`k- gKizaFtP4+b%_y[|` 8CQfBbہt|G՜VKEzA'iq'5ο"*6 _l08w:(wuljs:]qSi4ס&V{3 ɲ&<ߓ>- @6g4uM gkCM]kP8FhUp>`_T~*ʱ'݌,)]z#4ْs=UJXHVkj8 J:BE:dGpKh mӣhoWx 㭶d{$S} ]䞫"R0EXRmNXkr`V1 ǚ/>A|٥ԭRp+a}Er˺@?$tkF#z^8` oGuGC@eJ&u[;> +I.P\HW XmPsQ Ul![, jb?k0Iff~ٔA&-*qVa pi6Z;528uR 6C#$5"of-6+сQ$qtyHgE}b;!ކL75vmR}\\<Nj6FL9 %mr +`W`θ XFQ ay w;j>޴vr|꼾SN vG`=H2Xd<} 9]^Vbv];Lf*!C޸7[uYheCA=R١>~1Y&A֧?Px׿ojNΎse#a%qS؊P3G EE A-[zřlQyoG R"#T֤s5ݍ9f^*BNlfU/3 Cɰ\L :ܣh̲~,O6B&RGy[jp zyVk[y`>Qt=U5<]ÒfztɧGsh;E@?Vga1]iofOt//Lێ7!vO baVAn lDhz e@ ,ܘ#$wRVD'0X* sȾ9z`g2JVna ,G:fEYy)Yz(P &v ] AݹvVg|Mu!C@ S"L};?i63!J"S~YaLCg%{Wqai)4Vq/~ym{ ٬m`@!'Ow=V]՛{Ñ<4(|GgnƬ ^4MfAاy2 ēPh)-M^Oo@ɑr9TyѓZm8cg~9V8 JHT>D;[#=Um":SDa2.4Ξ́oxؽ逳dOD>[&4-SzwO.M\ k2ExP2UcSS_O2v@K6q|oD4=)A v75z+~⟀fg]}4Ņ%jIpHh Q$htm֗Z\YLwej;,pc쬗78'bWo;7v6q{hFf+!q\j&R/av( J/A7kjLRD": L Kٞe7%PIjTRYx䋥5-9ش .`VkxfѱBfQα&l߮Z82V~;Ǧᠿ"L#,q*Q4a? /)E\T|Xx+1/ O7mZ>y&[:xJ6b' Ol=GH֬"S6TX;~!vjToS>i{ɔ(b[](Ȉe6 >|LVjo-vCgYA- ;W4r@U빹҄/;%we\ $lkX$d7=D,~)5{|l0oq|[):WhaT748ÊɒݗvN9W{=®)$JCksI8-T(&/;)X6<"YD%B459Z>xg=/D n\iftX8Cg dF!˺qp !i'? |`MH UnVMo׏LJTBuFۢޤi˴* 8s*|pIiFh)hU>#5/ =T..XC;RGAYvڀxըp%sUY_{SGzO_~TqkU*B^Z=F@!0?:mH K:|xSYxWo!2UeQ$#L<&FѲcSPcp 2fm+t= oi0@K&E|tF{MWHK]#cD^Ii?LA4<8V` %q۪f kmP"r moE͔%(ˇ顭a!cʋ^l~CLȚ+aRM5 X|mVB9p)6+GUUiH<iIDysJ/q-"3Y7b|Z(AĞs.$Ho_UӸQ6 өrиW>sknL;l22ZǮB >rDT*/H8NA.u;$l[JuFoL7Qj1'1QO5(LNd.$dDejQ'j5z>4bArӿ MU`pú\gGBĸ7m``[I맮*K9NFG.zȬ)do%OA%FA*zmnjLJ N°XpAL`,@&HKnv&nӋIq~hA5E>zW@AnB+C(WjZa! hM;ԷG}r,$ UR!+?SHv5s^+t+U8pv`3skXDі@҅9T]-wHs qCk':#&\>Ud mX?t^w:CP}- M tKO\e А4`0Mo֡B|+]EhT :\$_}vct"e\)G 7MBw~ٚG?P+RԙmHΫ6LǗnN)~~j˕K qAHl:4=*]Ĝk NlV凷N*]/.\3ph@iwJa8:Ά-lq\̠w:`_ W"'eG-(rK=\ʹLG-?s'CM(B ^dCYz&acC\^VHW,>MLuOkշ貨={|trfRr.!ErA5`~7hWoNoZKb%-mDS B"tRO#{9h+uJPs,(ۖ-x9 =IӯPHD9[װ=YMjzJcV<;n= 2N$cl3~eQ HKqvI0H)c~7/d~L]TO[h' qMd+ϮT*z{I?&HFq+B?zO4Oe|pٿ O)h`y/zB0/p۔V 'QX +6G@ &0y(޿'jB@E}ި a a0΂yp 3c=;nKGϤX ?Ao~jokc,'Ao9K8\ %:%M"Y $x]2 ݰ;hp-e,c%;2(ſ9lOԴHK|m9D#8oscc\&"֩.ǶW7es`G1KXcNr*'ho$*h]g0"t':nZu݌bìޢL`*f7@oceQ<1/\jܲ = ks'2}i \lHC7b!\θ&;]k %.rIq]}9?E&- _戾t|o<gE}UF.zmUψt$M CqјAŕ)Yy-f{[X@z4/Tp^lVΞ7`*uAD ޺8ͭ|P9LcݻdHt}$3LY?]hw7C^D) ~_x q] zt!JS',yU`@KQLt%crU~F}BvNAٞb5qW\Ri2*Iqw4BH ~WFxeuktT̑Q4L{a^/a'#&[zi)2Bp:*{BJz}Ŗ'-=μK cs_ p ۩uL|cY* }}F-׈p$SP{mrSNgE dC`9Q7߰ kPNstq]uO1EpV!%\تK (QʞZgi|BY $mgɓ* EoRr _Z^a&љg8D iqJV78I_ϻUJ5%ѯ^$]/^=|q/K19+cGɄs.6=O%qWU_/0hpHێsFUi;k 47" -sN&U0: "FzSoD$Cr/+9:ek Cc1&p..:JаL^O=P ^/B4&NdXw/VU@H~ F5]RGw˼$^&E>z]N;/ꪺMh)|SQgOBcǨ3olj(@qKSRiGg5Gr Cvv:F\z+,敽bUe,,`qWh1eES]fbRk":ihLսۿV}{'Nװ}90;<2m,9UHASq빻.&>Z,j-&ztm`}|2]L7 e䙅Df031"k=oŪ8zEZ)00:@tx8Y ;z!t" ^D v5k<<w6 ߞT I7:Nk%Ij~D(Mrh'1 g9=b+4Fnp%D:؀9vXqԢ,{uc}cg=xK,ZQI"Oj/i1m7,(Acc]8w^Gd=~ǵ_>W(x$ XfҫñvY| b?nyc.3Xx\ӕ]70jy>W3VW&|USlt㩡[kZU]6ZyL/E7mu:$u->CnYGfe-MyWf)Vpa BNYӝâ{uv"w2nN_]äki͒ݤA|8zC4BN6Qh&P#aА|p HM: l^invTئOZn@2B j݌ 'Cn ih~AŌkhcu'bPS/skrٶ1ZFJەP ;DD6^&VK#:S1~iz}Y*ZA.EHMX~>8G>v鳻P=VPEBu/r9 7[ 4wHhجҡtZg;:c Zܼӕ ;C+= I 6wkB55T"(45./=U"/Y*z>GIKA\kt0b+ey_']:lS[W;<?0"p<0n wlR 4ӵ|B5ǰ:l, ;?⳺d>(},[Cw7c( I?!81C%& j(O$1ovRmڭ`S.U+T&^'Ze"i9Dk|QhZ: #,-K]H^s1#_=Ǘ0IA T&K`tuûbucl)BBN-AqL Nϵ2t֜<L<ɎUB{N}!Tڛ6Иw+y"8=BR!2FU~9yۄTY7]R{q O kxߦnV@g3`d-YÈ)Rr 4A7ݣ,Wցjm g5QBf~'GrzqhSdHclA9[ SBg%}/2!,?!p%55|Ȏ2nK3~&..>+De D +۟;~:xB}R!^Dtu^O2Tw3ˀ]f %xiULӻ,*+/Wn7D}B^ YD)3ZIS<읹)16R)3qCM8r9}&I79U}+#Z~hSs=b΋ǰ)9T傖m0t٬PFw:` DBrEx2HnȯH#62ŭftsK+\ ۹w&i;}n=YiJm/1`dL}-}#@9Ll[NFɑ٥&;JZA0(^ nA;RcuXb"ʲtdڊ)!>UyZnK$Ϛ쐸QzťW?2GVg$ ^M맖* Uo}y-Jʘ\e*R,@1j^#oX4[0T2:3\xWbvW`+ޙX<)>K"!&8G`;H$3/ 6m.qWGŖ2 ~bymEt5k4F[0GCh8N£4IJ .iHa:W˞|25-5cA)ֽU@=VGKύ~z׍E&.t_"w3,K,굑#U0VH=$fwnԄ=B`LfPܝoKhr᥈-q[}?wŽ-v,wWm;ʻP]PĥBilƻ-oӎ _Mο`Y}^Asm#z$PW1Vg[ N,ްnVԌ.(A+ k3̨)@u aѹL࣭%|<̰8EJ/3-7SgۦD;dP'E :kJն %˧{|y%=n-=)>ѦN(se]rcAhjOlf[^I$%MsB9kD.K@1~qѾ+."Rh:8*kH׳HX之YZA n ׹޲/dRHBdS;i霓W,*/sRbyhv"<*(U}Ykc7ٳ c{JʐBku᱙mBih.\=l$@hf@ʳ&)!k Af':LÁT`iFL'#T݌~%<oRtoSokD:`~%]PJ91qa}D3{pǹ ёkyRݶNiҐEH@_Ė¶!@]!Lc-+B-"4Mc9/Yi\;{?RJIUW<;cOxڷP2R31pI I rX3&[|%%(o!p/S-AgM\J;bSZ?Vˎ2Z3/&6͉?9֥Mŗ}t뉋B[I`WZ ɸv1DQG;0:EIk8ֆw ۗ$KcvRm|e} 訑Y*o/,盨H)N6ixse-fxoAkJaq*yp: }dމ':v\9"E4С/q3bwKgdTbcV4;+AXi3zp'=:ʵC-J"\D`0"ͅ"T jq~cV]dL낆;r!ߐ*ň&TL&,VG#? , -֐::'*z.`xԎU=ڲX]6OIhz~?S3zLNNbsA` ]aWLpІh[]ge;IGTׯ+d7H~Kyb[[h=VP H$,l( FeuVC˄5e<%F"(;XSfTl$onq#U&諸[!17wp_웪 SӿT 4c;1ckWGDY*~GNi}oQG'XH~x+7}ᆉO|cLWq3]85e  A= EAuq(խnКͲzi8O`be&_5MRp Q1i z'ulMH/߬f}\{L=@kRNI .Oj JgeFAelKa !R|PQηϐxHgTd|~P MnGEwlM$ C _(%z~O3!2\UlWS,־6=_xmKY E+RFzB6d#&y1Нʿ|bY!V|0AG pKzLZXZ D<>?ZO |bK!`-ġ݉ vt1|Ut_Cy犩;b~sף\lmj=b19 N@Gf'DZjknnU5||_ zJU7,\Z>"g_s4.L5Lj,"{ gPL2صvﲊoyKZpAnq_}7|uD͊@kxg6tZ2<;uKj4PTGaDDPeO:'#Py$|xXZ&ŔJPj<\sǪ2B];+g e|V?=j#dn2ܲ@KxD HSbA TjJP0w?o=bg$}$¯Va]ABtxכ^:k-@qez?FQfpΪe !;kZ0%C}ge7`$T&ɤ*"z2\{c"g4*I(gr|D9yVm塏tֿm;q{pQܜ&w{ҐY2/ҕ/dt8^BdRɒiİv{tyDZս'wrv'CK3䟳(뉨b`U+Ϋ-T>.BduBi:]~BpL[oȒn;yO!ʐOrxY-2t|ʣ/WG`(`Q}?s&y= z^l WDpm;Z57)U|BbUH qz:DGYH϶VvϢBܚoGAF&G/a8{V [@vs9"[cܓuF<77g>DUQ .¦VM<ؒ;ͮ7Z I+̕Li x,\b3J\yAoM?O2~ 6߆X>lֽ @x}it$2@)Gtp,iv%_<B*nϚI'g`jzV y=duOGN 65M7_坕?]SJ.gum'?^JdO/mQ92mUًx+muQa_0ug If/9I+Lú3JH -?5`8<[_[Q: +ʅS1~gQOD=~=㌓ge nF hp%ĖX2\y-TO=JcZ@/Кhk] @|;pj:kc?huls{aVoa8/[ʥbW:Y*NgFoVM&=(sil'JLlVQ,uq!& K8-V5aބ1 EK8Wn:pqb(MI((^[x&3>h_khv՝z@:/1+E(VZ8۝eнtNy=Y^kUCBzMѧ6$K?" Ǝ0HO&^oB\fn}FN'&Z*ޛ'BDc٧;zW3=fl/eÄM|r@|3\KX3Xptfv>#bgi \BΖW~;,ٯVi fEV2 Kulk`VD0oi2J[OMuYNc+[oufeSKzM(R.hc5Pv\e=kYQNjPVnrM풍{uF:3^$m/}y6S.5۫*n6RB{|OSpJBҡ2P]O${8a㤸Z3g,b3p`;6LGm ސbHr:D_3q|o.Yy>Zcf4%kYHFnHAb _+(3CH2._^yX!b_fh4`3hGbHݎ?' sBs蟉,{' ]pWr}8ˢDGfM.iƹ"x,QQУp0ʄnK6,pZƇx]xW.M[p:,ks\5գ`.χV$F1~w1>i[s3gF9 ]g@2֐lvD쵟e7ʯFjT}95_uX+^]My[ۦmN!g֗ ;&YG<dEy ¸cUH=!nr7)-I."Nb Uǣ]FȍMm1Hɦ7㢆-[SlDCcec0zBO]}[LlvM:FJUl{J3 =;f¸rkN|,Dv⹏`l_w0bxIqGGC!+5a5qWUǶѷ?7IÎ*WP!6հ"`]Y*8eEɨh<-x5WGk !Aay<܄]^1H<*ҶPg<|2_ VۑDepݮڶ}:~~FvZ^`%1J /#)^J_ ڋd5vI~0&oƿe[; ,/]bҥY#rr}Eu2G-(5 QɥqыR{qo n' 1'<#H >m<+,cW 5GZ+DNMA.Z w%<7[p.qIlJW=@V2& `44#nP]4m2xtD|Ɲ_liRFCM6{l?Gjq' :3נ`L6XJ?WM-a oFh+A=lcTXY_T * a\%w<{(^5VKw ?`,pᄧm)zMkR ԦK/ /q6r ˩6y.`"鳋mҚ3[J'nbx-]Μ V y}r"f[|;jL$7خZ9iCg!x#6D ro{S-yaf= f34o{e%`]ZpPjBKx t>eIhχE*nTw 2WVr7ǘ-S^qn)~=z(uY]#kU/o U.0<1nޅ[mpWl";w>L8C yѺa젎D]-˱"?_c^{}YIp@Taʈ=~Nխդdo/@TČR!= 7B"weXzό g*2 ,*M98W"nP P/q%ѱ EPF}r(ڕ`l&33dZ^[O;T-XbKKw/$6NtUpծ_|\9C7f-ڿfgr]^SyҬgj3rz%gp=Sh~#)S88_\|Ǭۨ pW6] VEIV|4C0r#Þͳpu9b+tX&otb&*a tv4U9'  j7|!#`I"ĕ`OTg0~]$'_ L|AW˭PdnYX~dR 4R0/>zSAJkw:ޚ"%셷XvP+f~UO*| %5\$& %ا/:#CeuaO;k%Uhͷu!MsF 뵏Ey+Ԥn-fFNPֲN"9_J$}6o 1{E#i`~ǥƧr:pSMw i ƀ=E>O0wi^~gjO.9/U%P 7xƴOYt8sdhP_ ((R"txQ[TRӉO̥P#̷WE\2uʴCTҤ#N wS#ǿ~jVsr8 H@Xw(~v6x8:K02U{TeMx+$!=QE>徍6w ;pkMwQ\u=ytTCs|I,tlJHs.%K뎝@,yZ+N6q?p%̬=3>D'cS$p{rOP_a@c%N6kU6W^DҵQ~Z&2v͙Ezv/tY垵riDRC҈^0W8fZfgb)z0 u9t9aY) WV;rբQK :/g!1d5#i|s,#٢ܴf\E%s@y^K = ^umqz' ;3LACVy+~:|@oTGM)y{ĻR{]Unlb*zǛcQD \3*):Cg+'}uچȰ~; I m@S0` Xa d9Yt5AS4Pܪ :ϓlmADY˕z_oy;":nh2T%  TN[t՝／6ޓaP^kho2.u6IԔx#!Y,Mт >@|rCqﺫ9?P5=X$yI`:_솯"@Aqbpdk?T3ZS &*wbpv;@|)O >]s9L'ӽFG}:dȧ [V|Fu;p:`R(%1\7kg!Ki*H#Ti%i-.DYGB]Wq`::56%/\Y5 vQ~ְ)C-Z̘ u<+ (lHgLM6?Ǧtn'+͎C x/۴'=+l\|6%v)[8[H.$B;erɳ#W8Y]C?rq'F@f>LwrX(ǚچ\N>5HJ*w3[PgXv]qf8 >|B t8I1z"Ǣ'$5ꃯ\yvfO 17lPRʎkDr8jr FOd %_u|$;5TU%ZDE,kV;,Zf6c173Տ|B< 3D҈P\ĻYUiIQsƄ >0r"xuCǂHh& !]y_nCP &)k`LX\X]зB^rQwnN[j%$uF n'MGnKb#R(UoltW8#?P\k1;ȕ0A{Bap9j.FH9WĹhS`=YqƁvl ^ E,b sZ ՛2d|$ј9B>#DK ug*Tv @A|# [إ$ 5AtM"?9$, .mu@㡉YiPJH(HNiFI{QE~>X]"W:OQ2.W|ڇWTsQ(pZϫ]` \S q-3Zkc[Z=CS:cf#w4M0^76Ce?|KilX3H|$2FA>5~IKIGkǛ_.qV$>SiY*jݵd'ʬosX-C\Oŝ@P'D9yꔹ`8 sHX_d[$͙L4OG" sDe5P-BtCr/ףc15B#R6PUt@{R}Q|~3Dq%ROHrܲT޿b5Ʌi7q)J=j!}r[N N 58C3گaἜCB(npR#{ҵ(K-5wI}FWpTZ!*_?VgF\K:$~=)v3$ׄ2LOnBd܇48k~V%GWD |+$Fc}bWzKd͢+y_mVnLVÚTU+9Ek!B{єH%~v(RtaS>} ƻȸ^ӌKU}b`%hƓ oL%X܆c ϭiy:ϑp;ND󢣓ݛ$W@+ >ꆦRf'rJA 򅇬e}ۺd8ƩH) >',mZ0ST[Ow{CݥDecUvU/Nm":8_kj޴Q3 9]67.V(+?­b*-]M1洮scܞW D|G z\0gAӾf𡲎Y[,$ҽ1? ;HM1wUŏXPMLOla">SFLp_b3(h?Vun2"*3snLW *&mlDZGocs(=5{lrGYX||p "_;|ؽڸ7գhI9 j3jHDZq;DX /N򆚻 \cȿnydVYmľ:FŚ[kpuV3$MWmJ䙇D-F_f`bD7o3T#țv#8&U2?6;Jc|ϔFD[e'18Ԉ`7^> FR3XF^)pK4l~-mk=@`9[ A,,62ueWa 븥VjiϯeM]9$]7mU"l&]v ? Ӿs]uѻύ+M>a\]l'EnUibF%SBJC+12NAzA5R%w}[op> ؿ:?2bdD ̉lD^e4Mj2'CM)o> 7D8اP dn,_=hl.ՋMK9, =Md9V-%QNʼn&?W>vPF\S^ĔbpsZ^x9y'!6 `W\]Yv]:Œኮop=rM7b !VN:b FL8ALD8{$2Yݧx!T"Rj7>F"`a=op^k;?Wl^:L(i~oHҭ2di°pre'Ţ c4~J7QA S_`ƀGPmڜs7qUDFF$Am:*F|p!t -md@`њU%r_q uH3]EY Y4_g*Gޙ1IաawTdU(ؑ$Rk6M(`>v |_ f\>եsC?xBCsyEHhOfI6[Y$(DI@ '{#c)Uz{aQ2̱ғ /C8KH|1w"D"ЋM;'$ܻxBk!uHv}#8EP 0BeHdU.ZT|zy}DDFr˘!Z ?z;=K`W05BRbV2x#p&T\vYOO>g9 f4MM+L4|iwዓ,q2m0u=WuPHYV ۃH蜗cl+'x}BO=PTGx?%NS9ij ݻl>j4>GF|CS/g!?ħ2lĊ(_4P%$BV2qblZ# `)2τ@l[+-$b5Ŀi;@iyNN3\h;=x^Ij 0Ĩ@蕾ߎ]QBd+~l'2]rq=8-\4`U?=#9`T!$nl2uݡx1ڽK)ʤ^{7>m|=/s詞Kչ?+;Mzu%.nG rbRo"&kǗY\D$_֛?߶t*g% ,e;1c6h ­7yuܿET*b! +iWs4F`C0(Vd ~EƦBCc(Dz&j $qJyHIAJz׼)UԔuwRa^QG`LwAq̗UCe%p;l,.co=Us۱4f|Y.@r?Zq*똳PM9ˊT 8c6NbU .m;8.XdXk|xmlxK,[7 .)]S^XK"f|M_qᩤsn.m՛@q( bW`SGwj40!36}O # *%6(gWs9ACŘӪþj )ih{rKj` %f+DJo.٥K/1G IG!5 0֓}G."r}Pɮ ֠`W4kn(a[4Gfn?kP Oގ\C,*"xs:xuB6W\Lv]"`sS-cz͇(OTБŷ=v;#=|_穄T]vFR=|R5K%xۥ@uk.5!rt%R#{;3gjwz٪woZ':3kf* v&BaߢND-W;+./.9NC(tgWmQŨ;N{p^W90#c~q-~ OWǖ0fx( DQ)]L4puAaJ)ђ*BQK*nEŕ *V=P+԰  AO0PDBkWML| R᰼ YVuMpj]F6VZsHc~ە3>I,M;Cx4a;ʝ kr.蹈G<f5EPw ր_|k%MP /t/dc耤 jP4Wt2#}ArXq8gA"=Ŷh6̮ Mfa U(ͨKB 9LAV+hTpIz #d ?LRTywY͠3z;jlLYJok4 ^:}r\g'g6J3x6&Ոց>g?T[g/Em4V8DB RS|;Ua~ZV'OԲHvb!gI6o |!D[omu' d6=hU^Գ{Z\;/tp@6![lի?k۝ |lpJ 3tuhD8[S,DYYk4j}a- J7LхMJ?/GO,Ⴂ$J=ez7ݍ=zw1Xzyefl4j Mg]1dSnρ P#sÎeX,4YdQHdІ\YdFOˢ!0 ˯׹-.=WLyx3 Ay3x|1Idd*栜b n|Lg |ҽc~;kW"PکBP8ͫ"b93`nR6j rz8K9pQ<M8Wߡ:H$;:cil.q2i PBjW0b˞m<(3ro2T1\g*.0dM(pS}ʪ1?VJ6g<e1#үɇ)j+z~ 猍)9A5޼OTTon{M'?x jL0e0k~=PmQ\qi]Q E6(fE[dv\̤&7*{D"+FH5Dfv/i3bf3Ս70aG(UJ2vh[.vL6cVohEo"Fo0AQKݕl*c.$N=wC*tHd7oYKà$*VsmWZryu:AvZ,v ;ѬU(msI=7S^BIG?܈ ${ (JVgBdEC#*"o QΘ#_˷ w<&%%6-7S@ܻDOjoױ}{3c:z92@6YʹcʛӜܻݽIKy#ҥdUIH#5@":؏Ht@OtIQ -Bz)a$)&To a˶8lnJCì F8xU~ih}T B3T{}Ӷ;ںjvYP4B眰ɥ&x1vlhIYF`"r,BK#=u]he(u܊}] ɮ5AKϱ2M@PYo>V[ODx΍uu #s!&ɢh&2bB-ֵ[U{/p hfb~f^_V\`ujPlqGw&8)N2Qz1}9s m3QW [BSmx sc@U3WIԡU[ u6@P t4˅a $@'JYBC&3}l"crw| Vc<)%wڨXP,ݷR ܮvDgi>8bb(SgemQC)|!t3?̾H_ujx~SIM):TMZABg;9!J569Qw*8]fã*Nn`3>_'^ҵ0E?9􉉫zo" 2\dLoj zmѳ|tj~AA)-Vf:Wx?ތt]7EY,$Xx{Gn7/T3z.sp.,lmkKb(U~;1K Ю0\*0%Q6Hf4ʭ7%AZy؉Xm9 IOזJ [a[F,'QSP q *ED˒Cm-l$\L./߭yNC"A }o޺&lKݣ)çٳ |]D.Akk}f!3j҇;ΫɮۥGCYD~X|A1 y4'mͣqg*e=B,<&*(!\[4[+E4Z)ޑb y|1,6 ':ʜ?)/߹BS*69Du~QG.0E| # ) gSD@%z~ή9 wAɧVeB cA[cj|N>0;gҎ4څTNZ&?̰âňPDcNݞ?mn{2t΋TH®{lA&=M{ny 8IJ͕tG&%; Hݓ NdL%f8kxx/T&H@HaЌ ]9g$cZO #{]nfniA^M&@[i|<Vݥ s-]T l ;)+}b<ܥ7b{Wg@䬎M!\axI4X(2A[X Zd:pB])}l$eЮ97maZ› }+ = +0ķGД'APT/'D&Uݰ%b֣-D(2GKK1=Db;F|)4ت&wk3 18AD49=OV,@jݯ_f: g7%/qIݮ'}b '[Wrb)WGV|:]@ty_p\s|~DgCRN3HUow8/!fd21"b ]@F w@\ΣCʚY?HvֲDsemxu&n!W8apx#F[?p3nQ,Eeɥя?/#rg  'n#߅Nэ Zt6dcLN;4bo~%M%kbTMLP-NrRDE+/n@|mW:;} $ꓚuX`6!fu7hX`ӍQ\;+`OYL+1|F\Q6zbe5cWE T];-^S) "[_P\)_^nBH epF塴Yqe y#ul["3^r/]'kʰh=ⲉ14 6h];RZh?G )޸} $KC!kgȬCaջ# q7m)RP*T!ClN ^pEl0očp6@"&3E{ﺢ 8, YS0cvȹ {?v-o|D,Y2ēnS|ȃR=l+ &gO e۵-iIZ(؄w$~KyJ1 ۛ! k& Ny4ÿZ7n 7|Te+DH*@[! ]ЅvO3VjiqRJqˆnKeQVZ3٪iqT݇YB WحPe1mz+풖do&Ec4B%8~#!,3:ʛ.̀ʽ˽ ;7Dy5QFRcjVDG8FF`%MזFGdN% sh=bShty !d,  f%Cs8N]co^-j!?|i?oՇz.d-HИ$;ŝH $GDчh}xo,~bl4$|r$HSu]R Sl876Yu@-|3OLCU:.$]hWD,* Jnd|&]%>l tN 4LqvPS{^xi#y50y'հ*\0{f>|'stp W1 %CD@)ƞհDSkiR>B*$D6U{ jYZhAx{ g<.߂=r^ZY\Zj|Δ+E6I霯@^QU|`g_ψoB0_9[+ fcJ& p ]ĊcCڣ6~ k[b%NCle&awｂ‘ 1ԑ}nPMvoY!K3QV=.঑nǁ|qN$BոvyoXZ5xJ=K\l]zdob( &N6h&Xj^?9*NHzI& " 룊ms4܀R^CRC$ǦC{DehɵSroܫŴj#uw6"7 1* j-,1s,nP\[~Pm.屳Cg79x#Q51>cwhkneuBN;uGge0EX&7-xO/fh1Cq@Wꌝ)`lP}eDZ)*†];xIJ:IV`h1a#zyRZx>K>JN7։N{?9g K$ӊ޲]t.Ӛ\&an:.N{sGrrRvߥl0Hhgǔߚc.hz3F\QV#t-<ŋ}pm_D\D\mI e[Pjx:@#IBw34[:(QeCё,(;76e|?5=ӂ=a#_ ˬ=$pjB6ImG"H %Ş!m_;3-!ɫKʄ!t6MEh_^ܡ{ n.P~I2JRbY3!"lE+y#g#p5,)ڞwaݞǑ.A 9vGHim<-iJl]MTKY7_D V8jHj}W/PJ”|tKUQTǐr-r$Z'8IʊNb\a7c8]9{KZ` 6No`q |J"b|*ZQ`k -KUNNń >EJ[:G]-ʾԠ%M֛){B8J=%F"['lJAN٠-ώu#oxQ5n1| JZu9rgA2,od c9>sZ^~/ IS4YC:ĺ97 *!x.t\ Ų1F`h l%[[Ѵ.GNL(C:;(^7}^ ϥsQj'`dR mLAd"A1BA,H<ٟȘ((j_֓fr"R؅E|>7gi!2{9c@T jeytqӰzBШVw߸jysQLUf.s 6-(he9&\րۍC|G?#9|&qDj`xw t55=ʜ["6Hbkn?g7K$i~p(h1'V~Ԇ zt9GC6+)zuiʠL@Y/S`}C=#~ֽCtK!ox(OՓ@(vX'{h(6RJdWsC0'\\Ykd)n'aeR4) hT=i~i*f}4;RNnnBRj.e[1= k Ftq^% )(w^8} EmHMkrG0*-}5k&x?ͫx 0[| 2׭O\?V瀢%XdEL( NͪJ!|IYAψ'ȁ%v ʮ?c |YNQ1{wP{5UE N栛M#8|,dr Qۋ7gRq?5]mkU2&.{nLygNj"OC!`3z4Fqe;W-] +摶5a˷+.ml4ԅ sБ_-UK X]y o;"!e,k1TlZC"N}57Nżô#Pz(V.8n{R,uؤxuy^LtZ%Hexx ɴnΟ,3t^lތ[z7ſ,|p~vB$?xUc%')VZ=iL 7Sn/ BAޑV b@S<]CI KfȒI<U\n6:ɗ#g϶6[kH1^y!` 8_|O MOo6uNR8?ƅwUSK:f1l49_)Ƿ8 Ʉ 1l7M+4 vi b;./E-Fb<~6HѶkٻqc*tV\IW<WCk5Z1c͓u~t$W;,? lTJ2 KeI[ +VΛbB]SI:蔈 ~q!o~z}d݌M:O^F53@jMиc|c[ײ;MQKDʩ v=S$JK҆ӊAX> ;:f pCM8&4-E# sB8bD*([Rr})j]Dk-{̆mknj; GP/NbՊ_WBzM Ops32!'s7Ƹ7fB΃Plir}~M%03_Hvm3&k;Isl~dO <= 4u bA,Z>;f種֦) .#%z;_bki[y0ܤ\T.Wem1FC`0)hO`mJ~|ۺP:#?G* 6~ AHO]Hb'R2"L9?(f^H+=:d6Rjoo; xT28a/!gKM*xJ'{t;1P* W@`U쒢g{h%VMP1EEWJ}]{rL+K,s %<{aX/o Ԭ_1au6q~Nb+Ia" (m]Huhf8 ؿL1O߱lk".}D;%V:Cy'<߭HQq6)6JL |,i^?@->b/T܆7pZ T3Ǡ%ʊ> QRi[/9ǜ/j'鿼Oj=\~u6B'8X:L+L!6'ۚs}KohzHJaY33n엵[A:̆ frMap!`Ϻ>=חӭ:~kp~)Q/ G=S08l aba{%yV= mj3]_|`zrj S2;IkO b&V-㩂Ȝ ]p@;F F֤yo~LerRKE,"~Y:fQ ߘ+hR v#S%D4xiq>|L22Z@rmX򕽱|xҹbz wSg+t俤pݵbU9a0d(0 6qd"]7{ma uuVf8~T ۡVjhr^Omx箷IZ`;3h"9gLk7&ik5y{3`dNV#ŏ"O\/%o`k<;}ti_ਁ\~&YRln)Cg(SCtTʟ|? !L}NREoεC(J.Es4q׿.('OBqW#]B:56Xtvlhu-jŚɭM J9`'׹G3MUtI›( p}0D770 \!wg+,t r)rhjPI֝mA?K}3Lf lptXHh޶KnQrx)2BLS6,HHސa3qj;.um2^053pV}V4_]詃t4#LxnZV%,ӌ۝n  , < W 8cEsXBs2lN^Mf`rIW2=7A1ؚO}>TU7UsatX= Q␆#ٮr~8^J ~iW6a>6K $믊 &t<4{ js9le r@ՕYN!#ZBHO_v֏;@!\.t&%Ż"#}3 o VQ|nOjLk#nΖj+郚#ʧ< ŵڸܬ Xo 9/\ֆ}r/-C ⼿'")6x}B9baﮜGQʸ#A{j8hȪNL(g`v0?/ m}z^Weӯ^p8AYt܈k@26 SR1L<,PBEGor{>ak8îi` ,e2!e{)W73YBAbR$tNxBZ[߱侾:<( Wh4p?/.(x4rsg7N$5.7AR@K!lz݇e`jHj/ $G~YD!XܸT,&s)L\r !qyɋx=pߙs)jdʍGQ+7^5<#ك78dv$8(>64h/yFT'pNd8b"A)>-a B=P".}>jN ЉO sFmxf0i$gh"A P/JZ*Yڻ>c';յ9bVk }AD(!lľ#XS:RKkžS]< W[0x\h)?T!J,g"h{|^

6TZ8+Bzk1P }7%go~NJtvBZGA31$l>R9q˞OLߪ\G;r4y$E7?? J-<ٶWίVPK} wdvꋅ˾;%V4R mw@ bg:!|CeG^}yVrgy]E!V"Qҋ]/\ ^"1?b֙n6B fcITL@UY2 tUQh$jR4 R}RCAԸ&2J] ""r6w!?]A< C+, %.EKT}d=%̄j S+z> o9XђuxY9 9?Ȓax4~XZ Z?F#>A?D"$z\mbȉ>x|%ˁOX/4PE r2BE2aGDǗ9^']#kmM#)D>OƺujLݑa!d0QȀChD$2/E0otfu}(CL`3S1 \Ub t9ϦGwǮ @b?Fw.Z]ou+v8jwCyA995sЖ'x[[Mcokġ =U,pO⑺@ bh<+qs_d%X+y=ڐzG.xqCdxA4{ds[_)$sW6o g `?6~{5;Zo IT O }L-ߩ a]&.~<ݔ LD?)nZ:k/HPb2-q/{щhV;O⛿B3CwsUe4|!;dJ`3tS2 +ǦcNZc:gH@MYpל̗Qo _#"qHj =LJ7 >>8r.w1k![,yl~^:"[HT r>Z7p*ȸB ZZ ,(cnr)·3GgFC,M# Q%bϵD5Y|6vPFRV܋E0MĚwh܂&㼞+?&)3r2#H"nh|#zŬNBG{a?̽?I$q.ҒO[GnJ9k2^U[Nrt)'Yv2a^k)kDM|}`A=ys%{fmagQA_Je [@γ&.Y\8;Jcf^SaZݒIZ!w0:N˸J6³ ;ߝHoJW!/aW+[), kգ@VJI%'Ftd1ɽF4-eeA.^!{w-:lz5ƭp1~&{msx I&n1Ҿݍ)P'#hĸ2FIR'pA?(XҜbG'HR@a^0;41?NMG)'\s_@en_Y]Aޭ#[>\QJ̱*.ySO7V_ܩ*==#T@7& O 䗫3AԈ w1E򽕐Kf7cY{nvʦioF89ե +wBVh/ӂTS)uRk4p˱HoWGö,f0: 8~`cK&Gj|dg ([쓊?m ?mzDnp<XBT'tfhf_x}d% IG+9z$g!ZxD+wo 1'@V!*7yY4I1*4Am}W`FjIRH;Z7duufQI+0ܦ6I1?HE~@[L}^92D23_ZQ`B1;B\k2vcg- H%SסpT:aP[$}3 8t54DpSz5d  vqii(R/o)9Xʹ-TgZτ1|P挤Y>NjN+<1u[OZ'y'\L\\Vj|ZmL *xܩXASF5|W *ox916BW;q<@%weWfzÍr vh'd`iD=q^H9_F#Pܴ۟16Pπ %1dv?e EL Q"hRzh}f\v3]O]f zZӧf]]5j(y("ꀥ_6(FGY]W0Y DtV͉I;PE"@=sRScl:y3V_5rj-mYԓB?i-Ʊi^w0L~iimJ7cZ5s nkQLkŵw2ZH  g`ᢁW3㯱TUȦG$5fO_?̟$aT&W3GPtϾoI{) V[WLOQvQ ;2l=X6Qԯg횴%z+@w-/G+DL SuU^h黧W7oЈn9!oqr[.VtЖӑVej"~gsCo*ߘ44OMc)BhΈ~9 #>p̄*PAĆ9lmp ؔp[4LLyӜ LH7\/@ dDW[75cj~Nb`},'KNkf9g.>JjMy4[hz'(A0el~` /\OM~tRQn O2#fR}kvʤ V"rW"]cNd4}hSQS:hBn:reÌ+>2YQ)?$suW۵GPRF5 LL+5L˰Q݉]}CL-kًKBp!c,=܉Ar eB%r|I%~z43?<*Prtwd$f0LŐ̼"Ro嚠ECnV0u>X길EI67Aጭb}w ]j K cm5@̐8z&)Oz8S]e5V]噓}QT$3]4%#gO?~FC]-U,z,Żǒ]i1 3 _Z݇#0$WۆOz+5֤[=2~MVZhҞH&`Ҝ`?ǴŬfFQ݁9OmA a!D&{|i=YБS,H>:7ōޔtk5*UwXP{)hYȧ|+33E&6|(+"7J iјGQrsL:5"M˝awg6-1鲈}t*O7&P'j`Hx,=^ v"SۧᩢWA o4m/Y$!r |# tȿm("%&VIy}a T zfL:XU]rL0҇x ȍ*՘z<~(u!j5V@㢱d)b6%ԁ OX 8'|iؔS  k`#y^Cq8? *iҹ1AS 8d]g|F%T`܉Vx69}˖bȓYBiӰ棭?o>Ѭb =`zq.U~2+T/EWqH^=/x2ݳ] כ;xteEDnaSՔ]8/Of 9A;%®Jg٢c+LHZ.h\`&}'‡AoUOW")&యEptTqAcٴaqIZBԛvYa}GE5y"@ b 8WqX+ﱯ+1]$PsJ]u"CPѫ\8 Kz EWO]43ʱemj,LW+BbdKIG ?)LQ8k4C'mRi[m:}dV:ƷbDȁ~zeMbc(OW (;‚7RTޖ͂*7Hu o8DN֡V {`-gM4\^AD}#^C) ȝqwqћcIK_vJ=%G̠#KR]5^Xq S_Ja/XE ~8 deJ2Y l-cV$^I Ddul"2CbGtx4l٘εU4j*yI+%1s<30[[!b:cH290>@dᬐ=P/FTp|Jǧ/ h"_تPl/nr)"? pr8Bs(l^6/׸o@RWmh_Q|ϼSڑQWe\pOc5֍(c|جtqrE ,Nu,Г= Όp )@8d!$B~$fSB@(gi"V| D\]X.Y OϐDdȡ2*Ț@;:Xͬ@ܚr`w@8" ה ksQ8-)89G s%+g@Ii}o$at<y;qs>$#nir{U0rwA!lAHzw2S}Aڽ~I2T/0nxpq^ 10`#^,e//xf!{>h_ 88d<{.XOs .ɅݪEL\EM}'j~ OeW սpr\€-!^ZyNU1@_>q8b#"i橦)Bg`g$-#Dg55֛r6{$K~>sU !5#-&CX.eފQN 3 ?(Q?8jKI!{B:-m@BD;$qǍnhO0e(%yEO"&z|T!e`-ZP1,N0!,?-?j2܋P08^9 P2sr#!l dHA_N Sz\Fh-{!b2ׯ79n[Z'X#PA?%pthHk?hjqJ畮0@d̺@@4u4>n4~ {0" ~!@1{Ln ڱBr$3H(ÕlБZw-cyklO'lCE\KEA$Og.w@:|.;<|[ś{+wܝMQQ $1um,J!Rh2 A4tUëq5 @sLV.IPF"p;!%6j8%m9 X,yu/g"_giPd:[UQ'̛l=OMzC:5v~ e4`#HYes瘫1bT[5*zx&kWfjCk<"`6ֆK#E}йW8,9)_PuF`5|kkl藦W:;-E*wzdp`0Um44"E}|$(P@0JY2 FkDhe $-T09VpXGp |R!UC+d7okTbsY惚~^ݫhTqa{FDS\!oqZ3T}tu.ΧsQ9I]q[5>;HPB^Ix _!/&Bn6 'KQߔ{=A*=ѸWx1*% HڇQn'N+;t&nD! CwX^++-ߝeºzU<6(kZlLʐ9'y1pRS|>XU rLn{&DsQ{ʔ1 ~F#K(|m/3F "q"WW{'gR]wVRn4 p]]B,yP( 9TD<2XRH'/Ẅ_Pq:3JЬ)B֪A֯TkնtsoaV!)*}v-݇ts#Ď%H|>w6otcؚ][6/J52fxx `iD?fJEW([Yi#gC }uaJ*\JD@B~ͫefQ͉0ryySmG6ݹEصML칮9=2rgפh2 רTk%Caxvv1E sCYaENQ&4Ұn**7U4sK)@y{A>NmNHx:n(]۩Gt5ON[dv h^*豨)Aqdzr&7lK5֩?'^Pj4XSí'\ )Rą56:˪H/0= s2܈"Wvk$*f) @N1 un?\J u&][ܽL&4֡8{2xCFŅlhG]e̫p(2=hxz5vv/cМatmN=>dž2c+e=GL[Cb3X7TYf?ޗG'xex;+Ȼ0dka_ J1iCgi+dzq!69W-Z!Ÿ}+T#u~߱I}ݑ06D%>U &,sB#7559mʴ3J ԣ#a黉C eERd\:|E iNYd4۔G1JwlL+sWKi16m Qs> +o_֫Y(6 NUTx`oԡѫ5b9D(CJ^uyo\*NO0^)ܸ7 F80܁zM|iA%jlD-zNS{CI|]O/~l 7@Ч% ƄL#K;MYࡔw|kWK#kS~C! ,g1FNx2 .fނL]: E5d /es=WO˪bpAi|$E =CVu$u̕S(Ԛ 2FxcNPt5qh\}P+]jr*7inHTwL1#+Y"l(D~ڑM Ĉ/!ZVt`Iia^H;8vK՝g0Z `'t9öXE2\,fiكu(Su+8odXoj(G !m=ߎ.:QQuY3V^m˦kK5-v[a{g x7jhoޮt3tW_iYԗ:NZu&c2X`gJi|11RՄ9+mČX\?kJ`Lb"&lo</N7@bZ7dZ1S%h{1C,QaI|b1P2QE=_" Q\??rٷ55 6e>GdDi2/Bf_3zNl*PyfRظAs c\yƹ6FɨA @<\Ǥr~(RȳØ^:ʕūe huG?qF`za!{tT^Yz^(7|k"W28FlN/_^򰨧xX8EU?(Ե*P );!: X.1~6nU j.uVuB(!DRgT@Luv 'F;l=elK:*SNB Ƹ| L*l@ Pd ZA{c#WN6N;?9V\#AP6hju/)VtϞm{{˥95I+t5bsѴjxt v@J^c,Ye|ur:zNu-[bѻV[@Sm1;bW8}Ƴ=8,q=QKA.^aeZ8Spy`pllj 2IǸ:H- U*%; jd,H@~ PU)y@PKW>]6/p:Z7NJwlc8z[co-7OA(.fc b`,m7b$3c[#ƷzےIZMb6Օ5;ƻJjFA޽[5 wGWD=#=c$܏_IJIG:n"'[/A;ӑꉺ]U^]Fyr'!{[qAR>u-: ]|F %qpwт 4Q Ԯ( as u\S ;'VܤS~2]:[|ݥ0/%A?¸"1`LP| %YXS_X}T#} ]r75 t# p3}<"[VbimAT11܄"p7`JL6igy6EO_6Kv_9L~nox')1y4q\9@ .{<~JPSчG"0AUACUI9B@jb4'"<[ Voqk~TMu&+BPl]]'dtfڼ!zUku6s  E1}KMjF\WUGY^1}м.L7r2/iyr@λ .*}n@y;F/{/=6G 3<kk&AR{, e)vk-1zx&,aYdӆ \wRT4@DE F^]As=cEctD Z>h2!L#܈ULȫB6 6㐿We HkMWS:fN$qXs{`f ɣ wے"4 Q\oIKb,1.q ڧ̣3aNVtH}U>Nq(ۗ_9樢Ů VP&-,BQ ji}MOo:x+x_-T)$q^ [6?&_= 9Z =U|]֗Jf8^tX0t x 5vPe4z]W[ZTUdz.ZsS22+ /@RbhE4sǝu aeZ }\IQnfVo@&R\EࢨQ”yn-{ϼ=-2/sn`4 !X.$mVr=m8, N*Zp~. Y4[39=c!s|+jm E]0(^کOqbzY4%ÑoF5XNV8xH2;{/ ~jhn4EZuJ^ ^lf+$DktSɅ>Xǧ^y$f-.jբB8IlT20Lh ݜ/@9DnKl#ǎ2?xDMc[1o{(y(BLE&״՝Bq)LLQ۝.OҜlf"qy>[ooY|^>9;޻O}ole~16EҒnh¶Y0-t_Ճ80q ]M,rS SOCjzOLY'tr07,ѻ]Tk64L9:G<"?m&Dnx5d&R5b>{b+3p 4YBecs:?o6=[1P,dX}Rc+ޑXJVFD+ G=gt4PttT֡KطD #UBrN"nHqIGw& e~RY^ٴ}zp\(.g_MV *c:!& MU,Sýq_fPjVLV=P/D}:: ZsY(+ʐf|tf3g# bVy˪/S&A_Jɒ*,0ۻgdn`6yR8 'Bu>F#\pH ŐmտGTypQd|Z0~%,NNqJ)uu*CџkP#ܾ99s^($2 zcpϪ~}Rc3svC~Wżiv:6w(Lb&g ANX}ɢAA4!՚n4L{Y$"1PLI"%@kSM"AN~Imk Inr䃑b| \ojs;GxAyM@^$+()x^w9y!ڒU^.MZwbGDc64us)v."*؞ ηХ;Pe Y_}:XAڐή^(D&lÈs$gyJhn*+ MW#qQoI36Fᩅ 8S1 ^_#beksފX-/ >b57;gv[icEW$~>,4c*/hq,!!d4w&a2՛.]ȻbzW}~p5vuoҤ9nGGQow{@z7wW;S[Ϊ rX2+¯&wrג^ ,CGvV(HsTҔJVC*`Q.MM&\uGAT>Y1WaYlJ/;oKjFeto[5 i@o✧%vUQ[q8I9hzmg+= /P>1+bktj&%j 1,]K7q'OEEV1`-sO9Zƌ/.RzO  ߡJxQ 5$_*0'1. e=P_aHNl_U)]a{QI]1'E+GڠȻ̍Ayݿۋpȑ 棇T7XxGIAL\e`;'ν$c~mvM[Rξbn e!ӌxݍ^*W bPSMoOxx(6۳ #Y t|dDk:}hPs0-^^!LϫN "`3MAHH!Y y7o k@ D;Ov]EYPNGM Fg*ו&of= |MN~:Su/Eo'b$1%  U=ӳen0s7+ZB Qsl[럘fv=AcINw `xDw%??R0cd4gйrۦW-:z|ZkhgET8ZHLn?5uJ 4¹-ڏ3p7#i7IsY vؗʝIܳA_{l\@,&57TUN_&t?Yfg/$HTjԞ6@_gρxr#? ݌NF2Q z'6-p)w*e{3DbklZK͵9NwP1Jg|7,sCK;L_1X(~bQqҍ\op%m\X ois+AT;j5϶G9_BG$ιyZ 6~`qR1v9~.;Ph4D]sT-PxNךE,k X,q4eEǯ ez'l,͟J} 8K#gz62E^ޖ Oަ{/*^0~!'`)(=32Săf4ScV^cr#W!ʂ0GIeH&݀qǹK,D@Fx*c9j!=) + -bEy㿣u{p{*STiK(ۇ>UF'lHZEK?(mEDv`YUw+]| ub}hݛFL(Ps hz%/b&1`Zcx e6@w FkC ju39UQ]Ҍ0[ιy *x% &JF?k]ݺ"SߣqfPk˖%(w3)wf({ rA*+YzQbqtϜ aDiv_HN V+=N+$Y:=t+pZtIȖ|8چeD!Z`j*w C]Fj&)q],%Zْ{dGh<19O0q\e3E-]|цJdfa. aeVsS+9 ښu)S6^Ah4Ƕ[Z%A4ӨX--c(@o.p;tח.;9mc-saa<]w| #wvxQ:?5nPv Rcidc=xZ\~W:A88Oo%a{ABD䂠`lt y{[p}io̼`Pˀ}$yu-(bUo))`z"N(gwD m vMV "p.zlZv1LL|ax7iI,WU8tȼ9v7rUI< MW.Ss4}#XUSεR@;6jg. W +?\>!x&#& Xe|ɻr˾(#ٷF"e` a/L/hx:*\%wDYB0Z}-2떟6X-t`ސ NZ$IL׫P쁝ntrK h3B>ï/BjZR~\N@A!&[Gx?RS03;GJ3~:{d$I|ÏX'}T`P6u0VCɓ.xzFx!j:~~E'O~¬h3.pňrh݊?`>BTI /=B}׶5"Cr qUFz߆|j 039acu!(5oa Lef9TA[PHŠJ#$[^GDƅ0MɫZt:gs(9҉d*}>lJc?P/cEҮ}5CdB[݂ģ!0ҭtEIcV :rE$3 '8ːuϭT>.e;VXoK:aAB}`{FMs*ezm*J˦ӭmr4ץGCE1&} xܔZTLkF&k8͖m$ |f3]A)w.2paL[H-&=wǻ?/6WEWE^E;,GGrBEs6Qx,c\);6M/ 4rEv }M㇐MsU X7=Xec^Ė #+ɑ\Xs%Hd Eќlu # 9㋇fV r! ҿfM_9| H5u JĆ̵J%59=K-F@[7MIlgRAl3c'8/uVML:9b>AqiO`0 ^{ ǃd =c6|2*(; Qd)c(\J*R96ҿ HJB*}r6~.(DB2*jKQ7PkI&¸egZN6N g!W ͎;8UC]gķĖ)Zq"~QLs;W zoaunetk:1/XoM76BXr˵CR21et݊X,c{)8 m1y8{G:eӔNqE4dL, zL&[u4nb;zXuv5kN\~/ӓS~ h/%>6p2hxx- nǒbc_øtK>ZO.Xf%B"f,qNrT6Q=Iw;S>/ORG}~uA%I#F+UCmpD#톤THYs)_Nлmގp{6Z,&iۅߏ2lA 5ˉ% ք8$О:z!ڐ /RIGWf[l >'%;Hj }֗dRpC"&e6Ǚzsb2 b0oL3v1WcЙP?ѹ~ZG*Gaigl3ǶQNKy[!{np /Kzʖ;uc%{mq`OCoE1U*_ wf% Q:X5c%((-*S>J%Z@E4HḕMlhXji, 7tj+eڵRA_Z}@SLfk?(+b }9\ !)eu5w TrjZcP_]9'ԏ2tD4e֓\oyʾF T<)"!_zZ璨*ZF W^T>Q|H$+ĺ A#s&\ԋs!>=w5 [g1s?3ɕQdqbTjJS`͊cLO|Sl(&/CU*EH"֚@%(a+gR}"h'Th16DL)V7,F(|L˿1Oټ|Qe.aT/s%)^#[`(G͢)X"~o҃U6&zh;G'!rr˲=40JjLQ͐4C7xE>cr4d-6 Zb>yFRd{ hREҀ#Cn9"ԜaE졜OGRt|\A: =잇alg&Hv>z=qU"EPli A0h>+CsKj$>d-FQɊ_\<7">DzB~⶙NN)լJ\Bp_  /WhHF1"WnCo  \f;XvjjY<@:>eTrH/'+yt? 1M^z;(J7 WU "5xl)G˱V(pu Fhɬ\?q+.Ip@hJ{[qx= ^/TZ*;'hkyyM|vĖM(nUF,V} ēam\|9{"` l넛F2֔(.7cJ$>y#XPDa".HƹIZ#/@o]3ؚx H-n>=S9zsP_Mݣw8] \TPH=MvvˊoP~(ǎZ6\c̈'(^"Ĩ?E Au? I]-ۧɻiy[Rp o=[J)@ݠocA(>  Kp0!/?kveT'?Y-yH hug|q '39 ߭Ss/w*13((2Wh3TpsNHRv$sxase_#)ܔVSsnf/tT\vDlCM PrQj~9D7 EiZ(d ,I˗E 84g".0$ 8~iXP FG^kI+i.'W 【-e ZboUfw /Xt{Qk,:QxaW6򺦥 OYC+qs0_BiB54)EiIgE ݋ yHBB`œ9Rj:ckT/+FG xzk1KJ3\$a~ 5G< ^޵Ю b$_>KAzqKEa[[]' c=L5C ݿvM@:O;C<|)V=v"ۆ;()g-Q*/,ݒIOЎCAb~ל`f6npgJLJ*2u~+gjS= ׶ܪt$8|BfGFjm"7xO4P#`*5ǐBBo4Lݠ"VҊH }"h{ˍqcQu>2z>+ Lp *Sc] 劔A>wQ?yօEKlw@ 0րYĿ-f ^l<~Q?OAbr5CdX-%\7zXdjcgڦ1o]`_+OP /}zdO}>  nVT4̏~.0}ORpwoup|j-< AÜ 0Za0}^']-\ܽ,+cvVo+jJh]wUiPq1{L/- <0sĭ>,H^S[33]?{ [Aіݝ)s]%Ww-wQ|ݼջ甡;،YWqN^QB wlLAdzl!('~jsG\2$l5/c "5).=~j~-,fC,&)f5ll9y?j`-$%+1oDX U>qt_5 pSYGJ&w`$heWS`aVŤFv"!R~ny{I4:^m`/vhJ2Q&"Sȇ@!a4fn)!4Zt3m CJw'e#W ;ZQ6گg1O,]J*-bwgIAsm֧ :U԰PídPB.ɣ `3[9 uӈ,L }RA.Z0^7ˆK6*9R=p= 3JejMvG08g蚿 WϳpKjY߇ XT6ڏ7?KM x~Wt ZktBٔ٥P|0}vU@? , ŊCxHk9&T.#|릀L&X\#WkVaWyHmFk$X48en!.y@sϣXzvŻ!eNՈ#{p{vCQ톫jԝY]e9)/YBVa\&* l1\)/Em9sup&|bEgtk3W7>Hb5YGu.SȻϗ%^6ar7[4CCXAi(`dPT۔O/5ќ^i5W-]+8xiTJ#¹! O`cmn]:Zmxf#[}b si@ dLKzy1Kf\|'76t_}Bc,.rX?u{I ԦRie7dfpB4P}[X]W  rScRiŭ)Ez#DhE+>NTeZxx ̧~~dI7"EnuEnY%lW\YYfi,js;:34t;Ya2 hz!ymЦc W$4Gz_9*؜E6y` @SΨpϷعQ9z͙&+Qbbf_5kT/i +6hZ ȧLJ@nН7i/vLTF5gh ?wġyŹ?/8sH:8[F}(E0NO:[ A3}|xe/:{p7C"w"V,Ⱥ2Y'VMZeY;$ۿ OCT6:+~WBע r#2KW`yf&j?h3ɪX= m9vR g*{Ց.m!?<X {*C-"r:q&P ҤF}[Zć>[QƲw~Wl9W/ (n&3c|riKdI\3\?KܸShĂ` cPa9?KY"CԉkU6 ]ZX#(d#|t>8SG/bޯ[1ž{{?\R51Cnï+`:,o dIxNZ :+RZVPϞF` jG4D@:,Sk l~Et+yg&d}>CdEfsE>WYcd`f(&9+}X*GsVq8LAYһ xZ6]v#(X7E=炞B® >BhD@܋UӪgN*p2V]~+0[h!&\&|ԈUk N̮&U>K([DA6+wWEwXQ=_;Zj^@WA5_Mq}-}S*dApl&.Y)!lu 违vr|TUqX/jȭ7 M^h2G_$V1~,~YHtb{@KT P}acF9B܊QVGto0p=1C(Bfc):\YpzE2C 4}dp6F ɴj20:b2BA[P쎚MkwϢWKSK~ȭ_p!iK?ogTX?}WE03GdU ԸPZ6-#S+ɴGfYpWMRVIf;cU I+A\v3$ 72t%bCxruֽ+wIcc皻{*? *8tyV{r OlE~Uu?&k"ohPbI~Np$ҿ_|rlC.e!"]frR\|@ZB5)/s=pa*뾐P`E4ԃUz|} m@Vd^YW_c~MUpEYR{V\a cch5ַؚwarnxC1L*c]v lW/()$*9r<|[[[1!7xC! ,Ŝn4Q {t]U={ЀlI6{œ2Yc ;NϐqQJP<4Q(|v2CFK vWƄI*lÔ'elI-yL+ 6ZS_IT22jEBGM, .Mj|9 NBޘxb*ՙ*[q 'T֎ nxIl05Lh-)Otub7+׉O>]U>ǘ:.j"kŽA7zԑqHWŲخ.YO~zLkm7MR< z}*e-O t?)2._ Y,@M\&9fԏSf׋WD"NQM?px&]PQz- uX iGr"q0-PrBDBnKf۽vCLrxOTαdR%٧tfEHa4O-p'b^D-z1e=2m<_ըU 3J0Fۑ1P;*E`3$aӍ]wCס>2a^Ij*R.Wܙ漵C8lD343z1(]\j7V a+o62l&_fغX7g_˳&muiM c ,ɏ#N$ПۑR@>=";lIt9Dc3wp uI3>/tN(_ؤPA(y]C%zHj廀 Ѐ#f<*Gpg`S'},ϪEvfn/h(SGOM丩:!ZR] x!lw_QPd+:鶮%JFeSxEiV!L;xGxOps %ߙtj!s7s!V>w1Yu C'B9骅KxP4++63XSV1bFq P C?g< F,~haS+L`屪"ϖg%6aeǭ"Ht-qv((d7LI)}^ENɒ@7z Y0Ϻ!Ӕ]ne@ '&̐g̒-Rr+&anق=| g@}滼^*2KA)ENݷKQY_X|r2,}(ewd&'ƓB$}N; =~瓖rAa>[")3J9+x<`e7  T ƈofi@N^L-뾷I@bǴoɨX#V JLIĥÞA]^~ -L"]E,=?8MMYv[([C1W41E?M>µ̨,r)OZ?HZgT7"x hfwitiO<,k,oJbPK1?bjq)Ty|oC)Gùdz )ՅټcsihR5zmMp3.a,Q"˨#[g7Uw&ep.]*#̯i]Ho; FBםo /=,1$b#=9eܷHFf P{PXT1Ucq1?[Yo 3@'`:__n-4n21ʏ|*++6}m[ S8w☩QYX|lp=[Q Eֆꃥ現r!&HƒF-m7*H@4ȇ'QH1V2{|~f7n*z{!kx'$=*SF&PTpUDPmԂG:'%1fDUO k}4cߴ1떋'iiQ=kMhJ$K|Y*XRި$hYү,{azgFZ6o"zC 7 ~54L%x`}Р}1@W;\۶km5/*i"akDyeDj];`r`eozM]&SIGcۨ߸~I `'NStr޲㬳FDIW G7wU|YӍni*#C'\N~U_ޞTeU]Տjv%@Ŏ G܊m&>ZohuH7Xa1_HfL,#߯P7eSvfJȻprzӤZ#aT%*:WQ^̖۲.{~,ljIbVNZT~ L9"F *{η,L]Hˤ>qvKpW&S/*?ӭ覔?/UNHfWUҳ}B%LJPoPxfHp!⃜ws&9 z`,D]M%U'0&pOa^BTh%"rh3|zWnԯhP5Jai-6kPH/;$*!RA"^޽(y+as5rfr|-d't AmhT:%j|4Sxqlٛ~ hلٺ^n- +# !.naOm *O^68D (8XIa)R#+6~lT6Fa B-\2C|Jt:k:溷"<|wz^L\d:/'[AgFh7޻qDZcd? ]ߝI ~PRHgI)*kPn`bKwu Bd|f$ĀЯ -JxIf;;UFLZCoɿpJ!"rp]wx$8 nR rn`&ZIea5+F&8J3 aˍ*%4lAJFO0~<01K][6K&Guo{Y]4x #_#bax&Lv%Gv8 YEmsFH5MJkbb΂t:oPek xGlF;mq(ԙ]M}>ejZUK%75θhp_'y "}  /0Vq^·.wAwz8&:3;({ F.TEբ5iÀf,! }ͧ::FSj& AY/¯%gR|z&H[bxi"g6NpjKjdү+w29i=t-s t)Y1W'{{3ݲu a ea!vMFYV8ȣTZ3Rp&rr %禱~OC4<7G!R%kqԯa D; ]OCTp6ECUI[yӌxW2ߝ_@?Ƌ$|9W4 A a4';,%=:~I X5vhm&n&0;`qtp PjkTCL}H "0nd&#[+Ɛ`;b=p[m2a0zsHi@cc 8@GES!C/0oeivz\zUGF]>rbe/.W)N>"Q7Y=!Zn}bG!e5ͱxboƽ+3Tv}Ӂ)aZ{:MT}p]\L'v&Zvݤ Цɂ_?AYJʼnyj~|.OC=[HY4AytVH 2K1K0ćL Ժ3[R-Knb #Ҩ{'+xݛPIĠP_S!:o׿f 2ݎ:/,,Ghoug~aFٷz(e[v4d.p&h_&LN̊÷ CxC;sZV2$DvMf{\ǡjKRpm+XS~!ͯH]вQa5BITȹAS!f?޵5X|k ƁMC *AۓUVhc4f/M}j b'SzT1BÝie}lGM(&k!()C|e'Zk}^W!i".R0U}E0€ 9jS?XUtOr¦Smxe^S.,wT m*`?v!RY>.) ;?njeXl#*cz&'Qe+ (l8Yn(q/4^y0^?*pcg^uX3Vi<ޔfLF} )l"{;rɊ"~Ugsۄ {_)FV#|«I]/^W=mކ9~,{Zht0E)n!EpOkᛳv`!&uCay t[ Ռ>$ HHnhߞ!0I9NTRԕ5kƅ 8%| *X$X@ݡyD6i9"Qc$HS]igzw{cDr h@>Cww=HX/:S^{M>WhKF N V<3DKzctkEt;tv$cUI s( TL~;JyQt.vO.ULy ߯vހnlbU 21NJu7] <bDs6[Nm2 t9\( G$xC"\s}͊6fN(]rŢ7CЇ%ұDGF$%C]o2G?yȻ3&IYaMU ڪ7Y!tyU;aP_\XoVH`ؒA?=N迈!*R1 0e|էI_JOZ8iKG_8_ndǸM5FSo9oܳ"5XTBH9,e+nOYM\5v (̊ٚXmt EUgfȜ 6^^xoK'I%3X_BZ"K 4&^[hkn:©wlꆤO4}Ɔl∻P{MQ0E>_ֆ/Qx\#*ǁI$ip yM9<,;QfתB)B3+=wWR&km!tY<ʾ% XD:--=ʼneg Monپu9+6@\IYY< nMP1s`^nLP EF֢LX[~A"nEra O֓2nlXOͧƞ'ư`ĶxGC2JEyFcb6"poA(ּ?37-֑Ԍ'ľjN;>ГPgJm6-2%BDuH_S_UA[ j],6Y1s&acQÓFJj:nqRda.EDIRRua.cjWDQ6&Ƚ WywzG0k܄ౢ5SGDP28FgӼU. 1>(|`3+|مMB]; ͦ85ITpf :b/q|My~n@|*Q<ėy7((Y#׳wSzB[ֺ:,"ʫΕ{ Wݭݲ8  Nrk뇄8*36lFn8ݬ5u %2#eK?vy_%rρ Ǜ@y|ұkkT,iP(yb ]ZZ1}9iÄt˦)-5"^LiDM <@pMǩ{Gq!~+:J^|}Y#S+r/df;KXQI+iiӛx Kq hʜb X ~EwO .XR~F\9?F0&Yp^i#.BXXg1ѦYm/rZ 84i ^-n T?iʐsyJu&s@G$Ӵ7]ŷ4XKX4aݷxvTUY0(R MP liDd; S0ʽx6?PW,4ls jQQ_'kGwk^W h@9^)Ag"pwGǁi:2 3,zxҊ}?I8SȮdZ#eIqItpg}0Y>/bVҞ4}VbE~&Kv6?( l&=DӅ2`ąwp*Vj}`ʀmRen Z^ym Hoz[" LPyjbg&3G> 'x +\`Kr*1") :$LBZ KBNcLȏ>=3H30h~[?hn+0۷c ohFP46V q݅s@^stA˞N*I/ ¿!i^w6دbW lUnXBo{2 "Gˣmo63=LD@8`p*̹ G h"9#Ll $Rw3bK0ۅ8gQAt;t5[ǧ(2N֊Ga>"9C90Pz ɓ#-Rl8ظ]fOR dS~_7OBt1 ZЖ31er94tZ*owKI8Y‡6B:)+bn N@/:*8PO]$`7 FCA^ODl˱X_fIoP`}͏4 k6wT6P*jWƴ\[bk0 ᬊs"\ #G j[cC{n }$JW $YqTf̲ɶHZ{47" Jxw_i$si͕V6>?'#@~>_H2v ־DwHspC)ކZ%QIѽ҇«`+6@Z4kZWEBVn?HG[]6K[N%|g>%?`u +EmɬyWi\6?=4vi0JśYSrukS3+lը}n\]~wn2d6\X0#zqQbj:.z0t!ڂkI#VsL#;fcY81 t A D3F7:ܑsyGjCXn]q<vQKt)+>2pBsԩfE'ا>*y#b&5q͢œ>&==er/m:S3VxJ~rB=M-G\`fP`~yuqJ)M'}(".ZH꒙<2K:'$b(X:ꇃi\$[ =3 l&g;F(V<~ibjxVSEDh'W &T:NYs"!$1SX泴Z~p@ K,$n.xȷwF:ݙ[= frD΀r(CLke%B* |1#P>,4 L>cPq,|k5sߩOeh{34 a7{`\daQE L04B1 !CAB+oS>{ABVE|44]FM/0u֟, -`IM A~IZC[jP31qcn~WumwyAmjAj$Yg{e8O֫mF#vzKu\8EX{o+*NAh _i^4M(u]mfZ {~fL6!#9ؒOx2nba XXbQ|4$>mn'9W(CPU4E-3-FB5jWTJX R^>ts].R_G/ygmx w^궸r v gml)*cQFKv8 @}.LDͶ. 40DuC87aH"rw䄞S'8{D_Vp8i;FyNF0o`}~բg$84}$ di*f( 򎁆BȪ\B*Q99NP.nEYjA^V/$8+jQYnUQVZo(6u˓]"H2|UKQZ92> (M @0F`4o^rd"zZ+2ߣ;?=>PW1ڸ~!ijS,NswH0]'T`Vőr`N{#`wxfiB<ξWmHbM]DˎНʔrGpdC:ƅ,£Ws!.}4wҐM wD.n &|:>wT^t#Y47͹pjT g$bM$TئcK=~)%FNNI})-F\mT]0 IXBis'WHTߜV/0u׵;Jygu,*!F dZ*b@ :w)'2} `l/y%~ "٦JZxL3T d!zzFF{rne-Y'аT_\:dR^ ;;0uXD/OSt3Nu3fcA^/Jl/q]TfҬPΟ&񗼢GSP|A֦ftSߜJEJ膑0'j@jz}Oڬϕ%7KŜ'[ g0i9StYDvALm)'0.f@ Ov`*"?[Z˃[6Rsݜ6v `t\j?.Å?щPOSЌ"|4=Y8~V_$]k-EJY̭u$ U'vg,2WS`Oz#I#T3iPC? MTT Y,bQףL~;;-0[ӕR]i$,OR퍩uǩycvyBrCsȄ).?A;r|*sW1]v\,ڗY/ ѢJ2PkDRęw703SkTG$" :飉=]Ѕ*b3|gFpzT7^>_UB)**y# $V~h^)Y: (rmXgzHE舵3e.g?ΧuyWل(3o#{Z(LGݟ/kMONnAS@#u!EttmRҽIDύq;gFKT?E,\=Eya!g 4mCWR{>TϫW1K].sơ|UŪJeu+uNs@F=ȿ#sQ8 6iAj[G,u<^]g-V4n}cm .'uXZ9$qvnUNʲ\vYZѸ܅ j>_G֓Aeu:RWYlA+9%_mD.B(տhqTBv}|2bۗ&&اͫL<ø㉫11x#DYr+zKHGʕ4d:u*oNr"~N^YƔGA '2CXD0@gp= aڑ^p盾@a“|լ)jߡ\TKާQ5!\?19v&AOCs.,M뎨,gvt(z:cJy@UJSe{>􈌽%Жp_ܚeH&nYLw>I+gYтcKloCiAM/mcC d֔n1(?jY' yvLnyg{ Ĺ섙Ҵ'y#n0~ނ-*9AB0ǝj9<]b{rZVYɟf= >r]JWU 'SN#m~LutA5ߟ`,Z7$exﰷGLƝbX)P@ V>8p>E R:0.SuP>Mb͢XkUK]V/:U?{qc6g/3N.\h?,[` N:VS=uN`Az!w`PF/x >&Xd9)2Qp % : on.My HI~p-Ͳ3_6o(ɂYL77K2 Q_1yN(} OWkHT!pЈFꚲJLEHc_(24C2~ h J& S('^}W{?u6wK56^h1JCjBI( ,ΐĈ,InB4$3ĕJW>EO0˯ /-?4w<(In ͓Au'UkVAM,Y[ܓXf2r?Hl6FCZBo|GgXvyaZpvk &;X3z:HL` <:4! ~AiD Ot[B1u6. O +-wI4t_G-D]C| AL|3}'p*(o @HC b H[8|`L( ?%[vm>GM@Wk!5s!πJz\#`fZ~Ŗ R `Mzeoq{1+U;W@;mQm0|h]Dd45'(ũ58YQ&Rz^vNj`G0 .0Eٿ=N? hsLLFL(0mȣ1-&q1i_.×yNT(})ռR.S?_GIsc)sl)?Bu_9n,Ԭ!{we( ^ A\w΃)~&0)SJ58H 7>6G ΒA.sa; .xU|K9{|Y==ޝqWtydq_g,!fdV3Qޓ1#光Qt6cQq/Yb܁eIv@Ul:Fi }#--b /g1s^8V+C1^򬕇+v$mLF̸W\MfI( Q(QgyVCJ3reOkgNzdP8L({p`{I+ ՞Yph/#3WM~G#c `kB#NV u4 Ȭ)C`?FҔT٦sPrYc7I,|g5ؑccCv(xΘ~߬x !ox^޷6QevVZuKeai>^u%OpvJbZ$Cw R:k莜Z.3%u3C~9(EרHr; e?eT1 \AՙӚ;QsAOx(-l"j'kpUo E#cZC9_L6F<ӓWr,,dpfy[u62 RGtg~.+ GDfQ' |ZOu A!:ٓ?yގQ 8P tƦQ￰+ojHmF6^AuK>pdbD/Ymb]ms"vdܰ 2tw`JMnI2)" N@RZ«&T񎐠gS>Xe.ZxmP:=NWG/[}jVҥx÷ t^Yr%a(5!vY-fVKNp uŧ 3ޛtm[k{H֋yn|!!em~v \\&F{L;h\ͲF\aZ}MD mWʏRzɯ0w O$~TёH?5[BHYGanc5,6T@5|H%rMtVZt\&< +vi[2]spʘw, =,qڦh"mj|W R)3^")~U:6Ȉ$ 𭖀|2{,KkIBl 9mҲu' ddCN+/Lw=M gݧdkIaLN`o5 uS_G t[ (̈Wy$(r~As%ᝥVP'7x':USyqPf}" 0\b=b$ Uq7Y?7Hvd:(C`bUTIC%'Ϋ WuWC$ͭqn:}UV̎oVb{QE4 GOlO7I?B\] l}O@|S|X,'ju^U!Gq_HUt$͟ums OjU&ㄠ`t4Hmhq>#T 6;!R\aQĘ]S8z9zfU FehݟILx'n_er?j+1R!8'sU%3vi0۾u%V'xSI/p^.{FD ˞mY6+W/0hp'-!iQ)$} Wнdߧ]7?Y{֊I|0ѭj4%P0pKa>"m 2>ku>ņ90ijQ\DK߶$yp2C_sE"4?YӦ4.,5;Є.CU1;T+,<-Oia6hy)3VPxpqTd"T~m   T5pwXH*;=UbȲJ'2WQ r4.[`d>_1[4͘@X-# ȹ\8" {r3dozsr_N^:Jp RTҠoʄoOih.jLmϺ!oH]niNJm1o.' z d9~cbQMYi+3 5/dy[]T 襲Ģtvef'xZܼ#߫> K7 YsAjf8RV=;\ͺ̫l36f=$!^VB7=>+ @fY+Г ± ĕ翙G.Hע:fW,@;ꆨ`s:JzW*^ k]MGˀybXV~69$vWx7LJݧ%N?=b+wA->An9F3b J^WF=UiFm<KNc?S =^^Kufk7f SbF3I%D7$U0];+ӿ< ̨4 \&UZAXL/ÑCu0(x v\;57珵5kK$ 9wEJXK2 Tzez+d?^}NPJ[>(͠?@!r5$* Dd'n~FqPψoػFd"袃7޺S&! )Ejծ +;˽~5$@.f@m^AIB$ y {seZ=ռbLfJxF^[@p&=@ٞ hSD4[9sP3<ͷِip+"!$:L~9y.& K,NeI,$3ba/#<Yۄ,ukk`ڳÁCN4C\v9{M O~$ ,yh$TֆTMT,ZXS}/ZzWϝ-Q5:~PIf28׾g'Ts@TȖ? 84s[' 9o={R=j0Th"ԃ'WUp,&R :j- ӴQzOA|1&"BlF""]#t^`GDE酰( ,/΋9 Ƥ<);Q!wA%fO|]+iOvKޤ,-9u`lHUy}ߘ%N:Bb ÍT {HNdӭ yWT=2&-ҰF&¾^c­aZ)#ߢ u,%q#n?`QY%x`Rf#Ն2>BͰg=g2P=pG,ƈ*yݤ7hW^ok9]7N?y(t7k mm08C:PK,z?Wj$K4cf ?,z!_~Dt쟦F{>ֈ=I߅zV4vw&Uw`䅯oYs\~^|PM% c%x] vkb$zb>FK$ZV] ]ULHCju^" /FgLCWgpJ~J~~8A/~db|@HK^!CK{0OHAH ^ UoYcy~5KP#}O]%򗨁[x(g!XR!ST| kUv)> "٦;TIϋ 8%[s Mŏ;'~Zxęjn R]] ` ꏣͭEʀ[yOי:48%Mu#VIۥK;nevE]}͖"dgKw0ݗcϑ'We$~@[Ȋgj Jzs_l:f/c`]KZU,6(_ FlHF|_[8Mg)-G)꼿K]I(|brbʯAϯg`-–RrNET/&sļ}e#=owredip G2%+?0.~ Me6諟Y:!*Ksj:1;߱ck`zK ["S:¯NF+#Jeu}M,̻׾ntj.C ی J&šoN'xc5}LӨv̗ǘB31 hD]@wY} qJ\a&#K \&)q(kePڒ덅T$MbQ.qvӢF_j*{h;OFAJI@p2s!g A-r|砀 v@FXp63w L 6fBԁ{ogn?Z:_k{ ٹR&9 Z} Oͥq}6I)tl;{E;}TȀLʢUB3ϓl`# Fw'/1QXBuxFb'^Z KJydFͫTCk+Z{~2m~dHuVk}p=Y9 HXWmU 7$@L?o?ۆҸ]@kk)neiCL*v[ge_pZе: e= )-!齭(;w*qZ.;rhn겠rӌkM=ɢ .N◂o s1U;OjƟorRJ26qin qtY契4Tm.*Љ]0RV+RSJiw2vKPCgS_KVG5TՇq,P^֡o=fB΢%OL/\f8կ][,K.>PBqb;baw\H7O{ZܜTc 2 ę\e)ѩhX!/RG#XEAp^/Lq̗-u[.c=!MYpCjv"M+c:0/6{>cۂuIUjhqa (oz[ˑ{)Ӗ4j3Fy[5Śr y'Y fG{ڢ!w|y# ,#|$,%3c/'{r?aJvIB.)bяA<C)DuS۠ͺZcS26 `hǁ\gOy[8*DabdSUT8YMIJ{-&#_@Of@ߦ9eS(Z}G싍qIMadJ]I7n)!l(SN-#q,)#￐OGuq5nIJk|ְqYY ߰nD@vxc]By0UAw=&k_,?9?j/9lO&*W+GdiG,C}$[C-$; _kg'iQv jZ OyiMi^Kuƒ1 ˩2 qkZI/ x @e^ 7<~gus7?F<4. 847 ;NIH/v߰&2(W`gmЄ~&4C _qr 5xh 87ADx(kBxVĞCuBm!q'$'T.Yo|:@:F{Jb2wJG.89(SQNʧTd4 +lp6:&GW1A]5Fn'’˧t+[?yW8QaemW-Ce`XNesnZlx=#M *w.*[a "q78yP=x45Mج8۷(NFTdec%C +I:F,cG݀Og@$G:Nt^ŘQlwVT |>p6JlZ_D6O Zϖ0ef6v, ~ Wvu:@[/ R3MlqgB39|h[eLK1;zwu~d3R<Ԓx]bAN,fͪ/QP~(Sr#P!oƲ5𐍀a^>F]f׃`FMd߉g5rn,ozGS㰟0B'j|n}ؒ>X<V˘Z32h'I1!hg']nGd8w`'4&K(Ȋf=A@ 4<V&ȺVUfnPX` e70愆8%$-麸DžJG~@I,{Oȓ̲!G$&AY ùQ@s7w| 9Ӣwb^O{]LfƟWr%^;#@EdAPZ2[e[w`f;\F\FV8Pjd4Xu})  %" /h1 %IŖ ҝ"zf٩~182>?=흈VmTX4KgL~8Րh?I6/cſ'PvC :ztvCZB̻̕mp/'IO9ҕ;ĐT*v2R%zSX -9}~^hWpGN&sQy9IIm㖔G ~h>OF:5OڲM>8JKh o.򅗠L1ﴝ,EZ|-ftIBN< XC,{SR@-:|S=Yi.c I=/#LQ؀})>@TY>" t$Y]I/(t6 <jd+L$tϰe0,K[?[`0O{ 1RdEan&Iםm(_?lt6R>:]'[>nq\_Ҩ$+G oo92EDq`90=RLп33|HaKr5 fi&.ϐؙ)<?V t@rzp+MֻVNPdGʩO-frs;̻r9mN50o b<}9ۛc͌߾Cy~`\8%#1b1hŝr߰6 4%7U{ O$88j=Gw ؞wgxQ hnf}gDNϝS O< a#/B*<7U,!kfȨFFUа:]pDZʆ^}^=eWU`ӛ#HIޢ^,hYF@wp2y[%Ѭf#8.`Ź+)\O]bqgÙK/1':. F3*v|?I_  Rd~Iɮ[Vp)xEU+mms8C(eQ>K*Jam/P<3wQ'0s:ARiR*98SH+4 ٩Ԧ`VXGE<9u(@mىoܨ_:d;|e{#:W@Ļ JbpW$᪼p='N+>SAwn^\XD!̲8 @Zgwr B&Һfp+#WޗnXOԹȆmq@ 1#31O#y;,nUB+sCo-ojԍO|v-Cj?2JT`7*—CO-hz2P:ʒl_,门5Pfb͙Y g⬎ JW=t˷с j47v{*V3Uh~$M2aErpjOhfO}^t@b@&?Gwas#)M[`J&n;)ϠҶaw$+H$!Ӌ/םRRAte*: (#j`΅"Mq9g1Y@{oskx8k*)9k#HY%yf}>B"OQ}>(ۺ"GA0"=)tj) TƣY/$0TZ]>}:ДpMI|_,Qh8Po z5MlL 9Dް?f:qG3!H%Zo> t(mE6$Æ=g\SFl;2>כkUVI|PtCߐmyljxcNN̨iX Λ]*gB+:*$_D꣥W|>kF7 9rSGi΅ZZk'/֒XvluG.MJMkϕt4='0m:&3J8Yl`fq.~%YSE\iʑ 3RlAjRW>H<>wЪ}{[G f;IX dJoxaUCȹtnKo"ͫ\([B_t| AyLcamY*Bi|+∖+e?VB}t{ :[׷"6QnX*F+_afG brB2rĔtlG7 z$̀ ܴjg<ۍ LWutl8-g0\Gyu`/a܍Y)L7=`Z:6ǕSR1UW{,IIpPekP{́>*N2Dm+3 wuWf~L`x`8ouj6f{eXG9xxi=Rg]1CB-4CqOX/f@O{Z.`8pjA㩺e2#%I樭m8z]S9F>:MD Mu{wКG2KdO*b*ź!{CVqX(YoũRn W*V9a!*[e%+mAڔ IF (P]5/'A'~+u(@@ LFd&iOL`ӎ sU^>:z?jɗm-T@fnkJR3?No&oFHc-~Uyen9v䃇+€iZOuy`B-0ƥebVbcճ]iJ:MF7ëԃ"I @׆V*7SO: l;L6J{M)r{x7FL{Gw{rg:w7ź-] 7/ɻ`6G[%NL_, SHBֲ'G~yK]O5wP1߈3'MGIڮ|I<+\2kIJjv\/ht.PV\Ynwz^A9B8QK%Mx 2Cf y]͞%_2r H׮S>bppCP;2?}5 F韀eoRpq\d=ijAh.Ғ+"?jIH |5V"G㌞`bUxƾv3\m!p#3Ƨ_}MsUOP[?GѮ{|V(5 y}?IpdRI;uoK&~ xL R=L']/LF5Z;ǘtكxcaX"_wb|Sן w.ɱ0b=EW ~֏=\)Sǐce垱@>49/r CX$5jV1 :gbԸoPfZM6))g,y2s>@aݨ?͠Hn k+Y N= b- >Lv^α{[n%U]UsQyXxuaqJ SAԦ4Qu0H~pLg&(p=3X.L%:Gc(jPy;oĆ+R*q=a'= ` :? 5$%dD1l->Q~Bsd!xKvfDm6UWhpj`,Qkt4aJ"#&C[qަQ {L!QLnNs2;1^cK 'l|cM~KL.%^-A_>{FbNo &RT)т8aò *QW83DžK 66QnfY-~;8tK -U6b鐞;_g3vg`\>ctڄu=cSħISڏ;N #qVIAu^FMA|D"h0m'ܘz5}r|;cyYSkۢ+(ӵ;^x"TCtrхnIU7vЩӈL˘R$ tqPmFR1M̙W31J/4WkO.dc/=<귩RejYL|Ϭ=2v߭"Xk6ZA/@1+G2(E0ϵU돃zEꈄF;ַIvZr:m's#i`s>`$A|clq<EcBUMB9f}E嶎\iKp&)ҊmJ'[ { 4 tXvb!`TՂEf-n݊΀im{`=S."oř)e $46!' nw9 %У7*$>iC\UUms/_H-4[!wֻ"6!:O3 z-ߐy:#$0 |gr+-TM_4?3ԝ;ް!e9#df̨ܤRG iE)5Ԃm}>`#ʙX((lgPr{>4<fuY4}gÎ/1XVJ{Il{JxFm^p]"xk{_.)Ή}z!}41Hx"'" ; .P V: 'ҐV#dp9yqW-)-<(Mk=%X.}C8?~&Iez:Jh3']kǹ!6s7pMkcNi(v/z~rE}GPx Br\uGl[Vؤ`O~aL z!E,)\3d~.<q6+d9Z}c4u]KqUASӎNn?uue*^ss gޞQ;g"~ 4 ml9!L*ir9*9.u7 7 IWϞ``Ӳ{mi{a`V"ӵ[p0L5=+VA狇C;F݁}$9)嗣 /W>,UziSL!s sJ@oi`" ۤ\>ҨYD̖L}0gpg 3XVg(&!8tZO&m N{|,#ެG4i@./Bb"/Lu[h@LDGRD[v9s(b eŬ҆8hJ|c%𨘄#kw>3nD Ђ&eĻrSy@w @;z+#E'@DlPE`q1=F jU+D'_ޯ+t7Ze0b`!źCOЋNukht*NiեS_ mRfy?8e+?H y݅cyu_ (`Q*E^v`$riJLL t o5>GxAq62=5LK2_x(Ǿ;a%pX7/ZDdnlv8vɧqa aO.5{8Q?225} UT%iJ6JcRjmS(~҇PUn9?CW'!ÄDT{ql©`]͊7\(Z=:)a/Vj.?}I!=2U6mpFg^[ qPmf*l%t[fIȣX?ܨ'6BA݂*ei+ˢn`nZcA P:BEHTU uuh]UNm $hCyIA;\ywxNU2l;mи#, ||w_Lf|@*o^ ^*3_dglOn )k.Wg1%p;]am`=PMZ0F 'f}4[f^}V:B'R<mt gƝxMfi_Sہ:o"6wʑ05-˶B2^\qxcX]~Gt[lU3\{iy7 0jwju2͖ʥBsyIs$g1^~:4-6s朸!wu[uu^}@3; C'bJ"ETYW7P!]õE~yR]X4dC#NbER Mu9a +Bc(WAɬGaN\طB_S^*y6TDa{4<jZU\ʿkcQáy*XT#[w1BƾO$- £u/$O{ ,T\b3:Ư7 $s>ʤ2%4ID V ajp/MN.nznx\E\VXSn66ا,,Olmu\,S:]\\CY;4+{0/с+ڦ5u%ʮ1 { !V|b X.F%p-Fu#I:jYnQj.{1?9iWWs=1gЉ, أ3Pc4B#+r]F$>PkS5{Yo'Mq[S &9onL4EjTW76 \:Vf!8KcF+ J6Ψך6d3_;fǺVgz^|THDkn}wHwT ~*pfZu>ZR&oӮQ>1PGe8ءLvP@͠c -ywOu!,5 D\FsqeVuJOՐaz;5F?X5fF!֛)}<nix_}&<#%cэC ?;ѽKѢjpA<nav0!69ˉnm?- cS8J .&Ĺ_;fp0,C~tDNB7geJW:̋/X˘#<'Z-~vJNˍ5K>:D&\, _WbS;@ts1س͏^VG*v,ӬJ ^ z-*c+mg6ChkjsUe#DoRi=O #.BR4ِjV? 踢e["lѢ\7:_&EjȎdʄ2`7y-3W_\cߖpNOgwa+_ozċasx"S?m\}ۍVT1ɖ*$+%8QH3J\ vĻsZKF=;_#ѱ$3wz3#M$$S6UIIL "&)YGo":zX M NXC-~X%TΩmL3 /2Pٵf9Pwْm0UQF 3*r@R$$/RKkn1YGӓb}&@Y2NlL rv0¦Sқ8]n$#[P.H\(UA*N$lK `9uw!X7\Qos6ASٷ]Mx2phe*:08BmlD5V9_ KA? T(HDT!]8mqF[2Ap]w|jU 8+q.2pŲVQ~zބ.+Ig$ӛ\4y %$ywOOcr!~V* !}vT:*f[REκl%.r$uhde gE{1m!G'%Z`@Cbw,_CY"jq{+ȥ 81ha~CYV V*eR\ҸJ>ͯjK^Wos ըtG'PMu4Ԧ9ې[%ƨ6ϓjv5`^䀌+`ݳ% K|T+}&1WjV- >k]#M'm'ܵLw]g^ 'r2 ^,p4'4v3_zы4*To3*>aN m5"~SQ:2ϥ;-ʹj⍄c/mt8͵L/p('dbhr =~iпקy038iXӁ!i-U'P9n_Bg3d7يnԴBBmx=\Lvgb Xu滄F;^6D&7j*0nLoi`YgXQ Ÿv< !bt1. ODg(:F50QTn(GˮAnHEd0ө`3ؑK܄dk?Лe/8<;~mD4$lUHV-*cNְ6 湥gU5gh+ KkQD7R߄aNcÙGp$ vVłz H[[LWeK;\ԋ(bH%2od#9GGFXOJc' c`AE`htdӃslGh&%ZJzġey҄%AkjYE(WL+jjFTPlSœ   1rjf1ƙ$_.mKfoV_Cm<뗪2%㌡s)Ŀ>'Y^ ̸ NgUl/r1hlԽ*7v׎6X:a|g#|^D fGDo36,꣞"`5pK]߻&R+ =GmO*4qQL8ž+wGkkSߕ%+z5C•k%m&Dh߫Y`xDM[؞)ءQc4 \Ʈ 9W 42z ;1d%`O{w! 97fm-9F}uUB;Qʼnq|5|Ho.24e^ F<CCYhL(eO[do(TbJ,*0u nC|j(L9̑/Ğ@o)nljGr7.4I8oFsg1pKU>e<[OLXO3DzTc=z]}T_`2)lKaۇ}%}RC Ze|[?OBMD[-Nsc䃻z Xrnpg@& "XҺgWbˉl&)|v+(C\_*(?3^A'(% J>R"X鬀j\Rm[١'8@׬03ے47VGa`;W^e04]!5($z°"7襤Iii} SCᦹ׬̭"<;j;PJ5fdjPL@o&a [ԈNR+;{3SMOZD@5REx5.kVCf㵖<4Q@O|s-j`{sQq#r @&]buTr֫p"xFK|e[Ǖd 艠I̒Kh1rMУ*pDtޅ͍֢aN!Mzw8]I뀚@yBL_7TtY %ŋc5٭FĒm7b4ީf$MMcat E=5&O,ZDTOAc\nժi_rv+߱izF!^AƭjMBŝGwxf*dX[=LWCu4 \C>>`2c4ӛ>hl&S[mYРȨۍ 9*2xpY8 A8b8StW&ʈpPU:;a)D4mmGrmIGHvLvcM}@$+`PYvtai108"f+,X x?#w}_BƒusfgJFg2ް0 iS,%L}^.4 hDzғmV:xP!OY^]P:݃͝ն,y4s%FK@~Мߡ {R*%! kܙО_Wqe!(C)6OI;rC,EVwY1ߑV9Zz<+a2H=7+N\$n`[&0öET'a3cC$<1{j_u1TP4  C㚫0y>zbl4f'3Ha>pF{в 3_ӵޚ>|Tm`R0'гy}K.R-MbLƌJx`8R )n9! 0*wPJ[ƑMT%$t&a]oX})V4KyB%iMq&_nW>tJT-MhLBU>؃[L.G)f$EpèZ 31ᴅ5S2 WmUx m(5y!FCyP޲vfۜ2>x F_жI~ xe5+]euE:ĚQ1XMiO;0~k`V;N@,R٣nVթ`N1DKuY جBu[C1؍>aNve%G]>4_YzClc0r .ʌ!I"1ƦXUS=hВvy{ \ o5(]3mwğFjʼJ `rԈtjFO:wT՚ݞ3n> 2\8|01PwqH"D edT*f щ{+-B`m\VzV!4ZuD~[OqPڕOfTLޛSXlkZ 8\KV*@̫c4<^>\u;Q$y+UK&*a36"QZ؞t)hpq,hfg%'5}%Y-RĽž}kl\\q-G)urW %% (D\|bZ#N pgɤd-X \F=xPw $^:s$f,b9s_484_ vC;קQZ,1=.c~v)!B>h5."$A7eE'8ͮ>7^c_Rԫ'-!^ x?O9MWMd-4ǕpJ@z-},\k A$ ֽWj *iXV w)?:}V./fd{;='Ah=:5ZW"iMCDf$O[5qr*!qj-Y _ȷw&{5h[ME| +"Ao/ u)A&h1SCMD׶'&][.ʱiRd?U{(桖3):[AKt)ƸdC'o}/r_Z7<%A@b)B f-%WbbMq\j6) cez,X BRײ s傪Zv 2Q qcfP=)G\2K IqSh)SItĄp٦= 1B?H{)1m9 "mx| a\i?B(܅ ޹jBfsh}0}nH,T4c71Nb.T<$,='뽴%X?[ [( bf'#u2@kNUlv|QѾaB*͖#: ȑ> g~3\ㆸW'+&EɃ6䀴=ˍVˈ2Rձ6Ewxȋ?kXh=g-S|ǹ c 87{Rƈ:Jqnlek2Ct|Bܞ`L3<ӪeGfI %! f"Q.%뵋>"yƸNGmX(ΐ鰚{?\z.`{ W5:w5480w >ROduvd NG|k/p7t7fA(&ܟ]pƓYsRg ]~z$zOؽm$%QvSK}- R69Lyzn M7E|91/5K΋7kNmn4b&3RZqI% *\(uz]oۿnPCeM]V8'ܶ2?RS @xmՅayfz}]MBt46CG=uc XGN;S)~mt ORKч%918(kORH2$}3JѺ K[V{*}G5q\Y1K., hdo*:/J.ŞGqҷxldqWfc2Jd}3h)#Hm}zkBKr޼Mij5(I+.Y0^i9ccjZkkÐ @@?O9ooF~mE$s0KyÿO}yXRxX &߱&h pJ7vDEX\hZ('$'B:0R1 ,"A#zh3mKR gj9t2sRO'{Ƴ'`i1'WM' 9%V:x$ƫ6G9ni yN bYOJ"ޅwWj2;!g`nޕ{6z3e݇zYz極uPZ,JyJ<~*O_B݄(?{6~̴#k##uLCL 07=Ψ¦%)pSmu Z`{6zz< Ȱ^;C+U]?vo.0;04O|OdVT/a B41^Ya.o)+x-1`Sf \@"9?2WKhDec4)MkTTKWZ8<_ S#"<>Pю ByFvwj"y{vke87ɑIMSrG9DEW)!Fg}xS@vEwrh&1]:2r@z/ˁ(>p\&Od'V5M/b1wJ2w fSkF՛dZR#/a}@D]STodjdH}u)B6Nx^\RmU̸=#=^]*ax{}jhp#nFjڙ =q㰕 M^6kõ|*\%qCbS,-D*)>ָE"l|]YH98UPe$:97R4 bRYrI CѐtTi6[M*0ޖ\֤u7LsA\PoQH5[.9jZ~QjrMi4 iTSeܒ+Qsʶj2Z\BqfoNhjnNZCR.0/p/l>D3JmP`tAOE9u,k5['Gx-h6<$Ts+m_PN93FgomT9⩣qDq~uЌj¶3+M "}|jQBI["t=2u wF:O&Q]6`<@^D#zn uL^|o ѪtIŔN³2 Hnc#}K%hsb̏7]KQ#:T:oKq5x'NHvT,(W5{-2zn GZh: f%֊N,L6l#LStyl/r5dAFLtw)?U$o9os!qvN0j跐#JK{YL1uWC*.!ʢ8") ?}❼Q-^YWjN>|B/[:*94TuN60Ik5|nP5 $MH7I|$oxv0l&,?1h̥Ԉԕ@l`+l>n\=Oa}[ NgozK&"ej|8O&ԒZt#NQE`PbyFjffL.:7pSQ^)uTmF=>Yje _P >)߰I`>LtxDvDйBV4 Zr\#:EVaxUq=]8|}W)L"l} "&J>$ҶՐv|G8*ꌑ_QvD}^j06σv4x2mbj 5EmR|Nߌߒ 'q|5(KZn?Q>h`q?ʬ ?%>gAex+;e MB'h+L#Ta!)9)3T!a{o]k 6`iD6:`aZl6bۙOR(%Ȃ;>!`blw x8b*F҃N.Xg|dQmտY5 ^q_;3q!Ps^fqNuJᗈǽ/-KXEPt4blB_D7IXJ_AN_ ߀^`WWpy;z|D%)ĂaF '„ʴa;{\ʠ*>_0zk["p!v#DžU25Sy@%7 +C]`DG{@&4~Q`ekKgpԓt\Dfe jg'm oލ[ϫ<g|m1ZUN;N9<]p2V [$gX'C7 5pKlCwβאsK+9xlH:}F8􂎚C;<+slBDBALPR_H+hە )!Mܦ¤"%H8t(2Gch 9L\0VR'%Ir;aQm'|^z.c30iK1Gm=BR͂L!}Cs=q^3 x i#;iGr4.6 ໿2;4%ڑ/w2q6:<&i+,d3T\&IK2P:,wIc嫜{0PK7_2_ gBsVH~##T. ic;/W7;o"M~lBMwuN F黁z63cN 4+Wuaœ٘/!&DF$拦 6}Rs^wMI4#[;Q8eRM,++`=Bno_0nΨ̹!UF%>Rqo"Lx2{dPn6LŤ\vnL438k- όQ1Z YeO]cX[ԛڂnr2|m#h;+)ؕY5yyZFM(AvXɐW=6V@cTMh6>ed>{}? 2M E`(uB~س§/Ti,&؝FlC~,\IFa/T`6̮x-#~:F³Yn/9Y4Kö[q̤Si#~')"K_@zu3?.QW_#Ѥ&wycz̪* Ĩ4A.3 |wOgOqPtQZ#ϗ]yMD+WԕMaU;t*&SnnWSO6gX834u%%;HH*;Y%" Q_="UweFhVDX>=*n̝^dLw`Ƹ}у9$7}zpCar\ r߂z\ua8kWj^jyIŜ8abuW v+wmB]cN˾ m)ɒWLϧ-nފrhO<v9?L}xwA`vC,}sǵTb ~ <-5ϐr3pw{Z"l;{4[(IFm coؗ##,LTH޼L +y4N~t!w(+^#3:(7utY7pü 3b|Kmx߻ Q%R-ٹmg֧ **hY v4 : ;Bחvi+ DQ@\hoQyr>,D+X46$9xȸf/w64`5znz{J--%>`kV:b=9<(sbߪ"&,BG;%CxU 31co](-_ 2ОEJfƗB]Bnim?n5g+ 4Jj݌W édlQgLos R4CӆE c.roǵgE7] = A/l1/>9@)cTtu~"|/}XqpYRRiY0>1k"P i+&D>| ; ]$/X։&7R*n(f&N<'rpkH9]ZuƟOgT腂^L#mX2ٹZq bJ@Ǧ!L3 N>"X9m?)D{]bv .iϷ,Inrb-hyM3aRk:krqrc,JxՅ]OMR'r$~V_ ' BsV`EVjB;LY1e L5pEDO-,ȉ՛I[8Ak%sEj' i>G"9^f;;2o|puS2ԓ\[CoJEϏFvk!bkanYkd ,2qaxmj]RWyM0ܱW.|<%:Orn 2W<$8RfoQ#JXr|j%Mar uG^wnqcڵؿ*,Xb#}}.Ddt W5ǹlr :Fd=Zd,c[lw!,G-t '#XMЦ!ĺ,N=6U gy#>dOF*%Y!IEWi߅cnY6lrf< *&[dA$fŽHPL7n=,@'a+ ,cTK2 <>JwHŭ&h't\mАPHid'uB[{݇ FQqE>\]p p&fZ6U¥Ab'7<tV+: KW ^ |&]I0ɕ+qJV ͤ%z!.`sBkUӰȾ 4炰V(Ig*!5P٪c\ wr#$S 5I?ejsDn_+[#G+;Fby9ʨ%8GC'ɚCZ nT/Ut)񣬩Pju@ѩ] PQȥج %%u"7n(T UJ7ʁϲ<.ެn)J~Sn ݬrnY1ꄪvJCk^i°:Jto@AVd ;d:%Y0E*;$/L5n\PVsn] 1JJio~Ό\2j}>g /,ץzrâ!@Hp􃂤J 藼ܡ}5߶W]XJtV߱2![uUczDY{=RkHB΍5A7R+v\ KmMs2T>Θ"bT>4eOhb5&`}ho1 ~:)zzr ZvxoEœN)^NJэw sR#r(9, ,nk#} ꛒ!^nQOiz %lpi$GWIب6VH`3fj4uA/lp:mH^fū'r]iު݁);w Ƌr@1%$o1ˌUQ:N߯H Ol ꦸ̻bʫ-!k%]B=̜t-^bmP F:Os?~T-g2RL;p}j|k.v\?DS֫<,p-"2Gcunʹ[gI/^:>4¤6 -V൧Uq)ex!i#m-Ok(0\% !!1) C a5\5wJ2}#*TOq -0%dkC*Vj +R\z:ck [E{bQbP~Ǻ%%' bdf=#N4\;({=C%0r,6P: ;ii'VuD$vλqatVٺ@C;"dHw:*~L#?*pS~j `9Fs(I@"qT"zP6V]ejeźFPt0K+9Ϟ9d<#&$8q̓h.M6cPwky4WgDsB<֚!T2ޣ*N^ {}% ]H|=d ,o9[Yz?f0`Ciцp/Fy펻p 1C?ӈ<YjYد/ 8UNbʑIjL$}י'"T۲Yy~gCE4sQV>2yʎ*Yde4v>\8ɏ? 8zi߭Fr'i2vkaASO>. gȓẖJ5`>3Љ!DDw|:G7՗6bi}SU]2M*}{V*wdҨ&aCgYkMI]2! -@ncquR=a;℮ʁ[k+c?c%t2u N{>HK]ʶcg+u,(ŷ_mQ6+*k>z% ƗiԱ6n\f^Bq7+);P_[j?Qځ&YzC}shG)7.A6KL_c'F N_ X[@5DP(K|-o5arн5fgcT?3Q$V`! J7\id)w^DF|2K>6ӻL($( >2xFiV{}# z4I\`Hc;?Dm`z\X c ϖrR"8s٭. Q%z %!]"͜yʛr:H^Q>d$κjre]!ԧuMw1v"Mޣ"*t`>B1C+‡_^Pv6FM 1tmVT*Ymҗ$|*%kk*<#Y%\b]s9sl:PuK9JC+ko+@&?i>OiBe0=c"n0-*<v"Cl1Кz%~Z *jV7؜Ed iLgNuXG,D{gLJ-tC7-|o"l$x[krIa%:{ ;-s 9].FcIpY ~`2!\mͯQԪEN#*bK90C-kdzk -,w1~ґ ʠ #LөIޱAZGh/+r뜵< ҪCiTe^.|O)hkFnfܸ~3HFt!ߜFM<::U͗ijO}u_e'e+7#C*uhf%d¡w3%7,vr[݌hT/z|T;81TUkԧ &~l_~?PόQ@t첼$FrXnB_~ۙƐqŤ?4,hў,w"׏}- \uvKuUie.NQ]o>qbKd \CIWzUؑ5EPRj"e⧌(>͌.1*ijwʓz\_^`y6ɉ5J&欩gƇ-s=rrZ|!gfb"os7Dž喎K| \Prxh<8~KY@\E)X5CajI(8/ "q7ͩ;Ca"8Q)DKw7ఞ˃63_gR+Cf/oR?-,dh~yQꋕC##69.\(GC[ƽ9"\R H9hzu3$ p ьT! uyެMg;Oor)o 5_R ACE"e5;on2:lЌIYlH˯N&!wQ|ʱ)= 6g0حa-eʬiTjc5$rhjT@}W` 'ǐNU$oP؀/??vV:,qbd|F{ tNZag^~^j%`ǥyp`HIOTƇ[ ·VlHJQpL\Ѩ~h#RG8/57xGBNrR9';MW_$ܣ{gZ_?SJo,3Ϲ4>-e}!DKʭnWs duq |94N>>OXkũJyBIHhx$¦6D)|]YS;XUJaJŠ~|zo)âSU޻Fish eYs;G<G+cbSN3nSl^b>r$7N@ZҤ9h݉[`[;n"͐^z!w@C"尼A\A(5 I9Xn':eA!þIIk:M# 4kӗr߯Z38A#z/®b4.+<6}-M|elّ^gemjG>6XĘN68k hh H>["tX;e{buɌ? "YA$yIg8O$B,ERzZ;XDfE*h42t.wq|.Ŵh౮ p#ßP;r)$ȣ7ä@7##x"$[ue ,NGj&6 Iҷ3kyIwr}k `=ݒz(efx*gRY4V3}c,ڜ2LKYp` V+O湰v΍8eHlv9h_Q6xxĹ6?Rj&͔Ɠm5;Wf!1k+eQU:S>t1cs#@=#1Zd08j.м| '3p YjMo %dꁬ* -E"?X]Wq)?4)1# 6\G#f:Mbrey/,Ad9*c5rS;80Ƣ+My=/_&wrrTFx:I.Ա'k-n͡W"r ʫ%;7LtNSf 0?k5f׉vi| .C!]@1o =G<Г]xNh'U_KJ4ZDDzﯗS RiCWf_C0|5{p+E|cDF1gдm}`Woə]|wihsvIvL 5SYId&phyOTv9a0JlWΪʄЃƀ|ƍދ%*}8VEEjh Xj^ ,earLفmk ]=PbusʄHG2i'JbXGVma#ZqK[UB:,_ #${49gorDȇ_,,wZb! x4Ρecup&B>ujm% "YTwmIbtP(J@(ﶒ!Iuq(T` %ؿ-k&ȆY~@iVcj@^-=a& jY(]5>/(k䟁Vog` :r^.\jv ^NޝyD_5$fgӺG?wyMN5;{gLzjElBƤ\Diπ/}90Qn܈ _l3=-11V1u{51G/9{(loaqx.f>>'g6=DΖT6ImSj I`̕/lZA%PtW-* N٤4 /uˍ7_' 0j#bٶP EՈ? 2u@ 2,>*IW;@qfyEhڽvUxj[v n,j)i;Ex6$`" IbijjoS `wַscP&ƣ}&pߨr {͐6!7 ZMw`F #weNhi *{G(byV -8IyN[|y*\ HL:Bim/JǔN;MWC@#f!A/@j s"Jms3T) j\^g8ᱠXS>DŽ1y(kRӇ_8=aHi& $lۤ=`yiWXּQs5^׻N{joSB6](SE];Ls+a{D͉WduSD]uaczthAS('Rq/1>֙9 UvY=VyӶ9. ]: etEIr)v5b qon<3pI-Ҽ /LtG[gB$zeiXkS%5A(YWL̕r}wy)M$#kldÿxbkD\OxN7Hm/~r a,,c bns&D%% ͕4 bӐc'350N"і{n9iF։yKv tmMތ~co SUނNz*.!izܬ.&6,pΒG8ԯi(VRz3.`9Kx^HII܅f?/q;?ѓfR)*m_܏.pX`!J]SAT!s=<0!++hAoA~O3\'+%jx2ֶPAGYb#yKYibxXC [{P !6 :1y9<eiL%V. T39D4]jnS Vh ;=(gAp#EVXqrET3w)XÝV,,AԜO PqusCj<$(ㄍ$JpF$)qt@_eYћ$PZekuQb ͓k( Wu[I-/"K:Cc_+Ey *ewHHKD-רjYlAUwiï>qxfO9'yIh %jԵ {䀀7Ĺ "U҃6\Ra@R]<'noK627> \ےx{ .vًbV m0뎾p{φӝz7;X?9F 0"%AbT{,oHS@"0^C8j6hGpd>U.~ (ǽ$O%S0Y./ x^w9 |qYuiaf+W314wp JYR|f`G men3 D)'$C H`\rxY ;EZۀۭ8R)5 'D\zh:zs3NqTZ"-r|.}UO#C Q|+:ho*4go lg!$(bO xp7.-g"S]1 0|$ݫ$jk~Yx* T&Zv(.1:V]|БhWC7"q>vt/Y f¶An!u` x#ĪRc xV섋Nʕ(7ո(1>|`_}-db^VijD+N1ڑ,5;<߂f|)JClrMxPTdY'<>}a>a[]^h#YJȟYU!$44Ip/ (A\UUg 4xY|+^pQ.)ݺEͻ2[QV=Шc]#y0/A76l1ߋڴoO1P߀<ʄi/ƥU!&ڣ&fhJiXl۹:,ˊ؄ GݔϪPEfGN]X1SD@=:̃95AɅGhM!cЂ:p<Gb1 0\J.^ )mT@T5͗ }dbZ\n­ԅ|p`kߚVtÁrúr 8 j(y5$Lv!d( "9OzW!6;k]Ѳ TZ@F۵DCV/_bzbuKv~D1ٙ[@kxFHKt'S{n 讎P$ zr\5UͮWs_b~5,N"KEl Y}^g`&Htp^ -DZw@'Q/) Ueplݟo'rmC|z $QH=-̮pH^Pfi# Q`H ◻ȣ2 )bi[k*GK.>#s]D$nQ%ZNeVz@~-|1Y̓#+upo(x~:Ib|:b?~W.`uPAWR+:=>PD0@=%`5CIk b"wbx=pϾ BX5 c F1L_ 3 QL=VtY$fUi6Fw`(F t|ŕsvmΒtɑc~r`T'Ō2s!⯫ww65i {w i/]Ch{oE ODSg66iU5}/ok_k nWr҄b>RMf|VbVak3$J+Lwotryj]Kz=/}*J KT\ojFc%>9Zr544>!p*q䤾2~&Ӡ7lt5M@$u\BgU4|j`'=1l.*bE${Wrx81n:6fNZi ɉ1*B@:Xxv/oq5Bg:' ÂG?OEZ-rMRmahD+}q9 }\T~>lX_|R{r'(ZyHӣ(wrY0`ǾsC"0H& +q? 6]8*)s(^ɣJW`)kِ:t IJzK˘PՆ(IL^ ^ 暉:2l|mf,?AhyAx:]E#QZuhA"M&eEͯ;ep}jU*F+}6@F^GT heB$ 5ID~zde}1㥇\1YH&J5rR[V)h$3ͨ0Α㝽)AZ;oY/?LQaT0[9HwYK:H05lځSz%9شN 1әp] ڋ)D>JI]C[_nz =c{ffʩd DiM NJ\q{}I͎_p. }H$![56 /:5Axʭ8z f#`DλҸo ;+OX4KacWaAN00K$p.BQی|}m)5^ꬻɞ kYt4zV3#grCC=!7WJCt53#/MK $[^s RH+Q(Ct2ǽ]Fj:Q+o#’l*rf'GgQEG Kb\rU.PZMo1(㴠uaXIߐKX2-~4$v %wrSBO:C0< ?Lt>Bctō[pT„v.YVt-YFڇ+?bOgC?v-{n ,ǧ_UL_Z(UTLAKQ?F^2`\6Eq{lRvtq~9Ga 2,пt&:)t!BsIy it^:t ԊMQéb-Z  ކ̖=:dx'u,Gu 73ms| _L c`To/Co)#C;bV6D\ɸVՕUBT VqmN#F&s"B%ZjDF'Mm'$ooZ$UKdNgmRV#]63qFI**Qw*Όm̱ڜ=cxTsfM0&.3(Ӷ'Ӿ i aC }]=FoJ?}5/a}_Z̝av\Hk͹@:7ZQ II_nV`U<ʻ~c;쟿vN DG΍̡ザ1&liF_,Rzn)C!2iq5NTh!5tU޹(:RԨ#&"; b;z|SjQ\EvD|wGI0R-ۼW_vcJ"r%M}l4XedT$-%zh)t(v=e/&YG/ eLSrɃ;rd WWzNxC KԿ4Ra.T"(믾X)Iօo FD>S3]N|ؘ/ ˂_kD zi(w ~#(.ݳ`]ꄞgTkfݓqjT`%62B] ߶n%aHQᢱK?(|b|Iix9<˖-`Q Zs,% \TH>nkP &fT@iy? @l ,0y;$͈Zfu>Z*cg(yryMm`;=wHy;A&{~57 VZ2mS(k2`]SN7^AI'φ];R}|`uGLa81ڈGeFG9<½̳n֓}}onءPA{iַ[h SђBU[P +#ximzTc@Srd:/mTR1PBh6 m3`k|B]uY (LoP0y9wZtYqYsxHlm0'G((o~Z MƆX4ZPӁ)b$yV(E6щ"33?j80ZGV;$PGa':zs"Uam%ԹOZoNޯj[a+-E:̤MF5D!\vZf%ڵ(8ޖf,Eߗ2!wmhmfۊtJON}"w`|0O8bMį1}-߁+6p^#ǐ.yJi~sgyMO-Vbcj+ﱚcg?5}烠6u },.ZAOp|}0xte-r/-ĈjYvcGVf>:,P[ߛ?FfPlwqߖM WvbɑMv! De r|x= .|dC >o#1n;vqUJ퀅چ OLklڔcD_':IFz~*pQ^[DQHݯ5y)W"Єxei H{[j%HAT Oj64Y2$o"̈A{# C7ub{`e" Vjp|mir %Ԧ)xZ Xo 37d: ?I>>DׯZE\4|*3]딃 &fic8u_"L"+riʒoVĹN^UK# )q|=m6\ws/`%f ga;V4>HC "GzDu[ƑERCsIXd?fD$ǝ-Byڽ .axw624m. (:%(h/n[Sbb&ew_MhKMG` /5;eXGd>zW(T\!K9ŽRN2G6%NrF>w1fAp*J-L>D$'^o $G &\;AR *;LaO7|}q¬]zbv@? l&Ɂm9:Oy+mAmz[$0Uv]2Lo^߽SՇ5{"@ʯ1jAMwVDyf>2ҏ*'HOa.-1lm*f& JJ{WY*vpA!0h=[;T|{4rh@zp"Qӻi*.7\Q$XďfiWv2p'f PX̝FF=E$er|!"Du@,]$F1N_oc:Ը`Ms(\nxPġYV[=J9c:DDqko2a n5tI璤WW3ɶB(x4`A/1`j^،6Eɸ|?L6j}c<6$@ }'GdPKHNR*awY;c?XY<0k |rg9a)Ϙ';b{'wOW]_Ka^N 9>zCq†m3u=泽AGUtg\olsfćz-\k/x Fߴ$\ v2@ӏLVjwTG 4r? cF q{RnFbM% TB I0g S9@-@L6a.-p#n(6[A l%; R\!Cޏ7Y!TnCTʑ BtTjҍcG~W%3>OG,_dmOQ1sˋM$8َpDwVpzj#\IV'*zxgSlj)f^`qu +jyK%g:>M14J]~ c ˈ?G}ޒh ?qNe%V=Y 3&P~=}*ѿVNR;YaP- zbv!~?$8Qzr! xcqjXó+Nmev i~zꓕuVꄖյ}{ĄTIq3{ WϜgF M5G~sw2ٞIDvu.WMgsZYe#L[^/L}P R^{GM8 Qmy6TÚZW6"tn5W% 9hgwnna)c5bLu]qu~xeBh?@ʛ kmijEZu+2r3~Ge>c r*HzA4'&xf3:4@UV9c9|1`-ՔJWuiHA-7O7@|+6r(Ҥh"Wze 72yCsLB6gލoVq?6f_L#Y)}}U5y Cil.UU5 ngN:'(p؏Æܻjf,EAƼ덴R@}o,0hڦ1<  $Q6aIХn.m-P.e>5iA1:VQR_ 4~SV0frt,罌Y.!n3I^'cH k?z0|ʌ#|7i5~ߤ'HiƚasXgp3]jX //^vmz2}?}RRUR$Ǵ2f, q8izC uJjU#gt07#qiqzCwHWC+R(|WQ⼓Jtjſ'([ БPtY v)TXLA3_쥠Ͱw1)(61#Dt]ToqLq6}͑mӕEi*/8+}6_J =gX մ;c ruK=ӌXsab4YNC\̹!`^P_??Z,yQAC{lFN^=J3B~qTA1N hҠWOX2KQ꯻pնP Lt>DqGyJ|hf91٣::~3UaRbR-@œ`pikV+ł Dd2IkmEQڍV<XDŽRN$TT^!տ== c\͂x/plB HSUvpq~ OPh+ͬHNTa,0#YJ>Ou'Zuɷ|XYǒE\Gv]j>5%dč:G/k$R͢ќogK6*+vunTEfqMVƱ醔dG8BEL8ML{6we|+<y.ú_(9 6 0ӽd7+,Mi&\A/tDj6)۰D"l.}yߕuhC*FX)/,E2KfhFe3|'#X00k6rphДW*xE<gFt^ã"ܣu^O2mI*PNNn"&H%rj]&c@c}Bk$Q 5%t5C@A? 2Z{W+wD@MǞUkT}, =qӬ l2K]0KLG`8vc|!ɴ7jxc|\tD.Z|JMԜ>UoCJǂ6dy/uK-L[N PaK‘?49-+Kl@z ftXzzP z/_ΡJ$yAɒ^ XgK"--fPo%gjd[F |j{'sZgg&kR;]yc7+" Em# sbN0Sҟ$P"R2+m0f7^;#l1;đ]+NAK5aԖ[KA%'<%A\T>5QA&$<0} V""OZoEے+̻Ŕxkj} ͥ>$XYh5<.ݻ.ˡʙ/*d-cGiY7qvzzvLJ~<غ۸䕽mw{b#O$>amެ<KÕٚx3mm"tAfQ-.4%YŤu$'SPR1Na #'7|~ ٷ5Kd vG訰jqu4{nm+޴G^Xr*4}L ("QQ&W>8Uj4I&G]x)ymZFD+9Rx]5%IAs\lU.}P[m9=B矋zܱܵ84?xjiȎS;s8-[PcwG5IvݗZİŞ(lAeT-JĤ0GBKfz4?&WPC?c37 ]vR#Js4:aoAv&Laɘݧ- 3Vo?8?ƔXYq_d :̧v,d~x(p79 Rx Y{7%`fS[вkE=nkDuc9)ᵷ0lJݶLGx - *9b|K>LxAb_mm]φI,kG_t ,-C<8hlt\`t|3aa6|J4&.\^%]!i_/]W(WF$auuNb--=ҋ}r4Ǭz>bseS5YČT79;b"$gɨ['B,XuZ݂^]ϋ-]&@v*EPu'X9}+k)N)9@*Dwtz-0 qSoEk`΀8MÎNīV<BfXtM8+l 4&,@W S*=8vR™5kSD]m6V.K#ǑE>8-[7.&1o/%O2[G,ؔwࠞ}oyNd6Yw[k@I5jtM? DI_pRp0j% *1:z{F96>]<7O3`ZaX7GGjlv.;R7#2#r ^hhMtBu$ݯ+SCmyE$X)9=D0]JA.G<v,TsQwP(JnZg^>;zKO8T:R&i)0ʾx:VuDgQT;@ me*s>Q Mpe/%͖K /6N՞.Ia~M󶪂"4C/M$m2R6Kv~sfZ2-[\Qēg6iڢq"z ER=,VY9;9,_RN@ƉsDm;Y@dYeQO"i-yR5](k3EE5mz1Ŏp7`>4,WySXGju ^ůhd{:b& I3bB@@,6$BDj$f'1,Cu ҇i2:*:9ٸJa u@>iadVV+J(CkXR_)d3;k0LX<5L#(ϗQِu6tО[>7 zcd-;!!׿4k}OR믿 r \'D H_lڃD\8}c\\{0Q")cXdmN˘/#@θn.{9Ŏ.x[M6fzXzzh+&w^&RZ*s̤tJ։s|!a\fUWPV {u*˯/dl[5Qc^6V]hwmAؖDQb͉~T<2{㻸Sc(: qH%d6 {wCT ɴgA/I@e$R b@Y,s/)Ry被Iأb)/s3Llƅ%KT%fϤ$ᓝm"9qBQ%⯥EzW.ÊceQz8;jX"y ` %2(0(9;\8:;^*ɴ1P\4膖 TavypAsX:wg\1ixdDBdS}$5u6 +Xx/uV[,ݏ67D9oF\Kiq p,à`"C i^=`Z= m3Yd~G- ._Ml&Be8S>* <O(h͜@  @R-H@= ]-T_Ui̛Ěb ,1G2׵$o 3?0'T74a]žqU" .{UbT 4 z! &} hhF=3; B%RQE r=w؅MFNɲS`İe)#՝r7/u g`V֑Q'uGÈ1DrTdBgw(єihp8 B6<{[nr#kC\guX`=BJrXnh{?GV:1<4mv16Nd*I\ /ߝskDJg;#NrوjyU_оi<T&.U~Ed@Vk"gܧ-M""ޤKwwI%ۆ(!Vz9N-PN`5 `Y!Et_n<g,5'mt5Zխe}"j,F]{k g<,C E]9C ϸ{v-Ϝϝ˿l핪΋ے .:-%\gAW}39c3eM9cR14V!JONkl)Ɛ:v0:D(?Vq.{,Mv:U߰W('A=dF iW2n~2VQѫ޲[2~-=l\1cNvr|qGz&{lf]s}2;0gbMjDl!WjNf8l٪PyZC РU$KmB5@ iHlz^SԡTnNrQoQ0mV 6nruxO2]ⲽ&1Jm#/Wڱ[o ҙ_8rweS Y5)5Sm`ɣz' UQM@t]T+48(c2Zs/ۙ7Ɓ:_yb\⾧L}Ӓ0fZP-әu5ЄwΪZj$0jǔAE[fnVD3v_᠅@/4mu*<<&Ng@4ރf>u%˗>Pᥛor&Q.2&;l څMsl^")ZRNs5W!Wu/$.m lr6>^1qli}IP1+HZIO[Sce sl+ ,HʼKŽҥ+ Y9E_8-'~8]b_zhhn$933Ak`XG6^n[(հ(  jEdb3:@f1#X|1iK=Q /EB(8:՗ PÆ<dB )-DC~.~NfP,1JN B[]M ["-)>63r\Ug~1g0P > {:<^^EvK[**p86 "uf"#VowlsH&~xH@[ JR}J'7!\;Bru8񪶣CGWgd|Guɔ@he<4+vdffV+[};nS!sH0\cb'f߾QC0]nFp!R/Km?TG|VEr4\GMhtzB蜐+kS=ox*hKEf&|ھ2tq*}xä;Tz"^+]cEkqՆ㓯TB[3 jL_ܫG2BvgnfHl[%;;2ɵ+o;rGYBnsׄˬ'˹&YV,ZQC7'qSNMO^[jq }J@nQlk=: 2+/4<!I{j|M0jhI)0ALΕ']˼a@K1!1ag#d)0Rvi U Ppxm61Zg֯o.ɱι!/7⪰/Tqm޶/f*&`+eu0*8#5l*ju/zn"~8ޔopsrǥpp4є-CMDZ*Q?޿Y’ j:kչ@I4;% |/Iy!ub<_+Љ ߼rQO_kQc7VԿu(^6d\6H]ˈ^{A&DT#rb_}kN_XTx~sZbJeڶK^Z۸Hezs޶roD6a+' cڡ='1hrgI\b\rz[ns%HEHOU>x咣;_5]%?{>Y;-+ýiSF]\ {MOf'}ژ300A{yS^R>xym/PG&>BCd_Hs\dd @7\ t"^.ҁQJ=]?ѡ(40:#5: -GxѺ؞vsU>zЏ!اlxg8gXGEI@%ځ=TWb}ҬV:9hZ U,$(T"݆Zg73 J-TҪ.fQ4r|zy6Aǟ[^~;ӥw3Á^:B:+z`lBz]L97(ov.Ji=XҾ-a?Znd(UHBkMO#  W^ ڸ1j,h@ P=GwVTDM=|6CN\ÉRgՊ.PG>6KQ\MHi37DeRѻ^oQF_ /tGEmA],Dyxκb34 {䵕/gX0[cU= M. _6B+،@> ^1'u&g0Ӫc/AE1PE܌K#c $'z#-Qx758~jF~cM {`'fPZ:)mv!mUq ?Km.z[Mv E_ϹPNjY.yMgu %/660L>JS &*ΐsGnpukآVAXZ )Saf[k5\NhwBe[$F&҄ϽY !V`GG&`$܄ց!wl܋p#y?¦dtSD.[iK|ԓ ֡0z iiN:BB0H }\B/ Db 8k IYbn2hg%@2Jn sj4xs%^*0F1ˇuM蟁]fXy]rCNWD-pnN%5S∊k(yW <{C/Xу]G Bfđ9ŢǴJ~nH@= l nEb8OAH~Q󈨛NGZs-XP$~q hB1ŝ3B ”-X뱔U;ƏA:>Pʮq @[ 4* 'b,=K]{dM3mΑIǢu/F&;BG#[W8Fnt>j !zFYLYϓ{-_E..2z7Rrw<$ůZsz_M3 @a{A;tZb7Mbߍ2W5+FV4˦D*T G5;F(a[6KϢ̊=TP)E*r073e₏rΡSKW42dexQ8 "LS &`rjl|eڷNːaITL(˳) '3nS>y[}X.HCq-%N-v0|S3MpFܘ#1Y I(dVO_*;mZa5(Վvݾ|d'58k9ɮU9^Hߵc sv+@{OԚ7f] %s%[6ƁM/e錓GvZCw2 }㺿$uKPU!1pG  =@&džcƘ$Ԥ"4o+a26JV=XqL]zSY⵬2'-ٴ$^-ézؤZǪP 'I+}A?*Rx6Ҍ3Clv=XwWf׸+CxǻsoCMZ2I+2?@v,v!a8K =`Zӂ}/ƇUY:NU<7|JoBĜT,JmɁ"(eF.3{cG9Ekh^E˂"c1ti]no y&x4d ЕO]g''gY޸9A:+>*ܓ%z+=;xuu6pQ@=ej5|C2|{NJNN#':<C\4% j.8^`$[/sAOp>O8ң?e lX7qkbOx.q@uO+BkoT9XHM{':i eH FQJAAl4g) Tl%JHMZx.79çN(YiӁH:r2 9`2F,ӽG}+ZŇT'>+E"ɏ_\. -G~_MA<Ӝ9Z6B7)X2=9l2(ڟ|B6ϴih~ ԢgA eF,]rX*dXֱ?z•*7>Qc yVCqvO}/R#cp<4}\(o]Ci4O0X"x2J[2&֫}돰suxD8lxfj-\+h!cCb(;:BE'cV&.\ y}y,Eӣ. '\ 0PʬiG*yL$ExS]/ha B|9:C33 A?_7V+hI,JaJ7&{8[2Ź++>I5`7H}o^^OQi/nPt\8+w=Hea=fJ+um^_:ģX`ĖࡡpZ3z_ue : VS06o82"/DɁ8@ 4B?N$NEұmF+Ȇk?AY h5eY[2dgveɊ䐜$x{֠pux c2OzF~ > =5 D Zhz(Z,HvuOMM'q͑! VeUT$g^R?rg2: !CJO^ +"mC4a1mfu&? ktE7aY9%.`MK|<%p]t&j3KnK|'M*"!^< K[{tsV8eE%.2(q|)B vv-a%K/-]~ˇ 4W'Nv}&/gh7?ywiō,dkyH\ e.8}X{lb yFP.M~brQpݹ/uFe_(3cͻBkK|amIfQ2v^Zi$oH!gu|˦ыƤwz.d g!+T|yq״ 8KޒO2$hlA1ۼCgC˻ig'=@w~sܕB6QDDVu6n&NbpwZ$ x}X$~F?b>cS1x[GE[Lz.Cr`&faAYyELwFr΃]H g)30(VqgxWq(螩 I/Yj?_Ѱ%kf^v[uz5 ;rR.s]e^ h~&Ĩ[V5l,؀p,ֵ8Vi 4hCZzΝQyzA=5RAʻ15$QmZd*+ y1־f;seX + c dCOlvSӓ@b}e2C\f:lsF:+;-G~4mK&ËLw'iFO#gBJ [BWN 5RD}n"QB yLX[kh]ù+sc]߁]m{f6`=_e./ k|Qv-̛Mn%LD5A-ut@˳6 xǾ$"Ųw" eT,cE%ÿO? Ӣ vL&NxINHޜF  \VĒ0SuXf/KMq:A`uNE;7r^옹b~ox~W!m'W!iSN;Ƿ}g;ٍ#N#_~M~zcRڟOH`BlKЭ5jK!IbtZX7Ǻ鋏qҷked!2AQZ2G`{LkI~ug4d$Ceq~}M!GӾcb(_u![O*%[2;@#伔Hb[C1=4ec]}oے$[?;vC+k:R@|0'7y$jp&faFPU/~ u—+g n/6raM>Uqp Iُev6=Rz{I:>מUT,7FKSeQN*XGp7*ȦQ1H_}"њs} a@Dt茧bZ&?'Q)&yE-.Zf;"keESteCrNk :)}F itECL:{|&c&b8  ["^T |H֙UQfy;n̮&VVғh)k}L aNsL^|x'9IAڛ7ZRQq62Pو4Nn&1:S+H ߢ QC!8wJ_tI TujA)k"OI YB+\׀.7ŏ=/Ck^8ai䟺H6ɘؓR #^IE@^_Qq^x[ׄ⎃Ow%~Qvw{j-sIIg6'CWzKiϐ&6&^0h1S$~T$X:S%JEg*x_͉1Sh:6!l7? WN \c`r.Qz״VOO~i,.E!%RVr@(ʸ~7Wj2E0M_C܅)Z2YDt)"H.`NMP;CiV*ºC(v,7wmܐ\5QH i$/zODln`D;_b}z9)@GҌhVFq;0 1eev4I^N(oN̞@ZF*5tW hqBMM(v Osei5_u\ wtyutox`#).̥ɾP+]iC|4&X t~8*At~]IĚr]mҒx7\s74T!u Cep04{)&iC!'$Ѕ.q2܁7aS1Gl]&;$_I0#l]53_[6{6o}TWI kOW:̒X?aR&  4sza ^% ?~>wy2QI&"""0N(zGWsJ!Ҿ\ O-rdUIb3#"%2}iG]@}ؘޜX| vfx $M`y攜@y3GT׿/Q^Ӥ+(=ߖ~Y[ ^v_m?S+!`_6hD61@hv*Ј`tyBIc[җC./)9O#pDUorgE=@ %wI>Xot(SovM Z62Pq6G661l8>WrZ>B?@$|HdG\oO83bF!ۑetaXƦ3aaDq e2"vct`^Sy qED>9#L]kW?\]ȗäXOf8_'Alk#;Qu-`tVjh*Q[؏*)B:<^rY½'ݴ*=F40'[ ߰r_ 4eG. =e\}^,<.pK9]WВ{lql@9FD(X.*ֈ sh\E[cޱjZXHPj}zIGO4H1I B @5zO96r Hx4ѬC4h|_ME7%9΁“*iބ|7\5V|ASxË7Q¦DR I:{.ԃ[p\qk!Ͻa)mzpL.$.bpB^QwjF*!S߂h(JVъ=LY(rQ,aCq6_n@jZ=cCYɘ!25rh5 tгۍܼdyW}(KC]=W=LBvJ $0X1>>hѝr]*Zf 2#iM:bf `hoDOJ  :_36"Ln}ccts[Ps { m?/-yrx '\ tX1w@2^Sޤ$şZ#U.||@JlV!]+H-`+0vojvݾː.t9*PiAmfE_5I\Q=o$`/ :>&LvpԵz "ۣ^5Bv2NPNR`.=!b)3PfXt <=p߹7jܲD8@'pDvMr<"9TUtX.{I>xH8%wsz`_Àѭ"?iHN01):ڛʽa,?i9wmSYi~!I#~R~=p2`0`TLbF n&u`SZ܆'Tgn!hr{bnqk(ݫ<k.B}tc-(zoQuzK0^0RtEG;tK Dؘט9dHz!bzFܚC.HwSvĽ_ϫ ,iӌ$ >OpzflҘJ Bz'{Ԋy}h|dJnFg/yx"@0/H#z(iYX `F s}."U LfoY.~>U>67p"$uC6jRz*/,yꬔCI / Dh69B_7xe!l%a' mm=ٓ!`2HTZڀW=<WUM1]{Dy2 ՟n6ٔCC7s m9ư]/Ɓ Oߊ@QW+ (ʮD ˵ %#[B]go@=gsc(R^, ޹ [ԶSӠe;֝WģIGdIҼ59˜^ b4 jjEA)G ]8^V:eۉU~쒔ˣ92i۝vM8LnhaO~'+`b0BXT_mvvsGPt<`,$SaV u]*6n5BީG[$!S$c8Ku&)zc†eTޯNs_`?ߨc`wr<,?a?? |C&J;k|姄l#TIuOi1κ~gW6֐V(Q5pa]|\s^k5YQ,f5vZ/SARBB z"N 3Cjh,dGS{$KV؎'?>N:HgnfHGE1dP4IjNbmȇ:)mȚyuGN TwVe4aD|լÂOllJ_pH@HC!,_;ډG"'UZܰ(pz \ Dxj%SY嫎y)iokӦaRX%钫>'c{Ë5M4=Z)ALfK*VIdazE;U-%?z ˊ:̲aגY'0OJo{UO9g.t(aWb4<+?rT Gv B|t" }WI%i[ne[؏ohpwij vÝ<`T7_s; м<We6` 6iKYF)Տ@mȫܣ5JRݎ V^}^>~4CɟF#_V?;6/A\P. .A cq?0Iq3-I{DaFԾmĀ-bh&]}u2s[c@٣PPWv=,lm_ eē ]uO554RxX㮪Ǣى'i}YRm>h)?=AS=d0QAMԹfͰlɓb{Z;&BN۶sX, :P`uJhoo @"rJxp} A?=n|Ҵ"IEJ-ߘyۦFnɄ]kEmMl*|xVLQM.[_7W~0H~NbV@G E M"pƦ:E(\^L-`Hf{{D\~"QUĿ5JԜ|C_9W,*1Il-@(iRRiSQa^E?H|{ j7+G? aaLWjD+3r ׬aNk2k8zLC cbPW肻:f;h[h눷{Z;QweBK\-MdsoQjD/LO*}u㝯+Mwm*LN2J'vv=KIN< &iGM) xa ) 5M;?EW]rekg(et0ދK R.Xq}f^o62- =q*HMͤ#g x.aqm-YB6F[ Pk%ltrKVۍlEl~ω $Ved ^Lod@; W?!LKktg#GYxρIYuOT4%T^l< }`^WﲮXDjLq.qo #/u8A`W dH"&ǃzb8m68?G֣Td%u0IV5gZ f~iE>am)diB"p2$qyZ<N7tAꩮ5ZLܷnFಳ&=ȜnmWĿ  R!<|W!^8n 4jM;[onak[͠q0?'!X{yngWq]+--xA$cŃ.cJCb]Hu];d!LF %KՋ5-K$ueoB |e/|,eq,3ٝf*P_v\Vdaum$rWx8nJʙVULWXR"NBg昽.PR<˨g/g㊀/QځLb`:ʾ٤θ}#rY (524gfu .*\W5jJ#N|OGpi +A)8_PMBk9)WظdnSS~["b"(*ZJ8Pz|@-c֌F&@enܶ\KTJWh(h¨YuQ #2 ]|{Zr#Γ^$r)\ yjU9'w'"M =q/ߗnngoY Dkt{*^>n,~(nL/V$C7?u d)z09L8'LT+ar'2 mZ7Hd0x_m_Z@Wfy~0 ST_2U;a<_%[,T.Q&[<%6v=4L"m\o6i.'ULI‡%_Um Z'ȩ G Ehb!^m(x2%#ܫcG)AIHuWA3=Ӹt&3ңыiil֩/Ase4j~IHX#RB_\Dx,;}p6F_鿭ȿHJ.^u \02O2~fPX3 䘥IHIM5`%TQg 1vڼBʞy'Sj@e `b|'т,|CߵQ,Y9CnJݦkhHSG> OfA  &yAz^+G,{o mø_/UvX<fMoXovPD4GjðUK#$Nbl[+9͌!]Ƌ߂YBЍD~)3RcL2̍vx9E',gZboy(TZ;~vj5K&w~uHr Q$5IKp̼(c<v eKiIxŋwW^&^tec[`EN7/)+Kbk|uq]s)?"7_Z u p *C ApF0zk#V&8ИfАL= qlmI}osDL;v/I91b!C#λ ?ņ 3"r_IkPvhsBZ-C-u-2)DSNLy;OqS8ဖ=Jy'LstJu;3&,`|!P֬c1&bg(WWmwAEpiu_ݳbn㐤f-!tud׽3 Oz.A'[bΕCgυMϜE[i ${S5YK:cjJ88pP`M;ݯS:/e=ռeDT8ӳiM~iyK&"zD GOUn*k T$d WEIJǎcζOㅃf)wM58ۯ.ff94Ɣ+gܠIee⚗s#egTD7?4 d?G椌mp#sm& !)z6nlWv]o7so/,̚$`%-Zjk8O/$%oE|qw,A7o^ӏFW W ; `!{ʏH>YχAf6 k-Q0 F;xE1@.20}q A'{~AωLb{LK R? |Jw (ZΤO29ݸrH dyOAqӸKR:˷^XW - ZFl(|/:JmMvbn{H n "bxY/JӘٱ`ͥp"&UO4`쳙 a^6f|!%#_QeS\y 3 ?NX)pɝ[ƾԉ;$qZ!1r ft>S]-?CvjޜoW 1:vE KY*N#z4#VEl|kHd@l kt^e.=ĺաpWf|= V .|HPX4c<_$$mujsjBL:"ddEA)9vf\DVb_J=1*81v،& C _K}g?fɃO ć7FXH3y܅=H&Lz FG> u79MW!}2߇ >̱F?'M6?8ai?D7*Û.t$Rӊ@uBN&3ޚ ]3xM9ICZ Ī2y/u/m`ԃVx '=#J%Pn>+q A{ sv =2 TMc@}1ViRY]uJ\0客tatYL̳O(̴Zsuc뉙=Ÿg3+fטuUzKvQ2>wTB/j%m7\f'x6E.o'ThiU*L!"Ag(/; z9]M  c\Y%ɸ\bAy!}}$'㶸vDm>A7>7\{ KG$+47JTe^ yZ 7FE.P6ၼ7^Stg4*eEb۸~ƤyԒstA9oYȎ,j͜GIubn7b0mhY`aſѴ?|=Y:' .Kllˮʵ{/[fFp|ӟvCL_*xbO\Sm0UvWL޷p#3 ?EnYrxз3f”4D+۟R]RR;[ĒZPiԏ1e3a P$;Pu4c?܂_irh`(ju 땻[[o%eY9Xm6峛 rN=SC4@Œ&N) HbL[ow~YG/}YD-| MW[j.OpTBTYJ6kLߑӬ'r1+(}_*ЛUCn HwA\q#6v'f~ 5Lڠ{0on %K%^ iTr2a7nV˷4`m<aK_$OM YBR o7$\"2QMv~.ǃ0h!ԉ-#.~z=Xخ4 6avTݟ%v.v4\li%4|f=D8 V":w5WZe I\J7 <%[˻Nj((FYk5>79lIx?<\ܻߠ .ҪU"\~Ѷcq']"^j$ %5]_kVwrė-[v]x9|E">0DxAoS(?`[7ƨ(r{u%%+."?b$K^t :vEU7h_ Y4d.,{c4CaOt.\[(*n]yrk6!d$ Rmmi3'OZYO!K-U=(*$B$-5. $˭dV?1='N</AhrIEpVOHp1j`VXvTU=^xOVmܚ3V5R%+J=hݵ6${(jڢVƩZ\T@;`6rG݈&7axmgb41\!FMd+ i(i<,Qxw=fȭ<]9қn2<3 $4ѢՁ/Lް7<,SM:`G:Kk+&O"J6C j”(Mń8(Cr _ChF#߸ȫwzj UͰ}(X LP>u'.W̟nn)o}0QJxMސ>+NSL*H+o=c"826$TŨƮK c9弆TF~~Xp >Ң &N}6UdXsRfY| edq8 2MDF`cv"* N,9 Z'GciVi 6'g2A6V~SI7[y١Wi az\,,cΞO=~MTIVrZ#l}QY=ɝ? FJ>T9c3Diyu/}meA@10UHv@@S݃n&~'"y`8ZUEL`MZ]urZ* B6ZƁRԇ'0SngD 6Q~k6} Gf6}_.« UPQW ϰKM;a 4pR 2qHm1N;vlsNf)RP7Ğuľ F62uz8waH2sӹX iIqo Т3׋}:sQ^m.j[9A$?%(4Q +rڂW],m|:]n6S-(ŕ|oIWIS ڀw0xρ2F}xʼ#msfE:(4&x.$8NI&HF#_7rJ7 #vዢ;)Bĸb;M V`-0\p`uepM1QhjND0rY[Z@G!3_gT T0T~uRJyUMN$@[:yS!; $y?eP9e|a\w$au#ܞ xjlR`=diZk@kB,)fPY2ob9hqbE+z9\r݊D<N햻RܐPl )t3EeqJ4ص. qfW'9H4R.5ņlU@]ߐAn=cؽ!{;X\@] )W ޻]5.Ι a˶R նh2?ٱ8۾[&=]7ˁa%HE) Hz(@E8i䡌-x3}tIwX=f[R}Vy%I?p{1.nYlj}bRM"7 X멇($cTpM:J}~B%nU(0BYJ{֜]@L݆ =UO0"`5ŧly\7޷{!SKtpt}I"*JJߎÈR_QWǢn5s&8`+%YMSI#J(] $Fu婷=q`Y}LfsVUyZ`sf; Vxa@$Ő\ϛ/QWy[S{UDr~X'` RY::`G;PʝٵޗB$]D|-o+ޡg$iybHx $SG6cM}9l?6?\s˖6!C -i=>.7(6W_ WPr]e>+oX~ֲoMar `U1uP# f/Y̴Z9/61):^"YV =YdsDf"ޡ[I|QͱMa)O21Kev"MP ExtGj&Qh-;Q5c:d8F:ZVQ@7vhL B:})Kj-M3Ytܼ_.EDZT=z,ܐφW*VD+:[ƒϱ)1b: Jm>깬>&XrO@lluBRJu$ 8s"%log(AÔy5 cGU@Yx#qLS R8ĘrD H%VqUꝶ,TB=[ge]sc7ڑ7](Næ#n QT`zB`WɎ Q.u, 1ظnoU6&4٪8״3CVs̖,˗}(hnFB0#C'0 As$\]R0Y9_R;Db [ 5bHƽM ?NJV#m"W8PTjazۡCAxjUƿ-~63o1`ؗcu$-PXV !\)w=}#c~^LȰcGy]u*ЅPAhw<2|w ż Bm^"٩cǃþ@^^obx1j`(RpȽL=XX8.:|dLfS߬_XPO$N_ZCj U#0ѫ|tAcȪY@@,x~0>Jd._ɯW{rGak9*"`ki&6Njݡit}h4_糔_PυRM'<7DkBۏ*d1]yvUXVP n#ؔSXRXY ?9( +PԎ;^[QЧMQ0-ov'PuFWnyȶS% "mEroZu-R`o&m+y,WHB@:uu '}[ EL@Q'V2B#,%~o'Mh +@xU"(Zd?32&\XM?+idl} DoY?-0qrvF'ʽ!, AUnJc&Yw[F lpmB8!_1d^NF$\5i34IlwundS+M[ʕ |c&N_jWwe)&IJqNQ~HC6UY?pY* NPlɾC>ܰ}/t%$ k#^' 2.k܁Dʯ-FGKs[rz()tU%-Ћ V$Uҽu#F8ryɁEn9_un}|? eeDZ)PKvDf3;j5*+c]Ә/c~ق~b}CkZd,n7;~JZWaw͢gךn{$' YNTg]KS;Ur. ՄC|i@DJHFQRYMH%Vq9-N!C ư"M|b?JXkuLˊG<9va?PƵ9t-CsƤ(9Hc=?xIz=Ѱٗ[R40͇$>3_B Y F B&)YD3u*mrPd뾠^-5Z>G'N"%иf`oLWߞ.G/j/P.89N" F')=b[ӆL/^,,L!.cܚ@oS`Np&:&H->7hyj2#!2OYJ eߧXy<tTɎlmą*SWdthqŢ)X6DxݣS3SkȹFzΣmt9k^oM͡MJ8q?$&%~-kd?u˒́?ڙHKɂu؂4z]`4 B*@nDrDkMK/|a40)ǖ)P4{k[61IY)T8G>j<&&\ J#nϏ>tYz]$綁:.fG)lee*OdkvdpㄴTlaK$\lvF8GuZ@/\CBd\w4p+6ZRS"՞;ʐP頁%n2ې'F"%VMz%漼SU 0) ..PpzjK[4vaɡhi УRu5۹t[ͣvp}PQ'Q X"(SAmϟ[./IR'7=gRYq.HH գ;?)Cx"\ ˞%^aQTI TC|T(/eF]]tweU%sj ;/KNQQ5/KSôUq@ gX{]T.RߩnkA--0]1 )!2܍߅Z@+0 _aNp x1Sw9aLԩ_~Wd fE'p'CW󻩐2cHW`K7id#P XQ~~Bs5Fp~09n i%}P%ǣB4͇G>BŤ+ye>I.s~{AҞ4.nkoo\rϿ@Ycp8Te!m* ˃i 12J;^41QxQl G+goiq"RmInr<Ís+4{Afg98vjǘhZ&Q&pr홙gc6nj*?č )$$]ք|O*v~T~Tn2?|1'3+l,*IoD݌=:' QoNJ:0RcLO EъK$@?r+B=3oɇK+uE/ '/ܬ$Gibֲ|`qWϿ[cu7D߸<SrF\AŲ W 1~lHܪD6=f\1}bSPnє\O->/T 1Yh z_hSd.zއ?9.t3bAqĠ$hV(^~#16o,FP3.bBx6/"a Hr7Zu.} +fkIoT8RO1 o$h+#LnM-'칚K¹Zo \lWMji/׻iD-cBs|wkYlvӅ 2/ +5?%h`04WjCc.+IQr%%cߘ>3u5Y2Ű<xtKi ^:Ԉ:9ޯ @~?2xIX_?9}̈ěPx+d`m TVW)E;l I`հ>ғL[{P{$- JVL2⽓ f[H[V+ei @(`U`p1#K ЫH]:XL3\0%N% -h%D 6A\8値Jn?CtʑrJ (lZ6 @ԗr2; QTBl~$U6# [K!U떣,uqH% R"-$iI $"jP[0=\} J'.*bZqrtCS9L0ss !y8$s`K`An';umZ+ 4b~K[|_Qn? ҍ[ =1~2™nu*ɻK% ťeu,J6YO S:=fj{jlg;Zsv3-[nl֌= (C[/|?Hϴm+OsJC tq:Ű Hd?jITM2RF^;/08hEcٯLN1 B HR*[gl=A0!g񜛘o}B(jC{8J)v{T*0a8WxUO /r7[S=Dv8 gK;/V }}mpP#EjKvb*k:"  :j~^ {1[JZLjM(@|BXxZ]8,V&]AEV ' )s%h{CTTӮ +u&&UHIHڧ\cTs'/fk4mw'HLEUT-o٘42o?O\>܅ܦ1iGWs h*AN9Ja- [L&:[*, }T3Y{+''{,1{-lFr>3?5[[+}sbi߹ N_pg0?lޏVARܸGCNvgTÎ{_$m$aZQ`RU8h Dв̸X(&K r~8q5F*5А@D8rԹ}?2LÌձboǿ#7!vrȍ zV`N+:5v-njm(*&C&8ޕ{FgT *jѦ!S/xH(9IBQUAH-΍VJHNܒX;\1 >[EQ0DvzRnun\>;$~>w9㱊pVo?>hG$ s9ze'F*S/ٽׁto{>_ٷVSfzn@8F1NEl".PUYIu褚~{Vd!Crv x:`L[57:ɗXC)QR . @ E& HQ=Ke9z2[ux(;o`Fbs?WtT;x%@b% yA<q"y_7[?}MN1l#o,GUFroزTGz9ޭ2-) }9l٨RirwMlIgy hSŹKa(‰Y#OX}V+'$fC -]]|m;᫻}R$>/Ds݆bP KL5%02 !I G_,Q v5irP<֋ _J\_$;Y ~+5y- Y.^j]Ua?[;]fKZ`l1 Mư iLz2mq^]lZ5cn)Ԥ_Xn4`Ÿ?fWJ|\OKN+ yPEjWŒDْ\W:#z@&:MZ#&͍?8Uo G|KMs̢oVkElg@F:F%H:w*c/B**ᢗɢ|5 ~#yq xj5 @jɔĦ0ms5 }& pO |\'sм꯼~f ?Lg!q׮#BqtU;汊˔%iAQzJHZc3G0=hK'+;t^N~NLL\pø r+{<<ل 7DY-rJ5懠nO!_< d6SݽZbߪt[בw5JxU2ir 5Hh+b^ptúr'왎)7/۪WiP%/n|AnhBa x GV#m ~ԀD͌Uӛ/\2Qgm WLa~ ?HVq՚fG/HAf*B'I :+BnUE,+א/u-(-K\deЦ#IS[Rh6!]10*ec 4Pl:]脢 fFaچJN略Z#4wvN24SV1rT=ނ{V?=#ISI`U |֪FRO<}g4$# X*qDžmT:'CIEdG02qBpqT^?gQ3+/p}pfaЯo.WaQmrm8qQ P{:oFð5rPA^u8]P`<%ɒpj%]J6VzFaQk}v:dԩi飒xc5[hHHde}(Uts̥#g.w-eeϷ6#R_'%XxUijZUb %Q ܳ.tvxk.3ftMj6V^DZ "&ӣ@5ag0&v4 `hu|2%[99\ IJXQ~CR7 .th$/:I..砺=7*A*9l3e(}WoVP8o s;شRSegbJ|e߆SeﱇD'֢1%! jvjT\'w踈읹qY@q8)6=%R ԄHbƒ1 o~SH,P^΀ ƃkdY`Iیe%o/6ԩdiM~!2KTϐ*lW9ү Laʧ I{⸃3Մ1s18n|><Ӱ^]!(IQhONV>2 .ce7_c%NuT(jJ24ƼB+=|<^aXF\\0=~l%k<ˑLk|F;&9Hڱy 9-8h, BWm9F!I*%`йҁ7g..U-59٠Jkk5㛼.*VA8N@!_Hbj)a?,T8+zXľ`H-$d:&u%MeE(e-"ݭ^2USyA\ bۅJ q` ߜ;b7(jZէuoB?CJQtɢ +fkg~O <9 ov`7ʼnb 7o0/ݨ]Axrb.w8A`kxWF 2|O Tj2y (,nmOdD*.):|"Uu7Zx/aRxqzS-Y#= ۳[5rL+;CÁGkБw]Ni2rX3YJ\6ͱ~^Pv&olU!ΔB M>D䕱2}'n7!f#XQslޛpspɤ$A%GÍG~D2pQjզV(08yE7ϸtb={,[j0B3¾q4q8}bE1xEJ. ! Z1tN |5)mqGm{^~}UթK?w1$Z@[gG]폐#iH4WZuWhq W}ZLEɝN&<$Zvr dIb'(iø%^4]%n[8Cm2ju|!r;Wl0+0+;Xwv>aEg?KsIב*i;>ζ*8n{e5v(NϿ{)F3~2td1ﶯFaQ>D*>j]?qgKWs`pn^mvPd{Kzi }*%蓜*]Jg3S@ Wȉ;XXORt?{(YJ}29F/vy\l5p)IYЩ,Irj}#FI9QV3F:ʺ}1lO}U7lv>{{ڠ&kyTki{[)\#x_m`-51H*r_7VLێ0h?قΉaBD`ȗj_#8w5ƧpVb͵dI#2Y&ibf7H|zdĜ&Ss+FIquDowQ5AVoF-#Ry^ O9w>6PdA+?Y"/\ .g,30C T8["g=M]Uu׾sKwl"\u*b`jIs d<{-M )×|g V:A𠜼EÕf402 J.Q]3y>oBm&+XkK6Xk'ݖPw$PYI߅pOH޸0ksNPTRVY/{;XKW[E$dQbYHkCƂй4af "i 6 j"  n8\WF}3vSi Q |K2ǀ$,8.>@İ[,ߤIp;eA|'UQ7~=\lsPY:zG7}@Q趱 W:I #:vAyRMd ULߴj 5Rp<$%E m;~ }R5V햷R=GHr-f =fY={>ց?Be֭ZPaܬ߉^coxȼHk׶FiP&)(9͖##*Yɔd[Mq"I[ )GEpǟdqԥ(4e+ 11[?F:$>4l ŰpN? (.D®\ۺrnŧ[ 4QQR J=OU6q% e]f(1uĪؓ5eZ5ځik[ϫ=dWe5ZPn)V8c"& q+ٛb\VY_ Y,'n<[A_.Pm )} =Ң1J4n o`1QXk%b܌#95}'w'36A A|տ}7chWA9/.<}>žonbh\k(|AY,.ᱨ>-E}kF'0Vn[YnW Ls<[jdީ!(x@5#RJ^aD OQ-_37w3eklSa5gNWYm@TESkUeQA(1ȈQ Y SpB_/B0YN6"Ȩ%u- Ecj0ٖ'ʺ%3M y\DI 7ѹi863yFa 6Et8^g 5GZ8u{#7MpR/!6dW`[kz6#:6Y#XH J#NJVBWʁA)Lk[*WCDjA3Vn1{څ ՝9gi2)/H0iLrdDt7K\Bëp]NֹE(2{0{;+XÆJIf `I6sqU4s{!gv+HnWMUE,*M%_MZRwf^3CAJd<^N.'U v :m[ zO +F_Mп)P9DolKg vi J )eNN7$~%=PTXeVcO#6)[d]3pRX\\ ߧ&Uf"-K#I}6R$uیC*qLJ9?pr.+Q*.Cg?$R .;QWY<]OކZG*x|DEFAqGVW!t{F}i6\/DynQ>Vls6ر:c- IͿF,Y6B}9?rƊ^Δ]m[fE}s*R6PS )RQlxgmشLC}d3P&^c-h-rhKW5\+D,[V˄vIYFk.<[HxVrJө~+ b\ZR'hͨ_oqlqQ}kT-.>y5n<g;kWg鰊9ᰕ/ݒ{k5\jX<J/ ^~?S[h.dPqphjբ.e_DreI4[02*6{R0Z`ե+q6Z1t=NYr kk'o2<%Ź4`5k! /@^5a\\!Hk|Sؚ{Օ:)mLz6vPlEHIC~McݭxHyCI}xvEN=mP+oƈ]7-f'Ofx5wW,"Bc<~[y-^y]s}_BYph;2dE~I;yCՕeD0)QCʠL2{ eFu^X?}O*xG " &q٣&]U7&"Ub,!coXtJk`wA[ؗ)|7u_ۂ,ssV(%@е1!Γ|kOBJSR&|cdb/P(qZWεc) '{j9yR2|_0bhq$d+ Rpz1 H2 0򼩢h؛ ۦ25]nIt7 o9lZ>(+[ރxmR|TNEMdfx->|ɢp^y>=ಗ֫NK?%+SI>LY E!Uՠ'Xo/I؉sሠ. YD<2U8]v>0,|W:)\Ӳ9G||rcu݂x~= _Y]CA3o>ymUw}WtNLSdX=/1 7:Iʔ2]}\)߯[uw=QlW)yT)29$}Д[c `ЧoEiuZ0{sgg!e1ly?cNl`DJb>!;U~@9. n߬f;JVR!!AJOI#$.!W>vzPJ{},r׶NI8Ud\?+pu<v8G!û_"jXmo^.[ \ CcUgt(_##m2Pؓc jWʀz߽uiX\gV>Gclu4_(hhh_*>MCqrGR'^o9  /aۡQQtQ{aϣQI%7A HX%]\3̝'趠VDVl&hDwHZap (ZFfẁ\e`:o`bZj45psVK޼&LIrFM MpչxBSC㛼`$UB@Fw26'獡> 4rn9m/.ehT([44`"Hkd99r0!.T |k]JINGljIHpI 84ZfW$աhm?Y?=bљp1M*[a%.T/L>S2 p"}UDC(P9=eޗ+Q~)\`ij % ]),eC6.rkA~(,M%7Ė|3Q :mgDgBjQ..TXBʮLF " b_TlK8pێ@99Q¯vJ3!7yR&2.g=>wŹ<@{ 7Co s7].&a2*bQMګq19K { $KΎYO Lg";S8/R`e|YQCzC8QZ9l*l[\/5YDDs@Զl`]QUb=μh_)Nػ RW$Ӑ~3VUE[Xliϙ)2?_m&^5[Λ4D‰Go4|'Trpl `k@(CJ_>6+)KV:mD 0Oc1A5DH7g0׹;r$ 9;ޑ4=3)V?'g[lN7art5+pfzTUL9iw)<~$&iSǁ$+9<}}jq`|[C6Ȍ^Dܵ,<ߏ3%$;"oVU+PŨon}Bu4J? %M$:ئ-ӯS!am<`E9z`TBmA9e窯.F: J MqguMfya#nDQvڴ赐+, ^NLZM&K /8>Fb3,,)l ʼp8K;U͂H1ꌼVحd=&*f,Lo|ѿboXx! v L>=o’^z`VFs Q:QI t<ի!|gW{)d~α%y|hK`dWqB{Wހ>\xUnf ȂS-2=FFnzgfvSdBFuG X̵b۝,?vT4Mvxlj{nͼbyyyZ)2U(P *1_CaATC` :V~ۣ Qy] $ EvG6 J=/ M޵S;E^9dtz[{H&HsjviƳMm_7r~p.>_\xeү.V@vL'μ+YEHن hC}#N~[߲8-`oWݪE 5.*YKRT`iF]?w]Ҁ]@3&E,J.pb_[lƁm:*\0`@R1߈Y5g@tB8cr- =LAZ)فp~nn&lnf1/#jǭwĘVOxHhp+BZ1|uC4wFӇ i]dlQuȝ>'$GoGR 9@;qͫT/80& U6#n @#I{\5V d^R~Jl-Icr) @G"2Tps/3NFhBᱩ EC2D.܉ȷoo#c)'N,%> DE13gTlXI/W>(%vK_DAQ<%EIIdIY綖 O,_~^_VJ(4 K>1G ޲œ^Ɇ/I>\%C[Y"O?5/6 59ۄJ/z8aο7?T݉N 8%Eh\%$aH{`K#/}񦗁[ s. qelw%Hvq,# #uˠ(Q2 7Tnx3,Ջb  WJЋiF2_ϑHT]aE):-mK1c&.”cy(}O9e]aeGw^AẢ3CȸeQ|v̈ ΢ULZrޣQKD-0dbLOR lKT9!kמ-&P[džBb U "/}U t(!0 .GJ)SNO9_MU >M*LéRY07l-=*|K237Dgj/5P: !ԍIӰ}Wºw$`vM`fn3y߈xNGV|{zUQv@EHCl[QpPQT|L <jԆkv#&N+\ cH!J f4(n Iͳ7sm{eVYAiv_@f(>tzJHڏ?+rV#Bq>cs))5_<5D'DHK̈G^5V%8|C> _ڻcT$ ttvd\`{wsg@ d4hQ,s/^%dxLۻkrQB$FI-Re^EVoylt[pB 9DfG hȽV7{[pT_9=ȥ)JG12Q+FPeQ05{:.G|OtT Aroԅ w ,:DnOI=<8V;=R9MM=*}EGn#(g\z>C ԛyj/:R$1LZַ<uW$λ]G>ܷ}nթP8 fJK '>T,Z'/p eM0} 3yIO@Ahp*GGrXY2oo w&/zY24OR.8ĴoeveiEe`g\IᆋJ$㩦?܀7OfVLkQpwm^gSONfH=`3ূB<_ݏ;9צدv-?$"oM1 Za& 7dPovkydv=j|Qd#l1ǎ)'$,xRP4z_B mn|޶N:j}reT1F]pRᑍSu@/V W d "YLW@?(L"T7e!fSߕ 8[EzGl% }@E%o֣\ߔ>X)IA뗄d} i<)*QzRfyDx+uis9KVY)1cp$Xm)C v7iX?ֲ~@ }bPP% ]xL)>po&䏱)QKIrgL2 #!t0i[W$C=W8CS 7ԙ>ٺ%w63_gQ`c\՟kXcvN|n9nPۭO_R2>"pT+4g,<  ̜\5OMyHm|p3r4;oC+b)g=n 3?@)41o0uU. xW)|C^ZN֢_@eЁFZ٬QL>H%vƒ"R)7d=#fHE(5xݘ% S @RI~lد6cB<ƤuS0"CmZ(.IA{f6]sK"KUr&T"'tFk:ip (p `Dp^Iq4ZC4rPPYƛdؠvfU5NQXS_}٭4Y"t! zЦ34vj9T$:i~Sq!:&$B;Eeq8U]EN${VJeUޢBUp³jt ;_{F5_y 0@S9GG߆WSd QOҚ (!RJuv,[y3bї4P\~^G'L_Q%#*ZE7nL(BT`if2ƍWj#[Xx[pw;3^+mҔ)\Y R}\L.pJ/)Hlz%1 xH9WW{ʙhpTR Y>t i*\*&90[-r.meNĔ%.M[ׄLA(,ݭ+̓OP5p!rt]ɰlp a 2"oa$ƎpQ EJlُfN݌?K^RrT,_=^AKrfMmA7UHݫA">Q!Dk'/.G2b!f"n'tc<80Pq\)56~\gsA$h}P ^Z+ܸXbNSJ9XhYɂV-8Et3@ !{ GQux.ӥa !/x#%W&[][/% sZN3/NX@4ca!_+k ѭZR,=2\>pG-c-Mz,q(|$h.x|<)?. ϒW8Yt} 8aTըy%Db}-P-7$!ϓC+rE$6X<@81s Çٷ+nnjUpΩbXT'[܈ Q;`7르#֯/ߕ4 t͙*;ix Z^RKoed'xڻF:wxoR>}?#k şi|Gr W\ҷqauu[,tt% BEZ<Z^g[R iR2Jv]{?9/2 ްh+V@Cby_iTmX:,F1@t7bp/3*@BGI%)QXȫaK e<<g.QxANxx+^kp٩S6AD ̸$t4Ʈ{O}dx!r1CܐZ -IG9EĢָn Rs >. | "P@5]{:f:+WsN9QAdgcIǣѽ[(*ڡQ45o!t7@3 3(S'dP6`6P4 r[%iEc@KRٲ^O%"-L)8{E넥0msdA\ЮP3nƪ>4*fw m]4(ՙP,:o)oct#/[e:C49UUMMM_[nDgxvX"5 NClz/l.{< qyUퟡ&I><_6Y* (\Qև])?VY`X)mdt6Kx95L#E^JA;|(,U|ADc!t6ggן Ѻ'RP] Hcڧ =D0&C:!)fm^}]㼘//*!AigّX%C `ԭ,%an,)cCf-M3j0@Qq#7=KԦ0zx)+ hPcG>%"ߵ 2,epdnl8wZJ F]!r{71GSwD7~M`i8|9ݦҢOFOr/E4*N8ʌԟUԀԳa*= c8SP8ӧ?0]0M Zak\dzv|V}\BvMWP%N|X]b>' F@ Ap(t\~MGεK6j )01ف8+.KWձB][v'[έ&9L۽Qh8q "*H2]X[n(13 l•*7^ʋME@f}(*kA9Cw]QB]nN5-wĪq7z/ݯ.Dl Z뽙{ߟhrU.\NqJlb;\$MJ|#ILp+:p*,c>> FJqq{1'aP%$Gݻlr.埭9ɢv70J`(RF.p LRmfszy{e.IOG ę>nD o|5;dC\2dj餳2pg 0m]ɖB>l:s*q舾9T QO//GǙ{`=7|?RRS㞐sS!b\1ڹVovUu,#UzbqaVqc|Aqd_|_]5Gg?.UnܾXltZbn}}23f*Pȯj"nI4ٔk μ:m)}^ySKwQ~ P4I#{ۍ w2 ȶ~. qnWZըL mg}*%t~} O_GSxWvDlzZ#nT Rٚ'5/ ?* <_zxb4oWoTc|Yq "IrrGV"{ nUO|qy7Ab3z㞫Išp0._Tay~d0F7+d@mܹa;B`|xɏXwMMZ:7s6.M9UfY5Hvm~rc\k2fx7@,?hEl%NϿk;IO4˸TITE=ˎD{cC~vtWPW-aWA^K4SO9=.Ť,f T2Ccazު|VޚXftcQv,9J \Ԏ1=tt;<57/5./ߗ5)U`4 §d|^H8cFhDĈ4e'g탔. $vZcc7]HrwIC3Ť?YW`f*mcNѠiYѧf2yIZL>IJ;|P:|tzf xtҿ%HLO#V=".؜BkG#$ݡWD ~ ,OL#Y 8 W8ܪ9un9.`D0laIJTW$LOQ=jsep2Z.%|v!pІ݆HjJ-@gԙtDZnn5U.wn؍|FullZkF^|x֣Oӏ5أb.a>}}K2ʻjP'R=LLպX;o:y} 9RuP"![^:7,|E+@8.3.m8T^o{ Ik>P} aL'i*iII6I[+_e1FeM\9!WGqq`k~@C grخAf[/YʹqNL@ 8(kif"9H֞P+@f+!k5M h n_Ζ`4@AX]$B{m[.Ry)N %V:G.4Nj#K]/4`ڗ?%Q䣮gDߐd˟^g= G~r`J$-ʙh8fPZAjp {I*{ԛXJr ؒJtьXwhGqqFnqh6ɪe}d[S1oy 8u0L/}q!>mVT:FtUO-u%:W'Nj' ֦whpU"ׯ<&RdKB#G4vLpqljE )Qqe?NN5@G $0Ҽ Sљ@䲇Ds{,3qu&PߢU6ZL~*=sO_VSl*.uͤ$7R4aR8"^3'd#{/9ylɲJҋmR˶jp|1ObtottTJȖ6zcm;~!D*&HLH@=qp Pn) yV'0L CbAF9H79gޣf7?I5 cO 5]'5J5ptØy"KH!;MT/Es`hUpg@_Kؙ]:gU8 ê/U_NSHe]>4po'c]QPQt[E}ovʘ"b;\ J&)NŐH ̙b,#kc5zҪa3w J:a{S䩏6#y̚/YfF$"нGflr|SEF5Q_=$?qC dEYH2Xқg=K + vf努=+]sq ’DAM6\ 9MĸTJض oE#(v4E[lNˆ(6%qyfXzQv)Ր*BWLXqxY&~Ggls1λkf[Xe}n`3 #Nri~(xp9Ehy^sTM\&Ԭ|Aذr(aOt+Gk5v̿/ru6ǗwbVhRI֘$7 Cw$mO3 KSXi,P4@ԣ '6%S' 5xPfH-#Nzg]o>N>=Ь^N;uqS1Z% /iu2fttfg&R4@޳j:3̀1a1]CT^\1(}1j71 :kk*{,~;#ws(3}qRj 9ʌzwiHqj3K;[*\E3Dy1_\o тAF:֜/ҤmYདN8X;57wP\0$ZroWmp"nH:\w@D.KPHn.lvB@l|2=2 efViDeZ=.OZ6_]sUP["5h}DBϺN&L\f$ֿլ (-{uRS@ @MD~ Q[ 9㶝ca8?z4VېHp-RMb/6iꠃm nJ)&8)0'@ C <8IY%Y֡}:89x SHQKbLJ ]<-\e7:4R?arDF_W )s=UX&8szQCFtcFq (9F42ivT \ݛ'?t,VXNqwWnMMyFtI? pwpBDeu'gԏf/3sS4BcݕBiLRiBt=LV)H?;i=ӑhٸ<4IAW4Mi UYX`"?vP0Z12k jmSn[^^sgR'\#l.VfJy8Ah^͌OxЧMX<MEN,F}^HWE`U]&)9M8|%60C-] $*+ڋphWê|@' Y^>h0 +|,NnfĔc(A+ϣʭɬj1sQyoz'] ;}jYn HLN1Z?j.0vO\QZ/ьfZj}]BY`ftr؁ 3JTUwbs-8DXi(xf 2Ƹ$9Q-R$r;6 z~ /X! _~iS )<,O"t;Ed_]Pd)-1g{5X mPL  '/)dШ1!! XmM ZC){.Aú**?=\(Xyoe3 mFLK&.=e*F[G閄jr訑vH@_iƏ[=Ԙ t}jCjt1 ,1!L"2AzYjb֚ݎ:}-%"6O1d!hwp|LXsp5K-Dfu\@_mr~8kGذ"J R7hAK-,3V9QwIϢb}>.ACdT"xf*Vbf719&! 㮹%/aK^$c @7xZ _:e芊m8|iN H.9HQۻM<x? hǕ֯AH16L˾5vDPlV;泆-KNe(E(5 s}==!G \b{;R/5%l_4W-8 {[b0 DSʳ99hmv1"L׵m?o@}1Gs`#XځQjCO6ﭜ#:cfU"9}g3k7޵#1ES,څ.ZYr< V0[v -œ +b:TCtl&hlcK Ϲ'K(v&] 9|[AdX`[R'Em^.DrBӬɾ"1+)J" IO,SJ~C;ӹeSuWG_N&F@dn *:zQ܏*+f"i@aYkMf']e?k4eʛsr/23P ^#Uh -)g%V" ?+ Fl "z7^o,DZ{,Fѳweht@i;nxWzL] n0X_n[01Nv-۬ ʲQe#"[](B\p[oGnZka{O2Oj9'b;nE[8-=ٹXJ՛U溓5' t =DnqUlzB(Hb|n杌v\*ǿkr A_tAGf=kjƜ.@%{"T#o mW(E"~dnx<A ,<(/$^nOq.Δ9+飦W}F6Y؞`r#]3EZqKǛ:ȗ-{O\擽#$mqݜ [O<+A\ Z =(nҚǦ΅a҂@'0UqISA!j4\[aJFEUXL┅Y`w$~d-\ٶ$Zoxœ7?лenWylcݷk2B! jbuwo)e$(pb7&7㻘 {@v%xF!l9rԳۖ'A0NR(_Q1Ju2 TCbkS8>?ARwJ99Of5;sJ#Hvl%EVz ARad8IJphSЙ2##3YQI|v n ߄n8?P/9Z+At v'4+gf_OJO~\cgUt" ŸKBߺP3X4m+Z^h M`e(Ggoxܐ[ؖB.2b L2j)2[u*򁤆2z/{3 #] Q0z+vȄm!4J6J گP}H0'cLD AJN)x[>nЎ^"G3LV2y8lr 8z\W6,lYAh Ʀpǹu1V?Jhqу<0nbTzX Q%Q` >=to|y8B?m>4YmpJIMN32 >.juD{ =8`}\ ^I(}m'PѢN =kuCSR!7۰ÐOsKhf-pz)aضkX 8tpI2I?@l17[E[^ɬ]it'B_1lϭyP-tuWYOE1#}*@%r)qS8r6 }2w@6nd$1ƻ'/m8= dz[h#uә ɘc.Ey\_,sxP (# x|MK]en4w#D<䋬I~\P=R'IprQ TJ>/fmKڬә#Cl";a .NV.Y=Gw, PP)li&﹂`+_N|%hX @V<5",^v^ i #d|@ڙp8o䦇q@^F;< &i+exAׯDahkq̔NlXุzbQyrH [g^K <@? ^N7@7Wj>_̮}C fl$Ogs4`Ѳw{3,!)B,X핫Wc(r"M63C嬬Fǫ֐Kni3ٓ{.k!iyy~ٓAZRqI~ҽUS3G5 {sQt,iOਮ3W}A"Bm£I$>Uڔ473ϭ-{'Wd/:K\oڷ 6,Pl;^>YZ歀]4 7ˣ5عf G4Uho8`H,gAтP[ЦBQ;s+u7(~kb^㉠6SU;`C.X+NW#:L&T+ yx ww U؞%%6C<B% #r7;L}\3_(T2{l(T/ pc$b84ԋ¶$ykF(I: A!PT}6)J:Quz{_aaNyZ t;BpR, n (->s<)/2iy 澩s'.sQ]>6d۳fx &NPI &M<хٖ|Thimxb+%=HHP\myjsd3 ;6^%,H# u6[9!FOTpEc b Ea9Hz4g2Ze&[sYTC;7lt'-jN޴~FY!?AN[S\"lQJL[20 &)F]/`g^f#vϤ'$K  cG] ͏wq Ȥe?wv10üMI\!e'65)qeʵx.c,OO{I@kmGѕ~S_ߓ7(2Y20o򧘣i*ٍ͐QjB#&/ޮS 8KnH1U8拖n?y&3p]|MH3^A$@( t5FLMg!|l(CNB~s A.ߜZ"b5gՕ>ӕի˄oa؞8 B | y)[NR= CVH$қIYđ!꠷2B|أ JJTBm9.eOXQ s(SX:[kMCAr52aA~T0__x!t>~d0NEG?Ї~g^'68`Q'O_YF X c }W }-/:S=MYTj"1FP/| -?wNeEh>0O}Y&-e FU[YKIDI]ty^z䨾CVrjR0 vnP ZA0RND!\~'QGW:c]cTJߟEu|*2Ҭ @ AfM n:4F} `wQ`#ABg` ; ٳgU@RBDthGr}++4ú^x2AO;c G&v &_K4D`A6<]BFѹeTһ1=]r1oo w#g{bzw!m}-]KE(UfQ[hJm7-a^."2n:p,z=eNt,7CQ`s@rv\Pa,<&~R +&78Vn|>VL=dw#+#ΔXң2Bt\zmUK D GZ&dÕOz(j/sAg+%!mIetle ${[38Ѽ͡BT@IqO@S\E9.x}{5G""E]yU*ggee M׳ PJ^w>uG$ 2޲բlrtjϥՍ;U sz\Ĩpw2xlu]юB0 $\zM6v$K/[Tpv ށ)a#[GЭ^z nچZ5+V5*ci=`Цw=g*:|"_o)0s ՗lz>"$7}|TWº"zn Sυc+7BK dQyND8nߍc  RtfHI~r!ׯa Ee=^c*q6k@ek gnruo84 耒 lrA/HYdR5 VG#0V<*Dimx1gʪ)Â`}^lmV0*a&W8(@Y:ER_QN+%+kh'bU>cz,uDLt7 cO{ӾRF@J*U` FMƢǪL'=8Y*;-P&dIW~i7 !\J1(%/)|6!%QohNf C+҇Xl[yzdzf 0b﹓"Lfc*d()UiCyK8YPRzr}l]1oi@A?VJFjM"É!U}Ɓ3wc)%J5 cC0~8'!.۱i]( rzrr7c/iW#sbr>^|& &X1MZLx_՟ &SDu1J2|$}\h`TtL63DGz=%j!m".ݹFMɍ3pT$b@-CJ8 .~9*.Akʮ@Eic!x༼\[0b-5vKHX0Cux-dk%1hZrֺ: . `=~lrBs2?*n[NVq n?TtK#Ờ^Lq=n#r h69ss-:ۯiO}_/6g0H#bm=I[% '<^'NODCbS>Žu `zrLfɅ p(Yd撨}ܵH}0Z񷵟o6 떕ae"m6ٷsk-X>*]IC1i\[ <=G 8h`4-Г;$8UgCсpTn =j/N{\EvܑX!.H39A0=m$b2~9ym㐐&0_oBCVx`'\8d($'"/;>jHgL5k߬@2b+)ݜNؕqZ#t *>25 Dh2I0uWv[Ge^ki^RȊS㸣7?$wzpvwr: юKx5q ŒA$F{ƙ@ƚQ,#F;K[3ː($s(处"o%a|w#Q!t6.| (,J[w'SJaRgb!&b1%W+2-h1/#@bB"X=D_Z/a S?[ew2o;a"$,]*hsҘާm 6`A7{B/g GAI8hɄfA֐0ӲO~ ;T9Ўx@wkhVcݺ[.; v;eXC'J.Z" &4A. q+?ccDgTtΠ*>vTtppo$ VoǖpgfzD=WV\i"*Jۡ?vNsWUtO|ve+/?Yw6M 'qbw)4 B_BmH 1e *H z½hʔ^ KAoTw(fa,Wy GCw 5{ݯiΕ.C-x [F^~EAOb$/t7R|R˼6\7  v1<Ն}\{*&ڶ(L Fc+ɪxq-_vpQ/S-?S$_fx[D}fDF_]nrRrRoHiHy$ YߛFt")P뻪m j5{dZ],+` =tklB= >M+F>]BW]?tuso@DĬE3'_ZW 15tjaVXx[q[Blu}sX vđ_R: !,gcf;>/CeRw#4J!{%Pꖲ>^qV胅ao'9W|VyYd:QW@A+P)J»2j= ĬZ&M~Y\X. ũڢ dĚf[^劬źbծB]kf\m BdU0@iv'?lFsA.w\ DggZz^FH`-_ĝFhHͻ+4 YdY9}bNL;/Vwq N[ TB;N8r$c!"S[jSe~l6..q"|^;^]y`6jJOEbUc`YDI|k zI_GtlMHooTeQG+|7eJ.%eJҰ ;;p(bWVEy~%؏YśԨYHX/ELKloϩ +Pix}lNjnͬX![h]9:BDB+ ^|ETwfHJp> `w:6[Bm_峣n+f0CBlxA'x>/=HX&7 jJJ} 3Fe j0,yzN%Qt?\XP(rQ0XYUMuYT;u `/P1 Pnu>^[ux},e˲ĉZ"sZe 3mW"bF:>t9y)sVz0TɢѮP9eδVxv1)% 9*rJBjnJ1@/Ւi i /Lqǧ=֌+M`c.piq9/rsb2DK/D}gtu.@x]*ϴ^`pJbQ׸k>+DH"0{o 1 gzp@= M; zBCg(5:a1jwʉ:6r$QϪ@zjWw趑 bA>,ޥF[ z^ ]$,L/+bh9r^lՍ bz.`ky ӹ 9r3שYChC-x \=KC`P}S3v*S%T\^ |Y^=,GVN+70ب&+PĘc'C4OTUeɚ>.r%;@3g( geE▖d_1H55?QCXIjv8Z]H\g6ZNh}- DP>ʫ$`3_ƭvaqdZB>ƐvE;VB.A].(zGXXF.LbzKS~}Eb8A~z](Z}Xzo, ) ɋ8u8Ytd:FZW[sD]:x ך#& ߐD/|=(/k֛gR2l="bQKvizߞzHEB !qw_o(E㋌L?'&:Y/@\Km]Ku3:LOwBrM9!:qe%iĈ"ƨi^u\qP rgֽXC0>FF-*쮈[|YRȢ}JeCSĽJ7qH{&z]B;Pэ"PMɠyQ9ίn`S˃@=&>*W뛚Evx;ه]36)9sI Yr"bOLwhfM>CƇTwXk)>Y+m˘D?=,&}q1f|Zah4M,<ީIv>Vԇ^5P??g(׮VgseyAF bK.čDݖiBJc8 .Q^^H̵lw0ՖtE1'rm]N%>e7@Oa_3/WU˯0CF_ ȥBQ֬9DMHN/[SJZjEIrPd*e_OVg.H=Tx?av: }fg膕w G gr%"Nj%p jwOjOhR,hǶF n`.rV E󈋷3`PW&^[>9×*qtOqbDMK'MVSe@;os(q5Qݣs:](B_T }Sr Zv}6 %$v2RrV`>.kĮd" $@2gv`!0U 9eΙ" و-qΜ)-"aUי/o eӿ. eS]/K_\8Z.v7_M Ey܉8xQv$* ,4 sD,8̳υ]Wa^FkMo-OLhs\z2L]7J$Ӻm#m eI L ^QL2/f?~?M)Nq?]>)P Ɨ=kNabL2ҋfycX F TDC+A폴27wP&ꉰa]H:|4Rf,$EpN|&*[{^*jn I{:Ƙ-=m&pc/w.Uzde/WS%4QH \;O}qOl$lr]MBV2:KgՖڔeC2꒗/wimfmTH`MTC/0C0*YucۓIuItN~1aQ@doi^ DGAqQEP''[2+_hm@+ &`*.{^6(UЕafC[G;VuOfո%(x`(P.fN#@ҙN&snH `>4SCr |39ZaȄq^$wg``^jN:jq9T*$~@hPJw3NnU[lfW,)$0df#5cRȖo;wLǁ)s/w5q:TјWv|&-퍆VTdfNa}aT#%k7h|xstvL7|S9:QSjx(έ^1Aɋ揅EI΃ckCmGSKtYr=U̔փ*f\'.-q|Opˍ )U>Ŀ]gr/ vF$]4BoJjyg ?0( h5uM釨vC SyžN+OsX>nM-r>A '9%=z:׸`%{ $>` B3刌XkkNkxaGL.<u<,~B7fyҲ{N/Jm2ՁT!h$[m;WqrNl貹hYP&`̵IMD/Z .i{}lNap`K5u7Uxﰨ%s"h*}tGp7<>)lOG~`qㄲpX Bthd80)]&]*P8>A=K\15cNdEL7|>ugEeIژ)^LMW0;/%ޞ^aYS̆~ >v@?AsaO\X:۫b֠Y)+ 9׭ ZB[K.iW=C" ,;S9e:%.].tcnY)n-tiilpv1ՑMd\2 Av{CF́;@(., ^ԂA 7G~g>7}tW32zP+s}ؓ;eqs\)09d^&t1UcD*@:MU$N fKG T,Xo7#KRX"m)Q)1;,ǮW=M k8`H2DJ_~'HO*4C_U\b7) E5@UuY h^o5ܴ4ϴm~M$;*j~ÍɉC ( Øzۥn϶RjF|EcLW%-'`t]O "*hL<?;KOf^%׏aR[o+ U{l&P1Yݍ;DxJ:q]UQaR\ Qj=@ PQ3@- RL7)yW)c<G'VUדNkbp͑JaI>27*,FoE;0b} Qk 3hz9+eufZM e-ViWV'GSreݰn<}~;DFƔe)PQïIhͿڦi(Su& 5w>7T]j3-ߤWp(4vEE VY;\y# u @8,JTvKM|Rݑi \ߑPcWoV[(,ef:!,8<4|2ΐn@08H ~4AIf3-z=U BXW[[KH݋T%!7%Ĩ&EO }f4rԛkU0|xUHRo'"% &$']`WIڮy YsI%+yӃ_6rPn}lm?_ =X$ Yn5{"#mu f9.ҵQE1mL jI s?MRaAۍH!LHcr^Ӷ"ڄ hwP[8k bDA>Sm'щ6ɿBˡn'H(fކb- t/"Gid,V8ƀ:M-aX&w7hDVXz Z8 V@|"ua 5/5u}l3:L'ɵSG\50k~H32np#jo{b"$^>FjzSiUT%&2ݓ|:KDE,pU\Ϸs,]'lҮx PfkL&.&:K0,XyIhN4h# Dp44-!KGQ=>PhJ]|ji vK %@i-?vxo9 㫌 t CXd].C O7D*3*" 5 uN:ݏqΪ}'H÷j%# wւ9>| )I"&ǻ%\AZf1ad-7拘hX~EAH@]l3A Ey댞6Bv/PFюx,4 [>؝OOot>dglǹlQT>ojwpPAD8)B`O&-%o=-MZ|U^ϛҧK 'k`_ ok<NW#̣Қ(Jw!>O6g3Tdշ*ݵ}M,S}l FxyKe8G3_(̭*+H劝efbIe͚?^lm1SQ͈TSm3)Bj:(sXg9Bj?6]KLZ)vrd q .D6_#ob.c*tˇ?m#JE?Tc$ n@n_.MsK NjTa*CQM7u۩O$q1ykasާh@{6͸$h\seZ@pķu|ZDΆo> {*YvИmȠ"&+ު6a[IȲ1 ?Agڃq8_RuAF-NYiA{JdW$EԞW =Kbuh[ ar|s.*hT)ٲ3N)-PbS7MT` %yï}9^I3CoZ|lcq5-:1s{C\Sw>Ԅ(ORR٩cXExЮoA0vp/֨зD:su{RYא,5Y&]ḾA:!:a=RC9"Fe(r@86% G.]>v m* nbցk>]>c+J ^X$e)czZ4D츈4Ayz0u1s].<^3g(N=sKj;pzڤgY;ɯOMAkO2j)s:JT PZ\ x2F@#W|7 (;VEJ]B> 9P+6=CfRPYػgJ9,~[8.Gt%Qxs "YwfjxTa<UnDf$ L 8dvaSdM(a܅~Ȗ16EKXcqZEqrf3:z+D FBk.ีzR9Lيv4WtPytF4P3U"̭ :ߛ3\=qRESPV '9+~%$CVEq2 [U=MLdx*;'!" X1!7.K+8p=,G۫*U0)89Ģm/*>B Pe'P,Q ^m~>6ϴO4TQ8j BY43Cwm4. ֡:9;TC#fTKI̲.K],~sx}_zS0'T~=nE6xӾrdͤ_ The}!xEޣ\, $TB:Cao d:Ԡ׊pS8?ЍG&)pm"K"nX.DǛFI(4-$2m~ I`+^ʭ!N`ƕ\ݢ~́D[`,\bzc7O9^$1R F_ NtYBHݯ0W;½9mD+T^a8af^<`W<7F6>-a QMBě?WDҥEm7KiRv8ߴ}J?/64MΆ{aT~VX&ta`L!m]U`$61ԧ՘;j\$v@(Z[djo&9܀CF+4Ѡ>0xL{ c·jG Py :n~귑Ale(zzu{{9އ$ $V"wԆܞ!YߊlCp b ARoYD<]*G11vzȦDc:AWɳyf0֣Y5{pb*H4@ΫaN_-\‡ \stB].p_xXD2}1\斪ۦ_n _t })P3jN(% J@$%Kc^gʣ㛳.) [*Ő[|sE`jS 91:mێTӱEVS"2irgx8zSȻ4]"2'. 1J! 7Iª[C\XAS$hnoqHn&5:UK$]WYO #:B G*#<g_ޗ?qDSk\yq0n` %xrb<^:A,#I=~| uOl2AX> W~AliZ #Q9V(}b}N~g\Zg_ _;W'n-mGPզ {1@ZOf=G FࠏtkhXQv=9H%eYPiw8 1K %|2}#R r6k7.C=HI(w,I5l:rM_/?AB2zeFVY`]y'&z!wLi5r㕡b ԛ3 >3,u^Ux(0]m$"$ȏAihU ~0 mob@f[5&')L;]{QU' i3s oa6E^v:jt8[G^}ߺ'+6LM!qkP\rmQM$mI^]CwϬ * -`Lu<fd樶:!_A*>ubܐ@8̈́X(n-„ɢQΰyrKv|˺Rmm.>f aAo#lj+NfaeV4qF~I1^L2kdQ3-lfTB0bTiH4IjWkV *8gBNeF񤻹9.rtTǘ`j\ep+Fg:r$0"nfptm$Mx IԼ=RE FJ bn.fLcChzH ]C0dȏs*̚)hPJp/ZLB|'J[s#mjk3y- \Qop`" ދ.#Aq|8%d3 QEAq!2y+Rξt/cv N](dkz1F!uZ>Poe׺k@ADKR+sy1~+O= 8EDi|oUl*HWD,/ǐVO2`> N't++2NtbLH치Gb95 &B!B 6N7ESIђs.gl9x|3KFHZP C,y^i?L{Nؾ|?[EخN IAӨMT3 [۷* bl2ƲXܬ-6 '=.N4g|E `.;]Gi{P%Q=69He!;Wncg"MÜ&8+̈d.PI`a~j?{FFw=`ZEêWA<^ZWS*"*3FmA8ǻx:}}۩7K"V{xH,;pd4U?C S eizd"̜JCۜ1:,ujBX<ꏝ ^э+Ao[T5y,@GuW#y'Cqx;Ђ* HzNyYQ]X LT%;:Ξvx~9 HWH] .jmt lGD@^Xp$t>L ln> ll®!f.v27m_Z浹,vjyq̾J=8[CcNM1~o3 -Pp 75yYl~zf=o 37H%.hoDcB?>q5ok 8LNIB?^EC\ڋѺ3fh yGOnjDsDX#x:dvְ֞st/S<“{.^o0(s>fGeEE)m`^f Bj:~!ß̊5ywWT Пd%wt;f6whѢFkGAuqMGGƮHnox{]Tx/ ȿI㹰ad[":rRza0xp2`Y\-3.lCD)~5DTnd΀*$[3#x1uzJ_@›Dn[;3Zi<XsHR֊7ǾW :" @wy"2s( 'WWmC_nZ Ad!Aqt9gu9Q+ ( QaK/j{}gHU&`wCo|pʫ1rÁ~b]זA/Ҡ?R|<CÈUr}Mƪ/}K'tμRb3{k9]< 81 z_|?Ubuxķ5tnUGp Sctp^L ܈DW*:$ri/7W}ЅthIRǒvt1#W쇩ؽLs"8@ŕ /HҝeS$kD([ϲ|ٞd ;-usxZԩyӿw3 8f %m`d.fZXyVhAh)۬`i|}8S;+FՁ&oEtQ "r15 2ؓ,'74Rq̰v'l/f);bOv=.έ?}ZeGGx:ֲ.Z7%"ЌnVIv9ٹ7"M}>:S"ԏ$>Փ|Hᵆؾ.MzЉ)y`׹nj^ъ9GmPdz9-Vj@.܄l_ J[۫+R| Oo5y&##$hѪ>..OS}T, *5PnM@w\o5mo{r\3 c-#͑GKj/gZHD5 I}bVcAgPS{zBm1ѺhmuA<5~4U?( /6D5wd*_S&. z7Fc~9.FNlwIkޓw/Y$^dY7/̍)!$"@FJB huE:ѯg?$Nv)H<ᄰqA Qԓk}!S 4)O$v.۟E*=<XkOi(E}W$nOz=<ђjq%^TET{vI-ֵq!x* F|[_b,kRgiלmx,әi9 :Knえ^{@1stow32XR@-XnbA@D\ ]q2a$?[IbcT2k0&M~Nk ާޯ"ak3dnbC V9/I£G cvƆhZ  FNŠԂY_+A=Ve ۭ!z,sP\Z91vR81 tm\ݢd,7#/_uܓ:Wٷ|S8B'>K&NB wo5| \R Pܩ:ҹ"e%0Ux.x2cxV0e{eIV|1RhMmupXczOEL~}.{bV[;ϔ"㜐mL; ʏqƎ652)C/M:tx]YfCxs@b/*mnD n_T@ fR0O1C}c^ `>iR:0CS=蚃#4'?RaQg\/U}W7'3]=Xvb2Mql>ـ/u16 Ƙ#A3O$KV3ѶY\>TYF "'0,Sij|e۸A ê)&.$' mB‹:`HdK.9~ucJґ#Q$ދ%}z6Y2~,(=9N=U-$fGp<󓼲8PZw4 ~H>g2v~ؙ泍@3,L&is2%L%M 8ue @P I.)8{€w0l8$咊ه{KJW8Qss@+'lk1NY/_m]SllB5yVwk,zgS=5)J\"a >ɇɣ/-3i9ؔr̨4t\>GānJo{׉krpiDG_f\ٲZF$qͿ Nt^T>,$V^Ǜh?mr@{"3hLف&0UCdFS^)t.>W+=Cj"o^]Q< B3 !w /Z,^[y(wףsv+{!'VM1D*774JaΡ-1}iқZ6CE $ф6anW9rő͑dT&;k_eЄ_u#89YMV \{G¸ʹ9)MHaFk/lknVU,C9ˍrbǦs}NVb %}\,.zcib[gަ"9VTrA|&]BoiB_J'cojI=-2柢E5E:`&b8`POя[^f.gI6 2N]72~6J@Ѩ iPܮiҕzFqf<@)3*qS:7?5w1!Ax/bC.="$!+D0~՛6Kh]K`iG2macZpe'â-\,NY3*S+i_rJ䞂=c%?WVeOL5Ջo@,6i:<@}ܱ'-|TES>WmUŀ o=? 9XCP yж8|Qv]_?L py>oHd!/APԬ]1t QJd+wKUhrPHĩh9;GG{}3aL8C-Z<}ar"3r'z_ް_I({ ޕy[?/YN(b'1+" +Z} Ɵ2T'ԝebEL d'!p5 Špq/&>'KK=4%g^\kY/PflsxްP]$m 1[M"" j{)Y و ]S XWre0TS)B438oW8d\q0Gzz@DkLDcdM?A.7+9W+J*$O+3dtΙ: ߠÑW!)Eځ5j:w,1jǔϭ\D] eI ۇA\ZԞLYX{BmLHl㊽Ik*kRK3fZA'jw9H/0ʜ:OC=RjlL[.isNƺKx;xam 9^Y>VGqUmj H2QHGq揤T2d4XԞC;ɩpuT@9]Mm-g;㚯7#d*zfA\:^  ;=e\R,ג,1o|3K{}!rGX[n\C^؋%m&`|1|HX .4 {D >+"~tC/Qû~WR(D`_v? S0/c(UxrdpvH^"C; iՐ \AZbƄ05;?fs؛61>-xJzIUQQ?GN+*nT_Lx {; ijRtQK*ɘ~U@Qȝ@8Dےl" ( @o=LN2s]gS!#FS(:E`x'Mz 5zcnؾ- ^ ПrkH ʥUp-ki-f{KdWEݴkh] g]!G؂21QԖ4 L˾"tBLQFʑB?c#?|x"1i%tF mw"џNprkh[8i}Q H:hfnަ!SF02:D3'kq]#M>NPn+dz<,yݪb#_來%&kSv<WP0@W㵝3,G5&-s 9(m\s'6i hW 4ԛ "GCrʣג'8B6}tEHFb%k|\8Ēc6^Q_y_/XQB[1vOn2A6eI<~lAvюhR>RGλLg|E\C/~Bd$B$KG c?-%؁RxoUmbQЮ 8=ۼ{57#{47# :} ژ.mGӖA18oL۟{-%Q̱`G 3sDčFCĸ\vmn$\+TŎ %a -sĴM}q>ױ>tt<ƒ~c!MjLt`HJ\ A|g4,MB^[N=˚WD(C-`1DY{5_0~O.a ]Q?X]Ee'uFMQWj@GYZ}-@i9#8V# !s%"-•~*%glQ\.W0_]^Fs5ϪF}k/takil`~fza!4p^Nf.@w$˩lS<+.NN+NBQj֞ 9N xם!t<uu"Ô$_(1?"/uTv)€= QN #/H/Y&3AT ,nhE?oeZ(tAS'pp9)`A(ѩB;aS7{ fEAUET!13d1p~?Sy# 2)?r)їɏxxdsŚ6˲E-7{u} So_"go5]<([CܴuP:>p#y$|D`}Wݜ.J‡vn6h[-WbU;Wb<:NLn׺CN\fGK%qeò64ÄC\)܃v(aRČ~i5,2 Y` 3]ȕUbz7J0@]E*[%WCr)IWo7Ȩ;Zr3Ta#%@f|󒎖SY?u6|lZY(Dr.PHAh u|tzr3ZXNyDp@T+DE3R1Q஡d˯@׸̊2U!ʽ놔8Åp 8n.w9_" &X,98/T? Ujܱ1b|G9j" l p[^[Q!V1}]>}*̭˦VJSSR'&URUG) %ETףsW_%4|XDj64L[.UbE;g9#ommjI V_lʉoX/i cC{ PNrI ï㚱Z\7eO=IYڟz,]3)K7-Oɷ$kY ƈe+l,cOE'UhDLWҽ҄X-tAqʎ6LL*xࣰnJq&7'!T#80iۙæ,3sRf}kȫK\o1CB>săTm}~g+ˁZ73)0OFc$Any*)Wvxanx0[qh ZC3>+xRXb!r"ˡ̀rN`H.z LksʤhtA_8>](^mלt[&VVƊcC0FvEVﭥvR<)3Uh%qkE.\,x0/d+eJH2k"α@`uC]a:ƹ7{D_JH<7aF@H]1`/CJ?sy"2Y toDQ>Fu4=P .|S< K3~c%{3zDv` N6Mirǀ"_oppB}VX5&J FKWGٷ|I)ԏRE3܎"{0yX0?|Wt&\WkE)1pcݠټ"!OyU69ZqG_^Z,F _7 y:-?(%+ iAE1EHlȫ ٍɌrF> 'Fj,nF5.?j٬Fh&`Y !;rc7Pev[:Щu]B)]],9@B }_>>p?I3M>ki=Xlq"71P.A 7^y90! *mJv^?i꺧^"Jfq ٺCyq!&5m}]#$4?{"k~{&4쇅7u}g_Y &E tw:ߠa{kr I m&x8@OL} A9h6_Rw"Ba+_^r^݊:əyZz%Sr+ Qza|*$i{an!X?sAkJjs{-j\QԪbS!<#V$zl~n[(cp1Y*xHPk6i:g1A8kšh(:Vhp5aM:,cjŽC1] i1l.fz;3{yΚymǸ)q񋆹Dy4'vΖ7Q[jA&$%Bʌ19)SQsǝWoCGpIbê< Pׄ99".$9/8NlëQhjx׆Y PV~uW^Perԥ9ipOHɀ8_)kaL%yg@'PiI,WzX2sy&N~6SM#"_6Biù0~Kk- z h 5~)ߚl/L~lA t!F .5 pIAwBh1[:(%ZE ٞ.;! lCn9rQ;q ꏯ4Mfd&C>O3Ûq %`_S3- 0(+a-h R5pR't|v?:r:qpB[Q\%2ɟ}(Ϋ#jӖh!l:gYz\ 9AKGOk-w.fsnUJ⸅btC/6_k*X @Prb:$2P\|.jJ {wUN\V{Cy$/TWmVJ#O[jqvƮD:G/6_$ slXpa۽WC@wMM0oϝ@eY 7 Aޡ)=,1gC%۫7O-2}8kU DR?P{u*Vs0h/d6d+oS)Ǩ՛ʎ :h I XSh8R/0Xt4ڲhU+ɢ;e[錹OLW :M DȉЫ A @Ҋ]̝@ߨұߋY76OݿWsd_ibuѤf!d~z"g*m//LTelO)̥n1R P咙WY6\j,;F SlfɄ oF2ﾾzpSC6&Hq(D+} 'ILYMAGp*HOtc+LPQPZ'Û |k cT9\\*j S>j uڛ/Y|.u|TRiFaZ6HU'?d> nw46:3QXe,!]p:'0ũK?\fcHIJj,эzر- gDIʗɧ&l`3˒}( L~Zm]xZIq>Vehny]l "e/prL}B8hvWe?/gpt}x":vt᱅Sױ G ڢWErd?DhnےuBq%$ڿJ Sv0]uV9|vg5] uO>hsuS Gh\@l#, _4>cY^Z{꾼+sk1/[)j!"a JQ`+r과+*LhPb,^ۊG7Cxk4(9>l:P,y1hP0[/. 6'#qgJb1^?9b|ntdj'*}>6嵯yr (!cJ39wi?w޵`d]'d:xØfh:Q_f7 g<5]b67ذBxOoRp!C?}PJ6 ݻbM"%;2A:)C9++LfI|Ö'xHVNw-+͝qۻX&g 3}Y ~I SŠg{C! +N) "<oW(\VwTډΓ55G6GE'7{C_Ib +X] Uh ^bV΢7_ynGg3@yC=2.cP3|'"ĈcWVn!D7 PQyNCbdVݔ_=ׯA uԋpfh%|aVOE?I`6GAR: "\ o3PHFQ,3z/|:Y`ߕGt|TFݢ=8H-ZCT߮ TQͽg P&D:ŷžd022? N%cd16CdN /!\z{.;BPAX[ e܌FcGl\$#L9Ј&ϊ %9"a&RD 6NkzU\ff F]e+_ u"jLϤBV&y~[LD&?j3'dr5-%,{yU$'"ra-%԰.|4|<_% QUVDRNf6f./k}UIꨞYXv՘7xRj6+;䅘svm_Dp|II^!]`TTtLF/FOձ`ώeϮԵ1{ [٩dՑ(.=ljwg~? '4mO0o:WЧA佖KT * R]uS~2xuǏ~Z4Ơ܍pbBeve .9R+]M1MdCO!8qՑ( ^q"T@IoPW0OBQ,{G\qf՘Fr"gM?4焲$o!,n:5ou?!אr5?b_c2j13ىl6>WŖ R/-^9⤳B!2KG0 ipǘy g !:XXYd(h dj!he#Tނu r#v5zBj 8{4&7?zCnnƾNLyV*f RV1,*GW^Jl/K'']٦b׌ض12.t|,y<M=4] ~#RbWXc uSSum_Rʚ eJMŀ @s=j!FQhbAq%Xﰉ"=p#stѼӇ"q˃ Fd0hzh1]!s,sM8 `r*U~a?4Wfn.!FM|Uη7ao\E%t<XDIEg_ ȝB< -h` E>Rؾf|c`8>m5wa_D, MЃ@kg#:iBV䙥KR4 7d9iH󤗩U-zbB-(r0Zщ;ٹ9wo)"y1Rh6hT).Er8JH Nl#wjV> |6.4Wu16֥G^e݇yk-\d5!0mmᔽ:c"Ca4u7vOhWS#  {'/Dz/y)[qmC1Ei ~T bxA;!Ya)T߃m)#X{sF"4T<=yZ[}Xfey&2,4訨D>zX%X<2z)> >uQ%B͉xKDAĘ䞖 l,ʋN_.бi% j[ǝHy$X$U8( D@fV ,vP8? qiX^*#me bP%!%Q ]B(R xFf@Iv44;mY2P-;1,>Т/*ao1rG×zjf[bGށ޹~D}^FXl BF9 H NytԠiJ5 -G|^"fd϶N|H)6 vYyPhS=zTb @iMƍ!k<}+:,yv #ࠣORe+$SKB.@Y &KM(8/@4 @ Mj1,}61 j 6bKN=i9mB;5ps (ne'Ь6J4t%j́Nӌ{%yv)}*X5~_PK9&Iն\ p\mdNʈsg:KcYܵQld[`] y{}>jA÷X^(:w3|viȸ$":RdQ +,@1$Ko-1pt,;؜^;.GMn78$a|O +ʕⶥB\&З +Ǡ,ODw@v0I< Y]-XzkJHj׵B`0KFW¸~0dx _o.rHfۘN6x'F6߻:Q_wF}*-1V H2㎝k1yyv,3~Y<$lw LA)MI^C4BEw!3i3< D'U}ӡg jғړň#` 3${1yP;r /m;*_I}LJ#3ɪ".#RG,%bK<Q‰n&Z"K q$\;fVsbG=eA5bwY)C2qߪ{Ӏbpcc*V=qC2@"z޽HLt$ۡd( 4k# ) @&ɝOHޣ-C> a$)MVF"m jm`'ϻ>։b Ԇp ]`)0н\+CsQY&y1d>ƶ3 `ؑ "/E=;3*<'5T=4}v$ ^=IׅDcbRdp̽fg4&9mUJMW,Q]~B[{v Pg}ROk8rt=. ؜oKiL5@C!1BlrDeNwD` uR@s!Os#h U\­r7Trk,> UD9Emmm'pK~Bgf' ߞ')_= #\U^&'Cy/a2ђg;-RgM1klA43i k:_9XrmԀJa& S! :XnK?tD9I?Sm a_,w2ݎ|#,X!]=vA=_,m80r|GZHo̖ (àһwNRZ\ $-a˕H 5h*,'Xd;OJ2VdF+ hRXyQ\QU>s #Dw{1P?47`H~30 Pw[gvIL_@-BXRT8>ǡm)z%]M勝h]CKf՘oe7" +ܥ57oިo2Zs ɜ m}#qf<(-iOyp`yf ^u_iNQF"Zn݅8i>V^ f6 G^(04e͛xaiSN,mK Klb_gj85j#JE2 6u.q71[S4$ށq()vgV{ny<9N/Qh.s6 cӅ}Lc';>b9C̹^(>#]X=7hPO |Eƴ=*&7<4ڽ@D'`ZM@N&̕cne':|F10g[!(dpYW¤sZGHጤg:Hm" @U#S"h˅W o43llAo!IfԦ[,xQ!r^K~@e̾1IZyfþ_Դ:(8b0,\g4;P_3wAAA "UցG 4|G+k҆ Mduy\?ī1ZI5s8N͇.$tLpA/TL10J([%:L(yvEY;K.X:w܌w 6Nτ[ K hT̿ZWK6mS N1dyDMgr3U ۡ/϶oe7]Yi'm>L1;`N!N*-X3=4<ghB@7իELfӝx`1Cpe0('H N+_@IyC3K8*N6.v^ F.XܛDm< SfV\O/aֽUXfnhS-F73DӐqfCha-;4]^'49B_v.=d{ *պFrbPq- ה9ka꫇;`d8WrX8$͎ EyH/ eVV s<$T l1a'oG,<;7.71ГV(  2 wB멝SV`M=}UBrc{Fjjq&N%@dJmI ՘ zAlC#T74t0#r>|jrvD|aFPw3͖Y@6(Q@nyy!s!h.AJc+ߚT‡b`B5O&Uv;3?,dpFn g>( 5pmj怷~(' DZUџ-Jm=_o@ЉeoՆ^gؙ hrG-3Bֈ׵KhlYTxp), 3sA/Ga~M(.S& >^W8|5. N}&sh2kv!4~"۪knV"1ґ4> vjސ&٩|hܧVL3+ag{8^6 @7Fkti%~Fyd+#hh.opHgy)^I7^T~JvD3?pF1rmBm?P}ɔ2:,Z,):0 Tq͛e[} /La B>F`@.YJ.?-I]0 *wez[駑Қ^{C@e Lja!"͢VA&~,ME+G-5_]%gs8@AwաLC>-m@8K!mj\sJ8֝8f.ס)/PK.k\K|}s"8 8^;֭+oKe9a]G]);rx& PI{!!Sgb\^|6d@qs)q'|ZurʻduaF_n_a2ԁwOh0q v p\w^7%u?&~< #?S'!10A;,0 Yhp~uM #ǿǐCJ؛qZEw+n-@G,2KW҂ZcFE,%\J,Q28Ios~%}H_ xA$붩] L6}q,nhxh,aAm(i;-msqcb-?ѮZNfNd@lR Z}sO6 \[K`qkG\[b[rU+6' pMh?|.5“K(p%iiw%5f/ΚE+Rcw:̀md\2D@VEbtez -1֧J-=PL˥3(WG$G>/M%k'%?uƆr#|jyfp6+MnZM^p|w׆ʤؾt,wHoP]XmN=;'[o#̑\H3G.1js+yع99ot_'fowuq]`gavI+!i %(M˫lpẰhv[E۫d(>zV\ݨq1Bݥ} B8&Mrop{KwEޒ=Q ONkxw&?ӒXReC 1FIO vGs,^QsO1<i([`dD^mά584i?1h#!q+d,h\Q{kx1`"5HX!8ڹ5SH_;^B͡J( Ĥ(Tz_پ7-ụ:$BQQn%DjѨF ,@F(L8T 3x4%qej/$|n%ڹ*?{û.P +_Z HQ8..@#L[fec$j6Rki8t -t3i ϧ⠺2k 02Ea,p Sq˥ZIt`RZ~<[O `$ճ60c2"/vSN-N\y\aйu!A17 @U1)#V2[%z7pa}O OMϿu`S< s2zjdH*8FM< @Ɵ9{M=O@8cfY.`gQ1Vt` 2'ong~#/ *G OJGp؁SM",hJ3Ow9 bhCtn:EOPS J%2Q-wx}ed3oE,qeӗ |zҰOO&Zr7"gLQ,)"f}ClvhMBj볋srqT V?DŽ­(㟟~L!;!:a_9XoE:;2j:,oSnsKo_i#t]-A>,jz +XAo0.W']JA?ʾJbi)+,fW&b ψ zlfkpB-e Sw~q`*'>V#آ{d;O dV* R7JC#_#+\SZmdI* _4 z9Xe-2ܜI=ŐPHpX)s}r#mos|Ҁ'P^Qx1gxYGS\G iIi|]gwD,,dKmr~/i8&6_؆a$Rtv;ٷYu,_1gOuyYgc-m0q?٨O$:.=xw/ܑ0mX8kxcȒ Mˊ3P ~Q-8|pd&\H(@p ҫ<|,~9njb\cƎ:Rb"ևЬjqEQ5[QE+-I510~4Bqw>M  #gl9Бalh{#H+ L1 f N}:%rmFP%[-sO dxGp阧x0*.A2*ޱ;NT=S"a|P6 Pb\@zc JjOR) _MjF}(+ ,.ByyF?N)i;eJ/Ũ3J 2NsܰJCEAºEA y,˖\[՜3;d[ka[yS^ZOxf”@RC{fۗ8柾!K 2y)-,~U9e?oTh۪{j9hNzNɃRߒ|oHQX_ѩ9drJp/&Ѵęz`݇X-( _L3Y«ޕGx&pb9X7ݺV,_&B/@ ⋰N=v٭\b_CVL5p 0Svqv;EC&bbM|{ N|Nڝ.dfW %@WeԞc9+}RT Jr!{6@UWC~5o|۬&52ӌ2ɔE)4# TlbIV5,s 'RBALm,c-|.g;M?.{x}nX7KzýײNHE)sʧ1:z(Hy\0%YGE'ءAx okNƈ=de0:r ZB!Tc`lHA 3r 4%eF(J]T$:c pvkVfGZ޺ڢ #h9Z`y\6@*3q%BnF̯Npk~ofHb%hN+&KŠޝQ8`#o+Z)$ J^vP} &  f1"st[' !]"eI"a{9Vw8 ADX;JJ{`r6sOu۪Q/7tU-10)=M8 ӟ13j%iܮesJn½!} N鋎:A7~^-ƧB)xH|XyQ,.ZXDn(MC4N<ιY];B_ȫT&q&7P=3T[?eLQ2{΢ec}OVQOg4Ɛ5>ZQ@Sk~A1k`*Kh'dKr ɟ'+Pl-!pexOEML3~a}teF;ڻJO2ґ.1!4 ʽ8piXhCqH6yjϽa{_ GG#$7pg*@ {UBIz 9v1,jZA+R |JM:N;`G2_EޙPc24V<[KO8ޢF~[$8 RX܅Q]M^# ,`p"e}*$blbEJ*hKS2}n zN翍D={OoSF%q^zeޓz&# *i"偔|@Pq*':}Y o%Rm8 V+2`,5d3d{:_NWI*knP نYi@Ru[F"X/W54`dҦs;Rej RnpD Ikf{ƪ!DA7 ܱMH0a@evWcb5}P2 Q#]mees~T-ex7FR`*Jii[M\G"}&4YA6AVعDSDO)MZHsb4Kk1P4.XlQ!X'igR(hSq=?vl,|Nr(\v=5?4 !Ϝ|&/9uvVBp%u܅_L fYP1T'cvy4ĻУVOwDs 20a$SG0J{7BDRB=>%gjs򭊘I(Fltp̔s;GC(Xde=շ]w°ҵ ^9S :IҶ8߄⢊ߢߺl꾏l)ХXKP+B"d9 l2]\d]8 mo[G[E<%蓹j-8 ]Ƭ8>kzJu8_c?]:.װ `AQ?ŎSNz[ vDZ/C'K}^YgY0 ax;>{G~!"7^L QqP z8&tw߻q[⣾9΃1_؛"}i4RG̚X"w%eõL&y&n> V4NH.2>ħ'Se1LP}%~:92W?u({$慑|<>+LQނ<D!7Yoj}FtOn\Wi2Uu]asb"-ʱ |? @FўIOr>Y9(*!olQƒ.0|^pܯ4Bjp̺* VRY3-8x1|^y0Wܪ{]]8\u܊W54!R&\GK#ޛ*LSz^?gbI@:ScGщQikߐPoD6m7uwv&?f$+'Q ޯ(G#EHO״浏>ɘURO9l?kSQ2N,7"l@*JL\Jjom!йUnخir^!Y?ir*\CΟҙ9{Uc‡y깾d'fj~ZؒHԪ܎9I=D72-DλTqq@CIRx *B |CNE""iwvS(hǶd`vӜ7Z.n8vEZ4=0=r-=A,= +O;`7ǃu ;J5LG~PctFb ~ȿ PKcSFRo U3[U^1'.S\F?.ۥ%4f¾캞>O+Ԍ:#%pG##3Ɣ 4"DUdS[~_ʬ𠔪&t2oGg6 k88nG`a5 ]:$v'V'8BӓldL]s\z`pS UT0Q4ĀNۉ^v])t&I%2Fȭ.L}1笞ttl4pm{=wX  g Jaj|}&h^bk%yBAy1W9?1c6cˆu4 D4j=l@(ЧC㣲' 4A @9m_ d I-Bxu*~r^eFƿ]w`Ccn[ M*I=!f3wxI鑯YՍ.]3D2f0a{N: vNHj`Z%;Q\q7i d05f0NkJ"FpZ(44زɕLbwlm.;J܏< CN)1e +6Ð>?ϐRv8bt*4dq'\Uj+8[2BC<2q`J%F3/Xfk`A߃ #2fk6H+9.D]$5(W9 m]a+ܸ"|kѨ?L 4ti/V@|<9( R5 :\/yϠc'tP:J ̖z葋)+AnYYBO&hm JwBp\0<-5e.萞ROV״M !rwǏL:aj.#g:զE1f_j7J rEp7+3L3&ה!j/*f@eph6L˨?GY$8t~-FĻ;B,P2@D܈7y{&J͍Gy:Kx#g5%6ʭx.7["+Z瑉zLH? ZS`!pq+qx$esN/:ets78E|%bĄcjMm#'ph93V;8lRb2?{_?mT[{Z\H~&||.$b'i!Wn:ؿOFr?kҊ 18R0ilyHMQRK *}_,xԎT ^w[;4)n&eVcokHL%%Yn\Gs%0%#vxx/q#ΆjِfeWX)iמ=m a S,(Gji+Mp+؇; =GMD~6 a-l%BJ|O^dli(Jfծ_*@]x"R5I1ޱsXR@~yC~}DaZ.# /cSW4ӺÝ-6f_2 AQ8|X TyIB[3.ܖfGb f(S6eu?4F:ڄHm8"/%}Uxi:LVRQ`|?'׫!=6osWfo>J{u)'Yu=fҫl_CC+c;IC-:v|Y#J西}+hƍHqEfB9Ȉ#Lfn=\>H^̭rFMBt=K!RqWX_M5?f ӄMĔzl`f*zB&g;i8p?\qA X:A0aoScXR3eNlXn~;;nZ6ML.;=.OvO N*݄04+kIV̀ܡ)B]U:*ĺ@Vq1nB67NDPK(.&'S%;T,KVp8@ kMWe0-fnbaYh#0˓\]{N /*+G (D ?T((_|w EAH;(qPdTF(w(̍ZIvcԛ5UڦPє{5ASs Eo5N RZԤD{3X@Ʌㄸ^Uʝey\ s,(H=N+/dJ+ci_TN˱ NdžEӯX\gUl "\c;9DԚEݟX> Z$2Sq%(L> M\SAAQ0!{Kx:FG84NG%BS}$͠/ ۴`%6 (ƝکĻets;ltx ٥YLLup Q}}N֟)MWK^B&MxjrKܑqpSzT%eG2t-䠖jZTs%.>&b}e`2x=4/_,fli(oGRAOdf+,LS5Xj${ ټc(ppf,ds\4AqQ̖d+\o<B%=Pji$YD2;Rȶ p/l=m ׺y1J3:B},Df1붥M̄/uqxf?!%t#҄1|vRY=Ui!PZ=ecH1А$Cj㲐[M_% Xps8\8x4[ #"mxϲxצaTU!2aIF.+ce5 9L[;JzTVӣ0r>W(L5 R^BÛѴDgF'(9{Hm"DC\1Cj6F]ͯdD!1Ů08oNS J8HӱcH񅯅3ԋ̇L4@L!v"U1<.d.{O'.L1F'-$(S_WIWs ^tww.pZ0jRPadsSMatIn%IЪ^m'o 7agatT<7Xq;z߇9]uj(y`Apx̀ہN =b$y|Fe w"8و'52`_r|$N'2ࡁ$;ċP˧F{[/Y[_f&nuG\$V˰2g33.=(Z#0 i=KٌNYb'&h&?<ʏNxp;{p#ƽ%eػJJ;|!͇OLΫ< p'=5I. xai'-1ss3q^0xuņt;024t]wA$yPvD/"m( 6я3G2x;o^rxVK6Ur6aj}kMICGdtř4~[!83O^'5r֞ f!æX|CwRnFh;O7: kO<%>L0ғ(aA+t"tĘ\89灆p/P`~œ hqcv-A HCh& &)q3G}vvn&B5 C&*Yx*P02{|Y |Gā=U>#umn=r-[5|ngeWWbj^Z횋.f^ĶJ&<6zĥ ;!A| Dpw>})N&4@l.(tC&fVچ]J_d:;= H^nEVn(xlX1'r;'IE%S]M;%V\XZZ 0 AIcȇ<^RU&*2q2(Ւwٕ]"y}6NLqx-*GbEq ѱyf} &T>e*a6 9<;5iS!1l!d0c yB o#b2lG gE(]>z]N/k$!Icb)cbmO *BzgxÕsx|JCHJ+ģZ9T jyYoHJrr2 6|hՉ/W*W]Sb;5k*lьhgS)'YԆwn?ЊiَgF#䆊zݭ4#HK7nT=[sx-ց(ȤJau/v LiC^)ax>2?\DJu\|Al!nFFb[#NL ǒUID >ӒC"=G.oyBIPzYCoSA%%uj~AĝQp$={m;8E@ƗĖYCz5. u;}Up@.Fw)DEPY&𲗂ŕ (ԃ| q?LNF1A醄ƀ<%\m udMGth696!O赒QvalY3JGS=:iv:@I۸n䣆ktD{b RC᎔Kj~N= 7+S15Q0~d2(=/Ji˄d'a wf J_¢5j>΃,4FRm\f$m։Ȍ\jv)" iaGH'=QqIJT-@z+>Px#kMT*mr+F]n+-q$•I /gJ-B];q7W6 >} 쉝,7Gj#\墼 V֕B r rb99~n*WǶ~ڠbۧXTS8?O` H]s Wn't~gEw&Y7CrGP -Pr8F AH*&AFz=Ű?ڌ;"=ocQm!W,C ^qɮP=>lOGÞe]PA勖mNM IjbXiWI|/izkh>;Yue$%lDh]N4_^gm`j[0Mڡڦ媣U3# uuweذɽ`͗gQm3YY4(VGeXwY7Y#@1hFkzRSov'@}@dBڿ&x/(R0 y̖?HMPG='@D_p(vO*vGa{CyPN(v6;> ʽ==GS'z.X Ej_ݥhh nʺٷeX$T+i}b Te+,_ H'3i,ޭY;ȱ rQJvj @t=^.ϞwuJD_Jƹ]t!A~QA 6F|YX\VGܺJjdI'cf<+bKg6c x×eIzWYflp3i->4e7<hp[?mpLě,}[Xe7B ̘o6<݋eUT[ya-+(z+>X!,p3+,XReߩήgu{#kI N4K}^հb} x Ghާ}L=Y$0n>7Jέ=TR}ADgm3p?T>[f` E3m.+W`SX\F9h{6Nm7':G/Bg%p+i%'23n2?k]<7i^mdNĦ>A@dmfMU>d-4ɺUw+ʶJYTHS:s 9'qJ!"CZM”Jumtr/Ն:=!52.07˝euDpGTDVM)`m-Y?Z9{=F6D)y fM8|{技ه̇l?a Bm~Bj 6'+ٓ#iB8hq?IaD31`z5=]T-ҸyBiV &u.fQA1LD=<*-Q$&~uq`lr)zn2< 8E]BʎI22J_>ŔaK$ xH B&^S4 g%*{N NPmHV"v'M(Q87Q)bm\.@?:a$"1cUUêp݄(tB@4<]ę?,4*2)6&F %W)md?׽te[06=`ܚT5/-xbƇxtaՑX́U~ Ebx}<qS7<`+f(;S'5i9`{:¥(rJX`_4#7?sx>ӥ'T|uMD-7 ?`xĉE&\W'%D)YY 5H5~(;e斮FMEI +Xoʷ๚,1C}񖺦[]5nԙ%V# )k΍*h!D)$)'Тo;\]'K~TK ohK]3zZ,łUl7;'7Μ@onJ Br "Zл#x "z W8$utj6B9wd IJ/Pa: @vt+%0=huOn>ߙLfe[Y“RS6}{wA7 oS\wa20̖GdS-TqB<Ļry6CdG<} Ԓp:5% \\iR4nt8r/rD[ ʆ-Îԕаـ<+(k$4+~b;T>[S0zȴ3(Gsu6Hb Ãw&yP8]f:!EMc2qDZ͠P|4>A3UCZ40 n=uB|[ڙVlF6g}hF+i ;Ґ=څ2 bp^RM/:ʥc_u`.}3h?ؓT]Sw4e6Gdh*bcwZYiзd|Vթ' 9G̗pN':{oYmM dY عߚK';owDAc>a#OhsNNv"bF]u ]n-i92YGy:q/޳r 9>P?ݷ68;!10 :`[+g tMj̯cϜfK"k۰'J7c=ı1j9hLs2%D_~h]v4y_68=uss1c8șBI6Xe"oz G֛b(45Me|"#M fC\ENqyBygLuDwf=)GpN$v0Bw̜Z˙Adg>^IrZ kr5M*/p F{b9[h]'rwu&7?2D}c$#;tuq"M@b,H;IUMXorR6 VjF%MѶ۫wB'4.LF_rR%~m1~;D麥bduoa0OV`c-=x'YX X1@/N_ˡvYr`*UE]\p祉ƤxCgQC7& 1~#|j՗oZ",?B s[·-n^K?X*$!WV_&M|h8cg;Btc&e2 g*3(s*Ÿ%=Yu0'РvnX Bn)*pJVl;V6Ix 8`z=2 :l$p$?,֭t}B.-< !5ǻ5!<iԛ[J+Đ$4*8=z6ByPy̜.A~BxssXs8G-{(b.C8%Q' 7 >vO5.Yιfs8.08w%3;bVke嘒f(.8?Czz20Z Iz OG*ɀ6L㈻JCyXBARƖ qH凙}T2q͌x2e,.q#k%Cb;KqKi%Xm%DmTXtR-[;< LxX{gZݼ3jI搦шJw+ܟE/Ӊ0$ݜN2Hr%3p& LFh~1c8t ()ZlJiAbi+u*n}j6lN,SQt*$߮jfRx@Q4`n3u\*x X`Wr/<|`cD>,X>`ߟgZbe5v|pp2;VM|G6k'uGFS%o2<owa Q'(a`O t5ꉸ-t{.+ꦚhn3ڄs.ݝX(yur]o^J{y>QQi<CM-OPтKz'ד$Tv H^AW66ԋ&꾚<p迥r|?FkQxt܍HJwj8 dTrD! u4P')o@lN1R~r""u`} of zѱF~T` U@Rj7#] uBdXGsZ M b}nBT, .%./ a.vA'!v7OAֿBA؅O!8z~ ztG_)t fԄXcc5{_8U-$R菇z!ByƜͤU.x۸ka15|fJN(P( LېNXeԾ[*;o) ]mĒd A͏_X P̤dm|GPTf#7*;Td]T[)J Sjx}+&>11E833wpQ UGEMpl.GS"'j!nrB_eBج[;tka>'}V(q8O1UlDP#% U"K_#lP6 :Q O,w^5p5uS$/r$Ʊlj+&R| yn9_m#u/C%-DF5$zy88Jwǹmd\Z@,ٸv5Z\hKMVM 3X| zu~MW/wĹC` @zɋ:}Kǎ.5!LGM$omC!ppKy$쥾SabzaXlU{Z蒐Vc 8cpՁHlEq+sI in %Oo,6h =&z`Z\lR4j}GpyK~VYO;գؾrʦbBy$Md3ǫsw#6frBU(d7$cqfݻO*QI. QpKcY')Kd[15V_Z堆\~x4[.$ZJ֭dJE{')N'B Zɮ,oS!aH!gߙr8IZ ^Q0+$nXd .h7 J11y~~|Qg*sE]DU컄aKPu\8 [ِO!# Tjat0bGL$z\w&To[hc볳 R>LZ.|qRbq@x8:pqm⣜Vݓ .y* %SDʶ$y^{D:mu~>{I2 ls/FB4++toz)2fi1=p/}r@uH wh$  h7(E4xCl`BrOGy GB+3`)֎j $ /RKQqr)AD<ۥqh;x*{3=.Hߩ 7OqhL7Q0xǜQѧjr8}VF}$̤ouqu'#JPt .bX`Hd9 ,F?:s&[¨T/8վw0m+;f2vF&9J.+rB2ܱ P fOsYvRaX%ƥWEx xCHJ,(!'"B8?u$-z7@(#GVQa2M~z&__ddnl8~Bd? F ~:0`PaIK7k>0GmN򤒼mBJdƈN۶gߣ?.U~= 8*h{W01,พ)Ȗ_WM4RVkl'jn}1H?}k&>3tH29x Aƃ,ffmuuK`$uIe:Y, ),׽ċS釪C I/dOz׹#a'DS uq=#.^i.b"#ӈɣae2T`=C&J?!)~xs^vn9-?SlHMo敭.x"rcΏX?i.i?i\ur8 m#ro ӱUM*9B١oы,}FEkw'\xn߄+nz*5'WͩSEURר#Mg]y##tȞ;9g ސoO%dQOTQAq͘"\V$bCYE^]jLG ` b1LoKS*~3C4c`a_/:rBkM+kyF~OYئgQX K/flý{(iF$: p{PKԑs,1sY[, f 5 T/:ik:zh(X+i3Zk*Jb7VJT'ST8,J\ `;R YѴÈ1"qcTL'2+2Ub1-T3iL! >?-9{h2*fleFග} pp&үd›Fʉ0J@1BtN^v_)!\` # 0'"!J4lZI eҚ6R?M\(0MxrN5|aP v*0R q¡Bjҙ\=;[fMk_P0:GCFmȁ-f $χعHo?HojԜf/#MPvf%fG7YskBRഥ ]ڛ(S"X?܄_7).U{*ՙSCM LO^YϐosEBMޥ y$ + ]= fT#t FW OTEH?'HdwއPF޻(L0aSSX酮k<h3_0G J 5;9v0[lET +1͓!fMF݆^`U Ö#  $ OƦ B̸ꦪydom=G<هoJ@o=V҇tkƑ'5ʑ`|UYLb,JM6n!c<"^Obtr:~[Y|o+ZVtj$Ogdjrc.>7ٓ[ȪIw4;4~nAob0E׺&P'H$C/q)l>B/P2^=ܶv[G rJb:#(fnF@`imGD#6qCGchRHG׏ćXNe1Q[O\Q7sT?gJNx;DxhiGbM_-˒cM­U+[;I$Z2i)OI Rsw ^_+}.W "!",AS4Zmvޏ=) {4IΈ_{s~< P12_N9ǰLDbߌ7"/5FřRX:{|$򛏐aX (32͠NKĭM'yi.m/FU=w9"u=}!z&=$T3֤|o3*js(kAٚ!4R9=&?Ɨ⪑K %H_^ePO$Gnr6Ƌϸs3?t$+zjfFv> F!4X_8.@ioi]bt%Kü~w7&|qܔI!ehIt?j3c;_0Ge|80~6S|abc'5檩f1^a|E]^7 G5ffƖY XBa ~~䎒@L N$HAa?-i{hQbo; Vn(Fo~eϣyib{0Q wMvpU*&!?شBCn>Z`ϻMz ,n, ׮?:(+/Z:^AiP:w  ] ;Ά.xHRR!,.hEg课g34Hvֵ\cfz)VHOɁlɥ.۰!/DZՓR昀(N")8@<0!پ=뜭8Co%°H{6 yT 'sbE P|m,y >:n1aRSG`[>S:Lǖ -ܡ%X:.5KVRy.p'L:G̹=q 9^į7*4&ƛJQ" D|2DCsr}!JmLy)0gAseLan, ~a74n@srcqE:YMCEcPb^^XLw,i9!"H_a0Ն%z(ogB Y*7V3|GޅG:Q Ǖb mQbA_`l"OH\s 3V-3= ` !RX&Y(*<ݨӺx6OO>ܫhMePw,1g.nbh J zGnE pXRJK{yv9  -k$5p! d~({ua_!J cu}jrw XW*F`Rq8s=ىt n T0 $n"W1"je#Ӱ&| %=&XEGa%P+[p=$ʚN@ؙ b)1utpaЫ-WQի{BG2o>p;􎓊/B]z{_( ơ@RlBKެME)jT{Ed )mIme2 Qhcaes-GZTUJi.rAH\ yD3$`YZԪfbXc|x`ʭRi!KOvoKz_}EjRpA}&4lgmJq7K?)V@ 3 m:\.9t |)Vq9 }˨_ A8dYziȇ82iIǐNR;!0^:%:Bc1!r=P\7gUbf߷6B5=l4-{7INw)H` u8q j w۾w?jLk*=9, k"Կ;Yvc#9^u"d[/AղvwJ%@83t($v_S>njedv-bf'}^:Pѧ>=1C3~]56ji58,P63Ih6>f JM.^hn0ڊq]={z˞>^|:﫜OU{ ">$[% I!Ndm-0KR=6jZ9l!a3x ^P0xtGa#^#"ܨdpҸ;-f/Hy Pŝ܃U#V24ƣ*z0 wSb=inuÚO9Kd^ɃlZjS`~|.d8ZKz̍Lm]FOkvi?ϼ h=oq2BU2vV/cP\tV=4.rb4&iQ.uik5ֺ?.GX;饁GHA#F]I8& 9Ȉ U1=DMq[o_o\澦"{MHҍDFمnlGGTWH '%o )Aѯ$H. YJc4+)v&QF>43XD/wwɐrLW+"1F7R=݉g ^q-V ,*ab/la^,ZK3!Xc U̺MꟌ[INڮ!qt00bE7O AtgFó{>m= O SS#qh5dmc͗s4@ Pao2csXhԸ6, =ĝPtf؊d\즈C{JF: $2+_HJƦ1 '5(m|௼U'NJf=xDqC'oܾ!O⊽ճA\:S_hlon$Od-\A.!b<|@q(Kf#^5D̰^O[z EQ rLw)eD$\.Vi'$s>xSh7|pbON@84'on "=Ipݳ]2wv6g;FI'c~4htB$] % FQlcYvFREN܋"Ϛ]'.g^=j%9c[p$:+)蛍-0-deqY F—1f%VupF%{ki= J~ۡr]BZ`5WYJ/hFK݇~ Z\_n(*HfK\KѷNxV#*Tch%a4ll-qKww!Z!ʧAi Mt.zht+?BH4AWzkG  |їED"56Ap~ê[WD>CބG.Kjgqtƶ穼fS~>'$zDNa/G\]+1k<2?uc-l'I:~$ *>X^L _ 4JSO'xbη~\~VKBm/&s8Eu<ȣ^Mi?.̅B #f^}v>[RK|}H!5VQTJ3'wXu‘ ׽0<,1"Eߵ¶PZe2p߃6ˑC%g8ip~Tx%R0~ (YD"&xKϪ19rgF+AˇoyYc3rĶ^Ƹ` MExxtUiF:ﳁ]Lްв*B,Y` $b7.+u}Ϩ?͒B0R]:S}6"4OpI0@Υy-b{wHOօ5ӎ5=hrKe5}0 <@ T9J\t$fB1hF9miaՁvWrZ~2–AR oBw9U׊aR &2}HsчIjlXlVEi :2toM󞬕(&Pu\$uuxsCB/ ʘ*n` k^i_>j/ N#8dbXh4 hsWA~pbS4,;Gegb'T {de$=Fi"537I"" pF ;dN{9j s<2BY[bTГt\$̃ ^䷽dLXo U[3;] ޶1Msc?a RTȐǸԡ+r1BxZtBp C0LfI/bzDzN۱ClGL {RY'>{H0fʩd9@)h'C"ּ$vos+Cg;ÁS~4h7j/3fqꥧ=V9B:GHdURP*,S:p鬎hd)t4ZMn;G&<<'\RhZJ\H<&bLӶ>8buIg=IH8^!Cm,.9#9 Pc Z8LGa\~85aVKF01k`3ϽLC/=DÍ{vR9~b,sCZW٨6acyÊ:=YOQxfIRƇ"x<m\oю2bb5sJL^ֻ =ݔ TojS^6^eZs{<# |Q\[h=Pj-FzI"_9=HO2ibnpZ]]IjEɇ4;vL龣# q9}xMFȆͅ?{!S> Ect`7"Jט8b.yD +P\*w &̊ҨC37x!$)F Lc]?&@EW[د=WOF^xQlڤp^jvԖ3?L~WqEUNcpF7GtrԻP> ^Ð{_]cN˶L6H&,f؋o#.*]y/309$\ /܂B";s|9D5YuUcͦ)c4Ld͖j7$ZHˁ/cpJU "TtBi9(>gn_`AN+lCA9!bpU;~PQѭ; +e)Md FNX\0:~H$4b?H.L큾SycpSP/&Ō-vx@M]s@~$r\lzA$TTkYYs @aڦ(!rx($p/Q6#n~W&UHt,9t1&+W?g$n᤼J׭~[_6ﵳca1`uTԷҪ?9rJݟAX#5B?Bt/ #} M!.бBB~8:Js;l1G> MUk(t(&tGk> r,ݐG>#M%JϿH Q=_qrUfD"qɱ;IಏanV¸Ȝڭ8FGOSs9[mK͔.fK"L+1 flkDKL1Uoi3g"12 #m?_\M҇&[)**Kh*V lac\e_р7 =N,^Wj6vZqpkw-:<)?``->j4nF]b'y4W@@Tr{?'YZ]RrxZС( 8 mPpU7υQ|9 *Rp:d@%%@}k1 (0zxw&]2[p8"|=/ގ0Cr2KI0 Wdw&n(">.F3bBF #Cb3eHg.g}h8wI2 M6T&c\5F):fkf/=!tzPGe 6KzTF%L32| KGi ! UCbv 7l )[ȧ 81mIJR;W)\wǡ40z⋮kuq֠dz2c ٙקah7{^XIr󦤏虺z\ ϲ{R`A ZZgLe NЂF'oL7[! x^"a/3 $̋2fY~|E3"өSoD3xj漉s&yT?OeJm 7)vjo4Λn`^:)W-f$HiDVGz()s{*z5 m ;c |noC?F@ͦɿ /- +:ǙC!5@xa@g: nԱ'l"AߌyBr]U}FȤךZ鄹:0z^#Dؿ'>29x|pg<(6kSMM6gII"]όosHp[r[<`R4X(Yeog Seu |n Ym ]\TÖ˅3;"`sb;3PˀnN'rIZ|QC ~|UdSbjg3;3o^8zJlx7/8(hG+v,"W̰U \%L R,,)ƹ8HT *? U|t~=Nj 5U'O3C2^D5Bb45 dNxP..O,6c[jy}gwϷf ٌjƛ-c'ĀOu`U-"\d]6NZ'A"L)ʨgIu'MGHfir2웶Tf.5mq1lQ]̤o-ߕĉ!V{]/XϢځgod$=QgNdvԼNe{vCf"f\'mtdɎƸ{MKU; AH?[1k 2,oNj)a]7-Ԩgs0oDN8p2RFRZ Mv z@`ch[ (Z@d} ?$;yh^Xn*iD=OrLwJϢ9 ڦ]Rh-#u!k5_MMF)eBa*:zDu  pZmkjei&aeuSr0s'yuSLˏPh]mg~zu45e GIWǂkPUr䃺ފvctf#ýC +_ */\X؅}ѭ\ ?%u`kaŸ2h ȿA+\kLк==yZKQz֜"- 昆tQl6fs6T۲] "6#KS=C \5=|5\pd==˿P+B,b.aP;xY?-0H .ksǫ*!Rk6Ala\(eWzog "MAÝqþ0'qsiR3훷oz{VuΣs+IlRyO^[ת D1OgciX&ؕm-ݜ!V]rCeCbpG#݌uRE7lN!WmK-F1BjSjI?#CHd.@jqE#y*=vVf ;LGPnE!ׅzr>Fe]9Ok Z32OE|vFntdUTE˓v19I5d:K ˤ8ח,XLfmB0oFjM~kdr:ҁt}r|.YA KTL0 0JjūT\.CDoo@rF2f_8D:H 79z a lbw+|'|ǠQ02Ӕ5ӘT˱Wu([e>Xo foh!PBbڴsn KSq{(3PMJ43x\^ɧ+Ycub^4->, 8@ˋ'ec¢]|o[MgV e" jd qugN_bW!"x5@+,ory wKURFC|CT;AcڌE7e[BSzkmTN#?=z;_i@۩ *&B c,$ݼ;1?_a6nY*$g VЏ.ǬB'lu;/^6ĺå˂Qη" |U ζ%aG14w&/ZS] O04 0nDLt^og?UN&w`tW9"6w3' o8ļjs%֢]}xNՔB0*I)]JTTƪ?}mL3m|dfAVM"d IB7\LǺ3{-@4^yy{^[W+`p `jۯ^PlZyIy)ī 7r_a؋XqPݓ,IENTC)h K?3(<Ҍݢ0_W7S-CG?Ί= Fee `~}OΊыEL6?I8SU3Y_|8|&g}7#,븾Hێ6o:*qq< ik!XP_(mQ%e;NT: pfu-^K)QIV ꤠ8 р{{fJ{[@yJi0^alaɈ7nFgݛ=@v=ﱱ2f Γ<7Fyrn3=Әѩ1v"{h@ 6>>W2{y+ZX\'58%/~W^<4"1t{ ={ϭAl;B,7U4. ",.0i*8!>W^Y>TU݈'N <uV:H& S-+3Ӹډ:DĜx;K>WEIm* r)5jbʼU|MbwO *tn: r LL]4W|=v ylY^hSKJA\wMatP5 m>Y &ذh)e>^ a-Ȱnbs?=}J'uYW pc"U/N%p<ֽDtZr89RTԢG*Weio$U9,xRMX W#&6~k pcmy8$ 0=W胅 ɼ{$c/%jԱK:>'ؙ/Ժug_ W`3|XMU3k[0\azXu 0VYsZ)׹2]C<7P?sF֗ wcbwLg~_GܮV2†Fjia{S/C_&YsD{l|R7L̈́Bd`J 1.aOhAO9e6$*yl3q)DN5c3i0k|IfK۠ޒ ;'T3@s39"7;|uB5k$2,[C ,;6d*eXs}ÌpgƐo!9 ą ;tN$0 ۑwu a )5r.jXJqu4=za~b&5 S(x$gE*/˚IYO5G+&l6(P׏wHc@{S37%@7Fp Rܡ+OTX5qpawgPȢ r Gj;~@nLIh"^MqB9yyyD@%($E5AH}ѤƛHLX.L4vΧGX5.oti_\V<`ז|?Ca/rNֵ*sXyٵJ9DI=.5iVQ[0{l907:y᷀B;*pQ\ROXp/f&v1 %u/r81yy L,)pIҵ@mX)ew oT4E1kd#;JR<T['^m}Kײjjɍ4 S;kЧlPRK#{3-':*Ni 0+0$jF8炿3Y%0_ %*7;jg?EJ;?!d> ||zͥ 3;G8dIW>n<<;>Ng= uC;S }%!ϟ<<k_BzLC=`L]z9,-.s#Mg[z.ӽ4!2TĵQ-y?jajBW@oDFZ.`Z1<ش/OZVEdˣH&ygۖݍN*\Q_ ʄ0_ @jphf1o( %\._, /'8|(#CC{|mrfpm)A)pދ\l@o!g>H zVUJ'$C{e7{vSԪ]u;Q*pȣˇ.y=[@'[\b[0ܕLFt0sÏ7a;]?/FA&*g(KE4!@bC6EN67R$c r @cg$9 ^zjk#aOsӃ9B>-3hr(q^gioO?-{1RٖK,A,泖'7V^ izP`FyYQǎa qYuJ׳;SPyK4x8 YMq /޽r+I.RsޘBƔ b~a-܌Zl]Y{ QO{Qaq87=:D vxO\IddD RiOD0Iձ&&c}"$[!Xgq;%T1nB, 0Wn8mK,BZOpk RBf(xM)}l SV}#2qoFPl\:ש(EzKE͢{Rq2)2W(eG.1tC2RPj%q;wA$p3>0 w,V66J.Ɲufs'4! hJYB {:/O޶ WF%#m8J­?pGZ0GR .9NH^[|fpб]z`ͯ2Fݙn}D~4 :$H'tE`5[fP@}c3oJ/r!z9bUE8=c (+0ӝ ^YeQߐ1bS.ټp`G[)WKcީ4ɚ\EUz9yn1D}pv/|G8 RjBMa Om"< '=8 RyOZ|r^+ LC߆]m*5u[!*2,rCfGS 4rP 5ċ^zU$O۱m.CPWk4cn Zl9g11X>A,[b\]>f݀'?MaC@,DofehY(QbF `CF=65iO|&u/d\%w:|Av`A\%C5Qwo03ox,8_fY/ ƺQSKߴH+e_u K2%B9@&iue!㣔Zxn|ŎAOMo~S 8+xhƅ]."-坦K/+v1/3q@`U]z{~?X6% SZ{^c̶K.1@&ʩss( {F=n'=gpLIA}^h,f9N{W-j9])@t3xe$@5 aD{w7(Р@/r}R'UY/60ە# ?CW35" 2 _E5gݵ+Mnbnj!5zjZfJX)@+8lB=io#*F$sE^ϟ<2T<4ILA8O> 4TCeiQ=[|уs?4BaK/{͎r(HGnk3 .6Rj*nF]ySgna\ kFZ=N |wU'Im'\!@|P@z_J\.88]&Ap|F &baEС7(nSæpEÛߺM߮&n^jAVV,S1 ?c Gf2qdjx|º#m6u#D([tيSN|UGKgͥsBCg2m<>4S qA8Lsnv H<"&"D a 9J:MPM4/f>QeP)r@l#9iW;( ^AHKԩJ+ hA]>ڶNL6~WK!BTxǏwix{x#*`ӒphoA1W@TX((13';/6Wƛ[- V%Fyn)aFX)6 SCuB֢= m O U(z(DYjCɛ4>r3I# eQK+g+J"0V@*RPĞ\5(S #.CRC[CslVs}9YZB44 i%| y4#:/gφ$s6G& ϡEe1 \]1$)`Q! ]-ỹ,o1Qg:1i0 1˙3 TJ*ap(,`9˦vHu(;À7O :5q( N; #a}C*+CLp-uiC70Y0f'*B< ԊYju"|Y$ Mi=gB֏ >K] 㽜&XEܺz> >U[<&@ߛV߅w=!C CvBrUz`|iȗ %KX<0fVqP#!ی>9cևi\ۡ[D=7730!Ѧ fkC G{T:Fj>0oqR6}gk?\sIQ !F  n)9ǐXX3U0?FԒ~s 4YWr2^ XΈAĈɜ fQF@@Znܕ O6`5hsnq2e92 @>,@RաrQVrgPɀuyki`w\.O#EJSf8eW퀼-KUB˘S+({aLaӼ+A սSdXX;wIYcA~O[!X;N_rx: _ !mʜ?JH: :-ڈ|zslj\N@KC!\d)SR'ԡ*7`AP$|w䑩n ҌGEuuChDN;2'8 Α+<2>Jʒ0C@{gybl zosjoLRn_aGIzKwv2MfFiaLUH"&0MIj2b}b OԻKt-ȴ^@-mcD|?1j]qR#ql ,%.5ց6NabC[ f1ā.I j\{؉\z#+t9 32ȷCB7LMYz- RH52fU#8c ߏ !&\mdcG.o~1Vݮ9*ҭX"n:`lTUl?ʜ8 BOm":2wN:lELhxM7&H+5#%MۤU.ј8S2؇N)x)i-b|m ύ󠝚RatS y{@ۺ#ilIYg[5!GNO& -ۍ8)ꒃVOT84o FJt2A/rӅ'/TKXN2{w&EG.?ݧm:s]s?o~1mLk=J[:E1^YLt6/C#&ErR#rx^M]<v=z n7ޓf7qV]!\z0Ouhjmܝo^c#bpxSKpx}Y $nC[!\ؕ~U卢{9$p37*ehbn+f[,*K dY( #<{RvRc0|Y rCeqݢE/jϤ+q08'(ePhfΫQuvloNo2 J#6THpI}RA,VY1_\(};G:qy)>Bw/$s̕ 6lbhhQ;a$=ʋ\wdRf p,T["1]zQo3Ԛ3c~&:dΛGz`@qPM(0)87\try>*Ѯx<+ CxA[pd#߶G݄RCH\V NHMG{qNX K2 wIþS7@zBG R\z,V&D94ϕ3R33C+wQ{[0Cڥ:o{mvyJT%mOTKfPieUm2H.w"t\5@C/4M9+n8˅8JhCG\ކ^(ܒ~6F{rF'v RoJH ;7ޤE# r ?9IfSR@Lz*ܳ_ۮPI0߫#,]_t~K% 8mUl3D{s@\B|81޳e2[ZeryJjd7]uEVQo^紣kpL54t GOn0m#%dPo[zt%(mXccUmHL*48,Mc܍y~z(w-5.Ȫ":2IH*Yo$ԿU.:Sx潢Ks@6i{a6 Vaag۔sj<!uDzp3"\nN6=v/g.HФnCEnJ)":lwm5ok"Zr{hu^d6˟{}Yh m.ܐDlg4~D3=R/dV/M#ߘDu~o|I)c\>c* BG ?UC vtZ%h(؛`s ȃnZC2 sCK.6g%!x'PԟViK*k)em6 %ň61DQJ_4Lh37P 0-欄%Uޙ\QEqy@SFY?^GRMNETI71̿GS/Efp;ըe .X;L<SY<f$־]T ^DhKPXm;d9ce0:Y׎&-hY}ji&XiJS#7kB!;7W̄CҚg` ҥWAމFmTѨkWX9g;1ff7c<a ;ڍ) vziaLW?;u*H&r0q<&e17(K\S2 (zBG]N fFnA¨[zwCR 3CQ6b^M49(gYz4Ǹ9#W߃QEG.|n :vuiD̹r& P* J^iH\A جPk j1LlA<2(yKgX+qi1n5*q Q%I)fHwW^ &tc"”Ǥad :MQjd ͝eؾ9CjUwD?ѓz+H(Fq>)hLC/۞Lyw\(aSɲOD41v’]͐kp/}a\! ^[ddތD6M%WlSIz< t"jx޿QRȐQn]v̬'i;%-e~-]~7 Qi[v͞{JVu񟾘 iJ:jJ`Te^ȷ# Р 0 MVnѳ#L7[@~1e؝& Ӕ%+l$j%LS]h"0RLs定ֿb$[8 UOn`@RܮIŖbZ׈/zI>m 5W%ȳpgGtpY\Pδ8 !ڕ=@ 7Wu)6ߔ CI۬~4n4KRFd9f;Գe_H{r$_v'Fiyd8qy>fgpDc 䤇 e @541!sJ ־e7nYi:06e==pC;9=WLoPbj*&5Tx'2g lq➯0+);d0W{=E 9歕S"\n# qIWM g™hhvWsnaၪ8ED&ѿeoJ7)jK1%Й9"Q9Z`)El\vpaɈ ;m2IVLg.Oc"M24l{5B(/LP:ܟ42~5ԋgJ@"!Oz bKj H;]ւKgƨ7٢5,&z(9^A9p&}^"7k[aIj[/(`l14Pɕ J)) %?q4'6ZM4X׮LW!`LĠl{c* S/-ϣR6fzƯOb!kIV ˮM=sCyy<؈c =@C,ܜPsX&>$X= Li-_G5H[٨ɸq3[.kL*1j`Pٝdp֦[p`6[*[n7=)x阁mILטxElJKG;( .6#ZN`oPTwֹ'ePx(|7AO/Yl}D$9V(Η=UŽVK m0?̝<% R ZAoӆF)"{o1΋A'֘@+cmE֞vg4x+FyS&(/`Q `#9)>JossX_uYK#<.zKNZᇮ,|Qqi+a .eq*ƔN{jd¾ID/^!sPߎ(H?#E"{&SoSN;{Tӻ@"D*0sAiSV.8Qbx!NK Y̛ _(\᫐W55t?]e/'+յˀ|~83 d1ypt C ,oPrȇ.{J8:Qӛ"-Oyg?g[8DwN(Nr@X @!?BGXn_\Z_@K^ӭ2{ )B_tn{晊l:G)IiHLSmVMm e"d<8%bQ].D=~MfٯDԈyWVI(H*.dbvѨyGD@K-uČ+2BӺV/ i"ꭖ'USMlAVxU#~vVOyT"b.Ǥe8O 0 5<TU KgEiXݪ3r&{2x'>AoXg0 >t 4xp" q 2nE9L̐jTlJ+0D4b̗c9CD>5uF͵elu|HMO&˪t&y/CKKNd Z %>*|R{\ׇ>Sc32"xm-jhXj_o7_lzŇL W0;'W@BOig#dG&Vⴣqq,W=Xޱ%~wJv&mJN˿ t V|[Dm%=,❘=%dFX޵?J󞺙VVy.|3xi +FUNW qH%K ^|}!܍NS^1gyDWۺ}a( 5Iޗ1Tz GM2cfֈy| o'~(!:W+G `M_ 3:>x*ԬK Fue)H;h"$/ b0.,':D CK'Dp 2tiYIJW~PLrlm0ð: \G<4|Q eS}}O\.RhI1(uP@0,L9J3 _tY&԰>q̋D6Y/ *p{` j/tT\ٺB,̒sR>mg==qړaHhIYEfl%G2M##+kyDx-)&$_=1Ueϳ+FJ›3 (t2F8M.٨XL5sb<1y@ o `S~>=4>m:y3O(D=ԁ/B>̝Y^Ӯq$Qņ V[YicP|`o e.ֹ:e )u> 3` Ȅ'n~DXV(ǀQۢ: '԰Pb>d#dXedX-#k6{ ho,) Q3Ԝw_qkX<7ah&LrguBW^hU\-~ ~0 l>CQrQ[LS8{ÿSq@Jv"kS mwt'rEb7=TP5 ҇?3\>"&v>O˕R?\Vp P}|@8b׎vhEr_œL̚j :8P-d!ɀ<^ gpBP\hK!z;oϨ _!P` ck"쿝gr /HKuDd&(N=%%å=M32j]苬?zqCN$} 9 lj9^q@d=̧a۳-O оrnUx&0F=g2ڮpeF_|'=;:=z{f”4^7w {fe[PV/``ϙ\,E yLX9?S`E L V_X/,=/U6Nʠ׸L`bRc)U p:i }6RUM{waa#Fk Sg?Y}IgҗKo(VI(V󂟲#s!X4/ƛtnNk>nrda%:r'G%fY`k %Z]hSGg2֌,llzR6Nӟ9!(WQJoP'F12jq)&[Fvh-MZ3ї$ H%$.)"CO+ј٢]=&lРO"f+Mŋ~N}[w1'+j"v~"W3vw  X/V 1[놶ި&1:*0Y"7P䒍ztC?nJ>xD *j|l70{: #ʐTF߃)AW c`> wrÓ{PR]tT|r9pJx.x!S8Uw֐ 7Ϊ8\W5aIh$\;P0*1[[suv9[D7 _@E֏eHyih0Bfe'c@0# %a0x#3PƖO_2@c2LQ0Pf nˎ߶H/ک=ߝ?8k^%I׃Vk:g}bXUrQpӓb~D$ GyygO5&} zEH^2~ht8abv^x0BQNgd$3Bw}ನ]E~56[0}A:3Bxmz'b# zqzf߆ؘ)P61ٵt ƌ6L'AY(t_ܯh0"(΄< *gd2}*NReiq4.'CejQlOl͜= &I}iQRRBiHHxMɲ{2lwuXx 8ųf!y|v0J;yp M5[7;|x!b,1l1mӍC.c u֒EsbBe~%Kw!V*u+S_ UR6ob(nrֽ]/_cSVO]9vIS Ov4.\oqoB߶.uPc!'-{8^s&(S٩dW:[x%OBKfsjg:awl0)J/$"[%ix:zLJ4đ˓'*58K D2kۉU4=XFC›a5]5SȷCsv+`8be-ϩ [K)I%W [[ޓ9a`5(:%Z&tC :%޼ۂ뉳Zմu7r`n+0 bu9J쏱vZ m=~&wAu :$pʅ9AWpSo. k'(w+ùv:|4\0/ Zm"glېgþVI}e$:~P"ݙoX-Ӝ4ٛf}O[ ʃ 2nz`GaEq6 'xUn8NkUs;^$qi-5J/:ֈW@f!v8-iS DJpwv\Yo047/,Xig6:䉥1tԔ=89iu(DN哶/wHEEH.p88C[ րA҇r*XB%zeJˆϺ󐡍2Nm5jP/y kĚΰ[Db&@(}/߱T5VjPidЉؙ$(uRrzѸa0< .@U ܖ`O_o#"<%o*H1_S[B}K.]EB4b `B,'"8!1t|\UPis Z7|7IXn^%8xL{([6Ēkt{ =O9Gn}W`^)l?)LagCe9)$cf?Nۗ QڤgdX|gQ$paxLx}4;Xb9Ȯ9{`28p [MZ$>Kd[#mb6,  Ū~{F9Hh J;ُ(89uM Ƹg߰kg+ҠcaY煚&סQ>DP+;ZA ͹3dx&k`MxW:kl\c'-0Ir#C꜅mALCpwp]yЕa9L#ê]BJ* NV,@#|lĜ{%_Da?c4W}w)**g{U rtKd(Jdg CwdŞfLM )bWŌ)-$$\bNO+r`EĭӸbD*q؏QGE>cft%yilGŧ-GtOP<x(4g}M-OijX.Eڟ1pRQɔLz9$yUX= )O}YxT/O Z6by5M]'cju˻rsvFƮ^s5NiٜqSiQ>]n)} 0E^uwRϝExSf,Bw%:BZJl:xTnJ0TСgf}P { ngYjz:pbY6yD^" ܔ_0 `gd9Vt>%/H:K D *erHq5P>n~p9' B]_U~V/.K˲Lyt{40HQ͠9bis1q?p`Xׯfyc{ 1).cYL,݋[c35$_bݻ7ž4 rr#gxMV##1^3@ᘀys

z*\%頾PBswWDGs#D# ِ 9s~1 ۥ'J|]-\hʜ%a3;Xo*AU&9,c9I#%Tdj~hYF|}pҼɛ3Fܜ#ټ`?omh)q|@I˵tWv3'8oYKSAF$d Z?D~ꐗdnoU|bBV4Ddkrf.VbN۱5$5 3S{]>y Cv`2j'*AROQaӨ*ڦ93=n 0n2 \FPfޅP uk>Gg]%R^3Oxй`aءmzGw\SԳE>H: ˁ\bcR6gV[RrnB O땙i4TlsJYmI?+jEyzí!-ECpO)_$HX=29KǠPcz y9K]瘀 A5]:z)*&A<)ңN'zؔP[vAbrC?DڨR˱F!tlsX%L>DF]ywB)NķL]vǺ6#\0P:xPBBNr ;&s)lT_'q׶1=>_+ ﷖(˶pm{&0 ReL^CHe&a{%3oJ#N:HjA뀈BnD*'u)O `﹉% RP;1=j%:<nKecHIu#)BT=*<i cWō5*ZR=xU}ҡ=Haj V1ب a/?%^8k ;ycO%Th_漽$K9ݡ0*U 9|\QuQ:z"'9[u B#cj7(E4MxuqTAy#f`^- ;n]K)'/? 3zP/FkꁒUbCx!LyZJ 8BêG{v[]+)`ҫoy5† Z.X Xs|5^#i{p|тv"BS#}!8 XDzdXOPWH:.?n:-2@Z,d* z5&ƝӮl}VÍZPD4˰3\dW<6AjnG(8E'f Tr Ϊ3KB&۬$L9Lt y>Q[xN"j7 R]'CT6P( 3)Cȏ(DJ;dh.M?$R  '][O NT]XsW^H51@1hKgU I˲+a{K&#gYHa1~eL83 KV@+Е%Dd5>n"|$K|W?ߝXp^Lm'Y(3K2,njIo7g#:9hq@j7̵nGMJ $u,B^{]>s³U$F]41<*8S _ۄH0b,d"9UU$U5gޢ l.NW#QAgIAՠ_ٻ2]SdHЩUa52k<+Onv4Og~yMEԤixftiV0vBz=jo)/vokM8F (׏_ESDN ;qNbAeB)4oo 'Ř Q]霪./Ф*G/bĒ2ZoָeM2}X2*zD$ rDO_)f[ςn%㲠gk(HPнQ|=2&NEۮ<\`my3kٹ5wZB'86bEG"lU3b bI]xG sؒ[Bȱ1򩯍HތɵgfF$BIޙZӮ ᛐH7CJԿ .%3$Q7NXGE*dc\Wds0r ǫp_%%UoyRHtKZ]X- ۏ >6TU a<~@O }GorAFukʰn&6m^6T/+Ɖ8C$7Mz'd d9ʄwFai|)Eq52cŰ8gx գ7i Ps]4 @BmP 4F^u!IǥK'yV:D:yZ2VG+G涧 n{hlsbID [QfS$IKseػMn8з88AK\d^)rT2jbc>YmǪNӸR1]y'JZ+Vi_azbKVYݣ n;ET/|16r>~(u6S. l2s-+n:4ca`#_Y' O/=x[eE\e% eжDH_Xzrܲ,Sm2r[86 <Ы|յXt2q߹E D{7˵&? Ly#i`mT#lod,մT$sCV%ZYD>ص)i8FzV1BVBo3.q aR%}uީy2ʓSE8yLUi#<ù`gCCt $T_d{F`H_f^RU?2OC6Ψx>+^y"6!!--D~XyW9J,qۖsZ1y<#0(=0T 6~,N vae!qnY[x%.?R+FIO+siTda-zѨ3)7 g"~"OIm20Q%黓?xk.e+g=12z.sէ:v\ȃl>y^rcfVDBBŬhA#k~@qbo ۵a:RE]#;1j A|FWsmLQS&)~G^0+_ _fހN64۱]jר]U}t"=Y p󿙃3CWpxk^.if"~K V@q6ͬpY͆|ǚji"&A'N axd`X'.d,y nqy6IH5yed~7Jtɴ[]!3p*RgtW2267gxt3+cUB}lz{uRX(T^y/Q~YQMCR8lj+5rҗbh攰/!:u7.ussgVd{NSdx~Q=´kh.F+_$=%gXMnG(ͤ%R;\owdqKc XM{C._N=Z\>9ge:XXo0:'' Q`5DPvL Y;fl>#QSW$xe9){Job#ñe~a n1 ;ix\ ^Uq>zHoE&Q|%Ő9g\\o)ʪeL?wÚo)ɱ XHgfW cx-n3neۇ@Ň fer"&lSWA3rDd=ǫDg4f ]] hiϊh߼`?_ؿ9>`C,}wEnBdb>SWvo]@fT (b7@FIdXs `J_xsS]-S 6f,]auVhz $r ,\V;=k]7kPe9mNES_p^x6QOGXXU-iLN}sWnҲ@Ìp%;.Gt>E5U xZP`K_?E!Qf"&|u3, ?=|׫5[|Aڊ#)Rƽm=i/*$q2>gRv%ٙd.5A1@]n(ޙOcLw4 C ę2,Rp 5mzoUn%4byv}ڂaCL᫔u#}̌=7V\5z ^[@o)SiWvy ɫT8c}y|+B96f먎>AOr&TА?dː6t ߏx}(D}>KZuK4nAF Tp/8 xr:^(>04hsTrckO1Pu1{Brq5m&/ .uͷ7!zf926N]g<⧩a>GkC_ cN?݂ ~i| F"a?IU惛 Tߐ\h2[(F>M7_YX΋#L 1= ~O$*Ne80'_UAZFe#/.Zz˦3g :'˶F+L##s~䭍Tb|4h7A.Z!/vHEngS@|@15d A.6 6ݽ0DMI Yr.S>ȴPgy|Os#1:[\s!T_q HFYJ-n\^,\Bnȳ֡uoeɏ};/Ѧُ7,5O8N{Q9U@9e}1C~Wjk7B4Џ/Ӿ78$Q4+J+ngך'/ZHI9MH/*!&E VMcD%QkxUjaNC} @ èƀx(*΅j~9{$:Ed?BtʢG穻sjwTّmH(70%,DnO.bM:Yc"X+]4Mg/n;axt>'MU|5MT 6(j v<ݏNFhlwS[g ,31.5᜼%p]~$/ГhėIțTB\~ Y1}Q?Aʫ=t$t6yq.JlJ yl{/e\@l1=dZVü`)״FO7&D&=/Z 4ק/݃Msr+$$!/ILפ36-ŊcEΪeCl@la]`X4$M8q @b )4jAiC_/f C ~%\W}+[XSj ~W>bKLA>@Oè46A& BX(]@+`z{DE/Rb}M7W X3hPJc9\/-3_ia<=ed7v xY.P`" gܸ$Gi'sؐ1OGBzq!ysʢ9'ix,.?E/kT_-C( 22 e29|o)]zn _\dHr1e`L\˯3z̭e'pDlz2c|V^xtFAo ȝ.B ]C^] =gqCsxCՏcWW";&勵3\JL6t  ÚQL l@DRq9ҿ88ߧ|ӛ5rYqxo~y]D̗c=1\Φ 6BwfLI(,ܧ=woR a Ai_ZnSz ^AFL$n!QL gsuS{j7U,k|l L h_g^ ]:rҾBڦ&L {τ$4e<0/" %sAyWd s*>sDn,CT9F+JBLt3],C arV(9I`rvjҩ&jnb:HcC*lhwnTD65O*Qڜ'E$oi?YE;<cclCNj{2;JMN~C|:dA24傎fa]Aӌ.3zGJn*ݮqeG63}i9.vP2674٩y8wDTVq&52(as+Tri4Fsɶ>m$:?Q@Y̘ C-L=ru嚺Q t)xzh!._W'#CG%z5͈s$C愥9l39z^=+rųP[f?9:n7Ηx&ǧ1$õc\~l$]E%wtvvG EB;zq)L!Ω SgjmRQH/on#{kf{/D}MnFxX?j>nn/M5 fXs;YXEQCŝΉeS\S˴QuZ qJu(?a#ZG,Ӓ|*Ԟx:1x?arɒhz㘈rWig!+ZªV f-"{e$2@ NIx!6L54k Z~D\檮d3m-d+4VC<&X-iW?2C jԨ)M|OЭ0r:Kv1O /TЇcyyESM7]8>yx 7%H&(\$2< 2KxH? )%劫eͿ2czZw\+ ,W_Сݤ9-oXMbzBL6H/\t mS/]ހRk+oYtSXT xlja+ [IsIpkA%pG#iE7$<&7]BJ+*9­h7й{i 7y_{_>G鐨ÖPeK6M]> 勚XH1i&͜F,-w%[Z8u (6dh3V̪r1=J}$, j)bPB3A;O*.ƿO- r$[HNd+Ғ>PSmv`LjR8jGtOR Ie7e[ET͵8e'pݚ64NUW!)Q'Zjg3iaVyȐlyy!j#GuͧFO_dl qZPVߑ+N56[L~%J 1H Q!zlS"d}DA* |׀_=1ævݒЧ_*礲Ȳt$4dLU+DQm`F[\6V [?Mzmjct]֙z/>l̔WW$]BXƻ5Eҟ{m9θ/š8Vq5Tmrfub mޫd]%G]zy4?9ET_=Ȕˇk o(AWy1M1#t7 &JM<}^ڠX5$'2w!q: (XjlwD&<# ʐ*8=+V#b4UF89oٕNf TF@~#VǺxƺbўVCW%1fV &5HK:/ݶq }rˎ|bP klTWxoAWؑ95-TR1_#VY, hVh:Cy!*-}Xp>7vk5ah3\*ZɟgfC5vXT.;Nǽ&W_rkHe ̸5I_>@a<(po/Nzߨ?PhXH+NM_[IK1BU!3V棺4<}_=8}"~alA<$8؈|πA1w%oKDj8}$Ơ, Ea iYN|~{f]F;o+I]Z(DwUFNӝ}Tfe;WZ4~zBLIMn0E,3O%$ |vhJdFFeH~c"cZBM><q( Ȯo*+2MDvKQJ:mzrPϸ;Ӂ>e7=gnGb T"UૡkĂ49߅} x~{4cl|Y1j\=Pa-=Wu K%|QRM0kSs <6}ݩ@ 5Kazp&8xy:4 @f~(sgzQ6M( 3jIl'G7җA'x|j/;kt/~k(2CdD`$Ѻu š݌Fko輐9yqy6΁"r4\.#iLѱU_qL^]*x[zkx|Y`GSɵʩ:S<#k&tC̿jzZVkTɗ!};ţp:gWze.rVW-N_]r:6&q7,= %6e A)u@k|B Nr蟷xNYE2VF}0|u0[.W(*H~}ޚ$/d.+fF5lX؞&r}p/YiݙT at,׈ <ܣp%l\4N{")J-:n9P}wAǸ$f`Vn0Tїiw2z39_[3yJn9OC5:? oOr؟ [~qe r^$yѹ` *;AȠ)i2ȾAZEݮ剓olq7MV0pȇ 8D/“bà @*Q>T/ݚ`dP[s8osIbCFjunX*#ɀ}B'J{mn[KrOlo)TAХ- u d;KPѶ|AWxrU @WBоz>=OY]Φig ABQ$rޛtDB we:8't{'،0(Kyr%QexJmǰXK`8p<K7 Z,n1 mQWB.r&DP=I?@ƌbPq =}luG&]Ƀ:^{d݁ ()(WM]zZt*` V2s:{](\(/DZFrc&65\fEG1 9 #&7R'xsqCI]nd< Mf>~cvK~UcZ;!4'- ;N4,5*V5g=gb8_̂HI"E}ϘW" cOH\P: Ό`֊;#0TF )N:hkʣykePX#ґ_0 eZ$| z5׌1 r2ɟWoMd *'KtЄ΄MDR((DI!}dw$1\Hfug{֌CQgsJ_O9Ìҗc+e&U -OZW2,&=7`(shfqYĤޘLP\G{v8 0JC a<_t*KK QM>3}_Q!;icQrxRűｽ!i6v`CQO :l&VecV*ÈKy4XH|ь'XuIeNG.,N[uޝ@Ob(Qhl8G##d(HEZ2VvkHp ]iRN H$?nQpgb u9n}r6vEI52HmX#2ױqE~W}W|@s4aHmBUwXU@CZ2 G@#np|i .ѓk9OO~,_s nV)M ,7( ٽ8EZ^@C`2`/ׅ]"eq6sP,U yHahy۠Dg:-%-m(`4~ġ[E;27>Jh{Qlaz\Go%5_ׅ%+IlɺStfirw"/=d'SU:7A9#"xkEOY˜+G/E◇CF7?Sr;;p>0ݩss[!<-ʧ)XrNt_nv:MU܄8/mD?[}l_cJ[$Gc99^rW}XQEp Z(ADEûҤN ; <4"@I)K kfƯuN!F7Œ `Ӧfy nV"l7r|)%+܀45#m(Dp "&2zRZ2ZM&O0'+^|)X2Ljw0/"21r&Q5rdj1&=| MK+ye* g{JJ ZDΈʗ-]_;p_D2.ӳ%Vz\^rО.^  uWhՆ7ton! C3хs繱Wi`v ;س==s-SgO(SRZ]֒p=`!kHHpc0^jz'外>=Ss: :Zz4Jsi"OeC6HZS5``YW9'%p{gvtr ?2ܟ^u0c\p^Q7W0o!.f>RY ,d5vó(6#M#nh=4NjQ~ݗR%].]>}w均Cؖ *, @XkI5^cNVI[r%9&O9"Xs Ste=F֕roÂ7(I0hnQsqmsi)VK[EyU% 2D f8 z&Ei˙gh_)xY:Ot%Yɰj p"qQJdr͡< HZZ ̵#w[|Lj~dE С=hH~m&BW$,+BZCamEXD.W33tgPLNYm٩.k$7ŏ2?2'CCNQlLP'BLvTt›&^tӅW2 ?J<O_pT1ә#^ޘd*j$qNEנ~Xk,k-Fή;쭥*_ ]>~!ڮ9Ë0 4]vz=ћ;V7ucSJ 5X]L$jiv +pډ+ۺV"kZęWfRNCz %} 'R,s8`irz{l.Žh-Ys,YL+b^eQq皘ePR8w((0LzOdɄ7^ M@BUNLRFo!Fb?o鳈c 8ݳ -dP7)q,ejmxȹ;'2 i@;3`)!/;(* 9hJ8 Uz_q 8TKVqXY-!oe.8&LUp>% S L?[;{"o_u*>}"vd5&,Vg(5nϫO gF Zz`mv!5n܏-1u؆6<ˤ|@F䲘@$:Ck\t)WyڒT2|GL;w Vu{S/W*[=$ GJ=ANYX,S4.QJ7fX{W$(dIݿ's |X3rWLv}T<*#&R>+ > Z."Ћ 5N;$(ǜohē9&; ZYRFu,͊8ʵx<glT,h: **"En,7JmkJZ tX OoFO9o1|w3= -FdC ~kp򕮡GBmq]ṋm GQYIiwl.le;ԙ;0i1߂?i6/$hJ.Ɉ|ċAegRMy&ʩ#K`ZuO|f}cZc.H#q !Y/ړfXXriW .P{u9W!3_՝r*,~W0r8b$$` V[ NJ !CsS[bZåQ+h\|Rl~Rݯr\SmK7] 21]yZjCn=j׈h!Tܴ` $C‰e=!K ( g +آ4k3Lc9x#Ÿ$ âdwSBo*co PjobTѵ.W\s r0'ތW iȺm6 wMvn|ե `Ч;Nh -S~*{P 'ʁy;<[e%s_H_)@Pr>s@>B494ōa~5 gCzw.Fd}3< }wR7ufjd8>"EO=B[{@?doMXB U9e1:VB{pAߛG]}ɮdV@(|^[1ԺBlK'PYB/~& .`(&bKl_xv_l+YAs2.(?> OMy ^a+hfHTrp<3viNE_Cii E"ǠPTr!° 1.P lc]P\`Yw Ul K3*BKK;0MA5>x,ox]auvn?wk}C ]3nDK r AW(Ŝ{h )хv_-OɲD2gAl7LꊦIF/B3'.^_ɀ٤EI  8ly)s5N:_B '/ R2/ڟ̶<@Yu0GGf2B/ɕdLny0Vulp@¼=8$dF]MxTo_͖xG]n̂@-f39Pq<NO6Y?gTDkmEH¹u>ZuRV;~@/sj|8ub(W41}4\2 ͒~햆=f=îR,.PPnsrCO=&X|ےC.;sƋ݅ ZdB:)N~ҝrf,rӹgZ>ݏT3 5=B2ND(mL*/O};@ ]f6lCzC?/W!|4/a܎Ϗ# ڞ*-𿵹9ֵ\aܫϝatu^xQq˔S]Ϙ)ד \ Vس=-:g-;`ފ4Y .qb@S WtxE~|V̢h"-ф>ۉy9L%#Poko j(\iUU}M*@G-a0qBXք`XŜ̈́$ ; AO) GEI֝ {{Vk0= ^8e8˒.L_Jxz}^a҂w,p;?MR]CIp[~It)'2) Ϧ{D[QܓnKI̬0KNG[1XTѬ(Uou/>IGEA%oĒVX<"/d 1Л V̕,%s1W}3n8aXW ގW篹@& N3ᄕeHVU RƶxmB{Y7CjIgx(Ñ>|.Y .D@Ҫ&w~}U(m=:GmH͈FqGbA=P \O blj-M24Yw / QEOGwn6M qmVX\l@i` x==Kr,:<yoZeELkm5#_B^YȝWi[M )GJٻfg44khHU mw.^8rrz 8-Md(d#_r$ GљS#^ '7ޔ9f!Ûnq凂u +?v<^9mTJ-?ѿsL%+Yp99ƟM{Ox!y_~ώb`(P᫭P mّ=3)`3u.m)$@ YPIB{͟7ߓCAxtf';t#K}55kT>V±y&!WŔPحNgy.M=KDfKx6uHnl{Sz?։fƦ68.ZI R ѻl ҙXVVS/xHX Kf ix Gm{[՞OE֩ةQ'v Q"45w`L%*/gvؑߋ+ 6Oe] 焜b nbSnK_A<: n,Fd;n$] =PjyƦ?I_hA%Ext]YQI40T۽U*c㹁_`E+D8~a XTs?tΡm(cZ.iF%*]0).A,ixHfMGu7⊆_3')n4&Cp BWñdhx"!YYa&:,{$o8_ c"[]Pb`2YuyBח4&ˍ!|RYK4֏_[_hn;qL8ޜ[Sǧ77Sˎ9̷}>MeХ2"+Xp`w]&kd ~cuü_ӡUx -fk7X`Db Y@3uQH. WFrwΫy7}FvǪm=ۺf L0o?jdrԇ6(PlW4}ӻ]BxyVL]?C)|%8ҀBԘKHZl:mBABi:a0 VX\/T& ]h^ƭVġxs5evfhۈqvw NjLrz! #4> Gp%7,%nTA> 9Eʥri3Lʪ@r9tn߇L1*r@nSdV2bNV8r(6f{(<" OP.|0fy>)#娩l_fvL=3x2_4l!m5w4B[=8`̌[J_藀뮝n|$M.#(FĪ_|޵Ka4G93y}P6rn`֭ÏVۥs|cıaҙׅ^Xٺ40tlNy(w)eeIn.ģTzASo{ht0r%1\({̓M~uW٣ ϱtE>Ɉ {^ "FM>mxk/ Q2k iVS6 #Za,ÿӓ8r易'2`[7BccfB9`R⡗S̺L#gz2W:zY6i6Ň}j2D ^TM7]H1g7!  OLK`;_HnӾSo9w=HM(у.!VMήDY|ϫO-^}cjsO&?O_zԏ.87c粄_?m%vRH0U4їϲ~ڀSM`7׀)cU~kW\ҿWmD YˉÍ~<$Gusͪ-dݪ5k;e]!|<]s$?9aJ+P IwIm4ޒȬd2{oα=ݴ"d#|X`t%ṇBT$) E{ڽxo眦EҳMdz݉*U"M!dK7ty.(]^bʸ>>\;v %%p0Yf$!3Pۄamd,Gji!aST1ƨEIˁa_} u(ӭ!# A>Q,‚ RxxG٢ q)hBu~!Fo^ 7W:)g,pԕn@J%yOn*P q'3C=0b:Ap(u6yUpRˎH`]pMȷꕧOp)k[6ԇx:5zusR=E& ]_`DnQ~^ÈǙ8֣.YkW@Psi_OaeVT|![y\-]yB"uUF7\Q֧uo_ V.W_S|sQX\,ϴf>0i sQE}ڃY,NKvdBt|cqНxVP^00&W-X`[rB-+\:jgGk"ix&S.KAB@p<4Td߀lv+3f36*mcXivjbyj@H>}"DbDV)hFu ,, Rgu 3݁8%<2B%8ȂMܪdYF羍r}6\7Tp$Ŝ+.Kcn4>;ɲY-(t ]-i,:ޔJϡGU>$kQ}3x^ ;:AOFeNVsqZdH1Ϯ @҈u0q(Ne Ja"-2($ͪYyB[1TE E;|K>ͿԜ%jJlPM#^Q*adž\7ƛƓ3-Wwg;kgtf|7Rx9K'٥Co(*$z%0<;ER &y)Mb 9w,:BnlDv!4ﷳ&"ʶE}NF Wd="Bl64~"9>% xMi/wjr5pWUY@ fqdi[2!/]dwa4gAt6PjJ`"<nBTW)eWyi<)SZP5S0orCcn갧 圗x|,g\5ۺ3rc4[||Ċ5?~z]N%9P1@~%uG(+ot0Mj9jw=y#ԅג`>e[_׏ Bƛ@?`{`^gQjM#bB)PiO pbO)sRl!̈Qg^{_,ǡAB#[þFrFE74ks=hz%pd#</giҰ]Y83OFO:rFWb [X]he~{W6ׁW]|WRߨ \_oV1t*ڋnf B ]XIof[*̶_0X[?k$K򉦜NY*ATn mqӧj]_=$ESC=ZB t#k㫕յi!d{OȎtܼi:VZANٱ= "m08\x(#L!Itn~`zֈ#1|;) IF{><^3H%MZx׈2GٙI_4޴m(3?{ӈY? QaË*_<[u'8k.q}?yk8* hVi䠬Kb ̥B7`YQ fTx缓(Y$Le0jATRpis8*{p=WIY1zy%اŌORp[3ZF=SJZ~%>pIe>>T&8'Bm~RYJ/y<2Ch]hτk0REIf5n&*vo7fNYkgbA@g?#FhKRߓ? V\I$-ZnI6gQ k4"VJI.+$yNz}Z;XͧJ{9ԅ鏸wrjI\yW[G#{$ů?,;SiȒ=_8chL Uw/ws;e9'gϚ?{ 1y8<$waJ5j_K 체hR-@L;~N1񏫨WVLp X`JhPWI8C4_í=q}}3/,}b-GO6:%/}~^3Eg'"-Cp9+g6:)cS:sJ9[UHQRj ZrTWnCl;@qgH|L%9P7P!u4=O dS6)T0^ig%(dp;/:yc ̲<+h2T˖\<:tgq`55WKb"r+9Ƭa=]cw2tE %?hT~e>ͽ$S,hhG4 '.^BlW!U"F।Ҳ4 6HTWȼ;~tF0M ָ":r#r ,$vz!~u ixadxRG2 G9. yON׼_Uy(1 @ %yֻ3Ѷ%yܩKğ+%7{ZKl!u 0LkJ@>()(#mtrsqD1%#č5PRj#̞ Z/s'];ecpd&?%&vR7/ \(K@6BPVfIMJY޽gvedmw9@014}u\5.ǀ5DOU(Al4D} \7Il /8k%n &@!BGkGfK7 Ƨ_!%$#`\)>ƓDa;iK]0𝌞Z;)"[^VO\#'"E%Gm QS8hJ@J0ų&9DZ^9؟ bgEo7D[aOܥ0@#^OfK؝ J3.PIziP !)GjӄlU+Rϖ_/B?"Cu=xٽ"tMf`LZ{`_ïT6Ԧ =D.\L$aEM/yʌ{X;Vc9Mbթ*y;•2pHsENQMGͱ jH<.k}K#n7!Dxn%7e"D>gFoiR+c yp&3EQ:8hn9^~~Ε+/04D{OG:n. ^Y2\MFY,"u+Yfbo>H!3=myn3t)t|.X(ߐbRm3z܌7UVC*lW!@κv=q)y>9TQfM-ZB^"_9(!<>_$lSڴFg9 Աۻfu F/F] kROqQh&<`Fy_R?c:MjJQRS |w}df'e 5(j}3j&`qc-nkh90a/VݟQ8BR)3!9{|el7F )Ok J1̰Wx @O0uSuI{=ZN%-Krz+ d@)C֍>=%n0\~ ;\yK&xfyݤv=<]/ ,Ig14+ș=n_'g:}n{r>plT[K1hoP<(H>g. S ߞ*\eKe׹X?\T/P0/~RIfJ J]J^S96u͠QDWZ-t}ӤԳ};uKN@XﳎW֧Ы1y>wj|yNxjHb V }NʵA:6WțږTؠ= MR8)?}D2YUW;(T6ZUIf l\TYhXB>ud_vGcFTT#R8#_ƺ3Cmb Ώ3Le e ha{702)+]HIzI_$[,| kl)^Xri"Qɐ}~~v bԻI p1϶0.>t^Nh_i){2 A]=/_Fu%h UPz1`Mm琝!X]kZ~uFԕ&CSP*_[F[TRkix$/_z.Og߯ o> D'l +.6(tDAG}W)YMJ霪3@ߕUO; Qͧpr˯_h &u#W^lo8d= K"(B[E4 eu8aLOCż'a΢ ^IsUu8e-V͌ t#;cF8Kʵn*PUM]&j$]2Wayl~5JT:t_'1y^K{wT?Y r X.oOz.LQ+(l136ĽK1ЯXIKab5D7KG20F`mĚ~×a5?y"p1) N‹l%g{=lɜ)llטRэ>ѡ "q55,KMKP2]X:/XˎOC2 K(aL‡Kg֟&ARhͰ~v8Bo &B'P/Xk%T1O-jIa#n+4Vb<uL) 5bZFb a 3aGa\1J<9SP5EuI+O?ݽ5l}Tb7|hȳՋT<$u^e1RZNLK{X{uÔ[&'7Ȏ`.c5 ֫do`Y{л|b ݼ+HFP Z,]x3OE5s ҉zIMn{iӘw PX ʋTESg m;q|HӤ_0hdeP!>z6]]>Eu4ԉRݛC^ŊPEJ(N0}W Sot4*|z=cWJ'9I>, Ec "&+דHH s#nдY{=>ۢ2 "'A0= 7g2R=({O5#4-ydcΘ bNJ{mCFH;)mr`8O:*FkSfY,/,Ҽ/Bc;ۜ0gÒ'HH*+bWMΤu@ׅHd y 7C e7h!1DNRIyh ًȃי]..򭨷ZeCpO up\G"@uR G}+mMRiLR"mI43~*{:| ɓ n}3;-8‹fՒWcF9 @Qc%>[ȸCw ak)TWz$/6W&>2~`3& /%0{ԍ΋D[igd_-ݢ!@rԍu$Q[qF{xC^^XUD;Lv4`;y +slJn1W/r>9RbnU7dPf(֢3:w.MGܟ=ItJ;n$VxTgS@9^6nPR W T/m*kEwjpyJ7pc([ĖQPMQ#q>w:'*r[ `׽rRus Y:K%OP>m %Wr(`Đ|ODi]9Õ9klPN6dyl䀶#l?+mfñ1fjY(5l|PƾKDxK2 ?QYc'KZUv ]PY`*aܛȸ[a/4<3򮮉1G?|d}hPyS6wiũgM螼W3 /W2V@*9z}+12a=c*5ۛ7)2l|RXH{3v@FJXZ ;rEm4ǗͳX{d?Ll.,(c-ļFD[d#'.qx]_ 4\U^u,P˞婢nн.զυIcHVhm"Xx=v I \eV.O$I=AroӰ={^A/BB^ނ`2UYo-cDOpEk٘L\Wmx6ƫڴI9㍻hg# 'K +{i!VT}6%u-Hêv=JM܁'v@jD8(xQo{&tՠ^ VKT%jo(RU|($+ԅʝU? zU>d]T3砬r4zʼnYȽnQ9+uo-"k:F+hKUҾI6ieARgiWZD0ݚܠx8_zĨɌ|◫N\`74(b}띻?)=7"W9A*$?(\r?h}ً"Id.RFjqS-4|P!̂4*Mu&W;[\fDLQw jK*$b'u@`Ҟ#{Ċ8Ķ &{េgsL+`38q 3ves'c^);_h#iйX &DU7Fֆ/eu|\$_;Y 6J;eNByxLZc,hwH+ ExJlHNSu%^gg5JY/¤a\nX& X-#f`@;*ԝ[6(R[鯂nU0DkZ #Isu0j~;2̲p/չW˰*s)/8'oo9-Ύ436KʸM(Ҿ!W}ODٷSRxmPW7³R!Zv\NE`~O%Cd- 'jD>OaR4E%ɬ"ׇ iґ6yR߿oۼf23O@]  )HdO4ejP=DLtW_b-dB>";3[R2;*H&nrq&{w)WkBGsO=`UE^5>|s=xp(r*lc >`zs0)E+ρ^nI_MvP<"}l7]#LsdG=g`Ʒ`Ȋb3 ~lhm%׺e 1T(ՈH4k5CKv"+77tM&o!7S]sV)U-a/':oO޸?]t[a'X/IGdA g_^Rak9Fê8]j<ZɐI50ZԘ֡`9Ӳ/ӎpL&hȁIZu 8Eq;NdcA¾ xMv\JT+S=>}o`3 ZĿN,*l_:t}9!iQ; 5it\!oeKɘRfI5%{ӽ|r]Dt@x3>|.Ռ݀<.btHNH/B4Et,&U ڮzk݅[x9wR%x .4~4cIv3ɩN`b$/H[)U7A4+Nj4s/JK !̼At4*LOHYsjRJgA -2jsIŝ= ?)aJ30۴3o%z VϤwz uW81Hˋ( Ļ?88*_JB: 6E9Z(:]"o@1.@$EP_,-!|fb1q]#UtֶrFؙ~B]i,DM$4X7h #y)%(J"M08 W %^?u^nO9 8 MVDZdi%Dܘi{EXoyR6b߮D[Mbӱl0~ '@"#TVv&1Pw Yu>/!M6"aZp i}!OIk II},[8[Lu2/UjVuK,D̷b~Ún2gyAaDɶK O؞xKrJ3yJdS_#d_~ %уU"sy[̓->|>La@kVj1){ #<(Ip,sd\->]-&B2wdmj)- ;z7;w61 VγS9 g[%6ߦWg JVNrמ^:͘Q%gl N0Q,I?:C> 9[;ff4:~^[[=eM$CU+#PYt)\ rӨʱ/F$5+Δ Yf,9:wo;ق.J3: -F4ݝJFvmIvm$>?k]毉=o#:Qѝ`IhyXɰJ*h9S'CFK_FW9s(v/bAT7`{ujTx [Xhͯ [DSےKlA(M׌i[ P4Z4 ,s$JP`btx$ P|ݡ3toƉ) n׿ER,iW1KDzD4!jkTCt9h鿉ܢ%lߤd±s,S^ u$w<ųhvdwB|xM:"ѪޅS=MkZ/l ߒQ,?f8`Z}ЋV;beD S:3`CmL(rz비X^ "AS_`̹w P5s >Ẕ81?)%DY| 3s(ENs5u"hzO _>`fwy!wJRiU֘ALqgM,n(zxg\B~?LՀ'þ$Ys֍ X.'n Q~x} ǁ*eH>Hp~chkh`Hy#2E/SGQ&Ǻ{L`.݂#B$Y> /gݾKOZAJK,w0Q4H"gjt-e^[uw䗴n~}" L/RD~TKO]_z0lyзd2*Fwa'kB7q?)N( i'շuf!ޓ&M|?4& D:f=3 4vc zї8.e.7oAIlE؃f2돁ћ 0A!5ֹsf|Vdz'KnęYMhO2KڈݍGMd4fߎ},\|C< Dad-UFvHLWMuL9ZF2:O|"Wk ew%8.{8j{d)u.Q }Uz]G\V=Env`k{&b]ip,&qQ^kq*!:*~87gn&wx͸g%"!>a.9:x*[di)iyFP$%1SîAh̯lSSP ,&I~zCfNz3b8}Wp$R.9c\* *epC^J\M6s1 b%$`~M\p? ì9 xbwN&=Uv|6{2[7τi,} $苡AhV.a־>.VKG>8>hqپs;FY} P9tY9|n%>^a . } LٮsgmiZNHF.dqђ묕kM'wľ^E7? ECmOKpd8dc Ga%_F䪍 _ r篽I_EW &5^-ϥU}W`VTUy3?&ԇۊ ^Ɖ:}O̞J , .` T|K66B <=i H6eUF`ɮ3Jc={8VQG7Dq(K9Ϳuu`#+rh. 1cg[pd[NPn)"Cf&c\ShtӃ$f%FÙHBA=qSk7BgA(-A`4#%W]ЫUvz{b.K=ds߳S(rC FpKv$t|6W7^-PVt` ,/<~4Im|V}/yri*+ホyuqf Rh-fg套-P.O`_z`f{5&9/nx|,jk:cJ_&?XER3y>E-O0+rYҖ"le5pǃ0|=0iN깡4\jŁ004jMÐ Oo a-|#<6-V"g @P=x`r3TД&1ѭ:zRAb{/mzrxDʎXBN!MM9i s6zߎIqzV/]+¸z9`$ :eBɟ7àmdpW`iC`x{Y$yPHARzYz<-r:qՑxRm~/7c/Rd~;+_5AnJX?>K/ KS | {wOE"@c-&VKM'i1ƕ+v?,u*V N*),ڲV<.eˉ<q SxU:l "Lxk4 5|G}nrAf%`{>g]U2ѵu%**[ߩΚ\%DP6܇ތ;ih]6DYi <e 5}0Fj }2E؞ߡ<"Aߋ}ow(QwiğzQNK:Zێ10Mn{*P_[u|@QgZY]``fv)L7'!ZcBYOvPhNhႠn;-'+KrZ )YEӴ_pL"wxiso7l##VE'&=J缚qQ6Խ n8 +Y^}\ow{e WTfohd0=kmߴ <)Gqs7p46߳VSt{9 7@ ۸ zPͼOfj@xBLCynar ~ƺ=Vf3+aPiMWA ohWͿɭ~1 $uoxUŞLHO~&m ,";wM-^_}Ғ!gzU>yE:v 8b^mQK+{!=fh2Z bNf r Z>-EW I8Zk hqO:(_Iql͡ Ⱥ.k^KH_3^1{2t+XD:8(\ B na~!V9EqhJAL1]o>x/,&/JhTq_Nu[Ûr )k{nR=+T;6aKQ_s3&)Eڻo&aWG $Uѣ;ފ"*Hoy3 <``JDAt2<`sN7LQ5x޿8ӂ:zz!+ \χt@c]ݝc<:64X2$`d ٿґ"z+lh~!rq s !EUɨ!=XU \C[f JtlWcq41B*I5«d~I0yEގZs$WYOnJÜf>F}o>Zu띋 'Y@o2ϪV_oeBBSJ|NcX9P?rAUdynlge bħ^G 09n.Y'歩V=;iaK[r%ot`FX/K=><#:"=$YI,7!x\j䤭Z/<jg; (ݝ0Pep)0ɇME3Bi )B'!k`BjizI*LcR+$x )605o8j]HY(t ZDAO 573^kdjZݣ=; dKQihILU\n3rTFy RL_ApbӨY$RQV wGʿ݋tɈU)N+11ۜ,ak1C3`⡨7?Ư,eqKZɶaoj^?N8}tn[hĸ8qĿ]kCК(o"%BQPC ɵލcĠF9H%'\`ljRHN 'Y+4(goae|O nw~L~]JVBFl2RM mj iNʤ'ǥb|^`#%dPK ]F,{!R^['`r w!G1e­ X0GK_v \cYzMH /V=5Əf2P}w0Id]^]'f#/河Ը wu2 'H1sÏz}8^|/٪~'IaT80ݖWZofG PƎ V:Rߕr\kn-| $:yoišRj5kLafG6eVySɘ] S!x _VTj@.ë{k?fS5z.+`deoX)뀈"'[WǮ ֎XN2}$<ئPs-]-@3v{tb.0_Ds.|z"Y#֜D45bPD|"L*blDJ20v:Ana$3tiKG #H"t7U*FӎNTkw9% hu\wY)Vc%HB! PvxE->U;cz/Btd?9JmIi5 K3fuxQ($fpmμ|ݍ]8:y *Ab-a+Z7By=&!g *K0U?ǠTuLq\9TճrBuw>3CʗD2feS,6 q5oc^Ke\PNrg k@5cd0kڛ] c{>&XE׵9wm\8+/״0xeYȒ}plr^x>UvCT:M+Ԫ-`OgwPoԘLY缷ď" q^þ"8Œ X}4>V}Of^oq(5hBvlmҎҀ\mӌwbԠ-yU1'(ч 7VxK>@'fNgKP {YCȈein=N~g8I-ܷX3p5$d#m $%cЦaA_ 8`^<{%g͙ Aբ?m.8J+$`#ޘ@x5i:!IQ>fͨd"Yor9CRu[*oo0ty,,P!꺀ܯO:tw;Һ#?ɿ }Q*7m:L;I\^4K'mKP l\“љw0pv #p=}EEHz\00/ K,p=#}dxoI0&uz/1 ),zK'$o/{)%za4b6~Tj/Uv6<0zM XNSm9y ?lņLҽ\K ˌ+(+|:w/΃3/I8ӵ'!GVm fL7W4a#LP+e! nStFJLHvqn4 \yUƈ▱!ixS3jBHo*ߓD2b7?:G&m8 H0#>"SuJC a_B<(ZM^H<EX-4LFjNNS @s oS_)ilzݳߩfgХ.gÖ3WA}FqAGᔦSiSǟdG { C  TށJ^XjHq8/q! H!G; [L@( m"*œedt C>n.M6~0*wUc)פNX 91V%x2$ ci>VGO'E{>fΎ egPd0*VѠMDK˿r&sMBS ķ҇9ڵ̗3tyuǜV/@*Yp2c5hi> iU} X#O9k–%4Y6B4N׭dh-b[s`dFɅ܃H-N>!LEIGnPtFڮ)[ᵡQGCMC=NNܿh KhoP 2:HluoKT{N g]s!/~KLԬd$2G8̮Qs/G ܃9Ӫ:E74T>ܼOZxL9}c|J|@Rm6A9DP]Ɖԓ٦jUM(r/&6cJupi.xWx Sq"RRNE,PӸ;RHZͭ'Y$>|S(^ZS Tl$Tp9a E)HE 7~:Ax6X߶kΜ\)I7tVF Ю׹k7\Ta(ŵ{HFHwZJf{?Z|&Gn&X 5j/5H/ ɞx#sO*o̗XD2Tg_%~ٌӞKŁ{Oy~t]l|%%A_e)|RAhi o@~b]P[/q;y5@)7 4=կW`yu \[㿍պA+fex2{h,3"Cȴ[5vIUOk4-XM$.Ʒ[wY;@HaPw3`lEBks<{7YX>?b d5Tq:2Nj nj oe65k< xAǪ5ߗO[w2gJYb 6.ARjabo:jUY#" ߣP!mDV:d,]Ќk({e| &~<*Db&-o*ۃ"Q3I/?@^ҋ=J43}EG.Qh ETl\˷/,ABn{J/g0z9D76_ G}`v$ECun!1|wj]^,` RgnMPX Tҗt;RV] 6^42B8Pst}z(t0,:}qb}w+ow'A;2QiIu7;ߒ0j <5! ?":/Yl4#;(f;Gp ʋ*6'V = /Bjjt-zK4M'\ncI nX8XQrw; *}zM)yPh8mtd4km'S#BZkjvr%fϿ¬3*̧;˹B甦gOv51>=BGfnԔ>̶;x Y1(oR0-zUaKC7@]e :9]N_{K:L\[h[ƍ,]K]LVRCтRӶϜdoҖXm.=ة ~CT @dq`ךUR'aoroW{>IW{B*˰2ӵF;:.aķvꛆ\[Hv\\IQʌ1m S҅YYәA]À'Rh>u:BIn2sv݌L-==/Ot1Wa\RvAjbuх8tSz rSgy/7I6f_&QRI^s`ˉhTI!@cK|a7<exd߀*~z}Th~og٢lӈ`lsL ^3QɫWQu[?Mx%&ca|$?``27N4]RJ?+7x=XD !lvBcOh4NuٰO%R b%3ߋj]aLK=ٚ "j3ySD#w0-hm4oz-cD Y&(*`j#"{WFVɩ ťpD eHU+%Llsr<+U12u[HwӫFarN-YaOg7"{lHb3ې]v=xid1Z+!mil@4"I=̻dPf1V86dMQ^-1{$x:Љ 4 +-ךּ/?B4Z"σ(d tNST/بs(xԃ}J|ZKI8o -.^[SaTu(uSl&Kg)s_F0w2yFئgQoY14ŚxX; dJ.\my8汛f~Z5dހ$q4~;#5ppH M/2Rd.`|\%zUɝmIM !SM*ۅ^\C #ಌbu=`@k89Kͱf'm}&1.JVGTJH(U5oxe & ^n`]2tB*YV ^3*o m]񒯊 estBpTf2́NN:1 si!Jt=-!qoO菫~"hӜDaP|4\1%B_߰P~ VͲ똾%n 럢ޞѪ- w?V̷ْ COoR9^n=:+`)%kYI݉u2q![s/lE$X[Ŗ >L$wR"Y-F2f@w'^`7ge$F  RYɱ0H҂.=DYTp9){'!fj 94 <8ĶH{9sGQ2782w_?KcgWW:p}!>J}ɘ#5ZўG?~ fq;T 8铚Z:K{pZ5r<̍BAos-Fx/%'qƑĝr(#=,"͵]:2ꝂOݚ r4: mi^S~6~:7jG|vr$\#)e4zri"]4V1]B Xy#=p+4WHX'mFe?+K)Ș%~7uhvvٜI}<'? R`_/oG=_b ݸ{x,gsEM{4XovF3+!&Եm;MV0U<WMb 'rwWM\q-3<;eÕOC-*;}Cwy5bzN*70S$|s,,cgc_Ғ/5yPg ErDnDh,I!L̥,D1B#Kj[D4Vzzװw3aPml p. Lof\%Ogd [vBϫ3EukD\)eZđibčca|Yh@5YiER~5`^sm%eRD,[#[`^籫g5H[Χ:";/,)eS2?J*ցܶ/㘩;U!D`OJ+ͯ deHo.uҷB酝kqPxkuf@G, .mRIT۰prZ^P93h-񴟩;Ư sn O΁}^,pp$|L*mbGPs2J#eI51Z|kĵ6] 8XzZ$Jם*[+CUWoK3ЍL az˷pJ;E%%l9]v IFCM60}D<3 qvX,|j4|?bq -(=S}ܕ_ 1kvP4kyף6^'ywSzH- } p9!7kmW1DtS\eW49wPO;GQ9iD|/N{BKo`7m;H$!OxvH)C F5έu`IՐMKtOsvz_`Q`3T 6{4r&TAJW.$m+_ˑ.^!ac69'QlV䩻|8)ԅN܋o@cU6t:~ tuǬy~Q%5YS.9RDCE픿<2WZRW Ylɕ{ ~CUo~S@bH3օbNcT5_w["3f7jgŲhI*‚|(Ith2w"’hc]B8ג.<]5kǻ{8XwefN'6_iWK%$PY+P:d_`2m50S2 hBri OvͲح"EIҁ KwzF}SyjI|IZ}EݸC$o٠A* ,^9CQ:tƨb!cl`s^Y 4-UnRO&4qNcx3*Ŕ7S~4F4NJQR Չ ~0jWf[JjSry'E u]ٱc͠_  ^Cn]C6ODS uoGUq2gJ?vx喒Sc,>;B8cVn28AP X?FXۻ?^-P[kge $ {~ͷ E]tJ9C`uIgI;A kɋ6E cw4^ctEH9b_A;{6wHS?bMʙĪ4KYHl^7RiA)CoREvIp.<) /\AgWfD^-ǒ VܲZ%Pl+]'i? ' ~fgh <^o(0:@V \Puۇ}`sn71檂ۋKUkf"S[#ʾl]S?NLxDkYu܊*"oShArJЙ@aL46]#\aKF F8>|1Yo@]'%cLs\ZChc}iW7 EJP}^GM2#¶5FO硩a"21e:DScȷF1 &oTѲ!oڽ3mJ`U]%k\ޢY UFvlFla>ņ1[ z70Ke8#ғ!;މpNb 4PaDd9\6RI'?IlkEPQ&T vĹIGUU%H6S'9 WLbבr(g}80:PMCeV7ŪB*t[r]:T(z*~Px}(FY Y'yפB=]E<  E J{ǔy:4A}t|eL*58eDpXM|2&I\Kƣ%w(?=8OFN5Hҡ&^wcEm@HܹP xjw5<_[o:#jyeZl Nw)ͷU&x?5 φ/:};Ҩ{ ]0(?FM^l/1k>l)Hze*Z֭da',I֠:Mʤ- E|` {1-uYɓn^ˊT0qc،;VwdE:TjL%a$^۞{鏆!)5pARL #}z1/iìJHs}qi ž Hd}>c&3RI q;Q 0砈>j`4a-<Dh{\zSNOh(k:f_Z mBi*aY?O"?W`Em6|G,nq/Z eH02%`QJmJ85%Iߺ$}/ȋAB"56iEj%٘ F(+e{ j!ѺUN%nR ]:gN^)8LʤI3NN&{dK2ZCm|69c3"߾YV-t4|){tnR7 s R s] nLF(s7r+|(q`ÝjPAJ]R9ᄊGѼRI۷j;?eƂLwqΰ_ `q&O+/1ɾjts@5:t$.%&6M+崡)c,)ų=qzb2%ܲ\F2OA"~uG!=FI+Z_ݴLjKdϷr kB¥ {=5jֲ9 65Me_Bo3 m5W|q$xkɚL[fNO#v]O/Dɛ\Yr,.郄sQܐgU6[T/2;wA('MfƳeCsHg 4|҈vYi_Lr.ΣvMPe"fx0ҕ3tw'D;Լ:$WQmBdy~eHZ̀'KǗ_!uQ0Ay 2ȫOV+8|P'ǀ#69.xTۗ #-{VO' e,򣝮8*x5&.S?py}[XOޔgxD"Hmw0lvE1ψ/kNn5.-F<8xFHyvN BEkɏ6 h,9YóCW3 "U#/8 Y3i x9~ $S߲}RZkhB;@ S.CEʀO_(U௲Vq&5 L["mh$vt=ve) Kssxjۅ&(ڻD._@щ\g?ᴂ *$j,"sà`3H&9HQaR)<-USP:. wMZ m@&1c(F*|i00$Uhrd>Xq.&~E{Ǽ44 h (Z[]`T2U^q3|^ ?T]^繇{)cxnL vCȘL\ Ǣi%V:<[6[Dn bMPͷ&t+np뜏;!*c W3F,aFs}röGt",~>(#_C.~}=#F^kv_:iqA|,O0s|׋mCģ/c|ac\U7~ CEwOr0s^' X_bάB'},zkWO]ڠ;Pfi^%5xfԥ"H:tA81bb},_FUnѰY.B[k9T pEM"1*췊D5EZsq(HcVFv %LB~Y|R$i>uP|W<:c^iGZ) -mlO5䄏BMA&f (K'Dz]*i'tc= ov;N .F-@WLR>;Ýqަ΅1~6ɼ_ɢ5I*eۆqʇ?n_V:.fI"JG+-irCʭ҅1a 0CK$;3lk4[6VvgFzK"x7`|g՚{ٔTįUF. yh-{.$&/,SߥeX{?k?Jbd2gE{N@{SW[=p#1!;]M0hCnp/Nǡ,`UxAK|*Exz9_:u6X+խyDqAIy GP9;V65|%KUnl<"Y0twU bTu3#06+yלwlj:0S DmCQllRۼvAR=ۗU5FF.ٵ{6/%5,u賧$ɐа(aXQa@я EC7 z&nm<1@ÁGujRxFe. 'r ;0 6GV=߆8S{&qAj>FR)9Q~$2Xuhǹ.TCt){C 6suRQhଃb4Ks$ ?blAiAl|96Mɂƽ_Itj(9IQUj۫TѱZGTU[~ .+x\7tk Rf5w~rZDtC/ClQ-z`$^ 1lH8Pf=DFVaa^RGa-0FK'qoGM]ދfa>T&ˁz64<ޒT\6-+=DVՉkt(&89%v|[أ͚UL5 `:$70܇CFdL@+HA3F~4;bDP#X .I /77mTW q0B !?W'1ߘS$?} G{U\ߖy2=Y%c7Kyy,EZuf ;Ҙ \@7cyaBju1zۢM:δB@`>)#蓍!Rܒ)*`83[vO$v7?P}6-D/]=]{Qh!5N13aA"?|aUƢ9Zba˽]u)yf"boOoKm[obݾ4,PeEn/Ii Q4"\FSy \::vS/RST~G?$ Â12[=W{l@šha:>I7޵ogr@xy1Fx/.nU]a^K*f($ D~ؤc \b%K%"9*o0=KSBo0-)ثd9lfBC]yM.ҎѮiUJBI-)o [ޕz~fFhHӐ퉟 u^} 龆fgYp >3s F'ωH`W8[:PWH/k%LT}RaRCU8ǜ 7Qqۅ+2lݩKX[S`H>yuIl+-Y{'oPs;r']pW8>.`Q hl4txA-pPk!M;o N`UN!QàW4Ĭ3 eʀN2|DwJ*a7 r Z\F"ŸM'ISĬNfQ '}m-&qE[I 1RYxj`9LB%;,[FjNqg "sQZTz=(褐ځIH,0M2z f@[&+\`J )H kO-Qb?ftwȇseH*o= ںWe#Kia>s'?Vbż ɯ3U%O"˛  t6w 6h4IJq!J{Ak+? Ĭ*F]W?Տ:P7=U٭P3c8,EC[A!55vvqB/1l0 BrfM.o0.PS+W9䅋n1;롃} i`A1[8%aF$1s@ ^ 9ܹ&+XRU1DF%|0e;tMA="7ND㢷S~`+,%Ef*Rn;Efu:' cqS9Ed\:V\`ټ~;9ʤͤ ӁGe63vF{h*-2!1X}z KRsq^D9j-:zZ. ŕ f[fUu,- 4r>a{Mv`yz%S)]y_ 6%+֐p& !]XsOv!TrZR_V M3}-ٴ$ڪjeCA[5G{*~P# <&'M5~aTO5!^$>H8Pa'`—?Y5ʈP"$h0ּwz]Ba*7Zly%o]iɽ977j "D m>f O?4ެn 6w# B1aA]j`zݡ qp@u˛؜mK?4;Vlٸ.6?h?Z +1zƳLգo)2mcQIۄI:)R=;x [JH3cy9@ +c|v,'9=gFrXH]:[Up.Nkp;ż"1HD:>u5PF;s;@kx8/gE1{9K ۲DYrˠ>EO#AjUԙ9D1`j*W? !YՄ@~[ a(XQ\MÁ(oiH4K8-!3Z͉'cfHL}ɻ0@!wT]v7l!`Ss-.jtK "xAx2ZF7^D߇ E: $?nD)VJ![5vQ6zŊ&I?y .Ft8g9 VKw]ݰ fnSX9EOfGk4u)]/oHuC/]U2theH!Dp>ImCb4p~ 䘑wXﹷTCT}a[w*yə$Q9ذR _U"dTz_P9m8h-8TdĉitSx Ɲ:<4I5`RZ-9͟v-*Ϋd Ii%$ml@ *{As%ZIBF?%X4:\,i&an)Nh:H!Z? Eл{V^k:u4f^v[v/U-M| nZL..Y:fElL19u(CHΤ8k JU{Kc2sTnPM<,e`gU/.%e}YXwo "E 068nKF$I7:H#qʕhw\ϯj#,a@ ُe@Kyq#wޑ-]aɍʶ9JxYA:41,y\_/pCHx~+0)čt9Zv L+Aib>F=ˇhTGp򮔁ms^Y4-QFA:pT\RCqK4 waYF~ȳ{v@ѡ~wf|?2,3zIUe ,%i?VT`P!1T< ilgCD'Kʭyݿ$8O=HcޚqekoePe뀭)@s<Rk:ڷfՃRY7C׌L5"^jV-iĮjF XӇ]Ov^7L/'#S @.L[P(%Po(4a=Y0USplCŨqI0Dd ·:ub7U(꥖I=Q+C)<|=K`܉ WM}{ 1+BH@Kc e!Fba~ɉD'i.%p9d1NA@W]d+I-1 lR쀏Y:tC1׉(JܻJLēBy>y1yV"8⩯ }7|LQla_efq +xk1~a(7-@W0v< q5Zܯ8'ZsX#cF4kP@  keꬽ/0ƍ|}=wH=e[?USXUIz9ťfe|O}H_IPcUV|5ϻ0ɘ(U)ҝ B<$y`_ Z8fxԝuvk}li_Lsrsu6zs&`^:"qssz>&J847I}> F됫՘b˽&C'4N,|eq>甎^u?@#va|VT,dh!d YuAjKu:/(Ezo!qz!X:\>j'jBt dS𸃄k׉{ž?dͷؙ2h*>c00 9Wx:rΉ :DET_& a%XЃLF؝J#7ii˪r 1Kxp0Wt3vIJ1KbayQ/ %;M̂CEq: h0W:{g+xQw̮A^.* vj\P f|s}|fx &2n%,u9[&y5gJ`qEL%/u 7XDer6^R/LX-=.K9~~0\֥ǥfL oօ,ud[vZxmX2nD`;LPZ@ J ?#J-'7z )K\WCd)׫-r}gQ'U"C0 显MM@ %ƃ렮̥wu"^bcS8И%cD+KDzm||Q+fb OoQ`.z>iZ{r >/˱2hk]әtʬw_|[Ϫ]V BCUbZ|܏s!all?9rMxU-:5@G-;nP0C9Quܿ$sZTYҿ#ˎBb{L,}Q෦qd9L|[8/vrIZ`r$h^Lj3$]+o*.85:'#}HGtƘA㔣WVH5(oF p|DaT ϟ"$Jjȟ L$zJJ{NםSDFFQ+ZU[՘ מ`hxȶcrn^|sZgtcF&8ar: X;[4} !DB%mi]~cK25*mܜț(u>Tmr&87 ^H5`YC0sQ{-_9w0 KoE@:`l:OUםZu: f) :0 fg5Oxu%5Uwm^tnw SX/FGq,> ~;,2f(f@NY$+L&$dkHbZPU=7H\Jzzޑs>٘0-&R4<\!)k}3í阡@lT.<I @յw:23xi% ȷC`5fvpP#qbyvDCT@8F҄ޭJ;_!so$Xk @1aT(T&޾6焩5Z%gm%1O#JV0k`I ˢ৆]+JvJmU# &oߋbwX wr+iwGũ\W:YZh v L뷺,K:io`|dXgcɯC%˶nVT-Rbz9.8ˇ ." D/빩{qʭp}[fGJv(Txdz=&*{؎wcșpe Bc0K$mQs #pCP3,*% V}4[+qhU}Y)JIDS׼А.dEJ!/eRӘpJhl ͚^ ! y Zt#-rH-70)yI^]Yu\y83 `CL=tUZ`^u2У7}!jZ>#1jкp'qyBd)kDֹfEie6EDzl.,ŻBqAJ|Q`VZ+3^ 7^~Ԙ_zIFq2"_c(SH«ZEwR9H4C -3vpB9@,.ew-!3֥8Ϯfq8r{S ?sӊ58[DuS/@%4 ^pJ~rN~Lŧ@ۀ{ܚRK670ь,?+G dUY3ˋҹcƬJ4Ϳ= `0p1c$* ~i^}!#,2,@SbF6}'bb<ί6mWvؑoi+=(J#|t:xM-LDbM dKwFB u&~]7Lqڐ# g 'S, be <} 1_zI@*^Y e `Pe6jm}GaJ}Jܪ9Hp#DdO ,]~>]V0)D0o} 〄',Y_Ͳ>@0di[y+hL2Q%OP!=FH$$#zbdPkmqu80Z拻T|Rdxw$?AqӀw fz.~l2$4ijQjƭOW;YzTgUъ4_h b\r+f!_\k䛨:CZ!]"L1FOUNN|Ѥªo9OCr)}@Ъ]͇TdٔmVUQ(tQ ljצ&}2943._*{A}Jf`6cdxij][յCy(i:nlT,u+usa@1Rtl`pe?DAcOp7䫅g1˨+pZL]]?"YJl 񎯒5vF 6mD! Xf~Ts/ oC@f=Q؝jV+"K^; 9 >Yuh_Nƥ慔S)r( ,Yg?d8xe(f}+l:߸CQ![Ta"ID;Z4GȞPOm׻OTWٝaQzT{Ek@i֍Kl~P$PLBn 80m™ ؊bv@i{= }zu(OE} p (A:翷)>+ QEcTUj`<˦t(B.f^ϨrƪV'9}E(*x|κ}cF 5o,KM?]hM M(Ƹyv\u( ? }{6{ #>iYh=N"4.Jr/O[>cV"4,$>gܚnm`|渲쎡ģB5`(Jw/?)*2\̧11n5o=l~H8xRb??ZH j 5 FVORcKqo&[[n)Uܟc&s켧sV̡'nezpM,^jx黢vI]Wj[F60Cڮ]K#Rǟ\7dƿyɓЛЧuQekENM(J{3Xu_&1diR$hƿ"a[Dn\8XmqiΪud>՚H !iP 0XJpPei e La; %)ڠܬ⠩o ǹ: ^iH18vJa|T)`_ BZi\|fN*z=/^~kK.gp$&Y!q [JQ%w CWЏ&4tƝO8õE2a5)c`M˕/#w^Δ"%`3DRd9rY ƗM#GԠ0Q0;*C5S\FG ,Ɇ on|Tpv+Ζ `Zn1,PeH`t)+k^Q95}F` ԑY Zɻ"hvd&oF[*e.GmI)IE~\ %;o[Z4h}1M3OW\GӰFHWq_-*׮XX>eGkz2ggYn #C]VQvs_*;;D6UK~um!Z \k92aMǍ'UN̈瑘OU *s$ISVsEex9l #k3ilIz&Ö Fth>ݒGSv-F\!4<|`OȮH~vbg=[^[G!1-I(v es]dw/ -ev1)| $ZsFgt\^ Xmpm4#VμFlFmiv`}"&-2~1sq)LS֒P!ϵhgIbyQm /Ee|i<"w-Ap;6l3G|ӨfԧFĎ "(uOM]iPg Jn/9#ɉj%#\}3~ὀDnRzh{5E0f(ZiW<{H]Pd՚ 1[@U*<΋ 86bks<oe䞇 .~ji$Zc~LJ-"7ZHm۔VQ,O҈b( h'%bV9v8pK@_;gP;nR`A~||K@ЫC+.f69jZz7BOOxןg:h+(Gi+0<]PRCsúWљ^tw$Z$~H'|c˛HV\b!gRGY`WMK1=h'^uck@ z E f&[HWLK<&YWt(9g,XB$k ^X)NHK ^J yyHúϼuhvz4/>u\YA-w^K?0~7Y&!2 $A@4-:~][^:ʥ8\MGwZHڊV-ISg{9t*u(nN15 *hV4,0vV(<4j[fcy$ϭ & W3"192 ˂Ȣ/3pI&Yj'˞{ Ɠ+ h[-ٹYimc0AsʩSH1fMSU1e J&ރWN)> P}E DZ>n>-l qc/a{6-T4x~6T|qH 7^"7B~/:4ګ"za鵋(3C>g!F%d(CI"oJWR@ |Ten69kcU u'^JdrN`*V9ˍe2홛R}MĦuGܾJt5LFai#{H]Q7hZT;ٹs-11:(e>'363yw_$l 1&$4L,\$3 4` OHoLWR9 ejul# L"S>kMoےnF>C._0:ߐ8"ӎ  +R哠dBMo[|9Idqy{qi/&:wK6rk `ҕBlWu:}(C+ːT@.aa]8.>e-Z+3l)hInnz#E mCбp]LuK˱ƒml, c]GKd1'l w3$KJUR(ء Gǽ9u6op '\x/ 1KDpA h=&gYsa/:sLh"M_WÞ&{WXʗ5S*66،UmKկpB ys^яb\X|cLu0в>F]R"RQ+1|,cdžA˹zSwŒEBl W[sT/Sd4t o+ik;,yB.m:B0&{9S<}ZVV,Y+r}^A#5}ɆDvGx$%(d+Û(%wh{'Nx\DkuCy :Zn vy0#8[Vؼ]tio$,c(dIկ¸{N=+*,!G7p)8JeL׷wbMrk>D3_SPnRzP*ё֬_v:èJP c8ZN#%^!J&${Vڦ20i"kN (t0- 9GH%y! 9J0ݺ*ڻ ~HDS2f샶XZPdOvX@PAN]&fޅDuD]s7d4_@sIYzduVI =…F`d+Is71 +1,:XӜQ=ې5sBUpf@=X.Xľ|VL ߀9d ,LC0J&< Y r%GSb3+SDGZ`(, u͛>&w Q68lVbшh΂Pd1u3s\~VShfZQ ,njo!í9ϘrR!Jb|W[⻒ce31 <@uJbvsy&CSAX0! Y&LH5tzNkY-:M0;pޜ/XYrt;ş6ԟn6w.k0iI47>nǀub= xt,lՐ~P\]`(k5z/}ʗP|  7h"ԛm๰^I;ԨҔ%nH6¤jD|PzpódZF^;({A]tTPg FF.L(DN.ܢvZwBhcgΉ$IhH"{`8=L,K4 ya B%:-0_Qⳙx,Bwg1G~*ƒA`&]l[d,"}k4v.IKrZC4zHXY&av]u~lU8>Tgϓ:[ ɫ[{ iSG脼 (不_C:M1\\SF!(.SZ=q"Iɓʚx35nmXI;Lus=|ԶĴ$ ٶ;% XM=!j̚|*-`\TP{euu*glR[CXh 'ݸX.Z9v1GEzzni\ S*Npêa}g $zq't}EVvtOyIo<1"ĺ1ɟ.KZY\ڗIވr q^P

ԁdW}o:}rn4\7C!ՃA4o1h|nD?/^CSBEI jV؅N<[ t|\2=q7G)#q/l7Tn^wF-!gh|ri)K-p@\4㥟ubݗOfJxgȠ*+Ous[Tp;3"oB(![r.}G I#I]0xI?[qI-N^,V-k7pvQACb0T|q{&.H_q֤*K3'yʹ{t6mS~ g\/ZdpA_\$7&-;&D@~4nP ϰ~vjKuKnhf?}衖CSvo$j?`}=T<7ю];!#O F&;h?|SYc?MȞ "|o-ݫn;&gxn,L_mZp4S3Ccp!;9#['F9msXV%0sB-lq>#P\=Pj=;Yls#q.j2- M. .5BѥWN&yiw64zKUE%Oj_LK$zS}d_$)ޓIR)e}#A{ IiT̄A[Nخ {5οXbT`F%_IbDi{;iҏs욶bKԿ!wn(AڪDU*Q~KzCOˏ'2%oxro,wYy3\&lӟ%.VYG[ڙQ :jN͈?x`Of~0ɐ5Iʱxa((>YpXp|-[ y15ۣ\ nzx 4/[ RDKu0S-^3_O+S )y[F|a?~B/Rך2ewFcO\9A}Ns,pBpmA蔎8t)(ah"1eEٌٝg.ݞ|H(/* f zm; ̽2\=A3z? O6_dv^ 9v9ArW N$gG٩:~ {@ !_rMnJEfz>vP X;>Z\_ꡠa%A\LCQT߾LN JӅ钿:hH>A_  l sԒB[*/.T|ƿ÷:wdhۊ=yd z6l,HgWplJÞA;~'{T. ±ҊvyDz_urx&vYL )S׫lVӬkƮަ(wuv8dhׁ;[fKrzтf,L@:\T̞Pi̘F7m)I،Þ^^D+0UZ(kja2u|Dz/Mj?.Aq G3lE#"G%,ld@Q\ g]$[Fᗚ #{3A"HSjonM5}>z36Ldl;Ox#õ@Vd{ x*bY;)xkv<}?8WN%Ece*cL`n`WSmyhJB\siaNohd\S̊FGVベ #<پaD5zUfÁ<|< ai:mY{lKd]1ڲ֙ Ã6VEȷظ%LN">7-s)PwA2G~[k߉a\`x؃o:_,zYFA)ʵ&!,Ҫh鲯zw:O& Ħ./ER2k;!? ⨇&e'"M+eR/`RUɑ,hKNgĚE3/IS0qA_*cbMy=]BZ_٢b|Mo8Ha);AD} :\eLcmqSb!זwcN%6 w~g+3jl̆B*!/URiA7o#8z0Hbm5%PsoO.qm@ܗ?6Dd쀡 _E![.uαWAÊz̨WyR|<`fu7>u?]5j; >Ggw~V+V.UnT S1qU%N4"(5-M$ QJ*eʖbJNtő՟[@Vwe$ղxmHCzvIJ5qlUԝCKe7z﷫"..j+L3HoSk逋ro7tΕFix^43&#F~"vG/.j}p8~U/s죋 Y ͭ|jͼY$/rktChGTuutyA:0 Z8WU$};hFN}/{Ş;K ;,),;*g\VU syal">Hܤ6GT`=$9-.o%2}nx̮>ω¥D_n͘]Y9Σ NOUMAxm>I0C=~: yϣs@hbB=RD ?n4UCY lڮ40T8K}MW>_g~~tۈLsE;/?T݉`2"k.2F]Kx".- ߮pP%FE CgLHʈ̩Cas:c\jጟǮD ;떅AĽrSU_,W aۓZ|j FՑ{*Glsk]{sZ+Y| 2$aE~RtRL$uUcڝ&B t\j6?01oZ|OKDO;0=ԵG ʱ7UiXhO_4{,? $L<3ysW*O;;^6(tKm0L=QF/ 5wJ\^הDэP 46LI\dh LԲ@S} /b=ށ>-QxdV7) Y[WMk\ʃѪL:+$!rqVif[: ]k&aG;G3Fά3Ru v7K'p} 7n6' ߰UhDu]V_`櫓p,1[~?Q"1ĭ1@_vً4,KU -4uar2{SăSi*=z 2fx [']iʷao5!{[>aОiI}.8`1ߘMT6ոϜ=5(VƝЖo .hfIv%] ,zlpĺApRe[t`HiӦl+yk2.>xxRUO\fm2_؞L *j23\B$bRTQfmatZN^˂OgnQ.v!6 Jb|kh³a^S5@"i\e;g0 ɹOuD7D`E5x(3 ct<1(v'fF 'TġE⑮QvY@=Xr0Am$= EA}ZM竃߆0 Co3ga%ˉ>hcm>I; cSIהު)1jJv֊?|/$ܤK]YCrJ!gѕ 'i[~fe& HT-G輿 6b "yI(W',G]LKSP9Qಉvsj؃?E(w!9<Áӊ DڿUl\ipyw ՑV.cʋwث]CA8]{g'ԈVCJ`O8^,k ՟Aኈ'}!UO߯ˋ?PR.fIy23r׶~eu+?ؐ( 銻阨o?F~fhva.=&$!Jq ZTؕE?VCP -ɝ*Ov`XHgVq{Ƽ<:&# ]0mYA@ML`EkQ<9FBJ=pH…M]v^AN *2/(.0n)v~ş,$x<ߥr=ym=j;4O]V#ۅ.p փW+Tځ0KZ0 -bY"H7B~:k.^u̮6LcskO|y#II;4rSR8GR ow %#!ݕFn}C7Y i+;? u z+-ԋ?tndwq IT4./z{5C|mߖӔCw [*hүg)P Y"ʵ :hK߲.y4њz `i` y4>ɻY挼싐b$'ĉ!׉hpj?ؽzJCkodg+8Y|N-om܏7671z@蹰BSJ3Li;@JCv#+`pgUPhB>7 ֵqi R')Zo5T%:OEJ:onJ G,Odi-KAe/aD#PL4i*i<\xMTRO ЃR*)R3XcqiaUF3vzPJly_f"0K1wL Uh13KPE*%c/jO٢"`Rۣԫ.4;bg7E @u s0}AqȀu~tAJMQ^J5m|\F \q|8$I O;c~3ʭಪ=qAΔYi +)*dMpIj`jta Hjx(S.;͊iWUս`/*qlBwM|\IS\ع*s`HhW,mQ W峜u^2F1 Z:<\F֙oܵ;@sȏ4Fp3Ml]Ώo;(Pn4g_=h(;RWT1V^W$FEFk3u߸vo{lwűbhl8]myKԑZlj弉 {yLt\4jͯUgdcާY5텘^i-aG" 3 I#2\uLMtlr˖{)?;lLx r%LZ?WZi;P}m`s ?SYk{fO >s٤W RshWY#銊+(=#h`-Hd%Тȩ}vGw˒t{AK+Q:i7RO-s[.X45`1k _߷huOF.cͪՎ0XR7 / {Sb+j2I/ޗ*j[)֋;_ppGm|qnr4?ǑU,pe僩t|T>Q?k$!7cU4uøזc`o@oH6#&} mkbzuԃt66]JP^+O S㳱8SýyV{qΉ iOo91e$,Z>D:/[;?vľl"@/CU2Bd|tkq!{ty+e/JwEHP~ Ezw> 3;G>ƴ)pQ noE(kc)쑢S֒  u;U&~IV3O¥EhpD Lrj-Փxl~ TaF㗪颇Tڟ'Ɠ2/o6O[[ֳvò9~Z=tnqp0+`'Х?H&bq8GS>,(p+\t4LCLohL2D̜#5WZ cLX}Iv=QvWA@lY"Xݶa Q+C=f4t5u:=qeg*Ɨe`y| f7.YaO;GR0ii}O$R{iK`AyѠesna0`v .vr0on?pE#Ddw8#<:c@~̘'l/,q#hۚ?H+ɼo5D.;EvW|_ˡȃEZ7>u557`M7Q= ;KykBôFت*~%ZAB}6@+"eb-/8NC4+Z*6 |yBKB_)z؞nƅԦ8'I n QRCYϕfmlDΞ=|'g/ v5o'3#t#c;s;[隑kaO2 B_~ XDz~y3k3$ D֏oeQV8`$w֒Pl#5SO ak L˻F-|xȟ~QPaHĕEi>\)=‰C vocm/a+r&Q0^O-Fp:-VJZjvX*mKW!gM~n&%@>B̳\/ehm\=%4csims4Y\5!JJ<.#,]gw|Αu&OD@Obs] v=J[鋷=%SҢ` %65|f&pX] I)1eYbVyd] V:"M_qs#h l[Wj Ŝ4<7&Gdn9T4θ65RniGNER/_!) mai[ ,+iyqWR 9+YԖ8(OJW+tp_g3f?Kg(FBxaQU $Y'`fEщكK؅ȁش%ROA, G?B &]~"z $mpOiw|]Z?n۬}7CeS+6pVVΕјZhhYH`ľA.̪R=66E3%,+K?JV +["Мu\Wު`cYV5|:PYf;$z7DSY /|ux}rrcnxn˕aZu_(4PqMpn08G ޟ|3 ;=eg7vkkm*w]o~?R'JH@ɪTJl iGmadY,{zP)?58a[p65gwJC~ XIBМDOKG._⢕8[ YP 8d+T|7[.T#V:7oo$^Jc36,aJ"Dz"j_pߓ+V'8+|ud1xF|$bGpu?D(@3M@SXVC?i*t -_fJȎ(@gP$[{&R '2y V)EJ 1pAĮ0x žs ){VAsASN~ye0QQ:1;&JVp|+2 y)d1,ixaޙ(+B:okM㢻G;Y&EL |M|P D5ç36 9 ;Oh]`tu#I,?ɅA0)::>h;>l~MY&rʋ-.8(]4ҥĮqlKx=XyG]6󑺜Tn2lL PXEh31}&z\fouqm5{{VH;ƓXͧwi1JA!(:be#UIΆ_քp[xSg}oO43B 䛏c,F+l 2"oLh;ԂvYu KJI_f> %xb;*Dp;|RWҶpg)YPqXMKC][o*1R5Uw†o'[-n &OזKΥ0i J@&]` GR^:Mf{pqn]1<'ɷh"G'kh~=ɝviDwOS`fh.0);Kv/8_V.> T Z  Qcr7p>~#V;er@W=,;Jѝ.NmF]ۊ@|v)9(-ԡL2NJyڲ|kdՎ9}d@/Krb1rY6Y0ՓۨtcX-7fW4ˍL]h0%$!Q)F8RikoM|r+2e:횡- lݖR8S z._%n_uN׎CWEC@oaDpTҮ Q Z_OGfy":TTWb9RB0;%W0Pu]_zvY)i6LiyJvSV8렕0iBMø檺.$Ies1D֎IgVH*/ #v DH-*)L "]}8c>;6kԝw#l?6oYUR3${Ԟ)nS301|W):6˵^1qz J@#!9O# IERf2J8vEq kC#Lu'o-,Zc4d^\M\!XJt$tⰖV3RXԈm`9 _j<˲iv_ܥBk<8d2f)u'Iy$vX$o:d_QiR?r>kT'0vq5UِJc*Mnx\6&](mf" NTY7MlE*/&bvNhVosˎ/:olD_ ?3o_C&]w ` }[9m =uľT)Y`FPmd 65KrPoSctDtRg7ʾT6A-~#`Fݒbw)j9Pf,"tD#JP/t`pv3&pe`=#»UA u?AeQߙfޚtmaxy 9r^R}'%[[.5.5ar9MDO2E)לzF@#ɜ8S%6ʝ<]'8d(Ro旧lԌ?0mE 8\c\sGLBq-7!Ì:>t!z<_@h(Z9<*RjݳN<6u%x K^i 6lӴt= R2N^Du$̾BvĻ9F?uJ>Ei]ExO!챘3P,+#cxo/t?Jޙ@l5EoiFUVFdgoF kšk45%(Wyef]+ y)o8j-C{ȨEhoj(|R{6Iaf>&y`?[#^:TJAҀ^F 2?+d&5 bH)&?TXμz .]m;Tx'nz +Tg+8(@HA- J)CjkuՌ,D0 y W6,mbb4ٚp\~ VbDcY]8ˋ *kq]A<lJM]@\܉Ӥq~=J82kDZ||2rΕ®~p\iNx[F A@Wz|^PcpXk=fq eK~;ѶKCnh%Jvr>_D ?G6˿ >ℚĩj=7"ݓ^1 ׻/(SB=AIiOIi ߦ\]fc/^&nMf [DƔ&yʾEоSHo dӑ٧ 6xD)Dk3ȑɃuɷˎDul0uItR|~tlE~V# @AY0 <?~^,Qg_PKSaCG=yZ%!ZQ{= 9ɽF~h^(-I7CG? 42^*Cښ3+Ғ9ɺԿ>+r#Oҁ w '|/Ѕ=ͣXgQ5G !=,:xQqA~?t>"멁+>jdHu7~7cU{-,'..g.y4=F a:߰1A~-Jf&ד-q8k]Bq9._ϼ@n'H$Zp\n7ŞdaF 5OY>o#tYIHtHyvʉ m)i-~t2eOd?(.q-NT L?*=8+<&rW_h7N@wnswWy, *O =U牪T(E8o_1#xFPzX[C90,]I BQ~ P6f@O!^T^,Ȭ hwc#u ┚'STtUڏd|eEM4||awX@?5GJf'Cyyg*V??8@Vr{~(t.:Uװ؃447(ս ͇?ym݋z(F3XTa b&l Cpz q#VĬ{WGdׯϣ $s@c?|[̨>.H9#smU5oh*G#OK\ʏ͇D4Tl#*\7WreB ߢa\Nd0YB;I&K}!/%:v)ГLH{"'=WR@dy_ SQ{{ÝȯiZ>802{`c`oqė4Rw_ "qcn%D"+icoUJ]MUtœrz99d/fPT"8.׌DC %"U? u˼.[zTŦqJ[ktRE]leʣƙ_ֽGo'r"> #BVog+!:ާ>+ ((ٰʬ0Z*ۤc) (Au#ھ6qL!OdY5=emp9mKZ{0jOr \\0 yQH`Ld:uZZ;\I&vud Sv,rђZ땝[\?hrarWy0P? ZiZy*E~ak\V 㯻G,m`qx+"kU}S_"NLa 8Nhٽ{m$\a(2?M^9{gd3]CI#h~)~)·xR ɍ3TKS? mH$;Hn,8\7ub9y$ǬJ~ &#k7~^{cP$"(Q*dSk^,}^EJʕf?Dl09<7M^W` iSIY0S_}m%U[F ur+,ng6É3[V48 %dK'56/>ns?+r2OrчWbmA El) R=D54$(e}YKHdV-봜R$yDˣ "LW9Vyi-2nҍ: 4Hc}/i< mVӚM pż!aVHTzMبrAΫ=J#\r['-A&3Ru}'}O t`4ȥk5`)(C1Qbw(vv"vF^"^1"?gU޶Y ,inv~r<_i&` քl# 11M+le=YF}1coi\a`|H2{[|u s`[Njz2h2c('JisH6p7??Pˀ= ̤9ɑ+j>PtX\!d wt5*%Klg$SEH|LDMBj}S* 9 @M>S{5Nh^/t= ܙ7Kxy_!4-) d#܎JE`{&f.IlM6af$0RH*J##1/] m1j6gbDLhOˎ65f BYx(ڒ3aeg| _gW`vykvar> u{Wjy춡\И_uE꒮Nߋ.иWE82Zt4U OY~ocbOԚ= ;Wnc*}6d(&6kGX _OI5A:@C<37w١:XS YL,j]o d;䭡V"H,zq܈';:&J5wuR(ėVR/g~J⋡ p' 6^Ԅ!4BSX]ѕ ӳŁ[<#sq_<1˻⍼(>d[sc WCߤRl`ڗkqD/vے1CvqreKIQp~y<^C-0y_AkpTzf}ExKGP:T3 Y*fώƿ aZSԽD" VZdH˥8g?rF< ַ/*Qswňt.uvggEsb_ΝCX?BOsay)?)~yrq $㸖 p׵Jxx10tv5FWÒ*T#Nt:g=0I d`L>s1Wo);cZ& B6g&DF.!?*΢La_h{,h"\o Dho%n;-p@ZG>(ζ+7j؟pOB&[wtLfWqF']ֻ(NX|2\+WKղ5|?Q5 !{WYԧ7B3}0Yo7q|-{4opr= Z!ߖT9P8–T҉hi Z rVVZّfS] !jۇԾ@ m{:D5vUr6jI}2f$_A;,G7ZN6eV HݕG9@ >J!g5:S`ߛ{|2]0]Ə fH}q]$˲ZR(!y9`21J=+ _K \q8XVFk01&m S|o hj4xK_V_xB%Yc04M3Hj9}3Q!UUʩΛ|tԒH|"0^ x0ld>Rd%(yNei~-QmKV~_&k1tܾoJ8J'h׿'+b;rbs81=~N@2N~Ъȣo}a;p/LtƱCF'R S/|${\.[0op֒Njeמm'|qZra VZɴ W۠G!R5ϲbX4?2u 7b8}6BWgN?pQVB{ 76/xhl$T RL!6e8>fbWH P xRSGV` ]rte}4,0Ik/bbiɴloQ{~O6+.yCP۝ɁFi){^+NwXe8]]wK:Km025-TȐ/^Ey@3HH\ǐԓ<)dMw"olly2lKJ(ܖeaE~*:wh҂wI 6bß& @1$\҄IaūJ;]vjs™ hЫuw#cZ} {å7oi \L|c7$Mp-D2l@kaF QnR*.fA~HQ'$lx`W0z=8 3?:ou1AxbٽJC5f&m @ȬgGxrs+jl~?E+ n55sr % ґ]a ^4Xw>bM4(*z,QtKZBc>HӧH2|4q]N*-0]fYbZLW{-5V S7U@NJUlyGO@dP2]uQ]j9Lm 2SԒfҍrHlEio L^ ӧ%m C5N)Ĵ&k/A#m)'Ewftg,T[Lݶ-Pc~2=z#M2B߱*$d,0LOFٓT"kBTy1߼]<'.+~b87~>8piyC y$NOFhbȅB jנny@}5O.׭t k(vkCX8Ts ;!YJx*_pC/Pً]&8,C]&Zݍc;=.Z}ڳ(E/zNɿO!B͉W=~`'6c"4yjA 93c6d̚"[KM@gTyis@: `cZ/E bAR+lU 'C9wJ8Lm,D^`![=P;CDTz17էg}r!o8z[h!!B1IO>ÙJ@}Wd†=֢Yu`~_ t54ݜxބ݀8.ƗA_c`e-*kalG(q,mYzT2)`V{Ntwv;SibfI`ΕW,?Qgjwx))he8&LZ/Vw5mj*U`wbƌQ,p=Ux\q-IKs:7(:bSZEV5+s. Bx$%k-% fcק 3 _̢r&8ApFᵠ*&1e\4j#L)f3.t+Ռ>΅ oq@i3W@1y ˦j8{O'fC#q*qV<"u4gU y] s~ݯ_4N#{JРοw=4vb+&2ω*Degg#CdeK<Ք 67:韮+\hLĥ |84+=syHWSmG axc~!l(rsKI BmrY&4pٿm/rH|Ei̱?[)Mԛ]3O47 v E-o[v堳[M^/3%RP1g3X@Ih(+$\V@hLRYd7{г6Xkl -]wA۲hnUO}vքCIUZLbLZIˁ#ĜvbTڼ+!8ܺ2,wxhJOB{gBf&B SDۤ /w-&? Ӷ6^6+gVk#GkH 4p{S9 ޱ1HrE @bez%0 g\8TS 3&h(]Mz=BԤMtnDg|̇P0KqGjfM0Wt˜qZj\2K,h'z; ԷPv2j@嚢T5dnYFŒTk'~%>0"{-[{JAaNᓻR+3 Ԡh m%a'5#jI?4s;NhqomWnyrjgBdmEyqiM}lɳy:w{R Uq9;X mw Q4ip{S_m.?Ҏk*%V8>"6Jޫ8(?IIO"@>7 ܙPdhON!rY yd|vLlkb^.l瀲q~@nd(%vě*lŬO;֛ ڈ /|G#!<|2Zs±3&;_+ C> @e2ZpVzdt; }8کhC:S%JzmL  ͑J ,,+T503O,?aD3xd] p% E({)cZZ =~0bOƈDDㄆ=UV])Rh:d䫸AL@V8=_]X |⪱ JV}h%@E:5W&ekSRH}\b|I`Ӯv`8N댺%deK-DCΰpq" ZFT a*dM*evDCDkGB;m<{ɷ3b,]yR<փۥVןF#*ߺ!\ сK =^Zx![3ƇS!lK6B1߄A>ul.x`JYM|$7،XnDɵʓ `辞’'[e1ۻAj.M;,@똄Rm{wkbU6.RUcJw8H@ԏx!m?0$d';IQ)f$4B%T6oAGp5>$+X燨*~(DM6"&}Ǡ_<<]ؠ[&u%."(_r9br!?̈́uk~vyd4ަ8<&1=Ax;FoR? sڲq+ +MpUdq)C7oFx%0Kx1s3$b4bͬZ[6̌BaqXIo \xd[FjX )uP,B0Bl]w!C&8K^v BPc<|wYeBTk'NT}9=^KiN"ع1E]-*R>)fY?_y(ƞD74,ITxOUR`3mts)jkC66TQtF#wۀMa_>N4 eHeZBTνB& -BQ#Q[,2.Ep8|b+Q^/S5(w+ʒxּef+>(@VHzƩ/s͇]edp. lVaAAsSʂBw!@ES#Xvt0?|Lw@P#"9A( 29-v MFnϹֻXq%#d/Tֶl4`e Énu@4|?y&@b}MtIǍIE}[ymZ)3/|Cv'94lh^cYך`S9(87'_3*陑+C 2N&y؛љ0Z2<%IɍuB9p|c`̿`OBAcѾC߇(0/^x<I uV?Sv'%ga(Ɨ7v#JkܘԐʹPɅx.1 _.QJnV3x F)=b7q{6|7&;Qz s06K(h'h.9}럠ncRa8Х'l"y(F]&% !Y.mL,U>Ou$A-]($z(\kZ"&c{ 7*88L51!y(XhibUjIWTU_V칌tLb5#,) i2 XCt8 lVoMb}5S1pKz@ :wj]BTG4Ŝn#ỉ95-#JvfdP@&^y Y~]2C$^xjCOV7 π71clj>/>yFr!V1u)9u1Fud~'@K"34*嗌!+2noGQAxV-uvj,&-$i>|RBxƑG=iR3|ˈH2(.Un I]dDB?@,JpPCpdcxl:xVtvC#%\?CƵW5YMw]7qk=r:`.c~H\/]"9GʬpBZ1ғi0ZNFDYR/9zBe^FpDNKW䦪_ɘapW}⸩.Ym^IUJ!Ѹz]B{k3[j >A۱uD |JэpA9$Te ЄS rDbgP0sԛ<0q\]1A䔥8t?>kT>:hM3<%)ӓE?>MllzGCqCocZWw<򙖮S><#o5ЃFo"Ѯ_$`V1mc̊Od`X7ljj E)tdc"eax&8?VX>RmKak{[ǡ{gI\8ocju/Ч"tH5'dՃUR7x Xu)zY􁩵C2DYaqN_$NBsp|n2*KH*uQ8xVE#5 3Ig+s|U*~p%(@!iWl>S^f3Cl> 4E.죴lC#h[Z y ~[K57&U>5=Z9\'~K JLa2s?;TxȼC=H4VU׀Q)wגgw2%Q 2+E$f]ʃ7]alY:ٚcj!aQ)#|P`R]EٔtyHZ(|;D+nwcr@u3{yO d7yռBEe } 27oe8O-s࿙ .I @Bu,;2:R`aA-*V#wh|+JvMЏ:>XHR:8 { :]=|;'?()OtYk!C?"3:mmd;3)]% mW+|D*`E7JZ˿y9pcQ^r+3fCu< ' 5kB;~8=J RDrv>؀yaZ5GBet@Xl2C={f'Ch!RX~UVOѯw>&m=70^teo^7%KV6TņzjG32~K, Žlކvn$k%h=0l?$a )~s] @j܂krSd l]PfjVkF; d[Z$$,FfV.ަ}eٕ`}g/dgK{vLRZW}7nM]AIVd\7_cXhBGln,TH|r6Ʊ'Nr~- O6Gb >m$b_ӿyF;zfVaV-|:ַ'? yB/h~6#邗. B?Ⱦ6:Í_sTZgv;U\ՋwTMw@}tc`#w>]ro'l1Ò=^A(XTd$Pg:m=\Mm<1,1N w CS߿'o\Jjʲ1Md¢w,&=ɐc&5֣ir-K e>zl߁ #$Mg?ko:6׽|wѹ!=ڈ+_Xl!ʋ$2H҄kk qͬz2ifWWvW%!a)e.carΕls#Ȟ>vmaWA轟/V;DlҿSo03C&_<Ň5(nr$rj'd,T#8@Q"Ŕ!NrX6:{Q匈WHDИ.&.V$l:īlOהlYim;{ޝe!I3xN ث0ZQ2&tK‹9N A;A9+rC\ǚkmjc7o8+ lfW,(o86}~C[ϯv~vE9F6oXh#(%`%<\R&GMVy9iw,%{қKG{M3(ʷُϝdE ^98K~<[BIhikfE˃Nu2%  ,Y鴍A &ӅﳎWbOmtFՅyo;Lbz-yt$=bmߔΕ7adfNXo~݂e'&x Fr2%,QGyI<|-gm0ڠ"Te_LF~.q, xCjydLcxraX ~ $bfwp͹Cďx|K9oeS;"uq*_>qnuit,j9+7*ÏPM-cy}{YbW˝̌t8vde (R5+3 p!o<&>AYU#52ЩA~Wc7@]} ktw}\e,ǿq8TlX!L\PÀC ("NyyZQaE-~X4*W 33$Bucڜw.:q BCymifO3O~jrN?,d8(?f* #7\zTެ&D- +$^BVۃMRai0lٍ 3U0 JmgFya7b۽v\![ 9 SVsZ.}y\_ 920OugSx띓YE􇬷Mi:*zh8vPACY=v^6(ě?>`EEpzx{聇ի34^ЩB6j/}ww(~^25Y2fExF+oӻ..:p60#QP"@oek}+e H"k$5nCQxswTIu`77bp/p!$ LV{XHG?wg? X&;0àZ_%|gٿ?*JV jk[Oٛ|w܉W?C^כҝ`':do_xF6 (d ʮsHžKIʡ_?Ԓn12koGWê7Pʜ#|dKm߿ r~zyeX| M߯Z&D$K/>9:fnlg~s3n{m'T}!>LUlQ _cCc)uX@њY6Qؔ^(Ʈ<~?55Tg^ $j(v8Ԯ2yR+jI6{(= L|1N$"JIO} 9`:'6|Qai&w X>&{:b Ų24+u։oXh9#hi8Tw&A&jlH _ﶴBJE9 ]qJMKU8] Ny E-%kD7?{\H`@oInb*a>%^Mh 7c>nQ$ec?{ '\0 e;LjFgp@ ~,"YN6Un$>f.?bСO_9x+Ę?g(M$ VWh3v(,JKS(/##f8#PX-T3EQ47 # a#Xy&w>;v|`g8X?{eRWyO\HbXK9@ wq0*4s'n *@DF67Шcuϒ:Ų{`u#O0b`=] ?JBN_ &e:`=$>:vvG|mmWMv `${jP"q;i#-Vpc!"sBJpϽКӵդ[R9efogU`"TPoh\l~ o j&NGzEڣ34?^R./S`1΢B."*31lvY-"E|CX5Z$@_;Cڷ-gq)_ϕ2_Ea&NB($ib:h*PZ2EuzO(hlܡlmbW/NԐ`%B[ v$$:b,ƒvU}8 ,dn@n]C7Ò0ERm2Ԙܵifw6M˨ (M_c7ӀB|݃s9QؿTwЍй|;s%j^@LYHdm9cX돝뚰fڐtd@-cꀖu OwƃCÙ2z)g\ Ctg8.N/z OY퍐CzbvY {ݏ/?˟&8Xčٵم? -(˧g8&蜝=L@-/\%ZTB\W_(@)[uk !jd>祏G.V rLP ?[@b8\;P&:L^yO8ao1lsͱ6Z9B%)X}^u[P& WY/qTt,x 'zK!ÌْcW]FdX2 e]ytf0TvSZM1^9ha\,$|]Y|+-YMI3(;O\6X"4jw=3 j LE7#o' 7C| 0l@EuD.u"y =RX>O@aZHjS>bo> u(3d@_Ncn!rr Bh [1buٜC+tq"#z2oik_7;Ua`-C,')ƭm0W?TWUG`yq.y0XT}"3RNg%ɜZ]z}{r޼8iNJ̩!e\f&ՄMҾpH"v{,T@c"¨fK&5@~j0lmƒzO >XV(  ,Ψ6Wr2;lGA-y7BʿհMթRe©Vvۮ8ٵbX酠 3jyn_lZNn#jGqo6ʎ4ى[CJRf%Y#Ũ]aFwD0@~ixwd[Duz#;jz/8\wD$rY Qa-ν۳tH?9mt=|T8k e<RJ$& 8UoD{qR~35=G>Y={>I@GjP,== AH󿂓۵EU/B)ꅬЖj}RVC5QyaX5C"Y#ef+0.U8]5HXSG*(r(,*p\qEx+F܀%<$˿y%*[ 9X V+X8j= QF&" <(*edLBn%lIUԷsECTc!Iu`Ҝ!ɭ{D ,Ɵ;u J9!#+&nJlnig(WE0ͣX\XhY"7M]jƶż9 mn4 *Uve'u`Ze`$uZ8]eԊj<{ Bh`Q ʼbfƋQOZ$E\Js_7؞q\/CvV m 6<ƴ1S'UZ˟m>F~ylbwj|_ w5=Zp>Fo@!YH)J4@}P;p-ĴY˃կNL߸5F@3_s;r6pP8"?8 aϷ5#P|IW}htYf6u- "# 2f 5$DGހfQ5|zW' R80}w#2Q-W 4鬕;(`8y&tz.H@yDfd,Ta. ev1eRq\jb{V(#k/y#[bw-+$ w02s淕$lW>n(8|Ǐ# n\TPbŎ! ``\: ^^4='mMM~ 9ǯP x0q}x7dOg{8m9f~`ٴRW A:K݅5'+)@n.T ٙ-ggыEɃ*AZK-=yDB߻+3'ok':QIO|r>rC._he$$ 'ejwopV>PAKrz*,=EҹB'nsB 0Y9]ȑ[P`!fLG$[ǧdRyS}<* pSry K"7aqTtSb<ƇՈWD`±{Ql)r\Z^I$lB?7MXosiK$%`A dIض)c/lkXB^M$)v&~YADN FY(fIngʩ=tMor.HS D*)>1|a;"JP1J#w%NIrI~Znsn#5ˤ-8~c҂5= jCGT]t6݅|Aoҷ_p~E sn8lp ^"2Iʲ=KC{jKƋdldW]`EEpu?a,"62(zB$DtWΤ(uE!`V#dq&taB~XOOSY}Vv]U9l]ɝd H=>+Wcu(m-3"@K+P")>W؛ly}Lr 4_~$0Wotx"Qr`mhVnI5 JuVʐexCIw~IZ}ϖ[GA)+Crs4 !GIj9pLQ*3hluQTG"uNF%3A0?1 +hL cԵ%#mLM#pJER9-bn"913clh)7o՘pibLrrX!ubdACE[A RψJ#[첻18I]} 8'Q!'C\Vj'#^bocӗq~51j.I4D'|15g UKv*~4j4`Nv/Q4QKD~U[ӍBH:bzD -o|ڝ<ӍGF hrzGCL"0PP2(:\F~vJ~7V!->p(h )ߩ SRZENT`S#00~'SlI{E5~iD&RU>m*vY2] $>7|.C͑o&C+L`y,S'{GqDk:%=ĤG-lo {T$>&E3d" 6EB6we_F,yTGH1:FB5v|Qve1C`& ~ּs{Kf>\䵽W/`!A:'ζ/9DB#1,c){ܱLVIݽ[="5&Wa!.4P r'(Wi<˙уk~CI+RcoU`Hx?kQRpг_NʗĐm25(62P?[Y'dWpHǐ}+5)vZ;3qr S!E}ԩSx_Mƽ||yQ%/ؿy!jk'D@AJ Np(*{*`YC@ϮkM7V-,GFz?k9OC;Hpǹ -!. \ڹ2=I"`B%. `Mq34[,gjzσ[Rzг>~24|Vz@k^'f:D.7{B,a*``t.x&4MÓH&EmL_N8h9 &:AgwT 5aNj{ƍx*8VfW$ZgC7|xJku=U P(dbij8#G24uOpE'MQe+#$J.'_O a6X0%L N vaBx(EY]fso-RR}a{*8K+K9zjl=G,n)]Kgz8֋h!,%S@Mi7m53{YϤii 5 n 9`(Td0:="BΧaMTLz۶!k\l\lGTކY)NFmRKUr-!q ћtVjDPqtpGp>NQ}IgzvXƣS/󫙾LDq+10e_<%f67l+ *3Yk.$|ql?0^"b(%4x&aSb(HW< 1uLY5"$WܣBrWMYIS!aUՅ9yIU8Ng`${G\IAc?ŁTȾoƻF,(P3,oIlw_e=wYUc%|H2x5e6,\M%+BMKQHޏ#dҾ6:/NAί۴.5&W5QEs3+ټ[wR / |qMvZm'# XbE^`aQQsNm6Ĭ$2tW5nUY_M!vw"va6# YP'^Ǥ@hI~C+ߏg>d#haZ35?-೐;w2W]ؾ/SncS :bu  ]~e֫2Qj;3Z6^*8C#_.p% K6 Q}h%UKSC޵;w՜GDE{Q= og}W>.X *##&cŭtQYcUYs #c?DaKQHۙĚ }+h54J7B[>͝ixLaԊY(Zi?=#w+_kyB`!,8א',0D(Rbϯ!''TNL$|+=zCb ; "+#6wAI)+Dlt+JUvz\"`|E%ٜ[41.{k_bi5J8./'svɠ88@EoQCx9^٦ "0qh&0#l!*lcXlb\8zcXY C_>\O屵wn>߽m⣡h^\ K# CV#%sAsaTU6iB~u/ )$6$LT+[ټD!Gex1@KDX z_ li7̱(Z-uѐ ]^&/q| 1)zNN9BM_ʸo/}@k.`jH|-ơ(һ>; YKlͱO$fG 9Vz33'4l^i7姥dT zX\ȵ1}l+ݖi*<{Gr,w~{9Fg֤Hqz0*尐: S-Y@،_Xm#짟ī]aQP'D,S=؍hIr{Q@(џsQ,8z졭's;+F@~CjJr}Y,Glr^*|m>`udu0"r4f&~)K>RW_6K.$ߣTf3(vķX .G@sGoG2-e շQYNXx)*uv -h!'̍"jB‡_Gcz"DE'k\4Ǿ[<{پ, ^ז=∰yKv{!c KU**nM;]!7T>H2) ӳͿ3V/09U+Y^ۨ=ZpoH<Yc)i;ivE؛UrWXkzC)zP&Dew}澟>;SHPϡrK:%6tN8)r8Ám.*dAf%@H@*vX m'*ި<K) 4ݫmE@ .\΀ ꉡB0U /e!6J*"zZnՋtRY4$Q6~IamĢ@5YӖg~F4|$oPM{+"LS&4R1E}D/Ϣ&A);2xO!lЖ81黕,õ4q bizV[fpa)w>]3J&`˒ QuG}0j, yh.+$|xSg}bb{T4P0ӀT` =4Pp|ت/I,Z|ؾ׉#sY|F'%"݈9{'S+3(b0^mu Ռ*$+{!0qbpCy)ъR8sT /&>vMiT:^ 7];p|0㭞 @Ċŧ/.@k>AWN=?vrƄ-lU[@ϴ8O*"w%]8٘iʼnMRT ͎L>kX ݴ^#8xLk3DM/Sa1P6J"bRPF3TCZ'X#g8,,L9ژwHgPV?VHw7fbY1vQrDFvfhX$'ʦC ~)洉 I2p^GZqBbvO5"pص=_fBd!U>`;̆rЉi&$'K,*H~#Bq Yv̇|:!Q"Ϩ%Dric#?i/>GX`5O;r| dkcO2yϋeh$)1 T׭ʽ< D'c/j+2PmĻ' ™M7͞(^± F*FdWeTY.lˊR% j^szW6'Xd*6uxo(]r{)*PKl|ɲ+i|D7O*n)sMV** dȷ{6ɰ& >sR|cXVذ!j$WʹmA#`CDV䶤B S[K ;(Mf:g.eWݒ^)o *wY"3vUVTfflR8Tҕ=%Mq61auw */яJfZY\|4%PH>>4 qXזOQ1 C(v4PmCndXJMP܉>0+D #U?ynלY{Uc ˧^t-NЮ8-; Bw5i$I Ojmb_̟Ʊ ]XOkY?ˤ]]tW@n ĘPwčk|gu±Y J\|83@oSo<ݏpr6@şfKVdwA1][*`x@/EV0C1,Ԣcݓ7M~jFX,s)E0Z^2x~8tv!IÈWkWӆ=5eAd1O7KKww**?4_G!>bP`P80IЁ 0:3,JCZm %ng:,Cct憏L%"{%uv59`VD |\+!wMCAC8k- ;>M粀}Z3,aB3v W=^'m1ڝ X UMkAjRtҢ3UIrhp'g3-|$-PbRxIb\fR+{e؈3pFx) e-ֽUsޭ55׵TDt;:Pb[g{w-.,;* gz.fw)P)o݊%ѺSϱR.|:@.JXԁ&+ uE.|^WB31jjNhKM{ Oy;ĶSY*kV:jdT*Lhzע5Tιjҷ.~=UTsbQP), tLt)/5̓˧A̞2 ߬!{d"Y!igaB$FDȼ/+bIR&-"YY^ ^qz벾Q45N5O[YvҖFb 5K<8%Vܞ?)Z!':8 I/K@ؼAܗt&W]GU_ۿzqe˸p[3A7\A]_Y0O fJ)%|*q4,eCqG=CN"B1_9Qon\gPJM|uh^+55LYU WaKmt,/o*eu0 LJ6Y^u{Dح+(8N6L;K=:{lu@y?s }U1!2.&eA)&iQaUg".*%Nh\0t [E Nqä~%Dats4gz[ѤM'BɖЋ?l#Rȫiw+à)<uZi&و~ LYK8q?'imˈ-? -`1s8elh%sH̭nfC&$gt lۃ *3D95(CX|hiij^:EޞM MxL\<=$Dbܹ vJ;y5~nwǸo"bS;ye-p+ Yj&Yɾ vbKϱ.6N+:5ɐ3uYb<8b[it\kNBKsu$QI0bJ_$} =b錖>OyK!h[y̹F跽WF\3+؛#Zjq|9F>tSk\F$d:ӿ\ñЄeåD`)l|ymXuAf%-k-rcb ֶ S{܀|wAVۮnZSlUR-U\b ՇتObǢDo+9Dfruwfa<8\-~ vh*HndYCn9Y [d <9) _AeC cc4X-ndHQg.S"U<2wbn]OO#}YOX/M#*@Ěʖa`q+,YC_QǔW{r`~vO!+*'16?B1[Y8Z0K%SV0:2+#mScKB.@a ^6*.gnp/A(jdںcqqExxm}0Uv͂KPt6x8y.~2brA.qzR;y'/$ݝ2tG85rCہ%$#$" u#GXAZ{T~Q㲿ހKJ{n:ŖL}7  pDI8\F8Z9ێ^ -WcRO9g 6q`{J|su&t"X*j~Y)_k~.Ճ񔉉Fh~(Aelˎ%xQ_.._K v 28ogihB\Iy6MD|$E(*yFRzFaFtykǃ"KcNUǫh6>,LάʡKY֓5iAtq q UXm mzOj1"sfZUh5piBH 5ȝƇNx0=hSmU tr;j/@]o?S궇H=; ʘO:U} s`Vr_8DZɉ.fLDe=oceZ kXCql{iLL)UL+"5Sy=z@H_z6X ƨ e0*n`+m4JBb\ѪZ=[rCD%Kؠ + }M܂4-V)RrO{V$tG%邎bVy/Ƶɔ"O7pLl9\TMo 9>;nH70{$8|tGY|@A>QK1Sشb+T#F}j◈嫜!Sd5Mv$~J=][O 2 Y$M?Z Q[5EK2F_ʸ$=yHe*k7匠TGgT [*jRSv /bfjsAxʻ>_$Ht :dfGS!E3EU:@?ﵺxHo*OvTԸ.ۡc=r3Mt"`)Nz9'CMB!W[kD<&2qU0@R{/:F^C44a4q?3'{p)[35nՆrr}8F03$2<̭YڿӮF˚,=6]e`nu0E]x qAg NƠާ|^kK_6j>*o$G &eŲ{]v%3*qu;7-W㫑( GTgo2ԺAƲwM*#Cl lrȢ> ˕AُlnCljHAbX5Ӌh%y MjHf*\H!.yĸ yH/)Z66Q~k뻺G m!;y-k& !mxo1iumVїNo;E`)?QQ`*y]9LT~cGx|3ѱ&l`#{.nWhˤؐDCڇ@r,SY3+ qAdeDk"{ 0#Mn+=ڱ-q-t IJ>Њ Qu t TKƣV@ƍ)xE2,-V{7{˼e{0U KI3Zj.n\:9-OYL<9D-Ghh{YBݧ6c@*I vpC4 ;z6tkB)]ly.Ŵ󨇰A"A$_,5(zJBGa|m &{ kt0/i|ds_AJ6"GR(8kԄ=enxN+ #9CDLI7b4.:*y UMK1[/$'U1[覍dܶ6 - P͸[UN_^T1(]~8CaK AҷcK{x9^k1;*}r hYsa--uk)9'_Ҩ@ 3i%N[ *Rc;G8~Xn c'`>*rpUcs%!1J-⽖YũJJe$Z,Zv$Vlk孎iɗ.#vvGV֡@m xñ7HLXw6=4SD6hi3xE_ٮm(}pd%<;(V2CcbI4K]Ժ6tvm\_pֱmX{OjgLux.4pO4t' z1VT96ќ8IeN+r8`y=z-7i" P'0#8ӎUԫt>UI&",ݤp2,py(1r4NeW }hnÒq +f#GɴvGY~bC)h0h1()Eiq$ `:/@+@Uue, Ewi$'췔4{Z3J 5C r"C,>HyRؘ"V/v .ЦwuGؤ}GhDϵ3]y {Zq9;l3b#1 )^Lh2%`%LlI0sA9|LKFoEwׯw٠gBرbm@?+T bXB"Wv/t.N81 @2"Oö}(yQ׳r!۔`>/$z8.|)N]>ז? A~m2όF%Sk-]sSyHsw>_6뀄,>ٖmOqb^F໩Ck* ΒAW98,Hc2Ye3Iuxb'C) <8lr*E7O &g>Wuf&!6A"sڑdk[}| =YА >B4H0!VУ۶SF.i")Eymw?Osܗ[ʨ. Gy& ` j/55BΰS8kMdyana~@@3؉ )WJʛ 9_:o+W8֥9q4`К~XcF/?3ĭ=O3>-MTm%}u5wZD>LC!j4gǜ pvEԉNTƮNO}zXz^U[ ( %K].>^{JɸI/%rNpѐ0tD6To3Y߂ցϼa7,G Cz ]LEhFbigL XX ~RWqtjB@2sdK?aY]rxt3bh4%,CJf{*RfNw:4Z{UՕẓɏ .wd*_9 t=O<7lc?jȇ6aSPs,2fq&尓(A W-љ ǩs_ŀz'r\*e@Gkd 7:_av%'@3; m7tTCr퐌&8tiyJ JU'`]cǜ8~/^N1YGwGI(Hq74N05{VO^8jy8.f*q-:LKNdB4Ƣ+ 2ݨh0=A֪oN`퀣J=.E|Dss|@[;i&a[Sڜ "QVMnl^(4 *xX>=4\;BylNgf<`1h]*0#85ma¹ {I$lݐڪz@35!9̀"E8k֏ |E ʙ%vfqU`k5IKg"4y#K(muw6zNqq!1tfO.yv]Hp BK@E*m(T N.o9ΐ%vHoj% 2OޓqQ?t/^0,)c8!Eu-1;B.z*φ\6wk˭miW&6.0__-4r-qu?؉K=F:ڧ|3>a6.ۡr|״'cW5Io@"-A{LBd ;,57ݼ8Q23iqH .6 tHIc3|O=ms6N&Vsi^CFX4)^FN&4\҅4<xJ Xd 1G42 =n\}1V4qpO1_FHQ*Nj̰BQɵJ*N/S7A:,`.ĸ=s̈̔9bi#Ǻ5䤿14L:,n d%+qph,}[g J sss`FD[3.iAVY@yʃ[Yy< : Ѻ(|4"((^Ti|+F~\V[Ɔ鴄0b B+>/rkߍ7p Ge"Wgzc '8/pcT)"6S7uU.9 >J뎶zyNM3iru`k7=yEug.UwTGX s/j"V3 0*O 4NtJZo&w&~InZC -#aWr}EGTܬ`aE6+$]W-6rڏ!%ۇE}\` Pa:cEH,Լur|IMCAqG;@.K&w ()$ثm϶9mz`dXz5W*Վ< i0xkʬa0faó"%K=1 6̧w D,ݯJM#tiiZ=>Й@M};(G ^(cu,IŹ}VL/p490~HuGl^_oυN7w€6FMZ@ip2 r%3+3xg̔6I@}G{jtF}]KʗBkd6E\ZujV|||qV'|{s⫔=:v'XX'6FU}(8y{lЂ*d/LHh=/Uq gyeQALa j]϶I3svJ0_oKs Eb*FҧhU{KLB/Z0{B>>Ev:!bN`x&q4,W+%:ï̤DUfIjdu@6Oµ+Aϫov6ܶ *쇻kSqcNG#r*ggGu DF>_I`9Xw0i)K6kBǐH:%*OM |2J`֡u;W Ɖ̹VӌF_}Soh(Lx o+,ˉu1b=KL.Rv@Qΰe(ʛxǤ=+sF)>￨iD#$5(9+FQ!pnF02@kda  W2!on:}^U35@9sKy2m?d 4R8avFx NLLq']4dBH "Ѽ8Z]{fyw!pG3[sLyPY)v8w0,FmG1_@Z5p ORt1;2o+9kVHum.YYw`=##dj7Ov˄fʱ@5paO.hCiH,rƥ2˝xUi'{^՛2 OZ yșA%ȿ`qr;.}H{?bzo׌#IiSbX2!T; @}hlW-C#(mfٟtu IJ+q`mU>l]:3p>QF(,M[B£;p` mY}Էx #â t˖} -.3@mF9+ c=K7S \'6?*g!R^*kb;㕠<ڝ${~pNC$,eJMvqx~N(_11s+IZD{`TV.΂nva7w%9$:.6*e{iLD-XpRNi=SCǕ K$5RNa )mL.dkx{LjfiJs࡭߾<uɲ/ԫ+g$2YC\HLAd @{]AĚ*n^x~<}I↬? 7+݃J7CT@wxw Rb+(svi&5hPxObťG$$*$2WqZ6}`Uoy"fH9!"wA}Z30p `.Bݸs Fh#E;1(ƣln>[O ٢T4}o&+9Tγolk6]AoKYLѐis6psUZCjCհ$SA6D_r}~Q M9x|K Hdvjx͚(w0a׋ۭhc4 P8At [{ Oh H*Qݙr8MK4$x eU䉶^O8a-+_<># o7@/ߤ=w@0Y u36I>HrxLػ̫ͦWk5b B@!3RF2s3>FmRk:@BWk;9+VX 6hf[vll(`in. jWl &rȎCo Wĉ:4QFyD=췭o=iD EvB_|1VQnM߲w$hu Xj*Uz|epx-ş?0I6%b>c;` \_qM*b {in-Ͻ2'Z:v#TD)&)1=ƘBo]H_% z SΥ&^lhxwUee~4eY&V܈[t#FoLAmE 5خ'3 }ݚ{RWuj/%a;%{=y7Q+bgl WjKb|*jF(pNzC[`z3rX$X<Q8?Wվ+J.-#Orbc7eeDWhwQ m2A[9s TXOw. rȰH}4 lֱ4h5d gc+xWst04u)XXyC=3%(pkV<]{:"0qp* m 2-82zxnИ9`;6eFD IVtGrHy/~*%z1y*ǟC^ӄM*=_R+DStԎB(z{? ݆rР[G.c iA6IpHXan)1,{"$`u[o`؋tȨ^-{&u9|qS'\w˅1٥cTHL—Y[A|MpTBķS.ͫ=vI(`a&|ût`z~6&3]iFg,L\A \'m4WGO95ϛO`=[fRB":{iaS^+{/=nDLBE{KlXlH(AVyT̼p>ȢqäTAU'ׄk_M \;#um3pi7T\ "4=zNuș8Wj_b3 ؓ n BVe"3m`c2 hZ<%+ȍΉk%dFjY5]xܓ|md Zq"8*H'ZvԌkr/!CVᇶ"vw;iPD?⓷T: m~ JY8\ǨU&M&{nz/8FuzEDOY0Dwй?SE>/>v;LzLԀcP(U9l[;R!~:@#YZ`J%[G C\]hvk!D=- ,FeBҎ/0oT[pSy25#2JɐH*m;O J6|_g>-8w%[/!gĵ9 U5bgfJrƙUK}F%y`ͶJ~bL5r&ViNLg~Eah0{$:70 @ Jav4E%jGUZMMUTs2BMZx`)Z<"*ruv{`p#Jq7g]LbRO) %gnP=J;eOl5W gZ0 X2_m;kK^ Dz)&Fa)9A|KL2"]z OڰӖO6N6)kh:ZvlF@42a [Pw&nRPjTқ|n-#G !q<8[|f'oMs!X kq5RbIWcMz~DBPIޜs7 a3^qgz!?,ˑ]( |&ƖP@@xp=#Blװx>mIb.C zbQ`J[AM A$l)6u|ajY͙IA4jVC:Mx:DQ 6?݅B4&LmٿԓbbgH ?i\^>FɈݓ\GbOpBmӂmGS}{7 2{R_ R8=]9MOY *=@W`~[.BDNm;SٌɣY#aoU(pHIimU vv 6<-t& EC8Ԧ<^ ,/`X`YuF%6[V!)AW}`K-eG&T v0hT"Oyyf/3&[8?+򾝳b' ž5ysJx[D 0eUΌcm΍wS)Fhz윢wR+gPfMfLJ P۟),² ']*`3FWwiBRl7ɄH؂I[x1E7? d/cvR,MH0 _:IZ.RfC rTՖ, v('Irļ% Q +NST'ɋ3! ۢ;N +:ecŪ#;k+"J>AޒMkN#cLhBdv5t`9 ]xjW"+J&LO`Fq_263fFi L~-J\9l xG=Fnv(3h4Э80mɻka, R̟)TW| j~=HyKOdD a T#v-4 sCzgbbQZU9HPV׸hs(j ռ ;E32뮿\ =2_GEQ7Ӫuw?&kֲB:] >  Xl9;Q -CUCwKC0l ڒ+k^)H.t>^iOs۞}Cq-Yr6Q1 SG&~!§LB:bga泬A'sU SBqnVF ǬU J\ :OZfVrotā|S8vEЏ&ڱ7mLϫn»ݓJ7L{FG6D i6?75Fk%u0[5fɓ}~l*]eA1w5>5DNp.nu* _Ư:0ۉ4=28 =_k5]%ŏssY+>a0YJmsp./MJa<,lj`U\_F8cJ?˾RXsݔs+5Zm1=N0ňKf-dks/!^NG12@>`"kݤ: @;P}򦧥W3Tο|2:jMF.v$ 2ȃ1vb +y evuީkez/+5\]֧Sۤ@1Dڋpw٠ף_?ʥFbVd7O3xyXe+%}l3nQ `JlÉnÀ:1޿nS(} Q"5Q?"K]'_UGo*m$}}pƉj ^-瀥JB\h CZ\^4 Rtcwo7=Q4~Z/#'$=9.@6r5VDr8Iy7fӫH䶹Fgyn]Y3|P͢Ɉ@8Agiۗ$"/A35~8| j dd+߼\%{n9\g5@%MHd26$@z4Տ2^^udIC-L,_lTɥd6s|U 3trG8G QhK6 |>2@\܃i~/wU}X&٫.<$U*mcjFZ[X{˂d~>Kuh&/k3xq-!h1n݅h`zKz#e*tMv#W͡ EY8˼e&[`h_Jlklt<< jY}b2y$Rx"oKc7,VWfg}B< gٹ RA)=Bˍ`b6C7bI۟r:5 |Tfێ?ll='lS_\ S<:{ + Ճ+WC6Aܣ1Cůb-x/pOv }ZB6kWG"+ ]6ՠ m]S~D3UAUi0O79L"%$! -Ա8`DgMbad< ŀ ܐ':]jH_M,’@" ;s~z_r 2A|tL192F3˷wȐZqUB=r:<=UfCiq 9\4b"R#G6tIPiw\qԍw'H%>4?מ Q5g; <$>>ѳA; lSf( `RH?Q[mqި͵mKF&Nj1NC Kq'0ko m$#H'?}NrWE8yc @|h]pMfc}zYh\释Ґi SaxY6-G#_"1N|i#5W^g3Pmvݑoin%TYH^ `k1Rj!uAXVg0y?c$ճ5N7 BRoQOmj&Qgg`.p&aTan{u^H/^8Bkb _j"-| _ ao#1nR?/$$>o,2?kǟ r<ăv@J^؂K[JJ0UA4c¡JjFMDrL3jb?: x $š]dLR>‰*A7$ Z37}tl1ۤ E?E *n %~'0!w%u}n@"Ccv~;Z؇]rAVr |K\2CuC"~h#6csQb D*R I?z}D5XdbȢO{ݯg9C.8ש\vp#:PԘwHHJ|d3[UKߤ$y $YKյ#KRFj"OW+/]gڀ,2[ 2ߞC w?yXlǍ&%jsۭ ]gd{cdr~g"wZமcӄVyOHqͯG~ݺc :ENф;,aFxu6<$zIKl)_fK#ehv 6Jsm`Z8N4y$━|h`|mQgD{˿vnXwݘ0B{ r-cOR__y˽^׉1 ʫKHychI˛Ƹ՞'-ߙ0AfM\ID5xꚠxn]kئQD .I nz {7>1q^EB-A;ß+i,.>}|lJW8DI/Mnv1Sն&We<,Z,I+(eh9DrF8$MN$|I!ayvJY}Wu6iy/Zw4(˾BUbC[ب7_7s\M_!$JdcDsCV9E6]6/2[Xǂ9(ْ]l#VlJ Зcc ZoB`[Z­K#kX.I'@u޸\X֫B|u.&H޷d*w$b#K&jL9 7@jXPh SRDnJ\r'-;1JS}(\Q6o]BlUvß(MMujd& BԞMf_PVޡ~yN&sÑ|HAD_bnqw뼾;W: Ee=]g"dH[1@إ_&]'jrJaya!ÍZ܌u4#4SI4WH;!TrΦLZ-@ "sd)sBER3{K |R>䮇mp4>]ʁbZEy#C>KL^qTU7{nq*/6]r7h}IrdÓxg-˝RqSOPcu%'G'l89s x/I$fNpهJzem̝xM-׳c+_㷤k(W!_x6&]Sb~%p*hAFĆouXRv iM踟c`|huKPl{ʫբF*nD#\0DciRɣy  r֌UݤHkT\f7?KUET ьS,zP dLfg"Т/|$?Q7KW@lQ逘7sn[5?#I@tq]f:\:`w8_wU+tp &1t_h²Hr|JFAʾi9!t8u:o}D3[%mURq 8(x#+AI}XHbE.3edH+o@ aħuz:fRA=Ezqo3؟0\Mj2=^TO ' ^e auE@hÊ<^)h_j9kpR2k.W,-Yԅ,9)U-]~.˲mzUp@,<3jZG=5pLq‰4c- ґD!En_FŃn|Nvs+OUSsK] ڗ'4 sA8f@O_Gd3}Mk7h@ۂGbXhj]&9sw0K!V :б8Ě~^Lq$>$B8LJL EG-버+:\9`)5(pps'3FTLTiNEάJ!VTGxl p#a<6!? C)T_Ѹ>ZJl4XZ)d\}>i?dDwW+%[ޮ`܀%+L?R|fs5aP")GTDGM`/ 7ɄQv#+m5٠:[S7.lv洳OjRcAAy!^Svd錚NvKM!#bEHRF*S'PsVv jtziW>, LN} _YdL){BXf'Dyd>b勎 J+|w4;&!3c3{PSA^ًd/!>FʊMukP*qSymgf37'kʉ]ʲ WYs@w $M\ cn=S L\,`Xd3"ʏθoC^J{MY^Ku'b T81!9̀E P in׉/*R!0RQ\V3L=sƬ慿#UO=_%BV xB/xϱ9|ǩݘ§=m߿8|f,lI`\ {z& <,'tٿR{aq}_gUyQ߈ wNG[:֌?Uô0_ fxKQD5-1!K;\TFt [0fL,z d~7$4O[*Y|{ d\DѽDyJبuăk ]잺ӠDl ^m]/?jy?[fJ~}keCC0!pW:K[W).Eڻ!00>n"X-zvnI}[< *Wse-:W72tᛘcdTD9l<٢ѥＮ  )r `ps@߳̕J܆][̳F1g>#Y.-bnR^kE'e߈'\<2FY:1)-}<`Eb"ڬ*1#۫I>|OWez4o-;Ql?00ċ v 3d"A1SOݘa.,˅g;IRrH*WOP"5SqҒu [.DƝeJ%JRjL7k ].N 9DvY{~6i}WzcBbh~s=enn@SWbCvtƼ˿u-2_aR$j 12 `,up< 98vUW{\llyv6n83rɠ_ /Gj"H8Kr1!(]@pAr'yN$(y% PlYEQ={ts{mO Qg3b%qPdNr)?4bA%v4wNԣ6=>7p:gMA+GEٴv$d_s~])4TkMhjsTFl>s*%T z\Tc] V^QE0φ(EhǔBӱ`a>r{DI̶}f _il Ķ7-1.9 j|/Ubʞ[T9AZc]<7&z=UN3ANq&ݍoBX i-8 g4d ;,REX_.9n3؜.dV>Ȥ@ֱqz [<ߺnDL'QQ7cqk廏ϱ#B-d72QF?u# I<,D; +k*! >q'\`좨fkhx|i qܛOQi;|j8|ƈSvr`L{e H椠S]#Qo>^~Y9Ac.P (_1Ql9IU? SLR6r>XgN*! Uw3U8ZaJ-fyngVgozRSѧJt/drPFZ?pu%zxN!fi1+Ğ3+)2#,|<ވ^qŖϮЗy`e*}5P#. A𵜵kWR H04o_\8*;O͉t $v3K|)Q@Y_葚osn}bsg@Ł(ƵW2FAZ9';#qNP[,PCJ%>=@Y_R8 ER7:t^‰Cv> r))<ՇLYKp'HF}uA~!N;-NFWb3y{ʽ} S8I; S{<fH'ZvSB7٥{7$DGQwp ֠i}6΅*PXEN`cY>u2lB;Mv }z=%_T:q `;6OHey5_§uhN< r+ʹ=o~md7zHaZ`n: v&|NHJs&zj_4d~Y8ČĈ]S4J/ﺅg01o fiT:qxgQ@)~C 4U7q~prPyX%[N>1I*=s2)*xt{M9ڴDd^+jDbVg:0@ !;A\CǙ5t&J8 $l5dƽ  oo9aX$9_9 $/|8`/lqJ1!]ֿy,_֛?"WƼKwb6wҩTDZJucZ35;k=  L8v\u pهR&v2>'p\'{M::F6ްq۾A.27ݬ'c? {&I^ .IS *]>S,};QY}z`ϱ B[d.- Lx7 ?4>Q^BUҸ QR^ &vφ3*?jFW"w_+nh\[sAI94,Up_ޡ&ʂZyr.zfN2J9 x:\OSsSt[% ֒ͧ2ƞ])KD>#6@H !i_ qkP#.˲@?y>(9eբ(dw4ι=,z.ޗ{6TZ E>y7[4ȃ{}c&1's+IˈE# H9"& $ٗ+̹O :Hb"dV5tiF>&_gJ1P*,L PKG&Ew͸"ej$V]hov-]8q=8cLV|D<&Ə^MonyX3d \5 GMbOM/e [K΅,;D{ i*wir &Xfao+U&MV6 ! v aꎡE% XeҠ_#앲ny*JueUS!2m=(Ӝ"WjB.9QW8VMkCI_OQE= Y{:$WMw=0ȰTJ߰l#Zhy|yM}5hTIڡe`)+ ia (_$7kSXN.+a/}|`$sF:b-;@ᕏܩQ0ֳDtwwh ށIjx9mPgAf!'<"mY MmCJ2rBl6vr PhF]`j%0C RiȶӣN*bDC"_[ߊؗm[f3Sxv(W&6 QH  UvBmy~{Kڽҏ~90v+Z97ZZ/BO3|XY7#9፡yۮ~:'O^A jWRFz~c?Y-@WCKZN7 kZ &ldi"^s~0@{-tR9vjF#fk81BI@T;joޖMg%%Oxt!JJCt/6 R,7S܀օY*C]>F(Y=mme7Hr LTq]2/ ;* eq?.,:dŶH_~a!4`T̃AܥyiڏWDnU3`U9iW$VQ`"~ɾF~VCg őϑ ۻ_ɵIEz[k*x8Zg:gwz1dP׆UTN%WٔzEqBC))1|$ /L /ތ?fJ$U).5)Z:HI384MF yh=l/ܬd JnsHqɣvL%CȠ(TUl97Nήnտ\Q0ɛ  ]ՙCig gaקx qS,ν{מ.nIǠK`/I#=TNU4߇1q]7|5|vi읙kbY)3222{\eڀݸo :O]>aeU|~<0}lL+k"L%sRoؼk5q.@k$Y?P軾ҫq+("XW+][ MA(-L/F&H–DNxV{;ɜ$ҁQ~(9M};HCG-(xvWǑb{ iA0T íd [>XV,q P߻}σ_?'gpYx,r0kyc^o^>NF(W":c L{Vm5!E%7ݿ,#ĂGY\8U{kv> E'[dDꗏ! \d_gd̎Wd).O7l$s؅̲@K\c1F$]c_*ab}xKg4LKd6Gߡ܎md)}6[gSLh?x>7Z(s0P2uW8"ju~!6zM t| 3?=26q5Fs|[]z8l*+"įY|3[ƚ&#_"Nzx]Y}o P:iyv%ObDTyˠK+3;$@n':( t[t(_a#"P00ˤp=n,elJHH;0 {]v;Qqē\ؚK-۪ކ%Ǫ%vKxץ ܼVc6YsS^ ]m+t?ׅD7>OV\kvɛܜPPH)hIn]3>X[kn0M4-TsNv6H t +ϹbqE|J/xk>]#%[] -١,%uO J?T4vP)HjkzӬ!(~LB}1ܠ&)K) 5/"=QYY/_PA(lXۺ٬B9wMs9(G\gA0῱O@g\Ɵ|6PͲ WT7u=6TVcQ T4p3n~"ar-.*NؘQn 4;Q}!'讏5T8Z0LTdWOP57(ݼB7|ya@"/vzBÉoh (7DV+)c#ОTSCmC`x1zazecU >C/~r %+ 2{o4E_:KSY@ڿIf+,^נ߼?iϝ\iIWrÅS2BsN痫6I19hXTH&'2?K+BTHU?'JUՄi[Xo3&C&+9,$GgڊHdo ے' \?aV q'GjHLaa7@c'g:f)6h6a&#k5)]s`úSl:#l]ҟrTXR˺ϭNU#`|ۗzS퍻""9M`'Cf`ѳ ' 85<Igrtlr.t 2$h5VN2=iУ]ݔA߯с3 ,Fo)sPLB҅-_ |)1zӎiٽ 0 e3rΰ)HɀdWx;걇9n%B 5ΟE‘ѯqRof$N֕&bV<gR-帾d&*)\:P(DɭxIЕK kta]鬛)! uVYO ?k6 O>$0x4YĚ ۊǕKK֯m y I/2AJkXl[O>Sh3Q*^^ H7 rf>?>%w(c?C3-:讫ͮ)A9 hqᯁHNfmxԀՔ_2]+jUӊg"S1WR)Nt'}7ֲ3,Y ϭĸU:_,=suʘFU|I|DIV8$; 2nU{v.V`M =GHr&0hE5Q c7Pq~#2y283EVᛱ&I( |բXҖֳqBl3bG~H29Q˗*Wa;*8^ed+^,*x%ü.jBP}o.ɵSߔm9eG<^ƑଖVYq#x"F, "*T[y1"|r;&(K&ऊd-<5C h%]0=v"`X6EHVÕQ! Pe_l2'۞6g2̰I~4<"aM.84%j> !qglnGʯHDtX69 %{ѨL@ $Eo%\#s"v(!Uhp3XgM-XIFjyy\5V,s@BTzb.Q\ޖǿf+daks.4[i!/eOUݪ>܀VӝW agjO@t*~%Ng ظ!]4 fj0\r=k^Zm$ Ty "falTu(ӄԂzߚIѠba妰݆]Dc9>և' (sH+YqS7Ǯ0gmwiAtcIHn2`քj2%;9@4$vߴbd8C8obF c;7̨?sȧXӜ݇ȝC.Aޤ|y$GVS2-s-{-~ T>.h??1`ȌhB@^]N7QGH `ybq?ɯV;emP<{ ԆCm[ j;*@T3nEV 3}ڦ3,D IX$2,}Y(트]|]N;s9,&P]<ߦFD<+NgS)RU){xoCٶ=)~3&t 0!B,޾]Up7+wa!v_Kw=$Udyho4; ;yX ]MirDe}$-Q퐃&^"GekUl+2-eo+} PO ~.XލL7S WM{&2+ ?ygv3{l$ h= t3 8)^S#vo(֗#gZ>#ҎK_ٿ?;G(/*ı[ϓH"-EG9ȫYua;ܙG _ܞKO5)5ߵnSp7&ɱ4,,LI*Wg {hKq]]pB/ 2/Dt|$g!PZ1?@Q2ڱ$d#;0X#=NPf2cyJr "|V,vxf%At#ye|J`S/?yٌnֱrxsF.bc7G5oG(|?]~4!Ϟq%ܽM95Jz@Y8r7a@3paw5)"O\V/YS5ߔ0o[pE V+vPCiA-i1ҼI1C>;A$MB H31o^FwM}7=?X&3~=Yjӹ3./3V6YHW՗\P227Q":;/ڬ %qŕg'3c3-w9W*5) \ZFGp1byk(¬Ǟ0 Y[V3Oq g.-|d3&xO  QB8ыYQLrqUy'U mAG? rn32nm )Md_W0lđv;XEho[73JevQtV(s螚po* n6V&ZJQH&obLktBVEytU%O!\C56eS0}&xȩ1}p"ŌpXh߻I"wBe,ۆ7ZUӲlEglol{hm/w"T.Ʉ DK+Ѐ9oɉ%12} GU7Xx=KޥP}f2䤄(#\'3i]eQYzi5NOV]oʙ tevw\-nmD:1s+N 92K.K|˗pCd,+GtF{%#kRk--!d(yq5^e PCMэXUѰO3͗d_`Aux4q5k9lÂ+2C+ЋUK)zaUL$D퐇8)`TՊڡ/ t[ଇ@b5ܠC}QuhDcG[mN~Dm'ap֜PDiJhZFϾpYN2B/ r/pޝ0Y[%FE #5:B" e˿EA@ב)~qh_L0Xk.P<tMqks(7! v۝`U, mf6e(gg' 0O%JdKhi&n)Ľήq\?]|AXltkfYg;,LFteCTQ c:r]|8c j14 4.M֫c_>+9OCj<\Sl^MSTj$]ռ0||xGoȢ )eZ 56ME[pl^7W['g|255jU4bTζ>wC3nj,aĈ"ZE!F1=ǧ@"J<-Q,Kx#yCOcEK=:gěLYe5S\6-}MIUx-^8b(q7wELH^$1]T쁃 YAA!j@ S`,N /$2jࣅrqdKu֚9fۚ柖|Em!9uU)Srh@%ً, ݖ ,E˚n%i` o7<գg܄Ԛ6vZ4B@G*~@1\BbJ8ye`߾}hNJiUkb^ U6D1^  !#8{WV̬UTS:4SU.ʢLF `NEk=&V"l4ՊST}B1݋SY%ra幯 ;gB_~Bh*N p6F(ԚmP6MKhJad.AG#\hn4:j Dh [p7k>#K uy AQa7?p&9eh)q((GiTiQqmpѮ ~.ͼ8KHNScГ!tI F}S8Z2=,JjyfH!n  RnѳFqp֡&\҇\N#x\[ Rb!2k~Y1H)0& <ֳ=(^`c\.լ Jh,|⍫^/j$;/9l!avݤ{!*#YPi ?f)(L6{_oDW~-EVoxl\K_e$='v279>af~nc;}IY"whҜ~V/>s,߳u^YՑ ib%B;~CNQß6I%:f0$2tA_\bKǫ6* Cܻ/usꪲE Oz1h0 Ct!tE͙F\`ޑ\g\mؚ6a(]iF ewFBO*= Drul+o"]Ԍn]9ʴv:~- Gwp: P&SGoVаth FznfLnLaYb+m?pO6 <%xaC2l֡h8j`HQa[@PPq %_nω^qow9QWR _%445eZm_2A.rS&V3$},> < ⬿ {v ڳ ttGX\+@0&8"a|劀)@[RT ^΂K\d_bP菓Z̼繴(f6I4VبB:nq?-}q cdF Z[.ߑ'k+t UGhN_Ϋa`@y+s)q6Y^ZƏc&maK XG d;ŗ>,z&: ,}j^vOR`ɵ8?JJvGx9%Z3I"CioQGv+# ۿkĒnP!*Gaଓ)MW!q@~D&mf&6[Xrӗvm.$V4վ ;A$rbuL(=q,1Cv;wM;53:WXIVWnLY~,`frcՑ2H1*18-l̺1> >)1[E0y6aD7dcF T9nf} ZUR7*^Ty7$Q斊'q2N'|Ա7Ԅj4@'b%Z}%G-[Վsuo'k-zɤº"iyWV&miS?i2f 4%*fG%'(f j E uP5$ʎk?Đ|~Rx5,bb fxNΥ ubԶ!ċ`fFt{ 9fHjz͛"ֵWk~TsW4xh0ebf0qF^'+XDęKTcew__zgØ_3-Wm#9'!lm<|??ۯrұ~҅V"tЀ?FXCzbּmｪV&UCAAM`wh\(JqTlZw֘&RR5 ~_OH+0{KXh{nج̚=<`n-x`>6WvImUihӏ A 2oOmj04*Mx^T5lvqA2D\]S.eem :7H%J#N턚I3izC8&l M;y9tf4O4;JC}H?_(왡jdظ|8fru#f%9^| bdSw{@ ̹7 I>Sym9V`9ߴ_{ʭ6}颭sJēN9{W!,^OКj-#!74Gw:=5uQB^m! m{^pL+i5]n46`LB암NMhcy?Gګ<:)ۆ[@uS\*/z}l6*i`Cʞ`B4(Dsr3RPm?O>wj ]͔\뢽PNu9'AgHŨzrMjIpF!c.@=ef>8n|L_MNqV:,~qVGЈ60? ^Wy#g,7vx{S/\ 4C 5~ Ԟ 2#GM(:J<%aLD{0{_yfv ! (xh~6Ug-NF9đ<2֋4R`8nZ;ۇ0t2zXyebx'Kiv(Al,%TIoҽk(G`轋WD2Cn{UFe&2Ѻq޿V4FnIx%T%~o+a¬9d8FI /QR UrEG|F.I2_2rT!T',_]c=zz}]' " &Fʐr[o..Ҥ>_x!v;c6r/)8̴I(Ro;𺚿|H}ԹӎNCe*{udl*kKJi3ȝ@2\~ sgiwC &ŇƎ":a{^١3B TA/ZKڤֿ! aZl|T.r2Qڇ|6н)v bKYЇtHa^2#d~YO6tޣ$; XZ8\9*xnpua:K/3ktWV]zƤ='No+k url%xmh=%SS{M>:uCF P~ zDBf'Gl"Ҵ+ZN1ØN._%a& PFyЅ_'pn_ȷ@oԲYpBL@RǍ)ͫCa']Ε7 sAx ֛M1Ch-^wC/W胒y#XO\pEɦZ<#W̙7+>e dڗP? 1"b'c`Vq""'gTOR'7CzoV/ l+řU!zCK^f _ª58JXvHLln6wbW˼DH}YFSwb-,y@S=:*ɏoG^AĶ=FQV5UDyvge ,=N4CD1HRo[lk|)UoN Rv3iApgmjK[IbE$?@@XpAdcsNFo^b6>] X ~>t=M'>;P$͎M;@1rM=:zCP޹N>GVe#'^Gd32?OIUz*H*6еn:ѫn3bB3wm_+oK;vWI_TB$YygلwEK K ɨȳ5|Wűq"G|d.aϜ#HNbW$@ٙ1Z{=غո)Ap8y/a3#.e}/Vc=J *R=C59r"˚sATr(wFHʽo60 jVUT~87j3[2K1)F3T+K;Ux-!:*́GCQK~GQZ%C?N>xS2`6sW.RN} c$/UuiRдmZ: ^0W^bv0ԃD~Ɣ<%g˗J IzQceL74姾ږ076]N=s,o"H#:E#/s2V; 3.h dȳo*}ʡS q-3gJb5kx2{34Q 6z[d{^Zsx$ȃ; Sh$zGW{bZqfpW2ʌEEjnkdrd$P]V@".G{i,I4>73=z_A;} 0*LRyO~dtҼ9/r"( G0N0~+urR?n&&M[gSj+0ΫzRnF _0uF?Xm,&@W0>Ptyb%"d .,}ó<_pw )pQ43N ۈZNLN #"CћWܓg=Exc]u!Dx|LLZS\Uv$@WhÎ=բ_WYHlWQ85bԗ^z>,QS+䇰S|VQaCV nbwKVɚJ/oQ0Wz~築 3tfndeU!+~#p2Y݆ SRL<0M@#_BYS&RtL00ØȨgĺ󫾻r\DRSxc,J}#9 MiF,q˩YŶ,i)˜^Vڻh `|>굅~[`!x՟ .H3ݗiOe-Q ̯RYs}3M8-D͉Ǟ/ +i9^+J3\lvL۵ Rh )`36\^z-i˄we_y$ή(g!~=F8Cl>I?dn*FN Sz9l9q`lcp^߾E*F5k"X4o c uvQ[;mӭV@Vn̴Ȗܴ${oJ԰UlKz60G-Tp!K W=89T?Ԩ B,bG4~G BfC&Ze] Aט3V ~*>c%b7)BXq(1zf& %TRW[ jnV!,*+9Arfr4"hfdzёF ״qiξo@^AjGWT Iۉz3q[V{5_J&ӿq*< 7G2Div7WI)n}Ȼq`E #jG~ʥO*T~mw$*  odًCףY>oP~9k Uv (6KbRCd q{DG%$GVR瑁1Ec}E\U:pnF>vyPۛ36VSAa̱U}3:/lI= K8iC.L/Y9IQƑ>2y΍(:6Rz0ɬ9&1 c]^ʠ\6z}n*Y$R1[qG+6@`~Q꡸}]tjN7͔{`L}' {|2ZG$. Äjopҷ1ʚ^\L!p=pGz˻gnN:f on-`ޔw6vq+ bN 7qP4 DG %@gjݛxOIkՀ6؋| :6i7fdCܷ-xx)q:tɉg ԫ{>䁒Vu151o;Dd?fՆ(a!s߳NѨRaRҡ]okH[oj͢l^R[3W׋,3Ox2Wt^ ` G58찾@QG޷ύWWT{SVq.$ΜCTWVD=qlSJ>p,t$RF&zv="*Snsvy0*`i {Gl6#b`k+y?!,qWcdvp|]lI(n֖1/APoq @SݡV1xxB(zU1AG/|#s.2Lq"N`S,,(9+=)yn0dG z8)htqNKA2=!w̺0Ȟ8' ǀ{,y=R֜, ŬknI.\=>M/QHviww=x[yM!HG8/ %dyV~e,o3wŅV03-۵Ld3JO#*/&5 Dvoqoʙ9MJ1 ް#k"H,D~:rueK-ELn}<#ޭMM6N"]-;E]5y;a 9uZQ"t Oܣw>MπfB#M KO~i2ӆB'^3KU[3 w7X{yȹS4e~΅kCyi.OP=%χ}b5HgV||G<53׀/TX:,NuJq Lfߦ>*An@ jђs}#*._$QU-<{%aIo  p;u1f$xT4xl \u[ #P̟ UHٛ]<~ӕӆ!uapg}axZ r Nqg ;a{͵}ॻb Quy{Hb_;ѩ`T/߀p;"wB1H*QJNqcqo,*eils{ Y~|)׃Z!ENuiAbcbA5%qAq|% @b&o"(Y9҆/\2rgb!A-um> Q/`<9PwATͤSF½pH7> JN8iqιmGYL[_ LQ= 8Z9EyӒο9cܖ 98Ñ_V̛M9Ut~`oz^&^640 G&d X'OG %(ǎRj E~Kx aBĈd mƈ#Vy<˖ag ig1!. j6wA+s"-lERss4,JhU^ dyIBN oϝ譬STH~`n+nl}nu#\'zaߵ.JRPiZjWHɴmE7^("W"*pPdA56O,\`a$Ί\emMUW,YB]=oK}5GpXNF1*!R#P| ^i0~:q>VWY dgkxi{We:!M;Dw ;ϥȓX4.L$Fb1@?4|WY+JMr:ƅJ}$Fy R ΓZ^?@j>W V=MaP}ŝi9+D{МJC9H%Ҝ썙{ԭ> )6]ėPYhi@o&p>2_s!foeAh׊6 >A: ⛗@EAOOa]'~G:[/,cu1Y;|Hd_pȰp|{]TYVS[n#¸i (s ں8X6̟]'qh:̘hՎyh')FB1eXn{.'QW-n~?{B{jO{aހs[f釸:]$"!P7~a@(>@a<1 dԿJWsRonӿW7(EONO_28ݴDZfLcCU9,j}Ri2=sMa255K'̖3I{[V40 SqjLmt68ԊCZꝻ'&tQ eࣟb@ie^KP9>; <3+-$ݳ2P5$l#Guł1ʳA,ʤ>"#0+.7.3%,yf\:KmIH?iC)1~Nێ,;F֩?[~[ XRHt=;DEjsLFmq!/tTd|#QԷQDޔrꩍ D(WIpj+8zr)l5(1цT*QVCe@4D1~{m_~L„nzKV865ڢh+Ji5=P)u&yӷw@tˮ2z߫1o𶽺lXo1,|=}zGD#M|~F>tC}e PQTH9%8l<'uxB7 ?q5ZF Y *5fx쑀\t@æ χ)\ LZׂH3 =Ć ם0c'>\ljyN:"z^(|U`O4ck^DtNjߦdcZcAǘq1>rm6?Y?3Z8sv*{B ; +->uX[l2ҏbmMWQ=YUqn4ZɈJchE$wwwXMn;z}wK-˼|!#0$"c)i 𓭷X}5 asY]AwUFt{!s%Q+ JiT<@LyhqI߱-ƶw6~bYfK2`(SHVgGȾo02I pW1L/?;?GAfC{jJ / tF0f=YQMG{pöRYA;{qFJہg$ Z:ޥ/dɫt낞:By\KM-ݽmӕGp]BWf©9{ tcX( s#}|Nz4%@ߙX:w>rzVʶpm|gߢ1rC֩ h\52BOZ;l 1Tv=|£&0̅?:^yيk ,aqb.c^x<.Fڛ8dw>ST?A/k/Fl\j)X* Lf}/8=YS7E;{aMn9 '?rtl=.ϼoF4=HN 82QpbbAkWӵہ=H 0*,T:2fnLO<*zfKK,(w=΢਩# \2_Ýn nc5~B"I<ޚBzeGH%#v[Akن*See:h3i>]#QP?2]-oSG >ށ:cVr7$"_ y&{Lm;GvKP!sz>3ʤ4ۏDlM6M?n0Qh~|azOԮ;Q+M>>6CvWArTP_2,!P)֭5]+ξӰ1Jv"D9?$/sz@,ô7VWezBv*H(!еbhxW7ĿCj57r@n l&?u=r2B"xX(s4n`/\7<U<]ϸ]WɬB}?prMNiyeOʦ⋑j [k8-"8((7M Lk] # jh_,(CE#jIIiN  ҵN"%yo@3#'f4yYgp 4p0n<)v>\k#Jً7i9TndӦk)}rP$l3s&$mUH8υj!Q:$lzs&jnN9 3sZin̸,z2\k6X*"]A1]>wOl>O8r4rJ 9l:;ho祱 xyV&o`xZ7Rc:)jndT\r/Ol~LcA>^7"hVC?T1vI(0MqwvR>_0qVpioda+iqkt XJ}A/fQ\Ŝ~iuXđlW7D5} K@.9T>𔜽&j' =b Zt-V|FMډO"<=<` ~'im0v 0h}KP92;7x$RKN{Z ރ}03zY-Dao6+ȫ:fqC4"wI:j8di.$ep9QuՐV6L7HPK~k ZvQNB>ԇä&?ÅH+E:=+JCeLOYE|%ta hk}D J<-1'Y7;=򝣆ynm"je5K5743Ч&*hnxz<LJ+L 97C@>em 7h[26H؉Qx)npS\ݭI[q>?M|$Bv̀"p-R".,1DFv{v|؆G; YtbjЮ]nHV6SaڒOWbÕxQ @k7U[Pupx}5XN󍳾Rcb>SD)O|j{gְbH#Pb/= W-ZtsB)G9@{jirE±nkzWdtsl(N"Ԭ+8C!̉!"Q"a~C_Xˢ E%ֲ -bVarIML} & 5`[cKaQ OdbTt~xPcPp 7848sT~8~MMEoj$.qn]kGx瓰~qQ>9H=6,ػ]6e2Ң|Y_ݸUWE# +,R78,Z:/9.$(L͈Xsgoa &;XQd}̫Ty"CRm."ZٛmӝJTb"ƌ~rK͑6_޸Ck5B>#$FBc]P(jIj7jC6'OqYT_hB9UOUUrMVO kq=]{2;bs 2. f8:n;`Y,[x5Gdz  1mdUc|JDcXe%_R}zk2AKskDf,I]gSL9+jXqpϛJO+-X* !.}|rߏP`3TPR=95nڦ֊.PEOTգ[~[=rPSO%q?  ¶ ReeK>nJoxxjZìO$UȎlqMSd:pj0py$zm%P]eŴKǎg2!v=Sy+#ZKiQRėhJ-aɖ0Lwhzm"1_:qeCz.:WJ_ 8;5#?NWm5}# 4D1w(.џ_DD$c8* `[ Hp3)| 4Meo]e!uoI C}Օd7t2fVkisb].-'x؉UŅi KLR-LEY?BR."UEyn54^&6 !y1,HCE#pv7\|Tyft_BUxC "-!I2yK֙g rA?60_sW~#ϷÝE~nXįУnkn}t=|zkx F @4"C|ZOr;-K< [Ow^x-P_D}_wZ0~MI%?U"]c<Z0, r_%c^ug19BMxs= k\I)oX00kH7!;\q;7tJ.7½"eյ)rө WN0*UHO.q5<ͤgm0 9;Qi3-N 'ԣ*h7)jQyP+KSmpCL!t+0CmV,ǐ9k]}yrD3LēI2Ea^JYpo\xA(FGcC8@߉%W$s']үa%ˍ{ בBsɧ/~?rӰ'pA SShu_8ףM2j頏rݙMA9"?0DK۬V4ևR`X\A7}!xPX3?7oj!%!53oa|49}`$_#JWk+%Lf]MR;J3=YӖu ` 7|Ke>|j;#6&^*sͿ(E_$h:~/(|LuZ-Ƒ**ZpW9N0?awl xKe"Ŧ)Ibv,9@3N̪%Jab+[~ 2%ʂBs׼՘{iNhr}4"WFaѩ BiΞZvgۉ~ڸVx<*<׭ZqymĿО1&oyk8IV9<gD￵]+2&tJ:Ibjd[Xփ8!|>%qū1eȴY--.E Y-Gb+-gk3D3'@F-RF a\?i0hT&9{}#+kBUDE' J@CV>d\۸HO Ge[2U)s$T+ꋴFMPjr܅S^9ʺ G, `^ظ+C4S grl| yڒd# FΣ6Z(N/1≠ x[ġ{a%;V;Ca~\S(=jկ2.vظ~u!fXDו 5{|{%5ϱ^uTߟe.]FHuZXOV$hb` DA5a-}Zi({`~nK!+R+u+`֓W4e+,E&4yO $^-*NELt(oq11Aj}ŵNZw4VL ZRd0hrS-o8ֆpX҇I 6S9r,EѫNųS@穙$shki/B#1אG@uӹ&[c3Eo0s,.4Nǃ=oa !gğʽF'k(-0҃!īzx5<[Ϟ֔']>}#Ӂ$?~݆rHedZwҲ\|-.Eey9Y@cܰ;qSfj}݋f^Q'UdS6O +5 0zr3LZ;r0N{ yr"aQQ!h65?nz%(C*/GP/]>qnUEFb$-̫M)hp\}cdT"mrJ*IVZ} 12crMcEkd IᏢ2xG>h\^Wj좲+#y2 2/ri۾2/]! G/OSOZnq5D`g(5#"{9]MDF~6} 3TRu.f皧X%:9V;*$>Z_lD殨K6և :P46 P&qgd&TX2Mڠ옙/O[TH=|XVPO D?18%:o_oLaIrxS3Xdس:M"`Ix8Y~[+ՃO.4Z/-l14_~0T 8@pe1f?g`_!Wf-L]ю2j4ЌjwsCy њAt'g}}4 j=Maӆ :;Ջh{'3x>QR|ۅɡꯔ N{`_a&acȢD^fMEw'9PޣB`aQoPm84Z̯/*Nw +ک%"B f?~]Y_\^z>TGEb_"Aa~]OFփ%p~/zsRz!"ଘ"MJ <~:/ 8IL>K^;x4qsajԧPP\Vxרa{gBȓ f٠ lAH1T{WvAHE[Ya (?ElW+ y<>?Y;Ux Fnk3`8M[Q7<_-#{)7`%b|)Қ0v01&0fpFo\A2$)u$Dp鳜Eb+$+0e71EyIHcaCdHm]TUjTwXWڟOZ]ʅƇ,ۭ[iIla\-EO #7h+ʺlX*y2hg$-NycU$P%qӍ jZ&30CgEˮwruoe5%I4Y'$m%J"7=kyrEKOg#/x aͻ-ǚ亓.FKTD=0^'s\#.4iNy&年eRG-Us쎊K%[pLa5/󎏦?|Mk~޽@EMJJweЅ 7E}vPuJ@pm Lˈor҉BT)rn rRbt:~Xe*͛|W͉$kϊP1%$:ޕ{ J|Cl6r*ƄcG鸉棗ɄadXգT)gs"Xyf/*KQkeG9c8%z+2p) [c[;8=%hF)]Hu {{8dkv(i2\ֿBnBߧ8 NP9akb}PڮJ 32M1ޮrw/2^~ŖKo ~84O =V  qçX@+{a? zImyҼѓyd30s%Q"1zIo[2ˠStnm93dn%0RŮTr{G8oRѹݱ$QPMi7΍^wQy $g nqdM 70ru i'T{u-ȷ-Gph;o&5슝/eQe|^{$VOcDxإF04kV,,*dY\iEc9Jx=` bp5Ƙ2%m09 ho&S+GOXP9ـYZGo3Lyk{S.fM[[Wd%=5 {c- bnh Z]~ /~wN+MqOA`ezNwt(^8ׅ3xB kPR}* tOL=!bFZg%`&1BTyD43{PyfYO?DmswB )8盒H;k~Szv(i*І[uL<,hk´9UQ@$ܮJ[ͅo]"-kqļ G|sBՕe>|P?Sx-Jiyq C ҵ͹ İU+vvƈBq4=Q诎18_b~kYO!Ƌ1H6Mӥg2yQlԦ @^É/=Y*P_`ь9`iyvJ%Ɲ|$qQtCչNq/șJIN,b黉Wno 6&8/tKih3&;Aǀc$.] 2$'%(J2 : }EfF4KtF} be-p#G|Jc3wd{19u苄 EAJT5jY\NmD鷧p[;Yz(M@o8aruWM_ubjͧ&| V2uhi@9έ̗tj"n hAH2۠5.EoW$LR;n$+'S 6VAGCF3s.HE -n~a&X~i-_՟BL[(xIk-T.?:C/i&Vs]LkDdg VG}PaUH mp wYa?&N@)7] mKg~bddWbwOgT|OA I/_:&yv٩>(J?) r_gPGTx-j$V[)"Ywg>X% xJ(X%lG`5N7"~yݨ*Y}h{)8Z E.(Y8Ki(A2+ۺYTLw,p["ސ_(U ]W#c u)\z]* htr#|lCe .1ΚHE+J#F'Hwy9L&ðKYE_} ^[R+[ϗ/aJ&Π0S*wvz-m9KC/_>ѿeQ#^z!Y AVYAxR¯|G'ԘX9=HG"- xxdo(PMy2܀͊'ÔᘊRӒ.L4fz bpgklbr9O{z$VӖ R؁T1UGR/}fu`FV,$YO ݏ6uEpjS~C]h qzt3EiFHnL tӃ*cNspڸJ QsL%94NH; W|ǡXԚ6lYBdku5 9T/ DmJxFWęh M1:.dm[o3"m̪] :I2#)V,j˟9G][./q(Ȁ.d:AQӾ7i.dx])! ,p `^ ͱD+pvPg`<`si!2\o5@6x}Gw_B9;B‡թhXf 1+Nh8& 87t $ֈ5Yb|SKa(4sX2 n3Io ,ɱfCڋ *G+Vv<< %Jh^) $Ǯ(}RMʼn˻W:A 3e0&J]mEu(IA!}myB+KjI42VU^v/e"]Z*׫Bxo%NF&n^#8V&pD/ srp ^+KR;$2;0e%Â|bx^ 6ry;e筻rfխ _axAрLq̐5%Y-Ќ1-: NBل /TD6`Ǒ߆KDvp,\<>;dW HBff^)܌ j(i' ?CAlGh;[{،BHnM-P`WRߛNl%Ȇ)DI5m8Vr1Q|k0å*i?JE粌P Aα[**Wkޖȷ̉@ljU/PpBEۛlG"2N x=ǷY,a(\{?Y16!Loߌq2^찘x'\ ;p>}\v `}߅"Y׎]/S'J  Jy?H?#q>HLph\ G^9-E*A5M-߁~ r'%KԶx 2ìy?-q\e!|~EVjH<=$g6^Ǹ h 80C>5ĸ@Gda^;;O9 4qC뱷AкA}!{ܼHPWV<#%CO5sa: (3^-_,Rd9Y=Fb{fjN|4.y~.y4XPL=2!;Դa'5P}F%9hq;@]ΊG?C̕2ym~)&.*P>O{nj wEzi}hʾ 0U{s!nGWſjR H( ւn=Cv6Fnƈ[y=^imб QE!5+^؝\QM F쁰F!:tD5+mzhs^ur0UФXӂ@{53N|GqE杖FoHהtGriyAB.'c(S%-]v;Z˵Q_;(] bPF%X"86&b ҷeگ/`3.B}r"z逖\ V1UrwB+nLw*GbnIG-/aPWqG3^b_6E|^ o&*KhcM0F`2yE|bO[gzGv}7cW,do.ph{)Ciuי6YM(cjO;1Cu0ÆgAvu oבY Ǥ0 [Re^i &sh _ t K^*,^x0d}0?3qk>X=~}jg2ɕBl+->7U l㩑e!#v*xX["NkY h E9Rx4z @ZNi;[1WT^2c;kN@F<ta9sKc؟=EW@*fRlI DS3q7b KAdO`Ϲ @+9lW8Q~#3cJc/y^u;8"+`y[TcJDR(  (dbb[:3yzV>^[K5iik2Ùǡ½@kXc8KV8ܿ5n* 5 U~|rJ/NcW{،ʠ HzRhەq0do娮r[%sh^ EW|͖MA!ԯ U%_wkJXɎ@K9wc!!dN FR,{gW|Hng\%AYX_<4'c!TX~5p+6jD1;V>W7ǜ4$s-`pgvh )rBcMˬC`_'LR*}VY^dCrѫK@;7/ <}B A=Q6Մ!@eo,^1˚|_'[(Zh i#`'ROfƑ _+o4kOX{&@9Le&\$[?{' 9F=hHqMilFue/w䰇NI,$ /p;X8+ȺFw$~+2IRi^k<h8dK9Yzƒ -VuS u.$zA>UOC?wZt_; o\aS~?0[ p)jϐ߮B^ "2`%Ϯ5r (RK[R@UI_*k"mo(ve( ~:$`qSO1F#~oa,w[ŋ 5!@25e,M q_uٹ B/!A–X"x(.+ڦdp)id!d O%d j56=/)`  ^ru0E%6# FuBpV.q{58W]~kY,ĘR>BAO/EéF[6lV!Ӷie&t{9$Vxw~JFm9;W`'>2zJ|2MH ք\W:\w߮4RUxDF8W:Ԅ.:olx 0Pͦm֏5OP+e JZ{oU7޻Q"]rY:j&0i=`Nʐ7n'ۜɭ1䠔"_ 0y?+ib1Od"Z xz?0xYNTWW'*Y, 5yxU(du{[Ozѹ}\xj M #cةS&/U> Q P$|ɿ7 V!1gQurCuߞAlc3.Nm^p_հhx7rJ,`:*TF)j|u-5pu" ,IHh!"'NL$X0݉ fG?eZѾqEm88kpaa$,Ɩ8->=/P.-Ñ5`}*$]k"cȼI? m#6aC8Ayh:3 rj[)] w m83jtChukU]R[= C_viv_'jj=yVdUm,>sRefRe8GسY!~da%Qgvl&Kyj*mw7}y ۻku/ob!xHIW65(#Ϲ,'A27V?,=^FMp.,c\ lZU.}x_y; 9aGͷX!RGx I~NR(7B$nK NPWLbOfMƽ+,OVp] 37@}#`=?rV vyH [4`ڪ۰A5<AXCw "g4@Zptւ5BֲBlpzӍzK䬧c/[J;hbhڿY2kЬAfן ۯEd98n)^G7Gj ZEr#M mmkY| M[9R_MJk֓R),7Ml乍%A|bE.+G~ 3aZ Mi{kHb e8U w'$hrKSo.R¿c&e<%E@`s#"yéRqH^hR,uj0=Me{=ȁxvò/2YΘa6ΝGI? rlYUMW " ؏FgQqϥku`=.7'"&œ7Լ>(ԤY1lpސ~ g\!N;-?#\c#N:R+<.lVT5+W-*~) c(㗾r —}G=}Mb$|Eu^kg | S:-7w ψ:=vꓱWݯz_qP6NV+ 㙌Xʥ/ *,ؓ~3ZFo+YD/*:-:s;Pg$VV?1(s!0\ZʔSLML-sGޜ,x 4hoe>rG$S:QaYB]N\&YP謁:;yt7B; `(%lTt3 [y2 0}yz,]Xwz4Y<ě@nBsʎ"}x]*A|γ0?;ؽ-ϱz$$:*Tof4G ʅŴkRx˥[)Wzޔ#d^ǞIkt/p0df\waC]ۦ_!w9p!N4}]:_Pa>KNwu#Ԭgs2)<*+E o\vG ߘM+*vliPdBqb2S6ٔl%i΀q՘-L7'k~\qUC*]RβX<\jc9VCA@_J Pͻ>D/kݮ9ǥ} 5y F/Z1;r(M^0U%.~h@l~A|CZXF/崔GEe ˪ ծwĂ0 "Ѭ,WށRK#>9\o3U[;Ra9u Z.CIkt0WvO4$4|R˰Bײ#ٗd+S)֎v0s׵a_zI",neprwuCG.?!;Pq,^ )%jIߺVRtx\%sr L7 NMTh$|RLWk]P, XGtrcBֶap&tiÙ46ZO-V!i6iׯ(҉$m}VZ _$LEZN|9^2',HLLD}qABA䕍H~]ǂ/$ M!$̶r4=: ZH6B2#e"a*`%R]bS @Qfb@05Zu٥Pc ;Dn\ !F#O9]$_qI _!Wաwױ[RNeѨcr wyguú@Mw# 0S*Sc@71:j#u`ICŜ'cRmb?DSޒuf!}5eq&xgW^cyi+_%܉s?K2MZ&Rw"5U3@zZew ݇dlT }2D k<#fI ZD"Kma\&T\HZ.ô)\Hbs g%[z MGwu}. :y8K~F)ӧDVuN0+&@3Q;Qݤ=mكw5W|4X8eI_2gijQv^Q,ylr7RO4 ]T 9GTXXnKj.zc"FVBkn5D b=~ 1yǠ>_jqᡨ=N器ߟTXf( $mv$]:}(XJCcŬ3Ç]5><BB\۽6 |r!d`o_pcX!KEZzM4|v3n<cURB@ˍ$3YMu8vʔ? jKkzˤ=qzqE)Kܲ*Y}~vOHjD,YKQWdsohޡ4xpWeΜEn?ru} ЇHWeHs&n2} LIc37#gaN]n b`--Pu%'B@$u^ҥB>9uNE{ zZ!XfYS߱0Wt<ߕD)%UU<~^a, ! U"`<O]sVUrunvu>׸'K,gzH}^3jzJ<8em2&L~C~o;8q"*uV^4j0%QT),l.kҒgL&eXg%!y*Cu>gs @}Pb"4|g1DU~8>{#Hw=;UQ_S?釗35'Q6ެ:Fb[&/ȑt g.Vc>\'*&i{d@TkS(=cI _$Q_L~Aۙt#-b4%R{\m" MYS1;ߍt(AށIp,.3.T%Z{co7] AA< D6օJ1=s#^{ +^|7Ta5_7>M+4~ytk5o$_DY]vo$h0-G^9Ш^(_ r8^‹3ƒlBn=^)#jطcnh1a,#W(w<1NN,Ts#M.4bm3O(asHLyT'~jvL`!ĢhE-meڮXJUS>5 htcCUm=I#,npnx:c_5fF:dO2XY%Cڭjii.}ps>8H^ә/%໭'.e5 x 戢{wҽ%]Qjasdj)|~!gNS U~VCqufJOf/m5$ïfp yKc*ؽ=FiOc}Xwԡh'"b@# iO;T$R{a!"y+R3aPչϒA$!R4LڒNO ,bHK)tS.1[AK/<׍CVM]rd#<,O+x4X%;cFjjr%e ۤǭ.jꞎs«#7@%N\9\Ua\N_<(C9LwrbR2󦌥aIbKtV P=X2|g|R S1>_QE܂-ыV`BoCXN`]#ZKu09^wU;G=RҖϦFP !umē&YHߒCo*uc -#``0,"L{c"gnh=xL-4֩~j9*:;a$yqv1U>8[A_;=լ{EH~'C->Tgw2O *aXKJgCuo~M[#{ul/Q$&ؠؓۑ~>-Yl;$K iu?ax_\8GV[˲(~ߋ1gieuҖw cM$w>$HNDZ]dqXǥK*.|l$)JUnB>Q X.|bsC?v7~v8ɗ #NXgg8vWըLӿv9{ 5s'LIls}o2mo!F=kFHE[Zu.r4[~K yK1'=aOmdD%eF7,#NG@P& w]7vʉMTx%'!L{u1LV)ٲuw]kgkt 72D7gm_:T3Pb  c+Pm]EX\kR9 ӘPpjH,zK?}@!d5bMYk퇆抶K l4, *k0fGH4r5`m Eƽ\{Z1q~q _ 5}Js8z.(7yPUy/>E1seԐƖwu@.tQ_U 9pDlj՟2۷ ?p\ ^wotZ>Upy8I|-ISL滲Ztk->\j@1ka<4p\BFy =3;(V'ąۂ{C \aIMsJ-)XOdRmTn V|19V 3H $笔NP <@r Xhe<Ze$i)PS̠ 53"".ijJ"м]5F ZAAע0Ǵ42f&㙓%(fwFI ΫNu!H?L8rػHZIg*hM/%f*['*SтQ}ye3.iͧ[F\Jn+5+snk8:j" $mӣ8j'|1=i׎.#W70gxݫLTRY>`ǻܷRk:⎀it㚝2R>Mׁ(ޫQ REȌ+Q懌^ZКseO}v{"\&֭UYO2Xø7a o$7n#]xSdż_>r1S-7XN` ?!GZo7XVmŘCUckqmz-8ۣ{K|+'?ewZ.*A*k!|׼Gjl /D$wׅE3WJs ȃFUEn͚8`"4[Z|&>-ޮ.H) j)~y}u-ED=ˠX- pjr[y(]ՏfNd4[Aᔕ\_*81hL 49"ۗUDs+/N X~m7? AEt^+q"rBLJدg8/I0OndC]B9)o|SPhr˒i_ybE7a +`ySfG]SP(9~T[R)6lEl|UXSxƳrS\Зi&{{Fr"d= 4R 5B[ѝ3pAut&UWEUE͒kؕ6bhYRe='\9wlJ n Ng[^9*^ "{y|7dkWϑd/+Rx}@pKpQay=_͹k̏*6t>.kNJDQv.* \1ڷS|JhQ>q:Epl?sRrXЩi[ эO&~Fǯ6PF .Sż(uWЛ? 0Lh Y[֧S[-[P8Þ QURMwnמ@Xf)-#?18)K_pNA R5 fX4@U_:iEz,5nd]MhgQq'{୔n6ipwhMdM[N0}$K~#NLiYdbxZg,z&븁8bfإ.:=¶;"VUY2pp.ոa@w2Lѓ68lAV.nq?N nπw .u = hCV-ol%IQ7z/S_:=\[-y7vHD2%:'(ފgSݲvsڕ{f'VctvWs>p!(2-JPWa%/%6 mbE_mmtQoq@tAgwXL^ַ>! 2p@@`A7ꐠh%vaXWȬ12 P"(X;R7?gt@]q ,͛>:DKL5A,jnH֖70S]^Rž^u9E7T[ J r%Ӽr4Z&H+Kn@sP)G?S*LS'؝xޔ9Ҹ+Mwg!V7"MOP ~=2ٲr7g$A]hy묣I>Zp /AKF6(~B9=kBѷ?h&fmሁF"#c=>ӅWXV[|1bscU@hj͹~?WXw^GzzElˆԨ:Id-60SXk8=&j |q攫G4^4|XCBKGk0y3;\ >h(j) #gLl)7])J-T& ԗ:t e%t{C6L|Tc#g~i! n Bdt!uF%Bsh#)۶^}pЌ`x @K3!ִg $z G߃{/1lt m6d& 4APɶ WhQ>g "1z}S?djwXV b҆~IgTܣv vkm46ka5iC16,ŀ͇?nwK*^]G'}j4ջjlqk^hdX.mDC^*~A_nnr_šB^,atIpO{S/$(MY;,:4w'xț_/2Qm5ثx444ěLJ磹_g^}5&6ƿx,򍋨Pб|V˼ˆc_iy-ħ5* "s;cz@ م=o+]< ۥ{ T1́.QNG#fONzLӞu8~asNhZ -#:WkTv2`յ>&%Q8FR_ hѶe7_* "8G8GK466tnOBIYEZ&{t0 .HJ=&iQAG7v䲣 ;yd+OKcU2r#Zl>jO5d^?K]9ckE 4sUr,SM+ N4B@B&OUEk7Uj1d8N(xZwmP%)IE@B!aUwTw,\1wVE&대$+Zߍ;T&%X8X u7<#i(IL{D˭2㿜,@л X&)NoO22\F"|kYF WDD~#l?&by&h&2)&dW%[ Uk /5(29i}i=/SS`Zt܀;7qE7E큘ʏ==(I>m/@ r"֘Ǹ_{;%9W*v~cMlmq^/e_HUzo7`Zw )<9e>y BBitfU\wY1q,V6q/'BTTfe'bYBu ,~~#v'eDm[)K2+ޚRqrW{At-aӼ7rWSF\LvՠG^fVq!Pv gdY KOp(갧4R4+dq[X3t"yc,! V~&ouC[jbn(D}tN'71ULjKc˴yXo]FΧd'(u);]RًPE!CN7K;z8i+\q˩2@eM=mwۅ45@Dq @z^XE!ѳ0֧g.H:Ul~W)V61^(V,ɽ;~jϘDLnVv(^I; ֥ Đ;Z)^b.p*r^Ǫg/E(i䖯D'5ҹ5l Q  fgj+-/7U=ËJ8{$Ai+EeKVޯsE@X-JP}PXr^ivx\0cl-p,φ$GWGnr0 %?JrP f㡤xr3q@KWFCF5A$DP\.JtXT o 8w1 rPb=Ux˃+nfrd\SX`iqfJ,%{թ-02ɺg@BRf%is13:L<+/PGu8;SSGs԰+->1l]Q6𧟲n@BkpچH`ö2~TPZ1 5)QVh$X*nD-8F>׵rT2kFwa  %ݵ*5@Y.ac?ڇʅ2ezvZ*\W5 7@z> zɾԓavI(5wRb1z-RJf(@||kt=3?:ڋ`3?} q1SR<ߞB77٨$_*7E/H5 zΞDS APˮf`dZlUmaP0EL)+]p`݅/~s 2SKC>p72y1LKR;ltt& t5`*R"TIsp8Ɯ? $nnF^A$b6ݟyCErW׶]s Nl Y.~޾b3wB~L%cv+"̀\A&u Da߇եq<ƽgqZ0;_ʧ];!%(߮(y,"A'fz: kmqhPVHK 6s#wrb\j f_Ր2vw @M0Fy=!qߎl`(ي@fH@o`!ꍹ\|ٶ}./VPZ j1 |Qi{'SWNߣ?nmZI Ds%\6d%v\oz,oH=t4~l+Δθ\d&'qp:50]eAX N)aj' k}j]x@]ic-}f U#%3yS&E4DpDgLPs $,M78ղ$m@r"x .!s"bW &Vsʛd4qIqL}mHy Ef,y>/&,t!#e-,+5YP qV*(&2g #t4 8r`"s" IB8w;̳ۜC(=tOE0&\`s|NvEOO/ødlWLJ:5tl{m|NC=yKqV %6YV]kXLjHz|F@fcǵCd(n& { 鐼]FkNZw=r@~ogs%7jaCxr)GE,1 \LYxɘo8,ãN{K45?7}Ja3h;cT(K5( XX&I4!# b$dvɤQ'XPξ-NB@^mꙫ[_xẆ_C@ 5֮WJ2AC/ˈ!prd)#8S|-XTIA!j3D迀I~6HӐ6{'qK˷q6=N3]q qX|9i*N4qدy0}. 1xN˄Z7nh a˓1dl+ׁ?kã``&M?Q$6{ ZUw>y\& p']kvV:N|3&x(Ye{y$!e<TPs[$/% Xn*?0SzH_x SaOINtk 4M+P0plpsT\tH'Ա0]h(aԋAoMySSX|/?i/. Lp.GV3oge#Yc?= eZ$];TsKt5Pt .^qEJAWS~Ȱs۾w@3óDŊ)KRB΀ v~TTrv;xm 0%P\]#T3Zi-Rw?sD1K.0Z,N!"!ov-iLBTR_Ise3BCg0MJ;7?%6ΞQR=NÖxSwq}vK9_ܲnORbV'Ι#/-vd(6)' 09mXU¼ZH?@;.ҀVh՚z`OoGou7I0^7Mj&Yc\p4Q]P[99JoJ"nñ˄y@6{a#$%|gr)y(w; ^8zE>V:+@Oc J@8ʄ gFyF 3/hEup@swͥ>xo7?;3T;4~ԻMZ_^; diY !-'qb%!9P im fIDV#w!81˦ܝ~Ή)AB:vpKϤtuϷ'I.v1` wXn #%VRn_%EQY(EF9ӵ۲&nvbS=餝JVTŶNtQp WRcs:3bL ͧ~YdJ0P̜VgT|i+֢Uw1YSGoqURGe͘eNYgAYv)eڜ[IQvmG#;w ӽ(Z"~?ꘉr5 ki;Lh3)`Cx.voHLdAw3 t9hsjQ/HwZ >)52]Ra-ɼ| ,TXB|é6Y 4ɱvxaCJ*ϸ{~}}kQ1H +Q~H꧚ZeuOEjYc{IEܯUI>7 ׺!"LR7%gpBdUs*Sɕrrj-|ߌeh:*t?Ow]MpEl FߏlX>iɽNWӼ;؂}N*"7oCK:ASv=A{%c1ޛӨ]#[X:uhhۯRA͋;8I}_89\LJфKyi Ga>X׃F>PNپ7 !QmFUk'qXvM E9}P ʂ/6 D'Aot`/Ya$V]ؙ+K݂C!mc y}wwڅ6y>;vzœ x)bBs]M; %G)ocag[X`qwHq.A2J?v+\c3TEx 8OЪ;M:5]H=44nO@+$x$/zw7|G݈ʩV?H|~z[Lcp^V|Dծ"=kJw3ވ}Y׮1_l' N( `C=xh(JkL@Qzp/{G}pjW4xYQy\BL<^䷴vO_Dɋw>VFRp+2͢MoYd#"c<9fOo3͝vX`}t)Fp}>\ 'ϺG? \ rx wj> fO/v.ZJI>liu7lN*FB943f3kI2GT?uܰ y/RdCa3}5I m+%Չc+dOpNPPtKVŻDRxENyS棓Hv]_S 㦲= C5xwbB KAe9~&MqnckWn} p!m a(-iOJ=.ML#t2[x#/Ӫdh"8qYɦ^:U)r4xv}<-6Mo?+y9N26 NeN­56S`ЫIP8oP%(׍{Fe3~6m;FJ YئlMw%I_; +δX|2V>JRiL=!AgT"fp*JU-ed]'v %cH١Q3"0g`xWnS$dDd@qdO'b?]:n^ Yq@O$FAi'ι3k홚snou-H p=~x$0h)N*u ` (=u0?Z&o~AktK}/ B-8dў)oç]ԭ!L ԨsCS~;I@j0>rut,$-e>NJO]#HK>K5j}ו-EGv;=/ͬ;eQbUF2 lE25'L9#ۈ+F7su7)bnBjVODбr7+2SyY b"a}nՀ}A n}ch߁؆9*ZRP14@iy0JN#)N VʓwNh]сHIڡD۱LKEx{@jƿtQ+H뻿X3[w 9r9_q=K=؅U9|`!!,Lиd#787)T ׿%Otb3JYC{h1hl;kp=D)P?T6hqچK r?aJo[Tj 3׾4c  V\4J=1B:!lz˚R]U5aEeA2d처&29Bw&/6.uuoEdrx^b)AQ ^_FUɸoo6(2^zaXqG$p7qY^Qw=+c8 *g9NYSrS~0D;XȻ 6IJ>KtJLJvqG0v[;2f&(~a({E6=+첊>^Ri[OI: [@$T2sLwdopc%*ux;"PiyKčd& +Od|HcاrX#P]uu_}=J1Nb7̘  B!q (&&ɂ~ؒGn 63q)"҆)e6#l|%[rKjt[3Y=>"e0w0 _9(0+%ثcMXZrU^P*Fԭ>4fxby &hbj%qqK::;d{閧;Dzuݿne],eZB4Ck2Oa[.΅Gߏ ' ^S#'S>"Mgk6V moz-9^Zwxޱ˚u|#v^])2؃:³2syXlȂҲE(TJ\=lWB/=5N+"TYOe6Kmt9?5Cai{Y6_d,Lj,F 'ٻزg4sUw{G{̇S#'a)9ŀ<>V 0hm2{sTjSS;6xӡImXv"mhj AUV38 Pe72D\:5 i|뾆EW%mʎXK>?}5cIJHqJڌs`׎bM%n޽^T"P"H{>FuzQ'hkʞOU.]9b {%InM-ĚKWm @;!/8 F5OF!ԥ.c\N2cjD k[)̫ >4+ ?.NGvh-l ``\j"lEHsLZz:`MEFJ qIy=3EC\I:.ыc QLǟz!(* 3׷ոK"H7ع$i$s:ij?],:3[E82,@ZW及wp*TwbBn0ؤN7jΌ, zJJO9sW{J qC1,:{z3)ͮQGlEH*`&⒡yS[ȌݡVY# r\]DtP/A\MC}LT ?j7@OFELu"75W# L%[qQ uA8M$р4^6*y>6wn?C ہu7`a¨6T)v0HQǽDTP8Nψ tzSj HsʦֻybPtR0Cu'ɒaHCtX.4+ԷڪRW*[]D cD.@p ;vփgo@0C.8^Uwqfw, w׵3mYm𘨋Q2sᇨ.[`ŃrftI*}{C:-~v k rpq p!D7Tm|+ODp`+ 54m> Rm*EZ ?TZ?IF喂oe([NM]ik_d524N3LZUH vDY(?k,dkO*uPeFKw!Zok>]* /s~35-hP3 pB, > Vl >wɤ)o#rM*'1,?dF́r.%@DAEެܿ|{wAi%uveFԪ DPٟ_`EeD.I&h)еw Brw)ؗw!*rf{@&\fy]CB$E)lRʏ ՗7WKE[֮f& [DQA}lx J  ?hMchF',=&<?l&Un)˅{BdKؘ6ݲ|/vC6t TKҲߟe&aM5$ `\G-nJzXY2厭8sTˁҒ 0VsgwQQ[ٴi<B?qi},am}ݢ X Qܢ'SXr>OQPiBۥtTKD\A"cirk5UYUqA I ɓ#!(;1K2JxoXl0pW#7>뵚HIXUͣV'Έnj꘸tmd Wje/I&]T^ABJt%hg'~6s0~`BN=Yx;U+B#S-[Y$~iuL\r{(6D"PǺ#ø6ƒzu0\i3/yI4g$z Q6duњF RCy882QD4! W5e5K?Ǚ-V}X&0S1BXܞX'a^[¨'~dlϽlF!UEw.Y켩;{{lFƸ@Y#cb-W1waY[^6B8Cf L^G(q)1bB:X{a9%,JOʺ/jw/$sP&8P}5ϼx r(ɴtyfYIlFsbR;w ^KLI؅dB#`GwMR}j)(/UPB(P4vR u<~Rp>nW$ En?<t! A #7~cE%* _b&O|E|ʙ.RN"3̠?U uJڮq1em'%ZՉBu ] QCAU؃_ PSt=!Ӹ?[YS#{wS&1.m(@,C㩊*@Kݶ$'|H 3U2E鑷*^Y`(4Z%(K8 F`⩯ԝ \(:qlwJ ?>{{{bɺ +5-!koɴvɃx6'KX&CJ_]eїnT&Zpf9&{5YތD-LASF8mMI&xA}հtH~ΟRp&rO+L F_{XN&> Al0TзQ \&$Z=a{ 紩atQ*±e۬i8m}}'wخꚏ͇fB^ J\c{*K"Đ}7G,3 .^8sP&mzW sUZB'3+ٜ'\άL'l}Ai,M9B-A $p{ %(prף'`#>RHVC֟a[ԇHﰢ}>ֿ[%(Gw fߖ6]fkӹayCvgR 0z識)hz\/lJdUk҈Ph p6l+M.6/I~H>0$NJ&Zh%dt;xǪ `N>Eǿ!*CTe MX| E%.ƣ[;,Y8[>ؖ4H4?ȃ0ic:$A+BvD&=EKJ|#LIb2Bv੐*CfDQ^ \F'$y .ӡi~AhL>3k=,(&7,@b~5-ږ|zICr/W0jH?ZgtR%= Jz0{2cFƗO@HܑS﮸jW\]kcCTfD@ƛVLAWztaZX2%~c-a$j"S)r~esb5W%smredf#){.J:hlE;":J5Q0mbdK1Vi3+ɖw4U͗wѕeJvk{lzє:~pMXF2V>e 981Q#g!Xb`q6 $ ?'$=5V +XǏ􏰺^oeofW&B{K`)8@HM'َ6.6W:$;o\aihA1ɰE66(υȎ|P#+j*&tD|~:^Aa"y T WIYJ44AŢ2,]Mèa%VyYDv{y+[S$bZFMM}6zxBilqH.L3` BnŘ2 eS|e-S 3x$.g|6ނґߪJAfO0{CmPh3%հޜ(yVfeUPx=6tP9f5im2X&ZNAi2F9*U/ KW~Yt>k3Dhˠ%?/^TzV#ȫJ2Pn&|0e:v"ӥ/zugiv_ĩCxwV^w|-1T? jO4Wyycŷ3[PaEeJjA{Q(//C:;kubY۳E-Z٧˼.JA `(SqPtitb!6Yt~!j{fEf! k~M%́.+R#׺0ս8?5z쉻oYF%hoRo@'{dzkZΩ픀/poa=pKMV\8Tu6厒X5K 8W_U3Aوgvz\oz ~tNxe3?z h0+/ؠ@])G=I>Tw?r4Jb3C0\B%' F4n65[RKF b;G:y\XFs o֯ &,kiRQLD½H&-P6CXN,Բ"OߢUm=luu0ŨQiƇp 4\H!Bh ?=Yߺ.R̸0df8͚5H3f[գIܞ_\01:k1Q+lԀN_&`:v"x̽7qjq r:!W23{=1\h<6?C_3}ٴAu9#`>t$f,%qyޏP8ԡ Z2*WڃJ7 EFr[iu#2:8{3_h؁-n6'&K\JXc_j 8l׊ >!s|F{X\kK/wwdu>"`}Q#ӌȪ\W߭Gռ [ !<8T2)tfV Kr ZlOKT8H֝W O51pejqL35PfYLjI~fưſ#`*p%+LBTN`ȼ.;14vlr6:çvv$wyךV"ޘ25M>[6o(\c̥r`nR- 2eFI$1 _!>!z\ ꘙX(&䨊 3<yy-='uZ;ힽ5ȹV(O>̯j<ꑭNGVX=Z!;٥gK| Ps}B{^X%n5zѾ5ETO .g:Z'[4* J?%:n#T_i+y73bj:*ԋei}&,)>x{vWQQWa5<DM#3 SDQH $yFAP\Z5(Q|ً Ñ TK_{b e 'ͥ{s g-[6i*(ߋ) ċǶPw0Uw;)[ÁƎL[f٥7Y=m5=C~V&'% fٚՄ@=2ś[j1/ xY_&hFj.s# ldSȨAwZ:5ε1}Ǭr%r\S>@@9S_9_#{܏ c)֐x2}Eb^ނsCYj䡊--! Gd,CL60iTp198z=3;~싗GPlh_>.F]Wӝ1VGqc)iH`gLHoIRҊ+3=|hƿ= ۣ;xq{GNYmZZl7i n Zc,nңc#49҆% "> vDZ5K9ӒW{ W殯K^`h㈵^x!x\YIh'.dC(ZG]^cG`[/4 "wN sv.b ا}85y]gVv aCMt$:/T;sxk?oCd}(y *`B#G$x(6vc1o3R=s|.Us4s@g=XGeyF6q>_(̛P]P .F0$*gkMIғgnPpCȔ:\9漘 SA!Zj|)OhOt.u+HZ>.lzٔWxSx-7p)U2x5ӾgJiy'y^y+c&{m9K~&xKy-fDdK2~4-ͪU77Or̓cD~ VY`ihgKڼkM'"ikヤ BڎY'G*jܨ+I>,(~X}*((v˩vՊu DZt%3L,gԜ/%mZf{ECz5#iOwNՌch1շSXP*  ;be<h㺛S?V;ߞgpi^)ONЬ6d/ 3`H?pb5DL S7 /G})/doԲ8}6END̏dZj>w }:tCY H- N)1*:nΊ2U5r+v4X0h|!RXHASAE~;Bœl5͈,7 a aD-30 AR0/LdC)J +`tJ#bٚ=j- -_K h˷Ҋ@n}I[ @. kKpZyxkߤїTk_}vb| 36eAhPՃKBH)E1xZm|$̈4y>RU8҈DDBOߪ26o h x &&E 8d }M{/ z0dpǜPHoc;)T.B5Ů͙kXHV^sMɔE4okKy H$H}doHdNoRM)j@:">)WHuw-)?{H&pxwos lVQY cMO /jcZgwfߙk;Qؙ (:Q6/8yoEzV J4$r5>f+} MBЮc^'>s;ch|rv4Odvovp K!yof<Jz~ Ly27«8W y EK`+d6DQE8Qа"dZv#6+Nes=I~lNZ'w5`,(CfI|Z5?Kў=_-m]Ч_N淦BL؜ƤJ$6Ikw) I"z醈_ W7J7@v7GS\iXJ f [o*h.nt.z/|bǰF1dhͅڝhJ &bx uFe+ IT9VN,}b%S8Re@-4/~HꥊPQ+G"Su\ŹǸmIL"t 6{ P&%{5{K:Չ(jFJKsHIJ]9Ảy0UːWGJIDdhhhm[YٰU-4X'#[۰v˺l|&D20y/1tYpqaL!Ky8Ćw"$g8BAyT\ Ity$+e҃3jEߣZ%Q'\QA}@^t(6d14"u9|J\L7Xtnsq"jge'Fd󑭍 }XSN{r[V;!s5{ϫ;j5`"}.oa>CyB>9jwrL\Q3pf٭4I^i*Lkˋ0̓wgdûh4J㴯SRD0ȋH=e6XP9#ywV'@V9`6ZdưӜH 3Ĭn8xdaj^üv ~ )S&nNy`kDp cu,'{#hKmO؟LPM~[\rў!?=b >GlM42('S5컲 dIK_l'yZEdKXyא(,^灧7:d]rd:D+{cV\8O1$I|쨰~s0 ΧJ 篃+ZxvTgSqe9z^%bykTo ,Ž0n]NI+gɚ6518vMd0wig^\eeس{#^w7Q_$cMg8`R[  ˎKgebDTAUUҤ S4+٤`D{oQ2ǔ <INۻg#Q]f;cػ4-YQ9УrZr ēs#:Qo\7y 1yq†k&r)kۇQ&(t(P #<~S(5=EJea!\($pWW~XսDEX;<;T](LRiYㄤ.m35GS2&ybAU.0c5Ab4I`= 4| n!ZqI+8Mʈ \k@#> e˒x-;72}~7Аe< a{w%HuGޖ0#t!XA%I[]s*"g^J]cPnr!rtr:j:Zy` "]a@M9Kz5OOwuO+,7(Fldgf;e{blaOZWt Avne+Z I`8ֳֈ.n=0MEt^I6.((޸$ArFj2RhSj$418˗3Ԭ0 @ZF|WpJi vJdſ[_;d%AtkeXA!FG'&FNHz1s\cPE0p L ۷(IYu|zڔkE$T Z@Ew 5j]UtTYs"ጰsap6D?'z<7 1e9U]f7x5fL\= < \&ӌ2M`YW1s@/Vr1FB;j)0:A c-wja!L@UAk@#~ĈD:R_E7ŠIWP+ yy"D)Nz:.wX+d*Nxk6ҲMX-E'Lo]1N&`D27i:K ERKA .N=h))J@W^q=-OGZᚮDJsh3Sc*%|ϳzy Գ\DML ͿkOӉx|/"/Fڙ()P*.)A-?iLs2덽SSb@!+6D1YM-b&ϹizJTERix+;փshzM N=VZ} ^P0TVaids͢yO{5]=VQqIr|dq \ޕr ?7=17啝ъES?SZ:{buֶaI狒=]Sࣀ(Aօ@g*(pw2NTt_<{w: YZ

rX5ˀ葖6dDNGH?*V` #xYlji:d~ eeצvl ۉWyߩmwj.K;g9. RRnGi&gRTs0U1ĭ!Q02#I*pmQګĒLT"ƍ_?ut<#v佞?z5+q鋆L /9ݕ\`!;;94ב`;/6Qu02mрrfK cv=! -b _TT3)oom߅*i ,v1R=/"7Xr- @$p7JQK<}[. "0Tm#ya_ kjeMSEkuSN?Ƀ^ԺD䚚'elD$327q/rQZK0?ivYLLAu%$r+ 񮲍$n2X|lkX"ׁb9e d/+>\Y C8끕QeSW{) LwKF͖~wz Z#Ft)I`ѻRh\Ϩ}@F7-E/J52u޳N]4謴jn"0o$4f'%uZWs'HuB٣4D20y#ހ՜*]Bf;qRHnH_-B vy;֠)0&W]һAryR dX:ݦqzNӻ@CuQB4ZV0e:0 gNO-/Ozr["dzfqv-22+)GIWQpn4[Cr%+c)[>QjNؠĞlg>ҮA{6)tvi:K*Gʳ/"YZ`u`t<9".>6@v z|{V*7UgMo-! V@[Hwax~hZU f#؞d&=QX &bh!<<=MOHU-~^ː4 }1dN )-0#?|vQ P4'鶫0/&}p; yc7'f9cܐVi5̑_PLU%=<ס*,4tH%l`}_r,CIzxpCUKG4N2Bb:ApwU X뮍*b>mWmVߓaIj#},zqnZ#e= xـf$Z5bϯȏn EfjܣBC/!XDxX1ț 빧B&hGsE"gtv = |uR;Bo7n,L pӺe"=C9ӌ!6NCgVN^#EGf TgFDKoHj(Ͻh 鑫kjDi"zc&^dũb@#d?l'hVRvHF3O@;Sl=iNꚎw.F W*S)4 L܆{j.l鞆c?aiq]ݘ l+7tGڜϜwxLG~ߍ;܃\u%!TY6,ߦ1J$˥ac&*y!r`{ DBα,yշ]'c0PtA $2k.yz-Zy'z z{Ju 44Vڬd9\Pc[ yNZl'G_Tq1&OA<Ә1ӗr47" @ ?}-IչCQ(m (/`Uѫ.خCTy'v"~v4Η6D|+=yV́$,Efo?~O: KeGX9c>PAmSB9p+`.g>%Xͳ '6@ϺW8IJׅν%, 3skW0'ѣK,!Ua? 8ֿf߂(yAr@- <ېxrks>>`*XWVՒ*IC͟fpZej-ĩBJNHё2" _3bjw|&D{yvY%Mp}F3WyrsG V(H&}8PQSJa7ZGY^3LzH%yF J]ՁԷhDJA$>YAqB3q) *g1]&G&>:tje H (Ϭs)ssNc̺G腱C\3]mدkRTa`G;.Dlׇιs5!i.f0ލE1UX#_vۑ"U(;3>Q1}3776R8&7J( 9ķ(r2i#*{ 荪3M.9lE-1M:;)jtځM#F @/ݖx+:dXȨ6N5-q`R fMs:藧s/s=v^S #:/}2C"ޤiD̻vJ@co?RDIm7B!jށ\@H+B=x}L" lF"G[>~~O ..V[pc˥FU+F"B O ed;Ėj" oV'U|J_OAd(Acǒ 0э}ۼm[tEB]R3ϥKF{y[}-?O=oܽV@"p|$~u&]x*;.{H^0@XMYzI>% vK.us~`caiʢiHD>cݰh=mJc}aDafpC8/an+ҷ,n|9)љ%/S|@)j |w TL@)&+OQqVr{*DUa_|Ɔo7~Rj)kHO FSbU8-m< KAU $%i(z C+4#)M2t[7.!N8#!L$VODgU[6n3f;Qc`33?ʜL`/䱡IP +%8c@GVwu'~`FLL`~O[͉,e}'~FW R#u*I SDLUut_ʎ8ӏApdcI԰r~ #w#grc@6q!CH9fkB't2bZ U,{Z5On7 sW ԓNxp*Cpl#՗{i N nkiՃbn^_$C&U, 7QMBJu"s2c&Hj~5.Eܕ8 vJ7ݟ2/G߆9>V'})'l؄ UI\F:3u4Qr_ }Q_p_r/)UC h"0Ȝ')B%7?q qf= AmҒ6Ty2~[T~Y-G!%ݛ;AƴeCJ38ÍSz㘢ˍ㔐сV!R)J2˻jڜ'Yg ܔS_@*Ȋv^'wp7QwP Z ^ed7x\o8 WHjwV wRvyZ==ThYLyiԱpk=/XG0 ~:ZVͮjLQy9>:~lq 6}XC} _HIv2͸ @qOUjbO#ͷ{:*Pr*Zߐ0Q\^T4e ? n#tLk7i]mRIo*.l{0񱇃s嚂 qA;~g]-gfJ5{*i?Q@f] 72+ֈ֣B8 *n^nfr7i]zW:LGw]5k_bN [H˒5# q>6 f~5jߔmwg{ ?{N!+- bH0I=ukb:Arxu4Jit~Ù'3tq0w;; 7+5&e{Ѣg`! 5 Tw ̚ǕGaӨ@!f'Vv8}ur\F!pb:`&֕-BS\;#hZ5zn+&'|4A5n@ܕ X?`k )#N\IK̕uS^[lݝs TrE2;!HגcB weCHJ8Z^e y|B.AkEc2j=b@7E;?xHHm i{kq[dw"qޘ0'  (;qKk&0(IaE(n!DKt<.AI2&¡" ,=Yv~].5|H ; KHۼ{K?+*tG=Pf`< GDe1\i)*?ft^߸5DT9qn&*Ƃ1//y6'>^4c%˟1}O 26 ^+5җ+OeQ thLzk`ymTbenӬMlqVH0pzHݢe3fӆԲdȇ}G";b>,"*(&}%U};Z'##ʩ BC0AP vm%I0pocgb-Iݺ@l)BtIUYݦxD2;ɤ!E92_xpz}toOGs^F2WΩ7o,>1ݖԡ$X[ѵJhVk#ø|6@ӑV8bM&vl?,7])X%eTǷJ {5#zݚ3K8vHzL&ɴ^Ҵ!I(%Ȏ9?޷2%S l?O7"d)4]o~e0Pl%sPz7= g~CZw'N7$8o9WB.EYэtO6ϻwƪT>n`Gz J]-y4eĂ=c/\DN?P/H K"H/nͳZF#@D)C I$wR¾wj_pMH.M&FV=;e{*Ă)zdJoSJ;:HT跾[ o ;wIS >S `ɯ|>glf}hVV069Ffۑ=YSȌKϯǶbɵhS?C4-hVx(Q%O/B* |2$јxp1"]* UPDJвb8ߒRD jaP-y8Iǣa,mO&^Ü `PB]8uO3~I Xվtm9ʋT4]Հ⧯z bp`UD"HӒ[D.ÕqI04Q]#O 1/W@Ian_܆ j`^iPƷ^̣^T鎴8s,67{J줞VDr"όX3#;n|ȀAᖚ@FJ^[>5 !7!O>9Ry'ÑYMNoe԰NDM{ 69pm$zxV*F BuANmyGջUPJI)k^} +ffjgNZ 6 nM)U+_X,x6?dRuuxzy֪Au L ')Q_,5GUJZ5tj\wIJ[߅asuXlzx`RbZ͔_5ƴQ&XLpP[,]b套UnJ4Po[#H~m;kW΄m &l4->@'EXgƻjz#o?UT-Ul7ڂSS&gmQ X1ϓވ;p,JVfR.HeEŠoYȨV!%|WV(DpuڬcT8[G:Tݣv:,h H/#O& [[ӻQ2gXZr&)L;wC,n&ο+n3^btR>3,Ps:x)'N=GN|o= stug-*s0zv 浰m#p[5_OJ[C k&QϋE$RRl/Q+x-GђXE8e,첝Y+Vl8Cwǹ)&aSeUD#QiIX3lvüW$PW:Wd2`JDB&*-gu`ٓ"CoǛ:Z9bƉfیFV?do5hEWۗ{%= A9x*͙ { sueNd8]|SiAC8_FUR*#[4zHEw%Ϗn4f#vK&Zπ>y'uZkS'}9Jky'n{3Xh0ʝzd'E >f2 O^懃\ϡghNvWkGR+QGJX]\o,F:eBe!s"@oBe/5Gk:zT Y۾be~DB0!@v޳ aŘA S.-FB8H,ѧ烉׎jV]j'SK-Rؗc)CcsAc}SԺ)Ml1!*W $#XjzT:'Y"}, <gc УtAE}c4nVpzf\~8p# VيCO^`B0 |!/L-;k\6fV_s; LM54iY˄x{Ns:dXE$'L-CaF Q$XC0:Z< %}lua;Ě 3q#֌>5g2ɐS)91B%Ct`5'}Hfpyqӄ f[R=J8a 7jߵ-yaTu֩Bً.s @I-un\X$H'KFfڅ+m+fSlhWjz-4};/1@Vn8?y8'v$ƺhd5҇c!دE  \ [i/'"WgF6o$9S)7,ښ:[:#]Us^uki)D`ypQId1I U/:+Kv:!Ml-{Y;%t[,lxYDp3oϤ)R`UhwSm~`NgJŊG+e줡%{$G1)gLzOn}aQz4.Ne B8(hL_~U 4ѦuQYV9A\JGb#QOG1N\ծxJ ;RҀY5ǃ=#Ox%]5?5ޓrk!~/~wwG,*?RՈƯ}vUE~A/m~8epjOUVDJ" w bKq;HkO mu30=ˤ t/k({(l9Ŕ>XŶK)A קK9 `AJ@`uL?X^6*M籋~tp Ϸs9!%4[q!/?9n; r2!_gRXYëM~+DZ :,' Vޚwz2< -Ɉg==TRDkcSnd醝*S/9l֦\´MNd;N Sv~ZމjUۓJGM9_ׯrcWc )uDNd?*yAԤy%۽K#x]e+l+e݀#Iڦ1FD8ÄF}whHE&1Zr%=; 6:]ku%O˛t41Jm<8B T 7 ?vR&I/iѾ"JU9mayp뱨EKR9J0-V@K#MZg30U|WRs/HšLΓCsQHPWF6V i?̭F0ÜJzgY%8_\眏+6;!6+|P zR -{c:<iAME##\{T=Pe b םz3)y`P ~nw.]϶Jͣ>)q"ɟ}cH,  ۑzQD`xN]S tv/At>&]a8Rkd 6wCACrӡe$F5k0et4Y#°$ ]i Kni VL0>EF-2FԠ&Տgm%-jTKWr%qy탿`bNzъĆ{jS3Ƀ FFz0:I[zC c\t0Y^ͺg#Pq ^$3@NIu &c\kIw#*2jîJS\n{.9-jA`?ʉ`wn%ʏ%P[N1A2ˉϔ*>CTӄ/Ee x{˶c+U8]/XcHi\נ %q`JNO'bQ.m[On2\e}@Sۃ׼t#1"%Ob(׼WX2l-2a|4d]]bҽs >ێgq'm[R_!Hz|SPO(a:Ξ18;֧^+|*d!4PiVn'g{yaI9 bBF Q]yȨ^j,D䗳ŬX \".EqG1 h-Y'(4^:a(%+rѢxyG!l{t{Rj!쒉yOD,7p"siU=Sg"DDG5n> \ȋL7q|xO!%9J;@|7DQ@>הr#cM (ˑ>0Mhqj&_րѳHYi2e.u*0%_/7_C6ɐu, >Vc2`@UR n#t@(s0|c^D$v,:]C`^PgA '/D{ڻ@ŊޮX:!ª&[[ot/5w)[Zx;wS kƕc5k @h ,տ? 4xT6 YI}\ ۿ,q PC⚗t1q!R! xxsa]=3d@8%=Ke;%N{WAbYw,!4(Cr6pN $Gp#²!VS~mYIN\ OjEF$ N{V .y/*1 g Üb]D#%}I ò.% e2[쫕)ءa~Ch}U7kc7CbR{թ.gX>s1{)6HPh c7Cx4:U5usM%xMAM*,g_-ieN ]Es9c`eDILTP8 9ݹvf>@l'y3IоlmNefЭO~;~Q/<{@`XSg[MHR`¸݁+bub4 d!QsnykC|I}E W0 ?z 7?ďF/dKȺk W'l22j+@36aO~dGMq%T| рGUCNW x4{F=JRsJ[!c%mpUQ}wzqԹ(enz530YTDo$'0lZx頄Œm:@q: |fa!coڙx\I >P͜HihEF7ettIQ#) 8O Rڼ$c7XjvkȀCXݞJD gݴVdfR'_ZY'ʧ:@!OgүYpXҌF[_M ixV,j  oH*^{:C)jZ_<ɵPc/c5)*1s"L>˞cF%WIn `,ui{L2c'ۿAT|K lCeeRž k[Ʈ<)d/ ;M_%R?} :PtCA3?b.&jЌ|S0PD%Z>:,.m~:⺱a=;,n6 \d?<_Fܷ)ĖI<%!ǽLgG! Bp&j*\)]wnV,L޽(AT=~ώz z)ЪO7/Ffr3js<ƅZlN ,NfN(ʐ֥bVWR>d4t"ig^<*W$߮/&i;<6 V#.gW&=ЄԘ tw5?fbR%gTj_Wqc^Vxib<ڂ.6Gǂ7)0T pWۘ{4=qB-iiZE¨y^4{Iɦ(IKn*i9?`qRgCd7C1IcumDpݍ~@/ȧP9v`)&7b,x֭ 67FV䂯5#֒k{F®?\%y԰>eXuq0%nDiݓM'SI6݇+ڍ6pC#sb@BS@9a.9q23w*i dkxbdf$)A^Le e.%Ytۀ*0tυu/ Q~Sh }3[>\MaG ٺ-(iIhTjJr.,Q!z}4&-ۊuB$kt\[{|ǡ~t(PPw(+) 'Ȍ:d/1=2qyafM}MX$p˿h-2hCIHIU&*K-^;|; )s);(x`?c \7wƀthTwG]pc]ǰxR}? 1_x{"n:}:!;򛖽 tfuN.URGE(w:sI<)%P >72) C%UT)هlCC Rݙ@c1;ƱUߡ֔RbSVĩf5M6K(lzJpAJ͗&yEgh{6˨Ṉeݥbö+4/>A%r(<] ݂.V跞Nbss_g _#PJw|ޞ+b (ƦS\xQ=ZQ4ѕ0ORzbFDpL% "+`UkbZTNK,pI#OܒԡQl/7R8$2ux  ^Xd* 2 qB%IY/޹FYV<)*$LQd-q)e{G>Ӭ(:׳;? ma Ti0XްA6)9.SǑELOYWKд/zjrJj|Ji <4H2#CƷk.]XDJ=NH_<{9kԾ.YE|m;szHƿyO<b98ݓNsqͭKv~>?J):1g +UIEkx0(v,NG QKj6'L꿎%#8O]gBQ(X߇l{Wu=J6P*wKP.jUnơYw꾴Xmrp-'>;#3`P}V펫qg!l7 >t ,εNv:ӊǻnKht-"A>vBSY1[}y5bRs3iĸ.4$3}Z ׾nLۙo0 VGM;<VYo)rde='4k-/@hp3ىmG H,- @P]^g 2wu/?]PxaH"~- d^T oT8 nӷ-55 䎔IK&Xqy9ۥUu=W'gvFS¹0Ρ$Zg׳8;у Kѵ%Bb0mOr {4yc-,S۰4 ҶkIjeccψ4#!J&-JЌdb79Ǡ0QSM|\J]*Tu{\#TՉt8Nx2}ʈ|?ȁLXOsF^'ܘǗtNHNEA7\ 0@:J^ D.qc;*ިq*V 1(O;ɁP0@R,4+.H҈+xC'a+u(|nVMs)"-0E؟8.>m9-01hg"ڶ|]$.Џ\ |`Z@2QXpf[(H6p3fffx0\H!7F_Rӫ';,9AZZc!ǵ5Z&u^0o- z.妑t%7AřYKf 7yOrsa[OgWav*$I%B\O!wɒnE58ϑD!TaSGi@7W•33"v~ BOO/tt5b<Gy 3*턩s6-<:WMU|9fO2 oʮ)+):נ,fmbd DV2C"NyQzcn$oV۟)wr<} #mɉ(kom͞nY[pU;뙬]'98>{ F²Zޛv$"Pg@9LoUcPn@Fxt6HT&Gn t~;5w*~ MҔtAKS~7}P)V"rPhtqg%۩Yw[ [L^otFq=Ѡ RٮaH`f\uf3\;a =g۹,%9-K<(`~AU\=|/Y  N?B+<. Əe1lῡ%5w^U>]k\HMUG^\}nd'@pfĥ!w#z5WY8z3 ܺ&_YN żE2D&y$\#]#zf=sNK?f"Y!zQZr׽Zl,] &؎[P]9Zz-oKV&^iꞔoc^iK>iuv,n /#q5[/>Vl,51 p[*TUJ_CNlBTɁ)V>P4fIQ A&%@~8ϵʶɯ#h3QTT$"l`Y]k/KvȏisfJE W"OwM%PI&O)o@neKI9YXX)L܎L&xEn"_W"'P$&mEuz*j*Etj>..T7לВ*n;v^,9 *HC= 6:~ lg\bZf/,}gjc6&\َҦ/s喒aue9 Et[`F Ne \: ef)2T1W(.K zaT E$jz*ʓR5JMI_4}4P]A^[&"˞fǗg#l?TpjGQeIuc{@dIf6_ ]%ƈ~t{tZ%AeCJWKONZiRfZ{a(Jq\[v;> KksD?j5GĀ+ Mҿ4|8D8/i&>X,em #~j-sq7)kEFgP{لe& ]bn'XEAa3o’@mT=pulUP'PlJ镯 Suϊ;bq 0ͽWr ŠY{od،0(Cӓf-4 ǧPr;4} Yc?]651'VIsuGv$AxJ;c #O)ᨏZܵA|>FzHkMw(9J TWj_@㟐lTxZhK%R ]e_&Qэ9M oyZkdJ4̝c_M%ۺ%68R oyLdpiTJW y])p`郱?UMlߡ5OqM#R~6Z6@.!@fh WkpoaiC+VcI63#g`fOmsѦ/EXSe8Vpq3KLW|Bk },j9bNۢ.K7HPyq:C0%NVr~a0  kGϯ[았/-͓h7ua_t4Bayq QP8y({gww̸)xď'X1zSڰM`-19Wv!V#Nj [6d)sRAENRCq]b0ɡ ^㏪͛_+UA$QZrŷ~WdĶAqL_r?!Zqq}#4$l$-&ޗs {mNc{5r1${@}JJ[+TޡYʛ <%>,(@E<+!7Xqܜ PU),V3@폿xbJYX c:F3Y1U؀> LptNġ .|C' Ĉ#s*o^}=נK/r'Ϛ#,s}+~ռ(Viz=9;鯯n9_|66݄ιvyKP0`RvΫ(*R:[lƧVD+XgKoQf3LU$eB6?N_8@qNV ",}+v#*tA̘3is]+7ioBcWu7/N$_=FJǡgqcy1Q+Y K:q) FBڰZʜZ5{Y-18OQ[ٜA>sfL:2;j0Zfe̿aD$w5(wW1w$Q>HHc|&;_/Ai+jˆDBׇ9` 93MTyQN:aϙ, ,o@V)-->f= UkMjz |P ͩBvXK4+PAС&fP*(-uWvx"ӁY7G,t/tEgbBȄ]`ք쫢IϙFgo_9)Kpj F.w+{ 7`+~Mp]:q#C;4vV͒R`AڎG$f&5n_wt?cu?(B % w0]3ogUõHYj1tY,=C-sK:Bvn(2,+3%h}]{$/_Δq-.]5 2)ڗn#uLD\`[\d$@W kmȟh2xWXʝ4ٛߴ3!;e ԛ1RqHLPn򎥄yfӌ;ciXmS%0+w$V\$:'|ňCK~ h *Y I|0+k*EQX9Y |[`pIcUOԴbGNV<z2d5}N^` .yP_[td\k¥]} } !WwњL!7jT8B2qB/ ;q>g-@ԉG fz4obޠF'R/OhnjIOH*\( B?2\,k44e^f 4ټ!\o xgJJ\zJE)d}Su+|A*SʹebSdc2rChiK<:pi|TBZ,Hxl`[:M0UU\"Ih`T7%P.9Ezx_S g6xec+@ے"IՉY: _b{їtnÁ#x oǦ Dי[c8!JH_յ qS#4+lM=8_ERc!]HmU|KeynY|lyز͝@PƕvёT 9CST`>v{EU5y \|>b2 [4@g. кΪt`=UӃkhH U] L{1R%_ *l)~1=BvAKmXX{.d$ b[rk\ ްIsUѹKgFV6o TcNJ7\.aoNш 0>^ XrO}*|N\..%w],Z ݛ "~QuH~Hc[%q_t0NkJP9h;ܷ[^d7?X?Rҋl޺|v?B±F*PcS ʼJ })L|AWji}ѡahz\ =0u~g4_˜8`)=}> >q%- 03N񔻅p̟Afnt#RL;Y#"+m~>m[dnԋ9bڗrBDCyG~5۸5/c~u9x)&}+ƌۄEh5Z[p%j |4&H0FBT:;DI3˓ ڬj-5hpM:C?eA,/SB@o/vvI9DeVsi ~a;$}r#aTVgpU į#dwƛIJ;h]@E<U@:S;=Xq/_ocC29қ"9ڭ$I>/0W` 4xv hOeJ1 XG ˝x^ $ {dKIY/{ۤ}NpnlD 6",(le"dX-ߋˎG@@ðŇ3m3$!@1ք4 ݹ|Ig@<ѿfސFD,hɣŭ .|ZNE4jY!ސQ"$DU\nr%vg"GAQ`â֟ܡ o=EHʨJ[ ;"+9R0[XiY X#Ҡ``tgs➓ܗ//"M_֏:V=KQ;#"6Nx٭00GP;@ŔMZl5T#%ϱnIf <tAbhծ]ɍ (þ)9/ ")$x1Cvi?ѷ ~MXD,ԣj<3I0SJv{!TS(gഃCK/㕲 bQfG{ݝΆK@=;gG*;'"g7U3uȢb.6Fg{03Z 0+ֲ WuSDt aKUu17߼wu3B2:Ly pt<@ק{ wֆKsEH݋dLj])l 4$Z)z U;抗󈔽ʿt(Ϝ>UTZWU=\_M"(8_;!5MH誣ݏN;.ɗ^m I1&WU8^-ޱ丷6#4S|Gw :w&f];GIX I_?wӼ$ HOMgIu J7E!B:Dhes`=X5 gIu2* @yx#Ro iE=p꺨~r>#ɨr_s|9LbiM!\wрY먖azz$ 8g|gT:^jE7b&3Bx"s%`#'+!lhw`&-yuU*rnw-l_z',?҂>a 3zZyasֵz~Iv}`8K`*<{U1/(Uc{L F(saopPbe.Էމ겈1߀Z+>2s_H8fS%Ҹ"B%y^XeͦC?s6G+ [{4@ 'mĐNKOC<,l"qY<) ߄Z ̬̒ഽI/f\|؈PO5NB/N"SfU~{5|ɿ#1i[Z\X7Ú.J7q{y>r2.r+Sc\}+m] j)1)&<CUt-}3?a?Q( 6$_B( a#.:@ه?>hoP#[GU?E3Lk y6& 1׋\r mhZ.u.;ڍs(""節R1%u`3hQ|f׼\[k~ϻ!PMY9G߽`a VЖ\‰U@q>djG.Fy[4zn4=)ffdvZFFX4HN}7N{Df™ .׶ ({u9LгurBJr;_B*~ΓL'!<-fHݷ'uey)a N"2R;89C?7%U΄6!*)H$N*t>.ᛅ?M!]s'= \j|= "3I̊|j-Na_~g8^(K\zi@iYEᧆ~=PJYs#b57?s$Z:V*|d~ZSȗA3ǐ9%2Xqr0.v8=u#jhP\kR_(v4=~uU˒Gy/C@DR,rߐ`n(dpqرd9O3Jj6qyL֙Ȋ1A dU+'Yrhɧ_A~e30ڀ2tz&3ί_4SlbaFPmA5n۶Ļ~fx ˽Q'2/p@n2fuVk8o#y>ԑ E΀֥&"p&!`'h[g\[o֤WmCϔZq'82z¿|.E\1c h]^r{1&t$>s敃#㭆kz$DLnPFQ(MN&H59Oh4>J7U|Φ931#%~1ۻX|c@a-a֨SSbl.[QYv0%qf!C3_wﷀ1Ǎ*C2!ʵ@ENh?FH^kֶ/̪ةˑS82%i HmUPaN+][:Alźf8,=-ռßi'atQƥЏsE4{;RHkg[u۩U ,0`xh- ,t¥L/%r.ɼA%y.Js?&e[|'`lZ})Z!΄тw#9|w9H8ƉvL䅔5Y3t!#':^})dëB*vKù)MWo R C4z/Qxd*0pJVwM]QΗL/DE9C)$WEV^LaX`f*IzR0oӬ-ro?Ywpa.q9)ՓEw' /{7 y cН3Эsy;&!jg휔V u't[Ƴ(G/Jge#xkgC D1 "ӱ^B){3ۺ箹rw7h G~OSjw]vR/MeWgco1µ[#`I#*EuxbY}N`1=Xgi:v2 i€:ܭ W/Ez=q*[mp2-`awJxOQCsa .LfBóX}X=8a/%XRZBԦryC p6%df臦uwzad\0Vm}199ʯaP{jQKM'x?<:dgH)~Vk v1n0U;=8o=,[x4 UNopY-ç*6Y*{ĆR;9h.t#Lp 3V3+/]sEKP+8ͷ^?j|Yt6jyi@FY7IRCS=K:-ֻ 14$!pgN{PwrW{ępk'821 >6^bXK1))q.4`G9'K0[+{$s͞xLIDtZj;khs l˼x9g@*y-Z+]u0Fc?ڊA| |pro E,{w)21ߢHX,Yʏj $ !BJa1vu?WRB zÜ١Gw1Q۲ͭERˈ]uWN5$Z$hZ;7d{WAQIDhDX#CpkQƉm 4&m1O}f̓xL^rf9:Q in-w 0C檄 Dj,yM6a1 dCo.-Qm/G"?Dы:wߕ.T2ޱūаm{'%ˆ1&%ݤe[,bn {:or@ >,rzrL[էKbu0(qutgwpw~ ʕ_up{qgV[rxg8K|&L{w5pg\X h[ypV %&3tzC҈?3 x8N*]4vu6 M& b2VEU\h7 ~, [M<߂~]lf ~5%G& ReK:Q}: OsီDCG f* m[CHCb-z;Z2)Юgw^K,e[Fǧ$9dM\ǘExP tTϷDcG` 7kiv%+ P"qafB y''\_b%= GWXޫg N^ؖՂùJRMMDSI3q?NAU.1^k@Q3r*=PDZ-3޺@TU@E=iZP[YwYe=b\ŀ9F"@ӣi&%mX?`Y:riX>hA"ɳo@o#08{s~mJ(3nj|8$`{vk}(eTEVظxHsh8B2~q21p  -mO' >/j$$6Y۟XWLjM$մ[_ yB9M'z^Ufe ([%cL`2mx2K(|%ޡ;6r҄eQ}3Nvy :#N <@K ˊP":EdD½3fG&e̓}X-eUћv) F/z8rBkצJ<8Kk+) ߰QyF,fSm7$F@eM@Ęx9%LQB*mEvZڴb|.kK..4ޠw(D6N!虣1=B}مG"'fqzW%Ҍ#v;ټoua^sXj#SoS@Mql$o|2>Ml(S~bܳd>A/R|N ݎ&5'ʪO;pdQ٥w^`^qJwgۜ D,[l5@H:ھlt'y`ax\MF")5Uj$nh͢W}|@դzpͧ嬲>w8 TF2mD;~ǰniY;I:qےͨXFLhB¢C݊WyV) MJDMw1ϹӏxD%?58ȓm`/γG^yw 슄tyܿFc`sZo4̓zJ,_ȉ<]nS>+""Kk\ul- I njݿ(ɋ6)[8EVK\EDzR-.$eiP]6iQբ \XE2b\3f(]N/$$I P)hT@g!I՘wD5;N'TBK'9f{Qagq:镺/\@}!+VϦ!38* ϴ}C _jN޴E53_8F=rmɾd;8(̃U%^X-0MV#ҁ#K]ͲֶGc|ՀRkny0=pf2Rm>3!]0 ;D7/*W]0Q/}:>C3`W=]yK8't0ףd en5&GqYPw5J8Y D&[!vO-hqE97& U<14U{Eۤ,ǬZ}/̳L$!W4"N!1liǃ>f+oPOEB:wO$U:u;BfKwЏT;Οo+*$Cgn1<;"cur00A>۞-#iA0ZnwׂMMË;t(皻FrTg,&z.χK&/\~~c8DV,CQs&'DzҨxJF>xnjHF[N8Qv7>՞C W.-굺6GDp{D.ŗEF0 Z=88)g`,<$RrAiWw.o$Wb|Ŵ*pUZcFX5 mtn@ .NGN%x"Dm+DVkӝ% ԍE7C0oɄ/[zM{? =#9z9 ^-l F01\<l#C )ULiRw4TUb)Jbpu _|i?ATS~/[){yAc85kmX#hޛM$ՖAr%#N?rENoyy_eհ*ڑ0m ЉMyqqʻ>mf-mBnMf{Q`n<5 */GP*|ݝk)u *ܲ1u~j+Xs0;vZT_dLWOz4w_bJ>o8^5_IRP2rF26V Ua}mK%wU / ?q]>@ƤcX`|\[M*ķfj@!x9EڷNs̤&Xg`Ļt8|b&^JTG龵9D3s^:t&Ȑ:GbBZڈf 7ԕѿh-z#DV `ZìO/#ikO,)_Wǿ}zkl<h6Bm cM"v7i?W{Nmn8Hk9<'H&C-b8e{AƮŽ--L[UvWGXm02SfZ%ϛVSD>kJUj &j6=Gds3 %?p H]rAq|UB^򳇠{ =>dNM\%4|gepl⧼ryX;a,!< CW(ϣO76ɀ/5 (\q UuԷŐ2!E%#'(P,i4β ocb-k>c4RBX@61GqZÜmGW~˕:n&w &^&hpL}aлaz&YL1dn |LEڋ{KIDczVQIP *gJtT0vȵ{?ߊ =~BHCH$3`LNY8L;+1G hnE*o]=|ÔՁ&HDZ*R]= wJ[ l)/zɌ:wP yaeb 4e F}m3c LfFYA~X~/"7sWAldJe_a2xoŘfRbe|KO,i[" Ez^qy07R=.jmpɻvn%zn?#g3`5[XKH3b5%7#Ln[bQdCrM4o"&=+'N&K7s %Cp54ȹw]  [OgEɝG5K~UsJMBJ^=#:܋ߺ?(͢vr ;lMA#7V@/8tTiP #}{#ۊ<``|0)]T^^$zI4tsi!0hL9Y"$iFdX4";&NVQ civ6nB_[OST[ayXVL[p6 h8q N9хؓPSVTRN ҴYã4-s7Z1ɝ@Mn% 4&ҵ'9wMXTAc3󺶭21?kw់Ɂb9P9`X=do_vvzf?)ޚ{i>:[4SG(랯gmpvڥ$W5YgPYd^rVcq\bOqf3q2wnRJ,0My j[ZA@Eٯ%?d"^wRj>H>j,x "V5{~i-Kj{VC&q- ru`/K{!JFAef 'M nݨ~D4ТΑ1"!mYE m >4Չi`3DڰRyi#RwF l1TB#Ԯ9$#y.#gAB KrGT-Cf%9Y[i*;ЕsGMֽ8 !lbN<<:5 H}1t>yŏqg6Dv;)\ΧQ3VXD7Pûzn53ZP=Py4A0,ExV3C!gĀv)}!-L®"C(케~:UP40cf#FF s/逃]QZquO9Z99|IY.mt39J/81;HəI2{_4&pn8B=9GlЭG+H2LC֗J#Byn_:TX$OfQMîdXUOJs]-Re4cNx@CEJY2dc8O1r6JQA( 13m>Z `vrb+\ܥu hby `pks?^CbQQrolݗaU*rQi~HЦnF<^\G,N;s5ߖFj{6-և(,[ڻs%&-K DcQȷV]?uͪYWu%%\(C CdE^BkP({Q81 U''J04n)ҘSý #k=Rr,["('"w!Wc04+bSW`eH'WnE iExCjQ'dL+bYEX%&xo*vNS^`Dϗ =] ~=/.34չ'r_(2I)[oujN}^;~ٟ s"\š !Zބ`( W˧ph$QY-n1HsG ӭ 4ºγZaquY,dʁ%txJ5|>,ESZU Sސ#&7vuE҃\~q:M1UwmY>Ġ< <8{f,j~49sD[@4Y؉qCpovMH\Ngԥ\UtiaDUDו  > ])^;$Ng@͇OjTVc$s뤓o'zgMnnjҽPoe4{A{Fڑl ,>&<#iۨS)iT+elrbũP—gӴD0w6øx;Xu\,y! vᭀ)\"*i8cŔL_8@mgmv`ڴh"z)\AY8 7k󮼕YA(fyɭTx|࿂LJwҸ^G`I9{gۜz uT4Dåqj`i$lr6ŴW ͭxo %rHܚEFsnfKLMnr/K/*9f6q)> WJ#h7{ ik_I۽vb%f.P ̭đi?\V&/ x} =@>zpQLK1/`'+ʴ NeC/C`{p SZ=J]-۪bw>2]Q׏*&̕' mMj| -/X|$m[O%R;|IV_eZJSê|Pt} dr?@pS(nD7~{U#z+EhVnMAqa#uB(Qa0s׆_3~jNM*1au QKp]N恱_^]N p _Nt@FE@ I88鹭qpe*jnuW@pg/9v-NX}Cl>ґCaCam 1? oP.<51::TIR1YN; ͍b(H,fnΪp@ 0 &La 6ZF̔j]\`C^ Xj,G-Kqre8d"!Y૯yQԉAUs=rG;٪ R`Z٤gd??4tE +n29RwL΋)j+gd>l/n<ԅ5_#O2J]"QQzw pҙTOD1 [K d\?] dX7FSued=R/m 丁V4!=?U@K&qۃozA|óTL0i58,?'E@1j?u|֧؞Nｒ8| Bja0{&l0.⸓ gڰp~ ҇:lgQoR(f d˩^UK_=ؗAxY&41y~v$Y_ N[IpQ/׆ܘeJuiI'PVhۿvkՠI2Kl$M%_kQo~Ұ%E[ (փ4C8N_ZپuvfvN"eL0]/) 30O׵k1ȤL-I'8xc ٽ ̾G6_KVL㮠BRnC\=k s$R:tHoglz}ZH:o?[> t ]*P3W+\#Y!aS+?Kdr$5V&Da"e~D!('ؠ-P@DdlZx"[D&vUGF5svrz xJlїU %@jgCu SE!~RʏFjd{٘{`չJ G# Taj$x#2| mv>ZЪا)?þO3[# llɹ~ K:uHvh*CTLXl?/2 \tH!ؽc!Ic@'p# ܀f}Zxin)pʂfMb^?n{hGookҡ\k |!$RbZ5&{+YF" k@ST9}V*Z4tl2!92rͨl_)@nA@"nk!,CWh@=w>D7\t+(Jw=а?126  QNrU @ _YV@h{ujȣFIl 0Iy}7c"H>*TΟ;DN,1/Yduj{L+ 38Phan wx1S bQ.m>fabv';l4S]l.9T\' _"!Zxb7LL"qw3Zm7{s)x ʩ&i4syCT:uQ.Ӊb?A4cļTruf3"ɐq@-wYz*FbeZ sⷔכpI]:[, 'sL,YiĨK;Su.3UHoJnqK<& ~(Ϳ;KKWJWꁯr}0_Csq;CRy^87.FF3SU9{[cF$"Q])#~vDB7Ӑ~C\||K+V*љ<\nrM('QKD0 ܥ/%G8NLNf9dNAUcj|̎ %II4jҸ -+`^u=c. YArsfj{K{•- uM<2cmG.J!.uu].{?yb&>RV )r)~G(W!x!8$ǵYnidƐGP6tL"d_Xe</"RR*M,nvLDJrMxXv?YܽӁ%<H`~u`aM`ټ'\n"ڱ73Neo˷{e|: LP G45I2 cUX̩^){, VfX00<$a=vt63Ve$3wd,2Uᇣ0-t amj3/buu ݼjM5h)HdP?Q W6=]SG=f)Վz_͒ڱsVq YrUmSpGj%J9irvG, Y1\,H'P3`ݶrrj1NpOL 4)Jc6Rໞ~8TmhHii5k!YzhJJ/" i,y|~]gyHl#ߦn7*_y\J/B1,s=yRۏ}o1 YrMBf'\jV7@$A xh<2 xAW{q3t,Q|N⾬m6Icw/TSRP>ߪuC+[eߞ*d!EK<ɐ4q]Nl  l~R=6R.)a}p'V ۤy>FY$czlҐR毳`}Þd&+7g'd2 \sS SPx9,KX Q#`fCfM"4,sVwAtx!M !⛷lrDdG8Q2趬B7Mi~sIqUZ+mD#K3K ^GΟOli?*H|ˍ\Y@n\i oaG=7G dqzɺ3-{1Lt|h=95(fJP b>@-k\X#yU5i'()?K=-J4Q`;A5"A8ɸhSpe`ҽR,PE`5u t?؜.iQ[.&!bF݀aW^.F"izc_dDTk>x1nGY#It Q JXV^XoS԰gYU;G ViCX>4a{w[.'R.8{16 aANx^QrĤm[ >M2)fD;´L>web!ψ1yFT. w\\/wUyzhMc&upN-YCV)Fr(iMBvr4iCN$]rOŴ%7R^ /-T˷7 Z+1Rlŕ\Bj@| ]+#PI׾k6EF0%DL=UeUbԷ*'^T[b Q`Q9_?dov9'o<-^ "7{ہ1Xe~d []3e:M e=mVS˭B[n4KN%{XyDI2${5ft3?kdnYnUEDyޑODٖCd E>ݏ$㦽.Lhf])ENx ʓI=;=Vgd E%Ľ 7s+p2,Bv6KҸwAz֞0HՌM~JHc3냑MĎ9hNW' =̡aXάL~(f`0Uq  VZ^P'zAՑCpJFvT.{W|d䆋A 1. E(U [XF_Hc-Il-t qZr= ŅߏR~:v5Ьw hϏ IiT) fĻ(cdƁRVDBf/}շ.r 8Ѹ6|@Iv/69)!)A$d7ܭ7)ȹK ~|O>N]Y 20?>|O4KVẊγ9f0ɡK(^ub 1ς(ny!DzҔeQc5x`E6Z!0Cďiet =Û||&f-Qg{Q$%)c y?7W*+?kś5jkgq p(eG;D-$Bj8zA:Ŝ \^ĆA,ї[AK%7lTLkH1zJd-!ƕOݮcŅϝ#S3BL 3Z1-'&sMCddDza9׹eJT8ujƒv[(naoևgX[}ή2ن2yiRơ^FA}W8튐" r UհHJ >}0J KSݵvi0Jt q׭LublUr\`p=K$WWN=l>p~1`@Sݍ]K9(kfh=51mjn7 SĸZe䃉svƿ ab~z3/ieY4uSVyH̚$"&ÉdI$,ו;+eIww3Xt+&qr?TU37le [ה^/1POLg}wl{ۻ WԨL9j02˾'fz2~Tdr5}{C9غD/٨ k/-&dki#݅.fO*+;L y#@&={վȤ=:wZa4-pVi_(Rs#s4!Dwxi8}JnՆ3+|CVDo+e甯jDf$\^? S_\^x0J?vR=B؉0<]aHl!  Fj99E^ŵ| hG`ˁU}`ZDq]Ãy/#Lbį<Ͽ't6YΜ?<CG9̵ۍm2j|:=Iye'] ̡?N=R!ʘ'% 4%ړfyrI=\ev X`NdIj߲|]p| ĎxI9BZ~BZKrh82t s%Z 8ii+KbrU..J9m2uǚK/_Q{?5g'b5b/V/e"q [<H^"gM6 F r~'EdŜkW3dı@[dL0"IIG7`vۂBl,'ۘrZݭLR&\q 7T O&͍Ї-F:YEpA:)fK/:V0Rw db1ZYYRzBu{r2eU$ I= J : 4zYg/c!m3:!{d7Ǯ`\tj^lu u8uĨÖL`t}rvGi~43Q˨횅n!_fZhuڦҪ"IQMm#)+q>P6%W #48.W3T1!tjK!)Z`DE!?I{ KuxeqR|R‚?)ew$G-ND!u_'ꥶQ [I<MJLB'4S>GF͢mD,j8?v.(t:vP`oDҳSOO^3Q~iS- Rm]|hR"#![DLB*wZPLdG Y-e{\*-Vs(/R FeΒGH;^B`TbNw>Yms,n}ieIjQ ._{$ Yև/x%\ӷԣ3CaP%:a2 ` `xgIMpEG:"${san '556/-(Z~sQ6zq؏}B[;o] TLA!kb2t ?3:R$SdaDĀJO#.¨}y9] I K8g៵R4Iu 䶓]qzı)mӛ,v'Yw!8[};flLˍ'ItpOE ڬW]( =(vo`5oV)E@Og) b@_[,qIOaw. iJԙߒF+L h8 RҪhQhQE=5Eq_^˞ YCP?>E@ܫ# ) ->WcX'e E5ZW~̬A خn,Zcp-s%JM'B &Ͷbu_ 7[z^8y< zg YI`/*R61i2#GNG{r !/Bƽ9:L^%SM. R`qL̷`ZP0tAaey8M5]0!IalC7m24yZ_/Rm.3-#(u_o޲bQ8 QB3S6kŔ04B>b]f&{H-7Y顷QeYX5o#Wuav@>E+rs4}޽CYuRZ|_iuEy=4sܨop XňTدWk_,Yv(Lo9Et)왣t?KY|pQy0!\_:DGu}QS.3x-aT*~na*yۍDkeqs>d 9wz<4$WV ޴:"IW4Ydu7EWގ!]"ۻ.L9Ej<2lp۾@}7otM, ۤ(g D+3@quL4a39fW/A;.ҫ]ַ؏ǖZ\GQI8Ql`T&R2l _|(*'K}@"^LV=ᰥKmGƾ2j}FH?gjK)I^9j#V!u*a{CsgM]}=_=cdww(t|I[MIB2[feo50r9SfJܨG48#g=:.쓔j#o@.B o:}_a}XmK\h:nrHi*1BQɤMo;AdrرF 5H-ZM8BAai45N}–Hd ]sɨ7ȭb/[vɃ:K:6v s «=ORVRߓF)SuQȷv^nbRNƍ(if11Q!~glUhvQQ3[46E>k>.SU2M k| 5^/G)U*@k!MG/2QBV|`w \2hyu&sm3Z0 'A ^}&=)`Œ$5t( ^%sĠŲ$NMzV_<_B]mS|TPz:8x3$vQ2"GpkCs ́1Br2Lk:j:ɒ]mW 92C5҉URi( wXqk&xK8b坵BлYWyF^ͣM;QmMT97v^m.g 5Vŗ9}tYҬؽSǠƷg\gmʅ4 ՘ İIg~+yeADZ,px^Ejs S7m:DN YGnA7po?ԇ(p2=,u)3ˆ 01rsGM3PIuODC RDC:CA@!(=L 2]QK J,W3Dܼv86l35cDᢖuoQ702wãI*8 (ihϜ]K0 19 ]DE~p)3m1ɫӥkHL1j~wpS(.}.nvx?:x*亽^fgqp=D/-Vcc'R-YKYIAr/(˥}GOp$] :_LVX))Xpx!]dAti$|^Mg1fHpzijr}H( n7j `4pLY~)&87jʠ3 Q\H|']6tG̴ֳic#vE?sO&sEiKK >;/~Ok/M;nlK;`rG)^VX][ۀ^'m}]ɚAzwnH4K{h1s= %qydgJnwT?"-r1X3+/>b(w % Y]BלMJJw eIvn0+w9TS"YuԐ: D 68J ' =LJ=3lC5[HV,x8a>Sĕhޛ7'ԨM8dҀĂ'p0E-cbao/嬒ЍkMCD]{@a<6[Y!{csbϽaK=$#X̜kM2x} 6 ^Rd5-E-xyI bǧ{u9}W⧅ 2uQrk>/Fd}>"jٻuY _k@(Śrb${tUqM2|D㭓CDg=OEl`c?]ښPPH[Z(70?3EDAÁ lr.BpCsOF˺!w?S pdXx% h=U:8]SfqU_u5}mSiHn5uEvl0NqleK, bSgތXc 7K1֗MA;aە%O=M[w;Ji-t;OQجɚ>ej/ȇx!)~d@3Awkw2#3.ۼwgG6Sbjz*KǮ["'L$]Dҙ>7Ѳ~:-oT'-ܺ~uPcO~&0-XyxRB3-\iNQV$ydGtn.gܢvB0SycjyGF}<@I-6'auBR5e4ՉOٰ8_Fs-aX뵾T凱qU%yt5x&Hmf}XR~^GwM|Һ׹8[紱[6 @_TwEKqTDSoC^,E1 kZޅ{Sdg=0b׼԰-.'Q{zaMe Տz9LXƸg(]X}2vH%C7=vg*;zYtipᦐP{)adz;sb$Ăp _hkjf4\#ӭ `$NCW-~9@哔FyI+i'*ѺUuwBy> UvC06!ӿ`!*jؠ9] ZbPpy+{ a'"@_Uo)3OrIbK,>rUkp"P;&E"rzȀ[!L7~LxQY cy E^m6|%EӦMCE}dV {EHZ1P3,.F y~djKQ_ۜ[y HwLx;q}oϼdkE:gHғr?ԅs?.ו3/.YR3Deom|>`,dL8C(P*"D|.=o!:*Hs0/Io`}"?>Cz {G s4h?Tj:H-p&/g! uWWdF)yz37P7"gQ^x(`<mc9Ŋs0N;<,r͌xlRBfwJ}M;r齒=[Xq{<ݓmlUtuFd&jUB$7?5s#O o>[kqRm%˶r mTTR( Z,ǬC'T33]=Y\]mg֛ sN]h}GHVTJGm">v -iJ AZmP ݾs>$v+(CniZpM`c(~$Cī} Mk0TF R'ޓ_ӏ(u 6uJx~&\ nKWqO%y>_x̻yWg΍Ykۢ3쯷I {S!RKm:XB1-w qʳ4/])-ybk.H.)U02 5n?0SH^B9a3Tȉ?\ˎ/aX% aҪ$+pak\c7 woC7wc̘3C8K3mօ8jio/(c2PiwnsMj'纳ѰFF1,"g<6Q~ρugэpw:t7# VG|KW Ch&Gh @9j+ *f. >:!zs!Fyс /C0*'% ETDQ #TmW=kph8#o`T= $K7傚-$LOȍQ8cU@k4R+ytVzH5l%L[91,bs$; z~k$Q8@&'C)ȓNP *)5$cwUS- @`ܯ 0F(N+tFTS=RjydYjfҌS /޹ l΃Vd1|,^esDmQNR=ŷr~gM*vUrw1bBH 4w0|#g[+Pn)/Ņ _Lk< y~KF3똩P E'mkۜ?"yS2v(־WA]) ^ x$оaZhT;IYh`%으(A!R(p:]+Ʋs(--O9O}S?Li'7ݜ`Вa"n--b#1r2:R!ݐ΍&ZI'2WN 2iLa7i9N x%:_JтpnR5$]Î!/43X0n9}̎Ϟfp_[ӑ}jM!#DƘ$OΊOtS:Z'EȐT b/IQ/y~ /Ͻʿ.sIERA@seΛ"{k MjԞg:(՚rٲrYrOȥ1UA&=nilTGT jz-,!gKrΓ7wWTYӓoda,6PLYH1A(?M{"eXQBl)+ێ4%6~#( J  y_}&5ˎq@׎F /EPMfΣ9˯?7 "̉31%/K'qEQH/J)^ځ!u[6o wvZ-gI\]:_-TClFCʵٱ!\wA#Y.Fĉ\\h|4 jF^dn|ڤ#Hê<afrmFG1WNd![ O$,a.3>\|2+C*2;'\ƤO6+ܨJB+p_h-}d\"n-0Bz7ʽii?W Ww3 \Ŗ{:?okZe[{KX= FTtJʸ5XpF=!g\4x 6x423GJ.C d' )E2u<N^k|W3!dU 3ve$,=%ۅd,Bchk7{<o~"i-h`պ& xAmE C\yIScT }q\,U-r<S499(+Ь6:oYo#<>XxaFXI[v|ܮ*y=HP-IXH|K=",pV (WwM !~fÑe\Ӄ$D-iπ #%[դUQ68*@8AƶD̏,i`^k5$MW{ v@b20f$wҋ(Fd ALK->B:n[ڦ BWI$eʋ0f]u}BV_99%hTR\QtLNNX] yԶq^2`R5 N,5bA+ ₸i)xä@ K$1}0 oc꺓}xq qR? ]`L!]5D\vx*3aEߓY|afV#i3EIȰI fPy8?: ˗ORs$<g-ΎQ:: 7b h(kxբl,k)Ea,dW&l`ՠ/laVv0N U.s{{_ 0},j7JI0.R1HZ״[x<H9u)HjN_tqkahL^ {x(3:r0z<]FY@IbIȟlͤ*6T AF"zpelޓH hNo>P8G]9Mܚ½vE8΅yKYCz Ͻ%:I^[5Y1JO|;4w`F V}nGr-cх.}A׿A%M\ OJ+kc4n+Dj O?znVNoWi ;ڮ2[uc ,n׀"FΓ+P!F[)`@Ӳ'UM{Q,eg,ꈞ$9b}0R\GsVғpWFTXLvK+SW1!N;KU9҄P+gCbu4E7VE%cM'Xh(ejy{:|W,W:PnvMyJrM2x!-unA;ųdXLdtj8 t]XLjE'vö3@\q[e9Ubn7 AI_bJ$ ahr8N/J [s$@M  89%] ѳN_᮶/E:O4a%(7n2c"E;{*QO6.\]u@\|%"NȁSNcAQ7c5*ÝH <]lv$}-Zܔ;+'ɷ(iU(B`USM J* Aufυ`:"WR?AF:Ƒ63"3~`f&)oa1G34371c)TMu-%qALM-Tk @pzcQuA `3$i.CjVvHu OsP2Ҧ\aAm?D2t ƎunӬ(}ԤBAkXۜ6ƾQ.6R^dH5 i #YYvͯ(j 5_Gojg ˼jl]w4.<hpɖ."icD_H-;s NČ$̽O(LJ` x?ȅpV.tua!K^7? oTՍ]f4g]+_0:cd ԖrC4&l;]W5^/P'X3}4U;!m9 lFh')]*Ld=!Y8W\p(d)ʗ $g+}0(ږB˷b=޿,yO?$H;e5RbxB l|=o.%h0d֡Sgr|/Z)IOjqv_cws9Hf*}Oo/AgPr}L9옢i'`ZYgTر?wuZssA+@M1W{AptAugLS*/܀Ce6"kZlz/.LtO*Y46 %y5{;.0>#F8m"-t7j%xw0Z2X~<~{5i^-qr}:i{CPZ\TeCex8A5)Y:n@C +4=_ܫI{sy*L7c|c˪aWowwZA;Ab*[͛W{ܽizP`׍o[@=tq^v\΍ Y7)+:1UU5Ȍ{=hNEn#KzDk3q.b; mM.Ln@=eP*Ĕ>/wZ7 rRQ9HJN}JK:A2ʝXMECM ZhHtA#x>:ֳc:u Ct#%pA9ͿŅHQ%hXfaM:PI +:}'ĥuf=XL=13X%osU^DHXX;ĶVpB&lxںA:{L%_OF]Bg5)g=vWalw`fs_Q(:)ޡ_DzJr>h+yDg˩kX'.{!;13PGT">~U$況E=ȃ` ¶2-YB2_Q %?))&bT{ X5ĄDyEt:Mɚ\bҊ5L 0,Z>xWQ,l Fi#KuIyB7̗T)Mrva|JN^}(WN(o*;ΥBE62o&i!lqN 4?]WU3ѿ" p hb'͘,O gOrSd_c 8vc#,ڿK3^vDd@E}<\iOڢb08O+z#IWg!HbO`H4:in']rs [_;axG4B2̒T7*bwνz7Rd\Lz3og[Z}yVTYq(t{  `@WМ~5Yw[84^iӪG0B1\K F$j6^}j"pu1)WȻP?NZ2g z?3AZBBH[q ̳SS NU-~V*&_Tåoy.u  ʬ/MR1i0fعF` tBd'ᯐ5]" "a0𸥨ƣ]u,eqd\fp.žHF]Zn\\:a5A Ke1߽Eݤuj|-h7lGV*mZ$kqCm⿏GhGv]  )6 [Ϡ$Ӣ,3J(ݣjnl07DZ>k>Y.?xpaZCʴOĭdvIQ-~KG-N5q' 'ӑd1J޶g8f)*bpEc~)WBe='owޝ^̹A5PG5Т@S=|>1X%` tAq҇Θ^&jqz蹟DWt=+A ]FAaG뎬͋C_YV΅~WS#T@YO)Qˠr}1A: -spr V-T M?[Mꄅ!<8q&3Ƀm1k֍7_[+9N`ʟ'͙{*銔Gq$6dN p-Akifw  qcDQ8}fZM m,2orQ~ݾoT f -lߙRxDxƗgDžKZc"R=(7뛺*i>Ћwݡ`{JR(Q[-,ZqBCTl՚߂Ict.k(,*p"waNJej$ yhʥ *X<ԇ?ET6.uxA54Ǻ"Z˖$xߙEG#?FF"sWYiG=3ToOњF|܎c'{ۆ8ac&4 W>z㫻JKEY'#(ZO>1l0e{-)\j3$CiDl J8i5&:2斎b&}zN "ߐeN5wV0fΡ-K?j 'Hb[zT^9/8a<=ĝjϡO@vfk.u25L#mH+s!x*YW3;Tl؇2/ j&!j*Qߘ#B̄cq߱7U_2#-Lw! =qzẻgUSPsfa-E!eb=H2qÑq?D)DI2R2!]g)A*!Fe؇U/ wE҅:I :}[/ҷR&fB yP]VN{;]X!w[B&4ݤ1ü~I+7UHhԹm{><Zޠ<[l}Frޒ8ya}t/4! kklo>Ӱ9hV(ŘbR;N+pʄJХq^17IEm3Hv! +?'C;P?Qi#0x)am`#9GQ ? Cr rn\{7;LjO-@%<笉&:Qε8HmDc_T3kaWƖ@ dٷ>~F(mm2ibĊ\l8J)gmPGy6ӡRu3DB&R$nV0Y ~LE)G|Irc75W(UϰY M= 1r֏[\oT(==ԸqsEtFq-4M9 ]a'4_W*J*$ͣ`i i yoK0hQ{N=,RG2$)Quўg髛fQd]A}|5M3Bfq)p6;ǥQ!B&Iz|Qb$t pY0AjЈ!BjB(/rfg ُ,׷Xb뉰XqpB7<+-CJM-W P1.I[PşdZg'05NU A9YE>&(V-f >9 u3-TeȠԀV?:ڬʵ^~:&>cd1C̾u@3$zՂh  #Te[룜[$U2vR:iҿ,fٞk'[4rb '2wdOO 03 JLpL[O<CB\ŃJXӊO-thOJ]@^)بq³6oi$͖ﵣRSж֊ #$A/‰?LO[֌ΚM zX  Yj:BL08Ȯ]B2 k[  i 8ݓ(VgN@(Gyᛄ _ȩ^>7 A^f0[l|m8iFhj$GL9N~zq%*v6Iձŗ $;_(VB Z^=2peK~Η#K R^F&"}sk|u#xed!Q`RZO}|ZEV_i(§dlJ0`س@awl 'l_}Ke[4?2xR) WO 9l,Oe!&bKO B`B/@>Hm>fP^z:@p=ΦeAKGWr݅7+Y3<%92"Cϕ? +1gXŘ*=_c@i`yPk ŗya󪻗H !~f;YE )gDx)z>uݷtjݨ Cy:< _`e"~V΀a%%ox-~,/?lA GK+Jdi68.dmo:jДpQ_Σ^=ibA:Qu6>H ix:"d>$|lyMYz^h Bݲ o8Zu53JNڄN!7}e$m I:rT| jJO_] UjTIn6r{s$CZE~R ^%6KЛsE!2uVX&D|VXg#؞H-*)_zK] \3 }hf>~l*,\|R_G![gBo/h;FG9 )}x+ݚvmQpI8O'+ΖU"ɈB{.l")Gm iLZͨI93"c ݀k.*?.?bqUKgͨjdb@bbF0yB4!1^Vskn;.>d_orE`1L7x[^Sz faWYM56Aa D_{3;z`|C|V/N2a.ʆ7];1&Ѩ+rˠew*1ܫaeoz>][7eur-inDqӭ1=1-BXsL%5T} uz7"+DeD=}( #My34lnՙ+_ aόOk;c3'z*q MvCŋ<@(acCe?Sy+gw-1R1}HD?d`gv>߳F\5lxVdSd,mDU˧LV3;(W $fyWX}Yu>N.e݄*DG\G*es:Kkt]tS Lh2V 6BqznVͲIYfoo{OdGj4j 4bJ*_f񁕾,CFJ/md\[m&]0In:ۮgfn/=iїi'^9}B:0 N֭joAwLb$-X1!OfC5[P`b_UH 6IWQX5^(yRf_A91W$BQG쭯U$,mX[l#ciKm`\($m]$; ($hQ98#BOW#4gP'ZN˗}?Kψd' Z>v!ko+Nќ!WU"m*"]덨nx-IۑtQ:[UUgxJiXRFّ $tXa}]{4AJfMA.Ɨ̯@$-<Fq(2}FHlc6aZ˵1]r[HPjn4vt mKF V(@RP%姃 Z.\`}(FEf~cA%Ecu]n@]A"0`m_'e̥2ف~歚yY߸ BP& pн;ouʄoz*ZcIح"B:s_µoA`jhj#$տ3w?CYpxJ1bW ن? bX1c-B܋.lCj zߞ [œXt_b&ZQ%|Z3R!%w׎CnϠnAW<EM?i%YA,ЉNWt` ]NQ4 ֞2`jE{!E`-<&#毎(hq`)< |~!^6*(W\g)eMR Yޔ= '{'ȸ1wgmU*{`#MvC -8̉R} "6W$ؘ(( R [;xEz<8qn9Y컒t9AϩYp}E})]jq4jSM?EL +/#KޥJQR"(ӄ?~oH,/-P-dk^_@ L*#0hlʠ aLLXZcG02!A\ײ'E4pxܑ̝8a;F]*@UkIaaq1՟7M>LDrg-O$#,dgd#'XNg?.s|ȁ>q "Xx.ufdIجcX&l&;fQ-T8 U2O'u0ZՋ'p$GRs~6h䏓wтߋ`;#5/(UcdN'.h}Im(H; Z,w(a]LEpǃE*a@֬mkUK=rpBn@`!N`V\Is)QW6}@Yo_GV!U\rُUw;95z'RLyi:o[@&n8e[M*gkcgͫJtʛSt1&F-T_QݮVkd_'? 9oGx6eEnȠ$!͞T(ݹ.(&a[+c"~.f cΉtߋOO366R{;-!&>5fU ,$Gg}b"ȆcF7ڽb<]O<-`oLd0?}3R!(ƞQeFH9 _ 㚃b#&A?^[X72u|%65s)^˩Ox۱1 P V6[uiLu(9m0'8{ wOJC#KL+}aN,oǘu݀'k.<&$e Hf?38̾r%y]2PIN@ݩѼz@t3c/-'Gọa'M5yBc_0WZ=yjj/wYQ0a"NtF]_2N!귁4b 87-11HwΚ{7fimnӁ&a'z ɶ]Atc * 8u7 H9Ήёs:'l/Rg1~4;߆&GB`T݀BA<X#aRUD 1֝r_9Fu(+U;][X{eT*U1t`mkwFiIMb/H}rt0mu|ĮqzCEik0:g+'Ԫ?3WA8H zeUWXa0k4Ӵ'^NE5#WQ Wpݕ"rZ8hŌh"yhpܪ)`4je{V(y[ u!cI;>_v%Nzp5bdy{/5f0R c ROj:_kx  : 4)ه[ Gk(HO6fi¸~9X.\OVwwHʔƽ.kdCFxk Q;U;̡aKyjdFXV'h0`(`Vi &z"4_SE$__ =/fMֵ}N+BbPԚ(uj_@m} }Skcwt7@W^I4> cxHs{W]Fa]KXbzS&)g91K,f \\YE{.Ji"_RI~0+q}eж1/NA_n+uE&O!@m څa ',Bj}9Iz*Nu %v痸03S+29E.b4]XZ77d Gb-6p$hi .dEQHI)uK|3 dE @/dafh&oݏp?_94PRg ڜ/-Gӝ_HG ]*Y(_ 'sݓNGTr"4zWtnSDhƫp?1g<|i Lbngp{矮?w-dk6y^ԉtP!m@S^UY|v*-+BW۲MTԝR(%M`1# `?\ F%t$C6Zr?V0JG*YDE9]0C;MX։= ?UCyC,1tXyu3@tmrgᴱUOYbV^fqAO~麈"LLRy5_J&z.K5GB:ojWА?h@}eƯvOU{dUńFIxZ51EдO&7M Xt?+$os` N,߻ V ִV`LQOX[ Fʞ7j$ܬį}՜jGjiOбt;” liO%,R3Rv}bAP@zj-bwZSV3lseX\R< ߤj7_j*XhM|e9aM2i$̾bG{5`=vgo6 "驐7,269նGier !ryqK<.+,WUu|6&pZ";f@=T7HLnDZ!V}QS k3NGJȍHPk(  %*WT5 Gڷ1 R?ԗ fƒn^f13 o FcTU~ZPJ83fA "ITP*tP +Iy;[Ru}x'^Ll\] "J<6th:s*P`Z c8BRgJ"QM xs֘/ z?7({X4j mKv'A-~ ;6Sl77a9(m05PЋW9:1)wGa pus> 'Ѭ0,dBޚiwLsrrYhL,V+,IuY8k俶C(\S}AjI-CF0)"Pc&mG5#yvaTIXɓp{8U-lcۓud$'N}edB\0[zrs]cdD ܜ *'L0!KZNM0*R3BwsSũg7#a ֑S4#UMq#N0OGG> J liY-45y'!K5Irʒܳ/6F~8u;.‹5 {@v?azcO֤xy0 i=.f!؟{\Kp҈RbtsCZX5=b PgT^__n4I(ƽMW\`; uYu:K|݀3FrhLvA*jOǪLGZ\鶂P?MRӿ?=LS"hdK æ4):DsEPc>8LawQOth9 %ӏc&l@l8mH{zTm/?)8FCDDLyn32ʡn`Q:ĺŎ<ʑJMan xWZF4L[u*qܴyzO5%QQ[BZ.}pnmECsKd;ʚEwqv0a2$(4?Hm2; |%G5;_F\ r7&UKu-s8@Ћ' (Tg,iOVՂ*.zap?FS@!s]$ŲAG,u3 NVkHQ|,V/8hzGPIL'Ј{Vl^ ʆGшp4lֻ=P&X|aZ~Ǩjʎy#}bybDz􎖮G̨9ҩ 3V̿λ2} Y[Shzbo{Ff-#:NԑF6H*L!G5(#;T!s A pAoYWAK_3pQvgMiqcf b |S}HֽΊ]p_^G"S~tD;]fd[n0XFQ*[pж7s{ώ+FςW@X2`|N xg*5 >H%D'c>1vć /VR~lbDsj# ]臂vՍ"|?2wQi Q+M.0݋,\~.N$Y-HG>$T5I5 |߉ԯ-8xn"er]vEJyz%ҐSzX,\ܗ!)EzBG8>Q0{'j ވrqzVr\LJ6XsXKs~yJVTx)'t/,VSu^Un [ 2zutˑ0)~j C6YRg<?U'쀙:puT}7LX.Y+k>IRlݩ8ai#8_0,cU@1m ]8Us͚$\D `HQD'0NҤd jld̈N87eN&wP]JiPYkl|o0&n]~d[?M?_jJKn\㮥w{wW3ruOk^J׌*.'kx$2#a 9 sj[6Vbwh3n~sإ02ޓݐ;䳜<شG~".C ѷ+v%+3AlRr25 `dLD~:V Sng2&\ߗƫ)kO=?kvyoݾOuAb*QN *I6xћoͯ%ڻsƷs4r["j G舧^O'+Ot_owxNR+CKc*)ulǷ_j|ÂLLīsL4qO'~ik7 \D(f F?pXXGݽB)$jg',S:t1*U6,v],ˮp޶NJMXu]jOr{i7 QzI`P0ZpF h;<&ꐈ#JEq*]&{N#5%XRt#/L ;jH't-]qBRRg0]b'l+GQZ*lnsIRzbvyIHmIЙ%YE $|? oY˦&8ٓnFa0Rr41HāT|?`[!r>";,aoMr{S\3m%Dp y$؉h{ 8̔rcw̧6DmoI^EnYXW;-{ituO3dmOúQs9/ ٿQ7I_͹Raվátk;:qz:{ H "RSlH?..H3UoEōP!@y|$Hj]'=^47Tnr]޶C}B3n #@fS6r6EcE+9`V<% .f*@#y 3^~v3U`dgTsy\toy)Xa4Fr~D8;(ixyq J#4 ~hwܛU1KϰI,: )XFJ}up`dHQ U)/ OFe]%M75B+P Wc3c(.0&5{y8gl`Mbe%f2~?]*<22^K[҄e 㘿ɡ^XȍG~lnRz%} tR"WS$0r Z\J/Z.pP2b&1 ؎Ry-Sf"!U w*dvHR4@7)-ϘS9yjP)fEPQ}̠!࿶E=60r>o8 qiɗ^/Dvx'Μ&@wQVM.9E>Lsް.p4qbW¿qH2uH::tVmpyPGONFbp 86]}oW7dtBi*|Ên& ؙ9c{/(.u"B?#g?WzquvSbQ0D↵AvPt@{|G ^SDt)V3бԛiO| pS2AyJS-(/ʻH} L?5 5\K4[y-vޠlwף4ɹ|s*I\ӥۂ)wNS7đ5Q|?O63ٽ0'4]Gb B0Da?Cfz3nlKuYbohP^.2rb6>u4]% ';V q}YFW{H3<ğVFK$aA/E(Phb^+] #B;?C@099$ H/~ywulRM;c=x'>ҊiTGAxxecTƒ4?-, 5RF~̓$8>B 6{B *lk~PܸPZPI2S6{9:UX&юn[x^X J!UWJm8}̉_yE6 ml%%HX|1^*V*fT?af]SM'{=`  1_OWS^Kq: MX }]lLJ $L(m`ϣ/,6qhB3G$ 'tÃ3q17|Ȭr}I!ҫg쟇8/\8 Uъ ?_lU^ OA9mZ(Dz2ACm/Z*AYxST|" m%W~x‘R+W3K4_Iu7]lXڜoz\bp}g\&-퇰P& yi5yӰj{4TcI+LsQcXTwc 0;'i(&z1qM`,8,&@[HV%g|\n*@?I _js<*WjjG{xy O+m[<$',clų9`8ād8 3\a]KaHB'bzhExw}NsݦGca? DxVW2RFSHT\x +z&}Ⲗ6aj=87 Kw|aT76u1Q.,_[L>cEIN7g9Qa3#!PS A<7亿\x panXF]dh4GT yD.H2iՄzy4>f8=cGDMT% '.Ko3巍R@{˪K$gIFKαȯ!nP__8[`j~irנm'+ucw&cKabգXhbf$KGe :I0,щt%5[ۍtBYu3p 8+!Ͼ̫C& `D"Hfײ$*O^$|/GΫk8χg1%Jn՛\R\JaR$2m~00D"Y-j af9+. ܇)6m&ͧCiFv7;){Wc?vص9cGm\nQ"Sm )OC3.>`IjOX#«\vx-LJ^Jb}Ny'#:e5U VEXVm.˝)/&8KSE_eC,geo8LnMFڅdP`'e-/pMu|(V;myRe7g201':,e',ga\b%Lu`;gtab/lvgb|LP[9t.{L8 Ei-d^ʛW_3z*>QJܞ<{ޠZLKK oh 7b+"َqkxجU[][F.18/ʋyծHlRP\]ш3,fZr G3Wvq:T}6׈)C3NyOO5<'޷,XڢVi!d?SҒyvUas2D33!K#H~6h/@\HsO:lG} nVFxؾ](ӡA7Q̺V0U_uD~?1Fi}yˆ#3U9qaʫs= uVAGSً;mfً^puW ;l7{8sgPhJdXѶ]U"J2%qt!ek|5(7&ƒs`Լ&"l#`78b8]P3 @ڵTloI%,)wD}g"#ɐ ^heoğD iٚWú Q"|f%dh>+dL#Vy< tH{(A"M?vλ>sӪ~,1KPDIwmwFIpn R%Yn z&P\݌@+yG' [@. =ӫd"/bb!xnkщ"KI T 1݇=:O qnTՋ>^7N8E#7T_[FQ .|~37|+%M`7ElG|< `^aЬifm>AG܃۫k lЊZXwKf|ơ:mDo{#ݞ^Wo\SFg[jf:ZAz?nV8b-D[ZmG@G|xl0, 1X>1<OFT۬]l" Jk$C{qV-w}5zOlBؐ/ʷ0^Ona%H{h2b*Q; <;ToνQWdVFFExB6d}NjNYEN"suՂk Ny5~X:ф:5%x—QNt-}P njG(adt;&zjr+>r7x T |ͣ4 'ٿ%PZtJE$)53LaD1ʦ\S7p&//,ù6)ԫ>c^D?d 0홂`H {|G&uIB}]J7c,#m0_ +GmhTDH e>H/C1+f,m5eֽlL{fbV%P]dc>VCƞ6MEW=|4ydfiIp qr%/]ԣNdDa1]K-J67>(7)6  ЋKdsvME7%N}X)w 9,֫tz~e}V\V8BM%B\bQ_\^o,k2i2H|3cXE pICpb2*a ^,*jRF5/^yDv1yTΈ F5P!gX܌Ꮜ=^ⅹW6XFna˽vR.W ߻_]!2TD6hݏq#rq-&'X?1;R 7cVx䩍r2ِ`\a0E=򬹙nլ[9 C4C^M5vyt0 -@)9`Nϫ"y!r'C5}4#Ys xnjo֙ى<\w *+&(s60.2*ZL@cA@ywWW%^olv ҟgcm!-o|@K%ҨimU$:sKSGLpjM2ƧQcdVmp'~:KZ#{V!*T`lܕ|j S~(4oOHC]XVZsr0˴N_eؖ{Ȯ8,3J_G:/=9FVj~AwxY@)f^Bg®[4?Wz#iX/P"IGuhl VE6w@qivAOeiQD?l+i•dhMs3&jE 6vGLqAMOOg2਷Tr?RLf߰5Űy@eI{\;[V|#E8έЋexe6&q=ku\Dlf)`)Z:t[fMNȯ5ᅯt& dIϓL_@|n2)pjb )6=X=;b|+--d+{O?=]z<8eO BU@#]  I*Iɠg1E:4bKg]5GR,Hҏc(vj}0ftvZʈ7\/H`.-tχcsphLM t OR'd++k*һ K u.K>_{zQp}6 l!x)NپWIݯl/$ӆ5+C!9&\U2v:RL.)J9 Fk!Je` $tW._xAyG5%!vZG}*M8y Ъ]=ґ)!ҷY'@ ~..P㏭DO%wObvoq- >uF2@- STm8hGr֓2jGbx;܆)k#%oFXxHdHɑ[)k6-b‹\"тw3U'M:\A2 B']e{ QC JTYӓ*N }@Qs-|w +$uDuZ~) `F[h ֜*ɱj3Ь 4wEG*N0/~mRdFuo ΐ[׶{ΒGc!dl>CM>kC[xPCeNX2֚/yqOL`͎J ;.u64&%gip;Ձ/0/fimGJf(!X,UIVs3x]/)aæRצq¢Cr|V)B$3>axZ,P9s?3XE~f ۃ _JUêIM ΢(Q-LJf$ \SJd&=gu3BF5YaQUX?)nz2|~W#F{8xC}>3vQ"ZFwX#S[M96h+5i-hQYv7/0NU4/GЅPwգ-oX,d.Fpf{(#Pvxb'AgwpvQ $Џ__ M)1 J"[K08ZS_I 0g = 羝vffh :4ҟ.sr^ia=^S[1:,eo|v|{UeCDEbQ?Dui DQtTj~zڛ+iGʈ hHD&EN% 5 7y5nؾȽ/(~Yxl@~.$ag #B4C:.P s7}IY{+ 5d *C.rN{]̣ orcP6f~ج~c#8#,R3pcA&[@(E>)5 ynL y Z̅ bn1%6*:<(ہT);at+:A$ʥWMklYl-ZFboSP:JHO[ËB أf\^a(g,JκABttda~ ߃(%}ny~4V$ATt^D>T ˨6ּq GJu.֡WCcQ>~)u5pc75 %)?jgcw8CQ|bF[2~kk`wNJ(rG2N~d޻_woCMM% ؖ{2jB}̉qkVKܥ4T=;Tʝ|ZaVE}|̳An+ʑؔI>LAUN) ?q(r'=P&hF+>*t(s&]Xҵv0Pi+ 4g TMTAYBDc GU;2jAiԃ~J5i'OJ/ݏ+N^KĠu 6!Mg8~e =k 1&&Zhݠ 6S-} sQ^4y ٘)J""FKOmF9T1&lͨ6xZBS;USSylKE7hXr oCϟ%=wT=/Ɋq% ??\QPQ Wޗ8v Vr'7㶰0;my7b/3}7oK5 JBOڙ %TS$@mAꫜBL0&y`Iѭ4SSXեl(lˌ>ֽ>a'{g\WRMw8@,6:P/KDc=֒nDHazMO @C&+4*{2} L>0J['2 lv9Es X* ET PZ;q_VrJ_eאM s[bʘ4K1}0B8۔T h M] mWk,a=D>^s{dEN@􁯠tYS02*\sQaOM%dy'D> Cch,߹|Xud^C+JTuhtؑ@]^, ƊRYM_Ozs;xXXJ(Vfnݺ$q=J_[2J}*fe"l4]#3XBڛ{<0IoNbX bM^xƉ=X;Ge2AߵiQL\ DKªth 4ƴwC=4Nt9 ߩgC)N۹T3Uvq[hL^wĵ]PEj ."kЯ䓔$CͲ`lZyW:- `sK7zٵ j(S$,dۅ1j)y|32o빏! V6k؄ΏvsLY\(FomHr&`(1gLg`.p7" +Etiu['fڱ`=z;w |{_ν3򤤨Ձ c~\;xbxϨ=>1x2Tʐ (I:EocnCMU|e}$4u.dNW䔠a>8cT䑰?;麙dUmS﬘[[ʚBi◞L >jۮ܃uWhf+V~k>2}9E̠XF0Nބ%,nSN6ޚ6 =&/G|+gQ Z}󐘠y"$mrn6XGC,`]Å2p՜n[ O(v4a'eꝧz4i%s)J*[Ae{dʓ?'\ /NnK&6Xy+'i9ġ?ݢ&mڇ W&:󥪌)I]?C wZwl?N H-5Qξ/TS=2`YpU1GxutP`Q9 ~n r^sL$&2XZ͈-a!ES7O ɫ_ ZmoOXV+*̳0k'6[b8T>JgEGbsXh~`8۟ݘEn>ؐ*fȃ8m(z'T0D9N..)JΥY)ϸCgO8JA*^1& ? gNSzcxXFrB8,!`~Aդ/q٪ Hk$BMo$kU;w_vp>huZ]oi޼@+)w kQzIS"tpJ#2~5ެ2!ۨҎvBaZ=OpoNu'E.K8,~5"X[]`fiKqu2%2Z^v6}yGMr[jᗤ6V}F]ʾhu,r#6@/gap`5 piUvw"/K0D}r҃:< (F>4\ޣ`F+ ?PaƌWʌ jd8nz9L Ǐ6wB)L))x.{a"hfR2mNPƨȜsC,_K1J( ƦМyK<r OCeS}[gzrpWJG.%ثhD#2Q]HyΚIGGS)d[Sli;Z:. _DP6\|ٙ  x !PL`gUi`cGTQ{ 2-X8%]Jnv Wdrhw@C) l'n_ZCi)Gڬ͔zsD\g 4t0ͩ;?mlL_1mT2TI 9ؕ>1JXXbREEʧU@V,%i58$$1-W,P Xq+PWցB@UcqXgMy Dz`mhvy}(KQPيR^ic] _A^ #@5Z¹B|0:g#.uݔSt?6tYrQc|z/gs7_2/+bJDǵ-WL >OTk .4m.Wq-ƪ-MǤT|SDbL B}FkkĮ3BdYcZPztKź"_yHA=3`֫m/Ht*ݍts}LOy|J$nq#;p(^Z2 `^n!gO-s!l9RY})XI$+|9?FPZL>O.aӖ= oIsgX;9perqPvg;{ ÐQ{|i{}\G_}:0y:5x[D pP%:&)5]]*ʗMiAiS~[6v8m$Bq=2>}U6l޴́NbAJl8|@Ml2eBkN4$ xbInw@A>[Ϩ8[x ڏ- 6!fX:XDPW7+<d=cp1@I_^^x|meH%$d[z}:Իl^.RLL+BZRPrnM|lDf,1[+ZUݯ; ahuȻ(H~$զN֓o!;_hS1?VhƥV̧*7 6v6\#*Q_ڃ'|}{mw0mXgGs9DJ{(N G,e h9* ux\B?qHdu.T bd Tא Ɯu0G9'T` _{m`EjR]Ah{ѵtё,]Ǩ 7}CRI%^g_ \WVgwTV(c!ӸmL}9uȊb 2E@(Dy;zѪ\X{oN2$VCBp=F|RI:F&>:]:i0|p-| GQ;8 ܟ-@<w{T6AB`SaNh8߆5YoO*t&g%  xw堠hKAezuɝYGj5׾in sɓ4&pՋ m} i]Z'&X8J_ՙ~qdއzKmq,q&*\};FY{Gdbkao'j{Ƽb )# q&Da)"_.kF~8u< -sV%gMDzmUJDXY ZF@'U㱧BxwHs֊o#,nK]E +7jHbhJjQ}f& Zaph|aIF#Vj-4'FvsVqZDY="z!Bd#?ƪ3mc7Ҏe.zW`M.),x6;ns\g7'^p"/G i%Q3/9тK$6]e:UAUP=Qhh+G{,B[ZyHQPJ;I xUXf,@#)C{zi$T2z>|Uern@ 3Y=`e_1 nN+1I7pޤ;:\/ tTl'L'/E#8&8xWa}p ͎exRd7N;$i1TKZ)oU@ӛtW|,Kh/X~њ8 cD3[x>gӀG Ě5j91 e+XR;6X 3L@I@o@1N!2)]5r;$u]Is.9sh1%,^nLZCVV\Aفv4|'̹e#/WBaBz1.@uN'1z+vLLUs qQO o_i?WNM*9!Ba4ds՞]<SP`8f Ϲz4s0tYi b_ # //ؒ-N8 {U}?0IeXE|ɮN>8ݏv"9Kks1֋]@\=- "X},Ɵ.t4/F%_5q%Ds $dLjGdͥ/'` , li*=N2Wä7ۋPR6˕Z$SgvbIu80Gv^f2U]2\9Sϯ;GE:DJHoCx=C`{yxzegHNj[(`8'YxRq(@N\Et$cTt\U!|PaO[60?%-.JTMDr=qbҗgE16 ٹVA&*O9c0vf}WS*\ӳP1E4bW2YHC*mq?@wʻjv,~OM J7›cҵŇw5=5> Y%jU~F_ q]# m^[:{ T-eMU8(r^ҴPK6\rGXj>ފyw/KNS?ܖ7ss~6 |:Oa\s+{)Q<S&15xG D{zpwI,>췘Xn20#[:y5';p26 8 `C Oo~]آm?Wm5n+i,a㉱&½q;&+/TRٸj4(5'S!c+ I.)zVX tCen4Y&|L >W^,,-&'/iV2F?Acwjr'+ 񧿥~UP x8^ܨ&PyuioZ@BXq"-zpv\<ѐ=,˰L4ƼYԘ< AɜLD,CGvqIl| * ;EiNƊ-͞an󝷲dB1 v|CRHñ-D_:4$M2m@_hA 95Nh3(z$6Čj6O^}4{Db ܻ!Y,Iv5> { G<> ,~jX^' Vra•U,DK=%jrNqHF9y2>9Mcǧ =fYKwvl(S8rʫ3ThkFf"nNyxhE_|TѢBnJNB߾5dGg]M) /_)cj*A)an}~@+<9PCF?}8̀-rL#V>cN#x3n蕐e(,?)%>{JrZC5Ķv`̟j=(MO!j.iiuRrX7%~[o5VC?@fB XR7;,QjS I7ͰӮl袑SՔtM~LŽRGTexw,])8/51 >6`l^ܯ?nsX753j6[&_l7_`]ä[B,bl;/܊/Zj),`rGgaTM7JX۫ =C'&~Y%0ddvAc(;]fҤ]HX٘F0b (α,# D/;0aLy50H4Sɋj"Y]< $&Va乊?ϧ.緵4= `GR\<Ms.Mb! wUtGUm5|,fh;2elASZs=%֔9~X9!mW:c]5ĦJSK!ݞ8ᭌ[j,*OLML"il{*MNjW!2R X("^'1>z!.K"el_PNꋬ3z:a÷<'vg/~աN.x1k*?y{$讼Z>{Jsb @;ձzJĈT*P~)%cg+_,buCu n fXn@Dp,E{q#vUUU(o[hN6F,**N<}~ 4?@s䐀βancX>ۖqifMGG}^~D\ mDwէc|R -ֳ1q*[,bH׾D*hec/#0zR79&; jع6p$$fcQ\1Roߴ7 AwDSc>&Gm*=o :}"DdcQ+Mt("֕ F6?]Fj?1/d+Fgj4rG$1Gհls]fhY4Ļf'ǴW;VJTַҼҺz>ΉtuPoT.b1_hwcd6s m,r3.|W{;* _lsسL?szbf*oj ,EڱByR1{X%˶N/`oY㵰IV` (+bt"dJ^1CSL+8ÿi{K~ PFK#qh k#y(; ]kZe+}גMkj ^3 Śrڈ.z Ke(3b)6N:4љiKJY r8I8 eO W#5&LMSQ,?@+ի@\2t,5{ bVY..2Q:q+.0J'떏x!8F$J!Nb2V\ȴgx?tz0 :uȯ(_%Ht$0 6#8BW _OAa8-=N##> ~G\Sd+2YCo(8 EYȾ xX\@GS @RʧUm|>3&孆04홼1)O>_36>U͓g?܅PNPNAj[bgm@tMpO"w˅e@yo!ۉB-w!ƕg5Uo/s? xHʇdbUQmjCO U. A^!jBCz{Z$pw &^8e\iB.4537#+.-!Ӽ;ׇ,WʼF_`B>/ zHgFߎ7\ϸ5}զVӼ>HVD _XG}aEcG5"sI8:OLj=,_ 'tr׽2j:-Ex?) K8Nt̕ \OL0401pyN3|-CUOFJykP51JX+GSoxxUzW+}H}\.-Ux-Tu?vX ĚG.WGgH֪;-ox&FnMW*o W:XS$hw tY`&N{)D*rt@˪6~kY@rMcϽ^)q5CGk16p[^|OwQd{egiD+hA{;]`>K3 OXBOueXX4vZJT~OAj0.omKQD9v/(;6HgK|%{&K:a? -9uqч]EvD7E]J>ET ۢ8!xu7#pDV x8K>NڋG.K˽ GASY=>^bqSPeSjf;CD/1fP#_< jU =mJhh}WS€~AiWe?^Msut"XiuNLA7c1|s p>_[xZܗivoCa2~9Hx̦ |H,msX]|bOjcT(]@#y-zz5]ӋA#3֛Tӣ,aP)6TG24 3hӛF!sOwdiaL|7(J4Gx:Ɯ*ӈf<6馛2qjV*".Q!8dC"ۑ]?֫kʯYqk*r:g{.%Yh`vvF-&Ŗ4EU+\ D~Yø][vIOO\_Cw ~j) G| J '‹d&?\y(5~,},Z1y2H W3YqIΉ(^:@7pz3I|%lRH#2XﮓUt cے;Q͏RtȒv:[eW뻡i0 sz +&Js΋=m2 )Q n:UWy-*OS޷]V戟>5tddgB2S~+6T*VPU0s~_>xM^Ha;0".o5IbҮObh^7/m 5iڭ0c'M_r رL Cz6 g`loy6 -'`>)nӰ~d/1 8I\h$W XOI5#[)HL?,Wh>#M(~|?ɕ }[BK E_ F)xϫW\p$HsX*SR1ceR|NM(%T!\턃W BI rvu'UILL?ʯsN [J$%Wk{[h<v2hn.:QRC=>0yC2 Bc~GM U )RO> XAf+1<=9rJq9 Ą]_)9e;P d[aC|BAOT`qCn5ɏb#}_!퀶][8ْ$0uXP<{0uUފꯡYGtA](}CjkHZV~.q: copkfhNCZiܟ7&xHHRЮXN,˅E1s׸2߱FU $./s֡R%G7p!<%&Rh#"jbcÙ)/@BdhsD1RΓ:u섟(2TҴOچa8 ,s wF᧙]^?V֠6OmVE@bw&JQhGxQKb-;5`9Ʊk U\-&4Is4q}upbVp!Ҳ/ޏ6{aHxńn/XQ~fz фgw :6@@М kͺ$u-@ԝA^]ly/_$9HZt`:TލM@vm~֔K sS]!0s6"c*88/qRqٟfxb ir5Qcշě6f#³D-|ŵtQ}kܚ^"Έay@Rđ-?r\O?5ps*uED?暊D.hYTO_9v"G}!l$Wsܺ0Q**6_^ZͽAC}$[$ͅT^õc Rp, %GZu:nj5j^ZߔjA'd7Hx~g˔ -X+ê"bmV]~n7PHxyU̗^sWpŞ w#s?dc+\=t͏Ќ06]S1bSk /X-Ļ :1`*Ds=^sP:ky©tq#Biٳ?7&nYӇ_M ^Г㪤|%/bsܷc6OqX.1s(LNIm"ϓd)x:'ufvub?"x:o&1u7kJX|DX0&7\i rc| eяAX1]KDMWLג 8,'s W[tklSFYUM܂kFjp# ϲκĬ }X~I\l~O2I ir1\Z2w(pac: _^Vdo~dXVY\$d;t;R'3JpGLDL=6}ԲJY|KhX,8_sTZ=)ߵT {[ms<.l%E*P1@`sƣ߇F 9Z0OI4%UDl%dń佗 v!=?Of"UTtbm[.,ΉO[꤇`MBآ- έmCb'2uaΈ %1ۊjx'뒤4Ru u+k[H@#fq‹Ikq5N}]kR遾R9<*35s.3<w^oeA4^:91La|8\ĥ)X4e3a )2 q71O_dO7nF prv߂/)k Bƅo1:G/ \ya%iڀyQӬ^= x{ ?f36łg,:z5Yta҇ kExUcSћY:3U g2+NHn!X>D9AA8ōȼsnG;ZuY6~u l "7z(bx"uk ̉E7H^>uOڏ4\9dm%*Z^[ـS4%>zhxY8 _74:v>50b1?JDœ"(vpGvu ̓!m/B509p$ w?ʙXHdg >sًbf]#{|RL"$$&؏q& W8j rC3>e~3zͩD$Nt?9=$>ȱRSᨓsB!g9ת1&e; ,bJ$g#Ts.!Q]եFzt;ʂor*R,rw}?Bc{`z(.zǷs-Й~S 2»Ij'vۂ~8{sas1uzx**f\SK`*Xuރwm65Lq?);rjg-Ѧ aғZjExQf];!ܸX z~uePR8KGuoX Twh9OU wwA{3$1߆&Y}tBڿ1g7K<7ӁI=/T$U3 hF1pX:a ڐ^J>n6@釪 .gr%*zV o^7r,+h`3¾,s2gU6ţu2Pv|}[ǖ#THַ/f_1[oB㐵=N4y$XȞJrJG ^OwIjp[-)h}Jo/{'+Ox4h5QE9҈]T2^l\2GfSm !CD$` ёR7)%!=&Nۍ/R<@ "P`ʬn!PE'?\o̼8y4N×CX6ԸE#CmR&cmnlhC.G+F3{tGNհ3[Qogŀ$fxep'A+]]ϥH#Dr=-2w zqwc·a]ܔѼF _ZrؔHʩ D'A\hC哥S_˝?9Q #9! 'ݴZ9ݦ:[*I66]S,-tg+p D:6B{ f%繳>0N;pevˈPBqkRURmzK4\ U;c?sm$KZ@/aFTVKY<-?zݾ}*OM' RQwoFA׵9S SL \bcwZ(}]\k3n1nh$O?ć\+5dRӣ+ᾷIhDb v)-lC.n84 -G(ZZan_OY{^xYfp@&| q" Va0_ULQ^Lzd z{5&W [_-̝THPO pQJdk,"U)i^e*4h1.ʍDmJsP⪦D9. hijt|VJJ"#2A͟9GNq0k'Ba`߃A"j"};#𮒃IW]^}5+q%z[x߰ ;ieN/䰖 }-$LJt̎?]m`Bdb:Waڲx%X5k*5ZKV:nuݜ]J**<7ۅjk'օZnX5jkwSƒ X,o]b,w|2N BޢjA8d0"E@m+~> ^ߏQfM52PC+{fƺvDv"|LmI^Mi_2ឭC $< X?BIXOj; OOП '& Oş$K)Aއ]eLCb5iT;*xv.Vʆ/hY]js`x+z@o!N4lI&y&QWpMz@e}trn*JW"P(S6~h`;$̇d7PJ <-=p%KfkdU=4]bA Y좙luS=B44T4RPYDfMױ-&7q W]Y-$jouus!ieVSGr7GPP8!q hbϹ8t^YF3d#)Q&]!'Zc -BerU8{y絣=rYfχӥf'Wr{{LDIfc*g9ay *}^N`MG) /է%mb^z[>4\R4ΛxA.gb Co}y~TlMp2\^0v>HNf>@N Kh9ƙuEfDÕ[*oUuvh%^GU@g'_\HNv<& p B;##oNP(g.*$vȱ2q٥oN}*PF[IT4uKg!mjØh9)]#v9,ďW4gy5nb 8&Y0h9FfYr.b1]U6猋Och%JH^>5>sND1puFzϿ!4uyy!#gy~ mC)ۮNJzxxg;bt'X—b1;xδig8)YY8$_:8C$Cq^\L8f\CDب&IsF{I( ڂ`jƲHQM¬ﴰ9=ͼМ S# BP>Kȥ0Y!bBnm)Ke ;tN: ey>RŮwv RەYV R6B߫cwCu pm+=BΜ3xJ/PrAC57>pˤ$GycI7+9$MIr K(M@~&s;t!䖟͔?I2Ho4} ܾ/JJTQvZ6(7T2}3K)>Quawofr/LYϨ"1ۑ3}Exki#+e+q)v-0=|:Am,光2̻Qrl(Y̿~ `F>8dǾw̼4E2֠ʱWWU0fr ?m&sٛY̽H<EW*سh8oiJL:Xf#b>P!0De=ePDmK?=ș Nukn {dK-w{Eƴhm/7y 0*cծ4Q#k@їGM2J 2SyAaYc,s i^IUDw3iaGĸ$G0 +{ N0 `_;m j &k|g<.uT̮r-, $ 'iͶYT$o"Va>J>߹؃L╧4_~cOۇ ' Vx $sG ᶳ5aբn*#=[_c <ˇ:9aKDp7ۨxZ.$h{e2ug;г?m̠ {CPMpS;Oݑ:$c@.m[pKE! [V1 WbQ1@zWiG,$6BTi )衍Dc$Re巍0^U_lPn!P2N#$ԗPQMq.yX 0Ucp 5}<喓vL8JiŁǡ#P7v2_ѹgžQiYkgVi&4Rtw kD_hr`\I; \o!20(z} X@Mp msPm~7l+=xGٖ}O͙IvbW. p& <2ƾ&f#Ox'#&xlh DƬxt)+T,ڧ]c ^C,]\q6^GZ}98c!E[yg7]QvyyZN .vf{eBZ &CvO'9֎2V4hV-sܗ.Ӿԙ _~Am7e$Bz1+Զ_zPYQ<^^޳ǡ,. ٙl<<J׏:j3)a ޕ6awc&oỵWQx&h[D΀>O6@7PW GQ(0]'L`K(G .|ȴYa zSNUV#R󾛁'-n5qƫ1_@9#:cS鬈(vLn\ʓLqd{ܡ@ˊ("vh^j+GuߍDR)uID$SH*rX*!tjF19i}tCr)ϸvJK/4Mw+f8rj޴3=B\w5a!cPM쎈Knƅwlnak=@; ln (i|E=?rNYٳ@yAxSīWw;ɀBɿD/@Q۱;-1=estL${Z_q6mP\1)<ЖEzlyZrd `H+w>^][ xE-3ϩo̖DoU.*ڗLkb?^‰OOeI/Bf ]7GG]o jJ:P[oYtc{G|L{Ahh\Sd>*FkOh 馘;BS06+(ᕩs B˗vj0%_(8C ZWW5JzV!H- ESdOKnx܃Utε?'6{q5S@~Kw?5&ɦBfZOBRC-N5YjbCwf3eIF .eNƽȆ{ǔ#ƛy<:/:B9^"ȸ)8Τ3 &5^K3@42'ǿ>9Tٜu@&[V=ӌr}>Z?8ô Q(o: B镼/1RCL^2!, \Oyx? 7pǗ D5[( *ERk S9 + fa$s G[(tG'(>{] RZ\zOe{F:1&5qm;7sm0,.]#jNKjBkN>M@ Gdz+E#pܠ{X_B~G`ɛo hC$!%e &5ZގRA5ާy^ࡥHGEUbU} +eX`A1/ :;rRbS3Ja@J?z/<ϛýtJ=cxENDt)k zOW l=_9P<=p- įh{sl$oҾ+- `,Mz6&pV[^=oF? K.jۆ߶#oI/ cZAr Os7s(D\g}S.O O1oP#Y=ƝtDsF,=0> ?MN$,)4oȶe9*6!ss3"PV3}Ji:p/֊oe"HgZOkY4Q܉@Ȍ^gy´8>Vvøv/tAяh~> po7ZZFH nqE _гY-Hݕ`gH>:y,h_j4:|S>U@dx:^*8ȱd_4 `Ka"1ȍ#tw/1w }Jvp,i:S|]1v=S&Dފ'Yބ[ ͠~C"ҏyf)NEa LIltw}[al<D ms]h{!\Q|**cZG/r$*xJoBA'6Ǜ[eR~;cQ®tQP-#w)'bbηEрBc\y8ɋΤ^x̣,Tm1Jԧ{o0oみ.Q(\6.\1e۩f gMdtU}H%m(g!K{iyo̞G$ 7d運ÄZw-MbherUƓb[7ǃq+p[WEmIď8: ޚ/0kaUaR3<>C|aYN>Vf)G`ķDR: nYut%'ZO/A4#R>Q͑p"Ć!"^bZKRn͡ʤtxɻԛbا;?0Xtq= ;wƩjNiH΁F/Ⲋ. l`Вn9Oەvf(9wr2M%J6<p@k Q6D^pR{pOyw斑2ԏ'ܦń4;5^짩7}7MEtزuov'k33o^K d5Qg_x~@XQs;TnVScp@>]j@ Ɛt|Lnd_|(nvXۘOl! !@++!hq́^$WT ΃FaJeE+Ht{3A g2`5/[[?@d~dɸٿ4ѩƇ^u5'Oo[Lm8]vr,@jNç(x-{+m y>NI\$7W %ԉ<ٲ(A 92Z}2EEA(0(?]6r!8/@ 9RK/Sr"dkR-p[2y*^NE[YjF <81Dmxw5iĜo7{ٙ޶{ž6GFBJBM]"T&ٮ^角Ֆ+O$e*Ω]b& @9yEvuqF&9BK=,^Y㏼H$`VBhUO8 FYD}zY ᷫ'T3G$5 7Y3Vd.(~dbc,? kptC)Ƿqu뿐S#wܚyR R pZyMUlނO.J#bEfzv:͵L9 Q[ˀdUut/LQt)䪤rl6 ߤ5vK7 ( bhdR\:bO,mYVOق9x̽u\Bv)@_qKHB 0 )MP=ѽ[ƐWT bP¥,N7eˏW$`m0d7V;0Vtv%r͟ԴNd=?h5Bcz:{ Z'N -jzX#NHt{MY }vMW0g>tSpt/b笍]/ɟN-fp&Y9.ylýp^_O6>h1CߋsFdX艈#_G#Zct0 ;ݹx2'2F:E̛EAb Lk1Mp}Jsvy "㿝fK a/^y-kmh 0:8{:r;pgoFMwxb r'Do!ڧ ^F~y7ʓR'""F|m_4U?W$;ػ ˆ}bûOkdX!{ǃ׆웥F yLr:o3soJ~$4fH pIi-? y3#,n܊ ^Yd8m7)1׃I̤>xyjE'm )C15A\E<E]n@cւmb kX$LҜj=WdUu6e>:dK Mx+h\TxDj Hdc,#X0&8 gƽgs(F;pT z__+ԊL0/ ˔W>B:~O+& w(/`o9VB "mwB 2V)ŘZF?AY'BϜyjoRDrhn2σdh=';xHn|3  |*M*ZM .C,p'vF܍i=%%QZA&Ey[4Ow7gRF35B{}}$RPq&eBef< PJ[*eŌa>(UK}srf?jBEXa 'yڙ|%'(|aKQz_4jd(n-n?>!ܬyp8ztEIvOI=04Fj8Xѭ2Ԧ8$ױ'8!7B9qoC2@m2"s~ؿy`C.#&(^FQ &| z 51"Gbi[͠UU7_O~< Ŵtx FA Wwh{EB25dJ^[`5,~镤yG Zy=s#UՌ|W:&W/"* >2?6I(S9g96qXT(ʲvX csCs|'xbxBg,]Eiː,#q]KY Ybɦ\w yGȎh$^PUh;ڿhW߉Yt@_ H۵,1eB/Ӹ,n@ >jd#IGkrdfձpPku'9RT5B-%yi/):LlP᱂t"3b,%#]nMհácBBcY2}3)d?<K3 `+f :sL=&x$︘=LiZ0b{SCPd lAj r+Gmʧ/r$e\𨣀; yqaA[̂+uVV I{b+w @h˭;2lRM2S`S8 |Fևki,8hj0Å `v P lz?4%ZJkG=9*4H>CzaKO2ǯ0om#5fC4zP 9ͥ};{`q~tB?k ᏶/,L(yg$4REed@ 뜱1bk/_\Dm<>)iA͍F ή-'RݐA9'G Ce$HT#ŏuB$ūq-3@S>f׳3'JRޜѱ:f"Ģ5 l`̩O*dޓ2:㔑9HS2yO˽w$0,acR2,3k25'LIc!a@G#@cM&y:-:@o1Ϧ1dbH*6"6+|˵- !eF< e1Z_!q(} rރdͷEn0wo%jPA*tN9)1o82 XFvm{Cqp<菾6CNJbg4.#}XwwИ3\D3Q_XE#:*LN' hɶk?ag8nhg7nLbC^O5HdWOba/8Thqb?=װ)FG<I.Far7rt^.E^nDT~ltoem7|>/L}eC]$dĄzFdLsX!bic-w5eBϘ j#N~ A'*[VTQ:'ˎS%G6sV4g-CJ qNqerVIb$X\N>&3N\f,L=Bb·-1J{7@ƿ&ǜs@2Yn^N|@Xy*s!閂)c;}XGn|M YES}`lZ_g йq[ԭy܉b$(h\@ɰNN(),%$U <Ma6L YT$ݱDqyL*nm"3l)*=%-$7`30{|/jA*5MyΛQ {©nt~FpSH8Éq%UR^ti}TЩJ H$t>OF$WrWųsS0=hl]$)e[!Ѽ iJc zI9C@b%N0䞡Â0cwVs#>ܰf[\oayH%,KElֿ!I2*\@)Kb(2 g6LAyF&Y/¼:47c_ f_SfWd#vF\VvxtPq[_K4 KH@,/Ow 3ujh< EJ%: yEt+zWEnz f?BY*٪Bo}z+x^B",CPV$ͼB84)&cbƫj0Ԣ\FA2=% (la8E30i@Z=gvH L@,{PmyqW_et*)]8z@9 V\USۉ @s{u+3m=O9}L೫ˮaG%ϣT :sđ.z*?ͪRU8o'?擏y.BGJFL#7RV'kCxY{23^7PܵWfVKGN}יq(qxsY$ߚ"uy5XHw"d KIr˝W }>ta/oSמmD==Kj,T;;A[7?1E凑E*+te=W/+}ೠF8 ͸jtv׿]mIEͥGxt^0e CR(h rDnVH_R5<d02\]w(LI]- (-_Q@+oxC]_wQI SY2)N^fc_y"z"W 5q8/1ۧo0rl䂛 Wώ};/,3a==Ùrů s!>8SD 1x(RM&F/UDː3gLE4p\~Q~8^>9@@Ǭ,Miѐ(X!"FqSvJHy`t /??N(^|xH*9'hqS  +Dlnr>OKKf5#Qd|68L9kхhc yˆ;_4z -~gϪpۢQ`mC[ksoJ0Owq ,f Թ OCexWVaj\K*L%Ggq6oeyCJH |;IP`[yj59.54dKx55%/S&¥/`(h(Ⱦ]Kf'Q DGfxn.''=hnYpðhV4/&.j=n{"EɎZ@S1ʃ3q'PÑfzg靂33P2olC(H43U-0q#CgڛXꞽNpxowȘDF(_Jj>0\fŲ@pgwˉo3G#zXr/}C˒A&ݎWyՈyJ<[U3n(.d>hNJN{(rg'gP2bDJR vyZ+=<Θ~b2jY OK5uD0qެbI& =Rf/ޡh[AMzБŔ?`B|T)8JnN'اKB(j7#g&WHRۥDPx%cRg|zWlx ‚Bx{()˝G%|E}AΥ1 mGxE<=B؇JxsavΙ>Q dP Ӛ;GQhRP*?Ҕڴ7]ox&We_흅\=M&!Ȁ-}eN*m0\sdL?%_*LxuwLc]9fi VW*+Q  {gsv)|gur*Y g\ROGx^b!d oӧm}!٤,UmFȺ׾<WF~bW_a`ڳ:HS2ԇ}$Sƽ8N^Qw: l#( !f;R09ʿu sh+w9?]=I*4(+LWDK:IQ_rgԻ;?y5$V51 T1 Cc_}LQ}9a\*ӁK=zZI/l;!8:cG&;6?DLrO/e^6;$r8F(a6Y AJK .&+'юZ%!]k`pop,;ڹY‰Ї4rhm+bQEivW[/m\QMݓl0{D>61hMezT]/\;[E" ||۲+ʛx, . Cj%UH$%Sڐl߂J;\wQTbpϊԀ')Xo"$ub}O(Cy XvUx:GCEِa)m>K괒.7E`Ut?H޵V %tI%SXf>2P!NUR? 0mA{9n&iRΌ]`d}h|Y<{7.F#9d i̳l K˹<7,{U9)1{*I҄Q{1+Lx=M}vmO3dW;*Ďa X#{Я&y:\؃2 ՝m4kzl$yuw)?Dxēi#>\iD{%_q{lNǩoR>jn.8\T\O& OtZ0-(S%~S'h _8VbUFݧ`WoQ$02CcY}[b~h [_a)2}hkYgF+PuFOZC{ 5P5k)–֟XG$D}N2^vA* 4b})ISeۻnmw]%;8!/B,h;фX-B;b+zIz2 ˈ80!m\I@?}qx`\ y^rq\*,b5/Fl3ywWQES؋=< v/!=a6%=#PkQ02|nGcDbPdJo;+a@Am̌9}0r.Fy@2>oyxl/ΗXo6zAMIƹVGKVHtI֖^Vk\]kI_$mep_AݜTF"28EpˉI2Q< A+]zGl3r<1dcLfZSA<{3PWuo`;_b ߏ9+34RsHE&+KL&׽;GR; I+o.6Ԭ N4ZC`8Q `m*/苬DJm4sЙ}Rj,ӮA߈POD{xY*'9}<>_ߗؿׇ&,8=m k4PcR!KSb;$K{)EѼ'0RidҪ= xvZ4)Lmd5F/a?# @TyIVreSF+*Œ}S%JEմ0r/ |xcJ:Th|ZչZ}0٩=(~f;L7Yx Lف7Y)&6fCWMk#V4n|Mբ虷ut~! rhƁa9sM]{$st~wngݑ[ <Tm+grB$wE &1w1bQ&ź4?)esd q58y|TZbP@rKxoiżfwbJ5A;8 }@պ&D (J#EDN 20$r cJuf߳'{daHϴ+HMi F.۞'6UY\I{W`4W' ۢ2Bӑq3mzHEk}$?˹kU8&Q$n -PP>Ą[C5罳1EZZ$#}Ȍ /6lQSiU=H<1 $ oW6XX;t1y4z$^Z5b6`d#r6 Yo (i!,cNoB#d@#dq E[̀lp;# V{BUA'SiAT;\i)V{;q\Q&Hʩ FxJ (#L f7o\[RBf %WIEiX;|O17UkTaЧ^=>Z *f$7{oPyb;UEìӠbĹw\Hž͙ 3zvTthϩbm^,)=5xiեA|p<M JVt5_BZ6>b4q̞ynb -v zhث%Dt:ViBKa"@+֯˴7jΟ` dB$rؑ jRfCJ\FD$ǁ;}*sTaL8t췵M!cUN9w2pPoyU= ZWX^_Qd %?;ca^s w(tП)K25##ͪz؂=B&YjKKfʠ9a7yU#]!WS@&W]0Nõp#e<oRYIp 1JQKjZ#;& {gu*~(nA̧̘40]A|S֠g@nK4W"ga៏CT,\z;]&Pq˷ AqqQ/[ΟOewGZsz?Y~.v:Z3l<;nᯌ{nlk*Gm.(~ _Y dЪᚹڹ"~}h¦EGB+mG2^Rpgu0mtbo\VִJ^5^&4% am7U)$Z6=4S(㵣3uYKY3,[ç//K(:=DiS7@63@FѧK4>KƐjAMʫ^TA9=l{.%Th;""6IX ̋!}T!O@/ʙPf(.t>rS>|X5 BW[収!3:HhkA t`^Ddwd=lew?7;V<an C`wS嘨11IvC6Tg<'Jl2k-}Y)."ehh*GaX_yw9G E:@dh⌭2b [4f^$/j:z߹80/f4w$5PZ,tKD4le~{$>dup} 8MqZ kT* |]$WF2~;2DhdM腳 ` Aw_ʚd[E*"]aU2Uq޹ . !DCh>H'`lJcxtEQY'CVv%פF-ydm@a&1|E[\}wzd^#0 a4a#"("Q K05Ͽ[~*Wo rJ\<,挘C !yS3o~PRqr30͑{3Q fc[}O).`q2=^M4Nax؛֚k_uóW2ٜ'e=g.È2bfJ>+z>M/+q,w5* =ks U$\ XTt/5fm@&{dwx3Kv䷑q]7~F7 +>|䔢9DaSBʖT!kc&_IH~XoA9jPeff_.abEkC~|`mIi _N 6(ͫph̘DzbI4 'Dݺ+WT>29Xn5EՈjl怆Nc##^q`c˫WIсc sdAҁd}ti$o֩hï YD4Npf~1vOs2 Qo:dnW/ +֟b8}27[6,L;ˌnuM/ w0V>߉a<47Vl}VB!ۃ>~gyXKD&0;*^P]B`ta %SHUqShZܼS!Vpjc2`r?#X/~r"T[%8ضQVmF/="w貞7wzr6t~@8F 31©B~q΀0ީ9dȳ'>h5 K6c7o_ry16y G؈!b~a5B^oE;= l;atDBޅkU3sܪO.xjqk͙mCGl UsU@eʷ}UՏP-6WRMYdfdHfH n+r©"Vk\tP aﶭsx<,#su{ch@.ڸ2Φ;-r]X͙vYvЂDgU7^9`-vb~rlTN1JڒXZy#^ J:fnl?1q@8S:H_ݟprbYWQ ɗlZϮᾪ)d{}K PLmK`$@+PEk m2I4i;s^#VBπ0V]F]DDK%:C#',_BG3]Vcp.e/]l@ҵ/軏 lr.ނ]o(PmkGJ:Fuy ybA`QaQT" pfg!b ;}2G3 eޓ;h{i>%7>{wrSo.-EK\Ow_CܐR{lEM,*Q)4sg sAC77b%r߳3Mẅ9-uT \($萉U*>#Il:WYn ÆC-Hvv5gZ<=Vɪ "Q15AI 8׌Uy{@^.TXn'՛tَ$qp2ȩq|s d*|sZ̔n];$)vzUe)oÄ҅I>NJ)(Mf 8P79{1+F@ ~q'&J ^7YyK-Z0揮9DkZ@V˥@"qvRY3SVF{0c4 Xgۓc HyVTWڀ45 9{TˏvR Dhs1`w>E)-3Ii!ݜùʽ|X%Y#F#ՃO=|5| *MW"Z}.CaxY}V!!aY(qg2w6s$m}[w n( ocH [Uw}R޷z6Ɇu-VzEm$C"xc8aD )g?yȼvI 8Du*h%3{BRu~ŠWxŀ$+K8!yb˯EI<4qQEe3kGP\-W7*0 _DyY)IlAfkfjYS􍉔}PL&jmN\ ;QIG`kDFR 9 ,iۋiȦ,B6PHougq^R#i3,<>rJT\AVmЦӯR3-#3ꭾf1R8㜂ɟA5{j>-L36=GN=j޺0߳μZ쎶_%?SR+?7W+N, .bÃ&~Z 狠 n/ڹlDh!9 мjoe:\3@ms͏۟n6OF?RpaS2^:=[))^C%3ݵc6.$;,Ҹ ;}"5YT}'LBWfQ=jJ2jjef;m& Nϔ6y"oKnHڢ &.׫>3b}jAtj4,)$kS' i0ؐ,1b|LI2~>fϡ8{z M<3 ԥLix2)}㦝YDgeh$+5T%Ǧ^3ʽ)o]lq4e'Z̸hu+t[Et>dF;ѵSt=ߢo᮱˴vD D/kr&lc9kM5\_jՐ46d_#gȁJYZߌ!!<|sw^CMp]4ީϥg=rdYw[EЌTN=D#.Sw4jR$n > +0c+!|=^O\-" !)B( uTkjڙkn^l"T{l}(&k3ֵV݌zq[|%^B4*?GF֚i&mYdN؇j44{w0eD~nf ֮i0)iUy/"!/AJUfhqf9 %NSu!%-pM[g{ ~Mdb3G2p>eWJӁb'K%VO_+ch<%[pmc"(sNREqadn/T^ԌsWoz[.` "JdUg4MX<(;d/؈f'v>/9 UE[T {Ldr"PrjU@~=+;Kb٨+_y:}f 6~Qz -^0[jS/!{jAˮz ,k$6=#G)wn@Cv_BǗcŔnyL3%.s~ܾdFc46[x|j1x}E괧ےWHzDvE #SkQsb=b|F&MK &P/Tt`F(saDžV`#u;vx5^NT ̓"iI X蠊xeήvK 6?Ji 旟%0-(1r~/BDUQr40`PFp%`m!{*WK+nW@B[I&ѮUB]L@7IGͽLJk|MP$=<0*f[wp:f0~Ngt7ػ #cݱי=iy9H$\(p䦑gK묇&J6)A=-gZh8^:װ\RwB("(R@I0t.<]p a`6IdR@p6G*F<1R&rƭB󳽿g2?|DIV:uvp9ƍ*"ʎ܈2[PL$; 1&ɺ{Ng!Qʿ:*;W+-7VL=z5mOd ؟[gvŎ2Lqlև 鰹gJ:3p |TwZ%>@INkUnz/o0Xon@ *"Ot #~~xyJ"S5+,yݵ3qF%xMv!$#}CvWy:rLQ=ȸjMZ07j0M4pN]rBA ]kHMeD ]Vs vy#|r46?BtQ`RӠRX2X5LLhZ5c2n_\eM)B& 0g<|=T{f4d\v+Yiݚ oVdIeV㋓/VkѶHII2LmB e12Qn&Gd[R!Qez9 ׎Pc 93FiL`>P1ex}QXڐ&+։W0WcZ*o,O(] Uɮ|j_G\R)#sGxSpf_OU$NsgK'8tE@Ji@DN.PSQ] \{&` dXζ'xS,;5tD< vbOi9J:s֔+̼bB ߿{Qx tNX"| )#Ry&8H"+"d[WS(@y&Qǖֹq2?^2%#9d[cM'j`O-YAN"b?Y Rp G=f So1s$K(2W^UjӠ WAu eq Qm9yT &86רsG\䘽2myڎi*HuD6Ziq1ϗq,|) A|g W.Ei>^Kf:*ȝjOX?0/i1q`%<Oi"? z?yI@>tkKHRoD5 M6 s"G_&Xl3 gH:Kx;e8k%A` z'HMqUP'S.h+¡'-7ieY&*NQ$+r됑E)nJuEW8`٬GlJHf~Z U@1>ZU;95ͅ %ZRW*H躧e$~,Q\hp k]AOk1.b"L NM{)'^Gif|-+7ݱ4| 5&iG.qz|&~{a(pTt=͂.aa0_[' 7k8RfG/Xp4޷ <@ɇgрڲ>?+'YkțrHu(V 櫰kZ|?ڐX{ Dh>`7B{jC @'4?O#ft5YH#nacUϧgxbIb(^~kʟLcRE-UޏL[dl]5#y4qtQgOͣr L|r50:VjSg0{E쨱,1YMIW*uSx|VY;[qǒKټ|}5/ 5M*<1!ҿ]T2&H2oA,w_ mYO]/X.Ө4:CﺬkDʹɰX蚾3n_0^ UݏFHK}7TLO%~/s>>XfA%cX(%YZx$gsCIJK*4+ɹDъatI>Ce\)/h= , @=þ# }&X<;Gdް 'xcxu@8$4ଢ"^q#> >͗P {?ߠ E#R#%,|!li( AtσtI,/O4~(8X֪׈uưdI,Z+#M {N5E/Ybl,*Q!^5#.ݾ5C A*zEkdžf ߊhL+c8`2X#:0ݫ&yœiG XwΙJ%/F]O͖՘殾ڌc|+| MIFtp=[WDRD'$d=RݿJNh8w8]ߛ\vy׷+PؑAf(Ee.ہѶGk*.7զjE+N|8roV8CQ #b7mA$!MDUb&K iU_aTHdE:s?CiTyq@Tx} q(%~G?W\8Z[RlU^M{ J9a͍`@ICk=k|뵈"=>C1Q\ʋfzXU`L»\bkT:r0j*B1>A:2%|ށC!FŒ3&~Q3EDRfC,>s.PYCT 62O";IŌxCwaH)[p_"Y/\̀" ;d*p⎔?Yw;MƗ+n.3XXlxt_ǖncS@G M\ÙX58r:Aw6I&ąX,zfPL5h:y zvZ"xiI^ۻa ;$CٴɘLrbR%R3vSK1$dhb2@z+e=^m`&DSZӏ.L (?0^ܴl\%ovx&bth*5ãqDi5Mer;oQ[%(gɝgѠG<&EDG7c}j | )ڸ*.;~Ha x`a-yf]DQSSߌ< mlkO5O*= M0G W»$v]|4U%l w빫=rwh-ͻ@!@ %xm~r%B\ֵ{:1AL״u|nKE8RiXwNxh@WƑGTjƲx$dJ}"ET<]t4KixHpkm̈́#Jok(D0}tE}<+@;C.cF \"..Js 73 g}m #ZyoKπ@蠺cn@FX^H@,/oY:SɣR*[I0<= pNoS ل? ugKf HlQfIP W7K6D+d9Y9G5JSzjPp4;=6U¥!ls9Y$r7OsXW3_!*kD3B^8KpC+Ѩ d"3xLANr(Ɵ"$5Lj&Qk 吕cݭRFz߄ F{ e=:Hiq*VҎU`z) o=Fn#KA qYRKՄ΀V8ã8C.@ɇLsg3į yBYtf=+f<) ⬴nj8%ؑȯj~_^ZezJ<ПKO?:G2; $ɋSt{4 x$Υq_GA:@jVT#BiUS>v,Yv^Cޜ.(z2N4?89닁WVhidt}3%/AAխ#ZtgNI݋":%*p; f_*\HB+ j^#U|Y5 H{pQ rt9uױ;)ֿzNd_G~?kSOp|Cax&#fJ u 7O0K 7C)fD W``HZ't=Vg4I *"-o'92zg xVo5#{B_qd綩TWJ: x!?wa<%N}ٕ8@ לե; 2*'eo*$`Yp0DJ ,Q}ۖ>< R 2Qc#2Y@x2`lT+}aC'9aԬa4hf˜>P XC7 3'? j!C q^sc۹Y`CXXUv( iYktvM.T{UB7å՛djG7󕪽!6)nq_+&z{Rʩ@7X0QnFN젇(/>5!YS `MRF8=YTr J{iʻJR|a M12Ҫ4E*Yo, sd0mH?8MAhv#w7څdCd$`pcE=;Z6|!ܓB}RUlSs--*XeWH#ŮO\$;?^» \vvDյW:>Hg*QMnDAn@bGm q(5$.k, u>#/\Gmd-]ho!p.B vvv{7CvGyQgLs&ޞDt.mTulǓas'.^j[Ke8|&50?) \2BE5ETH-IFBft 17=pp;F(ɅL(J-e=F~`ټe%w,GsBa1D Q2b~ Pd٫ΎuA\%+0lmٌ`@/PK!7,) (؎g!P[si;3u3sY?xbQ^~54gZ)rR7ku[¬8C^ 6Q>UqxpK;HieT0ɽ~ۛ@B8N?j}X&_z&3X6ٍ߂ml\rYyF c1 ^H ewƵl:3a"o6'#H}P!kXouv^AQQeTMA_GS\H\asle(vc%pSlc-upaG(qhHb_%Tՙ6CNϱNP^4ЫE 3o/d㎼JԈ S2ͪ`m\ɺ͒&'ba)_ha5R9$t>˥޶zZʺ1 AAq>_  ĥfD38xu;/s~bٔi{)%7ۡKA5+ VEgFFΰ=$w'kI `~d5Or ПalUuX":Vdh@-zc䄱:O仗>*g.&cswWŔQ?=41#!Ad;F8tV B_2q ńe29ظx'Y6X2xS|ƢSDx%]th C,[}ĺиQ[1؉tCᴴWH+u{ٸE0n.C8&$Ұ6bºa_j #DǰWWAƾ ޢ;BFTT߰;>Kƍ*y$]EVuDqbj#HK<\wَ |[Ő=xTE|Q{I0[ͽV_S$_"6 Z[Y_kȄ>0Giި˸0G\%q{"MM?i<_9!_zn_a ;Vt-Z)"5ϡaJd%y8bۍdLov4% rѵIFѼ&FxJĻ?x$ô8=8B$#NZ:!^Ӄ9Ki6o2i8~"+\֒:l * 57Yѯfj4:NC*&Tn]2,~po֔衷y;G"ӱ ?*E+Hr]B M<8Ҽ'L+vJW$'d;+E]-b`1Z⊿ e=gEǍ ʔA"Uus.\\ }$ dg"3v,uוv {KkP*He#k7fco ^5<Ήt/N>[VFzgDi LBבU- EK`DQk gUQl{Z_$L@RzmN _rbVPV8w NQ>2d&x*r-a\6qR9Ϧk&luA:/29g[tBl18?)ܦc} %e^ o쫬ο0mqL̢,G.kJh~Op.Itvm2ƴC'XI%⿪9_Z)&I 2O0sj pbg#`+ե^Q+S:2qZ4lnsŭ2NnZrN{;&ٲ#yڐrk6%W"ó$r?ҳۓ:SdJ.kϧυQ@8)be|K>_ݣ$rYiX ,傁2㶢/wpي C sX{8rA<bT{z.8^faHՐُ1ɪK\-܎@aR}MSc+gN}vb i@dIp&OMn*f?we@0z3/_Ca E/*:.2b,w{'um6l=rC0N$' .!G&gME  * bTxUIȢo7ZyIT?9VvG[K~b6WzX¡5Ó6Q}0vamW.zHm>W7]d@iqH:ZIB$C MGJV>r 2ƒdQ~XiW.4Otq.*;ۖvf0.KݢV;U\;Ed&3WaSHq{I7/X]-ۉ+n jRBhތzU ҭ<އKÎY*6oLFv&m  t:>EWl>Ac/ N*CvUBPZZ@@M`HϠH%ATPpiF2bU,i)hb 5;pmlC߾Mdi,8@>G:jA5蕥1ȷzy=*jý9'v[0p!kX҈D(T7пȵx xJ B: $L T> .{~\DO ƈqǥS*߁!W!!1>q[RmC0F5p sߙF v cȄ]emm?I 7\ۈEz?6/u!d v3ORD&BǤZ_%~fעn@.9vJr7Ba;YW pF@?/KYf)T$L9 f^} 5?9Ŷ iY;$H[yh{(3y0R'Ao0]d +y5%fHʁ%#U ~ 5@W eHz6(kv+)2qŃ#/fT# =(.B]lzn7BpZS4JCߏØ|5J:ⒾAOv&t閕țWSJ 죈8{`wIև7/:#=3a(y_ýe{_BAs`MN>TE0#<Ǣh+b? >c^+y/.Qb]HpKJ?6+`դ؎`wUݤzq5_2U|́ zd,--Bu/xi|*煤]]k6 |QTu3t(u9꫓WU7fB*VHŬoR4ærK?ց̈H'ao 2F"gRJUG#H1 . 4\]7A^ mlfb:`IZ{n$w2?8 &S$ Za^L.b "C4_Xщw9n2CG4o?uux]iɧ=gڎoowzne\d>3qX =%i6G z̐Ȼz~ |DnK?ԝ~l <$2Ŵ!ko_!7XDC)O&} BJ`O?^ԧ+{Nsi[tXCܮE'kgS8_q$ǝu:胂9cb1ػ5,ʼn5u4GRbJx|_ß_NJDqltrc婬)၌9a5}uQ0oL+(AcNpTj}POyܧjtt_;ST`t'i#6T^vO>ܩ?oMƇP*vV9>CL'mD(vcؔ'X=0v3X+?:U(ݰN+kJr~%j_`q ܓZ2Z8UX;翘N6,aOwev^JE qY+!i5#(1CU2}O뀯1PxVȟGGg 48F΂yw}X_z2JGJHŽmd}wXIifX[&¥ H2 ]Ga*As0ްK Z8C\Rχy?ö7bDK $Ǵ@Y%W)||aNX yCOmښ#lnKT:u㊈3w<6w2,oRS?h,JS@%c1Ǔusr1PT6X/SKմ|2{KG>l5 Z&NV&mjķSK^0TT}ոD’[7<`^bl V B]+w_ 0pìe ֋ bδ H,/_ ⼣~OGz2Ϗ]7w1;n|}?>fLIAB11OhyD-ÙlvG VK5eZq-A89MH9LBWKccl!qfe#<07)vyc?yj=^n`0ў$mVu ~n BTXRtH.T_tl~a7!(ȂPcZ޷t\  bUU`&~GmC#-0%dTDŽ1ı;%X*\<H)X04obʉtm(bp"sr!VwO&!4WGSUk0\5xS͟ɧl^龜x=l{wt}MXIVؒ.JaP|FƊ%iԽCy! %L][lm?2[@/O~ꀣ/;ΜRmj5 ^j1VٜN*ډ9:)犖]׶]r6NvFz#zaa(V!A}"]/3Q|}'6wK9<|Wi;l&ݵKH~.EG4.lWv^"tVV4˄7%!1ixUԍIк~I'CFZx?Qf2c Ec{l#X XlGE/_~2 *ѩp6[qAOIYgo?O"fGR( ;B1+* 4kU.LOg.GMp:>nzn-cJZW< eWC"ZRYO,2\؊(Na,WwLȚl{|Uvخ!Vgh)kqdhK3N{s0&_tO=Ceeo1{ubpeXHZfl{M;!ǗoR tHRdwmNgJ!nŔZMS.-v#ҙr^lѬ{dCR~iIs@!zƫ-l1)[eZ%fRfz 7,wdnU8B}@c*#LUBYteGݤS2L^19!4(05"eEw. eTʛ72l] [YԑbJf!٨+$vǼb,x9(vC~]"$9rB]e'tOeԬ nJHU+gD!'{ Χ!Ǩ|rI #01yCX`G.^veė/8䔷j靳4"a(NԳZAY?m6FR,u`W 7{P YOG Kp}O Gm{ XQ.[%~63M6f/-z5S4$j+[Sv+oK2Ij;Aݟm=BSh."MeX`ږ rFa,|v|:E)dn<Q0!"lr ii=IE w罉Df2#a:яȐ@#63K=n'K~C }̫voonNv G*͚g+C2ža'ث6ʞI{*GH[|JQV;TFȧ؜7`=p 9rYKRI=&oNz@m?J:$J U3Ě+ɝMs!Q3@g$@_g'w݄}S[HQgLu@:9NKǴY{Km4/e`i}ۇM|! AbO `M<"GCh@TZ2;*Ek+NLDIrs-*}XP8.P^'kVӌ L>J D#$E8$=D^23bo/[-[HRQ TfE_yR*7 Y1wgA`#L?EeZQ4t kҿ2(Ǒ!sԁⱢ»Mryv %~s@cR۩Am[WY+)INi!jYBZ(Nd܈+Ր +nw39~ll.ڬw?tz2j6o;zIe. B &u][Fy,Rlg !{r rz2#Q6*k @NȰ)YNԱfέXo <@n~~b1ӱ#{:i23iH9Qg7P|5E+^%!_)=oC>bgh-L$l#@G[O<'=Jk,.6BUV$`J,ͮhB9u[PݤsBc! 'joFnvSxlqyM &KAÓ N+G"Ĭ ͦ#aK aItA{`DE`1VmL,hc6BY $&H'sHiPjwi95n2aRQ?m%0cH-jF1mボ.KM9(s AǠ,f<$wUI)lfn}AqY z0o/rnZzuV>>[  oV?{m]>PcjozsG$j U>&~85k9y "ANbBY0™Ib8!@ !VYe2oOlexn$زEa*`"r}xXѰCOfW1_zm4GyIӅ&SA+GO_«cQ13S>|"H>bTXYXQu+# ~e jQx^_0#2-Qg@[Z]V|zB9]sڮ@3Jd lC:zI P+riU086zϛ=9Pu+z ><(tBٙ)uq_U;_-u1!0}o[yu|%#I|䫎8F)U[/=n\<ʥIqJ?(k<ƍ;e,17Bڦ~JÖN>@5y~+EcSG9-6S6qmݯg[)8`PfC$@<ؐ0V/ b _pH0h|5A7~OH Sꄛg<4gL:=u\Qf泇-D+ "d.mP;r%WbeN#CâK'`u~šs~BE&ːVGVZ=T1w$o]A2bK l=bg<uW~mDhGWk ^5mA\η L"+ȝVDK33y~aޘ$6¹qq{G}DXG/ZőI/QcH/MpM9_!yA8YVUlÚ0z %K6au V#); v/oA.Vz.ci*?97'r=vkNR!~;&s6S`oOÎ%׳1֡υAߝ=CT6HE :( w7B]A2X !fs <ڞ ZD[/OYq%X:j6Vr/=*жQ Ӏ<S֖}8ycMIZcx[Cii 8u!#]Xjt Zhpnca_8GH#燶`Z{5c'cR^FQ9 QZlEb#N*G7GnXf4'kn~Ё,>,|\ 8^"ާ[xOሣfsEѿBӻf;,a\EqW0ֶcY(<ޓ ta2vrNtmx }AcK,Ldɑtt4Ũb"ũDg5s)j)V V`:\ A#q=EQ;o䛧l@˭57mR%qrI)ďm/,HֆЩAtzH*6pw:S[yt $M_+w_(kP%4tW~bbfZj wt}NJx6CO>-ۘgQvCpd6y"amtUdtv_t:<4 ixYޔ$=I!Rw7z@唽yzﺬ, ,4O9HJ*;'_^Y%uW*AL#Jf={l #\ҞpOx%Sshm7gWB8ikheᱯȠ% 3Am_-gwk$\n7Wz?o~=|Dݢ&E{ȄIH0Q)}5cj/nefhgJFEz5V[PI8x8=ǕJDN=nĂU~l yK ;5BL:l~? ߻+Y{>.H/Fg= GLcuqK0@ΉuXkeW*X얯i*"e."h7I*,}G̭g[}\/7o1['Yh1c yg  r$j` e.:ц@-3;h8%f/[C#3y6| $c6/bcl xe&8̗}HoAT}Kޓ?Jj]D0 WOץl1.9DCN7UYP^H-և2oQI"Ĝ! %}!&»AL61Wz[/B$'V_HW&4zȒ C9,XC|mͬ! bcs'8U%eI"h[A{ܝ*`3) }zvgݢO*#{i+=b4> F:;%lCV }D,5"ݻ^^kY 0tL7-0% V4e1zU' o|U"O4!jJ*(InwG #K]Y>Q5%-2qVTT=4{v:7g<ДO K4YKq}Zw5xepJ>(MY=TJNoM 7{L_s9G8|oN]-h.zKa[7(0g^ʝrC {hM{" TE! }r8U-cl!y2 MJ701^eHhNn`RM39g[U2h ?J%B?;Z0 +RD/1Lq<GWvHuzQ*ʰVpv_ ^^5Q?GQ8|eZY;Pw7!"~Xl}Ԋ*.ϔ\!5A Z"í\?aO~ay@$CNpI_юjl㵔GWI/Q? I!b uFO!:^S*o sPluTdZ)^bxSN|9P3r#iϻ ,=J֌L vph0l32US,o 0/#6%?_|?&0W"pW/#/xUA(~$Ԡ5M5h/1.g}5!=F4;c}~ >0ӻtz&=ؤw5}%VLUa/1sJ5˝xn g Tl4K;OجfQY6dv\J/E:Cq]oHmchPyfVZ[ǘ]S+_mJWO.pGuċQ?WM`*EW'#+Ԫ5,{H^Qq} B>r838,9u>d~n֛ݪ\\+ҞMI7ׇInK]G`yi&~K2iMdVD!'Hg7wA&gN5+u⊸Sv(r͍920yN2ٺxr#6CEU.lrOg P"!А)7Ǿ/gppTu7yԋN(Bq(xR)„20+Xh%(2g9L#׿Ip2KB(1{rϿmL.'*_ʣJ[||eWNHZ+WI2|!3V_zKEh e u ♾vݧ<2S*<~ɤqeJxfb(GSmK^ܨVz%U&;ddb|Ƥ5\=n2K9p]gWQ zyr^ Xi탹.nDTz7^ ڜDsd h(a㋆4ps;œGH;36/FX?ޒ}=S X?Fe?/CfC )4D7*NL$ `<9$ G Fw/K[v=xhhkRԸ0RH R/n!Hi$w>ym١!=o*siE;Øtuy;SÎÔ?f -,%VZ#^j.{'M~A=.Nq*,naʋ7 uֺ..Hֆ4<#+k⻪xQV99*˪ jP0u)I0>51ˮL +ɉ1xQldg@I5Jz|_kijA@fgym*6a6!Ά7P=+Hm_{i:Q?Ut"0pi.H{ dMyjFLWpB"F$|coqiwSG@uݽF\n._VTϡ:5&/`ac>iC s06EspǶ#fue"RL0 W?[ޯ'J\eL%P5L* eh5IF.]KE鱣H3O9lJ2 LΌU݅v\zo[ܥvXPlͳ=_[UM+*-T=0QtmCNpM#<'i%@OL,PۅJ"ٺw8<uϟ&Del ظAs_j5MegPFqMȢ(י `9|1ck4 s.f-)SPSgs#YeȤI58;ࢴ%dԨK+c-K"3rJH*;y8*bU6Z*k@ڬ%gSP2 Azv@ ($J w#$NP4 9*ky~Rp~w!\r&!RAgR`UJA8jЏe<#p3lIY7}^Z]lԣeDp(:JBQIo-G5tWmPWyn/fV;okrW> &FyVLeWR|2}S@T>be\KJCX9M_Z9˶Rׅ&%f YT B}_9fPM#JܶkFzde#ŽSCOѽqĺU VL ٟo3إ rYxS`ʲaTb'lt%JJPy9gew4Tp!%jٕuP|_ur 9͚ @%~0.:s KR!S4O { XNԅO[K=FFQ{Gq9xŮ,6ZPs\ΞőOel訁#'"]ϩc{mckrAC'aPP,okm2(ot`@>r2tV 2T[# Ĺ1ƻ#M co8틟~D R1@RuYЂӦ>!@*ԚTǻ̍.3.?l{@/^ k>Ә #Qo=R5巁W+0`(ݼ#/S!! F0vAו |tX3(rs*Zznk/DLOï@-diF̨_\IѽFKo4+ۍC#Dw~m̾_w()UCg˟\>)74(Ԉpg,1k*+m!]6I82{l &K^S/Gi@ʯEܚm] JgvJ]dn: ac•-0g&!ɶB㓵^i! k2},^7ThK2 =M{*b}GU>Sgr̞tdx\ʍUK<0珹1yݖAz]y0@|KXдFvObO2Y+$B1+ংW(7kDITޢmxmb|!T`eY8AcMbI=K:mOI&<^wQwػX\; cYɾZ>۸#m (<8M+_tHhIJn`a8Dh"Si.I~*`PD7u=VE0v 3+ZX9"ދqƌi -Z1?Qi0_PGZXO5'਍1+Q-*0_&`X$ c"Fs/9N&^'"g-qZǭ-,&e,IJe ,~~; PB_:s(ˉxm o`j";p9N BP~r|yWG!oT25%s*W24W$Rߪzlr*{oDhl GUB) -jQA]DI!y ;[*V4R|{fv]W^WyUc.lx٦͊l؜l{̀ a O}W>Jq]`ۃVwnxߙv =8 hA_辡,qy^tNd& )O<$j6!}]{YL(=kNgxoPf^P\K~Vbzt{*"ύW#xi Ff[9`ޖUJ?-z6@~HIA.:X)~Iَ n\M`K\cQCotC͚0=*f`>%v[+&JNjz:4kq %IM [eǠUEa݅#恡{Բ挫;)iT;Rw]VJosLI"pюAwnnU@Tv\ Gr>붞2]g)k\gG_ٌbz\ 8-f0TKd̦s!p)ꦸiis.i'ͯ[Pmx g8b>Va *ȏfA.Hô4.Eb!%C[TYz&)fXEXX/~KjwmZ 8|Q&& _MC(V]t_20Y&Nh\VASr-HZFỳwF/ [-D`AnRNk~nO; ܀Fo W{\ hI-<,EuC`" KjKrNO|Hn_+Ez1` H~V3#J-G~ *o!"%&r6ǷFLovA Mرkr.LËx)Ng 3:NAAq1fV'ONcZwJ^ōX%uXQx*Np,Ωkד(ݯsC9S9Yܭ(^ ,K"™in#Ry.k楰5™BGwEjW!# A <ij|,˃i<5~L`uO'W{+eC G5BfܻagO,R\tð5rXϭŁ'0mOÀg v)0 ֐ |1^E֬)cuE0G>XْT&oD5Pỗݧ⾊tkgt-: pǚ?:NQ<7Ib<7-S˩d2@t:gU}NT;@E(T.z—H5>rٹ`}ԝdΨ~ja'XO9$o4eo;4'ek;vU- MHvK^!1JSα+Q8{\ *( MWJUN~#IWGozӁwSx3]kI?7F$Z`vw#Yex1n*x7duްlGkC顟Po\{h_hB.hltO_=8 b$Xe8&0svC]$Xʙ-?_J 7 V>+͙iom"gn+cJ2$|Jaq ty b t7Z43M|YaꪣrU o|m6Mt&-d!@6j\WSeH-Dhwyhci56–TspIBK̢ gh`i4%ӜR0ciVYA݂ަVJ6{+Ɛ-fQ0Ƕ&?ړ LWKI\hY23U^>,%9NlFi!;M01\ΗQjN-c9:]a"huyur;KYi wjG#?KfU&]䚅򀦬{0@rjfo[1 hXaAqCl懘H5F '#'c黓w ?fSƒlx(OK#r2_e>v-i:Ndo6_Rª9%*,7b5ak(rYki}4 E+c2}D QBcW1 2x WONB4h:b3K˝*R K Jv@9 nrJpl!/|Ϯ4zxw_%Wв6AK=29Zf \3ڑ:oТUQ¬6Hq UrQ=>BZ$#; {hwXgKY4P6xjJb>CШE!=I ɘ_MtO H5Qhbi4 %x:؎Y{SBpO4w㝺RHog]M$b*{`VkIPڏ6Xĕ.rC#j<u] 8yd>h_-_\9/LOM}Jθ8OE]GƬ+9㾂V_uC7,p #a + hE({:{> 084D2|Ւ,@q :C^Il:*"3ԔdNїͤ0@^lcyy3c 49$'?Y,SAiv4iDX0~[؈;lw)r*dRZ|pz 8S pߦꫪBo3פ!ٚZKeSZŮuCNVU? w)iU8?!-XnM3PMM]k>ߤfĴe%Ks4buQAʁO@ x)dBu Py(\N 5Ohdeq'.U!q vPpчyMe|*E.p$NYKH{579vYbj;KյB0/$b\Pjn^YFXޑUzj71z ,+Km|I˝AO{O+6J=ʮDt!$*կ"I T+!?.p)tDʸRvjdc (t2߽Zvqw3 5[Qyjw1:czmc{W8&tCa` B )PI4wL]HЁ!"Ay@mƳ<D wp:Ң8¼2W!SՎB\Dn?By^sGO9X1P(P-v/ZA'IWyF>R5ʑN!c:IRE{c$8;7DP;0M4ϯ ߓ #L0F K\J -W}9YAJ5&+`Va~I+o{wŹ0ů5l{9@=.;E>ApBK^"΂aЖv QB>GQ CqC|;Ը6r A8M*?0~z"]k˅6No3KyoW[a6pzw @j!~'`^rcO,B Yl`]!oE _m)K4`eDOџw L BHDls(Zud]\ozHK&0_7aEDZ`)#'rD/s^[i 0'5N=n~COq<Ud疹Ur@sl| 5\:$Q"D cVIcvQ?P箒pk%Y11TX0fRSIΪ?ſW]KA|űϭͭ>,I<>?c@皮o|:5Yvytj%xz#cO6-b<`EfdhZjӳ.-@5G̼&]_V'2dܹ_8 ?Zj!2}!4T5^VL^P5Fҧs ~w# 59(}n+Ӿח A(GKmYuC`_ 7p'EC !,< 5@[VQz%kt7C'$ nL 7XRN ]7|p&{[nԷSp)BYzʠE>Mw! 1ywQGe>;d'7 1 Bru,~`jɦjTK F埩G\udxUhڠ|eL ?̻dmmw%4Gp_ g/:ƸuSLH 4ծ!e]5`]-C nh}pP-C?^t`аJʈ%q@ߵyg N_)i%z?3 &MBg|E6qVNx4$KQ /M^2:7hƀ Yk0Fh0G jHg#?O}l+0'ٷ4 T1E]Zw Khr۶KCcpj ^s9Z#ge5 n/ni L$y"{u\kӣjʨ7%'ɷqW;EOʧ$PCuTi~؅{ 8Ynxq;aXA$ny@ʦ·pP #KW.^d8=(d[hnibЃ͛ *(_ SN*/_tst[[0+59ίI2T1 '튠CrU*_Hh𿴯tP- 8!| R%*KSX CڞwH$7vq`ßdHPU|J-D~wdBN.TqzUH.Āo;fU*LLKUʂLFX~{!\(ْh"=q  9Qlc{, r rp#;\Ila`M NU[PX<'ON:mc߯#7гnVrj<@x#QVwe%)-”U>գS IMD.pnF)fK㐦v f}A ~ު421+W/e4~Y-Q^#.g|^@JS *?Ruh_cuRզt/[{05*5#оߤ.HJX ?|H68qT{>|o8mRQo78痓6N4`8;~}ǬVZY Caav x]+/Zk=*)~j>:2$jEP&k}uè1:H_\5*Z\=]Lq>d \.Q_<?N:#]i8ڼ.JQJ%3D48)hraϵ!-p\/*(r:WFHIBTAyɁ?ManRpD]t ^z#TPsaU5ȥοRĠ֞0kq+&3ᗜXJ!g,g3kޞK y"W RŞ ml*-2}0;$WtcEeԀ ?q,6 Y22wVAj$X0.':@ E@ )Sv6'_O.u' {? o3̱_.q/_LO+% t H#ӏt6M1yt$;Y9@T`6ҳJl 솲CgVNOiO\A`Z[=XwT]D~-n,0Ki⌷|.Bzy,mѻ!1X[Çd z|; ; AS֥\e)O]D~/ KՑ͔㱶 &iDbFL=.1(7mV?Htbq8+*1N|=4IJt4 {M^?+j)7& zD2;,_*K/Mk<PZ򈺵Pi~O4xûA({R!b쩤ǜRSe(4G%ۣjgUT$/D%A&'S߫3k̹J)[ȃ?+yHAL6^]LIqFP5gm{ur/~W۬,߇{LKvK͌gU* > \du- ȸ%^thuHOͳ b]SΆ!Hn)e;ݼam,讑2P[GZG3UD0 V5\kq:sZ D0Bj"w5/k ,))Ps5S(&{+6Q8knq I~ 1!'KP)goŒ_ҍo!g=)lǛ>] Ґu"3!cNM_^oy3iO gèJmGܣ~;( 7SԤ$yLS_,/z@E1(r |7!C5,Dý]=ԞeW7^?uQ#t8 fХ_E ?-J>bPGT% mD AwsF33@Cjx[׼(B1߃Hiд պMő$XdP^NG6xYRXOj'k qID-ָV}ю[M qf>(H|_["t9KqV >IdZKJ8qE]I2"huE.;'l*/wE\j|in<oHY0)of>Nv/,PM e"$b#]LSYTH/ίiN?tgFIfZI XKw.yPdvў(fC0xy)J9} q :y U $[ \~(TB[qu4<-XX%dx% =RQ9^n;t]%@C]=ɣ Olx/iSKp$uCP$h!*Lz7f;6Jeu~!VI>n%K$B> ?Eu֧/)0\l8A~%ࢦD:qhB 46T;d^n1 x&ì =h!0e1!&c|y8fΕEn_}cǔモÔ G*߾,{+UA V@׈)dR1̺q}ђg:<''+n&mdWfm?ꏷ61zJo&Gb *w3+ukRc΅s<p kZݘwSS/y82x/8q9VWSTϭC1csħg81Hb:kUF6ĉϼ\2Ez.8uya:Nb_PFy{B%[VhK7Uo:uR#}ى\KF&ܫ? Wp@a^P DNSjSLbEbB9r(KI""]O!`u0!K屶<%Kާ BSE>lMPQߣ3 x;ҽmh nL!e(ڗ\Lռ1,h3OٴH 3}NlzDc2V| .0~_V&-M}rtƻ.ʪm(B.IwN<[߫.}a7]Xܯ6#Z#њ7%#8Ҩ0MU1v* ?ձR#Q} lmKRy82}IUQa*K@'yy $X_KdRƀHԃXF=a4-0E[Ռ@um~h"\n&D'O6UK$b%Ɍ}4_6_KKȹf fgMߖ9T&PᠩB-6H_l2PM]>;91q3';@:WJ҈}p} Ր؋x+K8F%9y2˲'Zkl%}r'q2WV[7jsKx+G Q `P}}mK`3)m*jQ.QidRksSiGcL|=ew )|[C؟GIecwx53Zz%tƏt9H[}˗:Hp;,Y^:u|>(m̉*_Pg4%ZŪ+Rɚpt>ȁLN/=Nmؽq|0OKU"I7Yd^#cqLRYG/9K.nF |ozi)5 l;?%9)1:=C,C"~Vϥ\ Y϶3_3566?;ȋ9Hpy{ iEA:4MY&(9S;%ۊ- Uv}zKa5+,V$GHc- 4jbMo|T4DBFN[x^dJWX`$khǫ-:Lf]_r%\r%Af tV>_ [[*&ݖ$:."(Ř590}G;REـ#^%GˆٗΘ,lӃZ1S?_Yɕ]<v'Y"L] #dֱړ!l\/< _ɘv3lz}>kj:~ -u sQ2yk.ϗ" E+&kwZk x;;KxgߤZYWt1&+uA+a;d^JQfwݔtS%!3yq0 D{/nuS5>S/ DCNwuE;ءȆK]9XMjǑlܬQC!QM۴5 hEq Il>Ц laʼn">H26 :7%rΡdeVuVOmk!Vf~k|-ƌ?T)C⌌0BqπOP SYe95#d2_]݅8wE%/0_n0[,ڣFR-}_:OSv57Z>eػFzIFBO9I~uB>Y?joMJȕ?Qv˶1|ZX/&Y+]x]Ib;wa՞O\N  +j,l]J0uJQ5>uOʋ+ u6T}rl," _C#[t eT1 M7Sۄ1=Wn"߻#‹+jEOQzA5[$6#Bk(G5?֧;?n621瓙IْCRB1X~\( e0cw0iͮbiT ǓVx}Dj- S SȬ-B;rG6`4* 'C( 'D/e-\oɍƱ(stfJ" l)GlH%ڳ{`*jhHo*0lb7 Hˠjo<šͲhh2D;+R1B f'}} lI^iLp)nubZU_ y M!97<EzOZvH@,V x}v5saf-X_)d0Nջn$Ci)ث[&Z#\;=MYTcr X7L6.7)`8-}: 4z%ZNcjrJylsð`}nJ_DZRN}z!~}-ws :wx'՞t>"JlLDBj*VI#MΫ+TSJ'WHڔgXi;l;iU2yd}GScpш- yu]`o] $RP@p}KhuPqZ'|VOׅhƙ0U"i85>[}:C={ L '^ e-PLfn(87NXpEJ)Bpe?eRݓpr吠ˠ*#/.JCq/ClY++u]nO8('q@nbam⹜JS~Z7Mډܝ*qQkח v,HoڶtMzHg ^ucs+1)`}u>d.5'8g}0Ȗoᦵ9?ᮕoŝ'Oj]bH<5UriM6?vI!WJ= p6Kǹy\&kH+'zVG}i?6/?̢IztOr mK[aXߎi# uj+*uCQ G2MPū7|,#C c%7<cYsc!etKOaert.\8q|XS%NBg_YA*#qJgc9N'6 oTUw6]W âuVѢY]s蹹$ݱRu[i޿VX;thӵM8kYP6FJx+r#nbUa+Df. ZEmK+L^-ҷoAFvd3.NuYb.Q!mcRD.%sOnA ~..+m/JbRcⰱj/vO(cCGOy9╽l"[ Jt7׼A+Cxh^*6H%{2}Z+㻌q]` Wj43vkwDzTaIc%as;|rh/clMi<;Q.}gf:*/7 ٨wK _ XqזɛEc-/rnrvsFqf@卦3ȋ׶j6=jzpPk$0{KGw*V0я(uQD:7($EgF~h }^ {E5}@ >o:T@nNgֻ~sw+=   a5>d `zB!;mN(hJHdvOo@tVG%yn#[!4ѐ/.M@$uiPI<3Q_B/3=ZDI ( J5ț։ @3{t1gq ~d`4q蘊\JFug'LmkGvG?k~|%AFas ٞgjj$|X<0.*9D+'&/z t/ slooJu3'kfP`E[OfbE`4%zpҤ&7^v <4Vv3Мʷa&xu\`t}|<3}(z\ttA"Aos}≶ i3EoYPxt05i#BjSH7落~ VT4/=geԞTc1IȡY.כ/޵T>ME$j7@qL oA))#[7A2cΫ9&}Ovs7H@\Ѷ(6K&8w@SȃX"U"©rId؁gg9'4,S$1~Eb0 ʈ#)Oz#6y\ w1s{I6KhPl`>+r<t-(bDX9o\uU̻Íyk#~\a&^j[_)`hkbmusA*/FCzH|2#+6_#F3`rHe%JI)eئ-L4 G1Ge#b+s2ѴW7Χûhb`Cme_B/FB3%ZtX^rJ{AZ2$]D$ q.4a>}[Hsx?Fק#*^ؼRvEzi>IF2+m_-=rwJn\cru{7wOb9- $A#fPL>nZzDjP'>L'0[)}ШM . K09:B0q vBo?q"ی؄36`o5̽7 $xC.aK`-w̽):>TXӐ=F^'M3x4֊$VQ> ֧_b\zϻ< }>-ޔݾ34C=qGURzx m-hd *OcqV'ukײwcY F'A$S6HOQ%rۛs!^IWnSvT[*o!%.+MM-9Ic8/&f̑H'H2,yʻT;=Wr]k>a݈ %sxuh@\QdjfJEl@Q_ӡ/ vf"$.D(0mWSޞG_K؎R??3/C Dk!ּq~xoVzP 735<@hc(^Eiٵw唳ti2!M}tj칎Lsv3Ë? ㅜ)#_, V"BAT J'Ypu3q{Kқ-u,kcN!}~%R*9s2KglJ,8GJ hǑzEA ? 18! iN,¡_CerJoIe`quWULZ441ث|F̝ ev\- gYyu<$O[FUVJ_r)8^֍c~}뇕+ /%@Ǯv"b-9 ε"X#q6Cgܟ7expNNeƞɈqq$5`sJsCz-lW?4զ6{J@LV(dWӜ1'(e"]gΊ#6IHШ(MˋKmLQfSX/tB1 m Bp_Q2àyWomjP'X3 Ҍ.%Wsc.sE'VvCL [a>侨FBY:"YmdKt#Dp-d_d)I xB@XR4wXj+< #;͋=  __;U|7;Ijau+BnwC͊lq[zTn PE:^+DCH|8zevi")m98kF&̏ pQݗ.KÞtȟ3?KMޏ BiVP#5I]\I|P gk%SՏ(i"%!i,9a.uG Rq>M5.Ӻn4utm8p٠C＝"mz3x^i#`#j:3(n}JV3h*}h2}ĒuL|u 㵅=옿t4s Qt7; t? M1DCD*t`/XY! e Ƭ7ېyD">'HrPOӫA+C9v YDZyI|Uq [_fQƃA~z f-W)4SJZSੜp辽[Y2H=8hz޾[{ӜByDjM#Փ!a^v~.!gۍX@,d2a#67M7d` asH`Q;\όÔd%01|Z4&gzA6yEqAR4%{WɋzSyyvCN{*I*GZRy!㔄.i+9chzb(NHg0g UV"֟K1dĠ@܋#/W:8=e [Aчڂa>dDjhx7~uF9Rx7K2˒oKgkjY_z8לGkeT[-K:ϔto2\P]IY|TۉUW]+NNOdď@'uʐAm d ٧r>ZژU*kŏFׅEiyAyT@F}lܚ,n GtG/i&/g'5tt)I)l0oS.GTǹS;XЅh7VluW:観ۣcM+W<"; Eҝ+#Cw̌5&y<67uҊ0zCQ0gqAwt+Y,)HmK;1ݱt(J:wI⪇hq0*)4(Eon]WPD %"R`_PC_wC2J6 |ĽRfOtKf>)|[g3'|t?':jwSc JW䋦*7Ip6rl9_*G\&3;M6X`iQڜ " {AȒ+R9.K_Cc`X#)L@rY_'JR$]v~p׼ gc3^g;  1fPeRx'a*~[^o0<9`gLxn'c.* mJ`nMxsV I$ D r%hOX]ws5xItdśK!m:mK+l@a @oa8Dùw+wsgk @vǰm5̈́&'VGWDh]4g^xCŸVcAN*XEf~]M\1.qii&Xg'ٳWrlh~.9G">d9#2Zױ0qItrqMTu]0ZF< Yx`]{;gPQ24ZwSN x1-w~[ThP@sYNڛot;B oD^sR2KN8yOul #ּ@*Se>jEZ|mO>eՕݤA,8<)?FCJpSA@Mg"%e ]*WU-է- }esq Tƌc?i"΀5u3eҐh ?;B0zUZoz\){he@x3Pӿkyԭp*sq+5ynnO&@y 12Q'u5yGᄜ-r OwZ x#0SN/)2n{Yu(~I=* &"ڤH5 p"_n!} m!\:#,f(VxSE4DmS$Cȓ7tAfTbOg,wV77 ] A}W"+N^J]^C2%=1E2%򿑉~e!pϛ($ZGGf%9[/W0 ץ9`W1)%|* @2N׊~-&%N|[%Li"P!̿*^*a[U%r} S)W9 lN)(C޺Wf~*S{:%=~:ư YB8v| r9AX6ȭp[Ӑ1B_+u 78)FI;IDjh sp-z}{N Kl{ozaJ/`Pe ݹVO%@}l",@@1>*|-e ]?jfT]6kLXVڟ'JWt{'#-`맻w?tTlE6-"LAnY*{}T_K 0{lُOm^&ěC tK+ҕX +E{V1\{[&bi1 `J/:ScGtv͑ߔڔ,gl$&xΠkBK/iW;ч܊{TGxn`Rj3ac霱NOD ^3wNCdR2xw7 l,Cx<fT*YH2ns=}jOv"C Ye.۬DP{N&j1Y|c-_U/ cO.悡eO2uC.SAbKHxÏ(}aWFmSCe 2MP-pS%6`4rd[f^."o U~zR㩪=ODZ<`G_^0GGǏ#ɖucW HxlA4WRNE6@6ZC~sDPZ@3ǒQs.֟oSxAZQ3xM`p 7D̢&ɶP]4BOG^ki`x-~&V1(¦.bW7…s9+9 6lAttgY6{7|ỻS~J=pHDSs.caF~e@x NlۍT.x9>Q{Oe5w.V]æ? 1%n J+7KGɜA +v /rf"S65V[["Ў@bqǨ}$p^n;vՐD%K+|;(NO\C%q fd:-ƞd˫Voav)%bH,e;1F}p14\<|DDU`~/LʣzozuC [:k 3긍}t*TsB#ekq-&,g=L8M?@)y+U`C)Xi92L LjAZKFp2^<CpR >f0(&ރ%CѮO}ŋ:m<>eַ(4`CZLZY+<[l8Ac$/tOjQ޽M(EyȞA(PP X|pn= N`~v@Wo0}w_7_5)s5&Յ LJC;ji1-/*ےB]/j+fi2l`6-9XΧH 1;gz6>_2{/Oks>NYIP}5]-|PRAYJTO"1d*օ^ 1֢9T$g*G,ݜDPX4k-":d긴QbwHkvGӝ̧Aa]-ln9Hop &H|j݊ ZjB}Ƿng<-WHbj Dh$6o*;+lFPԠ[o} 724b6xkq3]@`",3اQ ?D{cTǕ "ROx:cgU<^p\sePc9qkxҌdFR pk˸40gr,!N/Eи'fUd3t -sB,f ŠzI68wә9b{ruxoWksPBHpǵ'1yx#F|>qö[T 8*m[j'TB:Bէ_%3`g!Ak~|tejoVVtd}?7IIQ87p,=<{ER)ݨ$rW+]ΨE릭sn >vEy *|ֆ~/ćfM h-fN<^ۥOlٹo¬>k@E O)/ ~rvŏlLW:7h9t%9"X f/2Tno+ISCEaE|~d ];ԲTa7`X,/rk{:~8Byh֜!dPlB}ñ߆~ݑ3؏30kZh \#{Hk@J}ބcv- bW; sl+֛_L5'9G R`p[%/9x0kb6P =#ScC2,ViM~jKk,3IɐPb.R\ay_L6<X:-I7e,?{FǢ6T QVtFl^gWܝ͛aٳ,-nAWac⟿О`brϫ&ZPƱE㻩s)_kNHfõe}-b7xӋ%GawYUS+k֥ULTbRqXV9J;7D&ݳ7Y(/?ʉJ !r:Oq 9ESc&κ׵cFB!ȫ<߇A6˘oYФ ǻ2̇Ў@q90ρ>8ptz?f@@ze^9ղ Hespފ9w")G͆M3n$Gi T:1i$τݏ Q$.Tᆽ<Ǣz}}̊M#kpA#um* O<@aWBZ:h-q4d\(t{"Ls0 [LmU UAGy%>ıBJ5PӤPvLI}?K Xwnɕ 57(yh$vL[2 ǔ }l|~ECVm| ax}3xҗ+lVLC(]D0yq'ylNMCUyY3j/9/_ !+>t&eQcn`C"Rpm'9 yi}a+$o~2jA1@2m-1Y{b/b2wxP;< ^JFS4(s6yp@SSB=7:$PpE\Nb;sɎvT7i&J`U1+3f57+GIsnnXU rU~G?xe4qK.!bQ@AJ/S")~哢T ;jRў?!-~tU$J&]P@NgDIb,GnيʽzZ5vj@7: Qzn"0*0%,TzKdȢv\rz93]g'HBt5 a453 ]XR1 & aBb\lІaYvYzV6r5 F9H)w}Sa%9Hg ?`WT/( ^ՆHj3@;ɬǗٹWnjP7\PMʹBko(t',]+)ؐ0yKYwOLA'_y|&vG* a =q7 4؄$;ї"Xh l 7&wu 62D }Aur[0`p\"8E禮Bd s8yh]i٥$#+ hgHb}f.H'W?hGpS@ep~Ƈ,%U| !z][{!0ŞmmE.Tg~V5;F*'oJ-ioQAɓސ~!5/{reX_L[eF7_43G_O:_Eߎ- $Ac62:S>zH|ȸ{מ8i~ύr[ #+E1Rs>ӛq..F:/FPÀKzF|l,wшSQ^rUY|EvHx4W%]kY;h\)ds@ڑCyl[W2p2@ڧ];YIJs +iy}  jVVDl6ctja#)N kM) ,庖)!|WC&7#/!xUDu7Lnxw[XKd|Q@d,{չ/F )aucCm~,[Q<{_imybuI8s1,RZca 좀Y;V$wrhe" F+3Hvj0wJO+=#,i|ڋa_c%z2r1! % G{k4r|sƷޡrjI$mH|wy<mn֪Z8g8LXbԸ?Ya Op-14FDfр%m.xr6`}˰h=p#-9{c\g4&{譿DEۢ`7sL zɺqC1w\l>6!mU~$ ~_8x3qI8g}&[qTN[fWv ܌}SF6t-=w[d98.:}Гfix (kŒ `Qۆ)C*96_Z:EԈOBy[ZTV zhJ)~,O5E6ݖ˗$W7uԝ+đʩ])T0"_\NvmtT.PW gO5M?'L"A6z"ˇGt1 g"v(FkWzd/~iN.i  GVm1lC]|T0A;7 㡘Uh/ӏ,[Chc6MPH$7pJMJNhWFBs_oP/UC70)D$9b)+F9]j7S9of96t3I\CN{_@Ar"({5w;c,dcg֣D!š}; 18ʪ?OۆDM| zʫ)"֞|xH`eW)Cc(p1wA'6#}H¯ Ǣ3Z6ߠǑQ43~QWc *= [k]ļаm+'=HUf}{`RѺ+* 57ᜬźVBrco2]t>R[ScL+4?r'&LM@l}mDGb haNp.34,`?0O%p]Hd܊.VD =՝8n 16,kۂxkD42 ZmpxK\ pSK\bLr.#t/7ʈbzh'4bޜc |(赅Lkxt5`WZvLB!txDAAxZ)idpe3x'/RҞr3΃naDe/hdvj,Լl[{bpF/%&?yα[?9[xMqR7?M`=fMWk{5G7fT߈J@'&}.„WCm" shH +R6$vJB>mE# r1^2\+K),Jk5hRiuɃ⒪ppSO&>ro(G~(J (tqt|j-`g9= |5m&ҕ} gU e8>mlj&݊HDoٵpwL;Θ(s`z_t(x䫥#2 ~]SDrj_̆8 pNDWJj!]<|N?=9UG((PN?Md"Blh>ʵcRl9b.,ٵRUp!5lǜ6h ڔ%ػ+L-o^L{ =Q^6 [@78L똏hoE-I/7 axJ˒s-Kjmr+ t$I0P>꣥;gͦ 7rrNQ4`87#AVff)_+K7~k TD!yA"Ěz m9Kjǡg'"b8KH7IGqgtpO[az ab3 .^o' mg;ᆦF;Bgpew蚪^wy{FaoY-{8zC:&%QMI0ρE6Xsgz8xx]A1t}09^.H{^5HUZ}rCן$G{ KcJeE*N2&~pNE@rb6/@AŴUTƏshz̻FܫhTuוO"~CnxPz4895'˵ܢ _C^Ж8I"2Aʨ9yI%YwgЖ:+d nt_d{jA)~ExQ)"ӡ+MJ"[j-lXEYYQ?Dqkvd9qrLz`+?l.IBv̮[s#̆9 x=ڑIn Ɗӈ泍˃]G/șW\mQ罢R$&I9H1}7 $? Vt_Q7A370K''%R̚%O+&)ąlLvv9V2(۫pB#%%+:r][nY/o+` \CF*#e*hn%<\355GęPHiAXUH-d廌ˆ= paߧDpF@ЙiOJ+xXZͿDc\! u:kCo+q͉Sl=Լ?\{V-{>zO+[n 7ӟ h:[+1{1^,!ţ/!+ESšz/g^إPaXk=A._Q-Hb8 .mD%wr!~xT 6Znϫ` O_3 ז?e9 T29,棜v5O}_ȺԼ  j|1SY8df ub_b|8B5ld8B.66`\)xPEј2@a>1Emm/1e9ٔ S|pq1tITWk28d569}P`o VX5av_,UC彩ِ`fep+Y=ܞv"@A vB-ӫU'H LhQoFNBNC/ ͻvϔ Xk}1'p#:_3U,<)/3N)*RClvf"ՔegWy>_ap^ tF\цq}^U5^EH/*|B ‰Q W p唻鈣L z w~/^,|TV vA_ovBdLn #!fi +BH2"@1nöE,e#6ŒT/[hk Vb',R 6A0%BstD4E0-G&?ɋIhCj)h1SE7j %q L L;S ߭%2;k`&'{R HHJF@q@g`cPXbA\9^ɯT1Riަfia 6֯S#SH < .!\9AWuJ^G{ %+k)L9_)hM.Dxt%YS#" $ٗoO4IHʜEȓ sy.bA x66ı赆0sA|1`>’mM^g1J$~ux Aj"I[a1 g,,pv* C徰C8A,$Bin zd gEĢ ;sdkIE9XB0z2Ncbq4F$Y`UZ؃/^ sli Rn-VIxa+k#Hq ]a&g:G&]?MFZ rZh"EF[ɣhT}HQY &NBSKٹX_BrXuN Nk$$!pd+,(f2ĹX$'0mC 9 J >̖T8j{m3։MD8MXcf nLrfޜ019ĴwAޜ.YTRc Sݏ>bsMT.t*m(aDjFb*}OcY][륃B.En.ݹ-Mcut<.xsWVS$¾<`>0_xS҂*&&ZowNu( *eK+, i#01[ Ee y!FL@8UQFJgNWn{p.'= 6MfZh6Oic=̷ȯL>.BO j;dUo2_̞)R)\(SB 䪮g*pUsߥ)z35I ƶnאU)2H2ܙX.}.l#c*$ɚD"Ƅ(|(Ռ7@9L3}׌ }='+jUU ѪhEmյtiqO,,Y-OӎEm˳h<њnU_h.ܟ޺~uZ|OH<lȰv0:+!mEsU]-w4) x#;NW4X/ pd"Evr%ۣcHj/v~HYs&X0 KN5?Dz)d1ݶƃrN;@!!5 }?کnЌ]/Af?f6%#cs#;_&I_'3!ݔ_Zp9S#ߑІekE7K:G/ƊZ~eQC3ljj[bcΊ;W굜mrM?MU`xuZ2"6w5m5j!Uc 00nf0 H=$@6#)*uh{̃kr( WK'VD&4܇{2[)K攸EB&гPE7 Ǔ)uq[LwmV'uD%ɔ)`Ø#9zy>iﶬv0x-kԈ3Sm裚Yfcv.я̪peRan}3{#M2EG}LOI ]dPYnnËҽ6ݚu]"t nw:MR=}}w?;^VϸQ^u"i1kar>Lent4֛(`q(l(SiN2Uh1mZ`]js3wQ#m$j9ln\EL@0[>Lw#o^'a m³VkO`d?Wt|Trqvtys1 mlt3Bk%>1(h k!\HLS' BbK9>k^ I@g"Խ5VKQ/d冏bb uk& qњnd!+67M؉iL ]ҼG=cՋ䃹Bf3 61b*P+&"BDiGB"_ ijdH+ 34Kh`]WMωۗE"p #/pDn \)o09¨EnfC@6ęCs (jZ.SKJ/49_寭W2iw)`;mAzR,!D!5Dzc@d ,Ζx:H=~3J>3+G5 }!a> WVxΆ/uk xف&\wMJ ĕ.$zlõZQ]Ept04 j+г?r5>0}?"$xfzҴ$OKUYfʾAS`Kz " E-!"/<̪4JfyQ>8锿k$;<SXx½~uAgjTh'!~%#tV|_Cl)s uD.kM1B"ıde0GAvK08p=!_$E]DM {^I1p:dל޸&vi =D`ywSyۡ Pl)@e{kB13!ft@po|?Z<9V*"3lJIM;7GrĺǏ`\b4مtbOyng=XGszXY``ćm" %QkH)^g/.MqZ'ЗY]HP1{BǗ&t22rfufv;tV= V]j$ F Ac("Uq}VS\& g)mxՆx15DJu!Dǖ:pm`"Hէk(6 eNx?_N'[*<9M;*>:wl ޾|j~E˟w2LS]F x4>,j>,l~y,Ɖ=hdXm}v8m ej4:zh9 ó5u_pdUm[C{tL3"b I ɘ":C~ ^#ۚgfBzvchH?AB;y2)#݇{ g^k~d 0߅7̘<=%\uk[:t\oj-\߈Ұ`.j ˇU9<vFZP$ZcLhtLKlC24 %Bܾuߎ3&|.ll8tۣoAU}d\ )ПUA 4,36ׂ0p:*wZbB2f)G.U/2W"DP7J%D .v7MZ9M?3Sy2a$2_ uJxc (?)?}0UR/sp6p@--)k"$#Qcpx;\$#٫Pm[ܠ?CEN~\^u|FF?!s#@bw pࡍ A 8;* $A7g4'H|{ҡ/vt&vS?3r[CW;Ht-r ̜ R9FP* t: 0]=W6D ?;SP%D0ѷ ۔GUt'VyԾv P}arpO~\4v2HW-=I崳)_ptml0`/yʹϦ :?g+Ԋc͍Ԓ{9OOa[Kw vleY&b[15 C\+C F-؇tPmT*\zb[eM|ѿΌA,Μ Ь1$k~~k>&ԋLMJ7(6*}AJ0VZ?j8nĺ-o˰^/[bobHOewaPIB Ua E@x l{_mOSEF1CL"g ]ܫ:6V;64H>D1TNMj*6\׃ )Մn4vAJȚy]ΰE/gIEbA&vڑ,Jqx"EoOB龬@RKz_pYZ&~]]c.*J_9:<$w3lKL)٩vRHA+Ǧ-< suDtGw׃mL&%2&̖ciX w xnj2~lڏҙ7WJ`HiN1)fx7b9"͡p6 <.+LgW-͛SЩ+m]ܲI"2ܳZDfNAlYd@7Y&LȽ+"G>29 zR<*pr+떫+*vQN=4+{00h"^G4MP-lE;ޫa{_s1)؆D+/h[ޱ$!5 ppϴʽ*cz9đbSʼnG<\N֐e_]t ԣ_ 8 V)=+ɲ.G8A] QE$╈BS,,p>BTOҰHSz|GUZe-0jhKJ ӎG7)lpS|m^FLll&{Ҁb(4m^hUTI|L4bF2F⟝W\4\vB7CIH!Ia՗'=EI| nX<˝}J n ;t4DdR`M7ɵxjY+[zv>[c򃩽W~s04S4]pc^~y}2H: E KH8P|CۡyRجJWj=룕tj^9B㶬'،b OUGd)8a@e]?/8|5axQEu# Vpʛojp:LG.:9Jdl 1{_Y[o3wX-GnwnAk2F :LNoc5 SY!yI=g`4gtGЊ([&%`1ryYgo^otNI||=> څr&LMt"Ջ{TS^pJQգo ۤ&5ЕV3V<=ը&TIɿ{D;L-VYϽAm0)clB"Z-zurt Ǭ7E5Jm%4V0WgIA|92IjӘ#4v8 P_r# }ߵHCw~Ё5!u٤#ı@@ maŶg=W G|nFXi衵37Kد8b&Hi آkW 8X(/iZ>Mhʓ[G{p*s5I!,"e ?1vvRܖ|Q%6?yF08łIT#9QX8/!SeՊ5_i?ʆFTP~nܧKڨgK>M7T笿# 7 eN iS;_;#6fٟKI ?I[攍sNjiɛkxyڽdȌBsL (A-=J-~R"+-{]j8e. XsŚAG`Ch,+9~dgU leV#:z=k0 J2PE!2C-Œ NSW˧.'nKR# 'ŵTl3r=YSOP1@ *!,oZ,M>#:_Ɍ+12Dc2|NHbDWNqqy">F~A?D60ՠ/Θ!V!m;?U#=YYo\_hNM^J}ǘϧ\ ogF("x׆0L>]j$*-\p2*K,@{NHnU#!5V! C6(AKuiqih8ˢm x!$ʾ8N"%վ5S=;lH V\Ɵ\Ēq)a̬_DvGJf'T&چ<[ԧ4)48KI50Lr̰qqXBzx)^܎DʧQSZ(,˶Ͱ۲ KOlƆshkj{|xٻj7  5؉}( &eQ]ǎunp9VYћd5?-Gfr0[_ y% y֩M/*+MX!]VʒmPX7̢iftO0>>> ifݜ^t=yA-ʳ(=j";0iwkH tA0ғYޞ#\@#xVa<^i 6.52fnHOzSL񞧽͒Hcɸ |Ja ֡2<"xlcVd# bax#DNs̉JhNbjrF+މK o^v֞vv nkyYC#;fHV'G}h쎟 iZA{A u(կ[V xG]Z? UcT:& T9^f2zq(>,>ªT n#=M6yͪ,nBPkPvTTkPJ~@>]*x:a)CA:2fV҄VzFypMʰ j9p@aw,v+Y@JDؽq6Y*/f`]?wۼ}[͏-GiEWҭ%/?wg +P'bxg'Ԁ,,-x#uZckS|:K1bw? X' ?Ÿ| ,8_I7P3s\+bQ9xn+k5Iw' 2tT*7> z@܏&K$otf5׼JHn' ]g/(X%*YXeC'g0vƩSh& KbMDt}UsFN1HEB&ӭ,c˽iC0`~5AQjGLND~"y'ЇF(g#nKeL"nM> 9Vs0\W)  f3EzKΝT"3Sz冈1CVI@ i4~_R5=$tgs[^,n!>~#ߝЃunbBUFhv6owc7^:n訢GrL( &zwQ7ғD!hm?neW\Q#%$D ڴhwO$Muc7VB|LEߔazt̬&.ZUj84ĕa]y47k70 ?wK1K5$8Ռ ` R;`ki5^7쬛Dby.M+idleBW@\Udpaw`hLŞHFtIq_Ǭ [:]J`P<DłձG^>dl&sn<ԅwXN{Vaƶ\;Iػ;r\0#bTL;&}[./;UʡVXR~Wڍχ_ؾhd@JjV7X Vm6~ ->K̖gmiͱwJp#l(7@<U);ûe0'$u:U]Xlz~zmf,JIJ:U[GT#_."#&L%Ud8Nn ZHH|RHF65ݓN c̝l!+^5&Y\9w%z } ^kbh@gZY*eBGBFBuH &b\, yL~sv.ߎrQ+iEagvldΌ[?ʠ:&/;t$d*z&-j.zVy@O9G|s3KeFصܡOȴ2GX9;zu978̒y%dɟue>js;DqzF/Y Fp"ut̩K/Quq(sA!76iw+f ~+X[gY&N"T1!Vx>1yKDaY>o4J b%yɹ/ʣ`9?Si'v['=Wv5 =Z Q`bc2*Q^t}2 1'C+b.FP\K;v2o >=ӫgQ NȈ$Y&Z 7e.+, ^9qr<Բ2VHnp7hk A缦YZF6(mPz^vM_f\2ʼnT>W‡;˳cڔ o|$B< Lmv{̀F0ށOFVBʄ!,}3F޳R$f3gf'ExB4;Ic i4ذkf E,>P!aەS[Mlh:QrU9[/ Zu胜z n9) h@{Cv 8c(YRoJD'Kq+_ XZf3 -/+eD`+|nzirGlf'^O)|Ywh63G@-Fmpg8Mxz9'!ƻiT[ٶq&@*4_>wXtbKUU2 iej)zyL)3EjYKEra0wN ӑ(d#m`fh_h @ C. xmnBy c*ⲟ -U-d/e$˝e _m*a2W=m@ye^x DٓDJ)Kˈ㐙m<Wi}pJ@yL: xe3E msSx(U,Swͷ=:7o`aK7G=t2x䎲vg:Gնl} v*^}G `ÒK"<8-I]uXFZzqBƒ +K;" l0T/ |۱+%1ttj]?hs`WSMlԿ(vi?OUHc!kiWtpG/?k-ڟU̜ ۽yTأy86pn5BT<  >mSA(S@$~  W#qN{}u6]zuAZl2ȹϺ͜=q16 CT^GM͌qꕧC-;j6Z_Ոɫ#A99kӂ ܮʩa .Or]'{YEOo Z*fgT#ƵZAB \|lVPb~٣ :*ƴI"OR \9Ӟt r C:t,'բh;)jwD]{1y 0`qG(ND/ m] l:<:"kk]q! tj3rvZR8;*[.za0Ji&(+IqC^{U_vA˭6|/lsrë~IJ+b鞾9S= qG|?|u9v3\9w>c :`'yzbikNBj>k ' 0hC_lMVq 5$^>FVu?+Rg`oѶ ̶:* `C)y}3z j iRGM=[{FO6BCƌ5|rI}&V7HjL)--Ȍo\&HLJat S $ lqjlLCR OV9\[6?y+{|K'x1#pj sYmmsIl ɪD.v`JzĖemhO!*=VS-s%'Fe#;OwdQgxPTR`j!x9~vRc!E>ʕJ`ѺPb!ÄaOG|8tl?TJgg%Q~GII%*|GfmЪz\KuJuj^Gaa?ݮ3+#i/ #s KREdy_rry1**Hc/)}= g$N '-hM_I+8@wEMh9w[Mq!XTg 'ug*my/vu8b$haf quNmܵ1P#v%@(%{/OnCվM~[ ı[W璵Dt$}Bh:GTPS 4QVW@5?w- rQzwIEڳ1->QnzXay+j)XfZ Lոqt'JApP#GۜF!92=w+ z5u^މBJa/"PijK(ʞa&JRT[+8PЂtTxEˣ߭CNF1іԗ na1ATnSOR!o%uOs,4)+%xG$gAˢvsh_#C>wlG(Ȯ\΋t-OGPwBw*ǑdG/FqIt15D ]e~gVyZ;9MY[[JF\ǘ`8|{G \PoQ*$9.Y̎"Γ+* >ܯ:U|]!V*,De7.W>0[O_at"R0;iw Ё٠݃28DȟORT]JCSᡝ,NEMz?\M`Lܸ˷;v%u>\i.huC$UjSo0r"a{"uWDspULds{]pP$ZP;F3rqw5涚42P2 EK CNgF0w]Qܧz1fş88X"̫gowGMj{G~]/aUږ_}Z8\&&9h MΦ"L0gpX)G<-Uĵ$p}7P]?RVNq59Dԣ$ha\Qqh(J5,lYsQLY忄N/k)|.*ӂW]ܯ}ڧ3g4F]g 3Dd !vEk ehqbN.$th5 bA}s~H?xX8vސG^1ցdxN(^4ƵKG-bܴ.m$jc@N"'z0m`<9WW>yWy{CNޥFq:3ٲ3XT/61=K^%=wcYV |4 ruC(;|Ȧ`|F<^/S>ve]J]Iaam#$遁]x)_ڏF6 mٷ>Jע?GN,8ѭ&a  VW:H7w-FxfXt.MSPԴI<oOm)kp$6}_/O&JOK^9"N9G5!h|OTĚLpˈiMjyW|-E4CMoxrD4=MII?X5%^Mp]4D!^Tc.Mf70HJ#:눊V so&~ <{L}ƻř+_ԺFo@1 |KX 2Y{:FS02 _zU¹b !C47R|.}'1p ˎUdJQ8^F,{(_B; ,AE7BꌱDQ D2zY`ѝ|ayϦ"s]hk޼{d9Ě ʪet2g\VrK{y̻+w-bYoa :ybIP睒gΆaq2! ^[+5OCH`T$~(Xdj|-#b1:ҲCI} L_&BAgc䆳#*J:9́&uv<9>7z^ڄ9h s̲hLMQo]y%A> T5^r7gJSe}t&33Pt/(ЭPl6G%E>XfeضEDΑĪh\RAhU&ӽ‘1*Tڔ% O'37 6Q1Q=.7|< @⏫$QHwҞ L#ٚ~ _^e*0$!po{;Z/yK rt:+E4@Ϋơ灔,9wzJ$=gqcvVi[Tؐr`y$):*Ģ~cO0/ZlzQ!.%EEmPn)#K;@:7%= \j7WQ?  b3A u\r&_ӜEca!1a~kFjy:l]4)z|.*Z n]74=WW06f\\*7RWF0-X2|+ʀ+qp{"|yukFT7YbwNav= cY}yQ(Ȭ+qK$]:޴Ojiφ[ ]UN`ocrsv)J,B*5Gmkm+Q5fEs?q*fԕ"!QE Uq}2JfluuF> $mQ/#L:q<p`/nd0 8.(C ('<2[G8mš]ϸvt2͎ҒК}X"ls9Y-JJ'IU9CN׬r.bzi/fT?Upt؟}*dǷ2hjsohl!Œ9u(jpiՌd Dc?UV.7,D|W=o&>g% A'[>E2; >D蚈o5ʤzYh2Ԕ8ΆfH>&CVHHI_伄UޏR;=R~Sw=&u.M'*Waۉ2]rfhRbCX4t?%"[t }=#=˅B, INg6dا3t(k6#rAJ@s?ql mI?/_w}uNyw(7." ח~[Y훤)s0kc٦w:rPX[Niw ;_SY ;׀.ϋ\:iQibOGZuư6ǿ7mj,xF2Y6 YÇ <ڲM$Ɨ`{\2j#;VL诀AbĢ?’ wj"(,߲U-*4J#D반jЃVX٧ Jzk&Be7@\#[C]d:ņ|ڑGke ~> W(eĻ:a Md/XJVn=Aca9LwP8ky7QFӛ0V;q^ ްfڕ?=%$E졊xSz+]\c^~XPJ>7PE9͹eIW - AӐ WJՅЂ.?оxEX|:%)x0Z6VCR<޷O;킩ј8K=Od b}Lųo!ԐvnbƍB/]TRo.3v]qLQ5E$$'#S9Mj?'kq3wvi|eiّK߽ DY*yk+H7}g9%B=.=CKn磂}ҫDYQqeo֪t؇D#K(<'RvzĘ[.ɐ;0.V\~ @P1'<Yec; `k PCU"rHc'oJ:x`LMOl /l Rŵs۽㜟1vtϻ&ÿVoVnU4{-wHm޾#w{dGbʦ ${?j\<5>2.#8-R8hA*:a_uG?.k`x#s7w-]}h9T՛)Ʃ^h6܉zyS5i YecA&W9cT$q~;.dԝh'֖MzXy%o7( "*=Ua XlSYvBt?Uhޙ LrtIZ,t뉸쨡ɏʑ`,b2m> QGP0 Qfaf0d "v O|Z+~wX|ﻛ/'{/S3\X[@F~c13*!˭^&2}w/ާ177Փ0StٸQ/yā͟ɳ) \nH4Hod8}Aґb0qf cQpH1[ ON1eduws`vz is5 ['.čhtLlouWJO :t3v ^$7 UGY; n5bmgb` 妔 ^ p "  ʤڽ7 Pvu22>݊ugS^0VpowD$@$up>#]J~`_ZPY1h:tsZE3pjŽ:۠ [?p ^"xuK4XZ)S ǣHmY6Z)=[[Zu6N >edBvb?,۟`7?3LOf ʴnG MgFAV^SۺXO28.Jȶ)g7D* Gs*JNLM~.p~W@,2S(gscA)Z|&.fJ6b._˴]E6e<ξߚ;BAW6nmu!@77^V 0c1 ,>NM!'B/=SX :@ q3u߄\6c/h6Ҟ//8J "& [jª~lX:*˘:,ܱ^]Z`}@uvD-gV7l`8 w[p╖/TC$N]GeQNx[Q<,{rd'#Hqb] &SZ\:bՀv+P6c}eb*=[k$H Ϫ9Ey8j{D[i(!Ɍ*P4^Ʌl"/dB1BeP{Rw Yۼ! <$,;1)xVH-f!Pވ?^q$:<*PࣨpjY6I'6Wz zoMaM<'GWIUr%x}42ܷ.m 1>EIbQdD2I?򜻖/tA(1#QÕtmsc_)GddM w)K9cIA[UFC @a02L\6ƟġQ*ԠU&FK!cJa0k uvfY/0R Ҿ>lddD`FDdR[QNd9`=Ydrq#u ) _#&'s&n[ #(%?wkTjf' ͅRg]<F ,޳z60vv}:@:5m|=pwL۝gX7! G1 7O s >T 9|YZF ~ bL[_$@fC3jَxnaIHqa\dcf[yWHj\`$fvFY;I1U>~kЪtf]tZW;NIYɣv8dSZJS6 )XAn/[X.IDNDk pr;3w 2f50$$!}_o+;%~U:9*hjP.Dn˒W( +kfVO93iOFZ&Lv-īU*d$D.}`p&\@UsQ+r7jHvӂ?T) ;3 wQwOr=s\O2 }̫F) 90?;)x'({S}SZ_[O\E 5sgY<9v~]f\Bv 5e ԉّ S#P5>`sĨn 7Z*5㭲"mI-6嚣jּܙ\h z2%Oz$-,o贊FxBleoGѭ. lBG5 ǐ,ja@[)  *c˼`2itŤDV6·)8Q<}nZQI{*ٟΫF? d朆kHchڃD.pL\\ q0ՏNiwx&SցF* aGܼ~MBN聀 "WlQ@ Չݰg|Xr|u4X[U T/ .$įLJ7;G1۶?Hl|>)0_?ŭӰ)>xx+\xQ?8Wm 6V\/psk/iM"J˿~v{žxx׃ŽD|km`8pqS_@ U) &gԠͱ;Vᣡ)SZ!lG!ryɝ39YKE=lɠմA]+)v%cp W -. -KYId^l2꜒(![ܨGD5B\sCg%X$<5uHFJ ;^*хWΥ.Gd&)5RML|S4hz5CkICvWB10eGƔ<s{Mcs"zJVMᔃDiUΉܥ_V5jTB loM8 _A_!MO$:ew ىB v o zIgԭ #>~f' ?&P7`{ێx?HyI!Hg@-ۡӌS5*\u>c~ (5c9koP)҄7II`JCT_u% M#lO7 a<Nk9 YKR%Ldht͊ YͰC:fmAJ_z bx]^ l,Tq#nge∉}A ^7`$ %Ύ/+VEf*\ mSˑH 1=냯= x޳5>쯷w,L;_ⲝ' @'Ĺ-yaڣ.:`$" s?#*ԃb" U%o#Ibe8޺BX*.M1eIv﹏(Tl}VJDvOU- CRuޒXTtBx`~`"Ps)y]Vn*[èʼn#}i!vW&)3@KO(U/EC*jUe6ߨ&%+aKĺaGѡX4< ɕ=KUi]IخTf;#B"j a]$=$$C}ۜneRLVpCW{kzI/޴m-o*2rѨ17eKr&@\jZEXMs# ʞZJkSuvh'AhԱWc҉'A!qK j|JVYIjOѭrEkʇn0"B<R3;' ,Z7_Q -G> cޏ?L QI UTYaFJ_DAҴ+^2lB%?ܢ[wm-$)J.έ̸ZB:@A gX559}*5h*h !eb aI /ٽ]ITl:Y[dE#,CJ'}BMC5ZEDؔa&vPY#hX Ek8n! L n֪Hf%hRɚz-_ќ|Sa1F ޹4 TX`l`RNwɒU$bc6OoE }c<[ 1rzKu/R#lZݸD l[чH$6*▂L7]z;Q,m/b9߯XI մ~>y7X0Zi C au յDzڻe;˃@V'e5ZPV((=s N/vAnFʫՍ&S^ 1hQZ#Bs· ({#҆5yVv:@1ܙh8aװo$= Ÿ%VNKm+ˏ9!̯N/1:+h{wwxN=R[l*L=@NDsKuB-/t*waÞOFm d&ҳy v3;/^Anɋ7!@+z\+Jy {2=٬=0WyGg  S"1L f]ugTG6}ͥ7EC?BP>dx71ҾRE9DBص? nNyg|;ȁXjw zizKX-C`rØЕ$و9ʁv rMo'\cS]i)*cJ""LTJEK phW#lŲun0`HR~ sX3:OVW(W=mO.fl)^RYà.m7KF$&%ьyŤ586 gJu;,@ V,AjS4?(6?RhU5|\0Ρ˜')缱!=_KcQ^V-cߡP \]t@Y'`\w(`b=zwp5|mx|[f/"?Y4EItCkl= K=)fcTB[vOǗFt(3WmPl#;f~.*xt vvd8N3 Pݽh45#|"kI6$=ReBc"Eo `Gt{_6#w㘵9-$ˋꆙ {N7KX6mƌ. ל"¾= [bhpec \ȧAoAC{Tdn懼漮Z.ۇb~į7^!usݑJDhiLlTT=TIGXm L?0[xOpoV*閛-zL3z7 zdl!p/I*SkMXMϘ4>\i#ko4CS78fn:+([v=}\;|j-mv JsӽrF1su%2Jo㼇Z=nHM`}.u"2Fꒋ#ĤY15wه;JSR8Χhv K1Y/dT(64O4j(:|{ =L¼C<%XI>R6s̃|f6mMӥrv4;~#b_}\2Pvl=<3g$2#jlu'>B}JDՉ #E5FEpyU:*O5lOcJ P{=Mv,M,6};Z5 Vph:6gAGCrF v;XϪ /ٮ>Ac ;8*1+Ux溤T]3>)=E~c( \ wIݨX֟pZ$&  2yYs" #ja*h~cSW!Z_ a}a[ȋ`=!_n77 Vx时kg i u4lk~3zR䠚 w! SenQh!#-xl9E FV=*t^^bkҀ,[Flkk_4cEQr\4p8uFE@oqq=l.MLq'b_ﶅŋU*Ro $zIhb i(ylfNu G/ \0ܶ~rt>T좸Q]ٷ{d*ϢKps|Ѓ0AXvjXu$9//ӤtDhW_-q8*{,9RɘvedLߔ\1O+`huR'x_{gle/C֍ϕM2bŇ oW{N-ן gɝZl9;xNur)W@&GϨStE?iF.ʤpmbeʦDd'Qw+|ȔVzXaTW Fꃙ܃tΧhS<ѬΡ .h+@yV<q*@d%&ٚ5@yBFGouk#onfQ1Q>} W ". 7Ngsߔe딒Agϑ5D0ZS-ezq%CK Ʌ\S&37؏]&" 5hﻚa5`<$ |yKnQy{"ו' B%n" U1V6RNA+P0VzVi),`|n*v˟6 y5sbPudy!Ӧ\|KR Do.>s0i:DmXJ0`lS2ZL_*] lfNͯuvqKzũс%FF_ICt,yW“[V\wqje}$5{ WSY=1dwԦ+< xbYc#d[K4w 8fpOGˬa)_Zj‡"3VAM9>pWZXC >%=W<1 pEґ I. veIS =`ܬACRXzWqPǬG0k TŔ]:I@ԣ4Y0snRp?e!0dX3z#dW;!<mk˖^8VgaBwjgd c{HKlj?Ƕn~(M- ZqjyroeγnBu|螛5bF{bLjD1XOX-[ϒV3CU"pAKLH*D { rOBf\\4->+z CπkPT~"n 4o0O|zP>kˈsv#5x$␒$&yX REsu@ HRQTǸe& p|@op- 9ʯ,K'n'#i-98mxK1 |K!'3UtJb(ϰ ZPz*L.<]a,,L {nUS-Ճ)rVwa *Dӕn ӛg) 쳲Ⲧ;kv}[>J0C5fauHR.7|$|utgq -촤]D7r*[MX6To/>>ʦ$doPINOw> d U߸ bFآ&B_lx.NiVH(VoS L/ o2<~dLa0 cѱ'Ӥ0 ?~ FE%C:V;պo*0' ;~ND,J, n2o1I0i=>J&<(2w[')c~ J$˻Y+#Q{& |N j_q ,{ @P1fJ6(Zlp&p P^kM*S HOq*" }8a>|W\?|p2CV)JD| G(%~i#׹eP.[!%b3x;?1˚%(J4lO~NCDNr$ҊIWǤ%+W ԎMoUZ 4ܤeȻf:߀l$EzpG CUOH!oMivXEQ 53M47?]1n"nNm8jk݈U_lOf Y |B轮Jx=h0UWn/DQ׷X!DuW)Ԍ?7]q0a',̓ 6}gDe0#hbT7|AH~מ֑>g+BJI6z%r2PϠx !b:yf5M Rbu uf.8"eƙdj0`&YV kkтt}>ZM3O 'g0Ĭ'@36Cz6֌ Sl r2/b{I\W쎴1G 6jWsVҜoL>lhu+DC5. ykܟĪ(M(@ITNtgV&M) nQm=WTp18#[<5,i !^AԶBNp5;4@?maG}ȲP(߄$TRWE$*@V%FɨY#4,bzLz~ +ږy 'Q6:3_s,_nÝ|_*y .?횈ޞ`:+FK4Lo"\eWhͰ # qwoU2Bfߔzݖ뎀mU[AxnoLA fЕ wG@|EjBi :$̱Eg %w41jWZL:Lf{U'hJFiy[gKץ%Fn&V-&Њ#Y9Ln&:k9 jaNk,9qX hMSd`j> Bm?@T{7R4?kN;62`c@~XЇ lhJkȳ-=zg(B`ϔ6u"na;>,Uz~/";X-q]|_3QaX#@]S[u}4ʐvDȮKe[Ý]2܂Ň\*$;j[ * d:J΋+ot]Cp=%[~^?6nn]F >U^A2dվVc@B"܏>e3'ޯ|>ʏQDݮQ,M~ ]Y.Q`}c \"QKZw}~aD|Ka+I7r^6{ ~@qvPO)-8B]uT>ckkUա^ YIjFr+uyQRH_̢WEj@t"# f|7G𸥽"zr5kD,Y\qPF  &|-[5t m'S0™u%Cu\HgIy-k.YdҐƪ siu NN'܂ n5(;g4Яʔ=-r:ugN_`T|' tH a|O']nP=rz Jvj;w.F %n\ W4 D+3F-I?*cWT5#0}Lu-ړ1\_7zu&VeߙȲr qYA+n.& DKZ:А@=HzEI2J*bQDQw[9p}-&8XdCZOWPyWPFxU"UK;Ɯ'fIDh*`i+.&<7pZcHްmr7 =ɉNxXcwttHqv(PFo,4vM*>h 5sr]!ƷYhr"u<':D Gd]^0ǸY0/:K}юw~FF霅QڿsFD Lz4k "Ky ίϠR뒌(n}DWSN}Q,!HAS-&@N;}Pu{ 0~3x\/ܫd|VXDt`?)S) b;v|n=E="XǸ ĐL}63 ?q B.pBQhّ[BxƣG|6jM2xT2^$ҿ85|*{^[! h큣#&2o]Ɖ6ѠǖрGB KRc$F.ij2:O"zܞ;`{{Kc13̙̈́$L٘T̓vFYl ^"bKvH&y2Ł0ѡ.fydn"r`[nb0Z). &!NP5k/i#9=+n>۰)f[ j/u^{SL菢UUB=@cd#q^w~l'Į'ŬaVFƧDD/nSSIO@U4U#&rub BW.5ZϳΪ%OdiY;6G#:zo FAj]PwmčPr ]thP/U| pvz 4o P@iZ#'ѯGo79fOha?1յ<4lLrk(:x ȆΡ9S5k% urH3 #Æ,YslT;q0[ut֌i`%|Sc~=Jo:=~ґ BfSŸ/ᤋ"zu1z]N ɦ)˃';o.CzעSpA-Azvc X?] C W5ؼIje L['Y&7"=:Wm8o635:~A.tTrϛC@żn # g `Td -RJ..V_ LK2 ;wPO}rd4,'ѯ viL{=-R1ӜBS!ֽnC˕E2o~^$p4x~nMB)?g~yF99(H 5B3!1Ön/i#Wt0 tt{w0K꘯~@ynC!mm4ZT]6zâB\LyX)·M҈dZ?zI x[ RY#&mԺiV+c/WKԭʵ"d= XA"09[~#o5/Rk9xiXg^rHe]o9uN E@ci>gf.4S1aĒ. @Z0jUtbƥJ8FNaxްt$8D.22~(Ѹ-Agȟ[.p.< BM4K/Zń)v#d5'^-: cBdNqv#^C?)='KlNjw7~ЧSsT7}+ͯF *}m N0snƠ HہZC4ƒpQ ~YLɋs[wX>ڥt膅uWJvFp<#M)Wbޭ1:BAE=q#B ›^^ibÃ9 lK첡-\ :o|4n L\dŀǹǸmCLsNFQ3 Ae`/zkxIژd^W?jVަjMMN~4R޳C-Ā,ڂiĉ\.¹nPFԔN2dnjFxO$0)p뎡d0VͯQaEʫ{s~x߱;yɲQsv W/8ٌI+GrHP$$c{SQA9͔R. iAQpsplƧ+ļ^dvb$J1/p7X4~: bQ6~(;'+w4llmX<_6APCCBQY +W&ha_ %p|9Ջ.&l*[D7ο= wGw&5𾭱*p@V/}]' ǿ[3ڈ[Zn .~cpEs5RwsReD^mqifu7sL[41R ;L!N!M!olzhAΈhX2b8X|3A2XC&nj՚2h'ߨoqgα—5H lHZO .#%!uʡa (nCxOXoLvU1k>CT \kB{×"dkbMIU*mUWpWLe ѐ~$lp# ,@= Fi-v|c0s؅~%Y:G!yunawaϢ!fA*W[،q"JQq(D+P|O[r{uB[J.2&OL䵓PstoaI)XnnH *K.BA*8sD"(=t\ߑ+3LΏ/C)3¦͵&]=rce 3 ,%7h/hZNjѨ؇~q7町< e?p赵cRf} 68tIycIBPlM -x-Mj >.W-,0-n f2a{aRt(k1iKTĥ%˓5F8R0mtq\vB(eƾwB { l xw;{U2IN%(*KYDLD&(:Lr9Sr3$}(&%Յ4VdܰC|ZY_u{wڒ>ڊ:LXt)g0UїO]H;l5ܐ;nHQȫ: lou}DodtE I=2ZK\ lܙz~xRbˬJmbi&ɶ}Neί=\0ʍk@)=vo)@@0HVi0@$W'2 eMBaG,Px)2VȨ߃c+5F{C=ug)q`4=}f'kۋ%8;ࢬڬMU$I$pSܱ͟OĽ:n _3[\bUR#f'i24y[ḻ\RL[  Ա`N?Zá6Xmw)@EiRrEv]` Dbe,cI%ɤ%I-p1eGw BFZ`zxoHUnJ\Jfq-e1+!#R:,?k!_Q*WcJut&l^;8z`E4xqbhFh mν%ZwL\buH0Wwwaޢx踿ʹ:>2{̓2^c!“qOUyӀa R+-&-*;@0@F-bGCPHROJTqjL ʣ Q3ۅAIJ( O?"Gm䛑үZ^rPky8KotU#Xs^J"Xf] 3=[OI* ra(&I7d}-%zo.@? ӄbe$@يqOOcEh.8KYE*KX<}Uz*ܮnr7Gԯ.+0-0,K#,r˅~_򜮏hZ/(\i*\5e"86h!9!t#D4ziP-;n9 hA˱YN^!/aokVQDt,HZ$%4)r6j"GC;KCTC6n5;fݍ &hr E]sG}+ *oW*W 7/oY;V$]Jԕyn,4ÛjjO%AD_zeo gtqd"vz"^&P:›6 1`fHO  -29[^%es9]ZxewN@qstQ2%f;x˳$ C37;x(>\އ#l@o/H^jǜ#kW/ zM yщ0}H[:,d4vF? P5zg"'*pԺa4OS&Qx\U|D\tYehto&Z6)xdջ?wD:)oހKpӜRv9p pF}r&qN[W^ۓem K7p ">Ks~<~Rs: sY";ɇ;?4̓;S.ڏLEqzW 1lʐS6YN8PTR1<3l9HP'LeDn=2<  Z fk$eʘ"hN-<4y+do'\"RSlJ\Ә[5S7|8@l/ƄwgaOzd qd T́&jpDJܗsfi_k$)? 9MCO5DOR{tEզM1<>~4_"8˂ԝ)ս⠜s06Ic* G6) _ m>;MH$d]IB5s1Ej.LD,?d$Y:֎/Mc4]EV.BihUl)x۵ǵ00ED(int~AE(2^e;RuSڤl߭l`7.s>`r3\H>`!- MJꀟNh0EKΩ'#bRDcLu!7-`AI!O@%ށ$xKj#ezurhMrK!C=No0;e`j]ߎׯyi Bܑ^|]"5]]99_̆Mh0n~SA"B=ڹy3Ƕ{fm61@$@ zХU5v?^2~9YP4:AGS50T]^Wu+yl:Z?3/8lS-sDL^^~^I#eH(PQHe\d>Gc=l$lc׳Vyr*~ħK(cd0pJhSUiMa>+^/ Ĵ&JS櫵3M6[~B`D]ǕlyϖTՈ<{?4GrǭZl 謩rtFuXJ|qJ l+==iIT(5n%y%um,B\x^}\ifnX*CSh㉼VF\ya.CG{P{HVy-?GwzX^s'[ԯ?vdVn/17vstᆯm~kp;]o%U!|) OYk)>Ռx7gg3aGi,קCM~<LV& pOЦ$cK.ꄐ7E 5KLgK2oH/Xα*6u95S;+ptqlVCV;0b:M z A{ٸ!ha=aRT!=bo[4+@3];Ꮻ8$`l@^ 7%O" ji p]I"gf \@҉"]=ϗcjABX"g(,mY^ \%`cx o!i`}l3:atF\%ی'7 qٻJ:N`m`"f`DEȦan R0JJ$KwɞQB@$@ϯ5Ad uCuby#NHk/on6JwDyo8,yI9=0}m O>-jP,r&댎˳ O K(#+BލC/ tS bVy7qGFKqmnYԵh5U;D'łN !,]Kڻԙ՗G5a@i'Q/\cMGI<pR}-/qUh ;}vI7>L39 L!Oyi>Ti[7}xT@4׳Xy{%TG.@ʦӿSrb)] S51u E-Gt0idd)FçsTڼs=F*}77AH[Ι'7HMH-he VbJ)rt!׆,4tdeSBdz9i+q-2 RmBz>Y{\|L0\iUWKB\Skahb{O91& wfuqqTb.(CʤOD ȌoJ )/7fm-C?\"4< :7"34Cuzz<pr>Ec@a|EH{#7Q?|R9yK(V)a66rֆ1¦#]޺;2#K$4ЉWTqљDJx P]zqƌs'8=Y]J븲EPvCNR;q| -Zͱd p"CG4[0h0 Bdk4( !Z ogLzg^ @K \ I6!.q4eϘlJ[z xQ4;Q@]@7X 68byOaY6' d4RhkiOoS[BiD})8AYy$qUZq}S򵃺n/HhTb&Ic!0'zouvݟ֭Jfk` XWt=4@|C+`/SM@k+k.{kXZ>0ތWhU-I"BZ*6.^Bh>w´K DBeI#`OW/$U eiob ~S_Ic`u)]bsQs (7^ LJo(p;jGE(bW5OX$L]lJg IVDSRl^)<=X1㳛9Rm3|8퓳ERSu :AH:^pZ\kܟ$V|4c] C}{4)Ɉ*? T.4XjK\0&S`̷0 nvk!"TTd 1߅~?jG* .N8.$FƘT|l*-e7! ?=۴F[LC9F:DOW}LJT͖Ys/&Pyڵ]Qrl?~zx!Xj( 6JD6޽ uAƨ p7Sʽ|NNUX9]`r*WwG@'ҟn^EnT 71 2L6 1W$"4/Db1q~aS;Xe &Tm:>`} 9pAu.z|"XuzI> %cB-pQ~#rR,J8i#zx g:H-?kKnVz97Ggum^r RzJ_$M@DJe"Krŀ_At_Q6ӬszQůݲHo-mlQ"9ȧ zX4(Tu iOBxi;DJvjMncAE^4l{T]$O-xG뚦0D.7 Ϗ&}'6ŦQOE}wޛ%S㫿E(a%| E0α[b-* hܼ0,qۦRZe1C:'M( 43~tv=+Zӟb?MMJkcQGd#K=YBز]y6Rd{zXjz~/>j!ӲA/XӷjϘ"TI GZF#K 7w.ZsUA1əy T-`YjO5!;vy$͍iךE5W9 `,fi4_% [q`C .Yno6En˹N&H͝VF{5˟=0|v@PyͶފw?(;;ؒ fq'A"1i_ؚ^%d^fC&MMuo;33_U{PΌ F}kΎ- xyWL_Jdp2Ob*Hg`%_\0ѩLIHu9Nob8W,$`(#jXκ|m^lMtG^O' 8Rxs l8 `w*'xW5ZeLD ,.Hb';ʞH"OaOwǤc0&XK<֯HppVpw33}<#Sڕ4t+$Iv7J̧xX~ 9h2}5`9s4;]~_--AOS{QKQ!b}<")ҿ'funG4]/qa-=MZḒSzGZFvbbg>uMZ/Hou$"n0M7;?9MGM˶DI-=j0NY0ZB-|:wsY@|[Ѧ_vPH`+c{F|[Cn5l ւ]0"Tް1z7} z>t PI# /%Z)_? ւhԈTX(=mヂ/8@|mh䐦Wc E0?r+|`5Ϯ&JVy,ȴz{l{*S Av2$V74ɳ]iX5LPSxO-򦡻N8σutʟ%@E^R VɦxGsӧ$J9]xp tJ)yIiQ̨~dE.H+P~ DV,Ԙ OvW!AGյiQjAqS8zP&̪G`O£T `ⷴ`$l4@䍁zh}[S-i.Fb%Ep޷Nb/TgIK_w\!=ڼ؞Rh+fRh$A~U0?rId#} hї5#oiܡo bN2E/" 3pa- ?X~n(A:I6-4kKbr̓h[b֬)*-'':z:W/~ ,* ^ `m_;|Ի[֮\b#EL{B@)bXI4LJ̙_B&YeagtwXs2aa,s($[|/s0n,vra\JY>C".)epһΆIqSbsêˏ d{WֈҜ"%Hn ̀ǽH|ЅgTܙ)/7nG}R<Cf#|]B;6?(- r+=y 'ᦉ: ?uFuoBr*0LJHP/' G PYs4fQu Y=N&diŷ]d/NdnJ|su/X/fXrlrm ĝVӂ?Veʗ}t|&z(;C2#?GYm<ͫjJ[#QUi{' \k]{Ay4}dGBۢ2%nC\#T;38:+rQŖY¦`gϮj$J,choj;lHN^G1}+5|kU?r)%ߖ@MU.М~AkfPβ^txd|::~p˦"GJI{u?Q}_[[ZM~L &"d׼ɴuhኊ]a9,c/ I׿wxwR4oyz77eFzZhr*B/?Ϲ%iщktV͡Mi.sd(<_.rɺLdx|v{ت_֑l9Nw_`#;D瘍"T0\n{J1F30?:æ\y88$$(3ڿKlkj7dAvVs|̐6E!nfOH %T󅶮(B]g FR A Gl彧J9"` '"u8.han-+=ԖGғn7T8sXmiyb>Z (ǎ?aSҳK3sˑMEHg!a}J)P&G8gE *3_@=aAˊB{KlYޱ(>oB  :CesL 0R4dī Y*Ik )Qv`-2J,qRZܰ0UAN갹"íɔ?@6__": &/yp)H8^MCWi58gE*J862-1k_9}H/ʂ'҃E>ˍ5VW`%fq5pf%gN()ox7 YL~Y_ʶӘuo}$#P;pLzea5Ksk7~gGxͨ&8ni[kWn_horh K 8LI+ԕ<m ~%P-oL=kr8p{~}xG8ctlͿR#O&wr(z938l9yC.jiӪԉY:U옿;ĻΝ#ˆ6">0 ۯofh>)t;W$-Gg1+GYCJwطsHS@:u %|M%&N{7?]:g9UKz{˲) '|b͆(@"n Z\31-06hXD<$n\lS#G#Fr"a$bpWgo5XzG̈́۔Y=qwfI0yC,BR32,l?({P#n*-EB_I󶩀"c%q/+ ³tO^pAnVi&MWf5~X<ypδ)#JvS7x',oQyT+K lPiJzOV}|{fa?wйm,)[TV* gQS&xDD- w^wp:U~AYeLJ3S%!w}cv-r(RŔKm[?z?-a<叒M*V .,Q*xnܨ]sKk% A➇ kkl(j(.!$Y=4muhhR(oŏ(er4<`)r2{f=$*FܹߋeFKqWiŌ7/uԾM@9CK25ї5Ok bmT.P9S h<^ )u1el=ATa`aII,>mA>0 %|噠JrRȩdQn:t/qGcoeV~.5r.EB1I܅-Gsygi/ELE+sjE6\7Iz9;Q3C)aYv᷏!/KAzmp:^]$hCi`쉵X>oU IT64R^Rbvi[S"Om*Nɐ0h<$PgBhvNΉIY>bQ`=B.(B!hJ`k YÛ,XRZ+i?AoĝcRF{ x%ƻ;rbV[oau!?͟y5<oʼdЋy!JZ1kNEAry4}o/”}jRfW%z uO+gQx7Bl1|]#[1)s iʳ:*ODZ$.@eAP9Zo(%[55yN^7ٵ6m+ՠ/^& t?G4K+ΑK=0`p۹ 51U{N N/rGΧOpN ya+#J G 3Y͔!LaP-cRā"/̦ )hg_leڬIu^>]E] ^1V%7CezIvpP:d1Y}ɮ|vea'7wM`'h ˞p7yiu~߯K ڳNr1VDRC!{Ī8ڝ}C& !DQs`a:}{l1UcfOkİk%@ W8j]Ma9]-Kf<59mXYi rq Ss%Ҥ$ȹoZWscq}(CRڂSIշ\=N9P Uf;>L*}aQI t{P}ZB^Fғ4RX`VG0V*cѹDrC҆o-綉]thU;9 qXkx%eyoxfa3}#0k3vWևE;gǚY "emaZjxU/RՇCjH+BrU *ߖ&UbnBSHmlyЯ#Ga:('po.SnDQnZoy V&+`\_vsҒ`߬Wɽ[(3h@t4+^>($IQClj3Y'΍ d)H«tRiѭRygh^zܤxHK枷`~R"2 ;7${RXo1j1m:@j\K_߹z0<q$mWA餆~`fsՄ9(@d50',~^**+]k3֯&jx Y"Z.Дvɜa+=Gd%l!ɽ<ٽ$ %28H۞`<*۽y i#CPA3K[hI RDEzwjAhQ9<"gLI,B)iw3 k+?e)77{dWs..i`<nPe3f6WKj2k)ܥrp!ːW"i(\0z?ɯ( 0o,EnRq=UyNc\m䊡}?X$oȲx v"~@KZ| ҝ\!= JOLThoy\}{?(ʫA1 `lW'] A ^l@[KQ1W9dZܛ30u?T^86zu2`R^Ts[q0X]|=\f(NɘL^aqK8 ߢu`n-oVsOn%aL &AK'nyoXد|>02q~_>IS . &IGb%7.;uoV}O?#;DQ)L-C9FޥMg~ɽIkЋfkH/L(/$;Tn8'EXՊHwQt05Bwbi%>]L ]ݸF;։T,dK"3PkCQ'zͪg2 3$=ES!c9qphf71᬴LF'v#@c6˹[x@2@vLT䳝gP5uZdLQ FRzjJ&$f!wGh%K1:raL&%R+anY0HзO*Q(FEXߪ7W $A%Ҭ{ySezЕۻNT.&M7_//$d,w4:A)0P[Y%sZT;d M 1h佱~=&B?MAR!N6YTvq[2hƹ]DP.o!eq&/[;Ps5ړ۽S .FP8o0:u3 W &qL*4-^M<W(8]Rl(? f eR&3ꟚTB4lw(> eAikdGG<#]lY-3 O?&||:]ԀPԫi`\w3Ax;X(~%^`ߪvg4N?z SKB unKO]Pv@ W=m[Hs =cm}Qdp?..%W@KpyռĉqգO4۸*U#veuvI@CP|X>IV1ߗ"Gk:Yk98KU; ރerSWz#HZd 3RG1$q f]}Pvx(Was 3[t qu~+)Qs`0HVD'(%vD /@+-RE_ `%f77YW(>:\;WhVX,/(]jޑ Vv&$j47o9%L##qJ"7o!j|_OΒpA7f8av͎ŗNԾ ,:#;B ЖǙ YY}$E.2_=\v%gN^ڵz5(*OjrےnoAh_jABlm^sPzHq0@8:Kވ}*-doOY1:/P|!:Ea/@lE 6;l;H\S̊]xLes>|ypVmNtorʐ?T>*~n gpw%#6H鄻ip? Jp:v.QB/4!H᧪:G]WIk/fs\BRӘW.bC?5OsZ.}kSdm >Q=V20$b }!|+M?rw!>6T?Y!/XkBBaqVN@f"]_6 eȐS#Ȑ:?08|j!^PqkAƱhJԑV֖8ʘfuBt&_S hI&܁cE!r_/%zb0-E 9[v9 .njRHL7]~dӘ0t:➭<\ul> 8Rs[(HR)SHojJ%{2aLKgT_vα Bȳ.rSOC5DZ{k,ã &7؋ }u:@ YWU82DAv5t@T^I]z~N;Ͼ. >;\JIH{JK~R.O!a'T@do ԽO{.]9}}R&څtmk_w.~B"u.ڿ Hgv,Z JyMΕ+$P[kmeK(c4iQxjBmeBid^Ћ-G 0&ۍJؒռBF> \k0ɞܜCiW=t*]GS#mAn'b:Jfrgq[1 =<uعw[%r߳ Q8.Ylg Yk;5FB~t4 7C-YΎ{ϵ26Z~>$J2C;_ܿ9u6`ᩎG0(w׌0S-T3tePc P.O4BeMOtQcː5Էč}([lhzkkΣepPKNcX!)kR=N?I6,cfR{4ŒضOt8w CWt)ZUz.<_"#/](Ĝӳ!)Qf#̗ \E}qDOy9h/}*cIec.iq肚( _*cr2 lHΜxj&#HыFeHJX~@Bh^'*)'6q'Ͽik>j!HpXQB,l˶H S&ΫŰ?ݘODHu&7 TR/e Őj,=xi@aE\ID| #[uEjO,!0ZepNk$qYߜ*N9u .56N:fFE /Zi? |}ueWA1/ݩw0`-߷d-OTv{=WAId'Qz)]ZS|:Dy ؞E$ !sMXȶrxKG lBGQCbdy . ռ˝$9mE1u4O<|,<{6wohy3!eC1! "v"!Z͸t K˜V6d9vH5Ag&XI K Xd!m*s#H4ڊ k/~T`F t ş=C(/Ě6en-jn;])IRG&bMwNF1' %1⽩9ޣ0UPnv8;18@e)sat$(3Y6A䨟5;Q"ģE _Xz+`,ijIa,T\+&°^ 7W\4MQpXq׻{A~IsF6:LCc+ȐU]K &ٲw>SyS9᝿ᱱ~W vaBaݕh~PCG[:+#gPV3;iak\D)^q.|;Ahס]DdwvVc4>OCCJ={8BV{(IZ/o@iqm y8ӓLŨ" C)[cJ wCiԷ,a@1RoJ8,p#&|lj8)2ު2qS) /v֊e{w{^h6Zsͬ$ɵdrX ټgt`ޝ ɚ 93%Nݫ]uhzdI| ~$h'>7Kh67JwmbK}7t#[˴F8g=*ټM  ^o^yŦf^uP6#,rM+֣ =cuK9 X^f!:d "1|;XgN^k1buy71} u \1#m,ֿA.M .ݨΤm 謈Z=UU1k^&fc ARk{]bXHH0 y~߭b_wAe: wP?^Sp^y(JǍ8㢠.%L!F/mgG'W, 4+߬j.hZ:̓>]՟/˅t٤~%tP`ؼ[*}'W&ˤf+з7deZ>:?}({ڌѴ- rsH ,/l] )SP;W<>&!@Fz{j빨̟JROޣ Mw>Kj%>ЫqɗEM& \9.xQ#H!I;qIi2pڞNǍi`@rMV vͨOv^^6 7exYd[OrQ[7x0X=Rih +lZfc9n~_N>bᆭG830356L|\@6U5~p87‘>O ZGOx<UQA4тV05OVYAY]~&+Jrބ.>XQ#M-ءdE:;]ql[/z+YZq x8$CjWv>y8Tk?uaAYo\&3Wv3_ ̲Zح?c?6E` αu4ąYcrXLTf'Mj ^RU! &" [ Ⱦ4?*b(s~hY\#$av\h'y픧xy\lRSgPQ„9.vW/RX!iiol䘼$1m[LevxMhM&khjY8%i5[iJQz~AܮB=%)ԝ0xP/[8z6 屜Y N?-{uFNܞ)#GY"zr'S;KCm8 \o8=qs53F~VCMF7${4?R=(L^]#~xR*7 #Ufz9/嘴ŇF'*UQ䭌%4s'ء4;g A+)gSEԆHأǢL$#`t-yM (fnW5Ǵ_ǎ$y\?S^T]^G+Ƒq&/BkT`nWZsA9a~ ul(YXQ\s2eДHE;482} O~{us^|.LzI^cڶmNMO )?J^lnüjmaea- 3L( M4?&3M IV]z ,7_(1;" eq|&̓-&ȯ6 c+E&gmT~&m6<.ұfi..s+Rh[YZavDح~4tL&A!km6g)9Ѽ O[;XMoV ƻ*m}?.J.ǿ@kejҥw`|qnE$.)*Y6aY>HGm1}+_~_.OYx,o_{G-V#O6(BWn8)I!S`8KZT>=sg^ Q@s:zĝtK =vl0\tqb!8JmK՟n5+$d^ QQ=UW)çمvd>6>uEBɤ 1HnI2>#RZ챇m׍u"h0xY_Ե4=G`▧ ^ JNݳ;ŹĐ4m2}vz3 9xmĒjJ-r|i2&7mB9XxO\ t}'k qZ UG#z,Q6. (^(!*% b5ɕd!8Rg7 Q~JAOrˇ#$}!n&7\ j/ɎrBy EHԎaTjJNwOex˚2#y|0{ltGq3PGuѫX%NhT/X T_-}[촷R(ab0#*{FF?6Ι|ϱwU =X}YLJT N0\vkE saL;V/ 1yp[; p|F1 "3̃3t}Ud%$/+WT߀8dߝj8I@k:=@)`)QIYQ*-qI,!"KƸX>υEn&'^Z7/48g glK Li}aR} CCp'_R0:Zv\Ldd /7TRi5ʠS5]~S|K_Meͥ_SK)&3ϟ *Dًؖfo}cw I쇳'X,!9~ӨG.|5oCUeO737@xZ0=qIRKp߸[+%9|2 ıPŬJ%b}W^ՕEjA/Vs>Ld#S3\f]u%~.pe _! 87LNTt*y!ZDԯGlͱV"$Q1LEg gy48"3+]:iLTLB]bqZjT|cA$c"xK{!x0é1'ƚ꯮a5|ɇ$v-셌zs;L~:UJ/[|TC*KmcvkΤll-P҆ҡh{t^4|SP|둢0$E٪x`XJ]ˡH^ȑ*p;=WT+S\[Bsw՘>[ . i^wg/4*fd1udZb,#ZK^ .Y3:_Aڍ"K9b)5ElPh!2/CYtXavyk:-EA7SCiZ pITF(>p? y308V]tۯ$DuPi*4I RH.S*qܓv \-g͜< Y8'+Xdoz|p&)N%<ex Aq`$ $mX҉߭tUU' Ny)kdQAJeirMt=*eIo6 7V*>3{($m(ϘoL B?q2b_ gjMVɻ.Ź5uO1Zjp2\>\m>݅ 9F0oa~0E尼hn\W <QiAz$2w,X&xc@6)yxQ@F/Cv$4ujse ^8A7]B";7#f7X0w2cud͈l +p~84Q}!ژ\{m׃@ĶпEzj+؂`T Ƣ X Ws:S}\+Bgm!LR!|Z`@ӵ&D_F1oQkKgJvP?U&{ʟFyj3pNl4h Z*ڏ^w.a=U:/G ;mmG5>ųv8rKC,WipúŦaìZJZ$5NT_jzOqsxVG!;c-;Uyxn`ru[E1,<6`ȉ#nUݹ#a[Xx)e4ym]ptWyv!furfjգHY{z\謹"5`tU|# ا섣hyw"\ќwEH'QLw{l5~?sonb@ hX&,v"pt7*)()\hISv$uc)(a;Av;}ȏȀQלV1nR[E++2XS7kZbOܐHqrZ?UO1vy=0qم$`1EE1\#mW0A`%{k(]r{Lm2]P!FvH1ݐ$+Q]4˓LW I\iyq6uZJA0zJBմy  Ã)([ǰil'5tIԫhjS ^aq>6DaLnx2lcuJʋ.1I~64dot?L&NuHlzFT̛-+o;]i{ 8y Eāߝ<㽆`,Ib^TƢ%>KՍ]gP] HAT0rX4s6zZ'-_a1k '(k\"tP=z} Ꮙqe>?.7f - 7dGuk*JБfMcL}G!i.EQZT ;h3Ձv1ELtyvZj/8 -yd B|r9hؓ yw^[v㚍[P@GeT A$뮆X(I^4l=kf(Lil'fweP6*Gtw际95:t*X]jD|1'EsoF{G?Hqה;׶ O{i%jg >lezdЌ r"F@POipmH>Sډ:qGeL;cOP%)># O<ʷ#:EU\dĩ34zoOM%H"rxS!/O3`3I9trD'j}$qS1y'U(4~x©iֆtTW|z$61nTOn}˪ "&~WX^@(7 c_SOoe N+(ه=Uqvi[`g7w3' Z-Q#+'-n&}T0Y[d Gq!dY56rݨ(Z򸎀xƠ?^}%$:xHĨ ? ~'Lw1ftt w-zwM#E4V>AaHrEL B߶B_;9PnIΥH5.`اBDw (~A75%!Vh2y5QnLfكDY(*ebw[WoeE < 8g2V/3'T6gXqZDVn s/t^F5aQŔ зk)#K|u~qyF%^PLtJ&Tsu^gle*5FBotnZ ;N( >(Wn̄+fl%rĆY'(:wƚ_H yt/&uxΒ_iP ](|l*}FY?=ii;==MW t^@7tV@Γm*uդcdPkC=ցZS/@ek\[M2_L!0_l /߀b{~wL\4s:&6@ģqt^6F-(3ݥ)ԯMHkeF:mگ<@ .pb%T`=}f<lmU&TJA}N<%b H婱̛Lq?>_QZڬ`AκWΉ9(o["Ƭ@[ bOA=9lhê>SIXIitWo=YW8`Q~3dl*Nm 7œ?M#^M=ȣx@D|!LżÍOȺ=sA]e 4KAVԾ2S:91] `2Ov^*9+$ZO|~aj;,ʻ; )z:)nQb-xؙ_s~k귢QRNG}N Xt4 r2O=փn^=_+mZ e wYSW{ +Ä3g$YW3i)!:8]p"75SR,QLFw%#.!ޢz9Bh9Ȃq8$!;Vμ} E8U!` L$1H\P0BgQ0! d5Sj]Օ])fb*b*İ 5Ek;K]X@l5]HǓOG.ާ y4LTX3gRL^& ѧܫ`ҡ&QC-.z}6Υ~Rl[")Ecʕ}Unq2~4{]lpPpֺ)Nt*k!3w^V~ j*w}tZcAJ㔘X7&gk Q<"-cVՔhBe_p  Du rˉ~3Fn7) CJg 5S!$3B8;)N&oi9Ra%}) e&#n.5PfUA)\䍡6灢pffK!QG=Lq c`;yP_e&VXDd&d(YFBLoi)J']JB{ uQG+c ?xVp eZ[Ah?MuiDb36m]L4pfj+3SL> Vs9<*lAUԳwW̄t)cҙcgbptp^fVD,iJmJ/k~vߔQql|Nw_k%}L1磍ld,8q>(Qq6`ċ,vR1j㟄1i y*oځӲݛ-bB[Ld9:8qIcjswt%Sˆl`#zG5zUAP"Œ/*u3*>pU [f( cRP `O@3>lAׇ@N|$ 8Ш IřYȏRIfʳ"nl3^h2 ?F'+FkSI):Әpv4kUk^$@V2Qq[=uBo1ҳ!x҇ȸbZnt˻ \^QY-b謣saVOq[4b7*)€SvnXLˇ(@6¶NHV7l7noWIxQ=-}-p\*Wo#0mR3 # щ-QV⭷6F?j*:Imjr`E_,Or"_[8i1E7&:!K+ASxc/Lm(=8G{0cW/u8sEal%Ʊr{bȋLv(`+`[4xޟf$kM.4s#s췓[KZ[:- kB<_,][Qب{v%Ht9'C%v.^|'sxY_icx.Hm~cEozA{Aͧ`T ! jeO2Uܵ GI=6J3/ƌYէJ2}+mW i~DCt:d5A=27@\Um } 9T/a^{IN? ||%Hȝs3z>|LO+@"&m5,&4QCbСdpR\"8XJT ,.u!&ZVc~!%M8Η Y`Ze3C52LSdPe&A,߁V_̡u4pD-r % M)³ μkrQ>Âc\|m t{޾|^p6JeC >԰ dSۑ5&hɚGEb )$K0O{zOi|j%܌?04\qqu׍K Žq~Ұ) Db@PC+6dj%)_DؠRo ZA]J0ZVlju@8^ll]674~ i\V$^˛ TLYxKqXt4 ISUI3$dJvtqR.Z~R i .1_UF2'cQ&}СZZ |;#:7"cnlxMS?g>Tޙtb9, o-l[!{G#4<c.brm Z^v?# oa"K+?ZYrS~d\"]Q`mJV I]) HG hwO3vܟR,1=5&7+_j\l<z3Q0pq>G>h3_]+:Hg #GuTst;8궙| jE3T`Ý'Dg-DÖ2^B`n}Ix_yϳBblR_ܳV'b5  1lb{:`X}TuvBu?m>#&1 v܇8 (RkԪ՛X=Z9`p(aN/L1f?:j 3Gٶ eTx|֪Jx2\qi.O̎ 9 ݉5P&uo]4cI ?!h!Zk)7lΧ<@4k_jʠ9LIJϱ }:TL_mqx wN'y/eGukznDڻ$FHYm yQ.Fb=[u@jLr{|5\Nj3vՖsb)l J!j|4Q^~w}}vKhn{05nF {<|&Jz;_1G&7l"(Rg9G8+ p+;i4 8JJ ANa Z޼.`|gSS=Z.#22Otw{N>!~Z؈_ ߳ɳto54n'!Q &5Z? E.uKno7<_339R`uIVK"ƚQ*,ztZ:4g%׏ւ(ⓩ1 ᖺF}mo^M7[_AMYZ90܉::Rr7am+sWCRKu,Y KuDžl,~i|ݪRVو%wIzp@&\Ne'kvd؎hw-Ŋj&T*+I;*lx.dqLKVe,HDSZ3p1dTbm fewlKʷx~B+.e^ 꾝v md= ɭRhϕ1AR18}ޟ-sFtp(PCs f{ dդ: 6E}TթftyHˈˣJ7GW5j7U:x٦HQN L1%rhKMJ7}47,CHZA^?A%`h@QàS[ 2 ڳfb8I^W"nEZd-VrZE 4A!]Y M7+[͔=`x<ۚsNV5q1h5@Y{6+@`5B:=q\x"kAiM_g|"1Ys 2Ė&qMJa֣%X<;rЈ,VN:0.Oxy z:&Ӏ`ވOYռm229>ӴoKqjsWւPTQOpjǶɆgf:^#/!QhunRꓞb@ 8.lxIx+uzŅ;tu}mClU_&m+ }}yH7LVq8xAe5ͬ ҇v(ËObxS"h8(i^W!?|BBQ荺ޑLp#$c2_-.2,4 &~T,ĺGY4r.EYû5x_萿T*s*ƏA8{l[0_"]ŏH0?_cҼ/c h EE7R?veǀDw爸Hc& Vwe~yrl?J݌b$Ic0(oC£y2"Vj>,+&/lV;HHݧ<ʌiP ֘og)r 8ҵePp r| "XyCht;LzkR?ʦ$"8,oMYCuMn N: gFrl,T`NAՒݵl7 ̎x9ܜD ߇=32蕿TK?o9\E/,CWTl֋c od`![~mڵ#v*w>!̻juG4mq=[Xcй^b=,Hc0ZVS#g%!՝Aȥ)E$.TmHphj u7U'a& ,3R}%p>QCҖlOӻT">8.aC\5M%g>^5Yd,7Z1__QSB`:V\j&seiCXoEus-W=ݷ9p-1#~P!*qWf>4]Vh9͑+P*KBEkqBaްAy{CY`lPP cL8kDHF\Oj8p7BLiR1]hq ]Q9u;7~ ^[x',Fz |ιE!it\w^k4&6Ec4Xt^j[VhWPCPWӹYN? yK@pm<.@U׍@4X|9KHuR|@Ud`Pk<* foJnW1dU5i5,M|uw۟XG@>[@c}$W'`^?PKf5Gwc޷D۹HFIv:gRX ڟeIa7D"S V%uXAUZp꿘ئbi6֚R-cMwE?,U|O;-7}2B,`ȭKA}i dwrLfDĘ5EA|/H=%_=^UNj.̈́vl C i$R2hAm]Rƍ.͇,D~(=%4@I` ‰mP`#܌#_"P!2=δݏ}œQF8WpRRxFp:^)>Rdr7 &,^L҃{zBQ?0buh aЦyH{[ "|`HbMbW0y [fITe>HY0Om1J0- Db׸[]|A-^]; )6|Bό~o;ͣqzMÒzj݆Iqv>1ת]VB u$͔@C1xOis%L )4vɶs1B]e&:C* Œ 0yQzn+^O!ӱSdCtEZK֤}3G}QZ( W8Zyqʖ*8xJc&EbHiB@D`J]47 q[Wd{#H:ٍ-S,_^ Q@4A;C%gU"Y֡W5t6^QDYVKL,vEjGJs7u/͌HL!tZ0!f1gF߫ۅCs<%|Mq·Fv1s !.0 f`&#Mm=_;:tIT(r$LrnVJ*.Af[*ԢJcszukkCho ѳC&xm諑eajLrY2!#ϙ,|6^˜QD1㢁&viGc`*r4TF˷q D\9Wr\S&rMsJ7d^gRrS3zRi\+oOeC'_Qw6 sҭw20,i7eMcǑV`7Z˟b*VQtTL Hehu/~3>Nk,XmGoM}]Z}4]>uZ\*VEjj'i|Zsxil \wk s( {o'T8p,e,SLe4^ Mgh3?+.xKRBTLm#P%V1\LE l׸ -Kn靥X5 ^9'PǒBW]&d0o>P uWI\bL<)T^/P^dMI =4;޻ܽ߈ fM`T,3~g/K^)0+,n/ĢĪ܅Z| Ƒ>=!igDzN<ő#l˫oQmƌ[朌n<_4qUiԣcGu†CBK 9 ^zq[ 0‘6v~"f o#FۗuOCgY9Sȫ7GuKc#04A%JA88Nwkj|zeG&V9CڼTL>>}d8sHkk!ѽ$/&XP35d%LXr侳i&%o)t󸦇P$kbRwQ@0MYP E:*:aLi.HӐ201 pO-^ݰVT1MQXU^j+\h(.!&o0nfRQɻ^ft{\f$𽙕Fk&nrxK7b/lZۜ[0eH$ ~ ob0V uy7v7gz.8wQƗ&I)v#Nw?OR%\z|SYmeWHj?Ν?aVIu"% 2|k{ݹ#Q՞gEGYP aֽȀTOcRÍf@[@qݴoyP僁D{A7jYNG.Xm)0X=`%gr%FS) ./_9OX(aDQٲ'6ԹykNF&Scm@6w)MN+*u B6Ɔ}[6BU54B/՝N@W ʗ}5&&h}Xb(Rj\)q'x 2-C%F>dž!X̖4vIt-C"Gn[M$Ћ|պJ$U*ֽZfy+?bWiStn5LzR΋՜G&:E!r-/`l)V׈2\w _YI%s&0Jo%kV:MsFпR+s=1E 4P}S[;Wǃ[!!(tfppU+&L_zoReh>0iHOsZfq3̅uہ*Wp u8ٱO-۴RMe?z?H#FTAN9sFZ>$ػzMtݷ\Y \jyik yN- !>eLJ7zhR۰.ȥߜN.ӏgq߇憕~萩Uii˒9#.)Yin蝮QDd?c,c_yj.:(A'%|fw2d%GO9+QYɨD\;ѢTAd^Zkha-{ĝ=$*)&qڄ+ߗ/4i>)B4OrСLu{ņW01 //:TUuLA KX#Vkz!bwGp cSl9y,J=O5ͽ0O'0V ÔP'xeZ"\@nA%d.¤yλݜ [45d ٹf`9 Zfd^siL~p`< ɯ4X\c,Y>-M"ԵP]<:vfI8f2H%5f^` "@#Rѱ}?a@Fgawqg>d?+;<{r$PԻr{ jp#g *5JSwZlT!{ͽdj-Ƅ|W5K)ƿ;Uk_ ]'ؑPpOBW1׶;a:ʡ rhYף&+W P%ܒoIT7)n[ ;EQBI^X>`6B&A $ 2GmHSJkL )x6.#g}z{s9.*1nR!RFX|]/G?9ǂJ4_8fz2Gi}xվUV :|%ƕil2]ܲkQL^oQ;Ƣt߬[s]| S9׎b Z/4١h`$V,LL" Ⱥt):iT16M`+eeo$OUm"8yO*y,~Ptla^Y3.ʶZ9(!VmPQg5/牞T<}H.O_bx$1(e̅j^(i:Q>L9;]'֘Dk9YIuC<=ew!Mؚ)ܰr?:u&t-yIe5Q6GpMw]#1&fW@[eR(mvfAA :[e"Y4[$9olZDЮOjx#K>rDtG%p@kOZQlp* zo[!)d0k,E1͆F>-5CCZ6uU,j/y׬1mDL&cgOflز/y< v{${N`$#HI٫/bu4I!cVs"'G_- TZB-pǯj˓ʔK |SW#-"6-Z VX|؈l!?qW=Ί'21X̄9Yw/@O#ZE[{.=$Юr w`JR0~bq 0<`%B^ɲo3B|l 2"/{lgNHX,㧴Oy5r./~D*Lai('R6bXn3s%ЕEFZ$j'}%]&Y >O6-1zt/D9F#xK&Ļ-g;sGrL`K|$]EX4> `L%R'E~= )[DҋOzXx2BmuL,S|PPEIM>(+8QO:I'xoif'hIlM7z~ ;u']Hs^qn"/ , -+Rfk*SF^U9o#uJz~%K@+ O'ΨZa50e!WSsqOztcT8\ bbMHH{z t]>(3hN?hW:'lBu+Uɝ,BǛ?U`ׯNBa|]+*IGKYfηWA:J}0V;oTXw!kpӜU4ziTsW3eɨ_;=ړ@h֪cJJ^d&l>=%ݙ7u59QEX %nxu/O` PuaH3ZQ-+N&SSh͵_ɐ/5\lVNkeyh?PQeQ-RF^RPwV@f8oߦ(}ɾQ48bU/ X}2Bl`+H{NgdG@-+GJf@gcWss hXlWJ2]|k⾧-mh#MEy'6zq=a~D3!aLI$O80JݚBϤϡmrf^}ϩˀlXC94DUY's#D[yV !M(% Ef;4 cL8!5EO!Ep9;tP'Mh2<9}wn(xv}lmi Y3_~5z07hqw..ju_F јm>MOs%=p Pd^į\[AuAFbI 4p$kF$J?,51+H_}ĄɱkQ0柏%<&qy*~Ns_|!l4TY$$\\>b+ަP8=!6f"FzH#-רގ\ձuz~HW@V0y9^K-ogB7&րr9M~ʅު́@:%!Y `%#'XC#R-A⫝g'=C`v'vѥʲV|rlݎiyДUCi0^ i͞vV5gV1lm_vt| \jSiF"U$Qs>^Dg4-\z$'Ӹ t-vgrՅY^T!3vM{8w!mD2:WLRWeV`Jl^v2:B_W+]Dư/|wӱdStb&Iwjt< ޷kM͵ʂYς ?BAdCI{5"'Z_]] LbuwC :(S)d[I[1rw3xSK&EKVӣWj'RkM~ǘ_GY;87%``=RIO_$/ܭ)odDd 'eD?j='; besHݥ5Gslt.ix~H=c2s_TC1LeG?bXoӞYiAЙEU*{j#E'5Es5Mc5я.3B~Fx(,b8!fi#EչWR]xMKz.ŔBޓ5.OY+QS:Iik<;ѐ{Qxx훊@r"DsS-aa9Ӣ>'M> %oBr+H\&n2u!_}l2=5[ Gz%2-ՑZ>8eXzZ,T/_>]BQB靽l%>/ &4ïUe ӸL:V8s{A^-ڪW.+0@J9:?M|n j?]& T --9Su"U'a05)\m5 Sՙ<2֗wEGͶR|2LGP>-WR hP+E߼`?| K|AT9c@Sy Vux ퟟ>t歴܎>'o>4M57 ҳ?Q⿱;_uclgo!Ѯ}&7! fSxPY5l~:c;:MصA%6f͑q,R7J!7[, QIդ -=}W6լwk.Ab[J&)Z,[ј%M76Tθy-5cimeGl cHHRiȧf.] NJGȼA@rfE%V(8r {59PyO-b$pWf$Kp..4{ojWt^݆g(-RF`Nr_ٛ t6ʳL%#I;ӏ*HQɎvev#sވ6F 1HTBx/w uv](iK\|u@';IoU'x}"HHH| Aa|'* Zղ`8X-"|h FbV<9cː!et_ 6w3M[ |x\|u;:W2϶zL.5"E)T\@ {8K>s?3q/ v,LhsE`TZZM[&`>_f <]v4[hV ά+ |'JǴS~tqzE"1ܟo\$8jfzk\=NܮtX kz_\n?B\( P}X]pG+MG5a}Rú3\;d MW_T%T Cl) qx_?l63m4i`%RY]LP muQ]UoBmbsӢBW6@ACW9h^dV*lK`5pmtES3tl{/VyD(Orݻ /2?9 " /F MdnBSEz *mYSpz"ܙ|R ~qtmZgV:[Pl3CuֲJP9]֌媀$HO|vD'oJin?d5k` :%SS]Z $Ӕ/c9?p.G*'$N Mc^-,Ds. V`D4| ?իqnjExqi:=GaJ߸SR}y9ei8m읠dX߽֭lSu'Di. J/8קf3l` V+yQծB_rꒀD'|JZsvk-)WU/gpOvv|i*c: Wls…TI~AM6Zm(v<ըzӐ@w bMw^qzZzP.b" 6w>aSՅ#컩#S`B Ux`qm;ƛ~'ip :5ïcb֊5a d  B|Tٵj$dhXў_][a nžtK4֊ri_Ϧ/WUрE c늇RYQZ X"u%JäU ʅ|Ў4IUiz-{AI=FC%ArckPuD02R5f1xW_MDg!P{^-7ELi=T.qnńxPMoq\t^tId#1XF`?#Q2ӇQҀǴm`0i:uxWPd 4_q5inZK}WUR!-1MyODibcN/u>q`i.%2ipzA xv'/1>on3(~PxK,>5Nyb'8aLzROsXhO$_Xcx*hIADz6i2 ,0݁R w49xK`uh3 ijQtu$Ύ~+~Mk^5YZkK-w_Dr߻m D zic+e9tPe<YR$v"$w\0ܬ!e  >qbciuh9anql}Lg(ʮ]/F fܗk+$F§Yeܶ /CE7tni$*\/I< kE Pڌd=ljcka[*&\4PzR} '(ygTHB̑}*n& KeΥ]Dɘs wieXBGㆃr5`ڭ=8p, ŋ1ɚXƢYyp~Ŀk*Z\d3ʩ3_!0 ٹ{DC |ovK0| 3k$4jp>NN cƢF '%Bjzp׾U]uo_dDE D{).8R"@8~oO~06x4lA("w\VdѹC8,mYw3cv%i]*<> *@= sۍE䢣փiY2'7S]+g:^Zk23aU7x0/G@LlYXrc% Y~;z ~&6l!*hwlF1ǻKC`6J4s]T2ͅ'>Ef- xHN-r7܂ n&D8Wn9/o`GD.M&B0ĽiR)Z /W@0J0D aTҧh>>9K,a5.] "jw UY1cILyPiqk`R';$A &WaؼNDȕIimzE5x;O S=̨/k db)yR2 0Aaĭtd63#?>3 Km!NJs*JKx c{&ѿ#IUkM$#Pj fvoTTVDQAA|\}0אȁUS2!vTNYf?ÜhdY -_J `b\A1}u;Co(*NkԚӟ˒UJѹH0<~8\}WgH= +f(q~˵_RHP)i69=ęS? \4}UğjUʵ\d4sU ܃>D1ɭc!OK͊^A{4A%YBg?WDjTU lD? 0:jqRI׀}:-Ӂ]H<^7ۉ5Q̀ςc隄ng u+MM)%'ȡBdy[&|@,gPռ*t.Cv$`*76Mw:4 S|s tr⺨n|Uh|Śzz^P4B@j3 Y>^r3*۰? [$J?@q)JbS̵uԥ@XV2%jy]tU=i\YsnkmY{)p~XuL%i~iq?0Z4bډy*]F{ \*rT҅/@`h葓3LJxr69$O-RRiaGepPx1W:!ƙ5>|t-qJjU?nGNjM.Edu#U#yD6D3A7NA7N= \9ߋT8Ȕ+n]ӌ?bOj%Lf2曾УKS[;Rh1u|KZ 6Ab8&_ʂ=dFbi,}l_þϭ+/99ɯ b-}W=@LP@exPmc[YbD}ILc c ,ӱUQωp>{:%vuj?"aan)ﳣW{u%sp F}xՙyԾ7;%Vgo#c|)H-)$a m:,["b{ ɐ-o8m} s,m^*HmBXkƹwپܞ8g,-qgo" ^Nff9T< [A bD,f0S-jGu`®߁:q"#=kFcAK*mfM$=*9{30t9'0sV%-̇Mr.U"㭇[D%7}@'KBngcq s<ҋ , YHܒ'ZvVݼQV%xVt!anUʿ{Gd3wTj"3coԸtj%X:l&YVH^ 7BǧՄBk4;UJrltFXx5amJd锩3I7QF_tx /8Wq uůJTF3L/{ `%-RAւ>3Jb(~ХiV'TӬƊ7myV:nFzy'Rj@{7`j(aqCoBuGeUs$cGrH6 TzbGN Ÿoh;rMRTQtg7Xt.9`ӄn CYQMoU( N:.k{Rv "<-yF@,~@b! r:ޞ~T"th|x*û(˚[!pT~<>V)vgwzX.]M_\4"_ =ݘ+;j(ctݲRRg/j`4Q=XԜ<'6"Y %[(Fv /;TY_%O9u\Ⱦ>UɐYZOLr}7Ӊ^Z L/Q H\̕[lquw)>o(fvG3, Ԅc,bIޏZV"AY OMWDS1ix]j-Hq~6ak uHy&uA(ܜS82M4pos=)]+Δ~B­ȘGaNgES:Q2[mbH젗Sﴄuc)[ x2T3qe(.&ރ{Rn&XfrQ{cфfG⭄rߙ6.'Wß\Uf:u4,K;nlSnTph(~ELu^k~j%18$5?[Wt$R7E1SeXV~ݹ;XBqD] $$nc]<>USȴvO'RD/fuw1'Xg~#;[GëfV@C(I-tī~I>]ϩj,[a;n&EUFUYp(6H;`4="5KY'~ʚx8qs1Y;-wG\raA'9,tać)qq= A:S*B g\ J~LE ϥiOgxz u^YSs<ދ\ʆ.HOR!,ŵ?(Nrs& iOɁvٛ/.DҰ1!jL:AU8Aץ[I|+{dE;Hy 8iFYaV5@@Ms`{C`V8K 9=Z"xLf?w ۞bkD(+7PjD3 חKz0GϨ(:@gҮvmpǟ>dǴiP9̍FϜ@,5]ʆWcH^i"w3WED2zoBylE;Y\.*.0V'=ƴ8[Eqo:)h ,۾3_=MGHտAfƛ},@68J1W~DFB8RЅX9YŇw(_$gxʿ_t.`'N'OqT6 OJl{b؇^3Xe?ي]kn-+Y8Cj I9:ВmO b}$w9:QQVؓN>>+:(Rjk8* '{刲oE@0k m?}eb<ܫIUFg[u*"C֛!,}DQg/-LE]k&bv#Lq\s.T݅Q&X:w`{BAFa+jD`ӳ0q7ToR]q8j6Fs~9נCr(تk*zEt)'טSF# 2#Ů>ľd"S?AH55?bV:}[ƿ oALS2I9LCo ˭nv˕b ﹵}sÔ X)UQf =T*l5Fc+L|G3 ۆg4ޱ_mSvd$|"+g<}(~P7 IFS:G)HwKF\|3o_WZJ>L]R@F:: Z8,G:۴5 K:|XA2aB=N83HA#F\bW_{9 lIrQ/7upΗ0dr'aeN.rHx[Y:D0tAgJ8]ףgKvW}y}WΟ5>'ʠr2>hmݳ%1u/+6t00TՌdSA3ࢠrPKtyM"Py6gaOUbڲ@ed#Ajnc%}|4{IbfDj+Qzt3شvv"uC^93v9*32ݜ<L#t\PftX$Ν/ITA5sP[>!Þ@8= +fɨ>;s Vs_*Tn-}z7^$vvyFƨS{4j{Nl a{jsmߒn} pCNgKJY?})1Í6Q>ok`D4/Lo./TTڛH>8h׻GH(Lӏ8s4:_=M'Iꆽ?Ϛ}d2TR*ɫAwYCYu￮Ͼ}ty$=Ul,;owRr 25b|.Cf?/3&IHcwժptE܌f>J+,K(/'7`m2Xv>7Lho_xB굪o2&D>nUPSF~Af&dНmZK;Il)4~gpAd8aEJ]<~ːł0K=ؓg/g h>I |&ire7:BaKQv%ZyeF.# T%-ECZ%%EꖮxwQ/n% tuu`e}X4Ԉ8醑 c./Q3y l*>%NH`vl!u2]}0hZ yDME_F(!{= /59y-&Oi]bCW}5J2e=AqVgAsElKcOVo;㆙ zR%@[\wgQ"E e!q=~ad0q\z6moSǦbpԨz zƭ9ڛA`ne q0ej&\.:K ;aU)qsu*G^HF&oG ;)JQ7pݱ'gSp2.CxXd<o) @)g VFJϮe_[ުl":Y#ImmaܙL@ƹκ$V 9[gAi3⚻CוH>TTkVz=<ݒrXX}us^!^9~2I8 HmD(?cG!(hEKw^s0EcG \ 5uPUs b^N?f6AەGV{tֵk>a{Rsb!OߎM./u*Q/’?ĩ sR=)MPpg̢Bi,TiOzi(L=SLɤ— OI/̵2l7Oe˵ov.U, 4~jw(}$!zt{- y E(>ܔʗ8Vkʸd툫Ev Wx^Fzcr;y{ft>ϢbdѾ>P M"m[IDYzH{VpmBItW*O/>S 6YWi2X&یoecv&a}FkK WAAqgm{[\hz> Rf!VPv~~uPh,6EKGΰX*FAZ>7Rr`ҦYΰMfo 4p$rMPF-V?Q z8o|#Ċ&F4<̂h,ƐHn5:jQ0UCvNܸV`)#h R U8 XWȭ8j(YK%Z2ub4Uy k^i*tpL3Dԧx 817P/%/u TɹSi#vmoЀ IY7 ZjmeRir'Hx3ŊqଳL.mlgْ0^SkiE6eѢP f=k2j|`M ڥպË_f]Dp 0a{ k$Gcn(U?N&%ArUAM{Ih;3c. .|xSO#y#=Z"=D8q;z癸T5)=pUDD3*K ?Fi'djvJLUxq7+.V|P7 XT.#̊8BafKV4R^~kkߋtHvT^0U) lREMA{:]Iyh)U&_>7"H/??V?T.3-c+qwVoŮт"`Ju(hٵ^2,#FU/1ɸ_ 8 GeKHـ}OޕZ𡷽lz;:05` W-I-U>@;׮NlNpUG i=K ڪЊM^8F0ŎlJ޶=J..#l]XGʖ˛ڎS9㫪:UٕwM^'%_P$y0Iɖ %`P-f)n}Ug0i6첖!"$#i;LCIu͖p;ҧn-ǙN̎MŠF3}ͤ.lwЃשX +f~ȝ4mSnkDkG$z!_߸^@,;f`ÉM"yu]تDŏkQ*N+?Nh);B;1(.N,>{* #~l|o]wIgΡ*Y "pcpAЁ>3}2,}\$k)IogTm2WK"p֒^a~t B5-wlkiȠ)#mOð4zAuˉZfl:ȟ818ᚃl6LZ7v^NPAHG+ ̓oM(&B52ӣ^Qd$n~,]Ū+p ET&5BHQ-^X86 $O8R.yXP6mq!Bt @eM#U iHW"Ih6aIo&m~eMkjdnB(kqӤNYXD JjZ5/IuPW&V[`kvIjBWSe!*kUdG[?wp ,4Iڔz 1'8י.Q+jx7U.``JHtZ"؏-J`+=D=odGT<f.u`~ jӚ^6S#ᵩ4u{L0ݸQ6gL c:,VCW|ݔ95XP